Extreme Networks ExtremeWare 7.3.0, Справочник по командам

Страница: 766 / 2254

766 ExtremeWare Software 7.3.0 Command Reference Guide
Security Commands
configure access-profile add
configure access-profile <access profile> add {<seq_number>} {permit |
deny} [ipaddress <ip address> <mask> {exact} | as-path <path-expression> |
bgp-community [internet | no-export | no-advertise | no-export-subconfed |
<as_no:number> | number <community>] | ipxnet <netid> <netid mask> | ipxsap
<sap_type> <service_name> | vlan]
Description
Adds an entry to the access profile.
Syntax Description
Default
N/A.
access profile Specifies an access profile name.
seq-number Specifies the order of the entry within the access profile. If no sequence
number is specified, the new entry is added to the end of the access-profile
and is automatically assigned a value of 5 more than the sequence number of
the last entry.
permit Per-entry permit specification. The per-entry attribute only takes effect if the
access-profile mode is
none
. Otherwise, the overall access profile type takes
precedence.
deny Per-entry deny specification. The per-entry attribute only takes effect if the
access-profile mode is
none
. Otherwise, the overall access profile type takes
precedence.
ip address/mask Specifies an IP address and mask as an entry in the profile list.
exact Specifies that an exact match with address and mask will be performed.
Subnets within the address range will not match entry against entry.
path-expression Specifies a regular expression string to match against the autonomous system
path.
internet Specifies a match against all routes, because all routes belong to the internet
community.
no-export Match against communities with the no-export attribute.
no-advertise Match against communities with the no-advertise attribute.
no-export-subconfed Match against communities with the no-export-subconfed attribute.
as_no:number Match against a BGP community number, specified in as_no:number format.
community Match against a BGP community number specified as an unsigned 32-bit
integer in decimal format.
netid/netid mask Specifies an IPX netID and mask as an entry in the profile list.
sap_type/service_name Specifies an IPX SAP service type and service name as an entry in the profile
list.
vlan Specifies a VLAN name as an entry in the profile list (supported only on
BlackDiamond 6800 MSM32 running ExtremeWare 4.1)