109
Examples
# Enable the root guard function for GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp root-protection
stp tc-protection
Syntax
stp tc-protection enable
stp
tc-protection disable
View
System view
Default level
2: System level
Parameters
None
Description
Use the
stp tc-protection enable
command to enable the TC-BPDU attack guard function for the switch.
Use the
stp tc-protection disable
command to disable the TC-BPDU attack guard function for the switch.
By default, the TC-BPDU attack guard function is enabled.
Examples
# Disable the TC-BPDU attack guard function for the switch.
<Sysname> system-view
[Sysname] stp tc-protection disable
stp tc-protection threshold
Syntax
stp tc-protection threshold
number
undo stp tc-protection threshold
View
System view
Default level
2: System level
Parameters
number
: Sets the maximum number of immediate forwarding address entry flushes that the switch can
perform within a certain period of time after it receives the first TC-BPDU. The argument ranges from 1 to
255.