D-Link DGS-3312SR, Справочное руководство по интерфейсу командной строки

Страница: 197 / 305

DGS-3312SR Layer 3 Gigabit Switch
191
config access_profile
| dst_port <value 0-65535> | flag_mask [all | {urg | ack | psh | rst |
syn | fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-
65535>} | protocol_id <value 0 - 255> {user_define <hex 0x0-
0xffffffff>}]} [permit {priority <value 0-7> {replace_priority }} |
deny ] | packet_content {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}] [permit
{priority <value 0-7> {replace_priority} | deny] | delete access_id
<value 1-255>]
Description The config access_profile command is used to configure an access
profile on the switch and to enter specific values that will be combined,
using a logical AND operation, with masks entered with the
create
access_profile command, above.
Parameters
profile_id <value 1-255>
−
Enter an integer between 1 and 255 that is
used to identify the access profile that will be deleted with this
command. This value is assigned to the access profile when it is
created with the
create access_profile command.
add access_id <value 1-255>
−
Adds an additional rule to the above
specified access profile. The value specifies the relative priority of the
additional rule. The lower access ID, the higher the priority the rule will
be given.
ethernet
−
Specifies that the switch will look only into the layer 2 part
of each packet.
•
vlan <vlan_name 32>
−
Specifies that the access profile will
apply to only to this VLAN.
•
source_mac <macaddr>
−
Specifies that the access profile will
apply to only packets with this source MAC address.
•
destination_mac <macaddr>
−
Specifies that the access profile
will apply to only packets with this destination MAC address.
•
802.1p <value 0-7>
−
Specifies that the access profile will apply
only to packets with this 802.1p priority value.
•
ethernet_type <hex 0x0-0xffff>
−
Specifies that the access
profile will apply only to packets with this hexadecimal 802.1Q
Ethernet type value in the packet header.
ip
−
Specifies that the switch will look into the IP fields in each packet.
•
vlan <vlan_name 32>
−
Specifies that the access profile will
apply to only to this VLAN.
•
source_ip <ipaddr>
−
Specifies that the access profile will apply
to only packets with this source IP address.
•
destination_ip <ipaddr>
−
Specifies that the access profile will
apply to only packets with this destination IP address.