DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
175
config access_profile
priority <value 0-7>
−
This parameter is specified if you want to re-write the 802.1p default
priority previously set in the Switch, which is used to determine the CoS queue to which
packets are forwarded to. Once this field is specified, packets accepted by the Switch that
match this priority are forwarded to the CoS queue specified previously by the user.
{replace_priority_with <value 0-7>}
−
Enter this parameter if you want to re-write the
802.1p default priority of a packet to the value entered in the Priority field, which meets the
criteria specified previously in this command, before forwarding it on to the specified CoS
queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its
original value before being forwarded by the Switch.
rx_rate
– Use this to limit Rx bandwidth for the profile being configured. This rate is
implemented using the following equation – 64 value = 64kbit/sec. The user may select a
value between 64- 1024000 or no limit. The default setting is no limit.
deny
– Specifies that packets that do not match the access profile are not permitted to be
forwarded by the Switch and will be filtered.
delete access_id <value 1-65535>
−
Use this command to delete a specific ACL rule from
the Ethernet profile or IP profile. Up to 256 rules may be specified for all access profiles.
Restrictions
Only Administrator-level users can issue this command.
Example usage:
To configure the access profile with the profile ID of 1 to filter frames on port 7 that have IP addresses in the range
between 10.42.73.0 to 10.42.73.255:
DES-1228/ME:4# config access_profile profile_id 1 add access_id 1 ip source_ip
10.42.73.1 port 7 deny
Command: config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1
port 7 deny
Success.
DES-1228/ME:4#
show access_profile
Purpose
Used to display the currently configured access profiles on the Switch.
Syntax
show access_profile profile_id <value 1-256>
Description
The
show access_profile
command is used to display the currently configured access
profiles.
Parameters
profile_id <value 1-256>
– Specify the profile id to display only the access rules
configuration for a single profile ID. The user may enter a profile ID number between
1
and
256.
Restrictions
None.
NOTE:
Restriction: When the ACL rule is configured, the VLAN and DSCP cant be configured with
source IP, destination IP or replace priority it can only be configured with DSCP.
