Layer 2 Features Section; Bpdu Attack Protection Commands - D-Link DGS-3700 Series Reference Manual

DGS-3700 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
L 2 F
AYER EATURES
Table of Contents
Next Section
Previous Section
BPDU A
TTACK
Back to Section Header
The BPDU Attack Protection commands in the Command Line Interface (CLI) are listed (along with the
appropriate parameters) in the following table.
C
OMMAND
config bpdu_protection
ports
config bpdu_protection
recovery_timer
config bpdu_protection
enable bpdu_protection
disable bpdu_protection
show bpdu_protection
Each command is listed, in detail, in the following sections.
config bpdu_protection ports
Purpose
Syntax
Description
Parameters
S
ECTION
P
ROTECTION
P
ARAMETERS
[<portlist> | all] {state [enable | disable] | mode [drop | block | shutdown]}
[<sec 60-1000000> | infinite]
[trap | log] [none | attack_detected | attack_cleared | both]
{ports {<portlist>}}
To configure port state and mode for BPDU protection.
config bpdu_protection ports [<portlist> | all] {state [enable | disable] | mode
[drop | block | shutdown]}
The config bpdu_protection ports command is used to configure the BPDP
protection function for the ports on the switch.
In generally, there are two states in BPDU protection function. One is normal state,
and another is under attack state. The under attack state have three modes: drop,
block, and shutdown. A BPDU protection enabled port will enter under attack state
when it receives one STP BPDU packet. And it will take action based on the
configuration. Thus, BPDU protection can only be enabled on SPT-disabled port.
BPDU protection has high priority than fbpdu setting configured by configure STP
command in determination of BPDU handling. That is, when fbpbu is configured
to forward STP BPDU but BPDU protection is enabled, then the port will not
forward STP BPDU.
BPDU protection also has high priority than BPDU tunnel port setting in
determination of BPDU handling.
That is, when a port is configured as BPDU tunnel port for STP, it will forward STP
BPDU. But if the port is BPDU protection enabled. Then the port will not forward
STP BPDU
<portlist> - Specify a range of ports to be configured.
all - Specify to set all ports in the system.
state - Specify the BPDU protection state. The default state is disabled.
enable - Enable the BPDU protection state.
disable - Disable the BPDU protection state.
C
OMMANDS
Page | 171
5