filter-policy import

Use filter-policy import to configure IPv6 IS-IS to filter received routes.

Use undo filter-policy import to restore the default.

Syntax

filter-policy { ipv6-acl-number | prefix-list prefix-list-name | route-policy route-policy-name } import

undo filter-policy import

Default

IPv6 IS-IS does not filter received routes.

Views

IS-IS IPv6 unicast address family view

Predefined user roles

network-admin

Parameters

ipv6-acl-number: Specifies an IPv6 ACL by its number in the range of 2000 to 3999 to filter received routes.

prefix-list ipv6-prefix-name: Specifies an IPv6 prefix list by its name, a case-sensitive string of 1 to 63 characters, to filter received routes.

route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters, to filter received routes.

Usage guidelines

This command filters received routes. Only routes that have not been filtered can be added into the routing table.

To reference an advanced ACL (with a number from 3000 to 3999) in the command or in the routing policy, configure the ACL using one of the following methods:

• To deny/permit a route with the specified destination, use the rule [ rule-id ] { deny | permit } ipv6 source sour sour-prefix command.

• To deny/permit a route with the specified destination and prefix, use the rule [ rule-id ] { deny | permit } ipv6 source sour sour-prefix destination dest dest-prefix command.

The source keyword specifies the destination address of a route and the destination keyword specifies the prefix of the route. For the configuration to take effect, specify a valid prefix.

Examples

# Use IPv6 basic ACL 2003 to filter received routes.

<Sysname> system-view
[Sysname] isis 1
[Sysname-isis-1] address-family ipv6
[Sysname-isis-1-ipv6] filter-policy 2003 import

# Configure IPv6 advanced ACL 3000 to permit only route 2001::1/128 to pass. Use the ACL to filter received routes.

<Sysname> system-view
[Sysname] acl ipv6 advanced 3000
[Sysname-acl-ipv6-adv-3000] rule 10 permit ipv6 source 2001::1 128 destination ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 128
[Sysname-acl-ipv6-adv-3000] rule 100 deny ipv6
[Sysname-acl-ipv6-adv-3000] quit
[Sysname] isis 1
[Sysname-isis-1] address-family ipv6
[Sysname-isis-1-ipv6] filter-policy 3000 import

Related commands

filter-policy export