To Next Page

To Previous Page

xStack

DGS-3426G Layer 2 Gigabit Ethernet Managed Switch

205

CPU Interface Filtering

Due to a chipset limitation and needed extra switch security, the xStack

DGS-3426G switch incorporates CPU Interface filtering.

This added feature increases the running security of the Switch by enabling the user to create a list of access rules for packets

destined for the Switch’s CPU interface. Employed similarly to the Access Profile feature previously mentioned, CPU interface

filtering examines Ethernet, IP and Packet Content Mask packet headers destined for the CPU and will either forward them or

filter them, based on the user’s implementation. As an added feature for the CPU Filtering, the xStack

DGS-3426G switch allows

the CPU filtering mechanism to be enabled or disabled globally, permitting the user to create various lists of rules without

immediately enabling them.

Creating an access profile for the CPU is divided into two basic parts. The first is to specify which part or parts of a frame the

Switch will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the

Switch will use to determine what to do with the frame. The entire process is described below.

CPU Interface Filtering State Settings

In the following window, the user may globally enable or disable the CPU Interface Filtering mechanism by using the drop-down

menu to change the running state. Choose Enabled to enable CPU packets to be scrutinized by the Switch and Disabled to

disallow this scrutiny.

To view this window, click ACL > CPU Interface Filtering > CPU Interface Filtering State as shown below:

Figure 5 - 26 CPU Interface Filtering State Settings window

CPU Interface Filtering Table

This window displays the CPU Access Profile Table entries created on the Switch.

To view this window, click ACL > CPU Interface Filtering > CPU Interface Filtering Table, as shown below:

Figure 5 - 27 CPU Interface Filtering Table window

To add an entry to this window, click the Add Profile button. This will open the CPU Interface Filtering Configuration

window, as shown below. To remove all CPU Interface Filtering Table entries, click the Clear All button. There are four Access

Profile Configuration windows; one for Ethernet (or MAC address-based) profile configuration, one for IP address-based profile

configuration, one for the Packet Content Mask and one for IPv6. You can switch between the four Access Profile Configuration

windows by using the Type drop-down menu. The window shown below is the Ethernet CPU Interface Filtering

Configuration window.

D-Link xStack DGS-3426G User Manual

Questions and Answers: