D-Link DGS-1510 Series, Reference Manual

Page: 527 / 711

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
524
FALLING-THRESHOLD Specifies to set a percentage value of the falling CPU utilization
which will trigger the Safeguard Engine function to cease. Once the
CPU utilization falls to the specified percentage, the Safeguard
Engine mechanism will shut down. The valid range is from 20 to
100.
Default
By default, Safeguard Engine is disabled.
By default, the rising threshold of CPU utilization is 70.
By default, the falling threshold of CPU utilization is 20.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
The Safeguard Engine can help the overall operability of the device by minimizing the workload of the
Switch while the attack is ongoing, thus making it capable to forward essential packets over its
network in a limited bandwidth. When the CPU utilization of the Switch rises over configured rising
threshold, it will enter exhausted mode. In exhausted mode, the Switch limits the bandwidth of
receiving ARP and broadcast IP packets.
Example
This example shows how to enable the Safeguard Engine and configure the thresholds, which the
rising and falling threshold are 60 and 40 respectively.
Switch# configure terminal
Switch(config)# cpu-protect safeguard threshold 60 40
Switch(config)#
59-3 cpu-protect sub-interface
This command is used to configure the rate limit for traffic destined to the CPU by sub-interface types.
cpu-protect sub-interface {manage | protocol | route} pps RATE
no cpu-protect sub-interface {manage | protocol | route}
Parameters
RATE Specifies the threshold value. The unit is packets per second. When
set to 0, all packets of the specified sub-interface type will be
dropped.
Default
None.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline