R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

60
Item Descri
p
tion
Instance
1. Instance ID
ID of the MSTI to be configured
2. Root Type
Role of the firewall in the MSTI:
• Not Set—The bridge role is not set.
• Primary—Configure the firewall as the root bridge.
• Secondary—Configure the firewall as a secondary root bridge.
After specifying the firewall as the primary root bridge or a secondary root
bridge, you cannot change the priority of the firewall.
3. Bridge Priority
The bridge priority of the firewall is one of the factors determining whether it can
be elected as the root bridge.
TC Protection
Whether to enable the TC guard function, that is, protection against topology
change (TC) BPDUs.
When receiving TC BPDUs (the BPDUs used to notify topology changes), the
firewall flushes its forwarding address entries. If someone forges TC-BPDUs to
attack the switch, the switch will receive a larger number of TC-BPDUs within a
short time and be busy with forwarding address entry flushing. This affects
network stability. With TC guard enabled, you can prevent frequent flushing of
forwarding address entries.
IMPORTANT:
HP recommends you to keep this function enabled.
TC Protection Threshold
Set the maximum number of forwarding address entry flushes that the firewall can
perform within a specific time period after it receives the first TC-BPDU.
Return to MSTP configuration task list.
Configuring MSTP on a port
Select Network > MSTP > Port from the navigation tree to enter the MSTP Port Configuration page, as
shown in Figure 33.
Figure 33 MSTP configu
ration of a port
Click the icon corresponding to a port to enter the MSTP Port Configuration page of the port.