D-Link xStack DGS-3120 Series User Manual

xStack
®
DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide
171
Chapter 13 BPDU Attack Protection
Command List
config bpdu_protection ports [<portlist> | all ] {state [enable | disable] | mode [ drop | block |
shutdown} (1)
config bpdu_protection recovery_timer [<sec 60-1000000> | infinite]
config bpdu_protection [trap | log] [none | attack_detected | attack_cleared | both]
enable bpdu_protection
disable bpdu_protection
show bpdu_protection {ports {<portlist>}}
13-1 config bpdu_protection ports
Description
This command is used to configure the BPDU protection function for the ports on the Switch. In
generally, there are two states in BPDU protection function. One is normal state, and another is
under attack state. The under attack state have three modes: drop, block, and shutdown. A BPDU
protection enabled port will enter under attack state when it receives one STP BPDU packet. And it
will take action based on the configuration. Thus, BPDU protection can only be enabled on STP-
disabled port.
BPDU protection has high priority than fbpdu setting configured by configure STP command in
determination of BPDU handling. That is, when fbpbu is configured to forward STP BPDU but
BPDU protection is enabled, then the port will not forward STP BPDU.
Format
config bpdu_protection ports [<portlist> | all ] {state [enable | disable] | mode [ drop | block |
shutdown]}(1)
Parameters
<portlist> - Specify a range of ports to be configured (port number).
all – Specify that all the port will be configured.
state – (Optional) Specify the BPDU protection state. The default state is disable
enable – Specify to enable BPDU protection.
disable – Specify to disable BPDU protection.
mode – (Optional) Specify the BPDU protection mode. The default mode is shutdown
drop - Drop all received BPDU packets when the port enters under_attack state.
block - Drop all packets (include BPDU and normal packets) when the port enters
under_attack state.
shutdown - Shut down the port when the port enters under_attack state.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.

D-Link xStack DGS-3120 Series Specifications

General

MAC Address Table	16K entries
Ports	10/100/1000BASE-T ports
VLANs	4094
Jumbo Frame	Up to 9KB
Power Supply	Internal power supply (depending on model)
Power over Ethernet (PoE)	No
Layer 3 Features	RIP
Quality of Service (QoS)	8 queues per port, DiffServ
Security Features	ACLs
Management	Web-based, CLI, SNMP
Operating Temperature	0°C to 40°C
Storage Temperature	-40°C to 70°C
SFP Ports	Combo 10/100/1000BASE-T/SFP ports and/or dedicated SFP/SFP+ ports (depending on model)