Security; Safeguard Engine - D-Link xStack Reference Manual

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch WEB UI Reference Guide

Security

Safeguard Engine

Trusted Host
IP-MAC-Port Binding
Port Security
802.1X
RADIUS Attributes Assignment
SSL Settings
SSH
Access Authentication Control
MAC-based Access Control
DoS Prevention Settings
DHCP Server Screening Settings
Safeguard Engine
Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP storm) or other
methods. These attacks may affect normal traffic flow. To alleviate this problem, the Safeguard Engine function was
added to the Switch's software.
The Safeguard Engine can help the overall operability of the Switch by minimizing the workload of the Switch during
an attack, therefore making it capable of forwarding essential packets over the network with limited bandwidth. To
achieve this, the Safeguard Engine uses threshold values to place the Switch in Exhausted or Normal mode.
The Switch will be placed in Exhausted mode when the CPU utilization exceeds the Rising Threshold. In Exhausted
mode, the Switch will limit the bandwidth for ARP packets, therefore allowing more bandwidth for essential packets.
Section 5
136