From: Atakan San (asan@xxxxxxxxx)
Date: Wed Aug 29 2001 - 10:03:25 GMT-3
   
I am very sorry guys
No more confusion
Yes, Tom is absolutely correct
Thanks for all
Atakan
tom cheung wrote:
> The solution I suggested did work.  Here's test result I got:
>
> >It did work.  Here's my test.   r5-------------r2
> >                                     Ethernet
> >
> >R5's ipx config:
> >interface Ethernet0/0
> >ip address 155.10.25.5 255.255.255.0
> >half-duplex
> >ipx network 205
> >ipx network 2001 encapsulation SNAP secondary
> >ipx network 2010 encapsulation SAP secondary
> >ipx output-network-filter 900
> >
> >access-list 900 deny any 2000.ffff.ffff.ffff FF.ffff.ffff.ffff
> >access-list 900 permit any any all
> >
> >R5's show ipx route:
> >r5#sh ipx rou
> >Codes: C - Connected primary network,    c - Connected secondary network
> >        S - Static, F - Floating static, L - Local (internal), W - IPXWAN
> >        R - RIP, E - EIGRP, N - NLSP, X - External, A - Aggregate
> >        s - seconds, u - uses, U - Per-user static
> >
> >4 Total IPX routes. Up to 1 parallel paths and 16 hops allowed.
> >
> >No default route known.
> >
> >C         50 (UNKNOWN),       Lo0
> >C        205 (NOVELL-ETHER),  Et0/0
> >c       2001 (SNAP),          Et0/0
> >c       2010 (SAP),           Et0/0
> >
> >
> >R2's ipx config:
> >interface Ethernet0
> >ip address 155.10.25.2 255.255.255.0
> >no ip directed-broadcast
> >ipx network 205
> >
> >R2's ipx route table:
> >r2#sh ipx rou
> >Codes: C - Connected primary network,    c - Connected secondary network
> >        S - Static, F - Floating static, L - Local (internal), W - IPXWAN
> >        R - RIP, E - EIGRP, N - NLSP, X - External, A - Aggregate
> >        s - seconds, u - uses, U - Per-user static
> >
> >2 Total IPX routes. Up to 1 parallel paths and 16 hops allowed.
> >
> >No default route known.
> >
> >C        205 (NOVELL-ETHER),  Et0
> >R         50 [02/01] via      205.0000.0000.0050,   58s, Et0
> >r2#
> >
> >
>
> >From: Jason Gardiner <gardiner@sprint.net>
> >To: Atakan San <asan@cisco.com>
> >CC: tom cheung <tkc9789@hotmail.com>, CCIELAB@groupstudy.com
> >Subject: Re: IPX group filtering for 20XX networks...
> >Date: Wed, 29 Aug 2001 08:22:06 -0400
> >
> >How about
> >
> >access-list 1201 deny 00002000 fffff000
> >
> >
> >
> >Atakan San wrote:
> > >
> > > Thanks Tom but did not help  :-(
> > >
> > > tom cheung wrote:
> > >
> > > > How about try:
> > > >
> > > > access-list 900 deny any 2000.0000.0000.0000 FF.ffff.ffff.ffff
> > > > access-list 900 permit any any all
> > > >
> > > > >From: Atakan San <asan@cisco.com>
> > > > >Reply-To: Atakan San <asan@cisco.com>
> > > > >To: CCIELAB@groupstudy.com
> > > > >Subject: IPX group filtering for 20XX networks...
> > > > >Date: Tue, 28 Aug 2001 22:59:18 +0200
> > > > >
> > > > >Hello All,
> > > > >
> > > > >Lets say, I have IPX networks:
> > > > >
> > > > >2000
> > > > >2001
> > > > >2002
> > > > >2003
> > > > >2010
> > > > >2020
> > > > >
> > > > >
> > > > >How can deny 20XX networks with ONLY 1 ipx access-list statement ? .
> > > > >
> > > > >Thanks for commends
> > > > >Atakan
> > > > >**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:59 GMT-3