xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
67
create access_profile
Description
The create access_profile command creates access list rules.
Parameters
vlan
- Specifies a vlan mask. Only the last 12 bits of the mask will be considered.
source_mac
- Specifies the source mac mask.
destination_mac
- Specifies the destination mac mask.
802.1p
- Specifies 802.1p priority tag mask.
ethernet_type
- Specifies the ethernet type mask.
vlan
- Specifies a vlan mask. Only the last 12 bits of the mask will be considered.
source_ip_mask
- Specifies an IP source submask.
destination_ip_mask
- Specifies an IP destination submask.
dscp
- Specifies the dscp mask.
icmp
- Specifies that the rule applies to icmp traffic.
type
- Specifies that the rule applies to icmp type traffic.
code
- Specifies that the rule applies to icmp code traffic.
igmp
- Specifies that the rule applies to igmp traffic.
type
- Specifies that the rule applies to igmp type traffic.
tcp
- Specifies that the rule applies to tcp traffic.
src_port_mask
- Specifies the tcp source port mask.
dst_port_mask
- Specifies the tcp destination port mask.
flag_mask
- Specifies the TCP flag field mask.
udp
- Specifies that the rule applies to udp traffic.
src_port_mask
- Specifies theudp source port mask.
dst_port_mask
- Specifies theudp destination port mask.
protocod_id_mask
- Specifies that the rule applies to the ip protocol id traffic.
user_define_mask
- Specifies that the rule applies to the ip protocol id and the mask
options behind the IP header length is 20 bytes.
ipv6
- Specifies ipv6 filtering mask. The field is optional by project.
class
- Specifies the ipv6 class.
flowlabel
- Specifies the ipv6 flowlabel.
source_ipv6_mask
- Specifies an IPv6 source submask.
destination_ipv6_mask
- Specifies an IPv6 destination submask.
src_port_mask
- Specifies an IPv6 L4(TCP/UDP) source port submask
des_port_mask
- Specifies an IPv6 L4(TCP/UDP) destination port submask
profile_id
- Specifies the index of access list profile. The range is depend on project..
offset_chunk_1, offset_chunk_2, offset_chunk_3, offset_chunk_4
- Specifies the frame
content offset and mask. Up to 4 trunk offset and masks in maximum could be configured. A
trunk mask presents 4 bytes.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To create an Ethernet access profile: