Cisco Systems 3750E manual End, 43-13

Chapter 43 Configuring MSDP

Configuring MSDP

	Command	Purpose
Step 3
	access-listaccess-list-number {deny	(Optional) Create an IP extended access list, repeating the command as
	permit} protocol source source-wildcard	many times as necessary.
	destination destination-wildcard	• For access-list-number, enter the number specified in Step 2.
		• The deny keyword denies access if the conditions are matched. The
		permit keyword permits access if the conditions are matched.
		• For protocol, enter ip as the protocol name.
		• For source, enter the number of the network or host from which the
		packet is being sent.
		• For source-wildcard, enter the wildcard bits in dotted decimal
		notation to be applied to the source. Place ones in the bit positions
		that you want to ignore.
		• For destination, enter the number of the network or host to which
		the packet is being sent.
		• For destination-wildcard, enter the wildcard bits in dotted decimal
		notation to be applied to the destination. Place ones in the bit
		positions that you want to ignore.
		Recall that the access list is always terminated by an implicit deny
		statement for everything.
Step 4
	end	Return to privileged EXEC mode.
Step 5
	show running-config	Verify your entries.
Step 6
	copy running-config startup-config	(Optional) Save your entries in the configuration file.

To remove the filter, use the no ip msdp sa-filter out {ip-address name} [list access-list-number] [route-mapmap-tag] global configuration command.

This example shows how to allow only (S,G) pairs that pass access list 100 to be forwarded in an SA message to the peer named switch.cisco.com:

Switch(config)# ip msdp peer switch.cisco.com connect-source gigabitethernet1/0/1

Switch(config)# ip msdp sa-filter out switch.cisco.com list 100

Switch(config)# access-list 100 permit ip 171.69.0.0 0.0.255.255 224.20 0 0.0.255.255

	Catalyst 3750-E and 3560-E Switch Software Configuration Guide
OL-9775-02		43-13