From: Justin Menga (Justin.Menga@xxxxxxxxxxxxxxxxxx)
Date: Sun Dec 10 2000 - 16:33:15 GMT-3
The situation requires an access-expression to specifically exclude SNA from
specific MAC address.
I don't believe you can apply an access-expression for DLSW peers. You can
only apply these on interfaces (Token Ring only??).
e.g.
access-list 200 permit 0x0004 0x0001
access-list 200 permit 0x0404 0x0001
access-list 700 permit xxxx.xxxx.xxxx 0000.0000.0000
int to0
access-expression in ~(lsap(200) & dmac(700))
The access-expression reads NOT (Permit SNA traffic and Destination MAC of
xxxx.xxxx.xxxx), which effectively denies the statement and permits
everything else.
Regards,
Justin Menga MCSE+I CCNP CCSE ASE
WAN Specialist
Computerland New Zealand
PO Box 3631, Auckland
DDI: (+64) 9 360 4864 Mobile: (+64) 25 349 599
mailto: justin.menga@computerland.co.nz
-----Original Message-----
From: damien [mailto:damien@clara.co.uk]
Sent: Monday, 11 December 2000 1:12 a.m.
To: ccielab@groupstudy.com
Subject: DLSW Filtering
Hello,
Was just wondering, if I have a situation where a filter is required =
for a DLSW Peering session that for example wanted to filter SNA frames =
from MAC X.=20
What is the correct thing to do in terms of applying the filter. Do you =
apply it to the peer statement, on the inbound Interface or use =
ICANREACH or what, or it is simply a question of asking the =
Protor...........as will work=20
Thanks
Damien
"An expert is a man who has made all the mistakes which can be made, in =
a narrow field" - Niels Bohr
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:26:01 GMT-3