D-Link DES-3010F Reference Manual - Page 122

x0-0xffff>} | ip {vlan <vlan_name 32> | source_ip <ipaddr&gt

Get D-Link DES-3010F PDF manuals and user guides View all D-Link DES-3010F manuals
Add to My Manuals
Save this manual to your list of manuals

Page 122 highlights

DES-30XX Layer 2 Switch CLI Reference Manual config cpu access_profile Purpose Syntax Description Parameters Used to configure a cpu access profile used for CPU Interface Filtering and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered. Masks entered using the create cpu access_profile command will be combined, using a logical AND operational method, with the values the Switch finds in the specified frame header fields. Specific values for the rules are entered using the config cpu access_profile command, below. config cpu access_profile profile_id [add access_id [ethernet {vlan | source_mac | destination_mac | 802.1p | ethernet_type } | ip {vlan | source_ip | destination_ip | dscp | [icmp {type code } | igmp {type } | tcp {src_port | dst_port | {urg | ack | psh | rst | syn | fin}]} | udp {src_port | dst_port } | protocol_id {user_define }]} | packet_content {offset_0-15 | offset_16-31 | offset_32-47 | offset_48-63 | offset_64-79 }] | ipv6 {class | flowlabel | source_ipv6 | destination_ipv6 } port [ | all] [permit | deny] | delete access_id ] The config cpu access_profile command is used to configure a CPU access profile for CPU Interface Filtering and to enter specific values that will be combined, using a logical AND operational method, with masks entered with the create cpu access_profile command, above. profile_id − Enter an integer used to identify the access profile that will be configured with this command. This value is assigned to the access profile when it is created with the create access_profile command. The profile ID sets the relative priority for the profile and specifies an index number that will identify the access profile being created with this command. Priority is set relative to other profiles where the lowest profile ID has the highest priority. add access_id − Adds an additional rule to the above specified access profile. The value is used to index the rule created. ethernet − Specifies that the Switch will look only into the layer 2 part of each packet. • vlan − Specifies that the access profile will apply to only to this VLAN. • source_mac − Specifies that the access profile will apply to this source MAC address. • destination_mac − Specifies that the access profile will apply to this destination MAC address. • 802.1p − Specifies that the access profile will apply only to packets with this 802.1p priority value. • ethernet_type − Specifies that the access profile will apply only to packets with this hexadecimal 802.1Q Ethernet type value in the packet header. 118

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
DES-30XX Layer 2 Switch CLI Reference Manual
118
config cpu access_profile
Purpose
Used to configure a cpu access profile used for CPU Interface Filtering and
to define specific values that will be used to by the Switch to determine if a
given packet should be forwarded or filtered. Masks entered using the
create cpu access_profile
command will be combined, using a logical
AND operational method, with the values the Switch finds in the specified
frame header fields. Specific values for the rules are entered using the
config cpu access_profile
command, below.
Syntax
config cpu access_profile profile_id <value 1-3> [add access_id
<value 1-5> [ethernet {vlan
<vlan_name 32> | source_mac <macaddr>
| destination_mac <macaddr> | 802.1p <value0-7> | ethernet_type <hex
0x0-0xffff>} | ip {vlan <vlan_name 32> | source_ip <ipaddr> |
destination_ip <ipaddr> | dscp <value 0-63> | [icmp {type <value 0-
255> code <value 0-255>} | igmp {type <value 0-255>} | tcp {src_port
<value 0-65535> | dst_port <value 0-65535> | {urg | ack | psh | rst | syn
| fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} |
protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff>}]} |
packet_content {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset_16-31 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> |
offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-79
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff>}] | ipv6 {class <value 0-255> | flowlabel <hex 0x0-0xfffff> |
source_ipv6 <ipaddr> | destination_ipv6 <ipv6addr>}
port [<portlist> |
all] [permit | deny] | delete access_id <value 1-5>]
Description
The
config cpu access_profile
command is used to configure a CPU
access profile for CPU Interface Filtering and to enter specific values that
will be combined, using a logical AND operational method, with masks
entered with the
create cpu access_profile
command, above.
Parameters
profile_id <value 1-3>
−
Enter an integer used to identify the access profile
that will be configured with this command. This value is assigned to the
access profile when it is created with the
create access_profile
command.
The profile ID sets the relative priority for the profile and specifies an index
number that will identify the access profile being created with this
command. Priority is set relative to other profiles where the lowest profile ID
has the highest priority.
add access_id <value 1-5>
−
Adds an additional rule to the above specified
access profile. The value is used to index the rule created.
ethernet
−
Specifies that the Switch will look only into the layer 2 part of
each packet.
•
vlan <vlan_name 32>
−
Specifies that the access profile will apply to
only to this VLAN.
•
source_mac <macaddr>
−
Specifies that the access profile will apply
to this source MAC address.
•
destination_mac <macaddr>
−
Specifies that the access profile will
apply to this destination MAC address.
•
802.1p <value 0-7>
−
Specifies that the access profile will apply only
to packets with this 802.1p priority value.
•
ethernet_type <hex 0x0-0xffff>
−
Specifies that the access profile will
apply only to packets with this hexadecimal 802.1Q Ethernet type
value in the packet header.