From: Derek Fage (DerekF@xxxxxxxxxxx)
Date: Thu Jun 17 1999 - 11:07:26 GMT-3
Thanks Joe,
I guess a tunnel's what I'm looking for.
Cheers,
Derek...
> -----Original Message-----
> From: Joe Soricelli [SMTP:jsoricelli@ccci.com]
> Sent: 17 June 1999 14:46
> To: ccielab@groupstudy.com
> Subject: Re: IPX SAP filtering query
>
> If you truly want to keep R2 from seeing the SAP and not just clients on
> the
> IPX/RIP segment, I believe that your only option is to "bypass" R2 with a
> tunnel between R1 and R5. Remember though, that if you do this, you must
> also place a SAP filter on the interface leading to R1 to keep the SAP
> from
> entering R2 from that direction.
>
> OTOH, if you only want clients on the IPX/RIP segment to not see the SAP,
> place an outbound GNS filter on R2 and R5..
>
> -joe
> ------------------------------------------------------------------
> Joseph M. Soricelli, CCIE #4803, CCNP
> EMAIL: jsoricelli@ccci.com
>
> Chesapeake Computer Consultants, Inc.
> 8110 Gatehouse Road, Suite 101E Phone: (703) 207-0757
> Falls Church, VA 22042 Fax: (703) 207-0441
>
> FYI - About Chesapeake: We are a Cisco Certified Training and
> professional services partner. We offer most of the Cisco
> training courses as well as training for Fore, NetScout, and
> CheckPoint-1 Firewalls. We provide network consulting services,
> including design, network health, management, firewall,
> and problem solving. We now have 20 CCIEs on our staff
> of instructor/consultants.
> -------------------------------------------------------------------
>
> -----Original Message-----
> From: Derek Fage <DerekF@itexjsy.com>
> To: ccielab@groupstudy.com <ccielab@groupstudy.com>
> Date: Thursday, June 17, 1999 7:11 AM
> Subject: IPX SAP filtering query
>
>
> >Hi there,
> >
> >I'm doing some IPX work in the lab, and have an query about filtering SAP
> >advertisements.
> >
> >R1 --- EIGRP --- R2 --- RIP --- R5
> >
> >R5 has a static SAP entry, and I can see this using SHOW IPX SERVICES on
> all
> >three routers. I now want to stop R2 from seeing the service, but R1 must
> >still see it.
> >
> >If I use an sap input filter on the R2 RIP interface with a SAP access
> list,
> >this also stops the SAP from getting to R1.
> >
> >If I try to use an extended IPX access list, it seems that I can only
> block
> >all saps from the remote network to this network, but cannot specify the
> >service name.
> >
> >
> >Any ideas ?
> >
> >Derek...
> >
> >
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:21:39 GMT-3