Security; Traffic Control - D-Link DES-3028 User Manual

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch

Security

Traffic Control

Port Security
Port Lock Entries
IP-MAC-Port Binding
SSL
SSH
802.1X
Trusted Host
Access Authentication Control
Traffic Segmentation
DoS Attack Prevention
Traffic Control
On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal
procedure. At times, this traffic may increase due to a malicious endstation on the network or a malfunctioning device, such as a
faulty network card. Thus, switch throughput problems will arise and consequently affect the overall performance of the switch
network. To help rectify this packet storm, the Switch will monitor and control the situation.
The packet storm is monitored to determine if too many packets are flooding the network, based on the threshold level provided
by the user. Once a packet storm has been detected, the Switch will drop packets coming into the Switch until the storm has
subsided. This method can be utilized by selecting the Drop option of the Action field in the window below.
The Switch will also scan and monitor packets coming into the Switch by monitoring the Switch's chip counter. This method is
only viable for Unicast Broadcast and Multicast storms because the chip only has counters for these three types of packets. Once a
storm has been detected (that is, once the packet threshold set below has been exceeded), the Switch will shutdown the port to all
incoming traffic with the exception of STP BPDU packets, for a time period specified using the CountDown field.
To view this window, click Security > Traffic Control.
Section 10
181