[c-nsp] small cisco as ethernet bridge, IPv6 broken, sadness

Joe Abley jabley at hopcount.ca
Wed Sep 9 11:53:55 EDT 2009


On 2009-09-09, at 04:56, Bjørn Mork wrote:

> Joe Abley <jabley at hopcount.ca> writes:
>
>> interface FastEthernet0/1
>> description facing the exchange point
>> bridge-group 1
>> bridge-group 1 output-pattern-list 1100
>
> And this access list does allow e.g. IPv6 multicast frames?

That access list is just cleaning frames being sent to the exchange to  
make sure that weird crap doesn't leak over there. The exchange point  
in question only permits one nominated MAC per port, and will shut  
down the port automagically if it hears more.

access-list 1100 permit 0023.9c72.d700 0000.0000.0000 0000.0000.0000  
ffff.ffff.ffff

That's the complete list, as configured.



More information about the cisco-nsp mailing list