Creating a Match List for Filter Policies
IP filter policies support usage of match lists as a single match criteria. To create a match list you
must:
•
•
•
Optionally a description can also be defined.
The following displays an IPv4 address prefix list configuration example and usage in an IP filter
policy:
*A:ala-48>config>filter# info
----------------------------------------------
match-list
exit
ip-filter 10
exit
---------------------------------------------
7450 ESS OS Router Configuration Guide
Specify a type of a match list (IPv4 address prefix for example).
Define a unique match list name (IPv4PrefixBlacklist for example).
Specify at least one list argument (a valid IPv4 address prefix for example).
ip-prefix-list "IPv4PrefixBlacklist"
description "default IPv4 prefix blacklist"
prefix 10.0.0.0/21
prefix 10.254.0.0/24
exit
scope template
filter-name "IPv4PrefixBlacklistFilter"
entry 10
match
src-ip ip-prefix-list IPv4PrefixBlacklist
exit
action drop
exit
Filter Policies
Page 383