xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
214
create access_profile (IP)
Parameters
•
type
−
Specifies that the Switch will examine each frame’s IGMP Type field.
•
tcp
−
Specifies that the Switch will examine each frames Transport Control Protocol
(TCP) field.
•
src_port_mask <hex 0x0–0xffff>
−
Specifies a TCP port mask for the source port.
•
dst_port_mask <hex 0x0–0xffff>
−
Specifies a TCP port mask for the destination
port.
•
flag_mask [all | {urg | ack | psh | rst | syn | fin}]
– Enter the appropriate flag_mask
parameter. All incoming packets have TCP port numbers contained in them as the
forwarding criterion. These numbers have flag bits associated with them which are
parts of a packet that determine what to do with the packet. The user may deny
packets by denying certain flag bits within the packets. The user may choose
between
all
,
urg
(urgent),
ack
(acknowledgement),
psh
(push),
rst
(reset),
syn
(synchronize) and
fin
(finish).
•
udp
−
Specifies that the Switch will examine each frame’s Universal Datagram
Protocol (UDP) field.
•
src_port_mask <hex 0x0–0xffff>
−
Specifies a UDP port mask for the source port.
•
dst_port_mask <hex 0x0–0xffff>
−
Specifies a UDP port mask for the destination
port.
•
protocol_id_mask
−
Specifies that the Switch will examine each frame’s Protocol ID
field.
•
<hex 0x0–0xff> –
Enter a hexadecimal value that will identify the protocol to be
discovered in the packet header.
•
user_define <hex 0x0–0xffffffff>
−
Enter a hexadecimal value that will identify the
user defined protocol to be discovered in the packet header.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure a rule for the IP access profile:
D G S – 3 4 2 6 : 5 # c r e a t e a c c e s s _ p r o f i l e p r o f i l e _ i d 2 i p p r o t o c o l _ i d _ m a s k 0 x F F
C o m m a n d : c r e a t e a c c e s s _ p r o f i l e p r o f i l e _ i d 2 i p p r o t o c o l _ i d _ m a s k 0 x F F
S u c c e s s .
D G S – 3 4 2 6 : 5 #
config access_profile profile_id (IP)
Purpose
Used to configure the IP access profile on the Switch and to define specific values for the
rules that will be used to by the Switch to determine if a given packet should be forwarded
or filtered. Masks entered using the
create access_profile
command will be combined,
using a logical AND operational method, with the values the Switch finds in the specified
frame header fields.
Syntax
config access_profile profile_id <value 1-6> [add access_id [auto_assign | <value
1-128> ip <vlan<vlan_name 32> {source_ip <ipaddr> | destination_ip <ipaddr> |
dscp <value 0-63> | icmp {type <value 0-255> | code <value 0-255>} | igmp {type
<value 0-255>} | tcp {src_port <value 0-65535> | dst_port <value 0-65535> | urg | ack
| psh | rst | syn | fin} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} |
protocol_id <value 0-255> {user_define <hex 0x0-0xffffffff}]} (1) | port [<portlist> |
all] [permit {priority <value 0-7> {replace_priority} | rx_rate {no_limit | <value 1-
156249>]} | replace_dscp <value 0-63> | counter [enable | disable]} | mirror | deny]
{time_range <range_name 32>} | delete access_id <value 1-128>]
Description
This command is used to define the rules used by the Switch to either filter or forward
packets based on the IP part of each packet header.
