D-Link xStack DES-6500 Cli Manual page 230

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
create access_profile (for Ethernet)
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To create a Ethernet access profile:
DES-6500:4#create access_profile ethernet vlan 802.1p
profile_id 1
Command: create access_profile ethernet vlan 802.1p
profile_id 1
Success.
DES-6500:4#
config access_profile profile_id (for Ethernet)
Purpose
Used to create an access profile on the Switch by examining the Ethernet part of
the packet header. Masks entered can be combined with the values the Switch
finds in the specified frame header fields. Specific values for the rules are entered
using the config access_profile command, below.
create access_profile profile_id <value 1-8> ethernet {vlan | source_mac
<macmask> | destination_mac <macmask> | 802.1p | ethernet_type}
This command will allow the user to create a profile for packets that may be
accepted or denied by the Switch by examining the Ethernet part of the packet
header. Specific values for rules pertaining to the Ethernet part of the packet
header may be defined by configuring the config access_profile command for
Ethernet, as stated below.
profile_id <value 1-8> - Specifies an index number between 1 and 8 that will
identify the access profile being created with this command.
ethernet - Specifies that the Switch will examine the layer 2 part of each packet
header with emphasis on one or more of the following:
vlan  Specifies that the Switch will examine the VLAN part of each packet

header.
source_mac <macmask>  Specifies a MAC address mask for the source

MAC address. This mask is entered in the following hexadecimal format:
000000000000-FFFFFFFFFFFF
destination_mac <macmask>  Specifies a MAC address mask for the

destination MAC address in the following format: 000000000000-
FFFFFFFFFFFF
802.1p  Specifies that the Switch will examine the 802.1p priority value in

the frame's header.
ethernet_type  Specifies that the Switch will examine the Ethernet type

value in each frame's header.
Only Administrator-level users can issue this command.
Used to configure the Ethernet access profile on the Switch and to define
specific values for the rules that will be used to by the Switch to determine if a
given packet should be forwarded or filtered. Masks entered using the create
access_profile command will be combined, using a logical AND operational
226