An IP prefix list can contain multiple items that specify prefix ranges. Each destination IP address prefix of a route is compared with these items in ascending order of their index numbers. A prefix matches the IP prefix list if it matches one item in the list.

RD list

A route distinguisher (RD) list matches the RD of routes. After you add an RD as a prefix to an IPv4 address prefix, the address prefix becomes a unique VPN-IPv4 address prefix.

An RD list is identified by an RD list number and can contain multiple items that specify RD ranges. Each item is identified by an index number. The RD of a route is compared with these items in ascending order of their index numbers. An RD matches the RD list if it matches one item in the list.

F or information about RD, see MCE configuration in MCE Configuration Guide.

Routing policy

A routing policy can contain multiple nodes, which are in a logical OR relationship. A node with a smaller number is matched first. A route matches the routing policy if it matches one node (except the node configured with the continue clause) in the routing policy.

Each node has a match mode of permit or deny.

· permit—Specifies the permit match mode for a routing policy node. If a route meets all the if-match clauses of the node, it is handled by the apply clauses of the node. The route is not compared with the next node unless the continue clause is configured. If a route does not meet all the if-match clauses of the node, it is compared with the next node.

· deny—Specifies the deny match mode for a routing policy node. The apply and continue clauses of a deny node are never executed. If a route meets all the if-match clauses of the node, it is denied without being compared with the next node. If a route does not meet all the if-match clauses of the node, it is compared with the next node.

A node can contain a set of if-match, apply, and continue clauses.

· if-match clauses—Specify the match criteria that match the attributes of routes. The if-match clauses of different types are in a logical AND relationship and the if-match clauses of the same type are in a logical OR relationship. A route must meet if-match clauses of all types to match the node.

· apply clauses—Specify the actions to be taken on permitted routes, such as modifying a route attribute.

· continue clause—Specifies the next node. A route that matches the current node (permit node) must match the specified next node in the same routing policy. The continue clause combines the if-match and apply clauses of the two nodes to improve flexibility of the routing policy. After you configure a continue clause, a route can pass the routing policy even if it does not match the specified next node. To reject such a route, add a deny node without clauses.

Follow these guidelines when you configure if-match, apply, and continue clauses:

· If you only want to filter routes, do not configure apply clauses.

· If you do not configure any if-match clauses for a permit node, the node will permit all routes.

· Configure a permit node containing no if-match or apply clauses following multiple deny nodes to allow unmatched routes to pass.

Routing policy tasks at a glance

To configure a routing policy, perform the following tasks:

1. (Optional.) Configure filters:

¡ Configuring an IPv4 prefix list

¡ Configuring an IPv6 prefix list

¡ Configuring an RD list

2. Configuring a routing policy:

a. Creating a routing policy

b. Configuring if-match clauses

c. Configuring apply clauses

d. Configuring the continue clause

Configuring an IPv4 prefix list

About this task

An IPv4 prefix list is used to filter IPv4 addresses. It can contain multiple items, each of which specifies a range of IPv4 prefixes. The relation between the items is logical OR. A route can pass an IPv4 prefix list as long as it successfully matches an item. If the route cannot match any item, the IPv4 prefix list cannot be passed.

Restrictions and guidelines

If the ip-address mask-length argument is specified as 0.0.0.0 0, only the default route will be matched. To match all routes, use 0.0.0.0 0 less-equal 32.

If all the items are set to deny mode, no routes can pass the IPv4 prefix list. To permit unmatched IPv4 routes, you must configure the permit 0.0.0.0 0 less-equal 32 item following multiple deny items.

Procedure

1. Enter system view.

system-view

2. Configure an IPv4 prefix list.

ip prefix-list prefix-list-name [ index index-number ] { deny | permit } ip-address mask-length [ greater-equal min-mask-length ] [ less-equal max-mask-length ]

Configuring an IPv6 prefix list

About this task

An IPv6 prefix list is used to filter IPv6 addresses. An IPv6 prefix list can have multiple items, and each of them specifies a range of IPv6 prefixes. The relation between the items is logical OR. A route passing an item passes the IPv6 prefix list. A route passing no item cannot pass the IPv6 prefix list.

Restrictions and guidelines

If the ipv6-address prefix-length argument is specified as :: 0, only the default route matches. To match all routes, configure :: 0 less-equal 128.

If all items are set to deny mode, no routes can pass the IPv6 prefix list. To permit unmatched IPv6 routes, you must configure the permit :: 0 less-equal 128 item following multiple deny items.

Procedure

1. Enter system view.

system-view

2. Configure an IPv6 prefix list.

ipv6 prefix-list prefix-list-name [ index index-number ] { deny | permit } ipv6-address { inverse inverse-prefix-length | prefix-length [ greater-equal min-prefix-length ] [ less-equal max-prefix-length ] }

Configuring an RD list

About this task

RD lists are used to filter VPN routing information. You can configure multiple items for an RD list that is identified by a number. The relationship between the items is logical OR. A route matches the RD list if it matches one item in the list.

Procedure

1. Enter system view.

system-view

2. Configure an RD list.

ip rd-list rd-list-number [ index index-number ] { deny | permit } route-distinguisher&<1-10>

Configuring a routing policy

Creating a routing policy

About this task

A routing policy must have a minimum of one permit node. If all the nodes are in deny mode, no routes can pass the routing policy.

Procedure

1. Enter system view.

system-view

2. Create a routing policy and a node, and enter routing policy node view.

route-policy route-policy-name { deny | permit } node node-number

Configuring if-match clauses

About this task

You can either specify no if-match clauses or multiple if-match clauses for a routing policy node. If no if-match clause is specified for a permit node, all routes can pass the node. If no if-match clause is specified for a deny node, no routes can pass the node.

Restrictions and guidelines

When you configure if-match clauses, follow these restrictions and guidelines:

· The if-match clauses of a routing policy node have a logical AND relationship. A route must meet all if-match clauses before it can be executed by the apply clauses of the node. If an if-match command exceeds the maximum length, multiple if-match clauses of the same type are generated. These clauses have a logical OR relationship. A route only needs to meet one of them.

· All IPv4 routes match a node if the if-match clauses of the node use only IPv6 ACLs. All IPv6 routes match a node if the if-match clauses of the node use only IPv4 ACLs.

· If the ACL used by an if-match clause does not exist or the ACL is not configured with any rules, the clause is always matched. When the ACL of an if-match clause is configured with rules, a route cannot match the if-match clause in one of the following scenarios:

¡ The route cannot match any rule of the specified ACL.

¡ The route matches a deny-mode rule of the specified ACL.

· If the prefix list or RD list used by an if-match clause does not exist, the clause is always matched. The clause is not matched if one of the following conditions exists:

¡ No rules of the specified prefix list or RD list are matched.

¡ The specified prefix list or RD list is in deny mode.

· The rule [ rule-id ] permit ip source sour-addr sour-wildcard destination dest-addr dest-wildcard command can create a rule for an advanced ACL to match specific routes. The source sour-addr sour-wildcard option represents the destination network address and the destination dest-addr dest-wildcard option represents the mask in dotted decimal notation. For example, to match route 3.3.3.0/24, the rule configuration should be rule [ rule-id ] permit ip source 3.3.3.0 0.0.0.255 destination 255.255.255.0 0.0.0.255.

Procedure

1. Enter system view.

system-view

2. Enter routing policy node view.

route-policy route-policy-name { deny | permit } node node-number

3. Match routes whose destination, next hop, or source address matches an ACL or prefix list.

IPv4:

if-match ip { address | next-hop } { acl ipv4-acl-number | prefix-list prefix-list-name }

IPv6:

if-match ipv6 { address | next-hop } { acl ipv6-acl-number | prefix-list prefix-list-name }

By default, no ACL or prefix list match criterion is configured.

The ACL specified in an if-match clause must be a non-VPN ACL.

4. Configure route match criteria.

¡ Match routes having the specified cost.

if-match cost cost-value

¡ Match routes having the specified output interface.

if-match interface { interface-type interface-number }&<1-16>

¡ Match routes having the specified route type.

if-match route-type { external-type1 | external-type1or2 | external-type2 | internal | nssa-external-type1 | nssa-external-type1or2 | nssa-external-type2 } *

¡ Match IGP routes having the specified tag value.

if-match tag tag-value

By default, no route match criteria are configured.

5. Match routes whose RD matches the specified RD list.

if-match rd-list rd-list-number

By default, no RD match criterion is configured.

Configuring apply clauses

1. Enter system view.

system-view

2. Enter routing policy node view.

route-policy route-policy-name { deny | permit } node node-number

3. Configure the route cost and cost type.

¡ Set a cost for routes.

apply cost [ + | - ] cost-value

By default, no cost is set for routes.

¡ Set a cost type for routes.

apply cost-type { type-1 | type-2 }

By default, no cost type is set for routes.

4. Set the next hop for routes.

IPv4:

apply ip-address next-hop ip-address [ public | vpn-instance vpn-instance-name ]

IPv6:

apply ipv6 next-hop ipv6-address

By default, no next hop is set for routes.

The configuration does not apply to redistributed routes.

5. Configure route priorities.

¡ Set an IP precedence for matching routes.

apply ip-precedence { value | clear }

By default, no IP precedence is set.

¡ Set a preference.

apply preference preference

By default, no preference is set.

¡ Set a prefix priority.

apply prefix-priority { critical | high | medium }

By default, the prefix priority is low.

6. Set a tag value for IGP routes.

apply tag tag-value

By default, no tag value is set for IGP routes.

7. Set a backup link for fast reroute (FRR).

IPv4:

apply fast-reroute { backup-interface interface-type interface-number [ backup-nexthop ip-address ] | backup-nexthop ip-address }

IPv6:

apply ipv6 fast-reroute { backup-interface interface-type interface-number [ backup-nexthop ipv6-address ] | backup-nexthop ipv6-address }

By default, no backup link is set for FRR.

Configuring the continue clause

Restrictions and guidelines

When you configure the continue clause to combine multiple nodes, follow these restrictions and guidelines:

· If you configure an apply clause that sets different attribute values on all the nodes, the apply clause of the node configured most recently takes effect.

· If you configure the apply cost with the + or – keyword on all the nodes, the apply cost clause of each node takes effect.

Procedure

1. Enter system view.

system-view

2. Enter routing policy node view.

route-policy route-policy-name { deny | permit } node node-number

3. Specify the next node to be matched.

continue [ node-number ]

By default, no continue clause is configured.

The specified next node must have a larger number than the current node.

Configuring the routing policy change delay timer

About this task

This feature makes a routing policy take effect after a delayed time interval, which prevents incomplete routing policy configuration from being issued to cause incorrect route advertisement. The system automatically starts the timer when a routing policy changes. The changes will not take effect on the policy until the change delay timer expires.

A routing policy changes when one of the following events occurs:

· A routing policy is created.

· A routing policy node, if-match clause, or apply clause is added, modified, or deleted for a routing policy.

· You add, modify, or delete one of the following lists:

¡ IPv4 prefix list.

¡ IPv6 prefix list.

· The ACL used by an if-match clause changes.

Procedure

1. Enter system view.

system-view

2. Set the routing policy change delay timer.

route-policy-change delay-time { time-value | unlimited }

By default, routing policy changes immediately take effect, but the routing protocol waits five seconds before processing routes from the new routing policy.

When the delay timer expires, the routing protocol waits five seconds before processing routes from the new routing policy.

Display and maintenance commands for routing policies

Execute display commands in any view and reset commands in user view.

Task	Command
Display IPv4 prefix list statistics.	display ip prefix-list [ name prefix-list-name ]
Display RD list information.	display ip rd-list [ rd-list-number ]
Display IPv6 prefix list statistics.	display ipv6 prefix-list [ name prefix-list-name ]
Display routing policy information.	display route-policy [ name route-policy-name ]
Clear IPv4 prefix list statistics.	reset ip prefix-list [ prefix-list-name ]
Clear IPv6 prefix list statistics.	reset ipv6 prefix-list [ prefix-list-name ]

Routing policy configuration examples

Example: Configuring a routing policy for redistributing static routes to RIP

Network configuration

As shown in Figure 1, Switch A exchanges routing information with Switch B by using RIP.

On Switch A, configure three static routes. Use a routing policy to configure Switch B to redistribute networks 20.1.1.1/32 and 40.1.1.1/32 and block network 30.1.1.1/32.

Figure 1 Network diagram

‌

Procedure

1. Configure Switch A:

# Configure IP addresses for interfaces VLAN-interface 100 and VLAN-interface 200.

<SwitchA> system-view

[SwitchA] interface vlan-interface 100

[SwitchA-vlan-interface100] ip address 10.1.1.1 30

[SwitchA-vlan-interface100] quit

[SwitchA] interface vlan-interface 200

[SwitchA-vlan-interface200] ip address 11.1.1.1 30

[SwitchA-vlan-interface200] quit

# Enable RIP on interface VLAN-interface 100.

[SwitchA] interface vlan-interface 100

[SwitchA-vlan-interface100] rip 1 enable

[SwitchA-vlan-interface100] quit

# Configure three static routes and set the next hop of the three routes to 11.1.1.2.

[SwitchA] ip route-static 20.1.1.1 32 11.1.1.2

[SwitchA] ip route-static 30.1.1.1 32 11.1.1.2

[SwitchA] ip route-static 40.1.1.1 32 11.1.1.2

# Configure a routing policy.

[SwitchA] ip prefix-list a index 10 permit 30.1.1.1 32

[SwitchA] route-policy static2rip deny node 0

[SwitchA-route-policy-static2rip-0] if-match ip address prefix-list a

[SwitchA-route-policy-static2rip-0] quit

[SwitchA] route-policy static2rip permit node 10

[SwitchA-route-policy-static2rip-10] quit

# Enable RIP and apply routing policy static2rip to filter redistributed static routes.

[SwitchA] rip

[SwitchA-rip-1] import-route static route-policy static2rip

2. Configure Switch B:

# Configure an IP address for interface VLAN-interface 100.

<SwitchB> system-view

[SwitchB] interface vlan-interface 100

[SwitchB-vlan-interface100] ip address 10.1.1.2 30

# Enable RIP.

[SwitchB] rip

[SwitchB-rip-1] quit

# Enable RIP on the interface.

[SwitchB] interface vlan-interface 100

[SwitchB-vlan-interface100] rip 1 enable

[SwitchB-vlan-interface100] quit

Verifying the configuration

# Display the routing table information on Switch B.

<SwitchB> display ip routing-table

Destinations : 14 Routes : 14

Destination/Mask Proto Pre Cost NextHop Interface

0.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0

10.1.1.0/30 Direct 0 0 10.1.1.2 Vlan100

10.1.1.0/32 Direct 0 0 10.1.1.2 Vlan100

10.1.1.2/32 Direct 0 0 127.0.0.1 InLoop0

10.1.1.3/32 Direct 0 0 10.1.1.2 Vlan100

20.0.0.0/8 RIP 100 1 10.1.1.1 Vlan100

40.0.0.0/8 RIP 100 1 10.1.1.1 Vlan100

127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0

127.0.0.0/32 Direct 0 0 127.0.0.1 InLoop0

127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0

127.255.255.255/32 Direct 0 0 127.0.0.1 InLoop0

224.0.0.0/4 Direct 0 0 0.0.0.0 NULL0

224.0.0.0/24 Direct 0 0 0.0.0.0 NULL0

255.255.255.255/32 Direct 0 0 127.0.0.1 InLoop

Example: Configuring a routing policy for IPv6 route redistribution

Network configuration

As shown in Figure 2:

· Run RIPng on Switch A and Switch B.

· Configure three static routes on Switch A.

· On Switch A, apply a routing policy to redistribute static routes 20::/32 and 40::/32 and deny route 30::/32.

Figure 2 Network diagram

Procedure

1. Configure Switch A:

# Configure IPv6 addresses for VLAN-interface 100 and VLAN-interface 200.

<SwitchA> system-view

[SwitchA] interface vlan-interface 100

[SwitchA-Vlan-interface100] ipv6 address 10::1 32

[SwitchA-Vlan-interface100] quit

[SwitchA] interface vlan-interface 200

[SwitchA-Vlan-interface200] ipv6 address 11::1 32

[SwitchA-Vlan-interface200] quit

# Enable RIPng on VLAN-interface 100.

[SwitchA] interface vlan-interface 100

[SwitchA-Vlan-interface100] ripng 1 enable

[SwitchA-Vlan-interface100] quit

# Configure three static routes with next hop 11::2, and make sure the static routes are active.

[SwitchA] ipv6 route-static 20:: 32 11::2

[SwitchA] ipv6 route-static 30:: 32 11::2

[SwitchA] ipv6 route-static 40:: 32 11::2

# Configure a routing policy.

[SwitchA] ipv6 prefix-list a index 10 permit 30:: 32

[SwitchA] route-policy static2ripng deny node 0

[SwitchA-route-policy-static2ripng-0] if-match ipv6 address prefix-list a

[SwitchA-route-policy-static2ripng-0] quit

[SwitchA] route-policy static2ripng permit node 10

[SwitchA-route-policy-static2ripng-10] quit

# Enable RIPng and apply the routing policy to static route redistribution.

[SwitchA] ripng

[SwitchA-ripng-1] import-route static route-policy static2ripng

2. Configure Switch B:

# Configure the IPv6 address for VLAN-interface 100.

<SwitchB> system-view

[SwitchB] interface vlan-interface 100

[SwitchB-Vlan-interface100] ipv6 address 10::2 32

# Enable RIPng.

[SwitchB] ripng

[SwitchB-ripng-1] quit

# Enable RIPng on VLAN-interface 100.

[SwitchB] interface vlan-interface 100

[SwitchB-Vlan-interface100] ripng 1 enable

[SwitchB-Vlan-interface100] quit

Verifying the configuration

# Display the RIPng routing table on Switch B.

[SwitchB] display ripng 1 route

Route Flags: A - Aging, S - Suppressed, G - Garbage-collect, D - Direct

O - Optimal, F - Flush to RIB

----------------------------------------------------------------

Peer FE80::7D58:0:CA03:1 on Vlan-interface 100

Destination 20::/32,

via FE80::7D58:0:CA03:1, cost 1, tag 0, A, 8 secs

Destination 40::/32,

via FE80::7D58:0:CA03:1, cost 1, tag 0, A, 3 secs

Local route

Destination 10::/32,

via ::, cost 0, tag 0, DOF

05-Layer 3—IP Routing Configuration Guide

Configuring routing policies

About routing policies

ACL

IP prefix list

RD list

Routing policy

Routing policy tasks at a glance

About this task

Restrictions and guidelines

Procedure

About this task

Restrictions and guidelines

Procedure

Configuring an RD list

About this task

Procedure

Configuring a routing policy

Creating a routing policy

About this task

Procedure

Configuring if-match clauses

About this task

Restrictions and guidelines

Procedure

Configuring apply clauses

Configuring the continue clause

Restrictions and guidelines

Procedure

About this task

Procedure

Display and maintenance commands for routing policies

Routing policy configuration examples

Network configuration

Procedure

Verifying the configuration

Example: Configuring a routing policy for IPv6 route redistribution

Network configuration

Procedure

Verifying the configuration

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

News & Events

Contact Us