ELTEX ESR-10, Руководство пользователя

Страница: 141 / 440

ESR service routers. ESR-Series. Functionality description. Version 1.12.0
141
•
•
•
•
Step Description Command Keys
3.1.2 Create rule (config-route-map)#
rule <ORDER> <ORDER> – rule number, takes
values of [1..10000].
3.1.3 Define the list of subnets affected by
the rule. esr(config-route-map-
rule)#match ip address
{ <ADDR/LEN> |
object-group <OBJ-GRP-
NETNAME> }
[ { eq <LEN> | le
<LEN> | ge <LEN 1>
[ le <LEN 2> ] } ]
<ADDR/LEN> – IP address and
subnet mask, in the format of:
AAA.BBB.CCC.DDD/EE – network IP
address with prefix mask, where
AAA-DDD take values of [0..255]
and EE takes values of [1..32];
<IPV6-ADDR/LEN> – IPv6 address
and subnet mask, in the format of:
X:X:X:X::X/EE, where each X part
takes values in hexadecimal format
[0..FFFF] and EE takes values of
[1..128];
<OBJ-GRP-NETNAME> – IP
addresses profile name, set by the
string of up to 31 characters*;
<LEN>, <LEN 1>, <LEN 2> – prefix
length, may take values [1..32] in
prefix IP lists for IPv4 and [1..128]
for IPv6;
eq – when specifying the
command, the prefix length
mast match the specified
one;
le – when specifying the
command, the prefix length
mast be less than or match
the specified one;
ge – when specifying the
command, the prefix length
mast be more than or match
the specified one;
ge <LEN 1> le <LEN 2> –
When specifying a command,
the prefix length must be
greater than or equal to
<LEN> but less than or equal
to <LEN1>.
* When using object-group filtering,
they must be created in advance.
esr(config-route-map-
rule)#match ipv6
address
{ <IPV6-ADDR/LEN> |
object-group <OBJ-GRP-
NETNAME> }
[ { eq <LEN> | le
<LEN> | ge <LEN 1>
[ le <LEN 2> ] } ]
3.1.4 Permit or deny action for the
specified subnets in the rule. esr(config-route-map-
rule)# action {deny |
permit}