Filter
Top Products
DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
195
delete cpu access_profile
Purpose Used to delete a previously created CPU access profile.
Syntax
delete cpu access_profile profile_id <value 1-5>
Description
The delete cpu access_profile command is used to delete a previously created
CPU access profile.
Parameters
profile_id <value 1-5> − Enter an integer between 1 and 5 that is used to identify
the CPU access profile to be deleted with this command. This value is assigned to
the access profile when it is created with the create cpu access_profile command.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To delete the CPU access profile with a profile ID of 1:
DES-3526:admin#delete cpu access_profile profile_id 1
Command: delete cpu access_profile profile_id 1
Success.
DES-3526:admin#
config cpu access_profile
Purpose Used to configure a CPU access profile used for CPU Interface Filtering and to define
specific values that will be used to by the Switch to determine if a given packet should be
forwarded or filtered. Masks entered using the create cpu access_profile command will
be combined, using a logical AND operational method, with the values the Switch finds in
the specified frame header fields. Specific values for the rules are entered using the
config cpu access_profile command, below.
Syntax
config cpu access_profile profile_id <value 1-5> [add access_id <value 1-65535>
[ethernet {vlan <vlan_name 32> | source_mac <macaddr> | destination_mac
<macaddr> | 802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff>} port [<portlist> |
all] | ip {vlan vlan_name 32> | source_ip <ipaddr> | destination_ip <ipaddr> | dscp
<value 0-63> | [icmp {type <value 0-255> | code <value 0-255>} | igmp {type <value 0-
255>} | tcp {src_port <value 0-65535> | dst_port <value 0-65535> | flag [all | {urg | ack
| psh | rst | syn | fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} |
protocol_id <value 0-255> {user_define <hex 0x0-0xffffffff>}]} port [<portlist> | all]
[permit | deny] | packet_content {offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-31 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-79
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} port
[<portlist> | all] [permit | deny]] | delete access_id <value 1-65535>]
Description
The config cpu access_profile command is used to configure a CPU access profile for
CPU Interface Filtering and to enter specific values that will be combined, using a logical
AND operational method, with masks entered with the create cpu access_profile
command, above.
Parameters
profile_id <value 1-5> − Enter an integer used to identify the access profile that will be
configured with this command. This value is assigned to the access profile when it is
created with the create access_profile command. The profile ID sets the relative priority
for the profile and specifies an index number that will identify the access profile being
created with this command. Priority is set relative to other profiles where the lowest profile
ID has the highest priority.
add access_id <value 1-65535> − Adds an additional rule to the above specified access
profile. The value is used to index the rule created.