Procedure Configuring MSDP Filtering Source-Active Request Messages Command or Action Purpose Step 1 enable Example: Device>enable Enables privileged EXEC mode. • Enter your password if prompted. Step 2 configure terminal Example: Device#configure terminal Enters global configuration mode. Step 3 Use one of the following: • ip msdp filter-sa-request { ip-address name } • ip msdp filter-sa-request { ip-address name } list access-list-number Example: Device(config)#ip msdp filter sa-request 171.69.2.2 Filters all SA request messages from the specified MSDP peer. or Filters SA request messages from the specified MSDP peer for groups that pass the standard access list.
The access list describes a multicast group address. The range for the access-list-number is 1 to 99. Step 4 access-list access-list-number {deny | permit} source [source-wildcard] Example: Device(config)#access-list 1 permit 192.4.22.0 0.0.0.255 Creates an IP standard access list, repeating the command as many times as necessary. • For access-list-number, the range is 1 to 99. • The deny keyword denies access if the conditions are matched. The permit keyword permits access if the conditions are matched. • For source, enter the number of the network or host from which the packet is being sent.
• (Optional) For source-wildcard, enter the wildcard bits in dotted decimal notation to be applied to the source. Place ones in the bit positions that you want to ignore. Recall that the access list is always terminated by an implicit deny statement for everything. Configuring MSDP 12