D-Link DGS-3130 Emulator - Page 148

DGS-3130 Layer 3 Stackable Managed Switch CLI Reference Guide 11. BPDU Protection Commands 11-1 spanning-tree bpdu-protection (global) This command is used to enable the BPDU protection function globally. Use the no form of this command to revert to the default setting. spanning-tree bpdu-protection no spanning-tree bpdu-protection Parameters None. Default By default, this option is disabled. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline In a network, customers do not want all ports of devices to receive STP packets, because some ports that receive STP BPDU packets will cause system resources to be wasted. If ports are not expected to receive BPDU packets, the BPDU protection function will prevent those ports from receiving BPDU packets. The port where the BPDU protection function is enabled will enter a protection state (drop/block/shutdown) when it receives a STP BPDU packet. There are 3 mode behaviors when the Switch detects BPDU attacks:  Drop - The Switch drops received STP BPDU packets only, and the port is placed in the normal state.  Block - The Switch drops all received BPDU packets and blocks all data, and the port is placed in the normal state.  Shutdown - The Switch shuts down the port, and the port is placed the error-disabled state. Example This example shows how to enable the BPDU protection function globally. Switch# configure terminal Switch(config)# spanning-tree bpdu-protection Switch(config)# 11-2 spanning-tree bpdu-protection (Interface) This command is used to enable the BPDU protection function on a port. Use the no form of this command to disable the BPDU protection function on the port. spanning-tree bpdu-protection {drop | block | shutdown} no spanning-tree bpdu-protection 144