DGS-3710 Series Layer 2 Managed Gigabit Switch CLI Reference Guide
102
6-9
create cpu access_profile profile_id
Description
This command is used to create CPU access list profiles.
Format
create cpu access_profile profile_id <value 1-5> [ethernet {vlan | source_mac <macmask> |
destination_mac <macmask> | 802.1p | ethernet_type}(1) | ip {vlan | source_ip_mask
<netmask> | destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} | tcp
{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> | flag_mask [all | {urg |
ack | psh | rst | syn | fin}]} | udp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-
0xffff>} | protocol_id_mask <hex 0x0-0xff> {user_define_mask <hex 0x0-0xffffffff>}]}(1) |
packet_content_mask {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_16-31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff>}(1) | ipv6 {[{class | flowlabel} | source_ipv6_mask <ipv6mask>
| destination_ipv6_mask <ipv6mask>]}(1)]
Parameters
profile_id
- Specifies the index of the CPU access list profile.
<value 1-5>
- Specifies a value between 1 and 5.
ethernet
- Specifies an Ethernet CPU access control list rule.
vlan
- Specifies a VLAN mask.
source_mac
- Specifies the source MAC mask.
<macmask>
- Specifies the source MAC mask.
destination_mac
- Specifies the destination MAC mask.
<macmask>
- Specifies the destination MAC mask.
802.1p
- Specifies the 802.1p priority tag mask.
ethernet_type
- Specifies the Ethernet type mask.
ip
- Specifies an IP CPU access control list rule.
vlan
- Specifies a VLAN mask.
source_ip_mask
- Specifies an IP source submask.
<netmask>
- Specifies an IP source submask.
destination_ip_mask
- Specifies an IP destination submask.
<netmask>
- Specifies an IP destination submask.
dscp
- Specifies the DSCP mask.
icmp
- Specifies that the rule applies to ICMP traffic.
type
- (Optional) Specifies the ICMP packet type.
code
- (Optional) Specifies the ICMP code.
igmp
- Specifies that the rule applies to IGMP traffic.
type
- (Optional) Specifies the IGMP packet type.
tcp
- Specifies that the rule applies to TCP traffic.
src_port_mask
- (Optional) Specifies the TCP source port mask.
<hex 0x0-0xffff>
- Specifies the TCP source port mask.
dst_port_mask
- (Optional) Specifies the TCP destination port mask.
<hex 0x0-0xffff>
- Specifies the TCP destination port mask.
flag_mask
- (Optional) Specifies the TCP flag field mask.
all
– (Optional) Specifies to check all paramenters below.
urg
- (Optional) Specifies Urgent Pointer field significant.
ack
- (Optional) Specifies Acknowledgment field significant.
psh
- (Optional) Specifies Push Function.