3Com 4210G Series Configuration Manual page 104

Follow these steps to enable root guard:
To do...
Enter system view
Enter Ethernet
interface view, or
Enter
Layer 2
interface view
aggregate
or port group
interface view
view
Enter port group
view
Enable the root guard function for
the port(s)
Enabling Loop guard
By keeping receiving BPDUs from the upstream device, a device can maintain the state of the root port
and blocked ports. However, due to link congestion or unidirectional link failures, these ports may fail to
receive BPDUs from the upstream devices. In this case, the downstream device will reselect the port
roles: Those ports in forwarding state that failed to receive upstream BPDUs will become designated
ports, and the blocked ports will transition to the forwarding state, resulting in loops in the switched
network. The loop guard function can suppress the occurrence of such loops.
If a loop guard–enabled port fails to receive BPDUs from the upstream device, and if the port takes
part in STP calculation, all the instances on the port, no matter what roles the port plays, will be set to,
and stay in, the Discarding state.
Make this configuration on the root port or an alternate port of a device.
Follow these steps to enable loop guard:
To do...
Enter system view
Enter Ethernet
interface view, or
Enter
Layer 2
interface view
aggregate
or port group
interface view
view
Enter port group
view
Enable the loop guard function for
the ports
Enabling TC-BPDU guard
When receiving topology change (TC) BPDUs (the BPDUs used to notify topology changes), a switch
flushes its forwarding address entries. If someone forges TC-BPDUs to attack the switch, the switch
will receive a large number of TC-BPDUs within a short time and be busy with forwarding address
entry flushing. This affects network stability.
Use the command...
system-view
interface interface-type
interface-number
port-group manual
port-group-name
stp root-protection
Use the command...
system-view
interface interface-type
interface-number
port-group manual
port-group-name
stp loop-protection
4-36
Remarks
—
Required
Use either command.
Required
Disabled by default
Remarks
—
Required
Use either command.
Required
Disabled by default