D-Link DGS-3700 Series Reference Manual page 555

DGS-3700 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
Step 1: create access_profile profile_id 1 profile_name 1 ethernet
source_mac FF-FF-FF-FF-FF-FF ethernet_type
config access_profile profile_id 1 add access_id 1 ethernet
Step 2:
source_mac 01-02-03-04-05-06 ethernet_type 0x806 port
1-12 permit
Step 3: create access_profile profile_id 2 profile_name 2
packet_content_mask offset_chunk_1 3 0x0000FFFF
offset_chunk_2 7 0x0000FFFF offset_chunk_3 8
0xFFFF0000
config access_profile profile_id 2 add access_id 1
Step 4:
packet_content offset_chunk_1 0x00000806
offset_chunk_2 0x00000A5A offset_chunk_3 0x5A5A0000
port 1-12 deny
Step 5: save
• Create access profile 1 to match Ethernet Type and Source
MAC address.
• Configure access profile 1
• Only if the gateway's ARP packet that contains the correct
Source MAC in the Ethernet frame can pass through the
switch.
• Create access profile 2
• The first chunk starts from Chunk 3 mask for Ethernet Type.
(Blue in Table 6, 13
• The second chunk starts from Chunk 7 mask for Sender IP in
ARP packet. (Green in Table 6, 29
• The third chunk starts from Chunk 8 mask for Sender IP in
ARP packet. (Brown in Table 6, 31
• Configure access profile 2.
• The rest of the ARP packets whose Sender IP claim they are the
gateway's IP will be dropped.
• Save configuration.
Page | 555
th th
and 14 bytes)
th th
and 30 bytes)
st nd
and 32 bytes)