3Com WX3000 Configuring Loop Guard, Configuring TC-BPDU Attack Guard, Stp loop-protection

2)Perform this configuration in Ethernet port view

<device> system-view

[device] interface GigabitEthernet1/0/1

[device-GigabitEthernet1/0/1] stp root-protection

Configuring Loop Guard

Configuration procedure

Follow these steps to configure loop guard:

To do…	Use the command…	Remarks
Enter system view	system-view	—
Enter Ethernet port view	interface interface-type	—
	interface-number
Enable the loop guard function		Required
	stp loop-protection	The loop guard function is
on the current port
		disabled by default.

Configuration example

# Enable the loop guard function on GigabitEthernet 1/0/1.

<device> system-view

[device] interface GigabitEthernet1/0/1

[device-GigabitEthernet1/0/1] stp loop-protection

Configuring TC-BPDU Attack Guard

Configuration prerequisites

MSTP runs normally on the device.

Configuration procedure

Follow these steps to configure the TC-BPDU attack guard function:

To do…	Use the command…	Remarks
Enter system view	system-view	—
Enable the TC-BPDU attack guard	stp tc-protection	Required
		The TC-BPDU attack guard
function	enable
		function is disabled by default.
Set the maximum times that a device	stp tc-protection
can remove the MAC address table		Optional
	threshold number
within each 10 seconds

Configuration example

# Enable the TC-BPDU attack guard function

<device> system-view

[device] stp tc-protection enable

1-38