diff options
| author | Rafael Zalamena <rzalamena@opensourcerouting.org> | 2021-05-03 10:25:52 -0300 |
|---|---|---|
| committer | Rafael Zalamena <rzalamena@opensourcerouting.org> | 2024-07-27 11:32:30 -0300 |
| commit | be3bfe5daa721acc0182d6c3f003a9d9d80e6612 (patch) | |
| tree | 036568b0964c5ca419c5c22b6a74442c008eb094 /pimd/pim_msdp_packet.h | |
| parent | bfae003b62a9dde706ab55250ebda7ea3cb1e676 (diff) | |
pimd: MSDP SA filtering
Implement MSDP peer incoming/outgoing SA filter.
Note
----
Cisco extended access list has a special meaning: the first address is
the source address to filter.
Example:
! The rules below filter some LAN prefix to be leaked out
access-list filter-lan-source deny ip 192.168.0.0 0.0.255.255 224.0.0.0 0.255.255.255
access-list filter-lan-source permit any
router pim
msdp peer 192.168.0.1 sa-filter filter-lan-source out
! The rules below filter some special management group from being
! learned
access-list filter-management-group deny 230.0.0.0 0.255.255.255
access-list filter-management-group permit any
router pim
msdp peer 192.168.0.1 sa-filter filter-management-group in
Signed-off-by: Rafael Zalamena <rzalamena@opensourcerouting.org>
Diffstat (limited to 'pimd/pim_msdp_packet.h')
| -rw-r--r-- | pimd/pim_msdp_packet.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/pimd/pim_msdp_packet.h b/pimd/pim_msdp_packet.h index 1584a24539..3af8d93685 100644 --- a/pimd/pim_msdp_packet.h +++ b/pimd/pim_msdp_packet.h @@ -57,5 +57,7 @@ void pim_msdp_pkt_sa_tx_one(struct pim_msdp_sa *sa); void pim_msdp_pkt_sa_tx_to_one_peer(struct pim_msdp_peer *mp); void pim_msdp_pkt_sa_tx_one_to_one_peer(struct pim_msdp_peer *mp, struct in_addr rp, pim_sgaddr sg); +bool msdp_peer_sa_filter(const struct pim_msdp_peer *mp, + const struct pim_msdp_sa *sa); #endif |