Filter
Top Products
DES-3010F/DES-3010FL/DES-3010G/DES-3016/DES-3018/DES-3026 Fast Ethernet Switch Manual
122
Section 9
CPU Interface Filtering
CPU Interface Filtering State
CPU Interface Filtering Table
CPU Interface Filtering
Due to needed extra switch security, the DES-3000 switch series incorporates CPU Interface filtering. This
added feature increases the running security of the Switch by enabling the user to create a list of access rules
for packets destined for the Switch’s CPU interface. CPU interface filtering examines Ethernet, IP and
Packet Content Mask packet headers destined for the CPU and will either forward them or filter them, based
on the user’s implementation. As an added feature for the CPU Filtering, the DES-3000 switch series allows
the CPU filtering mechanism to be enabled or disabled globally, permitting the user to create various lists of
rules without immediately enabling them.
Creating an access profile for the CPU is divided into two basic parts. The first is to specify which part or
parts of a frame the Switch will examine, such as the MAC source address or the IP destination address. The
second part is entering the criteria the Switch will use to determine what to do with the frame. The entire
process is described below.
CPU Interface Filtering State Settings
In the following window, the user may globally enable or disable the CPU Interface Filtering mechanism by
using the pull-down menu to change the running state. Choose Enabled to enable CPU packets to be
scrutinized by the Switch and Disabled to disallow this scrutiny. To access this window, click CPU
Interface Filtering > CPU Interface Filtering State
Figure 9- 1. CPU Interface Filtering State Settings window
CPU Interface Filtering Table
The CPU Interface Filtering Table displays the CPU Access Profile Table entries created on the Switch.
To view the configurations for an individual entry, click the hyperlinked Profile ID number. To view this
table click, CPU Interface Filtering > CPU Interface Filtering Table