D-Link xStack DES-6500 Cli Manual page 245

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
create cpu access_profile
Restrictions
Example usage:
To create a CPU access profile:
D E S - 6 5 0 0 : 4 # c r e a t e c p u a c c e s s _ p r o f i l e i p v l a n
s o u r c e _ i p _ m a s k 2 0 . 0 . 0 . 0 d e s t i n a t i o n _ i p _ m a s k 1 0 . 0 . 0 . 0
d s c p i c m p t y p e c o d e p e r m i t p r o f i l e _ i d 1
C o m m a n d : c r e a t e c p u a c c e s s _ p r o f i l e i p v l a n
igmp  Specifies that the switch will examine each frame's Internet Group

Management Protocol (IGMP) field.
type  Specifies that the switch will examine each frame's IGMP Type

field.
tcp  Specifies that the switch will examine each frames Transport Control

Protocol (TCP) field.
src_port_mask <hex 0x0-0xffff>  Specifies a TCP port mask for the source

port.
dst_port_mask <hex 0x0-0xffff>  Specifies a TCP port mask for the

destination port.

flag_mask [ all | {urg | ack | psh | rst | syn | fin}] – Enter the appropriate
flag_mask parameter. All incoming packets have TCP port numbers contained
in them as the forwarding criterion. These numbers have flag bits associated
with them which are parts of a packet that determine what to do with the
packet. The user may deny packets by denying certain flag bits within the
packets. The user may choose between all, urg (urgent), ack
(acknowledgement), psh (push), rst (reset), syn (synchronize) and fin (finish).
udp  Specifies that the switch will examine each frame's Universal Datagram

Protocol (UDP) field.
src_port_mask <hex 0x0-0xffff>  Specifies a UDP port mask for the source

port.
dst_port_mask <hex 0x0-0xffff>  Specifies a UDP port mask for the

destination port.
protocol_id  Specifies that the Switch will examine each frame's Protocol ID

field.
user_define_mask <hex 0x0-0xffffffff>  Specifies that the rule applies to the

IP protocol ID and the mask options behind the IP header.

packet_content_mask – Specifies that the switch will mask the packet header
beginning with the offset value specified as follows:

offset_0-15 - Enter a value in hex form to mask the packet from byte 0 to
byte 15.

offset_16-31 - Enter a value in hex form to mask the packet from byte 16 to
byte 31.

offset_32-47 - Enter a value in hex form to mask the packet from byte 32 to
byte 47.

offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to
byte 63.

offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to
byte 79.
Only Administrator-level users can issue this command.
241