DGS-3224TGR Gigabit Ethernet Switch User’s Guide
83
Access Profile
Selected profile based on Ethernet (MAC Address), IP address, or Packet Content Mask.
Ethernet
instructs the Switch to examine the layer 2 part of each packet header.
IP
instructs the Switch to examine the IP address in each frame's header.
Packet Content Mask
instructs the Switch to examine the packet header
Mode
Select Permit to specify that the packets that match the access profile are forwarded by
the Switch, according to any additional rule added (see below).
Select Deny to specify that packets that do not match the access profile are not forwarded
by the Switch and will be filtered.
VLAN
Selecting this option instructs the Switch to examine the VLAN part of each packet header
and use this as the, or part of the criterion for forwarding.
replace priority
(0-7)
Select this option to instruct the switch to replace the 802.1p value (in a packet that meets
the selected criteria). In this way, packets meeting the criteria can have their priority
handling modified for use within the switch, and then have a different priority value
assigned when they leave the switch.
replace_dscp (0-
63)
Select this option to instruct the switch to replace the DSCP value (in a packet that meets
the selected criteria) with the value entered in the adjacent field.
Protocol
Selecting this option instructs the Switch to examine the protocol type value in each
frame's header. You must then specify what protocol(s) to include according to the
following guidelines:
Select ICMP to instruct the Switch to examine the Internet Control Message Protocol
(ICMP) field in each frame's header.
Offset Settings:
This field will instruct the Switch to mask the packet header beginning with the offset value
specified:
value (0-15)
- Enter a value in hex form to mask the packet from the beginning of the
packet to the 15th byte.
value (16-31)
- Enter a value in hex form to mask the packet from byte 16 to
byte 31.
value (32-47)
- Enter a value in hex form to mask the packet from byte 32 to byte 47.
value (48-63)
- Enter a value in hex form to mask the packet from byte 48 to byte 63.
value (64-79)
- Enter a value in hex form to mask the packet from byte 64 to byte 79.
Port Security
A given port’s (or a range of port’s) dynamic MAC address learning can be locked such that the current source MAC
addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be
locked by changing the Admin State pull-down menu to
Enabled
on the
Port Security Settings – Edit
window, shown
below, and clicking
Apply
.
This is a security feature that prevents unauthorized computers (with source MAC addresses unknown to the switch prior to
locking the port (or ports) from connecting to the switch’s locked ports and gaining access to the network.
