Creating An Acl To Act As A Rip Filter; Applying A Rip Filter - HP 7102dl - ProCurve Secure Router Configuration Manual

IP Routing—Configuring RIP, OSPF, BGP, and PBR
Configuring RIP

Creating an ACL to Act as a RIP Filter

To configure RIP route filtering, you must first create a standard ACL that
specifies which route you want to filter. To create the ACL, from the global
configuration mode context, enter:
Syntax: ip access-list standard <listname>
Replace <listname> with the name that you want to assign to the ACL.
You are moved to the standard ACL configuration mode context, from which
you specify the IP addresses for the destination of the routes that you want to
permit or deny. Enter commands in the following format:
Syntax: [permit | deny] <A.B.C.D> <wildcard bits>
Replace <A.B.C.D> with the IP address of the destination subnet. The wild-
card bits define which address bits to match and which address bits to ignore.
They should match the reverse of the subnet mask for destination subnet.
For example, the following two commands specify a route to a /24 network to
be denied and a route to a /16 network to be permitted.
ProCurve(config-std-nacl)# deny 10.1.3.0 0.0.0.255
ProCurve(config-std-nacl)# permit 10.1.0.0 0.0.255.255
Any route with a destination subnet within the range specified are permitted
or denied. For example, the permit statement above allows RIP to advertise
a route to 10.1.1.0 /24 and a route to 10.1.2.0 /24.
Because ACLs include an implicit deny any entry at the end, routes to all
networks not matched by the ACL are denied.

Applying a RIP Filter

After you finish adding permit and deny statements to the ACL, enter exit to
return to the global configuration mode context. To apply the ACL that you
configured, move to the RIP configuration mode context:
ProCurve(config)# router rip
ProCurve(config-rip)#
15-25