From: Ronald Ramcharran (RonaldR@xxxxxxxxxxxxx)
Date: Wed Jun 06 2001 - 02:43:34 GMT-3
I am reading this Doc but I am not sure I am getting this correctly.
http://www.cisco.com/warp/public/698/acl200.htm
Filtering Systems Network Architecture (SNA)
IBM's SNA traffic uses SAPs ranging from 0x00 to 0xFF. Virtual
telecommunications access method (VTAM) V3R4 and higher supports a SAP value
range of 4 to 252 (or 0x04 to 0xFC in hexadecimal representation), where 0xF0
is reserved for NetBIOS traffic. SAPs must be multiples of 0x04 beginning with
0x04. The following ACL permits the most common SNA SAPs and denies the rest
(considering there is an implicit "deny all" at the end of each ACL):
access-list 200 permit 0x0000 0x0D0D
The line I am unsure about is "Virtual telecommunications access method (VTAM)
V3R4 and higher supports a SAP value range of 4 to 252 (or 0x04 to 0xFC in
hexadecimal representation), where 0xF0 is reserved for NetBIOS traffic."
Do this mean if I want to allow ONLY SNA traffic my acl should look like
this?
access-list 200 deny 0xF0F0 0x0101
access-list 200 permit 0x0000 0x0D0D
or
access-list 200 permit 0x0000 0x0D0D
is good enough?
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:18 GMT-3