RE: netbios filters

From: Justin Menga (Justin.Menga@xxxxxxxxxxxxxxxxxx)
Date: Fri Feb 02 2001 - 09:48:16 GMT-3


   
Surprised no one thought of this.....

How about using an access-expression.....

e.g.

netbios access-list host TEST deny CCIES2B
netbios access-list host TEST permit CCIES

int e0
   access-expression in netbios-host(TEST)

Regards,

Justin Menga CCIE #6640 MCSE+I CCSE
WAN Specialist
Computerland New Zealand
PO Box 3631, Auckland
DDI: (+64) 9 360 4864 Mobile: (+64) 25 349 599
mailto: justin.menga@computerland.co.nz

-----Original Message-----
From: Brian Hescock [mailto:bhescock@cisco.com]
Sent: Friday, 2 February 2001 11:01 a.m.
To: ccielab@groupstudy.com
Subject: netbios filters

ok, this is probably a stupid question but I can seem to find it
anywhere, perhaps it isn't possible. Netbios filters only seem to be
allowed on token ring interfaces, other than on the dlsw remote-peer
command. But that command only keeps connections from being formed by
blocking the name query it seems and the entries still make it into the
reachability table. Is there a way to filter netbios so I
don't even get the netbios names in the reachability info? The only way I
can think to do it would be a real kluge:

- on the remote-peer use "netbios-exclusive" and not have any
"icanreach" netbios commands. I would think this *should* prevent it from
forwarding any netbios. Again, this would be a complete kluge and this
wouldn't work if you wanted to just filter out one name.

Is there a way to do it?

Brian



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:28:35 GMT-3