xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
220
D G S – 3 4 2 6 : 5 # c r e a t e a c c e s s _ p r o f i l e p r o f i l e _ i d 4 i p v 6 c l a s s f l o w l a b e l
C o m m a n d : c r e a t e a c c e s s _ p r o f i l e p r o f i l e _ i d 4 i p v 6 c l a s s f l o w l a b e l
S u c c e s s .
D G S – 3 4 2 6 : 5 #
config access_profile profile_id (ipv6)
Purpose
Used to configure the IPv6 access profile on the Switch and to define specific values for
the rules that will be used to by the Switch to determine if a given packet should be
forwarded or filtered. Masks entered using the
create access_profile
command will be
combined, using a logical AND operational method, with the values the Switch finds in the
specified frame header fields.
Syntax
config access_profile profile_id <value 1-6> add access_id [auto_assign | <value 1-
128>] ipv6 {class <value 0-255> | flowlabel <hex 0x0-0xfffff> | source_ipv6
<ipv6addr> | destination_ipv6 <ipv6addr>} (1) port [<portlist> | all] [permit {priority
<value 0-7> {replace_priority} | rx_rate {no_limit | <value 1-156249>]} | counter
[enable | disable]} | mirror | deny} | {time_range <range_name 32>} delete
access_id <value 1-128>]
Description
This command is used to define the rules used by the Switch to either filter or forward
packets based on the IPv6 part of each packet header.
Parameters
profile_id <value 1–6>
– Enter an integer between 1 and 6 that is used to identify the
access profile that will be configured with this command. This value is assigned to the
access profile when it is created with the
create access_profile
command. The lower the
profile ID, the higher the priority the rule will be given.
add access_id <value 1–128>
– Adds an additional rule to the above specified access
profile. The value specifies the relative priority of the additional rule. Up to 128 different
rules may be configured for the IPv6 access profile.
auto_assign
– Choose this parameter to configure the Switch to automatically
assign a numerical value (between 1 and 128) for the rule being configured.
ipv6
– Specifies that the Switch will look into the IPv6 fields in each packet, with emphasis
on one or more of the following fields:
•
class <value 0–255>
– Entering this parameter will instruct the Switch to examine
the
class
field of the IPv6 header. This class field is a part of the packet header that
is similar to the Type of Service (ToS) or Precedence bits field in IPv4.
•
flowlabel <hex 0x0–fffff>
– Entering this parameter will instruct the Switch to
examine the flow label field of the IPv6 header. This flow label field is used by a
source to label sequences of packets such as non–default quality of service or real
time service packets. This field is to be defined by the user in hex form.
•
source_ipv6 <ipv6addr>
– Specifies an IP address mask for the source IPv6
address.
•
destination_ipv6 <ipv6addr>
– Specifies an IP address mask for the destination
IPv6 address.
port <portlist> | all
– The access profile for Ethernet may be defined for each port on the
Switch. The port list is specified by listing the lowest switch number and the beginning
port number on that switch, separated by a colon. Then the highest switch number, and
the highest port number of the range (also separated by a colon) are specified. The
beginning and end of the port list range are separated by a dash. For example, 1:3
specifies switch number 1, port 3. 2:4 specifies switch number 2, port 4. 1:3–2:4 specifies
all of the ports between switch 1, port 3 and switch 2, port 4 – in numerical order. Up to
128 rules may be configured for each port. Selecting
all
will configure this rule for all ports
on the Switch. Non–contiguous portlist entries are separated by a comma. (ex: 1:1–
1:3,1:7–1:9)
permit
– Specifies that packets that match the access profile are permitted to be
forwarded by the Switch.
