Symptom
MSDP peer 'sa-filter in' configured to deny all SA advertisements from peers, but still SAs are seen in the SA-cache
Conditions
MSDP peer 'sa-filter in' configured, e.g.:
router msdp
vrf TEST
peer 192.0.2.109
mesh-group MESH-GROUP
sa-filter in list ACL-BLOCK_MSDP_SA-GENERAL
!
ipv4 access-list ACL-BLOCK_MSDP_SA-GENERAL
10 deny ipv4 any any
Workaround
configure rp-filter instead
Further Problem Description
The issue is cosmetic and would happen only when the MSDP peers in a mesh group misbehave and do not follow the mesh group semantics.
