For details on ACL configurations, see the
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Services
.
An ACL can be used as a matching condition of a route-policy or used in the
filter-
policy
{
acl-number
|
acl-name
acl-name
}
export
[
protocol
[
process-id
] ] command or
the
peer
{
group-name
|
ipv4-address
}
filter-policy
{
acl-number
|
acl-name
acl-name
}
export
command.
l
Configure an IP prefix list.
An IP prefix list is a type of filter used to filter routes based on destination addresses. An
IP prefix list is identified by its name. An IP prefix list can be used flexibly to implement
accurate filtering. For example, it can be used to filter a route or routes to a network segment.
If a large number of routes that do not have the same prefix need to be filtered, configuring
an IP prefix list to filter the routes is very complex.
An IP prefix list can be used as a matching condition of a route-policy or used in the
filter-
policy
ip-prefix ip-prefix-name
export
[
protocol
[
process-id
] ] command or the
peer
{
group-name
|
ipv4-address
}
ip-prefix
ip-prefix-name
export
command.
1.
Run:
system-view
The system view is displayed.
2.
Run:
ip ip-prefix
ip-prefix-name
[
index
index-number
] {
permit
|
deny
}
ip-
address
mask-length
[
match-network
] [
greater-equal
greater-equal-
value
] [
less-equal
less-equal-value
]
An IPv4 prefix list is configured.
match-network
is used to filter routes to a specified IP address and can be configured
only when
ipv4-address
is 0.0.0.0. For example, the
ip ip-prefix prefix1 permit
0.0.0.0 8
command filters all routes with mask length 8, while the
ip ip-prefix prefix1
permit 0.0.0.0 8 match-network
command filters all routes to the IP address range
from 0.0.0.1 to 0.255.255.255.
The mask length range can be specified as
mask-length
<=
greater-equal-value
<=
less-equal-value
<= 32. If only
greater-equal
is specified, the prefix range is [
greater-
equal-value
, 32]. If only
less-equal
is specified, the prefix range is [
mask-length
,
less-
equal-value
].
An IPv4 prefix list is identified by its name, and each IP prefix list can contain multiple
entries. Each entry is identified by an index number, and can specify a matching range
in the form of a network prefix uniquely. An IPv4 prefix list named
abcd
is used as
an example.
#
ip ip-prefix abcd index 10 permit 1.0.0.0 8
ip ip-prefix abcd index 20 permit 2.0.0.0 8
During route matching, the system checks the entries by index number in ascending
order. If a route matches an entry, the route will not be matched with the next entry.
The NE80E/40E denies all unmatched routes by default. If all entries in an IPv4 prefix
list are in deny mode, all routes will be denied by the IPv4 prefix list. In this case, you
must define an entry
permit 0.0.0.0 0 less-equal 32
after the entries in deny mode to
allow all the other IPv4 routes to by permitted by the IPv4 prefix list.
HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
8 BGP Configuration
Issue 02 (2014-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
777
