Bpdu Attack Protection Commands - D-Link xStack DES-3528 Series Cli Reference Manual

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch CLI Reference Guide

BPDU Attack Protection Commands

The BPDU Attack Protection commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
NOTE: The BPDU Attack Protection commands and STP Function commands are mutually
exclusivly. Therefore, when the STP function is enabled on a particular port, BPDU Attack Protection
cannot be enabled. If BPDU Attack Protection function is enabled on a port, BPDU cannot be
forwarded
Command
config bpdu_protection ports
config bpdu_protection
recovery_timer
config bpdu_protection
enable bpdu_protection
disable bpdu_protection
show bpdu_protection
Each command is listed, in detail, in the following sections.
config bpdu_protection ports
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To configure the BPDU Attack Protection mode to drop for port 1:
DES-3528:admin# config bpdu_protection ports 1 state enable mode drop
Command: config bpdu_protection ports 1 state enable mode drop
Success.
DES-3528:admin#
Parameters
[<portlist> | all ] {state [enable | disable] | mode [drop | block | shutdown]}
[<sec 60-1000000> | infinite]
[trap | log] [ none | attack_detected | attack_cleared | both ]
{ports {<portlist> }}
Used to configure the BPDU Attack Protection state and mode of a port.
config bpdu_protection ports[<portlist> | all ] {state [enable | disable] | mode [drop |
block | shutdown]}(1)
This command is used to setup the BPDU Attack Protection function for the ports on the
Switch.
portlist – Specifies a range of ports to be configured.
all – In order to set all ports in the system, you may use the "all" parameter.
state – Specifies the state of BPDU Attack Protection. The default state is disable
enable – Enables the port or ports for BPDU Attack Protection.
disable – Disables the port or ports for BPDU Attack Protection.
mode – Specifies the BPDU Attack Protection mode. The default mode is shutdown.
drop – Will drop all RX BPDU packets when the port enters under_attack state.
block – Will drop all RX packets (include BPDU and normal packets) when the port enters
under_attack state.
shutdown – Will shut down the port when the port enters the under_attack state.
NOTE: The RX BPDU Attack Protection takes affect only when
the port enters under_attack state while in drop and block
mode.
Only Administrator and Operator-level users can issue this command.
457