Extreme Networks ExtremeWare 7.2e, Installation And User Manual

Page: 164 / 344

164 ExtremeWare 7.2e Installation and User Guide
Security
configure access-profile <access profile> delete <seq_number>
Applying Access Profiles
Once the access profile is defined, apply it to one or more routing protocols or VLANs. When an access
profile is applied to a protocol function (for example, the export of RIP routes) or a VLAN, this forms an
access policy. A profile can be used by multiple routing protocol functions or VLANs, but a protocol
function or VLAN can use only one access profile.
Routing Profiles for RIP
If you are using the RIP protocol, the switch can be configured to use an access profile to determine:
• Trusted Neighbor —Use an access profile to determine trusted RIP router neighbors for the VLAN
on the switch running RIP. To configure a trusted neighbor policy, use the following command:
configure rip vlan [<vlan name> | all] trusted-gateway [<access profile> | none]
• Import Filter —Use an access profile to determine which RIP routes are accepted as valid routes. This
policy can be combined with the trusted neighbor policy to accept selected routes only from a set of
trusted neighbors. To configure an import filter policy, use the following command:
configure rip vlan [<vlan name> | all] import-filter [<access profile> | none]
• Export Filter —Use an access profile to determine which RIP routes are advertised into a particular
VLAN, using the following command:
configure rip vlan [<vlan name> | all] export-filter [<access profile> | none]
Examples
In the example shown in Figure 26, a switch is configured with two VLANs, Engsvrs and Backbone. The
RIP protocol is used to communicate with other routers on the network. The administrator wants to
allow all internal access to the VLANs on the switch, but no access to the router that connects to the
Internet. The remote router that connects to the Internet has a local interface connected to the corporate
backbone. The IP address of the local interface connected to the corporate backbone is 10.0.0.10/24.