Specifications

xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
Command Parameters
<value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6 <ipv6addr> |
destionation_ipv6 <ipv6addr>]} port [<portlist> | all] [permit {priority <value 0-
7> {replace_priority} | rx_rate [no_limit | <value 1-156249>]} | deny]]
{time_range <range_name 32>} | delete access_id <value 1-128>]
show access_profile {profile_id <value 1-6>}
create cpu access_profile [ethernet {vlan | source_mac <macaddr 000000000000-ffffffffffff> |
destination_mac <macaddr 000000000000-ffffffffffff> | 802.1p | ethernet_type}
| ip {vlan | source_ip_mask <netmask> | destination_ip_mask <netmask> |
dscp | [icmp {type | code} | igmp {type} | tcp {src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff> | flag_mask [all | {urg | ack | psh | rst | syn |
fin}]} | udp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>}
| protocol_id_mask {<hex 0x0-0xff> {user_define_mask <hex 0x0-0xffffffff>}]} |
packet_content_mask {offset 0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset 16-31 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | {offset 32-47 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | {offset
48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | {offset 64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff>}] profile_id <value 1-5>
delete cpu access_profile profile_id <value 1-5>
config cpu access_profile
profile_id <value 1-5> [add access_id <value 1-100> [ethernet {vlan
<vlan_name 32> | source_mac <macaddr 000000000000-ffffffffffff> |
destination_mac <macaddr 000000000000-ffffffffffff> | 802.1p <value 0-7> |
ethernet_type <hex 0x0-0xffff>} port [<portlist> | all] [permit | deny] | ip {vlan
<vlan_name 32> | source_ip <ipaddr> | destination_ip <ipaddr> | dscp <value
0-63> | [icmp {type <value 0-255> | code <value 0-255>} | igmp {type <value
0-255>} | tcp {src_port <value 0-65535> | dst_port <value 0-65535> | urg | ack
| psh | rst | syn | fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-
65535>} | protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff>}]} port
[<portlist> | all] [permit | deny] | packet_content {offset_0-15 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset_16-
31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} port
[<portlist> | all] [permit | deny] {time_range <range_name 32>} | delete
access_id <value 1-100>]
show cpu access_profile {profile_id <value 1-5>}
enable cpu_interface_filtering
disable cpu_interface_filtering
Each command is listed, in detail, in the following sections.
create access_profile (for Ethernet)
Purpose Used to create an access profile on the Switch by examining the Ethernet part of the packet
header. Masks entered can be combined with the values the Switch finds in the specified
frame header fields. Specific values for the rules are entered using the config
access_profile command, below.
Syntax
create access_profile profile_id <value 1-6> [ethernet {vlan | source_mac <macmask
000000000000-ffffffffffff> | destination_mac <macmask 000000000000-ffffffffffff> |
802.1p | ethernet_type}
Description This command will allow the user to create a profile for packets that may be accepted or
denied by the Switch by examining the Ethernet part of the packet header. Specific values for
rules pertaining to the Ethernet part of the packet header may be defined by configuring the
config access_profile command for Ethernet, as stated below.
185