Huawei Quidway S6500 Series Operation Manual page 419

Operation Manual - STP
Quidway S6500 Series Ethernet Switches
very short period. Too frequent delete operations shall consume huge switch sources
and bring great risk to network stability.
When the protection from TC-BPDU packet attack is enabled, the switch just perform
one delete operation in a specified period after receiving TC-BPDU packets, as well as
monitoring whether it receives TC-BPDU packets during this period. Even if it detects a
TC-BPDU packet is received in a period shorter than the specified interval, the switch
shall not run the delete operation till the specified interval is reached. This can avoid
frequent delete operations to the MAC address table and ARP table.
You can use the following command to configure the security functions of the switch.
Perform the following configuration in corresponding configuration modes.
Table 1-25 Configure the switch security function
Configure switch BPDU protection (from system view)
Restore the disabled BPDU protection state as defaulted
(from system view)
Configure switch Root protection (from system view)
Restore the disabled Root protection state as defaulted
(from system view)
Configure switch Root protection (from Ethernet port
view)
Restore the disabled Root protection state as defaulted
(from Ethernet port view)
Configure switch loop protection function (from Ethernet
port view)
Restore the disabled loop protection state, as defaulted
(from Ethernet port view)
Configure switch TC protection (from system view)
Disabled TC protection state as defaulted (from system
view)
After configured with BPDU protection, the switch will disable the edge port through
MSTP, which receives a BPDU, and notify the network manager at same time. These
ports can be resumed by the network manager only.
The port configured with Root protection only plays a role of designated port on every
instance. Whenever such port receives a higher-priority BPDU, that is, it is about to turn
into non-designated port, it will be set to listening state and not forward packets any
Operation
Huawei Technologies Proprietary
1-27
Chapter 1 MSTP Region-configuration
Command
stp bpdu-protection
undo
bpdu-protection
stp
interface-list
root-protection
undo stp
interface-list
root-protection
stp root-protection
undo
root-protection
stp loop-protection
stp loop-protection
stp tc-protection
enable
stp tc-protection
disable
stp
interface
interface
stp