Intel 480T, Руководство пользователя

Страница: 264 / 367

262
C H A P T E R 1 4 Access Policies
Using Routing Access Policies
To use routing access policies, you must perform the following
steps:
1 Create an access profile.
2 Add IP addresses and subnet masks to the access profile.
3 Configure the access profile to be of type permit or deny .
4 Apply the access profile.
Creating an Access Profile
The first thing to do when using routing access policies is to create
an
access profile . An access profile is a named list of IP addresses
and associated subnet masks.
You must give the access profile a unique name (in the same
manner as naming a VLAN, protocol filter, or Spanning Tree
*
Domain). You must also indicate the type of access list (IP address
or VLAN) to be used. To create an access profile, use the following
command:
create access-profile <access_profile> type
ipaddress
Configuring an Access Profile
After the access profile is created, configure it by adding or deleting
IP addresses or VLANs. To add or delete IP addresses or VLANs to
an access profile, use the following command:
config access-profile <access_profile> [add |
delete] {| ipaddress <ipaddress> <mask>}
Then, configure the access list to be one of the following types:
• Permit
• Deny
The access list type determines whether the items in the list are to
be permitted access or denied access. To configure the type of
access profile, use the following command:
config access-profile <access_profile> mode [permit
| deny]