Create Access_Profile - D-Link DGS-1210/ME Series Reference Manual

Command
delete cpu
access_profile
show cpu
access_profile
enable
cpu_interface_filtering
disable
cpu_interface_filtering
config flow_meter
profile_id
show flow_meter
Each command is listed in detail, as follows:

create access_profile

Purpose
Syntax
Description
Parameters
DGS-1210/ME Metro Ethernet Switch CLI Reference Guide
Parameter
[permit | deny]] delete access_id <value 1-5>]
profile_id <value 1-3>
{profile_id <value 1-3>}
<value 1-6> access_id <value 1-250> [delete | rate <value 64-1024000>]
burst_size <value 0-1016> rate_exceed [drop_packet | remark_dscp <value 0-
63>]
{profile_id <value 1-6> | access_id <value 1-250>}
To create an access profile on the Switch by examining the Ethernet
part of the packet header. Masks entered are combined with the
values the Switch finds in the specified frame header fields. Specific
values for the rules are entered using the config access_profile
command, below.
create access_profile [ ethernet {vlan | source_mac <macmask>
| destination_mac <macmask> | 802.1p | ethernet_type} | ip
{ source_ip_mask <netmask> | destination_ip_mask <netmask>
| dscp | [ icmp { type | code } | igmp { type } | tcp
{ src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-
0xffff> | flag_mask} | udp { src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff> } | protocol_id_mask <0x0-0xff>
]} | packet_content_mask {offset1 [ l2 | l3 | l4 ] <value 0-31>
<hex (0x0-0xffff)> | offset2 [ l2 | l3 | l4 ] <value 0-31> <hex 0x0-
0xffff>| offset3 [ l2 | l3 | l4 ] <value 0-31> <hex 0x0-0xffff>|
offset4 [ l2 | l3 | l4 ] <value 0-31> <hex 0x0-0xffff>} | ipv6 { class
| source_ipv6_mask <ipv6mask> | destination_ipv6_mask
<ipv6mask> | [tcp { src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff>} | udp { src_port_mask <hex
0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} | icmp { type |
code } ]} profile_id <value 1-6> ]
The create access_profile command creates a profile for packets
that may be accepted or denied by the Switch by examining the
Ethernet part of the packet header. Specific values for rules
pertaining to the Ethernet part of the packet header may be defined
by configuring the config access_profile command for Ethernet, as
stated below.
ethernet - Specifies that the Switch examines the layer 2 part of
each packet header with emphasis on one or more of the following:
•
vlan – Specifies that the Switch examine the VLAN part of
each packet header.
•
source_mac <macmask> – Specifies a MAC address mask
for the source MAC address. This mask is entered in the
following hexadecimal format: 000000000000-
477