From: arnaud.huret@xxxxxxxxxxxxxx
Date: Tue Oct 30 2001 - 08:24:26 GMT-3
An easy method :
dlsw icanreach mac-address xxxx
dlsw icanreach mac-exclusive [remote].
If you omit the "remote" keyword , only mac addresses specified in dlsw
icanreach will be able to connect and will be announced.
By this mean, you stop explorer traffic and you only configure one router.
The method below won't stop explorer traffic (or you'll need to configure
ACL on all your routers).
Arnaud
Internet
geir@hfk.vgs.no@groupstudy.com - 30/10/2001 10:01
Veuillez ripondre ` geir@hfk.vgs.no
Envoyi par : nobody@groupstudy.com
Pour : Howard.CW.Choi, ccielab
cc :
ccc :
Objet : RE: Question on DLSW+
Hi Howard,
Wouldn't this do the trick?
r1(config)#access-list 700 permit 4000.1000.0000 FFFF.FFFF.0000
r1(config)#access-list 700 permit 4000.2000.0000 FFFF.FFFF.0000
r1(config)# int e0
r1(config-if)#bridge-group 1 input-address-list 700
assuming your addresses are canonical
Geir Jensen
CCNP,CCDP
-----Original Message-----
From: Choi, Howard CW
Sent: Tue 10/30/2001 3:33 AM
To: ccielab@groupstudy.com
Cc:
Subject: Question on DLSW+
Hi Group,
Suppose a DLSW+ TCP connection has been setup between R1(E0) to
R2(To0). I
would like to allow only source mac-addresses in the range
4000.1000.xxxx to
4000.2000.xxxx on interface E0 of R1 to use this DLSW+
connection to reach
R2.
Please advise any feasible methods to achieve. Thanks.
Howard Choi
CCNP, CCDP
This archive was generated by hypermail 2.1.4 : Thu Jun 20 2002 - 22:33:28 GMT-3