xStack Gigabit Layer 3 Switch Command Line Interface Manual
config access_profile profile_id (for Ethernet)
<value 1-100>]
This command is used to define the rules used by the Switch to
either filter or forward packets based on the Ethernet part of each
packet header.
profile_id <value 1-8>
- Enter an integer between 1 and 8 that is
used to identify the access profile that will be configured with this
command. This value is assigned to the access profile when it is
created with the
create access_profile
command. The lower the
profile ID, the higher the priority the rule will be given.
add access_id <value 1-100>
- Adds an additional rule to the above
specified access profile. The value specifies the relative priority of
the additional rule. Up to 100 different rules may be configured for
the Ethernet access profile.
port <port>
- The access profile for Ethernet may be defined for each
port on the Switch. Up to 100 rules may be configured for each port.
The port list is specified by listing the switch ID number and the port
number on that switch, separated by a colon. For example, 1:3
specifies switch number 1, port 3. 2:4 specifies switch number 2,
port 4.
permit
– Specifies that packets that match the access profile are
permitted to be forwarded by the Switch.
Description
Parameters
ethernet
- Specifies that the Switch will look only into the layer 2 part
of each packet to determine if it is to be filtered or forwarded based
on one or more of the following:
•
destination_mac <macaddr>
−
Specifies that the access profile
will apply to only packets with this destination MAC address.
MAC address entries may be made in the following format:
000000000000-FFFFFFFFFFFF
•
vlan <vlan_name 32>
−
Specifies that the access profile will
apply to only this previously created VLAN.
•
source_mac <macaddr>
−
Specifies that the access profile will
apply to only packets with this source MAC address. MAC
address entries may be made in the following format:
000000000000-FFFFFFFFFFFF
•
802.1p <value 0-7>
−
Specifies that the access profile will
apply only to packets with this 802.1p priority value.
•
ethernet_type <hex 0x0-0xffff>
−
Specifies that the access
profile will apply only to packets with this hexadecimal 802.1Q
Ethernet type value in the packet header.
•
priority <value 0-7>
−
This parameter is specified if you want to
re-write the 802.1p default priority previously set in the Switch,
which is used to determine the CoS queue to which packets
are forwarded to. Once this field is specified, packets accepted
by the Switch that match this priority are forwarded to the CoS
queue specified previously by the user.
•
{replace_priority}
−
Enter this parameter if you want to re-write
the 802.1p default priority of a packet to the value entered in
the Priority field, which meets the criteria specified previously
in this command, before forwarding it on to the specified CoS
queue. Otherwise, a packet will have its incoming 802.1p user
priority re-written to its original value before being forwarded by
222
