From: Joe Chang (changjoe@earthlink.net)
Date: Sat Mar 08 2003 - 18:50:05 GMT-3
----- Original Message -----
From: "Tom Young" <gitsyoung@yahoo.co.jp>
To: <ccielab@groupstudy.com>
Sent: Saturday, March 08, 2003 11:02 AM
Subject: SNA access-list
> Hi, group
>
> I just read a sample about sna access-list, the
> question is :Setup a filter that would permit only SNA
> traffic. And the answer was shown as blow:
>
> access-list 200 permit 0x0404 0x0001
> access-list 200 permit 0x0004 0x0001
>
These two acl lines miss the SNA values of 0x08,0x09,0x0C,0x0D.
> I have two question about it:
> 1, In the lab exam, I should write
> access-list 200 permit 0x0000 0x0D0D
> For filter SNA , right?
Thats seems to be the commonly accepted method.
> 2, About the access-list ,the two answer as blow are the
> same
> access-list 200 permit 0x0000 0x0D0D
> access-list 200 permit 0x0D0D 0x0000
>
> Thanks
>
No.
The first line covers the IBM reserved SNA values of 0x04, 0x08, 0x0C and
the response saps 0x05, 0x09, 0x0D
The second line matches only a DSAP of 0x0D and SSAP of 0x0D.
> __________________________________________________
> Do You Yahoo!?
> Yahoo! BB is Broadband by Yahoo! http://bb.yahoo.co.jp/
This archive was generated by hypermail 2.1.4 : Sat Apr 05 2003 - 08:51:35 GMT-3