D-Link DES-3852 - xStack Switch - Stackable Cli Manual page 154

xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CLI Manual
config access_profile profile_id (for Ethernet)
Restrictions
Example usage:
To configure a rule for the Ethernet access profile:
DES-3800:admin#config access profile profile_id 1 add access_id 1
ethernet vlan Trinity 802.1p 1 port 1 permit priority 1 replace
priority
Command: config access profile profile_id 1 add access_id 1
ethernet vlan Trinity 802.1p 1 port 1 permit priority 1 replace
priority
Success.
DES-3800:admin#
create access_profile (IP)
Purpose
Syntax
Description
Parameters
delete access_id <value 1-65535> − Use this command to delete a specific rule
from the Ethernet profile. Up to 65535 rules may be specified for the Ethernet
access profile.
Only Administrator or Operator-level users can issue this command.
Used to create an access profile on the Switch by examining the IP part of the
packet header. Masks entered can be combined with the values the Switch finds in
the specified frame header fields. Specific values for the rules are entered using the
config access_profile command, below.
create access_profile ip {vlan | source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} |
tcp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> |
flag_mask [all | {urg | ack | psh | rst | syn | fin}]} | udp {src_port_mask <hex
0x0-0xffff> | dst_port_mask <hex 0x0-xffff>} | protocol_id_mask
{user_define_mask <hex 0x0-0xffffffff> <hex 0x0-0xffffffff><hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}]} profile_id <value 1-255>}
This command will allow the user to create a profile for packets that may be
accepted, denied or mirrored by the Switch by examining the IP part of the packet
header. Specific values for rules pertaining to the IP part of the packet header may
be defined by configuring the config access_profile command for IP, as stated
below.
ip - Specifies that the Switch will look into the IP fields in each packet with special
emphasis on one or more of the following:
vlan − Specifies a VLAN mask.
•
source_ip_mask <netmask> − Specifies an IP address mask for the source IP
•
address.
destination_ip_mask <netmask> − Specifies an IP address mask for the
•
destination IP address.
dscp − Specifies that the Switch will examine the DiffServ Code Point (DSCP)
•
field in each frame's header.
icmp − Specifies that the Switch will examine the Internet Control Message
•
Protocol (ICMP) field in each frame's header.
type − Specifies that the Switch will examine each frame's ICMP
Type field.
code − Specifies that the Switch will examine each frame's ICMP
Code field.
igmp − Specifies that the Switch will examine each frame's Internet Group
•
Management Protocol (IGMP) field.
150