xStack
®
DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
228
config cpu access_profile profile_id
address.
• destination_ipv6 <ipv6addr> − Specifies an IPv6 address mask for the destination
IPv6 address.
<portlist>| all – Enter the port or ports to which this access profile applies. The port list is
specified by listing the lowest switch number and the beginning port number on that
switch, separated by a colon. Then the highest switch number, and the highest port
number of the range (also separated by a colon) are specified. The beginning and end of
the port list range are separated by a dash. For example, 1:3 specifies switch number 1,
port 3. 2:4 specifies switch number 2, port 4. 1:3–2:4 specifies all of the ports between
switch 1, port 3 and switch 2, port 4 – in numerical order. Entering all will denote all
profiles on the switch or in the switch stack. Non–contiguous portlist entries are
separated by a comma. (ex: 1:1–1:3,1:7–1:9)
permit | deny – Specify that the packet matching the criteria configured with command
will either be permitted entry to the cpu or denied entry to the CPU.
{time_range <range_name 32>} – Choose this parameter and enter the name of the Time
Range settings that has been previously configured using the config time_range
command. This will set specific times when this access rule will be enabled or disabled
on the Switch.
delete access_id <value 1–100> – Use this to remove a previously created access rule in
a profile ID.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To configure CPU access list entry:
DGS–3426:5#config cpu access_profile profile_id 5 add access_id 1 ip vlan
default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32
deny
Command: config cpu access_profile profile_id 10 add access_id 1 ip vlan default
source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 deny
Success.
DGS–3426:5#
show cpu_access_profile
Purpose Used to view the CPU access profile entry currently set in the Switch.
Syntax
show cpu_access_profile {profile_id <value 1–5>}
Description This command is used view the current CPU interface filtering entries set on the Switch.
Parameters
profile_id <value 1–5> − Enter an integer between 1 and 5 that is used to identify the
CPU access profile to be deleted with this command. This value is assigned to the access
profile when it is created with the create cpu access_profile command
Restrictions None.
Example usage:
To show the CPU filtering state on the Switch:
