D-Link DES-3326S Command Line Interface Reference Manual page 187

create access_profile
Parameters flag_mask – Specifies examination of TCP flag field according to the type of flag.
Specify all to examine all type of TCP flag fields.
urg – Specifies urgent TCP flag field.
ack – Specifies acknowledge TCP flag field.
psh - Specifies push TCP flag field.
rst - Specifies reset TCP flag field.
syn - Specifies synchronize TCP flag field. Specifying the SYN flag will prevent any
client from making TCP connections to the system.
fin - Specifies finish TCP flag field.
udp − Specifies that the Switch will examine each frame's Universal Datagram
Protocol (UDP) field.
src_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the source port.
dst_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the destination
port.
protocol_id − Specifies that the Switch will examine each frame's Protocol ID field.
user_mask <hex 0x0-0xffffffff> − Specifies that the rule applies to the IP protocol ID
and the mask options behind the IP header.
profile_id <value 1-255> − Specifies an index number that will identify the access
profile being created with this command.
Restrictions Only administrator-level users can issue this command.
Example usage:
To create an access profile that will deny service to the subnet ranging from 10.42.73.0 to
10.42.73.255:
DES-3326S:4# create access_profile ip source_ip_mask 255.255.255.0 profile_id 1 deny
Command: create access_profile ip source_ip_mask 255.255.255.0 profile_id 1 deny
Success.
DES-3326S:4#
D-Link DES-3326S Layer 3 Switch CLI Reference
181