Bpdu Attack Protection Settings - D-Link DGS-3612G - xStack Switch Reference Manual

®
xStack DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch
Use the Security IP Management to permit remote stations to manage the Switch. If you choose to define one or more designated
management stations, only the chosen stations, as defined by IP address, will be allowed management privilege through the web
manager or Telnet session. To define a management station IP setting, type in the IP address and the corresponding Net Mask and
click the Apply button.

BPDU Attack Protection Settings

This window is used to configure the BPDP protection function for the ports on the Switch. In generally, there are two states in
BPDU protection function. One is the normal state, and another is the under attack state. The under attack state has three modes:
drop, block, and shutdown. A BPDU protection-enabled port will enter under attack state when it receives one STP BPDU packet.
And it will take action based on the configuration. Thus, BPDU protection can only be enabled on SPT-disabled port. BPDU
protection has high priority than FBPDU setting configured by configure STP command in determination of BPDU handling. That
is, when FBPDU is configured to forward STP BPDU but BPDU protection is enabled, then the port will not forward STP BPDU.
BPDU protection also has high priority than BPDU tunnel port setting in determination of BPDU handling. That is, when a port is
configured as BPDU tunnel port for STP, it will forward STP BPDU. But if the port is BPDU protection enabled. Then the port
will not forward STP BPDU.
To view this window, click Security > BPDU Attack Protection Settings, as shown below:
377