xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
157
config bpdu_protection ports
shutdown
- Shut down the port when the port enters under_attack state.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To set the port state enable and drop mode:
DGS-3627:admin# config bpdu_protection ports 1 state enable mode drop
Commands: config bpdu_protection ports 1 state enable mode drop
Success.
DGS-3627:admin#
config bpdu_protection recovery_interval
Purpose
Used to configure bpdu_protection recovery timer.
Syntax
config bpdu_protection recovery_timer [<sec 60-1000000> | infinite]
Description
When a port enters under attack state, it can be disabled or blocked based on the
configuration. The state can be recovered manually or by the auto recovery mechanism. This
command is used to configure the auto-recovery timer. To manually recover the port, the
user needs to disable and re-enable the port.
Parameters
recovery_timer
- Specified the bpdu_protection Auto-Recovery recovery_timer. The default
value of recovery_timer is 60.
infinite
- The port will not be auto recovered.
<sec 60 –1000000>
- The timer (in seconds) used by the Auto-Recovery mechanism to
recover the port. The valid range is 60 to 1000000.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure the bpdu_protection recovery_timer to 120 seconds for the entire switch:
DGS-3627:admin# config bpdu_protection recovery_timer 120
Commands: config bpdu_protection recovery_timer 120
Success.
DGS-3627:admin#
config bpdu_protection
Purpose
Used to configure bpdu_protection trap state or log state.
Syntax
config bpdu_protection [trap | log ] [ none | attack_detected | attack_cleared | both ]
Description
The config bpdu_protection trap command is used to configure the bpdu_protection trap state
or state for the entire switch.
Parameters
trap
- To specify the trap state.
log
- To specify the log state.
none
- Neither attack_detected nor attack_cleared is trapped or logged.
attack_detected
- Events will be logged or trapped when the BPDU attacks is detected.