Cisco Systems IC-23 Uživatelský manuál stáhnout pdf (Strana 44)

Configuring LAN Interfaces

LAN Interface Configuration Examples

IC-66

Cisco IOS Interface Configuration Guide

SNMP Illegal Address Trap Enablement for Hub Port Example

The following example specifies the gateway IP address and enables an SNMP trap to be issued to the

host 172.69.40.51 when a MAC address violation is detected on hub ports 2, 3, or 4. It specifies that

interface Ethernet 0 is the source for all traps on the router. The community string is defined as the string

public and the read/write parameter is set.

ip route 0.0.0.0 0.0.0.0 172.22.10.1

snmp-server community public rw

snmp-server trap-source ethernet 0

snmp-server host 172.69.40.51 public

hub ethernet 0 2 4

snmp trap illegal-address

LAN Extender Enablement Interface Example

The following simple example configures and creates a LAN Extender interface. In this example, the

MAC address of the LAN Extender is 0000.0c00.0001.

interface serial 4

encapsulation ppp

interface lex 0

lex burned-in-address 0000.0c00.0001

ip address 131.108.172.21 255.255.255.0

LAN Extender Interface Access List Examples

This section provides these examples of LAN extender interface configuration:

• MAC Address Filtering Example

• Ethernet Type Code Filtering Example

MAC Address Filtering Example

The following is an example that controls which traffic from Macintosh computers on the remote

Ethernet LAN reaches the core router:

access-list 710 permit 0800.0298.0000 0000.0000.FFFF

access-list 710 deny 0800.0276.2917 0000.0000.0000

access-list 710 permit 0800.0000.0000 0000.FFFF.FFFF

interface lex 0

lex input-address-list 710

The first line of this access list permits traffic from any Macintosh whose MAC address starts with

0800.0298. The remaining two octets in the MAC address can be any value because the mask for these

octets is FFFF (“don’t care” bits).

The second line specifically rejects all traffic originating from a Macintosh with the MAC address of

0800.0276.2917. Note that none of the mask bits are “don’t care” bits.

The third line specifically permits all traffic from other Macintoshes whose MAC addresses start with

0800. Note that in the mask, the “don’t care” bits are the rest of the address.

At the end of the list is an implicit “deny everything” entry, meaning that any address that does not match

an address or address group on the list is rejected.

1 2 ... 39 40 41 42 43 44 45 46

Komentáře k této Příručce

Žádné komentáře

Cisco Systems IC-23 Uživatelský manuál Strana 44

Komentáře k této Příručce

Související produkty a manuály pro Sítě Cisco Systems IC-23