D-Link DGS-3420-26SC [229/338] Config access_profile

DGS-3312SR Layer 3 Gigabit Switch

223

config access_profile

• packet_content – Specifies that the switch will mask the packet

header beginning with the offset value specified as follows:

• offset_0-15 – Enter a value in hex form to mask the packet

from the beginning of the packet to the 15

byte.

• offset_16-31 - Enter a value in hex form to mask the packet

from byte 16 to byte 32.

• offset_32-47 - Enter a value in hex form to mask the packet

from byte 32 to byte 47.

• offset_48-63 - Enter a value in hex form to mask the packet

from byte 48 to byte 63.

• offset_64-79 - Enter a value in hex form to mask the packet

from byte 64 to byte 79.

permit – Specifies that packets that match the access profile are

permitted to be forwarded by the Switch.

• priority <value 0-7> − Specify the 802.1p priority value included

in the packet that will be forwarded by the Switch. Only packets

that have this priority value will be permitted.

• {replace_priority} − This parameter is specified if you want to

change the 802.1p user priority of a packet that meets the

specified criteria. Otherwise, a packet will have its incoming

802.1p user priority re-written to its original value before being

transmitted from the Switch.

replace_dscp with <value 0-63> − Allows you to specify a value to be

written to the DSCP field of an incoming packet that meets the criteria

specified in the first part of the command. This value will over-write the

value in the DSCP field of the packet.

deny – Specifies that packets that do not match the access profile are

not permitted to be forwarded by the Switch and will be filtered.

delete access_id <value 1-255> − Specifies the access ID of a rule to

delete.

Restrictions Only administrator-level users can issue this command.

Example usage:

To configure the access profile with the profile ID of 1 to filter frames that have IP addresses in the range between

10.42.73.0 to 10.42.73.255:

DGS-3312SR:4# config access_profile profile_id 2 add access_id 1 ip

source_ip 10.42.73.1 deny

Command: config access_profile profile_id 1 add access_id 1 ip

source_ip 10.42.73.1 deny

Success.