Filter
Top Products
xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Guide
208
create access_profile
Protocol (IGMP) field.
type – Specifies that the Switch will examine each frame’s IGMP Type field.
tcp − Specifies that the Switch will examine each frames Transport Control Protocol (TCP)
field.
src_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the source port.
dst_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the destination port.
flag_mask – Enter the appropriate flag_mask parameter. All incoming packets have TCP
port numbers contained in them as the forwarding criterion. These numbers have flag
bits associated with them which are parts of a packet that determine what to do with
the packet. The user may deny packets by denying certain flag bits within the packets.
The user may choose among all, urg (urgent), ack (acknowledgement), psh (push), rst
(reset), syn (synchronize) and fin (finish).
udp − Specifies that the Switch will examine each frame’s Universal Datagram Protocol (UDP)
field.
src_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the source port.
dst_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the destination port.
protocol_id_mask − Specifies that the Switch will examine the protocol field in each packet
and if this field contains the value entered here, apply the following rules.
ipv6 - Specifies IPv6 filtering mask.
class – Specifies the IPv6 class.
flowlabel – Specifies the IPv6 flow label.
source_ipv6_mask – Specifies an IPv6 source submask. The device only supports filtering of
the last 44 bits (LSB) of the source IPv6 address.
src_port_mask – Specifies an IPv6 L4 (TCP/UDP) source port submask.
dst_port_mask - Specifies an IPv6 L4 (TCP/UDP) destination port submask.
packet_content_mask – A maximum of 11 offsets can be specified. Each offset defines
two bytes of data, which is identified as a single UDF field. The offset reference is also
configurable. It can be defined to start at the end of a tag, the end of an ether type or
the end of an IP header. To qualify the fields before the end of a tag, the destination
address, source address, and the VLAN tags are also included.
source_mac − Specifies the source MAC mask.
destination_mac – Specifies the destination MAC mask.
c_tag – Specifies the 16-bit inner VLAN tag of the packet to mask. This constitutes the 3-bit
PCP, 1-bit CFI and 12-bit VID fields.
s_tag – Specifies the 16-bit outer VLAN tag of the packet to mask. This constitutes the 3-bit
PCP, 1-bit CFI and 12-bit VID fields.
offset1 – offset11 - Defines the UDF fields to which the device will filter. Each UDF field is a 2-
byte data which is n bytes away from the offset reference (where n is the offset value). The
offset can range from 0 up to 31. The offset reference can be either of the following:
l2 – The offset will start counting from the byte after the end of the VLAN tags (start of ether
type).
l3 – The offset will start counting right after the ether type field. The packet must have a valid
L2 header and a recognizable ether type in order to be recognized.
l4 – The offset will start counting right after the end of ip header. The packet must have a valid
IP header in order to be recognized.
Example: “offset1 l2 0 0xFFFF” will mask the first 2 bytes of the ether type.
profile_id <value 1-512> − Sets the relative priority for the profile. Priority is set relative to
other profiles where the lowest profile ID has the highest priority. The user may enter a profile
ID number between 1 to 512.
Restrictions
Only Administrator-level users can issue this command.
Example usage: