DLSw Traffic as un-intersting

m-villas · ‎09-14-2003

Hi,

I want to make DLSw as unintersting traffic to trigger the ISDN dial.

IS below alone is enough or any additions required

access-list 101 deny tcp any eq 2065 any

access-list 101 deny tcp any eq any 2065

access-list 101 permit any any

Thanks,

Martin

liviu.gheorghe · ‎09-17-2003

The correct access-list to make DLSw uninteresting traffic for DDR is:

access-list 101 deny tcp any gt 11000 any eq 2065

access-list 101 permit any any

This is because on the router configured for DDR, the DLSw traffic originates from a port higher than 11000 to port 2065 on the remote DLSw peer. The return traffic is from remote port 2065 to your port higher than 11000, which is not going to trigger your ISDN dial anyway, it's the problem of the remote router.

Cheers

Regards, LG
*** Please Rate All Helpful Responses ***

m-villas · ‎09-20-2003

I think

access-list 101 deny tcp any any eq 2065

also matches what ever the source port u said above, right?

Thanks,

Martin

liviu.gheorghe · ‎09-21-2003

That is correct. The one I posted is more speciffic. Like I said, DLSw traffic originates from a port higher than 11000 to port 2065 on the remote DLSw peer. This way you can be sure that only DLSw traffic gets match by this entry of the access-list.

Cheers

Regards, LG
*** Please Rate All Helpful Responses ***