D-Link DES-3326S - Access Control List and CPU Interface Filtering Commands

D-Link DES-3326S Layer 3 Switch CLI Reference
21
ACCESS CONTROL LIST AND CPU INTERFACE
FILTERING COMMANDS
Command Parameters
create access_profile [ethernet { vlan | source_mac <macmask> | destination_mac <macmask> |
802.1p | ethernet_type} |
ip { vlan|source_ip_mask<netmask> | destination_ip_mask <netmask> | dscp
| [ icmp { type | code} | igmp {type} | tcp { src_port_mask <hex 0x0-0xffff> |
flag_mask [ all | { urg | ack | psh | rst |syn | fin } ] } | dst_port_mask
<hex 0x0-0xffff>} | udp {src_port_mask <hex 0x0-0xfff> | dst_port_mask
<hex 0x0-0xffff>} | protocol_id { user_mask <hex 0x0-0xffffffff> } ] } ]
{ profile_id <value 1-255>}
config access_profile profile_id <value 1-255> [ add access_id <value 1-255>
[ permit { priority <value 0-7> { replace_priority} |
replace_dscp <value 0-63> }
[ ethernet { vlan <vlan_name 32> | source_mac <macaddr> |
destination_mac <macaddr> | 802.1p <value 0-7> |
ethernet_type <hex 0x0-0xffff> } |
ip { vlan <vlan_name 32> | source_ip <ipaddr> | destination_ip <ipaddr> |
dscp <value 0-63> |
[ icmp { type <value 0-255> code <value 0-255> } | igmp { type <value 0-255
>} | tcp {src_port <value 0-65535> | dst_port <value 0-65535> | flag [all | {urg
| ack | psh | rst | syn | fin } ] } | udp { src_port <value 0-65535> |
dst_port <value 0-65535> } |
protocol_id <value 0 - 255> { user_define <hex 0x0-0xffffffff> } ] } ]
| deny ] | delete access_id <value 1-255> ]
show access_profile { profile_id <value 1-255> { access_id <value 1-65535> } }
delete access_profile profile_id <value 1-255>
create cpu
access_profile
[ ethernet { vlan | source_mac <macmask> | destination_mac <macmask> |
802.1p | ethernet_type } |
ip { vlan | source_ip_mask <netmask> | destination_ip_mask <netmask> |
dscp | [ icmp { type | code } | igmp { type } | tcp
{ src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> |
flag_mask [ all | {urg | ack | psh | rst | syn | fin } ] } |
udp { src_port_mask <hex 0x0-0xffff> | dst_port_mask <hex 0x0-0xffff> } |
protocol_id {user_mask <hex 0x0-0xffffffff> } ] } ]
{ profile_id <value 1-255> }
config cpu
access_profile
profile_id <value 1-255> [ add access_id <value 1-255>
[ ethernet { vlan <vlan_name 32> | source_mac <macaddr> |
destination mac <macaddr>
|
802.1
p
<value 0-7>
|
176