D-Link DES-3028 User Manual page 176

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
like the common ARP Spoofing attack that is wide spread today. This is the reason why Packet
Content ACL is able to inspect any specified content of a packet in different protocol layers.
Click Apply to implement changes made.
To establish the rule for a previously created Access Profile:
To edit or add a rule to a previously created profile, click the corresponding Add/Modify button under the Access Rule heading in
the Access Profile Table window, the following window will be displayed. If no entry exists only the Add button will be
displayed however when an entry already exists a corresponding Modify button will also be displayed.
To create a new rule set for an access profile click the Add button. A new window is displayed. To remove a previously created
rule, click the corresponding
Configure the following Access Rule Configuration settings:
NOTE: Address Resolution Protocol (ARP) is the standard for finding a
host's hardware address (MAC Address). However, ARP is vulnerable as
it can be easily spoofed and utilized to attack a LAN. For a more detailed
explanation on how ARP works and how to employ D-Link's advanced
unique Packet Content ACL to prevent ARP spoofing attack, please see
Appendix E, at the end of this manual.
Figure 9- 6. Access Rule Table window
button.
Figure 9- 7. Access Rule Configuration window (IP)
162