H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – MSTP
H3C S7500 Series Ethernet Switches Chapter 1
MSTP Configuration
1-34
To do ... Use the command ... Remarks
Enter system view
system-view
—
Enter Ethernet port
view
interface interface-type
interface-number
—
Enable the loop
guard function on
the current port
stp loop-protection
Required
The loop guard function is
disabled by default.
II. Configuration example
# Enable loop guard function on Ethernet2/0/1.
<H3C> system-view
[H3C] interface ethernet2/0/1
[H3C-Ethernet2/0/1] stp loop-protection
1.5.6 TC-BPDU Attack Guard Configuration
I. Configuration procedure
Follow these steps to enable the TC-BPDU attack guard function:
To do ... Use the command ... Remarks
Enter system view
system-view
—
Enable the
TC-BPDU attack
guard function
stp tc-protection enable
Required
The TC-BPDU attack guard
function is disabled by default.
II. Configuration example
# Enable the TC-BPDU attack guard function.
<H3C> system-view
[H3C] stp tc-protection enable
1.6 Digest Snooping Configuration
1.6.1 Introduction
According to IEEE 802.1s, two interconnected MSTP switches can interwork with each
other through MSTIs in an MST region only when the two switches have the same MST
region-related configuration. Interconnected MSTP switches determine whether or not
they are in the same MST region by checking the configuration IDs of the BPDUs