Cpu-Protect Safeguard - D-Link DGS-6600-48TS Manual

DGS-6604 m

cpu-protect safeguard

cpu-protect safeguard [threshold RISING-THRESHOLD FALLING-THRESHOLD]
no cpu-protect safeguard
Syntax Description
threshold
RISING-THRESHOLD Set a percentage value of the rising CPU utilization which will trigger the
FALLING-
THRESHOLD
Default
Command Mode
Usage Guideline
Example
Switch(config)# cpu-protect safeguard threshold 60 40
CLI Reference Guide
Use this command to enable and configure the threshold for Safeguard Engine.
Use the no form of this command to disable Safeguard Engine.
Configure the utilization for the Safeguard Engine.
Safeguard Engine function. Once the CPU utilization rises over the specified
percentage, the Safeguard Engine mechanism will initiate. The valid range is 20
to 100.
The user can set a percentage value of the falling CPU utilization which will
trigger the Safeguard Engine function to cease. Once the CPU utilization falls to
the specified percentage, the Safeguard Engine mechanism will shut down. The
valid range is 20 to 100.
By default Safeguard_Engine is disabled.
By default rising threshold of CPU utilization is 50.
By default falling threshold of CPU utilization is 20.
Global configuration
The Safeguard Engine can help the overall operability of the device by
minimizing the workload of the switch while the attack is ongoing, thus making it
capable to forward essential packets over its network in a limited bandwidth.
When the CPU utilization of the switch rises over configured rising threshold, it
will enter exhausted mode. In exhausted mode, the switch limits the bandwidth of
receiving ARP request and drop all broadcast IP packets. Regarding the way to
limit the bandwidth is project dependent.
You can use the command cpu-protect safeguard to configure the threshold
and enable the Safeguard Engine. The command no cpu-protect safeguard is
used to disable Safeguard Engine. The command no cpu-protect safeguard
will reset both the rising and falling thresholds and disable the state of Safeguard
Engine.
The following example shows how to configure the thresholds and enable
Safeguard Engine. The rising and falling threshold are 60 and 40 respectively.
cpu-protect safeguard
130