225
When the SA cache mechanism is enabled and the router receives a new (*, G) join message, the router
searches its SA cache first.
• If the corresponding (S, G) entry does not exist in the cache, the router waits for the SA message that
its MSDP peer will send in the next cycle.
• If the corresponding (S, G) entry exists in the cache, the router joins the corresponding SPT rooted
at S.
To protect the router effectively against denial of service (DoS) attacks, you can set a limit on the number
of (S, G) entries the router can cache.
To configure the SA message cache:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter public network MSDP view or
VPN instance MSDP view.
msdp [ vpn-instance
vpn-instance-name ]
N/A
3. Enable the SA cache mechanism.
cache-sa-enable
Optional.
Enabled by default.
4. Configure the maximum number of (S,
G) entries learned from the specified
MSDP peer that the router can cache.
peer peer-address
sa-cache-maximum sa-limit
Optional.
8192 by default.
Displaying and maintaining MSDP
Ste
Command
Remarks
1. Display brief information
about MSDP peers.
display msdp [ all-instance |
vpn-instance vpn-instance-name ]
brief [ state { connect | down |
listen | shutdown | up } ] [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
2. Display detailed information
about the status of MSDP
peers.
display msdp [ all-instance |
vpn-instance vpn-instance-name ]
peer-status [ peer-address ] [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
3. Display the (S, G) entry
information in the SA cache.
display msdp [ all-instance |
vpn-instance vpn-instance-name ]
sa-cache [ group-address |
source-address | as-number ] * [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
4. Display the number of (S, G)
entries in the SA cache.
display msdp [ all-instance |
vpn-instance vpn-instance-name ]
sa-count [ as-number ] [ | { begin |
exclude | include }
regular-expression ]
Available in any view
To Next Page
Loading...
