Alcatel-Lucent 6850-48 Network Guide
IPX RIP/SAP Filtering
Configuring IPX
page 33-12
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
Configuring RIP Filters
IPX RIP filters allow you to minimize the number of entries put in the IPX RIP routing table. RIP input
filters control which networks are allowed into the routing table when IPX RIP updates are received. RIP
output filters control which networks the switch advertises in its IPX RIP updates.
filters control which networks are allowed into the routing table when IPX RIP updates are received. RIP
output filters control which networks the switch advertises in its IPX RIP updates.
Use the
command to configure a RIP input or output filter. To configure a global filter that
will be applied to all traffic, enter the command, specify whether it is an input (in) or output (out) filter,
then specify whether you want the filter to allow or block traffic. For example, to create a filter that will
block all the incoming RIP packets you would enter:
then specify whether you want the filter to allow or block traffic. For example, to create a filter that will
block all the incoming RIP packets you would enter:
-> ipx filter rip in block
You can narrow the filter by specifying a VLAN. For example, to create a filter that will block all the
incoming RIP packets from VLAN 1 you would enter:
incoming RIP packets from VLAN 1 you would enter:
-> ipx filter 1 rip in block
You can also narrow the filter by specifying a network. You must enter the network number and the
network mask. For example, to create a filter that will block the incoming RIP packets from network 40
and its subnets you would enter:
network mask. For example, to create a filter that will block the incoming RIP packets from network 40
and its subnets you would enter:
-> ipx filter rip in block 40 mask ffffffff
Use the no ipx rip filter command to delete a RIP filter. For example, to delete a global RIP filter that was
configured to block incoming RIP packets you would enter:
configured to block incoming RIP packets you would enter:
-> no ipx filter rip in block
Use the optional syntax to delete a filter for a specific VLAN or network. If you are deleting the filter for a
specific network you can also enter the network mask. To delete a filter from all VLANs/networks, use
only the basic command syntax (e.g., no ipx filter rip in allow).
specific network you can also enter the network mask. To delete a filter from all VLANs/networks, use
only the basic command syntax (e.g., no ipx filter rip in allow).
Use the
command to display all IPX filters.
Note. RIP filters work only on switches running the RIP protocol. They do not work on switches running
the NLSP protocol. Use RIP filters with care because they can partition a physical network into two or
more segments.
the NLSP protocol. Use RIP filters with care because they can partition a physical network into two or
more segments.
Configuring SAP Filters
IPX SAP filters allow you to minimize the number of entries put in the SAP Bindery Table. SAP input
filters control the SAP updates received by the switch prior to a switch accepting information about a
service. The switch will filter all incoming service advertisements received before accepting information
about a service. SAP output filters control which services are included in the SAP updates sent by the
switch.
filters control the SAP updates received by the switch prior to a switch accepting information about a
service. The switch will filter all incoming service advertisements received before accepting information
about a service. SAP output filters control which services are included in the SAP updates sent by the
switch.
Use the
command to configure a SAP input or output filter. To configure a global filter that
will be applied to all traffic, enter the command, specify the SAP packet type to be filtered (all – all SAP
packets, or a specific 4-digit hex SAP type), specify whether it is an input (in) or output (out) filter, then
specify whether you want the filter to allow or block traffic. For example, to block all SAP updates sent by
the switch you would enter:
packets, or a specific 4-digit hex SAP type), specify whether it is an input (in) or output (out) filter, then
specify whether you want the filter to allow or block traffic. For example, to block all SAP updates sent by
the switch you would enter:
-> ipx filter sap all out block