if-match ip next-hop ip-prefix

Function

The if-match ip next-hop ip-prefix command configures a filtering rule that is based on next-hop addresses of IPv4 routes.

The undo if-match ip next-hop ip-prefix command cancels the configuration.

By default, no filtering rule based on next-hop addresses of IPv4 routes is configured.

Format

if-match ip next-hop ip-prefix ip-prefix-name

undo if-match ip next-hop [ ip-prefix ip-prefix-name ]

Parameters

Parameter	Description	Value
ip-prefix ip-prefix-name	Specifies the name of the IP prefix list.	The name is a string of 1 to 169 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string.

Parameter

Description

Value

ip-prefix ip-prefix-name

Specifies the name of the IP prefix list.

The name is a string of 1 to 169 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string.

Views

Route-policy view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
route-base	write

Usage Guidelines

Usage Scenario

The if-match ip command is widely applied. The filtering rule configured using this command takes effect only after an IP prefix or an ACL is configured. For example:

If the if-match ip next-hop ip-prefix aa command is used but the IP prefix aa is not configured, all routes are permitted. This is the same case when the ACL is used.
If the if-match ip next-hop ip-prefix aa command is used after the ip ip-prefix aa permit 1.1.1.1 32 command is used, the routes with the next hop address 1.1.1.1 are permitted. This is the same case when the ACL is used.

Prerequisites

A route-policy has been configured using the route-policy command.

An IP prefix has been configured using the ip ip-prefix command.

Configuration Impact

When you filter routes based on the next hop addresses, the routes that match the filtering rule are permitted and the route that do not match the filtering rule are denied.

Precautions

If the next hop address or source address of a route to be filtered is 0.0.0.0, by default, the system considers the mask length as 0 and matches the route.

If the next hop address or source address of a route to be filtered is not 0.0.0.0, by default, the system considers the mask length as 32 and matches the route.

Example

# Define a rule to match the routes with the next hop address in the IP prefix list named p1.

<HUAWEI> system-view
[~HUAWEI] ip ip-prefix p1 permit 10.0.192.0 8 greater-equal 17 less-equal 18
[*HUAWEI] route-policy policy permit node 10
[*HUAWEI-route-policy] if-match ip next-hop ip-prefix p1