Filter
Top Products
xStack
®
DES-3200 Series Layer 2 Managed Fast Ethernet Switch CLI Reference Guide
512
Chapter 58
Safeguard Engine Command
List
config safeguard_engine {state [enable | disable]| utilization {rising <20-100> | falling <20-100>} |
trap_log [enable | disable] | mode [strict | fuzzy]}
show safeguard_engine
58-1 config safeguard_engine
Description
This command is used to configure the CPU protection control for the system.
Format
config safeguard_engine {state [enable | disable]| utilization {rising <20-100> | falling <20-
100>} | trap_log [enable | disable] | mode [strict | fuzzy]}
Parameters
state - (Optional) Specify to configure CPU protection state to enable or disable.
enable - Specify that CPU protection will be enabled.
disable - Specify that CPU protection will be enabled.
utilization - (Optional) Specify to configure the CPU protection threshold.
rising - Config utilization rising threshold , the range is between 20%-100% , if the CPU
utilization is over the rising threshold, the Switch enters exhausted mode.
<20-100> - Enter the utilization rising value here. This value must be between 20 and 100.
falling - Config utilization falling threshold , the range is between 20%-100% , if the CPU
utilization is lower than the falling threshold, the Switch enters normal mode.
<20-100> - Enter the utilization falling value here. This value must be between 20 and 100.
trap_log - (Optional) Configure the state of CPU protection related trap/log mechanism to enable
or disable. If set to enable, trap and log will be active while cpu protection current mode
changed.If set to disable, current mode change will not trigger trap and log events.
enable - Specify that the CPU protection trap or log mechanism will be enabled.
disable - Specify that the CPU protection trap or log mechanism will be disabled.
mode - (Optional) determine the controlling method of broadcast traffic. Here are two modes
(strict and fuzzy).
strict - In strict mode, the Switch will stop receiving all ‘IP broadcast’ packets, packets from
the untrusted IP address and reduce the bandwidth of ‘ARP not to me’ packets (the
protocol address of the target in ARP packet is the Switch itself) to the Switch. That means
that no matter what the reasons are that cause high CPU utilization (may not be caused by
an ARP storm), the Switch reluctantly processes the specified traffic, mentioned previously
in the Exhausted mode.
fuzzy - In fuzzy mode, the Switch will adjust the bandwidth dynamically depending on some
reasonable algorithm.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.