HP FlexNetwork 3600 v2 Series Command Reference Manual page 106

View
OSPF view
Default level
2: System level
Parameters
acl-number: Number of an ACL used to filter incoming routes, in the range of 2000 to 3999.
gateway ip-prefix-name: Name of an IP address prefix list used to filter routes received from specific
neighbors. It is a string of up to 19 characters. For more information about IP prefix lists, see Layer
3—IP Routing Configuration Guide.
ip-prefix ip-prefix-name: Name of an IP address prefix list used to filter incoming routes based on
destination IP address. It is a string of up to 19 characters. For more information about IP prefix lists,
see Layer 3—IP Routing Configuration Guide.
route-policy route-policy-name: Name of a routing policy used to filter incoming routes based on
routing policy, a string of up to 63 case-sensitive characters. For more information about routing
policy, see Layer 3—IP Routing Configuration Guide.
Description
Use filter-policy import to configure the filtering of routes calculated from received LSAs.
Use undo filter-policy import to disable the filtering.
By default, the filtering is not configured.
If you want to reference an advanced ACL (with a number from 3000 to 3999) in the command or in
the routing policy, the ACL should be configured with the rule [ rule-id ] { deny | permit } ip source
sour-addr sour-wildcard command to deny/permit a route with the specified destination, or with the
rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard destination dest-addr
dest-wildcard command to deny/permit a route with the specified destination and mask. The source
keyword specifies the destination address of a route and the destination keyword specifies the
subnet mask of the route (the subnet mask must be valid; otherwise, the configuration is ineffective).
Examples
# Filter incoming routes using ACL 2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule deny source 192.168.10.0 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] ospf 100
[Sysname-ospf-100] filter-policy 2000 import
# Configure ACL 3000 to permit only route 113.0.0.0/16 to pass, and reference ACL 3000 to filter
incoming routes.
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule 10 permit ip source 113.0.0.0 0 destination 255.255.0.0 0
[Sysname-acl-adv-3000] rule 100 deny ip
[Sysname-acl-adv-3000] quit
[Sysname] ospf 100
[Sysname-ospf-100] filter-policy 3000 import
94