R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

899
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Define a community list.
• Define a basic community list:
ip community-list { basic-comm-list-num |
basic comm-list-name } { deny | permit }
[ community-number-list ] [ internet |
no-advertise | no-export |
no-export-subconfed ] *
• Define an advanced community list:
ip community-list { adv-comm-list-num |
advanced comm-list-name } { deny | permit }
regular-expression
Use either approach.
Not defined by
default.
Configuring a routing policy
A routing policy is used to filter routing information, and modify attributes of matching routing
information. The match criteria of a routing policy can be configured by referencing the appropriate
filters.
A routing policy can comprise multiple nodes, and each routing policy node contains:
• if-match clauses—Define the match criteria that routing information must satisfy. The matching
objects are some attributes of routing information.
• apply clauses—Specify the actions to be taken on routing information that has satisfied the match
criteria, such as route attribute modification.
• continue clauses—Specify the next routing policy node to be matched. With this clause configured,
when a route matches the current routing policy node, it continues to match against the specified
next node in the same routing policy.
Configuration prerequisites
Before configuring this task, you need to configure filters and routing protocols. You also need to decide
on name of the routing policy and node numbers, match criteria, and attributes to be modified.
Configuration guidelines
• If a routing policy node has the permit keyword specified, routing information matching all the
if-match clauses of the node will be handled using the apply clauses of this node, without needing
to match against the next node. If routing information does not match the node, it will go to the next
node for a match.
• If a routing policy node has the deny keyword specified, the apply clauses of the node will not be
executed. When routing information matches all the if-match clauses of the node, it cannot pass the
node, or go to the next node. If route information cannot match all the if-match clauses of the node,
it will go to the next node for a match.
• When a routing policy has more than one node, at least one node should be configured with the
permit keyword. If the routing policy is used to filter routing information, routing information that
does not meet any node cannot pass the routing policy. If all nodes of the routing policy are set with
the deny keyword, no routing information can pass it.