DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
173
delete access_profile
Purpose
Used to delete a previously created access profile.
Syntax
delete access_profile [profile_id <value 1-256> | all ]
Description
The
delete access_profile
command is used to delete a previously created access profile
on the Switch.
Parameters
profile_id <value 1-256>
−
Enter an integer between
1
and
256
that is used to identify the
access profile that will be deleted with this command. This value is assigned to the access
profile when it is created with the
create access_profile
command. The user may enter a
profile ID number between
1
and
256
.
all
−
Specifies all access list profiles will be deleted.
Restrictions
Only Administrator-level users can issue this command.
Example usage:
To delete the access profile with a profile ID of 1:
DES-1228/ME:4# delete access_profile profile_id 1
Command: delete access_profile profile_id 1
Success.
DES-1228/ME:4#
config access_profile
Purpose
Used to configure an access profile on the Switch and to define specific values that will be
used to by the Switch to determine if a given packet should be forwarded or filtered. Masks
entered using the
create access_profile
command will be combined, using a logical AND
operational method, with the values the Switch finds in the specified frame header fields.
Specific values for the rules are entered using the
config access_profile
command,
below.
Syntax
config access_profile profile_id <value 1-256> [ add access_id [ auto_assign |
<value 1-65535> ] [ ethernet { vlan <vlan_name 32> | source_mac <macaddr> |
destination_mac <macaddr> | 802.1p <value 0-7> | ethernet_type <hex 0x0-
0xffff> }(1) | ip { vlan <vlan_name 32> | source_ip <ipaddr> | destination_ip
<ipaddr> | dscp <value 0-63> | [ icmp | igmp | tcp {src_port <value 0-65535> |
dst_port <value 0-65535> | urg | ack | psh | rst | syn | fin } | udp {src_port <value 0-
65535> | dst_port <value 0-65535>} | protocol_id <value 0 - 255> ]}(1)] port
[<portlist> | all ] [ permit{ priority <value 0-7> | replace_priority_with <value 0-7>|
rx_rate [ no_limit |<value 64-1024000>]}|deny|mirror ] | delete access_id <value 1-
65535> ]
Description
The
config access_profile
command is used to configure an access profile on the Switch
and to enter specific values that will be combined, using a logical AND operational
method, with masks entered with the
create access_profile
command, above.
Parameters
profile_id <value 1-256>
−
Enter an integer used to identify the access profile that will be
configured with this command. This value is assigned to the access profile when it is
created with the
create access_profile
command. The profile ID sets the relative priority
for the profile and specifies an index number that will identify the access profile being
created with this command. Priority is set relative to other profiles where the lowest profile
ID has the highest priority. The user may enter a profile ID number between
1
and
256
.
add access_id <value 1-65535>
−
Adds an additional rule to the above specified access
profile. The value is used to index the rule created. For information on number of rules that
can be created for a given port, please see the introduction to this chapter.
