D-Link xStack DES-3528 Series Cli Reference Guide

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch CLI Reference Guide
268
config access_profile
Purpose
Used to configure an access profile on the Switch and to define specific values that will be
used to by the Switch to determine if a given packet should be forwarded or filtered. Masks
entered using the create access_profile command will be combined, using a logical AND
operational method, with the values the Switch finds in the specified frame header fields.
Specific values for the rules are entered using the config access_profile command, below.
Syntax config access_profile [profile_id <value 1-14> | profile_name <name 1-32>] [add
access_id [auto_assign | <value 1-128>] [ethernet {[vlan <vlan_name 32> | vlan_id
<vlanid 1-4094>] {mask <hex 0x0-0x0fff>} | source_mac <macaddr> {mask
<macmask>} | destination_mac <macaddr> {mask <macmask>} | 802.1p <value 0-7> |
ethernet_type <hex 0x0-0xffff>} | ip {[vlan <vlan_name 32> | vlan_id <vlanid 1-4094>]
{mask <hex 0x0-0x0fff>} | source_ip <ipaddr> {mask <netmask>} | destination_ip
<ipaddr> {mask <netmask>} | dscp <value 0-63> | [icmp {type <value 0-255> | code
<value 0-255>} | igmp {type <value 0-255>} | tcp {src_port <value 0-65535> {mask <hex
0x0-0xffff>} | dst_port <value 0-65535> {mask <hex 0x0-0xffff>} | flag [all | {urg | ack |
psh | rst | syn | fin}]} | udp {src_port <value 0-65535> {mask <hex 0x0-0xffff>} |
dst_port <value 0-65535> {mask <hex 0x0-0xffff>}} | protocol_id <value 0-255>
{user_define <hex 0x0-0xffffffff> {mask <hex 0x0-0xffffffff>}}]} | packet_content
{offset_chunk_1 <hex 0x0-0xffffffff> | offset_chunk_2 <hex 0x0-0xffffffff> |
offset_chunk_3 <hex 0x0-0xffffffff> | offset_chunk_4 <hex 0x0-0xffffffff>} | ipv6 {[{class
<value 0-255> | flowlabel <hex 0x0-0xfffff> | [tcp {src_port <value 0-65535> {mask <hex
0x0-0xffff>} | dst_port <value 0-65535> {mask <hex 0x0-0xffff>}} | udp {src_port
<value0-65535> {mask <hex 0x0-0xffff>} | dst_port <value 0-65535> {mask <hex 0x0-
0xffff>}}]} | source_ipv6 <ipv6addr> {mask <ipv6mask>} | destination_ipv6 <ipv6addr>
{mask <ipv6mask>}]}] [port [<portlist> | all] | vlan_based [vlan <vlan_name 32> |
vlan_id <vlanid 1-4094>]] [permit {priority <value 0-7> {replace_priority} |
[replace_dscp_with <value 0-63> | replace_tos_precedence_with <value 0-7>] | counter
[enable | disable]} | mirror | redirect egress_port <port> | deny] {time_range
<range_name 32>} | delete access_id <value 1-128>]
Description
This command is used to configure an access profile on the Switch and to enter specific
values that will be combined, using a logical AND operational method, with masks entered
with the create access_profile command, above.
Parameters
profile_id <value 1-14> − Enter an integer used to identify the access profile that will be
configured with this command. This value is assigned to the access profile when it is created
with the create access_profile command. The profile ID sets the relative priority for the
profile and specifies an index number that will identify the access profile being created with
this command. Priority is set relative to other profiles where the lowest profile ID has the
highest priority. The user may enter a profile ID number between 1 and 14, yet, remember
only 14 access profiles can be created on the Switch.
profile_name – Specifies the name of the profile. The maximum length is 32 characters.
add access_id <value 1-128> − Adds an additional rule to the above specified access profile.
The value is used to index the rule created. For information on number of rules that can be
created for a given port, lease see the introduction to this chapter.
ethernet − Specifies that the Switch will look only into the layer 2 part of each packet.
vlan <vlan_name 32> − Specifies that the access profile will only apply to this VLAN.
vlan_id <value 1-4094> - Specifies that the access prfile will only apply to this VLAN ID.
source_mac <macaddr> − Specifies that the access profile will apply to only packets with this
source MAC address.
destination_mac <macaddr> − Specifies that the access profile will
apply to only packets with this destination MAC address.
802.1p <value 0-7> − Specifies that the access profile will apply only to packets with this
802.1p priority value.
ethernet_type <hex 0x0-0xffff> − Specifies that the access profile will apply only to packets
with this hexadecimal 802.1Q Ethernet type value in the packet header.

D-Link xStack DES-3528 Series Specifications

General

Brand	D-Link
Model	xStack DES-3528 Series
Category	Switch
Language	English