From: Steve Clubb (sclubb@xxxxxxxxxxx)
Date: Mon Jan 22 2001 - 01:29:21 GMT-3
Objective: Allow SNA traffic only to 1111.1111.1111 and 1111.1111.2222 and
allow NetBIOS to all hosts.
I think I've configured the access-expression correctly except I'm not sure
to use an 'input' or 'output' command.
I actually typed it differently - access-expression output ((dmac(700) &
lsap(201)) | lsap(200)) and what you see is what the router set the command
to.
The same goes for the other NetBios filter - out or in? (just for practice).
Any ideas?
Thanks,
Steve
netbios access-list host r2 deny HOST
netbios access-list host r2 permit *
interface TokenRing0
ip address 137.20.22.1 255.255.255.240
ip pim sparse-mode
ip multicast use-functional
ipx network 2022
ring-speed 16
access-expression output (lsap(200) | (lsap(201) & dmac(700)))
source-bridge 2 1 10
source-bridge spanning
netbios output-access-filter host r2
!
ip classless
ip pim rp-address 137.20.1.1
access-list 200 permit 0xF0F0 0x0101
access-list 201 permit 0x0000 0x0D0D
access-list 201 deny 0x0000 0xFFFF
access-list 700 permit 1111.1111.1111 0000.0000.0000
access-list 700 permit 1111.1111.2222 0000.0000.0000
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:27:38 GMT-3