217
# Configure Loopback 0 on Switch A as a C-BSR and a C-RP.
[SwitchA] pim
[SwitchA-pim] c-bsr loopback 0
[SwitchA-pim] c-rp loopback 0
[SwitchA-pim] quit
The configuration on Switch C and Switch D is similar to the configuration on Switch A (details not
shown).
4.
Configure MSDP peers
# Configure an MSDP peer on Switch A.
[SwitchA] msdp
[SwitchA-msdp] peer 192.168.1.2 connect-interface vlan-interface 101
[SwitchA-msdp] quit
# Configure MSDP peers on Switch C.
[SwitchC] msdp
[SwitchC-msdp] peer 192.168.1.1 connect-interface vlan-interface 101
[SwitchC-msdp] peer 10.110.5.2 connect-interface vlan-interface 104
[SwitchC-msdp] quit
# Configure an MSDP peer on Switch D.
[SwitchD] msdp
[SwitchD-msdp] peer 10.110.5.1 connect-interface vlan-interface 104
[SwitchD-msdp] quit
5.
Configure SA message filtering rules
# Configure an SA message rule on Switch C so that Switch C will not forward SA messages for entry
(Source 1, 225.1.1.0/30) to Switch D.
[SwitchC] acl number 3001
[SwitchC-acl-adv-3001] rule deny ip source 10.110.3.100 0 destination 225.1.1.0 0.0.0.3
[SwitchC-acl-adv-3001] rule permit ip source any destination any
[SwitchC-acl-adv-3001] quit
[SwitchC] msdp
[SwitchC-msdp] peer 10.110.5.2 sa-policy export acl 3001
[SwitchC-msdp] quit
# Configure an SA message rule on Switch D so that Switch D will not create SA messages for Source 2.
[SwitchD] acl number 2001
[SwitchD-acl-basic-2001] rule deny source 10.110.6.100 0
[SwitchD-acl-basic-2001] quit
[SwitchD] msdp
[SwitchD-msdp] import-source acl 2001
[SwitchD-msdp] quit
6.
Verify the configuration
Use the
display msdp sa-cache
command to view the (S, G) entries cached in the SA cache on the
switches. For example:
# View the (S, G) entries cached in the SA cache on Switch C.
[SwitchC] display msdp sa-cache
MSDP Source-Active Cache Information of VPN-Instance: public net
Содержание A5500 EI Switch Series
Страница 12: ...xii Conventions 425 Index 427 ...