Extreme Networks EAS 200-24p Switch, Manual

Page: 181 / 908

config egress_access_profile
Extreme Networks EAS 200-24p Switch CLI Manual
181
●
port_group - Specifies the port group value here.
●
id - Specifies the ID of the port group which the rule applies.
- <value 1-64> - Enter the group ID value here. This value must be between 1 and 64.
●
name - Specifies the name of the port group which the rule applies.
- <name_string 16> - Enter the port group name here. This name can be up to 16 characters
long.
●
permit - Specifies that packets matching the egress access rule are permitted by the switch.
●
replace_priority_with - (Optional) Specifies the packets that match the egress access rule are
changed the 802.1p priority tag field by the switch.
●
<value 0-7> - Enter the replace priority with value here. This value must be between 0 and 7.
●
replace_dscp_with - (Optional) Specifies the packets that match the egress access rule are changed
the DSCP value by the switch.
●
<value 0-63> - Enter the replace DSCP with value here. This value must be between 0 and 63.
●
counter - (Optional) Specifies whether the ACL counter feature is enabled or disabled. This
parameter is optional. The default option is disabled. If the rule is not bound with the flow_meter, all
matching packets are counted. If the rule is bound with the flow_meter, then the “counter” is
overridden.
●
enable - Specifies that the ACL counter feature will be enabled.
●
disable - Specifies that the ACL counter feature will be disabled.
●
deny - Specifies the packets that match the egress access rule are filtered by the switch.
●
time_range - (Optional) Specifies the name of the time range entry.
●
<range_name 32> - Enter the time range value here. This name can be up to 32 characters long.
●
delete - Specifies to delete a profile or rule.
●
access_id - Specifies the index of the access list entry. If the auto_assign option is selected, the access
ID is automatically assigned.
●
<value 1-128> - Enter the access ID used here. This value must be between 1 and 128.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure a port-base egress access rule that when the packet go out switch which match the
specified source IP, DSCP and destination IP field, it will not be dropped:
EAS 200-24p:admin# config egress_access_profile profile_id 2 add access_id
auto_assign ip source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group id
1 permit
Command: config egress_access_profile profile_id 2 add access_id auto_assign ip
source_ip 10.0.0.1 dscp 25 destination_ip 10.90.90.90 port_group id 1 permit
Success.
EAS 200-24p:admin#