Filter
Top Products
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
config cpu access_profile
•
• tcp − Specifies that the Switch will examine the Transmission Control Protocol
(TCP) field within each packet.
Parameters
protocol_id <value 0-255> − Specifies that the Switch will examine the Protocol field in
each packet and if this field contains the value entered here, apply the following rules.
udp − Specifies that the Switch will examine the Transmission Control Protocol (TCP) field
within each packet.
protocol_id <value 0-255> − Specifies that the Switch will examine the protocol field in
each packet and if this field contains the value entered here, apply the following rules.
packet_content_mask – Specifies that the Switch will mask the packet header beginning
with the offset value specified as follows:
permit | deny – Specify that the packet matching the criteria configured with command will
either be permitted entry to the cpu or denied entry to the CPU.
time_range <range_name 32> – Choose this parameter and enter the name of the Time
Range settings that has been previously configured using the config time_range
command. This will set specific times when this access rule will be enabled or disabled on
the Switch.
delete access_id <value 1-5> - Use this to remove a previously created access rule in a
profile ID.
Restrictions Only administrator-level users can issue this command.
igmp − Specifies that the Switch will examine the Internet Group Management
Protocol (IGMP) field within each packet.
• src_port <value 0-65535> − Specifies that the access profile will apply
only to packets that have this TCP source port in their TCP header.
• dst_port <value 0-65535> − Specifies that the access profile will apply
only to packets that have this TCP destination port in their TCP header.
• src_port <value 0-65535> − Specifies that the access profile will apply
only to packets that have this UDP source port in their header.
• dst_port <value 0-65535> − Specifies that the access profile will apply
only to packets that have this UDP destination port in their header.
• user_define_mask <hex 0x0-0xffffffff> − Specifies that the rule applies to
the IP protocol ID and the mask options behind the IP header.
• offset_0-76 - Enter a value in hex form to mask the packet from byte 0 to
byte 76.
Example usage:
To configure CPU access list entry:
DES-3028P:4#config cpu access_profile profile_id 5 add access_id 1
ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3
icmp type 11 code 32 deny
Command: config cpu access_profile profile_id 10 add access_id 1
ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3
icmp type 11 code 32 deny
Success.
DES-3028P:4#
delete cpu access_profile
Purpose Used to delete a previously created CPU access profile.
Syntax
delete cpu access_profile profile_id <value 1-3>
The delete cpu access_profile command is used to delete a previously
tdCPU fil
Description
161