Access Policy Commands - Allied Telesis AT-9108 User Manual

Access Policy Commands

Command
create access-profile <access_profile>
type [vlan | ipaddress]
config access-profile <access_profile>
mode [permit | deny]
config access-profile <access_profile> add
{vlan <name> | ipaddress <ipaddress>
<subnet_mask>
config access-profile <access_profile>
delete {vlan <name> | ipaddress
<ipaddress> <subnet_mask>
config rip vlan [<name> | all] trusted-
gateway [<access_profile> | none]
config rip vlan [<name> | all] import-filter
[<access_profile> | none]
config rip vlan [<name> | all ] export-filter
[<access-profile> | none]
config ospf area <area_id> external-filter
[<access_profile> | none]
config ospf area <area_id> interarea-filter
[<access_profile> | none]
config dvmrp vlan [<name> | all] export-
filter [<access_profile> | none]
Table 12-1 shows the commands used to configure access policy.
Table 12-1 Access Policy Configuration Commands
AT-9108, AT-8518, AT-8525, and AT-8550 User's Guide
Description
Creates an access profile. Once the access profile is
created, one or more addresses can be added to it,
and the profile can be used to control a specific
routing protocol
Configures the access profile to be one of the
following:
permit — Allows the addresses that match
the access profile description.
deny — Denies the addresses that match the
access profile description.
The default setting is permit.
Adds an IP address or VLAN name to the access
profile. The entry must be of the same type as the
access profile (for example, IP address).
Deletes an IP address or VLAN name from the
access profile.
Configures RIP to use the access list to determine
which RIP neighbor to receive (or reject) the
routes.
Configures RIP to ignore certain routes received
from its neighbor.
Configures RIP to suppress certain routes when
performing route advertisements.
Configures the router to use the access policy to
determine which external routes are allowed to be
exported into the area. This router must be an ABR.
Configures the router to use the access policy to
determine which inter-area routes are allowed to
be exported into the area. This router must be an
ABR.
Configures DVMRP to filter out certain routes
when performing the route advertisement.
12-11