Configure Access-Profile Add - Extreme Networks ExtremeWare Command Reference Manual

Security Commands

configure access-profile add

For the "i" series switches:
configure access-profile <access profile> add {<seq_number>} {permit |
deny} [ipaddress <ip address> <mask> {exact} | as-path <path-expression> |
bgp-community [internet | no-export | no-advertise | no-export-subconfed |
<as_no:number> | number <community>] | ipxnet <netid> <netid mask> | ipxsap
<sap_type> <service_name> | vlan]
For the "e" series switches:
configure access-profile <access profile> add {<seq_number>} {permit |
deny} [ipaddress <ip address> <mask> {exact} | as-path <path-expression> |
vlan]
Description
Adds an entry to the access profile.
Syntax Description
access profile Specifies an access profile name.
seq-number Specifies the order of the entry within the access profile. If no sequence number is
specified, the new entry is added to the end of the access-profile and is automatically
assigned a value of 5 more than the sequence number of the last entry.
permit Per-entry permit specification. The per-entry attribute takes effect only if the
access-profile mode is none. Otherwise, the overall access profile type takes
precedence.
deny Per-entry deny specification. The per-entry attribute takes effect only if the access-profile
mode is none. Otherwise, the overall access profile type takes precedence.
ip address/mask Specifies an IP address and mask as an entry in the profile list.
exact Specifies that an exact match with address and mask will be performed. Subnets within
the address range will not match entry against entry.
path-expression Specifies a regular expression string to match against the autonomous system path.
internet Specifies a match against all routes, because all routes belong to the internet
community.
NOTE: This option is available only on "i" series switches.
no-export Match against communities with the no-export attribute.
NOTE: This option is available only on "i" series switches.
no-advertise Match against communities with the no-advertise attribute.
NOTE: This option is available only on "i" series switches.
no-export-subconfed Match against communities with the no-export-subconfed attribute.
NOTE: This option is available only on "i" series switches.
as_no:number Match against a BGP community number, specified in as_no:number format.
NOTE: This option is available only on "i" series switches.
community Match against a BGP community number specified as an unsigned 32-bit integer in
decimal format.
NOTE: This option is available only on "i" series switches.
832 ExtremeWare 7.5 Command Reference Guide