D-Link xStack DGS-3400 Series Cli Reference Manual page 72

xStack
create access_profile
Syntax
Description
Parameters
Restrictions
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
create access_profile [ethernet {vlan | source_mac <macmask 000000000000-
ffffffffffff> | destination_mac <macmask 000000000000-ffffffffffff> | 802.1p |
ethernet_type} | ip {vlan | source_ip_mask <netmask> | destination_ip_mask
<netmask> | dscp | [icmp {type | code} | igmp {type} | tcp {src_port_mask <hex 0x0-
0xffff> | dst_port_mask <hex 0x0-0xffff> | flag_mask [ all | {urg | ack | psh | rst | syn |
fin}]} | udp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} |
protocol_id_mask <hex 0x0-0xff> {user_define_mask <hex 0x0-0xffffffff>}]}|
packet_content_mask { offset_chunk_1 <value 0-31> <hex 0x0-0xffffffff> |
offset_chunk_2 <value 0-31> <hex 0x0-0xffffffff> | offset_chunk_3 <value 0-31> <hex
0x0-0xffffffff> | offset_chunk_4 <value 0-31> <hex 0x0-0xffffffff>}| ipv6 {class | flowlabel
| source_ipv6_mask <ipv6mask> | destination_ipv6_mask <ipv6mask> | [ tcp
{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} | udp
{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>}]}] profile_id <value
1-6>
The create access_profile command creates access list rules.
vlan - Specifies a vlan mask. Only the last 12 bits of the mask will be considered.
source_mac - Specifies the source mac mask.
destination_mac - Specifies the destination mac mask.
802.1p - Specifies 802.1p priority tag mask.
ethernet_type - Specifies the ethernet type mask.
vlan - Specifies a vlan mask. Only the last 12 bits of the mask will be considered.
source_ip_mask - Specifies an IP source submask.
destination_ip_mask - Specifies an IP destination submask.
dscp - Specifies the dscp mask.
icmp - Specifies that the rule applies to icmp traffic.
type - Specifies that the rule applies to icmp type traffic.
code - Specifies that the rule applies to icmp code traffic.
igmp - Specifies that the rule applies to igmp traffic.
type - Specifies that the rule applies to igmp type traffic.
tcp - Specifies that the rule applies to tcp traffic.
src_port_mask - Specifies the tcp source port mask.
dst_port_mask - Specifies the tcp destination port mask.
flag_mask - Specifies the TCP flag field mask.
udp - Specifies that the rule applies to udp traffic.
src_port_mask - Specifies theudp source port mask.
dst_port_mask - Specifies theudp destination port mask.
protocod_id_mask - Specifies that the rule applies to the ip protocol id traffic.
user_define_mask - Specifies that the rule applies to the ip protocol id and the mask
options behind the IP header length is 20 bytes.
ipv6 - Specifies ipv6 filtering mask. The field is optional by project.
class - Specifies the ipv6 class.
flowlabel - Specifies the ipv6 flowlabel.
source_ipv6_mask - Specifies an IPv6 source submask.
destination_ipv6_mask - Specifies an IPv6 destination submask.
src_port_mask - Specifies an IPv6 L4(TCP/UDP) source port submask
des_port_mask - Specifies an IPv6 L4(TCP/UDP) destination port submask
profile_id - Specifies the index of access list profile. The range is depend on project..
offset_chunk_1, offset_chunk_2, offset_chunk_3, offset_chunk_4 - Specifies the frame
content offset and mask. Up to 4 trunk offset and masks in maximum could be configured. A
trunk mask presents 4 bytes.
Only Administrator and Operator-level users can issue this command.
68