Trusted Host; Ip-Mac-Port Binding - D-Link xStack Reference Manual

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch WEB UI Reference Guide
To configure the Switch's Safeguard Engine, change the State to Enabled when the Safeguard Engine is enabled a
green light will show on the gray bar at the top of this window, next to Safeguard. To set the Safeguard Engine for the
Switch, complete the following fields:
Parameter
Rising Threshold
Falling Threshold
Trap/log
Mode
Click Apply to implement the settings made.

Trusted Host

Use the Security IP Management to permit remote stations to manage the Switch. If one or more designated
management stations are defined by the user, only the chosen stations, as defined by IP address, will be allowed
management privilege through the Web manager, Telnet session, or SNMP manager. To define a management
station IP setting, type in the IP address with a proper subnet mask and click the Add button.
To view this window, click Security > Trusted Host:
To delete an entry, click the corresponding Delete button. To delete all the entries on the Trusted Host Table, click the
Delete All button.

IP-MAC-Port Binding

The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these
two address types together allows the transmission of data between the layers. The primary purpose of IP-MAC-port
binding is to restrict access to the Switch to a number of authorized users. Only authorized clients can access the
Switch's port by checking the pair of IP-MAC addresses with the pre-configured database. If an unauthorized user
tries to access an IP-MAC-port binding enabled port, the system will block the access by dropping its packet. The
maximum number of IP-MAC-port binding entries is dependent on chip capability (e.g. the ARP table size) and
storage size of the device. Active and inactive entries use the same database. The maximum entry number is 500.
The creation of authorized users can be manually configured by CLI or Web. The function is port-based, meaning a
user can enable or disable the function on the individual port.
Description
Used to configure the acceptable level of CPU utilization before the Safeguard Engine
mechanism is enabled. Once the CPU utilization reaches this percentage level, the Switch
will move into the Exhausted state.
Used to configure the acceptable level of CPU utilization as a percentage, where the Switch
leaves the Exhausted state and returns to normal mode.
Use the pull-down menu to enable or disable the sending of messages to the device's SNMP
agent and switch log once the Safeguard Engine has been activated by a high CPU utilization
rate.
Toggle the State field to either Strict or Fuzzy for the Safeguard Engine of the Switch.
Figure 5 - 3. Trusted Host window
138