Table of Contents
Advertisement
Configuring Access Profiles
Specifying Subnet Masks
The subnet mask specified in the access profile command is interpreted as a prefix mask.
A prefix mask indicates the bits that are significant in the IP address. In other words, a
prefix mask specifies the part of the address that must match the IP address to which
the profile is applied.
If you configure an IP address that is an exact match that is specifically denied or
permitted, use a mask of /32 (for example, 141.251.24.28/32). If the IP address
represents all addresses in a subnet address that you wish to deny or permit, then
configure the mask to cover only the subnet portion (for example, 141.251.10.0/24). The
keyword
may be used when you wish to match only against the subnet address,
exact
and ignore all addresses within the subnet.
If you are using off-byte boundary subnet masking, the same logic applies, but the
configuration is more complicated. For example, the address 141.251.24.128/27
represents any host from subnet 141.251.24.128.
The following command example adds an
to the access-profile
:
ipaddress
cold
config access-profile cold add 10 permit ipaddress 192.165.100.0/24
See "Route Map Configuration Examples" on page 8-13 for more details about
configuring access policies.
Sequence Numbering
You can specify the sequence numbering for each access profile entry. If you do not
specify a sequence number, entries are entered in the order they are added. Each entry
is assigned a value of 5 more than the sequence number of the last entry. The total
number of access profile entries supported by the MPLS module is 256.
Permit and Deny Entries
If you have configured the access profile mode to be
, you must specify each entry
none
type as either
or
. If you do not specify the entry type, it is added as a
permit
deny
permit entry. If you have configured the access profile mode to be
or
, it is
permit
deny
not necessary to specify a type for each entry.
MPLS Module Installation and User Guide
8-7
Advertisement
Table of Contents
