Configuring outbound route filtering, Configuring inbound route filtering – H3C Technologies H3C SecPath F1000-E User Manual
Page 816
791
NOTE:
With the peer default-route-advertise command executed, the local router advertises a default route with
itself as the next hop to the specified IPv6 peer/peer group, regardless of whether the default route is
available in the routing table.
Configuring outbound route filtering
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter BGP view.
bgp as-number
N/A
3.
Enter IPv6 address family view
or IPv6 BGP-VPN instance
view.
ipv6-family [ vpn-instance
vpn-instance-name ]
N/A
4.
Configure the filtering of
outgoing routes.
filter-policy { acl6-number | ipv6-prefix
ipv6-prefix-name } export [ protocol
process-id ]
Not configured by default.
5.
Apply a routing policy to
routes advertised to an IPv6
peer/peer group.
peer { ipv6-group-name | ipv6-address }
route-policy route-policy-name export
Not applied by default.
6.
Specify an IPv6 ACL to filter
routes advertised to an IPv6
peer/peer group.
peer { ipv6-group-name | ipv6-address }
filter-policy acl6-number export
Not specified by default.
7.
Specify an AS path ACL to
filter routes advertised to an
IPv6 peer/peer group.
peer { ipv6-group-name | ipv6-address }
as-path-acl as-path-acl-number export
Not specified by default.
8.
Specify an IPv6 prefix list to
filter routes advertised to an
IPv6 peer/peer group.
peer { ipv6-group-name | ipv6-address }
ipv6-prefix ipv6-prefix-name export
Not specified by default.
NOTE:
IPv6 BGP advertises routes passing the specified policy to peers. Using the
protocol argument can filter
only the routes redistributed from the specified protocol. If no
protocol is specified, IPv6 BGP filters all
routes to be advertised, including redistributed routes and routes imported with the network command.
Configuring inbound route filtering
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter BGP view.
bgp as-number
N/A
3.
Enter IPv6 address family view
or IPv6 BGP-VPN instance
view.
ipv6-family [ vpn-instance
vpn-instance-name ]
N/A
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer