import-source
Use import-source to configure an SA message creation policy.
Use undo import-source to restore the default.
Syntax
import-source [ acl ipv4-acl-number ]
undo import-source
Default
When an SA message is created, all the (S, G) entries within the domain are advertised in the SA message.
Views
MSDP view
Predefined user roles
network-admin
Parameters
ipv4-acl-number: Specifies an IPv4 basic or advanced ACL number in the range of 2000 to 3999. If you specify an ACL, this command advertises only the (S, G) entries that the ACL permits. This command does not advertise (S, G) entries when one of the following conditions exists:
You do not specify an ACL.
The specified ACL does not exist.
The specified ACL does not have valid rules.
Usage guidelines
This command controls the creation of SA messages. To control forwarding or acceptance of SA messages, use the peer sa-policy command.
When you configure a rule in the IPv4 ACL, follow these restrictions and guidelines:
For the rule to take effect, do not specify the vpn-instance vpn-instance option.
In a basic ACL, the source source-address source-wildcard option specifies a multicast group address.
In an advanced ACL, the source source-address source-wildcard option specifies a multicast source address. The destination dest-address dest-wildcard option specifies a multicast group address.
Among the other optional parameters, only the fragment keyword and the time-range time-range-name option take effect.
If you configure this command multiple times, the most recent configuration takes effect.
Examples
# Configure an SA creation policy to advertise only (10.10.0.0/16, 225.1.0.0/16) entries in SA messages on the public network.
<Sysname> system-view [Sysname] acl advanced 3101 [Sysname-acl-ipv4-adv-3101] rule permit ip source 10.10.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255 [Sysname-acl-ipv4-adv-3101] quit [Sysname] msdp [Sysname-msdp] import-source acl 3101
Related commands
peer sa-policy