Configuring is-is route filtering, Filtering routes calculated from received lsps, Filtering redistributed routes – H3C Technologies H3C SecPath F1000-E User Manual
Page 533: Configuring is-is route leaking
508
Configuring IS-IS route filtering
You can reference a configured ACL, IP prefix list, or routing policy to filter routes calculated from the
received LSPs and the routes redistributed from other routing protocols.
Filtering routes calculated from received LSPs
IS-IS saves the LSPs received from neighbors in the LSDB, uses the SPF algorithm to calculate the shortest
path tree with itself as the root, and installs the routes into the IS-IS routing table.
By referencing a configured ACL, IP prefix list or routing policy, you can filter the calculated routes. Only
the routes matching the filter can be added into the IS-IS routing table.
To filter routes calculated from received LSPs:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter IS-IS view.
isis [ process-id ] [ vpn-instance
vpn-instance-name ]
N/A
3.
Filter routes calculated
from received LSPs.
filter-policy { acl-number | ip-prefix
ip-prefix-name | route-policy route-policy-name }
import
By default, no filtering is
configured.
Filtering redistributed routes
IS-IS can redistribute routes from other routing protocols or other IS-IS processes, add them into the IS-IS
routing table and advertise them in LSPs.
By reference a configured ACL, IP prefix list or routing policy, you can filter redistributed routes and only
the routes matching the filter can be added into the IS-IS routing table and advertised to neighbors.
To configure the filtering of redistributed routes:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter IS-IS view.
isis [ process-id ] [ vpn-instance
vpn-instance-name ]
N/A
3.
Configure the filtering of
routes redistributed from
another routing protocol or
IS-IS process.
filter-policy { acl-number | ip-prefix
ip-prefix-name | route-policy
route-policy-name } export [ protocol
[ process-id ] ]
Not configured by
default.
Configuring IS-IS route leaking
With IS-IS route leaking enabled, the Level-1-2 router can advertise the routing information of other Level-1
areas and Level-2 area routing information to Level-1 routers.
To configure IS-IS route leaking:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer