H3C S7500 Series Ethernet Switches Command Manual

Command Manual – MSTP
H3C S7500 Series Ethernet Switches Chapter 1
MSTP Configuration Commands
1-10
System View: return to User View with Ctrl+Z.
[H3C] stp enable
# Disable MSTP on Ethernet 2/0/1.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet 2/0/1
[H3C-Ethernet2/0/1] stp disable
1.1.10 stp bpdu-protection
Syntax
stp bpdu-protection
undo stp bpdu-protection
View
System view
Parameters
None
Description
Use the stp bpdu-protection command to enable the BPDU guard function.
Use the undo stp bpdu-protection command to revert to the default state of the
BPDU guard function.
By default, the BPDU guard function is disabled.
Normally, the access ports of the devices operating on the access layer directly connect
to terminals (such as PCs) or file servers. These ports are usually configured as edge
ports to achieve rapid transition. But they resume non-edge ports automatically upon
receiving configuration BPDUs, which causes spanning tree regeneration and network
topology jitter.
Normally, no configuration BPDU will reach edge ports. But malicious users can attack
a network by sending configuration BPDUs deliberately to edge ports to cause network
jitter. You can prevent this type of attacks by utilizing the BPDU guard function. With this
function enabled on a switch, the switch shuts down the edge ports that receive
configuration BPDUs and then reports these cases to the administrator. If a port is shut
down, only the administrator can restore it.
Examples
# Enable the BPDU guard function.
<H3C> system-view