D-Link DGS-3224TGR - Switch, Руководство пользователя

Страница: 95 / 160

DGS-3224TGR Gigabit Ethernet Switch User’s Guide
83
Access Profile Selected profile based on Ethernet (MAC Address), IP address, or Packet Content Mask.
Ethernet instructs the Switch to examine the layer 2 part of each packet header.
IP instructs the Switch to examine the IP address in each frame's header.
Packet Content Mask instructs the Switch to examine the packet header
Mode Select Permit to specify that the packets that match the access profile are forwarded by
the Switch, according to any additional rule added (see below).
Select Deny to specify that packets that do not match the access profile are not forwarded
by the Switch and will be filtered.
VLAN Selecting this option instructs the Switch to examine the VLAN part of each packet header
and use this as the, or part of the criterion for forwarding.
replace priority
(0-7) Select this option to instruct the switch to replace the 802.1p value (in a packet that meets
the selected criteria). In this way, packets meeting the criteria can have their priority
handling modified for use within the switch, and then have a different priority value
assigned when they leave the switch.
replace_dscp (0-
63) Select this option to instruct the switch to replace the DSCP value (in a packet that meets
the selected criteria) with the value entered in the adjacent field.
Protocol Selecting this option instructs the Switch to examine the protocol type value in each
frame's header. You must then specify what protocol(s) to include according to the
following guidelines:
Select ICMP to instruct the Switch to examine the Internet Control Message Protocol
(ICMP) field in each frame's header.
Offset Settings:
This field will instruct the Switch to mask the packet header beginning with the offset value
specified:
value (0-15) - Enter a value in hex form to mask the packet from the beginning of the
packet to the 15th byte.
value (16-31) - Enter a value in hex form to mask the packet from byte 16 to byte 31.
value (32-47) - Enter a value in hex form to mask the packet from byte 32 to byte 47.
value (48-63) - Enter a value in hex form to mask the packet from byte 48 to byte 63.
value (64-79) - Enter a value in hex form to mask the packet from byte 64 to byte 79.
Port Security
A given port’s (or a range of port’s) dynamic MAC address learning can be locked such that the current source MAC
addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be
locked by changing the Admin State pull-down menu to
Enabled on the Port Security Settings – Edit window, shown
below, and clicking Apply .
This is a security feature that prevents unauthorized computers (with source MAC addresses unknown to the switch prior to
locking the port (or ports) from connecting to the switch’s locked ports and gaining access to the network.