D-Link DES-1228/ME, Руководство пользователя

Страница: 156 / 267

DES-1228/ME Layer 2 Fast Ethernet Managed Switch
143
Section 10
Security
Traffic Control
Port Security
Port Lock Entries
IP-MAC-Port Binding
SSH
802.1X
Trusted Host
Access Authentication Control
Traffic Segmentation
Traffic Control
On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal
procedure. At times, this traffic may increase due to a malicious endstation on the network or a malfunctioning device, such as a
faulty network card. Thus, switch throughput problems will arise and consequently affect the overall performance of the switch
network. To help rectify this packet storm, the Switch will monitor and control the situation.
The packet storm is monitored to determine if too many packets are flooding the network, based on the threshold level provided
by the user. Once a packet storm has been detected, the Switch will drop packets coming into the Switch until the storm has
subsided. This method can be utilized by selecting the
Drop option of the Action field in the window below.
The Switch will also scan and monitor packets coming into the Switch by monitoring the Switch’s chip counter. This method is
only viable for Unicast Broadcast and Multicast storms because the chip only has counters for these three types of packets. Once a
storm has been detected (that is, once the packet threshold set below has been exceeded), the Switch will shutdown the port to all
incoming traffic with the exception of STP BPDU packets, for a time period specified using the CountDown field.
To view this window, click Security > Traffic Control .