User`s guide

163
Parameters profile_id <value 1-15> – Specifies an index number between 1 and
15 that identifies the access profile being created with this
command.
ethernet - Specifies that the Switch examine the layer 2 part of each
packet header with emphasis on one or more of the following:
• vlan – Specifies that the Switch examine the VLAN part of
each packet header.
• source_mac <macmask> – Specifies a MAC address mask
for the source MAC address. This mask is entered in the
following hexadecimal format: 000000000000-
FFFFFFFFFFFF
• destination_mac <macmask> – Specifies a MAC address
mask for the destination MAC address in the following
format: 000000000000-FFFFFFFFFFFF
• 802.1p – Specifies that the Switch examine the 802.1p
priority value in the frame’s header.
ethernet_type – Specifies that the Switch examine the Ethernet type
value in each frame’s header.
Restrictions Only administrator-level users can issue this command.
Example usage:
To create an Ethernet access profile:
DGS3100# create access_profile profile_id 1 ethernet vlan 802.1p
Success.
DGS3100#
create access_profile (IP)
Purpose To create an access profile on the Switch by examining the IP part
of the packet header. Masks entered can be combined with the
values the Switch finds in the specified frame header fields. Specific
values for the rules are entered using the config access_profile
command, below.
Syntax
create access_profile profile_id <value 1-15> [ ip
{source_ip_mask <netmask> | destination_ip_mask <netmask>
| dscp | [icmp {type | code} | igmp {type} | tcp {src_port_mask
<hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> | flag_mask } |
udp {src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-
xffff>}]}]
Description The create access_profile command creates a profile for packets
that may be accepted or denied by the Switch by examining the IP
part of the packet header. Specific values for rules pertaining to the
IP part of the packet header may be defined by configuring the
config access_profile command for IP, as stated below.
Parameters profile_id <value 1-15> – Specifies an index number between 1 and
15 that identifies the access profile being created with this
command.
ip - Specifies that the Switch examine the IP fields in each packet
with special emphasis on one or more of the following:
• source_ip_mask <netmask> – Specifies an IP address mask