Create Access_Profile (For Ip) - D-Link DGS-3100 SERIES Cli Manual

DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
Parameters
Restrictions
Example usage:
To create an Ethernet access profile:

create access_profile (for IP)

Purpose
Syntax
Description
Parameters
169
stated below.
profile_id <value 1-15> – Specifies an index number between 1 and
15 that identifies the access profile being created with this
command.
ethernet - Specifies that the Switch examines the layer 2 part of
each packet header with emphasis on one or more of the following:
•
vlan – Specifies that the Switch examine the VLAN part of
each packet header.
•
source_mac <macmask> – Specifies a MAC address mask
for the source MAC address. This mask is entered in the
following hexadecimal format: 00:00:00:00:00:00-
FF:FF:FF:FF:FF:FF
•
destination_mac <macmask> – Specifies a MAC address
mask for the destination MAC address in the following
format: 00:00:00:00:00:00-FF:FF:FF:FF:FF:FF
•
802.1p – Specifies that the Switch examine the 802.1p
priority value in the frame's header.
ethernet_type – Specifies that the Switch examine the Ethernet type
value in each frame's header.
Only administrator or operate-level users can issue this command.
DGS3100# create access_profile profile_id 1 ethernet vlan 802.1p
Success.
DGS3100#
To create an access profile on the Switch by examining the IP part
of the packet header. Masks entered are combined with the values
the Switch finds in the specified frame header fields. Specific values
for the rules are entered using the config access_profile
command, below.
profile_id <value 1-15> ip [ icmp { type | code } | igmp { type } |
tcp { src_port_mask < hex 0x0-0xffff > | dst_port_msk <hex 0x0-
0xffff> | flag_mask } | udp { src_port_mask < hex 0x0-0xffff > |
dst_port_msk <hex 0x0-0xffff> } ] { source_ip_mask <netmask>
| destination_ip_mask <netmask> | dscp }
The create access_profile command creates a profile for packets
that may be accepted or denied by the Switch by examining the IP
part of the packet header. Specific values for rules pertaining to the
IP part of the packet header may be defined by configuring the
config access_profile command for IP, as stated below.
profile_id <value 1-15> – Specifies an index number between 1 and
15 that identifies the access profile being created with this
command.
ip - Specifies that the Switch examines the IP fields in each packet
with special emphasis on one or more of the following: