xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
219
config access_profile profile_id (packet content)
deny
– Specifies that packets that match the access profile are not permitted to be
forwarded by the Switch and will be filtered.
{time_range <range_name 32>}
– Choose this parameter and enter the name of the Time
Range settings that has been previously configured using the
config time_range
command. This will set specific times when this access rule will be enabled or disabled on
the Switch.
delete access_id <value 1-128>
−
Use this command to delete a specific rule from the IP
profile. Up to 128 rules may be specified for the IP access profile.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure an access profile by packet content mask:
D G S - 3 6 2 7 : 5 # c o n f i g a c c e s s _ p r o f i l e p r o f i l e _ i d 3 a d d a c c e s s _ i d 1 p a c k e t _ c o n t e n t
o f f s e t _ c h u n k _ 1 0 x 1 1 1 1 1 1 1 1 p o r t 3 p e r m i t p r i o r i t y 2 r e p l a c e _ p r i o r i t y r x _ r a t e
n o _ l i m i t c o u n t e r e n a b l e
C o m m a n d : c o n f i g a c c e s s _ p r o f i l e p r o f i l e _ i d 3 a d d a c c e s s _ i d 1 p a c k e t _ c o n t e n t _ m a s k
o f f s e t _ c h u n k _ 1 0 x 1 1 1 1 1 1 1 1 p o r t 3 p e r m i t p r i o r i t y 2 r e p l a c e _ p r i o r i t y r x _ r a t e
n o _ l i m i t c o u n t e r e n a b l e
S u c c e s s .
D G S - 3 6 2 7 : 5 #
create access_profile (ipv6)
Purpose
Used to create an access profile on the Switch by examining the IPv6 part of the packet
header. Masks can be entered that will be combined with the values the Switch finds in
the specified frame header fields. Specific values for the rules are entered using the
config access_profile
command, below.
Syntax
create access_profile profile_id <value 1–6> ipv6 {[{class | flowlabel |
source_ipv6_mask <ipv6mask> | destination_ipv6_mask <ipv6mask>]} (1) ]
Description
This command is used to identify various parts of IPv6 packets that enter the Switch so
they can be either forwarded or filtered.
Parameters
profile_id <value 1–6>
– Specifies an index number between 1 and 6 that will identify the
access profile being created with this command.
ipv6
– Denotes that IPv6 packets will be examined by the Switch for forwarding or filtering
based on the rules configured in the
config access_profile
command for IPv6. IPv6
packets may be identified by the following:
•
class
– Entering this parameter will instruct the Switch to examine the
class
field of
the IPv6 header. This class field is a part of the packet header that is similar to the
Type of Service (ToS) or Precedence bits field in IPv4.
•
flowlabel
– Entering this parameter will instruct the Switch to examine the
flow label
field of the IPv6 header. This flow label field is used by a source to label sequences
of packets such as non–default quality of service or real time service packets.
•
source_ipv6_mask <ipv6mask>
– Specifies an IP address mask for the source IPv6
address.
•
destination_ipv6_mask <ipv6mask>
– Specifies an IP address mask for the
destination IPv6 address.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To create an access profile based on IPv6 classification:
