if-match ipv6 next-hop acl

Function

The if-match ipv6 next-hop acl command configures a filtering rule that is based on next-hop addresses of IPv6 routes.

The undo if-match ipv6 next-hop acl command cancels the configuration.

By default, no filtering rule based on next-hop addresses of IPv6 routes is configured.

Format

if-match ipv6 next-hop acl { acl-number | acl-name }

undo if-match ipv6 next-hop acl { acl-number | acl-name }

Parameters

Parameter	Description	Value
acl-number	Specifies the number of a basic ACL.	The value is an integer ranging from 2000 to 2999.
acl-name	Specifies the name of a named basic ACL.	The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter (a to z or A to Z, case sensitive).
acl	Specifies the ACL for route filtering.	-

Parameter

Description

Value

acl-number

Specifies the number of a basic ACL.

The value is an integer ranging from 2000 to 2999.

acl-name

Specifies the name of a named basic ACL.

The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter (a to z or A to Z, case sensitive).

acl

Specifies the ACL for route filtering.

Views

Route-policy view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
route-base	write

Usage Guidelines

Usage Scenario

The filtering rule (based on the destination addresses, next hop addresses, or source addresses of IPv6 routes) configured using this command takes effect only after an IPv6 prefix or an ACL is configured.

If the if-match ipv6 next-hop prefix-list aa command is used but the ip ipv6-prefix aa is not configured, all routes are permitted. This is the same case when the ACL is used.
If the if-match ipv6 next-hop prefix-list aa command is used after the ip ipv6-prefix aa permit 2001:db8:1::1 128 command is used, the routes with the next hop address 2001:db8:1::1 are permitted. This is the same case when the ACL is used.

Prerequisites

A route-policy has been configured using the route-policy command.

An ACL has been configured using the acl command.

Configuration Impact

When you filter routes based on the next hop addresses of IPv6 routes, the routes that match the filtering rule are permitted and the route that do not match the filtering rule are denied.

Precautions

If the next hop address or source address of a route to be filtered is 0::0, by default, the system matches the route and considers its mask length as 0.

If the next hop address or source address of a route to be filtered is not 0::0, by default, the system matches the route and considers its mask length as 128.

For a named ACL, when the rule command is used to configure a filtering rule, only the source address range specified in source and the time period specified in time-range take effect on the filtering rule.

Example

# Define a rule to match the routes with the IPv6 routing information in ACL 2000.

<HUAWEI> system-view
[~HUAWEI] acl ipv6 2000
[*HUAWEI-acl6-basic-2000] quit
[*HUAWEI] route-policy policy permit node 10
[*HUAWEI-route-policy] if-match ipv6 next-hop acl 2000