From: Lachlan Kidd (lkidd@xxxxxxxxxxxxxxxxxxx)
Date: Tue Aug 28 2001 - 01:35:26 GMT-3
Hi All,
I might be wrong but if we are to stop explorers (SAP 0x00) coming from
a
range of mac addresses, my inital thoughts would be to use and access
expression applied to to0 something like
int to0
access-expression in smac(700) & lsap (200)
access-list 700 deny 0001.0001.0000 0000.0000.FFFF <-Stops anything starting
with 1.1.x
access-list 700 permit any
access-list 200 deny 0x0000 0x0101 <-Stops explorers
access-list 200 permit any
Anyone else have any suggestions ?
Lachlan
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Stanford M. Wong
Sent: Tuesday, 28 August 2001 12:09 PM
To: Voller.Lam@Level3.com; ccielab@groupstudy.com
Subject: RE: Question on DLSW+
no, use a dmac-output-list, the difference with the icanreach and
mac-exclusive command is that it only affects the capabilities not the
actual explorer frames.
example
dlsw remote-peer 0 tcp <ip address of your dlsw peer> dmac-output-list 700
access-list 700 permit 0001.0001.0000 0000.0000.ffff
hope this helps....
stanford
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Voller.Lam@Level3.com
Sent: Monday, August 27, 2001 3:40 PM
To: ccielab@groupstudy.com
Subject: Question on DLSW+
Hi group,
I have question about dlsw icanreach. The diagram is shown as below:
Hosts -- To1 -- R1 --------------- R2
R1 is connecting to R2 through DLSW+. All hosts connecting to To1 have
mac-address 1.1.XXXX (X=any number). How can I filter out all explorer
frames from hosts on To1 to R2 through DLSW+? Is it possible to use
icanreach and mac-exclusive command on R1 to do that?
Please comment.
Many thanks,Voller
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:59 GMT-3