xStack Gigabit Layer 3 Switch Command Line Interface Manual
create access_profile (for Ethernet)
<value 1-8>}
Description
This command will allow the user to create a profile for packets that
may be accepted or denied by the Switch by examining the Ethernet
part of the packet header. Specific values for rules pertaining to the
Ethernet part of the packet header may be defined by configuring the
config access_profile
command for Ethernet, as stated below.
Parameters
ethernet
- Specifies that the Switch will examine the layer 2 part of
each packet header with emphasis on one or more of the following:
profile_id <value 1-8>
- Specifies an index number between 1 and 8
that will identify the access profile being created with this command.
Restrictions Only
administrator-level users can issue this command.
•
vlan
−
Specifies that the Switch will examine the VLAN part of
each packet header.
•
source_mac <macmask>
−
Specifies a MAC address mask for
the source MAC address. This mask is entered in the following
hexadecimal format: 000000000000-FFFFFFFFFFFF
•
destination_mac <macmask>
−
Specifies a MAC address
mask for the destination MAC address in the following format:
000000000000-FFFFFFFFFFFF
•
802.1p
−
Specifies that the Switch will examine the 802.1p
priority value in the frame’s header.
•
ethernet_type
−
Specifies that the Switch will examine the
Ethernet type value in each frame’s header.
Example usage:
To create a Ethernet access profile:
DGS-3324SRi:4#create access_profile ethernet vlan 802.1p profile_id 1
Command: create access_profile ethernet vlan 802.1p profile_id 1
Success.
DGS-3324SRi:4#
config access_profile profile_id (for Ethernet)
Purpose
Used to configure the Ethernet access profile on the Switch and to
define specific values for the rules that will be used to by the Switch
to determine if a given packet should be forwarded or filtered. Masks
entered using the
create access_profile
command will be
combined, using a logical AND operational method, with the values
the Switch finds in the specified frame header fields.
Syntax
config access_profile profile_id <value 1-8> [add access_id
<value 1-100> [ethernet {vlan <vlan_name 32> | source_mac
<macaddr 000000000000-ffffffffffff> | destination_mac <macaddr
000000000000-ffffffffffff> | 802.1p <value 0-7> | ethernet_type
<hex 0x0-0xffff>} port <port> [permit {priority <value 0-7>
{replace_priority} | replace_dscp <value 0-63> } | deny] delete
221