R0106-HP MSR Router Series Layer 3 - IP Routing Command Reference(V7)

403
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer
group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
acl-number: Specifies an ACL by its number in the range of 2000 to 3999.
acl6-number: Specifies an IPv6 ACL by its number in the range of 2000 to 3999.
export: Filters routes advertised to the peer/peer group.
import: Filters routes received from the peer/peer group.
Usage guidelines
The specified ACL referenced by the peer filter-policy command must have been created with the acl
command in system view. Otherwise, all routes can pass the ACL.
If you use a basic ACL (with a number from 2000 to 2999) configured with the rule [ rule-id ] { deny |
permit } source source-address source-wildcard command, the command matches routes whose
destination network addresses match the source-address source-wildcard argument without matching the
masks of the destination addresses.
If you use an advanced ACL (with a number from 3000 to 3999) in the command, the ACL should be
configured with one of the following:
• The rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard command to deny/permit a
route with the specified destination.
• The rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard destination dest-addr
dest-wildcard command to deny/permit a route with the specified destination and mask.
The source keyword specifies the destination address of a route and the destination keyword specifies the
subnet mask of the destination. The subnet mask must be contiguous. Otherwise, the configuration does
not take effect.
Examples
# In BGP IPv4 unicast address family view, apply ACL 2000 to filter routes advertised to the peer group
test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test filter-policy 2000 export
# In BGP-VPN IPv6 unicast address family view, apply ACL6 2000 to filter routes advertised to the peer
group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer test filter-policy 2000 export
Related commands
• acl (ACL and QoS Command Reference)
• filter-policy export