From: Ronnie Royston (RonnieR@xxxxxxxxxxxxxxxxx)
Date: Mon Jan 15 2001 - 22:59:43 GMT-3
0s = don't care
1's = care
-----Original Message-----
From: Wayne S. Lewis [mailto:lewisway@hcc.hawaii.edu]
Sent: Monday, January 15, 2001 5:53 PM
To: Bill Fallon; ccielab@groupstudy.com
Subject: RE: DLSW MAC ADDR Filtering and Masks
http://www.cisco.com/warp/public/698/acl200.html
Thanks,
Wayne
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Bill Fallon
Sent: Monday, January 15, 2001 3:13 PM
To: ccielab@groupstudy.com
Subject: DLSW MAC ADDR Filtering and Masks
"The Knot in my stomach is growing tighter as my day draws nearer!!!"
anyway,
Lab Date is Feb 15th and 16th and need immediate Clarification Pleeease:
1) When doing MAC ADDRESS filters for DLSW what is the correct masking
structure in the access list. Is it a wild Card mask or a regular mask and
does F="don't care" and 0="care" or vice versa.
I have gotten a lot of conflicting answers on this.....
ie:
Configure a router to stop explorers for mac addresses beginning with
4545.6767
What should the access list be:
access-list 700 deny 4545.6767.???? (mask) ????.????.????
access-list 700 permit ??????(What is the Wilcard permit any?)
2) When filtering LSAP and/or Netbios packets, and wild card permit any,
are these correct?
ie. Permit netbios, deny SNA and Permit everything else ( I know this is
not the best way to do the access list but I want to make sure the access
list statments are correct)
access-list 200 deny 0x0000 0x0d0d --->Deny all SNA
access-list 200 permit 0xf0f0 0x0101 ---->Permit all netbios
access-list 200 permit 0x0000 0xffff ====>permit ANY
Thanks in advance,
Bill
-----------------------------------------------------
Click here for Free Video!!
http://www.gohip.com/free_video/
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:27:30 GMT-3