xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
244
config cpu access_profile
•
offset_48-63
- Enter a value in hex form to mask the packet from byte
48
to byte
63
.
•
offset_64-79
- Enter a value in hex form to mask the packet from byte
64
to byte
79
.
ipv6
- Specifies that the Switch will look into the IPv6 fields in each packet, with emphasis on
one or more of the following fields:
•
class <value 0-255>
- Entering this parameter will instruct the Switch to examine the
class
field of the IPv6 header. This class field is a part of the packet header that is
similar to the Type of Service (ToS) or Precedence bits field in IPv4.
•
flowlabel <hex 0x0-fffff>
- Entering this parameter will instruct the Switch to examine
the flow label field of the IPv6 header. This flow label field is used by a source to label
sequences of packets such as non-default quality of service or real time service
packets. This field is to be defined by the user in hex form.
•
source_ipv6 <ipv6addr>
- Specifies an IP address mask for the source IPv6 address.
•
destination_ipv6 <ipv6addr>
- Specifies an IP address mask for the destination IPv6
address.
port <portlist> | all
- The access profile for Ethernet may be defined for each port on the
Switch. Up to 128 rules may be configured for each port. Selecting
all
will configure this rule
for all ports on the Switch. The beginning and end of the port list range are separated by a
dash. Non-contiguous portlist entries are separated by a comma. (ex: 1-3,7-9)
permit
– Specifies that packets that match the access profile are permitted to be forwarded
by the Switch.
deny
– Specifies that packets that match the access profile are not permitted to be forwarded
by the Switch and will be filtered.
{time_range <range_name 32>}
– Choose this parameter and enter the name of the Time
Range settings that has been previously configured using the
config time_range
command.
This will set specific times when this access rule will be enabled or disabled on the Switch.
delete access_id <value 1-100> -
Use this to remove a previously created access rule in a
profile ID.
Restrictions
Only administrator-level and operator-level users can issue this command.
Example usage:
To configure CPU access list entry:
DGS-3627:5#config cpu access_profile profile_id 5 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 10 add access_id 1 ip vlan default source_ip
20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Success.
DGS-3627:5#
delete cpu access_profile
Purpose
Used to delete a previously created CPU access profile.
Syntax
delete cpu access_profile [profile_id <value 1-5> | all]
Description The
delete cpu access_profile
command is used to delete a previously
created CPU access profile.
Parameters
profile_id <value 1-5>
−
Enter an integer between
1
and
5
that is used to
identify the CPU access profile to be deleted with this command. This value
is assigned to the access profile when it is created with the
create cpu
access_profile
command.
all
– Using this parameter will delete all configured CPU access profiles.
