1. © Synergon Informatika Rt., 1999 Chapter 4 Managing Novell IPX/SPX Traffic

2. 2 Objectives Upon completion of this chapter, you will be able to perform the following tasks: Describe IPX/SPX traffic management issues Filter IPX traffic Manage IPX/SPX traffic over WAN connections Verify IPX/SPX traffic operation

3. 3 Novell IPX/SPX Overview

4. 4 IPX/SPX Protocol Stack Application Presentation Session Transport Network Physical Data Link 7 6 5 4 3 2 1 NCP Novell SAP Novell RIP NetBIOS Internetwork Packet eXchange (IPX) SPX Medium Access Protocols (Ethernet, Token Ring, WAN, Others) 7 6 5 4 3 2 1 OSI Reference ModelNetWare 3.x/4.x Protocols

5. 5 IPX Addressing Network.Node Network 4a1d Network 2c 2c.0000.0c56.de33 S0 E1 E0 4a1d.0000.0c56.de33 3f.0000.0c56.de34 Network 3f l Each interface has a unique address l MAC address is part of network address

6. 6 Managing IPX/SPX Traffic Watchdog SPX Keepalive RIP SAP Watchdog SPX Keepalive SAP Watchdog SAP Watchdog SPX Keepalive SAP RIP

7. 7 IPX Traffic Filtering

8. 8 IPX Traffic Filtering Overview l IPX access lists restrict traffic l SAP filtering controls IPX broadcasts traffic Network aa Watchdog SPX Keepalive RIP SAP Network cc Network bb A B Access List SAP Table

9. 9 IPX Access List Review Router (config) # access-list access-list-number {permit | deny } protocol source-network.source-node source-socket destination-network destination-node.destination-network destination-socket l Defines a traffic filter for IPX l IPX standard access lists are numbered 800-899 l IPX extended access lists are numbered 900-999 Router (config-if) # ipx access-group access-list-number l Links an IPX traffic filter to an interface

10. 10 IPX SAP Overview SAP Table S-C S-D C-2 S-AS-BC-1 C-3 GNS l SAPs synchronize the list of available services l GNSs are client-based SAP broadcasts

11. 11 SAP Operation SAP Table S-C S-D C-2 S-AC-1S-B C-3 l Router does not forward individual SAP broadcasts l SAP table is advertised every 60 seconds

12. 12 SAP Filters Step1 Access List SAP Step2 SAP Output Filter Input Filter

13. 13 SAP Filter Configuration Router (config) # access-list access-list-number { deny | permit } network [.node ] [ network-mask node-mask ] [ service-type [ server-name ]] l Creates an entry in a SAP filter list Router (config-if) # ipx input-sap-filter access-list-number l Applies input SAP filter to the interface Router (config-if) # ipx output-sap-filter access-list-number l Applies output SAP filter to the interface

14. 14 SAP Filter Example 1 access-list 1001 permit -1 4 ! Interface serial 0 ipx network 10 ipx output-sap-filter 1001 access-list 1001 permit -1 4 ! Interface serial 0 ipx network 10 ipx output-sap-filter 1001 access-list 1000 deny -1 47 access-list 1000 permit -1 ! Interface serial 0 ipx network 10 ipx output-sap-filter 1000 access-list 1000 deny -1 47 access-list 1000 permit -1 ! Interface serial 0 ipx network 10 ipx output-sap-filter 1000 B A D C Token Ring Token Ring B Network 4a 1234.5678.1212 Network 9e Network 10 Network 3d E 0 E1 S0 T0 A B

15. 15 SAP Filter Example 2 access-list 1002 deny 2e.0000.0000.0001 4 access-list 1002 permit -1 interface ethernet 0 ipx network 9e interface ethernet 1 ipx network 4a Interface serial 0 ipx output-sap-filter 1002 access-list 1002 deny 2e.0000.0000.0001 4 access-list 1002 permit -1 interface ethernet 0 ipx network 9e interface ethernet 1 ipx network 4a Interface serial 0 ipx output-sap-filter 1002 B A D C Token Ring Token Ring B Network 4a Network 9e Network 1 Network 3d E0 E1 S0 T0 A B Internal Network 2e File services from Novell server C not advertised to A or B

16. 16 Filtering RIP Traffic Token Ring Token Ring A Network 4a B C D Network 5b Network 3d E1 S1 S0 Network 9e access-list 877 permit 9e ! Interface serial 0 ipx output-network-filter 877 access-list 877 permit 9e ! Interface serial 0 ipx output-network-filter 877 access-list 877 permit 9e ! Interface serial 0 ipx output-network-filter 877 access-list 877 permit 9e ! Interface serial 0 ipx output-network-filter 877

17. 17 SAP/GNS Operation C-1S-AS-B SAP Table ipx gns-round-robin Router (config-if) # l Router acts like a server by building SAP table l Router responds to GNS with a list of known services l Round-robin service available to allocate servers evenly

18. 18 Limit GNS Responses S-A S-B S-C S-D C-1 C-2 Client-1 only needs to connect to Server-D Solution: SAP input filter on E0 Client-2 needs to connect to all servers Problem: Cannot filter SAPs for Client-1 Solution: GNS response filtering on E1 ipx output-gns-filter access-list-number Router (config-if) # l Links a GNS filter to an interface where Get Nearest Server requests are expected E0 E1 E2

19. 19 Static SAP Table Entries C-1 C-2 C-3 C-4 S-A S-B ipx sap 107 MAILSERV 160.0000.0C01.2B72 8104 1 ipx sap 4 FILESERV 165.0000.0C01.3B16 451 1 ipx sap 107 MAILSERV 160.0000.0C01.2B72 8104 1 ipx sap 4 FILESERV 165.0000.0C01.3B16 451 1 l MAILSERV and FILESERV are static SAP table entries E0 E1 E2 SAP Table File Server 165.0000.0C01.3B16 Mail Server 160.0000.0C01.2B72

20. 20 SAP Interval S1 Token Ring Token Ring SAP updates every minute S2 S3 C1 S0 A A SAP updates every 10 minute SAP updates every minute interface serial 0 ipx sap-interval 10 l Routers A and B exchange SAP updates every 10 minutes

21. 21 Managing IPX Traffic over WAN Links

22. 22 IPXWAN Overview hello NLSP on 0 Options MPR l Use PPP and HDLC links for IPXWAN connection l IPXWAN nodes on link introduce themselves l Agree on IPX protocol (and network number if numbered RIP IPXWAN version 1) l Negotiate IPXWAN delay, bandwidth and other oprions

23. 23 Configuring IPXWAN ipx routing ipx internal-network 48b ipx router nlsp area-address 0 0 ! Interface ethernet 0 ipx network 6c encapsulation sap ipx nlsp enable interface ethernet 1 ipx network 41 encapsulation novell-ether ipx nlsp enable ! interface serial 0 encapsulation ppp ipxwan ipx nlsp enable ipx routing ipx internal-network 48b ipx router nlsp area-address 0 0 ! Interface ethernet 0 ipx network 6c encapsulation sap ipx nlsp enable interface ethernet 1 ipx network 41 encapsulation novell-ether ipx nlsp enable ! interface serial 0 encapsulation ppp ipxwan ipx nlsp enable Enables IPXWAN on serial 0 interface Network 6c E0 S0 E1 Network 4a PPP

24. 24 Connecting Discontiguous Networks Novell IPX l IP tunnel interface can connect the Novell IPX networks IP

25. 25 Tunnel Interface Tunnel IPX Server IPX Client l A tunnel interface creates a point-to-point link between isolated hosts l The interface uses an IP network as the transport mechanism IP Network

26. 26 Tunnel Configuration Tunnel IPX Server IPX Client Tunnel Configuration Tasks l Create a tunnel interface l Configure the IPX address l Set the source address l Set the destination address l Define the tunnel encapsulation method IP Network

27. 27 Tunnel Configuration Example Tunnel IPX Network 2110 IPX Network 2114 IP Network 131.108.13.1 E0 S0 131.108.13.2 S0E0 Interface s 0 ip address 131.108.13.1 255.255.255.0 ! Interface tunnel 0 ipx network 2130 tunnel source s 0 tunnel destination 131.108.13.2 tunnel mode gre ip no ip address Interface s 0 ip address 131.108.13.1 255.255.255.0 ! Interface tunnel 0 ipx network 2130 tunnel source s 0 tunnel destination 131.108.13.2 tunnel mode gre ip no ip address

28. 28 Verifying IPX Traffic Operation

29. 29 Verifying IPX Traffic Operation Router # show ipx interface l Displays the status of the IPX interfaces Router # show ipx route l Lists the entries of the IPX routing table Router # show ipx cache l Shows the entries in the IPX fast-switching cache

30. 30 Verifying IPX Traffic Operation (cont.) Router # show ipx servers l Lists the servers discovered through SAP advertisements Router # show ipx traffic l Shows IPX packet information

31. 31 Summary Traffic congestion exists in all large networks Congestion in IPX networks is handled by: Traffic filters SAP filters GNS filters You can use IPXWAN and tunnel interfaces for IPX-based WAN links