Policy service supports configuration of IP prefix list for IPv4 and IPv6.
efa policy prefix-list create ? Flags: --type string Type of prefix-list. Valid types is ipv4|ipv6 --name string Name of Prefix list --rule stringArray Rule in format seq[seq-num], action[permit/deny], prefix[IPv4 prefix|IPv6 prefix],ge[prefix-len],le[prefix-len]. Example: seq [5], action[permit], prefix [10.0.0.0/8|2001:db8: :/32],ge[10], le[24]
Note
Use thege
and le
keywords to specify the
range of the prefix length for exact match. Exact match is assumed when
neither ge
nor le
is specified.The following example creates an IPv4 prefix list:
efa policy prefix-list create –-name prefix_v4 –-type ipv4 –-rule seq[5],action[permit],prefix[10.0.0.0/8],ge[16]
The following example creates an IPv6 prefix list:
efa policy prefix-list create --type ipv6 --name prefix_1_in –rule "seq[11], action[permit], prefix[2001:db8::/48]" Name: prefix_1_in +------+---------+--------+---------------+----+----+---------+ | Type | Seq num | Action | Prefix | Ge | Le | Status | +------+---------+--------+---------------+----+----+---------+ | ipv6 | 11 | permit | 2001:db8::/48 | | | Success | +------+---------+--------+---------------+----+----+---------+ Prefix-list details
efa policy prefix-list update –type [ipv4|ipv6] --name [list name] --operation [operation name]
Note
add-device
and remove-device
operations configure or remove a prefix
list rules on the specified devices. add-rule
and remove-rule
operations configure or remove a prefix
list rules on the specified devices. If the prefix list is
configured on the device, the rule is added or removed from the
device.The following is an example of IPv4 prefix list update:
The following example configures prefix list on the devices:
efa policy prefix-list update –-name prefix_v4 –-type ipv4 –-operation add-device --ip 10.20.246.10-11
The following example removes prefix list from the devices:
efa policy prefix-list update –-name prefix_v4 –-type ipv4 –-operation remove-device --ip 10.20.246.10-11
The following example adds rule to the already created prefix list:
efa policy prefix-list update –-name prefix_v4 –-type ipv4 –-operation add-rule –-rule seq[5],action[permit],prefix[10.0.0.0/8],ge[16]
The following example removes rule from the existing prefix list:
efa policy prefix-list update –-name prefix_v4 –-type ipv4 –-operation remove-rule –-rule seq[5],action[permit],prefix[10.0.0.0/8],ge[16]
The following example updates an IPv6 prefix list:
efa policy prefix-list update --type ipv6 --name prefix_1_in --operation add-device --ip 10.20.246.29-30 +-------------+------+---------+--------+---------------+----+----+ | Name | Type | Seq num | Action | Prefix | Ge | Le | +-------------+------+---------+--------+---------------+----+----+ | prefix_1_in | ipv6 | 11 | permit | 2001:db8::/48 | | | +-------------+------+---------+--------+---------------+----+----+ Prefix-list details +--------------+---------+--------+ | IP Address | Result | Reason | +--------------+---------+--------+ | 10.20.246.29 | Success | | +--------------+---------+--------+ | 10.20.246.30 | Success | | +--------------+---------+--------+ Device Results efa policy prefix-list update --type ipv6 --name prefix_1_in --rule "seq[11],action[permit],prefix[2001:db8::/48],ge[64],le[128]" --operation add-rule +-------------+------+---------+--------+---------------+----+-----+ | Name | Type | Seq num | Action | Prefix | Ge | Le | +-------------+------+---------+--------+---------------+----+-----+ | prefix_1_in | ipv6 | 13 | permit | 2001:db8::/32 | 48 | 128 | +-------------+------+---------+--------+---------------+----+-----+ | prefix_1_in | ipv6 | 14 | permit | 2003:db8::/32 | 64 | 128 | +-------------+------+---------+--------+---------------+----+-----+ | prefix_1_in | ipv6 | 15 | deny | 2003:db8::/63 | 64 | 128 | +-------------+------+---------+--------+---------------+----+-----+ | prefix_1_in | ipv6 | 11 | permit | 2001:db8::/48 | 64 | 128 | +-------------+------+---------+--------+---------------+----+-----+ Prefix-list details +--------------+---------+--------+ | IP Address | Result | Reason | +--------------+---------+--------+ | 10.20.246.29 | Success | | +--------------+---------+--------+ | 10.20.246.30 | Success | | +--------------+---------+--------+ Device Results
SLX# show running-config ip prefix-list ip prefix-list prefix_v4 seq 5 permit 10.0.0.0/8 ge 16
efa policy prefix-list list ? Flags: --type string Type of prefix-list. is ipv4 or ipv6 --ip string Comma separated range of device IP addresses. Example: 1.1.1.1-3,1.1.1.2,2.2.2.2
The following example shows an IPv4 prefix list:
IPv4 prefix list show
efa policy prefix-list list –-type ipv4 –-ip 10.20.246.10-11 Name: prefix_v4 +------+---------+--------+------------+----+----+--------------+-------------+ | Type | Seq num | Action | Prefix | Ge | Le | DeviceIP | AppState | +------+---------+--------+------------+----+----+--------------+-------------+ | ipv4 | 5 | permit | 10.0.0.0/8 | 16 | | 10.20.246.10 | cfg-in-sync | +------+---------+--------+------------+----+----+---------------+------------+ | ipv4 | 5 | permit | 10.0.0.0/8 | 16 | | 10.20.246.11 | cfg-in-sync | +------+---------+--------+------------+----+----+--------------+-------------+
The following example shows an IPv6 prefix list:
IPv6 prefix list show
efa policy prefix-list list --type ipv6 --ip 10.20.246.29-30 Prefix-list details: Name: prefix_1_in +------+---------+--------+---------------+----+----+--------------+------------------+ | Type | Seq num | Action | Prefix | Ge | Le | DeviceIP | AppState | +------+---------+--------+---------------+----+----+--------------+------------------+ | ipv6 | 11 | permit | 2001:db8::/48 | | | 10.20.246.29 | cfg-in-sync | +------+---------+--------+---------------+----+----+--------------+------------------+ | ipv6 | 11 | permit | 2001:db8::/48 | | | 10.20.246.30 | cfg-in-sync | +------+---------+--------+---------------+----+----+--------------+------------------+ efa policy prefix-list list --type ipv6 Prefix-list details: Name: prefix_1_in +------+---------+--------+---------------+----+----+ | Type | Seq num | Action | Prefix | Ge | Le | +------+---------+--------+---------------+----+----+ | ipv6 | 11 | permit | 2001:db8::/48 | | | +------+---------+--------+---------------+----+----+
This step deletes the prefix list on all devices and XCO.
efa policy prefix-list delete ? Flags: --type string Type of prefix-list. is ipv4 or ipv6 --name string Name of Prefix list
The following example deletes an IPv4 prefix list with name prefix_v4:
efa policy prefix-list delete –-type ipv4 –-name prefix_v4
The following example deletes an IPv6 prefix list:
System validates the IP prefix list name and type before running the delete operation. If a prefix list is bound to BGP peer or peer-group, an attempt to delete prefix-list will check for the presence of binding and report an error.
efa policy prefix-list delete --name plist2 --type ipv6 +--------+------+---------+ | Name | Type | Status | +--------+------+---------+ | plist2 | ipv6 | Success | +--------+------+---------+ Prefix-list details +--------------+---------+--------+ | IP Address | Result | Reason | +--------------+---------+--------+ | 10.20.246.29 | Success | | +--------------+---------+--------+ | 10.20.246.30 | Success | | +--------------+---------+--------+
Note
For more information about commands and supported parameters, see ExtremeCloud Orchestrator Command Reference, 3.6.0 .