From: Mosley, Arthur (Arthur.Mosley@xxxxxxxx)
Date: Mon Mar 13 2000 - 01:54:07 GMT-3
Are the masks for mac address filters and ICANREACH commands the opposite of
each other? I cannot find a good example that explains the ICANREACH mask.
Art
Vendor code filter - filters explorer packets sent out from router
vendor portion/any portion of Mac address
700-799 48-bit MAC address access list
access-list 704 deny 0260.8c00.0000 0000.00FF.FFFF - deny's 3Com NICs
access-list 704 permit 0000.0000.0000 FFFF.FFFF.FFFF - permit all others
dmac-output-list - mac address filter
F's are don't care
0's must match
ICANREACH - will prevent a router from sending out an explorer packet
because it is learned during the capabilities exchange process.
dlsw icanreach mac-address 0006.e9db.31ce mask ffff.ffff.ffff
F's mush match
>From Configuring Cisco Routers for Bridging, DLSw+ & Desktop Protocols
Mcgraw-Hill publishing - written by Tan Nam-Kee
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:04 GMT-3