Use Of Outgoing Filter Lists In Msdp; Use Of Incoming Filter Lists In Msdp - Cisco Catalyst 3850 series Configuration Manual

Use of Outgoing Filter Lists in MSDP

Use of Outgoing Filter Lists in MSDP
By default, an MSDP-enabled device forwards all SA messages it receives to all of its MSDP peers. However,
you can prevent SA messages from being forwarded to MSDP peers by creating outgoing filter lists. Outgoing
filter lists apply to all SA messages, whether locally originated or received from another MSDP peer, whereas
SA origination filters apply only to locally originated SA messages. For more information about enabling a
filter for MSDP SA messages originated by the local device, see the
an RP for Local Sources, on page 221
By creating an outgoing filter list, you can control the SA messages that a device forwards to a peer as follows:
• You can filter all outgoing SA messages forwarded to a specified MSDP peer by configuring the device
• You can filter a subset of outgoing SA messages forwarded to a specified MSDP peer based on (S, G)
• You can filter a subset of outgoing SA messages forwarded to a specified MSDP peer based on match
• You can filter a subset of outgoing SA messages from a specified peer based on the announcing RP
• You can configure an outgoing filter list that includes an extended access list, a route map, and either
Arbitrary filtering of SA messages can result in downstream MSDP peers being starved of SA messages
Caution
for legitimate active sources. Care, therefore, should be taken when using these sorts of filters. Normally,
outgoing filter lists are used only to reject undesirable sources, such as sources using private addresses.

Use of Incoming Filter Lists in MSDP

By default, an MSDP-enabled device receives all SA messages sent to it from its MSDP peers. However, you
can control the source information that a device receives from its MSDP peers by creating incoming filter
lists.
By creating incoming filter lists, you can control the incoming SA messages that a device receives from its
peers as follows:
• You can filter all incoming SA messages from a specified MSDP peer by configuring the device to
• You can filter a subset of incoming SA messages from a specified peer based on (S, G) pairs defined in
IP Multicast Routing Configuration Guide, Cisco IOS XE Release 3.6E (Catalyst 3850 Switches)
208
to stop forwarding its SA messages to the MSDP peer.
pairs defined in an extended access list by configuring the device to only forward SA messages to the
MSDP peer that match the (S, G) pairs permitted in an extended access list. The forwarding of all other
SA messages to the MSDP peer will be stopped.
criteria defined in a route map by configuring the device to only forward SA messages that match the
criteria defined in the route map. The forwarding of all other SA messages to the MSDP peer will be
stopped.
address contained in the SA message by configuring the device to filter outgoing SA messages based
on their origin, even after an SA message has been transmitted across one or more MSDP peers. The
forwarding of all other SA messages to the MSDP peer will be stopped.
an RP access list or an RP route map. In this case, all conditions must be true for the MSDP peer to
forward the outgoing SA message.
ignore all SA messages sent to it from the specified MSDP peer.
an extended access list by configuring the device to only receive SA messages from the MSDP peer that
section.
Configuring MSDP
Controlling SA Messages Originated by
OL-32598-01