400
Creating a routing policy
For a routing policy that has more than one node, configure at least one permit-mode node. A route that
does not match any node cannot pass the routing policy. If all the nodes are in deny mode, no routing
information can pass the routing policy.
To create a routing policy:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Create a routing policy and a node, and
enter routing policy node view.
route-policy
route-policy-name { deny |
permit } node node-number
By default, no routing policy
is created.
Configuring if-match clauses
You can either specify no if-match clauses or multiple if-match clauses for a routing policy node. If no
if-match clause is specified for a permit-mode node, all routing information can pass the node. If no
if-match clause is specified for a deny-mode node, no routing information can pass the node.
The if-match clauses of a routing policy node have a logical AND relationship. A route must meet all
if-match clauses before it can be executed by the apply clauses of the node. If an if-match command
exceeds the maximum length, multiple identical if-match clauses are generated. These clauses have a
logical OR relationship. A route only needs to match one of them.
To configure if-match clauses:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter routing policy node view.
route-policy route-policy-name { deny
| permit } node node-number
N/A
3. Match routes whose destination,
next hop, or source matches a
specified prefix list.
• Match IPv4 routes whose
destination, next hop, or source
matches the IPv4 prefix list:
if-match ip { address | next-hop |
route-source } { acl acl-number |
prefix-list prefix-list-name }
• Match IPv6 routes whose
destination, next hop, or source
matches the IPv6 prefix list:
if-match ipv6 { address |
next-hop | route-source } { acl
acl6-number | prefix-list
prefix-list-name }
By default, no IPv4 or IPv6
prefix list match criterion is
configured.
If the ACL used by an if-match
clause does not exist, the
clause is always matched. If
no rules of the specified ACL
are matched or the match
rules are inactive, the clause
is not matched.
The ACL specified in an
if-match clause must be a
non-VPN ACL.
4. Match BGP routes whose
AS_PATH attribute matches a
specified AS path list.
if-match as-path
as-path-number&<1-32>
By default, no AS path match
criterion is configured.