Adding A Cpu Ethernet Acl Profile - D-Link DGS-3000 Series Reference Manual

Creating an access profile for the CPU is divided into two basic parts. The first is to specify which part or parts of a
frame the Switch will examine, such as the MAC source address or the IP destination address. The second part is
entering the criteria the Switch will use to determine what to do with the frame. The entire process is described below.
Users may globally enable or disable the CPU Interface Filtering State mechanism by using the radio buttons to
change the running state. Choose Enabled to enable CPU packets to be scrutinized by the Switch and Disabled to
disallow this scrutiny.
The fields that can be configured are described below:
Parameter
CPU Interface Filtering
State
Click the Apply button to accept the changes made.
Click the Add CPU ACL Profile button to add an entry to the CPU ACL Profile List.
Click the Delete All button to remove all access profiles from this table.
Click the Show Details button to display the information of the specific profile ID entry.
Click the Add/View Rules button to view or add CPU ACL rules within the specified profile ID.
Click the Delete button to remove the specific entry.
There are four Add CPU ACL Profile windows;
1. one for Ethernet (or MAC address-based) profile configuration,
2. one for IPv6 address-based profile configuration,
3. one for IPv4 address-based profile configuration, and
4. one for packet content profile configuration.

Adding a CPU Ethernet ACL Profile

The window shown below is the Add CPU ACL Profile window for Ethernet. To use specific filtering masks in this ACL
profile, click the packet filtering mask field to highlight it red. This will add more filed to the mask.
After clicking the Add CPU ACL Profile button, the following window will appear:
DGS-3000 Series Gigabit Ethernet Switch Web UI Reference Guide
Figure 7-23 CPU Access Profile List window
Description
Click to enable or disable the CPU interface filtering state.
187