Bpdu Attack Protection Settings - D-Link xStack Reference Manual

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch WEB UI Reference Guide

BPDU Attack Protection Settings

This menu is used to configure the BPDU protection function for the ports on the switch. In generally, there are two
states in BPDU protection function. One is normal state, and another is under attack state. The under attack state
have three modes: drop, block, and shutdown. A BPDU protection enabled port will enter an under attack state when it
receives one STP BPDU packet. And it will take action based on the configuration. Thus, BPDU protection can only be
enabled on STP-disabled port.
BPDU protection has a higher priority than the Forward BPDU setting configured in the STP Port Settings menu (L2
Features > Spanning Tree > STP Port Settings). That is, when a port configured to the Forward BPDU (STP Port
Settings window) and BPDU protection is enabled, then the port will not forward STP BPDU.
BPDU protection also has a higher priority than the Layer 2 Protocol Tunneling port setting in the determination of
BPDU handling. That is, when a port is configured as Layer 2 Protocol Tunnel port for Tunnel STP (L2 Features >
L2PT Settings), it will forward STP BPDU. But if the port is BPDU protection enabled, then the port will not forward
STP BPDU.
To view this window, click L2 Features > BPDU Protection Settings:
The fields that can be configured are described below:
Parameter
BPDU Protection
Global State:
Trap State:
Log State:
Recover Time:
From Port – To
Port:
State:
Mode:
Click Apply for the menu being configured to implement changes made.
Figure 3 - 25. BPDU Protection Settings window
Description
To enable or disable the BPDU Protection Global State to enable BPDU Attack Protection
globally. The default state is Disabled.
To specify the trap state. The default state is none.
To specify the log state. The default state is both.
Specified the BPDU protection Auto-Recovery timer. The default value of the recovery timer is
60. Recover Time can be set between 60 and 1000000 seconds.
To select a range of ports to use for this configuration.
To enable or disable the mode for a specific port.
Specified the BPDU protection mode. The default mode is shutdown.
Drop – Drop all received BPDU packets when the port enters under attack state.
Block – Drop all packets (include BPDU and normal packets) when the port enters under
attack state.
Shutdown – Shut down the port when the port enters under attack state.
83