Intel 480T User Manual page 52

C H A P T E R 3
Table 10: Access Profile Configuration Commands (continued)
Command
config access-profile <access_profile>
mode [permit | deny]
create access-profile <access_profile> type
[vlan | ipaddress]
delete access-profile <access_profile>
show access-profile <access_profile>
50
Accessing the Switch
Description
Configures the access profile to be one of the
following:
permit
access profile description.
deny
access profile description.
The default setting is
Creates an access profile. Once the access
profile is created, one or more addresses can be
added to it, and the profile can be used to
control a specific routing protocol.
Deletes an access profile.
Displays access-profile related information for
the switch.
The subnet mask specified in the access profile command is
interpreted as a reverse mask. A reverse mask indicates the bits that
are significant in the IP address. In other words, a reverse mask
specifies the part of the address that must match the IP address to
which the profile is applied.
If you configure an IP address that is an exact match that is
specifically denied or permitted, use a mask of /32 (for example,
141.251.24.28/32). If the IP address represents a subnet address that
you wish to deny or permit, then configure the mask to cover only
the subnet portion (for example, 141.251.10.0/24).
If you are using off-byte boundary subnet masking, the same logic
applies, but the configuration is more tricky. For example, the
address 141.251.24.128/27 represents any host from subnet
141.251.24.128.
— Allows the addresses that match the
— Denies the addresses that match the
permit
.