From: Ahmed Mamoor Amimi (mamoor@xxxxxxxx)
Date: Sat Apr 06 2002 - 00:20:56 GMT-3
I would prefer the 1st one as this is will only deny R1 dlsw from accessing
the resource. in ur second choice it will deny anyone for the internetwork
for accessing it.
-Mamoor
----- Original Message -----
From: Williams, Glenn <WILLIAMSG@PANASONIC.COM>
To: <ccielab@groupstudy.com>
Sent: Saturday, April 06, 2002 12:13 AM
Subject: access-expression vs. lsap output-list
> If given a choice in a DLSW scenario where the task is to prevent a DLSW
> peer R1 from accessing any say netbios hosts on R2 Tokenring, which would
> you choose?
>
> R1
> access-list 200 deny 0xf0f0 0x0101
> access-list 200 permit 0x0000 0xffff
> dlsw remote-peer 0 tcp 2.2.2.2 lsap-output-list 200
>
> OR
>
> R2
> access-list 200 deny 0xf0f0 0x0101
> access-list 200 permit 0x0000 0xffff
> int tok 0
> access-expression in lsap(200)
>
> hopefully my syntax is correct.
> GW
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:57:57 GMT-3