D-Link DGS-3224TGR - Switch User Manual - Port Security

DGS-3224TGR Gigabit Ethernet Switch User’s Guide

83 

Access Profile 

Selected profile based on Ethernet (MAC Address), IP address, or Packet Content Mask.  

Ethernet instructs the Switch to examine the layer 2 part of each packet header.  

IP instructs the Switch to examine the IP address in each frame's header.  

      Packet Content Mask instructs the Switch to examine the packet header 

Mode 

Select Permit to specify that the packets that match the access profile are forwarded by 

the Switch, according to any additional rule added (see below). 

Select Deny to specify that packets that do not match the access profile are not forwarded 

by the Switch and will be filtered. 

VLAN 

Selecting this option instructs the Switch to examine the VLAN part of each packet header 

and use this as the, or part of the criterion for forwarding. 

replace priority 

(0-7) 

Select this option to instruct the switch to replace the 802.1p value (in a packet that meets 

the selected criteria). In this way, packets meeting the criteria can have their priority 

handling modified for use within the switch, and then have a different priority value 

assigned when they leave the switch. 

replace_dscp (0-

63) 

Select this option to instruct the switch to replace the DSCP value (in a packet that meets 

the selected criteria) with the value entered in the adjacent field. 

Protocol 

Selecting this option instructs the Switch to examine the protocol type value in each 

frame's header. You must then specify what protocol(s) to include according to the 

following guidelines:  

Select ICMP to instruct the Switch to examine the Internet Control Message Protocol 

(ICMP) field in each frame's header. 

Offset Settings: 

This field will instruct the Switch to mask the packet header beginning with the offset value 

specified: 

value (0-15) - Enter a value in hex form to mask the packet from the beginning of the 

packet to the 15th byte. 

value (16-31) - Enter a value in hex form to mask the packet from byte 16 to byte 31. 

value (32-47) - Enter a value in hex form to mask the packet from byte 32 to byte 47. 

value (48-63) - Enter a value in hex form to mask the packet from byte 48 to byte 63. 

      value (64-79) - Enter a value in hex form to mask the packet from byte 64 to byte 79. 

Port Security  

A given port’s (or a range of port’s) dynamic MAC address learning can be locked such that the current source MAC 

addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be 

locked by changing the Admin State pull-down menu to Enabled on the Port Security Settings – Edit window, shown 

below, and clicking Apply. 

This is a security feature that prevents unauthorized computers (with source MAC addresses unknown to the switch prior to 

locking the port (or ports) from connecting to the switch’s locked ports and gaining access to the network.