Extreme Networks BlackDiamond 6800 Installation And User Manual page 46

Configuring the ARM
Table 3-2: Routing Access Policy Configuration Commands
Command
config access-profile <access_profile>
add {<seq-number>} {permit | deny}
[ipaddress <ipaddress> <mask> {exact}
| as-path <path_expression> |
bgp-community [internet | no-advertise |
no-export | no-export-subconfed |
<as_no:number> | number
<community]]
config access-profile <access_profile>
delete <seq_number>
config access-profile <access_profile>
mode [permit | deny | none]
3-6
Description
Adds an entry to the access profile. The explicit
sequence number and permit or deny attribute should
be specified if the access profile mode is none.
Specify one of the following:
<seq-number> — The order of the entry within the


access profile. If no sequence number is specified,
the new entry is added to the end of the access
profile and is automatically assigned a value of 5
more than the sequence number of the last entry.
permit | deny — Per-entry permit or deny


specification. The per-entry attribute only takes
effect if the access profile mode is none. Otherwise,
the overall access profile type takes precedence.
<ipaddress> <mask> — an IP address and


mask. If the attribute "exact" is specified for an
entry, then an exact match with address and mask
is performed. Subnets within the address range do
not match entry against entry.
as-path — A regular expression string to match


against the autonomous system path.
bgp-community — The BGP community number


in as_no:number format, or as an unsigned 32-bit
integer in decimal format. The BGP community
internet matches against all routes, because all
routes belong to the internet community.
Deletes an access profile entry using the sequence
number.
Configures the access profile to be one of the
following:
permit — Allows the addresses that match the
access profile description.
deny — Denies the address that match the access
profile description.
none — Permits and denies access on a per-entry
basis. Each entry must be added to the profile as
either type permit or deny.
Accounting and Routing Module Installation and User Guide