source-address (PBR rule view)

Function

The source-address command sets the source address of packets as a matching condition of a PBR rule.

The undo source-address command deletes the configuration.

Format

source-address { address-set address-set-name &<1-6> | ipv4-address { ipv4-mask-length | mask mask-address | wildcard } [ description description ] | ipv6-address ipv6-prefix-length [ description description ] | range { ipv4-start-address ipv4-end-address | ipv6-start-address ipv6-end-address } [ description description ] | mac-address &<1-6> | isp isp-name &<1-6> | domain-set domain-set-name &<1-6> | any }

undo source-address { address-set address-set-name &<1-6> | ipv4-address { ipv4-mask-length | mask mask-address | wildcard } [ description ] | ipv6-address ipv6-prefix-length [ description ] | range { ipv4-start-address ipv4-end-address | ipv6-start-address ipv6-end-address } [ description ] | mac-address &<1-6> | isp isp-name &<1-6> | domain-set domain-set-name &<1-6> | all }

Parameters

Parameter	Description	Value
address-set address-set-name	Specifies the name of an address set.	The value must be the name of an existing address set.
ipv4-address	Specifies an IPv4 address.	The value is in decimal dotted notation.
ipv4-mask-length	Specifies the mask length of an IPv4 address.	The value is an integer ranging from 1 to 32.
mask mask-address	Specifies the mask of an IPv4 address.	The value is in dotted decimal notation whose binary form cannot be inconsecutive. For example, 255.0.255.0 is not a legitimate wildcard because its binary form is 11111111.00000000.11111111.00000000. In the binary form, digits 1 are to be matched, whereas digits 0 are not. For example, 192.168.1.1/255.0.255.0 indicates that only IP addresses of the 192..1. form are to be matched.
wildcard	Specifies the wildcard of an IPv4 address.	The value is in dotted decimal notation whose binary form cannot be inconsecutive. For example, 0.255.0.255 is not a legitimate wildcard because its binary form is 00000000.11111111.00000000.11111111. In the binary form, digits 0 are to be matched, whereas digits 1 are not. For example, 192.168.1.1/0.255.0.255 indicates that only IP addresses of the 192..1. form are to be matched.
description description	Specifies the description of an individual IPv4/IPv6 address or address segment.	The value is a string that ranges from 1 to 128.
ipv6-address ipv6-prefix-length	Specifies an IPv6 address range for source IP address-based matching. ipv6-address specifies an IPv6 address. ipv6-prefix-length specifies the IPv6 prefix length.	-
range ipv4-start-address ipv4-end-address	Specifies an IPv4 address range for source IP address-based matching. ipv4-start-address specifies the start IPv4 address. ipv4-end-address specifies the end IPv4 address.	-
range ipv6-start-address ipv6-end-address	Specifies an IPv6 address range for source IP address-based matching. ipv6-start-address specifies the start IPv6 address. ipv6-end-address specifies the end IPv6 address.	-
mac-address	Specifies the MAC address. All models except USG6680E and USG6712E/6716E support this parameter.	The MAC address can be in one of the following formats: H-H-H (Each H is a 4-digit hexadecimal number, such as 00e0 and fc01. If an H contains less than four bits, it means that the first bits contained in the H are 0s. For example, if an H is e0, it is equal to 00e0.) XX:XX:XX:XX:XX:XX (Each X is a 1-digit hexadecimal number.) XX-XX-XX-XX-XX-XX (Each X is a 1-digit hexadecimal number.) The MAC address cannot be all 0s or all Fs (such as FFFF-FFFF-FFFF, 00:00:00:00:00:00, or 00-00-00-00-00-00) in any format.
isp-name	Specifies the name of an ISP address group.	-
domain-set domain-set-name &<1-6>	Specifies the name of a domain group.	The value must be the name of an existing domain group. You can reference or cancel the reference of a maximum of six domain groups at a time. NOTE: When an IP address corresponds to multiple domain names, an IP address can be used to search for a maximum of 16 domain names. If the domain name to be searched is not in the policy rule, the policy cannot be matched. You are advised to configure multiple domain names with the same IP address in the same policy rule.
any	Indicates any address.	-
all	Deletes all configurations that use source IP addresses as a matching condition.	-

Views

PBR rule view

Default Level

2: Configuration level

Usage Guidelines

Matching conditions are used to identify traffic and traffic that matches conditions is routed independently from other traffic. The source-address command configures source IP address-based traffic matching.

Example

# Set source IP address 10.1.1.0/24 as a matching condition of a PBR rule.

<sysname> system-view
[sysname] policy-based-route
[sysname-policy-pbr] rule name abc
[sysname-policy-pbr-rule-abc] source-address 10.1.1.0 24