xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
21
3
create access_profile
source_ip_mask <netmask> Specifies an IP address mask for the source IP address.
destination_ip_mask <netmask> Specifies an IP address mask for the destination IP
address.
dscp Specifies that the Switch will examine the DiffServ Code Point (DSCP) field in each
frame’s header.
icmp Specifies that the Switch will examine the Internet Control Message Protocol
(ICMP) field in each frame’s header.
type Specifies that the Switch will examine each frame’s ICMP Type field.
code Specifies that the Switch will examine each frame’s ICMP Code field.
igmp Specifies that the Switch will examine each frame’s Internet Group Management
Protocol (IGMP) field.
type – Specifies that the Switch will examine each frame’s IGMP Type field.
tcp Specifies that the Switch will examine each frames Transport Control Protocol (TCP)
field.
src_port_mask <hex 0x0-0xffff> Specifies a TCP port mask for the source port.
dst_port_mask <hex 0x0-0xffff> Specifies a TCP port mask for the destination port.
flag_mask – Enter the appropriate flag_mask parameter. All incoming packets have TCP
port numbers contained in them as the forwarding criterion. These numbers have flag
bits associated with them which are parts of a packet that determine what to do with
the packet. The user may deny packets by denying certain flag bits within the packets.
The user may choose among all, urg (urgent), ack (acknowledgement), psh (push), rst
(reset), syn (synchronize) and fin (finish).
udp Specifies that the Switch will examine each frame’s Universal Datagram Protocol (UDP)
field.
src_port_mask <hex 0x0-0xffff> Specifies a UDP port mask for the source port.
dst_port_mask <hex 0x0-0xffff> Specifies a UDP port mask for the destination port.
protocol_id_mask Specifies that the Switch will examine the protocol field in each packet
and if this field contains the value entered here, apply the following rules.
ipv6 - Specifies IPv6 filtering mask.
class – Specifies the IPv6 class.
flowlabel – Specifies the IPv6 flow label.
source_ipv6_mask – Specifies an IPv6 source submask. The device only supports filtering of
the last 44 bits (LSB) of the source IPv6 address.
src_port_mask – Specifies an IPv6 L4 (TCP/UDP) source port submask.
dst_port_mask - Specifies an IPv6 L4 (TCP/UDP) destination port submask.
packet_content_mask – A maximum of 11 offsets can be specified. Each offset defines
two bytes of data, which is identified as a single UDF field. The offset reference is also
configurable. It can be defined to start at the end of a tag, the end of an ether type or
the end of an IP header. To qualify the fields before the end of a tag, the destination
address, source address, and the VLAN tags are also included.
source_mac Specifies the source MAC mask.
destination_mac – Specifies the destination MAC mask.
c_tag – Specifies the 16-bit inner VLAN tag of the packet to mask. This constitutes the 3-bit
PCP, 1-bit CFI and 12-bit VID fields.
s_tag – Specifies the 16-bit outer VLAN tag of the packet to mask. This constitutes the 3-bit
PCP, 1-bit CFI and 12-bit VID fields.
offset1 – offset11 - Defines the UDF fields to which the device will filter. Each UDF field is a 2-
byte data which is n bytes away from the offset reference (where n is the offset value). The
To Next Page
Loading...
Need help?
General
