Motorola BSR 2000, Configuration And Management Manual

Page: 570 / 650

BSR 2000 Configuration and Management Guide Release 1.0
12-52 MGBI 526360-001-00 Rev. B
Handling Access Lists
An access list is a sequential collection of permit and deny conditions. The BSR tests
conditions one-by-one against conditions in an access list. The BSR supports the
following two types of access-lists:
■
IP access list
■
AS path access list
Configuring an Access List
Use the access-list command in Global Configuration mode to define an IP access list
entry:
MOT(config)#
access-list <
1-99
> { permit | deny } ip {<
A.B.C.D
> <
A.B.C.D
> |
any } {<
A.B.C.D
> <
A.B.C.D
> | any }
where:
1-99
is the standard access list number.
A.B.C.D
is the source IP address.
A.B.C.D
is the network wildcard bits of the source address.
A.B.C.D
is the destination IP address.
A.B.C.D
is the network wildcard bits of the destination address.
any is the abbreviation for 0.0.0.0 address and 255.255.255.255 wildcard to
match against any IP address.
Permit and deny conditions in an IP access list apply to IP addresses. Use the
neighbor distribute-list command to apply an access list to a BGP neighbor.
Example
This sample configuration
filters BGP updates from a BGP neighbor. The
following commands, executed in
Global Configuration mode, configure standard
Access List 4 by specifying its permit and deny conditions. Access list 4 prohibits the
propagation of networks specified in the deny statements (10.0.0.0, 162.15.0.0, and
180.10.0.0) and permits all others.
MOT(config)#access-list 4 deny 10.0.0.0 0.255.255.255
MOT(config)#access-list 4 deny 162.15.0.0 0.0.255.255
MOT(config)#access-list 4 deny 180.10.0.0 0.0.255.255