xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
241
create cpu access_profile
•
source_mac <macmask> -
Specifies to examine the source MAC address mask. MAC
address entries may be made in the following format:
000000000000-FFFFFFFFFFFF
•
destination_mac <macmask> -
Specifies to examine the destination MAC address mask.
MAC address entries may be made in the following format:
000000000000-FFFFFFFFFFFF
•
ethernet_type
−
Specifies that the Switch will examine the Ethernet type value in each
frame’s header.
ip
−
Specifies that the Switch will examine the IP address in each frame’s header.
•
vlan
−
Specifies a VLAN mask.
•
source_ip_mask <netmask>
−
Specifies an IP address mask for the source IP address.
•
destination_ip_mask <netmask>
−
Specifies an IP address mask for the destination IP
address.
•
dscp
−
Specifies that the Switch will examine the DiffServ Code Point (DSCP) field in each
frame’s header.
•
icmp
−
Specifies that the Switch will examine the Internet Control Message Protocol (ICMP)
field in each frame’s header.
•
type
−
Specifies that the Switch will examine each frame’s ICMP Type field.
•
code
−
Specifies that the Switch will examine each frame’s ICMP Code field.
•
igmp
−
Specifies that the Switch will examine each frame’s Internet Group Management
Protocol (IGMP) field.
•
type
−
Specifies that the Switch will examine each frame’s IGMP Type field.
•
tcp
−
Specifies that the Switch will examine each frames Transport Control Protocol (TCP)
field.
•
src_port_mask <hex 0x0-0xffff>
−
Specifies a TCP port mask for the source port.
•
dst_port_mask <hex 0x0-0xffff>
−
Specifies a TCP port mask for the destination port.
•
flag_mask [all | {urg | ack | psh | rst | syn | fin}]
– Enter the appropriate flag_mask
parameter. All incoming packets have TCP port numbers contained in them as the
forwarding criterion. These numbers have flag bits associated with them which are parts of
a packet that determine what to do with the packet. The user may deny packets by denying
certain flag bits within the packets. The user may choose between
all
,
urg
(urgent),
ack
(acknowledgement),
psh
(push),
rst
(reset),
syn
(synchronize) and
fin
(finish).
•
udp
−
Specifies that the Switch will examine each frame’s User Datagram Protocol (UDP)
field.
•
src_port_mask <hex 0x0-0xffff>
−
Specifies a UDP port mask for the source port.
•
dst_port_mask <hex 0x0-0xffff>
−
Specifies a UDP port mask for the destination port.
•
protocol_id_mask <hex 0x0-0xff>
−
Specifies that the Switch will examine each frame’s
Protocol ID field using the hex form entered here.
•
user_define_mask <hex 0x0-0xffffffff>
−
Specifies that the rule applies to the IP protocol
ID and the mask options behind the IP header.
•
packet_content_mask
– Specifies that the Switch will mask the packet header beginning
with the offset value specified as follows:
•
offset_0-15
- Enter a value in hex form to mask the packet from byte
0
to byte
15
.
•
offset_16-31
- Enter a value in hex form to mask the packet from byte
16
to byte
31
.
•
offset_32-47
- Enter a value in hex form to mask the packet from byte
32
to byte
47
.
•
offset_48-63
- Enter a value in hex form to mask the packet from byte
48
to byte
63
.
•
offset_64-79
- Enter a value in hex form to mask the packet from byte
64
to byte
79
.
ipv6
– Denotes that IPv6 packets will be examined by the Switch for forwarding or filtering based
on the rules configured in the
config access_profile
command for IPv6. IPv6 packets may be
identified by the following:
•
class
– Entering this parameter will instruct the Switch to examine the
class
field of the IPv6
header. This class field is a part of the packet header that is similar to the Type of Service
(ToS) or Precedence bits field in IPv4.
•
flowlabel
– Entering this parameter will instruct the Switch to examine the
flow label
field of
the IPv6 header. This flow label field is used by a source to label sequences of packets
such as non-default quality of service or real time service packets.
•
source_ipv6_mask <ipv6mask>
- Specifies an IP address mask for the source IPv6
