Ip prefix list, As-path list, Community list – H3C Technologies H3C SecPath F1000-E User Manual
Page 943: Routing policy
918
IP prefix list
IP prefix list involves IPv4 prefix list and IPv6 prefix list.
An IP prefix list is configured to match the destination address of routing information. You can use the
gateway option to allow only routing information from certain routers to be received. For gateway option
information, see Network Management Command Reference.
An IP prefix list, identified by name, can comprise multiple items. Each item, identified by an index
number, can specify a prefix range to match. An item with a smaller index number is matched first. If one
item is matched, the IP prefix list is passed, and the packet will not go to the next item.
AS-PATH list
An AS-PATH list, configured based on the BGP AS PATH attribute, can only be used to match BGP routing
information.
For more information about AS-PATH list, see "Configuring BGP."
Community list
A community list, configured based on the BGP community attribute, can only be used to match BGP
routing information.
For more information about community list, see "Configuring BGP."
Routing policy
A routing policy is used to match routing information and modify the attributes of permitted routes. It can
reference the filters to define its own match criteria.
A routing policy can comprise multiple nodes, which are in logic OR relationship. Each routing policy
node is a match unit, and a node with a smaller number is matched first. Once a node is matched, the
routing policy is passed and the packet will not go to the next node.
A routing policy node comprises a set of if-match, apply, and continue clauses.
•
The if-match clauses define the match criteria. The matching objects are some attributes of routing
information. The if-match clauses of a routing policy node is in a logical AND relationship. A
packet must match all the if-match clauses of the node to pass it.
•
The apply clauses of the node specify the actions to be taken on the permitted packets, such as
modifying a route attribute.
•
The continue clause specifies the next routing policy node to be matched. With this clause
configured, when a route matches the current routing policy node, it continues to match against the
specified next node in the same routing policy. The continue clause combines the if-match and
apply clauses of the two nodes to improve flexibility of the routing policy.
Follow these guidelines when you configure if-match, apply, and continue clauses:
•
If you want to implement route filtering only, you do not need to configure apply clauses.
•
If you do not configure any if-match clauses for a permit-mode node, the node permits all routes to
pass.
•
Configure a permit-mode node containing no if-match or apply clauses behind multiple deny-mode
nodes to allow unmatched routes to pass.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer