3Com Switch 7750 Configuration Guide Guide

250 CHAPTER 29: MSTP CONFIGURATION
Configuration example
# Enable loop prevention function on Ethernet1/0/1 port.
<SW7750> system-view
[SW7750] interface ethernet1/0/1
[SW7750-Ethernet1/0/1] stp loop-protection
TC-BPDU Attack
Prevention
Configuration
Configuration prerequisites
MSTP is enabled on the current switch.
Configuration procedure
Configuration example
# Enable the TC-BPDU attack prevention function
<SW7750> system-view
[SW7750] stp tc-protection enable
# Configure the switch to remove MAC addresses for up to 5 times within 10
seconds.
<SW7750> system-view
[SW7750] stp tc-protection threshold 5
Digest Snooping
Configuration
Introduction According to IEEE 802.1s, two interconnected MSTP switches can interwork with
each other through MSTIs in an MST region only when the two switches have the
same MST region-related configuration. Interconnected MSTP switches determine
whether or not they are in the same MST region by checking the configuration IDs
Enter Ethernet port view
interface interface-type
interface-number
-
Enable the loop prevention
function on the current port
stp loop-protection
Required
The loop prevention function
is disabled by default.
Table 184 Enable the loop prevention function on a port
Operation Command Description
Tabl e 185 Enable the TC-BPDU attack prevention function
Operation Command Description
Enter system view system-view -
Enable the TC-BPDU attack
prevention function
stp tc-protection enable
Required
The TC-BPDU attack
prevention function is enabled
by default.
Configure the times for the
switch to remove MAC
address tables within 10
seconds
stp tc-protection threshold
number
Optional