D-Link DGS-3700 Series Reference Manual page 379

DGS-3700 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
config cpu access_profile
Restrictions
Example usage:
To configure CPU access list entry:
DGS-3700-12:5#config cpu access_profile profile_id 5 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 10 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Success.
DGS-3700-12:5#
show cpu access_profile
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To show the CPU filtering state on the Switch:
offset_64-79 − Enters a value in hex form to mask the packet from byte 64 to byte 79.
IPV6 − Denotes that IPv6 packets will be examined by the Switch for forwarding or
filtering based on the rules configured in the config access_profile command for
IPv6.
class – Entering this parameter will instruct the Switch to examine the class field of
the IPv6 header. This class field is a part of the packet header that is similar to the
Type of Service (ToS) or Precedence bits field in IPv4.
flowlabel – Entering this parameter will instruct the Switch to examine the flow label
field of the IPv6 header. This flow label field is used by a source to label sequences
of packets such as non-default quality of service or real time service packets.
source_ipv6_mask <ipv6mask> − Specifies an IP address mask for the source IPv6
address.
destination_ipv6_mask <ipv6mask> − Specifies an IP address mask for the
destination IPv6 address.
permit | deny – Specify that the packet matching the criteria configured with
command will either be permitted or denied entry to the CPU.
time_range – Specifies the time_range profile that has been associated with the ACL
entries.
delete access_id <value 1-100> − Use this to remove a previously created access rule
in a profile ID.
Only Administrator and Operator-level users can issue this command.
Used to view the CPU access profile entry currently set in the Switch.
show cpu access_profile {profile_id <value 1-5>}
This command is used to view the current CPU interface filtering entries set on the
Switch.
profile_id <value 1-5> − Enter an integer between 1 and 5 that is used to identify the
CPU access profile to be deleted with this command. This value is assigned to the
access profile when it is created with the create cpu access_profile command.
None.
Page | 379