From: Edward Monk (edmonk@attbi.com)
Date: Tue Sep 17 2002 - 12:30:26 GMT-3
Omer,
No it looks wrong to me.
It should be "in". You are trying to allow only SNA traffic coming IN TO
the interface to the specified host.
The "out" would only allow SNA traffic OUT of the interface coming from
the host at the MAC you specified.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Omer Ansari
Sent: Tuesday, September 17, 2002 4:58 AM
To: ccielab@groupstudy.com
Subject: access-expression "out" vs "in"
All,
question in the unnamed lab was:
Configure R4 so that only SNA traffic to MAC address 3745.0001.0001 is
allowed on [R4's] Ring2.
my answer was:
!
interface TokenRing0/0
ip address 10.10.10.1 255.255.255.240
...
access-expression output (dmac(701) & lsap(201))
!
access-list 201 permit 0x0000 0x0D0D
access-list 701 permit 3745.0001.0001 0000.0000.0000
!
does the above look ok? [the solutions had access-expression input
instead]
Omer
> Unnamed questions
> =================
> 3.Sec XI, q2
> on router4, shouldn't this be access-expression out .... instead of
"in" ?
This archive was generated by hypermail 2.1.4 : Mon Oct 07 2002 - 07:43:54 GMT-3