D-Link DGS-3212SR, Справочное руководство по интерфейсу командной строки

Страница: 228 / 269

DGS-3212SR Layer 3 Gigabit Switch
config access_profile profile_id
•
offset_0-15 – Enter a value in hex form to mask the packet
from the beginning of the packet to the 15
th
byte.
permit – Specifies that packets that match the access profile are
permitted to be forwarded by the Switch.
deny – Specifies that packets that do not match the access profile are
not permitted to be forwarded by the Switch and will be filtered.
delete access_id <value 1-255>
−
Specifies the access ID of a rule to
delete.
Restrictions Only administrator-level users can issue this command.
•
replace_dscp with <value 0-63>
−
Allows you to specify a value to be
written to the DSCP field of an incoming packet that meets the criteria
specified in the first part of the command. This value will over-write the
value in the DSCP field of the packet.
packet_content – Specifies that the switch will mask the packet
header beginning with the offset value specified as follows:
•
offset_16-31 - Enter a value in hex form to mask the packet
from byte 16 to byte 32.
•
offset_32-47 - Enter a value in hex form to mask the packet
from byte 32 to byte 47.
•
offset_48-63 - Enter a value in hex form to mask the packet
from byte 48 to byte 63.
•
offset_64-79 - Enter a value in hex form to mask the packet
from byte 64 to byte 79.
•
priority <value 0-7>
−
Specify the 802.1p priority value included
in the packet that will be forwarded by the Switch. Only packets
that have this priority value will be permitted.
•
{replace_priority}
−
This parameter is specified if you want to
change the 802.1p user priority of a packet that meets the
specified criteria. Otherwise, a packet will have its incoming
802.1p user priority re-written to its original value before being
transmitted from the Switch.
Example usage:
To configure the access profile with the profile ID of 1 to filter frames that have IP addresses in the range between
10.42.73.0 to 10.42.73.255:
DGS-3212SR:4# config access_profile profile_id 2 add access_id 1 ip
source_ip 10.42.73.1 deny
Command: config access_profile profile_id 1 add access_id 1 ip
source_ip 10.42.73.1 deny
Success.
216