if-match source (Flow-Route-IPv6 view)

Function

The if-match source command configures a filtering rule based on the source address.

The undo if-match source command deletes the filtering rule based on the source address.

By default, no filtering rule based on the source address is configured.

Format

if-match source ipv6Address maskLenEx

undo if-match source

Parameters

Parameter	Description	Value
ipv6Address	Specifies the destination IPv6 address of a flow.	The address is a 32-bit hexadecimal number, in the format of X:X:X:X:X:X:X:X.
maskLenEx	Specifies the IPv6 mask length.	The value is an integer ranging from 0 to 128.

Parameter

Description

Value

ipv6Address

Specifies the destination IPv6 address of a flow.

The address is a 32-bit hexadecimal number, in the format of X:X:X:X:X:X:X:X.

maskLenEx

Specifies the IPv6 mask length.

The value is an integer ranging from 0 to 128.

Views

Flow-Route-IPv6 view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
flow-route	write

Usage Guidelines

Usage Scenario

To filter out the attack traffic to a specified destination, you can run the if-match source command to configure a filtering rule based on the source address for the BGP (IPv6) Flow Specification route or BGP (IPv6) VPN Flow Specification route. Traffic matching the filtering rule will be controlled with the action specified by the apply clause.

Prerequisites

A static BGP Flow Specification IPv6 route has been created using the flow-route ipv6 command in the system view.

A static BGP IPv6 VPN Flow Specification route has been configured using the flow-route ipv6 vpn-instance command in the system view.

Configuration Impact

If you run the if-match source command for the same BGP (IPv6) Flow Specification route or BGP (IPv6) VPN Flow Specification route several times, the last configuration takes effect.

Example

# Configure a filtering rule based on the source address 2001:DB8:1::1/120 for the static BGP IPv6 Flow Specification route Rule 1.

<HUAWEI> system-view
[~HUAWEI] flow-route Rule1 ipv6
[*HUAWEI-flow-route-ipv6] if-match source 2001:DB8:1::1 120