D-Link DES-3828 Product Manual - Page 153

xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CLI Manual config access_profile profile_id (for Ethernet) Description Parameters This command is used to define the rules used by the Switch to either forward, filter or mirror packets based on the Ethernet part of each packet header. profile_id - Enter an integer between 1 and 255 that is used to identify the access profile that will be configured with this command. This value is assigned to the access profile when it is created with the create access_profile command. The lower the profile ID, the higher the priority the rule will be given. add access_id - Adds an additional rule to the above specified access profile. • auto_assign - Adding this parameter will automatically assign an access_id to identify the rule. • - The value specifies the relative priority of the additional rule. Up to 65535 different rules may be configured for the Ethernet access profile. ethernet - Specifies that the Switch will look only into the layer 2 part of each packet to determine if it is to be filtered or forwarded based on one or more of the following: • vlan − Specifies that the access profile will apply to only this previously created VLAN. • source_mac − Specifies that the access profile will apply to only packets with this source MAC address. MAC address entries may be made in the following format: 000000000000-FFFFFFFFFFFF • destination_mac − Specifies that the access profile will apply to only packets with this destination MAC address. MAC address entries may be made in the following format: 000000000000-FFFFFFFFFFFF • 802.1p − Specifies that the access profile will apply only to packets with this 802.1p priority value. • ethernet_type − Specifies that the access profile will apply only to packets with this hexadecimal 802.1Q Ethernet type value in the packet header. port - The access profile for Ethernet may be defined for each port on the Switch by entering a port or range of ports here. Up to 65535 rules may be configured for each port. permit - Specifies that packets that match the access profile are permitted to be forwarded by the Switch. • priority − This parameter is specified to re-write the 802.1p default priority previously set in the Switch, which is used to determine the CoS queue to which packets are forwarded to. Once this field is specified, packets accepted by the Switch that match this priority are forwarded to the CoS queue specified previously by the user. • {replace_priority} − Enter this parameter if you want to re-write the 802.1p default priority of a packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch. replace_dscp − Allows you to specify a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet. deny - Specifies that packets that match the access profile are not permitted to be forwarded by the Switch and will be filtered. mirror - Selecting mirror specifies that packets that match the access profile are mirrored to a port defined in the config mirror port command. Port Mirroring must be enabled and a target port must be set. Remember, Port Mirroring cannot crossbox, that is they cannot span across switches in a switch stack. 149