Cisco IE 4000, Software Configuration Manual

Page: 750 / 1066

746
Configuring MSDP
Configuring MSDP
DETAILED STEPS
Table 0-7
Command Purpose
1. configure terminal Enter global configuration mode.
2. ip msdp sa-filter in ip-address |
name
or
ip msdp sa-filter in { ip-address |
name } list access-list-number
or
ip msdp sa-filter in { ip-address |
name } route-map map-tag
Filter all SA messages from the specified MSDP peer.
or
From the specified peer, pass only those SA messages that
pass the IP extended access list. The range for the extended
access-list-number is 100 to 199.
If both the list and the route-map keywords are used, all
conditions must be true to pass any (S,G) pair in incoming SA
messages.
or
From the specified MSDP peer, pass only those SA messages
that meet the match criteria in the route map
map-tag .
If all match criteria are true, a permit from the route map
passes routes through the filter. A deny will filter routes.
3. access-list access-list-number
{ deny | permit } protocol source
source-wildcard destination
destination-wildcard
(Optional) Create an IP extended access list, repeating the
command as many times as necessary.

For access-list-number , enter the number specified in
Step 2.

The deny keyword denies access if the conditions are
matched. The permit keyword permits access if the
conditions are matched.

For protocol , enter ip as the protocol name.

For source , enter the number of the network or host from
which the packet is being sent.

For source-wildcard , enter the wildcard bits in dotted
decimal notation to be applied to the source. Place ones
in the bit positions that you want to ignore.

For destination , enter the number of the network or host to
which the packet is being sent.

For destination-wildcard , enter the wildcard bits in dotted
decimal notation to be applied to the destination. Place
ones in the bit positions that you want to ignore.
Recall that the access list is always terminated by an implicit
deny statement for everything.
4. end Return to privileged EXEC mode.
5. show running-config Verify your entries.
6. copy running-config
startup-config (Optional) Save your entries in the configuration file.