RE: Mac Access-list

From: Raymond Doucette (raymond_doucette@msn.com)
Date: Thu Dec 19 2002 - 14:27:06 GMT-3


Duh! Yes, E is 1110! 0111 is 7!

The answer changes as a result - the statement matches all odd numbers
in the second hex digit

So the following odd values match and would be denied:
0001 0011 0101 0111 1001 1011 1101 1111

And these even values do not match and would not be denied by your
example
statement:
0000 0010 0100 0110 1000 1010 1100 1110

In hex, your denied mac addresses would look similar to:
x[1,3,5,7,9,B,D,F]xx.xxxx.xxxx

My initial goof is exactly the kind of thing that will lose you points
on the exam. If you rush without checking your work you make mistakes.

Raymond

-----Original Message-----
From: OhioHondo [mailto:ohiohondo@columbus.rr.com]
Sent: Thursday, December 19, 2002 12:15 PM
To: Raymond Doucette
Subject: RE: Mac Access-list

I believe the following should be corrected.

MASK 1111 0111 1111 1111 1111 1111 1111 1111 1111 1111 1111 1111

should be

MASK 1111 1110 1111 1111 1111 1111 1111 1111 1111 1111 1111 1111

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Raymond Doucette
Sent: Thursday, December 19, 2002 9:45 AM
To: ccielab@groupstudy.com
Subject: RE: Mac Access-list

The list you gave will deny everything since there is no permit. ;-)

However, looking at your example statement in isolation it appears it
would deny any source MAC from talking to any MAC that had a value of 0
through 7 in the second hex digit.

Here's the binary breakdown:

OCTET 1 2 3 4 5 6
MAC 0000 0001 0000 0000. 0000 0000 0000 0000. 0000 0000 0000 0000
MASK 1111 0111 1111 1111 1111 1111 1111 1111 1111 1111 1111 1111

Notice how the wildcard mask locks down the bit in the 5th position -
this bit is therefore required to be 0. We don't care about the 1 bit in
the 8th bit position since we ignore this according to the mask.

So the following values match and would be denied:
0000 0001 0010 0011 0100 0101 0110 0111

And these do not match and would not be denied by your example
statement:
1000 1001 1010 1011 1100 1101 1110 1111

In hex, your denied mac addresses would look similar to:
x[0-7]xx.xxxx.xxxx

Raymond

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
OhioHondo
Sent: Friday, December 13, 2002 9:59 AM
To: abderrahim Ibnamar; ccielab@groupstudy.com
Subject: RE: Mac Access-list

Any source MAC to any destination MAC that has the following bit
pattern?

xxxx xxx1 xxxx xxxx.xxxx xxxx xxxx xxxx.xxxx xxxx xxxx xxxx.xxxx xxxx
xxxx
xxxx

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
abderrahim Ibnamar
Sent: Friday, December 13, 2002 4:39 AM
To: ccielab@groupstudy.com
Subject: Mac Access-list

Hi guys,

What does this access-list deny?
access-list 1100 deny 0000.0000.0000 ffff.ffff.ffff 0100.0000.0000
feff.ffff.ffff

Thanks



This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:49 GMT-3