Command Manual (For Soliton) – MSTP
H3C S3100 Series Ethernet Switches
Chapter 1 MSTP Configuration Commands
1-16
1.1.14 stp bpdu-protection
Syntax
stp bpdu-protection
undo stp
bpdu-protection
View
System view
Parameters
None
Description
Use the
stp bpdu-protection
command to enable the BPDU guard function on the
switch.
Use the
undo stp bpdu-protection
command to restore to the default state of the
BPDU guard function.
By default, the BPDU guard function is disabled.
Normally, the access ports of the devices operating on the access layer are directly
connected to terminals (such as PCs) or file servers. These ports are usually
configured as edge ports to implement rapid transition. But they resume non-edge ports
automatically upon receiving configuration BPDUs, which causes spanning trees
recalculation and network topology jitter.
Normally, no configuration BPDU will reach edge ports. But malicious users can attack
a network by sending configuration BPDUs deliberately to edge ports to cause network
jitter. You can prevent such attacks by enabling the BPDU guard function. With this
function enabled on a switch, the switch shuts down the edge ports that receive
configuration BPDUs and then reports these cases to the administrator. If an edge port
is shut down, only the administrator can restore it.
Examples
# Enable the BPDU guard function.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] stp bpdu-protection
1.1.15 stp bridge-diameter
Syntax
stp bridge-diameter
bridgenum
