Cabletron Systems SmartSwitch Router, Руководство пользователя

Страница: 250 / 338

Chapter 16: IPX Routing Configuration Guide
250 SmartSwitch Router User Reference Manual
Configuring Static SAP Table Entries
Servers in an IPX network use SAP to advertise services via broadcast packets. Services
from servers are stored in the Server Information Table. If you want to have a service
explicitly advertised with different hops, you will need to configure a static entry.
To add an entry into the Server Information Table, enter the following command in
Configure mode:
Controlling Access to IPX Networks
To control access to IPX networks, you create access control lists and then apply them with
filters to individual interfaces. The SSR supports the following IPX access lists that you
can use to filter various kinds of traffic:
• IPX access control list: Restrict traffic based on the source address, destination address,
source socket, destination socket, source network mask or destination network mask.
• SAP access control list: Restricts advertisements or learning of SAP services. These lists
are used for SAP filters. They can also be used for Get Nearest Server (GNS) replies.
• RIP access control list: Restricts advertisements or learning of networks.
Creating an IPX Access Control List
IPX access control lists control which IPX traffic is received from or sent to an interface
based on source address, destination address, source socket, destination socket, source
network mask or destination network mask. This is used to permit or deny traffic from
one IPX end node to another.
To create an IPX access control list, perform the following task in the Configure mode:
Once an IPX access control list has been created, you must apply the access control list to
an IPX interface. To apply an IPX access control list, enter the following command in
Configure mode:
Add a SAP table entry.
ipx add sap
<service type> <SrvcName> <node>
<socket> <metric> <interface-network>
Create an IPX access control list. acl <name> permit|deny ipx
<SrcNetwork Node> <DstNetworkNode>
<SrcSocket> <SrcNetMask> <DstSocket>
<DstNetMask>
Apply an IPX access control list.
ac
l <name>
apply interface
<Interface Name>
input|output [logging [on|off]]