D-Link DGS-1510 Series Reference Manual page 129

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
Interface Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
In a network, customers do not want all ports of a device to be able to receive STP packets, because
the ports may receive the STP BPDU packets which cause the waste of the system resource.
The BPDU attack protection function can prevent ports from receiving the BPDU packets. The ports
with BPDU protection function enabled will enter the protection state, and react with one of the actions,
drop, block or shutdown, when it receives a STP BPDU packet.

drop - drop the packets of received STP BPDU only, and port is placed at normal state.

block - drop the packets of received all BPDU and all data, and port is placed at normal state.

shutdown - shut down the port, and port placed at err-disabled state.
Example
This example shows how to enable the BPDU attack protection with block mode on interface eth1/0/1.
Switch#configure terminal
Switch(config)#interface eth1/0/1
Switch(config-if)#spanning-tree bpdu-protection block
Switch(config-if)#
11-3 show spanning-tree bpdu-protection
This command is used to display the BPDU protection information.
show spanning-tree bpdu-protection [interface INTERFACE-ID [, | -]]
Parameters
interface
INTERFACE-ID
,
-
Default
None.
Command Mode
EXEC Mode or Any Configuration Mode.
Command Default Level
Level: 1.
Usage Guideline
Use the command to show BPDU Protection information. If no interface is specified, display all
interfaces.
Example
This example shows how to display the BPDU attack protection information and status of the
interfaces.
Specifies to interface ID to be displayed.
Specifies a series of interfaces, or separate a range of interfaces from a
previous range. No space is allowed before and after the comma.
Specifies a range of interfaces. No space is allowed before and after the
hyphen.
126