xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
config access_profile profile_id (for Ethernet)
permitted to be forwarded by the Switch.
replace_dscp <value 0-63> − Allows specification of a value to be
written to the DSCP field of an incoming packet that meets the
criteria specified in the first part of the command. This value will
over-write the value in the DSCP field of the packet.
deny – Specifies that packets that do not match the access profile
are not permitted to be forwarded by the Switch and will be filtered.
delete access_id <value 1-65535> − Use this command to delete a
specific rule from the Ethernet profile. Up to 65535 rules may be
specified for the Ethernet access profile.
Only administrator-level users can issue this command.
• priority <value 0-7> − This parameter is specified to re-write
the 802.1p default priority previously set in the Switch, which is
used to determine the CoS queue to which packets are
forwarded to. Once this field is specified, packets accepted by
the Switch that match this priority are forwarded to the CoS
queue specified previously by the user.
• {replace_priority} − Enter this parameter to re-write the 802.1p
default priority of a packet to the value entered in the Priority
field, which meets the criteria specified previously in this
command, before forwarding it on to the specified CoS queue.
Otherwise, a packet will have its incoming 802.1p user priority
re-written to its original value before being forwarded by the
Switch.
Restrictions
Example usage:
To configure a rule for the Ethernet access profile:
DES-6500:4#config access profile profile_id 1 add access_id 1 ethernet
vlan Trinity 802.1p 1 port 1:1 permit priority 1 replace priority
Command: config access profile profile_id 1 add access_id 1 ethernet
vlan Trinity 802.1p 1 port 1:1 permit priority 1 replace priority
Success.
DES-6500:4#
create access_profile (IP)
Purpose Used to create an access profile on the Switch by examining the IP
part of the packet header. Masks entered can be combined with the
values the Switch finds in the specified frame header fields. Specific
values for the rules are entered using the config access_profile
command, below.
Syntax
create access_profile profile_id <value 1-8> ip {vlan |
source_ip_mask <netmask> | destination_ip_mask <netmask> |
dscp | [icmp {type | code} | igmp {type} | tcp {src_port_mask
<hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> | flag_mask
[all | {urg | ack | psh | rst | syn | fin}]} | udp {src_port_mask <hex
215
