From: ccie2be (ccie2be@nyc.rr.com)
Date: Fri Mar 04 2005 - 19:11:37 GMT-3
Hey Steve,
Thanks for your response and that link. It's a good link. I've studied it
quite a bit.
But, the CR and that link don't really address my question.
The way I understand it, when dlsw icanreach sap F0 is configured on a dlsw
peer, it only prevents explorers from other peers for that particular sap.
If other peers need to reach an SNA, they'll send out explorers looking for
the SNA host.
My question was whether I could use the dlsw icanreach netbios-exclusive
command in this scenario so that peers of this router will NOT send
explorers for SNA traffic because they know that this peer can only reach
netbios hosts.
TIA, Tim
_____
From: Steve Connolly [mailto:sconnolly@aisnets.com]
Sent: Friday, March 04, 2005 4:59 PM
To: ccie2be
Subject: RE: dlsw icanreach
When using the icanreach saps command, the sap that you list is the only sap
type that will be reachable through the peer.
This is from the cisco web site:
Configuring the dlsw icanreach saps command is useful when you know exactly
what type of traffic is allowed and you want to make sure that all other
traffic is denied. For example, when you configure dlsw icanreach saps 4,
you are explicitly denying all saps except 0x04 (and 0x05, the response).
Check out this link. It is a good reference for filtering dlsw traffic.
http://www.cisco.com/warp/public/697/dlswfilter.shtml#sapfilter3
Steve Connolly
-----Original Message-----
From: nobody@groupstudy.com on behalf of ccie2be
Sent: Fri 3/4/2005 3:45 PM
To: Group Study
Cc:
Subject: dlsw icanreach
Hi guys,
Does this config make sense?
I want to advertise that this peer can only reach netbios hosts.
dlsw icanreach sap F0
dlsw icanreach netbios-exclusive
I'm not sure if the netbios-exclusive command can be used in this way or if
this command is only good when one host is specified.
Can someone let me know?
TIA, Tim
This archive was generated by hypermail 2.1.4 : Sun Apr 03 2005 - 17:56:40 GMT-3