flow-route

Function

The flow-route command configures a static BGP Flow Specification route and displays the Flow-Route view.

The undo flow-route command deletes the static BGP Flow Specification route.

By default, no static BGP Flow Specification route is created.

Format

flow-route flowroute-name

undo flow-route flowroute-name

Parameters

Parameter	Description	Value
flowroute-name	Specifies the name of a static BGP Flow Specification route.	The value is a string of 1 to 30 case-sensitive characters without any space. When double quotation marks are used around the string, spaces are allowed in the string.

Parameter

Description

Value

flowroute-name

Specifies the name of a static BGP Flow Specification route.

The value is a string of 1 to 30 case-sensitive characters without any space. When double quotation marks are used around the string, spaces are allowed in the string.

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
flow-route	write

Usage Guidelines

Usage Scenario

To filter out the attack traffic of a certain type, you can run the flow-route command to manually configure a static BGP Flow Specification route with a filtering rule and a traffic controlling action. Receiving the route, a BGP Flow Specification peer generates a traffic policy to control the attack traffic.

One BGP Flow Specification route can include multiple if-match and apply clauses. The if-match clauses define filtering rules. The apply clauses specify actions. The relationships between if-match clauses and between apply clauses are as follows:

The relationship between if-match clauses of different types is "AND".
The relationship between apply clauses is "AND".
All traffic matching if-match filtering rules must be filtered with the actions specified by apply clauses.

Configuration Impact

After the BGP-IPv4 Flow address family is enabled using the ipv4-family flow command, the manually generated BGP Flow Specification route is imported to the BGP routing table.

if-match port and if-match destination-port or if-match source-port are mutually exclusive.

Example

# Configure a static BGP Flow Specification route named rule 1.

<HUAWEI> system-view
[~HUAWEI] flow-route rule1
[*HUAWEI-flow-route]