D-Link DGS-3700 User Manual Page 156
- Page / 292
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
145
Section 5
Security
Safeguard Engine
Trusted Host
IP-MAC-Port Binding
Port Security
DHCP Server Screening Settings
802.1X
SSL Settings
SSH
Access Authentication Control
MAC-based Access Control
Web Authentication
NetBIOS Filtering
Safeguard Engine
Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other
methods. These attacks may increase the Safeguard Engine beyond its capability. To alleviate this problem, the
Safeguard Engine function was added to the Switch’s software.
The Safeguard Engine can help the overall operability of the Switch by minimizing the workload of the Switch while the
attack is ongoing, thus making it capable to forward essential packets over its network in a limited bandwidth. When
the Switch either (a) receives too many packets to process or (b) exerts too much memory, it will enter an Exhausted
mode. When in this mode, the Switch only receives a small amount of ARP or IP broadcast packets for a calculated
time interval. Every five seconds, the Switch will check to see if there are too many packets flooding the Switch. If the
threshold has been crossed, the Switch will do a rate limit and only allow a small amount of ARP and IP broadcast
packets for five seconds. After another five-second checking interval arrives, the Switch will again check the ingress
flow of packets. If the flooding has stopped, the Switch will again begin accepting all packets. Yet, if the checking
shows that there continues to be too many packets flooding the Switch, it will still only accept a small amount of ARP
and IP broadcast packets for double the time of the previous stop period. This doubling of time for stopping ingress
ARP and IP broadcast packets will continue until the maximum time has been reached, which is 320 seconds and
every stop from this point until a return to normal ingress flow would be 320 seconds. For a better understanding,
examine the following example of the Safeguard Engine.
- User Manual 1
- 651370012005G 2
- Table of Contents 3
- Preface 11
- Intended Readers 12
- Notes, Notices, and Cautions 12
- Section 1 13
- Web-based User Interface 14
- Web Pages 15
- Configuration 17
- Device Information 18
- System Information 18
- Serial Port Settings 19
- IP Address 20
- Interface Settings 22
- IPv6 Route Settings 24
- IPv6 Neighbor Settings 24
- Port Configuration 25
- Port Description 26
- Static ARP Settings 27
- User Accounts 28
- System Log Configuration 31
- System Severity Settings 33
- DHCP Relay 34
- External Alarm Settings 40
- MAC Address Aging Time 41
- Web Settings 41
- Telnet Settings 41
- Password Encryption 42
- Clipaging Settings 42
- Firmware Information 42
- Dual Configuration Settings 43
- Ping Test 44
- VLAN Counter Settings 46
- SNTP Settings 47
- TimeZone Settings 48
- MAC Notification Settings 49
- SNMP Settings 51
- SNMP Global State Settings 52
- SNMP View Table 52
- SNMP Group Table 53
- SNMP User Table 54
- SNMP Community Table 55
- SNMP Host Table 56
- SNMP v6Host Table 56
- SNMP Engine ID 57
- Time Range Settings 58
- Single IP Management 62
- Single IP Settings 63
- Topology 64
- Tool Tips 67
- Right-Click 68
- Commander Switch Icon 69
- Member Switch Icon 69
- Candidate Switch Icon 69
- Menu Bar 70
- Firmware Upgrade 71
- Browse DDM Status List 72
- DDM Settings 72
- L2 Features 77
- VLAN Description 78
- IEEE 802.1Q VLANs 79
- 802.1Q VLAN Tags 80
- Port VLAN ID 81
- Tagging and Untagging 81
- Ingress Filtering 81
- Default VLANs 82
- Port-based VLANs 82
- VLAN Segmentation 82
- Double VLANs 83
- Regulations for Double VLANs 84
- 802.1Q VLAN 85
- Subnet VLAN 89
- Q-in-Q Settings 90
- VLAN Translation Settings 91
- 802.1v Protocol VLAN 93
- RSPAN Settings 95
- GVRP Settings 95
- GVRP Global Settings 96
- MAC-based VLAN Settings 97
- PVID Auto Assign Settings 97
- Port Trunking 98
- LACP Port Settings 100
- Traffic Segmentation 101
- BPDU Tunneling Settings 102
- IGMP Snooping 103
- MLD Snooping 109
- Port Mirror 116
- Loopback Detection Settings 117
- Spanning Tree 118
- P2P Port 119
- STP Bridge Global Settings 120
- STP Port Settings 122
- STP Instance Settings 124
- MSTP Port Information 125
- Forwarding & Filtering 126
- Multicast Filtering Mode 127
- LLDP Global Settings 128
- LLDP Port Settings 129
- LLDP Management Address List 130
- LLDP Basic TLVs Settings 130
- LLDP Dot1 TLVs Settings 131
- LLDP Dot3 TLVs Settings 132
- LLDP Statistics System 132
- LLDP Local Port Information 133
- LLDP Remote Port Information 134
- CFM Port Settings 134
- CFM CCM PDUs Forwarding Mode 135
- CFM MPs Reply LTRs 135
- CFM MIPCCM List 135
- CFM Loopback Settings 137
- CFM Linktrace Settings 138
- Ethernet OAM 139
- Section 4 141
- Understanding QoS 142
- HOL Blocking Pevention 144
- Bandwidth Control 144
- Traffic Control 145
- 802.1p Default Priority 147
- 802.1p User Priority 148
- QoS Scheduling Mechanism 148
- QoS Scheduling 149
- In Band Manage Settings 150
- SRED Settings 151
- SRED Drop Counter 153
- DSCP Trust Settings 153
- DSCP Map Settings 153
- 802.1p Map Settings 155
- Security 156
- Trusted Host 158
- IP-MAC-Port Binding 158
- IMP Binding Port Settings 159
- IMP Binding Entry Settings 161
- Port Security 162
- Port Security VLAN Settings 163
- Port Security Entries 164
- DHCP Screening Port Settings 165
- DHCP Offer Filtering 165
- Authentication Server 166
- Authenticator 167
- Authentication Process 168
- Control 169
- 802.1X Global Settings 171
- 802.1X Port Settings 171
- 802.1X User 173
- Authentication RADIUS Server 173
- Initialize Port(s) 174
- Reauthenticate Port(s) 174
- Guest VLAN Configuration 175
- SSL Settings 176
- Download Certificate 177
- Ciphersuite 177
- SSH Settings 179
- Authentication Server Group 185
- Login Method Lists 187
- Enable Method Lists 188
- RADIUS Accounting Settings 190
- MAC-based Access Control 191
- Web Authentication 194
- Conditions and Limitations 195
- NetBIOS Filtering 197
- Section 6 198
- Access Profile List 199
- CPU Interface Filtering 216
- CPU Access Profile List 217
- ACL Finder 228
- ACL Flow Meter 228
- Monitoring 231
- CPU Utilization 232
- Port Utilization 233
- Packet Size 233
- Memory Utilization 235
- Packets 235
- UMB_cast (RX) 237
- Transmitted (TX) 238
- Received (RX) 241
- Port Access Control 244
- RADIUS Account Client 245
- Authenticator State 247
- Authenticator Statistics 248
- Authenticator Diagnostics 250
- Browse ARP Table 252
- Browse VLAN 253
- Show VLAN Ports 254
- Browse IGMP Snooping Counter 255
- Browse Session Table 258
- CFM Packet Counter CCM List 259
- Browse CFM Fault MEP 259
- Browse CFM Port MP List 259
- MAC Address Table 260
- Browse Historical Counter 263
- System Log 264
- Save Services and Tools 266
- Save Configuration ID 2 267
- Save Log 267
- Save All 267
- Upload Log File 268
- Download Firmware 269
- Reboot System 269
- Content ACL 270
- FF-FF-FF-FF-FF-FF 271
- 00-20-5C-01-11-11 271
- Gratuitous ARP 274
- Ethernet 274
- Example topology 275
- System Log Entries 278
- DGS-3700 Series Trap List 287
- Proprietary Trap List 287
- Glossary 289
- Password Recovery Procedure 291
Related products and manuals for Network switches D-Link DGS-3700
Network switches D-Link DGS-1016 User Manual
(42 pages)
(42 pages)
Network switches D-Link DES-3018 User Manual
(260 pages)
(260 pages)
Network switches D-Link DES-3208 User Manual
(92 pages)
(92 pages)
Network switches D-Link DES-802 User Manual
(37 pages)
(37 pages)
Network switches D-Link DGS-3100 User Manual
(209 pages)
(209 pages)
Network switches D-Link DES-3225G User Manual
(219 pages)
(219 pages)
Network switches D-Link DES-1218 User Manual
(42 pages)
(42 pages)
Network switches D-Link DES-5200 User Manual
(144 pages)
(144 pages)
Network switches D-Link DES-3624 User Manual
(162 pages)
(162 pages)
Network switches D-Link DSS-5 User Manual
(21 pages)
(21 pages)
Network switches D-Link DES-3226L User Manual
(110 pages)
(110 pages)
Network switches D-Link DES-810 User Manual
(38 pages)
(38 pages)
Network switches D-Link DSL-G604T User Manual
(207 pages)
(207 pages)
Network switches D-Link DES-1228 User Manual
(60 pages)
(60 pages)
© 2020, manymanuals.com. All rights reserved. | 0.322 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals