Operation Manual – MSTP
H3C S3100-52P Ethernet Switch
Chapter 1 MSTP Configuration
1-47
II. Configuration procedure
Follow these steps to configure the TC-BPDU attack guard function:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Enable the TC-BPDU
attack guard function
stp tc-protection enable
Required
The TC-BPDU attack
guard function is disabled
by default.
Set the maximum times
that a switch can remove
the MAC address table
and ARP entries within
each 10 seconds
stp tc-protection
threshold number
Optional
III. Configuration example
# Enable the TC-BPDU attack guard function
<Sysname> system-view
[Sysname] stp tc-protection enable
# Set the maximum times for the switch to remove the MAC address table and ARP
entries within 10 seconds to 5.
<Sysname> system-view
[Sysname] stp tc-protection threshold 5
1.6.7 Configuring BPDU Dropping
Follow these steps to configure BPDU dropping:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Enter Ethernet port view
interface
interface-name
—
Enable BPDU dropping
bpdu-drop any
Required
BPDU dropping is
disabled by default.
# Enable BPDU dropping on Ethernet 1/0/1.
<Sysname>system-view
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] bpdu-drop any
