IP Access List

About this task

BGP peers and route maps can reference a single IP based access list. Apply IP access lists to both inbound and outbound route updates. Every route update is passed through the access list. BGP applies each rule in the access list in the order it appears in the list. When a route matches a rule, the decision to permit or deny the route is applied. No additional rules are processed.

To define a IP access list:

Procedure

  1. Select the ConfigurationNetworkBGPIP Access List.
    Click to expand in new window
    GUID-85900813-9426-462D-B344-B7BD2A6AB7D5-low.png
  2. Select Add to create a new IP access list, Edit to modify the attributes of a selected list or Delete to remove an obsolete list. Existing policies can be copied or renamed as needed.
    Click to expand in new window
    GUID-71F0B5B1-21C0-413A-BB5E-8D5AADBACF46-low.png
  3. Set the following IP Access List settings:
    IP Prefix Provide the IP address used to define the prefix list rule.
    Access Use the drop-down menu to Permit or Deny requests for network access originating from IP addresses with the IP prefix. The default setting is deny.
    Exact Match Check to require an exact match for the IP prefix before access is granted. Permit and deny apply only when there is an exact match between the regular expression and the autonomous system path.This setting is disabled by default.
  4. Click OK to save the changes, Reset to revert to the last saved configuration or Exit to close the screen.