Huawei S6700 Series Configuration Manual page 404

S6700 Series Ethernet Switches
Configuration Guide - IP Routing
l
l
l
l
l
l
Procedure
l
l
Issue 01 (2012-03-15)
Access Control List(ACL)
IP-Prefix List
AS_Path filter
Community filter
Extcommunity filter
Route-Policy
Configure an ACL.
An ACL is a series of sequential rules composed of permit and deny clauses. These rules
are described based on source addresses, destination addresses, and port numbers of
packets. ACL rules are used to classify packets. After ACL rules are applied to a device,
the device permits or denies packets based on the ACL rules.
For details on ACL configurations, see the S6700 Series Ethernet Switches Configuration
Guide - IP Services.
An ACL can be used as a matching condition of a route-policy or used in the filter-
policy { acl-number | acl-name acl-name } export [ protocol [ process-id ] ] command or
the peer { group-name | ipv4-address } filter-policy { acl-number | acl-name acl-name }
export command.
Configure an IP prefix list.
An IP prefix list is a type of filter used to filter routes based on destination addresses. An
IP prefix list is identified by its name. An IP prefix list can be used flexibly to implement
accurate filtering. For example, it can be used to filter a route or routes to a network segment.
If a large number of routes that do not have the same prefix need to be filtered, configuring
an IP prefix list to filter the routes is very complex.
An IP prefix list can be used as a matching condition of a route-policy or used in the filter-
policy ip-prefix ip-prefix-name export [ protocol [ process-id ] ] command or the peer
{ group-name | ipv4-address } ip-prefix ip-prefix-name export command.
Perform the following steps on a BGP switch:
1. Run:
system-view
The system view is displayed.
2. Run:
ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } ip-
address mask-length [ greater-equal greater-equal-value ] [ less-equal
less-equal-value ]
An IPv4 prefix list is configured.
The mask length range can be specified as mask-length <= greater-equal-value <=
less-equal-value <= 32. If only greater-equal is specified, the prefix range is [greater-
equal-value, 32]. If only less-equal is specified, the prefix range is [mask-length, less-
equal-value].
An IPv4 prefix list is identified by its name, and each IP prefix list can contain multiple
entries. Each entry is identified by an index number, and can specify a matching range
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 BGP Configuration
385