D-Link xStack Reference Manual page 190

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch WEB UI Reference Guide
The following parameters can be set for Packet Content:
Parameter Description
MAC Address
Tick either Source MAC Mask and enter the MAC source address mask or Destination MAC Mask
and enter the MAC destination address mask.
Tag Tick Customer Tag (0-FFFF) and enter the appropriate customer tag, in hex form (hex 0x0-0xffff),
and/or Service Tag (0-FFFF) and enter the appropriate service tag, in hex form (hex 0x0-0xffff).
Packet Content Allows users to examine up to eleven specified offset packet content chunks within a packet at
one time and specifies the frame content offset, mask, and layer. There are eleven packet content
chunk offsets that can be configured. A packet content chunk mask presents two bytes. Up to
eleven packet content offset chunks can be selected:
Offset 1 (0-31) _____mask______Layer ___,
Offset 2 (0-31) _____mask______Layer ___,
Offset 3 (0-31) _____mask______Layer ___,
Offset 4 (0-31) _____mask______Layer ___,
Offset 5 (0-31) _____mask______Layer ___,
Offset 6 (0-31) _____mask______Layer ___,
Offset 7 (0-31) _____mask______Layer ___,
Offset 8 (0-31) _____mask______Layer ___,
Offset 9 (0-31) _____mask______Layer ___,
Offset 10 (0-31) _____mask______Layer ___,
Offset 11 (0-31) _____mask______Layer ___
With this advanced unique Packet Content Mask (also known as Packet Content Access Control
List - ACL), the D-Link xStack
common ARP Spoofing attack that is wide spread today. This is why the Packet Content ACL is
able to inspect any specified content of a packet in different protocol layers.
Click Apply to implement changes made.
Click Create to view the new Access Profile List entry in the Access Profile List window shown below. To add
another Access Profile, click Add ACL Profile. To delete a profile, click the corresponding Delete button. To view the
specific configurations for an entry, click the Show Details button. To add a rule to the Access Profile entry, click the
Add/View Rules button. To remove all listed profiles, click on the Delete All button.
Figure 6 - 67. Access Profile List window for Packet Content example
To view the configurations for a previously configured entry, click on the corresponding Show Details button, which
will display the following window:
®
switch family can effectively mitigate some network attacks like the
189