3com 5500-SI Manual Do Utilizador

C

HAPTER

 13: MSTP C

ONFIGURATION

Enable the loop prevention function on port Ethernet1/0/1.

<S5500> system-view

System View: return to User View with Ctrl+Z.

[S5500] interface ethernet1/0/1

[S5500-Ethernet1/0/1] stp loop-protection

Enable the TC-BPDU attack prevention function.

<S5500> system-view

System View: return to User View with Ctrl+Z.

[S5500] stp tc-protection enable

This section contains configuration information for BPDU Tunnel.

The BPDU tunnel function enables BPDUs to be transparently transmitted between 
geographically dispersed user networks through specified VLAN VPNs in operator’s 
networks, allowing spanning trees to be generated across these user networks and 
keep independent of those of the operator’s networks.

As shown in Figure 44, the upper part is the operator’s network, and the lower part is 
the user network. The operator’s network comprises packet ingress/egress devices, 
and the user network consists of networks A and B. On the operator’s network, 
configure the arriving BPDU packets at the ingress to have MAC addresses in a special 
format, and reconvert them back to their original formats at the egress. This is how 
transparent transmission is implemented on the operator’s network.

Table 171   Enable the loop prevention function

Enter system view

system-view

-

Enter Ethernet port view

interface interface-type 
interface-number

-

Enable the loop prevention 
function

stp loop-protection

Required

The loop prevention function is 
disabled by default.

Table 172   Enable the TC-BPDU attack prevention function

Enter system view

system-view

-

Enable the TC-BPDU attack 
prevention function

stp tc-protection enable

Required

The TC-BPDU attack prevention 
function is disabled by default.