Routing

Hi all.

I have a topoloy like that

RP-01----<msdp-peer>--------->RP-02-----<msdp-peer>------------>RP03----<msdp-peer>--------->RP-01

RP-01 is originator of this multicast group (10.10.170.70,225.10.10.7), and via SA message, RP-02 has this multicast group.

And then, on RP-02, I configure this policy

show policy-options policy-statement TEST-IMPORT-SA
term 1A {
from {
route-filter 225.10.10.17/32 exact;
source-address-filter 10.10.170.70/32 exact;
}
then reject;
}
then accept;

---

And the, I import this policy into MSDP configuration of RP-02

show routing-instances R1-VR1 protocols msdp
import TEST-IMPORT-SA;
peer 1.1.1.8 {
local-address 1.1.1.5;
}
peer 1.1.1.11 {
local-address 1.1.1.5;
}

//My purpose is to pevent RP-02 from learning this multicast group from RP-01, but when I show msdp source-active from RP-02, I still see this group. So I want to ask about what are purposes of import and export in MSDP protocol?

Check your group. Maybe it's a typo?

"RP-01 is originator of this multicast group (10.10.170.70,225.10.10.7),"

term 1A {
from {
route-filter 225.10.10.17/32 exact;
source-address-filter 10.10.170.70/32 exact;
}

THanks for your correction. But now, it has this information. (I changed to another group)

root@SRSX240-01> show msdp source-active
Group address Source address Peer address Originator Flags
239.192.0.50 172.30.1.10 1.1.1.6 1.1.1.6 Accept,Filtered

policy-statement TEST-SA-IMPORT {
term 1A {
from {
route-filter 239.192.0.50/32 exact;
}
then reject;
}
then accept;
}

root@SRSX240-01# show protocols msdp
import TEST-SA-IMPORT;
peer 1.1.1.6 {
local-address 1.1.1.4;
}

root@SRSX240-01> show msdp source-active
Group address   Source address  Peer address Originator  Flags
239.192.0.50    172.30.1.10     1.1.1.6      1.1.1.6     Accept,Filtered

The SA message was accepted (the RPF-check didn't reject it) but filtered (by your import policy).

You can run the command : show msdp source

Thanks so much, it seems to work 🙂