D-Link DES-1228/ME User Manual page 151

Click Apply to set this entry in the Switch's memory.
To establish the rule for a previously created CPU Access Profile:
Click ACL > CPU Interface Filtering > CPU Interface Filtering Profile Table.
In this window, the user may add a rule to a previously created CPU access profile by clicking the corresponding Modify button
of the entry to configure Ethernet or IP.
Click the Add button to continue on to the CPU Interface Filtering Rule Table window. A new and unique window, for
Ethernet and IP will open as shown in the examples below.
DES-1228/ME Layer 2 Fast Ethernet Managed Switch
•
Select Type to further specify that the access profile will apply an ICMP type
value, or specify Code to further specify that the access profile will apply an
ICMP code value.
Select IGMP to instruct the Switch to examine the Internet Group Management Protocol
(IGMP) field in each frame's header.
•
Select Type to further specify that the access profile will apply an IGMP type
value.
Select TCP to use the TCP port number contained in an incoming packet as the forwarding
criterion. Selecting TCP requires that you specify a source port mask and/or a destination
port mask. The user may also identify which flag bits to filter. Flag bits are parts of a packet
that determine what to do with the packet. The user may filter packets by filtering certain flag
bits within the packets, by checking the boxes corresponding to the flag bits of the TCP field.
The user may choose between urg (urgent), ack (acknowledgement), psh (push), rst (reset),
syn (synchronize), fin (finish).
•
src port mask - Specify a TCP port mask for the source port in hex form (hex
0x0-0xffff), which you wish to filter.
•
dest port mask - Specify a TCP port mask for the destination port in hex form
(hex 0x0-0xffff) which you wish to filter.
Select UDP to use the UDP port number contained in an incoming packet as the forwarding
criterion. Selecting UDP requires that you specify a source port mask and/or a destination
port mask.
•
src port mask - Specify a UDP port mask for the source port in hex form (hex
0x0-0xffff).
•
dest port mask - Specify a UDP port mask for the destination port in hex form
(hex 0x0-0xffff).
protocol id - Enter a value defining the protocol ID in the packet header to mask. Specify the
protocol ID mask in hex form (hex 0x0-0xff).
Figure 9-14. CPU Interface Filtering Profile Table window - Add
Figure 9-15. CPU Interface Filtering Rule Table window
138