D-Link xStack DGS-3420 Series Reference Manual page 117

xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
tcp - Specify TCP.
src_port - (Optional) Specify the TCP source port range.
<value 0-65535> - Specify the value between 0 and 65535.
mask - (Optional) Specify the mask.
<hex 0x0-0xffff> - Specify the mask.
dst_port - (Optional) Specify the TCP destination port range.
<value 0-65535> - Specify the value between 0 and 65535.
mask - (Optional) Specify the mask.
<hex 0x0-0xffff> - Specify the mask.
udp - Specify UDP.
src_port - (Optional) Specify the UDP source port range.
<value 0-65535> - Specify the value between 0 and 65535.
mask - (Optional) Specify the mask.
<hex 0x0-0xffff> - Specify the mask.
dst_port - (Optional) Specify the UDP destination port range.
<value 0-65535> - Specify the value between 0 and 65535.
mask - Specify the mask.
<hex 0x0-0xffff> - Specify the mask.
icmp - Specifies that the rule applies to the value of ICMP traffic.
type - Specifies that the rule applies to the value of ICMP type traffic.
<value 0-255> - Enter the ICMP type value used here. This value must be between 0 and
255.
code - Specifies that the rule applies to the value of ICMP code traffic.
<value 0-255> - Enter the ICMP code value used here. This value must be between 0 and
255.
port - The access profile rule may be defined for each port on the switch. The port list is specified by
listing the lowest switch number and the beginning port number on that switch, separated by a
colon.
<portlist> - Specify a list of ports.
all - Specify that the access rule will apply to all ports.
vlan_based - Specify the VLAN-based ACL rule. There are two conditions: this rule will apply to all
ports and packets must belong to the configured VLAN. It can be specified by VLAN name or
VLAN ID.
vlan - Specify the VLAN name.
<vlan_name 32> - Specify the VLAN name. The maximum length is 32 characters.
vlan_id - Specify the VLAN ID.
<vlanid 1-4094> - Specify the VLAN ID between 1 and 4094.
permit - Specify the packets that match the access profile are permit by the switch.
priority - (Optional) Specify the packets that match the access profile are remap the 802.1p priority
tag field by the switch.
<value 0-7> - Specify the value between 0 and 7.
replace_priority - (Optional) Specify the packets that match the access profile remarking the 802.1p
priority tag field by the switch.
replace_dscp_with - (Optional) Specify the DSCP of the packets that match the access profile are
modified according to the value.
<value 0-63> - Specify the value between 0 and 63.
replace_tos_precedence_with - (Optional) Specify that the IP precedence of the outgoing packet is
changed with the new value. If used without an action priority, the packet is sent to the default TC.
<value 0-7> - Specify the value between 0 and 7.
counter - (Optional) Specifies whether the ACL counter feature will be enabled or disabled.
enable - Specify whether the ACL counter feature is enabled. If the rule is not bound with the flow
meter, all matching packets are counted. If the rule is bound with the flow meter, then the
"counter" is overridden.
disable - Specify whether the ACL counter feature is disabled. The default option is disabled.
mirror - Specify that packets matching the access profile are copied to the mirror port.
112