F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

928
An IP prefix list matches the destination address of routing information. You can use the gateway option
to receive routing information only from specifie routers. For gateway option information, see Network
Management Command Reference.
An IP prefix list, identified by name, can comprise multiple items. Each item, identified by an index
number, specifies a prefix range to match. An item with a smaller index number is matched first. A route
that matches one item matches the IP prefix list.
1860BAS path list
An AS path list matches the AS_PATH attribute of BGP routing information.
For more information about AS path list, see "Configuring BGP."
1861BCommunity list
A community list matches the COMMUNITY attribute of BGP routing information.
For more information about community list, see "Configuring BGP."
1862BExtended community list
An extended community list matches the extended community attribute (Route-Target for VPN and Source
of Origin) of BGP routing information.
1863BRouting policy
A routing policy can comprise multiple nodes, which are in a logical OR relationship. A node with a
smaller number is matched first. A route that matches one node matches the routing policy.
A node can comprise a set of if-match, apply, and continue clauses.
• The if-match clauses configure the match criteria that match the attributes of routing information. The
if-match clauses are in a logical AND relationship. A route must match all the if-match clauses to
match the node.
• The apply clauses specify the actions to be taken on permitted routes, such as modifying a route
attribute.
• The continue clause specifies the next node. A route that matches the current node must match the
specified next node in the same routing policy. The continue clause combines the if-match and
apply clauses of the two nodes to improve flexibility of the routing policy.
Follow these guidelines to configure if-match, apply, and continue clauses:
• If you only want to filter routes, do not configure apply clauses.
• If you do not configure any if-match clauses for a permit-mode node, the node will permit all routes.
• Configure a permit-mode node containing no if-match or apply clauses behind multiple deny-mode
nodes to allow unmatched routes to pass.
347B
Configuring filters
1038BConfiguration prerequisites
Determine the IP-prefix list name, matching address range, and community list number.