From: George Spahl (g.spahl@xxxxxxxxxxxxx)
Date: Thu Apr 25 2002 - 22:24:30 GMT-3
Guy,
I agree with what you're saying. In other words since your static SAPs
have been created on R3, if you put a "distribute-sap-list 1000 in" (no
interface argument added) under the NLSP section on R3 the SAPs are
filtered out for all neighbors per access-list 1000 as they leave R3. I
haven't yet tried to filter out SAPs to one neighbor while sending them
on to other neighbors, but I'll try that tomorrow.
George
-----Original Message-----
From: Lupi, Guy [mailto:Guy.Lupi@eurekaggn.com]
Sent: Thursday, April 25, 2002 8:36 PM
To: 'George Spahl'; 'MOLINA, MARTIN J *Internet* (PBI)'; 'Ahmed Mamoor
Amimi'; neiby@ureach.com; ccielab@groupstudy.com
Subject: RE: IPX SAP filtering between NLSP routers
I am running NLSP on 4 different routers, all in the same area. The
only
way that I can filter the saps between neighbors is by using the
"distribute-sap-list # in" command on the router originating the sap.
That
prevents this router from advertising the sap at all. I have tried the
distribute-sap-list in on other routers, I have also tried input and
output
sap filters on the router interfaces to try and filter it out. Are you
saying that you are able to filter the sap from being seen on an nlsp
neighbor, not the router that originates the sap? My configs are below,
r3
is the originator of the saps, if I use the distribute-sap-list in on r3
I
can filter the static sap from being announced, otherwise no go.
r3----0----r4
R4
interface TokenRing0
ip address 4.3.4.4 255.255.255.0
no ip directed-broadcast
ipx input-sap-filter 1000
ipx network 43
ipx nlsp enable
ring-speed 16
!
access-list 1000 deny FFFFFFFF 4 servout
access-list 1000 permit FFFFFFFF 0 *
!
ipx router nlsp
distribute-sap-list 1000 in TokenRing0
area-address 0 0
r4#sh ipx server
Codes: S - Static, P - Periodic, E - EIGRP, N - NLSP, H - Holddown, + =
detail
U - Per-user static
2 Total IPX Servers
Table ordering is based on routing and server info
Type Name Net Address Port Route
Hops
Itf
N 4 servout 43.0001.0001.0001:0151 1/00 2
To0
N 7 servin 43.0002.0002.0002:0151 1/00 2
To0
r4#
R3
interface TokenRing0
ip address 4.3.4.3 255.255.255.0
ipx network 43
ipx output-sap-filter 1000
ipx nlsp enable
ipx nlsp rip off
ring-speed 16
!
access-list 1000 deny FFFFFFFF 4 servout
access-list 1000 permit FFFFFFFF 0 *
!
ipx router nlsp
area-address 0 0
!
ipx sap 4 servout 43.0001.0001.0001 151 1
ipx sap 7 servin 43.0002.0002.0002 151 1
~-----Original Message-----
~From: George Spahl [mailto:g.spahl@insightbb.com]
~Sent: Thursday, April 25, 2002 8:12 PM
~To: 'MOLINA, MARTIN J *Internet* (PBI)'; 'Ahmed Mamoor Amimi';
~neiby@ureach.com; ccielab@groupstudy.com
~Subject: RE: IPX SAP filtering between NLSP routers
~
~
~Hopefully, someone will confirm my results, but after a little
~testing I
~agree with Mamoor. Oddly enough, and in apparent contradiction to the
~documentation, it seems you can indeed filter IPX SAPs between NLSP
~routers. In my testing, the NLSP routers were all in the same
~area. As
~Mamoor said you have to use the "distribute-sap-list 10xx in" to
~accomplish it. It takes about 3 minutes to age out the existing
~entries.
~Equally odd, it seems that you can filter routes between NLSP
~routers by
~using the "distribute-list 8xx in" command. I think John Neiberger or
~Bob Sinclair may have mentioned a while back that the syntax was
~backwards. Let me know if you get different results; I'm
~using 12.1(9).
~George
~
~-----Original Message-----
~From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
~MOLINA, MARTIN J *Internet* (PBI)
~Sent: Tuesday, April 16, 2002 4:33 PM
~To: 'Ahmed Mamoor Amimi'; neiby@ureach.com; ccielab@groupstudy.com
~Subject: RE: IPX SAP filtering between NLSP routers
~
~Tried it. No workee.
~
~-----Original Message-----
~From: Ahmed Mamoor Amimi [mailto:mamoor@ieee.org]
~Sent: Tuesday, April 16, 2002 1:10 PM
~To: MOLINA, MARTIN J *Internet* (PBI); neiby@ureach.com;
~ccielab@groupstudy.com
~Subject: Re: IPX SAP filtering between NLSP routers
~
~
~I have done this before between 2 nlsp sap filtering.
~try using the "distribution-list in" not "distribution-list out" at the
~router where after u want the filters.
~
~-Mamoor
~
~
~
~----- Original Message -----
~From: MOLINA, MARTIN J *Internet* (PBI) <mm1343@pbi.net>
~To: <neiby@ureach.com>; <ccielab@groupstudy.com>
~Sent: Monday, April 15, 2002 11:56 PM
~Subject: RE: IPX SAP filtering between NLSP routers
~
~
~> That explains it. Thank you.
~>
~> -----Original Message-----
~> From: John Neiberger [mailto:neiby@ureach.com]
~> Sent: Monday, April 15, 2002 11:56 AM
~> To: MOLINA, MARTIN J *Internet* (PBI); 'ccielab@groupstudy.com'
~> Subject: Re: IPX SAP filtering between NLSP routers
~>
~>
~> There is no solution that works 'between NLSP routers'. Since
~> NLSP is link-state, all NLSP routers must have the same link
~> state database.
~>
~> However, you can use a filter on the router that is
~> redistributing from RIP or EIGRP into NLSP.
~>
~> HTH,
~> John
~>
~>
~>
~> ---- On Mon, 15 Apr 2002, MOLINA, MARTIN J *Internet*
~> (mm1343@pbi.net) wrote:
~>
~> > Group,
~> > I found this issue in the archives with no solution. I am
~> trying to filter
~> > SAPS between 2 NLSP routers. I have tried distribute-sap-list
~> and ipx
~> > input-sap-filter with no success. Is anyone aware of a
~> solution that works?
~> > Thanks in advance.
~> >
~> > Martin Molina
~> > Senior Network Engineer
~> > Pacific Bell Internet Services
~> > CCNP CCDP
~> > desk: 925 973-7774
~> >
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:19 GMT-3