From: Richard Wagner (rfwagner@xxxxxxxxxxx)
Date: Sat Apr 01 2000 - 14:06:42 GMT-3
I don't know if you all figured it out... I think I have a good answer to
whether you have a wildcard mask or a standard mask for the MAC addresses...
If you enter "dlsw icanreach 0000.33ab.abcd" with NO mask, it is assumed to
be a HOST. If you look at the resulting configurations (show
running-config), the command is put into the configuration as:
dlsw icanreach 0000.33ab.abcd ffff.ffff.ffff
Which can mean two things... THIS HOST or ALL HOSTS (because the mask is
all "F"... it is either ALL or NOTHING)
Since we only gave it a MAC address when we configured it, I assume that
this is the HOST only. Therefore, F means "match it", which means that this
is a "standard mask". So to filter that OUI, the command would be:
dlsw icanreach 0000.3300.0000 ffff.ff00.0000
(match 0000.33xx.xxxx)
I've seen the awkward and conflicting documentation also... I think this is
the right way because you see a resulting configuration when you only
specify the MAC and get your answer from there.
This is a good command to know for DLSW* ;)
good luck guys!
Richard Wagner
CCIE #5760 (two days ago)
>From: "Mosley, Arthur" <Arthur.Mosley@wang.com>
>Reply-To: "Mosley, Arthur" <Arthur.Mosley@wang.com>
>To: ccielab@groupstudy.com, "'Ben_J_Durand@tivoli.com'"
><Ben_J_Durand@tivoli.com>
>Subject: FW: DLSW clarification on mac address filter/ICANREACH exchange
>Date: Sun, 26 Mar 2000 17:50:29 -0500
>
>I am confused also! Here's one I posted earlier this month.
>
>Art
>
>p.s. I guess this is one for the CCIGs (lower case g od). I'll test it
>if
>I can find the time and equipment.
>
>-----Original Message-----
>From: Mosley, Arthur [mailto:Arthur.Mosley@wang.com]
>Sent: Sunday, March 12, 2000 11:54 PM
>To: 'ccielab@groupstudy.com'
>Subject: DLSW clarification on mac address filter/ICANREACH exchange
>
>
>Are the masks for mac address filters and ICANREACH commands the opposite
>of
>each other? I cannot find a good example that explains the ICANREACH mask.
>
>Art
>
>
>
>Vendor code filter - filters explorer packets sent out from router
>vendor portion/any portion of Mac address
>
>700-799 48-bit MAC address access list
>access-list 704 deny 0260.8c00.0000 0000.00FF.FFFF - deny's 3Com NICs
>access-list 704 permit 0000.0000.0000 FFFF.FFFF.FFFF - permit all others
>
>dmac-output-list - mac address filter
>F's are don't care
>0's must match
>
>
>ICANREACH - will prevent a router from sending out an explorer packet
>because it is learned during the capabilities exchange process.
>
>dlsw icanreach mac-address 0006.e9db.31ce mask ffff.ffff.ffff
>
>F's mush match
>
>From Configuring Cisco Routers for Bridging, DLSw+ & Desktop Protocols
>Mcgraw-Hill publishing - written by Tan Nam-Kee
>
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:12 GMT-3