Use
undo enable ipsec-policy
to remove the IPsec policy from the OSPFv3 area.
By default, no IPsec policy is applied in an area.
The IPsec policy to be applied must have been configured.
Examples
# Apply IPsec policy
policy001
to OSPFv3 area 0.
<Sysname> system-view
[Sysname] ospfv3 1
[Sysname-ospfv3-1] area 0
[Sysname-ospfv3-1-area-0.0.0.0] enable ipsec-policy policy001
filter-policy export (OSPFv3 view)
Syntax
filter-policy
{
acl6-number
|
ipv6-prefix
ipv6-prefix-name
}
export
[
bgp4+
|
direct
|
isisv6
process-id
|
ospfv3 process-id
|
ripng process-id
|
static
]
undo filter-policy export
[
bgp4+
|
direct
|
isisv6 process-id
|
ospfv3 process-id
|
ripng process-id
|
static
]
View
OSPFv3 view
Default level
2: System level
Parameters
acl6-number
: Specifies the ACL6 number, ranging from 2000 to 3999.
ipv6-prefix
ipv6-prefix-name
: Specifies the name of an IPv6 prefix list, a string of up to 19
characters.
bgp4+
: Filters IPv6 BGP routes.
direct
: Filters direct routes.
isisv6 process-id
: Specifies to filter the routes of an IPv6 IS-IS process, which is in the range of 1 to
65535.
ospfv3 process-id
: Specifies to filter the routes of an OSPFv3 process, which is in the range of 1 to
65535.
ripng process-id
: Specifies to filter the routes of a RIPng process, which is in the range of 1 to 65535.
static
: Specifies to filter static routes.
Description
Use
filter-policy export
to filter redistributed routes.
Use
undo filter-policy export
to remove the configuration.
By default, IPv6 OSPFv3 does not filter redistributed routes.
If no protocol is specified, all redistributed routes will be filtered.
If you want to reference an advanced ACL (with a number from 3000 to 3999) in the command, the
ACL should be configured with the
rule
[
rule-id
] {
deny
|
permit
}
ipv6 source
sour sour-prefix
command to deny/permit a route with the specified destination, or with the
rule
[
rule-id
] {
deny
|
permit
}
ipv6 source
sour sour-prefix
destination
dest dest-prefix
command to deny/permit a route
with the specified destination and prefix. The
source
keyword specifies the destination address of a
310