From: Christopher M. Heffner (cheffner@certified-labs.com)
Date: Wed Oct 05 2005 - 10:42:48 GMT-3
Here is a link for the ethertype codes for filtering:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/
ibm_r1/ib1_ethc.htm
Here is an example explaining the DLSW filter techniques:
http://www.cisco.com/warp/public/697/dlswfilter.html#configs
Here is the explanation for how the Layer 2 wildcard masks are computed:
http://www.cisco.com/en/US/tech/tk331/tk336/technologies_tech_note09186a
00800fad74.shtml
HTH,
Christopher M. Heffner, CCIE 8211, CCSI 98760
Strategic Network Solutions, Inc.
VP of Internetworking Technologies
www.certified-labs.com
"Complete CCIE R&S and Security Online Rack Rentals"
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Dennis J. Hartmann
Sent: Sunday, October 02, 2005 3:38 PM
To: 'Victor Cappuccio'; 'Cisco certification'
Subject: RE: DLSW Switch redundancy ?
I haven't used the Documentation CD in YEARS!
Here's the web server URL for those that don't use the DocCD
anymore.....
http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/tr1920.htm
I don't find this link very valuable . I don't see any well-known
SAP
filters..... I don't know if there's a consolidated place to get this
information. Maybe I'll compile one myself and post it to the list when
I
have a spare 2 hours. With 2 children under 4 years in my house and my
studying, that's likely to never happen. Ugh!
Sincerely,
Dennis J. Hartmann
White Pine Communications
CCSI#23402 / CCVP / CCIP / CCNP
Cisco Optical, VPN & IDS Specialist
MCSE
_____
From: Victor Cappuccio [mailto:cvictor@protokolgroup.com]
Sent: Sunday, October 02, 2005 11:43 AM
To: dh8@pobox.com
Subject: Re: DLSW Switch redundancy ?
Sorry Dennis, if the format was not accurate..
The URL for the only word that Exist with F0F0 in the DOC Cd is
http://127.0.0.1:8080//cc/td/doc/cisintwk/itg_v1/tr1920.htm
And yes I'm using Debian
Dennis J. Hartmann wrote:
What did you mean to send? I can't even read this? Is this a
directory
path or URL? Are you using Unix? I see greps all over the place. Did
you
mean to send a URL?
Sincerely,
Dennis J. Hartmann
White Pine Communications
CCSI#23402 / CCVP / CCIP / CCNP
Cisco Optical, VPN & IDS Specialist
MCSE
_____
From: Victor Cappuccio [mailto:cvictor@protokolgroup.com]
Sent: Saturday, October 01, 2005 11:15 PM
To: Victor Cappuccio
Cc: Dennis J. Hartmann; 'kevin gannon'; 'Cisco certification'
Subject: Re: DLSW Switch redundancy ?
For now this...
vc@066GR /cygdrive/d/CdDc
$ grep -r F0F0 *
Coincidencia en el fichero binario
cc/td/doc/cisintwk/itg_v1/tr891502.eps
Coincidencia en el fichero binario
cc/td/doc/product/wanbu/mgx8850/vism30/vm30_0
2.htm
temp/127.0.0.1_8080/cc/td/doc/cisintwk/itg_v1/tr1920.htm:<P> 4. If
multiple f
ilters or filters using access lists with multiple statements exist,
apply
each
filter individually to identify the problem filter. Check the
configuration
for
input and output LSAP2 and TYPE
filters,
which
can be used simultaneously to block different protocols. For example,
LSAP
(F0F
0) can be used to block NetBIOS, and TYPE<EM> </EM>(6004) can be used to
block l
ocal-area transport.</P>
Troubleshooting Transparent Bridging Environments
& Still Browsing .. I wish my machine had more memory, however she
Rocks!!
Victor Cappuccio wrote:
Upps Sorry I pressed the send button without finishing the email, I'm
not an
English Speaker, please excuse my mistake ** know == now **
now The problem would be how to load the File in the Application that
the
DocCD uses
.
And Still Browsing...
Victor Cappuccio wrote:
Still Browsing... Nice one to where is it!!
vc@066GR /cygdrive/d/CdDc
$ grep -r F0F0 *
Coincidencia en el fichero binario
cc/td/doc/cisintwk/itg_v1/tr891502.eps
Coincidencia en el fichero binario
cc/td/doc/product/wanbu/mgx8850/vism30/vm30_0
2.htm
Know the problem would be hoy to load that File in the
Dennis J. Hartmann wrote:
In relation to this, does anyone know where there are some good SAP
codes for filtering in the /univercd?
The only ones I've successfully found in the documentation is from
the 12.3 Source-Route Briding Configuration Guide:
An access list that passes a frame if it is a NetBIOS frame (SAP =
0xF0F0)
An access list that passes a frame if it is an SNA frame (SAP = 0x0404)
! Access list 201 passes NetBIOS frames (command or response)
access-list
201 permit 0xF0F0 0x0001 ! access-list 202 permit 0x0404 0x0001 !
Permits
SNA frames (command or
response) access-list 202 permit 0x0004 0x0001 ! Permits SNA Explorers
with
NULL DSAP
-Dennis Hartmann
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
kevin gannon
Sent: Saturday, October 01, 2005 9:30 AM
To: Cisco certification
Subject: DLSW Switch redundancy ?
I have no real world SNA experience so the below maybe seem daft. I have
setup up the following
R1
------------------
interface FastEthernet0/0
no ip address
duplex auto
speed auto
dlsw transparent redundancy-enable 9999.9999.9999
dlsw transparent map local-mac 4000.0000.0099 remote-mac
0009.b7d1.6e20
R5
-------------------
interface FastEthernet0/0
no ip address
duplex auto
speed auto
dlsw transparent redundancy-enable 9999.9999.9999 master-priority 1
dlsw
transparent map local-mac 4000.0000.0002 remote-mac 0090.ed8b.7604
Both R1 and R5 are attached to the same switch in the same VLAN. On this
VLAN I have also setup a DSPU listener and on another router I have
setup a
DSPU host. The DSPU traffic is travelling in DLSW and hits R1 in this
case
as this is the router which won the circuit. 0090.ed8b.7604 is the host
by
the way.
I can see the MAC address translation taking place on R1 :
R1#
*Mar 1 03:38:42.779: DLSW-ER:action_c(): origin mapped from (wan)
0090.ed8b.7604 ---> 0200.0000.0099
So all is well.
So in the real world if the mainframe recieves the SNA from the MAT'd
address in my case 0200.0000.0099 the MAT it should respond to the
0200.0000.0099 ?
If this is the case then in my configs MAT seems to work in only one
direction.
In fact if R1 receieves an explorer for the MAC 0200.0000.0099 it doesnt
respond and traffic is dropped.Testing using DSPU commands again a real
SNA
host may behave differently ?
Maybe I should be thinking about this like static IP NAT.
Thanks & Regards
Kevin
This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:49 GMT-3