loop-detect eth-loop precise-block trust-port

Function

The loop-detect eth-loop precise-block trust-port command configures an interval at which a trusted interface is generated for the local device.

The undo loop-detect eth-loop precise-block trust-port command restores the default interval.

By default, the interval at which a trusted interface is generated is 600s.

Format

loop-detect eth-loop precise-block trust-port generate-time generate-time

undo loop-detect eth-loop precise-block trust-port generate-time

Parameters

Parameter	Description	Value
generate-time generate-time	Specifies an interval at which a trusted interface is generated.	The value is an integer ranging from 60 to 2000000, in seconds.

Parameter

Description

Value

generate-time generate-time

Specifies an interval at which a trusted interface is generated.

The value is an integer ranging from 60 to 2000000, in seconds.

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
mflp	write

Usage Guidelines

Usage Scenario

If a dynamic MAC address entry remains the same in the MAC address table within a specified period and is not deleted, in a scenario where accurate blocking policy is enabled. The outbound interface in the MAC address entry is trusted. To configure an interval at which a trusted interface is generated, run the loop-detect eth-loop precise-block trust-port command.

Precautions

Trusted interfaces are changeable and the latest trusted interfaces are used. To ensure the correctness of trusted interfaces, specify the interval at which trusted interfaces are generated to a period shorter than the aging time of dynamic MAC address entries

Example

# Configure an interval for generating a trusted interface as 700s.

<HUAWEI> system-view
[~HUAWEI] loop-detect eth-loop precise-block trust-port generate-time 700