155
Parameter
loop —— Enable/ Disable Loop Protect. By default, it is disabled. Loop Protect
is to prevent the loops in the network brought by recalculating STP because of
link failures and network congestions.
root —— Enable/ Disable Root Protect. By default, it is disabled. Root Protect is
to prevent wrong network topology change caused by the role change of the
current legal root bridge.
TC —— Enable/ Disable TC Protect. By default, it is disabled.
defend —— Enable/ Disable BPDU Protect. By default, it is disabled. BPDU
Protect is to prevent the edge port from being attacked by maliciously created
BPDUs.
hold —— Enable/ Disable BPDU Filter. By default, it is disabled. BPDU Filter is
to prevent BPDUs flood in the STP network.
Command Mode
Interface Configuration Mode(interface ethernet / interface range ethernet)
Example
Enable Loop Protect, Root Protect, TC Protect, BPDU Protect, and BPDU Filter
for port 2:
TP-LINK(config)# interface ethernet 2
TP-LINK(config-if)# spanning-tree security loop enable root enable TC
enable defend enable hold enable
spanning-tree mcheck
Description
The spanning-tree mcheck command is used to enable MCheck.
Syntax
spanning-tree mcheck
Command Mode
Interface Configuration Mode(interface ethernet / interface range ethernet)
Example
Enable MCheck for port 2:
TP-LINK(config)# interface ethernet 2
TP-LINK(config-if)# spanning-tree mcheck