Filtering advertised source-active messages – Brocade BigIron RX Series Configuration Guide User Manual

Page 783

Advertising
background image

BigIron RX Series Configuration Guide

705

53-1002484-04

Configuring Multicast Source Discovery Protocol (MSDP)

24

NOTE

The default action is to deny all source-group pairs from the specified neighbor. If you want to
permit some pairs, use route maps.

sa-filter in 2.2.2.97 route-map msdp_map – This command ignores source-group pairs
received from neighbor 2.2.2.97 if the pairs have source address 10.x.x.x and any group
address.

sa-filter in 2.2.2.96 route-map msdp2_map rp-route-map msdp2_rp_map – This command
accepts all source-group pairs except those associated with RP 2.2.42.3.

Syntax: [no] sa-filter in <ip-addr> [route-map <map-tag>] [rp-route-map <rp-map-tag>]

The <ip-addr> parameter specifies the IP address of the MSDP neighbor. The filter applies to
Active-Source messages received from this neighbor.

The route-map <map-tag> parameter specifies a route map. The BigIron RX applies the filter to
source-group pairs that match the route map. Use the match ip address <acl-id> command in the
route map to specify an extended ACL that contains the source and group addresses.

The rp-route-map <rp-map-tag> parameter specifies a route map to use for filtering based on
Rendezvous Point (RP) address. Use this parameter if you want to filter Source-Active messages
based on their origin. If you use the route-map parameter instead, messages are filtered based on
source-group pairs but not based on origin. Use the match ip route-source <acl-id> command in the
route map to specify the RP address.

NOTE

The default filter action is deny. If you want to permit some source-group pairs, use a route map. A
permit action in the route map allows the BigIron RX to receive the matching source-group pairs. A
deny action in the route map drops the matching source-group pairs.

Filtering advertised source-active messages

The following example configures the BigIron RX to advertise all source-group pairs except the ones
that have source address 10.x.x.x.

The following commands configure an IP address on port 3/1. This is the port on which the MSDP
neighbors will be configured.

BigIron RX(config)# interface ethernet 3/1

BigIron RX(config-if-e1000-e1000-3/1)# ip address 2.2.2.98/24

BigIron RX(config-if-e1000-3/1)# exit

The following commands configure a loopback interface. The BigIron RX will use this interface as
the source address for communicating with the MSDP neighbors.

BigIron RX(config)# interface loopback 1

BigIron RX(config-lbif-1)# ip address 9.9.9.8/32

BigIron RX(config-lbif-1)# exit

The following command configures an extended ACL to specify the source and group addresses you
want to filter.

BigIron RX(config)# access-list 123 permit ip 10.0.0.0 0.255.255.255 any

Advertising