D-Link xStack - Chapter 14 BPDU Attack Protection Commands

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
230
Chapter 14 BPDU Attack
Protection Commands
config bpdu_protection ports [<portlist> | all] {state [enable | disable] | mode [drop | block |
shutdown]}(1)
config bpdu_protection recovery_timer [<sec 60-1000000> | infinite]
config bpdu_protection [trap | log] [none | attack_detected | attack_cleared | both]
enable bpdu_protection
disable bpdu_protection
show bpdu_protection {ports {<portlist>}}
14-1 config bpdu_protection ports
Description
This command is used to configure port state and mode for BPDU protection.
Format
config bpdu_protection ports [<portlist> | all] {state [enable | disable] | mode [drop | block |
shutdown]} (1)
Parameters
<portlist> - Enter a range of ports to be configured.
all - Specifies to set all ports in the system.
state - Specifies the BPDU protection state. The default state is disabled.
enable - Enable the BPDU protection state.
disable - Disable the BPDU protection state.
mode - Specifies the BPDU protection mode. The default mode is shutdown.
drop - Specifies to drop all received BPDU packets when the port enters the under attack
state.
block - Specifies to drop all packets (include BPDU and normal packets) when the port enters
the under attack state.
shutdown- Specifies to shut down the port when the port enters the under attack state.
Note: Only shutdown mode will make port link down, If the port status is Err-disabled but port link
is up, please check “show ports err-disabled” command for the reason.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure port state to enable and drop mode: