Manualshelf

R3166-R3206-HP High-End Firewalls Network Management Command Reference-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module
501502503504505506507508509510
Table Of Contents
490
sa-limit: Maximum number of (S, G) entries that the device can cache, in the range of 1 to 8,192.
Description
Use the peer sa-cache-maximum command to configure the maximum number of (S, G) entries learned
from the specified MSDP peer that the device can cache.
Use the undo peer sa-cache-maximum command to restore the system default.
By default, the device can cache a maximum of 8,192 (S, G) entries learned from any MSDP peer.
Related commands: display msdp sa-count, display msdp peer-status, display msdp brief.
Examples
# In the public instance allow the device to cache a maximum of 100 (S, G) entries learned from its MSDP
peer 125.10.7.6.
<Sysname> system-view
[Sysname] msdp
[Sysname-msdp] peer 125.10.7.6 sa-cache-maximum 100
peer sa-policy
Syntax
peer peer-address sa-policy { import | export } [ acl acl-number ]
undo peer peer-address sa-policy { import | export }
View
Public instance MSDP view
Default level
2: System level
Parameters
import: Specifies to filter SA messages from the specified MSDP peer.
export: Specifies to filter SA messages forwarded to the specified MSDP peer.
peer-address: MSDP peer address.
acl-number: Advanced ACL number, in the range of 3000 to 3999. If you do not provide an ACL number,
all SA messages carrying (S, G) entries will be filtered off.
Description
Use the peer sa-policy command to configure a filtering rule for receiving or forwarding SA messages.
Use the undo peer sa-policy command to restore the default setting.
By default, SA messages received or to be forwarded are not filtered, namely, all SA messages are
accepted or forwarded.
In addition to controlling SA message receiving and forwarding by using this command, you can also
configure a filtering rule for creating SA messages using the import-source command.
Related commands: display msdp peer-status, import-source.
Examples
# Configure a filtering rule in the public instance so that SA messages will be forwarded to MSDP peer
125.10.7.6 only if they match ACL 3100.