C H A P T E R 17 Access Policies
311
configure access-profile <access_profile> [add |
delete] {seq-number} ipx-sap <ipx_sap_type_in_hex>
<ipx_name_string>
To assign IPX access profiles as either import or export filters to
RIP or SAP, use these commands:
configure ipxrip vlan [<vlan name> | all] import-
filter [<access_profile> | none]
configure ipxrip vlan [<vlan name> | all] export-
filter [<access_profile> | none]
configure ipxsap vlan [<vlan name> | all] import-
filter [<access_profile> | none]
configure ipxsap vlan [<vlan name> | all] export-
filter [<access_profile> | none]
To view your access profile configuration, use this command:
show access-profile <access_profile>
Route Maps
Route maps are used to modify or filter routes redistributed into
BGP. They are also used to modify or filter the routing information
exchanged with BGP neighbors.
Using IP Access Lists
Each entry that makes up the IP access list of the 480T routing
switch contains a unique name. It can contain a unique precedence
number, as well. Precedence numbers range from 1 to 25,600, with
the number 1 having the highest precedence.
The precedence number determines the order in which each criteria
rule is examined by the switch. Once a matching entry in the access
list is found, the packet is acted on and either forwarded or dropped.
The rules of an IP access list consist of a combination of these six
components:
• IP source address and mask
• IP destination address and mask
• TCP or UDP source port range
• TCP or UDP destination port range