Re: Mac filtering with DLSW

From: fningham@xxxxxxx
Date: Wed Apr 24 2002 - 00:04:34 GMT-3


   
If you are filtering using a permit clause then you
need to include the NetBIOS functional address for
NetBIOS connectivity.
  For example:
     access-li 700 permit 10005aabcdef
     access-li 700 permit c00000000080

If you are filtering using a deny clause you do not
have to explicitly configure it as in:
     access-li 701 deny 10005aabcdef
     access-li 701 permit 000000000000 ffffffffffff

HTH, Fred
> Ok, I thought I had this down, but now something else comes up. I was doing
> filtering based on mac address with an access list in my promiscous and peer
> on demand configurations. I couldn't reach the other netbios station so I
> turned on debugging, and I found that the workstation sends it's initial
> name query frame with the mac address c000.0000.0080 as the destination. I
> added that to the mac address access list and now it works. I have never
> seen an example where it was stated that this mac address must be permitted,
> but it seems that I couldn't get connectivity without it. Can anyone
> confirm that you do need to permit this mac address when doing filtering? I
> found the following on CCO, I am assuming that it is needed, thanks.
>
> Note: NetBIOS clients use the NetBIOS functional MAC address
> (C000.0000.0080) as the destination MAC (DMAC) on their NetBIOS Name Query
> packets.



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:18 GMT-3