> Thanks Scott, this was the command that I had forgotten about
and was looking for. Those of you with 6k & 5k switches out
there try it out. Pretty useful at times.
>
*******
>
> Try sh mls entry.
>
> Your 6509 will have this feature by default. But do you have
a RSM module for the 5000?<
I was kind of curious about what the "ultimate correct answer"
would be to this question. While "show MLS entry" is a very
useful command, I am not sure that it provides the complete
information you are seeking.
For starters, the command will provide absolutely nothing if you
do not have multilayer switching properly configured. Since MLS
is on by default in all MLS capable switches, that is not a
problem on the switch side. MLS however, is not on by default
on the route processor. There are several configuration tasks
that are required to ensure that MLS is working properly. Once
it is configured and working properly, you still cannot get a
complete picture by using the command "show MLS entry." For
example, for packets that do not receive a flow designation (no
candidate *and* enable packets), you will not get a flow cache
entry. Such packets may get switched normally (non-MLS), or the
multilayer switching may get processed by another switching
engine. Also, the level of detail that is provided is driven by
the access lists that are in effect on the *route processor*.
This is actually the reason why I wanted to make this post. It
is to clarify what/whom is actually providing the intelligence
in the switch to give you the output that you requested with the
"show MLS entry" command. It is a combined effort of the route
processor and the switching engine. It is not solely the work
of the switch itself.
Another point to be made is that when you look at the output
from "show MLS entry", it may be slightly deceptive. It should
accurately point to host IP address paths from a layer 2
perspective. All you can tell is that IP address 10.10.10.22 is
sourced from switch port 2/12 and ip address 10.10.20.33 is
destined for switch port 3/9. It does not tell you how many
switch/bridge hops away each host resides. This is why I was
confused about your original question, because you specified
directly connected hosts.
HTH,
Paul Werner
________________________________________________
Get your own "800" number - Free
Free voicemail, fax, email, and a lot more
http://www.ureach.com/reg/tag
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]