xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

config access_profile profile_id (for Ethernet)

Purpose

Used to configure the Ethernet access profile on the Switch and to

 

define specific values for the rules that will be used to by the Switch

 

to determine if a given packet should be forwarded or filtered. Masks

 

entered using the create access_profile command will be

 

combined, using a logical AND operational method, with the values

 

the Switch finds in the specified frame header fields.

Syntax

config access_profile profile_id <value 1-8> [add access_id

 

<value 1-65535> [ethernet {vlan <vlan_name 32> source_mac

 

<macaddr> destination_mac <macaddr> 802.1p <value 0-7>

 

ethernet_type <hex 0x0-0xffff>} port <port> [permit {priority

 

<value 0-7> {replace_priority} replace_dscp <value 0-63> }

 

deny] delete <value 1-65535>]

Description

This command is used to define the rules used by the Switch to

 

either filter or forward packets based on the Ethernet part of each

 

packet header.

Parameters

profile_id <value 1-8>- Enter an integer between 1 and 8 that is

 

used to identify the access profile that will be configured with this

 

command. This value is assigned to the access profile when it is

 

created with the create access_profile command. The lower the

 

profile ID, the higher the priority the rule will be given.

 

add access_id <value 1-65535>- Adds an additional rule to the

 

above specified access profile. The value specifies the relative

 

priority of the additional rule. Up to 65535 different rules may be

 

configured for the Ethernet access profile.

 

ethernet - Specifies that the Switch will look only into the layer 2 part

 

of each packet to determine if it is to be filtered or forwarded based

 

on one or more of the following:

 

vlan <vlan_name 32> Specifies that the access profile will

 

apply to only this previously created VLAN.

 

source_mac <macaddr> Specifies that the access profile will

 

apply to only packets with this source MAC address. MAC

 

address entries may be made in the following format:

 

000000000000-FFFFFFFFFFFF

 

destination_mac <macaddr> Specifies that the access profile

 

will apply to only packets with this destination MAC address.

 

MAC address entries may be made in the following format:

 

000000000000-FFFFFFFFFFFF

 

802.1p <value 0-7>Specifies that the access profile will

 

apply only to packets with this 802.1p priority value.

 

ethernet_type <hex 0x0-0xffff> Specifies that the access

 

profile will apply only to packets with this hexadecimal 802.1Q

 

Ethernet type value in the packet header.

 

port <portlist> - The access profile for Ethernet may be defined for

 

each port on the Switch. The port list is specified by listing the lowest

 

switch number and the beginning port number on that switch,

 

separated by a colon. Then the highest switch number, and the

 

highest port number of the range (also separated by a colon) are

 

specified. The beginning and end of the port list range are separated

 

by a dash. For example, 1:3 specifies switch number 1, port 3. 2:4

 

specifies switch number 2, port 4. 1:3-2:4 specifies all of the ports

 

between switch 1, port 3 and switch 2, port 4 in numerical order.

 

permit – Specifies that packets that match the access profile are

214

Page 217
Image 217
D-Link TM DES-6500 manual Config accessprofile profileid for Ethernet