Configuring Bpdu Dropping - H3C S3100-52P Operation Manual

Operation Manual – MSTP
H3C S3100-52P Ethernet Switch
II. Configuration procedure
Follow these steps to configure the TC-BPDU attack guard function:
Enter system view
Enable the TC-BPDU
attack guard function
Set the maximum times
that a switch can remove
the MAC address table
and ARP entries within
each 10 seconds
III. Configuration example
# Enable the TC-BPDU attack guard function
<Sysname> system-view
[Sysname] stp tc-protection enable
# Set the maximum times for the switch to remove the MAC address table and ARP
entries within 10 seconds to 5.
<Sysname> system-view
[Sysname] stp tc-protection threshold 5

1.6.7 Configuring BPDU Dropping

Follow these steps to configure BPDU dropping:
Enter system view
Enter Ethernet port view
Enable BPDU dropping
# Enable BPDU dropping on Ethernet 1/0/1.
<Sysname>system-view
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] bpdu-drop any
To do...
system-view
stp tc-protection enable
stp tc-protection
threshold number
To do...
system-view
interface interface-name
bpdu-drop any
Use the command...
Use the command...
1-47
Chapter 1 MSTP Configuration
Remarks
—
Required
The TC-BPDU attack
guard function is disabled
by default.
Optional
Remarks
—
—
Required
BPDU dropping is
disabled by default.