xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
219
config access_profile profile_id (packet content)
deny – Specifies that packets that match the access profile are not permitted to be
forwarded by the Switch and will be filtered.
{time_range <range_name 32>} – Choose this parameter and enter the name of the Time
Range settings that has been previously configured using the config time_range
command. This will set specific times when this access rule will be enabled or disabled on
the Switch.
delete access_id <value 1-128> − Use this command to delete a specific rule from the IP
profile. Up to 128 rules may be specified for the IP access profile.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To configure an access profile by packet content mask:
DGS-3627:5#config access
profile profile
id 3 add access
id 1 packet
content
offset_chunk_1 0x11111111 port 3 permit priority 2 replace_priority rx
rate
no_limit counter enable
Command: config access
profile profile
id 3 add access
id 1 packet
content
mask
offset
chunk
1 0x11111111 port 3 permit priority 2 replace
priority rx
rate
no_limit counter enable
Success.
DGS-3627:5#
create access_profile (ipv6)
Purpose Used to create an access profile on the Switch by examining the IPv6 part of the packet
header. Masks can be entered that will be combined with the values the Switch finds in
the specified frame header fields. Specific values for the rules are entered using the
config access_profile command, below.
Syntax
create access_profile profile_id <value 1–6> ipv6 {[{class | flowlabel |
source_ipv6_mask <ipv6mask> | destination_ipv6_mask <ipv6mask>]} (1) ]
Description This command is used to identify various parts of IPv6 packets that enter the Switch so
they can be either forwarded or filtered.
Parameters profile_id <value 1–6> – Specifies an index number between 1 and 6 that will identify the
access profile being created with this command.
ipv6 – Denotes that IPv6 packets will be examined by the Switch for forwarding or filtering
based on the rules configured in the config access_profile command for IPv6. IPv6
packets may be identified by the following:
• class – Entering this parameter will instruct the Switch to examine the class field of
the IPv6 header. This class field is a part of the packet header that is similar to the
Type of Service (ToS) or Precedence bits field in IPv4.
• flowlabel – Entering this parameter will instruct the Switch to examine the flow label
field of the IPv6 header. This flow label field is used by a source to label sequences
of packets such as non–default quality of service or real time service packets.
• source_ipv6_mask <ipv6mask> – Specifies an IP address mask for the source IPv6
address.
• destination_ipv6_mask <ipv6mask> – Specifies an IP address mask for the
destination IPv6 address.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To create an access profile based on IPv6 classification:
