Contents

Guard route commands· 1

ip route-guard· 1

ipv6 route-guard· 1

Guard route commands

ip route-guard

Use ip route-guard to configure an IPv4 guard route.

Use undo ip route-guard to delete an IPv4 guard route.

Syntax

ip route-guard ip-address { mask-length | mask }

undo ip route-guard ip-address { mask-length | mask }

Default

No IPv4 guard route is configured.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

ip-address: Specifies the destination IP address in dotted decimal format.

mask-length: Specifies a mask length in the range of 0 to 32.

mask: Specifies a mask in dotted decimal format.

Usage guidelines

A guard route directs traffic to the guard device for filtering and cleaning. You can manually configure a guard route on the guard device, or use a script to automatically configure a guard route upon receipt of a notification.

Guard routes have the following characteristics:

·     Guard routes use Null 0 as the outgoing interface.

·     Guard routes are inactive routes and will not be installed into the FIB.

·     You must configure a routing protocol, such as BGP or OSPF, to redistribute and advertise guard routes for directing traffic to the guard device.

Examples

# Configure a guard route destined to 11.11.11.11/32.

<Sysname> system-view

[Sysname] ip route-guard 11.11.11.11 255.255.255.255

Related commands

display ip routing-table protocol

ipv6 route-guard

Use ipv6 route-guard to configure an IPv6 guard route.

Use undo ipv6 route-guard to delete an IPv6 guard route.

Syntax

ipv6 route-guard ipv6-address prefix-length

undo ipv6 route-guard ipv6-address prefix-length

Default

No IPv6 guard route is configured.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

ipv6-address: Specifies the destination IPv6 address.

prefix-length: Specifies a prefix length in the range of 0 to 128.

Usage guidelines

A guard route directs traffic to the guard device for filtering and cleaning. You can manually configure a guard route on the guard device, or use a script to automatically configure a guard route upon receipt of a notification.

Guard routes have the following characteristics:

·     Guard routes use Null 0 as the outgoing interface.

·     Guard routes are inactive routes and will not be installed into the FIB.

·     You must configure a routing protocol, such as BGP or OSPFv3, to redistribute and advertise guard routes for directing traffic to the guard device.

Examples

# Configure a guard route destined to 1:1:2::/64.

<Sysname> system-view

[Sysname] ipv6 route-guard 1:1:2:: 64

Related commands

display ipv6 routing-table protocol