DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
174
config access_profile
auto_assign –
Choose this parameter to configure the Switch to automatically assign a
numerical value (between
1
and
65535
) for the rule being configured.
ethernet
−
Specifies that the Switch will look only into the layer 2 part of each packet.
vlan <vlan_name 32>
−
Specifies that the access profile will apply to only to this
VLAN.
source_mac <macaddr>
−
Specifies that the access profile will apply to only packets
with this source MAC address.
destination_mac <macaddr>
−
Specifies that the access profile will apply to only
packets with this destination MAC address.
802.1p <value 0-7>
−
Specifies that the access profile will apply only to packets with
this 802.1p priority value.
ethernet_type <hex 0x0-0xffff>
−
Specifies that the access profile will apply only to
packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
Parameters
ip
−
Specifies that the Switch will look into the IP fields in each packet.
vlan <vlan_name 32>
−
Specifies that the access profile will apply to only this VLAN.
source_ip <ipaddr>
−
Specifies that the access profile will apply to only packets with
this source IP address.
destination_id <value 0-255>
−
Specifies that the access profile will apply to only
packets with this destination IP address.
dscp <value 0-63>
−
Specifies that the access profile will apply only to packets that
have this value in their Type-of-Service (DiffServ code point, DSCP) field in their
IP packet header
icmp
−
Specifies that the Switch will examine the Internet Control Message Protocol
(ICMP) field within each packet.
igmp
−
Specifies that the Switch will examine the Internet Group Management
Protocol (IGMP) field within each packet.
tcp
−
Specifies that the Switch will examine the Transmission Control Protocol (TCP)
field within each packet.
src_port <value 0-65535>
−
Specifies that the access profile will apply only to
packets that have this TCP source port in their TCP header.
dst_port <value 0-65535>
−
Specifies that the access profile will apply only to
packets that have this TCP destination port in their TCP header.
urg
: TCP control flag (urgent)
ack
: TCP control flag (acknowledgement)
psh
: TCP control flag (push)
rst
: TCP control flag (reset)
syn
: TCP control flag (synchronize)
fin
: TCP control flag (finish)
udp
−
Specifies that the Switch will examine the Universal Datagram Protocol (UDP)
field in each packet.
src_port <value 0-65535>
−
Specifies that the access profile will apply only to
packets that have this UDP source port in their header.
dst_port <value 0-65535>
−
Specifies that the access profile will apply only to
packets that have this UDP destination port in their header.
protocol_id <value 0-255>
−
Specifies that the Switch will examine the protocol field in
each packet and if this field contains the value entered here, apply the following rules.
Parameters
port <portlist>
−
Specifies the port number on the Switch to permit or deny access for the
rule. The user can also configure “all” to specify all ports.
permit
– Specifies that packets that match the access profile are permitted to be forwarded
by the Switch.