Dell PowerConnect B-RX - Filtering Advertised Source-Active Messages

632 BigIron RX Series Configuration Guide
53-1002253-01
Configuring Multicast Source Discovery Protocol (MSDP)
23
• sa-filter in 2.2.2.97 route-map msdp_map – This command ignores source-group pairs
received from neighbor 2.2.2.97 if the pairs have source address 10.x.x.x and any group
address.
• sa-filter in 2.2.2.96 route-map msdp2_map rp-route-map msdp2_rp_map – This command
accepts all source-group pairs except those associated with RP 2.2.42.3.
Syntax: [no] sa-filter in <ip-addr> [route-map <map-tag>] [rp-route-map <rp-map-tag>]
The <ip-addr> parameter specifies the IP address of the MSDP neighbor. The filter applies to
Active-Source messages received from this neighbor.
The route-map <map-tag> parameter specifies a route map. The BigIron RX applies the filter to
source-group pairs that match the route map. Use the match ip address <acl-id> command in the
route map to specify an extended ACL that contains the source and group addresses.
The rp-route-map <rp-map-tag> parameter specifies a route map to use for filtering based on
Rendezvous Point (RP) address. Use this parameter if you want to filter Source-Active messages
based on their origin. If you use the route-map parameter instead, messages are filtered based on
source-group pairs but not based on origin. Use the match ip route-source <acl-id> command in the
route map to specify the RP address.
NOTE
The default filter action is deny. If you want to permit some source-group pairs, use a route map. A
permit action in the route map allows the BigIron RX to receive the matching source-group pairs. A
deny action in the route map drops the matching source-group pairs.
Filtering advertised source-active messages
The following example configures the BigIron RX to advertise all source-group pairs except the ones
that have source address 10.x.x.x.
The following commands configure an IP address on port 3/1. This is the port on which the MSDP
neighbors will be configured.
BigIron RX(config)# interface ethernet 3/1
BigIron RX(config-if-e1000-e1000-3/1)# ip address 2.2.2.98/24
BigIron RX(config-if-e1000-3/1)# exit
The following commands configure a loopback interface. The BigIron RX will use this interface as
the source address for communicating with the MSDP neighbors.
BigIron RX(config)# interface loopback 1
BigIron RX(config-lbif-1)# ip address 9.9.9.8/32
BigIron RX(config-lbif-1)# exit
The following command configures an extended ACL to specify the source and group addresses you
want to filter.
BigIron RX(config)# access-list 123 permit ip 10.0.0.0 0.255.255.255 any
The following commands configure a route map. The map matches on source address 10.x.x.x and
any group address. Since the action is deny, the Source-Active filter that uses this route map will
remove the source-group pairs that match this route map from the Source-Active messages to the
neighbor.
BigIron RX(config)# route-map msdp_map deny 1
BigIron RX(config-routemap msdp_map)# match ip address 123
BigIron RX(config-routemap msdp_map)# exit