Setting Exceptional Ips Free From Monitoring; Clearing The Isolation Status Of Isolated Ips - D-Link xStack DGS-3610 Series Configuration Manual

DGS-3610 Series Configuration Guide
If you want to restore the default value of the maximum quantity for monitored hosts, execute
the no system-guard detect-maxnum command in the global configuration mode.
41.2.6 Setting Exceptional IPs Free From
Monitoring
You may set exceptional IPs free from monitoring. Packets that meet the exceptional IPs are
allowed to be sent to the CPU.
Command
configure terminal
system-guard exception-ip ip mask
end
show system-guard exception-ip
copy running-config startup-config
In the global configuration mode, you can delete an exceptional IP entry through the no
option of this command. All exceptional IP entries can be deleted through the no and all-eip
options of this command .
For example, to delete all exceptional IPs:
DGS-3610(config)# no system-guard exception-ip all-eip
To delete a single exceptional IP:
DGS-3610(config)# no system-guard exception-ip 192.168.5.145/32
Caution
41.2.7 Clearing the Isolation Status of
Isolated IPs
An isolated user will automatically recover after a period of isolation. To clear the isolation
manually, execute the following command in the privileged mode:
An isolated IP is still in the isolated status before being aged even if it is
among exceptional IPs. To send the IP packets to the CPU, you may
execute the clear system-guard command to cancel the isolation of the
IP.
Chapter 41 Anti-attack System Guard Configuration
Meaning
Enter the global configuration mode.
Add the exceptional IP mask for anti-attack function. Up
to 255 exceptional IP entries are supported.
Return to the privileged mode.
Show all exceptional IP entries.
Save the configuration.
41-5