From: Brian McGahan (bmcgahan@internetworkexpert.com)
Date: Fri May 14 2004 - 11:36:30 GMT-3
Ahmed,
Have you seen the below CCO doc entitled "DLSw+ SAP/MAC
Filtering Techniques" ? It describes exactly what you are asking, where
to apply which of these filters and in what circumstance:
http://www.cisco.com/warp/public/697/dlswfilter.html
HTH,
Brian McGahan, CCIE #8593
bmcgahan@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987 x 705
Outside US: 775-826-4344 x 705
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> Ahmed Mustafa
> Sent: Thursday, May 13, 2004 2:20 PM
> To: ccielab@groupstudy.com
> Subject: DLSW
>
> Can some please clear this confusion?
>
> In DLSW, there are more than two options to filtering traffic such as
one
> could you
>
> 1) access-list 200 for filtering SNA and Netbios SAPS
>
> 2) Icanreach SAP commands
>
> 3) Icannotreach SAP commands
>
> 4) Icannreach mac-address
>
> 5) Icannotreach mac-address.
>
>
> If I were to filter netbios saps, I could either use
>
>
> access-list 200 deny 0xf0f0 0x 0101 and attach to the remote peer by
using
> LSAP-FILTER-OUTPUT.
>
> or
>
> I could simply do
>
> icanreach sap 00 04 08 0C-----------> This will permit SNA SAPs, and
deny
> Netbios SAPs F0.
>
>
> I just can't understand when to use which filtering.
>
>
> Regards,
>
>
> Ahmed
>
>
This archive was generated by hypermail 2.1.4 : Wed Jun 02 2004 - 11:12:12 GMT-3