Defining Filtering Lists 491
Defining an IPv6 Prefix
List
Identified by name, each IPv6 prefix list can comprise multiple items. Each item
specifies a matching address range in the form of network prefix, which is
identified by index number.
During matching, the system compares the route to each item in the ascending
order of index number. If one item is matched, the route passes the IP-prefix list,
without needing to match the next item.
Follow these steps to define an IPv6 prefix list:
n
If all items are set to the deny mode, no routes can pass the IPv6 prefix list.
Therefore, you need to define the permit :: 0 less-equal 128 item following
multiple deny mode items to allow other IPv6 routing information to pass.
For example, the following configuration filters routes 2000:1::/48, 2000:2::/48
and 2000:3::/48, but allows other routes to pass.
<Sysname> system-view
[Sysname] ip ipv6-prefix abc index 10 deny 2000:1:: 48
[Sysname] ip ipv6-prefix abc index 20 deny 2000:2:: 48
[Sysname] ip ipv6-prefix abc index 30 deny 2000:3:: 48
[Sysname] ip ipv6-prefix abc index 40 permit :: 0 less-equal 128
Defining an AS Path List You can define multiple items for an AS path ACL that is identified by number.
During matching, the relation between items is logical OR, that is, if the route
matches one of these items, it passes the AS path ACL.
Follow these steps to define an AS path ACL:
Defining a Community
List
You can define multiple items for a community list that is identified by number.
During matching, the relation between items is logic OR, that is, if routing
information matches one of these items, it passes the community list.
Follow these steps to define a community list:
To do… Use the command… Remarks
Enter system view system-view -
Define an IPv6 prefix
list
ip ipv6-prefix ipv6-prefix-name [ index
index-number ] { deny | permit } ipv6-address
prefix-length [ greater-equal min-prefix-length ]
[ less-equal max-prefix-length ]
Required
Not defined by
default
To do… Use the command… Remarks
Enter system view system-view -
Define an AS path ACL ip as-path as-path-number { deny |
permit } regular-expression
Required
Not defined by default
To do… Use the command… Remarks
Enter system view system-view -
To Next Page
Loading...
