xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
21
7
config access_profile
source_ipv6_mask – Specifies an IPv6 source address.
src_port_mask – Specifies an IPv6 L4 (TCP/UDP) source port submask.
dst_port_mask – Specifies an IPv6 L4 (TCP/UDP) destination port submask.
packet_content – A maximum of 11 offsets can be specified. Each offset defines two bytes of
data, which is identified as a single UDF field. The offset reference is also configurable. It can
be defined to start at the end of a tag, the end of an ether type or the end of an IP header. To
qualify the fields before the end of a tag, the destination address, source address, and the
VLAN tags are also included.
source_mac – Specifies that the access profile will only apply to packets with this source MAC
address.
destination_mac – Specifies that the access profile will only apply to packets with this
destination MAC address.
c_tag – Specifies the 16-bit inner VLAN tag of the packet to match. This constitutes the 3-bit
PCP, 1-bit CFI and 12-bit VID fields.
s_tag – Specifies the 16-bit outer VLAN tag of the packet to match. This constitutes the 3-bit
PCP, 1-bit CFI and 12-bit VID fields.
offset1 – offset11 – Specifies the data to match for each match UDF field data defined in the
profile.
Example: If offset1 defined as “offset1 0 L2 0x00FF” is defined in the profile, and in this
command the data specified is “offset1 0x00AA”, then the switch will look at the second byte of
the ether type. If the byte matches 0xAA, then the device will process the packet according to
the configured action.
Parameters
port <portlist> Specifies the port number on the Switch to permit or deny access for the
rule. The user can also configure “all” to specify all ports.
permit – Specifies that packets that match the access profile are permitted to be forwarded by
the Switch.
priority <value 0-7> This parameter is specified if you want to re-write the 802.1p user priority
value set in the packet, which is used to determine the CoS queue to which packets are
forwarded to. Once this field is specified, packets accepted by the Switch that match this
priority are forwarded to the CoS queue specified previously by the user.
replace_priority Enter this parameter if you want to re-write the 802.1p user priority of a
packet to the value entered in the Priority field, which meets the criteria specified previously in
this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will
have its incoming 802.1p user priority re-written to its original value before being forwarded by
the Switch.
replace_dscp_with Specifies that DSCP of the outgoing packet will be marked by the new
value.
counter – Specifies whether the counter feature will be enabled or disabled. The is optional.
The default is disable. If the rule is not bound with a flow meter, then all packets matched will
be counted. If the rule is bound with a flow meter, the counter is overridden.
deny – Specifies that packets that do not match the access profile are not permitted to be
forwarded by the Switch and will be filtered.
mirror – Specifies the packets that match the access profile are sent the copied one to the
mirror port.
time_range <range_name 32> – Choose this parameter and enter the name of the Time Range
settings that has been previously configured using the config time_range command. This will
set specific times when this access rule will be enabled or disabled on the Switch.
mask - These options provides an additional mask for each field. This additional mask should
be subset of the field mask defined by the profile. The final mask is the result of the AND
operation of the profile mask and this per rule mask.
delete access_id <value 1-65535> Use this command to delete a specific ACL rule from
the Ethernet profile, IP profile or packet_content profile. Up to 512 rules may be
To Next Page
Loading...
Need help?
General
