Bpdu Attack Protection - D-Link DGS-3000 Series Reference Manual

The fields that can be configured are described below:
Parameter
Log State
Gateway IP Address
Gateway MAC Address
Ports
Click the Apply button to accept the changes made for each individual section.
Click the Delete All button to remove all the entries listed.
Click the Edit button to re-configure the specific entry.
Click the Delete button to remove the specific entry.

BPDU Attack Protection

This window is used to configure the BPDU protection function for the ports on the switch. In general, there are two
BPDU Attack Protection states. One is the normal state and another is the under attack state. The under attack state
has three modes: drop, block, and shutdown. A BPDU protection-enabled port will enter the under attack state when it
receives an STP BPDU packet and it will take action based on the configuration. Therefore, BPDU protection can only
be enabled on the STP-disabled port.
BPDU protection has a higher priority than the Forward BPDU (FBPDU) setting when handling BPDUs. When the
FBPDU is configured to forward an STP BPDU but BPDU protection is enabled, the port will not forward the STP
BPDU.
BPDU protection has a higher priority than the BPDU tunnel port setting in determination of BPDU handling. When a
port is configured as an STP BPDU tunnel port, it will forward STP BPDUs, but if the port is BPDU protection enabled,
then the port will not forward STP BPDUs.
To view this window, click Security > BPDU Attack Protection as shown below:
DGS-3000 Series Gigabit Ethernet Switch Web UI Reference Guide
Figure 8-51 ARP Spoofing Prevention Settings window
Description
Click to enable or disable the log state of the ARP spoofing prevention.
Enter the gateway IP address to help prevent ARP Spoofing.
Enter the gateway MAC address to help prevent ARP Spoofing.
Enter the port numbers that this feature applies to. Select the All Ports check box to
apply this feature to all the ports of the Switch.
246