D-Link TM DES-6500 manual Create accessprofile IP

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

config access_profile profile_id (for Ethernet)

	permitted to be forwarded by the Switch.
	• priority <value 0-7>− This parameter is specified to re-write
	the 802.1p default priority previously set in the Switch, which is
	used to determine the CoS queue to which packets are
	forwarded to. Once this field is specified, packets accepted by
	the Switch that match this priority are forwarded to the CoS
	queue specified previously by the user.
	• {replace_priority} − Enter this parameter to re-write the 802.1p
	default priority of a packet to the value entered in the Priority
	field, which meets the criteria specified previously in this
	command, before forwarding it on to the specified CoS queue.
	Otherwise, a packet will have its incoming 802.1p user priority
	re-written to its original value before being forwarded by the
	Switch.
	replace_dscp <value 0-63>− Allows specification of a value to be
	written to the DSCP field of an incoming packet that meets the
	criteria specified in the first part of the command. This value will
	over-write the value in the DSCP field of the packet.
	deny – Specifies that packets that do not match the access profile
	are not permitted to be forwarded by the Switch and will be filtered.
	delete access_id <value 1-65535> − Use this command to delete a
	specific rule from the Ethernet profile. Up to 65535 rules may be
	specified for the Ethernet access profile.
Restrictions	Only administrator-level users can issue this command.

Example usage:

To configure a rule for the Ethernet access profile:

DES-6500:4#config access profile profile_id 1 add access_id 1 ethernet vlan Trinity 802.1p 1 port 1:1 permit priority 1 replace priority

Command: config access profile profile_id 1 add access_id 1 ethernet vlan Trinity 802.1p 1 port 1:1 permit priority 1 replace priority

Success.

DES-6500:4#

create access_profile (IP)

Purpose	Used to create an access profile on the Switch by examining the IP
	part of the packet header. Masks entered can be combined with the
	values the Switch finds in the specified frame header fields. Specific
	values for the rules are entered using the config access_profile
	command, below.
Syntax	create access_profile profile_id <value 1-8> ip {vlan
	source_ip_mask <netmask> destination_ip_mask <netmask>
	dscp [icmp {type code} igmp {type} tcp {src_port_mask
	<hex 0x0-0xffff> dst_port_mask <hex 0x0-0xffff> flag_mask
	[all {urg ack psh rst syn fin}]} udp {src_port_mask <hex

215