DES-3000 Series Layer 2 Switch CLI Reference Manual
config cpu access_profile
permit | deny
– Specify that the packet matching the criteria configured with command will
either be permitted entry to the CPU or denied entry to the CPU.
delete access_id <value 1-65535> -
Use this to remove a previously created access rule in a
profile ID.
Restrictions Only
administrator-level users can issue this command.
•
offset_48-63
- Enter a value in hex form to mask the packet from byte 48 to byte 63.
•
offset_64-79
- Enter a value in hex form to mask the packet from byte 64 to byte 79.
port <portlist>
- The access profile for the CPU may be defined for each port on the Switch.
Example usage:
To configure a CPU access list entry:
DES-3026:4#config cpu access_profile profile_id 1 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 1 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Success.
DES-3026:4#
enable cpu_interface_filtering
Purpose
Used to enable CPU interface filtering on the Switch.
Syntax
enable cpu_interface_filtering
Description
This command is used, in conjunction with the
disable
cpu_interface_filtering
command below, to enable and disable
CPU interface filtering on the Switch.
Parameters None.
Restrictions Only
administrator-level users can issue this command.
Example usage:
To enable CPU interface filtering:
DES-3026:4#enable cpu_interface_filtering
Command: enable cpu_interface_filtering
Success.
DES-3026:4#
disable cpu_interface_filtering
Purpose
Used to disable CPU interface filtering on the Switch.
Syntax
disable cpu_interface_filtering
Description
This command is used, in conjunction with the
enable
cpu_interface_filtering
command above, to enable and disable
CPU interface filtering on the Switch.
Parameters None.
136