xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

create access_profile (IP)

 

mask for the destination port.

 

protocol_id Specifies that the Switch will examine each

 

frame’s Protocol ID field.

 

user_define <hex 0x0-0xfffffff> Enter a hexidecimal value

 

that will identify the protocol to be discovered in the packet

 

header.

Restrictions

Only administrator-level users can issue this command.

 

 

Example usage:

To configure a rule for the Ethernet access profile:

DES-6500:4#create access_profile ip protocol_id profile_id 2

Command: create access_profile ip protocol_id profile_id 2

Success.

DES-6500:4#

config access_profile profile_id (IP)

Purpose

Used to configure the IP access profile on the Switch and to define

 

specific values for the rules that will be used to by the Switch to

 

determine if a given packet should be forwarded or filtered. Masks

 

entered using the create access_profile command will be

 

combined, using a logical AND operational method, with the values

 

the Switch finds in the specified frame header fields.

Syntax

config access_profile profile_id <value 1-8> [add access_id

 

<value 1-65535> ip {vlan <vlan_name 32> source_ip <ipaddr>

 

destination_ip <ipaddr> dscp <value 0-63> [icmp {type <value

 

0-255> code <value 0-255>} igmp {type <value 0-255>} tcp

 

{src_port <value 0-65535> dst_port <value 0-65535> urg ack

 

psh rst syn fin} udp {src_port <value 0-65535> dst_port

 

<value 0-65535>} protocol_id <value 0 - 255> {user_define

 

<hex 0x0-0xffffffff>}]} port <port> [permit {priority <value 0-7>

 

{replace_priority} replace_dscp <value 0-63>} deny] delete

 

<value 1-65535>]

Description

This command is used to define the rules used by the Switch to

 

either filter or forward packets based on the IP part of each packet

 

header.

Parameters

profile_id <value 1-8>- Enter an integer between 1 and 8 that is

 

used to identify the access profile that will be configured with this

 

command. This value is assigned to the access profile when it is

 

created with the create access_profile command. The lower the

 

profile ID, the higher the priority the rule will be given.

 

add access_id <value 1-65535>- Adds an additional rule to the

 

above specified access profile. The value specifies the relative

 

priority of the additional rule. Up to 65535 different rules may be

 

configured for the IP access profile.

 

ip Specifies that the Switch will look into the IP fields in each

217

Page 220
Image 220
D-Link TM DES-6500 manual Config accessprofile profileid IP, Userdefine hex 0x0-0xfffffff − Enter a hexidecimal value