From: Voller.Lam@xxxxxxxxxx
Date: Mon Aug 27 2001 - 23:17:43 GMT-3
Hi,
Thanks for your suggestion.
But if I configure dmac-output-list (filter 1.1.XXXX) on R1, this filter
just blocks all traffic destined to mac-address 1.1.XXXX instead of blocking
the explorer frames to hosts with the other mac-address.
As I know, if I use the icanreach and mac-exclusive commands on R1, other
hosts with mac-addresses (not 1.1.XXXX) on To1 cannot send explorer frames
since it is dropped by R1. However, how to filter all explorer frames on R1
and R2 can only access to hosts with mac-address 1.1.XXXX on to1?
Please comment.
Many thanks, Voller
-----Original Message-----
From: Stanford M. Wong [mailto:stanford@cns-hawaii.com]
Sent: Tuesday, August 28, 2001 10:09 AM
To: Lam, Voller; ccielab@groupstudy.com
Subject: RE: Question on DLSW+
no, use a dmac-output-list, the difference with the icanreach and
mac-exclusive command is that it only affects the capabilities not the
actual explorer frames.
example
dlsw remote-peer 0 tcp <ip address of your dlsw peer> dmac-output-list 700
access-list 700 permit 0001.0001.0000 0000.0000.ffff
hope this helps....
stanford
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Voller.Lam@Level3.com
Sent: Monday, August 27, 2001 3:40 PM
To: ccielab@groupstudy.com
Subject: Question on DLSW+
Hi group,
I have question about dlsw icanreach. The diagram is shown as below:
Hosts -- To1 -- R1 --------------- R2
R1 is connecting to R2 through DLSW+. All hosts connecting to To1 have
mac-address 1.1.XXXX (X=any number). How can I filter out all explorer
frames from hosts on To1 to R2 through DLSW+? Is it possible to use
icanreach and mac-exclusive command on R1 to do that?
Please comment.
Many thanks,Voller
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:58 GMT-3