From: Bob Chahal (bob.chahal@xxxxxxxxxxxx)
Date: Tue Aug 28 2001 - 06:26:07 GMT-3
Lachlan,
That sounds good to me, I'll try this in my lab. How do you figure that the
access-list 200 deny 0x0000 0x0101 denies explorers?
Thanks
Bob
----- Original Message -----
From: "Lachlan Kidd" <lkidd@netstarnetworks.com>
To: "'Stanford M. Wong'" <stanford@cns-hawaii.com>; <Voller.Lam@Level3.com>;
<ccielab@groupstudy.com>
Sent: Tuesday, August 28, 2001 5:35 AM
Subject: RE: Question on DLSW+
> Hi All,
> I might be wrong but if we are to stop explorers (SAP 0x00) coming from a
> range of mac addresses, my inital thoughts would be to use and access
> expression applied to to0 something like
>
> int to0
> access-expression in smac(700) & lsap (200)
>
> access-list 700 deny 0001.0001.0000 0000.0000.FFFF <-Stops anything
starting
> with 1.1.x
> access-list 700 permit any
> access-list 200 deny 0x0000 0x0101 <-Stops explorers
> access-list 200 permit any
>
> Anyone else have any suggestions ?
> Lachlan
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Stanford M. Wong
> Sent: Tuesday, 28 August 2001 12:09 PM
> To: Voller.Lam@Level3.com; ccielab@groupstudy.com
> Subject: RE: Question on DLSW+
>
>
> no, use a dmac-output-list, the difference with the icanreach and
> mac-exclusive command is that it only affects the capabilities not the
> actual explorer frames.
>
> example
> dlsw remote-peer 0 tcp <ip address of your dlsw peer> dmac-output-list 700
> access-list 700 permit 0001.0001.0000 0000.0000.ffff
>
> hope this helps....
> stanford
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Voller.Lam@Level3.com
> Sent: Monday, August 27, 2001 3:40 PM
> To: ccielab@groupstudy.com
> Subject: Question on DLSW+
>
>
> Hi group,
>
> I have question about dlsw icanreach. The diagram is shown as below:
>
>
> Hosts -- To1 -- R1 --------------- R2
>
> R1 is connecting to R2 through DLSW+. All hosts connecting to To1 have
> mac-address 1.1.XXXX (X=any number). How can I filter out all explorer
> frames from hosts on To1 to R2 through DLSW+? Is it possible to use
> icanreach and mac-exclusive command on R1 to do that?
>
> Please comment.
>
> Many thanks,Voller
> **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:59 GMT-3