From: xander (xander@xxxxxx)
Date: Fri May 11 2001 - 05:05:06 GMT-3
Hello JAY,
Sometimes Cisco uses revulsive statements in their questions.
1. If you are asked about only test frames use ACL 200 deny 0x0000
0x00D0; ACL 200 permit 0x0000 0x0D0D
because tesf frames - ARE and STE have destination ZERO.
2. If you are asked about particular MAC address, better think about
less complex statements, for example about ICAN(NOT)REACH commands.
3. If that does not fit to your requirements, use access-expressions
with ACL 200 and ACL 700 and may be with NETBIOS ACLs.
J> Group,
J> Here's the scenario:
J> r1--------r2: restrict explorer packets with the mac 4000.0002.xxxx from
J> reaching r2. Host still should be able to send data to those mac addresses.
J> How can I do this effectively?
J> TIA
J> JAY
-- WBW, xander mailto:xander@adt.ru CCNA, CCNP+VoiceAccess, CCIE second attempt in Brussels 9-10, July, 2001... **Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:38 GMT-3