Bpdu Protection Commands - D-Link DXS-3600 Series Cli Reference Manual

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide

12. BPDU Protection Commands

12-1 spanning-tree bpdu-protection (global)
This command is used to enable the BPDU protection function globally. Use the no form of this command
to return to the default setting.
spanning-tree bpdu-protection
no spanning-tree bpdu-protection
Parameters
None.
Default
By default, this option is disabled.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
In a network, customers do not want all ports of devices to receive STP packets, because some ports that
receive STP BPDU packets will cause system resources to be wasted.
If ports are not expected to receive BPDU packets, the BPDU protection function will prevent those ports
from receiving BPDU packets. The port where the BPDU protection function is enabled will enter a
protection state (drop/block/shutdown) when it receives a STP BPDU packet.
There are 3 mode behaviors when the switch detects BPDU attacks:
•
Drop – The switch drops received STP BPDU packets only and the port is placed in the normal
state.
•
Block – The switch drops all received BPDU packets and bock all data and the port is placed in
the normal state.
•
Shutdown – The switch shuts down the port and the port is placed the error-disabled state.
Example
This example shows how to enable the BPDU protection function globally.
Switch# configure terminal
Switch(config)# spanning-tree bpdu-protection
Switch(config)#
12-2 spanning-tree bpdu-protection (interface)
This command is used to enable the BPDU protection function on a port. Use the no form of this
command to disable the BPDU protection function on the port.
spanning-tree bpdu-protection {drop | block | shutdown}
no spanning-tree bpdu-protection
257