Peer Sa-Request-Policy - HP 3600 v2 Series Command Reference Manual

<Sysname> system-view
[Sysname] acl number 3100
[Sysname-acl-adv-3100] rule permit ip source 170.15.0.0 0.0.255.255 destination 225.1.0.0
0.0.255.255
[Sysname-acl-adv-3100] quit
[Sysname] msdp vpn-instance mvpn
[Sysname-msdp-mvpn] peer 125.10.7.6 connect-interface vlan-interface 100
[Sysname-msdp-mvpn] peer 125.10.7.6 sa-policy export acl 3100

peer sa-request-policy

Syntax
peer peer-address sa-request-policy [ acl acl-number ]
undo peer peer-address sa-request-policy
View
Public network MSDP view, VPN instance MSDP view
Default level
2: System level
Parameters
peer-address: Specifies an MSDP peer address.
acl-number: Specifies a basic ACL number, in the range of 2000 to 2999. If you provide this argument,
the SA requests of only the multicast groups that match the ACL are accepted and other SA requests are
ignored. If you do not provide this argument, all SA requests are ignored.
Description
Use peer sa-request-policy to configure a filtering rule for SA request messages.
Use undo peer sa-request-policy to remove the configured SA request filtering rule.
By default, SA request messages are not filtered.
Related commands: display msdp peer-status.
Examples
# Configure an SA request filtering rule on the public network so that SA messages from the MSDP peer
175.58.6.5 are accepted only if the multicast group address in the SA messages is in the range of
225.1.1.0/24.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 225.1.1.0 0.0.0.255
[Sysname-acl-basic-2001] quit
[Sysname] msdp
[Sysname-msdp] peer 175.58.6.5 sa-request-policy acl 2001
# Configure an SA request filtering rule in VPN instance mvpn so that SA messages from the MSDP peer
175.58.6.5 are accepted only if the multicast group address in the SA messages is in the range of
225.1.1.0/24.
<Sysname> system-view
[Sysname] acl number 2001
194