Configuring Inbound Mbgp Route Filtering - HP A5500 SI Switch Series Configuration Manual

To do...
Reference an ACL to filter
advertisements to an IPv4 MBGP
peer/peer group
Reference an AS path ACL to filter
route advertisements to an IPv4
MBGP peer/peer group
Reference an IP prefix list to filter
route advertisements to an IPv4
MBGP peer/peer group

Configuring inbound MBGP route filtering

MBGP route reception filtering policies can filter out unqualified routes from an MBGP peer or peer
group.
If several filtering policies are configured, they are applied in the following sequence:
filter-policy import
•
peer filter-policy import
•
peer as-path-acl import
•
peer ip-prefix import
•
peer route-policy import
•
Only the routes that have passed all the configured policies can be advertised.
Follow these steps to configure MBGP route reception filtering policies:
To do...
Enter system view
Enter BGP view
Enter IPv4 MBGP address family
view
Filter incoming routes using an
ACL or IP prefix list
Reference a routing policy to
routes from an IPv4 MBGP
peer/peer group
Reference an ACL to filter routing
information from an IPv4 MBGP
peer/peer group
Reference an AS path ACL to filter
routing information from an IPv4
MBGP peer/peer group
Reference an IP prefix list to filter
routing information from an IPv4
MBGP peer/peer group
Use the command...
peer { group-name | ip-address }
filter-policy acl-number export
peer { group-name | ip-address }
as-path-acl as-path-acl-number
export
peer { group-name | ip-address }
ip-prefix ip-prefix-name export
Use the command...
system-view
bgp as-number
ipv4-family multicast
filter-policy { acl-number | ip-
prefix ip-prefix-name } import
peer { group-name | ip-address }
route-policy policy-name import
peer { group-name | ip-address }
filter-policy acl-number import
peer { group-name | ip-address }
as-path-acl as-path-acl-number
import
peer { group-name | ip-address }
ip-prefix ip-prefix-name import
225
Remarks
Remarks
—
—
—
At least one of these approaches
is required.
No inbound route filtering is
configured by default.