D-Link DWS-3160-24TC, Справочное руководство CLI

Страница: 948 / 983

DWS-3160 Series Gigabit Ethernet Unified Switch CLI Reference Guide
944
Table 7. A Completed ARP Packet Contained in an Ethernet Frame
Command Description
Step 1:
create access_profile_id 1
profile_name 1 ethernet source_mac
FF-FF-FF-FF-FF-FF ethernet_type
1. Create access profile 1 to match Ethernet
Type and Source MAC address.
Step 2:
config access_profile profile_id 1
add access_id 1 ethernet
source_mac 01-02-03-04-05-06
ethernet_type 0x806 port 1-12
permit
2. Configure access profile 1
3. Only if the gateway’s ARP packet that
contains the correct Source MAC in the
Ethernet frame can pass through the
Switch.
Step 3:
create access_profile profile_id 2
profile_name 2 packet_content_mask
offset1 l2 0 0xFF offset2 l2 1
0xFF offset3 l2 16 0xFF offset4 l2
17 0xFF offset5 l2 18 0xFF offset6
l2 19 0xFF
4. Create access profile 2
5. The first chunk starts from offset 1, 2
mask for Ethernet Type. (Blue in Table 6,
13th and 14th bytes)
6. The second chunk starts from offset 3, 4
mask for Sender IP in ARP packet.
(Green in Table 6, 29th and 30th bytes)
7. The third chunk starts from offset 5, 6
mask for Sender IP in ARP packet.
(Brown in Table 6, 31st and 32nd bytes)
Step 4:
config access_profile profile_id 2
add access_id 1 packet_content
offset1 l2 0 0x08 offset2 l2 1
0x06 offset3 l2 16 0x0A offset4 l2
17 0x5A offset5 l2 18 0x5A offset6
l2 19 0x5A port 1-12 deny
8. Configure access profile 2.
9. The rest of the ARP packets whose
Sender IP claim they are the gateway’s IP
will be dropped.
Step 5:
save
10. Save configuration.