DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
168
create access_profile
protocol_id <value 0-255>
−
Specifies that the Switch will examine the protocol field in each
packet and if this field contains the value entered here, apply the following rules
•
user_define_mask <hex 0x0-0xffffffff>
−
Specifies that the rule applies to the IP
protocol ID and the mask options behind the IP header.
packet_content_mask
– Specifies that the Switch will mask the packet header beginning
with the offset value specified as follows:
•
offset_0-15
– Enter a value in hex form to mask the packet from the beginning of the
packet to the 15
th
byte.
•
offset_16-31
– Enter a value in hex form to mask the packet from byte 16 to byte 31.
•
offset_32
-47 – Enter a value in hex form to mask the packet from byte 32 to byte 47.
•
offset_48-63 – Enter a value in hex form to mask the packet from byte 48 to byte 63.
•
offset_64-79 – Enter a value in hex form to mask the packet from byte 64 to byte 79.
•
profile_id <value 1-255>
−
Sets the relative priority for the profile. Priority is set relative
to other profiles where the lowest profile ID has the highest priority. The user may
enter a profile ID number between 1 – 255, yet, remember only 9 access profiles can
be created on the Switch
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To create an access list rules:
DES-3500:admin#create access_profile ip vlan source_ip_mask 20.0.0.0
destination_ip_mask 10.0.0.0 dscp icmp type code permit profile_id 101
Command: create access_profile ip vlan source_ip_mask 20.0.0.0 destination_ip_mask
10.0.0.0 dscp icmp type code permit profile_id 101
Success.
DES-3500:admin#
delete access_profile
Purpose
Used to delete a previously created access profile.
Syntax
delete access_profile [profile_id <value 1-255> | all]
Description The
delete access_profile
command is used to delete a previously
created access profile on the Switch.
Parameters
profile_id <value 1-255>
−
Enter an integer between 1 and 255 that
is used to identify the access profile that will be deleted with this
command. This value is assigned to the access profile when it is
created with the
create access_profile
command. The user may
enter a profile ID number between 1 – 255, yet, remember only 9
access profiles can be created on the Switch.
all
−
Entering this parameter will delete all access profiles currently
configured on the Switch.
Restrictions
Only Administrator and Operator-level users can issue this
command.
Example usage:
To delete the access profile with a profile ID of 1:
