1-14# Disable MSTP on Ethernet 1/0/1 to Ethernet 1/0/4 in system view. system-viewSystem View: return to User View with Ctrl+Z.[Sysname] stp interface Ethernet 1/0/1 to Ethernet 1/0/4 disablestp bpdu-protectionSyntaxstp bpdu-protectionundo stp bpdu-protectionViewSystem viewParametersNoneDescriptionUse the stp bpdu-protection command to enable the BPDU guard function on the switch.Use the undo stp bpdu-protection command to restore to the default state of the BPDU guardfunction.By default, the BPDU guard function is disabled.Normally, the access ports of the devices operating on the access layer are directly connected toterminals (such as PCs) or file servers. These ports are usually configured as edge ports to implementrapid transition. But they resume non-edge ports automatically upon receiving configuration BPDUs,which causes spanning trees recalculation and network topology jitter.Normally, no configuration BPDU will reach edge ports. But malicious users can attack a network bysending configuration BPDUs deliberately to edge ports to cause network jitter. You can prevent suchattacks by enabling the BPDU guard function. With this function enabled on a switch, the switch shutsdown the edge ports that receive configuration BPDUs and then reports these cases to theadministrator. If an edge port is shut down, only the administrator can restore it.You are recommended to enable BPDU guard for devices with edge ports configured.As Gigabit ports of a 3Com switch 4500 cannot be shut down, the BPDU guard function is notapplicable to these ports even if you enable the BPDU guard function and specify these ports to beMSTP edge ports.
