From: Lachlan Kidd (lkidd@xxxxxxxxxxxxxxxxxxx)
Date: Tue Aug 28 2001 - 19:40:49 GMT-3
Hi Yves,
Yep I'm wrong <grin>. After some more reading I found that 0x00 is used
for
TEST and XID frames. These are required for DLSW session establishment so if
your filtering out SAPs you must remeber to allow 0x00 other wise your DLSW
sessions wont establish.
Regards,
Lachlan
-----Original Message-----
From: Yves Fauser [mailto:Yves@Fauser.de]
Sent: Tuesday, 28 August 2001 10:20 PM
To: Lachlan Kidd
Cc: 'Stanford M. Wong'; Voller.Lam@Level3.com; ccielab@groupstudy.com
Subject: Re: Question on DLSW+
Lachlan,
Hymm, interesting, where did you read that explorers are only send out as
null SAP. I
saw SNA Test Frames send out with a SSAP of 00 and an DSAP of 04, but I'm
not sure if
other protocols generally handle explorers with a null SSAP.
Anyhow, I'm pretty sure that explorers are not send out to the DSAP 00.
Greetings, Yves
Lachlan Kidd wrote:
> Hi All,
> I might be wrong but if we are to stop explorers (SAP 0x00) coming
from a
> range of mac addresses, my inital thoughts would be to use and access
> expression applied to to0 something like
>
> int to0
> access-expression in smac(700) & lsap (200)
>
> access-list 700 deny 0001.0001.0000 0000.0000.FFFF <-Stops anything
starting
> with 1.1.x
> access-list 700 permit any
> access-list 200 deny 0x0000 0x0101 <-Stops explorers
> access-list 200 permit any
>
> Anyone else have any suggestions ?
> Lachlan
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Stanford M. Wong
> Sent: Tuesday, 28 August 2001 12:09 PM
> To: Voller.Lam@Level3.com; ccielab@groupstudy.com
> Subject: RE: Question on DLSW+
>
> no, use a dmac-output-list, the difference with the icanreach and
> mac-exclusive command is that it only affects the capabilities not the
> actual explorer frames.
>
> example
> dlsw remote-peer 0 tcp <ip address of your dlsw peer> dmac-output-list 700
> access-list 700 permit 0001.0001.0000 0000.0000.ffff
>
> hope this helps....
> stanford
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Voller.Lam@Level3.com
> Sent: Monday, August 27, 2001 3:40 PM
> To: ccielab@groupstudy.com
> Subject: Question on DLSW+
>
> Hi group,
>
> I have question about dlsw icanreach. The diagram is shown as below:
>
> Hosts -- To1 -- R1 --------------- R2
>
> R1 is connecting to R2 through DLSW+. All hosts connecting to To1 have
> mac-address 1.1.XXXX (X=any number). How can I filter out all explorer
> frames from hosts on To1 to R2 through DLSW+? Is it possible to use
> icanreach and mac-exclusive command on R1 to do that?
>
> Please comment.
>
> Many thanks,Voller
> **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:59 GMT-3