Trusted Host Settings - D-Link xStack Reference Manual

®
xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide
NOTICE: When Safeguard Engine is enabled, the Switch will allot bandwidth to various
traffic flows (ARP, IP) using the FFP (Fast Filter Processor) metering table to control the
CPU utilization and limit traffic. This may limit the speed of routing traffic over the network.
Users can enable the Safeguard Engine or configure advanced Safeguard Engine settings for the Switch.
To view the following window, click Security > Safeguard Engine Settings:
The following parameters can be configured:
Parameter Description
Safeguard
Use the radio button to globally enable or disable Safeguard Engine settings for the Switch.
Engine State
Rising
Used to configure the acceptable level of CPU utilization before the Safeguard Engine mechanism
Threshold is enabled. Once the CPU utilization reaches this percentage level, the Switch will move into
(20% - 100%) Exhausted mode, based on the parameters provided in this window.
Falling Used to configure the acceptable level of CPU utilization as a percentage, where the Switch leaves
Threshold the Safeguard Engine state and returns to normal mode.
(20% - 100%)
Trap / Log Use the drop-down menu to enable or disable the sending of messages to the device's SNMP
agent and switch log once the Safeguard Engine has been activated by a high CPU utilization rate.
Mode Used to select the type of Safeguard Engine to be activated by the Switch when the CPU utilization
reaches a high rate. The user may select:
Fuzzy – If selected, this function will instruct the Switch to minimize the IP and ARP traffic flow to
the CPU by dynamically allotting an even bandwidth to all traffic flows.
Strict – If selected, this function will stop accepting all ARP packets not intended for the Switch, and
will stop receiving all unnecessary broadcast IP packets, until the storm has subsided.
The default setting is Fuzzy mode.
Click Apply to implement the changes.

Trusted Host Settings

Up to ten trusted host secure IP addresses may be configured and used for remote Switch management. It should be noted that if
one or more trusted hosts are enabled, the Switch will immediately accept remote instructions from only the specified IP address
or addresses. If you enable this feature, be sure to first enter the IP address of the station you are currently using.
To view the following window, click Security > Trusted Host Settings:
Figure 6 - 82. Safeguard Engine Settings window
198