rule with a larger number in the same ACL and specify the action
permit
in this rule
to receive or advertise the other routes.
Route filtering using a whitelist: Configure a rule with a smaller number and specify
the action
permit
in this rule to permit the routes to be received or advertised by the
system. Then, configure another rule with a larger number in the same ACL and
specify the action
deny
in this rule to filter out unwanted routes.
l
Based on the advanced ACL:
1.
Run
filter-policy
acl-name
acl-name
import
[
interface-type
interface-number
], the
filtering policy is configured for routes received by RIP.
2.
Run
quit
, return to the system view.
3.
Run
acl
name
acl-name
advance
[
number
acl-number2
] [
match-order
{
auto
|
config
} ], the basic ACL view is displayed.
4.
Run
rule
[
rule-id
] {
deny
|
permit
}
protocol
[
source
{
source-ip-address source-
wildcard
|
any
} |
time-range
time-name
]
*
, a rule is configured for the basic ACL.
When a filtering policy of a routing protocol is used to filter routes:
–
If the action specified in an ACL rule is
permit
, a route that matches the rule will
be received or advertised by the system.
–
If the action specified in an ACL rule is
deny
, a route that matches the rule will not
be received or advertised by the system.
–
If a route has not matched any ACL rules, the route will not be received or advertised
by the system.
–
If an ACL does not contain any rules, all routes matching the
route-policy
that
references the ACL will not be received or advertised by the system.
–
If the ACL referenced by the
route-policy
does not exist, all routes matching the
route-policy
will be received or advertised by the system.
–
In the configuration order, the system first matches a route with a rule that has a
smaller number and then matches the route with a rule with a larger number. Routes
can be filtered using a blacklist or a whitelist:
Route filtering using a blacklist: Configure a rule with a smaller number and specify
the action
deny
in this rule to filter out the unwanted routes. Then, configure another
rule with a larger number in the same ACL and specify the action
permit
in this rule
to receive or advertise the other routes.
Route filtering using a whitelist: Configure a rule with a smaller number and specify
the action
permit
in this rule to permit the routes to be received or advertised by the
system. Then, configure another rule with a larger number in the same ACL and
specify the action
deny
in this rule to filter out unwanted routes.
l
Based on the IP prefix:
filter-policy
gateway
ip-prefix-name
import
l
Based on the IP prefix:
filter-policy
ip-prefix
ip-prefix-name
[
gateway
ip-prefix-name
]
import
[
interface-type
interface-number
]
The
filter-policy
is configured in the RIP process. If routes are filtered based on an interface,
you can configure only one route-policy based on the interface at a time. If no interface is
specified, the system considers the configured route-policy as the global route-policy, and you
can configure only one route-policy at a time. If the route-policy is configured repeatedly, the
new route-policy will replace the old route-policy.
----End
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
10 Routing Policy Configuration
Issue 02 (2014-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1224
