From: DERY, FREDERIC (frederic.dery@xxxxxxxxxxx)
Date: Fri Jul 28 2000 - 10:24:56 GMT-3
These kind of filter can only be used on bridged interface, for bridged
protocol.
IP will not be checked against your access-expression.
Frederic
ke Hei wrote:
>
> Here is the situation:
>
> e0: R1 s0: ----- s0: R2 e0:
> running any IP routing protocol (ospf, rip ...)
> having full ip connection. How can I block the routing
> updates sent from R2 by configuring a Mac address
> level filter on R1 only -- no layer 3 filtering are
> allowed ?
>
> I had tried by using following commands on R1:
> !
> int s0
> ip add ...
> Access-expression IN ( Dmac(700)|Smac(700))
> !
> Access-list 700 permit <mac_add_of_R2_e0>
> !
> It seems to be not working and both routers still be
> able pinging each other.
>
> I couldn't find more info. on layer 2 address
> filtering
> from cisco CD and web.
>
> Thanks in advance for any hints.
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:59 GMT-3