xStack DGS-3612G Layer 3 Gigabit Ethernet Managed Switch CLI Manual
create access_profile (ipv6)
Purpose
Used to create an access profile on the Switch by examining the IPv6 part of
the packet header. Masks can be entered that will be combined with the values
the Switch finds in the specified frame header fields. Specific values for the
rules are entered using the
config access_profile
command, below.
Syntax
create access_profile profile_id <value 1-14>} ipv6 {class | flowlabel |
source_ipv6_mask <ipv6mask> | destination_ipv6_mask <ipv6mask>}]
Description
This command is used to identify various parts of IPv6 packets that enter the
Switch so they can be either forwarded or filtered.
Parameters
profile_id <value 1-14>
- Specifies an index number between 1 and 14 that will
identify the access profile being created with this command.
ipv6
– Denotes that IPv6 packets will be examined by the Switch for forwarding
or filtering based on the rules configured in the
config access_profile
command for IPv6. IPv6 packets may be identified by the following:
Restrictions Only
administrator-level users can issue this command.
•
class
– Entering this parameter will instruct the Switch to examine the
class
field of the IPv6 header. This class field is a part of the packet
header that is similar to the Type of Service (ToS) or Precedence bits
field in IPv4.
•
flowlabel
– Entering this parameter will instruct the Switch to examine the
flow label
field of the IPv6 header. This flow label field is used by a source
to label sequences of packets such as non-default quality of service or
real time service packets.
•
source_ipv6_mask <ipv6mask>
- Specifies an IP address mask for the
source IPv6 address.
•
destination_ipv6_mask <ipv6mask>
- Specifies an IP address mask for
the destination IPv6 address.
Example usage:
To create an access profile based on IPv6 classification:
DGS-3612G:4#create access_profile profile_id 4 ipv6 class flowlabel
Command: create access_profile profile_id 4 ipv6 class flowlabel
Success.
DGS-3612G:4#
config access_profile profile_id (ipv6)
Purpose
Used to configure the IPv6 access profile on the Switch and to define specific values for the
rules that will be used to by the Switch to determine if a given packet should be forwarded or
filtered. Masks entered using the
create access_profile
command will be combined, using a
logical AND operational method, with the values the Switch finds in the specified frame
header fields.
Syntax
config access_profile profile_id <value 1-14> add access_id [auto_assign | <value 1-
128>] ipv6 {class <value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6 <ipv6addr> |
destionation_ipv6 <ipv6addr>} port [<portlist> | all] [permit {priority <value 0-7>
{replace_priority} | deny | rx_rate [no_limit | value 1-156249]]]
{time_range
<range_name 32>} | delete access_id <value 1-128>]
Description
This command is used to define the rules used by the Switch to either filter or forward packets
based on the IPv6 part of each packet header.
184
