xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
230
Chapter 14
BPDU Attack
Protection Commands
config bpdu_protection ports [<portlist> | all] {state [enable | disable] | mode [drop | block |
shutdown]}(1)
config bpdu_protection recovery_timer [<sec 60-1000000> | infinite]
config bpdu_protection [trap | log] [none | attack_detected | attack_cleared | both]
show bpdu_protection {ports {<portlist>}}
14-1 config bpdu_protection ports
Description
This command is used to configure port state and mode for BPDU protection.
Format
config bpdu_pr
otection ports
[<portl
ist> | all] {sta
te [enable | disabl
e] | mode [drop |
block |
shutdown]} (1)
Parameters
<portlist> - Enter a range of ports to be configured.
all - Specifies to set all ports in the system.
state - Specifies the BPDU protection state. The default state is disabled.
enable - Enable the BPDU protection state.
disable - Disable the BPDU protection state.
mode - Specifies the BPDU protection mode. The default mode is shutdown.
drop - Specifies to drop all received BPDU packets when the port enters the under attack
state.
block - Specifies to drop all packets (include BPDU and normal packets) when the port enters
the under attack state.
shutdown- Specifies to shut down the port when the port enters the under attack state.
Note: Only shutdown mode will make port link down, If the port status is Err-disabled but port link
is up, please check “show ports err-disabled” command for the reason.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure port state to enable and drop mode:
To Next Page
Loading...
Need help?
General