Filter
Top Products
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
config access_profile profile_id (for Ethernet)
Purpose Used to configure the Ethernet access profile on the Switch and to
define specific values for the rules that will be used to by the Switch
to determine if a given packet should be forwarded or filtered. Masks
entered using the create access_profile command will be
combined, using a logical AND operational method, with the values
the Switch finds in the specified frame header fields.
Syntax
config access_profile profile_id <value 1-8> [add access_id
<value 1-65535> [ethernet {vlan <vlan_name 32> | source_mac
<macaddr> | destination_mac <macaddr> | 802.1p <value 0-7> |
ethernet_type <hex 0x0-0xffff>} port <port> [permit {priority
<value 0-7> {replace_priority} | replace_dscp <value 0-63> } |
deny] delete <value 1-65535>]
Description This command is used to define the rules used by the Switch to
either filter or forward packets based on the Ethernet part of each
packet header.
Parameters profile_id <value 1-8> - Enter an integer between 1 and 8 that is
used to identify the access profile that will be configured with this
command. This value is assigned to the access profile when it is
created with the create access_profile command. The lower the
profile ID, the higher the priority the rule will be given.
add access_id <value 1-65535> - Adds an additional rule to the
above specified access profile. The value specifies the relative
priority of the additional rule. Up to 65535 different rules may be
configured for the Ethernet access profile.
ethernet - Specifies that the Switch will look only into the layer 2 part
of each packet to determine if it is to be filtered or forwarded based
on one or more of the following:
port <portlist> - The access profile for Ethernet may be defined for
each port on the Switch. The port list is specified by listing the lowest
switch number and the beginning port number on that switch,
separated by a colon. Then the highest switch number, and the
highest port number of the range (also separated by a colon) are
specified. The beginning and end of the port list range are separated
by a dash. For example, 1:3 specifies switch number 1, port 3. 2:4
specifies switch number 2, port 4. 1:3-2:4 specifies all of the ports
between switch 1, port 3 and switch 2, port 4 − in numerical order.
permit – Specifies that packets that match the access profile are
• vlan <vlan_name 32> − Specifies that the access profile will
apply to only this previously created VLAN.
• source_mac <macaddr> − Specifies that the access profile will
apply to only packets with this source MAC address. MAC
address entries may be made in the following format:
000000000000-FFFFFFFFFFFF
• destination_mac <macaddr> − Specifies that the access profile
will apply to only packets with this destination MAC address.
MAC address entries may be made in the following format:
000000000000-FFFFFFFFFFFF
• 802.1p <value 0-7> − Specifies that the access profile will
apply only to packets with this 802.1p priority value.
• ethernet_type <hex 0x0-0xffff> − Specifies that the access
profile will apply only to packets with this hexadecimal 802.1Q
Ethernet type value in the packet header.
214