Configuring Device C - H3C S12500R Series Configuration Examples

Switch router attack protection configuration examples
Hide thumbs Also See for S12500R Series:
Table of Contents

Advertisement

[DeviceA] interface range hundredgige 1/0/1 to hundredgige 1/0/3
[DeviceA-if-range] port link-mode bridge
[DeviceA-if-range] quit
# Configure STP BPDU guard.
[DeviceA] stp bpdu-protection
# Configure HundredGigE 1/0/3 as an edge port.
[DeviceA] interface hundredgige 1/0/3
[DeviceA-HundredGigE1/0/3] stp edged-port
[DeviceA-HundredGigE1/0/3] quit
# Configure TC-BPDU guard.
[DeviceA] stp tc-protection
[DeviceA] stp tc-protection threshold 10
# Configure broadcast and multicast suppression on all ports.
[DeviceA] interface range hundredgige 1/0/1 to hundredgige 1/0/3
[DeviceA-if-range] broadcast-suppression pps 6400
[DeviceA-if-range] multicast-suppression pps 6400
[DeviceA-if-range] quit

Configuring Device C

# Specify IP addresses for interfaces. (Details not shown.)
# Configure each interface to operate in Later 2 mode.
<DeviceC> system-view
[DeviceC] interface range hundredgige 1/0/1 to hundredgige 1/0/3
[DeviceC-if-range] port link-mode bridge
[DeviceC-if-range] quit
# Configure STP BPDU guard.
[DeviceC] stp bpdu-protection
# Configure HundredGigE 1/0/3 as an edge port.
[DeviceC] interface hundredgige 1/0/3
[DeviceC-HundredGigE1/0/3] stp edged-port
[DeviceC-HundredGigE1/0/3] quit
# Configure loop guard on HundredGigE 1/0/2.
[DeviceC] interface hundredgige 1/0/2
[DeviceC-HundredGigE1/0/2] stp loop-protection
[DeviceC-HundredGigE1/0/2] quit
# Configure TC-BPDU guard.
[DeviceC] stp tc-protection
[DeviceC] stp tc-protection threshold 10
# Configure broadcast and multicast suppression on all ports.
[DeviceC] interface range hundredgige 1/0/1 to hundredgige 1/0/3
[DeviceC-if-range] broadcast-suppression pps 6400
[DeviceC-if-range] multicast-suppression pps 6400
[DeviceC-if-range] quit
4

Advertisement

Table of Contents
loading

Table of Contents