After a filtering policy is configured for routes imported by OSPF, only the routes that match the policy can be advertised.
The system view is displayed.
The OSPF view is displayed.
Run any of the following commands as required:
Run quit
Return to the system view.
The ACL view is displayed.
Run rule [ rule-id ] [ name rule-name ] { deny | permit }
A rule is configured for the ACL.
When the rule command is used to configure a filtering rule for a named ACL, only the configurations specified by source and time-range take effect.
If the action specified in an ACL rule is permit, a route matching the rule will be accepted or advertised by the system.
If the action specified in an ACL rule is deny, a route matching the rule will not be accepted or advertised by the system.
If the network segment of a route is not within the range specified in an ACL rule, the route will not be accepted or advertised by the system.
If an ACL does not contain any rules, none of the routes matched against the filter-policy that uses this ACL will be accepted or advertised by the system.
Routes can be filtered using a blacklist or whitelist:
If ACL rules are used for matching in configuration order, the system matches the rules in ascending order of their IDs.
Filtering using a blacklist: Configure a rule with a smaller ID and specify the action deny in this rule to filter out the unwanted routes. Then, configure another rule with a larger ID in the same ACL and specify the action permit in this rule to accept or advertise the other routes.
Filtering using a whitelist: Configure a rule with a smaller ID and specify the action permit in this rule to permit the routes to be accepted or advertised. Then, configure another rule with a larger ID in the same ACL and specify the action deny in this rule to filter out the unwanted routes.
The OSPF view is displayed.
Run filter-policy { acl-number | acl-name acl-name } export [ direct | static | unr | bgp | { rip | isis | ospf } [ process-id ] ]
An export policy that is based on the basic ACL is configured for OSPF to filter imported routes to be advertised.
Run filter-policy ip-prefix ip-prefix-name export [ direct | static | unr | bgp | { rip | isis | ospf } [ process-id ] ]
An export policy that is based on the IP prefix list is configured for OSPF to filter imported routes to be advertised.
Run filter-policy route-policy route-policy-name export [ direct | static | unr | bgp | { rip | isis | ospf } [ process-id ] ]
An export policy that is based on the route-policy is configured for OSPF to filter imported routes to be advertised.
The configuration is committed.