ESR series service routers.ESR-Series. User manual
Step Description Command Keys
Permit or deny the prefixes lists. esr(config-pl)# permit { <ADDR/
LEN> | object-group <OBJ-GRP-
NETNAME>} [ { eq <LEN> | le
<LEN> | ge <LEN 1> [ le <LEN 2> ] } ]
<ADDR/LEN> – IP address and
subnet mask, in the format of.
AAA.BBB.CCC.DDD/EE –
network IP address with prefix
mask, where AAA-DDD take
values of [0..255] and EE takes
values of [1..32];
<IPV6-ADDR/LEN> – IPv6
address and subnet mask, in
the format of:
X:X:X:X::X/EE, where each X
part takes values in
hexadecimal format [0..FFFF]
and EE takes values of [1..128];
<OBJ-GRP-NETNAME> – IP
addresses profile name, set by
the string of up to 31
characters*;
<LEN>, <LEN 1>, <LEN 2> –
prefix length, may take values
[1..32] in prefix IP lists for IPv4
and [1..128] for IPv6;
eq – when specifying the
command, the prefix length
mast match the specified one;
le – when specifying the
command, the prefix length
mast be less than or match the
specified one;
ge – when specifying the
command, the prefix length
mast be more than or match
the specified one;
ge <LEN 1> le <LEN 2>– When
specifying a command, the
prefix length must be greater
than or equal to <LEN> but less
than or equal to <LEN1>.
* When using object-group
filtering, they must be created
in advance.
esr(config-pl)# deny {<ADDR/LEN>
| object-group <OBJ-GRP-
NETNAME>} [ { eq <LEN> | le
<LEN> | ge <LEN 1> [ le <LEN 2> ] } ]
esr(config-ipv6-pl)# permit
{ <IPV6-ADDR/LEN> | object-group
<OBJ-GRP-NETNAME>} [ { eq
<LEN> | le <LEN> | ge <LEN 1> [ le
<LEN 2> ] } ]
esr(config-ipv6-pl)# deny {<IPV6-
ADDR/LEN> | object-group <OBJ-
GRP-NETNAME> } [ { eq <LEN> | le
<LEN> | ge <LEN 1> [ le <LEN 2> ] } ]