400
Creating a routing policy
For a routing policy that has more than one node, configure at least one permit-mode node. A route that
does not match any node cannot pass the routing policy. If all the nodes are in
deny
mode, no routing
information can pass the routing policy.
To create a routing policy:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a routing policy and a node, and
enter routing policy node view.
route-policy
route-policy-name
{
deny
|
permit
}
node
node-number
By default, no routing policy
is created.
Configuring if-match clauses
You can either specify no
if-match
clauses or multiple
if-match
clauses for a routing policy node. If no
if-match
clause is specified for a permit-mode node, all routing information can pass the node. If no
if-match
clause is specified for a deny-mode node, no routing information can pass the node.
The
if-match
clauses of a routing policy node have a logical AND relationship. A route must meet all
if-match
clauses before it can be executed by the
apply
clauses of the node. If an
if-match
command
exceeds the maximum length, multiple identical
if-match
clauses are generated. These clauses have a
logical OR relationship. A route only needs to match one of them.
To configure
if-match
clauses:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter routing policy node view.
route-policy
route-policy-name
{
deny
|
permit
}
node
node-number
N/A
3.
Match routes whose destination,
next hop, or source matches a
specified prefix list.
•
Match IPv4 routes whose
destination, next hop, or source
matches the IPv4 prefix list:
if-match ip
{
address
|
next-hop
|
route-source
} {
acl
acl-number
|
prefix-list
prefix-list-name
}
•
Match IPv6 routes whose
destination, next hop, or source
matches the IPv6 prefix list:
if-match ipv6
{
address
|
next-hop
|
route-source
} {
acl
acl6-number
|
prefix-list
prefix-list-name
}
By default, no IPv4 or IPv6
prefix list match criterion is
configured.
If the ACL used by an
if-match
clause does not exist, the
clause is always matched. If
no rules of the specified ACL
are matched or the match
rules are inactive, the clause
is not matched.
The ACL specified in an
if-match
clause must be a
non-VPN ACL.
4.
Match BGP routes whose
AS_PATH attribute matches a
specified AS path list.
if-match as-path
as-path-number
&<1-32>
By default, no AS path match
criterion is configured.
