From: Victor Cappuccio (cvictor@protokolgroup.com)
Date: Wed Oct 05 2005 - 11:14:16 GMT-3
Yeah!!!!
Cisco Doc CD Rocks!
Christopher M. Heffner wrote:
>Here is a link for the ethertype codes for filtering:
>
>http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/
>ibm_r1/ib1_ethc.htm
>
>
>Here is an example explaining the DLSW filter techniques:
>
>http://www.cisco.com/warp/public/697/dlswfilter.html#configs
>
>Here is the explanation for how the Layer 2 wildcard masks are computed:
>
>http://www.cisco.com/en/US/tech/tk331/tk336/technologies_tech_note09186a
>00800fad74.shtml
>
>HTH,
>
>Christopher M. Heffner, CCIE 8211, CCSI 98760
>Strategic Network Solutions, Inc.
>VP of Internetworking Technologies
>
>www.certified-labs.com
>
>"Complete CCIE R&S and Security Online Rack Rentals"
>
>
>
>
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>Dennis J. Hartmann
>Sent: Sunday, October 02, 2005 3:38 PM
>To: 'Victor Cappuccio'; 'Cisco certification'
>Subject: RE: DLSW Switch redundancy ?
>
> I haven't used the Documentation CD in YEARS!
>
> Here's the web server URL for those that don't use the DocCD
>anymore.....
>
> http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/tr1920.htm
>
> I don't find this link very valuable . I don't see any well-known
>SAP
>filters..... I don't know if there's a consolidated place to get this
>information. Maybe I'll compile one myself and post it to the list when
>I
>have a spare 2 hours. With 2 children under 4 years in my house and my
>studying, that's likely to never happen. Ugh!
>
>
>Sincerely,
>
>Dennis J. Hartmann
>
>White Pine Communications
>
>dh8@pobox.com
>
>CCSI#23402 / CCVP / CCIP / CCNP
>
>Cisco Optical, VPN & IDS Specialist
>
>MCSE
>
>
>
>
>
> _____
>
>From: Victor Cappuccio [mailto:cvictor@protokolgroup.com]
>Sent: Sunday, October 02, 2005 11:43 AM
>To: dh8@pobox.com
>Subject: Re: DLSW Switch redundancy ?
>
>
>Sorry Dennis, if the format was not accurate..
>The URL for the only word that Exist with F0F0 in the DOC Cd is
>http://127.0.0.1:8080//cc/td/doc/cisintwk/itg_v1/tr1920.htm
>And yes I'm using Debian
>
>Dennis J. Hartmann wrote:
>
> What did you mean to send? I can't even read this? Is this a
>directory
>path or URL? Are you using Unix? I see greps all over the place. Did
>you
>mean to send a URL?
>
>
>Sincerely,
>
>
>
>Dennis J. Hartmann
>
>White Pine Communications
>
>dh8@pobox.com
>
>CCSI#23402 / CCVP / CCIP / CCNP
>
>Cisco Optical, VPN & IDS Specialist
>
>MCSE
>
>
>
>
>
> _____
>
>From: Victor Cappuccio [mailto:cvictor@protokolgroup.com]
>Sent: Saturday, October 01, 2005 11:15 PM
>To: Victor Cappuccio
>Cc: Dennis J. Hartmann; 'kevin gannon'; 'Cisco certification'
>Subject: Re: DLSW Switch redundancy ?
>
>
>For now this...
>
>vc@066GR /cygdrive/d/CdDc
>$ grep -r F0F0 *
>Coincidencia en el fichero binario
>cc/td/doc/cisintwk/itg_v1/tr891502.eps
>Coincidencia en el fichero binario
>cc/td/doc/product/wanbu/mgx8850/vism30/vm30_0
>2.htm
>temp/127.0.0.1_8080/cc/td/doc/cisintwk/itg_v1/tr1920.htm:<P> 4. If
>multiple f
>ilters or filters using access lists with multiple statements exist,
>apply
>each
>filter individually to identify the problem filter. Check the
>configuration
>for
>input and output LSAP2 and TYPE
>filters,
>which
> can be used simultaneously to block different protocols. For example,
>LSAP
>(F0F
>0) can be used to block NetBIOS, and TYPE<EM> </EM>(6004) can be used to
>block l
>ocal-area transport.</P>
>
>Troubleshooting Transparent Bridging Environments
>
>& Still Browsing .. I wish my machine had more memory, however she
>Rocks!!
>
>
>
>
>
>
>
>Victor Cappuccio wrote:
>
>Upps Sorry I pressed the send button without finishing the email, I'm
>not an
>English Speaker, please excuse my mistake ** know == now **
>now The problem would be how to load the File in the Application that
>the
>DocCD uses
>.
>And Still Browsing...
>
>
>Victor Cappuccio wrote:
>
>Still Browsing... Nice one to where is it!!
>
>vc@066GR /cygdrive/d/CdDc
>$ grep -r F0F0 *
>Coincidencia en el fichero binario
>cc/td/doc/cisintwk/itg_v1/tr891502.eps
>Coincidencia en el fichero binario
>cc/td/doc/product/wanbu/mgx8850/vism30/vm30_0
>2.htm
>
>
>Know the problem would be hoy to load that File in the
>Dennis J. Hartmann wrote:
>
>
>
> In relation to this, does anyone know where there are some good SAP
>codes for filtering in the /univercd?
> The only ones I've successfully found in the documentation is from
>the 12.3 Source-Route Briding Configuration Guide:
>
>An access list that passes a frame if it is a NetBIOS frame (SAP =
>0xF0F0)
>An access list that passes a frame if it is an SNA frame (SAP = 0x0404)
>
>! Access list 201 passes NetBIOS frames (command or response)
>access-list
>201 permit 0xF0F0 0x0001 ! access-list 202 permit 0x0404 0x0001 !
>Permits
>SNA frames (command or
>response) access-list 202 permit 0x0004 0x0001 ! Permits SNA Explorers
>with
>NULL DSAP
>-Dennis Hartmann
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>kevin gannon
>Sent: Saturday, October 01, 2005 9:30 AM
>To: Cisco certification
>Subject: DLSW Switch redundancy ?
>
>I have no real world SNA experience so the below maybe seem daft. I have
>
>setup up the following
>
>R1
>------------------
>interface FastEthernet0/0
>no ip address
>duplex auto
>speed auto
>dlsw transparent redundancy-enable 9999.9999.9999
> dlsw transparent map local-mac 4000.0000.0099 remote-mac
>0009.b7d1.6e20
>
>R5
>-------------------
>interface FastEthernet0/0
>no ip address
>duplex auto
>speed auto
>dlsw transparent redundancy-enable 9999.9999.9999 master-priority 1
>dlsw
>transparent map local-mac 4000.0000.0002 remote-mac 0090.ed8b.7604
>
>Both R1 and R5 are attached to the same switch in the same VLAN. On this
>
>VLAN I have also setup a DSPU listener and on another router I have
>setup a
>DSPU host. The DSPU traffic is travelling in DLSW and hits R1 in this
>case
>as this is the router which won the circuit. 0090.ed8b.7604 is the host
>by
>the way.
>
>I can see the MAC address translation taking place on R1 :
>
>R1#
>*Mar 1 03:38:42.779: DLSW-ER:action_c(): origin mapped from (wan)
>0090.ed8b.7604 ---> 0200.0000.0099
>
>So all is well.
>
>So in the real world if the mainframe recieves the SNA from the MAT'd
>address in my case 0200.0000.0099 the MAT it should respond to the
>0200.0000.0099 ?
>
>If this is the case then in my configs MAT seems to work in only one
>direction.
>In fact if R1 receieves an explorer for the MAC 0200.0000.0099 it doesnt
>
>respond and traffic is dropped.Testing using DSPU commands again a real
>SNA
>host may behave differently ?
>
>Maybe I should be thinking about this like static IP NAT.
>
>Thanks & Regards
>Kevin
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:49 GMT-3