438
Creating a routing policy
For a routing policy that has more than one node, configure at least one permit node. A route that does
not match any node cannot pass the routing policy. If all the nodes are in
deny
mode, no routes can pass
the routing policy.
To create a routing policy:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a routing policy and a node, and
enter routing policy node view.
route-policy
route-policy-name
{
deny
|
permit
}
node
node-number
By default, no routing policy
is created.
Configuring if-match clauses
You can either specify no
if-match
clauses or multiple
if-match
clauses for a routing policy node. If no
if-match
clause is specified for a permit node, all routes can pass the node. If no
if-match
clause is
specified for a deny node, no routes can pass the node.
The
if-match
clauses of a routing policy node have a logical AND relationship. A route must meet all
if-match
clauses before it can be executed by the
apply
clauses of the node. If an
if-match
command
exceeds the maximum length, multiple
if-match
clauses of the same type are generated. These clauses
have a logical OR relationship. A route only needs to meet one of them.
To configure
if-match
clauses:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter routing policy node view.
route-policy
route-policy-name
{
deny
|
permit
}
node
node-number
N/A
3.
Match routes whose destination,
next hop, or source address
matches an ACL or prefix list.
•
Match IPv4 routes whose
destination, next hop, or source
address matches an ACL or IPv4
prefix list:
if-match ip
{
address
|
next-hop
|
route-source
} {
acl
acl-number
|
prefix-list
prefix-list-name
}
•
Match IPv6 routes whose
destination, next hop, or source
address matches an ACL or IPv6
prefix list:
if-match ipv6
{
address
|
next-hop
|
route-source
} {
acl
acl6-number
|
prefix-list
prefix-list-name
}
By default, no ACL or prefix
list match criterion is
configured.
If the ACL used by an
if-match
clause does not exist or has
no rules, the clause is always
matched. If no rules of the
specified ACL are matched or
the match rules are inactive,
the clause is not matched.
The ACL specified in an
if-match
clause must be a
non-VPN ACL.
4.
Match BGP routes whose
AS_PATH attribute matches a
specified AS path list.
if-match as-path
as-path-number
&<1-32>
By default, no AS path match
criterion is configured.
