Re: [cisco-ttl] Mac adresine göre IOS ACL

From: Devrim Yener KUCUK (dkucuk_at_cisco.com)
Date: Mon Oct 20 2003 - 08:06:06 GMT

  • Next message: iSYaN: "[cisco-ttl] Cisco Sorun 2"

    Selam Zeki

    Bizim Cisco internal alias da boyle bi soru icin verilen cevabi gordum
    Onu forward ediyorum.
    Turkceye cevirmekle ugrasmadim

    >>>
    I don't think that MAC address access lists are supported on GSR. This
    router is supposed to forward only IP traffic and tagged frames. In that
    environment there is no real need for MAC address access lists. PSA is
    the ASIC in Engine2 linecards and Salsa is the ASIC in Engine1 linecards
    that can, among other tasks, do the ACL checking
    >>>

    Devrim

    ----- Original Message -----
    From: "Zeki Can" <zc_at_nmc-m.dtag.de>
    To: <cisco-ttl_at_yahoogroups.com>
    Sent: Monday, October 20, 2003 8:24 AM
    Subject: AW: [cisco-ttl] Mac adresine göre IOS ACL

    > router(config)#access-list hardware ?
    > psa Enable PSA hardware access list
    > salsa Enable Salsa hardware input access list
    >
    > GSR routerlarda yazilan ACLeri line cardlarin CPU sundan da degilde ASIC
    > bazinda islenmesini saglayarak, performansi artirmak icin kullaniliyor,
    >
    > Engine1 line kartlarda salsa hardware accelerasyonu kullaniliyor,
    > Engine2 line cardlarda ise psa hardware accelerasyonu kullaniliyor,
    >
    > maalesef mac filtreleme ile ilgili degil..
    >
    > > -----Ursprüngliche Nachricht-----
    > > Von: Aytan KIZILTAN [mailto:akiziltan_at_veritim.com.tr]
    > > Gesendet am: Freitag, 17. Oktober 2003 20:58
    > > An: cisco-ttl_at_yahoogroups.com
    > > Betreff: Re: [cisco-ttl] Mac adresine göre IOS ACL
    > >
    > > ben listede hardware diye bi seçenek gördüm ama ?
    > > ----- Original Message -----
    > > From: "Zeki Can" <zc_at_nmc-m.dtag.de>
    > > To: <cisco-ttl_at_yahoogroups.com>
    > > Sent: Wednesday, October 15, 2003 2:58 PM
    > > Subject: AW: [cisco-ttl] Mac adresine göre IOS ACL
    > >
    > >
    > > > Hayir gözükmüyor,
    > > >
    > > > Router(config)#access-list ?
    > > > <1-99> IP standard access list
    > > > <100-199> IP extended access list
    > > > <1300-1999> IP standard access list (expanded range)
    > > > <2000-2699> IP extended access list (expanded range)
    > > > compiled Enable IP access-list compilation
    > > > hardware Enable hardware based IP access list
    > > > rate-limit Simple rate-limit specific access list
    > > >
    > > > Router GSR ve Line Card E2, mac-adress based ACL bu platformda
    > > > desteklenmiyor olabilirmi?
    > > >
    > > > Selamlar,
    > > >
    > > > Zeki.
    > > >
    > > >
    > > > > -----Ursprüngliche Nachricht-----
    > > > > Von: Levent IRKILMEZ [mailto:lirkilme_at_cisco.com]
    > > > > Gesendet am: Mittwoch, 15. Oktober 2003 13:37
    > > > > An: cisco-ttl_at_yahoogroups.com
    > > > > Betreff: Re: [cisco-ttl] Mac adresine göre IOS ACL
    > > > >
    > > > > router(config)#access-list ?
    > > > > <1-99> IP standard access list
    > > > > <100-199> IP extended access list
    > > > > <1100-1199> Extended 48-bit MAC address access list
    > > > > <1300-1999> IP standard access list (expanded range)
    > > > > <200-299> Protocol type-code access list
    > > > > <2000-2699> IP extended access list (expanded range)
    > > > > <700-799> 48-bit MAC address access list
    > > > >
    > > > > yapinca yukaridaki secenekler gozukmuyor mu?
    > > > >
    > > > > Levent
    > > > >
    > > > >
    > > > >
    > > > > ----- Original Message -----
    > > > > From: "Zeki Can" <zc_at_nmc-m.dtag.de>
    > > > > To: <cisco-ttl_at_yahoogroups.com>
    > > > > Sent: Wednesday, October 15, 2003 11:51 AM
    > > > > Subject: [cisco-ttl] Mac adresine göre IOS ACL
    > > > >
    > > > >
    > > > > > Slm,
    > > > > >
    > > > > > 12.0(21)ST7 IOS de bir GE interface`inden gelen bir
    > > mac-adresini bloke
    > > > > etmek
    > > > > > istiyorum,
    > > > > >
    > > > > > Asagidaki linkte bunun mümkün oldugu yaziyor
    > > > > >
    > > > > http://www.cisco.com/en/US/products/sw/iosswrel/ps1828/products_co
    > > > > nfiguratio
    > > > > > n_guide_chapter09186a00800ca5fc.html#19065
    > > > > >
    > > > > > ama bu IOS de access-listi 700-799 arasinda numaralandiramiyorum.
    > > > > >
    > > > > > Router(config)#access-list 700 ?
    > > > > > % Unrecognized command
    > > > > >
    > > > > > IOS degistirmeden mac-adresine göre filtreleme
    > > yapabilecegim baska bi
    > > > > method
    > > > > > varmi?
    > > > > >
    > > > > > Simdiden tesekkurler,
    > > > > >
    > > > > > Zeki CAN
    > > > > >
    > > > > >
    > > > > >
    > > > > >
    > > > > >
    > > > > >
    > > > > >
    > > > > >
    > > > > > Bu listenin Cisco Systems ile dogrudan herhangi bir baglantisi
    > > > > bulunmamaktadir.
    > > > > >
    > > > > > Listeden cikmak için cisco-ttl-unsubscribe_at_yahoogroups.com
    adresine
    > > bir
    > > > > e-posta gönderebilirsiniz.
    > > > > >
    > > > > > Your use of Yahoo! Groups is subject to
    > > > http://docs.yahoo.com/info/terms/
    > > > >
    > > > >
    > > >
    > > >
    > > >
    > > > Bu listenin Cisco Systems ile dogrudan herhangi bir baglantisi
    > > > bulunmamaktadir.
    > > >
    > > > Listeden cikmak için cisco-ttl-unsubscribe_at_yahoogroups.com adresine
    bir
    > > > e-posta gönderebilirsiniz.
    > > >
    > > > Your use of Yahoo! Groups is subject to
    > http://docs.yahoo.com/info/terms/
    > >
    > >
    > >
    > >
    > >
    > > Bu listenin Cisco Systems ile dogrudan herhangi bir baglantisi
    > bulunmamaktadir.
    > >
    > > Listeden cikmak için cisco-ttl-unsubscribe_at_yahoogroups.com adresine bir
    > e-posta gönderebilirsiniz.
    > >
    > > Your use of Yahoo! Groups is subject to
    http://docs.yahoo.com/info/terms/
    > >
    > >
    >
    >
    >
    > Bu listenin Cisco Systems ile dogrudan herhangi bir baglantisi
    > bulunmamaktadir.
    >
    > Listeden cikmak için cisco-ttl-unsubscribe_at_yahoogroups.com adresine bir
    > e-posta gönderebilirsiniz.
    >
    > Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
    >
    >
    >
    >
    >
    > Bu listenin Cisco Systems ile dogrudan herhangi bir baglantisi
    bulunmamaktadir.
    >
    > Listeden cikmak için cisco-ttl-unsubscribe_at_yahoogroups.com adresine bir
    e-posta gönderebilirsiniz.
    >
    > Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
    >

    ------------------------ Yahoo! Groups Sponsor ---------------------~-->
    Buy Ink Cartridges or Refill Kits for your HP, Epson, Canon or Lexmark
    Printer at MyInks.com. Free s/h on orders $50 or more to the US & Canada.
    http://www.c1tracking.com/l.asp?cid=5511
    http://us.click.yahoo.com/mOAaAA/3exGAA/qnsNAA/26EolB/TM
    ---------------------------------------------------------------------~->

    Bu listenin Cisco Systems ile dogrudan herhangi bir baglantisi bulunmamaktadir.

    Listeden cikmak için cisco-ttl-unsubscribe_at_yahoogroups.com adresine bir e-posta gönderebilirsiniz.

    Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/



    This archive was generated by hypermail 2.1.5 : Mon Oct 20 2003 - 12:06:53 GMT