From: Fred Ingham (fningham@xxxxxxxxxxxxxxxx)
Date: Wed Apr 25 2001 - 12:30:30 GMT-3
Lin: The NetBIOS host filter is used to filter NB Name Queries. For
this to work you would have the host DNS on the r2 LAN, not the r1 LAN,
and have one of the other stations on r1 initiate the connection. You
will see the filtered packets in dlsw debug statements.
The reachability cache can be populated with the receipt of a NetBIOS
datagram which will not be filtered with the host filter. If you don't
want the host to be in reachability cache until a session is initiated
use the command:
dlsw cache-ignore-netbios-datagram
HTH, Fred.
Haohong Lin wrote:
>
> Hi,
>
> I use parameter "host-netbios-out" to filter netbios host, but affect
> none.
>
> |e0:10.1.10.36
> LAN1 +----- R1-----------/ |
> |
> /----------------------R2-----+e0:172.30.20.2
>
> |
>
> There are some Windows machine on LAN1.
>
> R1:
> netbios access-list host dns deny DNS
> netbios access-list host dns permit *
> !
> dlsw local-peer peer-id 10.1.10.36
> dlsw remote-peer 0 tcp 172.30.20.2 host-netbios-out dns
> dlsw bridge-group 1
> !
> <output omitted>
>
> R1#sh dlsw rea netbios-names
> DLSw Local NetBIOS Name reachability cache list
> NetBIOS Name status Loc. port rif
> ATMSERV FOUND LOCAL TBridge-001 --no rif--
> DNS FOUND LOCAL TBridge-001 --no rif--
> GUJING FOUND LOCAL TBridge-001 --no rif--
> LEIHUANG FOUND LOCAL TBridge-001 --no rif--
> NETBANKCLI FOUND LOCAL TBridge-001 --no rif--
> XINXIN FOUND LOCAL TBridge-001 --no rif--
> YIBAI FOUND LOCAL TBridge-001 --no rif--
> ZIJIN-NETBANK FOUND LOCAL TBridge-001 --no rif--
>
> DLSw Remote NetBIOS Name reachability cache list
> NetBIOS Name status Loc. peer
>
> R2:
> !
> dlsw local-peer peer-id 172.30.20.2
> dlsw remote-peer 0 tcp 10.1.10.36
> dlsw bridge-group 1
> !
> <output omitted>
>
> R2#sh dlsw rea netbios-names
> DLSw Local NetBIOS Name reachability cache list
> NetBIOS Name status Loc. port rif
>
> DLSw Remote NetBIOS Name reachability cache list
> NetBIOS Name status Loc. peer
> ATMSERV FOUND REMOTE 10.1.10.36(2065)
> DNS FOUND REMOTE 10.1.10.36(2065)
> ^^^ <--filtered entry apprear again, after I perform " clear dlsw reach"
> FQWAN FOUND REMOTE 10.1.10.36(2065)
> LEIHUANG FOUND REMOTE 10.1.10.36(2065)
> NETBANKCLI FOUND REMOTE 10.1.10.36(2065)
> YIBAI FOUND REMOTE 10.1.10.36(2065)
> ZIJIN-NETBANK FOUND REMOTE 10.1.10.36(2065)
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:29:56 GMT-3