D-Link xstack DGS-3612G Instruction Manual page 194

config cpu access_profile
Parameters
permit | deny – Specify that the packet matching the criteria configured with command will
either be permitted entry to the CPU or denied entry to the CPU.
{time_range <range_name 32>} – Choose this parameter and enter the name of the Time
Range settings that has been previously configured using the config time_range command.
This will set specific times when this access rule will be enabled or disabled on the Switch.
delete access_id <value 1-100> - Use this to remove a previously created access rule in a
profile ID.
Restrictions Only administrator-level users can issue this command.
Example usage:
To configure CPU access list entry:
DGS-3612G:4#config cpu access_profile profile_id 5 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 10 add access_id 1 ip vlan default source_ip
20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Success.
DGS-3612G:4#
delete cpu access_profile
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To delete the CPU access profile with a profile ID of 1:
xStack DGS-3612G Layer 3 Gigabit Ethernet Managed Switch CLI Manual
following rules.
• user_define_mask <hex 0x0-0xffffffff> − Specifies that the rule applies to the
IP protocol ID and the mask options behind the IP header.
packet_content_mask – Specifies that the Switch will mask the packet header
•
beginning with the offset value specified as follows:
offset_0-15 - Enter a value in hex form to mask the packet from byte 0 to byte 15.
•
offset_16-31 - Enter a value in hex form to mask the packet from byte 16 to byte 31.
•
offset_32-47 - Enter a value in hex form to mask the packet from byte 32 to byte 47.
•
offset_48-63 - Enter a value in hex form to mask the packet from byte 48 to byte 63.
•
offset_64-79 - Enter a value in hex form to mask the packet from byte 64 to byte 79.
•
Used to delete a previously created CPU access profile.
delete cpu access_profile profile_id <value 1-5>
The delete cpu access_profile command is used to delete a previously
created CPU access profile.
profile_id <value 1-5> − Enter an integer between 1 and 5 that is used to
identify the CPU access profile to be deleted with this command. This value
is assigned to the access profile when it is created with the create cpu
access_profile command.
Only administrator-level users can issue this command.
DGS-3612G:4#delete cpu access_profile profile_id 1
Command: delete cpu access_profile profile_id 1
Success.
191