Table of Contents
Advertisement
xStack DGS/DXS-3300 Series Layer 3 Stackable Gigabit Ethernet Switch User Manual
CPU Access Profile
Due to a chipset limitation and needed extra switch security, the xStack DXS/DGS-3300 Switch Series incorporates CPU
Interface filtering. This added feature increases the running security of the Switch by enabling the user to create a list of
access rules for packets destined for the Switch's CPU interface. Employed similarly to the Access Profile feature
previously mentioned, CPU interface filtering examines Ethernet, IP, Packet Content Mask and IPv6 packet headers
destined for the CPU and will either forward them or filter them, based on the user's implementation. As an added feature
for the CPU Filtering, the xStack DXS/DGS-3300 Switch Series allows the CPU filtering mechanism to be enabled or
disabled globally, permitting the user to create various lists of rules without immediately enabling them. This setting can be
found in the Advanced Settings window in the configuration folder.
Creating an access profile for the CPU is divided into two basic parts. The first is to specify which part or parts of a frame
the Switch will examine, such as the MAC source address or the IP destination address. The second part is entering the
criteria the Switch will use to determine what to do with the frame. The following explanation describes the entire process.
CPU Access Profile Table
The CPU Access Profile Table displays the CPU Access Profile Table entries created on the Switch. To view the
configurations for an entry, click the hyperlinked Profile ID number.
Figure 6- 75. CPU Access Profile Table
To add an entry to the CPU Access Profile Table, click the Add button. This will open the CPU Access Profile
Configuration page, as shown below. There are four CPU Access Profile Configuration pages; one for Ethernet (or
MAC address-based) profile configuration, one for IP address-based profile configuration, one for the Packet Content
Mask and one for IPv6. The user may alternate between the four CPU Access Profile Configuration pages by using the
Type drop-down menu. The page shown below is the Ethernet CPU Access Profile Configuration page.
Figure 6- 76. CPU Access Profile Configuration window – Ethernet
117
Advertisement
Table of Contents
