D-Link DES-3010F Command Line Interface Manual page 168

config cpu access_profile


user_define_mask <hex 0x0-0xffffffff>  Specifies that the rule applies to the IP protocol ID
and t he mask options behind the IP header.

port <portlist>  The access profile for the CPU may be defined for each port on the Switch.
permit | deny – Specify that the packet matching the criteria configured with command will
either be permitted entry to the CPU or denied entry to the CPU.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To configure a CPU access list entry:
DES-3026:4#config cpu access_profile profile_id 1 add access_id 1
ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp
3 icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 1 add access_id 1
ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp
3 icmp type 11 code 32 port 1 deny
Success.
DES-3026:4#
enable cpu_interface_filtering
Purpose
Syntax
Description
Parameters
DES-3000 Series Layer 2 Switch CLI Reference Manual
udp  Specifies that the Switch will examine the Transmission Control Protocol (TCP)
field within each packet.
src_port <value 0-65535>  Specifies that the access profile will apply only to

packets that have this UDP source port in their header.
dst_port <value 0-65535>  Specifies that the access profile will apply only to

packets that have this UDP destination port in their header.
protocol_id <value 0-255>  Specifies that the Switch will examine the protocol field in
each packet and if this field contains the value entered here, apply the following rules.
packet_content_mask – Specifies that the Switch will mask the packet header beginning
with the offset value specified as follows:
offset_0-15  Enter a value in hex form to mask the packet from byte 0 to byte 15.

offset_16-31  Enter a value in hex form to mask the packet from byte 16 to byte 31.

offset_32-47  Enter a value in hex form to mask the packet from byte 32 to byte 47.

offset_48-63  Enter a value in hex form to mask the packet from byte 48 to byte 63.

offset_64-79  Enter a value in hex form to mask the packet from byte 64 to byte 79.

delete access_id <value 1-65535>  Use this to remove a previously created access rule
in a profile ID.
Used to enable CPU interface filtering on the Switch.
enable cpu_interface_filtering
This command is used, in conjunction with the disable
cpu_interface_filtering command below, to enable and disable
CPU interface filtering on the Switch.
None.
164