Configuring Stp/Rstp/Mstp Mode Switching - Raisecom ISCOM2600G-HI (A) Series Configuration Manual

Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
BPDU Guard provided by MSTP can prevent this type of attacks. After BPDU Guard is
enabled, edge interfaces can avoid attacks from forged BPDU packets.
After BPDU Guard is enabled, the switch will shut down the edge interfaces if they receive
BPDUs and notify the NView NNM system of the case. The blocked edge interface is restored
only by the administrator through the CLI.
Configure BPDU Guard for the ISCOM2600G-HI series switch as below.
Step
1
2
3
4
When the edge interface is enabled with BPDU filtering and the device is enabled
with BPDU Guard, BPDU Guard takes effect first. Therefore, an edge interface is
shut down if it receives a BPDU.

2.7.16 Configuring STP/RSTP/MSTP mode switching

When STP is enabled, three spanning tree modes are supported as below:



Configure the STP/RSTP/MSTP mode switching for the ISCOM2600G-HI series switch as
below.
1
Raisecom#config
Raisecom(config)#spanning-tree
bpduguard enable
Raisecom(config)#interface
interface-type interface-number
Raisecom(config-
gigaethernet1/1/port)#no spanning-
tree bpduguard shutdown port
STP compatible mode: the ISCOM2600G-HI series switch does not implement fast
switching from the replacement interface to the root interface and expedited forwarding
by a specified interface; instead it sends STP configuration BPDU and STP Topology
Change Notification (TCN) BPDU. After receiving MST BPDU, it discards
unidentifiable part.
RSTP mode: the ISCOM2600G-HI series switch implements fast switching from the
replacement interface to the root interface and expedited forwarding by a specified
interface. It sends RST BPDUs. After receiving MST BPDUs, it discards unidentifiable
part. If the peer device runs STP, the local interface is switched to STP compatible mode.
If the peer device runs MSTP, the local interface remains in RSTP mode.
MSTP mode: the ISCOM2600G-HI series switch sends MST BPDU. If the peer device
runs STP, the local interface is switched to STP compatible mode. If the peer device runs
MSTP, the local interface remains in RSTP mode, and process packets as external
information of region.
Step
Raisecom#config
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
Command
Command
Description
Enter global configuration mode.
Enable BPDU Guard.
Enter physical layer interface
configuration mode.
Manually restore interfaces that
are shut down by BPDU Guard.
Description
Enter global configuration mode.
2 Ethernet
108