Juniper JUNOSE, Руководство по настройке

Страница: 121 / 738

host2(config-router)# exit
host2(config)# access-list 1 deny 10.16.22.0 0.254.255.255
access-list
■
Use to define an IP access list to permit or deny routes based on the prefix.
■
Each access list is a set of permit or deny conditions for routes based on matching
a route’s prefix.
■
Use the neighbor distribute-list command to apply the access list to routes
received from or forwarded to a neighbor.
■
Use the log keyword to log an Info event in the ipAccessList log whenever an
access-list rule is matched.
■
Use the no version to delete an IP access list or the specified entry in the access
list.
■
See access-list.
clear access-list
■
Use to clear IP access list counters.
■
Each access list has a counter for its entries.
■
Example
host1# clear access-list reject1
■
There is no no version.
■
See clear access-list.
neighbor distribute-list
■
Use to filter routes to selected prefixes as specified in an access list.
■
Using distribute lists is one of three ways to filter BGP advertisements. The other
ways are as follows:
■
Use AS-path filters with the ip as-path access-list and the neighbor filter-list
commands.
■
If you specify a BGP peer group by using the peerGroupName argument, all
the members of the peer group inherit the characteristic configured with
this command unless it is overridden for a specific peer. However, you cannot
configure a member of a peer group to override the inherited peer group
characteristic for outbound policy.
■
Use filters with route maps with the route-map and the neighbor route-map
commands.
■
New policy values are applied to all routes that are sent (outbound policy) or
received (inbound policy) after you issue the command.
To apply the new policy to routes that are already present in the BGP routing
table, you must use the
clear ip bgp command to perform a soft clear or hard
clear of the current BGP session.
Configuring BGP Routing Policy
■ 85
Chapter 1: Configuring BGP Routing