D-Link DES-3010F - Page 168

DES-3000 Series Layer 2 Switch CLI Reference Manual
164
config cpu access_profile
 udp  Specifies that the Switch will examine the Transmission Control Protocol (TCP)
field within each packet.
 src_port <value 0-65535>  Specifies that the access profile will apply only to
packets that have this UDP source port in their header.
 dst_port <value 0-65535>  Specifies that the access profile will apply only to
packets that have this UDP destination port in their header.
 protocol_id <value 0-255>  Specifies that the Switch will examine the protocol field in
each packet and if this field contains the value entered here, apply the following rules.
user_define_mask <hex 0x0-0xffffffff>  Specifies that the rule applies to the IP protocol ID
and t he mask options behind the IP header.
 packet_content_mask – Specifies that the Switch will mask the packet header beginning
with the offset value specified as follows:
 offset_0-15  Enter a value in hex form to mask the packet from byte 0 to byte 15.
 offset_16-31  Enter a value in hex form to mask the packet from byte 16 to byte 31.
 offset_32-47  Enter a value in hex form to mask the packet from byte 32 to byte 47.
 offset_48-63  Enter a value in hex form to mask the packet from byte 48 to byte 63.
 offset_64-79  Enter a value in hex form to mask the packet from byte 64 to byte 79.
port <portlist>  The access profile for the CPU may be defined for each port on the Switch.
permit | deny – Specify that the packet matching the criteria configured with command will
either be permitted entry to the CPU or denied entry to the CPU.
delete access_id <value 1-65535>  Use this to remove a previously created access rule
in a profile ID.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To configure a CPU access list entry:
DES-3026:4#config cpu access
_
profile profile
_
id 1 add access
_
id 1
ip vlan default source
_
ip 20.2.2.3 destination
_
ip 10.1.1.252 dscp
3 icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 1 add access_id 1
ip vlan default source
_
ip 20.2.2.3 destination
_
ip 10.1.1.252 dscp
3 icmp type 11 code 32 port 1 deny
Success.
DES-3026:4#
enable cpu_interface_filtering
Purpose Used to enable CPU interface filtering on the Switch.
Syntax
enable cpu_interface_filtering
Description
This command is used, in conjunction with the disable
cpu_interface_filtering command below, to enable and disable
CPU interface filtering on the Switch.
Parameters None.