xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
251
Command Parameters
0-63> counter [enable | disable]} | mirror | deny] | ip {vlan <vlan_name 32> |
source_ip <ipaddr> | destination_ip <ipaddr> | dscp <value 0-63> | [icmp {type
<value 0-255> | code <value 0-255>} | igmp {type <value 0-255>} | tcp {src_port
<value 0-65535> | dst_port <value 0-65535> | urg | ack | psh | rst | syn | fin} |
udp {src_port <value 0-65535> | dst_port <value 0-65535>} | protocol_id <value
0 - 255> {user_define <hex 0x0-0xffffffff>}]} port [<portlist> | all] [permit {priority
<value 0-7> {replace_priority} | rx_rate {no_limit | <value 1-156249>]}
|replace_dscp <value 0-63>| counter [enable | disable]} | mirror | deny] |
packet_content {offset_chunk_1 <hex0x0-0xffffffff> | offset_chunk_2 <hex0x0-
0xffffffff> | offset_chunk_3 <hex0x0-0xffffffff> | offset_chunk_4 <hex0x0-
0xffffffff>} port [<portlist> | all] [permit {priority <value 0-7> {replace_priority} |
rx_rate {no_limit | <value 1-156249>]} | counter [enable | disable]} | mirror |
deny] | ipv6 {[{class <value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6
<ipv6addr> | destionation_ipv6 <ipv6addr>]} port [<portlist> | all] [permit {priority
<value 0-7> {replace_priority} | rx_rate {no_limit | <value 1-156249>]} | counter
[enable | disable]} | mirror | deny]] {time_range <range_name 32>} | delete
access_id <value 1-128>]
show access_profile
{profile_id <value 1-14>}
enable cpu_interface_filtering
disable cpu_interface_filtering
create cpu access_profile profile_id <value 1-5> [ethernet {vlan | source_mac <macmask> | destination_mac
<macmask> | ethernet_type} | ip {vlan | source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} | tcp
{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> | flag_mask
[all | {urg | ack | psh | rst | syn | fin}]} | udp {src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff>} | protocol_id_mask {<hex 0x0-0xff>
{user_define_mask <hex 0x0-0xffffffff>}]} | packet_content_mask {offset 0-15
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>|
offset 16-31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> | {offset 32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | {offset 48-63 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | {offset 64-79 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} | ipv6
{[{class | flowlabel} | source_ipv6_mask <ipv6mask> | destination_ipv6_mask
<ipv6mask>]}]
delete cpu access_profile
[profile_id <value 1-5> | all]
config cpu access_profile
profile_id <value 1-5> [add access_id <value 1-100> [ethernet {vlan
<vlan_name 32> | source_mac <macaddr> | destination_mac <macaddr> |
ethernet_type <hex 0x0-0xffff>} port [<portlist> | all] [permit | deny] | ip {vlan
<vlan_name 32> | source_ip <ipaddr> | destination_ip <ipaddr> | dscp <value 0-
63> | [icmp {type <value 0-255> | code <value 0-255>} | igmp {type <value 0-
255>} | tcp {src_port <value 0-65535> | dst_port <value 0-65535> | urg | ack |
psh | rst | syn | fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-
65535>} | protocol_id <value 0-255> {user_define <hex 0x0-0xffffffff>}]} port
[<portlist> | all] [permit | deny] | packet_content {offset_0-15 <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset_16-31 <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> |
offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} | ipv6 {[{class <value 0-255> |
flowlabel <hex 0x0-0xfffff>} source_ipv6 <ipv6addr> | destination_ipv6
<ipv6addr>]}] port [<portlist> | all] [permit | deny]] {time_range <range_name
32>} | delete access_id <value 1-100>]
show cpu access_profile
{profile_id <value 1-5>}
Each command is listed, in detail, in the following sections.
