DES-3550 Layer 2 Fast Ethernet Switch
config access_profile
Parameters
• packet_content_mask – Specifies that the Switch will mask the packet header beginning with
the offset value specified as follows:
•
•
• offset_32-47 - Enter a value in hex form to mask the packet from byte 32 to byte 47.
•
•
port <portlist> - Specifies the ports on the Switch to permit or deny access for the rule.
•
user_define <hex 0x0-0xfffffff> − Specifies a mask to be combined with the value found in the
frame header using a logical AND operation.
Only administrator-level users can issue this command.
offset_0-15 - Enter a value in hex form to mask the packet from the beginning of the packet
to the 15
th
byte.
offset_16-31 - Enter a value in hex form to mask the packet from byte 16 to byte 32.
offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to byte 63
offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to byte 79.
permit - Specifies the rule permit access for incoming packets on the previously specified
port.
•
• {replace_priority} - Allows you to specify a new value to be written to the priority field of an
incoming packet on the previously specified port.
•
•
priority <value 0-7> − Specifies that the access profile will apply to packets that contain this
value in their 802.1p priority field of their header for incoming packets on the previously
specified port.
replace_dscp_with <value 0-63> − Allows you to specify a new value to be written to the
DSCP field of an incoming packet on the previously specified port.
deny - Specifies the rule will deny access for incoming packets on the previously specified
port.
• delete access_id <value 1-65535> - Use this to remove a previously created access rule in a
profile id.
Restriction
s
Example usage:
To configure the access profile with the profile ID of 1 to filter frames on port 7 that have IP addresses in the range
between 10.42.73.0 to 10.42.73.255:
DES-3550:4# config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 port 7 deny
Command: config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 port 7 deny
Success.
DES-3550:4#
210
To Next Page
Loading...
