Cisco IE-4000 Software Configuration Manual page 745

Configuring MSDP
Configuring MSDP
However, you can configure the switch to ignore all SA requests from an MSDP peer. You can also honor only those SA
request messages from a peer for groups described by a standard access list. If the groups in the access list pass, SA
request messages are accepted. All other such messages from the peer for other groups are ignored.
Follow this procedure to configure one of these options. This procedure is optional.
DETAILED STEPS
Command
1. configure terminal
2. ip msdp filter-sa-request
ip-address | name
or
ip msdp filter-sa-request
{ip-address | name} list
access-list-number
3. access-list access-list-number
{deny | permit} source
[source-wildcard]
4. end
5. show running-config
6. copy running-config
startup-config
To return to the default setting, use the no ip msdp filter-sa-request {ip-address | name} global configuration command.
EXAMPLE
This example shows how to configure the switch to filter SA request messages from the MSDP peer at 171.69.2.2. SA
request messages from sources on network 192.4.22.0 pass access list 1 and are accepted; all others are ignored.
Switch(config)# ip msdp filter sa-request 171.69.2.2 list 1
Switch(config)# access-list 1 permit 192.4.22.0 0.0.0.255
Table 0-4
Purpose
Enter global configuration mode.
Filter all SA request messages from the specified MSDP peer.
or
Filter SA request messages from the specified MSDP peer for
groups that pass the standard access list. The access list
describes a multicast group address. The range for the
access-list-number is 1 to 99.
Create an IP standard access list, repeating the command as
many times as necessary.

For access-list-number, the range is 1 to 99.

The deny keyword denies access if the conditions are
matched. The permit keyword permits access if the
conditions are matched.

For source, enter the number of the network or host from
which the packet is being sent.

(Optional) For source-wildcard, enter the wildcard bits in
dotted decimal notation to be applied to the source. Place
ones in the bit positions that you want to ignore.
Recall that the access list is always terminated by an implicit
deny statement for everything.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
741