HP VPN Firewall Appliances Network Management Command Reference

852
Default
The filtering is disabled.
Views
IS-IS view
Default command level
2: System level
Parameters
acl6-number: Number of a basic or advanced IPv6 ACL used to filter redistributed routes before
advertisement, in the range of 2000 to 3999. For ACL information, see Access Control Configuration
Guide.
ipv6-prefix-name: Name of an IPv6 prefix list used to filter the redistributed routes before advertisement,
a case-sensitive string of 1 to 19 characters.
route-policy-name: Name of a routing policy used to filter the redistributed routes before advertisement,
a case-sensitive string of 1 to 63 characters.
protocol: Routing protocol from which the redistributed routes are to be filtered. The routing protocol can
be bgp4+, direct, isisv6, ospfv3, ripng, or static. If no protocol is specified, routes redistributed from all
protocols are filtered.
process-id: Process ID of the routing protocol, in the range of 1 to 65535. This argument is available
when the protocol is isisv6, ospfv3, or ripng.
Usage guidelines
In some cases, only routes matching certain conditions are advertised. You can configure the filtering
conditions using the ipv6 filter-policy command.
You can use the ipv6 filter-policy export command, which filters redistributed routes only when they are
advertised to other routers, in combination with the ipv6 import-route command.
• If no protocol is specified, routes redistributed from all protocols are filtered before advertisement.
• If a protocol is specified, only routes redistributed from the protocol are filtered before
advertisement.
To reference an advanced ACL (with a number from 3000 to 3999) in the command, configure the ACL
in one of the following ways:
• To deny/permit a route with the specified destination, use rule [ rule-id ] { deny | permit } ipv6
source sour sour-prefix.
• To deny/permit a route with the specified destination and prefix, use rule [ rule-id ] { deny | permit }
ipv6 source sour sour-prefix destination dest dest-prefix.
The source keyword specifies the destination address of a route, and the destination keyword specifies
the prefix of the route. (The prefix must be valid; otherwise, the configuration is ineffective.)
Examples
# Reference the ACL6 2006 to filter all the redistributed routes.
<Sysname> system-view
[Sysname] isis 1
[Sysname-isis-1] ipv6 filter-policy 2006 export
# Configure ACL6 3000 to permit only route 2001::1/128 to pass, and reference ACL6 3000 to filter
redistributed routes.