xStack DGS-3612G Layer 3 Gigabit Ethernet Managed Switch CLI Manual
Command Parameters
65535>} | protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff>}]}
port [<portlist> | all] [permit {priority <value 0-7> {replace_priority} |
replace_dscp <value 0-63>} | rx_rate [no_limit | <value 1-156249>]} | deny]
| ipv6 {[{class <value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6
<ipv6addr> | destionation_ipv6 <ipv6addr>]} port [<portlist> | all] [permit
{priority <value 0-7> {replace_priority} | rx_rate [no_limit | <value 1-
156249>]] {time_range <range_name 32>} | delete access_id <value 1-
128>]
show access_profile
{profile_id <value 1-14>}
enable cpu_interface_filtering
disable cpu_interface_filtering
create cpu access_profile profile_id <value 1-5> [ethernet {vlan | source_mac <macmask> | destination_mac
<macmask> | 802.1p | ethernet_type} | ip {vlan | source_ip_mask
<netmask> | destination_ip_mask <netmask> | dscp | [icmp {type | code} |
igmp {type} | tcp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex
0x0-0xffff> | flag_mask [all | {urg | ack | psh | rst | syn | fin}]} |
udp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} |
protocol_id_mask {<hex 0x0-0xff> {user_define_mask <hex 0x0-0xffffffff>}]}
| packet_content_mask {offset 0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset 16-31 <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | {offset 32-47
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | {offset 48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | {offset 64-79 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}]
delete cpu access_profile
profile_id <value 1-5>
config cpu access_profile
profile_id <value 1-5> [add access_id <value 1-100> [ethernet {vlan
<vlan_name 32> | source_mac <macaddr> | destination_mac <macaddr> |
802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff>} port [<portlist> | all]
[permit | deny] | ip {vlan <vlan_name 32> | source_ip <ipaddr> |
destination_ip <ipaddr> | dscp <value 0-63> | [icmp {type <value 0-255> |
code <value 0-255>} | igmp {type <value 0-255>} | tcp {src_port <value 0-
65535> | dst_port <value 0-65535> | urg | ack | psh | rst | syn | fin}]} | udp
{src_port <value 0-65535> | dst_port <value 0-65535>} | protocol_id <value
0-255> {user_define <hex 0x0-0xffffffff>}]} port [<portlist> | all] [permit |
deny] | packet_content {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset_16-31 <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-47
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} port [<portlist> | all] [permit
| deny]] {time_range <range_name 32>} | delete access_id <value 1-100>]
show cpu access_profile
profile_id <value 1-5>
Each command is listed, in detail, in the following sections.
create access_profile (for Ethernet)
Purpose
Used to create an access profile on the Switch by examining the Ethernet part of the packet
header. Masks entered can be combined with the values the Switch finds in the specified
frame header fields. Specific values for the rules are entered using the
config
access_profile
command, below.
Syntax
create access_profile profile_id <value 1-14> [ethernet {vlan | source_mac <macmask
000000000000-ffffffffffff> | destination_mac <macmask 000000000000-ffffffffffff> |
802.1p | ethernet_type}
178