H3C Technologies H3C SecPath F1000-E User Manual
Page 479
454
Step Command
Remarks
3.
Advertise a default route to a
peer or peer group.
peer { group-name | ip-address }
default-route-advertise [ route-policy
route-policy-name ]
Not advertised by default.
Configuring BGP route distribution/reception filtering policies
1.
Configuration prerequisites
Configure following filters as needed:
{
ACL
{
IP prefix list
{
Routing policy
{
AS-path ACL
For how to configure an ACL, see Access Control Configuration Guide.
For how to configure an IP prefix list, routing policy, and AS-path ACL, see "Configuring routing
policies."
2.
Configure BGP route distribution filtering policies.
To configure BGP route distribution filtering policies:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter BGP view.
bgp as-number
N/A
3.
Configure BGP route
distribution filtering
policies.
•
Configure the filtering of redistributed routes:
filter-policy { acl-number | ip-prefix
ip-prefix-name } export [ direct | isis
process-id | ospf process-id | rip process-id
| | static ]
•
Reference a routing policy to filter
advertisements to a peer/peer group:
peer { group-name | ip-address }
route-policy route-policy-name export
•
Reference an ACL to filter advertisements to a
peer/peer group:
peer { group-name | ip-address } filter-policy
acl-number export
•
Reference an AS path ACL to filter routing
information sent to a peer/peer group:
peer { group-name | ip-address } as-path-acl
as-path-acl-number export
•
Reference an IP prefix list to filter routing
information sent to a peer/peer group:
peer { group-name | ip-address } ip-prefix
ip-prefix-name export
Configure at least one
command.
Not configured by default.
You can configure a filtering
policy as needed.
If several filtering policies are
configured, they are applied
in the following sequence:
1.
filter-policy export
2.
peer filter-policy export
3.
peer as-path-acl export
4.
peer ip-prefix export
5.
peer route-policy export
Only routes passing the first
policy can go to the next, and
only routes passing all the
configured policies can be
advertised.
3.
Configure BGP route reception filtering policies.
Only routes permitted by the configured filtering policies can be installed into the local BGP
routing table. The members of a peer group can have different route reception filtering policies
from the peer group.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer