208 | Chapter 12 - IPX Filtering |
|
|
•Filter rules specifying out are only applied to server information being sent from the device.
•Filter rules specifying both are applied to server information in both directions.
IPX SAP Filter Rule Modifiers
The source address, destination address, source interface or destination inter- face can be specified using the from and to options. These keywords modify the global nature of a SAP filter rule.
•from <IPX address> or from <interface> This modifier tells the device to apply the rule only to server information coming from a specified IPX address, or interface (e.g. Ethernet 0, WAN 1, etc.).
The IPX address parameter is specified as a hexadecimal network number and node number separated by a dash ( e.g.
•to <IPX address> or to <interface> This modifier tells the device to apply the rule only to server information being sent to a specified IPX address (where the address is in the same format as discussed above), or interface (e.g. Ethernet 0, WAN 1, etc.).
Filter rules can also optionally be set to modify some SAP information as it is handled by the device.
•metricin <increment value> This modifier tells the device to increment the metric on incoming servers which match the filter rule. The value to increment by can be from 1 to 15.
•metricout <increment value> This modifier tells the device to increment the metric on outgoing servers which match the filter rule. The value to increment by can be from 1 to 15.
IPX SAP Filter Rule Notification
Filter rule matches can optionally cause a log message to be sent. By default, no logging of matches is performed. See the section on the Logging Config- uration Dialog Box of this manual for more information.
•log The log keyword causes the device to send information about the packet to syslog when the condition of the rule is met.
IPX SAP Filter Rule Examples
The following example specifies a rule set to ignore any server named “Test Server.” The permit line states that all other servers should be entered into the device’s SAP table.
