D-Link xStack DES-3528 Series Cli Reference Manual page 276

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch CLI Reference Guide
config cpu access_profile
igmp − Specifies that the Switch will examine the Internet Group Management Protocol
(IGMP) field within each packet.
tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP) field
within each packet.
protocol_id <value 0-255> − Specifies that the Switch will examine the Protocol field in each
packet and if this field contains the value entered here, apply the following rules.
udp − Specifies that the Switch will examine the User Datagram Protocol (UDP) field within
each packet.
protocol_id <value 0-255> − Specifies that the Switch will examine the protocol field in each
packet and if this field contains the value entered here, apply the following rules.
packet_content – Specifies that the Switch will check the packet header beginning with the
offset value specified as follows:
IPV6 − Denotes that IPv6 packets will be examined by the Switch for forwarding or filtering
based on the rules configured in the config cpu access_profile command for IPv6.
permit | deny –Specifies that the packets forwarded to the CPU will either be permitted or
denied based on the criteria defined in the CPU access profile.
value.
• code <value 0-255> − Specifies that the access profile will apply to this ICMP code
value.
• type <value 0-255> − Specifies that the access profile will apply to packets that have
this IGMP type value.
• src_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this TCP source port in their TCP header.
• dst_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this TCP destination port in their TCP header.
•
urg | ack | psh | rst | syn | fin – Enter the appropriate flag_mask parameter. All
incoming packets have TCP port numbers contained in them as the forwarding
criterion. These numbers have flag bits associated with them which are parts of a
packet that determine what to do with the packet. The user may deny packets by
denying certain flag bits within the packets. The user may choose between urg
(urgent), ack (acknowledgement), psh (push), rst (reset), syn (synchronize) and fin
(finish).
• src_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this UDP source port in their header.
• dst_port <value 0-65535> − Specifies that the access profile will apply only to
packets that have this UDP destination port in their header.
• user_define_mask <hex 0x0-0xffffffff> − Specifies that the rule applies to the IP
protocol ID and the mask options behind the IP header.
• offset_0-15 − Enter a value in hex form from byte 0 to byte 15.
• offset_16-31 − Enter a value in hex form from byte 16 to byte 31.
•
offset_32-47 – Enter a value in hex form from byte 32 to byte 47.
• offset_48-63 − Enter a value in hex form from byte 48 to byte 63.
• offset_64-79 − Enter a value in hex form from byte 64 to byte 79.
•
class – Entering this parameter will instruct the Switch to examine the class field of
the IPv6 header. This class field is a part of the packet header that is similar to the
Type of Service (ToS) or Precedence bits field in IPv4.
•
flowlabel – Entering this parameter will instruct the Switch to examine the flow label
field of the IPv6 header. This flow label field is used by a source to label sequences
of packets such as non-default quality of service or real time service packets.
• source_ipv6_mask <ipv6mask> − Specifies an IP address mask for the source IPv6
address.
• destination_ipv6_mask <ipv6mask> − Specifies an IP address mask for the
destination IPv6 address.
276