---
title: Tip: on DGS-3130-30TS, run no ddp (global + interfaces), drop public/private SNMP, then verify with show ddp | ctxsec
url: https://ctxsec.com/items/tip-dlink-dgs-3130-disable-ddp-remove-default-snmp
description: "Until D-Link ships a fixed build for SAP10523, the vendor's primary interim control is disabling D-Link Discovery Protocol. Issue no ddp in global config and again on applicable interfaces, confirm with show ddp, and write memory so it survives reboot. Also remove default SNMP community strings and move required monitoring to SNMPv3 with host allowlists. Treat management ACLs alone as insufficient for the reported DDP paths."
status: "operational guidance (D-Link SAP10523 interim mitigations, Nov 6)"
published: 2026-11-06
---

> Until D-Link ships a fixed build for SAP10523, the vendor's primary interim control is disabling D-Link Discovery Protocol. Issue no ddp in global config and again on applicable interfaces, confirm with show ddp, and write memory so it survives reboot. Also remove default SNMP community strings and move required monitoring to SNMPv3 with host allowlists. Treat management ACLs alone as insufficient for the reported DDP paths.

[← Tips & Guides](/tips) · [markdown](/items/tip-dlink-dgs-3130-disable-ddp-remove-default-snmp.md)

operational guidance (D-Link SAP10523 interim mitigations, Nov 6)

2026-11-06

### Tip: on DGS-3130-30TS, run no ddp (global + interfaces), drop public/private SNMP, then verify with show ddp

- **CLI order:** authorized management session → `configure` → `no ddp` → per-interface `no ddp` → `show ddp` → save config and confirm after reload.
- **SNMP:** `no snmp-server community public` / `private` (confirm exact syntax for your build); prefer SNMPv3 authPriv to named hosts.
- **Exposure cut:** do not put SSH/web/SNMP on the public Internet; keep them on a dedicated management segment.
- Disabling DDP may break discovery tooling that depends on it — that is the trade for closing the tested attack surface until a firmware fix lands.

Sources: [D-Link SAP10523 Recommended Customer Action](https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10523)