D-Link DES-1228 Reference Manual page 177

create access_profile
Restrictions
Example usage:
To create an access list rules:
DES-1228/ME:4#create access_profile ip vlan source_ip_mask 20.0.0.0 destination_ip_mask
10.0.0.0 dscp icmp profile_id 101
Command: create access_profile
10.0.0.0 dscp icmp permit profile_id 101
Success.
DES-1228/ME:4#
DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
ip − Specifies that the Switch will examine the IP address in each frame's header.
vlan − Specifies a VLAN mask.
source_ip_mask <netmask> − Specifies an IP address mask for the source IP
address.
destination_ip_mask <netmask> − Specifies an IP address mask for the destination
IP address.
dscp − Specifies that the Switch will examine the DiffServ Code Point (DSCP) field in
each frame's header.
icmp − Specifies that the Switch will examine the Internet Control Message Protocol
(ICMP) field in each frame's header.
igmp − Specifies that the Switch will examine each frame's Internet Group
Management Protocol (IGMP) field.
src_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the source port.
dst_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask for the destination port.
flag_mask – Enter the appropriate flag_mask parameter. All incoming packets have
TCP port numbers contained in them as the forwarding criterion. These numbers
have flag bits associated with them which are parts of a packet that determine
what to do with the packet. The user may deny packets by denying certain flag
bits within the packets. The user may choose between all, urg (urgent), ack
(acknowledgement), psh (push), rst (reset), syn (synchronize) and fin (finish).
udp − Specifies that the Switch will examine each frame's Universal Datagram Protocol
(UDP) field.
src_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the source port.
dst_port_mask <hex 0x0-0xffff> − Specifies a UDP port mask for the destination port.
protocol_id_mask − Specifies that the Switch will examine the protocol field in each packet
and if this field contains the value entered here, apply the following rules.
profile_id <value 1-256> − Sets the relative priority for the profile. Priority is set
relative to other profiles where the lowest profile ID has the highest priority. The
user may enter a profile ID number between 1 to 256.
Only Administrator-level users can issue this command.
ip vlan source_ip_mask
172
20.0.0.0 destination_ip_mask