Configuring IP Multicast Protocols
December 2005 © Foundry Networks, Inc. 19 - 37
The following commands enable MSDP and configure the MSDP neighbors on port 3/1.
The following commands configure the Source-Active filters.
The sa-filter commands configure the following filters:
• sa-filter in 2.2.2.99 – This command drops all source-group pairs received from neighbor 2.2.2.99.
NOTE: The default action is to deny all source-group pairs from the specified neighbor. If you want to permit
some pairs, use route maps.
• sa-filter in 2.2.2.97 route-map msdp_map – This command drops source-group pairs received from
neighbor 2.2.2.97 if the pairs have source address 10.x.x.x and any group address.
• sa-filter in 2.2.2.96 route-map msdp2_map rp-route-map msdp2_rp_map – This command accepts all
source-group pairs except those associated with RP 2.2.42.3.
CLI Syntax
Syntax: [no] sa-filter in <ip-addr> [route-map <map-tag>] [rp-route-map <rp-map-tag>]
The <ip-addr> parameter specifies the IP address of the MSDP neighbor. The filter applies to Active-Source
messages received from this neighbor.
The route-map <map-tag> parameter specifies a route map. The Layer 3 Switch applies the filter to source-group
pairs that match the route map. Use the match ip address <acl-id> command in the route map to specify an
extended ACL that contains the source and group addresses.
The rp-route-map <rp-map-tag> parameter specifies a route map to use for filtering based on Rendezvous Point
(RP) address. Use this parameter if you want to filter Source-Active messages based on their origin. If you use
the route-map parameter instead, messages are filtered based on source-group pairs but not based on origin.
Use the match ip route-source <acl-id> command in the route map to specify the RP address.
NOTE: The default filter action is deny. If you want to permit some source-group pairs, use a route map. A
permit action in the route map allows the Layer 3 Switch to receive the matching source-group pairs. A deny
action in the route map drops the matching source-group pairs.
Filtering Advertised Source-Active Messages
The following example configures the Layer 3 Switch to advertise all source-group pairs except the ones that have
source address 10.x.x.x.
FastIron SuperX Router(config)# router msdp
FastIron SuperX Router(config-msdp-router)# exit
FastIron SuperX Router(config)# interface ethernet 3/1
FastIron SuperX Router(config-if-3/1)# msdp-peer 2.2.2.99 connect-source loopback
1
FastIron SuperX Router(config-if-3/1)# msdp-peer 2.2.2.97 connect-source loopback
1
FastIron SuperX Router(config-if-3/1)# msdp-peer 2.2.2.96 connect-source loopback
1
FastIron SuperX Router(config-if-3/1)# exit
FastIron SuperX Router(config)# router msdp
FastIron SuperX Router(config-msdp-router)# sa-filter in 2.2.2.99
FastIron SuperX Router(config-msdp-router)# sa-filter in 2.2.2.97 route-map
msdp_map
FastIron SuperX Router(config-msdp-router)# sa-filter in 2.2.2.96 route-map
msdp2_map rp-route-map msdp2_rp_map