dlsw netbios explore frame filtering

[teru-lei]

Hi all,

The following scenario:

e0--R1-----R2--e0

R1 peer R2 with DLSW, And I want R1not send netbios explore frame to R2 and R2 not send netbios explore frame to R1.So Can I use a netbios access-list in the e0 interface to bar the netbios packet so that R1 will not send explore frame out and also do that in R2 to meet the target? And Should I just use "dlsw icanreach netbios-exclusive" int the config mode in R1 and R2 to meet the target? Anybody has idea? Thank You!

Best Regards

Teru Lei

[rsissons]

The usual method of restricting netbios is using a SAP filer to deny the netbios SAP of F0, eg

access-list 200 deny 0xF0F0, 0x0101

access-list 200 permit 0x0000 0xFFFF

You can apply this either on the lan eg

bridge-group 1 input-lsap-list 200

or on the DLSW remote-peer command itself with the lsap-output-list parameter.

bridhe 1 or to the DLSW peer using the

[teru-lei]

Hi,

Thank You for your answer. But if I apply the access-list to the remote-peer, will the list also bar the explore frame? Thank You!

Best Regards

Teru Lei

[raarons]

Dlsw icanreach netbios-exclusive is exactly what you're after. If you define the available netbios names on each router, these are advertised to the dlsw peer during capabilities exchange, and no netbios explorers are forwarded at all.

HTH

[l.bookstaver]

For additional info on this topic,

http://www.cisco.com/warp/public/697/dlswfilter.shtml

It goes through several similar configuration examples and has links to info on SAPs