From: Brian McGahan (bmcgahan@internetworkexpert.com)
Date: Sun Nov 23 2003 - 22:25:11 GMT-3
Budak,
These docs aren't on the CD but are very useful. The first
describes how to create common access-list 200 entries, the second
describes how to apply them along with additional filtering mechanisms.
"Understanding Service Access Point Access Control Lists"
http://www.cisco.com/warp/public/698/acl200.html
"DLSw+ SAP/MAC Filtering Techniques"
http://www.cisco.com/warp/public/697/dlswfilter.shtml
HTH,
Brian McGahan, CCIE #8593
bmcgahan@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Direct: 708-362-1418 (Outside the US and Canada)
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
> Behalf Of Budak Timuralp
> Sent: Sunday, November 23, 2003 6:08 PM
> To: Scott Morris; ccielab@groupstudy.com
> Subject: RE: SNA SAP Filter
>
>
> Are there any links about the sap-filter on DOC CD. I
> searched a lot but couldn't find anything about that.
>
> Best regards,
>
>
> Budak Timuralp
> Sabanci Telecommunication Services Inc.
>
>
> -----Original Message-----
> From: Scott Morris [mailto:swm@emanon.com]
> Sent: Sunday, November 23, 2003 5:10 PM
> To: 'Wei Zou (wzou)'; ccielab@groupstudy.com
> Subject: RE: SNA SAP Filter
>
> You'll need to permit more than just the one thing... The
> first hex number is the values for the SAP (DSAP/SSAP) field.
> The second hex number is a mask for it. Think in binary...
>
> That example (all over CCO) is WAY too broad, particularly
> for Ethernet-only environments. But the details of this have
> been discussed many times here on groupstudy, so I'd suggest
> looking through the archives so I don't sound nearly as
> long-winded as I typically do on this subject. :)
>
> Enjoy!
>
>
> Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider)
> #4713, CISSP, JNCIS, et al. IPExpert CCIE Program Manager
> IPExpert Sr. Technical Instructor swm@emanon.com/smorris@ipexpert.net
> http://www.ipexpert.net
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
> Behalf Of Wei Zou (wzou)
> Sent: Sunday, November 23, 2003 9:31 AM
> To: ccielab@groupstudy.com
> Subject: SNA SAP Filter
>
>
> Hi :
> Could anyone tell me why the syntax to permit all SNA SAP is:
>
> access-list 200 permit 0x0000 0x0D0D
> access-list 200 deny 0x0000 0xFFFF
>
> Other than:
> access-list 200 permit 0x0D0D 0x0000
> access-list 200 deny 0x0000 0xFFFF
>
> I belive 0x0D0D is for SNA SAP.
>
> Thanks
> Wei
>
> ______________________________________________________________
> _________
> Please help support GroupStudy by purchasing your study
> materials from: http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> ______________________________________________________________
> _________
> Please help support GroupStudy by purchasing your study
> materials from: http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> ______________________________________________________________
> _________
> Please help support GroupStudy by purchasing your study
> materials from: http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Dec 12 2003 - 12:29:16 GMT-3