HP VPN Firewall Appliances Network Management Command Reference

828
Views
OSPFv3 view
Default command level
2: System level
Parameters
acl6-number: Specifies the ACL6 number, ranging from 2000 to 3999.
ipv6-prefix ipv6-prefix-name: Specifies the name of an IPv6 prefix list, a string of up to 19 characters.
bgp4+: Filters IPv6 BGP routes.
direct: Filters direct routes.
isisv6 process-id: Filters routes of an IPv6 IS-IS process. The process-id argument is in the range of 1 to
65535.
ospfv3 process-id: Filters routes of an OSPFv3 process. The process-id argument is in the range of 1 to
65535.
ripng process-id: Filter routes of a RIPng process. The process-id argument is in the range of 1 to 65535.
static: Filters static routes.
The following matrix shows the protocol keywords (bgp4+, direct, ospfv3, ripng, and static) and
hardware compatibility:
Hardware Com
p
atibilit
y
F1000-A-EI/F1000-S-EI Yes
F1000-E Yes
F5000-S/F5000-C Yes
VPN firewall modules Yes
20-Gbps VPN firewall modules Yes
An F5000 firewall supports not only the keywords bgp4+, direct, ospfv3, ripng, and static, but also the
isisv6 keyword.
Usage guidelines
If no protocol is specified, all redistributed routes will be filtered.
To reference an advanced ACL (with a number from 3000 to 3999) in the command, configure the ACL
in one of the following ways:
• To deny/permit a route with the specified destination, use rule [ rule-id ] { deny | permit } ipv6
source sour sour-prefix.
• To deny/permit a route with the specified destination and prefix, use rule [ rule-id ] { deny | permit }
ipv6 source sour sour-prefix destination dest dest-prefix.
The source keyword specifies the destination address of a route, and the destination keyword specifies
the prefix of the route. (The prefix must be valid; otherwise, the configuration is ineffective.)
Using the filter-policy export command filters only routes redistributed by the import-route command. If
the import-route command is not configured to redistribute routes from other protocols and other OSPFv3
processes, use of the filter-policy export command does not take effect.