F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

75
Item Descri
p
tion
Protection Type
Specify the type of protection enabled on the port:
• Not Set—No protection is enabled on the port.
• Edged Port—Set the port as an edge port.
Some ports of access layer devices are directly connected to PCs or file servers,
which cannot generate BPDUs. You can set these ports as edge ports to achieve
fast transition for these ports. HP recommends that you enable the BPDU guard
function in conjunction with the edged port function to avoid network topology
changes when the edge ports receive configuration BPDUs.
• Root Protection—Enable the root guard function.
Configuration errors or attacks may result in configuration BPDUs with their
priorities higher than that of a root bridge, which causes a new root bridge to be
elected and network topology change to occur. The root guard function is used
to address such a problem.
• Loop Protection—Enable the loop guard function.
By keeping receiving BPDUs from the upstream device, a device can maintain
the state of the root port and other blocked ports. These BPDUs may get lost
because of network congestion or unidirectional link failures. The device will
re-elect a root port, and blocked ports may transit to the forwarding state,
causing loops in the network. The loop guard function is used to address such a
problem.
Point to Point
Specify whether the port is connected to a point-to-point link:
• Auto—Automatically detects whether the link type of the port is point-to-point.
• Force False—Specifies that the link type for the port is not point-to-point link.
• Force True—Specifies that the link type for the port is point-to-point link.
Transmit Limit
Configure the maximum number of MSTP packets that can be sent during each
Hello interval.
The larger the transmit limit is, the more network resources are occupied. HP
recommends you to use the default value.
mCheck
Perform mCheck.
In a switched network, if a port on an MSTP device connects to an STP device, this
port automatically migrates to the STP-compatible mode. However, after the STP
device is removed, whether the port on the MSTP device can migrate automatically
to the MSTP mode depends on which of the following parameter is selected:
• Enable—Perform mCheck. The port automatically migrates back to the MSTP
mode.
• Disable—Do not perform mCheck. The port does not automatically migrate
back to the MSTP mode.
Instance
Instance ID Set the MSTI ID.
Port Priority
Set the priority of the port in the current MSTI.
The priority of a port is an import factor in determining whether the port can be
elected as the root port.
Path Cost
Select the Auto Calculation box to calculate the path cost automatically or set the
path cost manually.
424BMSTP configuration example
In this example, any one of Device A through Device D can be a firewall.