Cisco Systems BC-109 manual Access Filters Example, Fast-Switching Example

Page 55

Access Filters Example

Access Filters Example

Figure 69 shows two routers connecting two Token Rings to an FDDI backbone.

Figure 69 Network Configuration Using NetBIOS Access Filters

 

 

 

 

 

 

 

 

 

 

 

 

 

 

NetBIOS server

 

 

 

 

NetBIOS clients

FILESVR3

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Token

FDDI

Token

 

Ring

Ring

 

 

 

Router A

 

Router B

 

 

 

IBM FEP

3174

3174

 

address

 

0110.2222.3333

 

 

 

S1112a

Suppose you want to permit the IBM 3174 cluster controllers to access the FEP at address 0110.2222.3333, and also want the NetBIOS clients to access the NetBIOS server named FILESVR3. The following set of router configuration commands would meet this need:

netbios access-list host MIS permit FILESVR3 netbios access-list host MIS deny *

!

access-list 202 permit 0x0404 0x0001 ! Permits SNA frames (command or response) access-list 202 permit 0x0004 0x0001 ! Permits SNA Explorers with NULL DSAP

!

access-list 701 permit 0110.2222.3333

!

interface tokenring 0

access-expression in (lsap(202) & dmac(701)) netbios-host(MIS)

Fast-Switching Example

The following example disables fast switching between two Token Ring interfaces in the same router. Frames entering Token Ring interfaces 0 or 1 will not be fast switched to the other interface.

!global command establishing the ring group for the interface configuration commands source-bridge ring-group 2

!commands that follow apply to interface token 0

interface tokenring 0

!enable srb between local ring 1, bridge 1, and target ring 2 source-bridge 1 1 2

!disable source-route fast-switching cache on interface token 0 no source-bridge route-cache

interface token 1

!enable srb between local ring 2, bridge 1, and target ring 1 source-bridge 2 1 1

no source-bridge route-cache

Configuring Source-Route Bridging BC-163

Image 55
Contents SRB Configuration Task List Configuring Source-Route BridgingConfigure a Dual-Port Bridge Configure Source-Route BridgingMultiple Dual-Port Bridges Configure a Multiport Bridge Using a Virtual RingSource-bridge ring-group ring-group Define a Ring Group in SRB ContextNo source-bridge ring-group ring-group Source-bridge route-cache cbus Configure SRB over FddiEnable SRB and Assign a Ring Group to an Interface Interface fddi slot/portConfigure SRB over Frame Relay Configure Fast-Switching SRB over FddiEnable the Automatic Spanning-Tree Function Limit the Maximum SRB Hops Enable Use of the RIF Configure Bridging of Routed ProtocolsConfigure the RIF Timeout Interval Configure a Static RIF EntryOverview of SR/TLB Following notes and caveats apply to all uses of SR/TLB No source-bridge transparent ring-group fastswitch Enable Bridging between Transparent Bridging and SRBDisable Fast-Switched SR/TLB Enable Translation Compatibility with IBM 8209 BridgesSource-bridge sap-80d5 dsap Enable Token Ring LLC2-to-Ethernet ConversionEnable 0x80d5 Processing Enable Standard Token Ring LLC2-to-Ethernet LLC2 ConversionConfigure NetBIOS Support Source-bridge proxy-netbios-only Specify Timeout and Enable NetBIOS Name CachingSpecify Dead-Time Intervals for NetBIOS Packets Configure the NetBIOS Cache Name LengthEnable NetBIOS Proxying Create Static Entries in the NetBIOS Name CacheNetbios name-cache query-timeout seconds Configure LNM SupportNetbios name-cache recognized-timeout seconds LNM Linking to a Source-Route Bridge on Each Local Ring LAN Network Manager Monitoring and Translating How a Router Works with LNMDisable LNM Functionality Enable Other LRMs to Change Router Parameters Disable Automatic Report Path Trace FunctionEnable LNM Servers Apply a Password to an LNM Reporting LinkChange Reporting Thresholds Monitor LNM Operation Change an LNM Reporting IntervalLnm softerr milliseconds Configure NetBIOS Access Filters Using Station Names Configure NetBIOS Access FiltersSecure the SRB Network Netbios input-access-filter bytes name Configure NetBIOS Access Filters Using a Byte OffsetNetbios access-list host name permit deny pattern Netbios access-list bytes name permit deny offsetNetbios output-access-filter bytes name Configure Administrative Filters for Token Ring TrafficFilter Frames by Protocol Type Filter Source Addresses Filter Frames by Vendor CodeFilter Destination Addresses Access Expression Example Optimize Access Expressions Configure Access ExpressionsTune the SRB Network Alter Access Lists Used in Access ExpressionsEnable or Disable the Source-Route Fast-Switching Cache Establish the Connection Timeout Interval Enable or Disable the SSEOptimize Explorer Processing Controlling Explorer Storms in Redundant Network Topologies Establish SRB Interoperability with TI MAC Firmware Configure Proxy ExplorersMac-address ieee-address Monitor and Maintain the SRB Network Report Spurious Frame-Copied ErrorsSource-bridge tcp-queue-max number SRB Configuration ExamplesBasic SRB with Spanning-Tree Explorers Example Dual-Port Source-Route Bridge ConfigurationSRB-Only Example Optimized Explorer Processing Configuration ExampleMultiport SRB Example SRB and Routing Certain Protocols ExampleSRB with Multiple Virtual Ring Groups Example Configuration for Router aRouter a SRB over Fddi Configuration ExamplesSRB over Fddi Fast-Switching Example Configuration for Router BFrad Using SRB over Frame Relay to Connect to a Cisco Router SRB over Frame Relay Configuration ExampleAdding a Static RIF Cache Entry Example Configuration of Router aConfiguration on Router B Configuration on Router CSR/TLB for a Simple Network Example Adding a Static RIF Cache Entry for a Two-Hop Path ExampleBC-154Bridging and IBM Networking Configuration Guide Example of a Bit-Swapped Address SR/TLB with Access Filtering ExampleSpecifying a Static Entry NetBIOS Support with a Static NetBIOS Cache Entry ExampleLNM for a Simple Network Example Wayfarer# show lnm configLNM for a More Complex Network Example NetBIOS Access Filters Example Filtering Bridged Token Ring Packets to IBM Machines Example Shows a router connecting four Token Rings Following access expression would result Creating Access Filters ExampleFast-Switching Example Access Filters ExampleAutonomous Switching Example