Manualshelf

R3166-R3206-HP High-End Firewalls Network Management Command Reference-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module
211212213214215216217218219220
Table Of Contents
201
Default level
2: System level
Parameters
acl-number: Number of an ACL used to filter outbound routes, in the range of 2000 to 3999.
ip-prefix ip-prefix-name: Name of an IP prefix list used to filter outbound routes, a string of 1 to 19
characters.
protocol: Filters outbound routes redistributed from a specified routing protocol, which can be bgp, direct,
ospf, rip, and static.
process-id: Process ID of the specified routing protocol, in the range of 1 to 65535. You must specify a
process ID when the routing protocol is rip or ospf.
interface-type interface-number: Specifies an interface.
Description
Use the filter-policy export command to configure the filtering of RIP outgoing routes. Only routes not
filtered out can be advertised.
Use the undo filter-policy export command to remove the filtering.
By default, RIP does not filter outbound routes.
If a protocol is specified, RIP filters only the routes redistributed from the specified routing protocol.
Otherwise, RIP filters all routes to be advertised.
If interface-type interface-number is specified, RIP filters only the routes advertised by the specified
interface. Otherwise, RIP filters routes advertised by all RIP interfaces.
NOTE:
If you want to reference an advanced ACL (with a number from 3000 to 3999) in the command, the ACL
should be configured with the rule [
rule-id
] { deny | permit } ip source
sour-addr sour-wildcard
command to deny/permit a route with the specified destination, or with the rule [
rule-id
] { deny |
permit } ip source
sour-addr sour-wildcard
destination
dest-addr dest-wildcard
command to
deny/permit a route with the specified destination and mask. The source keyword specifies the destination
address of a route while the destination keyword specifies the subnet mask of the route (the subnet mask
must be valid; otherwise, the configuration is ineffective).
Related commands: acl, import-route, and ip ip-prefix.
Examples
# Reference ACL 2000 to filter outbound routes.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit ip source 192.168.10.0 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] rip 1
[Sysname-rip-1] filter-policy 2000 export
# Reference IP prefix list abc to filter outbound routes on GigabitEthernet 0/0.
[Sysname-rip-1] filter-policy ip-prefix abc export gigabitethernet 0/0
# Configure ACL 3000 to permit only route 113.0.0.0/16 to pass, and reference ACL 3000 to filter
outbound routes.