Manualshelf

R3166-R3206-HP High-End Firewalls Network Management Command Reference-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module
261262263264265266267268269270
Table Of Contents
252
[Sysname-ospf-100] filter-policy 2000 export
# Configure ACL 3000 to permit only route 113.0.0.0/16 to pass, and reference ACL 3000 to filter
redistributed routes.
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule 10 permit ip source 113.0.0.0 0 destination 255.255.0.0 0
[Sysname-acl-adv-3000] rule 100 deny ip
[Sysname-acl-adv-3000] quit
[Sysname] ospf 100
[Sysname-ospf-100] filter-policy 3000 export
filter-policy import (OSPF view)
Syntax
filter-policy { acl-number [ gateway ip-prefix-name ] | gateway ip-prefix-name | ip-prefix ip-prefix-name
[ gateway ip-prefix-name ] | route-policy route-policy-name } import
undo filter-policy import
View
OSPF view
Default level
2: System level
Parameters
acl-number: Number of an ACL used to filter incoming routes, in the range 2000 to 3999.
gateway ip-prefix-name: Name of an IP address prefix list used to filter routes based on the next hop of
the routing information, a string of up to 19 characters.
ip-prefix ip-prefix-name: Name of an IP address prefix list used to filter incoming routes based on
destination IP address, a string of up to 19 characters.
route-policy route-policy-name: Name of a route policy used to filter incoming routes based on route
policy, a string of up to 19 characters.
Description
Use the filter-policy import command to configure the filtering of routes calculated from received LSAs.
Use the undo filter-policy import command to disable the filtering.
By default, the filtering is not configured.
NOTE:
If you want to reference an advanced ACL (with a number from 3000 to 3999) in the command or in the
route policy, the ACL should be configured with the rule [
rule-id
] { deny | permit } ip source
sour-add
r
sour-wildcard
command to deny/permit a route with the specified destination, or with the rule [
rule-id
]
{ deny | permit } ip source
sour-addr sour-wildcard
destination
dest-addr dest-wildcard
command to
deny/permit a route with the specified destination and mask. The source keyword specifies the destination
address of a route while the destination keyword specifies the subnet mask of the route (the subnet mask
must be valid; otherwise, the configuration is ineffective).