Advanced Configuration and Management Guide

IPX SAP Filters

IPX Service Advertisement Protocol (SAP) filters control client access to IPX servers.

Actions

An IPX SAP filter applied to inbound packets learns or drops advertisements for the specific services.

An IPX SAP filter applied to outbound traffic advertises or does not advertise services.

Scope

You configure IPX SAP filters globally, then apply them to specific ports.

Syntax

Use the following CLI commands or Web management interface panels to configure IPX SAP filters.

Table C.17: IPX SAP Filters

CLI syntax

Web management links

 

 

HP9300(config)# ipx sap-filter <filter-num> permit deny

Configure->IPX->SAP Filter

<server-type> any <server-name> any

 

HP9300(config-if-1/1)# ipx sap-filter-group in out <filter-list>

 

 

 

Appletalk Filters

AppleTalk filters control access to AppleTalk zones and networks.

AppleTalk zone filters permit or deny advertisement of zone names but allow network information to be learned and forwarded. Users cannot see the zone names in their Choosers but you can ping the networks. Zone filters are quite useful for reducing protocol overhead caused by “chatty” AppleTalk traffic. Use zone filtering to block information from a specific routing switch to Macintosh computers.

AppleTalk network filters also can filter network information. When you configure an AppleTalk zone filter to deny zones, you can configure the filter to also deny the network information. To configure an AppleTalk filter to filter network information, use the RTMP filtering option with the filter.

Figure D.6 shows an example of an AppleTalk zone filter. In this example, Macintosh computers in the Marketing zone cannot see the Engineering zone. RTMP filtering is not used on this filter. Therefore, users in the Marketing zone can still ping individual devices in the Engineering zone. However, the overhead caused by unnecessary zone information exchanges between the two groups is eliminated.

To prevent users in the Marketing zone from even pinging individual devices in the Engineering zone, the RTMP filtering option can be used with the filter.

C - 20