Filtering Source-Active Request Messages - Cisco Catalyst 9500 series Configuration Manual

Configuring MSDP

Filtering Source-Active Request Messages

By default, only Device that are caching SA information can respond to SA requests. By default, such a Device
honors all SA request messages from its MSDP peers and supplies the IP addresses of the active sources.
However, you can configure the Device to ignore all SA requests from an MSDP peer. You can also honor
only those SA request messages from a peer for groups described by a standard access list. If the groups in
the access list pass, SA request messages are accepted. All other such messages from the peer for other groups
are ignored.
To return to the default setting, use the no ip msdp filter-sa-request {ip-address| name} global configuration
command.
Follow these steps to configure one of these options:
Procedure
Step 1
Step 2
Step 3
Command or Action
startup-config
Command or Action
enable
Example:
Device> enable
configure terminal
Example:
Device# configure terminal
Use one of the following:
• ip msdp filter-sa-request
{ip-address| name}
• ip msdp filter-sa-request
{ip-address| name}
list access-list-number
Example:
Device(config)# ip msdp filter
sa-request 171.69.2.2
Routing Configuration Guide, Cisco IOS XE Everest 16.6.x (Catalyst 9500 Switches)
Controlling Source Information that Your Switch Originates
Purpose
Purpose
Enables privileged EXEC mode. Enter your password
if prompted.
Enters the global configuration mode.
Filters all SA request messages from the specified MSDP
peer.
or
Filters SA request messages from the specified MSDP
peer for groups that pass the standard access list. The
access list describes a multicast group address. The range
for the access-list-number is 1 to 99.
35