From: OhioHondo (ohiohondo@columbus.rr.com)
Date: Fri Apr 25 2003 - 00:01:11 GMT-3
Wayne
So try it. If the access list works for other things, it doesn't mean it
would or should work with DLSw. Since your applying the access-list to a
DLSw process. I believe if your MAC address came from an Ethernet client,
you need to represent it in a converted, non-canonical format. The DLSw
process does not automatically convert stuff that you put in the config
file --- and it does consider everything in non-canonical format.
Maybe this is easier to understand if the terms canonical and non-canonical
are explained further.
Canonical means that every byte is transmitted Least Significant Bit first.
Non-canonical means every byte is transmitted Most Significant Bit first.
The difference is major and ANY process would be hard pressed to use both.
The DLSw process converts addresses that it learns from Ethernet subnets for
you. But when you type something in, it doesn't know if it relates to an
Ethernet or a Token Ring --- so it has to assume one or the other. It
assumes non-canonical for historical reasons. (In olden days all connections
to a mainframe were token ring.)
-----Original Message-----
From: Wayne Hines [mailto:wayneh@DataNetDev.com.au]
Sent: Thursday, April 24, 2003 7:10 PM
To: 'OhioHondo'; C.Sammarcellino@sirtisistemi.it; ccielab@groupstudy.com
Subject: RE: DLSW+ Icanreach DO NOT BLOCK
1) Should 'convert it' only refer to the mac-address and not the mask?
2) If using eg
access-list 700 permit 4000.4000.4000 0000.0000.0001
dlsw local-peer peer-id 155.100.0.1
dlsw remote-peer 0 tcp 155.100.0.2 dmac-output-list 700
Should canonical form be used? Note that this access-list could be used
with other non-DLSw commands.
Wayne
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
OhioHondo
Sent: Thursday, 24 April 2003 12:05
To: C.Sammarcellino@sirtisistemi.it; ccielab@groupstudy.com
Subject: RE: DLSW+ Icanreach DO NOT BLOCK
DLSw works with the non-canonical format. If you try to represent an
Ethernet MAC in a DLSw command, you have to convert it.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
C.Sammarcellino@sirtisistemi.it
Sent: Wednesday, April 23, 2003 8:13 PM
To: ccielab@groupstudy.com
Subject: DLSW+ Icanreach DO NOT BLOCK
If i can can reack ony the mac address 4000.4000.4000 e 4000.4000.4001 on
the fastethernet port of dlsw+
What is the correct command ?
dlsw icanreach mac-address 4000.4000.4000 mask ffff.ffff.fffe
Is it OK or it is neccesary use :
dlsw icanreach mac-address 0200.0200.0200 mask ffff.ffff.ff7f
The core of question is that : DLSW+ works with canonical on non canolical
mac format ?
Bye
Ciro
This archive was generated by hypermail 2.1.4 : Thu May 01 2003 - 13:36:06 GMT-3