D-Link DXS-3326GSR Reference Manual page 239

DXS-3326GSR Stackable Gigabit Layer 3 Switch
config access_profile
Purpose
Syntax
Description
Parameters
Used to configure an access profile on the Switch and to define
specific values that will be used to by the Switch to determine if a
given packet should be forwarded or filtered. Masks entered using the
create access_profile command will be combined, using a logical
AND operation, with the values the Switch finds in the specified frame
header fields. Specific values for the rules are entered using the
config access_profile command, below.
<value 1-8> [add access_id <value 1-50> [ethernet {vlan
<vlan_name 32> | source_mac <macaddr> | destination_mac
<macaddr> | 802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff> }
| ip {vlan <vlan_name 32> | source_ip <ipaddr> | destination_ip
<ipaddr> | dscp <value 0-63> | [icmp {type <value 0-255> code
<value 0-255>} | igmp {type <value 0-255>} | tcp {src_port <value
0-65535> | dst_port <value 0-65535> | {urg | ack | psh | rst | syn |
fin} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} |
protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff> }]} |
packet_content {offset_0-15 <hex0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff><hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex0x0-0xffffffff>}] [permit
{ priority <value 0-7> {replace_priority} | replace_dscp <value 0-
63> } | deny] | delete <value 1-50>]
The config access_profile command is used to configure an access
profile on the Switch and to enter specific values that will be
combined, using a logical AND operation, with masks entered with the
create access_profile command, above.
profile_id <value 1-8> − Enter an integer between 1 and 8 that is used
to identify the access profile that will be deleted with this command.
This value is assigned to the access profile when it is created with the
create access_profile command.
add access_id <value 1-50> − Adds an additional rule to the above
specified access profile. The value specifies the relative priority of the
additional rule. The lower the profile ID, the higher the priority the rule
will be given.
ethernet − Specifies that the Switch will look only into the layer 2 part
of each packet.
vlan <vlan_name 32> − Specifies that the access profile will
•
apply to only to this VLAN.
source_mac <macaddr> − Specifies that the access profile will
•
apply to only packets with this source MAC address. This mask
is entered in the following hexadecimal format:
000000000000-FFFFFFFFFFFF
destination_mac <macaddr> − Specifies that the access profile
•
will apply to only packets with this destination MAC address.
This mask is entered in the following hexadecimal format:
231