D-Link DES-6500 - Switch User Manual page 122

Figure 6- 84. CPU Interface Filtering Rule Configuration - Packet Content
To set the Access Rule for Ethernet, adjust the following parameters and click Apply.
Parameters
Profile ID
Mode
Access ID
Type
Offset
Port
To view the settings of a previously correctly configured rule, click
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual
Description
This is the identifier number for this profile set.
Select Permit to specify that the packets that match the access profile are forwarded by the
Switch, according to any additional rule added (see below).
Select Deny to specify that packets that match the access profile are not forwarded by the
Switch and will be filtered.
Type in a unique identifier number for this access. This value can be set from 1 - 100.
Selected profile based on Ethernet (MAC Address), IP address or Packet Content.
Ethernet instructs the Switch to examine the layer 2 part of each packet header.
•
IP instructs the Switch to examine the IP address in each frame's header.
•
Packet Content Mask instructs the Switch to examine the packet header.
•
This field will instruct the Switch to mask the packet header beginning with the offset value
specified:
value (0-15) - Enter a value in hex form to mask the packet from the beginning of the
•
packet to the 15th byte.
value (16-31) - Enter a value in hex form to mask the packet from byte 16 to byte 31.
•
value (32-47) - Enter a value in hex form to mask the packet from byte 32 to byte 47.
•
value (48-63) - Enter a value in hex form to mask the packet from byte 48 to byte 63.
•
value (64-79) - Enter a value in hex form to mask the packet from byte 64 to byte 79.
•
The Access Rule may be configured on a per-port basis by entering the port number of the
line card in the chassis into this field. The port list is specified by listing the lowest line card
number and the beginning port number on that line card, separated by a colon. Then the
highest line card number, and the highest port number of the range (also separated by a
colon) are specified. The beginning and end of the port list range are separated by a dash.
For example, 1:3 specifies line card number 1, port 3. 2:4 specifies line card number 2, port
4. 1:3 - 2:4 specifies all of the ports between line card 1, port 3 and line card 2, port 4 − in
numerical order. Entering all will denote all ports on the Switch.
in the Access Rule Table to view the following screen:
107