D-Link DAS-3626 User Manual page 99

The following parameters can be set, for Packet Content:
Parameter Description
Chunk Allows users to examine up to 4 specified offset_chunks within a packet at one time and specifies
the frame content offset and mask. There are 4 chunk offsets and masks that can be configured. A
chunk mask presents 4 bytes. 4 offset_chunks can be selected from a possible 32 predefined
offset_chunks as described below:
offset_chunk_1,
offset_chunk_2,
offset_chunk_3,
offset_chunk_4.
chunk0
B126,
B127,
B0,
B1
Example:
offset_chunk_1 0 0xffffffff will match packet byte offset 126,127,0,1
offset_chunk_1 0 0xffff will match packet byte offset,0,1
Note: Only one packet_content_mask profile can be created.
With this advanced unique Packet Content Mask (also known as Packet Content Access Control
List - ACL), the D-Link switch family can effectively mitigate some network attacks like the
common ARP Spoofing attack that is wide spread today. This is why the Packet Content ACL is
able to inspect any specified content of a packet in different protocol layers.
Click Apply to implement changes made.
Click Create to view the new Access Profile List entry in the Access Profile List table shown below. To add another
Access Profile click Add ACL Profile. To delete a profile click the corresponding Delete button, to view the specific
configurations for an entry click the Show Details button. To add a rule to the Access Profile entry, click the Add/View
Rules button.
To view the configurations for previously configured entry click on the corresponding Show Details Button which will
display the following window.
DAS-3626 VDSL2 Switch User Manual
chunk1 chunk2 ......
B2, B6, ......
B3, B7,
B4, B8,
B5 B9
Figure 119. Access Profile List (Packet Content)
chunk29 chunk30
B114, B118,
B115, B119,
B116, B120,
B117 B121
99
chunk31
B122,
B123,
B124,
B125