From: Fred Ingham (fningham@xxxxxxxxxxxxxxxx)
Date: Wed Mar 13 2002 - 14:09:05 GMT-3
Carlos: Your list looks OK. F0/F1 should establish and 04 should not.
Did you do a dlsw disable and a no dlsw disable after applying the
access-list? Access-list should be applied on router closest to the
source. AA is SNAP.
If this still doesn't work enable deb dlsw and look at the packet flow.
When a filter works you will see "...filtered..." in the debugs. Note
that there will be a lot of output; you can save the debug output and
use a text search for "filter". If you don't see "filter" or the
circuits keep establishing try the acccess-list on the other side.
HTH, Fred.
"Carlos A. Silva" wrote:
>
> hello everyone:
>
> i was just practicing dlsw/sap filters. we generated traffic using the dspu
> commands. we created
> 2 hosts on each side of the dlsw connection, one with a 04 (lsap/dsap), one
> with a F0 (lsap/dsap) . we tried filtering one of them but the ckt keeps
> establishing.
>
> here's my config on one side and some outputs.the other side is a mirror
> config, without the lsap filter, or course...
> any ideas?
>
> dlsw local-peer peer-id 172.18.2.254
> dlsw remote-peer 0 tcp 172.16.2.1 lsap-output-list 200
> dlsw bridge-group 1
>
> access-list 200 permit 0xF0F0 0x0101
> access-list 200 deny 0x0000 0xFFFF
>
> as far as i know, the F0 ckt should connect and the 04 shouldn't.
> the ckt keeps establishing:
>
> R1#sh dlsw cir
> Index local addr(lsap) remote addr(dsap) state uptime
> 2130706474 0000.0000.0007(04) 0000.0000.0002(04) CONNECTED
> 00:00:12
> 3825205292 0000.0000.0007(AA) 0000.0000.0002(AA)
> TABLISHED -
> 4278190123 0000.0000.0077(F0) 0000.0000.0022(F0) CONNECTED
> 00:00:12
> 3808428077 0000.0000.0077(AA) 0000.0000.0022(AA)
> TABLISHED -
> Total number of circuits connected: 2
>
> R1#
>
> btw, any one know why those AA ckts try to connect?
>
> Carlos A. Silva [tel]: 5281.8401.2191
> Micronet de Mixico http://mnet.com.mx
>
> "...sal del camino, toma la ruta..." - Cerati
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:57:03 GMT-3