D-Link xStack Reference Manual page 347

®
xStack DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch Web UI Reference Guide
Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet
header.
Select IPv4 ACL to instruct the Switch to examine the IPv4 address in each frame's header.
Select IPv6 ACL to instruct the Switch to examine the IPv6 address in each frame's header.
Select Packet Content to instruct the Switch to examine the packet content in each frame's
header.
Packet Content Allows users to examine up to 4 specified offset_chunks within a packet at one time and
specifies the frame content offset and mask. There are 4 chunk offsets and masks that can
be configured. A chunk mask presents 4 bytes. 4 offset_chunks can be selected from a
possible 32 predefined offset_chunks as described below:
offset_chunk_1,
offset_chunk_2,
offset_chunk_3,
offset_chunk_4.
chunk0
B126,
B127,
B0,
B1
Example:
offset_chunk_1 0 0xffffffff will match packet byte offset 126,127,0,1
offset_chunk_1 0 0x0000ffff will match packet byte offset,0,1
Note: Only one packet_content_mask profile can be created.
With this advanced unique Packet Content Mask (also known as Packet Content Access Control List -
ACL), the
common ARP Spoofing attack that is wide spread today. This is why the Packet Content
ACL is able to inspect any specified content of a packet in different protocol layers.
Click the Select button to select an ACL type.
Click the <<Back button to discard the changes made and return to the previous page.
Click the Create button to create a profile.
After clicking the Show Details button, the following page will appear:
Figure 8-19 Access Profile Detail Information (Packet Content ACL) window
Click the Show All Profiles button to navigate back to the Access Profile List window.
chunk1 chunk2 ......
B2, B6, ......
B3, B7,
B4, B8,
B5 B9
®
D-Link xStack switch family can effectively mitigate some network attacks like the
chunk29 chunk30
B114, B118,
B115, B119,
B116,
B120,
B117 B121
346
chunk31
B122,
B123,
B124,
B125