User`s guide

DGS-3100 Gigabit Ethernet Switch Manual
164
for the source IP address.
• destination_ip_mask <netmask> – Specifies an IP address
mask for the destination IP address.
• dscp – Specifies that the Switch examine the DiffServ Code
Point (DSCP) field in each frame’s header.
• icmp – Specifies that the Switch examine the Internet
Control Message Protocol (ICMP) field in each frame’s
header.
• type – Specifies that the Switch examine each frame’s
ICMP Type field.
• code – Specifies that the Switch examine each frame’s
ICMP Code field.
• igmp – Specifies that the Switch examine each frame’s
Internet Group Management Protocol (IGMP) field.
• type – Specifies that the Switch examine each frame’s
IGMP Type field.
• tcp – Specifies that the Switch examine each frames
Transport Control Protocol (TCP) field.
• src_port_mask <hex 0x0-0xffff> – Specifies a TCP port
mask for the source port.
• dst_port_mask <hex 0x0-0xffff> – Specifies a TCP port
mask for the destination port.
• flag_mask – Specifies the appropriate flag_mask
parameter. All incoming packets have TCP port
numbers contained in them as the forwarding criterion.
These numbers have flag bits associated with them
which are parts of a packet that determine what to do
with the packet. The user may deny packets by denying
certain flag bits within the packets.
• udp – Specifies that the Switch examine each frame’s
Universal Datagram Protocol (UDP) field.
• src_port_mask <hex 0x0-0xffff> – Specifies a UDP port
mask for the source port.
• dst_port_mask <hex 0x0-0xffff> – Specifies a UDP port
mask for the destination port.
Restrictions Only administrator-level users can issue this command.
Example usage:
To create an IP access profile:
DGS3100# create access_profile profile_id 2 ip source_ip_mask 20.0.0.0
destination_ip_mask 10.0.0.0 dscp icmp type
Success.
DGS3100#
config access_profile (Ethernet)
Purpose To configure the Ethernet access profile on the Switch and to define
specific values for the rules that will be used to by the Switch to
determine if a given packet should be forwarded or filtered. Masks
entered using the create access_profile command will be combined,