From: Forsyth (pforsyth@xxxxxxxxx)
Date: Fri May 05 2000 - 21:15:43 GMT-3
1. distribute-list out <interface> is used to filter outgoing EIGRP
updates. IPX output-network-filter will filter RIP routing updates being
advertised on an interface.
2. IPX input-network-filter works to filter incoming EIGRP or RIP updates
on an interface, to keep them from being installed in the routing table.
3. Either filter can use a standard or extended IPX access-list to
identify affected routes.
4. Only the extended IPX access-list allows the mask to be used for the
network portion of the address. So to filter a range of IPX network
numbers, you MUST use the extended IPX access-list.
Colin, your configuration looks correct except that your access-list must
be in the range 900-999.
Pamela
On Fri, 5 May 2000, Dave Gingrich wrote:
>
> If you want to affect routes that are advertised, then you need to use
> distribute lists under ipx router rip or ipx router eigrp (or whatever
> routing protocol you are using).
>
> Access lists on the interfaces affect whether or not defined traffic can
> pass over the interface, but has no effect on propagation of routes.
>
> At 18:09 5/5/00 +0800, zhuhai@cn.ibm.com wrote:
> >
> >R1---R2---R3 , IPX Routing everywhere , R1 generate network " ab01 ,
> >cc00, a501,..." to R2 and R3 , to filter IPX Network and only allow
> >a500-a5ff to be advertised into R2 and R3 , I write bellow : " access 810
> >permit a500.0000.0000.0001 00ff.ffff.ffff.ffff " and apply it to the R2 ' s
> >serial port which is connected to the R1's Serial port , by the command "
> >in s0 , ipx input-network-filter 810 " . But it did not work .
> >
> >I think the writing format of the access-list must be wrong , but what is
> >the correct one ?
> >
> >Thank you !
> >
> >Regards ,
> >Colin Zhu
>
> =========================
> David C. Gingrich, K9DC
> Indianapolis, Indiana
> Dave@dcg.org
> =========================
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:27 GMT-3