ExtremeCloud Orchestrator CLI Administration Guide

Run the following command to configure the IPv4 prefix list:

efa policy prefix-list create ?
Flags:
  --type string          Type of prefix-list. Valid types is ipv4|ipv6
  --name string          Name of Prefix list
  --rule stringArray     Rule in format  seq[seq-num], action[permit/deny], prefix[IPv4 prefix|IPv6 prefix],ge[prefix-len],le[prefix-len]. Example: seq [5], action[permit], prefix [10.0.0.0/8|2001:db8: :/32],ge[10], le[24]

Note

Use the ge and le keywords to specify the range of the prefix length for exact match. Exact match is assumed when neither ge nor le is specified.

The following example creates an IPv4 prefix list:

efa policy prefix-list create –-name prefix_v4 –-type ipv4 –-rule seq[5],action[permit],prefix[10.0.0.0/8],ge[16]

The following example creates an IPv6 prefix list:

efa policy prefix-list create --type ipv6 --name prefix_1_in –rule "seq[11], action[permit], prefix[2001:db8::/48]"

Name: prefix_1_in
+------+---------+--------+---------------+----+----+---------+
| Type | Seq num | Action |    Prefix     | Ge | Le | Status  |
+------+---------+--------+---------------+----+----+---------+
| ipv6 | 11      | permit | 2001:db8::/48 |    |    | Success |
+------+---------+--------+---------------+----+----+---------+
Prefix-list details

Run the following command to configure or remove prefix-list configuration on devices:

You can also use this command to add or remove rules.

efa policy prefix-list update –type [ipv4|ipv6] --name [list name] --operation [operation name]

Note

The add-device and remove-device operations configure or remove a prefix list rules on the specified devices.
The add-rule and remove-rule operations configure or remove a prefix list rules on the specified devices. If the prefix list is configured on the device, the rule is added or removed from the device.

The following is an example of IPv4 prefix list update:

Add device
The following example configures prefix list on the devices:
```
efa policy prefix-list update –-name prefix_v4 –-type ipv4 –-operation add-device --ip 10.20.246.10-11
```
Delete device
The following example removes prefix list from the devices:
```
efa policy prefix-list update –-name prefix_v4 –-type ipv4 –-operation remove-device --ip 10.20.246.10-11
```

Add rule

The following example adds rule to the already created prefix list:

efa policy prefix-list update –-name prefix_v4 –-type ipv4 –-operation add-rule –-rule seq[5],action[permit],prefix[10.0.0.0/8],ge[16]

Delete rule

The following example removes rule from the existing prefix list:

efa policy prefix-list update –-name prefix_v4 –-type ipv4 –-operation remove-rule –-rule seq[5],action[permit],prefix[10.0.0.0/8],ge[16]

The following example updates an IPv6 prefix list:

efa policy prefix-list update --type ipv6 --name prefix_1_in --operation add-device --ip 10.20.246.29-30
+-------------+------+---------+--------+---------------+----+----+
|    Name     | Type | Seq num | Action |    Prefix     | Ge | Le |
+-------------+------+---------+--------+---------------+----+----+
| prefix_1_in | ipv6 | 11      | permit | 2001:db8::/48 |    |    |
+-------------+------+---------+--------+---------------+----+----+
Prefix-list details
+--------------+---------+--------+
|  IP Address  | Result  | Reason |
+--------------+---------+--------+
| 10.20.246.29 | Success |        |
+--------------+---------+--------+
| 10.20.246.30 | Success |        |
+--------------+---------+--------+
Device Results

efa policy prefix-list update --type ipv6 --name prefix_1_in --rule "seq[11],action[permit],prefix[2001:db8::/48],ge[64],le[128]" --operation add-rule
+-------------+------+---------+--------+---------------+----+-----+
|    Name     | Type | Seq num | Action |    Prefix     | Ge | Le  |
+-------------+------+---------+--------+---------------+----+-----+
| prefix_1_in | ipv6 | 13      | permit | 2001:db8::/32 | 48 | 128 |
+-------------+------+---------+--------+---------------+----+-----+
| prefix_1_in | ipv6 | 14      | permit | 2003:db8::/32 | 64 | 128 |
+-------------+------+---------+--------+---------------+----+-----+
| prefix_1_in | ipv6 | 15      | deny   | 2003:db8::/63 | 64 | 128 |
+-------------+------+---------+--------+---------------+----+-----+
| prefix_1_in | ipv6 | 11      | permit | 2001:db8::/48 | 64 | 128 |
+-------------+------+---------+--------+---------------+----+-----+
Prefix-list details
+--------------+---------+--------+
|  IP Address  | Result  | Reason |
+--------------+---------+--------+
| 10.20.246.29 | Success |        |
+--------------+---------+--------+
| 10.20.246.30 | Success |        |
+--------------+---------+--------+
Device Results

Verify the switch configuration on the SLX device.

SLX# show running-config ip prefix-list
ip prefix-list prefix_v4 seq 5 permit 10.0.0.0/8 ge 16

Run the following command to show the IPv4 prefix list on a list of devices:

efa policy prefix-list list ?
Flags:
       --type string      Type of prefix-list. is ipv4 or ipv6
       --ip string        Comma separated range of device IP addresses. Example: 1.1.1.1-3,1.1.1.2,2.2.2.2

The following example shows an IPv4 prefix list:

IPv4 prefix list show

efa policy prefix-list list –-type ipv4 –-ip 10.20.246.10-11

Name: prefix_v4
+------+---------+--------+------------+----+----+--------------+-------------+
| Type | Seq num | Action |   Prefix   | Ge | Le | DeviceIP     | AppState    |
+------+---------+--------+------------+----+----+--------------+-------------+
| ipv4 |    5    | permit | 10.0.0.0/8 | 16 |    | 10.20.246.10 | cfg-in-sync |
+------+---------+--------+------------+----+----+---------------+------------+
| ipv4 |    5    | permit | 10.0.0.0/8 | 16 |    | 10.20.246.11 | cfg-in-sync |
+------+---------+--------+------------+----+----+--------------+-------------+

The following example shows an IPv6 prefix list:

IPv6 prefix list show

efa policy prefix-list list --type ipv6 --ip 10.20.246.29-30

Prefix-list details:

Name: prefix_1_in
+------+---------+--------+---------------+----+----+--------------+------------------+
| Type | Seq num | Action |    Prefix     | Ge | Le |   DeviceIP   |     AppState     |
+------+---------+--------+---------------+----+----+--------------+------------------+
| ipv6 | 11      | permit | 2001:db8::/48 |    |    | 10.20.246.29 | cfg-in-sync      |
+------+---------+--------+---------------+----+----+--------------+------------------+
| ipv6 | 11      | permit | 2001:db8::/48 |    |    | 10.20.246.30 | cfg-in-sync      |
+------+---------+--------+---------------+----+----+--------------+------------------+

efa policy prefix-list list --type ipv6
Prefix-list details:
Name: prefix_1_in
+------+---------+--------+---------------+----+----+
| Type | Seq num | Action |    Prefix     | Ge | Le |
+------+---------+--------+---------------+----+----+
| ipv6 | 11      | permit | 2001:db8::/48 |    |    |
+------+---------+--------+---------------+----+----+

Run the following command to delete the IPv4 prefix list on all devices:

This step deletes the prefix list on all devices and XCO.

efa policy prefix-list delete ?
Flags:
  --type string      Type of prefix-list. is ipv4 or ipv6
  --name string      Name of Prefix list

The following example deletes an IPv4 prefix list with name prefix_v4:

efa policy prefix-list delete –-type ipv4 –-name prefix_v4

The following example deletes an IPv6 prefix list:

System validates the IP prefix list name and type before running the delete operation. If a prefix list is bound to BGP peer or peer-group, an attempt to delete prefix-list will check for the presence of binding and report an error.

efa policy prefix-list delete --name plist2 --type ipv6
+--------+------+---------+
|  Name  | Type | Status  |
+--------+------+---------+
| plist2 | ipv6 | Success |
+--------+------+---------+
Prefix-list details
+--------------+---------+--------+
|  IP Address  | Result  | Reason |
+--------------+---------+--------+
| 10.20.246.29 | Success |        |
+--------------+---------+--------+
| 10.20.246.30 | Success |        |
+--------------+---------+--------+

Note

For more information about commands and supported parameters, see ExtremeCloud Orchestrator Command Reference, 3.3.1 .

Configure IP Prefix List on Devices

About this task

Procedure