D-Link 3312SR Reference Manual - Page 199

DGS-3312SR Layer 3 Gigabit Switch config access_profile Restrictions user_define − Specifies a mask to be combined with the value found in the frame header using a logical AND operation. • packet_content - Specifies that the switch will mask the packet header beginning with the offset value specified as follows: • offset_0-15 - Enter a value in hex form to mask the packet from the beginning of the packet to the 15th byte. • offset_16-31 - Enter a value in hex form to mask the packet from byte 16 to byte 32. • offset_32-47 - Enter a value in hex form to mask the packet from byte 32 to byte 47. • offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to byte 63. • offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to byte 79. permit - Specifies that packets that match the access profile are permitted to be forwarded by the Switch. • priority − Specify the 802.1p priority value included in the packet that will be forwarded by the Switch. Only packets that have this priority value will be permitted. • {replace_priority} − This parameter is specified if you want to change the 802.1p user priority of a packet that meets the specified criteria. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being transmitted from the Switch. replace_dscp with − Allows you to specify a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command. This value will over-write the value in the DSCP field of the packet. deny - Specifies that packets that do not match the access profile are not permitted to be forwarded by the Switch and will be filtered. delete access_id − Specifies the access ID of a rule to delete. Only administrator-level users can issue this command. Example usage: To configure the access profile with the profile ID of 1 to filter frames that have IP addresses in the range between 10.42.73.0 to 10.42.73.255: DGS-3312SR:4# config access_profile profile_id 2 add access_id 1 ip source_ip 10.42.73.1 deny Command: config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 deny Success. DGS-3312SR:4# 193