HP 6125G HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Routing Comma - Page 171

If no routing protocol is specified, all outgoing routes are filtered. By default, no route filtering is configured. If you want to reference an advanced ACL (with a number from 3000 to 3999) in the command, the ACL should be configured with the rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard command to deny/permit a route with the specified destination, or with the rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard destination dest-addr dest-wildcard command to deny/permit a route with the specified destination and mask. The source keyword specifies the destination address of a route and the destination keyword specifies the subnet mask of the route (the subnet mask must be valid; otherwise, the configuration is ineffective). Examples # In BGP view, reference ACL 2000 to filter all outgoing routes. system-view [Sysname] bgp 100 [Sysname-bgp] filter-policy 2000 export # In BGP-VPN instance view, reference ACL 2000 to filter all outgoing routes. (The VPN has been created.) system-view [Sysname] bgp 100 [Sysname-bgp] ipv4-family vpn-instance vpn1 [Sysname-bgp-ipv4-vpn1] filter-policy 2000 export # Configure ACL 3000 to permit only route 113.0.0.0/16 to pass, and reference ACL 3000 to filter outgoing routes. system-view [Sysname] acl number 3000 [Sysname-acl-adv-3000] rule 10 permit ip source 113.0.0.0 0 destination 255.255.0.0 0 [Sysname-acl-adv-3000] rule 100 deny ip [Sysname-acl-adv-3000] quit [Sysname] bgp 100 [Sysname-bgp] filter-policy 3000 export filter-policy import (BGP/BGP-VPN instance view) Syntax filter-policy { acl-number | ip-prefix ip-prefix-name } import View undo filter-policy import BGP view, BGP-VPN instance view Default level 2: System level Parameters acl-number: Number of an ACL used to filter incoming routing information, ranging from 2000 to 3999. ip-prefix-name: Name of an IP prefix list used to filter incoming routing information, a string of 1 to 19 characters. 160