Setting the port shutdown mode, Configuring dldp authentication – H3C Technologies H3C S12500 Series Switches User Manual
Page 56
45
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Set the DelayDown
timer.
dldp delaydown-timer time
Optional.
1 second by default.
NOTE:
DelayDown timer setting applies to all DLDP-enabled ports.
Setting the port shutdown mode
On detecting a unidirectional link, the ports can be shut down in one of the following two modes.
•
Manual mode. This mode applies to low performance networks, where normal links might be
treated as unidirectional links. It protects data traffic transmission against false unidirectional links.
In this mode, DLDP only detects unidirectional links but does not automatically shut down
unidirectional link ports. Instead, the DLDP state machine generates log and traps to prompt you to
manually shut down unidirectional link ports with the shutdown command. H3C recommends that
you do that as prompted. Then the DLDP state machine transitions to the Disable state.
•
Auto mode. In this mode, when a unidirectional link is detected, DLDP transitions to Disable state,
generates log and traps, and sets the port state to DLDP Down.
To set port shutdown mode:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Set port shutdown
mode.
dldp unidirectional-shutdown { auto |
manual }
Optional.
auto by default.
On a port with both remote OAM loopback and DLDP enabled, if the port shutdown mode is auto mode,
the port will be shut down by DLDP when it receives a packet sent by itself, causing remote OAM
loopback to operate incorrectly. Therefore, it is a good practice to set the port shutdown mode to manual
mode.
If the switch is busy, or the CPU usage is high, normal links might be treated as unidirectional links. In this
case, you can set the port shutdown mode to manual mode to alleviate the impact caused by false
unidirectional link report.
Configuring DLDP authentication
You can guard your network against attacks and malicious probes by configuring an appropriate DLDP
authentication mode, which can be simple authentication or MD5 authentication. If your network is safe,
you can choose not to authenticate.
To configure DLDP authentication:
Step Command
Remarks
1.
Enter system view.
system-view
N/A