User guide

16-28 E
XTREME
W
ARE
S
OFTWARE
U
SER
G
UIDE
A
CCESS
P
OLICIES
config access-profile <access_profile> mode
[permit | deny | none]
Configures the access profile to be one of the
following:
■
permit — Allows the addresses that match
the access profile description.
■
deny — Denies the addresses that match the
access profile description.
■
none — Permits and denies access on a
per-entry basis. Each entry must be added to
the profile as either type permit or deny.
The default setting is permit.
config bgp neighbor [<ipaddress> | all]
as-path-filter [in | out] [<access_profile> |
none]
Configures BGP to use the AS path filter for the
routing information exchanged with the neighbor.
config bgp neighbor [<ipaddress> | all]
nlri-filter [in | out] [<access_profile> | none]
Configures BGP to use the NLRI filter for the
routing information exchanged with the neighbor.
config dvmrp vlan [<name> | all] export-filter
[<access_profile> | none]
Configures DVMRP to filter out certain routes
when performing the route advertisement.
config dvmrp vlan [<name> | all] import-filter
[<access_profile> | none]
Configures DVMRP to filter certain routes
received from its neighbor.
config dvmrp vlan [<name> | all]
trusted-gateway [<access_profile> | none]
Configures DVMRP to use the access policy to
determine which DVMRP neighbor is trusted and
to receive routes from.
config ospf area <area_id> external-filter
[<access_profile> | none]
Configures the router to use the access policy to
determine which external routes are allowed to
be exported into the area. This router must be an
ABR.
config ospf area <area_id> interarea-filter
[<access_profile> | none]
Configures the router to use the access policy to
determine which inter-area routes are allowed to
be exported into the area. This router must be an
ABR.
config ospf asbr-filter [<access_profile> |
none]
Configures the router to use the access policy to
limit the routes that are advertised into OSPF for
the switch as a whole for switches configured to
support RIP and static route re-distribution into
OSPF.
config ospf direct-filter [<access_profile> |
none]
Configures the router to use the access policy to
limit the routes that are advertised into OSPF for
the switch as a whole for switches configured to
support direct route re-distribution into OSPF.
Table 16-3: Routing Access Policy Configuration Commands (continued)
Command Description