D-Link xStack DES-6500 Cli Manual page 239

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
config access_profile profile_id (packet content mask)
Restrictions
Example usage:
To create an access profile by packet content mask:
D E S - 6 5 0 0 : 4 # c o n f i g a c c e s s _ p r o f i l e p r o f i l e _ i d 3 a d d a c c e s s _ i d
1 p a c k e t _ c o n t e n t o f f s e t _ 0 - 1 5 0 x 1 1 1 1 1 1 1 1 0 x 1 1 1 1 1 1 1 1 0 x 1 1 1 1 1 1 1 1
0 x 1 1 1 1 1 1 1 1 o f f s e t _ 1 6 - 3 1 0 x 1 1 1 1 1 1 1 1 0 x 1 1 1 1 1 1 1 1 0 x 1 1 1 1 1 1 1 1
0 x 1 1 1 1 1 1 1 1 p o r t 1 : 1 d e n y
C o m m a n d : c o n f i g a c c e s s _ p r o f i l e p r o f i l e _ i d 3 a d d a c c e s s _ i d 1
p a c k e t _ c o n t e n t o f f s e t _ 0 - 1 5 0 x 1 1 1 1 1 1 1 1 0 x 1 1 1 1 1 1 1 1 0 x 1 1 1 1 1 1 1 1
0 x 1 1 1 1 1 1 1 1 o f f s e t _ 1 6 - 3 1 0 x 1 1 1 1 1 1 1 1 0 x 1 1 1 1 1 1 1 1 0 x 1 1 1 1 1 1 1 1
0 x 1 1 1 1 1 1 1 1 p o r t 1 : 1 d e n y
S u c c e s s .
D E S - 6 5 0 0 : 4 #
create access_profile (ipv6)
Purpose
Syntax
Description
Parameters
delete access_id <value 1-65535>  Use this command to delete a specific
rule from the packet content mask profile. Up to 65535 rules may be specified
for the Packet Content access profile.
Only Administrator-level users can issue this command.
Used to create an access profile on the Switch by examining the IPv6 part of
the packet header. Masks can be entered that will be combined with the
values the Switch finds in the specified frame header fields. Specific values
for the rules are entered using the config access_profile command, below.
create access_profile ipv6 profile_id <value 1-8> {class | flowlabel |
source_ipv6_mask <ipv6mask> | destination_ipv6_mask <ipv6mask>}]
This command is used to identify various parts of IPv6 packets that enter the
Switch so they can be either forwarded or filtered.
profile_id <value 1-8> - Specifies an index number between 1 and 8 that will
identify the access profile being created with this command.
ipv6 – Denotes that IPv6 packets will be examined by the Switch for
forwarding or filtering based on the rules configured in the config
access_profile command for IPv6. IPv6 packets may be identified by the
following:

class – Entering this parameter will instruct the Switch to examine the
class field of the IPv6 header. This class field is a part of the packet
header that is similar to the Type of Service (ToS) or Precedence bits
field in IPv4.

flowlabel – Entering this parameter will instruct the Switch to examine
the flow label field of the IPv6 header. This flow label field is used by a
source to label sequences of packets such as non-default quality of
service or real time service packets.

source_ipv6_mask <ipv6mask> - Specifies an IP address mask for the
source IPv6 address.

destination_ipv6_mask <ipv6mask> - Specifies an IP address mask
235