From: Ellie Chou (ellie_chou@hotmail.com)
Date: Tue Mar 09 2004 - 03:45:45 GMT-3
That's right! Using the * to permit everything else. Thanks a lot!
Ellie
-----Original Message-----
From: richardyun@adelphia.net [mailto:richardyun@adelphia.net]
Sent: Monday, March 08, 2004 5:14 PM
To: Ellie Chou
Subject: Re: dlsw netbios name filtering question
Ellie,
It does have implicit deny at the end and you can have permit all other
by doing:
netbios access-list host ccie permit *
HTH,
Richard
>
> From: "Ellie Chou" <ellie_chou@hotmail.com>
> Date: 2004/03/08 Mon PM 04:43:00 EST
> To: <ccielab@groupstudy.com>
> Subject: dlsw netbios name filtering question
>
> Hi,
> I have a basic dlsw filter questino regarding netbios access-list. If
I
> want to allow all NetBIOS traffic EXCEPT for a server named
"Marketing",
> would my configuration below fullfil the requirement? do I need to
> explicitly permit all NetBios traffic with a lsap-output-list?
> also, does the "netbios access-list host" have an implicit deny at the
> end just like regular ACL? If that's the case, how do I deny only
> "Marketing" and permit traffic sent to all other NetBIOS server?
> -Thanks!
>
> dlsw local-peer peer-id 10.0.5.5
> dlsw remote-peer 0 tcp 10.0.3.3 host-netbios-out ccie
>
> netbios access-list host ccie deny Marketing
>
> Ellie
>
> ______________________________________________________________________
> _
> Please help support GroupStudy by purchasing your study materials
from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:16 GMT-3