From: Fred Ingham (fningham@xxxxxxxxxxxxxxxx)
Date: Sun Aug 12 2001 - 17:33:10 GMT-3
Luke: There are a couple of choices. But first remember that DMAC is
destination MAC address and DLSW filters from the router into the DLSW
process. You are filtering on the source address side.
You could put the 700 filter on the R1 token ring. This would prevent
Host1 from talking to anyone.
You could put an access-expression on the token-ring so that the filter
would only apply for NetBIOS, for instance. R1 could then do other
protocols.
Or you could put the filter on R2. On R2 the filter would apply from
Host 3 to Host 1. On R2 you would also have to permit c000.0000.0080 as
a MAC address for NetBIOS. You should see the initial NQ (to the
broadcast address) for Host1 go through and a Name_Recognized return but
any further traffic will be filtered.
You do not have to bitswap if the hosts are on token-ring.
HTH. Fred.
Luke wrote:
>
> Hello group,
>
> Here is what I have....
>
> host 1 , host 2 ------- tokenring ------- R1 <----serial-----> R2 ------
> ethernet ------ Host 3
>
> Host 1 and Host 2 are attached to the tokenring segment of R1
> Host 3 is attached to the ethernet segment of R2
>
> R1 and R2 are dlsw peered (tcp)
>
> I am trying to filter host 1 and allowing host 2 from the token ring R1 to
> communicate to Host 3
>
> I am trying to do this using dmac-output-list
>
> sample config R1
>
> dlsw local-peer peer-id 1.1.1.1
> dlsw remote-peer 0 tcp 2.2.2.2 dmac-output-list 700
>
> access-list 700 permit 00c0.f400.d0f8 0000.0000.0000 (this is the mac
> address of host 2's token ring card)
>
> It doesn't seem to work... Do I need to bit-swap the mac address of host 2
> ??
>
> I have always thought that bitswapping is done for the icanreach mac-address
> so that during the peer capabilities exchange it would allow the ethernet
> host to understand the mac address.
>
> In this case, my understanding is that dmac-output-list is to be used for
> permit/deny the mac-address from R1 to R2....
>
> Please help!
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:50 GMT-3