Manualshelf

R3166-R3206-HP High-End Firewalls Network Management Command Reference-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module
211212213214215216217218219220
Table Of Contents
202
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule 10 permit ip source 113.0.0.0 0 destination 255.255.0.0 0
[Sysname-acl-adv-3000] rule 100 deny ip
[Sysname-acl-adv-3000] quit
[Sysname] rip 1
[Sysname-rip 1] filter-policy 3000 export
filter-policy import (RIP view)
Syntax
filter-policy { acl-number | gateway ip-prefix-name | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] }
import [ interface-type interface-number ]
undo filter-policy import [ interface-type interface-number ]
View
RIP view
Default level
2: System level
Parameters
acl-number: Number of the ACL used for filtering incoming routes, in the range of 2000 to 3999.
ip-prefix ip-prefix-name: References an IP prefix list to filter incoming routes. The ip-prefix-name is a string
of 1 to 19 characters.
gateway ip-prefix-name: References an IP prefix list to filter routes from the gateway. ip-prefix-name is a
string of 1 to 19 characters.
interface-type interface-number: Specifies an interface by its interface type and interface number.
Description
Use the filter-policy import command to configure RIP to filter the incoming routes.
Use the undo filter-policy import command to restore the default.
By default, RIP does not filter incoming routes.
NOTE:
If you want to reference an advanced ACL (with a number from 3000 to 3999) in the command, the ACL
should be configured with the rule [
rule-id
] { deny | permit } ip source
sour-addr sour-wildcard
command to deny/permit a route with the specified destination, or with the rule [
rule-id
] { deny |
permit } ip source
sour-addr sour-wildcard
destination
dest-addr dest-wildcard
command to
deny/permit a route with the specified destination and mask. The source keyword specifies the destination
address of a route while the destination keyword specifies the subnet mask of the route (the subnet mask
must be valid; otherwise, the configuration is ineffective).
Related commands: acl and ip ip-prefix.
Examples
# Reference ACL 2000 to filter incoming routes.
<Sysname> system-view