D-Link DAS-3324, Быстрый старт

Страница: 11 / 14

D-Link Confidential
9
How to Setup Port VLAN ID (PVID)
Users can use the following command to setup port VLAN ID. The commands are listed as below.
Command Description
$modify gvrp port info portid
<bridge-port-id> portvalnid
<default-pvid>
Setup port VLAN ID
How to Filter MAC Address by Port
Users can use the following command to filter MAC address by port. The commands are listed as below.
Command Description
$create acl port macentry portId
<bridge-port-id> macaddr
00:00:00:01:02:03
Allow source address 00:00:00:01:02:03 access from
bridge port; bridge-port-id means other source
addresses from bridge port <bridge-port-id> are
denied
$create acl port macentry portId
<bridge-port-id> macaddr
00:00:00:01:02:04
Allow source address 00:00:00:01:02:04 access from
bridge port; bridge-port-id means other source
addresses from bridge port <bridge-port-id> are
denied
How to Deny MAC Address Globally
Users can use the following command to deny MAC Address globally. The commands are listed as below.
Command Description
$create acl global macentry macaddr
00:00:00:01:02:03 deny enable
Mac source address 00:00:00:01:02:03,04 access
from any bridge ports is denied
How to Filter Net BIOS
Users can use the following command to filter Net BIOS. The commands are listed as below.
Command Description
$create filter rule entry ruleid <id>
action drop description NETBIOS-TCP
$create filter subrule tcp ruleid <id>
subruleid 1 srcportfrom 137 srcportto 139
srcportcmp inrange
$modify filter rule entry ruleid <id>
status enable
$create filter rule map ifname all ruleid
<id> stageid 1
$create filter rule entry ruleid <id2>
action drop description NETBIOS-UDP
$create filter subrule udp ruleid <id2>
NETBIOS-NS: Name Service137 TCP/UDP
NETBIOS-DGM: Datagram Service 138 TCP/UDP
NETBIOS-SSN: Session Service 139 TCP/UDP