Guide: Huawei Switch Hardening

: Enable BPDU Guard on edge ports (connected to PCs) to prevent unauthorized switches from affecting the spanning tree topology. stp bpdu-protection 5. Physical and Port Maintenance

: Limit the number of MAC addresses allowed on a single port to prevent MAC flooding attacks. port-security enable port-security max-mac-num 1 huawei switch hardening guide