xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
210
Command Parameters
{src_port <value 0-65535> | dst_port <value 0-65535>} | protocol_id <value 0 -
255> {user_define <hex 0x0-0xffffffff>}]} (1) port [<portlist> | all] [permit {priority
<value 0-7> {replace_priority} | rx_rate {no_limit | <value 1-156249>]}
|replace_dscp <value 0-63>| counter [enable | disable]} | mirror | deny] |
packet_content {offset_chunk_1 <hex0x0-0xffffffff> | offset_chunk_2 <hex0x0-
0xffffffff> | offset_chunk_3 <hex0x0-0xffffffff> | offset_chunk_4 <hex0x0-0xffffffff>}
(1) port [<portlist> | all] [permit {priority <value 0-7> {replace_priority} | rx_rate
{no_limit | <value 1-156249>]} |replace_dscp <value 0-63> | counter [enable |
disable]} | mirror | deny] | ipv6 {[{class <value 0-255> | flowlabel <hex 0x0-
0xfffff> | source_ipv6 <ipv6addr> | destination_ipv6 <ipv6addr>]} (1) port
[<portlist> | all] [permit {priority <value 0-7> {replace_priority} | rx_rate {no_limit |
<value 1-156249>]} | counter [enable | disable]} | mirror | deny]] {time_range
<range_name 32>} | delete access_id <value 1-128>]
show access_profile {profile_id <value 1–6>}
enable cpu_interface_filtering
disable cpu_interface_filtering
create cpu access_profile [ethernet {vlan | source_mac <macaddr 000000000000–ffffffffffff> |
destination_mac <macaddr 000000000000–ffffffffffff> | ethernet_type} (1) | ip
{vlan | source_ip_mask <netmask> | destination_ip_mask <netmask> | dscp |
[icmp {type | code} | igmp {type} | tcp {src_port_mask <hex 0x0–0xffff> |
dst_port_mask <hex 0x0–0xffff> | flag_mask [all | {urg | ack | psh | rst | syn | fin}
(1) ]} | udp {src_port_mask <hex 0x0–0xffff> | dst_port_mask <hex 0x0–0xffff>} |
protocol_id_mask {<hex 0x0–0xff> {user_define_mask <hex 0x0–0xffffffff>}]} (1)
| packet_content_mask {offset 0–15 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex
0x0–0xffffffff> <hex 0x0–0xffffffff>| offset 16–31 <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset 32–47 <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset 48–
63 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> | offset 64–79 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff>} (1) ipv6 {[class | flowlabel] (1) | source_ipv6_mask
<ipv6mask> | destination_ipv6_mask <ipv6mask>]} (1) profile_id <value 1–5>
delete cpu access_profile [profile_id <value 1–5> | all]
config cpu access_profile
profile_id <value 1–5> [add access_id <value 1–100> [ethernet {vlan
<vlan_name 32> | source_mac <macaddr 000000000000–ffffffffffff> |
destination_mac <macaddr 000000000000–ffffffffffff> | ethernet_type <hex 0x0–
0xffff>} (1) | ip {vlan <vlan_name 32> | source_ip <ipaddr> | destination_ip
<ipaddr> | dscp <value 0–63> | [icmp {type <value 0–255> | code <value 0–255>}
| igmp {type <value 0–255>} | tcp {src_port <value 0–65535> | dst_port <value 0–
65535> | urg | ack | psh | rst | syn | fin}]} | udp {src_port <value 0–65535> |
dst_port <value 0–65535>} | protocol_id <value 0 – 255> {user_define <hex 0x0–
0xffffffff>}]} (1) | packet_content {offset_0–15 <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff>| offset_16–31 <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset_32–
47 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> | offset_48–63 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff> | offset_64–79 <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff>} (1) | ipv6 {[{class <value 0-255>
| flowlabel <hex 0x0-0xfffff>} (1) | source_ipv6 <ipv6addr> | destination_ipv6
<ipv6addr> ]} (1) ] port [<portlist> | all] [permit | deny] {time_range <range_name
32>} | delete access_id <value 1–100>]
show cpu access_profile {profile_id <value 1–5>}
Each command is listed, in detail, in the following sections.
