D-Link DES-3326S - Page 198

D-Link DES-3326S Layer 3 Switch CLI Reference
Parameters
source_ip <ipaddr> − Specifies that the access profile will apply to only packets with
this source IP address.
icmp − Specifies that the Switch will examine the Internet Control Message Protocol
(ICMP) field within each packet.
ip − Specifies that the Switch will look into the IP fields in each packet.
vlan <vlan_name 32> − Specifies that the access profile will apply to only this VLAN.
destination_id <value 0-255> − Specifies that the access profile will apply to only
packets with this destination IP address.
dscp <value 0-63> − Specifies that the access profile will apply only to packets that
have this value in their Type-of-Service (DiffServ code point, DSCP) field in their IP
packet header
type <value 0-65535> − Specifies that the access profile will apply to this ICMP type
value.
code <value 0-255> − Specifies that the access profile will apply to this ICMP code.
igmp − Specifies that the Switch will examine the Internet Group Management
Protocol (IGMP) field within each packet.
type <value 0-255> − Specifies that the access profile will apply to packets that have
this IGMP type value.
tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP)
field within each packet.
src_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this TCP source port in their TCP header.
dst_port <value 0-65535>
− Specifies that the access profile will apply only to
packets that have this TCP destination port in their TCP header.
udp − Specifies that the Switch will examine each frame’s Universal Datagram
Protocol (UDP) field.
src_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this UDP source port in their header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this UDP destination port in their header.
protocol_id <value 0-255> − Specifies that the Switch will examine the protocol field
in each packet and if this field contains the value entered here, apply the following
rules.
permit - Specifies the rule permit access for incoming packets on the previously
specified port.
deny - Specifies the rule will deny access for incoming packets on the previously
specified port
delete access_id <value 1-65535> - Use this to remove a previously created access
rule in a profile id.
Restrictions Only administrator-level users can issue this command.
192