Intel 480T, User Manual

Page: 268 / 367

266
C H A P T E R 1 4 Access Policies
config ospf direct-filter [<access_profile> |
none]
Example
Figure 30 illustrates an OSPF network that is similar to the network
used previously in the RIP example. In this example, access to the
Internet is accomplished by the use the ASBR function on the
switch labeled Internet. As a result, all routes to the Internet will be
done through external routes. Suppose the network administrator
wishes to only allow access to certain internet addresses falling
within the range 192.1.1.0/24 to the internal backbone.
Figure 30: OSPF access policy example
To configure the switch labeled Internet, the commands would be
as follows:
create access-profile okinternet ipaddress
config access-profile okinternet mode permit
config access-profile okinternet add 192.1.1.0/24
config ospf asbr-filter okinternet
480t_008
Internet
Backbone (OSPF)
area 0.0.0.0
Sales
area 0.0.0.2
Engsvrs
area 0.0.0.1
10.0.0.10 / 24
10.0.0.11 / 24
10.1.1.1 / 24 10.2.1.1 / 24
10.0.0.12 / 24
Switch being
configured
Internet
Engsvrs Sales