D-Link xStack DGS-3426 Cli Manual page 155

Command
show access_profile
enable
cpu_interface_filtering
disable
cpu_interface_filtering
create cpu
access_profile
profile_id
delete cpu
access_profile
config cpu
access_profile
show cpu
access_profile
Each command is listed, in detail, in the following sections.
create access_profile (for Ethernet)
Purpose Used to create an access profile on the Switch by examining the Ethernet part of the packet
header. Masks entered can be combined with the values the Switch finds in the specified
frame header fields. Specific values for the rules are entered using the config
access_profile command, below.
Syntax create access_profile profile_id <value 1-6> [ethernet {vlan | source_mac <macmask
000000000000-ffffffffffff> | destination_mac <macmask 000000000000-ffffffffffff> |
802.1p | ethernet_type}
Description This command will allow the user to create a profile for packets that may be accepted or
denied by the Switch by examining the Ethernet part of the packet header. Specific values for
rules pertaining to the Ethernet part of the packet header may be defined by configuring the
config access_profile command for Ethernet, as stated below.
Parameters profile_id <value 1-6> - Specifies an index number between 1 and 6 that will identify the
xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
Parameters
0xfffff> | source_ipv6 <ipv6addr> | destionation_ipv6 <ipv6addr>]} port [<portlist> | all]
[permit {priority <value 0-7> {replace_priority} | rx_rate [no_limit | <value 1-156249>]] |
delete access_id <value 1-128>]
{profile_id <value 1-6>}
<value 1-5> [ethernet {vlan | source_mac <macmask> | destination_mac <macmask> |
802.1p | ethernet_type} | ip {vlan | source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} | tcp
{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> | flag_mask [all | {urg
| ack | psh | rst | syn | fin}]} | udp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex
0x0-0xffff>} | protocol_id_mask {<hex 0x0-0xff> {user_define_mask <hex 0x0-
0xffffffff>}]} | packet_content_mask {offset 0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset 16-31 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | {offset 32-47 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | {offset 48-63 <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | {offset 64-79 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}]
profile_id <value 1-5>
profile_id <value 1-5> [add access_id <value 1-100> [ethernet {vlan <vlan_name 32> |
source_mac <macaddr> | destination_mac <macaddr> | 802.1p <value 0-7> |
ethernet_type <hex 0x0-0xffff>} port [<portlist> | all] [permit | deny] | ip {vlan <vlan_name
32> | source_ip <ipaddr> | destination_ip <ipaddr> | dscp <value 0-63> | [icmp {type
<value 0-255> | code <value 0-255>} | igmp {type <value 0-255>} | tcp {src_port <value
0-65535> | dst_port <value 0-65535> | urg | ack | psh | rst | syn | fin}]} | udp {src_port
<value 0-65535> | dst_port <value 0-65535>} | protocol_id <value 0 - 255> {user_define
<hex 0x0-0xffffffff>}]} port [<portlist> | all] [permit | deny] | packet_content {offset_0-15
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset_16-
31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> |
offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff>} port [<portlist> | all] [permit | deny]] | delete access_id <value 1-
100>]
profile_id <value 1-5>
fil b i t d ith thi d
152