From: ccie2be (ccie2be@nyc.rr.com)
Date: Thu Aug 07 2003 - 15:10:02 GMT-3
Thanks Fred. That makes alot of sense. I appreciate the help. dt
----- Original Message -----
From: "Fred Ingham" <fingham@cox.net>
To: "ccie2be" <ccie2be@nyc.rr.com>; "Group Study" <ccielab@groupstudy.com>
Sent: Thursday, August 07, 2003 1:51 PM
Subject: Re: dlsw - mac reachability
> !
> !
> !
> When you use the dest-mac address you are specifying the remote mac
address.
> Explorers will
> only be forwarded when this is the destination address. So configuring
> dest-mac on r1 is
> configuring a filter that will only pass traffic from r1 to 4000.4000.4000
> on a remote peer. If
> you have more than one mac-address you would use a 700 series access-list
> and dmac-output-list.
>
> When you use the icanreach mac-address you are specifying locally attached
> mac-addresses. These
> addresses are advertised to connected peers in the capabilities exchange
and
> will appear on the peers
> when you do a show dlsw capab. Packets will only be forwarded to the peer
> advertising local
> mac-addresses when those addresses are the destination. The mac-exclusive
> says that these are
> the only two addresses that are locally reachable.
>
> You should be able to test this without token-ring in your setup.
Configure
> the statements on
> r1 or r5 and then look at the dlsw capabilities for r1/r5 on another peer
or
> do a show dlsw cap local
> on the peer you configured. You should see the mac-addresses and the
> mac-exclusive flag set in the
> capabilities.
>
> In the example I suspect that token-ring is only mentioned to indicate
that
> the addresses are
> in non-canonical format and do not have to be bit-swapped. The first 4
> indicates that the
> address is a locally administered address.
>
> Cheers, Fred
> ----- Original Message -----
> From: "ccie2be" <ccie2be@nyc.rr.com>
> To: "Group Study" <ccielab@groupstudy.com>
> Sent: Thursday, August 07, 2003 11:46 AM
> Subject: dlsw - mac reachability
>
>
> > good morning everyone,
> >
> > I had practice lab requirement as follows:
> >
> > Assume that only mac 4000.4000.4000 and 4000.4000.4001 exist on the T/R
> > between R1 and R5. Configure R1 and/or R5 such that explorer traffic is
> > limited to only the mac address:
> >
> >
> > I thought I could fulfill this requirement with the following command on
> R1
> >
> > dlsw remote-peer 0 tcp 192.168.3.3 dest-mac 4000.4000.4000
> >
> > and a similar command on R5.
> >
> > But, the solution used:
> >
> > Dlsw icanreach mac-exclusive
> > Dlsw icanreach mac-address 4000.4000.4000 mask ffff.ffff.fffe
> >
> > I don't have T/R in my lab so I can't test this but I'm wondering what's
> the
> > difference between these 2 techniques?
> >
> > Any advice or insight is greatly appreciated. Thanks, dt
> >
> >
> > _______________________________________________________________________
> > You are subscribed to the GroupStudy.com CCIE R&S Discussion Group.
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> _______________________________________________________________________
> You are subscribed to the GroupStudy.com CCIE R&S Discussion Group.
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Tue Sep 02 2003 - 18:53:55 GMT-3