Intel 480T User Manual page 268

C H A P T E R 1 4
266
Access Policies
config ospf direct-filter [<access_profile> |
none]
Example
Figure 30 illustrates an OSPF network that is similar to the network
used previously in the RIP example. In this example, access to the
Internet is accomplished by the use the ASBR function on the
switch labeled Internet. As a result, all routes to the Internet will be
done through external routes. Suppose the network administrator
wishes to only allow access to certain internet addresses falling
within the range 192.1.1.0/24 to the internal backbone.
Switch being
configured
10.0.0.11 / 24
Engsvrs
10.1.1.1 / 24
area 0.0.0.1
Figure 30: OSPF access policy example
To configure the switch labeled Internet, the commands would be
as follows:
create access-profile okinternet ipaddress
config access-profile okinternet mode permit
config access-profile okinternet add 192.1.1.0/24
config ospf asbr-filter okinternet
Internet
10.0.0.10 / 24
Backbone (OSPF)
Engsvrs
Internet
area 0.0.0.0
10.0.0.12 / 24
Sales
10.2.1.1 / 24
Sales
area 0.0.0.2
480t_008