Re: mapping agent filtering

when i split RP announcements with group list containing two
statements
224.0.0.0 7.255.255.255
232.0.0.0 7.255.255.255

AND started filting on ma and it was successfull.

i need confirmation if this is noramal .... MA can filter only if
candidate RP announcements maches exaclty the filtering acl by MA .else
entire block is blocked :)

On Mon, Mar 25, 2013 at 11:02 PM, Imran Ali <immrccie_at_gmail.com> wrote:

> Hi all.
>
> i have a basic topology ... R3------R1
>
> R3 is advertising himself as rp for complete block ...
> ip pim send-rp-announce lo 0 scope 10 interval 5
>
> R1 the mapping agent ..wants to filter groups from R3 ...ie R3 sould
> only service 232.0.0.0 7.255.255.255
>
> so here what i did on R1 the MA
> R1#conf t
> Enter configuration commands, one per line. End with CNTL/Z.
>
> R1(config)#access-list 2 deny 224.0.0.0 7.255.255.255
>
> R1(config)#access-list 2 permit 232.0.0.0 7.255.255.255
> R1(config)#exit
>
> ip pim autorp listener
> ip pim send-rp-discovery FastEthernet0/0 scope 10
> ip pim rp-announce-filter rp-list 1 group-list 2
>
> R1#show ip pim rp map
>
> PIM Group-to-RP Mappings
> This system is an RP-mapping agent (FastEthernet0/0)
> R1#show ip pim rp map
>
> PIM Group-to-RP Mappings
> This system is an RP-mapping agent (FastEthernet0/0)
>
> R1#show access-lists
> Standard IP access list 1
> 10 permit 13.0.0.3 (140 matches)
>
> Standard IP access list 2
> 10 deny 224.0.0.0, wildcard bits 7.255.255.255 (20 matches)
> 20 permit 232.0.0.0, wildcard bits 7.255.255.255
>
> As you can see denying only a subset of 224.0.0.0 is making it
> deny complete block ...
>
> is this normal behavior ??
>
> Can any one try the same requirmnet and see if it works

Blogs and organic groups at http://www.ccie.net
Received on Mon Mar 25 2013 - 23:21:39 ART