Download - D-Link

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Switch CLI Reference Manual
config cpu access_profile
byte 79.
IPV6 − Denotes that IPv6 packets will be examined by the Switch for forwarding or filtering
based on the rules configured in the config access_profile command for IPv6.
•
class – Entering this parameter will instruct the Switch to examine the class field of the
IPv6 header. This class field is a part of the packet header that is similar to the Type of
Service (ToS) or Precedence bits field in IPv4.
•
flowlabel – Entering this parameter will instruct the Switch to examine the flow label
field of the IPv6 header. This flow label field is used by a source to label sequences of
packets such as non-default quality of service or real time service packets.
•
source_ipv6_mask <ipv6mask> − Specifies an IP address mask for the source IPv6
address.
destination_ipv6_mask <ipv6mask> − Specifies an IP address mask for the destination IPv6
address.
permit | deny –Specifies that the packets forwarded to the CPU will either be permitted or
denied based on the criteria defined in the CPU access profile.
time_range – Specifies the time range profile that has been associated with the ACL entries.
delete access_id <value 1-100> − Use this to remove a previously created access rule in a
profile ID.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure CPU access list entry:
DES-3528:5#config cpu access_profile profile_id 5 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Command: config cpu access_profile profile_id 10 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny
Success.
DES-3528:5#
show cpu access_profile
Purpose
Used to view the CPU access profile entry currently set in the Switch.
Syntax
show cpu access_profile {profile_id <value 1-5>}
Description
This command is used view the current CPU interface filtering entries set on the Switch.
Parameters
profile_id <value 1-5> − Enter an integer between 1 and 5 that is used to identify the CPU
access profile to be deleted with this command. This value is assigned to the access profile
when it is created with the create cpu access_profile command.
Restrictions
None.
Example usage:
To show the CPU filtering state on the Switch:
DES-3528:5#show cpu access_profile
Command: show cpu access_profile
CPU Interface Filtering State: Disabled
CPU Interface Access Profile Table
Total Unused Rule Entries:499
Total Used Rule Entries :1
257