device(config)# route-map msdp2_map permit 1
device(config-routemap msdp2_map)# match ip address 125
device(config-routemap msdp2_map)# exit
device(config)# route-map msdp2_rp_map deny 1
device(config-routemap msdp2_rp_map)# match ip route-source 124
device(config-routemap msdp2_rp_map)# exit
device(config)# route-map msdp2_rp_map permit 2
device(config-routemap msdp2_rp_map)# match ip route-source 125
device(config-routemap msdp2_rp_map)# exit
The following commands configure the Source-Active filters.
To specify VRF information, enter the following commands at the MSDP VRF configuration level.
device(config)# router msdp vrf blue
device(config-msdp-router-vrf blue)# sa-filter in 2.2.2.99
device(config-msdp-router-vrf blue)# sa-filter in 2.2.2.97 route-map msdp_map
device(config-msdp-router-vrf blue)# sa-filter in 2.2.2.96 route-map msdp2_map rp-
route-map msdp2_rp_map
The sa-filter commands configure the following filters:
•sa-filter in 2.2.2.99 - This command drops all source-group pairs received from neighbor
2.2.2.99.
NOTE
The default action is to deny all source-group pairs from the specified neighbor. If you want to permit
some pairs, use route maps.
•sa-filter in 2.2.2.97 route-map msdp_map - This command drops source-group pairs received
from neighbor 2.2.2.97 if the pairs have source addresses matching 10.x.x.x and group address
235.10.10.1.
•sa-filter in 2.2.2.96 route-map msdp2_map rp-route-map msdp2_rp_map - This command
accepts all source-group pairs except those associated with RP 2.2.42.3.
Syntax: [no] sa-filter in | originate | out ip-addr [route-map map-tag ] [rp-route-map rp-map-tag]
Selecting the in option applies the filter to incoming Source-Active messages.
Selecting the originate option applies the filter to self-originated outbound Source-Active messages.
Selecting the out option applies the filter to self-originated and forwarded outbound Source-Active
messages.
The ip-addr parameter specifies the IP address of the MSDP neighbor. The filters apply to Source-
Active messages received from or sent to this neighbor.
The route-mapmap-tag parameter specifies a route map. The device applies the filter to source-group
pairs that match the route map. Use the match ip addressacl-id command in the route map to specify
an extended ACL that contains the source addresses.
The rp-route-maprp-map-tag parameter specifies a route map to use for filtering based on
Rendezvous Point (RP) address. Use this parameter if you want to filter Source-Active messages
based on their originating RP. Use the match ip route-sourceacl-id command in the route map to
specify an extended ACL that contains the RP address.
NOTE
The default filter action is deny. If you want to permit some source-group pairs, use a route map.
IPv4 Multicast Protocols
126 FastIron Ethernet Switch IP Multicast Configuration Guide
53-1003085-02