D-Link DES-3326S - Page 191

D-Link DES-3326S Layer 3 Switch CLI Reference
config access_profile
Parameters flag – Specifies examination of TCP flag field according to the type of flag. Specify all
to examine all type of TCP flag fields.
urg – Specifies urgent TCP flag field.
ack – Specifies acknowledge TCP flag field.
psh - Specifies push TCP flag field.
rst - Specifies reset TCP flag field.
syn - Specifies synchronize TCP flag field.
fin - Specifies finish TCP flag field.
udp − Specifies that the Switch will examine the Universal Datagram Protocol (UDP)
field in each packet.
src_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this UDP source port in their header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this UDP destination port in their header.
protocol_id <value 0-255> − Specifies that the Switch will examine the Protocol field
in each packet and if this field contains the value entered here, apply the following
rules.
user_define <hex 0x0-0xfffffff> − Specifies a mask to be combined with the value
found in the frame header using a logical AND operation.
priority <value 0-7> − Specifies that the access profile will apply to packets that
contain this value in their 802.1p priority field of their header.
permit − Specifies that packets that match the access profile are permitted to be
forwarded by the Switch.
replace_priority − This parameter is specified if you want to change the 802.1p user
priority of a packet that meets the specified criteria. Otherwise, a packet will have its
incoming 802.1p user priority re-written to its original value before being transmitted
from the Switch.
replace_dscp <value 0-63> − Allows you to specify a value to be written to the DSCP
field of an incoming packet that meets the criteria specified in the first part of the
command. This value will over-write the value in the DSCP field of the packet.
deny − Specifies that packets that do not match the access profile are not permitted
to be forwarded by the Switch and will be filtered.
delete <value 1-255> − Specifies the access ID of a rule you want to delete.
Restrictions Only administrator-level users can issue this command.
Example usage:
To configure the access profile with the profile ID of 1 to filter frames that have IP addresses in the
range between 10.42.73.0 to 10.42.73.255:
185