D-Link DES-1210-52/ME - Create Access_Profile

DES-1210-52/ME L2 Metro Ethernet Switch CLI Reference Guide
395
Command
Parameter
[<portlist> | all] [permit | deny]] delete access_id <value (1-5)>]
delete
cpu_access_profile
profile_id <value 1-3>
enable
cpu_interface_filtering
disable
cpu_interface_filtering
show
cpu_access_profile
{profile_id <value 1-3>}
config flow_meter
profile_id
<value 1-10> access_id <value 1-128> [delete | rate <value 64-1024000>]
burst_size <value 0-1016> rate_exceed [drop_packet | remark_dscp <value 0-
63>]
Each command is listed in detail, as follows:
create access_profile
Purpose
To create an access profile on the Switch by examining the Ethernet
part of the packet header. Masks entered are combined with the
values the Switch finds in the specified frame header fields. Specific
values for the rules are entered using the config access_profile
command, below.
Syntax
create access_profile [ ethernet {vlan | source_mac <macmask>
| destination_mac <macmask> | 802.1p | ethernet_type} | ip
{ source_ip_mask <netmask> | destination_ip_mask <netmask>
| dscp | [ icmp { type | code } | igmp { type } | tcp
{ src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-
0xffff> | flag_mask} | udp { src_port_mask <hex 0x0-0xffff> |
dst_port_mask <hex 0x0-0xffff> } | protocol_id_mask <0x0-0xff>
]} | packet_content_mask {offset1 [ l2 | l3 | l4 ] <value (0-31)>
<hex (0x0-0xffff)> | offset2 [ l2 | l3 | l4 ] <value (0-31)> <hex (0x0-
0xffff)>| offset3 [ l2 | l3 | l4 ] <value (0-31)> <hex (0x0-0xffff)>|
offset4 [ l2 | l3 | l4 ] <value (0-31)> <hex (0x0-0xffff)>} | ipv6
{ class | source_ipv6_mask <ipv6mask> |
destination_ipv6_mask <ipv6mask> | [tcp { src_port_mask <hex
0x0-0xffff> | dst_port_mask <hex 0x0-0xffff>} | udp
{ src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-
0xffff>} | icmp { type | code } ]} profile_id <value 1-10> ]
Description
The create access_profile command creates a profile for packets
that may be accepted or denied by the Switch by examining the
Ethernet part of the packet header. Specific values for rules
pertaining to the Ethernet part of the packet header may be defined
by configuring the config access_profile command for Ethernet, as
stated below.
Parameters
ethernet - Specifies that the Switch examines the layer 2 part of
each packet header with emphasis on one or more of the following:
 vlan – Specifies that the Switch examine the VLAN part of
each packet header.
 source_mac <macmask> – Specifies a MAC address mask
for the source MAC address. This mask is entered in the
following hexadecimal format: 000000000000-
FFFFFFFFFFFF.