Step Description Command Keys
3.1.3 Define the list of subnets affected by
the rule.
esr(config-route-map-rule)#match
ip address { <ADDR/LEN> | object-
group <OBJ-GRP-NETNAME> }
[ { eq <LEN> | le <LEN> | ge <LEN 1>
[ le <LEN 2> ] } ]
<ADDR/LEN> – IP address and
subnet mask, in the format of.
AAA.BBB.CCC.DDD/EE –
network IP address with prefix
mask, where AAA-DDD take
values of [0..255] and EE takes
values of [1..32];
<IPV6-ADDR/LEN> – IPv6
address and subnet mask, in
the format of:
X:X:X:X::X/EE, where each X
part takes values in
hexadecimal format [0..FFFF]
and EE takes values of [1..128];
<OBJ-GRP-NETNAME> – IP
addresses profile name, set by
the string of up to 31
characters*;
<LEN>, <LEN 1>, <LEN 2> –
prefix length, may take values
[1..32] in prefix IP lists for IPv4
and [1..128] for IPv6;
eq – when specifying the
command, the prefix length
mast match the specified one;
le – when specifying the
command, the prefix length
mast be less than or match the
specified one;
ge – when specifying the
command, the prefix length
mast be more than or match
the specified one;
ge <LEN 1> le <LEN 2>– When
specifying a command, the
prefix length must be greater
than or equal to <LEN> but less
than or equal to <LEN1>.
* When using object-group
filtering, they must be created
in advance.
esr(config-route-map-rule)#match
ipv6 address { <IPV6-ADDR/LEN> |
object-group <OBJ-GRP-
NETNAME> } [ { eq <LEN> | le
<LEN> | ge <LEN 1> [ le <LEN 2> ] } ]
3.1.4 Permit or deny action for the specified
subnets in the rule.
esr(config-route-map-rule)# action
{deny | permit}