D-Link 3312SR Reference Manual - Page 197

DGS-3312SR Layer 3 Gigabit Switch config access_profile | dst_port | flag_mask [all | {urg | ack | psh | rst | syn | fin}]} | udp {src_port | dst_port } | protocol_id {user_define }]} [permit {priority {replace_priority }} | deny ] | packet_content {offset_0-15 | offset_16-31 | offset_32-47 | offset_48-63 | offset_64-79 }] [permit {priority {replace_priority} | deny] | delete access_id ] Description The config access_profile command is used to configure an access profile on the switch and to enter specific values that will be combined, using a logical AND operation, with masks entered with the create access_profile command, above. Parameters profile_id − Enter an integer between 1 and 255 that is used to identify the access profile that will be deleted with this command. This value is assigned to the access profile when it is created with the create access_profile command. add access_id − Adds an additional rule to the above specified access profile. The value specifies the relative priority of the additional rule. The lower access ID, the higher the priority the rule will be given. ethernet − Specifies that the switch will look only into the layer 2 part of each packet. • vlan − Specifies that the access profile will apply to only to this VLAN. • source_mac − Specifies that the access profile will apply to only packets with this source MAC address. • destination_mac − Specifies that the access profile will apply to only packets with this destination MAC address. • 802.1p − Specifies that the access profile will apply only to packets with this 802.1p priority value. • ethernet_type − Specifies that the access profile will apply only to packets with this hexadecimal 802.1Q Ethernet type value in the packet header. ip − Specifies that the switch will look into the IP fields in each packet. • vlan − Specifies that the access profile will apply to only to this VLAN. • source_ip − Specifies that the access profile will apply to only packets with this source IP address. • destination_ip − Specifies that the access profile will apply to only packets with this destination IP address. 191