400
Predefined user roles
network-admin
Parameters
acl6-number
: Specifies an IPv6 ACL by its number in the range of 2000 to 3999 to filter redistributed
routes.
prefix-list
prefix-list-name
: Specifies an IPv6 prefix list by its name, a case-sensitive string of 1 to 63
characters, to filter the redistributed routes.
route-policy
route-policy-name
: Specifies a routing policy by its name, a case-sensitive string of 1 to 63
characters, to filter redistributed routes.
protocol
: Filters routes redistributed from the specified routing protocol, which can be
bgp4+
,
direct
,
isisv6
,
ospfv3
,
ripng
, or
static
. If no protocol is specified, the command filters routes redistributed from all
routing protocols.
process-id
: Specifies a process by its ID in the range of 1 to 65535. This argument is available only when
the protocol is
isisv6
,
ospfv3
, or
ripng
.
Usage guidelines
This command filters routes redistributed by the
ipv6 import-route
command. Only routes that have not
been filtered can be redistributed.
If no protocol is specified, the command filters routes redistributed from all routing protocols.
If a protocol is specified, the command filters routes redistributed from the specified routing protocol.
To reference an advanced ACL (with a number from 3000 to 3999) in the command or in the routing
policy, configure the ACL using one of the following methods:
•
To deny/permit a route with the specified destination, use the
rule
[
rule-id
] {
deny
|
permit
}
ipv6
source
sour sour-prefix
command.
•
To deny/permit a route with the specified destination and prefix, use the
rule
[
rule-id
] {
deny
|
permit
}
ipv6 source
sour sour-prefix
destination
dest dest-prefix
command.
The
source
keyword specifies the destination address of a route and the
destination
keyword specifies the
prefix of the route. The specified prefix must be valid. Otherwise, the configuration does not take effect.
Examples
# Use IPv6 ACL 2006 to filter redistributed routes.
<Sysname> system-view
[Sysname] isis 1
[Sysname-isis-1] ipv6 filter-policy 2006 export
# Configure IPv6 ACL 3000 to permit only route 2001::1/128 to pass. Use the ACL to filter redistributed
routes.
<Sysname> system-view
[Sysname] acl ipv6 number 3000
[Sysname-acl6-adv-3000] rule 10 permit ipv6 source 2001::1 128 destination
ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 128
[Sysname-acl6-adv-3000] rule 100 deny ipv6
[Sysname-acl6-adv-3000] quit
[Sysname] isis 1
[Sysname-isis-1] ipv6 filter-policy 3000 export