From: tom cheung (tkc9789@xxxxxxxxxxx)
Date: Wed Aug 29 2001 - 09:40:44 GMT-3
The solution I suggested did work. Here's test result I got:
>It did work. Here's my test. r5-------------r2
> Ethernet
>
>R5's ipx config:
>interface Ethernet0/0
>ip address 155.10.25.5 255.255.255.0
>half-duplex
>ipx network 205
>ipx network 2001 encapsulation SNAP secondary
>ipx network 2010 encapsulation SAP secondary
>ipx output-network-filter 900
>
>access-list 900 deny any 2000.ffff.ffff.ffff FF.ffff.ffff.ffff
>access-list 900 permit any any all
>
>R5's show ipx route:
>r5#sh ipx rou
>Codes: C - Connected primary network, c - Connected secondary network
> S - Static, F - Floating static, L - Local (internal), W - IPXWAN
> R - RIP, E - EIGRP, N - NLSP, X - External, A - Aggregate
> s - seconds, u - uses, U - Per-user static
>
>4 Total IPX routes. Up to 1 parallel paths and 16 hops allowed.
>
>No default route known.
>
>C 50 (UNKNOWN), Lo0
>C 205 (NOVELL-ETHER), Et0/0
>c 2001 (SNAP), Et0/0
>c 2010 (SAP), Et0/0
>
>
>R2's ipx config:
>interface Ethernet0
>ip address 155.10.25.2 255.255.255.0
>no ip directed-broadcast
>ipx network 205
>
>R2's ipx route table:
>r2#sh ipx rou
>Codes: C - Connected primary network, c - Connected secondary network
> S - Static, F - Floating static, L - Local (internal), W - IPXWAN
> R - RIP, E - EIGRP, N - NLSP, X - External, A - Aggregate
> s - seconds, u - uses, U - Per-user static
>
>2 Total IPX routes. Up to 1 parallel paths and 16 hops allowed.
>
>No default route known.
>
>C 205 (NOVELL-ETHER), Et0
>R 50 [02/01] via 205.0000.0000.0050, 58s, Et0
>r2#
>
>
>From: Jason Gardiner <gardiner@sprint.net>
>To: Atakan San <asan@cisco.com>
>CC: tom cheung <tkc9789@hotmail.com>, CCIELAB@groupstudy.com
>Subject: Re: IPX group filtering for 20XX networks...
>Date: Wed, 29 Aug 2001 08:22:06 -0400
>
>How about
>
>access-list 1201 deny 00002000 fffff000
>
>
>
>Atakan San wrote:
> >
> > Thanks Tom but did not help :-(
> >
> > tom cheung wrote:
> >
> > > How about try:
> > >
> > > access-list 900 deny any 2000.0000.0000.0000 FF.ffff.ffff.ffff
> > > access-list 900 permit any any all
> > >
> > > >From: Atakan San <asan@cisco.com>
> > > >Reply-To: Atakan San <asan@cisco.com>
> > > >To: CCIELAB@groupstudy.com
> > > >Subject: IPX group filtering for 20XX networks...
> > > >Date: Tue, 28 Aug 2001 22:59:18 +0200
> > > >
> > > >Hello All,
> > > >
> > > >Lets say, I have IPX networks:
> > > >
> > > >2000
> > > >2001
> > > >2002
> > > >2003
> > > >2010
> > > >2020
> > > >
> > > >
> > > >How can deny 20XX networks with ONLY 1 ipx access-list statement ? .
> > > >
> > > >Thanks for commends
> > > >Atakan
> > > >**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:59 GMT-3