The basic ACL view is displayed.
4.
Run:
rule
[
rule-id
] {
deny
|
permit
}
protocol
[
source
{
source-ip-address
source-wildcard
|
any
} |
time-range
time-name
]
*
The rule for the advanced ACL is configured.
When a filtering policy of a routing protocol is used to filter routes:
–
If the action specified in an ACL rule is
permit
, a route that matches the rule will
be received or advertised by the system.
–
If the action specified in an ACL rule is
deny
, a route that matches the rule will not
be received or advertised by the system.
–
If a route has not matched any ACL rules, the route will not be received or advertised
by the system.
–
If an ACL does not contain any rules, all routes matching the
route-policy
that
references the ACL will not be received or advertised by the system.
–
If the ACL referenced by the
route-policy
does not exist, all routes matching the
route-policy
will be received or advertised by the system.
–
In the configuration order, the system first matches a route with a rule that has a
smaller number and then matches the route with a rule with a larger number. Routes
can be filtered using a blacklist or a whitelist:
Route filtering using a blacklist: Configure a rule with a smaller number and specify
the action
deny
in this rule to filter out the unwanted routes. Then, configure another
rule with a larger number in the same ACL and specify the action
permit
in this rule
to receive or advertise the other routes.
Route filtering using a whitelist: Configure a rule with a smaller number and specify
the action
permit
in this rule to permit the routes to be received or advertised by the
system. Then, configure another rule with a larger number in the same ACL and
specify the action
deny
in this rule to filter out unwanted routes.
l
Based on the IP prefix:
Run:
filter-policy
{
ip-prefix
ip-prefix-name
}
import
Routes received by OSPF are filtered.
l
Based on the Route-Policy:
Run:
filter-policy
{
route-policy
route-policy-name
[
secondary
] }
import
Routes received by OSPF are filtered.
OSPF is a dynamic routing protocol based on the link state, and routing information is carried
in LSAs. The
filter-policy
import
command cannot be used to filter the advertised and received
LSAs. Actually, this command is used to filter the routes calculated by OSPF. Only the routes
that meet the filtering conditions are added to the routing table.
----End
5.5.6 Configuring the router to Filter LSAs to Be Sent
Filtering the LSAs to be sent on the local router can prevent unnecessary LSA transmission.
This reduces the size of the LSDB on the neighboring router and speeds up network convergence.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
5 OSPF Configuration
Issue 02 (2014-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
300
