Filter
Top Products
xStack DGS/DXS-3300 Series Layer 3 Stackable Gigabit Ethernet Switch CLI Manual
219
config access_profile profile_id (IP)
Description This command is used to define the rules used by the Switch to either filter
or forward packets based on the IP part of each packet header.
Parameters profile_id <value 1-8> - Enter an integer between 1 and 8 that is used to
identify the access profile that will be configured with this command. This
value is assigned to the access profile when it is created with the create
access_profile command. The lower the profile ID, the higher the priority
the rule will be given.
add access_id <value 1-65535> - Adds an additional rule to the above
specified access profile. The value specifies the relative priority of the
additional rule. Up to 65535 different rules may be configured for the
Ethernet access profile.
auto_assign – Choose this parameter to configure the Switch to
automatically assign a numerical value (between 1 and 65535) for
the rule being configured.
ip − Specifies that the Switch will look into the IP fields in each packet to
see if it will be either forwarded or filtered based on one or more of the
following:
• vlan <vlan_name 32> − Specifies that the access profile will apply to
only to this VLAN.
• source_ip <ipaddr> − Specifies that the access profile will apply to
only packets with this source IP address.
• destination_ip <ipaddr> − Specifies that the access profile will apply
to only packets with this destination IP address.
• dscp <value 0-63> − Specifies that the access profile will apply only
to packets that have this value in their Type-of-Service (DiffServ
code point, DSCP) field in their IP packet header.
• icmp − Specifies that the Switch will examine the Internet Control
Message Protocol (ICMP) field within each packet.
• type <value 0-255> − Specifies that the access profile will apply to
this ICMP type defined by a value between 0 and 255.
• code <value 0-255> − Specifies that the access profile will apply to
this ICMP code defined by a value between 0 and 255.
• igmp − Specifies that the Switch will examine the Internet Group
Management Protocol (IGMP) field within each packet.
• type <value 0-255> − Specifies that the access profile will apply to
packets that have this IGMP type defined by a value between 0 and
255.
• tcp − Specifies that the Switch will examine the Transmission Control
Protocol (TCP) field within each packet.
• src_port <value 0-65535> − Specifies that the access profile will
apply only to packets that have this TCP source port in their TCP
header.
• dst_port <value 0-65535> − Specifies that the access profile will
apply only to packets that have this TCP destination port in their TCP
header.