RE: mac access-list question

From: Scott Morris (swm@emanon.com)
Date: Sat Mar 06 2004 - 11:23:50 GMT-3


Does spanning tree still work when you put it in that way?

Testing is the best way to find out. In the second example, you are only
filtering based on the DSAP value. But the question becomes whether it is
an assumed '00' for the SSAP, or whether you just aren't paying attention to
those entries. So.... Do your switches still do spanning tree if you do
the second one.

:)

 
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, CISSP,
JNCIS, et al.
IPExpert CCIE Program Manager
IPExpert Sr. Technical Instructor
swm@emanon.com/smorris@ipexpert.net
http://www.ipexpert.net
 
 

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
David Hurtado
Sent: Saturday, March 06, 2004 5:54 AM
To: ccielab@groupstudy.com
Subject: mac access-list question

When you configure:

mac access-list extended ESAS
permit any any lsap 0x4242 0x0

in a 3550 switch, you are allowing STP packets. You specify the destination
and source SAP (0x4242). Would be also valid to issue only 0x42:

mac access-list extended ESAS
permit any any lsap 0x42 0x0

Would both MAC ACL's accomplish the same function?

Thanks for the help



This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:15 GMT-3