D-Link DES-1228 - Page 179

DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
174
config access_profile
auto_assign – Choose this parameter to configure the Switch to automatically assign a
numerical value (between 1 and 65535) for the rule being configured.
ethernet − Specifies that the Switch will look only into the layer 2 part of each packet.
vlan <vlan_name 32> − Specifies that the access profile will apply to only to this
VLAN.
source_mac <macaddr> − Specifies that the access profile will apply to only packets
with this source MAC address.
destination_mac <macaddr> − Specifies that the access profile will apply to only
packets with this destination MAC address.
802.1p <value 0-7> − Specifies that the access profile will apply only to packets with
this 802.1p priority value.
ethernet_type <hex 0x0-0xffff> − Specifies that the access profile will apply only to
packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
Parameters
ip − Specifies that the Switch will look into the IP fields in each packet.
vlan <vlan_name 32> − Specifies that the access profile will apply to only this VLAN.
source_ip <ipaddr> − Specifies that the access profile will apply to only packets with
this source IP address.
destination_id <value 0-255> − Specifies that the access profile will apply to only
packets with this destination IP address.
dscp <value 0-63> − Specifies that the access profile will apply only to packets that
have this value in their Type-of-Service (DiffServ code point, DSCP) field in their
IP packet header
icmp − Specifies that the Switch will examine the Internet Control Message Protocol
(ICMP) field within each packet.
igmp − Specifies that the Switch will examine the Internet Group Management
Protocol (IGMP) field within each packet.
tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP)
field within each packet.
src_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this TCP source port in their TCP header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this TCP destination port in their TCP header.
urg: TCP control flag (urgent)
ack: TCP control flag (acknowledgement)
psh: TCP control flag (push)
rst: TCP control flag (reset)
syn: TCP control flag (synchronize)
fin: TCP control flag (finish)
udp − Specifies that the Switch will examine the Universal Datagram Protocol (UDP)
field in each packet.
src_port <value 0-65535>
− Specifies that the access profile will apply only to
packets that have this UDP source port in their header.
dst_port <value 0-65535>
− Specifies that the access profile will apply only to
packets that have this UDP destination port in their header.
protocol_id <value 0-255> − Specifies that the Switch will examine the protocol field in
each packet and if this field contains the value entered here, apply the following rules.
Parameters
port <portlist> − Specifies the port number on the Switch to permit or deny access for the
rule. The user can also configure “all” to specify all ports.
permit – Specifies that packets that match the access profile are permitted to be forwarded
by the Switch.