Intel 480T, User Manual

Page: 52 / 367

50
C H A P T E R 3 Accessing the Switch
The subnet mask specified in the access profile command is
interpreted as a
reverse mask . A reverse mask indicates the bits that
are significant in the IP address. In other words, a reverse mask
specifies the part of the address that must match the IP address to
which the profile is applied.
If you configure an IP address that is an exact match that is
specifically denied or permitted, use a mask of /32 (for example,
141.251.24.28/32). If the IP address represents a subnet address that
you wish to deny or permit, then configure the mask to cover only
the subnet portion (for example, 141.251.10.0/24).
If you are using off-byte boundary subnet masking, the same logic
applies, but the configuration is more tricky. For example, the
address 141.251.24.128/27 represents any host from subnet
141.251.24.128.
config access-profile <access_profile>
mode [permit | deny] Configures the access profile to be one of the
following:
permit
— Allows the addresses that match the
access profile description.
deny
— Denies the addresses that match the
access profile description.
The default setting is
permit
.
create access-profile <access_profile> type
[vlan | ipaddress] Creates an access profile. Once the access
profile is created, one or more addresses can be
added to it, and the profile can be used to
control a specific routing protocol.
delete access-profile <access_profile> Deletes an access profile.
show access-profile <access_profile> Displays access-profile related information for
the switch.
Table 10: Access Profile Configuration Commands (continued)
Command Description