D-Link DGS-3200 SERIES Cli Manual page 443

create access_profile profile_id 1 ethernet source_mac
Step1
FF-FF-FF-FF-FF-FF ethernet_type
config access_profile profile_id 1 add access_id 1
ethernet source_mac 01-02-03-04-05-06
Step2
ethernet_type 0x806
port 1-27 permit
create access_profile profile_id 2 packet_content_mask
offset_chunk_1 3 0x0000FFFF
offset_chunk_2 7 0x0000FFFF
Step3
offset_chunk_3 8 0xFFFF0000
Sdr IP(Last 2-byte)
config access_profile profile_id 2 add access_id 1
packet_content
offset_chunk_1
offset_chunk_2
Step4
offset_chunk_3
port 1-27 deny
Save
Step5
DGS-3200 Series Layer 2 Gigabit Managed Switch CLI Manual
Command
Ethernet Type(2-byte)
Sdr IP(First 2-byte)
0x00000806
Ethernet Type(2-byte): ARP
0x00000A5A
Sdr IP(First 2-byte): 10.90
0x5A5A0000
Sdr IP(Last 2-byte): 90.90
Create access profile 1
–
To match Ethernet Type
address.
Configure access profile 1
–
Only if the gateway's ARP packet that contains
–
the correct
pass through the switch.
Create access profile 2
–
The first Chunk starts from Chunk 3: mask for
–
Ethernet Type
The second Chunk starts from Chunk 7: mask for
–
Sender IP
Table-6: 29
The third Chunk starts from Chunk 8: mask for
–
Sender IP
Table-6: 31
Configure access profile 2
–
–
The rest ARP packets whose
–
they are the gateway's IP will be dropped.
Save config
–
443
Description
and Source MAC
Source MAC in Ethernet frame can
(Blue in Table-6: 13
(First 2-byte) in ARP packet (Green in
th th
& 30 bytes)
(Last 2-byte) in ARP packet (Brown in
st nd
& 32 bytes)
Sender IP
th th
& 14 bytes)
claim