D-Link xStack DES-3528 Series Cli Reference Guide

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch CLI Reference Guide
457
BPDU Attack Protection Commands
The BPDU Attack Protection commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
NOTE: The BPDU Attack Protection commands and STP Function commands are mutually
exclusivly. Therefore, when the STP function is enabled on a particular port, BPDU Attack Protection
cannot be enabled. If BPDU Attack Protection function is enabled on a port, BPDU cannot be
forwarded
Command Parameters
config bpdu_protection ports [<portlist> | all ] {state [enable | disable] | mode [drop | block | shutdown]}
config bpdu_protection
recovery_timer
[<sec 60-1000000> | infinite]
config bpdu_protection [trap | log] [ none | attack_detected | attack_cleared | both ]
enable bpdu_protection
disable bpdu_protection
show bpdu_protection {ports {<portlist> }}
Each command is listed, in detail, in the following sections.
config bpdu_protection ports
Purpose
Used to configure the BPDU Attack Protection state and mode of a port.
Syntax config bpdu_protection ports[<portlist> | all ] {state [enable | disable] | mode [drop |
block | shutdown]}(1)
Description
This command is used to setup the BPDU Attack Protection function for the ports on the
Switch.
Parameters portlist – Specifies a range of ports to be configured.
all – In order to set all ports in the system, you may use the “all” parameter.
state – Specifies the state of BPDU Attack Protection. The default state is disable
enable – Enables the port or ports for BPDU Attack Protection.
disable – Disables the port or ports for BPDU Attack Protection.
mode – Specifies the BPDU Attack Protection mode. The default mode is shutdown.
drop – Will drop all RX BPDU packets when the port enters under_attack state.
block – Will drop all RX packets (include BPDU and normal packets) when the port enters
under_attack state.
shutdown – Will shut down the port when the port enters the under_attack state.
NOTE: The RX BPDU Attack Protection takes affect only when
the port enters under_attack state while in drop and block
mode.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure the BPDU Attack Protection mode to drop for port 1:
DES-3528:admin# config bpdu_protection ports 1 state enable mode drop
Command: config bpdu_protection ports 1 state enable mode drop
Success.
DES-3528:admin#

D-Link xStack DES-3528 Series Specifications

General

Brand	D-Link
Model	xStack DES-3528 Series
Category	Switch
Language	English