Filter
Top Products
DES-7200 Configuration Guide Chapter 10 MSTP Configuration
10-20
globally or on a port, the port will shield the TC messages received or produced
to prevent from propagating them to other ports. In this way, this funciton can
manage TC message attack in the network and maintain the network stability.
Moreover, this function can prevent from interrupting core routes due to the
oscillation of the devices on the access layer.
Caution
Network communication will be broken off if you use tc-guard
function incorrectly.
You are recommended to enable this function when you ensure
that there is illegal tc message attack in the network.
If you enable global tc-guard, then all the ports will not spread tc
message. It is applicable for those devices that are accessed on
the desk to enable this function.
If you enable interface tc-guard, then the topology change and
tc message received on this port will not be spreaded to other
ports. It is applicable for up-link ports especially aggregated
ports to enable this function.
10.2.7 Understanding
BPDU Source
MAC Check
The gobal of the BPDU source MAC check funciton is to prevent malicious
attack on the switch by sending the BPDU message manually and thus cause
the MSTP protocol work abnormally. When the peer switch connected to a port
in the point-to-point mode is determined, enabling the BPDU source MAC check
function can receive only the BPDU message from the remote switch and
discard all other BPDU messages to protect against malicious attacks. You can
configure the corresponding MAC addresses for the BPDU source MAC check
fucntion on a specific port in the interface mode. Only one MAC address is
configured for one port. BPDU source MAC check can be disabled by using the
no bpdu src-mac-check command. In this case, any BPDU message is
received on the port.
10.2.8 Understanding
Invalid Length
Filtering for
BPDU
When the Ethernet length field of the BPDU message exceeds 1500 bits, this
BPDU message is discarded in order to avoid receiving invalid BPDU
messages.