Configuring the IPv4 address prefix list on the firewall

30

Perform as follows to configure the IPv4 IP-prefix list on the firewall:
1. In the user view, run the system-view command to enter the system view.
2. Run the ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } ip-address mask-length [ greater-equal greater-equal-value ] [ less-equal less-equal-value ] command to configure the address prefix list.
The range of mask length can be specified as mask-length <= greater-equal-value <= less equal-value <= 32. If only greater-equal is specified, the range of the prefix is from greater-equal-value to 32; if only less-equal is specified, the range of the prefix is from mask-length to less-equal-value.
During the matching, the system checks entries identified by the index number in the ascending order. Once an entry meets the condition, it means that all entries pass the IP-prefix filtering. The system does not match other entries.
If the action in all entries is deny, no route is permitted by this filtering list. You are advised to define a permit 0.0.0.0 0 less-equal 32 entry behind the multiple entries with action deny to allow all the other routes to pass the IP-prefix filtering.
Note:
If more than one IP-prefix entry is defined, at least one entry should be in permit matching mode.

Other related questions:
How to configure prefixes on U1900
For details, see office route and prefix configuration topics under Configuration > Configuration Guide > Configuring Trunks in the product documentation .

View DNS list on S series switch through a client
S series switches (except S1700 switches) can deliver DNS parameters to clients through DHCP. After a PC obtains an IP address from a switch that functions as a DHCP server, run the ipconfig/all command on the PC to view DNS parameters delivered by the switch.

How to configure an outgoing prefix on the U1900 series unified gateway
A prefix is a string consisting of first several digits or all digits of a called number. Determine prefixes based on the dialing habits and the user number plan. Procedure: Note: Before adding the local call prefix, you must add the national toll call prefix and international toll call prefix; otherwise, the local call prefix cannot be added. 1. Configuring an outgoing prefix on the CLI Add outgoing prefix 0. Set the call category to basic (basic service call), set the call attribute to local (local call), enable called number change, set the number change index to 1, and set the office route selection code to 0. config add prefix dn 0 callcategory basic callattribute local cldpredeal yes cldindex 1 officeselectcode 0 Parameter description: callcategory: indicates the call type. basic: indicates basic services such as intra-office and local call services. callattribute: indicates the call attribute. For basic services, the call attribute can be inter (intra-office calls), local (local calls), interlocal (intra-office or local calls), ddd (national toll calls), idd (international calls), and emergency (emergency calls). cldpredeal: indicates whether to change a called number. If the value of this parameter is yes, you must set cldindex. cldindex: indicates the called number change index, which is defined using the config add predeal command. clipredeal: indicates whether to change a calling number. If the value of this parameter is yes, you must set cliindex. cliindex: indicates the calling number change index, which is defined using the config add predeal command. 2. Configuring an outgoing prefix on the web page (for U1900 V100R001C20 and V200R003) (1) Log in to the web management system of the U1900. (2) Choose Trunk > Prefix Configuration. On the prefix configuration page, click Create. C. In the dialog box for creating a prefix, configure the prefix. (4) Click Data Save in the upper right corner of the web page. For detailed parameter descriptions, see the online help of the web management system.

IPv6 over IPv4 automatic tunnel configuration
To configure an IPv6 over IPv4 automatic tunnel, perform the following steps: 1. Run the system-view command to enter the system view. 2. Run the interface tunnel interface-number command to create a tunnel interface and enter the tunnel interface view. 3. Run the tunnel-protocol ipv6-ipv4 auto-tunnel command to set the tunnel encapsulation type to automatic tunnel. 4. Run the source { ipv4-address | interface-type interface-number } command to specify the source address or source interface of the automatic tunnel. Note: ?You can directly specify the IPv4 address of the interface used to connect to the IPv4 network as the source address or specify this interface as the source interface. ?You can specify a physical port or a logical interface such as the Loopback interface as the source interface of the tunnel. ?Source addresses or source interfaces of different IPv6 over IPv4 automatic tunnels must be different. 5. Run the ipv6 enable command to enable the IPv6 function on the tunnel interface. 6. Run the ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } command to set the tunnel interface address to an IPv6 address that is compatible with IPv4. The IPv6 address configured for the tunnel interface must be compatible with IPv4; that is, the most significant 96 bits are 0s, and the least significant 32 bits are the source address of the automatic tunnel or the IPv4 address of the source interface. The format is ::ipv4-address. As shown in Figure 1, the source address of the automatic tunnel of FW_A is 1.1.1.1/24, and the IPv6 address of the tunnel interface is ::1.1.1.1/96.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top