stp tc-protection interval
Function
The stp tc-protection interval command sets the time for a device to process the maximum number of TC BPDUs.
The undo stp tc-protection interval command restores the default value.
By default, the time is the Hello timer length.
When STP works in VBST mode, the default time for the device to process the maximum number of TC BPDUs is 10s.
Parameters
| Parameter | Description | Value |
|---|---|---|
| interval-value | Specifies the time for a device to process the maximum number of TC BPDUs. | The value is an integer ranging from 1 to 600, in seconds. |
Views
System view or MST process region view
VBST does not support processes. When VBST is running, you cannot run the stp tc-protection interval command in the MSTP process view.
Usage Guidelines
Usage Scenario
On a Layer 2 network running a spanning tree protocol, a device deletes MAC address entries and ARP entries after receiving TC packets. Frequent entry deletion may cause high CPU usage.
The TC attack defense function is enabled by default. You can configure the time, which the device takes to handle a given number of TC packets and immediately refresh forwarding entries, by running the stp tc-protection interval command. Within the time specified by interval-value, the device handles a given number of TC packets. Excess TC packets are processed by the device at once after the timer (whose length is the configured time) expires. This mechanism ensures that the device does not frequently delete its MAC entries and ARP entries, and therefore does not have excessive CPU usage.
You can specify the maximum number of TC packets that the device processes can handle in the specified time by running the stp tc-protection threshold command.