Filtering msdp source-group pairs, Example – Brocade FastIron Ethernet Switch IP Multicast Configuration Guide User Manual
Page 127
device(config)# router msdp vrf blue
device(config-msdp-router-vrf blue)# originator-id loopback 2
device(config-msdp-router-vrf blue)# exit
Syntax: [no] originator-id type number
The originator-id command instructs MSDP to use the specified interface IP address as the IP address
of the RP in an SA message. This address must be the address of the interface used to connect the RP
to the source. The default address used is the RP IP address.
The type parameter indicates the type of interface used by the RP. Ethernet, loopback and virtual
routing interfaces (ve) can be used.
The number parameter specifies the interface number (for example: loopback number, port number or
virtual routing interface number.)
Filtering MSDP source-group pairs
You can filter individual source-group pairs in MSDP Source-Active messages:
•
sa-filter in - Filters source-group pairs received in Source-Active messages from an MSDP
neighbor.
•
sa-filter originate - Filters self-originated source-group pairs in outbound Source-Active messages
sent to an MSDP neighbor
•
sa-filter out - Filters self-originated and forwarded source-group pairs in outbound Source-Active
messages sent to an MSDP neighbor
Filtering incoming and outgoing Source-Active messages
The following example configures filters for incoming Source-Active messages from three MSDP
neighbors:
•
For peer 2.2.2.99, all source-group pairs in Source-Active messages from the neighbor are filtered
(dropped).
•
For peer 2.2.2.97, all source-group pairs except those with source address matching 10.x.x.x and
group address of 235.10.10.1 are permitted.
•
For peer 2.2.2.96, all source-group pairs except those associated with RP 2.2.42.3 are permitted.
To configure filters for incoming Source-Active messages, enter commands at the MSDP VRF
configuration level.
To configure filters for outbound Source-Active messages, enter the optional out keyword.
Example
The following commands configure extended ACLs. The ACLs will be used in route maps, which will be
used by the Source-Active filters.
device(config)# access-list 123 permit ip 10.0.0.0 0.255.255.255 host 235.10.10.1
device(config)# access-list 124 permit ip host 2.2.42.3 any
device(config)# access-list 125 permit ip any any
The following commands configure the route maps.
device(config)# route-map msdp_map deny 1
device(config-routemap msdp_map)# match ip address 123
device(config-routemap msdp_map)# exit
device(config)# route-map msdp_map permit 2
device(config-routemap msdp_map)# match ip address 125
device(config-routemap msdp_map)# exit
Filtering MSDP source-group pairs
FastIron Ethernet Switch IP Multicast Configuration Guide
125
53-1003085-02