Extreme Networks ExtremeWare 7.7, Command Reference Manual

Page: 852 / 2620

852 ExtremeWare 7.7 Command Reference Guide
Security Commands
Default
N/A
Usage Guidelines
You can specify the sequence number for each access profile entry. If you do not specify a sequence
number, entries are sequenced in the order they are added. Each entry is assigned a value of 5 more
than the sequence number of the last entry.
The explicit sequence number and the permit or deny attribute should be specified if the access profile
mode is
none
.
The subnet mask specified in the access profile command is interpreted as a reverse mask. A reverse
mask indicates the bits that are significant in the IP address. In other words, a reverse mask specifies
the part of the address that must match the IP address to which the profile is applied.
The
as-path
keyword uses a regular expression string to match against the AS path. Regular
expression notation can include any of the characters listed in Table 16.
netid/netid mask Specifies an IPX netID and mask as an entry in the profile list.
NOTE: This option is available only on “i” series switches.
sap_type/service_name Specifies an IPX SAP service type and service name as an entry in the profile list.
NOTE: This option is available only on “i” series switches.
vlan Specifies a VLAN name as an entry in the profile list
NOTE: This option is supported only on BlackDiamond 6800 MSM32 running
ExtremeWare 4.1.
Table 16: Regular Expression Notation
Character Definition
N AS number
N
1
- N
2
Range of AS numbers, where N
1
and N
2
are AS numbers and N
1
< N
2
[N
x
... N
y
] Group of AS numbers, where N
x
and N
y
are AS numbers or a range of AS numbers
[^N
x
... N
y
] Any AS numbers other than the ones in the group
. Matches any number
^ Matches the beginning of the AS path
$ Matches the end of the AS path
– Matches the beginning or end, or a space
- Separates the beginning and end of a range of numbers
* Matches 0 or more instances
+ Matches 1 or more instances
? Matches 0 or 1 instance
{ Start of AS SET segment in the AS path
} End of AS SET segment in the AS path
( Start of a confederation segment in the AS path
) End of a confederation segment in the AS path