D-Link DES-3326S - Page 197

D-Link DES-3326S Layer 3 Switch CLI Reference
config cpu access_profile
Purpose
Used to configure a cpu access profile used for CPU Interface Filtering and to
define specific values that will be used to by the Switch to determine if a given packet
should be forwarded or filtered. Masks entered using the create cpu access_profile
profile_id command will be combined, using a logical AND operation, with the values
the Switch finds in the specified frame header fields. CPU interface filtering must be
enabled to use CPU access profiles (enable cpu_interface_filtering).
Syntax
config cpu access_profile
profile_id <value 1-255> [ add access_id <value 1-255>
[ ethernet { vlan <vlan_name 32> | source_mac <macaddr> |
destination_mac <macaddr> | 802.1p <value 0-7> |
ethernet_type <hex 0x0-0xffff> } | ip { vlan <vlan_name 32> |
source_ip <ipaddr> | destination_ip <ipaddr> | dscp <value 0-63> |
[ icmp { type <value 0-255> code <value 0-255>} | igmp {type <value 0-255> } |
tcp { src_port <value0-65535> | dst_port <value 0-65535> | flag [ all | {urg | ack
| psh | rst | syn | fin } ] } | udp { src_port <value 0-65535> | dst_port <value 0-
65535> } | protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff> } ] } ]
[ permit | deny ] | delete access_id <value 1-255> ]
Description
The config cpu access_profile command is used to configure a cpu access profile
for CPU Interface Filtering and to enter specific values that will be combined, using a
logical AND operation, with masks entered with the create cpu access_profile
command, above.
Parameters
profile_id <value 1-255> − Enter an integer used to identify the cpu access profile
that will be configured with this command. This value is assigned to the cpu access
profile when it is created with the create access_profile command. The profile ID sets
the relative priority for the profile and specifies an index number that will identify the
access profile being created with this command. Priority is set relative to other
profiles where the lowest profile ID has the highest priority.
ethernet − Specifies that the Switch will look only into the layer 2 part of each packet.
add access_id <value 1-255> − Adds an additional rule to the above specified access
profile. The value is used to index the rule created.
vlan <vlan_name 32> − Specifies that the access profile will apply to only to this
VLAN.
source_mac <macaddr> − Specifies that the access profile will apply to only packets
with this source MAC address.
destination_mac <macaddr> − Specifies that the access profile will apply to only
packets with this destination MAC address.
802.1p <value 0-7> − Specifies that the access profile will apply only to packets with
this 802.1p priority value.
ethernet_type <hex 0x0-0xffff> − Specifies that the access profile will apply only to
packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
191