Configuring IPv6 IS-IS to Import External Routes

If devices in an IS-IS routing domain need to learn external routes, configure IS-IS on a border device of this routing domain to import external routes.

Context

If a border device is configured to advertise the default route, all traffic destined beyond the routing domain is forwarded by this border device because the other devices in the IS-IS routing domain do not have external routes. As a result, this border device will be overloaded.

If multiple border devices are deployed, optimal routes to other routing domains need to be selected. To ensure optimal routes are selected, all the other devices in the IS-IS routing domain must learn all or some external routes.

Routing policies can be configured to import or advertise external routes that meet specified conditions to the IS-IS routing domain.

Procedure

Configure IS-IS to import external routes.
1. Run system-view
  The system view is displayed.
2. Run isis [ process-id ]
  The IS-IS view is displayed.
3. Configuring IS-IS to Import External IPv6 Routes
  - To import external routes to IS-IS and set a cost for them, run the ipv6 import-route { direct | static | | unr{ ripng | isis | ospfv3 } [ process-id ] } | bgp[ permit-ibgp ] } [ cost cost | tag tag | route-policy route-policy-name | route-filter route-filter-name | [ level-1 | level-2 | level-1-2 ] ] ^* command.
  - To import external routes and keep the original costs, run the ipv6 import-route { { ospfv3 | ripng | isis } [ process-id ] | bgp [ permit-ibgp ] | direct| unr} inherit-cost [ tag tag | route-policy route-policy-name | route-filter route-filter-name | [ level-1 | level-2 | level-1-2 ] ] ^* command. When configuring IS-IS to retain the original cost value of the imported route, the source routes cannot be static.
  IS-IS advertises all imported external routes to an IS-IS routing domain by default.
  
  If only some imported external routes need to be advertised to the IS-IS routing domain, run the ipv6 filter-policy export command to set a filtering policy.
4. Run commit
  The configuration is committed.
(Optional) Configure IS-IS to advertise some external routes to an IS-IS routing domain.
1. Run system-view
  The system view is displayed.
2. Run isis [ process-id ]
  The IS-IS view is displayed.
3. Configure IS-IS to advertise specified external routes to the IS-IS routing domain.
  Run any of the following commands as required:
  - Configure a basic ACL:
    1. Run ipv6 filter-policy { acl6-number | acl6-name acl6-name } export [ protocol [ process-id ] ]
    2. Run quit
      
      Return to the system view.
    3. Run acl ipv6 { name basic-acl6-name basic | [ number ] basic-acl6-number } [ match-order { config | auto } ]
      
      The ACL view is displayed.
    4. Run rule [ rule-id ] [ name rule-name ] { deny | permit } [ fragment | source { source-ipv6-address { prefix-length | source-wildcard } | source-ipv6-address/prefix-length | any } | time-range time-name | [ vpn-instance vpn-instance-name | vpn-instance-any ] ] ^*
      
      A rule is configured for the ACL.
      
      When the rule command is run to configure rules for a named ACL, only the source address range specified by source and the time period specified by time-range are valid as the rules.
      When a filtering policy of a routing protocol is used to filter routes:
      If the action specified in an ACL rule is permit, a route that matches the rule will be received or advertised by the system.
      
      If the action specified in an ACL rule is deny, a route that matches the rule will not be received or advertised by the system.
      
      If a route has not matched any ACL rules, the route will not be received or advertised by the system.
      
      If an ACL does not contain any rules, all routes matching the route-policy that references the ACL will not be received or advertised by the system.
      
      In the configuration order, the system first matches a route with a rule that has a smaller number and then matches the route with a rule with a larger number. Routes can be filtered using a blacklist or a whitelist:
      
      Route filtering using a blacklist: Configure a rule with a smaller number and specify the action deny in this rule to filter out the unwanted routes. Then, configure another rule with a larger number in the same ACL and specify the action permit in this rule to receive or advertise the other routes.
      
      Route filtering using a whitelist: Configure a rule with a smaller number and specify the action permit in this rule to permit the routes to be received or advertised by the system. Then, configure another rule with a larger number in the same ACL and specify the action deny in this rule to filter out unwanted routes.
  - Based on the IP prefix:
    
    Run ipv6 filter-policy ipv6-prefix ipv6-prefix-name export [ protocol [ process-id ] ]
  - Based on the Route-Policy:
    
    Run ipv6 filter-policy route-policy route-policy-name export [ protocol [ process-id ] ]
  After this command is run, only external routes that meet the specified conditions can be advertised to the IS-IS routing domain.
4. Run commit
  The configuration is committed.