HP MSR2000/3000/4000 Router Series Layer 2 - LAN Switching Command Reference

Table Of Contents
47
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
On a port, the loop guard function and the root guard function are mutually exclusive.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only that interface.
Examples
# Enable the root guard function for Ethernet 2/1.
<Sysname> system-view
[Sysname] interface ethernet 2/1
[Sysname-Ethernet2/1] stp root-protection
Related commands
stp edged-port
stp loop-protection
stp tc-protection
Use stp tc-protection to enable the TC-BPDU attack guard function for the device.
Use undo stp tc-protection to disable the TC-BPDU attack guard function for the device.
Syntax
stp tc-protection
undo stp tc-protection
Default
The TC-BPDU attack guard function is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
With the TC-BPDU guard function, you can set the maximum number of immediate forwarding address
entry flushes that the device can perform within a certain interval (every 10 seconds). For TC-BPDUs
received that exceed the limit, the device performs a forwarding address entry flush when the interval
elapses. This prevents frequent flushing of forwarding address entries.
Examples
# Disable the TC-BPDU attack guard function for the device.
<Sysname> system-view
[Sysname] undo stp tc-protection