User guide

8-4 MPLS Module Installation and User Guide
Configuring Destination-Sensitive Accounting
Table 8-2: Routing Access Policy Configuration Commands
Command Description
config access-profile <access_profile>
add {<seq-number>} {permit | deny}
[ipaddress <ipaddress> <mask> {exact}
| as-path <path_expression> |
bgp-community [internet | no-advertise |
no-export | no-export-subconfed |
<as_no:number> | number
<community]]
Adds an entry to the access profile. The explicit
sequence number and permit or deny attribute should
be specified if the access profile mode is none.
Specify one of the following:
■
<seq-number> — The order of the entry within the
access profile. If no sequence number is specified,
the new entry is added to the end of the
access-profile and is automatically assigned a value
of 5 more than the sequence number of the last
entry.
■
permit | deny — Per-entry permit or deny
specification. The per-entry attribute only takes
effect if the access-profile mode is none. Otherwise,
the overall access profile type takes precedence.
■
<ipaddress> <mask> — an IP address and
mask. If the attribute “exact” is specified for an
entry, then an exact match with address and mask
is performed. Subnets within the address range do
not match entry against entry.
■
as-path — A regular expression string to match
against the autonomous system path.
■
bgp-community — The BGP community number
in as_no:number format, or as an unsigned 32-bit
integer in decimal format. The BGP community
internet matches against all routes, because all
routes belong to the internet community.
config access-profile <access_profile>
delete <seq_number>
Deletes an access profile entry using the sequence
number.
config access-profile <access_profile>
mode [permit | deny | none]
Configures the access profile to be one of the
following:
permit — Allows the addresses that match the
access profile description.
deny — Denies the address that match the access
profile description.
none — Permits and denies access on a per-entry
basis. Each entry must be added to the profile as
either type permit or deny.