From: Justin Menga (Justin.Menga@xxxxxxxxxxxxxxxxxx)
Date: Tue Nov 14 2000 - 20:01:51 GMT-3
Hi,
You only need the GNS filter on R2 and R3. Client PCs do not listen
to SAP broadcasts and in this way R3 will learn the SAP via the SAP
broadcasts from R2. As Cisco routers act as SAP "servers", they will
respond to client GNS requests, so filtering the GNS response will
stop the client from seeing the SAP.
If you put an output-sap-filter you would stop the router to router
(server to server) SAP exchanges as well.
Regards,
Justin Menga MCSE+I CCNP CCSE ASE
WAN Specialist
Computerland New Zealand
PO Box 3631, Auckland
DDI: (+64) 9 360 4864 Mobile: (+64) 25 349 599
mailto: justin.menga@computerland.co.nz
-----Original Message-----
From: Sam Munzani [mailto:sam@munzani.com]
Sent: Wednesday, 15 November 2000 11:08 a.m.
To: ccielab@groupstudy.com
Subject: IPX Sap-filters
Hi Group,
How does sap filters work.
1. Is ipx input-sap-filter or output-sap-filter understood by ipx
client stations? or they understand only gns-filters.
In following scenario
R1 has static SAPs configured: type 47, name Printer
R1 ----- R2 ---------- R3
|
PC
A PC is connected between R2 & R3. The goal here is not let PC know
about SAP type 47 comming from R1. However R3 has to know about it.
This is my understanding:
access-list 1001 deny -1 47 Printer
access-list 1001 permit -1 0
Apply this access-list as GNS filter on R2 & R3.
int e0
ipx output-gns-filter 1001.
IF this good enough? or do we have to do output-sap-filer on e0 of R2
& R3 also?
Sam
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:45 GMT-3