To Do - 3Com MSR 50 Series Configuration Manual

994 C 60: R
HAPTER OUTING
n
n
P C
OLICY ONFIGURATION
To define an IPv4 prefix list, use the following commands:

To do...

Enter system view
Define an IPv4 prefix list ip ip-prefix ip-prefix-name [ index
If all items are set to the deny mode, no routes can pass the IPv4 prefix list.
Therefore, you need to define the permit 0.0.0.0 0 less-equal 32 item following
multiple deny mode items to allow other IPv4 routing information to pass.
For example, the following configuration filters routes 10.1.0.0/16, 10.2.0.0/16
and 10.3.0.0/16, but allows other routes to pass.
<Sysname> system-view
[Sysname] ip ipv6-prefix abc index 10 deny 10.1.0.0 16
[Sysname] ip ipv6-prefix abc index 20 deny 10.2.0.0 16
[Sysname] ip ipv6-prefix abc index 30 deny 10.3.0.0 16
[Sysname] ip ipv6-prefix abc index 40 permit 0.0.0.0 0 less-equal 32
Define an IPv6 prefix list
Identified by name, each IPv6 prefix list can comprise multiple items. Each item
specifies a matching address range in the form of network prefix, which is
identified by index number.
During matching, the system compares the route to each item in the ascending
order of index number. If one item is matched, the route passes the IP-prefix list,
without needing to match the next item.
To define an IPv6 prefix list, use the following commands:
To do...
Enter system view
Define an IPv6 prefix
list
If all items are set to the deny mode, no routes can pass the IPv6 prefix list.
Therefore, you need to define the permit :: 0 less-equal 128 item following
multiple deny mode items to allow other IPv6 routing information to pass.
For example, the following configuration filters routes 2000:1::/48, 2000:2::/48
and 2000:3::/48, but allows other routes to pass.
<Sysname> system-view
[Sysname] ip ip-prefix abc index 10 deny 2000:1:: 48
[Sysname] ip ip-prefix abc index 20 deny 2000:2:: 48
[Sysname] ip ip-prefix abc index 30 deny 2000:3:: 16
[Sysname] ip ip-prefix abc index 40 permit :: 0 less-equal 128
Use the command...
system-view
index-number ] { permit | deny } ip-address
mask-length [ greater-equal
min-mask-length ] [ less-equal
max-mask-length ]
Use the command...
system-view
ip ipv6-prefix ipv6-prefix-name [ index
index-number ] { deny | permit } ipv6-address
prefix-length [ greater-equal min-prefix-length ]
[ less-equal max-prefix-length ]
Remarks
-
Required
Not defined by
default
Remarks
-
Required
Not defined by
default