Defining a community list, Configuring a routing policy, Configuration prerequisites – H3C Technologies H3C SecPath F1000-E User Manual
Page 946: Configuration guidelines
921
Defining a community list
You can define multiple items for a community list that is identified by number. During matching, the
relation between items is logic OR. If routing information matches one of these items, it passes the
community list.
To define a community list:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Define a
community list.
•
Define a basic community list:
ip community-list { basic-comm-list-num | basic
comm-list-name } { deny | permit }
[ community-number-list ] [ internet | no-advertise |
no-export | no-export-subconfed ] *
•
Define an advanced community list:
ip community-list { adv-comm-list-num | advanced
comm-list-name } { deny | permit } regular-expression
Use either approach.
Not defined by
default.
Configuring a routing policy
A routing policy is used to filter routing information, and modify attributes of matching routing
information. The match criteria of a routing policy can be configured by referencing the appropriate
filters.
A routing policy can comprise multiple nodes, and each routing policy node contains:
•
if-match clauses—Define the match criteria that routing information must satisfy. The matching
objects are some attributes of routing information.
•
apply clauses—Specify the actions to be taken on routing information that has satisfied the match
criteria, such as route attribute modification.
•
continue clauses—Specify the next routing policy node to be matched. With this clause configured,
when a route matches the current routing policy node, it continues to match against the specified
next node in the same routing policy.
Configuration prerequisites
Before configuring this task, you need to configure filters and routing protocols. You also need to decide
on name of the routing policy and node numbers, match criteria, and attributes to be modified.
Configuration guidelines
•
If a routing policy node has the permit keyword specified, routing information matching all the
if-match clauses of the node will be handled using the apply clauses of this node, without needing
to match against the next node. If routing information does not match the node, it will go to the next
node for a match.
•
If a routing policy node has the deny keyword specified, the apply clauses of the node will not be
executed. When routing information matches all the if-match clauses of the node, it cannot pass the
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer