Intel 480T, Руководство пользователя

Страница: 265 / 367

C H A P T E R 1 4 Access Policies
263
Applying Access Profiles
Once the access profile is defined, apply it to one or more routing
protocols or VLANs. When an access profile is applied to a protocol
function (for example, the export of RIP routes) or a VLAN, this
forms an access policy. A profile can be used by multiple routing
protocol functions or VLANs, but a protocol function or VLAN can
use only one access profile.
Routing Access Policies for RIP
If the RIP protocol is being used, the switch can be configured to
use an access profile to determine any of the following:
• Trusted Neighbor — Use an access profile to determine trusted
RIP router neighbors for the VLAN on the switch running RIP. To
configure a trusted neighbor policy, use the following command:
config rip vlan [<name> | all] trusted-gateway
[<access_profile> | none]
• Import Filter — Use an access profile to determine which RIP
routes are accepted as valid routes. This policy can be combined
with the trusted neighbor policy to accept selected routes only
from a set of trusted neighbors. To configure an import filter
policy, use the following command:
config rip vlan [<name> | all] import-filter
[<access_profile> | none]
• Export Filter — Use an access profile to determine which RIP
routes are advertised into a particular VLAN, using the following
command:
config rip vlan [<name> | all] export-filter
[<access_profile> | none]
Examples
In the example shown in Figure 29, a switch is configured with two
VLANs,
Engsvrs and Backbone . The RIP protocol is used to
communicate with other routers on the network. The administrator
wants to allow all internal access to the VLANs on the switch, but
no access to the router that connects to the Internet. The remote
router that connects to the Internet has a local interface connected to
the corporate backbone. The IP address of the local interface
connected to the corporate backbone is 10.0.0.10/24.