To change a rule for a previously created CPU Access Profile Rule:
The CPU Interface Filtering Rule Configuration window allows the user to create a rule for a previously created CPU Access
Profile.
Figure 9-16. CPU Interface Filtering Rule Configuration window – Ethernet
To set the CPU Access Rule for Ethernet, adjust the following parameters and click Apply.
Parameters
Description
Profile ID
This is the identifier number for this profile set.
Mode
Select Permit to specify that the packets that match the access profile are forwarded by the
Switch, according to any additional rule added (see below).
Select Deny to specify that packets that do not match the access profile are not forwarded by the
Switch and will be filtered.
Access ID
Type in a unique identifier number for this access and priority. This value can be set from 1 to 5.
Type
Selected profile based on Ethernet (MAC Address) or IP address.
VLAN Name
Allows the entry of a name for a previously configured VLAN.
Source MAC
Enter a MAC Address for the source MAC address.
Destination
Enter a MAC Address mask for the destination MAC address.
MAC
802.1P (0-7)
Enter a value from 0-7 to specify that the access profile will apply only to packets with this 802.1p
priority value.
Ethernet Type
Specifies that the access profile will apply only to packets with this hexadecimal 802.1Q Ethernet
type value (hex 0x0-0xffff) in the packet header. The Ethernet type value may be set in the form:
hex 0x0-0xffff, which means the user may choose any combination of letters and numbers
ranging from a-f and from 0-9.
DES-1228/ME Layer 2 Fast Ethernet Managed Switch
•
Ethernet instructs the Switch to examine the layer 2 part of each packet header.
•
IP instructs the Switch to examine the IP address in each frame's header.
139