D-Link DES-3200 Switch User Manual


 
xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Guide
212
config access_profile
value set in the packet, which is used to determine the CoS queue to which packets are
forwarded to. Once this field is specified, packets accepted by the Switch that match this
priority are forwarded to the CoS queue specified previously by the user.
replace_priority Enter this parameter if you want to re-write the 802.1p user priority of a
packet to the value entered in the Priority field, which meets the criteria specified previously in
this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will
have its incoming 802.1p user priority re-written to its original value before being forwarded by
the Switch.
replace_dscp_with Specifies that DSCP of the outgoing packet will be marked by the new
value.
counter – Specifies whether the counter feature will be enabled or disabled. The is optional.
The default is disable. If the rule is not bound with a flow meter, then all packets matched will
be counted. If the rule is bound with a flow meter, the counter is overridden.
deny – Specifies that packets that do not match the access profile are not permitted to be
forwarded by the Switch and will be filtered.
mirror – Specifies the packets that match the access profile are sent the copied one to the
mirror port.
time_range <range_name 32> – Choose this parameter and enter the name of the Time Range
settings that has been previously configured using the config time_range command. This will
set specific times when this access rule will be enabled or disabled on the Switch.
mask - These options provides an additional mask for each field. This additional mask should
be subset of the field mask defined by the profile. The final mask is the result of the AND
operation of the profile mask and this per rule mask.
delete access_id <value 1-65535> Use this command to delete a specific ACL rule from
the Ethernet profile, IP profile or packet_content profile. Up to 512 rules may be
specified for all access profiles.
Restrictions
Only Administrator-level users can issue this command.
Example usage:
To configure the access profile with the profile ID of 1 to filter frames on port 7 that have IP addresses in the range between
10.42.73.0 to 10.42.73.255:
DES-3200-
28:4# config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1
port 7 deny
Command: config access_profile profile_id 1 add access_id 1
ip source_ip 10.42.73.1 port 7
deny
Success.
DES-3200-28:4#
show access_profile
Purpose
Used to display the currently configured access profiles on the Switch.
Syntax
show access_profile {profile_id <value 1-512>}
Description
This command is used to display the currently configured access profiles.
Parameters
profile_id <value 1-512> – Specify the profile id to display only the access rules
configuration for a single profile ID. The user may enter a profile ID number
between 1 and 512.
Restrictions
None.
Example usage:
To display all of the currently configured access profiles on the Switch: