l
l
l
l
l
l
Procedure
l
Configure an ACL.
An ACL is a series of sequential rules composed of
permit
and
deny
clauses. These rules
are described based on source addresses, destination addresses, and port numbers of
packets. ACL rules are used to classify packets. After ACL rules are applied to a device,
the device permits or denies packets based on the ACL rules.
For details on ACL configurations, see the
S6700 Series Ethernet Switches Configuration
Guide - IP Services
.
An ACL can be used as a matching condition of a route-policy or used in the
filter-
policy
{
acl-number
|
acl-name
acl-name
}
export
[
protocol
[
process-id
] ] command or
the
peer
{
group-name
|
ipv4-address
}
filter-policy
{
acl-number
|
acl-name
acl-name
}
export
command.
l
Configure an IP prefix list.
An IP prefix list is a type of filter used to filter routes based on destination addresses. An
IP prefix list is identified by its name. An IP prefix list can be used flexibly to implement
accurate filtering. For example, it can be used to filter a route or routes to a network segment.
If a large number of routes that do not have the same prefix need to be filtered, configuring
an IP prefix list to filter the routes is very complex.
An IP prefix list can be used as a matching condition of a route-policy or used in the
filter-
policy
ip-prefix ip-prefix-name
export
[
protocol
[
process-id
] ] command or the
peer
{
group-name
|
ipv4-address
}
ip-prefix
ip-prefix-name
export
command.
Perform the following steps on a BGP switch:
1.
Run:
system-view
The system view is displayed.
2.
Run:
ip ip-prefix
ip-prefix-name
[
index
index-number
] {
permit
|
deny
}
ip-
address
mask-length
[
greater-equal
greater-equal-value
] [
less-equal
less-equal-value
]
An IPv4 prefix list is configured.
The mask length range can be specified as
mask-length
<=
greater-equal-value
<=
less-equal-value
<= 32. If only
greater-equal
is specified, the prefix range is [
greater-
equal-value
, 32]. If only
less-equal
is specified, the prefix range is [
mask-length
,
less-
equal-value
].
An IPv4 prefix list is identified by its name, and each IP prefix list can contain multiple
entries. Each entry is identified by an index number, and can specify a matching range
S6700 Series Ethernet Switches
Configuration Guide - IP Routing
7 BGP Configuration
Issue 01 (2012-03-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
385
