DES-3526 / DES-3526DC Layer 2 Fast Ethernet Switch CLI Reference Manual
152
config access_profile
Parameters
packet_content_mask
– Specifies that the Switch will mask the packet header beginning with the
offset value specified as follows:
•
offset_0-15
- Enter a value in hex form to mask the packet from the beginning of the packet
to the 15
th
byte.
•
offset_16-31
- Enter a value in hex form to mask the packet from byte 16 to byte 32.
•
offset_32-47
- Enter a value in hex form to mask the packet from byte 32 to byte 47.
•
offset_48-63
- Enter a value in hex form to mask the packet from byte 48 to byte 63
•
offset_64-79
- Enter a value in hex form to mask the packet from byte 64 to byte 79.
port <portlist>
- Specifies the port number on the Switch to permit or deny access for the rule.
permit
-
Specifies the rule permit access for incoming packets on the previously specified port.
•
priority <value 0-7>
−
Specifies that the access profile will apply to packets that contain this
value in their 802.1p priority field of their header for incoming packets on the previously
specified port.
•
{replace_priority}
-
Allows you to specify a new value to be written to the priority field of an
incoming packet on the previously specified port.
•
replace_dscp_with <value 0-63>
−
Allows you to specify a new value to be written to the
DSCP field of an incoming packet on the previously specified port.
deny
-
Specifies the rule will deny access for incoming packets on the previously specified port.
delete access_id <value 1-65535> -
Use this to remove a previously created access rule in a
profile id.
Restrictions
Only administrator-level users can issue this command.
Example usage:
To configure the access profile with the profile ID of 1 to filter frames on port 7 that have IP addresses in the range
between 10.42.73.0 to 10.42.73.255:
DES-3526:4# config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 port 7 deny
Command: config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 port 7 deny
Success.
DES-3526:4#
show access_profile
Purpose
Used to display the currently configured access profiles on the
Switch.
Syntax
show access_profile {profile_id <value 1-255>
{access_id <value 1-65535>}}
Description The
show access_profile
command is used to display the currently
configured access profiles.
Parameters
profile_id
– Specify the profile id to display only the access rules
configuration for a single profile id.
access_id
- Specify the access id to display the access rule
configuration for the access id.
Restrictions None.