D-Link Xstack DES-3528 Series Reference Manual page 198

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide
Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet
Select ACL Type
content. This will change the window according to the requirements for the type of profile.
Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header.
Select IPv4 ACL to instruct the Switch to examine the IPv4 address in each frame's header.
Select IPv6 ACL to instruct the Switch to examine the IPv6 address in each frame's header.
Select Packet Content ACL to instruct the Switch to examine the packet content in each
frame's header.
Allows users to examine up to four specified offset_chunks within a packet at one time and
Packet Content
specifies the frame content offset and mask. There are four chunk offsets and masks that can
be configured. A chunk mask presents four bytes. Four offset_chunks can be selected from a
possible 32 predefined offset_chunks as described below:
chunk0
B126,
B127,
B0,
B1
Example:
offset_chunk_1 0 0xffffffff will match packet byte offset 126,127,0,1
offset_chunk_1 0 0x0000ffff will match packet byte offset,0,1
With this advanced unique Packet Content Mask (also known as Packet Content Access Control List -
ACL), the
common ARP Spoofing attack that is wide spread today. This is why the Packet Content ACL
is able to inspect any specified content of a packet in different protocol layers.
Click the Select button to select an ACL type.
Click the Create button to create a profile.
Click the <<Back button to discard the changes made and return to the previous page.
After clicking the Show Details button, the following page will appear:
Figure 7-19 Access Profile Detail Information (Packet Content ACL)
• offset_chunk_1,
• offset_chunk_2,
• offset_chunk_3,
• offset_chunk_4.
chunk1 chunk2
B2, B6,
B3, B7,
B4, B8,
B5 B9
NOTE: Only one packet_content_mask profile can be created.
®
D-Link xStack switch family can effectively mitigate some network attacks like the
...... chunk29 chunk30
...... B114, B118,
B115,
B119,
B116, B120,
B117 B121
191
chunk31
B122,
B123,
B124,
B125