From: Chua, Parry (Parry.Chua@xxxxxxxxxx)
Date: Fri Apr 19 2002 - 04:42:23 GMT-3
I have done several tests based on the limited equipments I have. I have done e
thernet to ethernet,ethernet to token ring tests.
At the dlsw peers, you can show llc2 brief, show bridge , show rif and show dls
w reachability.
I use ping ipx for quick tests.
When you do show bridge, the address for ethernet is the same as what ever you
set it to, the mac address of token ring device is byte swapped.When you do sho
w llc2 brief and dlsw reachability, it is the reverse.
Now come to filtering, if your filter at interface level, just follow the show
bridge mac address.(ie follow ethernet address as per normal, but byte swapped
for token ring interface address).
When you do filtering using DLSW peer, just follow the show dlsw reachability m
ac address.
( byte swapped for ethernet device mac, follow the token ring as per normal).
Basic test setup
=================
R7 Token ring mac address 4200.0000.7777 to R2
R1 FastEthernet mac address 0000.0000.1111 to R2
R6 Ethernet mac address 0000.0000.6666 to R5
R2-dlsw-R5
R1, R6 and R7 ipx network aaaa, encap sap
==========================================
r7_frsw#sr | inc dspu
! R7pu1 llc2(0404) to R1 fas (R1 f0 mac is 0000.0000.1111)
! R7pu6 llc2(0808) to R6 eth (R6 e0 mac is 0000.0000.6666)
!
dspu pu R7PU1 rmac 0000.0000.8888 rsap 4 lsap 4
dspu pu R7PU6 rmac 0000.0000.6666 rsap 8 lsap 8
!
! to0/0 mas address is 4200.0000.7777
interface to0/0
dspu enable-pu lsap 4
dspu enable-pu lsap 8
dspu start R7PU1
dspu start R7PU6
///////////////////
R1#sr | inc dspu
! R1h1(f0) to R7pu1(to0/0), R7 to0/0 mac 4200.0000.7777
! R1pu12(f0) to R6h12(e0), R6 e0 mac 0000.0000.6666
!
dspu host R1H1 xid-snd 11117777 rmac 4200.0000.eeee rsap 4 lsap 4
dspu pu R1PU12 rmac 0000.0000.6666 rsap 12 lsap 12
!
! f0 mac address is 0000.0000.1111
interface f0
dspu enable-pu lsap 12
dspu start R1PU12
dspu enable-host lsap 4
dspu start R1H1
////////////////////////
R6#
R6#sr | inc dspu
! R6h6(e0) to R7pu6(to0/0), r7 to0/0 mac 4200.0000.7777
! R6h12(e0) to R1pu12(f0), R1 f0 mac 0000.0000.1111
!
dspu host R6H6 xid-snd 66667777 rmac 4200.0000.eeee rsap 8 lsap 8
dspu host R6H12 xid-snd 66661111 rmac 0000.0000.1111 rsap 12 lsap 12
!
! e0 mac address is 0000.0000.6666
interface e0
dspu enable-host lsap 8
dspu enable-host lsap 12
dspu start R6H6
dspu start R6H12
R6#
////////////////////////////
6#s llc2 br
R6#show llc2 brief
LLC2 Connections: total of 2 connections
Et0 NORMAL 0000.0000.1111 0000.0000.6666 0C 0C
Et0 NORMAL 4200.0000.eeee 0000.0000.6666 08 08
==============================================
R1#show llc brief
LLC2 Connections: total of 2 connections
Fa0 NORMAL 0000.0000.6666 0000.0000.1111 0C 0C
Fa0 NORMAL 4200.0000.eeee 0000.0000.1111 04 04
R1#
===============================================
r7_frsw#S LLC2 B
LLC2 Connections: total of 2 connections
To0/0 NORMAL 0000.0000.6666 4200.0000.7777 08 08
RIF: 0610.01B2.FFF0
To0/0 NORMAL 0000.0000.8888 4200.0000.7777 04 04
RIF: 0810.01B2.FFF2.04D0
r7_frsw#S RIF
Codes: * interface, - static, + remote
Dst HW Addr Src HW Addr How Idle(min) Vlan Routing Information Field
0000.0000.6666 N/A To0/0 0 - 0690.FFF2.01B0
0000.0000.8888 N/A To0/0 0 - 0890.04D2.FFF2.01B0
4200.0000.7777 N/A To0/0 * - -
4200.0000.2222 N/A To0/0 0 - -
++++++++++++++++++++++++++++++++++++++++++++++++++
R2 e0/0 to R1 fa0 , R2 e0/0 mac 0000.0000.2222
R2 to0/0 to R7 to0/0 , R2 to0/0 mac 4200.0000.2222
R2 SRTLB
R2-dlsw-R5
++++++++++++++++++++++++++++++++++++++++++++++++++
R2#show dlsw reachability
DLSw Local MAC address reachability cache list
Mac Addr status Loc. port rif
0000.0000.6666 SEARCHING LOCAL
0000.0000.8888 FOUND LOCAL TBridge-001 --no rif--
4200.0000.7777 FOUND LOCAL TokenRing0/0 0690.01B2.FFF0
DLSw Remote MAC address reachability cache list
Mac Addr status Loc. peer
0000.0000.6666 FOUND REMOTE 172.17.5.5(2065) max-lf(1500)
DLSw Local NetBIOS Name reachability cache list
NetBIOS Name status Loc. port rif
DLSw Remote NetBIOS Name reachability cache list
NetBIOS Name status Loc. peer
++++++++++++++++++++++++++++++++++++++++++++++++++
R2#show llc2 brief
LLC2 Connections: total of 2 connections
To0/0 NORMAL 4200.0000.7777 0000.0000.6666 08 08
RIF: 0690.01B2.FFF0
DL0 NORMAL 0000.0000.8888 0000.0000.6666 0C 0C
++++++++++++++++++++++++++++++++++++++++++++++++++
R2#show bridge
Total of 300 station blocks, 297 free
Codes: P - permanent, S - self
Bridge Group 1:
Address Action Interface Age RX count TX count
4200.0000.eeee forward RingGroup4095 0 7279 6129
0000.0000.1111 forward Ethernet0/0 0 7515 6332
0000.0000.6666 forward DLSw Port0 0 1380 182
++++++++++++++++++++++++++++++++++++++++++++++++++
r2#s rif
Codes: * interface, - static, + remote
Dst HW Addr Src HW Addr How Idle (min) Routing Information Field
4200.0000.2222 N/A To0/0 * -
4200.0000.7777 N/A BG1 0 0890.01B2.FFF2.04D0
R2#
++++++++++++++++++++++++++++++++++++++++++++++++++
R5 e2/0 to R6 e0, R5 w2/0 mac 0000.0000.5555
R5 dlsw R2
++++++++++++++++++++++++++++++++++++++++++++++++++
R5#show dlsw reachability
DLSw Local MAC address reachability cache list
Mac Addr status Loc. port rif
0000.0000.6666 FOUND LOCAL TBridge-001 --no rif--
DLSw Remote MAC address reachability cache list
Mac Addr status Loc. peer
0000.0000.8888 FOUND REMOTE 172.17.2.2(2065) max-lf(1500)
4200.0000.7777 FOUND REMOTE 172.17.2.2(2065)
DLSw Local NetBIOS Name reachability cache list
NetBIOS Name status Loc. port rif
DLSw Remote NetBIOS Name reachability cache list
NetBIOS Name status Loc. peer
++++++++++++++++++++++++++++++++++++++++++++++++++
R5#s br
Total of 300 station blocks, 297 free
Codes: P - permanent, S - self
Bridge Group 1:
Address Action Interface Age RX count TX count
4200.0000.eeee forward DLSw Port0 0 7283 6148
0000.0000.1111 forward DLSw Port0 0 1621 331
0000.0000.6666 forward Ethernet2/0 0 7889 6562
R5#
++++++++++++++++++++++++++++++++++++++++++++++++++
R5#show llc2 brief
LLC2 Connections: total of 2 connections
DL0 NORMAL 0000.0000.6666 4200.0000.7777 08 08
DL0 NORMAL 0000.0000.6666 0000.0000.8888 0C 0C
++++++++++++++++++++++++++++++++++++++++++++++++++
////////////////
R2
==
source-bridge ring-group 4095
source-bridge transparent 4095 77 2 1
dlsw local-peer peer-id 172.17.2.2 promiscuous
dlsw remote-peer 0 tcp 172.17.5.5
dlsw icanreach mac-exclusive
dlsw icanreach mac-address 4200.0000.eeee mask ffff.ffff.ffff
dlsw bridge-group 1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
! With byte swapped address on DLSW command
! Ping from remote to Token ring client fail !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
R6#ping ipx aaaa.4200.0.eeee
Type escape sequence to abort.
Sending 5, 100-byte IPX Novell Echoes to AAAA.4200.0000.eeee, timeout is 2 seco
n
ds:
.....
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
! ping from local (clent at R2 ethernet) OK !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
R1#ping ipx aaaa.4200.0.eeee
Type escape sequence to abort.
Sending 5, 100-byte IPXcisco Echoes to AAAA.4200.0000.eeee, timeout is 2 second
s
:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
///////////////////////////////////////////////////////
R2 now with correct mac address for tokrn ring device
///////////////////////////////////////////////////////
source-bridge ring-group 4095
source-bridge transparent 4095 77 2 1
dlsw remote-peer 0 tcp 172.17.5.5
dlsw icanreach mac-exclusive
dlsw icanreach mac-address 4200.0000.7777 mask ffff.ffff.ffff
dlsw bridge-group 1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
! the above has only entry for token ring mac address !
! Ping from remote to Token ring OK !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
R6#ping ipx aaaa.4200.0.eeee
Type escape sequence to abort.
Sending 5, 100-byte IPX Novell Echoes to AAAA.4200.0000.eeee, timeout is 2 seco
n
ds:
!.!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 64/68/72 ms
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
! Ping from remote to R2 ethernet fail as expected !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
R6#ping ipx aaaa.0.0.1111
Type escape sequence to abort.
Sending 5, 100-byte IPX Novell Echoes to AAAA.0000.0000.1111, timeout is 2 seco
n
ds:
.....
Success rate is 0 percent (0/5)
////////////////////////////////////////////////////////
now with both mac address in DLSW command
notice that ethernet mac address byte swapped /
////////////////////////////////////////////////////////
source-bridge transparent 4095 77 2 1
dlsw local-peer peer-id 172.17.2.2 promiscuous
dlsw remote-peer 0 tcp 172.17.5.5
dlsw icanreach mac-exclusive
1d22h: %SYS-5-CONFIG_I: Configured from console by console
dlsw icanreach mac-address 4200.0000.7777 mask ffff.ffff.ffff
dlsw icanreach mac-address 0000.0000.8888 mask ffff.ffff.ffff
dlsw bridge-group 1
///////////////////////////////////////////////////////////
both ping work as expected
==========================
R6#ping ipx aaaa.0.0.1111
Type escape sequence to abort.
Sending 5, 100-byte IPX Novell Echoes to AAAA.0000.0000.1111, timeout is 2 seco
n
ds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 64/70/92 ms
R6#ping ipx aaaa.4200.0.eeee
Type escape sequence to abort.
Sending 5, 100-byte IPX Novell Echoes to AAAA.4200.0000.eeee, timeout is 2 seco
n
ds:
!.!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 64/70/80 ms
R6#
/////////
> Parry Chua
>
>
-----Original Message-----
From: Lupi, Guy [mailto:Guy.Lupi@eurekaggn.com]
Sent: Thursday, April 18, 2002 11:27 PM
To: 'Adam Atkinson'; ccielab@groupstudy.com
Subject: RE: bitflipping in dlsw - when?
I believe that is the case, since the dlsw routers will show the address in
non canonical format. Next week I am doing 2 days of nothing but dlsw, I
will send my findings if I see anything different than what I have stated
here.
~-----Original Message-----
~From: Adam Atkinson [mailto:Adam.Atkinson@damovo.com]
~Sent: Thursday, April 18, 2002 11:08 AM
~To: ccielab@groupstudy.com
~Subject: RE: bitflipping in dlsw - when?
~
~
~> That is an interesting statement, but I believe that any dlsw
~> filtering/dynamic peering that is mac based should be in non
~canonical
~> format.
~
~So this would include icanreach?
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:13 GMT-3