Extreme Networks ExtremeWare 7.3.0, Command Reference Manual

Page: 767 / 2254

configure access-profile add
ExtremeWare Software 7.3.0 Command Reference Guide 767
Usage Guidelines
You can specify the sequence number for each access profile entry. If you do not specify a sequence
number, entries are sequenced in the order they are added. Each entry is assigned a value of 5 more
than the sequence number of the last entry.
The explicit sequence number and the permit or deny attribute should be specified if the access profile
mode is
none
.
The subnet mask specified in the access profile command is interpreted as a reverse mask. A reverse
mask indicates the bits that are significant in the IP address. In other words, a reverse mask specifies the
part of the address that must match the IP address to which the profile is applied.
The
as-path
keyword uses a regular expression string to match against the AS path. Regular expression
notation can include any of the characters listed in Table 16.
Example
The following command adds an IP subnet address to access profile nosales , as the next available entry:
configure access-profile nosales add ipaddress 10.1.33.0/24
The following command configures the access profile AS1 to permit AS paths beginning with AS
number 1, followed by any AS number from 2 - 8, and ending with either AS number 11, 13, or 15:
configure access-profile AS1 add 15 permit as-path “^1 2-8 [11 13 15]$”
Table 16: Regular Expression Notation
Character Definition
N AS number
N
1
- N
2
Range of AS numbers, where N
1
and N
2
are AS numbers and N
1
< N
2
[N
x
... N
y
] Group of AS numbers, where N
x
and N
y
are AS numbers or a range of AS
numbers
[^N
x
... N
y
] Any AS numbers other than the ones in the group
. Matches any number
^ Matches the beginning of the AS path
$ Matches the end of the AS path
– Matches the beginning or end, or a space
- Separates the beginning and end of a range of numbers
* Matches 0 or more instances
+ Matches 1 or more instances
? Matches 0 or 1 instance
{ Start of AS SET segment in the AS path
} End of AS SET segment in the AS path
( Start of a confederation segment in the AS path
) End of a confederation segment in the AS path