Filtering advertised source-active messages – Brocade BigIron RX Series Configuration Guide User Manual
Page 783
![background image](/manuals/361694/783/background.png)
BigIron RX Series Configuration Guide
705
53-1002484-04
Configuring Multicast Source Discovery Protocol (MSDP)
24
NOTE
The default action is to deny all source-group pairs from the specified neighbor. If you want to
permit some pairs, use route maps.
•
sa-filter in 2.2.2.97 route-map msdp_map – This command ignores source-group pairs
received from neighbor 2.2.2.97 if the pairs have source address 10.x.x.x and any group
address.
•
sa-filter in 2.2.2.96 route-map msdp2_map rp-route-map msdp2_rp_map – This command
accepts all source-group pairs except those associated with RP 2.2.42.3.
Syntax: [no] sa-filter in <ip-addr> [route-map <map-tag>] [rp-route-map <rp-map-tag>]
The <ip-addr> parameter specifies the IP address of the MSDP neighbor. The filter applies to
Active-Source messages received from this neighbor.
The route-map <map-tag> parameter specifies a route map. The BigIron RX applies the filter to
source-group pairs that match the route map. Use the match ip address <acl-id> command in the
route map to specify an extended ACL that contains the source and group addresses.
The rp-route-map <rp-map-tag> parameter specifies a route map to use for filtering based on
Rendezvous Point (RP) address. Use this parameter if you want to filter Source-Active messages
based on their origin. If you use the route-map parameter instead, messages are filtered based on
source-group pairs but not based on origin. Use the match ip route-source <acl-id> command in the
route map to specify the RP address.
NOTE
The default filter action is deny. If you want to permit some source-group pairs, use a route map. A
permit action in the route map allows the BigIron RX to receive the matching source-group pairs. A
deny action in the route map drops the matching source-group pairs.
Filtering advertised source-active messages
The following example configures the BigIron RX to advertise all source-group pairs except the ones
that have source address 10.x.x.x.
The following commands configure an IP address on port 3/1. This is the port on which the MSDP
neighbors will be configured.
BigIron RX(config)# interface ethernet 3/1
BigIron RX(config-if-e1000-e1000-3/1)# ip address 2.2.2.98/24
BigIron RX(config-if-e1000-3/1)# exit
The following commands configure a loopback interface. The BigIron RX will use this interface as
the source address for communicating with the MSDP neighbors.
BigIron RX(config)# interface loopback 1
BigIron RX(config-lbif-1)# ip address 9.9.9.8/32
BigIron RX(config-lbif-1)# exit
The following command configures an extended ACL to specify the source and group addresses you
want to filter.
BigIron RX(config)# access-list 123 permit ip 10.0.0.0 0.255.255.255 any