49-13
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-21521-01
Chapter 49 Configuring MSDP
Configuring MSDP
To remove the filter, use the no ip msdp sa-filter out {ip-address | name} [list access-list-number]
[route-map map-tag] global configuration command.
This example shows how to allow only (S,G) pairs that pass access list 100 to be forwarded in an SA
messag
e to the peer named switch.cisco.com:
Switch(config)# ip msdp peer switch.cisco.com connect-source gigabitethernet0/1
Switch(config)# ip msdp sa-filter
out switch.cisco.com list 100
Switch(config)# access-list 100 pe
rmit ip 171.69.0.0 0.0.255.255 224.20 0 0.0.255.255
Step 3
access-list access-list-number {deny |
permit} protocol source source-wildcard
destination destination-wildcard
(Optional) Create an IP extended access list, repeating the command as
many times as necessary.
• For access-list-number, enter the number specified in Step 2.
• The deny keyword denies access if the conditions are matched. The
permit keyword permits access if the conditions are matched.
• For protocol, enter ip as the protocol name.
• For source, enter the number of the network or host from which the
packet is being sent.
• For source-wildcard, enter the wildcard bits in dotted decimal
notation to be applied to the source. Place ones in the bit positions
that you want to ignore.
• For destination, enter the number of the network or host to which
the packet is being sent.
• For destination-wildcard, enter the wildcard bits in dotted decimal
notation to be applied to the destination. Place ones in the bit
positions that you want to ignore.
Recall that the access list is always t
erminated by an implicit deny
statement for everything.
Step 4
end Return to privileged EXEC mode.
Step 5
show running-config Verify your entries.
Step 6
copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose
To Next Page
Loading...
Need help?
General
