D-Link xstack DGS-3612G Instruction Manual page 181

Command
show access_profile
enable cpu_interface_filtering
disable cpu_interface_filtering
create cpu access_profile profile_id
delete cpu access_profile
config cpu access_profile
show cpu access_profile
Each command is listed, in detail, in the following sections.
create access_profile (for Ethernet)
Purpose Used to create an access profile on the Switch by examining the Ethernet part of the packet
header. Masks entered can be combined with the values the Switch finds in the specified
frame header fields. Specific values for the rules are entered using the config
access_profile command, below.
Syntax create access_profile profile_id <value 1-14> [ethernet {vlan | source_mac <macmask
000000000000-ffffffffffff> | destination_mac <macmask 000000000000-ffffffffffff> |
802.1p | ethernet_type}
xStack DGS-3612G Layer 3 Gigabit Ethernet Managed Switch CLI Manual
Parameters
65535>} | protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff>}]}
port [<portlist> | all] [permit {priority <value 0-7> {replace_priority} |
replace_dscp <value 0-63>} | rx_rate [no_limit | <value 1-156249>]} | deny]
| ipv6 {[{class <value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6
<ipv6addr> | destionation_ipv6 <ipv6addr>]} port [<portlist> | all] [permit
{priority <value 0-7> {replace_priority} | rx_rate [no_limit | <value 1-
156249>]] {time_range <range_name 32>} | delete access_id <value 1-
128>]
{profile_id <value 1-14>}
<value 1-5> [ethernet {vlan | source_mac <macmask> | destination_mac
<macmask> | 802.1p | ethernet_type} | ip {vlan | source_ip_mask
<netmask> | destination_ip_mask <netmask> | dscp | [icmp {type | code} |
igmp {type} | tcp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex
0x0-0xffff> | flag_mask [all | {urg | ack | psh | rst | syn | fin}]} |
udp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} |
protocol_id_mask {<hex 0x0-0xff> {user_define_mask <hex 0x0-0xffffffff>}]}
| packet_content_mask {offset 0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset 16-31 <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | {offset 32-47
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | {offset 48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | {offset 64-79 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}]
profile_id <value 1-5>
profile_id <value 1-5> [add access_id <value 1-100> [ethernet {vlan
<vlan_name 32> | source_mac <macaddr> | destination_mac <macaddr> |
802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff>} port [<portlist> | all]
[permit | deny] | ip {vlan <vlan_name 32> | source_ip <ipaddr> |
destination_ip <ipaddr> | dscp <value 0-63> | [icmp {type <value 0-255> |
code <value 0-255>} | igmp {type <value 0-255>} | tcp {src_port <value 0-
65535> | dst_port <value 0-65535> | urg | ack | psh | rst | syn | fin}]} | udp
{src_port <value 0-65535> | dst_port <value 0-65535>} | protocol_id <value
0-255> {user_define <hex 0x0-0xffffffff>}]} port [<portlist> | all] [permit |
deny] | packet_content {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset_16-31 <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-47
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} port [<portlist> | all] [permit
| deny]] {time_range <range_name 32>} | delete access_id <value 1-100>]
profile_id <value 1-5>
178