xStack DGS/DXS-3300 Series Layer 3 Stackable Gigabit Ethernet Switch CLI Manual
221
config access_profile profile_id (IP)
mirror
- Selecting
mirror
specifies that packets that match the access
profile are mirrored to a port defined in the
config mirror port
command.
Port Mirroring must be enabled and a target port must be set. Remember,
Port Mirroring cannot cross-box, that is they cannot span across switches
in a switch stack.
delete access_id <value 1-65535>
−
Use this command to delete a
specific rule from the IP profile. Up to 65535 rules may be specified for the
IP access profile.
Restrictions Only
administrator-level users can issue this command.
NOTE:
When using the ACL Mirror function, ensure that the Port Mirroring
function is enabled and a target mirror port is set.
Example usage:
To configure a rule for the IP access profile:
DGS-3324SRi:4#config access_profile profile_id 2 add access_id 2 ip
protocol_id 2 port 1:2 deny
Command: config access_profile profile_id 2 add access_id 2 ip
protocol_id 2 port 1:2 deny
Success.
DGS-3324SRi:4#
create access_profile (packet content mask)
Purpose
Used to create an access profile on the Switch by examining the
Ethernet part of the packet header. Packet content masks entered
will specify certain bytes of the packet header to be identified by the
Switch. When the Switch recognizes a packet with the identical byte
as the one configured, it will either forward or filter the packet, based
on the users command. Specific values for the rules are entered
using the
config access_profile
command, below.
Syntax
create access_profile packet_content_mask {offset_0-15 <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_16-31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-47 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff>} profile_id <value 1-8>}
