D-Link xStack DGS-3120 Series - Page 135

xStack
®
DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide
130
the “counter” is overridden.
enable - Specify that the ACL counter feature will be enabled.
disable - Specify that the ACL counter feature will be disabled.
deny - Specify the packets that match the egress access rule are filtered by the Switch.
time_range - (Optional) Specify the name of the time range entry.
<range_name 32> - Enter the time range value here. This name can be up to 32 characters
long.
delete - Specify to delete a profile or rule.
access_id - Specify the index of the access list entry. If the auto_assign option is selected, the
access ID is automatically assigned.
<value 1-128> - Enter the access ID used here. This value must be between 1 and 128. A
lower value denotes a higher priority.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure a port-base egress access rule that when the packet go out switch which match the
specified source IP, DSCP and destination IP field, it will not be dropped:
DGS-3120-24TC:admin# config egress_access_profile profile_id 2 add access_id
auto_assign ip source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group
id 1 permit
Command: config egress_access_profile profile_id 2 add access_id auto_assign ip
source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group id 1 permit
Success.
DGS-3120-24TC:admin#
To configure a vlan-base egress access rule that when the packet go out switch which match the
specified source MAC field, it will be dropped:
DGS-3120-24TC:admin# config egress_access_profile profile_id 2 add access_id 1
ethernet source_mac 11-22-33-44-55-66 vlan_based vlan_id 1 deny
Command: config egress_access_profile profile_id 2 add access_id 1 ethernet
source_mac 11-22-33-44-55-66 vlan_based vlan_id 1 deny
Success.
DGS-3120-24TC:admin#
7-4 show egress_access_profile
Description
This command is used to display current egress access list table.
Format
show egress_access_profile {[profile_id <value 1-4> | profile_name <name 1-32>]}