Extreme Networks ExtremeWare XOS Guide Manual page 192

Policies and ACLs
Often a policy will have a rule entry at the end of the policy with no match conditions. This entry will
match anything not otherwise processed, so that user can specify an action to override the default deny
action.
The next sections list detailed information about policy match conditions, about matching BGP AS
paths, and about action statements. For information on those subjects, see the following sections:
Policy Match Conditions on page 192
●
Autonomous system expressions on page 193
●
Policy Action Statements on page 194
●
Policy Match Type
There are two possible choices for the match type:
match all—All the match conditions must be true for a match to occur. This is the default.
●
match any—If any match condition is true, then a match occurs.
●
Policy Match Conditions
Table 26 lists the possible policy entry match conditions.
Table 26: Policy match conditions
Match Condition
as-path [<as-number> | <as-path-regular-
expression>];
community [no-advertise | no-export | no-export-
subconfed | number <community_num> |
<community_regular_expression> |
<as_num> : <num>];
med <number>;
next-hop [<ipaddress> | <ipaddress-regular-
expression>];
nlri [<ipaddress> | any]/<mask-length> {exact};
nlri [<ipaddress> | any] mask <mask> {exact};
origin [igp | egp | incomplete];
tag <number>;
ExtremeWare XOS 11.1 Concepts Guide
Description
Where <as-number> is a valid Autonomous system number
in the range [1 - 65535].
Where <as-path-regular-expression> is a multi-character
regular expression (with 2-byte unsigned Integer being an
Atom). Regular expression will consist of the AS-Numbers
and various regular expression symbols. Regular
expressions must be enclosed in double quotes ("").
Where no-advertise, no-export and no-export-subconfed are
the standard communities defined by RFC.
<community_num> is a four byte unsigned integer,
<as_num> is a two byte AS-Number and <num> is the 2-
bytes community number.
Community regular expression is a multi-character regular
expression (with four byte unsigned integer being an
Atom). Regular expression is enclosed in double quotes
("").
Where <number> is a 4-byte unsigned integer.
Where <ipaddress> is a valid IP address in dotted decimal
format.
Where <ipaddress> and <mask> are in dotted decimal
format, <mask-length> is an integer in the range [0 - 32],
and keyword any matches any IP address with a given (or
larger) mask/mask-length.
Where igp, egp and incomplete are the Border Gateway
Protocol (BGP) route origin values.
Where <number> is a 4-byte unsigned number.
192