IPX access-list to block rip and sap

From: Bob Chahal (bob.chahal@xxxxxxxxxxxx)
Date: Tue Aug 21 2001 - 19:33:36 GMT-3

• Next message: Erick B.: "Re: VLSM - FLSM procedure - One last time"
• Previous message: Jeff Kesemeyer: "RE: Output Queue"
• Next in thread: Devender Singh: "RE: IPX access-list to block rip and sap"
• Maybe reply: Devender Singh: "RE: IPX access-list to block rip and sap"
• Maybe reply: Bob Chahal: "Re: IPX access-list to block rip and sap"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
When creating an access-list that blocks all ipx rip,sap and serialisation
packets but allow ipx pings and all other traffic I do

access-list 900 permit rip any cping any cping
access-list 900 deny rip any rip any all
access-list 900 deny sap any sap any all
access-list 900 deny any any 457
access-list 900 permit any

In a bootcamp lab (5) their answer is

access-list 901 deny any any all any rip
access-list 901 deny any any all any sap
access-list 901 deny any any all any 457
access-list 901 permit any any all any all

I know my list blocks rip and sap but as I have very little real life ipx
experience so can anyone explain the difference or which more correct?

Thanks

Bob
**Please read:http://www.groupstudy.com/list/posting.html

• Next message: Erick B.: "Re: VLSM - FLSM procedure - One last time"
• Previous message: Jeff Kesemeyer: "RE: Output Queue"
• Next in thread: Devender Singh: "RE: IPX access-list to block rip and sap"
• Maybe reply: Devender Singh: "RE: IPX access-list to block rip and sap"
• Maybe reply: Bob Chahal: "Re: IPX access-list to block rip and sap"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:57 GMT-3