HP VPN Firewall Appliances Network Management Configuration Guide

814
Configuring inbound route filtering
Only routes passing the configured filtering can be added into the local IPv6 BGP routing table.
Members of a peer group can have different inbound route filtering policies.
To configure inbound route filtering:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter BGP view.
bgp as-number N/A
3. Enter IPv6 address family view
or IPv6 BGP-VPN instance
view.
ipv6-family [ vpn-instance
vpn-instance-name ]
N/A
4. Configure inbound route
filtering.
filter-policy { acl6-number |
ipv6-prefix ipv6-prefix-name }
import
Not configured by default.
5. Apply a routing policy to
routes from an IPv6 peer or
peer group.
peer { ipv6-group-name |
ipv6-address } route-policy
route-policy-name import
Not applied by default.
The IPv6 BGP-VPN instance view
does not support the
ipv6-group-name argument.
6. Specify an ACL to filter routes
imported from an IPv6 peer or
peer group.
peer { ipv6-group-name |
ipv6-address } filter-policy
acl6-number import
Not specified by default.
The IPv6 BGP-VPN instance view
does not support this command.
7. Specify an AS path list to filter
routing information imported
from an IPv6 peer or peer
group.
peer { ipv6-group-name |
ipv6-address } as-path-acl
as-path-acl-number import
Not specified by default.
The IPv6 BGP-VPN instance view
does not support this command.
8. Specify an IPv6 prefix list to
filter routing information
imported from an IPv6 peer or
peer group.
peer { ipv6-group-name |
ipv6-address } ipv6-prefix
ipv6-prefix-name import
Not specified by default.
The IPv6 BGP-VPN instance view
does not support this command.
9. Specify the upper limit of
prefixes allowed to receive
from an IPv6 peer or peer
group.
peer { ipv6-group-name |
ipv6-address } route-limit limit
[ percentage ]
Optional.
Unlimited by default.
The IPv6 BGP-VPN instance view
does not support this command.
Configuring IPv6 BGP and IGP route synchronization
By default, upon receiving an IBGP route, an IPv6 BGP router checks the route's next hop. If the next hop
is reachable, the IPv6 BGP router advertises the route to EBGP peers. If the synchronization feature is
configured, in addition to the reachability check of the next hop, the IPv6 BGP router must find an active
IGP route with the same destination network segment before it can advertise the IBGP route (use the
display ipv6 routing-table protocol command to check the IGP route state).
To configure IPv6 BGP and IGP route synchronization: