Security; Traffic Control - D-Link DGS-3600 Series User Manual

Security

Traffic Control

Port Security
IP-MAC-Port Binding
802.1X
Web Authentication
Trust Host
Access Authentication Control
MAC Based Access Control
Safeguard Engine
Traffic Segmentation
SSL
SSH
Traffic Control
On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal
procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a
faulty network card. Thus, switch throughput problems will arise and consequently affect the overall performance of the switch
network. To help rectify this packet storm, the Switch will monitor and control the situation.
The packet storm is monitored to determine if too many packets are flooding the network, based on the threshold level provided
by the user. Once a packet storm has been detected, the Switch will drop packets coming into the Switch until the storm has
subsided. This method can be utilized by selecting the Drop option of the Action field in the window below.
The Switch will also scan and monitor packets coming into the Switch by monitoring the Switch's chip counter. This method is
only viable for Broadcast and Multicast storms because the chip only has counters for these two types of packets. Once a storm
has been detected (that is, once the packet threshold set below has been exceeded), the Switch will shutdown the port to all
incoming traffic with the exception of STP BPDU packets, for a time period specified using the CountDown field.
To view this window, click Security > Traffic Control, as shown below.
®
xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch
Section 11
277