Route Based VPN and BGP
Nokia IP40 Security Platform User’s Guide v1.1 131
Creating Access- Lists on Nokia IP40 Security Platform
Access lists are filters that enable you to restrict the routing information a router advertises to a
neighbor. BGP uses address-based access lists.
Use the following commands to configure access lists:
add bgp access-list <list-name>
action < permit | deny >
any prefix <value>
Use the following commands to delete access lists:
delete bgp access-list all-unused | name <value>
Creating Route Maps on Nokia IP40 Security Platform
Route maps are used to control distribution of routing updates. Route maps consist of a list of
match and set commands. The match commands specify match criteria and the set commands
specify the action to be taken if match criteria are met. Only those routes that pass through the
route-map (inbound route maps) are accepted or forwarded (outbound routes).
Use the following commands to add route-maps:.
add bgp route-map name <map-name>
action <permit | deny> seq-no <value>
match <ip-address <value> | ip-next-hop <value> |
metric <value> |>
set ip-next-hop <value ip_address>
local-preference <value>
weight <value>
metric <value>
as-path-prepend <value>
Use the following commands to delete route-maps:
delete bgp route-map <all-unused | name <value> [seq-no <value>]>
Configuring Routing Policies on Nokia IP40 Security Platform
Routing policies for a remote peer include all of the configurations such as route-map, distribute
list, prefix-list, and filter-list that might affect inbound or outbound routing table updates.