3Com Switch 8800 Advanced Software V5 Configuration Guide

246 CHAPTER 25: ROUTING POLICY CONFIGURATION
n
If all items are set to the deny mode, no routes can pass the IPv4 prefix list.
Therefore, you need to define the permit 0.0.0.0 0 less-equal 32 item following
multiple deny mode items to allow other IPv4 routing information to pass.
For example, the following configuration filters routes 10.1.0.0/16, 10.2.0.0/16
and 10.3.0.0/16, but allows other routes to pass.
<Sysname> system-view
[Sysname] ip ipv6-prefix abc index 10 deny 10.1.0.0 16
[Sysname] ip ipv6-prefix abc index 20 deny 10.2.0.0 16
[Sysname] ip ipv6-prefix abc index 30 deny 10.3.0.0 16
[Sysname] ip ipv6-prefix abc index 40 permit 0.0.0.0 0 less-equal 32
Define an IPv6 prefix list
Identified by name, each IPv6 prefix list can comprise multiple items. Each item
specifies a matching address range in the form of network prefix, which is
identified by index number.
During matching, the system compares the route to each item in the ascending
order of index number. If one item is matched, the route passes the IP-prefix list,
without needing to match the next item.
To define an IPv6 prefix list, use the following commands:
n
If all items are set to the deny mode, no routes can pass the IPv6 prefix list.
Therefore, you need to define the permit :: 0 less-equal 128 item following
multiple deny mode items to allow other IPv6 routing information to pass.
For example, the following configuration filters routes 2000:1::/48, 2000:2::/48
and 2000:3::/48, but allows other routes to pass.
<Sysname> system-view
[Sysname] ip ip-prefix abc index 10 deny 2000:1:: 48
[Sysname] ip ip-prefix abc index 20 deny 2000:2:: 48
[Sysname] ip ip-prefix abc index 30 deny 2000:3:: 16
[Sysname] ip ip-prefix abc index 40 permit :: 0 less-equal 128
To do... Use the command... Remarks
Enter system view system-view -
Define an IPv4 prefix list ip ip-prefix ip-prefix-name [
index index-number ] { permit |
deny } ip-address mask-length [
greater-equal min-mask-length
] [ less-equal max-mask-length ]
Required
Not defined by default
To do... Use the command... Remarks
Enter system view system-view -
Define an IPv6 prefix list ip ipv6-prefix ipv6-prefix-name
[ index index-number ] { deny |
permit } ipv6-address
prefix-length [ greater-equal
min-prefix-length ] [ less-equal
max-prefix-length ]
Required
Not defined by default