Peer Sa-Request-Policy - HP 5900 Series Command Reference Manual

Views
MSDP view
Predefined user roles
network-admin
Parameters
export: Specifies the outgoing direction.
import: Specifies the incoming direction.
peer-address: Specifies an MSDP peer by its IP address.
acl-number: Specifies an IPv4 advanced ACL number in the range of 3000 to 3999. If you specify an
ACL, the device accepts and forwards only SA messages that the ACL permits. If you do not specify an
ACL, the device discards all SA messages when any of the following conditions exists:
You do not specify an ACL.
•
The specified ACL does not exist.
•
• The specified ACL does not have valid rules.
Usage guidelines
In an IPv4 advanced ACL, the source keyword and the destination keyword match against multicast
source addresses and multicast group addresses in SA messages, respectively.
If you specify the vpn-instance keyword in an ACL rule, the rule does not take effect. The other optional
parameters except the time-range keyword and the fragment keyword in the ACL rules are ignored.
This command controls the acceptance and forwarding of SA messages. You can also use the
import-source command to configure a filtering rule to control the creation of SA messages.
Examples
# On the public network, configure an SA outgoing policy to forward only SA messages that ACL 3100
permits to the MSDP peer 125.10.7.6.
<Sysname> system-view
[Sysname] acl number 3100
[Sysname-acl-adv-3100] rule permit ip source 170.15.0.0 0.0.255.255 destination 225.1.0.0
0.0.255.255
[Sysname-acl-adv-3100] quit
[Sysname] msdp
[Sysname-msdp] peer 125.10.7.6 connect-interface vlan-interface 100
[Sysname-msdp] peer 125.10.7.6 sa-policy export acl 3100
Related commands
display msdp peer-status
•
import-source
•

peer sa-request-policy

Use peer sa-request-policy to configure an SA request policy.
Use undo peer sa-request-policy to remove the configured SA request policy.
179