1-2
View
Ethernet port view
Parameters
None
Description
Use the bpdu-drop any command to enable BPDU dropping on the Ethernet port.
Use the undo bpdu-drop any command to disable BPDU dropping on the Ethernet port.
By default, BPDU dropping is disabled.
In a STP-enabled network, some malicious users may send BPDU packets to the switch continuously in
order to destabilize the network. When a switch receives the BPDU packets, it will forward them to other
switches. As a result, STP calculation is performed repeatedly, which may occupy too much CPU of the
switches or cause errors in the protocol state of the BPDU packets.
In order to avoid this problem, you can enable BPDU dropping on Ethernet ports. Once the function is
enabled on a port, the port will not receive or forward any BPDU packets. In this way, the switch is
protected against the BPDU packet attack and the STP calculation correctness is ensured.
Currently, only S3100-EI series Ethernet Switches support the BPDU Dropping feature.
Examples
# Enable BPDU dropping on Ethernet 1/0/1.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] interface Ethernet 1/0/1
[Sysname-Ethernet1/0/1] bpdu-drop any
check region-configuration
Syntax
check region-configuration
View
MST region view
Parameters
None
To Next Page
Loading...
Need help?
General