DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
177
create cpu access_profile
source_ip_mask <netmask>
−
Specifies an IP address mask for the source IP address.
destination_ip_mask <netmask>
−
Specifies an IP address mask for the destination IP
address.
dscp
−
Specifies that the Switch will examine the DiffServ Code Point (DSCP) field in each
frame’s header.
icmp
−
Specifies that the Switch will examine the Internet Control Message Protocol
(ICMP) field in each frame’s header.
type
−
Specifies that the Switch will examine each frame’s ICMP Type field.
code
−
Specifies that the Switch will examine each frame’s ICMP Code field.
igmp -
Specifies that the Switch will examine each frame’s Internet Group Management
Protocol (IGMP) field.
type
– Specifies that the Switch will examine each frame’s IGMP Type field.
tcp
−
Specifies that the Switch will examine each frames Transport Control Protocol (TCP)
field.
src_port_mask <hex 0x0-0xffff>
−
Specifies a TCP port mask for the source port.
dst_port_mask <hex 0x0-0xffff>
−
Specifies a TCP port mask for the destination
port.
flag_mask [ all | {urg | ack | psh | rst | syn | fin}]
– Enter the appropriate flag_mask
parameter. All incoming packets have TCP port numbers contained in them as the
forwarding criterion. These numbers have flag bits associated with them which are
parts of a packet that determine what to do with the packet. The user may deny
packets by denying certain flag bits within the packets. The user may choose
between
all
,
urg
(urgent),
ack
(acknowledgement),
psh
(push),
rst
(reset),
syn
(synchronize) and
fin
(finish).
udp
−
Specifies that the switch will examine each frame’s Universal Datagram Protocol
(UDP) field.
src_port_mask <hex 0x0-0xffff>
−
Specifies a UDP port mask for the source port.
dst_port_mask <hex 0x0-0xffff>
−
Specifies a UDP port mask for the destination
port.
protocol_id_mask <hex 0x0-0xff>
−
Specifies that the Switch will examine each frame’s
Protocol ID field using the hex form entered here.
user_define_mask <hex 0x0-0xffffffff>
−
Specifies that the rule applies to the IP protocol ID
and the mask options behind the IP header.
profile_id <value 1-3>
−
Enter an integer between
1
and
3
that is used to identify the CPU
access profile to be created with this command.
Restrictions
Only Administrator-level users can issue this command.
Example usage:
To create a CPU access profile:
DES-1228/ME:4# create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0
destination_ip_mask 10.0.0.0 dscp icmp type code
Command: create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0
destination_ip_mask 10.0.0.0 dscp icmp type code
Success.
DES-1228/ME:4#