xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
235
create access_profile (packet content )
is divided up into four “chunks” where each chunk represents 4 bytes. Values within
the packet header chunk to be identified are to be marked in hexadecimal form in the
“mask” field. The following table will help you identify the bytes in the respective
chunks.
chunk0 chunk1 chunk2…….. chunk29 chunk30
chunk31
b126 b2 b6 b114 b118 b122
b127 b3 b7 b115 b119 b123
b1 b4 b8 b116 b120 b124
b0 b5 b9 b117 b121 b125
Check the box of the chunk, from 1 to 4, you wish to examine and then enter the
hexadecimal value in the
mask
field.
profile_id <value 1-14>
- Specifies an index number between
1
and
14
that will
identify the access profile being created with this command.
Restrictions
Only administrator-level and operator-level users can issue this command.
Example usage:
To create an Access profile by packet content mask:
DGS-3627:5#create access_profile packet_content_mask offset_chunk_1 1
0xFFFFFFFF profile_id 3
Command: create access_profile packet_content_mask offset_chunk_1 1
0xFFFFFFFF profile_id 3
Success.
DGS-3627:5#
config access_profile profile_id (packet content)
Purpose
To configure the rule for a previously created access profile command based on the packet
content mask. Packet content masks entered will specify certain bytes of the packet header
to be identified by the Switch. When the Switch recognizes a packet with the identical byte
as the one configured, it will either forward or filter the packet, based on the users command
entered here.
Syntax
config access_profile profile_id <value 1-14> [add access_id <value 1-128>
packet_content {offset_chunk_1 <hex 0x0-0xffffffff> | offset_chunk_2 <hex 0x0-
0xffffffff> | offset_chunk_3 <hex 0x0-0xffffffff> | offset_chunk_4 <hex 0x0-0xffffffff>}
port [<portlist> | all] [permit {priority <value 0-7> {replace_priority} | rx_rate {no_limit |
<value 1-156249>]} | counter [enable | disable]} | mirror | deny} {time_range
<range_name 32>} | delete access_id <value 1-128>]
Description
This command is used to set the rule for a previously configured access profile setting
based on packet content mask. These rules will determine if the Switch will forward or filter
the identified packets, based on user configuration specified in this command. Users will set
bytes to identify by entering them in hex form, offset from the first byte of the packet.
Parameters
profile_id <value 1-14>
- Enter an integer between
1
and
14
that is used to identify the
access profile that will be configured with this command. This value is assigned to the
access profile when it is created with the
create access_profile
command. The lower the
profile ID, the higher the priority the rule will be given.
add access_id
- Adds an additional rule to the above specified access profile.
•
auto_assign
– Adding this parameter will automatically assign an access_id to
identify the rule.
•
<value 1-128> -
The value specifies the relative priority of the additional rule. Up
to 128 different rules may be configured for the Ethernet access profile.
offset_chunk_1 –
The offset field is used to examine the packet header which is divided up
