Filtering SAPs in NLSP

From: John Neiberger (neiby@xxxxxxxxxx)
Date: Fri Mar 29 2002 - 00:54:11 GMT-3

• Next message: ying chang: "Re: AS-path access-list"
• Previous message: Louis Young: "about SYN attack,how do we avoid this by configuring the router?"
• Next in thread: Ling Ling Liang: "Re: Filtering SAPs in NLSP"
• Maybe reply: Ling Ling Liang: "Re: Filtering SAPs in NLSP"
• Maybe reply: Landon Fitts: "Re: Filtering SAPs in NLSP"
• Maybe reply: John Mistichelli: "RE: Re: Filtering SAPs in NLSP"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
I keep running into this problem and I don't know how to fix
it. When using IPX RIP, I can filter saps using an output-sap-
filter. If you're not using RIP and you're using NLSP you must
use another method.

I tried adding a distribute list to the NLSP process and this
did not work:

access-list 1000 deny FFFFFFFF 7
access-list 1000 permit FFFFFFFF
!
ipx router nlsp
 distribute-sap-list 1000 out Ethernet0
 area-address 0 0
!
ipx sap 4 MyServer 100.0001.0001.0002 451 1
ipx sap 7 MyPrinter 100.0001.0001.0003 451 1
!

That ought to filter my printer sap in updates going out
Ethernet0, but it doesn't. The two NLSP neighbors on that
segment both continue to receive updates with that sap.

Any ideas?

Thanks,
John

• Next message: ying chang: "Re: AS-path access-list"
• Previous message: Louis Young: "about SYN attack,how do we avoid this by configuring the router?"
• Next in thread: Ling Ling Liang: "Re: Filtering SAPs in NLSP"
• Maybe reply: Ling Ling Liang: "Re: Filtering SAPs in NLSP"
• Maybe reply: Landon Fitts: "Re: Filtering SAPs in NLSP"
• Maybe reply: John Mistichelli: "RE: Re: Filtering SAPs in NLSP"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:57:25 GMT-3