D-Link DES-1228/ME Reference Manual page 227

DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide
config cpu access_profile
destination_mac <macaddr> − Specifies that the access profile will apply to this
ethernet_type <hex 0x0-0xffff> − Specifies that the access profile will apply only to
ip − Specifies that the Switch will look into the IP fields in each packet.
vlan <vlan_name 32> − Specifies that the access profile will apply to only this VLAN.
source_ip <ipaddr> − Specifies that the access profile will apply to only packets with
destination_ip <ipaddr> − Specifies that the access profile will apply to only packets
dscp <value 0-63> − Specifies that the access profile will apply only to packets that
icmp − Specifies that the Switch will examine the Internet Control Message Protocol
type − Specifies that the Switch will examine each frame's ICMP Type field.
code − Specifies that the Switch will examine each frame's ICMP Code field.
igmp − Specifies that the Switch will examine the Internet Group Management Protocol
type – Specifies that the Switch will examine each frame's IGMP Type field.
tcp − Specifies that the Switch will examine the Transmission Control Protocol (TCP)
src_port <value 0-65535> − Specifies that the access profile will apply only to packets that
have this TCP source port in their TCP header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to packets that
have this TCP destination port in their TCP header.
flag- Enter the type of TCP flag to be matched.
all: All flags are selected
urg: TCP control flag (urgent)
ack: TCP control flag (acknowledgement)
psh: TCP control flag (push)
rst: TCP control flag (reset)
syn: TCP control flag (synchronize)
fin: TCP control flag (finish)
udp − Specifies that the Switch will examine the User Datagram Protocol (UDP) field within
each packet.
src_port <value 0-65535> − Specifies that the access profile will apply only to packets that
have this UDP source port in their header.
dst_port <value 0-65535> − Specifies that the access profile will apply only to packets that
have this UDP destination port in their header.
protocol_id <value 0-255> − Specifies that the Switch will examine the protocol field in
each packet, and if this field contains the value entered here, apply the following rules:
user_define_mask <hex 0x0-0xffffffff> − Specifies that the rule applies to the IP protocol ID
and the mask options behind the IP header.
ipv6 – Denotes that IPv6 packets will be examined by the Switch for forwarding or filtering
based on the rules configured in the config access_profile command for IPv6. IPv6
packets may be identified by the following:
class <value 0-255>– Entering this parameter will instruct the Switch to examine the class
field of the IPv6 header that is similar to the Type of Service (ToS) or Precedence bits field
in Ipv4.
flowlabel <hex 0x0-fffff> – Entering this parameter will instruct the Switch to examine the
flow label field of the IPv6 header. This flow label field is used by a source to label
destination MAC address.
packets with this hexadecimal 802.1Q Ethernet type value in the packet header.
this source IP address.
with this destination IP address.
have this value in their Type-of-Service (DiffServ code point, DSCP) field in their IP
packet header
(ICMP) field within each packet.
(IGMP) field within each packet.
field within each packet.
223