xStack
config access_profile profile_id (for Ethernet)
Purpose | Used to configure the Ethernet access profile on the Switch and to |
| define specific values for the rules that will be used to by the Switch |
| to determine if a given packet should be forwarded or filtered. Masks |
| entered using the create access_profile command will be |
| combined, using a logical AND operational method, with the values |
| the Switch finds in the specified frame header fields. |
Syntax | config access_profile profile_id <value |
| <value |
| <macaddr> destination_mac <macaddr> 802.1p <value |
| ethernet_type <hex |
| <value |
| deny] delete <value |
Description | This command is used to define the rules used by the Switch to |
| either filter or forward packets based on the Ethernet part of each |
| packet header. |
Parameters | profile_id <value |
| used to identify the access profile that will be configured with this |
| command. This value is assigned to the access profile when it is |
| created with the create access_profile command. The lower the |
| profile ID, the higher the priority the rule will be given. |
| add access_id <value |
| above specified access profile. The value specifies the relative |
| priority of the additional rule. Up to 65535 different rules may be |
| configured for the Ethernet access profile. |
| ethernet - Specifies that the Switch will look only into the layer 2 part |
| of each packet to determine if it is to be filtered or forwarded based |
| on one or more of the following: |
| • vlan <vlan_name 32> − Specifies that the access profile will |
| apply to only this previously created VLAN. |
| • source_mac <macaddr> − Specifies that the access profile will |
| apply to only packets with this source MAC address. MAC |
| address entries may be made in the following format: |
|
|
| • destination_mac <macaddr> − Specifies that the access profile |
| will apply to only packets with this destination MAC address. |
| MAC address entries may be made in the following format: |
| |
| • 802.1p <value |
| apply only to packets with this 802.1p priority value. |
| • ethernet_type <hex |
| profile will apply only to packets with this hexadecimal 802.1Q |
| Ethernet type value in the packet header. |
| port <portlist> - The access profile for Ethernet may be defined for |
| each port on the Switch. The port list is specified by listing the lowest |
| switch number and the beginning port number on that switch, |
| separated by a colon. Then the highest switch number, and the |
| highest port number of the range (also separated by a colon) are |
| specified. The beginning and end of the port list range are separated |
| by a dash. For example, 1:3 specifies switch number 1, port 3. 2:4 |
| specifies switch number 2, port 4. |
| between switch 1, port 3 and switch 2, port 4 − in numerical order. |
| permit – Specifies that packets that match the access profile are |
214