Re: DLSW MAC ADDR Filtering and Masks

From: Bernard Dunn (dunn@xxxxxxxxx)
Date: Tue Jan 16 2001 - 23:29:45 GMT-3


   
All,

Do not get the bit-mask interpretation of the 'dlsw icanreach mac-addre'
mixed up with access-list 7xx bit-masks or access-list 11xx bit-masks.

Access lists = 1 = don't care.
Access lists = 0 = CARE

dlsw icanreach/icannotreach = 1 = CARE
dlsw icanreach/icannotreach = 0 = don't care

Over I don't know how many satisfied TAC customers. ... :^)

Regards

Bernard.

On Tue, 16 Jan 2001, Hardin Les - SMTP wrote:

> Folks,
>
> It would make sense if the CD were correct. At least the mask would then
> be consistent across all lists, i.e., access-list 700, SAP filters, and
> icanreach. They would all be 1 = don't care and 0 = care. That would make
> my brain feel much better!
>
> Anxiously awaiting Barry's test results.
>
> Les
>
> At 03:01 PM 1/16/2001 -0500, Dave wrote:
> >I agree, and my test is thursday. However I would be more inclined to do it
> >the way the CD shows, right or wrong, at least then you can argue it with
> >the proctor. Then you are not necessarily wrong, but the doc's are !!
> >
> >DAve
> >
> >
> >----- Original Message -----
> >From: "Fallon, Bill" <Bill.Fallon@getronics.com>
> >To: "Barry J. Bocaner" <barry@truedge.com>; "Hardin Les - SMTP"
> ><hardinl@bah.com>
> >Cc: <ccielab@groupstudy.com>
> >Sent: Tuesday, January 16, 2001 2:58 PM
> >Subject: RE: DLSW MAC ADDR Filtering and Masks
> >
> >
> > > Barry,
> > >
> > > Please Do test it and let me know because to no surprise there is a
> >conflict
> > > on CCO and My test is in 30 days.
> > >
> > > Thanks,
> > > Bill
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: Barry J. Bocaner [mailto:barry@truedge.com]
> > > Sent: Tuesday, January 16, 2001 1:00 PM
> > > To: Hardin Les - SMTP
> > > Cc: ccielab@groupstudy.com
> > > Subject: RE: DLSW MAC ADDR Filtering and Masks
> > >
> > >
> > > On Tue, 16 Jan 2001, Barry J. Bocaner wrote:
> > > > mask mask
> > > > (Optional) MAC address mask in hexadecimal h.h.h. The "f" value
> > > > represents the "don't care" bit and the "0" value represents the
> > > > "care" bit. The mask indicates which bits in the MAC address are
> >relevant.
> > > >
> > >
> > > I'd just like to add that I think it is FREAKY that the router defaults t
o
> > > a mask which would allow ALL mac addresses, but I beleive this is the way
> > > it really works. I'm going to test this out after work today in my lab
> > > and I'll let you know how it works.
> > >
> > > Bottom line: BE CAREFUL!!
> > >
> > > --=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> > > Barry J. Bocaner
> > > Sr. Network Engineer TruEdge Technologies
> > > <barry@truedge.com> 703-573-9884 x 103
> > > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> > >



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:27:32 GMT-3