IPX Access Lists
481
Router(config)#access-list 1010 permit -1 4 ?
WORD A SAP server name
<cr>
Router(config)#access-list 1010 permit -1 4 Sales
The 1 in the access list is a wildcard that says any node, any network.
After the list is created, apply it to an interface with either of the two
following commands:
RouterA(config-if)#ipx input-sap-filter 1010
or
RouterA(config-if)#ipx output-sap-filter 1010
The input-sap-filter is used to stop SAP entries from being added to
the SAP table on the router, and output-sap-filter is used to stop SAP
entries from being propagated out of the router.
Verifying IPX Access Lists
To verify the IPX access lists and their placement on a router, use the com-
mands show ipx interface and show ipx access-list.
Notice in the output of the show ipx interface command that the
IPX address is shown, the outgoing access list is set with list 810, and the
SAP input filter is 1010.
Router#sh ipx int
Ethernet0 is up, line protocol is up
IPX address is 10.0060.7015.63d6, NOVELL-ETHER [up]
Delay of this IPX network, in ticks is 1 throughput 0
link delay 0
IPXWAN processing not enabled on this interface.
IPX SAP update interval is 1 minute(s)
IPX type 20 propagation packet forwarding is disabled
Incoming access list is not set
Outgoing access list is 810
IPX helper access list is not set
SAP GNS processing enabled, delay 0 ms, output filter
list is not set
SAP Input filter list is 1010
Copyright ©2002 SYBEX, Inc., Alameda, CA
www.sybex.com