D-Link DES-3828 Product Manual - Page 156

xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CLI Manual config access_profile profile_id (IP) 0xffffffff> }]} port [permit {priority {replace_priority} | replace_dscp } | deny | mirror] delete ] Description This command is used to define the rules used by the Switch to either forward, filter or mirror packets based on the IP part of each packet header. Parameters profile_id - Enter an integer between 1 and 255 that is used to identify the access profile that will be configured with this command. This value is assigned to the access profile when it is created with the create access_profile command. The lower the profile ID, the higher the priority the rule will be given. add access_id - Adds an additional rule to the above specified access profile. • auto_assign - Adding this parameter will automatically assign an access_id to identify the rule. • - The value specifies the relative priority of the additional rule. Up to 65535 different rules may be configured for the Ethernet access profile. ip − Specifies that the Switch will look into the IP fields in each packet to see if it will be either forwarded or filtered based on one or more of the following: • vlan − Specifies that the access profile will apply to only to this VLAN. • source_ip − Specifies that the access profile will apply to only packets with this source IP address. • destination_ip − Specifies that the access profile will apply to only packets with this destination IP address. • dscp − Specifies that the access profile will apply only to packets that have this value in their Type-of-Service (DiffServ code point, DSCP) field in their IP packet header. • icmp − Specifies that the Switch will examine the Internet Control Message Protocol (ICMP) field within each packet. • type − Specifies that the access profile will apply to this ICMP type defined by a value between 0 and 255. • code − Specifies that the access profile will apply to this ICMP code defined by a value between 0 and 255. • igmp − Specifies that the Switch will examine the Internet Group Management Protocol (IGMP) field within each packet. • type − Specifies that the access profile will apply to packets that have this IGMP type defined by a value between 0 and 255. • tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP) field within each packet. • src_port − Specifies that the access profile will apply only to packets that have this TCP source port in their TCP header. • dst_port − Specifies that the access profile will apply only to packets that have this TCP destination port in their TCP header. • flag_mask - Enter the type of TCP flag to be masked. The choices are: • urg: TCP control flag (urgent) • ack: TCP control flag (acknowledgement) • psh: TCP control flag (push) • rst: TCP control flag (reset) • syn: TCP control flag (synchronize) • fin: TCP control flag (finish) • udp − Specifies that the Switch will examine the User Datagram Protocol (UDP) field in each packet. • src_port − Specifies that the access profile will apply only to packets that have this UDP source port in their header. 152