NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Port connected to router randomly becomes disabled
I have had this switch for about three months now, it works well expect that the port connected to router would randomly becomes disabled.
The router assigned 192.168.1.100 to the switch, which...
- Sorry for that issue, but it seems that a constant DoS attack propagating from the router is mitigated by the switch with either Auto-Dos feature (please configure it here: System Management Denial of Service Auto-DoS Configuration.) or DoS configuration feature (please configure it here: System Management Denial of Service Denial of Service Configuration.).
Maybe because of your NAS services accessible from the internet or a Dos attack against your router, the switch is trying to protect your network. Please can you test and de-activate Auto-DoS in above GUI page, and ultimately configure DoS differently in the other GUI page and let the Community know the results?
Regards,
Hello,
This time, it took over 2 days before a port got disabled, and below are the log entries:
| <13> Sep 15 17:29:22 -1 TRAPMGR[trapTask]: traputil.c(721) 343 %% Link Down: xg9 |
| <11> Sep 15 17:29:22 -1 DOS[dtlTask]: dos_api.c(1844) 341 %% Interface xg9 has been shutdown by DOS attack notification. |
Looks like my router got DOS attack and trickled down to the switch. However, the router does have Firewall and DoS protection enabled. Is there something that I need to do on the router side or on the switch side?
Cheers,
John
No, that's part of the DoS capabilities on the switch, there is no "notification" layer for DoS between network components - check the configuration, it's either Auto-DoS, or some custom config. I would expect there would be some more information in the logs ref. DoS before the automatic shutdown.
I just check, it's on Auto-DoS. I checked again, there's nothing before the port shutdown. I setup a log server, so the log entries will be perserved even after switch reset. Let's see what show's up in the next episode.
it ready very wrong to me that this user's switch does shut down a port claiming "dos_api.c(1844) 341 %% Interface xg9 has been shutdown by DOS attack notification." without any log details what kind of DoS (not DOS please...) triggered the notification. Please investigate and assist.
Does anyone have any insight into this issue?
Thank you in advance.
Cheers,
John
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
