Trusted Host Settings; Safeguard Engine Settings - D-Link DWS-3160-24TC Reference Manual

DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide

Trusted Host Settings

Up to thirty trusted host secure IP addresses or ranges may be configured and used for remote Switch
management. It should be noted that if one or more trusted hosts are enabled, the Switch will immediately accept
remote instructions from only the specified IP address or addresses. If you enable this feature, be sure to first enter
the IP address of the station you are currently using.
To view this window, click Security > Trusted Host Settings as shown below:
When the user clicks the Edit button, one will be able to edit the service allowed to the selected host.
The fields that can be configured are described below:
Parameter
IPv4 Address
IPv6 Address
Net Mask
Access Interface
Click the Add button to add a new entry based on the information entered.
Click the Delete All button to remove all the entries listed.

Safeguard Engine Settings

Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other
methods. These attacks may increase the switch load beyond its capability. To alleviate this problem, the
Safeguard Engine function was added to the Switch's software.
The Safeguard Engine can help the overall operability of the Switch by minimizing the workload of the Switch while
the attack is ongoing, thus making it capable to forward essential packets over its network in a limited bandwidth.
The Safeguard Engine has two operating modes that can be configured by the user, Strict and Fuzzy. In Strict
Figure 11-64 Trusted Host window
Description
Enter an IPv4 address to add to the trusted host list.
Enter an IPv6 address to add to the trusted host list.
Enter a Net Mask address to add to the trusted host list.
Tick the check boxes to select services that will be allowed to the trusted host.
244