3Com OfficeConnect Remote 812 manual IPX Source and Destination Network Filtering Using CLI

Creating Filters Using Command Line Interface 6-53

If the router is listening for, or broadcasting RIP messages, you should allow them to pass in the appropriate direction(s). You define IP RIP filtering rules in the IP-RIP protocol section of the filter file.

For example, if you want to filter all routes except the one specified by the IP network address 195.12.254.45, you would create this rule:

IP-RIP:

1 ACCEPT network = 195.12.254.45;

999 DENY;

This filter only allows the route 195.12.254.45 into the route table. All other routes are rejected.

Spurious RIP messages can disrupt your routing tables. If you are listening for RIP messages on a given interface, you may wish to consider filtering out RIP updates from untrusted networks.

IPX Source and Destination Network Filtering Using CLI

IPX network numbers must be specified as an network number no greater than 8-digits in hexadecimal format. The following rule example rejects IPX packets with a source address: 00-03-42-BF.

IPX:

1 REJECT src-net = 00-03-42-BF;

IPX Source and Destination Host Filtering Using CLI

Host addresses must consist of the 8-digit network number, followed by the four digit node number in hexadecimal format.

The following rule example accepts IPX packets with a destination address of

04-0B-43-AA:

IPX:

1ACCEPT dest-host = 04-0B-43-AA;

999DENY;

IPX Source and Destination Socket Number Filtering Using CLI

Sockets numbers represent communications interfaces that let an application access a network protocol by opening a socket and declaring a destination. Sockets are useful because they provide a simple way to direct an application onto the network.

You can compare the source or destination IPX socket number contained in the packet to the socket number defined in the filter rules. You must specify the type of the comparison.

For example, the following rule example accepts IPX packets with the IPX source socket number 0x001: