5 controlling access to ipx networks, Controlling access to ipx networks -6 – Riverstone Networks WICT1-12 User Manual

Page 526

Advertising
background image

23-6 Riverstone Networks RS Switch Router User Guide Release 8.0

Configuring IPX Routing

IPX Routing Configuration

To add an entry into the Server Information Table, enter the following command in Configure mode:

23.5.5

Controlling Access to IPX Networks

To control access to IPX networks, you create access control lists and then apply them with filters to individual
interfaces. The RS supports the following IPX access lists that you can use to filter various kinds of traffic:

IPX access control list: Restrict traffic based on the source address, destination address, source
socket, destination socket, source network mask or destination network mask.

SAP access control list: Restricts advertisements or learning of SAP services. These lists are used
for SAP filters. They can also be used for Get Nearest Server (GNS) replies.

RIP access control list: Restricts advertisements or learning of networks.

Creating an IPX Access Control List

IPX access control lists control which IPX traffic is received from or sent to an interface based on source address,
destination address, source socket, destination socket, source network mask or destination network mask. This is used
to permit or deny traffic from one IPX end node to another.

To create an IPX access control list, perform the following task in the Configure mode:

Once an IPX access control list has been created, you must apply the access control list to an IPX interface. To apply
an IPX access control list, enter the following command in Configure mode:

Add a SAP table entry.

ipx add sap

<service type> <SrvcName> <node> <socket> <metric>

<interface-network>

Create an IPX access control list.

acl

<name>

permit|deny ipx

<SrcNetwork Node>

<DstNetworkNode> <SrcSocket> <SrcNetMask> <DstSocket>
<DstNetMask>

Apply an IPX access control list.

acl

<name>

apply interface

<Interface Name>

input|output

[logging [on|off]]

Advertising