Extreme Networks EAS 200-24p Switch, Manual

Page: 240 / 908

Chapter 12: BPDU Attack Protection Command List
Extreme Networks EAS 200-24p Switch CLI Manual
240
config bpdu_protection ports
Description
The configure BPDU protection ports command is used to configure the BPDP protection function for
the ports on the switch. In generally, there are two states in BPDU protection function. One is normal
state, and another is under attack state. The under attack state have three modes: drop, block, and
shutdown. A BPDU protection enabled port will enter under attack state when it receives one STP
BPDU packet. And it will take action based on the configuration. Thus, BPDU protection can only be
enabled on STP-disabled port.
BPDU protection has high priority than fbpdu setting configured by configure STP command in
determination of BPDU handling. That is, when fbpbu is configured to forward STP BPDU but BPDU
protection is enabled, then the port will not forward STP BPDU.
Format
config bpdu_protection ports [<portlist> | all ] {state [enable | disable] |
mode [ drop | block | shutdown]}(1)
Parameters
●
<portlist> - Specified a range of ports to be configured (port number).
●
all – Specified that all the port will be configured.
●
state – (Optional) Specified the BPDU protection state. The default state is disable
●
enable – Specify to enable BPDU protection.
●
disable – Specify to disable BPDU protection.
●
mode – (Optional) Specify the BPDU protection mode. The default mode is shutdown
●
drop - Drop all received BPDU packets when the port enters under_attack state.
●
block - Drop all packets (include BPDU and normal packets) when the port enters under_attack
state.
●
shutdown - Shut down the port when the port enters under_attack state.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To set the port state enable and drop mode:
EAS 200-24p:admin# config bpdu_protection ports 1 state enable mode drop
Commands: config bpdu_protection ports 1 state enable mode drop
Success.
EAS 200-24p:admin#