From: Ahmed Mustafa (ahmed.mustafa@sbcglobal.net)
Date: Sat May 15 2004 - 00:42:34 GMT-3
Thanks Brian ! That was a great link, but one question,
Does either Icanreach or Icannotreach has implicit deny at the end.
For example,
If at central location,
I cannotreach saps f0 -------> Denying netbios saps only. Will it still
permit SNA SAPS to be forwarded or will it be denied by implicit deny
statement or
if I configure
icanreach saps 00 04 08 0C-----> permiting only SNA saps. Will it allow
Netbios SAPS f0 to be forwarded.
Regards,
Ahmed
----- Original Message -----
From: "Brian McGahan" <bmcgahan@internetworkexpert.com>
To: "Ahmed Mustafa" <ahmed.mustafa@sbcglobal.net>; <ccielab@groupstudy.com>
Sent: Friday, May 14, 2004 7:36 AM
Subject: RE: DLSW
Ahmed,
Have you seen the below CCO doc entitled "DLSw+ SAP/MAC
Filtering Techniques" ? It describes exactly what you are asking, where
to apply which of these filters and in what circumstance:
http://www.cisco.com/warp/public/697/dlswfilter.html
HTH,
Brian McGahan, CCIE #8593
bmcgahan@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987 x 705
Outside US: 775-826-4344 x 705
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> Ahmed Mustafa
> Sent: Thursday, May 13, 2004 2:20 PM
> To: ccielab@groupstudy.com
> Subject: DLSW
>
> Can some please clear this confusion?
>
> In DLSW, there are more than two options to filtering traffic such as
one
> could you
>
> 1) access-list 200 for filtering SNA and Netbios SAPS
>
> 2) Icanreach SAP commands
>
> 3) Icannotreach SAP commands
>
> 4) Icannreach mac-address
>
> 5) Icannotreach mac-address.
>
>
> If I were to filter netbios saps, I could either use
>
>
> access-list 200 deny 0xf0f0 0x 0101 and attach to the remote peer by
using
> LSAP-FILTER-OUTPUT.
>
> or
>
> I could simply do
>
> icanreach sap 00 04 08 0C-----------> This will permit SNA SAPs, and
deny
> Netbios SAPs F0.
>
>
> I just can't understand when to use which filtering.
>
>
> Regards,
>
>
> Ahmed
>
>
This archive was generated by hypermail 2.1.4 : Wed Jun 02 2004 - 11:12:12 GMT-3