DES-3000 Series Layer 2 Switch CLI Reference Manual
config cpu access_profile
permit | deny – Specify that the packet matching the criteria configured with command will
either be permitted entry to the CPU or denied entry to the CPU.
delete access_id <value 1-65535> - Use this to remove a previously created access rule in
a profile ID.
Restrictions Only administrator-level users can issue this command.
• packet_content_mask – Specifies that the Switch will mask the packet header
beginning with the offset value specified as follows:
• offset_0-15 - Enter a value in hex form to mask the packet from byte 0 to byte 15.
• offset_16-31 - Enter a value in hex form to mask the packet from byte 16 to byte
31.
• offset_32-47 - Enter a value in hex form to mask the packet from byte 32 to byte
47.
port <portlist> - The access profile for the CPU may be defined for each port on the Switch.
The port list is specified by listing the lowest switch number and the beginning port number
on that switch, separated by a colon. Then the highest switch number, and the highest port
number of the range (also separated by a colon) are specified. The beginning and end of
the port list range are separated by a dash. For example, 1:3 specifies switch number 1,
port 3. 2:4 specifies switch number 2, port 4. 1:3-2:4 specifies all of the ports between
switch 1, port 3 and switch 2, port 4 − in numerical order.
• offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to byte
63.
• offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to byte
79.
Example usage:
To configure cpu access list entry:
DES-3026:4#
DES-3026:4#config cpu access_profile profile_id 1 add access_id 1
ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3
icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 1 add access_id 1 ip
vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp
type 11 code 32 port 1 deny
Success.
157
To Next Page
Loading...
