D-Link xStack DES-3200 Series Reference Manual page 167

Click the Select button to select a CPU ACL type.
Click the Create button to create a profile.
Click the <<Back button to discard the changes made and return to the previous page.
After clicking the Show Details button, the following page will appear:
Click the Show All Profiles button to navigate back to the CPU ACL Profile List Page.
After clicking the Add/View Rules button, the following page will appear:
xStack® DES-3200 Series Layer 2 Managed Fast Ethernet Switch
specify Code to further specify that the access profile will apply an ICMP code value.
Select IGMP to instruct the Switch to examine the Internet Group Management
Protocol (IGMP) field in each frame's header.
Select Type to further specify that the access profile will apply an IGMP type value.
Select TCP to use the TCP port number contained in an incoming packet as the
forwarding criterion. Selecting TCP requires a source port mask and/or a destination
port mask is to be specified.
Source Port Mask - Specify a TCP port mask for the source port in hex form (hex 0x0-
0xffff), which you wish to filter.
Destination Port Mask - Specify a TCP port mask for the destination port in hex form
(hex 0x0-0xffff) which you wish to filter.
TCP Flag Bits - The user may also identify which flag bits to filter. Flag bits are parts of
a packet that determine what to do with the packet. The user may filter packets by
filter¬ing certain flag bits within the packets, by checking the boxes corresponding to
the flag bits of the TCP field. The user may choose between urg (urgent), ack
(acknowledgement), psh (push), rst (reset), syn (synchronize), fin (finish).
Select UDP to use the UDP port number contained in an incoming packet as the
forwarding criterion. Selecting UDP requires that you specify a source port mask
and/or a destination port mask.
Source Port Mask - Specify a UDP port mask for the source port in hex form (hex 0x0-
0xffff).
Destination Port Mask - Specify a UDP port mask for the destination port in hex form
(hex 0x0-0xffff).
Select Protocol ID - Enter a value defining the protocol ID in the packet header to
mask. Specify the protocol ID mask in hex form (hex 0x0-0xff).
Protocol ID Mask – Specify that the rule applies to the IP Protocol ID Traffic.
User Define – Specify the L4 part mask.
Figure 7-30 CPU Access Profile Detail Information (IPv4 ACL)
Figure 7-31 CPU Access Rule List (IPv4 ACL)
159