DDR config with watchdog and spx spoofing

From: Johnny Dedon (johnny.dedon@xxxxxxxxxx)
Date: Mon Feb 26 2001 - 19:25:06 GMT-3


   
Guys,
I need some help.
I have two routers that have primary connection over serial with ISDN as
restoral. I have watchdog spoofing and spx spoofing enabled. I block all
rip, sap and serialization on the dialer. I have ipx floating statics on
each pointing to the others bri.

I do an ipx ping from one to the other and I am getting encaps failed on the
echo reply. I see that the reply shows as interesting traffic. I have a
dialer map ipx statement on each router with a dial string only on one.
below are the relevent configs, any ideas?
R5
interface BRI0/0
no ip directed-broadcast
 encapsulation ppp
 dialer map ipx 168A65A1.0004.0004.0004 name r4 broadcast
 dialer-group 1
 ipx network 168A65A1
 isdn switch-type basic-ni
 isdn spid1 0835866201 8358662
 isdn spid2 0835866401 8358664

access-list 900 deny any any all any rip
access-list 900 deny any any all any sap
access-list 900 deny any any all any 457
access-list 900 permit any any all any all

dialer-list 1 protocol ipx list 900

ipx route default 168A65A1.0004.0004.0004 floating-static

R4
interface BRI0
 no ip directed-broadcast
 encapsulation ppp
 dialer map ipx 168A65A1.0005.0005.0005 broadcast 8358662
 dialer load-threshold 128 outbound
 dialer-group 1
 ipx network 168A65A1
 no ipx route-cache
 ipx watchdog-spoof
 ipx spx-spoof
 isdn switch-type basic-ni
 isdn spid1 0835866101 8358661
 isdn spid2 0835866301 8358663

access-list 900 deny any any all any rip
access-list 900 deny any any all any sap
access-list 900 deny any any all any 457
access-list 900 permit any any all any all

dialer-list 1 protocol ipx list 900

ipx route default 168A65A1.0005.0005.0005 floating-static

Johnny Dedon
Senior Staff Consultant
Exodus Professional Services
johnny.dedon@exodus.net
www.exodus.net



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:29:04 GMT-3