Extreme Networks ExtremeWare 7.2e, Installation And User Manual

Page: 161 / 344

Using Routing Access Profiles
ExtremeWare 7.2e Installation and User Guide 161
Using Routing Access Profiles
To use routing access profiles, you must perform the following steps:
1 Create an access profile.
2
Configure the access profile to be of type permit, deny, or none.
3 Add entries to the access profile. Entries can be one of the following types:
— IP addresses and subnet masks
— VLAN
4
Apply the access profile.
Creating an Access Profile
The first thing to do when using routing access profiles is to create an access profile. An access profile has
a unique name and contains one of the following entry types:
• A list of IP addresses and associated subnet masks
• A VLAN
You must give the access profile a unique name (in the same manner as naming a VLAN, protocol filter,
or Spanning Tree Domain). To create an access profile, use the following command:
create access-profile <access profile> type [ipaddress | ipx-node | ipx-net |
ipx-sap | as-path]
Configuring an Access Profile Mode
After the access profile is created, you must configure the access profile mode. The access profile mode
determines whether the items in the list are to be permitted access or denied access.
Three modes are available:
• Permit —The permit access profile mode permits the operation, as long as it matches any entry in the
access profile. If the operation does not match any entries in the list, the operation is denied.
• Deny —The deny access profile mode denies the operation, as long as it matches any entry in the
access profile. If it does not match all specified entries in the list, the operation is permitted.
• None
—Using the none mode, the access profile can contain a combination of permit and deny
entries. Each entry must have a permit or deny attribute. The operation is compared with each entry
in the list. Once a match is found, the operation is either permitted or denied, depending on the
configuration of the matched entry. If no match is found, the operation is implicitly denied.
To configure the access profile mode, use the following command:
configure access-profile <access profile> mode [permit | deny | none]