R2511-HP MSR Router Series IP Multicast Command Reference(V5)

185
[Sysname-msdp] peer 125.10.7.6 sa-policy export acl 3100
# Configure a filtering rule in VPN instance mvpn so that SA messages are forwarded to MSDP peer
125.10.7.6 only if they match advanced ACL 3100.
<Sysname> system-view
[Sysname] acl number 3100
[Sysname-acl-adv-3100] rule permit ip source 170.15.0.0 0.0.255.255 destination 225.1.0.0
0.0.255.255
[Sysname-acl-adv-3100] quit
[Sysname] msdp vpn-instance mvpn
[Sysname-msdp-mvpn] peer 125.10.7.6 connect-interface ethernet 1/1
[Sysname-msdp-mvpn] peer 125.10.7.6 sa-policy export acl 3100
Related commands
• display msdp peer-status
• import-source
peer sa-request-policy
Use peer sa-request-policy to configure a filtering rule for SA request messages.
Use undo peer sa-request-policy to remove the configured SA request filtering rule.
Syntax
peer peer-address sa-request-policy [ acl acl-number ]
undo peer peer-address sa-request-policy
Default
SA request messages are not filtered.
Views
Public network MSDP view, VPN instance MSDP view
Default command level
2: System level
Parameters
peer-address: Specifies an MSDP peer.
acl-number: Specifies a basic ACL in the range of 2000 to 2999. If you provide this argument, the SA
requests of only the multicast groups that match the ACL are accepted and other SA requests are ignored.
If you do not provide this argument, all SA requests are ignored.
Examples
# Configure an SA request filtering rule on the public network so that SA messages from the MSDP peer
175.58.6.5 are accepted only if the multicast group address in the SA messages is in the range of
225 .1.1.0 / 24 .
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 225.1.1.0 0.0.0.255
[Sysname-acl-basic-2001] quit
[Sysname] msdp
[Sysname-msdp] peer 175.58.6.5 sa-request-policy acl 2001