This chapter describes how to configure the IPX protocol and use the IPX monitoring commands. It includes the following sections:
To access the IPX configuration environment, enter the following command at the Config> prompt:
Config> protocol IPX IPX Protocol user configuration IPX Config>
This section discusses the IPX configuration commands. Table 40 lists the IPX configuration commands. These commands
specify the network parameters for routers transmitting IPX packets.
These commands are entered at the IPX config> prompt. To
activate the configuration changes, restart the router.
Table 40. IPX Configuration Commands Summary
| Command | Function |
|---|---|
| ? (Help) | Displays all the commands available for this command level or lists the options for specific commands (if available). See "Getting Help". |
| Add | Adds an IPX broadcast or IPXWAN point-to-point circuit, adds global IPX filters (access controls), global SAP filters, static routes or services. |
| Delete | Deletes an IPX broadcast or IPXWAN point-to-point circuit, deletes global IPX filters (access controls), global SAP filters, static routes, or services. |
| Disable / Enable | Disables or enables IPX globally or on specific IPX circuits, globally disables or enables the use of IPX static routes or services. Disables or enables Keepalive filtering, RIP-SAP broadcast pacing, SAP reply to get nearest server, NetBIOS broadcasts, and disables or enables RIP or SAP on specific circuits. |
| Filter-lists | Accesses the IPX circuit-filter configuration. This environment is where the IPX circuit-based ROUTER, RIP, SAP, and IPX filters are configured. |
| Frame |
|
| List | Displays the current IPX configuration. |
| Move | Reorders the global IPX filter items (access control), or moves an IPX circuit from one interface to another. |
| Set | Sets the host number, IPXWAN router name and node ID, IPXWAN routing type, connection timeout and retry timer, IPX network numbers, maximum RIP and SAP table sizes, local and remote cache sizes, global IPX filter (access controls) and global SAP filter states, cache sizes, RIP and SAP update intervals, RIP circuit cost (RIP ticks), Keepalive filtering table size, and split-horizon usage. |
| Exit | Returns you to the previous command level. See "Exiting a Lower Level Environment". |
Use the add command to add a global IPX filter (access controls), an IPX broadcast circuit, a global SAP filter, an IPX point-to-point circuit, or a static route or service to your IPX configuration.
Syntax:
When a packet is received from a network for the IPX protocol, and access control is enabled, it is checked against the access control list. It is compared with the net/address/socket pairs in the list until there is a match. If there is a match and the entry is of the Inclusive type, reception of the packet (and potential forwarding) proceeds. If the matching entry is of the Exclusive type, the packet is dropped. If there is no match, the packet is also dropped.
After you create an access-control list with the add access-control command, enable the entries with the set access-control on command. Use the move command to change the order of the access-control list.
| Note: | Access controls apply to all received packets. If you do not enable reception of RIP (socket 453 hexadecimal) or SAP (socket 452 hexadecimal) packets, the IPX forwarder will be nonfunctional. |
add access I 0 0 453 453 0 0 0 FFFF
add access I 0 0 452 452 0 0 0 FFFF
Enter type [E] i
Destination network number (in hex) [0]? 0
Destination host (in hex) [ ]? 0
Starting destination socket number in hex [0]? 452
Ending destination socket number in hex [0]? 453
Source network number (in hex) [0]? 0
Source host number (in hex) [ ]? 0
Starting source socket number in hex [0]? 0
Ending source socket number in hex [452]? FFFF
Valid Values: X'00000000' to X'FFFFFFFF'
Zero (0) specifies all networks.
Default Value: 0
Valid Values: X'000000000000' to X'FFFFFFFFFFFF'
Zero (0) specifies all hosts on the network.
Default Value: None
Valid Values: X'0000' to X'FFFF'
Default Value: 0
This parameter defines the network number of the source IPX network whose packets are filtered by this router.
If you choose to filter on only the source network value, the filter applies to all source sockets, source networks, packet types, and number of hops.
Valid Values: X'00000000' to X'FFFFFFFF'
Zero (0) specifies all networks.
Default Value: 0
Valid Values: X'000000000000' to X'FFFFFFFFFFFF'
Zero (0) specifies all hosts on the network.
Default Value: None
Valid Values: X'0000' to X'FFFF'
Default Value: 0
| Note: | It is not necessary to use access controls and SAP filters for IPX to work in a NetWare environment. Use them only if necessary. |
Example: add access-control E 201 1 451 451 329 0 0 FFFF
This access control prevents all nodes on network 329 from accessing the file server with internal network number 201.
Valid Values: valid network interface number
Default: 0
Valid Values: 1- 65535
Default: next available IPX circuit number
Valid Values: 1 - FFFFFFFD
Default: 1
Example:
add broadcast-circuit Which interface [0]? IPX circuit number [1]? IPX network number in hex (0 is allowed only on IPXWAN unnumbered circuits) [1]? 400
The SAP filters are a global ordered list of filter entries. Each filter entry has a maximum hop count, a service type, and an optional service name. When a SAP response packet is received, each SAP entry is compared with the filter list. If the SAP entry matches an entry in the filter list and is greater than the specified hops, it is ignored and not entered into the local SAP database. If the SAP entry matches an entry in the filter list, and is less than or equal to the specified hops, it is accepted and entered into the local SAP database. If there is no match, the SAP entry is accepted. The arguments for this command are as follows:
Valid Values: An integer in the range of 0 to 16.
Default Value: 1
Valid Values: A hexadecimal value in the range of X'0000' to X'FFFF'.
Use a value of X'0000' to filter all service types.
Default Value: 4
You can see a list of service types by entering the slist command at the IPX> prompt.
Valid Values: A string of 1 to 47 ASCII characters (X'20' through X'7E').
Default Value: none
Example: add filter 2 039B NOTES-CHICAGO
This example ignores all SAP advertisements for the Lotus Notes server "NOTES-CHICAGO" at more than 2 hops.
Valid Values: valid network interface number
Default: 0
Valid Values: 1- 65535
Default: next available IPX circuit number
Valid Values: 0 - FFFFFFFD
Default: 1
Valid Values: Yes or No
Default: Yes
Valid Values: a valid Frame Relay PVC circuit number or Frame Relay SVC circuit name
Default: 16 (PVC) or None (SVC)
Example:
add ipxwan-circuit Which interface [0]? 2 IPX circuit number [1]? 3 IPX network number in hex (0 is allowed only on IPXWAN unnumbered circuits) [0]? 412 Use Frame Relay PVC ? yes Frame Relay PVC circuit number [16]? add ipxwan circuit Which interface [0]? 3 IPX circuit number [2]? 4 IPX network number in hex (0 is allowed only on IPXWAN unnumbered circuits) [0]? 413 Use Frame Relay PVC ? No Frame Relay SVC circuit name ? Indianapolis
Valid Values: X'1' to X'FFFFFFFE'
Default Value : 1
Valid Values: existing IPX circuit number
Default Value: 1
Valid Values: X'1' to X'FFFFFFFFFFFE'
Default Value: none
Valid Values: 0 to 30000
Default Value: 0
Valid Values: 0 to 14
Default Value: 0
Example:
add route-static IPX net address: (1-fffffffe) [1]? 30 IPX circuit number [1]? 2 IPX node address (in hex) []? 020000002030 Ticks: (0-3000) [0]? 4 Hops: (0-14) [0]? 4
Valid Values: X'0' to X'FFFF'
Default Value: 4
Valid Values: up to 47 of the following ASCII characters: 'A'-'Z', 'a'-'z', '0'-'9', '_', '-', '@'.
Default Value: None
Valid Values: existing IPX circuit number
Default Value: 1
Valid Values: X'1' to X'FFFFFFFE'
Default Value: 1
Valid Values: X'1' to X'FFFFFFFFFFFE'
Default Value: None
Valid Values: X'0' to X'FFFF'
Default Value: 451
Valid Values: 0 to 14
Default Value: 0
add sap-static Sap type: (0-ffff) [4]? 4 IPX circuit number [1]? 2 IPX net address: (1-fffffffe) [1]? 40 IPX node address, in hex: []? 000000000001 IPX socket: (0-ffff) [451]? Hops: (0-14) [0] 4
Use the delete command to delete an IPX broadcast or IPXWAN point-to-point circuit, a global IPX filter (access control), a global SAP filter, a static route or a static service.
Syntax:
Example: delete access-control 2
Example: delete circuit
IPX circuit number [1]? 2 You are about to delete IPX broadcast circuit 2 on interface 4. All associated static routes, static services and circuit filters will be deleted as well. Are you sure? [Yes]: yes
Valid Values: 0 to 16
Default Value: 16
Valid Values: X'0000' to X'FFFF'
Default Value: None
Valid Values: A string of 1 to 47 ASCII characters (X'20' through X'7E').
Default Value: None
Example: delete filter 2 039B NOTES-CHICAGO
Valid Values: X'1' to X'FFFFFFFE'
Default Value: 1
Valid Values: existing IPX circuit number
Default Value: 1
Valid Values: X'1' to X'FFFFFFFFFFFE'
Default Value: none
Example:
delete route-static IPX net address: (1-fffffffe) [1]? 30 IPX circuit number [1]? 2 IPX node address (in hex) []? 020000002030
Valid Values: X'0' to X'FFFF'
Default Value: 4
Valid Values: up to 47 of the following ASCII characters: 'A'-'Z', 'a'-'z', '0'-'9', '_', '-', '@'.
Default Value: None
Valid Values: existing ipx-circuit number
Default Value: 1
Example:
delete sap-static Sap type: (0-ffff) [4]? Sap name: (0-ffff) []? filesrv1 IPX circuit number [1]? 2
Use the disable command to disable globally or on specific IPX circuits, globally disables the use of IPX static routes and services. Also, use the disable command to disable replies to SAP to get-nearest-server , RIP-SAP Broadcast Pacing, RIP, or SAP on specific circuits.
Syntax:
Example: disable circuit
IPX circuit number [1]? 2
Example: disable ipx
Example: disable keepalive-filtering
IPX circuit number [1]? 2
Example: disable netbios-broadcast
IPX circuit number [1]? 2
| Note: | Disabling this feature should be done with great caution. This command should be used only when there are multiple routers (or servers) on an IPX network and it is known that the "best" server is not behind this router. |
Example: disable reply-to-get-nearest
IPX circuit number [1]? 2
Example: disable rip 1
Example: disable rip-sap-pacing
IPX circuit number [1]? 2
Example: disable route-static
Example: disable sap
IPX circuit number [1]? 2
Example: disable sap-static
Use the enable command to enable IPX globally or on specific circuits. The enable command can also be used to globally enable the use of IPX static routes or services, enables keepalive filtering, RIPS-SAP broadcast pacing, SAP reply to get-nearest-server, RIP or SAP on specific circuits.
Syntax:
Example: enable circuit
IPX circuit number [1]? IPX network number in hex (0 is allowed only on IPXWAN unnumbered circuits) [1]?
Valid Values: any valid ipx-circuit number
Default Value: 0
Valid Values: X'0' to X'FFFFFFFD'
Default Value: 1
Example:
Example: enable ipx
Example: enable keepalive-filtering
IPX circuit number [1]? 2
Example: enable netbios-broadcast
IPX circuit number [1]? 2
Example: enable reply-to-get-nearest
IPX circuit number [1]? 2
Example: enable rip
IPX circuit number [1]? 2
| Note: | The router calculates an interpacket gap that guarantees that broadcast completion within the configured RIP and SAP update intervals. Configuring these intervals to a larger value may be necessary for the router to calculate a sufficiently large interpacket gap. |
Pacing should be enabled only on circuits where RIP and SAP broadcasts might cause congestion (for example, on frame-relay or X.25 circuits with many virtual circuits).
Example: enable rip-sap-pacing
IPX circuit number [1]? 2
Example: enable route-static
Example: enable sap
Example: enable sap-static
Use the filter-lists command to access the IPX filter-type-List Config> prompt. Valid filter list types are router, rip, sap, and ipx.
For information about the commands available at the IPX filter-type.-List Config> prompt, see "IPX circuit Circuit-Filter Configuration Commands".
Syntax:
Example: filter-lists router-lists
Use the frame command to specify the packet format for IPX circuits. (Encapsulation can also be set using the CONFIG network command.)
| Note: | When there are incorrect or invalid configuration records, the default frame values are used. |
Syntax:
Example: frame ethernet_II
IPX circuit number [1]?
Example: frame ethernet_8022
IPX circuit number [1]?
Example: frame ethernet_8023
IPX circuit number [1]?
Example: frame ethernet_SNAP
IPX circuit number [1]?
Example: frame token-ring MSB
IPX circuit number [1]?
Example: frame token-ring LSB
IPX circuit number [1]?
Example: frame token-ring_SNAP MSB
IPX circuit number [1]?
Use the list command to display the current IPX configuration.
Syntax:
Example:
list all
IPX Globals
------------
IPX Globally Enabled
Host Number (serial line) 020000003024
Maximum Services 32
Maximum Networks 32
Maximum Routes 32
Maximum Routes per Destination 1
Maximum Local Cache entries 64
Maximum Remote Cache entries 64
Keepalive-Filtering Table Size 32
IPX Configuration:
------------------
NetBIOS Keepalive
Circ Ifc NetNum IPX Broadcast Filtering Encapsulation
1 0 400 Enabled Enabled Disabled ETHERNET_II
2 1 411 Enabled Enabled Disabled N/A
3 2 412 Enabled Enabled Disabled N/A
Frame Relay PVC circuit number: 16
4 3 413 Enabled Enabled Disabled N/A
Frame Relay SVC circuit name: Indianapolis
RIP Configuration:
------------------
Update Split Broadcast RIP
Circ Ifc NetNum RIP Interval Horizon Pacing Ticks
1 0 400 Enabled 1 Enabled Disabled 0
2 1 411 Enabled 1 Enabled Disabled 3
3 2 412 Enabled 1 Enabled Disabled 0
4 3 413 Enabled 1 Enabled Disabled 0
SAP Configuration:
------------------
Update Split Broadcast Get Nearest
Circ Ifc NetNum SAP Interval Horizon Pacing Reply
1 0 400 Enabled 1 Enabled Disabled Enabled
2 1 411 Enabled 1 Enabled Disabled Enabled
3 2 412 Enabled 1 Enabled Disabled Enabled
4 3 413 Enabled 1 Enabled Disabled Enabled
IPXWAN Configuration:
---------------------
Router Name ipxwan-413
NodeID 413
Routing Connect Retry
Circ Ifc NetNum Type Time (sec) Time (sec)
2 1 411 RIP 60 60
3 2 412 RIP 60 60
4 3 413 RIP 60 60
Static Route Configuration:
---------------------------
Static Routes: Enabled
Dest Net Hops Ticks Next Hop Circ Ifc
ABC 3 4 020000003044 3 2
Static Services Configuration:
------------------------------
Static Services: Enabled
Type Service Name Srv Net Host Sock Hops Circ Ifc
4 FILESRV01 ABC 000000000001 451 3 3 2
SAP Filter Configuration:
-------------------------
IPX SAP Filters: Enabled
Index Max Hops Type Service Name
1 5 4 FILESRV02
Access Control Configuration:
-----------------------------
IPX Access Controls: Enabled
# T Dest Net Host Sock Sock Src Net Host Sock Sock
1 E 2 000000000000 0 FFFF 3 000000000000 0 FFFF
2 I 0 000000000000 452 453 0 000000000000 0 FFFF
Use the move command to reorder the global IPX filter items (access control), or move an IPX circuit from one interface to another.
Syntax:
After the line is access control is moved, the lines are renumbered.
Example:
move access-control Enter index of control to move [1]? 1 Move record AFTER record number [0]? 2 About to move: # T Dest Net Host Sock Sock Src Net Host Sock Sock 1 E 2 000000000000 0 FFFF 3 000000000000 0 FFFF to be after: 2 I 0 000000000000 452 453 0 000000000000 0 FFFF Are you sure this is what you want to do? [Yes]: yes
Valid Values: an existing IPX circuit number
Default Value: 1
Valid Values: an existing network interface number.
Default Value: 0
Valid Values: Yes or No
Default Value: Yes
Valid Values: existing PVC Frame Relay PVC circuit number or Frame Relay SVC circuit name
Default Value: 16 (PVC) or None (SVC)
Example: move circuit
IPX circuit number [1]? Which interface do you want to move the IPX circuit to []? 5 Use Frame Relay PVC? [Yes]: Frame Relay PVC circuit number [16]? 18 You are about to move IPXWAN circuit 1, from Frame Relay interface 2 (FR circuit 16) to Frame Relay interface 5 (FR circuit 18). All associated static routes, static services and circuit filters will be moved as well. Are you sure? [Yes]: Y
Use the set command to configure the host number, IPXWAN router name and node ID, IPXWAN routing type, connection timeout and retry timer, IPX network numbers, maximum RIP and SAP table sizes, local and remote cache sizes, global IPX filter (access control) and global SAP filter states, RIP and SAP update intervals, IPX route cost (in ticks), Keepalive filter table size and split-horizon usage.
Syntax:
Example: set access-control on
Example: set filter on
| Note: | If you configure a mixture of IPX broadcast and IPXWAN circuits on the same interface, it is strongly recommended that you configure the host-number to be the IPXWAN node-id followed by X'0000'. |
Valid Values: An 12-digit hexadecimal number in the range of X'000000000001' to X'FEFFFFFFFFFF'.
Default Value: none
This number must be unique on each router.
Example: set host-number 0000000000F4
| Note: | IPXWAN requires a router node ID and name to be configured. Use the set node-ID and set name commands to configure these parameters. |
Valid Values: any existing IPXWAN point-to-point circuit number
Default Value: 1
Valid Values: 'u', 'U', 'r', 'R', 'b', 'B', 's', 'S'
Default Value: 'u'
Valid Values: An integer number of seconds in the range of 5 to 300.
Default Value: 60 seconds
Valid Values: An integer number of seconds in the range of 5 to 600.
Default Value: 60 seconds
Example: set ipxwan
IPX circuit number [1]? 3
Routing type ('u'=Unnumbered, 'r'=RIP, 'b'=Both, 's'=Static) [u]
Connection Timeout (in sec) [60]?
Retry timer (in sec) [60]?
Valid Values: 1 to 250
Default: 32
Example: set keepalive-table-size
Number of entries [32]?
The size of the local cache should equal the total number of clients on each router's local or client network plus a 10% buffer to prevent excessive purge requests.
Valid Values: The range is 1 to 10000.
Default Value: 64. For more information, see "Local Cache" and "Remote Cache".
Example: set local-cache size
New IPX local node cache size [64]? 80
Valid Values: An integer in the range of 1 to 64.
Default Value: 1. For additional information on multiple routes, see "Configuring Multiple Routes".
Example: set maximum routes-per-destination 8
Valid Values: 1 to 2048
Router memory constraints can prevent the maximum table size from being used.
Default Value: 32 This value cannot be larger than the maximum total-route-entries size.
Example: set maximum networks 30
Valid Values: 1 to 2048
Router memory constraints can prevent the maximum table size from being used.
Default Value: 32
Example: set maximum services 30
Valid Values: 1 to 4096
Default Value: 32
This value must be at least as large as the maximum networks size. For additional information of multiple routes, see "Configuring Multiple Routes".
Example: set maximum total-route-entries 40
Valid Values: A variable length string of 1 to 47 characters.
The router_name can contain the characters A through Z, 0 through 9, underscore (_), hyphen (-), and "at" sign (@).
Default Value: none.
Example: set name newyork_accounting
Valid Values: an existing circuit number
Default Value: 1
Valid Values: X'0' to X'FFFFFFFD'
Default Value: 1
Example: set net-number
IPX circuit number [1]? 2 IPX network number in hex (0 is allowed only on IPXWAN unnumbered circuits) [1]?
Default Value: 1
Example: set node-id 2
The size of the remote cache should equal the total number of remote networks used by the router plus a 10% buffer to prevent excessive purge requests.
Valid Values: The range is 1 to 10000.
Default Value: 64.
Example: set remote-cache size
New IPX remote network cache size [64]? 80
Valid Values: any valid IPX circuit number
Default: 1
Valid Values: The range is 1 to 30000.
Default Value: 0
Example: set rip-ticks
IPX circuit number [1]? 2 RIP ticks value (in 55mec ticks) [0]? 3
Increasing the RIP interval reduces traffic on WAN lines and dial circuits. It also prevents dial-on-demand circuit from dialing out so often.
Note:While complete RIP advertisements are controlled by the interval, the router still propagates network topology changes as quickly as it learns about them.
Valid Values: any valid IPX circuit number
Default: 1
Valid Values: The range is from 1 to 1440 minutes.
Default Value: 1 minute. For additional information on RIP interval, see "Specifying RIP Update Interval".
Example: set rip-update-interval
IPX circuit number [1]? 2 RIP Timer Value (minutes) [1]? 2
Increasing the SAP interval reduces traffic on WAN lines and dial circuits. It also prevents dial-on-demand circuit from dialing out so often.
| Note: | While complete SAP advertisements are controlled by the interval, the router still propagates service changes as quickly as it learns about them. |
Valid Values: any valid IPX number
Default: 1
Valid Values: The range is from 1 to 1440 minutes.
Default Value: 1 minute.
Example: set sap-update-interval
IPX circuit number [1]? 2 SAP Timer Value (minutes) [1]? 2
If there is only a single Frame Relay VC on the circuit, split-horizon is enabled; otherwise split-horizon is disabled.
Generally, split-horizon should be set to enabled. It is sometimes necessary to disable split-horizon for partially-meshed broadcast circuits on Frame-Relay, and X.25 configurations. For additional information on split-horizon, see "Split-Horizon Routing".
Valid Values: any valid IPX circuit number
Default: 1
Valid Values: 1-1440
Default: 1
Valid Values: 1-1440
Default: 1
Example: set split-horizon enabled 0
IPX circuit number [1]? 2
To access the IPX circuit Filter configuration environment, enter the following command at the IPX config> prompt:
IPX Config> filter-lists type IPX type-List Config>
Where type is the type of IPX filter to be configured. Valid types are router-lists, rip-lists, sap-lists, and ipx-lists.
When creating a filter, an IPX circuit number is required.
This section describes the commands used to configure the IPX circuit-based
filters; ROUTER, RIP, SAP, and IPX. To configure these filters,
enter the filter-lists type command at the IPX
Config> prompt, and then enter the configuration commands at the
IPX type-List Config> prompt.
Table 41. IPX Filter Configuration Command Summary
| Command | Function |
|---|---|
| ? (Help) | Displays all the commands available for this command level or lists the options for specific commands (if available). See "Getting Help". |
| Attach | Attaches a specified filter-list to a specified filter. |
| Create | Creates a filter or filter-list. |
| Default | Sets the default action of a filter to include or exclude |
| Delete | Deletes a filter or filter-list. |
| Detach | Detaches a filter-list from a filter. |
| Disable | Disables filtering. |
| Enable | Enables filtering. |
| List | Displays the current filtering configuration. |
| Move | Reorders filter-lists attached to a filter. |
| Set-cache | Sets the caching size for a specified filter. |
| Update | Accesses the IPX type-List filter-list Config> prompt. |
| Exit | Returns you to the previous command level. See "Exiting a Lower Level Environment". |
Use the attach command to attach a filter-list to a filter.
Syntax:
Valid Values: Any alphanumeric string up to 16 characters
Default Value: None
Use the create command to create a filter-list or filter.
Syntax:
Valid Values: Any alphanumeric string up to 16 characters
Default Value: none
You can also enter the create list command with no list name. You will then be prompted for the list name.
Example: create list example_list
A number is automatically assigned to a filter when it is created and from that point on is used to identify the filter, rather than having to key in the circuit and direction (input or output) for all subsequent commands.
Example: create filter input 1
Use the default command to set the default action for a filter. The default action is taken when no match is found for any of the filter items.
Syntax:
Use the delete command to delete a filter-list or filter.
Syntax:
Example: delete list example_list
Example: delete filter 1
Use the detach command to detach a filter-list from a filter.
Syntax:
Valid Values: Any alphanumeric string up to 16 characters
Default Value: None
Use the disable command to disable filtering globally or for a specified filter.
Syntax:
Example: disable all
Example: disable filter 1
Use the enable command to enable filtering globally or for a specified filter.
Syntax:
Example: enable all
Example: enable filter 1
Use the list command to globally display the state of the current filtering type, or to display information about a specific filter.
Syntax:
Example: list all
Filtering: ENABLED
Filter Lists:
Name Action
------------------------------ ----------
ipx01 EXCLUDE
ipx02 INCLUDE
ipx03 EXCLUDE
Filters:
Id Circ Ifc Direction State Default Cache
----- ----- ----- ---------- ---------- ---------- -----
1 3 2 INPUT ENABLED INCLUDE 10
2 2 1 INPUT ENABLED INCLUDE 10
Example: list filter 2
Filters:
Id Circ Ifc Direction State Default Cache
----- ----- ----- ---------- ---------- ---------- -----
2 2 1 INPUT ENABLED INCLUDE 10
Filter Lists:
Name Action
------------------------------ ----------
ipx01 EXCLUDE
Use the move command to change the order of filter lists within a filter. Packets are evaluated against the filter lists in the order the lists occur. The first match stops the filtering process.
Syntax:
Use the set-cache command to set the size of the filter cache. A filter cache is only supported for the IPX circuit filter; the ROUTER, RIP and SAP circuit filters do not support a cache.
Syntax:
Valid Values: 4 to 64 cache entries.
Default Value: 10 entries.
The update command accesses the IPX type-List list-name Config> prompt. From this prompt you can issue commands to add, delete, or move items within the list being updated. From this prompt you can also set the action for the filter-list being updated.
Syntax:
Use the add subcommand to add items to a filter-list. The list item parameters vary based on the type of circuit filter (ROUTER, RIP, SAP, or IPX) being configured. For all types of circuit filter, the add command can be entered without parameters. You will then be prompted for the required parameters.
Syntax:
Valid Values: X'000000000000' to X'FFFFFFFFFFFF'
Default Value: none
If you want to match on a single address, set the address parameter to the address and set the mask to FFFFFFFFFFFF. If you want to match on all addresses, set the address parameter and the mask parameter to 000000000000.
Valid Values: X'000000000000' to X'FFFFFFFFFFFF'
Default Value: X'FFFFFFFFFFFF'
Example: add 400000001000 ffffffff0000
Syntax:
Valid Values: X'1' to X'FFFFFFFE'
Default Value: X'1'
Valid Values: X'1' to X'FFFFFFFE'
Default Value: X'1'
Example: add 00000001 FFFFFFFE
Syntax:
Valid Values:
<
<=
=
>=
>
Default Value: <= The comparitor and hops parameters are ignored on output filters.
Valid Values: 0 to 16
Default Value: 16
Valid Values: X'0' to X'FFFF'
Default Value: 4
Valid Values:
A string of 1 to 47 ASCII characters (X'20' through X'7E').
The question mark (?) and asterisk (*) characters serve as wildcard characters. The question mark may be used multiple times to represent any single character within the server name. The asterisk may be used multiple times to represent any portion of the server name. The question mark and asterisk may also be used together.
Default Value: none
Example: add < 6 0004 *
Syntax:
Valid Values:
Default Value: <=
Valid Values: X'0' to X'FF'
Default Value: X'0'
Valid Values: X'00000000' to X'FFFFFFFF'
Default Value: X'00000000'
Valid Values: X'00000000' to X'FFFFFFFF'
Default Value: X'00000000'
Valid Values: X'000000000000' to X'FFFFFFFFFFFF'
Default Value: X'000000000000'
Valid Values: X'000000000000' to X'FFFFFFFFFFFF'
Default Value: X'000000000000'
Valid Values: X'0000' to X'FFFF'
Default Value: 0
Valid Values: X'0000' to X'FFFF'
Default Value: 0
Valid Values: X'00000000' to X'FFFFFFFE'
Default Value: X'00000000'
Valid Values: X'00000000' to X'FFFFFFFE'
Default Value: X'00000000'
Valid Values: X'00000000' to X'FFFFFFFF'
Default Value: X'00000000'
Valid Values: X'000000000000' to X'FFFFFFFFFFFF'
Default Value: X'000000000000'
Valid Values: X'0000' to X'FFFF'
Default Value: X'0000'
Valid Values: X'0000' to X'FFFF'
Default Value: X'0000'
Example:
add <= 16 0 00000004 00000004 000000000000 000000000000 0000 FFFF 0000005A 0000006A 000000000000 000000000000 0000 FFFF
This example filters all packets from IPX networks 5A through 6A to IPX network 4.
Use the delete subcommand to delete an item from the current filter-list.
Syntax:
Example: delete 4
Use the list subcommand to display the filter-list action and list filter items.
Syntax:
Example: list
IPX IPX-List 'ipx01' Config>list
Action: EXCLUDE
Id Hops Type Net Range Address Mask Sock Range
---- ---- ---- ------------------- ------------ ------------ -----------
1 <=16 0 4320 - 4324 4000003A0002 FFFFFFFFFFFF 0 - FFFF (Dest)
3A33 - 13A33 400000010000 FFFFFFFF0000 0 - FFFF (Source)
Use the move subcommand change the order of filter items. After you change the order of filter items, they are renumbered to reflect the new order. The list command can be used to display a numbered list of configured filter items.
The src-line# parameter indicates the line to be moved. This line will be moved to precede the item specified by the dest-line# parameter.
Syntax:
Example: move 5 2
Use the set-action subcommand to indicate the action to be taken when a match is made to a filter-list
Syntax:
Example: set-action include
Example: set-action exclude
For information on how to access the IPX monitoring environment, refer to "Getting Started (Introduction to the User circuit)" in the Access Integration Services Software User's Guide
Table 42 lists the IPX monitoring commands. The IPX monitoring commands allow you to view the parameters and statistics of the circuits and networks that transmit IPX packets. Monitoring commands display configuration values for the physical, frame, and packet levels. You also have the option of viewing the values for all three protocol levels at once.
Enter the IPX monitoring commands at the IPX> prompt. Table 42 summarizes the IPX monitoring commands.
Table 42. IPX Monitoring Command Summary
| Command | Function |
|---|---|
| ? (Help) | Displays all the commands available for this command level or lists the options for specific commands (if available). See "Getting Help". |
| Access-controls | Displays whether the global IPX filter (access control) is enabled, the IPX access-control statements, and the number of packets that have matched each access-control statement. |
| Cache | Lists the current contents of the routing cache. |
| Counters | Displays the number of routing errors and packet overflows. |
| Delete keepalive connection | Deletes a Keepalive filtering table entry. |
| Disable | Disables IPX globally or on specific IPX circuits. |
| Dump routing tables | Displays the contents of the routing table. |
| Enable | Enables IPX globally or on specific IPX circuits. |
| Filters | Displays whether global SAP filtering is enabled, the SAP filter statements, and a count of the SAP advertisements which have been filtered. |
| Filter-Lists | Accesses the IPX circuit filter console. This is where the RIP router, RIP SAP, and IPX circuit-based filters can be monitored. |
| IPXWAN | Lists IPXWAN information for IPXWAN point-to-point circuits. |
| Keepalive | Displays the status of each active client/server connection in the keepalive-filtering table. |
| List | Lists the current configuration or the IPX address of each enabled circuit. |
| Ping | Sends IPXPING packets to another host and watches for a response. This command can be used to isolate trouble in an internetwork environment. |
| Recordroute | Sends IPXPING record route packets to another host and watches for a response. Use this command to record and display the round-trip route between this device and another host. Use this information to isolate trouble in an internetwork environment. |
| Reset | Resets specific IPX circuits, global SAP filters, global IPX filters (access controls), static routes, static services, or the router, RIP, SAP, or IPX circuit-based filters (filter lists). |
| Sizes | Displays the configured sizes of the local node and remote network caches, and the number of cache entries currently in use. |
| Slist | Displays the contents of the IPX SAP server table. |
| Traceroute | Sends IPXPING trace route packets to another host and watches for a response. Use this command to trace and display each hop a packet takes on its way from this device to a destination host. Use this information to isolate trouble in an internetwork environment. |
| Exit | Returns you to the previous command level. See "Exiting a Lower Level Environment". |
Use the access-controls command to list the status of global IPX filters (access controls), the IPX access control statements, and a count of how many times each control statement has been followed.
Syntax:
Example: access-controls
IPX Access Controls: Enabled # T Dest Net Host Sock Sock Src Net Host Sock Sock Count 1 E 2 000000000000 0 FFFF 3 000000000000 0 FFFF 0 2 I 0 000000000000 452 453 0 000000000000 0 FFFF 0
Use the cache command to display the contents of the IPX routing cache.
Syntax:
Example: cache
Dest Net/Node Use Count via Net/Node Circ Ifc
420 1 412/000004200000 3 2
412 1 412/000000000000 3 2
412/000004200000 1 412/000004200000 3 2
The first entry shows that the remote network 420 can be reached over the serial circuit with IPX network number 412. The second entry is the IPX network 412. It is an Ethernet directly attached to the router. This entry is a general local network entry. There will be one general local network entry for each of the directly attached networks after they have begun forwarding IPX packets. The last entry is a local entry on an Ethernet. This IPX cache entry has been used to send 1 packet to the IPX node number 0000 0420 0000 on net number 412.
Use the counters command to display the number of routing errors and packet overflows that have occurred. In the example, the counters show no recorded errors.
Syntax:
Example: counters
Routing errors Count Type 0 Unknown 0 Checksum error 0 Destination unreachable 0 Hop count expired 0 circuit size exceeded Destination errors Count Type 0 Unknown 0 Checksum error 0 Non-existent socket 0 Congestion IPX input packet overflows Circ Ifc Name Count 1 0 Eth/0 0 2 1 PPP/0 0 3 2 PPP/1 0
Use the delete command to remove a Keepalive filtering table entry.
Syntax:
Example: delete 1
Use the disable command to disable IPX globally or on specific circuits.
Syntax:
Example: disable circuit 2
Example: disable ipx
Use the dump command to display the contents of the routing tables.
Syntax:
Example: dump
Type Dest Net Hops Delay Age(M: S) via Router Circ Ifc Dir 412 0 6 0: 0 412/000004000000 3 2 Dir 400 0 1 0: 0 400/020000000400 1 0 Dir 411 0 3 0: 0 411/400000000400 2 1 Stat 1 3 2 0: 0 400/010101010101 1 0 RIP 420 1 7 0:30 412/000004200000 3 2 Stat 444 2 2 0: 0 400/400000000444 1 0 Stat FFFFFFFD 14 3000 0: 0 400/111111111111 1 0
At the top of the display is the number of route and network entries used and the total available. If all the network entries are used, it is likely that the routing table is not large enough. Use the IPX configuration set maximum networks command to increase the size.
If all of the route entries are used, then there may be routes to IPX networks that cannot be kept, including new, incoming networks. If you do not want to increase the number of available routes, reduce the number of maximum routes per network.
Use the enable command to enable IPX globally or on specific circuits.
Syntax:
Example: enable circuit 2
Example: enable ipx
Use the filters command to display whether global SAP filtering is enabled, the SAP filter statements, and a count of the SAP advertisements that have been filtered.
Syntax:
Example: filters
IPX SAP Filters: Enabled Count Max Hops Type Service Name 0 5 4 FILESRV01
Use the filter-lists command to access the IPX type-Lists> prompt. Valid types are: router-lists, rip-lists, sap-lists, and ipx-lists.
For information about the commands available from this prompt, see "IPX Circuit Filter Monitoring Commands".
Syntax:
Example: filter-lists router-lists
Use the ipxwan command to list the IPXWAN information for IPXWAN point-to-point circuits.
Syntax:
Example: ipxwan detailed 3
Detailed information for IPXWAN link over circuit 3 interface 2, PPP/1 This side is the IPXWAN slave Neighbor Name: ipxwan-420 Neighbor Node ID: 420 Negotiated Routing Type: RIP/SAP Link Delay: 6 1/18th sec ticks Common Net#: 412 Connection Timeouts: 0 Connection Retries: 0 Timer Requests Sent: 1 Timer Requests Received: 1 Timer Responses Sent: 1 Timer Responses Received: 0 Info Requests Sent: 0 Info Requests Received: 1 Info Responses Sent: 1 Info Responses Received: 0
Example: ipxwan summary
Circ Ifc Name Common Net# NodeID Neighbor Name 3 2 PPP/1 412 420 ipxwan-420
Shows the status of each active client/server connection in the keepalive-filtering table.
Syntax:
Example:
Keepalive
Conn # Net / Node /Sock Net / Node /Sock
-----------------------------------------------------------------
0 272727/000000000001/4001 <-> 302/0000C911EF1C/4004
(server conn # 1, conn type: passive, last heard 1:00 ago)
1 272727/000000000001/4001 <-> 302/0000C911B0D9/4004
(server conn # 2, conn type: passive, last heard 1:00 ago)
Use the list command to list the current configuration or the IPX address of each enabled IPX circuit.
Syntax:
Example:
Circ Ifc Name Type Network/Address
1 0 Eth/0 Ethernet 400/020000000400
2 1 PPP/0 SCC Serial Line 411/400000000400
3 2 FR/0 FR PVC 412/000004000000
Frame Relay PVC circuit number: 16
4 3 FR/0 FR SVC 413/000004000000
Frame Relay SVC circuit name: Indianapolis
Use the ping command to make the router send IPXPING packets to a given destination ("pinging") and watch for a response. This command can be used to isolate trouble in an internetwork environment.
This process is done continuously. Matching received responses are displayed with the sender's IPX network number and node number, the number of hops, and the round-trip time in milliseconds.
To stop the pinging process, type any character at the monitoring. At that time, a summary of packet loss, round-trip time, and number of unreachable destinations will be displayed.
When a multicast address is given as destination, there may be multiple responses for each packet sent, one for each group member. Each returned response is displayed with the source address of the responder.
Notes:
Syntax:
Valid Values: X'1' to X'FFFFFFFD'
Default Value: 1
Valid Value: X'1' to X'FFFFFFFFFFFF'
Default Value: None
Valid Value: X'1' - X'FFFFFFFD'
Default Value: 1
Valid Value: X'1' - X'FFFFFFFFFFFE'
Default Value: None
Valid Value: 4 to Router Maximum
Default Value: 56 bytes
Valid Value: 1 to 60
Default Value: 1
Example: ping
Destination network number [1]? 20 Destination node number []? 00000001c200 Source network number [1]? 10 Source node number []? 000000019a00 Data size: [56]? Rate in seconds [1]? IPXPING 20/00000001C200: 56 data bytes 56 data bytes from 20/00000001C200: hops=3 time=0 ms 56 data bytes from 20/00000001C200: hops=3 time=40 ms 56 data bytes from 20/00000001C200: hops=3 time=0 ms ----20/00000001C200 IPXPING Statistics---- 3 packets transmitted, 3 packets received, 0% packet loss round-trip (ms) min/ave/max = 0/13/40
Use the recordroute command to report every forwarding circuit on the path to the destination and back again. If recordroute is invoked with no parameters, you will be prompted for all of them. Only the destination IPX network number and destination IPX node address are required.
There are two events that will end a recordroute. The first is when you press a key. The second is when the maximum number of recordroute request packets have been sent.
Syntax:
Valid Values: X'1' to X'FFFFFFFD'
Default Value: 1
Valid Values: X'1' to X'FFFFFFFFFFFE'
Default Value: None
Valid Values: X'1' to X'FFFFFFFD'
Default Value: 1
Valid Values: X'1' to X'FFFFFFFFFFFE'
Default Value: None
Valid Values: 1 to 60
Default Value: 1
Valid Values: 0 to 60
Default Value: 0
Example: recordroute
Destination network number [1]? 20
Destination node number []? 00000001c200
Source network number [1]? 10
Source node number []? 000000019a00
Rate in seconds [1]?
Number of packets to send [0]?
RECORDROUTE 20/00000001C200: 784 data bytes
784 data bytes from 20/00000001C200: seq_no=0 time=0 ms
Recorded Routes (in hex):
10/000000019A00
500/0000100A0000
500/0000100C0000
10/000000019000
10/000000019A00 (Final Destination)
784 data bytes from 20/00000001C200: seq_no=1 time=30 ms (same route)
784 data bytes from 20/00000001C200: seq_no=2 time=10 ms (same route)
...
784 data bytes from 20/00000001C200: seq_no=18 time=0 ms
Recorded Routes (in hex):
10/000000019A00
0/0000100A0000
20/00000001AE00
20/00000001C200
0/0000100B0000
10/000000019000
10/000000019A00 (Final Destination)
784 data bytes from 20/00000001C200: seq_no=19 time=0 ms (same route)
784 data bytes from 20/00000001C200: seq_no=20 time=70 ms (same route)
784 data bytes from 20/00000001C200: seq_no=21 time=0 ms (same route)
...
784 data bytes from 20/00000001C200: seq_no=48 time=0 ms
Recorded Routes (in hex):
10/000000019A00
500/0000100A0000
500/0000100C0000
10/000000019000
10/000000019A00 (Final Destination)
784 data bytes from 20/00000001C200: seq_no=49 time=0 ms (same route)
784 data bytes from 20/00000001C200: seq_no=50 time=0 ms (same route)
----20/00000001C200 RECORDROUTE Statistics----
53 packets transmitted, 38 packets received, 28% packet loss
5 unreachables, 0 no usable source addresses, 0 buffer unavailable
round-trip (ms) min/ave/max = 0/23/100
The entire path is reported only once on the first response or when the path changed. In the above example, the path changed twice.
Use the reset command to reset specific IPX circuits, global SAP filters, global IPX filters (access controls), static routes, static services, or the Router, RIP, SAP, or IPX circuit-based filters (filter lists).
Syntax:
Example: reset access-controls
Example: reset circuit 2
Example: reset filters
Example: reset filter-lists rip
Example: reset route-static
Example: reset sap static
Use the sizes command to display the configured sizes of the local node and remote network caches, and the number of cache entries currently in use. (This command does not display the contents of the caches.)
Syntax:
Example: sizes
Current IPX cache size:
Remote network cache size (max entries): 64
2 entries now in use
Local node cache size (max entries): 128
1 entries now in use
Use the slist command to display the contents of the IPX SAP server table.
Syntax:
Example: slist
9 entries used out of 32 State Typ Service Name Hops Age Net / Host /Sock SAP 4 PCS12 3 0:50 1/000000000048/0451 SAP 4 ACMPCS 3 0:50 1/00000000004A/0451 SAP 4 DEVEL2 1 0:50 11/0000000000B4/0451 SAP 4 PLANNING 2 0:50 BB/0000000000B7/0451 SAP 4 DEVEL 2 0:50 BB/0000000000EE/0451 SAP 4 SOFT2 1 0:30 704/000000000094/0451 SAP 4 SKYSURF1 2 0: 5 2C39ABE9/000000000001/0451 SAP 278 DIRTREE 2 0: 5 2C29ABE9/000000000001/4005 Stat 26B DIRTREE 2 0: 0 444/000000000001/0045
At the bottom of the display is the number of entries used and the total available. If all the entries are used, it is likely that the service table is not large enough. Use the IPX configuration set maximum services command to increase the size.
Use the traceroute command to report each hop a ping request takes on its way to a final destination. If traceroute is invoked with no parameters, you will be prompted for all of them. Only the destination IPX network number and destination IPX node address are required.
There are three events that will end a traceroute. The first is when you press a key. The second is when a response is received from the destination address. The third is when the maximum number of hops has been reached.
Syntax:
Valid Values: X'1' to X'FFFFFFFD'
Default Value: 1
Valid Values: X'1' to X'FFFFFFFFFFFE'
Default Value: None
Valid Value: X'1' to X'FFFFFFFD'
Default Value: 1
Valid Values:X'1' to X'FFFFFFFFFFFE'
Default Value: None
Valid Values: 4 to router maximum
Default Value: 56
Valid Values: 1 to 10
Default Value: 3
Valid Values: 1 to 60
Default Value: 1
Valid Values: 1 to 255
Default Value: 16
Example: traceroute
Destination network number [1]? 20 Destination node number []? 00000001c200 Source network number [1]? 10 Source node number []? 000000019a00 Data size: [56]? Number of probes per hop [3]? Wait time between retries in seconds [1]? Maximum Hops [16]? TRACEROUTE 20/00000001C200: 56 data bytes 1 10/000000019000: 0 ms * 500/0000100B0000 20 ms 2 * * * 3 20/00000001C200: 10 ms 60 ms 20 ms
The source IPX address of a traceroute response is reported only once as long as it does not change. In the above example, two different routers responded to the one hop traceroute request. This would happen if the route to the destination changed between probes.
There is other information reported by traceroute besides the round trip time of a probe:
Table 43 lists the commands available from the IPX type-Lists> prompt. Each of these commands is explained in detail in this section.
To access the IPX type-Lists> prompt, enter
filter-lists type at the IPX>
prompt. Valid types are router-lists, rip-lists, sap-lists, and
ipx-lists.
Table 43. IPX circuit Filter Command Summary
| Command | Function |
|---|---|
| Cache | Displays the contents of the filter cache for the specified circuit. Only the IPX filter supports a filter cache. |
| Clear | Clears the counters of the specified filter, or clears the counters of all filters of the current type (ROUTER, RIP, SAP, or IPX). |
| Disable | Disables a specified filter, or all filters of the current type. |
| Enable | Enables a specified filter, or all filters of the current type. |
| List | Lists a specified filter, or all filters of the current type. |
| Exit | Returns you to the previous command level. See "Exiting a Lower Level Environment". |
Use the cache command to display the contents of the filter cache. Only the IPX filter supports a cache. ROUTER, RIP, and SAP filters do not support a filter cache.
Syntax:
Example: cache filter 1
IPX IPX-Lists>cache filter 1 Hops Type Dst Net Address Sock Src Net Address Sock Action ---- ---- -------- ------------ ---- -------- ------------ ---- ------- 4 00 04000000 400003900000 802 03000040 400003004400 966 EXCLUDE 2 00 0004A300 400000233D00 952 0763A020 4000000DD100 920 INCLUDE
Use the clear command to clear the counters of the specified filter, or to clear the counters of all filters of the current type (ROUTER, RIP, SAP, or IPX).
Syntax:
Example: clear all
Example: clear filter 1
Use the disable command to disable specific filters or to disable all filters of the current type (ROUTER, RIP, SAP, or IPX).
Syntax:
Example: disable all
Example: disable filter 1
Use the enable command to enable specific filters or to enable all filters of the current type (ROUTER, RIP, SAP, or IPX).
Syntax:
Example: enable all
Example: enable filter 1
Use the list command to display information about specific filters, or about all filters of the current type (ROUTER, RIP, SAP, or IPX).
Syntax:
Example: list all
IPX IPX-Lists>list all
Filtering: ENABLED
Filter Lists:
Name Action
------------------------------ ----------
ipx01 EXCLUDE
ipx02 INCLUDE
ipx03 EXCLUDE
Filters:
Id Circ Ifc Direction State Default Cache
----- ----- ----- ---------- ---------- ---------- -----
1 1 0 INPUT ENABLED INCLUDE 10
2 1 0 OUTPUT ENABLED INCLUDE 10
3 2 1 INPUT DISABLED INCLUDE 10
4 2 1 OUTPUT DISABLED INCLUDE 10
Example: list filter 1
IPX IPX-Lists>list filter 1 Filters: Id Circ Ifc Direction State Default Cache ----- ----- ----- ---------- ---------- ---------- ----- 1 1 0 INPUT ENABLED INCLUDE 10 Filter Lists: Name Action Count ------------------------------ ---------- ---------- ipx01 EXCLUDE 43 ipx02 INCLUDE 23453