DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual
152
config access_profile
Parameters
packet_content_mask – Specifies that the Switch will mask the packet header beginning with the
offset value specified as follows:
• offset_0-15 - Enter a value in hex form to mask the packet from the beginning of the packet
to the 15
th
byte.
• offset_16-31 - Enter a value in hex form to mask the packet from byte 16 to byte 32.
• offset_32-47 - Enter a value in hex form to mask the packet from byte 32 to byte 47.
• offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to byte 63
• offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to byte 79.
port <portlist> - Specifies the port number on the Switch to permit or deny access for the rule.
permit
- Specifies the rule permit access for incoming packets on the previously specified port.
• priority <value 0-7> − Specifies that the access profile will apply to packets that contain this
value in their 802.1p priority field of their header for incoming packets on the previously
specified port.
• {replace_priority} - Allows you to specify a new value to be written to the priority field of an
incoming packet on the previously specified port.
• replace_dscp_with <value 0-63> − Allows you to specify a new value to be written to the
DSCP field of an incoming packet on the previously specified port.
deny
- Specifies the rule will deny access for incoming packets on the previously specified port.
delete access_id <value 1-65535> - Use this to remove a previously created access rule in a
profile id.
Restrictions
Only administrator-level users can issue this command.
Example usage:
To configure the access profile with the profile ID of 1 to filter frames on port 7 that have IP addresses in the range
between 10.42.73.0 to 10.42.73.255:
DES-3526:4# config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 port 7 deny
Command: config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 port 7 deny
Success.
DES-3526:4#
show access_profile
Purpose Used to display the currently configured access profiles on the
Switch.
Syntax
show access_profile {profile_id <value 1-255>
{access_id <value 1-65535>}}
Description The show access_profile command is used to display the currently
configured access profiles.
Parameters profile_id – Specify the profile id to display only the access rules
configuration for a single profile id.
access_id - Specify the access id to display the access rule
configuration for the access id.
Restrictions None.
To Next Page
Loading...
