xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
141
code - Specifies that the rule will apply to the ICMP code traffic value.
<value 0-255> - Enter the ICMP code traffic value here. This value must be between 0 and
255.
vlan_based - The rule applies on the specified VLAN.
vlan - Specifies the VLAN name.
<vlan_name 32> - Enter the VLAN name used for this configuration here. This name can
be up to 32 characters long.
vlanid - Specifies a VLAN ID.
<vlanid 1-4094> - Enter the VLAN ID used for this congfiguration here. This value must be
port_group - Specifies the port group value here.
id - Specifies the ID of the port group which the rule applies.
<value 1-64> - Enter the group ID value here. This value must be between 1 and 64.
name - Specifies the name of the port group which the rule applies.
<name 16> - Enter the port group name here. This name can be up to 16 characters long.
port - Specifies the port in the port group used.
<port> - Enter the port number used here.
permit - Specifies that packets matching the egress access rule are permitted by the switch.
replace_priority_with - (Optional) Specifies the packets that match the egress access rule are
changed the 802.1p priority tag field by the switch.
<value 0-7> - Enter the replace priority with value here. This value must be between 0 and 7.
replace_dscp_with - (Optional) Specifies the packets that match the egress access rule are
changed the DSCP value by the switch.
<value 0-63> - Enter the replace DSCP with value here. This value must be between 0 and 63.
counter - (Optional) Specifies whether the ACL counter feature is enabled or disabled. This
parameter is optional. The default option is disabled. If the rule is not bound with the flow_meter,
all matching packets are counted. If the rule is bound with the flow_meter, then the “counter” is
overridden.
enable - Specifies that the ACL counter feature will be enabled.
disable - Specifies that the ACL counter feature will be disabled.
deny - Specifies the packets that match the egress access rule are filtered by the switch.
time_range - (Optional) Specifies the name of the time range entry.
<range_name 32> - Enter the time range value here. This name can be up to 32 characters long.
delete - Specifies to delete a profile or rule.
access_id - Specifies the index of the access list entry. If the auto_assign option is selected, the
access ID is automatically assigned.
<value 1-128> - Enter the access ID used here. This value must be between 1 and 128.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure a port-base egress access rule that when the packet go out switch which match the
specified source IP, DSCP and destination IP field, it will not be dropped:
To Next Page
Loading...
