【導讀】AccessLists:. servicesonthework.Canbepermit/deny. Standard. Extended. HowAccessListsWork?Packetfiltering:. Compare,Categorize,Takeaction. Router(config)#. access-listaccess-list-number{permit|deny}. Router(config-if)#. {protocol}access-groupaccess-list-number. Showipxaccess-

　　

【正文】 annot get to Network 40 5. Network 30 cannot get to Network 40 6. Network 30 can get to Network 10, and vice versa 7. Network 20 can get to all devices in the interwork Configurations: 1. Router(config) accesslist 810 permit 20 40 2. Router(config) int e2 3. Router(configif) ipx accessgroup 810 out 來自 中國最大的資料庫下載 Extended IPX Access Lists Configuration ? Extended IPX access lists can filter based on any of the following: ? Source work / node ? Destination work / node ? IPX protocol (SAP, SPX, etc.) ? IPX socket ? Router(config) ? accesslist accesslistnumber {deny | permit} protocol sourcework socket destinationwork socket ? Sets parameters for this list entry ? Router(configif) ? ipx accessgroup accesslistnumber ? Activates the IPX standard access list on an interface 來自 中國最大的資料庫下載 IPX SAP Filters ? Novell files server acts as IPX router, Cisco router acts as SAP server ? Router does not forward SAP broadcasts ? File servers and routers listen SAP message and build a SAP table. All devices that build SAP tables and advertise this information every 60 seconds ? IPX SAP Filters are to stop unwanted SAP traffic from crossing a work because it will only be discarded. 來自 中國最大的資料庫下載 How to Use SAP Filters ? Plan for SAP filters and enter global mand ? Note: Must set up SAP filters on all routers ? Place SAP filters close to the source ? Apply the access list to the interface as an input or output SAP filter ? Input SAP filter ? This is used to stop certain SAP entries from entering a router and updating the SAP table ? Output SAP filter ? This stops certain SAP updates from being sent in the regular 60second SAP updates 來自 中國最大的資料庫下載 SAP Filters Configuration ? Router(config) ? accesslist accesslistnumber {deny | permit} work [.node] [workmask nodemask] [servicetype [servername]] ? Creates an entry in a SAP filter list ? Router(configif) ? ipx {input/output}sapfilter accesslistnumber ? Activates the input/output SAP filter on the interface ? SAP table content can be filtered on input by using the ipx routersapfilter mand, which identifies from which router SAP advertisements can be received 來自 中國最大的資料庫下載 IPX SAP Filters Example Router(config) accesslist 1010 permit ? 1 Any IPX 0FFFFFFFF Source Source address Router(config) accesslist 1010 permit 1 ? 0FFFF Service typecode (0 matches all services) Source mask cr Router(config) accesslist 1010 permit 1 4 ? WORD A SAP server name cr Router(config) accesslist 1010 permit 1 4 Sales Note: The –1 in the access list is a wildcard that says any node, any work.