xStack DGS-3612G Layer 3 Gigabit Ethernet Managed Switch CLI Manual
config cpu access_profile
Parameters
permit | deny
– Specify that the packet matching the criteria configured with command will
either be permitted entry to the CPU or denied entry to the CPU.
{time_range <range_name 32>}
– Choose this parameter and enter the name of the Time
Range settings that has been previously configured using the
config time_range
command.
This will set specific times when this access rule will be enabled or disabled on the Switch.
delete access_id <value 1-100> -
Use this to remove a previously created access rule in a
profile ID.
Restrictions Only
administrator-level users can issue this command.
following rules.
user_define_mask <hex 0x0-0xffffffff>
−
Specifies that the rule applies to the
IP protocol ID and the mask options behind the IP header.
•
•
packet_content_mask
– Specifies that the Switch will mask the packet header
beginning with the offset value specified as follows:
•
offset_0-15
- Enter a value in hex form to mask the packet from byte 0 to byte 15.
•
offset_16-31
- Enter a value in hex form to mask the packet from byte 16 to byte 31.
•
offset_32-47
- Enter a value in hex form to mask the packet from byte 32 to byte 47.
•
offset_48-63
- Enter a value in hex form to mask the packet from byte 48 to byte 63.
•
offset_64-79
- Enter a value in hex form to mask the packet from byte 64 to byte 79.
Example usage:
To configure CPU access list entry:
DGS-3612G:4#config cpu access_profile profile_id 5 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 10 add access_id 1 ip vlan default source_ip
20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Success.
DGS-3612G:4#
delete cpu access_profile
Purpose
Used to delete a previously created CPU access profile.
Syntax
delete cpu access_profile profile_id <value 1-5>
Description The
delete cpu access_profile
command is used to delete a previously
created CPU access profile.
Parameters
profile_id <value 1-5>
−
Enter an integer between 1 and 5 that is used to
identify the CPU access profile to be deleted with this command. This value
is assigned to the access profile when it is created with the
create cpu
access_profile
command.
Restrictions Only
administrator-level users can issue this command.
Example usage:
To delete the CPU access profile with a profile ID of 1:
DGS-3612G:4#delete cpu access_profile profile_id 1
Command: delete cpu access_profile profile_id 1
Success.
191
