Filter
Top Products
xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
235
config access_profile profile_id (packet content)
deny – Specifies that packets that do not match the access profile are not permitted to be
forwarded by the Switch and will be filtered.
{time_range <range_name 32>} – Choose this parameter and enter the name of the Time
Range settings that has been previously configured using the config time_range command.
This will set specific times when this access rule will be enabled or disabled on the Switch.
delete access_id <value 1-128> − Use this command to delete a specific rule from the IP
profile. Up to 128 rules may be specified for the IP access profile.
Restrictions User Account Command Level – Administrator and Operator
Example usage:
To configure an access profile by packet content mask:
DGS-3600:4#config access_profile profile_id 3 add access_id 1 packet_content
offset_chunk_1 0x11111111 port 1:3 permit priority 2 replace_priority rx_rate no_limit
counter enable
Command: config access_profile profile_id 3 add access_id 1 packet_content_mask
offset_chunk_1 0x11111111 port 1:3 permit priority 2 replace_priority rx_rate no_limit
counter enable
Success.
DGS-3600:4#
create access_profile (ipv6)
Purpose Used to create an access profile on the Switch by examining the IPv6 part of
the packet header. Masks can be entered that will be combined with the values
the Switch finds in the specified frame header fields. Specific values for the
rules are entered using the config access_profile command, below.
Syntax
create access_profile profile_id <value 1-14>} ipv6 {class | flowlabel |
source_ipv6_mask <ipv6mask> | destination_ipv6_mask <ipv6mask>}]
Description This command is used to identify various parts of IPv6 packets that enter the
Switch so they can be either forwarded or filtered.
Parameters
profile_id <value 1-14> - Specifies an index number between 1 and 14 that will
identify the access profile being created with this command.
ipv6 – Denotes that IPv6 packets will be examined by the Switch for forwarding
or filtering based on the rules configured in the config access_profile
command for IPv6. IPv6 packets may be identified by the following:
• class – Entering this parameter will instruct the Switch to examine the
class field of the IPv6 header. This class field is a part of the packet
header that is similar to the Type of Service (ToS) or Precedence bits
field in IPv4.
• flowlabel – Entering this parameter will instruct the Switch to examine the
flow label field of the IPv6 header. This flow label field is used by a source
to label sequences of packets such as non-default quality of service or
real time service packets.
• source_ipv6_mask <ipv6mask> - Specifies an IP address mask for the
source IPv6 address.
• destination_ipv6_mask <ipv6mask> - Specifies an IP address mask for
the destination IPv6 address.
Restrictions Only administrator-level users can issue this command.
Example usage:
To create an access profile based on IPv6 classification: