DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
202
802.1p | ethernet_type}]
Description The create access_profile command creates a profile for packets
that may be accepted or denied by the Switch by examining the
Ethernet part of the packet header. Specific values for rules
pertaining to the Ethernet part of the packet header may be defined
by configuring the config access_profile command for Ethernet, as
stated below.
Parameters profile_id <value 1-15> – Specifies an index number between 1 and
15 that identifies the access profile being created with this
command.
ethernet - Specifies that the Switch examines the layer 2 part of
each packet header with emphasis on one or more of the following:
• vlan – Specifies that the Switch examine the VLAN part of
each packet header.
• source_mac <macmask> – Specifies a MAC address mask
for the source MAC address. This mask is entered in the
following hexadecimal format: 00:00:00:00:00:00-
FF:FF:FF:FF:FF:FF
• destination_mac <macmask> – Specifies a MAC address
mask for the destination MAC address in the following
format: 00:00:00:00:00:00-FF:FF:FF:FF:FF:FF
• 802.1p – Specifies that the Switch examine the 802.1p
priority value in the frame’s header.
ethernet_type – Specifies that the Switch examine the Ethernet type
value in each frame’s header.
Restrictions Only administrator or operate-level users can issue this command.
Example usage:
To create an Ethernet access profile:
DGS3100# create access_profile profile_id 1 ethernet vlan 802.1p
Success.
DGS3100#
create access_profile (for IP)
Purpose To create an access profile on the Switch by examining the IP part
of the packet header. Masks entered are combined with the values
the Switch finds in the specified frame header fields. Specific values
for the rules are entered using the config access_profile
command, below.
Syntax
profile_id <value 1-15> ip [ icmp { type | code } | igmp { type } |
tcp { src_port_mask < hex 0x0–0xffff > | dst_port_msk <hex
0x0-0xffff> | flag_mask }{+ | –} {urg | ack | psh | rst | syn | fin }} |
udp { src_port_mask < hex 0x0–0xffff > | dst_port_msk <hex
0x0-0xffff> } ] { source_ip_mask <netmask> |
destination_ip_mask <netmask> | dscp }
Description The create access_profile command creates a profile for packets
that may be accepted or denied by the Switch by examining the IP
part of the packet header. Specific values for rules pertaining to the
IP part of the packet header may be defined by configuring the
To Next Page
Loading...
Need help?
General
