Stp Tc-Protection Threshold - H3C S5120-SI Series Command Reference Manual

Description
Use the stp tc-protection enable command to enable the TC-BPDU attack guard function for the
device.
Use the stp tc-protection disable command to disable the TC-BPDU attack guard function for the
device.
By default, the TC-BPDU attack guard function is enabled.
Examples
# Disable the TC-BPDU attack guard function for the device.
<Sysname> system-view
[Sysname] stp tc-protection disable

stp tc-protection threshold

Syntax
stp tc-protection threshold number
undo stp tc-protection threshold
View
System view
Default Level
2: System level
Parameters
number: Maximum number of immediate forwarding address entry flushes that the switch can perform
within a certain period of time after it receives the first TC-BPDU. The value range for the argument is 1
to 255.
Description
Use the stp tc-protection threshold command to configure the maximum number of forwarding
address entry flushes that the device can perform within a certain period of time after it receives the first
TC-BPDU.
Use the undo stp tc-protection threshold command to restore the default.
By default, the device can perform a maximum of six forwarding address entry flushes within 10
seconds after it receives the first TC-BPDU.
Examples
# Set the maximum number of forwarding address entry flushes that the device can perform within 10
seconds after it receives the first TC-BPDU to 10.
<Sysname> system-view
[Sysname] stp tc-protection threshold 10
1-36