H3C SOHO IE4300, Command Reference Manual

Page: 504 / 3296

39
stp port bpdu-protection
Use
stp port bpdu-protection
to configure BPDU guard on an interface.
Use
undo stp port bpdu-protection
to restore the default.
Syntax
stp port bpdu-protection { enable | disable }
undo stp port bpdu-protection
Default
BPDU guard is not configured on a per-edge port basis. The status of BPDU guard on an interface is
the same as the global BPDU guard status.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
Parameters
enable
: Enables BPDU guard.
disable
: Disables BPDU guard.
Usage guidelines
With BPDU guard enabled, the device performs the following operations when an edge port receives
configuration BPDUs:
•
Shuts down the port.
•
Notifies the NMS that the port has been shut down by the spanning tree protocol.
The device reactivates the port that has been shut down when the port status detection timer expires.
You can set this timer by using the
shutdown-interval
command. For more information about
this command, see device management commands in Fundamentals Command Reference .
You can configure the BPDU guard feature globally or on a per-port basis. A port preferentially uses
the port-specific BPDU guard setting. If the port-specific BPDU guard setting is not available, the port
uses the global BPDU guard setting.
If this command is configured in Layer 2 Ethernet interface view, it takes effect only on that interface.
If this command is configured in Layer 2 aggregate interface view, it takes effect only on the
aggregate interface.
If this command is configured on a member port in an aggregation group, it takes effect only after the
port leaves the aggregation group.
Examples
# Enable BPDU guard on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp port bpdu-protection enable
Related commands
shutdown-interval ( Fundamentals Command Reference )
stp bpdu-protection