xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
215
config access_profile profile_id (IP)
Parameters
profile_id <value 1–6>
– Enter an integer between 1 and 6 that is used to identify the
access profile that will be configured with this command. This value is assigned to the
access profile when it is created with the
create access_profile
command. The lower the
profile ID, the higher the priority the rule will be given.
add access_id <value 1–128>
– Adds an additional rule to the above specified access
profile. The value specifies the relative priority of the additional rule. Up to 128 different
rules may be configured for the IP access profile.
auto_assign
– Choose this parameter to configure the Switch to automatically
assign a numerical value (between 1 and 128) for the rule being configured.
ip
−
Specifies that the Switch will look into the IP fields in each packet to see if it will be
either forwarded or filtered based on one or more of the following:
•
source_ip <ipaddr> – Specifies that the access profile will apply to only packets with
this source IP address.
•
destination_ip <ipaddr>
−
Specifies that the access profile will apply to only packets
with this destination IP address.
•
dscp <value 0–63>
−
Specifies that the access profile will apply only to packets that
have this value in their Type–of–Service (DiffServ code point, DSCP) field in their IP
packet header.
•
icmp
−
Specifies that the Switch will examine the Internet Control Message Protocol
(ICMP) field within each packet.
•
igmp
−
Specifies that the access profile will apply to packets that have this IGMP
type.
•
tcp –
Specifies that the switch will examine each frames Transport Control Protocol
(TCP) field.
•
src_port <value 0–65535>
−
Specifies that the access profile will apply only to
packets that have this TCP source port in their TCP header.
•
dst_port <value 0–65535>
−
Specifies that the access profile will apply only to
packets that have this TCP destination port in their TCP header.
•
Enter the type of TCP flag to be masked. The choices are:
•
urg
: TCP control flag (urgent)
•
ack
: TCP control flag (acknowledgement)
•
psh
: TCP control flag (push)
•
rst
: TCP control flag (reset)
•
syn
: TCP control flag (synchronize)
•
fin
: TCP control flag (finish)
•
udp
−
Specifies that the Switch will examine the Universal Datagram Protocol
(UDP) field in each packet.
•
src_port <value 0–65535>
−
Specifies that the access profile will apply only to
packets that have this UDP source port in their header.
•
dst_port <value 0–65535>
−
Specifies that the access profile will apply only to
packets that have this UDP destination port in their header.
•
protocol_id <value 0–255>
−
Specifies that the Switch will examine the Protocol
field in each packet and if this field contains the value entered here, apply the
appropriate rules.
•
user_define <hex 0x0–0xffffffff>
−
Enter a hexadecimal value that will identify the
protocol to be discovered in the packet header.
port <portlist> | all
– The access profile for IP may be defined for each port on the Switch.
The port list is specified by listing the lowest switch number and the beginning port
number on that switch, separated by a colon. Then the highest switch number, and the
highest port number of the range (also separated by a colon) are specified. The beginning
and end of the port list range are separated by a dash. For example, 1:3 specifies switch
number 1, port 3. 2:4 specifies switch number 2, port 4. 1:3–2:4 specifies all of the ports
between switch 1, port 3 and switch 2, port 4 – in numerical order. Up to 128 rules may
be configured for each port. Selecting
all
will configure this rule for all ports on the Switch.
Non–contiguous portlist entries are separated by a comma. (ex: 1:1–1:3,1:7–1:9)
