DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide
221
create cpu access_profile
frame’s header.
icmp
−
Specifies that the Switch will examine the Internet Control Message Protocol (ICMP) field
in each frame’s header.
type
−
Specifies that the Switch will examine each frame’s ICMP Type field.
code
−
Specifies that the Switch will examine each frame’s ICMP Code field.
igmp - Specifies that the Switch will examine each frame’s Internet Group Management Protocol
(IGMP) field.
type – Specifies that the Switch will examine each frame’s IGMP Type field.
tcp
−
Specifies that the Switch will examine each frames Transport Control Protocol (TCP) field.
src_port_mask <hex 0x0-0xffff>
−
Specifies a TCP port mask for the source port.
dst_port_mask <hex 0x0-0xffff>
−
Specifies a TCP port mask for the destination port.
flag_mask [ all | {urg | ack | psh | rst | syn | fin}] – Enter the appropriate flag_mask parameter. All
incoming packets have TCP port numbers contained in them as the forwarding criterion. These
numbers have flag bits associated with them which are parts of a packet that determine what to
do with the packet. The user may deny packets by denying certain flag bits within the packets.
The user may choose between all, urg (urgent), ack (acknowledgement), psh (push), rst (reset),
syn (synchronize) and fin (finish).
udp
−
Specifies that the switch will examine each frame’s Universal Datagram Protocol (UDP)
field.
src_port_mask <hex 0x0-0xffff>
−
Specifies a UDP port mask for the source port.
dst_port_mask <hex 0x0-0xffff>
−
Specifies a UDP port mask for the destination port.
protocol_id_mask <hex 0x0-0xff>
−
Specifies that the Switch will examine each frame’s Protocol
ID field using the hex form entered here.
user_define_mask <hex 0x0-0xffffffff>
−
Specifies that the rule applies to the IP protocol ID and
the mask options behind the IP header.
ipv6 – Denotes that IPv6 packets will be examined by the Switch for forwarding or filtering based
on the rules configured in the config access_profile command for IPv6. IPv6 packets may be
identified by the following:
class – Entering this parameter will instruct the Switch to examine the class field of the IPv6
header that is similar to the Type of Service (ToS) or Precedence bits field in Ipv4.
flowlabel – Entering this parameter will instruct the Switch to examine the flow label field of the
IPv6 header. This flow label field is used by a source to label sequences of packets such as non-
default quality of service or real-time service packets.
source_ipv6_mask <ipv6mask>
−
Specifies an IP address mask for the source IPv6 address.
destination_ipv6_mask <ipv6mask>
−
Specifies an IP address mask for the destination IPv6
address.
Restrictions
Only Administrator level, Operator level or Power User level users can issue this command.
Example usage:
To create a CPU access profile:
DES-1228/ME:5# create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0
destination_ip_mask 10.0.0.0 dscp icmp type code
Command: create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0
destination_ip_mask 10.0.0.0 dscp icmp type code
Success.
DES-1228/ME:5#
delete cpu access_profile
Purpose
Used to delete a previously created CPU access profile.
