HP 5500 Ei 5500 Si Switch Series Configuration Guide

 372 
# Configure IP prefix list prefix-a to permit route 172.17.1.0/24. 
[SwitchB] ip ip-prefix prefix-a index 10 permit 172.17.1.0 24 
5. Configure a routing policy: 
[SwitchB] route-policy isis2ospf permit node 10 
[SwitchB-route-policy] if-match ip-prefix prefix-a 
[SwitchB-route-policy] apply cost 100 
[SwitchB-route-policy] quit 
[SwitchB] route-policy isis2ospf permit node 20 
[SwitchB-route-policy] if-match acl 2002 
[SwitchB-route-policy] apply tag 20 
[SwitchB-route-policy] quit 
[SwitchB]...

 373 
Figure 120 Network diagram 
 
 
Configuration procedure 
1. Configure Switch A: 
# Configure IPv6 addresses for VLAN-int erface 100 and VLAN-interface 200. 
 system-view 
[SwitchA] ipv6 
[SwitchA] interface vlan-interface 100 
[SwitchA-Vlan-interface100] ipv6 address 10::1 32 
[SwitchA-Vlan-interface100] quit 
[SwitchA] interface vlan-interface 200 
[SwitchA-Vlan-interface200] ipv6 address 11::1 32 
[SwitchA-Vlan-interface200] quit 
# Enable RIPng on VLAN-interface 100. 
[SwitchA] interface...

 374 
# Enable RIPng. 
[SwitchB] ripng 
# Display RIPng routing table information. 
[SwitchB-ripng-1] display ripng 1 route 
   Route Flags: A - Aging, S - Suppressed, G - Garbage-collect 
 ---------------------------------------------------------------- 
 
 Peer FE80::7D58:0:CA03:1  on Vlan-interface 100 
 Dest 10::/32, 
     via FE80::7D58:0:CA03:1, cost  1, tag 0, A, 18 Sec 
 Dest 20::/32, 
     via FE80::7D58:0:CA03:1, cost  1, tag 0, A, 8 Sec 
 Dest 40::/32, 
     via FE80::7D58:0:CA03:1, cost  1,...

 375 
# Configure Switch B. 
 system-view 
[SwitchB] bgp 200 
[SwitchB-bgp] router-id 2.2.2.2 
[SwitchB-bgp] peer 1.1.2.2 as-number 300 
# Configure Switch C. 
 system-view 
[SwitchC] bgp 300 
[SwitchC-bgp] router-id 3.3.3.3 
[SwitchC-bgp] peer 1.1.1.1 as-number 100 
[SwitchC-bgp] peer 1.1.2.1 as-number 200 
[SwitchC-bgp] peer 1.1.3.2 as-number 400 
# Configure Switch D. 
 system-view 
[SwitchD] bgp 400 
[SwitchD-bgp] router-id 4.4.4.4 
[SwitchD-bgp] peer 1.1.3.1 as-number 300 
[SwitchD-bgp] quit 
# On...

 376 
[SwitchD] ip as-path 1 permit .*200.* 
# Create routing policy rt1 with node 1, and specify the match mode as  deny to deny routes from 
AS 200.  
[SwitchD] route-policy rt1 deny node 1 
[SwitchD-route-policy] if-match as-path 1 
[SwitchD-route-policy] quit 
# Create routing policy  rt1 with node 10, and specify the match mode as  permit to permit routes 
from other ASs. 
[SwitchD] route-policy rt1 permit node 10 
[SwitchD-route-policy] quit 
# On Switch D, specify routing policy  rt1 to filter...

 377 
IPv6 routing information filtering failure 
Symptom 
The routing protocol is running properly, but filtering routing information failed. 
Analysis 
At least one item of the IPv6 prefix list must be configured as permit mode, and at least one node of the 
routing policy must be configured as permit mode. 
Solution 
1. Use the  display ip ipv6-prefix  command to display IP prefix list information. 
2. Use the  display route-policy command to display routing policy information. 
Configuring...

 378 
PBR modes 
According to the objects to which the PBR applies, PBR involves local PBR and interface PBR. 
•   Local PBR applies to locally generated packets only, such as the ICMP packets generated by using 
the ping  command. 
•   Interface PBR applies to packets forwarded through the interface only. 
In most cases, interface PBR is implemented to  meet the forwarding and security requirements. 
 
 NOTE: 
The term interface in this chapter refers to Layer  3 interfaces, including VLAN interfaces...

 379 
If a packet… Then… 
In permit mode In deny mode 
Fails to match an 
if-match clause 
on the policy node  The 
apply  clause is not executed, 
and the packet will go to the next 
policy node for a match.  The 
apply  clause is not executed, 
and the packet will go to the next 
policy node for a match. 
 
The nodes of a policy are in an OR relationship. If a packet matches a node, it passes the policy; if the 
packet does not match any node of the policy, it fail s to pass the policy and is forwarded...

 380 
Step Command Remarks 
2.  Create a policy or policy 
node and enter PBR policy 
node view.  policy-based-route
 policy-name 
[ deny  | permit  ] node  
node-number   N/A 
3.
  Define an ACL match 
criterion.  if-match acl
 acl-number   Optional. 
4.  Set an IP precedence 
type/value.  apply
 ip-precedence  { type  | 
value }   Optional. 
5.
  Set next hops.  apply ip-address next-hop 
ip-address
 [ direct ] [ track 
track-entry-number  ] [ ip-address 
[ direct ]  [ track 
track-entry-number  ] ]...

 381 
To configure interface PBR:  
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Enter interface view.  interface
 interface-type 
interface-number   N/A 
3.
  Configure interface PBR 
based on a policy.  ip policy-based-route 
policy-name Not configured by default. 
 
  NOTE: 
If the specified policy does not exist, the interface PBR configuration succeeds, but it takes effect only when
the policy is created.  
 
PBR and track 
Associated with a Track object, PBR can sense topo...