近日 查看交换机日志发现大量如下报文:%@5437%Jul 22 04:29:41:088 2020 H3C STP/4/STP_DISPUTE: Instance 0's port GigabitEthernet1/0/9 received an inferior BPDU from a designated port which is in forwarding or learning state. %@5438%Jul 22 04:30:03:087 2020 H3C STP/4/STP_DISPUTE: Instance 0's port GigabitEthernet1/0/9 received an inferior BPDU from a designated port which is in forwarding or learning state. %@5439%Jul 22 04:30:13:088 2020 H3C STP/4/STP_DISPUTE: Instance 0's port GigabitEthernet1/0/9 received an inferior BPDU from a designated port which is in forwarding or learning state.
查看 官方文档 解决方案
stp tc-restriction 开启防TC-BPDU攻击保护功能 全局使能:stp tc-protection threshold 255 单位时间(固定为十秒)内,设备收到TC-BPDU后立即刷新转发地址表项的最高次数为6
当开启了防TC-BPDU攻击保护功能后,如果设备在单位时间(固定为十秒)内收到TC-BPDU的次数大于stp tc-protection threshold命令所指定的最高次数(假设为N次),那么该设备在这段时间之内将只进行N次刷新转发地址表项的操作,而对于超出N次的那些TC-BPDU,设备会在这段时间过后再统一进行一次地址表项刷新的操作,这样就可以避免频繁地刷新转发地址表项。