Extreme Networks ExtremeWare 7.3.0, Command Reference Manual

Page: 856 / 2254

856 ExtremeWare Software 7.3.0 Command Reference Guide
Security Commands
create access-profile
create access-profile <access profile> type [ipaddress | ipx-node | ipx-net
| ipx-sap | as-path | bgp-community | vlan]
Description
Creates an access profile.
Syntax Description
Default
N/A.
Usage Guidelines
You must give the access profile a unique name (in the same manner as naming a VLAN, protocol filter,
or Spanning Tree Domain).
After the access profile is created, you must configure the access profile mode. The access profile mode
determines whether the items in the list are to be permitted access or denied access.
For version 4.0:
• Only type
ipaddress
was supported, and the
type
keyword was not used.
• On BlackDiamond 6800 MSM32 running ExtremeWare 4.1, the VLAN keyword specifies that profile
entries will be a list of VLANs.
Example
The following command creates an access profile named nosales that will contain IP address/mask pairs:
create access-profile nosales type ipaddress
The following command creates an access profile that will contain AS path expressions:
create access-profile AS1 type as-path
access profile Specifies an access profile name.
ipaddress Specifies that the profile entries will be a list of IP address/mask pairs.
ipx-node Specifies that the profile entries will be a list of IPX node addresses.
ipx-net Specifies that the profile entries will be a list of IPX NetIDs.
ipx-sap Specifies that the profile entries will be a list of IPX SAP advertisements.
as-path Specifies that the profile entries will be a list of AS path expressions.
bgp-community Specifies that the profile entries will be a list of BGP community numbers.
vlan Specifies that the profile entries will be a list of VLANs (supported only on
BlackDiamond 6800 MSM32 running ExtremeWare 4.1)