2)Perform this configuration in Ethernet port view

<device> system-view

[device] interface GigabitEthernet1/0/1

[device-GigabitEthernet1/0/1] stp root-protection

Configuring Loop Guard

Configuration procedure

Follow these steps to configure loop guard:

 

To do…

 

Use the command…

 

Remarks

 

Enter system view

 

system-view

 

 

 

 

 

 

 

 

Enter Ethernet port view

 

interface interface-type

 

 

 

interface-number

 

 

 

 

 

 

 

 

 

 

 

 

 

Enable the loop guard function

 

 

 

Required

 

 

stp loop-protection

 

The loop guard function is

 

on the current port

 

 

 

 

 

 

disabled by default.

 

 

 

 

 

 

 

 

 

 

 

Configuration example

# Enable the loop guard function on GigabitEthernet 1/0/1.

<device> system-view

[device] interface GigabitEthernet1/0/1

[device-GigabitEthernet1/0/1] stp loop-protection

Configuring TC-BPDU Attack Guard

Configuration prerequisites

MSTP runs normally on the device.

Configuration procedure

Follow these steps to configure the TC-BPDU attack guard function:

 

To do…

 

Use the command…

 

Remarks

 

Enter system view

 

system-view

 

 

 

 

 

 

 

 

Enable the TC-BPDU attack guard

 

stp tc-protection

 

Required

 

 

 

The TC-BPDU attack guard

 

function

 

enable

 

 

 

 

function is disabled by default.

 

 

 

 

 

 

 

 

 

 

 

 

Set the maximum times that a device

 

stp tc-protection

 

 

 

can remove the MAC address table

 

 

Optional

 

 

threshold number

 

 

within each 10 seconds

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Configuration example

# Enable the TC-BPDU attack guard function

<device> system-view

[device] stp tc-protection enable

1-38

Page 208
Image 208
3Com WX3000 Configuring Loop Guard, Configuring TC-BPDU Attack Guard, Stp loop-protection, Stp tc-protection