H3C Technologies H3C S7500E Series Switches - Manual (Page 62)

6-12
Setting the Port Shutdown Mode
On detecting a unidirectional link, the ports can be shut down in one of the following two modes.
z Manual mode. This mode applies to low performance networks, where normal links may be
treated as unidirectional links. It protects data traffic transmission against false unidirectional links.
In this mode, DLDP only detects unidirectional links and the DLDP state machine generates log
and traps to prompt you to manually shut down unidirectional link ports with the shutdown
command. It is recommended that you do as prompted. Then the DLDP state machine transits to
the Disable state.
z Auto mode. In this mode, when a unidirectional link is detected, DLDP transits to Disable state,
generates log and traps, and sets the port state to DLDP Down.
Follow these steps to set port shutdown mode:
To do… Use the command… Remarks
Enter system view system-view —
Set port shutdown mode
dldp unidirectional-shutdown { auto
| manual }
Optional
auto by default
z On a port with both remote OAM loopback and DLDP enabled, if the port shutdown mode is auto
mode, the port will be shut down by DLDP when it receives a packet sent by itself, causing remote
OAM loopback to operate improperly. To prevent this, set the port shutdown mode to auto.
z If the device is busy, or the CPU usage is high, normal links may be treated as unidirectional links.
In this case, you can set the port shutdown mode to manual mode to alleviate the impact caused
by false unidirectional link report.
Configuring DLDP Authentication
You can guard your network against attacks and vicious probes by configuring an appropriate DLDP
authentication mode, which can be clear text authentication or MD5 authentication. If your network is
safe, you can choose not to authenticate.
Follow these steps to configure DLDP authentication:
To do… Use the command… Remarks
Enter system view system-view —
Configure DLDP authentication
dldp authentication-mode { md5
md5-password | none | simple
simple-password }
Required
none by default