Access Profile Table; Configuring The Access Profile Table - D-Link xStack DGS-3324SRi User Manual

xStack DGS/DXS-3300 Series Layer 3 Stackable Gigabit Ethernet Switch User Manual

Access Profile Table

Configuring the Access Profile Table

Access profiles allow the user to establish criteria to determine whether the Switch will forward packets based on the
information contained in each packet's header. These criteria can be specified on a basis of VLAN, MAC address, IP
address and now IPv6.
The user now also has the option of mirroring packets to a selected port for further scrutiny. Configured in the Mode field
of the Access Profile Rule, the Switch administrator may now copy and send packets that match the criteria specified to a
mirror port, in conjunction with the Port Mirroring function. For this mirror function to work, the Port Mirroring function
must be globally enabled and a Mirror target port must be set. Certain restrictions apply to the Access Profile Mirror
function:
1. Since this function is capable through the FFP (FAST Filter Processor) of the chip, only ingress packets can be
mirrored.
2. The ACL Mirror function is resticted to the rules of the Port Mirroring function. Therefore, mirrored ports can not
be cross-box, that is, the ports cannot be set across switches in a switch stack. Also, the Port Mirroring function
shares the mirror port with the ACL Mirror function.
Creating an access profile is divided into two basic parts. The first is to specify which part or parts of a frame the Switch
will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the
Switch will use to determine what to do with the frame. The entire process is described below in two parts.
To display the currently configured Access Profiles on the Switch, open the Configuration folder and click on the Access
Profile Table link. This will open the Access Profile Table page, as shown below.
To add an entry to the Access Profile Table, click the Add button. This will open the Access Profile Configuration page,
as shown below. There are three Access Profile Configuration pages; one for Ethernet (or MAC address-based) profile
configuration, one for IP address-based profile configuration, one for the Packet Content Mask and one for IPv6. The
user can switch between the three Access Profile Configuration pages by using the Type drop-down menu. The page
shown below is the Ethernet Access Profile Configuration page.
Figure 6- 58. Access Profile Table
101