第7个模块：最小化园区网的服务丢失数据窃听-4-描述生成树安全机制 CCNP交换部分中文版 教学课件.ppt

ITAA学习情报组 汤姆一通互联网技术训练中心 /bbs 最小化园区网的服务丢失和数据窃听 描述生成树安全机制 保护生成树运行 在PortFast端口上加上保护措施 BPDU guard关闭端口 BPDU filter定义收到BPDUs时采取的动作 启用和验证 BPDU Guard Switch#show spanning-tree summary totals Root bridge for: none.PortFast BPDU Guard is enabledEtherchannel misconfiguration guard is enabledUplinkFast is disabledBackboneFast is disabledDefault pathcost method used is short Name Blocking Listening Learning Forwarding STP Active-------------------- -------- --------- -------- ---------- ---------- 34 VLANs 0 0 0 36 36 Switch(config)#spanning-tree portfast bpduguard 启用 BPDU guard Switch#show spanning-tree summary totals 显示 BPDU guard 配置信息 描述 BPDU Filtering Switch#show spanning-tree summary totals Root bridge for:VLAN0010 EtherChannel misconfiguration guard is enabled Extended system ID is disabled Portfast is enabled by default PortFast BPDU Guard is disabled by default Portfast BPDU Filter is enabled by default Loopguard is disabled by default UplinkFast is disabled BackboneFast is disabled Pathcost method used is long Name Blocking Listening Learning Forwarding STP Active ---------------------- -------- --------- -------- ---------- ---------- 2 vlans 0 0 0 3 3 Switch(config)#spanning-tree portfast bpdufilter default 启用 BPDU filtering Switch#show spanning-tree summary totals Displays BPDU filtering configuration information 描述根桥保护 描述根桥保护命令 Switch(config-if)#spanning-tree guard root Configures root guard Switch#show running-config interface fa 0/1 Switch#show spanning-tree inconsistentports Verifies root guard 验证根桥保护 Switch#show running-config interface fastethernet 5/8 Building configuration...Current configuration: 67 bytes!interface FastEthernet5/8switchport mode accessspanning-tree guard root Switch#show spanning-tree inconsiste