RE: DLSW MAC ADDR Filtering and Masks

From: Alan Basinger (abasinge@xxxxxxxxxx)
Date: Mon Jan 15 2001 - 22:48:17 GMT-3


   
Bill,
The fff is the do not care bits if I am not mistaken. There is some good
information on mac filters on CCO which covers it in more depth and can
explain better than I. Cisco's SNA university internal docs from TAC also
explain DLSW+ pretty well for a quick overview and all the router commands.
One question though? Can you use the icannotreach to also limit explorer
frames?

Alan Basinger
Systems Engineer
SBC DataComm
Houston Texas
abasinge@swbell.net

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Bill Fallon
Sent: Monday, January 15, 2001 7:13 PM
To: ccielab@groupstudy.com
Subject: DLSW MAC ADDR Filtering and Masks

"The Knot in my stomach is growing tighter as my day draws nearer!!!"

anyway,
Lab Date is Feb 15th and 16th and need immediate Clarification Pleeease:

1) When doing MAC ADDRESS filters for DLSW what is the correct masking
structure in the access list. Is it a wild Card mask or a regular mask and
does F="don't care" and 0="care" or vice versa.

I have gotten a lot of conflicting answers on this.....

ie:

Configure a router to stop explorers for mac addresses beginning with
4545.6767

What should the access list be:

access-list 700 deny 4545.6767.???? (mask) ????.????.????
access-list 700 permit ??????(What is the Wilcard permit any?)

2) When filtering LSAP and/or Netbios packets, and wild card permit any,
are these correct?

ie. Permit netbios, deny SNA and Permit everything else ( I know this is
not the best way to do the access list but I want to make sure the access
list statments are correct)

access-list 200 deny 0x0000 0x0d0d --->Deny all SNA
access-list 200 permit 0xf0f0 0x0101 ---->Permit all netbios
access-list 200 permit 0x0000 0xffff ====>permit ANY

Thanks in advance,
Bill

-----------------------------------------------------
Click here for Free Video!!
http://www.gohip.com/free_video/



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:27:31 GMT-3