D-Link xStack DES-6500 Cli Manual page 236

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
config access_profile profile_id (IP)
Restrictions
Example usage:
To configure a rule for the IP access profile:
D E S - 6 5 0 0 : 4 # c o n f i g a c c e s s _ p r o f i l e p r o f i l e _ i d 2 a d d
a c c e s s _ i d 2 i p p r o t o c o l _ i d 2 p o r t 1 : 2 d e n y
C o m m a n d : c o n f i g a c c e s s _ p r o f i l e p r o f i l e _ i d 2 a d d
a c c e s s _ i d 2 i p p r o t o c o l _ i d 2 p o r t 1 : 2 d e n y
S u c c e s s .
D E S - 6 5 0 0 : 4 #
create access_profile (packet content mask)
Purpose Used to create an access profile on the Switch by examining the Ethernet part of the
packet header. Packet content masks entered will specify certain bytes of the packet
header to be identified by the Switch. When the Switch recognizes a packet with the
identical byte as the one configured, it will either forward or filter the packet, based on the
users command. Specific values for the rules are entered using the config access_profile
command, below.
Syntax
create access_profile packet_content_mask profile_id <value 1-8> {offset_0-15 <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-
31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> |
offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff>}
Description This command is used to identify packets by examining the Ethernet packet header, by
byte and then decide whether to filter or forward it, based on the user's configuration. The
user will specify which bytes to examine by entering them into the command, in hex form,
and then selecting whether to filter or forward them, using the config access_profile
command.
CoS queue specified previously by the user.
{replace_priority}  Enter this parameter to re-write the 802.1p default

priority of a packet to the value entered in the Priority field, which meets the
criteria specified previously in this command, before forwarding it on to the
specified CoS queue. Otherwise, a packet will have its incoming 802.1p
user priority re-written to its original value before being forwarded by the
Switch.
replace_dscp <value 0-63>  Allows specification of a value to be written to the
DSCP field of an incoming packet that meets the criteria specified in the first part
of the command. This value will over-write the value in the DSCP field of the
packet.
deny – Specifies that packets that match the access profile are not permitted to
be forwarded by the Switch and will be filtered.
delete access_id <value 1-65535>  Use this command to delete a specific rule
from the IP profile.
Only Administrator-level users can issue this command.
232