Configuration Prerequisites; Configuration Procedure; Configuration Example; Configuring Guard Functions - H3C S5100-SI Operation Manual

Configuration Prerequisites

MSTP runs normally on the switch.

Configuration Procedure

You can perform the mCheck operation in the following two ways.
Perform the mCheck operation in system view
Follow these steps to perform the mCheck operation in system view:
To do...
Enter system view
Perform the mCheck operation
Perform the mCheck operation in Ethernet port view
Follow these steps to perform the mCheck operation in Ethernet port view:
To do...
Enter system view
Enter Ethernet port view
Perform the mCheck operation

Configuration Example

# Perform the mCheck operation on GigabitEthernet 1/0/1.
1) Perform this configuration in system view
<Sysname> system-view
[Sysname] stp interface GigabitEthernet 1/0/1 mcheck
2) Perform this configuration in Ethernet port view
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp mcheck

Configuring Guard Functions

The following guard functions are available on an MSTP-enabled switch: BPDU guard, root guard, loop
guard, TC-BPDU attack guard, and BPDU drop.

Configuring BPDU Guard

Normally, the access ports of the devices operating on the access layer are directly connected to
terminals (such as PCs) or file servers. These ports are usually configured as edge ports to achieve
rapid transition. But they resume non-edge ports automatically upon receiving configuration BPDUs,
which causes spanning tree recalculation and network topology jitter.
Use the command...
system-view
stp [ interface interface-list ]
mcheck
Use the command...
system-view
interface interface-type
interface-number
stp mcheck
1-34
Remarks
—
Required
Remarks
—
—
Required