6-4z The permit argument specifies the matching mode for a defined node in the routing policy to be inpermit mode. If a route matches the rules for the node, the apply clauses for the node will beexecuted and the test of the next node will not be taken. If not, however, the route takes the test ofthe next node.z The deny argument specifies the matching mode for a defined node in the routing policy to be indeny mode. In this mode, no apply clause is executed. If a route satisfies all the if-match clausesof the node, no apply clause for the node will be executed and the test of the next node will not betaken. If not, however, the route takes the test of the next node.z If multiple nodes are defined in a routing policy, at least one of them should be in permit mode.When a routing policy is applied to filtering routing information, if a piece of routing information doesnot match any node, the routing information will be denied by the routing policy. If all the nodes inthe routing policy are in deny mode, all routing information will be denied by the routing policy.Defining if-match Clauses and apply ClausesFollow these steps to define if-match clauses and apply clauses:To do... Use the command... RemarksEnter system view system-view —Enter the route-policy viewroute-policy route-policy-name{ permit | deny } nodenode-number—Define a rule to match ASpath of BGP routinginformationif-match as-path as-path-number OptionalDefine a rule to matchCOMMUNITY attributes ofBGP routing informationif-match community{ basic-community-number[ whole-match ] |adv-community-number }OptionalDefine a rule to match the IPaddress of routinginformationif-match { acl acl-number | ip-prefixip-prefix-name }OptionalBy default, no matching is performed onthe address of routing information.Define a rule to match thecost of routes if-match cost valueOptionalBy default, no matching is performedagainst the cost of routes.Define a rule to match thenext-hop interface of routinginformationif-match interface interface-typeinterface-numberOptionalBy default, no matching is performed onthe next-hop interface of routinginformation.Define a rule to match thenext-hop address of routinginformationif-match ip next-hop { aclacl-number | ip-prefixip-prefix-name }OptionalBy default, no matching is performed onthe next-hop address of routinginformation.
