config access_profile profile_id (IP)
| replace_dscp <value 0-63>} | deny] delete <value 1-100>]
This command is used to define the rules used by the Switch to
either filter or forward packets based on the IP part of each packet
header.
profile_id <value 1-8>
- Enter an integer between 1 and 8 that is
used to identify the access profile that will be configured with this
command. This value is assigned to the access profile when it is
created with the
create access_profile
command. The lower the
profile ID, the higher the priority the rule will be given.
add access_id <value 1-100>
- Adds an additional rule to the above
specified access profile. The value specifies the relative priority of
the additional rule. Up to 100 different rules may be configured for
the Ethernet access profile.
vlan <vlan_name 32>
−
Specifies that the access profile will apply to
only to this VLAN.
source_ip <ipaddr>
−
Specifies that the access profile will apply to
only packets with this source IP address.
dscp <value 0-63>
−
Specifies that the access profile will apply only
to packets that have this value in their Type-of-Service (DiffServ
code point, DSCP) field in their IP packet header.
icmp
−
Specifies that the Switch will examine the Internet Control
Message Protocol (ICMP) field within each packet.
type <value 0-255>
−
Specifies that the access profile will apply to
this ICMP type defined by a value between 0 and 255.
code <value 0-255>
−
Specifies that the access profile will apply to
this ICMP code defined by a value between 0 and 255.
type <value 0-255>
−
Specifies that the access profile will apply to
packets that have this IGMP type defined by a value between 0 and
255..
src_port <value 0-65535>
−
Specifies that the access profile will
apply only to packets that have this TCP source port in their TCP
header.
urg
: TCP control flag (urgent)
psh
: TCP control flag (push)
rst
: TCP control flag (reset)
fin
: TCP control flag (finish)
udp
−
Specifies that the Switch will examine the Universal Datagram
Protocol (UDP) field in each packet.
src_port <value 0-65535>
−
Specifies that the access profile will
apply only to packets that have this UDP source port in their header.
Description
Parameters
ip
−
Specifies that the Switch will look into the IP fields in each
packet to see if it will be either forwarded or filtered based on one or
more of the following:
destination_ip <ipaddr>
−
Specifies that the access profile will apply
to only packets with this destination IP address.
igmp
−
Specifies that the Switch will examine the Internet Group
Management Protocol (IGMP) field within each packet.
tcp
−
Specifies that the Switch will examine the Transmission Control
Protocol (TCP) field within each packet.
dst_port <value 0-65535>
−
Specifies that the access profile will
apply only to packets that have this TCP destination port in their
TCP header.
flag_mask
– Enter the type of TCP flag to be masked. The choices
are:
ack
: TCP control flag (acknowledgement)
syn
: TCP control flag (synchronize)
Summary of Contents for TM DES-6500
Page 6: ...Register online your D Link product at http support dlink com register vi...
Page 33: ...DES 6500 Example usage To terminate the current user s console session DES 6500 4 logout...
Page 62: ...DES 6500 4 disable rmon Command disable rmon Success DES 6500 4...
Page 128: ...DES 6500 4 disable ipif s2 Command disable ipif s2 Success DES 6500 4...
Page 262: ...DES 6500 4 config command_history 20 Command config command_history 20 Success DES 6500 4...
Page 266: ......
Page 267: ...1...