Where do you configure a filter-list in BGP?

• A. In the global router configuration
• B. Under the neighbor's BGP address-family settings
• C. Under the route filter-lists section
• D. Router (config-router)# neighbor {ip-address | peer-group-name} filter-list ACCESS-LIST-NUMBER {in | out}

Answer: (D)

In BGP, you filter routes for a specific session by binding a pre-defined filter-list to that neighbor, choosing whether the filter applies to updates coming from the neighbor or going to it. The command exactly targets the BGP neighbor context, attaches the filter-list by its number, and specifies the direction (in or out). This per-neighbor binding is what makes the filter effective only for that session, controlling which routes are accepted from or advertised to that particular neighbor.

This approach lets you granularly control routing with individual peers without affecting other neighbors or the global BGP behavior. The other options don’t fit because a filter-list isn’t applied globally to all routes, nor is it configured under a general address-family context or under a non-existent “route filter-lists” section. The per-neighbor command is the correct mechanism to bind the filter to a specific BGP session so updates flow only after matching the access-list.