1-38
2) Perform this configuration in Ethernet port view
<device> system-view
[device] interface GigabitEthernet1/0/1
[device-GigabitEthernet1/0/1] stp root-protection
Configuring Loop Guard
Configuration procedure
Follow these steps to configure loop guard:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter Ethernet port view
interface interface-type
interface-number
—
Enable the loop guard function
on the current port
stp loop-protection
Required
The loop guard function is
disabled by default.
Configuration example
# Enable the loop guard function on GigabitEthernet 1/0/1.
<device> system-view
[device] interface GigabitEthernet1/0/1
[device-GigabitEthernet1/0/1] stp loop-protection
Configuring TC-BPDU Attack Guard
Configuration prerequisites
MSTP runs normally on the device.
Configuration procedure
Follow these steps to configure the TC-BPDU attack guard function:
To do… Use the command… Remarks
Enter system view
system-view
—
Enable the TC-BPDU attack guard
function
stp tc-protection
enable
Required
The TC-BPDU attack guard
function is disabled by default.
Set the maximum times that a device
can remove the MAC address table
within each 10 seconds
stp tc-protection
threshold number
Optional
Configuration example
# Enable the TC-BPDU attack guard function
<device> system-view
[device] stp tc-protection enable
