DGS-3710 Series Layer 2 Managed Gigabit Switch CLI Reference Guide
104
Success.
DGS-3710-12C:admin#create cpu access_profile profile_id 2 ip source_ip_mask
255.255.255.255
Command: create cpu access_profile profile_id 2 ip source_ip_mask
255.255.255.255
Success.
DGS-3710-12C:admin#
6-10
config cpu access_profile profile_id
Description
This command is used to configure CPU access list entries.
Format
config cpu access_profile profile_id <value 1-5> [add access_id <value 1-100> [ethernet
{[vlan <vlan_name 32> | vlan_id <vlanid 1-4094>] | source_mac <macaddr> |
destination_mac <macaddr> | 802.1p <value 0-7> | ethernet_type <hex 0x0-0xffff>} (1)| ip
{[vlan <vlan_name 32> | vlan_id <vlanid 1-4094>] | source_ip <ipaddr> | destination_ip
<ipaddr> | dscp <value 0-63> | [icmp {type <value 0-255> | code <value 0-255>} | igmp {type
<value 0-255>} | tcp {src_port <value 0-65535> | dst_port <value 0-65535> | flag [all | {urg |
ack | psh | rst | syn | fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} |
protocol_id <value 0-255> {user_define <hex 0x0-0xffffffff>}]}(1) | packet_content {offset_0-
15 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_16-
31 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_32-
47 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-
63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-
79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>}(1) | ipv6
{[{class <value 0-255> | flowlabel <hex 0x0-0xfffff>} | source_ipv6 <ipv6addr> |
destination_ipv6 <ipv6addr>]}(1)] port [<portlist> | all] [permit | deny] {time_range
<range_name 32>} | delete access_id <value 1-100>]
Parameters
profile_id
- Specifies the index of the CPU access list profile.
<value 1-5>
- Specifies the index of the CPU access list profile.
add access_id
- Specifies the index of an access list entry to add. The range of this value is 1 to
100.
<value 1-100>
- Specifies an access ID between 1 and 100.
ethernet
- Specifies an Ethernet CPU access control list rule.
vlan
- Specifies the VLAN name.
<vlan_name 32>
-Specifies the VLAN name. The maximum length is 32 characters.
vlanid
- Specifies the VLAN ID.
<vlanid 1-4094>
- Specifies the VLAN ID between 1 and 4094.
source_mac
- Specifies the source MAC address.
<macaddr>
- Specifies the source MAC address.
destination_mac
- Specifies the destination MAC address.
<macaddr>
- Specifies the destination MAC address.
802.1p
- Specifies the value of the 802.1p priority tag.
<value 0-7>
- Specifies the value of the 802.1p priority tag. The priority tag ranges from 1