D-Link DGS-1510/ME Series Reference Manual page 84

DGS-1510/ME Series Metro Ethernet Switch CLI Reference Guide
port - Specifies the port list used for this configuration.
<portlist> - Enter a list of ports used for the configuration here.
all - Specifies that all the ports will be used for this configuration.
vlan_based - Specifies that the rule will be VLAN based.
vlan - Specifies the VLAN name used for this configuration.
<vlan_name> - Enter the VLAN name used for this configuration here.
vlan_id - Specifies the VLAN ID used for this configuration.
<vlanid 1-4094> - Enter the VLAN ID used here. This value must be between 1 and 4094.
permit - Specifies that packets matching the access rule are permitted by the Switch.
priority - (Optional) Specifies that the priority of the packet will change if the packet matches the access rule.
<value 0-7> - Enter the priority value here. This value must be between 0 and 7.
replace_priority - (Optional) Specifies that the 802.1p priority of the outgoing packet will be replaced.
replace_dscp_with - (Optional) Specifies that the DSCP of the outgoing packet is changed with the new
value. If using this action without an action priority, the packet will be sent to the default TC.
<value 0-63> - Enter the replace DSCP with value here. This value must be between 0 and 63.
replace_tos_precedence_with - (Optional) Specifies that the IP precedence of the outgoing packet is
changed with the new value. If used without an action priority, the packet is sent to the default TC.
<value 0-7> - Enter the replace ToS precedence with value here. This value must be between 0 and 7.
counter - (Optional) Specifies whether the ACL counter feature is enabled or disabled. This parameter is
optional. The default option is disabled. If the rule is not bound with the flow_meter, all matching packets
are counted. If the rule is bound with the flow_meter, then the "counter" is overridden.
enable - Specifies that the ACL counter feature will be enabled.
disable - Specifies that the ACL counter feature will be disabled.
mirror - Specifies that packets matching the access rules are copied to the mirror port.
deny - Specifies that packets matching the access rule are filtered by the Switch.
time_range - (Optional) Specifies the name of the time range entry.
<range_name 32> - Enter the time range name here. This name can be up to 32 characters long.
delete - Specifies that a profile or a rule will be deleted.
access_id - Specifies the index of the access list entry.
<value 1- 128> - Enter the access ID used here. This value must be between 1 and 128.
Restrictions
Only Administrators, Operators and Power-Users can issue this command.
Example
To configure a rule entry for a packet content mask profile:
DGS-1510-28XMP/ME:admin#config access_profile profile_id 4 add access_id auto_assign
packet_content offset_chunk_3 0xF0 port all deny
Command: config access_profile profile_id 4 add access_id auto_assign packet_content
offset_chunk_3 0xF0 port all deny
Success.
DGS-1510-28XMP/ME:admin#
80