Tp-Link T1700G-28TQ V2 — настройка защиты Spanning Tree для портов коммутаторов [237/354]

Превью страниц Страница 237 / 354

Example

Enable the Root Protect function for port 2:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/2

T1700G-28TQ(config-if)# spanning-tree guard root

26.21 spanning-tree guard tc

Description

The spanning-tree guard tc command is used to enable the TC Protect of

Spanning Tree function for a port. To disable the TC Protect of Spanning Tree

function, please use no spanning-tree guard tc command. A switch removes

MAC address entries upon receiving TC-BPDUs. If a malicious user

continuously sends TC-BPDUs to a switch, the switch will be busy with

removing MAC address entries, which may decrease the performance and

stability of the network. With the Protect of Spanning Tree function enabled,

you can configure the number of TC-BPDUs in a required time, so as to avoid

the process of removing MAC addresses frequently.

Syntax

spanning-tree guard tc

no spanning-tree guard tc

Command Mode

Interface Configuration Mode (interface gigabitEthernet / interface range

gigabitEthernet / interface ten-gigabitEthernet / interface range

ten-gigabitEthernet)

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

commands.

Example

Enable the TC Protect of Spanning Tree for port 2:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/2

T1700G-28TQ(config-if)# spanning-tree guard tc

221