D-Link DGS-3224TGR Command Line Interface Reference Manual page 122

create access_profile
Used to create an access profile on the switch and to define which parts of each incoming
Purpose
frame's header the switch will examine. Masks can be entered that will be combined with the
values the switch finds in the specified frame header fields. Specific values for the rules are
entered using the config access_profile command, below.
create access_profile [ ethernet(1){ vlan(2) | source_mac(3) <macmask> |
Syntax
destination_mac(4) <macmask> | 802.1p(5) | ethernet_type(6) }(1) | ip(21) { vlan(22) |
source_ip_mask(23) <netmask> | destination_ip_mask(24) <netmask> | dscp(25) |
[ icmp(26) {type(27) | code(28) } | igmp(29) {type(30) } | tcp(31) {src_port_mask(32)
<hex 0x0-0xffff> | dst_port_mask(33) <hex 0x0-0xffff> | flag_mask(46) [all(45) | {urg(39)
| ack(40) | psh(41) | rst(42) | syn(43) | fin(44)}(1)]} | udp(34) {src_port_mask(35) <hex
0x0-0xffff> | dst_port_mask(36) <hex 0x0-0xffff>} | protocol_id_mask(37) <hex 0x0 -
0xFF> {user_define_mask(38) <hex 0x0-0xffffffff><hex 0x0-0xffffffff><hex 0x0-
0xffffffff><hex 0x0-0xffffffff><hex 0x0-0xffffffff>} ] }(1) |packet_content_mask(51)
{offset_0-15(52) <hex 0x0-0xffffffff><hex 0x0-0xffffffff><hex 0x0-0xffffffff><hex 0x0-
0xffffffff> | offset_16-31(53) <hex 0x0-0xffffffff><hex 0x0-0xffffffff><hex 0x0-
0xffffffff><hex 0x0-0xffffffff> | offset_32-47(54) <hex 0x0-0xffffffff><hex 0x0-
0xffffffff><hex 0x0-0xffffffff><hex 0x0-0xffffffff> | offset_48-63(55) <hex 0x0-
0xffffffff><hex 0x0-0xffffffff><hex 0x0-0xffffffff><hex 0x0-0xffffffff> | offset_64-79(56)
<hex 0x0-0xffffffff><hex 0x0-0xffffffff><hex 0x0-0xffffffff><hex 0x0-0xffffffff> }(1)]
{port(11)[<portlist>|all]} [profile_id(10) <value 1-8>]
The create access_profile command is used to create an access profile on the switch and to
Description
define which parts of each incoming frame's header the switch will examine. Masks can be
entered that will be combined with the values the switch finds in the specified frame header
fields. Specific values for the rules are entered using the config access_profile command,
below.
ethernet − Specifies that the switch will examine the layer 2 part of each packet header.
Parameters
vlan − Specifies that the switch will examine the VLAN part of each packet header.
source_mac <macmask> − Specifies a MAC address mask for the source MAC address.
This mask is entered in the following hexadecimal format.
destination_mac <macmask> − Specifies a MAC address mask for the destination MAC
address.
802.1p − Specifies that the switch will examine the 802.1p priority value in the frame's
header.
ethernet_type − Specifies that the switch will examine the Ethernet type value in each
frame's header.
ip − Specifies that the switch will examine the IP address in each frame's header.
vlan − Specifies a VLAN mask.
source_ip_mask <netmask> − Specifies an IP address mask for the source IP address.
destination_ip_mask <netmask> − Specifies an IP address mask for the destination IP
address.
dscp <value 0-63> − Specifies that the switch will examine the DiffServ Code Point (DSCP)
field in each frame's header.
icmp − Specifies that the switch will examine the Internet Control Message Protocol (ICMP)
field in each frame's header.
type − Specifies that the switch will examine each frame's ICMP Type field.
code − Specifies that the switch will examine each frame's ICMP Code field.
igmp − Specifies that the switch will examine each frame's Internet Group Management
Protocol (IGMP) field.
type − Specifies that the switch will examine each frame's IGMP Type field.
DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
118