D-Link DGS-1210/ME Series Reference Manual page 500

DGS-1210 Metro Ethernet Managed Switch CLI Reference Guide
Description
Parameters
[auto_assign | <value 1-128>] [ ethernet {vlan <vlanid 1-4094> |
source_mac <macaddr> | destination_mac <macaddr> | 802.1p
<value 0-7> | ethernet_type <hex 0x05dd-0xffff> } | ip {source_ip
<ipaddr> | destination_ip <ipaddr> | dscp <value 0-63> | icmp
{type <value 0-255> code <value 0-255>} | igmp {type <value 0-
255>} | tcp {src_port <value 0-65535> | dst_port <value 0-65535>
| urg | ack | psh | rst | syn | fin} | udp {src_port <value 0-65535> |
dst_port <value 0-65535>} | protocol_id <value 0-255>]} |
packet_content [offset1 <hex 0x0-0xffffffff> | offset2 <hex 0x0-
0xffffffff> | offset3 <hex 0x0-0xffffffff> | offset4 <hex 0x0-
0xffffffff>] | ipv6 [class <value 0-255> | source_ipv6 <ipv6addr> |
destination_ipv6 <ipv6addr> | tcp [src_port < value 0-65535> |
dst_port < value 0-65535>] | udp [src_port < value 0-65535> |
dst_port < value 0-65535>] | icmp [type<value 0-255> | code
<value 0-255>] ] [port [<portlist> | all] [permit
{replace_priority_with <value 0-7> | replace_dscp_with <value
0-63> | rx_rate {no_limit | <value 64-1024000>}} | mirror | deny]]
| delete access_id <value 1-128>]
The config access_profile ethernet command defines the rules
used by the Switch to either filter or forward packets based on the
Ethernet part of each packet header.
profile_id <value 1-6> – Specifies the access profile id to be
configured with this command. This value is assigned to the access
profile when it is created with the create access_profile command.
The lower the profile ID, the higher the priority the rule will be given.
[add | delete] access_id <value 1-128> – Adds or deletes an
additional rule to the above specified access profile. The value
specifies the relative priority of the additional rule. Up to 65535 rules
may be configured for the Ethernet access profile.
•
auto_assign – Configures the Switch to automatically assign
a numerical value (between 1 and 128) for the rule being
configured.
ethernet – Specifies that the Switch examine only the layer 2 part of
each packet to determine if it is to be filtered or forwarded based on
one or more of the following:
•
vlan <vlanid 1-4094> – Specifies that the access profile
applies only to this previously created VLAN.
•
source_mac <macaddr> – Specifies that the access profile
applies only to packets with this source MAC address. MAC
address entries may be made in the following format:
000000000000-FFFFFFFFFFFF.
•
destination_mac <macaddr> – Specifies that the access
profile applies only to packets with this destination MAC
address. MAC address entries may be made in the following
format: 000000000000-FFFFFFFFFFFF
•
802.1p <value 0-7> – Specifies that the access profile
applies only to packets with this 802.1p priority value.
•
ethernet_type <hex 0x05dd-0xffff> – Specifies that the
access profile applies only to packets with this hexadecimal
802.1Q Ethernet type value in the packet header.
ports <portlist> - The access profile for Ethernet may be defined for
each port on the Switch.
•
mirror – Specifies the action to mirror before being
forwarded by the Switch.
•
replace_dscp_with <value 0-63> – Specifies a value to be
480