D-Link DGS-3600 Switch User Manual


 
xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
241
DGS-3600:4# create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0
destination_ip_mask 10.0.0.0 dscp icmp type code
Command: create cpu access_profile profile_id 1 ip vlan source_ip_mask 20.0.0.0
destination_ip_mask 10.0.0.0 dscp icmp type code
Success.
DGS-3600:4#
delete cpu access_profile
Purpose Used to delete a previously created CPU access profile.
Syntax
delete cpu access_profile [profile_id <value 1-5> | all]
Description The delete cpu access_profile command is used to delete a previously created
cpu access profile.
Parameters
profile_id <value 1-5> Enter an integer between 1 and 5 that is used to identify
the CPU access profile to be deleted with this command. This value is assigned to
the access profile when it is created with the create cpu access_profile command.
all – Use this parameter to delete all created CPU access profiles on the Switch.
Restrictions Only administrator-level users can issue this command.
Example usage:
To delete the CPU access profile with a profile ID of 1:
DGS-3600:4#delete cpu access_profile profile_id 1
Command: delete cpu access_profile profile_id 1
Success.
DGS-3600:4#
config cpu access_profile
Purpose Used to configure a CPU access profile used for CPU Interface Filtering and to define
specific values that will be used to by the Switch to determine if a given packet should be
forwarded or filtered. Masks entered using the create cpu access_profile command will be
combined, using a logical AND operational method, with the values the Switch finds in the
specified frame header fields. Specific values for the rules are entered using the config cpu
access_profile command, below.
Syntax
config cpu access_profile profile_id <value 1-5> [add access_id <value 1-100>
[ethernet {vlan <vlan_name 32> | source_mac <macaddr 000000000000-ffffffffffff> |
destination_mac <macaddr 000000000000-ffffffffffff> | ethernet_type <hex 0x0-0xffff>} |
ip {vlan <vlan_name 32> | source_ip <ipaddr> | destination_ip <ipaddr> | dscp <value
0-63> | [icmp {type <value 0-255> | code <value 0-255>} | igmp {type <value 0-255>} |
tcp {src_port <value 0-65535> | dst_port <value 0-65535> | flag [all | {urg | ack | psh |
rst | syn | fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} |
protocol_id <value 0-255> {user_define <hex 0x0-0xffffffff>}]} | packet_content
{offset_0-15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> | offset_16-31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> | offset_32-47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>
<hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-
0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} ipv6 {[{class <value 0-255> |
flowlabel <hex 0x0-0xfffff> | source_ipv6 <ipv6addr> | destination_ipv6 <ipv6addr>]}]
port [<portlist> | all] [permit | deny]] {time_range <range_name 32>} | delete access_id