1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

access-list NAME [seq (1-4294967295)] permit IPV4-NETWORK
access-list NAME [seq (1-4294967295)] deny IPV4-NETWORK

#NAME：规则名称
#seq：规则序列号，不填则在上一个规则序列号基础上加5，若存在则加10，以此类推
#permit(deny)：允许通过还是拒绝通过
#IPV4-NETWORK： ipv4网络

#example
access-list filter deny 10.0.0.0/9
access-list filter permit 10.0.0.0/8
access-list filter seq 13 permit 10.0.0.0/7

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

ip prefix-list NAME (permit|deny) PREFIX [le LEN] [ge LEN]
ip prefix-list NAME seq NUMBER (permit|deny) PREFIX [le LEN] [ge LEN]
no ip prefix-list NAME #取消io前缀规则
show ip prefix-list NAME #显示ip前缀规则

#NAME：规则名称
#seq：规则序列号，不填则在上一个规则序列号基础上加5，若存在则加10，以此类推
#permit(deny)：允许通过还是拒绝通过
#PREFIX： ip前缀
#le LEN：匹配小于LEN的ip前缀
#ge LEN：匹配大于LEN的ip前缀

#example
ip prefix-list pl-allowed-adv seq 5 permit 82.195.133.0/25
ip prefix-list pl-allowed-adv seq 10 deny any

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

bgp community-list [standard|expanded] NAME permit|deny COMMUNITY
no bgp community-list [standard|expanded] NAME
show bgp community-list [NAME detail]

#standard：COMMUNITY是一个确切值
#expanded：COMMUNITY可为正则表达式，都不填则由系统自动识别
#permit|deny：过滤规则

#example
bgp community-list 70 permit 7675:70
bgp community-list 70 deny

1
2
3
4
5
6
7
8
9

bgp as-path access-list WORD permit|deny LINE

#WORD：列表号
#LINE：正则表达式

#example
bgp as-path access-list 99 permit _0_
bgp as-path access-list 99 permit _23456_
bgp as-path access-list 99 permit _1310[0-6][0-9]_|_13107[0-1]_