From: Barry J. Bocaner (barry@xxxxxxxxxxx)
Date: Tue Jan 16 2001 - 17:27:01 GMT-3
OK, I couldn't wait until work was over, had to test this now.
I am reversing myself on this one! I believe the command reference is
wrong.
I am *now* of the opinion that in an icanreach mac-address mask a 'f' is a
care and a '0' is a don't care. Again, it is *not* an inverse mask.
Here's how I tested it... please let me know if you have a problem with my
config or methodology:
netbios LABPC --------- R1 -----frame----- R2 ----- netbios BARRYBOOK2
I plugged the lab PC into R1's fa0/0, configured connectivity between R1
and R2, and plugged my notebook into R2 fa0/1. I then put in my dlsw
config. Here are the configs:
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname router1
!
!
!
!
!
!
ip subnet-zero
no ip finger
!
ip audit notify log
ip audit po max-events 100
cns event-service server
!
!
!
dlsw local-peer peer-id 10.0.0.1
dlsw remote-peer 0 tcp 10.0.0.2
dlsw bridge-group 1
!
!
!
!
!
interface Loopback0
ip address 10.0.0.1 255.255.255.255
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
bridge-group 1
!
interface Serial0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0.102 point-to-point
ip address 10.10.1.1 255.255.255.0
frame-relay interface-dlci 102
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.0.0.1 0.0.0.0 area 0
network 10.10.1.0 0.0.0.255 area 0
!
ip classless
no ip http server
!
!
bridge 1 protocol ieee
!
line con 0
transport input none
line aux 0
line vty 0 4
!
no scheduler allocate
end
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname router2
!
!
!
!
!
!
ip subnet-zero
no ip finger
!
ip audit notify log
ip audit po max-events 100
cns event-service server
!
!
!
dlsw local-peer peer-id 10.0.0.2
dlsw remote-peer 0 tcp 10.0.0.1
dlsw bridge-group 1
!
!
!
!
!
interface Loopback0
ip address 10.0.0.2 255.255.255.255
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
no ip address
encapsulation frame-relay
!
interface Serial0/0.201 point-to-point
ip address 10.10.1.2 255.255.255.0
frame-relay interface-dlci 201
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
bridge-group 1
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.0.0.2 0.0.0.0 area 0
network 10.10.1.0 0.0.0.255 area 0
!
ip classless
no ip http server
!
!
bridge 1 protocol ieee
!
line con 0
transport input none
line aux 0
line vty 0 4
!
no scheduler allocate
end
OK, I can browse and read files on LABPC from BARRYBOOK2.
Now, on R1 I add:
dlsw icanreach mac-exclusive
dlsw icanreach mac-address 1111.1111.1111
the router automatically added the mask ffff.ffff.ffff onto the end of
that.
Now, assuming ffff.ffff.ffff is all don't care, I should still be able to
access LABPC from BARRYBOOK2, right?
Well... *drumroll* I can't.
I remove the dlsw icanreach mac-exclusive and it once again works.
OK, did I do this right? Is my logic correct?
If you get stuck with this on your exam, you'd better be prepared to PROVE
it to the proctor that this is the way it works.
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Barry J. Bocaner
Sr. Network Engineer TruEdge Technologies
<barry@truedge.com> 703-573-9884 x 103
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:27:31 GMT-3