D-Link xStack DGS-3620 Series - Page 140

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
135
replace_vlan_id_with - (Optional) Specifies the VLAN ID to replace the outer VLAN ID of the
matched packets.
<value 1-4094> - Enter the replacement VLAN ID here. This value must be between 1 and
4094.
counter - (Optional) Specifies whether the ACL counter feature is enabled or disabled. This
parameter is optional. The default option is disabled. If the rule is not bound with the
flow_meter, all matching packets are counted. If the rule is bound with the flow_meter, then
the “counter” is overridden.
enable - Specifies that the ACL counter feature will be enabled.
disable - Specifies that the ACL counter feature will be disabled.
deny - Specifies the packets that match the egress access rule are filtered by the switch.
time_range - (Optional) Specifies the name of the time range entry.
<range_name 32> - Enter the time range value here. This name can be up to 32 characters
long.
delete - Specifies to delete a profile or rule.
access_id - Specifies the index of the access list entry. If the auto_assign option is selected, the
access ID is automatically assigned.
<value 1-128> - Enter the access ID used here. This value must be between 1 and 128.
Restrictions
Only Administrators, Operators and Power-Users can issue this command.
Example
To configure a port-base egress access rule that when the packet go out switch which match the
specified source IP, DSCP and destination IP field, it will not be dropped:
DGS-3620-28PC:admin# config egress_access_profile profile_id 2 add access_id
auto_assign ip source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group
id 1 permit
Command: config egress_access_profile profile_id 2 add access_id auto_assign ip
source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group id 1 permit
Success.
DGS-3620-28PC:admin#
To configure a vlan-base egress access rule that when the packet go out switch which match the
specified source MAC field, it will be dropped:
DGS-3620-28PC:admin# config egress_access_profile profile_id 2 add access_id 1
ethernet source_mac 11-22-33-44-55-66 vlan_based vlan_id 1 deny
Command: config egress_access_profile profile_id 2 add access_id 1 ethernet
source_mac 11-22-33-44-55-66 vlan_based vlan_id 1 deny
Success.
DGS-3620-28PC:admin#
6-4 show egress_access_profile
Description
This command is used to display current egress access list table.