PAN-OS

1. Configure a Logical Router.
2. Select NetworkRoutingLogical Routers and select a logical router.
3. Select Multicast and enable multicast protocol.
4. Select MSDPGeneral and Enable MSDP.
5. Select the Global Timer profile, or select the default profile (this is the default setting), or create a new timer profile. If you select default, Keep Alive Interval is set to 60, Message Timeout is set to 75, and Connection Retry Interval is set to 30. If you select None, the default values apply.
6. Select the Global Authentication profile or create a new one. Default is None.
7. For the Originator ID, select the Interface that the logical router uses as the RP interface in Source-Active (SA) messages.
8. Select or enter the IP Address (with prefix length) that the logical router uses as the RP address in SA messages. If no Originator IP address is configured, the logical router uses the PIM RP address to encapsulate the SA message.

9. Click OK.
10. Select Peers and Add a Peer name (maximum of 63 characters). The name must start with an alphanumeric character, underscore (_), hyphen (-), or dot (.) and can contain a combination of alphanumeric characters, underscore, or hyphen or dot. No space is allowed.

11. Enter the Source Interface used to establish the MSDP connection over TCP with its MSDP peer.
12. Select the IP address of the source interface. Default is None.
13. Select the Type of Peer Address:

    • IP—(default) and select an address object or enter an IP address.
    • FQDN—Select or enter the Fully Qualified Domain Name of the peer. The dropdown list displays all FQDN names configured as address objects.
14. Enter the BGP autonomous system number of the Remote AS where the MSDP peer is located.
15. For Authentication, do one of the following:

    • Select an authentication profile to apply to this peer, which overrides the Global Authentication Profile you applied to MSDP on the General page.
    • inherit (inherit from global authentication) (default) the global authentication profile.
    • Select None to disable authentication to this peer, which overrides the Global Authentication Profile.
16. For Max SA, enter the maximum number of Source-Active (SA) entries the SA cache will accept from this MSDP peer. Range is 0 to 1,024; default is 0 (unlimited). After this maximum is reached, new SA messages from this peer are dropped.
17. For Peer Inbound SA Filter, select an access list or create a new access list to filter incoming SA messages (block unwanted groups) from this peer. Default is None.

    The access list can specify source addresses in an (S,G) pair to filter, or destination (group) addresses in an (S,G) pair to filter, or both.
18. For Peer Outbound SA Filter, select an access list or create a new access list to filter outgoing SA messages (block unwanted groups) being propagated to this peer. Default is None.

    The access list can specify source addresses in an (S,G) to filter, or destination (group) addresses in an (S,G) to filter, or both.
19. Click OK.
20. Create MSDP authentication and timer profiles if you haven’t done so.
21. Commit.
22. View MSDP information.

    1. Select NetworkRoutingLogical Routers and in the row for the logical router you configured, select More Runtime Stats.
    2. Select MulticastMSDPSummary to see general MSDP information, such as originator IP address, timers, authentication, and peer name.

    3. Select Peers to view information about the MSDP peers.

    4. Select SA Cache to view Source-Active entries in the cache.

    5. Refresh or Close the runtime stats.