Stp Tc-Protection - Huawei Quidway S8500 Series Command Manual

Command Manual – STP
Quidway S8500 Series Routing Switches
high-speed link may be pulled to the low-speed link and congestion will occur on the
network.
MSTP provides Root protection function to protect the root bridge: The port configured
with Root protection only plays a role of designated port on every instance. Whenever
such a port receives a higher-priority BPDU, it will be set to listening state and not
forward packets any more (as if the link to the port is disconnected). If the port has not
received any higher-priority BPDU for a certain period of time thereafter, it will resume
the normal state.
Related command: stp interface root-protection.
Example
# Enable Root protection on the Ethernet2/1/1 port of the switch.
<Quidway>system-view
System View: return to User View with Ctrl+Z.
[Quidway] interface Ethernet2/1/1
[Quidway-Ethernet2/1/1] stp root-protection

1.1.37 stp tc-protection

Syntax
stp tc-protection enable
stp tc-protection disable
View
System view
Parameter
None
Description
Use the stp tc-protection enable command to enable the protection function so that
the switch is protected against attack from TC-BPDU packets.
Use the stp tc-protection disable command to disable the protection function.
By default, the protection against TC-BPDU packet attack is enabled.
As a general rule, the switch deletes the corresponding entries in the MAC address
table and ARP table upon receiving TC-BPDU packets. Under malicious attacks of
TC-BPDU packets, the switch shall receive a great number of TC-BPDU packets in a
very short period. Too frequent delete operations shall consume huge switch resources
and bring great risk to network stability.
Huawei Technologies Proprietary
1-38
Chapter 1 MSTP Configuration Commands