2)
Perform this configuration in Ethernet port view
<device> system-view
[device] interface GigabitEthernet1/0/1
[device-GigabitEthernet1/0/1] stp root-protection
Configuring Loop Guard
Configuration procedure
Follow these steps to configure loop guard:
To do...
Enter system view
Enter Ethernet port view
Enable the loop guard function
on the current port
Configuration example
# Enable the loop guard function on GigabitEthernet 1/0/1.
<device> system-view
[device] interface GigabitEthernet1/0/1
[device-GigabitEthernet1/0/1] stp loop-protection
Configuring TC-BPDU Attack Guard
Configuration prerequisites
MSTP runs normally on the device.
Configuration procedure
Follow these steps to configure the TC-BPDU attack guard function:
Enter system view
Enable the TC-BPDU attack guard
function
Set the maximum times that a device
can remove the MAC address table
within each 10 seconds
Configuration example
# Enable the TC-BPDU attack guard function
<device> system-view
[device] stp tc-protection enable
system-view
interface interface-type
interface-number
stp loop-protection
To do...
Use the command...
Use the command...
system-view
stp tc-protection
enable
stp tc-protection
threshold number
1-38
Remarks
—
—
Required
The loop guard function is
disabled by default.
Remarks
—
Required
The TC-BPDU attack guard
function is disabled by default.
Optional