R0106-HP MSR Router Series Layer 3 - IP Routing Configuration Guide(V7)

471
Creating a routing policy
For a routing policy that has more than one node, configure at least one permit-mode node. A route that
does not match any node cannot pass the routing policy. If all the nodes are in deny mode, no routes can
pass the routing policy.
To create a routing policy:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a routing policy and a node, and
enter routing policy node view.
route-policy
route-policy-name { deny |
permit } node node-number
By default, no routing policy
is created.
Configuring if-match clauses
You can either specify no if-match clauses or multiple if-match clauses for a routing policy node. If no
if-match clause is specified for a permit-mode node, all routes can pass the node. If no if-match clause
is specified for a deny-mode node, no routes can pass the node.
The if-match clauses of a routing policy node have a logical AND relationship. A route must meet all
if-match clauses before it can be executed by the apply clauses of the node. If an if-match command
exceeds the maximum length, multiple if-match clauses of the same type are generated. These clauses
have a logical OR relationship. A route only needs to match one of them.
To configure if-match clauses:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter routing policy node view.
route-policy route-policy-name { deny
| permit } node node-number
N/A
3. Match routes whose destination,
next hop, or source address
matches an ACL or prefix list.
• Match IPv4 routes whose
destination, next hop, or source
address matches an ACL or IPv4
prefix list:
if-match ip { address | next-hop |
route-source } { acl acl-number |
prefix-list prefix-list-name }
• Match IPv6 routes whose
destination, next hop, or source
address matches an ACL or IPv6
prefix list:
if-match ipv6 { address |
next-hop | route-source } { acl
acl6-number | prefix-list
prefix-list-name }
By default, no ACL or prefix
list match criterion is
configured.
If the ACL used by an if-match
clause does not exist or has
no rules, the clause is always
matched. If no rules of the
specified ACL are matched or
the match rules are inactive,
the clause is not matched.
The ACL specified in an
if-match clause must be a
non-VPN ACL.
4. Match BGP routes whose
AS_PATH attribute matches a
specified AS path list.
if-match as-path
as-path-number&<1-32>
By default, no AS path match
criterion is configured.