DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
203
config access_profile command for IP, as stated below.
Parameters profile_id <value 1-15> – Specifies an index number between 1 and
15 that identifies the access profile being created with this
command.
ip - Specifies that the Switch examines the IP fields in each packet
with special emphasis on one or more of the following:
• source_ip_mask <netmask> – Specifies an IP address mask
for the source IP address.
• destination_ip_mask <netmask> – Specifies an IP address
mask for the destination IP address.
• dscp – Specifies that the Switch examines the DiffServ
Code Point (DSCP) field in each frame’s header.
• icmp – Specifies that the Switch examines the Protocol field
in each frame’s IP header , and that the value must be 1
(Internet Control Message Protocol- ICMP) for the action to
take place.
• type – Specifies that the Switch examines each frame’s
ICMP Type field.
• code – Specifies that the Switch examines each frame’s
ICMP Code field.
• igmp – Specifies that the Switch examine each frame’s
protocol field and it must be 2 (Internet Group Management
Protocol-IGMP) for the action to take place.
• type – Specifies that the Switch examine each frame’s
IGMP Type field.
• tcp – Specifies that the Switch examines each frames
protocol field and its value must be 6 (Transmission Control
Protocol-TCP) for the action to take place.
• src_port_mask <hex 0x0-0xffff> – Specifies a TCP port
mask for the source port.
• dst_port_mask <hex 0x0-0xffff> – Specifies a TCP port
mask for the destination port.
• flag_mask {+ | –} {urg | ack | psh | rst | syn | fin } –
Specifies the appropriate flag_mask parameter. All
incoming packets have TCP flag bits associated with
them which are parts of a packet that determine what to
do with the packet. The user may deny packets by
denying certain flag bits within the packets. The user
may choose between all, urg (urgent), ack
(acknowledgement), psh (push), rst (reset), syn
(synchronize) and fin (finish).
• udp – Specifies that the Switch examines each frame’s
protocol field and it’s value must be 17 (User Datagram
Protocol-UDP) in order for the action to take place..
• src_port_mask <hex 0x0-0xffff> – Specifies a UDP port
mask for the source port.
• dst_port_mask <hex 0x0-0xffff> – Specifies a UDP port
mask for the destination port.
Restrictions Only administrator or operate-level users can issue this command.
Example usage:
To create an IP access profile:
DGS3100# create access_profile profile_id 2 ip source_ip_mask 20.0.0.0
To Next Page
Loading...
Need help?
General
