D-Link DGS-3100 Switch User Manual


 
DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
21
2
Each command is listed in detail, as follows:
create access_profile (for Ethernet)
Purpose To create an access profile on the Switch by examining the Ethernet
part of the packet header. Masks entered are combined with the
values the Switch finds in the specified frame header fields. Specific
values for the rules are entered using the config access_profile
command, below.
Syntax
create access_profile profile_id <value 1-15> [ethernet {vlan |
source_mac <macmask 00:00:00:00:00:00-ff:ff:ff:ff:ff:ff >
|destination_mac <macmask 00:00:00:00:00:00-ff;ff:ff:ff:ff:ff > |
802.1p | ethernet_type}]
Description The create access_profile command creates a profile for packets
that may be accepted or denied by the Switch by examining the
Ethernet part of the packet header. Specific values for rules
pertaining to the Ethernet part of the packet header may be defined
by configuring the config access_profile command for Ethernet, as
stated below.
Parameters profile_id <value 1-15> – Specifies an index number between 1 and
15 that identifies the access profile being created with this
command.
ethernet - Specifies that the Switch examines the layer 2 part of
each packet header with emphasis on one or more of the following:
vlan – Specifies that the Switch examine the VLAN part of
each packet header.
source_mac <macmask> – Specifies a MAC address mask
for the source MAC address. This mask is entered in the
following hexadecimal format: 00:00:00:00:00:00-
FF:FF:FF:FF:FF:FF
destination_mac <macmask> – Specifies a MAC address
mask for the destination MAC address in the following
format: 00:00:00:00:00:00-FF:FF:FF:FF:FF:FF
802.1p – Specifies that the Switch examine the 802.1p
priority value in the frame’s header.
ethernet_type – Specifies that the Switch examine the Ethernet type
value in each frame’s header.
Restrictions Only administrator or operate-level users can issue this command.
Example usage:
To create an Ethernet access profile:
DGS3100# create access_profile profile_id 1 ethernet vlan 802.1p
Success.
DGS3100#
create access_profile (for IPv4)
Purpose To create an access profile on the Switch by examining the IP part
of the packet header. Masks entered are combined with the values