RE: access-list 200?

From: sono@xxxxxxxxxxxxxx
Date: Tue Dec 07 1999 - 02:55:08 GMT-3


   

Hi all,
I'm just working on it, and would like to ask you about it, if possible.

In the following page,which is titled "Configuring SRB",

http://www.cisco.com/univercd/cc/td/doc/product/software/ios112/112cg_cr
/8cbook/8csrb.htm

---------Quotation begin------------------------
The preceding statement requires three access lists to be configured:
An access list that passes a frame if it is a NetBIOS frame (SAP =
0xF0F0)
An access list that passes a frame if it is an SNA frame (SAP = 0x0404)
An access list that passes a MAC address of 0110.2222.3333
The following configuration allows for all these conditions:

access-list 201 permit 0xF0F0 0x0001 ! Access list 201 passes NetBIOS
frames (command or response)
!
access-list 202 permit 0x0404 0x0001 ! Permits SNA frames (command or
response)
access-list 202 permit 0x0004 0x0001 ! Permits SNA Explorers with NULL
DSAP
!
! Access list 701 will permit the FEP MAC address
! of 0110.2222.3333
access-list 701 permit 0110.2222.3333

The 0x0001 mask allows command and response frames to pass equally.

---------Quotation end------------------------

the mask above is 0x0001 while the one being discussed is 0x0101.
Should I use 0x0001for IPX and 0x0101 for NetBIOS and SNA?
I couldn't find detail info about these protocol.

Thanks in advance.

-----Original Message-----
From: Fred Ingham [mailto:fningham@worldnet.att.net]
Sent: Sunday, December 05, 1999 7:30 PM
To: kongck; ccielab@groupstudy.com
Subject: Re: access-list 200?

The 0101 is a wildcard mask that permits both E0 and E1 both IPX
SAPs.

kongck wrote:
>
> Hi there,
> I am confused about the access-list range 200 to
> 299,
> especially foe the mask code.For example,I found the
> list below for permit the IPX traffic in the Document
> CD:
> access-list 203 permit 0xE0E0 0x0101
> access-list 203 deny 0x0000 0xFFFF
> why does the masks be 0x0101,not the 0x0000?
>
> Do u have any resources about the access-list?
>
> Thanks
>
> kck
>



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:21:58 GMT-3