Sapfilter, 208 | Black Box LRA005A-R2, LRS002A-R2, LRA001A-R2

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER REFERENCE MANUAL

remote	Router	eth0/802.3	00002111.02CF1F800013.87BE	1	PA
RNS	NDS	eth0/802.3	00000BAC.000000000001.4006	2	P
BRANCH	NW 386	eth0/802.3	00000BAC.000000000001.8104	2	P
BRANCH	FILE SERVER eth0/802.3		00000BAC.000000000001.0451	2	P
hq	Router	modem0	00001111.02CF1F800022.87BE	3	P
JUSTIN	FILE SERVER modem0		2F24F387.000000000001.04513		P
RNS	NDS	modem0	2CC6F6CA.000000000001.4006	3	P
RNS	NTS	modem0	2CC6F6CA.000000000001.0005	3	P
MAIN	NW 386	modem0	2CC6F6CA.000000000001.8104	3	P
MAIN	FILE SERVER modem0		2CC6F6CA.000000000001.0451	3	P
rolo	Router	modem0	00001111.00801B027488.87BE	3	P
Hollis	Router	modem0	00001111.00801B02742B.87BE	3	P
nmstest	Router	modem0	00001111.00801B024DD7.87BE	3	P

3.14 sapfilter

Filter SAP (service advertising protocol) packets using the SAP filter list

Syntax
sapfilter add name { [-iiface[/frame_type]]
[-qquery_type]
[-sserver_type]
[-nserver_name]	}

-t {allow deny nodial} [-f {inbound outbound}]

[-o {before after} existing_name] [-h {hopcount}]

sapfilter delete name sapfilter {enable disable} sapfilter flush

sapfilter move name [{before after} existing_name] sapfilter status

Description

The Service Advertising Protocol (SAP) exchanges services information between IPX routers and Novell servers. Use the sapfilter command to configure and modify filters for SAP packets. If enabled, all incoming and outgoing SAP packets can be filtered through SAP filters.

There are three IPX filter lists:

•General (filter command)

•RIP (ripfilter command)

•SAP (sapfilter command)

Packets are checked for filter matches using those three lists in that order. Filtering restrictions apply to packets destined for the Router and those transitioning through the Router. The result of passing a packet to the filtering module is a decision to allow or deny further processing of the packet. The next

208

Image 208

Black Box LRA005A-R2, LRS002A-R2, LRA001A-R2 manual Sapfilter, 208

Contents

Async Router AR-P Async Router AR-5 Sync Router Page Federal Communications Commission Trademarks USER’S Guide Contents Async Router AR-P, AR-5, and Sync Router USER’S Manual Appendix B Line Use 120 Specifications Connector SpecificationsIeee 802.3 AUI, DB15 Connector General BASE-T, RJ-45 8-Pin Connector DB9 ConnectorPower Input Connector RJ-11 Connector Applications IntroductionRouter Models Shared Router Features Prevents Unauthorized Network Access Example Async Router AR-5 LRA005A-R2 Features Sync Router LRS002A-R2 FeaturesFor digital data service For switched-56 data service Async Client Kit For Isdn serviceOperating Requirements Async Router AR-P, AR-5, and Sync Router USER’S Manual Connect Cables Inventory Async Router AR-P Connections Async Router AR-P Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Async Router AR-5 Connections Async Router AR-5 Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Sync Router Connections Sync Router Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Five Methods to Configure the Router Software Connect Host If you have a previously configured boot diskette If you have a previously configured boot diskette Select Host Connection Method Host Connection Methods This configuration requires the TCP/IP protocol on your LAN Procedure PC Using RouterVu Utility This configuration requires NetWare IPX protocol on your LAN Snap PC Using Serial Terminal Utility Async Router AR-P, AR-5, and Sync Router USER’S Manual Serial Terminal Async Router AR-P, AR-5, and Sync Router USER’S Manual Installation Summary Install SoftwareInstallation Procedure Async Router AR-P, AR-5, and Sync Router USER’S Manual Installation Examples Async Router AR-P, Async Router AR-5 Define LAN Parameters Define LAN parameters for local Router Define modem0 parameters Define Modem ParametersDefine modem1 if present Define modem3 if present Define client access shift for this Router Define modem4 if present Define clients Sync Router Define Sync/Modem Parameters Name and Password Syntaxes Parameters LAN Parameters IP Subnet Mask Default Values by Class Bits If you want to use a SecurID server Domain Name Suffix TypesIf you want to use a Radius server Async Router AR-P, AR-5, and Sync Router USER’S Manual Sync Router Parameters Public server IP address Do you want the firewall described in the documentation?Do you allow Telnet to the server n Client access shift-Refer to Section Configure Hosts on TCP/IP Network Configure and TestRouterlPaddress Routername Test TCP/lP Networks Using Ping Route add remotelPaddresslocalRouterIP addressl Refer to l Ping -sIPaddressofremoteRouter Enter syslog on Ping IPaddressofaremotenodePing -sIP address of localRouter Round trip time AASYNC Router AR-P, AR-5, and Sync Router USER’S Manual Test IPX Networks Using RouterVu IPX RouterVu tests Routervu -plocalRoutername Look for called out or serving call Routervu localRouternameLook for Ipxcp Opened Routervu -p servername Appendix a Networking Examples Dialup LAN-to-LAN Hamburg Passwd file paris / all2paris Name hamburg Paris HOME/BRANCH Office Designation Home Branch LAN-to-LAN Async Router Figure A-5. Modem as a Backup for a Synchronous Connection Synchronous LAN-to-LAN Routing table entries are Sync Router a How to Monitor Line Use Appendix B Line Use Dialup modemX volume off low medium high How to Limit Line Use Dialup interface quota mins Typical status display is List of predefined IP filters Filter add $OUTOK -f outbound -t allow Filter add $TCPOK -p tcpestab -t allowFilter add $FAKE25 -i iface -p tcpnew -s 25 -t deny Filter add $NOLOOP -s 127.0.0.0/8 -t deny How to disable the NLO filters How to enable all RLO filtersSimple IP filter example Long IP filter example #These filters will allow mail to and from the host After filtering, reestablish dialup time quotas Appendix C Troubleshooting LED descriptions Async Router AR-P Leds Async Router AR-5 Leds Sync Router Leds Router Commands For TCP/IP Networks only Syntax Examples Initial Configuration/Start-up Problems Routervu c 1995 Rockwell Network Systems Building list Async Router AR-P, AR-5, and Sync Router USER’S Manual Router Cannot START-LEDS Stay LIT Password -pnewpassword Following message displays during configuration AT Return Operating Problems Pause + + + pause Ping -sipaddressof localnode Ping ipaddressoflocalnodeApproach Ping ipaddress of remoteRouter Network Protocol Phase open for Async Router AR-P, AR-5, and Sync Router USER’S Manual Possible cause-CHAP failure 100Time interfaceDialing from address to address protocol 101 102 Client Problems 103 Returning Your Router for Repair 104 Configuration Appendix D InteroperabilityRadius Servers 105 SecurID Servers 106 Config modify 107Cd /var/ace Bin Put sdconf.rec Quit Cisco Router Interoperability 108 Table D-1. Cisco Command Language Modes and Their Uses 109 110 Ethernet Connection Cisco to Router Synchronous line Cisco to Router 111Dialup connection Cisco to Router 112 Figure D-2. Dialup Connection Cicso to Router 113 Dialing Out Cisco to Modem to Router \T-meansinsert the telephone number here 114Cisco dialer script for Router IPX Synchronous Routers TCP/lP Synchronous Routers115 This information only applies to the Sync Router Interoperability with CSU/DSUs 116Black BOX CSU/DSU MS, Eazy CSU/DSU MS, Adtran DSU III AR Local network options 117 Adtran ISUNetwork options DTE options 3 CM-1056E, Larse S5600, RACAL-MILGO4556 118Motorola TA220/TA220K 119 Other CSU/DSUS Appendix E Glossary 120 121 122 IPXWAN-internet packet exchange protocol for WANs 123 124 125 126 Appendix F Installation Reference Root and root passwordsRouter Parameters 127 Default route through Eth0 sync0 modem0 128Router Pick one only Client Authentication Method choose one method only Ethernet Parameters129 Ethernet eth0 port Sync Parameters 130Sync0 port For Sync Router only Remote Site via a leased line If this modem is to be used for remote client access Modem Parameters131 If the Remote System is a Router 132 133 Client Parameters Planner For the RouterFor each Client 134 Link Password Example Router Link Passwords Example/Worksheet135 Link Passwords Worksheet Your Site 136On Router Remote Sites Site0 Reference Guide 137 138 Contents 140 Quick Reference Conventions Used in This ChapterInterface Addresses 141 Generic Commands 142 143 Update iface timeout mins Update iface now Update iface init on off144 145 TCP/IP-only Commands 146 Netstat -a -s -r -m 147Rip accept routeraddr RouterVu Commands 148Rip duplicate on off rip merge on off Route 149 150 List to screen all available Routers 151 General InfoAbout TCP/IP and IPX modes CONFIG.NET file supporting TCP/IP and IPX routing CONFIG.NET Example152 153 154 Generic Commands 155 Access shift Syntax Access shift shiftstart shiftstop Mtwrfsu156 Description See also client access client add client modify Asystat157 Syntax Asystat iface iface 158 Asystat modem0 Subcommands and parameters Authenticate159 160 ClientClient add -e clientname 161 Config Config firewall ifaceDate 162 Defaultmode Config reset modify Ipx Tcpip163 Specifies seconds and is optional Dialup Syntax Line mode dialer commands164 Iface modem0-4, sync0 165Dialup iface demandbackoff phone# secs Dialup iface backup add phone# Disconnecting the backup number on the next dialup166 Modem0-4, sync0 Dialup iface loginname name 167Dialup iface idletime secs Dialup iface inactive Dialup iface loginpwd password Dialup iface reset168 Dialup iface logprompt on off Dialup iface volume off low medium high 169Dialup iface script file Dialup iface warning mins History Help170 Logout Hostname171 Memory MonitorPasswd 172 173 PerformancePerformance 174 18 pppIpcp negotiation 175 Iface Physical interface 176Allow on off 177 Ppp iface lcp local remote accm bitmap allow on offChap Pap Ppp iface lcp local remote default 178Ppp iface lcp local remote acfc On off allow on off Ppp iface lcp local remote magic On off value allow on off Ppp iface lcp timeout seconds 179 180 181 19 psSyntax Description Reboot RebootStart/stop 182 Trace 22 tip183 24 tux 184Eth0, modem0-4, sync0 Limit traces to packets received on the interface Update iface now Update185 27 who Version186 IPX-only commands 187 188 IPX Addresses Reserved Destination Socket Numbers189 Example IPX addresses 190 IPX Server TypesTable B-2. Typical IPX Server Types IPX Packet Types Filter191 Table B-3. IPX Packet Types Filter add name 192Iface-eth0, modem0-4, sync0 Filter enable disable 193Filter delete name Filter flush Ifconfig Ifconfig iface speed bps194 Filter status Ipx priority Ipx routing enable disable ipx spx Ipx195 Number Netstat 196 Ping Subcommands and parameters Ping servername197 Ripfilter 198Ping -sservername routername network.nodeaddress Ping -sservername routername network.nodeaddress count Ripfilter add name 199Allow deny nodial 200 Route 201 Iface-modem0-4, sync0 202Iface-eth0 203 Route -f 204 Route add 12 modem0Route add 2F eth0/II 02CF1F302018 6 Route delete Route delete 2F 13 sap 205 Sap broadcast iface /frametype enable disable 206Sap add name iface /frametype servertype serveraddr hops Sap delete name 207 Sap -f Sapfilter 208 209 Sapfilter enable disable 210Sapfilter delete name Sapfilter flush Spoof 211Sapfilter status Filter Ripfilter Syntax Tcp/ip tcp/ipcommand param Description Router is in IPX mode16 tcp/ip 212 TCP/IP-only Commands 213 214 ArpArp 215 Arp -f Domain 216Domain listservers Domain suffix domainsuffix 217 Syslog trap both -i iface Inbound outboundP, -l, -i, or -f Ssrcaddr/bits srcport Ddestaddr/bits destport 218Syslog trap both Iface-eth0, modem0-4, sync0 Inbound outbound 219Allow deny nodial unreach Icmp 220Filter spoof iface allow deny syslog trap Filter try srcaddr -sport destaddr -dport -pproto 221 222 Metric hopsMtu size Rip active passive off 223 SubcommandsIp address hostaddr Syntax Ipx ipxcommand param Description 224 Subcommands and protocols Ping destaddr 225 11 rip 226Rip netmask list Rip add hostaddr seconds flags 227 Rip delete hostaddrRip duplicate on off Rip merge on off Rip netmask delete netaddr/netbits 228Route lookup destaddr Route add default iface routeraddr metric 229Route add destaddr/bits iface routeraddr metric Route addprivate destaddr/bits iface routeraddr metric Snmp 230Route delete destaddr/bits iface Snmp set community communityname -p ro rw -t on off 231 Snmp delete community communitynameSnmp set authtrap on off Snmp set contact contactstring 232 SyslogSyslog on off 233 Syslog address hostaddrSyslog class classvalue Syslog message messagestring Tcp reset tcbaddr 15 tcp234 Syslog status Traceroute 235Tcp status tcbaddr Tcp window size 236 17 udpUdp status Appendix a System Messages 237 Syslog Messages 238Chap Group Iface Chap peer says salutationstring Iface dialer script failed failuremessage 239Iface Dialing for destinationaddr 240 Iface line speed modemlinespeed 241 Iface V.25bis call failed reasonreturned 242 243 IPX GroupPAP Group RIP Group Console Messages 244Snmp Group ARP Group 245 Ifconfig Group 246Ipfilter Group Iproute Group 247 Ping Group 248PPP Group 249 System Group TCP Group 250TIP Group Trace Group 251Traceroute Group Appendix B Dialing Scripts Standard Dialing Procedure252 Dialer Script Procedure 253 Sample Dialer Script 254Wait Wait msec string Wait msec string speed Logging into Remote Systems Using Dialer Scripts 255 256 Dialup modemX inactive tip modemXAT Return Atdt 1-xxx-yyy-zzzzRETURN 257 Modem Control Signals Dialup iface loginpwd loginpwdControl the Modem Speaker’s Volume 258 259 New Features, Release Appendix C Release 4.2 NotesUse Routers to 260 Sync Router Only 261 Outstanding Issues, Release Special Outstanding IssuesGeneric Issues For All Routers TCP/IP Mode Issues 263 264 RouterVu Issues Using NetWare Over Modem LinesReconfigure Your Local VLM-Based Clients NetWare Dialup Considerations, Release 266 How to Upgrade to ReleaseMethod 2 If you do use custom dialer scripts 267 If you have the boot diskette and prefer to use a DOS hostFtp nhipaddr Use the Router’s IP address How to Make Previous Releases Compatible with Release 268 Using Analog Leased Lines? 269 270 271 Connecting to an Internet Service Provider ISP?Intended IP addresses at your site Ppp iface pap user username password for PAP config save 272 273 Ppp iface chap user username password For ChapSample dialer script 274 Copyright 1996. Black Box Corporation. All rights reserved