DGS-3700 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
Page | 555
Step 1:
create access_profile profile_id 1 profile_name 1 ethernet
source_mac FF-FF-FF-FF-FF-FF ethernet_type
•
Create access profile 1 to match Ethernet Type and Source
MAC address.
Step 2:
config access_profile profile_id 1 add access_id 1 ethernet
source_mac 01-02-03-04-05-06 ethernet_type 0x806 port
1-12 permit
•
Configure access profile 1
•
Only if the gateway’s ARP packet that contains the correct
Source MAC in the Ethernet frame can pass through the
switch.
Step 3:
create access_profile profile_id 2 profile_name 2
packet_content_mask offset_chunk_1 3 0x0000FFFF
offset_chunk_2 7 0x0000FFFF offset_chunk_3 8
0xFFFF0000
•
Create access profile 2
•
The first chunk starts from Chunk 3 mask for Ethernet Type.
(Blue in Table 6, 13
th
and 14
th
bytes)
•
The second chunk starts from Chunk 7 mask for Sender IP in
ARP packet. (Green in Table 6, 29
th
and 30
th
bytes)
•
The third chunk starts from Chunk 8 mask for Sender IP in
ARP packet. (Brown in Table 6, 31
st
and 32
nd
bytes)
Step 4:
config access_profile profile_id 2 add access_id 1
packet_content offset_chunk_1 0x00000806
offset_chunk_2 0x00000A5A offset_chunk_3 0x5A5A0000
port 1-12 deny
•
Configure access profile 2.
•
The rest of the ARP packets whose Sender IP claim they are the
gateway’s IP will be dropped.
Step 5:
save
•
Save configuration.