Intel 480T, Руководство пользователя

Страница: 272 / 367

270
C H A P T E R 1 4 Access Policies
Routing Access Policy Commands
Table 69 describes the commands used to configure routing access
policies.
Table 69: Routing Access Policy Configuration Commands
Command Description
config access-profile <access_profile> add
{vlan <name> | ipaddress <ipaddress>
<subnet_mask> Adds an IP address or VLAN name to the
access profile. The entry must be of the same
type as the access profile (for example, IP
address).
config access-profile <access_profile> delete
{vlan <name> | ipaddress <ipaddress>
<subnet_mask> Deletes an IP address or VLAN name from the
access profile.
config access-profile <access_profile> mode
[permit | deny] Configures the access profile to be one of the
following:
•
permit
— Allows the addresses that match
the access profile description.
•
deny
— Denies the addresses that match the
access profile description.
The default setting is
permit
.
config dvmrp vlan [<name> | all] export-
filter [<access_profile> | none] Configures DVMRP to filter out certain routes
when performing the route advertisement.
config dvmrp vlan [<name> | all] import-
filter [<access_profile> | none] Configures DVMRP to filter certain routes
received from its neighbor.
config dvmrp vlan [<name> | all] trusted-
gateway [<access_profile> | none] Configures DVMRP to use the access policy to
determine which DVMRP neighbor is trusted
and to receive routes from.
config ospf area <area_id> external-filter
[<access_profile> | none] Configures the router to use the access policy to
determine which external routes are allowed to
be exported into the area. This router must be an
ABR.
config ospf area <area_id> interarea-filter
[<access_profile> | none] Configures the router to use the access policy to
determine which inter-area routes are allowed to
be exported into the area. This router must be an
ABR.