Switch 7700 Configuration Guide
IP Routing Policy 101
The deny argument specifies that the apply clauses are not executed. If a route
satisfies all the if-match clauses of the node, the node denies the route and the
route does not take the test of the next node. If a route does not satisfy all the
if-match clauses of the node, however, the route takes the test of the next node.
The router tests the route against the nodes in the route policy in sequence, once
a node is matched, the route policy filtering is passed.
By default, the route policy is not defined.
Note that if multiple nodes are defined in a route policy, at least one of them
should be in permit mode. Apply the route policy to filter routing information. If
the routing information does not match any node, the route policy denies the
routing information. If all the nodes in the route policy are in deny mode, all
routing information will be denied by the route policy.
Define If-match Clauses for a Route Policy
The if-match clauses define the matching rules that the routing information must
satisfy to pass the route policy. The matching objects are attributes of the routing
information.
Perform the following configurations in route policy view.
Tabl e 51 Define If-match Conditions
Operation Command
Match the AS path domain of
the BGP routing information
if-match as-path acl-number
Cancel the matched AS path
domain of the BGP routing
information
undo if-match as-path
Match the community
attribute of the BGP routing
information
if-match community { standard-community-number [
exact-match ] | extended-community-number }
Cancel the matched
community attribute of the
BGP routing information
undo if-match community
Match the destination address
of the routing information
if-match { acl acl-number | ip-prefix ip-prefix-name }
Cancel the matched
destination address of the
routing information
undo if-match [ acl acl-number | ip-prefix ip-prefix-name ]
Match the next-hop interface
of the routing information
if-match interface [ interface-type interface-number ]
Cancel the matched next-hop
interface of the routing
information
undo if-match interface
Match the next-hop of the
routing information
if-match ip next-hop { acl acl-number | ip-prefix
ip-prefix-name }
Cancel the matched next-hop
of the routing information
undo if-match ip next-hop [ip-prefix ip-prefix-name ]
Match the routing cost of the
routing information
if-match cost cost
Cancel the matched routing
cost of the routing information
undo if-match cost