D-Link 3324SRi Reference Manual - Page 238

xStack Gigabit Layer 3 Switch Command Line Interface Manual

config access_profile profile_id (packet content mask)

are forwarded to. Once this field is specified, packets accepted

by the Switch that match this priority are forwarded to the CoS

queue specified previously by the user.

•

{replace_priority}

−

Enter this parameter if you want to re-write

the 802.1p default priority of a packet to the value entered in

the Priority field, which meets the criteria specified previously

in this command, before forwarding it on to the specified CoS

queue. Otherwise, a packet will have its incoming 802.1p user

priority re-written to its original value before being forwarded by

the Switch.

replace_dscp <value 0-63>

−

Allows you to specify a value to be

written to the DSCP field of an incoming packet that meets the

criteria specified in the first part of the command. This value will

over-write the value in the DSCP field of the packet.

deny

– Specifies that packets that do not match the access profile

are not permitted to be forwarded by the Switch and will be filtered.

delete access_id <value 1-100>

−

Use this command to delete a

specific rule from the packet content mask profile. Up to 100 rules

may be specified for the Packet Content access profile.

Restrictions

Only administrator-level users can issue this command.

Example usage:

To create an access profile by packet content mask:

DGS-3324SRi:4# config access_profile profile_id 3 add access_id 1

packet_content offset_0-15 0x11111111 0x11111111 0x11111111

0x11111111 offset_16-31 0x11111111 0x11111111 0x11111111

0x11111111 port 1:1 deny

Command: config access_profile profile_id 3 add access_id 1

packet_content offset_0-15 0x11111111 0x11111111 0x11111111

0x11111111 offset_16-31 0x11111111 0x11111111 0x11111111

0x11111111 port 1:1 deny

Success.

DGS-3324SRi:4#

create access_profile (ipv6)

Purpose

Used to create an access profile on the Switch by examining the

IPv6 part of the packet header. Masks can be entered that will be

combined with the values the Switch finds in the specified frame

header fields. Specific values for the rules are entered using the

config access_profile

command, below.

Syntax

create access_profile ipv6 {class | flowlabel |

source_ipv6_mask <ipv6mask> | destination_ipv6_mask

<ipv6mask>}] profile_id <value 1-8>}

Description

This command is used to identify various parts of IPv6 packets that

enter the Switch so they can be either forwarded or filtered.

230

Section	Page
Introduction	9
	9
	9
Accessing the Switch via the Serial Port	9
Setting the Switch’s IP Address	10
Using the Console CLI	12
	12
	12
Connecting to the Switch	12
Command Syntax	17
Basic Switch Commands	19
Switch Port Commands	34
Port Security Commands	37
Network Management (SNMP) Commands	40
Switch Utility Commands	62
Network Monitoring Commands	68
Multiple Spanning Tree Protocol (MSTP) Commands	85
Forwarding Database Commands	99
Broadcast Storm Control Commands	109
QoS Commands	111
Port Mirroring Commands	124
VLAN Commands	128
Link Aggregation Commands	138
IP Commands (Including IP Multinetting)	144
IGMP Commands (Including IGMP v3)	149
IGMP Snooping Commands	153
MAC Notification Commands	163
Access Authentication Control Commands	168
SSH Commands	193
SSL Commands	201
802.1X Commands	207
Access Control List (ACL) Commands	226
Traffic Segmentation Commands	244
Stacking Commands	247
D-Link Single IP Management Commands	251
Time and SNTP Commands	262
ARP Commands	269
VRRP Commands	273
Routing Table Commands	281
Route Redistribution Commands	285
BOOTP Relay Commands	292
DNS Relay Commands	296
RIP Commands	300
DVMRP Commands	303
PIM Commands	308
IP Multicasting Commands	312
MD5 Configuration Commands	314
OSPF Configuration Commands	317
Route Preference Commands	338
Jumbo Frame Commands	342
File System Commands	344
Command History List	352

D-Link 3324SRi Reference Manual - Page 238

config access_profile profile_id packet content mask, create access_profile ipv6

Page 238 highlights