D-Link xstack DGS-3620 series Reference Manual page 113

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
priority - (Optional) Specifies the packets that match the access profile are remap the 802.1p
priority tag field by the switch.
<value 0-7> - Enter the value between 0 and 7.
replace_priority - (Optional) Specifies the packets that match the access profile remarking the
802.1p priority tag field by the switch.
replace_dscp_with - (Optional) Specifies the DSCP of the packets that match the access profile
are modified according to the value.
<value 0-63> - Enter the value between 0 and 63.
replace_tos_precedence_with - (Optional) Specifies that the IP precedence of the outgoing
packet is changed with the new value. If used without an action priority, the packet is sent to
the default TC.
<value 0-7> - Enter the value between 0 and 7.
counter - (Optional) Specifies whether the ACL counter feature will be enabled or disabled.
enable - Specifies whether the ACL counter feature is enabled. If the rule is not bound with
the flow meter, all matching packets are counted. If the rule is bound with the flow meter,
then the "counter" is overridden.
disable - Specifies whether the ACL counter feature is disabled. The default option is
disabled.
urpf_state_check - (Optional) Specifies if the incoming packet is determined to be dropped by
the URPF and ACL check option.
enable - Specifies to match the permit entry in ACL. The URPF action to drop the packet is
ignored. This is the default option.
disable - Specifies to match the permit entry in ACL. The URPF action to drop the packet is
honored.
mirror - Specifies that packets matching the access profile are copied to the mirror port.
group_id - Specifies the group ID used.
<value 1-4> - Enter the group ID used here. This value must be between 1 and 4.
Redirect - Specifies that packets matching the access rule will be redirected to the outgoing
interface.
egress_port – The port that the packet will be redirected to.
<port> - Enter the number of the redirect port.
deny - Specifies the packets that match the access profile are filtered by the switch.
time_range - (Optional) Specifies the name of this time range entry.
<range_name 32> - Enter the name of this time range entry. The maximum length is 32
characters.
delete access_id - Specifies to delete the access ID.
<value 1-256> - Enter the value between 1 and 256.
Restrictions
Only Administrators, Operators and Power-Users can issue this command.
Example
To configure an access list entry:
DGS-3620-28PC:admin#config access_profile profile_id 1 add access_id 1 ip vlan
default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp port 1 permit
Command: config access_profile profile_id 1 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp port 1 permit
Success.
DGS-3620-28PC:admin#
108