D-Link DES-1228 Reference Manual page 184

config cpu access_profile
Parameters
Restrictions
Example usage:
To configure CPU access list entry:
DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
MAC address.
destination_mac <macaddr> − Specifies that the access profile will apply to this
destination MAC address.
ethernet_type <hex 0x0-0xffff> − Specifies that the access profile will apply only to
packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
ip − Specifies that the Switch will look into the IP fields in each packet.
vlan <vlan_name 32> − Specifies that the access profile will apply to only this VLAN.
source_ip <ipaddr> − Specifies that the access profile will apply to only packets with
this source IP address.
destination_ip <ipaddr> − Specifies that the access profile will apply to only packets
with this destination IP address.
dscp <value 0-63> − Specifies that the access profile will apply only to packets that
have this value in their Type-of-Service (DiffServ code point, DSCP) field in their
IP packet header
icmp − Specifies that the Switch will examine the Internet Control Message Protocol
(ICMP) field within each packet.
igmp − Specifies that the Switch will examine the Internet Group Management
Protocol (IGMP) field within each packet.
tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP)
field within each packet.
src_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this TCP source port in their TCP header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this TCP destination port in their TCP header.
protocol_id <value 0-255> − Specifies that the Switch will examine the Protocol field in
each packet and if this field contains the value entered here, apply the following rules.
udp − Specifies that the Switch will examine the Transmission Control Protocol (TCP) field
within each packet.
src_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this UDP source port in their header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this UDP destination port in their header.
protocol_id <value 0-255> − Specifies that the Switch will examine the protocol field in
each packet and if this field contains the value entered here, apply the following rules.
user_define_mask <hex 0x0-0xffffffff> − Specifies that the rule applies to the
IP protocol ID and the mask options behind the IP header.
<portlist> − Specifies a port or range of ports to be configured.
permit | deny – Specify that the packet matching the criteria configured with command will
either be permitted entry to the cpu or denied entry to the CPU.
delete access_id <value 1-5> − Use this to remove a previously created access rule in a
profile ID.
Only Administrator-level users can issue this command.
179