3Com 812 manual IPX Source and Destination Network Filtering Using CLI

Creating Filters Using Command Line Interface 6-33

IPX Source and Destination Network Filtering Using CLI

IPX network numbers must be specified as an network number no greater than 8-digits in hexadecimal format. The following rule example rejects IPX packets with a source address: 00-03-42-BF.

IPX:

1 REJECT src-net = 00-03-42-BF;

IPX Source and Destination Host Filtering Using CLI

Host addresses must consist of the 8-digit network number, followed by the four digit node number in hexadecimal format.

The following rule example accepts IPX packets with a destination address of

04-0B-43-AA:

IPX:

1ACCEPT dest-host = 04-0B-43-AA;

999DENY;

IPX Source and Destination Socket Number Filtering Using CLI

Sockets numbers represent communications interfaces that let an application access a network protocol by opening a socket and declaring a destination. Sockets are useful because they provide a simple way to direct an application onto the network.

You can compare the source or destination IPX socket number contained in the packet to the socket number defined in the filter rules. You must specify the type of the comparison.

For example, the following rule example accepts IPX packets with the IPX source socket number 0x001:

IPX:

1ACCEPT src-socket = 0x001;

999DENY;

IPX RIP Packet Filtering Using CLI

Routing Information Protocol (RIP) packets are used to identify all attached networks as well as the number of router hops required to reach them. The responses are used to update a router's routing table.

You define IPX RIP packet filtering rules in the IPX-RIP protocol section of the filter file. You can filter IPX RIP packets by network only.

The following rule example filters the route specified by the IPX network address

00-03-55-BF:

IPX-RIP:

1 REJECT network = 00-03-55-BF;