Fortinet FortiGate 1000A, Руководство администратора

Страница: 170 / 412

170
01-28011-0254-20051115 Fortinet Inc.
Router objects Router
Prefix list
A prefix list is an enhanced version of an access list that allows you to control the
length of the prefix netmask.
Each rule in a prefix list consists of a prefix (IP address and netmask), the action to
take for this prefix (permit or deny), and maximum and minimum prefix length settings.
The FortiGate unit attempts to match a packet against the rules in a prefix list starting
at the top of the list. If it finds a match for the prefix, it takes the action specified for that
prefix. If no match is found the default action is deny.
For a prefix list to take effect it must be called by another FortiGate routing feature
such as RIP or OSPF.
Figure 76: Prefix list
New Prefix list
Figure 77: Prefix list name configuration
To add a prefix list name
1 Go to Router > Router Objects > Prefix List .
2 Select Create New.
3 Enter a name for the prefix list.
4 Select OK.
Create New Add a new prefix list name. An access list and a prefix list cannot have
the same name.
Name The prefix list name.
Action The action to take for the prefix in a prefix list entry.
Prefix The prefix in a prefix list entry.
GE The greater than or equal to number.
LE The less than or equal to number.
Delete, Add prefix-
list entry, and Edit
icons Delete, add, or edit a prefix list.