D-Link DGS-1510 Series - BPDU Attack Protection Commands

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
125
11. BPDU Attack Protection Commands
11-1 spanning-tree bpdu-protection (global)
This command is used to enable the Bridge Protocol Data Unit (BPDU) Protection function globally.
Use the no form of this command to revert to the default setting.
spanning-tree bpdu-protection
no spanning-tree bpdu-protection
Parameters
None.
Default
By default, this option is disabled.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
Use this command to enable BPDU attack protection globally.
Example
This example shows how to enable the BPDU attack protection function globally.
Switch#configure terminal
Switch(config)#spanning-tree bpdu-protection
Switch(config)#
11-2 spanning-tree bpdu-protection (interface)
This command is used to enable the BPDU attack protection function on the port. Use the no form of
this command to revert to the default setting.
spanning-tree bpdu-protection {drop | block | shutdown}
no spanning-tree bpdu-protection
Parameters
drop
Specifies to drop all the received BPDU packets when the interface enters the
attacked state.
block
Specifies to drop all the packets including BPDU and normal packets when the
interface enters the attacked state.
shutdown
Specifies to shut down the interface when the interface enters the attacked state.
Default
By default, this option is disabled.
Command Mode