xStack Gigabit Layer 3 Switch Command Line Interface Manual
config access_profile profile_id (packet content mask)
are forwarded to. Once this field is specified, packets accepted
by the Switch that match this priority are forwarded to the CoS
queue specified previously by the user.
•
{replace_priority}
−
Enter this parameter if you want to re-write
the 802.1p default priority of a packet to the value entered in
the Priority field, which meets the criteria specified previously
in this command, before forwarding it on to the specified CoS
queue. Otherwise, a packet will have its incoming 802.1p user
priority re-written to its original value before being forwarded by
the Switch.
replace_dscp <value 0-63>
−
Allows you to specify a value to be
written to the DSCP field of an incoming packet that meets the
criteria specified in the first part of the command. This value will
over-write the value in the DSCP field of the packet.
deny
– Specifies that packets that do not match the access profile
are not permitted to be forwarded by the Switch and will be filtered.
delete access_id <value 1-100>
−
Use this command to delete a
specific rule from the packet content mask profile. Up to 100 rules
may be specified for the Packet Content access profile.
Restrictions Only
administrator-level users can issue this command.
Example usage:
To create an access profile by packet content mask:
DGS-3324SRi:4# config access_profile profile_id 3 add access_id 1
packet_content offset_0-15 0x11111111 0x11111111 0x11111111
0x11111111 offset_16-31 0x11111111 0x11111111 0x11111111
0x11111111 port 1:1 deny
Command: config access_profile profile_id 3 add access_id 1
packet_content offset_0-15 0x11111111 0x11111111 0x11111111
0x11111111 offset_16-31 0x11111111 0x11111111 0x11111111
0x11111111 port 1:1 deny
Success.
DGS-3324SRi:4#
create access_profile (ipv6)
Purpose
Used to create an access profile on the Switch by examining the
IPv6 part of the packet header. Masks can be entered that will be
combined with the values the Switch finds in the specified frame
header fields. Specific values for the rules are entered using the
config access_profile
command, below.
Syntax
create access_profile ipv6 {class | flowlabel |
source_ipv6_mask <ipv6mask> | destination_ipv6_mask
<ipv6mask>}] profile_id <value 1-8>}
Description
This command is used to identify various parts of IPv6 packets that
enter the Switch so they can be either forwarded or filtered.
230