DGS-3710 Series Layer 2 Managed Gigabit Switch CLI Reference Guide
88
<hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff>}(1) | ipv6 {[{class | flowlabel} | source_ipv6_mask <ipv6mask> |
destination_ipv6_mask <ipv6mask>]}(1)]
config cpu access_profile profile_id
<value 1-5> [add access_id <value 1-100> [ethernet {[vlan
<vlan_name 32> | vlan_id <vlanid 1-4094>] | source_mac <macaddr> | destination_mac
<macaddr> | 802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff>} (1)| ip {[vlan <vlan_name
32> | vlan_id <vlanid 1-4094>] | source_ip <ipaddr> | destination_ip <ipaddr> | dscp <value 0-
63> | [icmp {type <value 0-255> | code <value 0-255>} | igmp {type <value 0-255>} | tcp
{src_port <value 0-65535> | dst_port <value 0-65535> | flag [all | {urg | ack | psh | rst | syn |
fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} | protocol_id <value 0-255>
{user_define <hex 0x0-0xffffffff>}]}(1) | packet_content {offset_0-15 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}(1) | ipv6 {[{class <value 0-255> |
flowlabel <hex 0x0-0xfffff>} | source_ipv6 <ipv6addr> | destination_ipv6 <ipv6addr>]}(1)] port
[<portlist> | all] [permit | deny] {time_range <range_name 32>} | delete access_id <value 1-
100>]
show cpu access_profile
{profile_id <value 1-5>}
enable cpu_interface_filtering
disable cpu_interface_filtering
config flow_meter
[profile_id <value 1-12> | profile_name <name 1-32>] access_id <value 1-
128> [rate [<value 0-1000000>] {burst_size [<value 0-16384>]} rate_exceed [drop_packet |
remark_dscp <value 0-63>] | tr_tcm cir <value 0-1000000> {cbs <value 0-16384>} pir <value
0-1000000> {pbs <value 0-16384>} {[color_blind | color_aware]} {conform [permit |
replace_dscp <value 0-63>] {counter [enable | disable]}} exceed [permit {replace_dscp <value
0-63>} | drop] {counter [enable | disable]} violate [permit {replace_dscp <value 0-63>} | drop]
{counter [enable | disable]} | sr_tcm cir <value 0-1000000> cbs <value 0-16384> ebs <value
0-16384> {[color_blind | color_aware]} {conform [permit | replace_dscp <value 0-63>] {counter
[enable | disable]}} exceed [permit {replace_dscp <value 0-63>} | drop] {counter [enable |
disable]} violate [permit {replace_dscp <value 0-63>} | drop] {counter [enable | disable]} |
delete]
show flow_meter
{[profile_id <value 1-12> | profile_name <name 1-32>] {access_id <value1-
128>}}
6-1
create access_profile profile_id
Description
This command is used to create access list profiles.
Note:
Please see the “
Error! Reference source not found.
Error! Reference
source not found.
” section for a configuration example and further information.
Format
create access_profile profile_id <value 1-12> profile_name <name 1-32> [ethernet {vlan
{<hex 0x0-0x0fff>} | source_mac <macmask> | destination_mac <macmask> | 802.1p |
ethernet_type}(1) | ip {vlan {<hex 0x0-0x0fff>} | source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} | tcp
{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> | flag_mask [all | {urg |
ack | psh | rst | syn | fin}]} | udp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-
0xffff>} | protocol_id_mask <hex 0x0-0xff> {user_define_mask <hex 0x0-0xffffffff>}]}(1) |