D-Link DES-1210-52/ME - Page 418

DES-1210-52/ME L2 Metro Ethernet Switch CLI Reference Guide
400
source_ipv6 <ipv6addr> – Specifies that the access profile
applies only to packets with this source IPv6 address.
destination_ipv6 <ipv6addr> – Specifies that the access profile
applies only to packets with this destination IPv6 address.
tcp – Specifies that the Switch examines each frames protocol
field and its value must be 6 (Transmission Control Protocol-
TCP) for the action to take place.
 src_port <value 0-65535> – Specifies the TCP source
port range. The range is between 0 and 65535.
 dst_port <value 0-65535> – Specifies the TCP
destination port range. The range is between 0 and
65535.
udp – Specifies that the Switch examines each frame’s protocol
field and it’s value must be 17 (User Datagram Protocol-UDP) in
order for the action to take place.
 src_port <value 0-65535> –Specifies the UDP source
port range. The range is between 0 and 65535.
 dst_port <value 0-65535> –Specifies the UDP
destination port range. The range is between 0 and
65535.
icmp – Specifies that the Switch examines the Protocol field in
each frame’s IP header , and that the value must be 1 (Internet
Control Message Protocol- ICMP) for the action to take place.
 type <value 0-255> – Specifies that the Switch
examines each frame’s ICMP Type field. The range is
between 0 and 255.
 code <value 0-255> – Specifies that the Switch
examines each frame’s ICMP Code field. The range is
between 0 and 255.
port [<portlist> | all| - The access profile for IP may be defined for
each port on the Switch.
permit – Specifies that packets that match the access profile are
permitted to be forwarded by the Switch.
 mirror – Specifies the action to mirror before being
forwarded by the Switch.
 replace_dscp_with <value 0-63> – Specifies a value to be
written to the DSCP field of an incoming packet that meets
the criteria specified in the first part of the command. This
value will over-write the value in the DSCP field of the
packet.
rx_rate <value 64-1024000> – Specifies the rate limit to limit Rx
bandwidth for for the profile being configured. This rate is
implemented using the following equation – 1 value = 64kbit/sec.
(ex. If the user selects a rx rate limit of 10 then the ingress rate is
640kbit/sec.) The user many select a value between 64- 1024000 or
no limit. The default setting is no limit.
Restrictions
Only administrator or operate-level users can issue this command.
Example usage:
To configure a rule for the Ethernet access profile:
DES-1210-52/ME:5# config access_profile profile_id 2 add access_id 2 ip
protocol_id 2 ports 2 deny
Command: config access_profile profile_id 2 add access_id 2 ip protocol_id