xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
226
D G S – 3 4 2 6 : 5 # d e l e t e c p u a c c e s s _ p r o f i l e p r o f i l e _ i d 1
C o m m a n d : d e l e t e c p u a c c e s s _ p r o f i l e p r o f i l e _ i d 1
S u c c e s s .
D G S – 3 4 2 6 : 5 #
config cpu access_profile profile_id
Purpose
Used to configure a cpu access profile used for CPU Interface Filtering and to define
specific values that will be used to by the Switch to determine if a given packet should be
forwarded or filtered. Masks entered using the
create cpu access_profile
command will
be combined, using a logical AND operation, with the values the Switch finds in the
specified frame header fields. Specific values for the rules are entered using the
config
cpu access_profile
command, below.
Syntax
config cpu access_profile profile_id <value 1–5> [add access_id <value 1–100>
[ethernet {vlan <vlan_name 32> | source_mac <macaddr 000000000000–ffffffffffff> |
destination_mac <macaddr 000000000000–ffffffffffff> | ethernet_type <hex 0x0–
0xffff>} (1) | ip {vlan <vlan_name 32> | source_ip <ipaddr> | destination_ip <ipaddr>
| dscp <value 0–63> | [icmp {type <value 0–255> | code <value 0–255>} | igmp {type
<value 0–255>} | tcp {src_port <value 0–65535> | dst_port <value 0–65535> | urg |
ack | psh | rst | syn | fin}]} | udp {src_port <value 0–65535> | dst_port <value 0–
65535>} | protocol_id <value 0 – 255> {user_define <hex 0x0–0xffffffff>}]} (1) |
packet_content {offset_0–15 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff>| offset_16–31 <hex 0x0–0xffffffff> <hex 0x0–0xffffffff>
<hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset_32–47 <hex 0x0–0xffffffff> <hex
0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset_48–63 <hex 0x0–
0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> | offset_64–79
<hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff> <hex 0x0–0xffffffff>} (1)
| ipv6 {[{class <value 0-255> | flowlabel <hex 0x0-0xfffff>} (1) | source_ipv6
<ipv6addr> | destination_ipv6 <ipv6addr> ]} (1) ] port [<portlist> | all] [permit |
deny] {time_range <range_name 32>} | delete access_id <value 1–100>]
Description
This command is used to configure a CPU access profile for CPU Interface Filtering and
to enter specific values that will be combined, using a logical AND operational method,
with masks entered with the
create cpu access_profile
command, above.
Parameters
profile_id <value 1–5>
−
Enter an integer used to identify the access profile that will be
configured with this command. This value is assigned to the access profile when it is
created with the
create access_profile
command. The profile ID sets the relative priority
for the profile and specifies an index number that will identify the access profile being
created with this command. Priority is set relative to other profiles where the lowest
profile ID has the highest priority.
•
add access_id <value 1–100>
−
Adds an additional rule to the above specified
access profile. The value is used to index the rule created.
ethernet
−
Specifies that the Switch will look only into the layer 2 part of each packet.
•
vlan <vlan_name 32>
−
Specifies that the access profile will apply to only to this
VLAN.
•
source_mac <macaddr 000000000000–ffffffffffff>
−
Specifies that the access
profile will apply to this source MAC address.
•
destination_mac <macaddr 000000000000–ffffffffffff>
−
Specifies that the access
profile will apply to this destination MAC address.
•
ethernet_type <hex 0x0–0xffff>
−
Specifies that the access profile will apply only
to packets with this hexadecimal 802.1Q Ethernet type value in the packet
header.
ip
−
Specifies that the Switch will look into the IP fields in each packet.
•
vlan <vlan_name 32>
−
Specifies that the access profile will apply to only this
VLAN.
