Cisco Catalyst 9500 series Configuration Manual page 51

Configuring MSDP
Step 4
Command or Action
{ip-address | name}
list access-list-number
• ip msdp sa-filter in
{ip-address | name}
route-map map-tag
Example:
Device(config)# ip msdp sa-filter
in switch.cisco.com
or
Device(config)# ip msdp sa-filter
in list 100
or
Device(config)# ip msdp sa-filter
in switch.cisco.com route-map 22
access-list access-list-number {deny |
permit} protocol source
source-wildcard destination
destination-wildcard
Example:
Device(config)# access list 100
permit ip 194.1.22.0 1.1.1.1
194.3.44.0 1.1.1.1
Routing Configuration Guide, Cisco IOS XE Everest 16.6.x (Catalyst 9500 Switches)
Controlling Source Information that Your Switch Receives
Purpose
• Passes only those SA messages from the specified
MSDP peer that meet the match criteria in the route
map map-tag.
If all match criteria are true, a permit from the route
map passes routes through the filter. A deny filters
routes.
(Optional) Creates an IP extended access list, repeating the
command as many times as necessary.
• access-list-number, enter the number specified in
Step 2.
• The deny keyword denies access if the conditions
are matched. The permit keyword permits access if
the conditions are matched.
• For protocol, enter ip as the protocol name.
• For source, enter the number of the network or host
from which the packet is being sent.
• For source-wildcard, enter the wildcard bits in dotted
decimal notation to be applied to the source. Place
ones in the bit positions that you want to ignore.
• For destination, enter the number of the network or
host to which the packet is being sent.
• For destination-wildcard, enter the wildcard bits in
dotted decimal notation to be applied to the
destination. Place ones in the bit positions that you
want to ignore.
Recall that the access list is always terminated by an
implicit deny statement for everything.
41