From: fingham@cox.net
Date: Tue Sep 23 2003 - 15:44:15 GMT-3
The dlsw icanreach command, and dlsw mac filters always use non-canonical addresses. The network
the devices are on is only used to determine whether or not to convert the addresses. If the device
is on Ethernet you would convert the address from canonical to non-canonical. If the device
is on token-ring you would not convert the address as it is already in non-canonical format.
As an example using the dlsw icanreach mac-address command:
R1 has a device on Ethernet 0 with the MAC address 1234.5678.9abc (canonical):
dlsw icanreach mac-address 482c.6a1e.593d
R1 has a device on Tok 0 with the MAC address 1234.5678.9abc (non-canonical)
dlsw icanreach mac-address 1234.5678.9abc
In general if you have a dlsw bridge-group command in the config, convert the addresses, if you
have a source ring-group command do not convert the addresses.
As an example using the dmac-output-list:
R1 to permit a host on a dlsw remote-peer Ethernet with the canonical address abcd.ef12.3456
access-li 700 permit d5b3.f748.2c6a
access-li 700 permit c000.0000.0080 (for NetBIOS broadcast)
dlsw remote-peer 0 tcp x.y.z.a dmac-output-list 700
R1 to permit a host on a dlsw remote-peer Token-ring with the non-canonical address abcd.ef12.3456
access-li 700 permit abcd.ef12.3456
access-li 700 permit c000.0000.0080
dlsw remote-peer 0 tcp x.y.z.a dmac-output-list 700
Another reference for DLSW filtering is:
http://www.netmasterclass.net/site/articles/DLSW%20Filtering.pdf
Cheers, Fred
> From: "Matt Nabors" <mnabors@bcbsal.org>
> Date: 2003/09/23 Tue AM 09:40:19 EDT
> To: syang@bitfone.com
> CC: ccielab@groupstudy.com
> Subject: Re: DLSW mac address
>
> Shawn,
>
> The way I understand this particular scenario is that you want to enter
> the mac address of the destination host as it would be on its network.
> So, if you're going from ethernet to TokenRing then you'll enter the mac
> address in the non-canonical format. From TokenRing to ethernet, you'll
> enter in canonical format. If you're staying on the same network
> topology type then no bit swapping will need to occur.
>
> Matt :)
>
>
> >>> "Shawn Yang" <syang@bitfone.com> 9/18/2003 6:10:47 PM >>>
> Hello there,
>
> When configure "dlsw icanreach", the mac address that follows has to
> be
> always in non-canonical (Token Ring) format, right?
>
> Say if the requirement says,
>
> configure R2 to inform R4 that it can reach a mac address of
> 10C2-BB34-AAA3.
>
> then should we do the conversion, or not?
>
> Thanks!
>
> Shawn
>
> ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials
> from:
> shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> ==============================================================================
> CONFIDENTIALITY NOTICE
> This e-mail is intended for the sole use of the individual(s) to whom it is
> addressed, and may contain information that is privileged, confidential and
> exempt from disclosure under applicable law. You are hereby notified that any
> dissemination, duplication, or distribution of this transmission by someone
> other than the intended addressee or its designated agent is strictly
> prohibited. If you receive this e-mail in error, please notify me immediately
> by replying to this e-mail.
> ==============================================================================
>
> ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:34 GMT-3