Access Control List (Acl) Commands - D-Link DES-3852 - xStack Switch - Stackable Cli Manual

xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CLI Manual
The xStack DES-3800 switch series implements Access Control Lists that enable the Switch to deny or permit network access to
specific devices or device groups based on IP settings, MAC address, and packet content.
Command
create access_profile
delete access_profile profile_id
config access_profile profile_id
show access_profile
show current_config access_profile
config flow_meter profile_id
show flow_meter
create cpu access_profile
A C
CCESS
Parameters
[ethernet {vlan | source_mac <macmask> | destination_mac <macmask> |
802.1p | ethernet_type} | ip {vlan | source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} | tcp
{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> | flag_mask
[all | {urg | ack | psh | rst | syn | fin}]} | udp {src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-xffff>} | protocol_id {user _mask <hex 0x0-0xffffffff> }]}
| packet_content_mask {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-47 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-
63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff>}}] ipv6 { class | flowlabel | source_ipv6_mask
<ipv6mask> | destination_ipv6_mask <ipv6mask> } [profile_id <value 1-255>]
[profile_id <value 1-255> | all]
<value 1-255> [add access_id [auto_assign | <value 1-65535>] [ethernet {vlan
<vlan_name 32> | source_mac <macaddr> | destination_mac <macaddr> |
802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff> } | ip {vlan <vlan_name
32> | source_ip <ipaddr> |
[icmp {type <value 0-255> code <value 0-255>} | igmp {type <value 0-255>} |
tcp {src_port <value 0-65535> | dst_port <value 0-65535> | flag_mask [all | {urg
| ack | psh | rst | syn | fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-
65535>} | protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}]} |
packet_content_mask {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff><hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-47 <hex 0x0-xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> |
offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff>}] port <portlist> [permit {priority <value 0-7> {replace_priority} |
replace_dscp_with <value 0-63>} | deny | mirror] | delete access_id <value 1-
65535>] ipv6 { class <value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6
<ipv6addr> destination_ipv6 <ipv6addr> }
profile_id <value 1-255>
<value 1-255> access_id <value 1-65535> rate <value 0-999936> rate_exceed
[drop | set_drop_precedence ]
meter { profile_id < value 1-255 > { access_id < access_id >}}
[ethernet {vlan | source_mac <macmask> | destination_mac <macmask> |
ethernet_type} | ip {vlan | source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} | tcp
{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} | flag_mask
[all | {urg | ack | psh | rst | syn | fin}]} | udp {src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff>} | protocol_id {user_mask <hex 0x0-0xffffffff>}]}
| packet_content_mask {offset 0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset 16-31 <hex 0x0-0xffffffff> <hex
144
L (ACL) C
ONTROL IST
destination_ip <ipaddr> | dscp <value 0-63> |
19
OMMANDS