D-Link xStack DGS-3426 Cli Manual page 160

config access_profile (IP)
Restrictions
Example usage:
To configure a rule for the IP access profile:
DGS-3400:4#config access_profile profile_id 2 add access_id 2 ip protocol_id 2 port 2 deny
Command: config access_profile profile_id 2 add access_id 2 ip protocol_id 2 port 2 deny
Success.
DGS-3400:4#
create access_profile (ipv6)
Purpose
Syntax
Description
xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
protocol_id <value 0-255> − Specifies that the Switch will examine the Protocol
•
field in each packet and if this field contains the value entered here, apply the
appropriate rules.
• user_define <hex 0x0-0xfffffff> − Enter a hexidecimal value that will identify the
protocol to be discovered in the packet header.
port <portlist> | all - The access profile for IP may be defined for each port on the Switch.
Up to 128 rules may be configured for each port. Selecting all will configure this rule for
all ports on the Switch.
permit – Specifies that packets that match the access profile are permitted to be
forwarded by the Switch.
priority <value 0-7> − This parameter is specified if you want to re-write the 802.1p
•
default priority previously set in the Switch, which is used to determine the CoS
queue to which packets are forwarded to. Once this field is specified, packets
accepted by the Switch that match this priority are forwarded to the CoS queue
specified previously by the user.
{replace_priority} − Enter this parameter if you want to re-write the 802.1p default
•
priority of a packet to the value entered in the Priority field, which meets the criteria
specified previously in this command, before forwarding it on to the specified CoS
queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to
its original value before being forwarded by the Switch.
replace_dscp <value 0-63> − Allows you to specify a value to be written to the DSCP
field of an incoming packet that meets the criteria specified in the first part of the
command. This value will over-write the value in the DSCP field of the packet.
rx_rate - Use this to limit Rx bandwidth for for the profile being configured. This rate is
implemented using the following equation – 1 value = 64kbit/sec. (ex. If the user selects a
rx rate of 10 then the ingress rate is 640kbit/sec.) The user many select a value between
1- 156249 or no limit. The default setting is no limit.
deny – Specifies that packets that do not match the access profile are not permitted to be
forwarded by the Switch and will be filtered.
delete access_id <value 1-128> − Use this command to delete a specific rule from the IP
profile. Up to 128 rules may be specified for the IP access profile.
Only administrator-level users can issue this command.
Used to create an access profile on the Switch by examining the IPv6 part of
the packet header. Masks can be entered that will be combined with the values
the Switch finds in the specified frame header fields. Specific values for the
rules are entered using the config access_profile command, below.
create access_profile profile_id <value 1-6>} ipv6 {class | flowlabel |
source_ipv6_mask <ipv6mask> | destination_ipv6_mask <ipv6mask>}]
This command is used to identify various parts of IPv6 packets that enter the
Switch so they can be either forwarded or filtered.
157