Controlling Source Information That Your Switch Receives - Cisco Catalyst 9500 series Configuration Manual

Controlling Source Information that Your Switch Receives

Step 6
Controlling Source Information that Your Switch Receives
By default, the Device receives all SA messages that its MSDP RPF peers send to it. However, you can control
the source information that you receive from MSDP peers by filtering incoming SA messages. In other words,
you can configure the Device to not accept them.
You can perform one of these actions:
• Filter all incoming SA messages from an MSDP peer
• Specify an IP extended access list to pass certain source/group pairs
• Filter based on match criteria in a route map
Follow these steps to apply a filter:
Procedure
Step 1
Step 2
Step 3
Routing Configuration Guide, Cisco IOS XE Everest 16.6.x (Catalyst 9500 Switches)
40
Command or Action
copy running-config startup-config
Example:
Device# copy running-config
startup-config
Command or Action
enable
Example:
Device> enable
configure terminal
Example:
Device# configure terminal
Use one of the following:
• ip msdp sa-filter in
{ip-address | name}
• ip msdp sa-filter in
Purpose
(Optional) Saves your entries in the configuration
file.
Purpose
Enables privileged EXEC mode. Enter your password if
prompted.
Enters the global configuration mode.
• Filters all SA messages to the specified MSDP peer.
• Passes only those SA messages from the specified
peer that pass the IP extended access list. The range
for the extended access-list-number is 100 to 199.
If both the list and the route-map keywords are used,
all conditions must be true to pass any (S,G) pair in
outgoing SA messages.
Configuring MSDP