EtherType 0x0030

[vobelic]

I am implementing a tight ACL policy for our storage (NFS) VLAN.
Basically the idea is to allow only needed stuff, and block the rest.

The last drop rule matches EtherType: 0x0030 frames.
What are those? Seems something XOS related.

[Henrique]

Hi,

I'm not quite sure that etype 0x0030 is related to ELRP even if listed in the access-list.

I would try the following permit rules for EDP and ELRP:

entry Allow_EDP {
if {
ethernet-source-address 00:e0:2b:00:00:01;
ethernet-destination-address 00:e0:2b:00:00:00;
} then {
permit;
count permit_EDP;
}
}
entry Allow_ELRP {
if {
ethernet-source-address 00:04:96:01:01:01 mask ff:ff:ff:00:00:00;
ethernet-destination-address 01:04:96:01:01:01 mask ff:ff:ff:00:00:00;
} then {
permit;
count permit_ELRP;
}
}

Also, you can try with "ethernet-type 0x0030" to the ELRP rule, but I don't think this will work.

Let us know if that works for you.

[Alexandr_P]

Hello!

Where and how you can see that this packets Ethertype 0x0030?

Thank you!

[Jolyon_Ansuz]

Hi,

I've reference, sadly no explainations.

http://www.iana.org/assignments/ieee-802-numbers/ieee-802-numbers.xhtml

https://en.wikipedia.org/wiki/Ethernet_frame

Sincerely,

Jolyon