D-Link 3324SRi Reference Manual - Page 226

xStack Gigabit Layer 3 Switch Command Line Interface Manual

25

A

CCESS

C

ONTROL

L

IST

(ACL) C

OMMANDS

The xStack family of switches implement Access Control Lists that enable the Switch to deny network access to specific devices

or device groups based on IP settings, MAC address, packet content and IPv6 settings.

Command

Parameters

create access_profile

[ethernet {vlan | source_mac <macmask 000000000000-ffffffffffff>

| destination_mac <macmask 000000000000-ffffffffffff> | 802.1p |

ethernet_type} | ip {vlan | source_ip_mask <netmask> |

destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp

{type} | tcp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex

0x0-0xffff> | flag_mask [all | {urg | ack | psh | rst | syn | fin}]} | udp

{src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-xffff>}

| protocol_id {user _mask <hex 0x0-0xffffffff> }]} |

packet_content_mask {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-

0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31

<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex

0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>

<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-

0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-

0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>

<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} | ipv6 {class | flowlabel |

source_ipv6_mask <ipv6mask> | destination_ipv6_mask

<ipv6mask>}] profile_id <value 1-8>}

delete access_profile

profile_id

<value 1-8>

config access_profile

profile_id

<value 1-8> [add access_id <value 1-100> [ethernet {vlan

<vlan_name 32> | source_mac <macaddr 000000000000-

ffffffffffff> | destination_mac <macaddr 000000000000-ffffffffffff> |

802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff>} port <port>

[permit {priority <value 0-7> {replace_priority} | replace_dscp

<value 0-63> } | deny] | ip {vlan <vlan_name 32> | source_ip

<ipaddr> | destination_ip <ipaddr> | dscp <value 0-63> | [icmp

{type <value 0-255> code <value 0-255>} | igmp {type <value 0-

255>} | tcp {src_port <value 0-65535> | dst_port <value 0-65535>

| urg | ack | psh | rst | syn | fin} | udp {src_port <value 0-65535> |

dst_port <value 0-65535>} | protocol_id <value 0 - 255>

{user_define <hex 0x0-0xffffffff> }]} port <port> [permit {priority

<value 0-7> {replace_priority} | replace_dscp <value 0-63> } |

deny] | packet_content {offset_0-15 <hex0x0-0xffffffff> <hex 0x0-

0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31


0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-

0xffffffff><hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63


0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>

<hex 0x0-0xffffffff> <hex0x0-0xffffffff>} port <port> [permit { priority

<value 0-7> {replace_priority} | replace_dscp <value 0-63> } |

deny] | ipv6 {class <value 0-255> | flowlabel <hex 0x0-0xfffff> |

source_ipv6 <ipv6addr> | destionation_ipv6 <ipv6addr>} port

<port> [permit {priority <value 0-7> {replace_priority} } | deny] |

delete <value 1-100>]

show access_profile

{profile_id <value 1-8>}

218

Section	Page
Introduction	9
	9
	9
Accessing the Switch via the Serial Port	9
Setting the Switch’s IP Address	10
Using the Console CLI	12
	12
	12
Connecting to the Switch	12
Command Syntax	17
Basic Switch Commands	19
Switch Port Commands	34
Port Security Commands	37
Network Management (SNMP) Commands	40
Switch Utility Commands	62
Network Monitoring Commands	68
Multiple Spanning Tree Protocol (MSTP) Commands	85
Forwarding Database Commands	99
Broadcast Storm Control Commands	109
QoS Commands	111
Port Mirroring Commands	124
VLAN Commands	128
Link Aggregation Commands	138
IP Commands (Including IP Multinetting)	144
IGMP Commands (Including IGMP v3)	149
IGMP Snooping Commands	153
MAC Notification Commands	163
Access Authentication Control Commands	168
SSH Commands	193
SSL Commands	201
802.1X Commands	207
Access Control List (ACL) Commands	226
Traffic Segmentation Commands	244
Stacking Commands	247
D-Link Single IP Management Commands	251
Time and SNTP Commands	262
ARP Commands	269
VRRP Commands	273
Routing Table Commands	281
Route Redistribution Commands	285
BOOTP Relay Commands	292
DNS Relay Commands	296
RIP Commands	300
DVMRP Commands	303
PIM Commands	308
IP Multicasting Commands	312
MD5 Configuration Commands	314
OSPF Configuration Commands	317
Route Preference Commands	338
Jumbo Frame Commands	342
File System Commands	344
Command History List	352

D-Link 3324SRi Reference Manual - Page 226

Access Control List (ACL) Commands, dst_port <value 0-65535>} | protocol_id <value 0 - 255&gt

Page 226 highlights