Filtering Source-Active Request Messages By default, only device that are caching SA information can respond to SA requests. By default, such a device honors all SA request messages from its MSDP peers and supplies the IP addresses of the active sources. However, you can configure the device to ignore all SA requests from an MSDP peer. You can also honor only those SA request messages from a peer for groups described by a standard access list. If the groups in the access list pass, SA request messages are accepted. All other such messages from the peer for other groups are ignored.
To return to the default setting, use the no ip msdp filter-sa-request { ip-address | name } global configuration command. Follow these steps to configure one of these options: Configuring MSDP Filtering Source-Active Request Messages Command or Action Purpose • source-wildcard—Enters the wildcard bits in dotted decimal notation to be applied to the source. Place ones in the bit positions that you want to ignore. • destination—Enters the number of the network or host to which the packet is being sent. • destination-wildcard—Enters the wildcard bits in dotted decimal notation to be applied to the destination. Place ones in the bit positions that you want to ignore.
Recall that the access list is always terminated by an implicit deny statement for everything. Step 5 end Example: Device(config)#end Returns to privileged EXEC mode. Step 6 show running-config Example: Device#show running-config Verifies your entries. Step 7 copy running-config startup-config Example: Device#copy running-config startup-config (Optional) Saves your entries in the configuration file. Configuring MSDP 11