From: Pinnacle -- Erik Freeland (erik.freeland@xxxxxxxxxxxxxxx)
Date: Mon Feb 12 2001 - 18:56:42 GMT-3
Using icanreach and icannotreach commands used in various ways are the key
to performing DLSW filtering without using "access-lists".
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Mike S. Lee
Sent: Monday, February 12, 2001 9:38 AM
To: Vikas Gupta
Cc: ccielab@groupstudy.com
Subject: Re: Filter NetBIOS without using LSAP lists
You can use "i canreach netbios-name along with the exclusive. this will
only allow statically specified netbios names to reach the router.
Mike Lee
CCNP+LATM+Security+Voice Access/CCDP
NNCSE/NNCDE
Cisco Systems, Inc.
12515 Research Blvd., Bldg. 04
Austin, TX 78759-2200
DSL Customer Support Engineering
mikele@cisco.com
(512)378-1331 ofc
Text Page: mikele@epage.cisco.com
At 08:49 AM 2/12/2001 -0800, Vikas Gupta wrote:
>Hello People,
>
>Is there a way to filter NetBIOS without using LSAP
>lists in DLSW+. I was thinking to use dmac lists which
>blocks funtional MAC address i.e c000.0000.0080 (pls
>correct me if this is wrong) which essentially is the
>MAC address used to send NetBIOS explorers.
>
>Comments??
>
>Vikas
>
>
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:28:46 GMT-3