xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
212
config access_profile profile_id (for Ethernet)
access profile when it is created with the create access_profile command. The lower the
profile ID, the higher the priority the rule will be given.
add access_id <value 1–128> – Adds an additional rule to the above specified access
profile. The value specifies the relative priority of the additional rule. Up to 128 different
rules may be configured for the Ethernet access profile.
auto_assign – Choose this parameter to configure the Switch to automatically
assign a numerical value (between 1 and 128) for the rule being configured.
ethernet – Specifies that the Switch will look only into the layer 2 part of each packet to
determine if it is to be filtered or forwarded based on one or more of the following:
• vlan <vlan_name 32> − Specifies that the access profile will apply to only this
previously created VLAN.
• source_mac <macaddr> − Specifies that the access profile will apply to only
packets with this source MAC address. MAC address entries may be made in the
following format: 000000000000–FFFFFFFFFFFF
• destination_mac <macaddr> − Specifies that the access profile will apply to only
packets with this destination MAC address. MAC address entries may be made in
the following format: 000000000000–FFFFFFFFFFFF
• 802.1p <value 0–7> − Specifies that the access profile will apply only to packets
with this 802.1p priority value.
• ethernet_type <hex 0x0–0xffff> − Specifies that the access profile will apply only to
packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
port <portlist> | all – The access profile for Ethernet may be defined for each port on the
Switch. The port list is specified by listing the lowest switch number and the beginning
port number on that switch, separated by a colon. Then the highest switch number, and
the highest port number of the range (also separated by a colon) are specified. The
beginning and end of the port list range are separated by a dash. For example, 1:3
specifies switch number 1, port 3. 2:4 specifies switch number 2, port 4. 1:3–2:4 specifies
all of the ports between switch 1, port 3 and switch 2, port 4 – in numerical order. Up to
128 rules may be configured for each port. The user may select all ports by entering the
all parameter. Non–contiguous portlist entries are separated by a comma. (ex: 1:1–
1:3,1:7–1:9)
permit – Specifies that packets that match the access profile are permitted to be
forwarded by the Switch.
• priority <value 0–7> − This parameter is specified if you want to re–write the 802.1p
default priority previously set in the Switch, which is used to determine the CoS
queue to which packets are forwarded to. Once this field is specified, packets
accepted by the Switch that match this priority are forwarded to the CoS queue
specified previously by the user.
• {replace_priority} − Enter this parameter if you want to re–write the 802.1p default
priority of a packet to the value entered in the Priority field, which meets the criteria
specified previously in this command, before forwarding it on to the specified CoS
queue. Otherwise, a packet will have its incoming 802.1p user priority re–written to
its original value before being forwarded by the Switch.
replace_dscp <value 0-63> - Allows the user to specify a value to be written to the DSCP
field of an incoming packet that meets the criteria specified in the first part of the
command. This value will over-write the value in the DSCP field of the packet.
rx_rate – Use this to limit Rx bandwidth for the profile being configured. This rate is
implemented using the following equation – 1 value = 64kbit/sec. (ex. If the user selects a
rx rate of 10 then the ingress rate is 640kbit/sec.) The user many select a value between
1– 156249 or no limit. The default setting is no limit.
counter [enable | disable] – Use this parameter to enable the counter function. When
enabled, this counter will count the number of packets that match the profile stated with
this command. If the counter command is enabled using the flow_meter command, the
counter command here will be overridden and therefore will not count packets. This
command is optional and the default setting is disabled.
mirror − Select mirror to specify that packets match the access profile are mirrored to a
port defined in the config mirror port command. Port Mirroring must be enabled and a
