D-Link DGS-1210/ME series, Справочное руководство

Страница: 497 / 522

DGS-1210/ME Metro Ethernet Switch CLI Reference Guide
477
Command Parameter
[permit | deny]] delete access_id <value 1-5>]
delete cpu
access_profile
profile_id <value 1-3>
show cpu
access_profile
{profile_id <value 1-3>}
enable
cpu_interface_filtering
disable
cpu_interface_filtering
config flow_meter
profile_id
<value 1-6> access_id <value 1-250> [delete | rate <value 64-1024000>]
burst_size <value 0-1016> rate_exceed [drop_packet | remark_dscp <value 0-
63>]
show flow_meter {profile_id <value 1-6> | access_id <value 1-250>}
Each command is listed in detail, as follows:
create access_profile
Purpose To create an access profile on the Switch by examining the Ethernet
part of the packet header. Masks entered are combined with the
values the Switch finds in the specified frame header fields. Specific
values for the rules are entered using the
config access_profile
command, below.
Syntax create access_profile [ ethernet {vlan | source_mac <macmask>
| destination_mac <macmask> | 802.1p | ethernet_type} | ip
{ source_ip_mask <netmask> | destination_ip_mask <netmask>
| dscp | [ icmp { type | code } | igmp { type } | tcp
{ src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-
0xffff> | flag_mask} | udp { src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff> } | protocol_id_mask <0x0-0xff>
]} | packet_content_mask {offset1 [ l2 | l3 | l4 ] <value 0-31>
<hex (0x0-0xffff)> | offset2 [ l2 | l3 | l4 ] <value 0-31> <hex 0x0-
0xffff>| offset3 [ l2 | l3 | l4 ] <value 0-31> <hex 0x0-0xffff>|
offset4 [ l2 | l3 | l4 ] <value 0-31> <hex 0x0-0xffff>} | ipv6 { class
| source_ipv6_mask <ipv6mask> | destination_ipv6_mask
<ipv6mask> | [tcp { src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff>} | udp { src_port_mask <hex
0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} | icmp { type |
code } ]} profile_id <value 1-6> ]
Description
The create access_profile command creates a profile for packets
that may be accepted or denied by the Switch by examining the
Ethernet part of the packet header. Specific values for rules
pertaining to the Ethernet part of the packet header may be defined
by configuring the
config access_profile command for Ethernet, as
stated below.
Parameters ethernet - Specifies that the Switch examines the layer 2 part of
each packet header with emphasis on one or more of the following:
•
vlan – Specifies that the Switch examine the VLAN part of
each packet header.
•
source_mac <macmask> – Specifies a MAC address mask
for the source MAC address. This mask is entered in the
following hexadecimal format: 000000000000-