Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
Bookmark
|
Subscribe
|
960
Views
0
Helpful
2
Replies

Ethertype Class Map IP and MAC being ignored?

Peter __
Level 1
Level 1

‎10-12-2013 09:54 AM

Hi need someone to confirm my findings for this problem.

So I've got a SG300-10 10-Port Gigabit Managed Switch (Firmware 1.3.0.62 ) in L3 Mode and QoS Mode in Advanced.

So if I make MAC-Based ACL without entering a Ethertype and make IPv4-Based ACL or/and IPv6-Based ACL and make a Class Map for IP and MAC it bases the non-entered Ethertype based on IPv4 or IPv6 for the map which is Ethertype (IPv4)0800 or (IPv6)86dd. This I'm fine with because no Ethertype was entered but my problem that I need someone to verify as a problem is when you entered a Ethertype thats anything you need it to be e.g. 8888 or 809  for a MAC-Based ACL and make IPv4-Based ACL or/and IPv6-Based ACL that when you make a Class Map for IP and MAC that the Ethertype is being ignored to which I don't want it ignored.

Can someone please confirm this so that its not just me?

Thanks

Labels:
0 Helpful
2 Replies 2

jeffrrod
Level 4
Level 4

‎10-18-2013 09:44 AM

Dear Peter,

Thank you for reaching the Small Business Support Community.

It's been several days since you posted your request for support and unfortunately none of the community members have replied yet and therefore I suggest you to to inquire about this on a different support channel available for you;

https://supportforums.cisco.com/community/netpro/small-business/sbcountrysupport

I am afraid I do not have an answer your you myself.  Please do no hesitate to reach me back if there is any further assistance I may help you with.

Kind regards.

Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer

*Please rate the Post so other will know when an answer has been found.

Jeffrey Rodriguez S. .:|:.:|:. Cisco Customer Support Engineer *Please rate the Post so other will know when an answer has been found.
0 Helpful

Peter __
Level 1
Level 1
In response to jeffrrod

‎10-18-2013 04:19 PM

Yes its just odd that with a Managed Switch there are no ARP controls and I mean more then ARP Access Control Rules really no range for the ARP IP sender and MAC let alone target IP that I’ve max out its just odd at this level thats all the ARP controls we get.

Anyway my point is IPv4-Based ACL and IPv6-Based ACL are just that based on locations by all means if a Ethertype in MAC-Based ACL is not entered base it on (IPv4)0800 or (IPv6)86dd but when one is entered match and match it in Class Map for IP and MAC that it must match them bits.

MAC Ethertype and IPv4 locations

[00 00 00 00 00 00] [00 00 00 00 00 00][08 00]00 00

00 00 00 00 00 00 00 00 00 00 [c0 a8 00 00] [02 02

02 02] 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00

MAC Ethertype and IPv4 locations

[00 00 00 00 00 00] [00 00 00 00 00 00][08 06]00 00

00 00 00 00 00 00 00 00 00 00 [00 00[c0 a8] [00 00]

00 00] 00 00 00 00[02 02 02 02]00 00 00 00 00 00

00 00 00 00 00 00 00 00 00 00 00 00

So ok the locations don't match for 0806 to where 0800 but thats not a problem because their just bits and it just so happens that the IPv4-Based ACL Source IP and Destination IP overlap the Ethertype 0806 for sender IP which by entering a Source IP based IPv4 locations 0.0.192.168 the last bit c0 a8 (.192.168) are matched using 255.255.0.0 and then to match the last bits in 0806 you use Destination IP based IPv4 locations 0.0.0.0 using 255.255.255.255 this then would allow a 0806 sender IP 192.168.0.0 to 192.168.255.255 to be drop/allow when combined in a Class Map for IP and MAC.

Problem is as my post lists Ethertype Class Map IP and MAC being ignored.

Really I would be better off if their was HEX ACL that you can enter your bits to match here and from these bit to these bit for a range.

0 Helpful
Top