F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

929
1039BConfiguring an IP prefix list
1864BConfiguring an IPv4 prefix list
Ste
p
Command Remarks
1579. Enter system
view.
system-view N/A
1580. Configure an
IPv4 prefix list.
ip ip-prefix ip-prefix-name [ index index-number ] { deny |
permit } ip-address mask-length [ greater-equal
min-mask-length ] [ less-equal max-mask-length ]
Not configured by
default.
If all the items are set to deny mode, no routes can pass the IPv4 prefix list. Configure the permit 0.0.0.0
0 less-equal 32 item following multiple deny items to allow other IPv4 routing information to pass.
For example, the following configuration filters routes 10.1.0.0/16, 10.2.0.0/16, and 10.3.0.0/16, but
allows other routes to pass.
<Sysname> system-view
[Sysname] ip ip-prefix abc index 10 deny 10.1.0.0 16
[Sysname] ip ip-prefix abc index 20 deny 10.2.0.0 16
[Sysname] ip ip-prefix abc index 30 deny 10.3.0.0 16
[Sysname] ip ip-prefix abc index 40 permit 0.0.0.0 0 less-equal 32
1865BConfiguring an IPv6 prefix list
Ste
p
Command Remarks
1581. Enter system
view.
system-view N/A
1582. Configure an
IPv6 prefix list.
ip ipv6-prefix ipv6-prefix-name [ index index-number ] { deny
| permit } ipv6-address prefix-length [ greater-equal
min-prefix-length ] [ less-equal max-prefix-length ]
Not configured by
default.
If all items are set to deny mode, no routes can pass the IPv6 prefix list. Configure the permit :: 0
less-equal 128 item following multiple deny items to allow other IPv6 routing information to pass.
For example, the following configuration filters routes 2000:1::/48, 2000:2::/48, and 2000:3::/48,
but allows other routes to pass.
<Sysname> system-view
[Sysname] ip ipv6-prefix abc index 10 deny 2000:1:: 48
[Sysname] ip ipv6-prefix abc index 20 deny 2000:2:: 48
[Sysname] ip ipv6-prefix abc index 30 deny 2000:3:: 16
[Sysname] ip ipv6-prefix abc index 40 permit :: 0 less-equal 128
1040BConfiguring an AS path list
The following matrix shows the feature and hardware compatibility:
Hardware Feature com
p
atible
F1000-A-EI/F1000-S-EI Yes