xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
133
the “counter” is overridden.
enable - Specifies that the ACL counter feature will be enabled.
disable - Specifies that the ACL counter feature will be disabled.
deny - Specifies the packets that match the egress access rule are filtered by the switch.
time_range - (Optional) Specifies the name of the time range entry.
<range_name 32> - Enter the time range value here. This name can be up to 32 characters
delete - Specifies to delete a profile or rule.
access_id - Specifies the index of the access list entry. If the auto_assign option is selected, the
access ID is automatically assigned.
<value 1-128> - Enter the access ID used here. This value must be between 1 and 128.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure a port-base egress access rule that when the packet go out switch which match the
specified source IP, DSCP and destination IP field, it will not be dropped:
DGS-3620-28SC:admin# config egress_access_profile profile_id 2 add access_id
auto_assign ip source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group
id 1 permit
Command: config egress_access_profile profile_id 2 add access_id auto_assign ip
source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group id 1 permit
Success.
To configure a vlan-base egress access rule that when the packet go out switch which match the
specified source MAC field, it will be dropped:
DGS-3620-28SC:admin# config egress_access_profile profile_id 2 add access_id 1
ethernet source_mac 11-22-33-44-55-66 vlan_based vlan_id 1 deny
Command: config egress_access_profile profile_id 2 add access_id 1 ethernet
source_mac 11-22-33-44-55-66 vlan_based vlan_id 1 deny
Success.
6-4 show egress_access_profile
Description
This command is used to display current egress access list table.
Format
show egress_access_profile {[profile_id <value 1-4> | profile_name <name 1-32>]}
To Next Page
Loading...
