D-Link TM DES-6500 manual Create accessprofile packet content mask

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

create access_profile (packet content mask)

Purpose	Used to create an access profile on the Switch by examining the
	Ethernet part of the packet header. Packet content masks entered
	will specify certain bytes of the packet header to be identified by the
	Switch. When the Switch recognizes a packet with the identical byte
	as the one configured, it will either forward or filter the packet, based
	on the users command. Specific values for the rules are entered
	using the config access_profile command, below.
Syntax	create access_profile packet_content_mask profile_id <value 1-
	8> {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
	0x0-0xffffffff> <hex 0x0-0xffffffff> offset_16-31 <hex 0x0-
	0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
	0xffffffff> offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
	<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> offset_48-63 <hex 0x0-
	0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
	0xffffffff> offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
	<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}
Description	This command is used to identify packets by examining the Ethernet
	packet header, by byte and then decide whether to filter or forward it,
	based on the user’s configuration. The user will specify which bytes
	to examine by entering them into the command, in hex form, and
	then selecting whether to filter or forward them, using the config
	access_profile command.
Parameters	profile_id <value 1-8>- Specifies an index number between 1 and 8
	that will identify the access profile being created with this command.
	packet_content_mask – Specifies that the Switch will mask the
	packet header beginning with the offset value specified as follows:
	• offset_0-15– Enter a value in hex form to mask the packet
	from the beginning of the packet to the 15th byte.
	• offset_16-31- Enter a value in hex form to mask the packet
	from byte 16 to byte 31.
	• offset_32-47- Enter a value in hex form to mask the packet
	from byte 32 to byte 47.
	• offset_48-63- Enter a value in hex form to mask the packet
	from byte 48 to byte 63.
	• offset_64-79- Enter a value in hex form to mask the packet
	from byte 64 to byte 79.
Restrictions	Only administrator-level users can issue this command.

Example usage:

To create an access profile by packet content mask:

DES-6500:4#create access_profile packet_content_mask offset_0-15 0xFFFFFFFF 0xFFFFFFFF 0xFFFFFFFF 0xFFFFFFFF offset_16-31 0xFFFF 0xFFFF0000 0xF 0xF000000 profile_id 3

Command: create access_profile packet_content_mask offset_0-15 0xFFFFFFFF 0xFFFFFFFF 0xFFFFFFFF 0xFFFFFFFF offset_16-31 0xFFFF 0xFFFF0000 0xF 0xF000000 profile_id 3

Success.

DES-6500:4#

220