D-Link xStack DES-3800 Series Cli Manual page 171

xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CLI Manual
config access_profile profile_id (for Ethernet)
Restrictions
Example usage:
To configure a rule for the Ethernet access profile:
DES-3800:4#config access profile profile_id 1 add access_id 1 ethernet
vlan Trinity 802.1p 1 port 1:1 permit priority 1 replace priority
Command: config access profile profile_id 1 add access_id 1 ethernet
vlan Trinity 802.1p 1 port 1:1 permit priority 1 replace priority
Success.
DES-3800:4#
create access_profile (IP)
Purpose
Syntax
Description
re-write the 802.1p default priority previously set in the Switch,
which is used to determine the CoS queue to which packets
are forwarded to. Once this field is specified, packets accepted
by the Switch that match this priority are forwarded to the CoS
queue specified previously by the user.
{replace_priority} − Enter this parameter if you want to re-write
•
the 802.1p default priority of a packet to the value entered in
the Priority field, which meets the criteria specified previously
in this command, before forwarding it on to the specified CoS
queue. Otherwise, a packet will have its incoming 802.1p user
priority re-written to its original value before being forwarded by
the Switch.
replace_dscp <value 0-63> − Allows you to specify a value to be
written to the DSCP field of an incoming packet that meets the
criteria specified in the first part of the command. This value will
over-write the value in the DSCP field of the packet.
deny – Specifies that packets that do not match the access profile
are not permitted to be forwarded by the Switch and will be filtered.
delete access_id <value 1-100> − Use this command to delete a
specific rule from the Ethernet profile. Up to 100 rules may be
specified for the Ethernet access profile.
Only administrator-level users can issue this command.
Used to create an access profile on the Switch by examining the IP
part of the packet header. Masks entered can be combined with the
values the Switch finds in the specified frame header fields. Specific
values for the rules are entered using the config access_profile
command, below.
create access_profile ip {vlan | source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp | [icmp {type | code} |
igmp {type} | tcp {src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff> | flag_mask [all | {urg | ack | psh
| rst | syn | fin}]} | udp {src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-xffff>} | protocol_id {user _mask <hex
0x0-0xffffffff>}]} profile_id <value 1-8>}
This command will allow the user to create a profile for packets that
may be accepted or denied by the Switch by examining the IP part of
166