Dos Attack Prevention Settings - D-Link xStack DES-3200 Series Reference Manual

The fields that can be configured are described below:
Parameter
Safeguard Engine
State
Rising Threshold (20%
- 100%)
Falling Threshold (20%
- 100%)
Trap / Log
Mode
Click the Apply button to accept the changes made.

DoS Attack Prevention Settings

This window is used to configure the Denial-of-Service (DoS) attach prevention settings.
To view this window, click Security > DoS Attack Prevention Settings as shown below:
xStack® DES-3200 Series Layer 2 Managed Fast Ethernet Switch
Figure 8-65 Safeguard Engine Settings window
Description
Use the radio button to globally enable or disable Safeguard Engine settings for the
Switch.
Used to configure the acceptable level of CPU utilization before the Safeguard
Engine mechanism is enabled. Once the CPU utilization reaches this percentage
level, the Switch will move into Exhausted mode, based on the parameters provided
in this window.
Used to configure the acceptable level of CPU utilization as a percentage, where the
Switch leaves the Safeguard Engine state and returns to normal mode.
Use the drop-down menu to enable or disable the sending of messages to the
device's SNMP agent and switch log once the Safeguard Engine has been activated
by a high CPU utilization rate.
Used to select the type of Safeguard Engine to be activated by the Switch when the
CPU utilization reaches a high rate. The user may select:
Fuzzy – If selected, the Switch will adjust the bandwidth dynamically depend on
some reasonable algorithm.
Strict – If selected, the Switch will stop receiving all 'IP broadcast' packets, packets
from un-trusted IP address and reduce the bandwidth of 'ARP not to me' packets
(the protocol address of target in ARP packet is the Switch itself) to the Switch. That
means no matter what reasons cause the high CPU utilization (may not caused by
ARP storm), the Switch reluctantly processes the specified traffic mentioned in
previous in the Exhausted mode.
The default setting is Fuzzy mode.
223