D-Link TM DES-6500 Cli Manual page 233

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
To delete the cpu access profile with a profile ID of 1:
DES-6500:4#delete cpu access_profile profile_id 1
Command: delete cpu access_profile profile_id 1
Success.
DES-6500:4#
config cpu access_profile
Purpose
Syntax
Description
Parameters
Used to configure a cpu access profile used for CPU Interface Filtering and
to define specific values that will be used to by the Switch to determine if a
given packet should be forwarded or filtered. Masks entered using the
create cpu access_profile command will be combined, using a logical
AND operation, with the values the Switch finds in the specified frame
header fields. Specific values for the rules are entered using the config
cpu access_profile command, below.
config cpu access_profile profile_id <value 1-5> [add access_id
<value 1-100> [ethernet {vlan <vlan_name 32> | source_mac
<macaddr> | destination_mac <macaddr> | ethernet_type <hex 0x0-
0xffff>} [permit | deny] | ip {vlan <vlan_name 32> | source_ip <ipaddr> |
destination_ip <ipaddr> | dscp <value 0-63> | [icmp {type <value 0-
255> code <value 0-255>} | igmp {type <value 0-255>} | tcp {src_port
<value 0-65535> | dst_port <value 0-65535> | {urg | ack | psh | rst | syn
| fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} |
protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff>}]} [permit
| deny] | packet_content {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>| offset_16-31 <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-
79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex
0x0-0xffffffff>} port [<portlist> | all] [permit | deny] | delete access-id
<value 1-100>]
The config cpu access_profile command is used to configure a cpu
access profile for CPU Interface Filtering and to enter specific values that
will be combined, using a logical AND operation method, with masks
entered with the create cpu access_profile command, above.
profile_id <value 1-5> − Enter an integer used to identify the access profile
that will be configured with this command. This value is assigned to the
access profile when it is created with the create access_profile command.
The profile ID sets the relative priority for the profile and specifies an index
number that will identify the access profile being created with this
command. Priority is set relative to other profiles where the lowest profile ID
has the highest priority.
add access_id <value 1-100> − Adds an additional rule to the above
specified access profile. The value is used to index the rule created.
ethernet − Specifies that the Switch will look only into the layer 2 part of
each packet.
230