From: Michael Snyder (msnyder@revolutioncomputer.com)
Date: Sun Feb 08 2004 - 23:46:47 GMT-3
Trying to come up to speed on dlsw mac filters.
If wanted to accept the following mac`s 0207.78ba.a9e1 0207.78ba.a9e2
0207.78ba.a9e3 0207.78ba.a9e4
Would it be:
dlsw icanreach mac-address 0207.78ba.a9e0 mask 0000.0000.0007
or
dlsw icanreach mac-address 0207.78ba.a9e0 mask ffff.fff.fff8
I think the second one is correct. It's a mask not a wildcard. The hex
makes it harder to figure. (I did 255-7 and converted back to hex)
Thank God I had that 6502 machine language course years ago.
--------------------------------------------------------------------
While I at it, anyone have a preference between lsap filters and
icanreach saps ?
I like dlsw icanreach sap 0 4 8 C
Much better than
dlsw remote-peer 0 fst 192.168.1.1 lsap-output-list 200
access-list 200 permit 0x0000 0x0d0d
The saps seem much cleaner, and you only have to declare it once,
instead of each client.
Michael
This archive was generated by hypermail 2.1.4 : Fri Mar 05 2004 - 07:13:47 GMT-3