CCNA第十一章配置Novell IPXCICND10S11A.ppt

1、第十一章配置Novell IPX,通過本章的學(xué)習(xí)，您應(yīng)該掌握以下內(nèi)容： 描述IPX 協(xié)議的基本作用 確定IPX 網(wǎng)絡(luò)的網(wǎng)絡(luò)號和端口的封裝類型 啟用Novell IPX 協(xié)議 查看IPX 協(xié)議的連接狀態(tài) 配置IPX 訪問列表和 SAP 數(shù)據(jù)過濾,本章目標(biāo),NetWare File Server,NetWare File Server,NetWare 網(wǎng)絡(luò)中的 Cisco 路由器,Novell NetWare 協(xié)議族,1,2,3,4,5,6,7,Media Access Protocols (Ethernet, Token Ring, WAN, others),Physical,Data Link

2、,Network,Session,Transport,Presentation,Application,Novell NetWare 協(xié)議,OSI 參考模型,IPX (Internetwork Packet Exchange),SPX,SAP,RIP NLSP,NETBIOS,APPLICATIONS,NCP,80位的地址 (網(wǎng)絡(luò).主機(jī)) 端口的 MAC 地址是其邏輯地址的一部分 每個(gè)端口可以有多個(gè)局域網(wǎng)封裝類型 缺生路由協(xié)議是 IPX RIP 用 SAP 宣告Novell 服務(wù) NetWare 客戶端使用GNS 數(shù)據(jù)包查找服務(wù),Novell NetWare 主要特性,0000.0c56.de

3、33,Novell IPX 地址,E0,E1,S0,Node,0000.0c56.de34,0000.0c56.de33,Novell IPX 地址,4a1d.0c56.de33,E0,E1,S0,48 bits (from MAC),Network.Node,3f.0c56.de34,2c.0c56.de33,Network 4a1d,Network 3f,Network 2c,Up to 32 bits,NetWare 基本作用,NW File Server,NetWare 基本作用,NW File Server,0080.C712.3456-Layer2 Mac,NIC,NetWare

4、基本作用,NW File Server,1a.0080.C712.3456-Layer3 Net,NIC,NW File Server,NetWare 基本作用,1a.0080.C712.3456-Layer3 Net,NetWare Services,2b.0000.0000.0001-Internal Net,NIC,- NW Software Router,NetWare 基本作用,1a.0080.C712.3456,NetWare Services,2b.0000.0000.0001,NIC,NetWare 基本作用,1a.0080.C712.3456,NetWare Services

5、,2b.0000.0000.0001,2b 1a . .,NIC,Routing Table,NetWare 基本作用,File Server - 4,Print Server - 47,1a.0080.C712.3456,NetWare Services,2b.0000.0000.0001,2b 1a . .,Services Table,4 47 .,NIC,Routing Table,NetWare 基本作用,File Server - 4,Print Server - 47,1a.0080.C712.3456,NetWare Services,2b.0000.0000.0001,2b

6、1a . .,Services Table,4 47 .,Periodic Broadcasts on 1a.FFFF.FFFF.FFFF,NIC,Routing Table,1a.0080.C712.3456,NetWare Services,2b 1a . .,Services Table,4 47 .,Periodic Broadcasts on 1a.FFFF.FFFF.FFFF,0000.0C12.3456-Layer2 Mac,e0,NIC,Routing Table,2b.0000.0000.0001,NetWare 基本作用,Network andEncapsulation m

7、ust match,1a.0080.C712.3456,NetWare Services,2b 1a . .,Services Table,4 47 .,Periodic Broadcasts on 1a.FFFF.FFFF.FFFF,1a.0000.0C12.3456-Layer3 Net,e0,s0,NIC,Routing Table,2b.0000.0000.0001,NetWare 基本作用,Network andEncapsulation must match,1a.0080.C712.3456,NetWare Services,2b 1a . .,Services Table,4

8、47 .,Periodic Broadcasts on 1a.FFFF.FFFF.FFFF,1a.0000.0C12.3456-Layer3 Net,e0,s0,1b.0000.0C12.3456,Routing Table,1a 1b 2b .,NIC,Routing Table,2b.0000.0000.0001,NetWare 基本作用,1a.0080.C712.3456,NetWare Services,2b 1a 1b .,Services Table,4 47 .,Periodic Broadcasts on 1a.FFFF.FFFF.FFFF,1a.0000.0C12.3456,

9、e0,s0,1b.0000.0C12.3456,Routing Table,1a 1b 2b .,NIC,Routing Table,2b.0000.0000.0001,NetWare 基本作用,1a.0080.C712.3456,NetWare Services,2b 1a 1b .,Services Table,4 47 .,Periodic Broadcasts on 1a.FFFF.FFFF.FFFF,e0,s0,Routing Table,1a 1b 2b .,4 47 .,Services Table,NIC,Routing Table,1a.,1b.,2b.0000.0000.0

10、001,NetWare 基本作用,1a.0080.C712.3456,NetWare Services,2b.0000.0000.0001,2b 1a 1b .,Services Table,4 47 .,Periodic Broadcasts on 1a.FFFF.FFFF.FFFF,e0,s0,Routing Table,1a 1b 2b .,4 47 .,Services Table,NW Client,NIC,NIC,1a.0010.5A12.3456,GNS,Routing Table,1a.,1b.,NetWare 基本作用,Routing Table,1a.0080.C712.3

11、456,NetWare Services,2b.0000.0000.0001 (IPX Internal Network),2b 1a 1b .,Services Table,4 47 .,Periodic Broadcasts on 1a.FFFF.FFFF.FFFF,e0,s0,Routing Table,1a 1b 2b .,4 47 .,Services Table,NW Client,NIC,NIC,1a.0010.5A12.3456,GNS,GNS Resp,1a.,1b.,NetWare 基本作用,IPX Network 網(wǎng)絡(luò)號,詢問管理員,IPX Network 網(wǎng)絡(luò)號,cdp

12、,詢問管理員 通過命令查看網(wǎng)絡(luò)號,IPX Network 網(wǎng)絡(luò)號,詢問管理員 通過命令查看網(wǎng)絡(luò)號 使用 NetWare 命令查看網(wǎng)絡(luò)號,NetWare config,cdp,Ethernet_802.3 (default for NetWare 3.11 or earlier),802.3,IPX,Novell 多種封裝類型,以太網(wǎng)四種幀類型,Novell Name,Framing Structure,Ethernet_802.2 (default for NetWare 3.12 and later),802.3,802.2 LLC,IPX,Ethernet_802.3 (default f

13、or NetWare 3.11 and earlier),802.3,IPX,Novell 多種封裝類型,以太網(wǎng)四種幀類型,Novell Name,Framing Structure,Ethernet_802.2 (default for NetWare 3.12 and later),802.3,802.2 LLC,IPX,Ethernet_802.3 (default for NetWare 3.11 and earlier),802.3,IPX,Novell 多種封裝類型,以太網(wǎng)四種幀類型,Ethernet_II,Ethernet,IPX,Novell Name,Framing Stru

14、cture,Ethernet_802.2 (default for NetWare 3.12 and later versions),802.3,802.2 LLC,IPX,Ethernet_SNAP,802.3,802.2 LLC,SNAP,IPX,Ethernet_802.3 (default for NetWare 3.11 and earlier versions),802.3,IPX,Novell 多種封裝類型,Ethernet_II,Ethernet,IPX,Novell Name,Framing Structure,以太網(wǎng)四種幀類型,Cisco 封裝類型,Novell IPX 名

15、稱,Cisco IOS 名稱,Ethernet,Token Ring,FDDI,FDDI_SNAP FDDI_802.2 FDDI_Raw,Ethernet_802.3 Ethernet_802.2 Ethernet_II Ethernet_SNAP,Token-Ring Token-Ring_SNAP,Novell IPX名稱,Cisco IOS名稱,Token-Ring Token-Ring_SNAP,Ethernet,Token Ring,FDDI,FDDI_SNAP FDDI_802.2 FDDI_Raw,Ethernet_802.3 Ethernet_802.2 Ethernet_I

16、I Ethernet_SNAP,Cisco 封裝類型,當(dāng)配置 IPX 網(wǎng)絡(luò)時(shí)要指明端口封裝類型,novell-ether sap arpa snap,sap snap,snap sap novell-fddi,練 習(xí)： IPX 參數(shù)設(shè)置,Encapsulation,Network Address,R3 Interface Name,S0,S1,E1,寫出路由器 3 的端口封裝類型,S0 hdlc,Network b001,E0 SAP,E1,S1,S1 hdlc,S0,Network c0b0,Network d100,Network b1b0,E0 novell-ether,R3,R4,E1

17、,R2,R1,練 習(xí)： IPX 參數(shù)設(shè)置,Encapsulation,Network Address,R3 Interface Name,S0,S1,E1,d100,寫出路由器 3 的端口封裝類型,S0 hdlc,Network b001,E0 SAP,E1,S1,S1 hdlc,S0,Network c0b0,Network d100,Network b1b0,E0 novell-ether,R3,R4,E1,R2,R1,練 習(xí)： IPX 參數(shù)設(shè)置,Encapsulation,Network Address,R3 Interface Name,S0,hdlc,S1,E1,d100,寫出路由器

18、 3 的端口封裝類型,S0 hdlc,Network b001,E0 SAP,E1,S1,S1 hdlc,S0,Network c0b0,Network d100,Network b1b0,E0 novell-ether,R3,R4,E1,R2,R1,練 習(xí)： IPX 參數(shù)設(shè)置,Encapsulation,Network Address,R3 Interface Name,S0,hdlc,S1,E1,c0b0,d100,寫出路由器 3 的端口封裝類型,S0 hdlc,Network b001,E0 SAP,E1,S1,S1 hdlc,S0,Network c0b0,Network d100,N

19、etwork b1b0,E0 novell-ether,R3,R4,E1,R2,R1,練 習(xí)： IPX 參數(shù)設(shè)置,Encapsulation,Network Address,R3 Interface Name,S0,hdlc,S1,hdlc,E1,c0b0,d100,寫出路由器 3 的端口封裝類型,S0 hdlc,Network b001,E0 SAP,E1,S1,S1 hdlc,S0,Network c0b0,Network d100,Network b1b0,E0 novell-ether,R3,R4,E1,R2,R1,練 習(xí)： IPX 參數(shù)設(shè)置,Encapsulation,Network

20、 Address,R3 Interface Name,S0,hdlc,S1,hdlc,E1,b1b0,c0b0,d100,寫出路由器 3 的端口封裝類型,S0 hdlc,Network b001,E0 SAP,E1,S1,S1 hdlc,S0,Network c0b0,Network d100,Network b1b0,E0 novell-ether,R3,R4,E1,R2,R1,寫出路由器 3 的端口封裝類型,Encapsulation,Network Address,R3 Interface Name,S0,hdlc,S1,hdlc,E1,novell-ether,練 習(xí)： IPX 參數(shù)設(shè)

21、置,S0 hdlc,Network b001,E0 SAP,E1,S1,S1 hdlc,S0,Network c0b0,Network d100,Network b1b0,E0 novell-ether,R3,R4,E1,b1b0,c0b0,d100,R2,R1,Novell 的 IPX RIP 路由協(xié)議,使用 ticks (1/18 sec.) 和跳數(shù) (最大值15跳) 缺省情況下，RIP 每隔60秒向相鄰的路由器廣播路由信息 缺省情況下，SAP 每隔60秒向相鄰的路由器廣播NetWare服務(wù)信息,RIP SAP Tables,RIP SAP Tables,RIP SAP Tables,RI

22、P SAP Tables,D,C,B,A,Server advertises file service,SAP 數(shù)據(jù)包在 NetWare 網(wǎng)絡(luò)中宣告服務(wù),服務(wù)宣告協(xié)議 (service advertising protocol),Server advertises print service,Server advertises file service,Client,A,SAP,SAP 數(shù)據(jù)包在 NetWare 網(wǎng)絡(luò)中宣告服務(wù) 在網(wǎng)絡(luò)中增加了額外的流量,Server advertises print service,Server advertises file service,Router A

23、 listens to SAPs,SAP,Client,A,服務(wù)宣告協(xié)議 (SAP),得到最近服務(wù)協(xié)議 (get nearest server),File Server,NetWareClient,得到最近服務(wù)協(xié)議 (GNS),File Server,NetWareClient,GNS request,GNS 是客戶端向服務(wù)器發(fā)出的廣播幀,得到最近服務(wù)協(xié)議 (GNS),File Server,NetWareClient,GNS request,GNS 是客戶端向服務(wù)器發(fā)出的廣播幀 NetWare 服務(wù)器和 Cisco 路由其可以得到 SAP 數(shù)據(jù)包,得到最近服務(wù)協(xié)議 (GNS),GNS 是客戶

24、端向服務(wù)器發(fā)出的廣播幀 NetWare 服務(wù)器和 Cisco 路由其可以得到 SAP 數(shù)據(jù)包 NetWare 服務(wù)器提供 GNS 響應(yīng),File Server,NetWareClient,GNS request,GNS reply,配置 Novell IPX,全局配置 IPX 路由,RIP,RIP,IPX,配置 Novell IPX,全局配置 IPX 路由 負(fù)載共享,RIP,RIP,IPX,RIP,RIP,Network 9e encap arpa,Network 4a encap snap,IPX,配置 Novell IPX,全局配置 IPX 路由 負(fù)載共享 端口配置 網(wǎng)絡(luò)號 封裝類型,No

25、vell IPX 的全局配置,ipx routing node ,Router(config)#,啟用 Novell IPX 路由,Router(config)# ipx maximum-paths paths,Novell IPX 的全局配置,配置負(fù)載共享 缺省 = 1,Router(config)# ipx routing node ,啟用 Novell IPX 路由,Novell IPX 的端口配置,在端口上啟用 IPX 路由 分配 IPX 網(wǎng)絡(luò)號 指明端口的封裝類型,FS1 NW 3.11,FS2 NW 4.11,e0.1,NIC,NIC,1a.0080.C712.3456,1b.00

26、80.C712.3457,Ethernet_802.3,Ethernet_802.2,1a - novell-ether,1b - sap,e0.2,NetWare 子端口,Novell IPX 端口配置,Router(config-if)# ipx network network encapsulation encapsulation-type secondary ,分配主要和次要的網(wǎng)絡(luò)號和各自的封裝類型,Router(config)# interface type number.subinterface-number,建立子端口, 啟用 IPX 路由，指明端口的封裝類型或者,Router(

27、config-subif)# ipx network network encapsulation encapsulation type ,Novell IPX 配置舉例,A,Network 9e,Network 1,E0,E1,S0,S0,Network 4a,Network 6c,S1,S1,9e.0800.4313.df56 Encapsulation = novell-ether,4a.1234.0000.abcd Encapsulation = sap,6c.0800.1213.13de Encapsulation = sap,Network 3,B,C,ipx routing ipx

28、 maximum-paths 2 interface ethernet 0.1 ipx network 9e encapsulation novell-ether interface ethernet 0.2 ipx network 6c encapsulation sap interface ethernet 1 ipx network 4a encapsulation sap interface serial 0 ipx network 1 Interface serial 1 ipx network 3,Novell IPX 配置舉例,A,Network 9e,Network 1,E0,

29、E1,S0,S0,Network 4a,Network 6c,S1,S1,9e.0800.4313.df56 Encapsulation = novell-ether,4a.1234.0000.abcd Encapsulation = sap,6c.0800.1213.13de Encapsulation = sap,Network 3,B,C,查 看 IPX,show ipx interface show ipx route show ipx servers show ipx traffic,Monitoring Commands,查 看 IPX,查 看 IPX 端口狀態(tài),wg_ro_a#s

30、how ipx interface e0 Ethernet0 is up, line protocol is up IPX address is ABC.00e0.1e5d.ae2f, NOVELL-ETHER up Delay of this IPX network, in ticks is 1 throughput 0 link delay 0 IPXWAN processing not enabled on this interface. IPX SAP update interval is 60 seconds IPX type 20 propagation packet forwar

31、ding is disabled Incoming access list is not set Outgoing access list is not set IPX helper access list is not set SAP GNS processing enabled, delay 0 ms, output filter list is not set SAP Input filter list is not set SAP Output filter list is not set SAP Router filter list is not set Input filter l

32、ist is not set Output filter list is not set Router filter list is not set Netbios Input host access list is not set Netbios Input bytes access list is not set Netbios Output host access list is not set Netbios Output bytes access list is not set Updates each 60 seconds aging multiples RIP: 3 SAP: 3

33、 SAP interpacket delay is 55 ms, maximum size is 480 bytes ,查看 IPX 路由表,wg_ro_a#show ipx route Codes: C - Connected primary network, c - Connected secondary network S - Static, F - Floating static, L - Local (internal), W - IPXWAN R - RIP, E - EIGRP, N - NLSP, X - External, A - Aggregate s - seconds,

34、 u - uses, U - Per-user static 2 Total IPX routes. Up to 1 parallel paths and 16 hops allowed. No default route known. C ABC (NOVELL-ETHER), Et0 R DEF 02/01 via ABC.00e0.1e5d.c860, 40s, Et0,查看 IPX 服務(wù)器,wg_ro_a#show ipx server Codes: S - Static, P - Periodic, E - EIGRP, N - NLSP, H - Holddown, + = det

35、ail U - Per-user static 2 Total IPX Servers Table ordering is based on routing and server info Type Name Net Address Port Route Hops Itf p 4 fs1 11.0000.0000.0001:0451 4/03 4 Et0 p 4 fs2 21.0000.0000.0001:0451 4/03 4 Et0,查看 IPX 通信量,wg_ro_a#show ipx traffic System Traffic for 0.0000.0000.0001 System-

36、Name: wg_ro_a Rcvd: 15 total, 0 format errors, 0 checksum errors, 0 bad hop count, 0 packets pitched, 15 local destination, 0 multicast Bcast: 13 received, 6 sent Sent: 6 generated, 0 forwarded 0 encapsulation failed, 0 no route SAP: 1 Total SAP requests, 0 Total SAP replies, 0 servers 1 SAP general

37、 requests, 0 ignored, 0 replies 0 SAP Get Nearest Server requests, 0 replies 0 SAP Nearest Name requests, 0 replies 0 SAP General Name requests, 0 replies 0 SAP advertisements received, 0 sent 0 SAP flash updates sent, 0 SAP format errors RIP: 1 RIP requests, 0 ignored, 0 RIP replies, 2 routes 13 RI

38、P advertisements received, 0 sent 0 RIP flash updates sent, 0 RIP format errors Echo: Rcvd 0 requests, 0 replies Sent 0 requests, 0 replies 0 unknown: 0 no socket, 0 filtered, 0 no helper 0 SAPs throttled, freed NDB len 0 Watchdog: 0 packets received, 0 replies spoofed ,wg_ro_a#debug ipx routing act

39、ivityIPX routing debugging is onIPXRIP: positing full update to 3010.ffff.ffff.ffff via Ethernet0 (broadcast)IPXRIP: positing full update to 3000.ffff.ffff.ffff via Ethernet1 (broadcast)IPXRIP: positing full update to 3020.ffff.ffff.ffff via Serial0 (broadcast)IPXRIP: positing full update to 3021.ff

40、ff.ffff.ffff via Serial1 (broadcast)IPXRIP: sending update to 3020.ffff.ffff.ffff via Serial0IPXRIP: src=3020.0000.0c03.14d8, dst=3020.ffff.ffff.ffff, packet sent network 3021, hops 1, delay 6 network 3010, hops 1, delay 6 network 3000, hops 1, delay 6IPXRIP: sending update to 3021.ffff.ffff.ffff vi

41、a Serial1IPXRIP: src=3021.0000.0c03.14d8, dst=3021.ffff.ffff.ffff, packet sent network 3020, hops 1, delay 6 network 3010, hops 1, delay 6 network 3000, hops 1, delay 6IPXRIP: sending update to 3010.ffff.ffff.ffff via Ethernet0IPXRIP: src=3010.aa00.0400.0284, dst=3010.ffff.ffff.ffff, packet sent net

42、work 3030, hops 2, delay 7 network 3020, hops 1, delay 1 network 3021, hops 1, delay 1 network 3000, hops 1, delay 1IPXRIP: sending update to 3000.ffff.ffff.ffff via Ethernet1,IPX 路由排錯,wg_ro_a#debug ipx sap activity IPX service debugging is on wg_ro_a# 05:31:18: IPXSAP: positing update to 1111.ffff.

43、ffff.ffff via Ethernet0 (broadcast) (full) 05:31:18: IPXSAP: Update type 0 x2 len 288 src:1111.00e0.1e5d.ae2f dest:1111.ffff.ffff.ffff(452) 05:31:18: type 0 x7, ”ps21, 21.0000.0000.0001(451), 2 hops 05:31:18: type 0 x4, fs31, 31.0000.0000.0001(451), 2 hops 05:31:18: type 0 x4, fs41, 41.0000.0000.000

44、1(451), 2 hops 05:31:18: type 0 x7, ps51, 51.0000.0000.0001(451), 2 hops wg_ro_a#,IPX SAP 排錯,IPX Ping,wg_ro_a# ping ipx 211.0000.0c01.f4cf Type escape sequence to abort. Sending 5, 100-byte IPXcisco Echoes to 211.0000.0c01.f4cf, timeout is 2 seconds. ! Success rate is 100 percent (0/5),Use access li

45、st 800-899 for standard,Deny,Permit,Destination Address,Source Address,An Example Using an IPX Packet,Data,Packet (IPX header),Frame Header (for example, novell-ether),用訪問列表檢測信息,Use access list 900-999 for extended,Deny,Permit,Destination Address,Source Address,Data,Packet (IPX header),Frame Header

46、(for example, novell-ether),Protocol, Socket Number,用訪問列表檢測信息,Use access list 1000-1099 for SAP filtering,Deny,Permit,Service Advertisement,An Example Using an IPX Packet,Data,Packet (IPX header),Frame Header (for example, novell-ether),用訪問列表檢測信息,Service Advertisement,Use ACL 800-899 standard 900-99

47、9 extended 1000-1099 SAP,Deny,Permit,Destination Address,Source Address,An Example Using an IPX Packet,Data,Packet (IPX header),Frame Header (for example, novell-ether),用訪問列表檢測信息,Protocol, Socket Number,IPX 訪問列表的主要特性,IPX 地址格式為 網(wǎng)絡(luò).主機(jī) Socket 號代表上層應(yīng)用 標(biāo)準(zhǔn)訪問列表(800-899) 能過濾源地址和目標(biāo)地址 擴(kuò)展訪問列表 (900-999) 能過濾特定的協(xié)

48、議和socket 號所代表的上層應(yīng)用 SAP 訪問列表 (1000-1099) 能夠過濾網(wǎng)絡(luò)中的 SAP 數(shù)據(jù)包,頻繁的升級信息會占用數(shù)據(jù)傳輸?shù)膸?控制 IPX,Server,Server,SAPRIP,SAPRIP,Router,Router,SAP RIP,SAP RIP,WAN Link Flooded with Overhead Traffic,Client,GNS,Step 1: 設(shè)置訪問列表的參數(shù),Router(config)# access-list access-list-number deny | permit test conditions ,Step 2: 在端口上應(yīng)用

49、訪問列表,Router(config-if)# ipx access-group access-list-number | name in | out ,訪問列表配置命令,800-899 標(biāo)準(zhǔn) 900-999 擴(kuò)展,設(shè)置訪問列表的參數(shù) 標(biāo)準(zhǔn)訪問列表的編號為 800 到 899,Router(config)# access-list access-list-number deny | permit source-network .source-node source-node-mask destination-network .destination-node destination-node-

50、mask ,IPX 標(biāo)準(zhǔn)訪問列表的配置,IPX 標(biāo)準(zhǔn)訪問列表的配置,Router(config-if)# ipx access-group access-list-number in | out ,在端口上應(yīng)用訪問列表,設(shè)置訪問列表的參數(shù) 標(biāo)準(zhǔn)訪問列表的編號為 800 到 899,Router(config)# access-list access-list-number deny | permit source-network .source-node source-node-mask destination-network .destination-node destination-nod

51、e-mask ,標(biāo)準(zhǔn) IPX 訪問列表配置舉例,Client,Server,Client,E0,E2,E1,Network 2b,Network 3c,Network 4d,access-list 800 permit 2b 4d (implicit deny all) int e 0 ipx network 4d ipx access-group 800 out int e 1 ipx network 3c int e 2 ipx network 2b int e3 ipx network 1a,Server,E3,Network 1a,IPX 擴(kuò)展訪問列表的配置,Router(config

52、)# access-list access-list-number deny | permit protocol source-network .source-node source-node-mask | .source-node source-network-mask. source-node-mask source-socket work .destination-node destination-node-mask | .destination-node destination-network-mask. destination-nodemask destination-socket

53、log ,設(shè)置訪問列表的參數(shù) 擴(kuò)展訪問列表的編號范圍為 900 到 999,IPX 擴(kuò)展訪問列表的配置,Router(config-if)# ipx access-group access-list-number in | out ,在端口上應(yīng)用訪問列表,Router(config)# access-list access-list-number deny | permit protocol source-network .source-node source-node-mask | .source-node source-network-mask. source-node-mask sour

54、ce-socket work .destination-node destination-node-mask | .destination-node destination-network-mask. destination-nodemask destination-socket log ,設(shè)置訪問列表的參數(shù) 擴(kuò)展訪問列表的編號范圍為 900 到 999,IPX SAP 作用,路由器不會轉(zhuǎn)發(fā) SAP 廣播,Server/ Router C,Server/ Router D,Client 2,A Large IPX Network,Server/ Router A,Client 1,Server

55、/ Router B,IPX SAP 作用,路由器不會轉(zhuǎn)發(fā) SAP 廣播 IPX 路由器每隔60秒發(fā)送SAP 表,Server/ Router C,Server/ Router D,Client 2,A Large IPX Network,Server/ Router A,Client 1,Server/ Router B,在端口應(yīng)用輸入或輸出的 SAP 過濾,輸出過濾: 不將收到的SAP數(shù)據(jù)添加到送出的SAP表中,如何使用 SAP 過濾,輸入過濾: 不將收到的SAP數(shù)據(jù)添加到SAP表中,SAP,SAP Table,SAP,SAP,SAP,SAP Table,SAP,SAP,SAP,SAP,S

56、AP,SAP,SAP 配置,創(chuàng)建 SAP 訪問列表,SAP 配置,創(chuàng)建 SAP 訪問列表,在端口的輸出方向應(yīng)用訪問列表,在端口的輸入方向應(yīng)用訪問列表,SAP 配置舉例 1,SAP 配置舉例 1,access-list 1000 permit 1a 4 access-list 1000 permit 2a 4 interface ethernet 0 ipx network 11b interface serial 0 ipx network 12b ipx output-sap-filter 1000,Only file services from FS-A and FS-B are advertised across router Cisco Bs S0 interface,SAP 配置舉例 2,access-list 1001 deny -1 7 access-list 1001 permit -1 interface ethernet 0 ipx network 9e interface ethernet 1 ipx network 4a interface ethernet 2 ipx network 1 ipx input-sap-filter 1001,Print services f