D-Link xStack DGS-3426 Cli Manual page 158

create access_profile (IP)
Description
Parameters
Parameters
Restrictions
Example usage:
To configure a rule for the IP access profile:
DGS-3400:4# create access_profile profile_id 2 ip protocol_id_mask 0xFF
Command: create access_profile profile_id 2 ip protocol_id_mask 0xFF
Success.
DGS-3400:4#
xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
This command will allow the user to create a profile for packets that may be accepted or
denied by the Switch by examining the IP part of the packet header. Specific values for
rules pertaining to the IP part of the packet header may be defined by configuring the
config access_profile command for IP, as stated below.
ip - Specifies that the Switch will look into the IP fields in each packet with special
emphasis on one or more of the following:
• profile_id <value 1-6> - Specifies an index number between 1 and 6 that will identify
the access profile being created with this command.
• source_ip_mask <netmask> − Specifies an IP address mask for the source IP
address.
destination_ip_mask <netmask> − Specifies an IP address mask for the destination
•
IP address.
dscp − Specifies that the Switch will examine the DiffServ Code Point (DSCP) field in
•
each frame's header.
icmp − Specifies that the Switch will examine the Internet Control Message Protocol
•
(ICMP) field in each frame's header.
igmp − Specifies that the Switch will examine each frame's Internet Group
•
Management Protocol (IGMP) field.
tcp − Specifies that the Switch will examine each frames Transport Control Protocol
•
(TCP) field.
• src_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the source port.
• dst_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the destination
port.
flag_mask [all | {urg | ack | psh | rst | syn | fin}] – Enter the appropriate flag_mask
•
parameter. All incoming packets have TCP port numbers contained in them as the
forwarding criterion. These numbers have flag bits associated with them which are
parts of a packet that determine what to do with the packet. The user may deny
packets by denying certain flag bits within the packets. The user may choose
between all, urg (urgent), ack (acknowledgement), psh (push), rst (reset), syn
(synchronize) and fin (finish).
udp − Specifies that the Switch will examine each frame's Universal Datagram
•
Protocol (UDP) field.
• src_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the source port.
• dst_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the destination
port.
protocol_id_mask − Specifies that the Switch will examine each frame's Protocol ID
•
field.
• <hex 0x0-0xfffffff> - Enter a hexidecimal value that will identify the protocol to be
discovered in the packet header.
• user_define <hex 0x0-0xfffffff> − Enter a hexidecimal value that will identify the
user defined protocol to be discovered in the packet header.
Only administrator-level users can issue this command.
155