DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
205
802.1Q Ethernet type value in the packet header.
ports <portlist> - The access profile for Ethernet may be defined for
each port on the Switch.
permit – Specifies that packets that match the access profile are
permitted to be forwarded by the Switch.
• replace_priority – Specifies the value to replace the 802.1p
default priority of a packet, which meets the criteria specified
previously in this command, before forwarding it on to the
specified CoS queue. Otherwise, a packet will have its
incoming 802.1p user priority re-written to its original value
before being forwarded by the Switch.
• replace_dscp <value 0-63> – Specifies a value to be
written to the DSCP field of an incoming packet that meets
the criteria specified in the first part of the command. This
value will over-write the value in the DSCP field of the
packet.
• rate_limit <value 64-1000000> – Specifies the rate limit to
limit Rx bandwidth for for the profile being configured. This
rate is implemented using the following equation – 1 value =
64kbit/sec. (ex. If the user selects a rx rate limit of 10 then
the ingress rate is 640kbit/sec.) The user many select a
value between 64- 1000000 or no limit. The default setting is
no limit.
deny – Specifies that packets that do not match the access profile
are not permitted to be forwarded by the Switch and will be filtered.
• time_range <range_name 32>} – Defines a time range
name.
Restrictions Only Administrator or operator-level users can issue this command.
Example usage:
To configure a rule for the Ethernet access profile:
DGS3100# config access profile profile_id 1 add access_id 1 ethernet vlan Trinity 802.1p 1
port 1 permit priority 1 replace priority 1
Success.
DGS3100#
config access_profile (for IP)
Purpose To configure the IP access profile on the Switch and to define
specific values for the rules that to be used to by the Switch to
determine if a given packet should be forwarded or filtered. Masks
entered using the create access_profile command will be
combined, using a logical AND operational method, with the values
the Switch finds in the specified frame header fields.
Syntax
config access_profile profile_id <value 1-15> [add access_id
[auto assign | <value 1-240>] [ip {source_ip <ipaddr> |
destination_ip <ipaddr> | dscp <value 0–63> | [icmp {type
<value 0-255> code <value 0-255>} | igmp {type <value 0-255>} |
tcp {src_port <value 0-65535> | dst_port <value 0-65535> |flag
{+ | –} {urg | ack | psh | rst | syn | fin } | udp {src_port <value 0-
65535> | dst_port <v
alue 0-65535>}]} ports [<p
ortlist> | <ch1-
32>] [permit {replace_priority <value 0-7> | replace_dscp <value
To Next Page
Loading...
Need help?
General
