D-Link DES-1228/ME Reference Manual page 222

config access_profile
tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP) field
within each packet.
src_port <value 0-65535> − Specifies that the access profile will apply only to packets that
have this TCP source port in their TCP header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to packets that
have this TCP destination port in their TCP header.
flag – Enter the type of TCP flag to be matched.
all: all flags are selected.
urg: TCP control flag (urgent)
ack: TCP control flag (acknowledgement)
psh: TCP control flag (push)
rst: TCP control flag (reset)
syn: TCP control flag (synchronize)
fin: TCP control flag (finish)
udp − Specifies that the Switch will examine the Universal Datagram Protocol (UDP) field in
each packet.
src_port <value 0-65535> − Specifies that the access profile will apply only to packets that
have this UDP source port in their header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to packets that
have this UDP destination port in their header.
protocol_id <value 0-255> − Specifies that the Switch will examine the protocol field in each
packet and if this field contains the value entered here, apply the following rules.
ipv6 - Specifies IPv6 filtering mask.
class – Specifies the IPv6 class.
flowlabel – Specifies the IPv6 flow label.
source_ipv6_mask – Specifies an IPv6 source address.
src_port_mask – Specifies an IPv6 L4 (TCP/UDP) source port submask.
dst_port_mask – Specifies an IPv6 L4 (TCP/UDP) destination port submask.
.
port <portlist> − Specifies the port number on the Switch to permit or deny access for the
Parameters
rule. The user can also configure "all" to specify all ports.
permit – Specifies that packets that match the access profile are permitted to be forwarded by
the Switch.
priority <value 0-7> − This parameter is specified if you want to re-write the 802.1p user priority
value set in the packet, which is used to determine the CoS queue to which packets are
forwarded to. Once this field is specified, packets accepted by the Switch that match this
priority are forwarded to the CoS queue specified previously by the user.
replace_priority − Enter this parameter if you want to re-write the 802.1p user priority of a
packet to the value entered in the Priority field, which meets the criteria specified previously in
this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will
have its incoming 802.1p user priority re-written to its original value before being forwarded by
the Switch.
replace_dscp_with − Specifies that DSCP of the outgoing packet will be marked by the new
value.
counter – Specifies whether the counter feature will be enabled or disabled. The is optional.
The default is disable. If the rule is not bound with a flow meter, then all packets matched will
be counted. If the rule is bound with a flow meter, the counter is overridden.
deny – Specifies that packets that do not match the access profile are not permitted to be
forwarded by the Switch and will be filtered.
mirror – Specifies the packets that match the access profile are sent the copied one to the
mirror port.
mask - These options provides an additional mask for each field. This additional mask should
be subset of the field mask defined by the profile. The final mask is the result of the AND
DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide
218