FP成功命令

来源:互联网 发布:mac版迅雷下载没速度 编辑:程序博客网 时间:2024/05/22 08:20

ok
fp init
fp data create OffsetBase=PacketStart offset=0 length=4
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=none mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x99887766 0xffffffff
fp action add 1 drop
fp entry install 1


ok


fp init
fp data create OffsetBase=PacketStart offset=19 length=3
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=any mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x123456 0xffffff
fp action add 1 drop
fp entry install 1


ok

fp init
fp data create OffsetBase=PacketStart offset=4 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=none mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x0016 0xffff
fp action add 1 drop
fp entry install 1

ok
fp init
fp data create OffsetBase=PacketStart offset=10 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=none mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x0001 0xffff
fp action add 1 drop
fp entry install 1


识别 0x0800 
OK

fp init
fp data create OffsetBase=PacketStart offset=12 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=none mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x0800 0xffff
fp action add 1 drop
fp entry install 1


识别 vlan 0x8100 
OK

fp init
fp data create OffsetBase=PacketStart offset=12 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any


fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x8100 0xffff
fp action add 1 drop
fp entry install 1

识别特定VLAN ID


这个行 匹配 0x0015
fp init
fp data create OffsetBase=PacketStart offset=14 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any

fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x0015 0xffff
fp action add 1 drop
fp entry install 1


这个 匹配 0x15  也可以
fp init
fp data create OffsetBase=PacketStart offset=15 length=1
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any


fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x15 0xff
fp action add 1 drop
fp entry install 1


识别 mpls 0x8847 


OK


带VLAN
fp init
fp data create OffsetBase=PacketStart offset=16 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x8847 0xffff
fp action add 1 drop
fp entry install 1


不带VLAN


fp init
fp data create OffsetBase=PacketStart offset=12 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x8847 0xffff
fp action add 1 drop
fp entry install 1






将mpls报文重定向到某个端口


重定向失败
fp init




fp data create OffsetBase=PacketStart offset=16 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 3
fp group create 0 2
fp entry create 2 6
fp qual 6 data 3 0x8847 0xffff
fp action add 6 RedirectPbmp  0x10
fp entry install 5




将mpls报文映像到某个端口 


带VLAN  ok


fp init
fp data create OffsetBase=PacketStart offset=16 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp qset add inports
fp group create 0 0
fp entry create 0 0
fp qual 0 inports 0x800 0x3ffffffd
fp qual 0 data 1 0x8847 0xffff


fp action add 1 MirrorIngress  0 4
fp entry install 0




不带VLAN  ok
fp init
fp data create OffsetBase=PacketStart offset=12 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp qset add inports
fp group create 0 0
fp entry create 0 0
fp qual 0 inports 0x800 0x3ffffffd
fp qual 0 data 1 0x8847 0xffff


fp action add 1 MirrorIngress  0 4  // 这句用函数代替
fp entry install 0




OK 
fp init
fp data create OffsetBase=PacketStart offset=20 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x1040  0xffff
fp action add 1 drop
fp entry install 1






重定向
fp init
fp data create OffsetBase=PacketStart offset=20 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x1040  0xffff
fp action add 1 RedirectPbmp  0x4000
fp entry install 1


fp init
fp data create OffsetBase=PacketStart offset=20 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp group create 0 1
fp entry create 1 1
fp qual 1 data 1 0x1040  0xffff
fp action add 1 RedirectPort  0 14  [提示输入错误]
fp entry install 1


old 重定向
 OK


fp qset add ethertype
fp qset add inport
fp group create 0 0
fp entry create 0 0
fp qual 0 inport 0 ge9
fp qual 0 ethertype 0x8847 0xffff
fp action add 0 RedirectPort 0 4
fp entry install 0


将MPLS报文重定向到某个端口
不带VLAN
fp init
fp data create OffsetBase=PacketStart offset=12 length=4
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp qset add inports
fp group create 0 0
fp entry create 0 0
fp qual 0 inports 0x800 0x3ffffffd
fp qual 0 data 1 0x8847  0xffff


fp action add 1 MirrorIngress  0 4  // 这句用函数代替
fp entry install 0




匹配第二层标签
fp init
fp data create OffsetBase=PacketStart offset=18 length=3
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp qset add inports
fp group create 0 0
fp entry create 0 0
fp qual 0 inports 0x800 0x3ffffffd
fp qual 0 data 1 0x123456  0xffffff


fp init
fp data create OffsetBase=PacketStart offset=18 length=3
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp qset add inports
fp group create 0 0
fp entry create 0 0
fp qual 0 inports 0x800 0x3ffffffd
fp qual 0 data 1 0x123456  0xfffff0  
[20bit 的掩码不被允许,后面必须加0,凑成24bit ,字节整数倍]


带VLAN


fp init
fp data create OffsetBase=PacketStart offset=16 length=2
fp data format add QualId=1 RelativeOffset=0 L2=any VlanTag=any OuterIp=any InnerIp=any Tunnel=Any mpls=any
fp qset add data 1
fp qset add inports
fp group create 0 0
fp entry create 0 0
fp qual 0 inports 0x800 0x3ffffffd
fp qual 0 data 1 0x8847 0xffff


fp action add 1 MirrorIngress  0 4  // 这句用函数代替
fp entry install 0






入口映像 【老的ACL】
fp init
fp qset add ethertype
fp qset add inports
fp group create 0 0
fp entry create 0 0
fp qual 0 inports 0x800 0x3ffffffd
fp qual 0 ethertype 0x8847 0xffff
fp action add 0 MirrorIngress  0 4   //  这一行有问题,无法实现预期目的
fp entry install 0


fp init
fp qset add ethertype
fp qset add inports
fp group create 0 0
fp entry create 0 0
fp qual 0 inports 0x800 0x3ffffffd
fp qual 0 ethertype 0x8847 0xffff
fp action add 0 42  0 4
fp entry install 0


丢弃MPLS 报文
OK


fp qset add ethertype
fp qset add inport
fp group create 0 0
fp entry create 0 0
fp qual 0 inport 0 ge9
fp qual 0 ethertype 0x8847 0xffff
fp action add 0 Drop
fp entry install 0

0 0
原创粉丝点击