Configuring The Function Of Clearing Dynamic Arp Entries; Configuring The Switch Protection Functions - H3C S9500 Series Operation Manual

Operation Manual – MSTP
H3C S9500 Series Routing Switches
Table 1-26 Configure the mCheck variable of a port
Perform mCheck operation on a port
You can configure mCheck variable on a port with either of the earlier-mentioned
measures. Note that the command can be used only if the switch runs MSTP. The
command does not make any sense when the switch runs in STP-compatible mode.

1.2.16 Configuring the Function of Clearing Dynamic ARP Entries

Perform the following configuration in Ethernet port view or system view.
Table 1-27 Configure the function of clearing dynamic ARP entries
Enable the function of clearing dynamic ARP
entries on the switch or on a port
Disable the function of clearing dynamic ARP
entries on the switch or on a port
Enable the root protection function (system view)
Note: If you enable the function of clearing dynamic ARP entries in system view, the
function takes effect on all ports of the system. If you enable the function of clearing
dynamic ARP entries in port view, the function takes effect only on the specified port.

1.2.17 Configuring the Switch Protection Functions

An MSTP switch provides BPDU protection, Root protection functions, loop protection
and TC-protection.
I. BPDU protection
For an access device, the access port is generally directly connected to the user
terminal (for example, PC) or a file server, and the access port is set to an edge port to
implement fast transition. When such a port receives BPDU packet, the system will
automatically set it as a non-edge port and recalculate the spanning tree, which causes
the network topology flapping. In normal cases, these ports will not receive STP BPDU.
If someone forges BPDU to attack the switch, the network will flap. BPDU protection
function is used against such network attacks.
To do...
To do...
1-29
Chapter 1 MSTP Configuration
Use the command...
stp mcheck
Use the command...
stp reset-arp enable
stp reset-arp disable
stp interface interface-list
root-protection