Configure static sap table entries, Control access to ipx networks, Create an ipx access control list – Cabletron Systems SmartSwitch Router 9032578-02 User Manual

Page 156

Advertising
background image

Chapter 9: IPX Routing Configuration Guide

156

SmartSwitch Router User Reference Manual

Configure Static SAP Table Entries

Servers in an IPX network use SAP to advertise services via broadcast packets. Services
from servers are stored in the Server Information Table. If you want to have a service
explicitly advertised with different hops then you will need to configure a static entry.

To add an entry into the Server Information Table, enter the following command in
Configure mode:

Control Access to IPX Networks

To control access to IPX networks, you create access control lists and then apply them with
filters to individual interfaces. The SSR supports the following IPX access lists that you
can use to filter various kinds of traffic:

IPX access control list: Restrict traffic based on the source address, destination address,
source socket, destination socket, source network mask or destination network mask.

SAP access control list: Restricts advertisements or learning of SAP services. These lists
are used for SAP filters. They can also be used for Get Nearest Server (GNS) replies.

RIP access control list: Restricts advertisements or learning of networks.

Create an IPX Access Control List

IPX access control lists control which IPX traffic is received from or sent to an interface
based on source address, destination address, source socket, destination socket, source
network mask or destination network mask. This is used to permit or deny traffic from
one IPX end node to another.

To create an IPX access control list, perform the following task in the Configure mode:

Once an IPX access control list has been created, you must apply the access control list to
an IPX interface. To apply an IPX access control list, enter the following command in
Configure mode:

Add a SAP table entry.

ipx add sap

<service type> <SrvcName> <node>

<socket> <metric> <interface-network>

Create an IPX access control list.

acl

<name> permit|deny ipx

<SrcNetwork Node> <DstNetworkNode>
<SrcSocket> <SrcNetMask> <DstSocket>
<DstNetMask>

Apply an IPX access control list.

ac

l

<name>

apply interface

<Interface Name>

input|output [logging [on|off]]

Advertising