Tc-Bpdu Attack Guard Configuration - H3C S7500 Series Operation Manual

Operation Manual – MSTP
H3C S7500 Series Ethernet Switches
To do ...
Enter system view
Enter Ethernet port
view
Enable the loop
guard function on
the current port
II. Configuration example
# Enable loop guard function on Ethernet2/0/1.
<H3C> system-view
[H3C] interface ethernet2/0/1
[H3C-Ethernet2/0/1] stp loop-protection

1.5.6 TC-BPDU Attack Guard Configuration

I. Configuration procedure
Follow these steps to enable the TC-BPDU attack guard function:
To do ...
Enter system view
Enable the
TC-BPDU attack
guard function
II. Configuration example
# Enable the TC-BPDU attack guard function.
<H3C> system-view
[H3C] stp tc-protection enable
1.6 Digest Snooping Configuration
1.6.1 Introduction
According to IEEE 802.1s, two interconnected MSTP switches can interwork with each
other through MSTIs in an MST region only when the two switches have the same MST
region-related configuration. Interconnected MSTP switches determine whether or not
they are in the same MST region by checking the configuration IDs of the BPDUs
Use the command ...
system-view
interface interface-type
interface-number
stp loop-protection
Use the command ...
system-view
stp tc-protection enable
1-34
Chapter 1 MSTP Configuration
Remarks
—
—
Required
The loop guard function is
disabled by default.
Remarks
—
Required
The TC-BPDU attack guard
function is disabled by default.