Brocade Communications Systems IPMC5000PEF manual Filtering Msdp source-group pairs, Example

Filtering MSDP source-group pairs

device(config)# router msdp vrf blue device(config-msdp-router-vrf blue)# originator-id loopback 2 device(config-msdp-router-vrf blue)# exit

Syntax: [no] originator-id type number

The originator-idcommand instructs MSDP to use the specified interface IP address as the IP address of the RP in an SA message. This address must be the address of the interface used to connect the RP to the source. The default address used is the RP IP address.

The type parameter indicates the type of interface used by the RP. Ethernet, loopback and virtual routing interfaces (ve) can be used.

The number parameter specifies the interface number (for example: loopback number, port number or virtual routing interface number.)

Filtering MSDP source-group pairs

You can filter individual source-group pairs in MSDP Source-Active messages:

•sa-filter in - Filters source-group pairs received in Source-Active messages from an MSDP neighbor.

•sa-filter originate - Filters self-originated source-group pairs in outbound Source-Active messages sent to an MSDP neighbor

•sa-filter out - Filters self-originated and forwarded source-group pairs in outbound Source-Active messages sent to an MSDP neighbor

Filtering incoming and outgoing Source-Active messages

The following example configures filters for incoming Source-Active messages from three MSDP neighbors:

•For peer 2.2.2.99, all source-group pairs in Source-Active messages from the neighbor are filtered (dropped).

•For peer 2.2.2.97, all source-group pairs except those with source address matching 10.x.x.x and group address of 235.10.10.1 are permitted.

•For peer 2.2.2.96, all source-group pairs except those associated with RP 2.2.42.3 are permitted.

To configure filters for incoming Source-Active messages, enter commands at the MSDP VRF configuration level.

To configure filters for outbound Source-Active messages, enter the optional out keyword.

Example

The following commands configure extended ACLs. The ACLs will be used in route maps, which will be used by the Source-Active filters.

device(config)# access-list 123 permit ip 10.0.0.0 0.255.255.255 host 235.10.10.1 device(config)# access-list 124 permit ip host 2.2.42.3 any

device(config)# access-list 125 permit ip any any

The following commands configure the route maps.

device(config)# route-map msdp_map deny 1 device(config-routemap msdp_map)# match ip address 123 device(config-routemap msdp_map)# exit device(config)# route-map msdp_map permit 2 device(config-routemap msdp_map)# match ip address 125 device(config-routemap msdp_map)# exit

FastIron Ethernet Switch IP Multicast Configuration Guide	125
53-1003085-02