xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
223
DGS–3426:5#show access
profile
Command: show access_profile
Access Profile Table
Access Profile ID: 1 TYPE : Ethernet
====================================================================
MASK Option :
VLAN 802.1p
––––––––––– ––––––
Access ID : 3 Mode: Permit(replaced) priority: 1 RX Rate(64Kbps):
no_limit
Ports: 1:1
––––––––––– ––––––
Trinity 1
======================================================================
Access Profile ID: 2 TYPE : IP
======================================================================
MASK Option :
Protocol ID
––––––––––––––––––––
Access ID : 2 Mode: Deny
Ports: 1:2
––––––––––––––––––––
2
======================================================================
Access Profile ID: 3 TYPE : Packet Content
======================================================================
MASK Option :
Offset 0–15 : 0xFFFFFFFF 0xFFFFFFFF 0xFFFFFFFF 0xFFFFFFFF
Offset 16–31 : 0x0000FFFF 0xFFFF0000 0x0000000F 0x0F000000
Access ID : 1 Mode: Deny
Ports: 1:1
Offset 0–15 : 0x11111111 0x11111111 0x11111111 0x11111111
Offset 16–31 : 0x00001111 0x11110000 0x00000001 0x01000000
======================================================================
Total Entries: 3
DGS–3426:5#
create cpu access_profile
Purpose
Used to create an access profile specifically for CPU Interface Filtering on the Switch
and to define which parts of each incoming frame’s header the Switch will examine.
Masks can be entered that will be combined with the values the Switch finds in the
specified frame header fields. Specific values for the rules are entered using the config
cpu access_profile command, below.
Syntax
create cpu access_profile [ethernet {vlan | source_mac <macaddr 000000000000–
ffffffffffff> | destination_mac <macaddr 000000000000–ffffffffffff> | ethernet_type}
(1) | ip {vlan | source_ip_mask <netmask> | destination_ip_mask <netmask> | dscp
| [icmp {type | code} | igmp {type} | tcp {src_port_mask <hex 0x0–0xffff> |
dst_port_mask <hex 0x0–0xffff> | flag_mask [all | {urg | ack | psh | rst | syn | fin}
(1) ]} | udp {src_port_mask <hex 0x0–0xffff> | dst_port_mask <hex 0x0–0xffff>} |
protocol_id_mask {<hex 0x0–0xff> {user_define_mask <hex 0x0–0xffffffff>}]} (1) |
packet_content_mask {offset 0–15 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex
0x0–0xffffffff> <hex 0x0–0xffffffff>| offset 16–31 <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset 32–47 <hex 0x0–0xffffffff>
<hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset 48–63 <hex
