D-Link DGS-3700 Series Reference Manual page 363

DGS-3700 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
A C
CCESS ONTROL
Table of Contents
Next Section
Previous Section
A C
CCESS ONTROL
Back to Section Header
The Switch implements Access Control Lists that enable the Switch to control network access to specific
devices or device groups based on IP settings and MAC address.
The access profile commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
Note: The ACL command set has been changed for the Release III firmware. In particular,
note the different role of the profile_id and access_id parameters. The new treatment has
changed some of the command parameters as well.
C
OMMAND
create access_profile
delete access_profile
config access_profile
L
IST
L (ACL) C
IST
P
ARAMETERS
profile_id <value 1-12> profile_name <name 1-32> [ethernet {vlan {<hex 0x0-
0x0fff>} | source_mac <macmask> | destination_mac <macmask> | 802.1p |
ethernet_type} | ip {vlan {<hex 0x0-0x0fff>} | source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp | [icmp {type | code } | igmp {type} |
tcp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> |
flag_mask [all | {urg | ack | psh | rst | syn | fin}] } | udp {src_port_mask <hex
0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} | protocol_id_mask <hex 0x0-
0xff> {user_define_mask <hex 0x0-0xffffffff>} ]} | packet_content_mask
{ offset_chunk_1 <value 0-31> <hex 0x0-0xffffffff> | offset_chunk_2 <value
0-31> <hex 0x0-0xffffffff> | offset_chunk_3 <value 0-31> <hex 0x0-
0xffffffff> | offset_chunk_4 <value 0-31> <hex 0x0-0xffffffff>} | ipv6
{[{ class | flowlabel | [ tcp { src_port_mask <hex 0x0-0xffff> | dst_port_mask
<hex 0x0-0xffff>} | udp { src_port_mask <hex 0x0-0xffff> | dst_port_mask
<hex 0x0-0xffff> } ]} | source_ipv6_mask <ipv6mask> |
destination_ipv6_mask <ipv6mask>]}]
[profile_id <value 1-12> | all | profile_name <name 1-32 >]
[profile_id <value 1-12> | profile_name <name 1-32>] [ add access_id
[ auto_assign | <value 1-128> ][ethernet {[vlan <vlan_name 32> | vlan_id
<vlanid 1-4094>] {mask <hex 0x0-0x0fff>}|source_mac <macaddr> {mask
<macmask>}|destination_mac <macaddr> {mask <macmask>}|802.1p <value
0-7>|ethernet_type <hex 0x0-0xffff>}|ip{[vlan <vlan_name 32> | vlan_id
<vlanid 1-4094>] {mask <hex 0x0-0x0fff>}|source_ip <ipaddr> {mask
<netmask>}|destination_ip <ipaddr> {mask <netmask>}|dscp <value 0-
63>|[icmp {type <value 0-255>|code <value 0-255>}|igmp {type <value 0-
255>}|tcp {src_port <value 0-65535> {mask <hex 0x0-0xffff>} | dst_port
<value 0-65535> {mask <hex 0x0-0xffff>}|flag [ all |
{ urg|ack|psh|rst|syn|fin}] } |udp {src_port <value 0-65535> {mask <hex 0x0-
0xffff>} | dst_port <value 0-65535> {mask <hex 0x0-0xffff>}}|protocol_id
<value 0-255> {user_define <hex 0x0-0xffffffff> {mask <hex 0x0-
0xffffffff>}}]}| packet_content { offset_chunk_1 <hex 0x0-0xffffffff> |
offset_chunk_2 <hex 0x0-0xffffffff> | offset_chunk_3 <hex 0x0-0xffffffff> |
(ACL) S
ECTION
OMMANDS
Page | 363
8