ccna 8.1.4.8

ccna 8.1.4.8.BPDU protection is similar to root protection, but they have different effects. BPDU protection disables the port if a BPDU is received when PortFast is enabled. This disable feature actually prohibits the devices behind the port from participating in STP. If the port enters the errdisable state or is configured with an errdisable timeout, then the administrator must manually re-enable the port.Root protection allows a device to participate in STP as long as it does not attempt to become the root bridge. If root protection blocks a port, subsequent recovery is automatic. If the attacking device stops sending higher priority BPDUs, recovery occurs immediately. Use this command to configure root protection on an interface.Switch(config-if)#spanning-tree guard root To verify root protection, you can use the showspanning-tree inconsistentports command. Note: If a port is not supposed to receive BPDUs, and it does, the switch sets the port to a root inconsistent state.It will not resume until this spoofed BPDU stops being sent.6.3.4 Configuring Storm Control6.3.4.1 Broadcast, Multicast, and Unicast Traffic RatesLAN storm attacks can be mitigated by monitoring pre-set suppression level thresholds using storm control. When storm control is enabled, the upperlimit value and lower limit value can be set. Storm control uses the following methods to measure traffic behavior. The percentage of the total bandwidth available to the port that can be used by broadcast, multicast, or unicast traffic.The traffic rate (packets/second) of received broadcast, multicast, or unicast packets.The traffic rate (bits/s) for received broadcast, multicast, or unicast packets.