D-Link xStack Reference Manual page 205

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch WEB UI Reference Guide
Figure 6 - 92. Add CPU ACL Profile window for Packet Content example
Click on the box at the top of the table, which will then turn red and reveal parameters for configuration. To create a
new entry enter the correct information and click Create. To return to the CPU Access Profile List window, click
<<Back.
The following parameters can be set for Packet Content:
Parameter Description
Select Profile Enter an integer used to identify the access profile that will be configured with this command.
ID
Packet Content Allows users to examine up to five specified offset packet content chunks within a packet at one
time and specifies the frame content offset, mask, and layer. There are five packet content chunk
offsets that can be configured. A packet content chunk mask presents four bytes. Up to five packet
content offset chunks can be selected:
Offset 0-15 mask - Enter a value in hex form to mask the packet from byte 0 to byte 15.
Offset 16-31 mask - Enter a value in hex form to mask the packet from byte 16 to byte 31.
Offset 32-47 mask - Enter a value in hex form to mask the packet from byte 32 to byte 47.
Offset 48-63 mask - Enter a value in hex form to mask the packet from byte 48 to byte 63.
Offset 64-79 mask - Enter a value in hex form to mask the packet from byte 64 to byte 79.
Note: Only one packet content mask profile can be created.
With this advanced unique Packet Content Mask (also known as Packet Content Access Control
List - ACL), the D-Link xStack
common ARP Spoofing attack that is wide spread today. This is why the Packet Content ACL is
able to inspect any specified content of a packet in different protocol layers.
Click Apply to implement changes made.
Click Create to view the new CPU Access Profile List entry in the CPU Access Profile List window shown below. To
add another CPU Access Profile, click Add CPU ACL Profile. To delete a profile, click the corresponding Delete
button. To view the specific configurations for an entry, click the Show Details button. To add a rule to the CPU
Access Profile entry, click the Add/View Rules button.
®
switch family can effectively mitigate some network attacks like the
204