思科网络技术培训之：IPX协议

Uponcompletionofthischapter,youwillbeabletoperformthefollowingtasks:DescribebasicIPXoperationDeterminetherequiredIPXnetworknumberandencapsulationtypeforagiveninterfaceEnabletheNovellIPXprotocolVerifyIPXconnectivityConfigureandmonitorIPXAccessListsandSAPtrafficfiltersObjectivesNetWare

FileServerNetWare

FileServerCiscoRoutersinNetWareNetworksNovellNetWareProtocolStack1234567MediaAccessProtocols(Ethernet,TokenRing,WAN,others)PhysicalDataLinkNetworkSessionTransportPresentationApplicationNovellNetWareProtocolsOSIReferenceModelIPX(InternetworkPacketExchange)SPXSAPRIPNLSPNETBIOSAPPLICATIONSNCPAddressis80bits(network.node)InterfaceMACaddressispartoflogicaladdressMultipleLANencapsulationsperinterfaceDefaultroutingprotocolisIPXRIPNovellservicesareadvertisedusingSAPNetWareclientsfindserverswithGNSpacketsKeyNovellNetWareFeaturesNovellIPXAddressingE0E1S048bits(fromMAC)Node0000.0c56.de33NovellIPXAddressingE0E1S048bits(fromMAC)Network.Node2c.0c56.de33Network4a1dNetwork3fNetwork2cUpto32bitsBasicNetWareOperationNWFileServerBasicNetWareOperation(cont.)NWFileServer0080.C712.3456-Layer2MacNICBasicNetWareOperation(cont.)NWFileServer1a.0080.C712.3456-Layer3NetNICNWFileServerBasicNetWareOperation(cont.)1a.0080.C712.3456-Layer3NetNetWareServices2b.0000.0000.0001-InternalNetNIC-NWSoftwareRouterBasicNetWareOperation(cont.)NetWareServicesNICBasicNetWareOperation(cont.)NetWareServices2b1a......NICRoutingTableBasicNetWareOperation(cont.)-4PrintServer-47NetWareServices2b1a......ServicesTable447…...NICRoutingTableBasicNetWareOperation(cont.)-4PrintServer-47NetWareServices2b1a......ServicesTable447…...PeriodicBroadcastsNICRoutingTableNetWareServices2b1a......ServicesTable447…...PeriodicBroadcasts-Layer2Mace0NICRoutingTableBasicNetWareOperation(cont.)Networkand

EncapsulationmustmatchNetWareServices2b1a......ServicesTable447…...PeriodicBroadcasts1a.-Layer3Nete0s0NICRoutingTableBasicNetWareOperation(cont.)Networkand

EncapsulationmustmatchNetWareServices2b1a......ServicesTable447…...PeriodicBroadcasts1a.-Layer3Nete0s01b.RoutingTable1a1b2b...NICRoutingTableBasicNetWareOperation(cont.)NetWareServices2b1a1b...ServicesTable447…...PeriodicBroadcasts1a.e0s01b.RoutingTable1a1b2b...NICRoutingTableBasicNetWareOperation(cont.)NetWareServices2b1a1b...ServicesTable447…...PeriodicBroadcastse0s0RoutingTable1a1b2b...447…...ServicesTableNICRoutingTable1a.1b.BasicNetWareOperation(cont.)NetWareServices2b1a1b...ServicesTable447…...PeriodicBroadcastse0s0RoutingTable1a1b2b...447…...ServicesTableNWClientNICNICGNSRoutingTable1a.1b.BasicNetWareOperation(cont.)RoutingTableNetWareServices2b.0000.0000.0001(IPXInternalNetwork)2b1a1b...ServicesTable447…...PeriodicBroadcastse0s0RoutingTable1a1b2b...447…...ServicesTableNWClientNICNICGNSGNSResp1a.1b.BasicNetWareOperation(cont.)DeterminingtheIPXNetworkNumberAsktheNetWareadministrator

DeterminingtheIPXNetworkNumbercdpAsktheNetWareadministrator

UseCiscoIOScommandsto

determinetheIPXnetworknumberonaneighborCiscorouter

DeterminingtheIPXNetworkNumberAsktheNetWareadministrator

UseCiscoIOScommandsto

determinetheIPXnetworknumberaneighborCiscorouter

UseNetWarecommandtocheckontheNetWareNetWare

configcdpEthernet_802.3(defaultforNetWare3.11orearlier)

802.3IPXMultipleNovellEncapsulationsFourtypesofEthernetframingNovellNameFramingStructureEthernet_802.2

(defaultforNetWare3.12andlater)802.3802.2LLCIPXEthernet_802.3(defaultforNetWare3.11andearlier)

802.3IPXMultipleNovellEncapsulationsFourtypesofEthernetframingNovellNameFramingStructureEthernet_802.2

(defaultforNetWare3.12andlater)802.3802.2LLCIPXEthernet_802.3(defaultforNetWare3.11andearlier)802.3IPXMultipleNovellEncapsulationsFourtypesofEthernetframingEthernet_IIEthernetIPXNovellNameFramingStructureEthernet_802.2

(defaultforNetWare3.12andlaterversions)802.3802.2LLCIPXEthernet_SNAP802.3802.2LLCSNAPIPXEthernet_802.3(defaultforNetWare3.11andearlierversions)

802.3IPXMultipleNovellEncapsulationsEthernet_IIEthernetIPXNovellNameFramingStructureFourtypesofEthernetframingCiscoEncapsulationTypesNovellIPXNameCiscoIOSNameEthernetTokenRingFDDIFDDI_SNAPFDDI_802.2FDDI_RawEthernet_802.3Ethernet_802.2Ethernet_IIEthernet_SNAPToken-RingToken-Ring_SNAPNovellIPXNameCiscoIOSNameToken-RingToken-Ring_SNAPEthernetTokenRingFDDIFDDI_SNAPFDDI_802.2FDDI_RawEthernet_802.3Ethernet_802.2Ethernet_IIEthernet_SNAPCiscoEncapsulationTypesSpecifyencapsulationwhenyouconfigureIPXnetworksnovell-ethersaparpasnapsapsnapsnapsapnovell-fddiWrittenExercise:IPXParameterPlanningEncapsulationNetwork

AddressR3Interface

NameS0S1E1WritetheIPXaddressesandencapsulationtypesforR3S0hdlcNetworkb001E0SAPE1S1S1hdlcS0Networkc0b0Networkd100Networkb1b0E0novell-etherR3R4E1R2R1WrittenExercise:IPXParameterPlanningEncapsulationNetwork

AddressR3Interface

NameS0S1E1d100WritetheIPXaddressesandencapsulationtypesforR3S0hdlcNetworkb001E0SAPE1S1S1hdlcS0Networkc0b0Networkd100Networkb1b0E0novell-etherR3R4E1R2R1WrittenExercise:IPXParameterPlanningEncapsulationNetwork

AddressR3Interface

NameS0hdlcS1E1d100WritetheIPXaddressesandencapsulationtypesforR3S0hdlcNetworkb001E0SAPE1S1S1hdlcS0Networkc0b0Networkd100Networkb1b0E0novell-etherR3R4E1R2R1WrittenExercise:IPXParameterPlanningEncapsulationNetwork

AddressR3Interface

NameS0hdlcS1E1c0b0d100WritetheIPXaddressesandencapsulationtypesforR3S0hdlcNetworkb001E0SAPE1S1S1hdlcS0Networkc0b0Networkd100Networkb1b0E0novell-etherR3R4E1R2R1WrittenExercise:IPXParameterPlanningEncapsulationNetwork

AddressR3Interface

NameS0hdlcS1hdlcE1c0b0d100WritetheIPXaddressesandencapsulationtypesforR3S0hdlcNetworkb001E0SAPE1S1S1hdlcS0Networkc0b0Networkd100Networkb1b0E0novell-etherR3R4E1R2R1WrittenExercise:IPXParameterPlanningEncapsulationNetwork

AddressR3Interface

NameS0hdlcS1hdlcE1b1b0c0b0d100WritetheIPXaddressesandencapsulationtypesforR3S0hdlcNetworkb001E0SAPE1S1S1hdlcS0Networkc0b0Networkd100Networkb1b0E0novell-etherR3R4E1R2R1WritetheIPXaddressesandencapsulationtypesforR3EncapsulationNetwork

AddressR3Interface

NameS0hdlcS1hdlcE1novell-etherWrittenExercise:IPXParameterPlanningS0hdlcNetworkb001E0SAPE1S1S1hdlcS0Networkc0b0Networkd100Networkb1b0E0novell-etherR3R4E1b1b0c0b0d100R2R1NovellUsesIPXRIPforRoutingUsesticks(about1/18sec.)andhopcount(maximumof15hops)RIPbroadcastsroutinginformationtoneighborroutersevery60seconds,bydefaultSAPbroadcastsNetWareservicesinformationtoneighborroutersevery60seconds,bydefaultRIPSAPTablesRIPSAPTablesRIPSAPTablesRIPSAPTablesDCBAServeradvertisesSAPpacketsadvertiseallNetWarenetworkservicesServiceAdvertisingProtocol(SAP)ServeradvertisesprintserviceServeradvertisesClientASAPSAPpacketsadvertiseallNetWarenetworkservicesCanaddexcessivebroadcasttraffictothenetwork

ServeradvertisesprintserviceServeradvertisesRouterAlistenstoSAPsSAPSAP

tableClientAServiceAdvertisingProtocol(SAP)GetNearestServerProtocol(GNS)FileServerNetWare

ClientGetNearestServerProtocol(GNS)FileServerNetWare

ClientGNSrequestGNSisabroadcastfromaclientneedingaserverGetNearestServerProtocol(GNS)FileServerNetWare

ClientGNSrequestGNSisabroadcastfromaclientneedingaserverNetWareserverandCiscoroutergetthisSAPpacketGetNearestServerProtocol(GNS)GNSisabroadcastfromaclientneedingaserverNetWareserverandCiscoroutergetthisSAPpacketNetWareserverprovidesGNSresponseFileServerNetWare

ClientGNSrequestGNSreplyNovellIPXConfigurationTasksGlobalconfigurationIPXroutingRIPRIPIPXNovellIPXConfigurationTasksGlobalconfigurationIPXroutingLoadsharingRIPRIPIPXRIPRIPNetwork9eencaparpaNetwork4aencapsnapIPXNovellIPXConfigurationTasksGlobalconfigurationIPXroutingLoadsharingInterfaceconfigurationNetworknumbersEncapsulationtypeNovellIPXGlobalConfigurationipxrouting[node]Router(config)#EnablesNovellIPXroutingRouter(config)#ipxmaximum-paths

pathsNovellIPXGlobalConfigurationConfiguresround-robinloadsharing

overmultipleequalmetricpathsDefault=1Router(config)#ipxrouting[node]EnablesNovellIPXroutingNovellIPXInterfaceConfigurationRouter(config-if)#ipxnetworknetwork

[encapsulationencapsulationtype]EnablesIPXroutingontheinterfaceAssignsIPXnetworknumberSelectsoptionalencapsulationtypeNetWareSubinterfacesFS1NW3.11FS2NW4.11e0.1NICNICEthernet_802.3Ethernet_802.21a-novell-ether1b-sape0.2NovellIPXInterfaceConfigurationRouter(config-if)#ipxnetworknetwork

[encapsulationencapsulation-type][secondary]AssignprimaryandsecondarynetworknumberandencapsulationRouter(config)#interfacetype

number.subinterface-numberSpecifyasubinterface,thenenableIPXrouting

withencapsulationtype

ORRouter(config-subif)#ipxnetworknetwork

[encapsulationencapsulationtype]NovellIPXConfigurationExampleANetwork9eNetwork1E0E1S0S0Network4aNetwork6cS1S19e.0800.4313.df56

Encapsulation=novell-etherEncapsulation=sap6c.0800.1213.13de

Encapsulation=sapNetwork3BCipxroutingipxmaximum-paths2interfaceethernet0.1ipxnetwork9eencapsulationnovell-etherinterfaceethernet0.2ipxnetwork6cencapsulationsap

interfaceethernet1ipxnetwork4aencapsulationsapinterfaceserial0ipxnetwork1Interfaceserial1ipxnetwork3NovellIPXConfigurationExampleANetwork9eNetwork1E0E1S0S0Network4aNetwork6cS1S19e.0800.4313.df56

Encapsulation=novell-etherEncapsulation=sap6c.0800.1213.13de

Encapsulation=sapNetwork3BCVerifyingIPXOperationshowipxinterfaceshowipxrouteshowipxserversshowipxtrafficMonitoringCommandsVerifyingIPXOperationshowipxinterfaceshowipxrouteshowipxserversshowipxtrafficMonitoringCommandsTroubleshootingCommandsdebugipxroutingactivitydebugipxsapactivitypingipxMonitoringtheStatusofanIPXInterfacewg_ro_a#showipxinterfacee0Ethernet0isup,lineprotocolisupIPXaddressisABC.00e0.1e5d.ae2f,NOVELL-ETHER[up]DelayofthisIPXnetwork,inticksis1throughput0linkdelay0IPXWANprocessingnotenabledonthisinterface.IPXSAPupdateintervalis60secondsIPXtype20propagationpacketforwardingisdisabledIncomingaccesslistisnotsetOutgoingaccesslistisnotsetIPXhelperaccesslistisnotsetSAPGNSprocessingenabled,delay0ms,outputfilterlistisnotsetSAPInputfilterlistisnotsetSAPOutputfilterlistisnotsetSAPRouterfilterlistisnotsetInputfilterlistisnotsetOutputfilterlistisnotsetRouterfilterlistisnotsetNetbiosInputhostaccesslistisnotsetNetbiosInputbytesaccesslistisnotsetNetbiosOutputhostaccesslistisnotsetNetbiosOutputbytesaccesslistisnotsetUpdateseach60secondsagingmultiplesRIP:3SAP:3SAPinterpacketdelayis55ms,maximumsizeis480bytes<textomitted>

MonitoringIPXRoutingTableswg_ro_a#showipxrouteCodes:C-Connectedprimarynetwork,c-ConnectedsecondarynetworkS-Static,F-Floatingstatic,L-Local(internal),W-IPXWANR-RIP,E-EIGRP,N-NLSP,X-External,A-Aggregates-seconds,u-uses,U-Per-userstatic2TotalIPXroutes.Upto1parallelpathsand16hopsallowed.Nodefaultrouteknown.CABC(NOVELL-ETHER),Et0RDEF[02/01]viaABC.00e0.1e5d.c860,40s,Et0MonitoringIPXServerswg_ro_a#showipxserverCodes:S-Static,P-Periodic,E-EIGRP,N-NLSP,H-Holddown,+=detailU-Per-userstatic2TotalIPXServersTableorderingisbasedonroutingandserverinfoTypeNameNetAddressPortRouteHopsItfp4fs111.0000.0000.0001:04514/034Et0p4fs221.0000.0000.0001:04514/034Et0MonitoringIPXTrafficwg_ro_a#showipxtrafficSystemTrafficfor0.0000.0000.0001System-Name:wg_ro_aRcvd:15total,0formaterrors,0checksumerrors,0badhopcount,0packetspitched,15localdestination,0multicastBcast:13received,6sentSent:6generated,0forwarded0encapsulationfailed,0norouteSAP:1TotalSAPrequests,0TotalSAPreplies,0servers1SAPgeneralrequests,0ignored,0replies0SAPGetNearestServerrequests,0replies0SAPNearestNamerequests,0replies0SAPGeneralNamerequests,0replies0SAPadvertisementsreceived,0sent0SAPflashupdatessent,0SAPformaterrorsRIP:1RIPrequests,0ignored,0RIPreplies,2routes13RIPadvertisementsreceived,0sent0RIPflashupdatessent,0RIPformaterrorsEcho:Rcvd0requests,0repliesSent0requests,0replies0unknown:0nosocket,0filtered,0nohelper0SAPsthrottled,freedNDBlen0Watchdog:0packetsreceived,0repliesspoofed<textomitted>wg_ro_a#debugipxroutingactivity

IPXroutingdebuggingison

IPXRIP:positingfullupdateto3010.ffff.ffff.ffffviaEthernet0(broadcast)

IPXRIP:positingfullupdateto3000.ffff.ffff.ffffviaEthernet1(broadcast)

IPXRIP:positingfullupdateto3020.ffff.ffff.ffffviaSerial0(broadcast)

IPXRIP:positingfullupdateto3021.ffff.ffff.ffffviaSerial1(broadcast)

IPXRIP:sendingupdateto3020.ffff.ffff.ffffviaSerial0

IPXRIP:src=3020.0000.0c03.14d8,dst=3020.ffff.ffff.ffff,packetsent

network3021,hops1,delay6

network3010,hops1,delay6

network3000,hops1,delay6

IPXRIP:sendingupdateto3021.ffff.ffff.ffffviaSerial1

IPXRIP:src=3021.0000.0c03.14d8,dst=3021.ffff.ffff.ffff,packetsent

network3020,hops1,delay6

network3010,hops1,delay6

network3000,hops1,delay6

IPXRIP:sendingupdateto3010.ffff.ffff.ffffviaEthernet0

IPXRIP:src=3010.aa00.0400.0284,dst=3010.ffff.ffff.ffff,packetsent

network3030,hops2,delay7

network3020,hops1,delay1

network3021,hops1,delay1

network3000,hops1,delay1

IPXRIP:sendingupdateto3000.ffff.ffff.ffffviaEthernet1TroubleshootingIPXRoutingwg_ro_a#debugipxsapactivityIPXservicedebuggingisonwg_ro_a#05:31:18:IPXSAP:positingupdateto1111.ffff.ffff.ffffviaEthernet0(broadcast)(full)05:31:18:IPXSAP:Updatetype0x2len288src:1111.00e0.1e5d.ae2fdest:1111.ffff.ffff.ffff(452)05:31:18:type0x7,”ps21",21.0000.0000.0001(451),2hops05:31:18:type0x4,"fs31",31.0000.0000.0001(451),2hops05:31:18:type0x4,"fs41",41.0000.0000.0001(451),2hops05:31:18:type0x7,"ps51",51.0000.0000.0001(451),2hopswg_ro_a#TroubleshootingIPXSAP

IPXPingTypeescapesequencetoabort.Sending5,100-byteIPXciscoEchoesto211.0000.0c01.f4cf,timeoutis2seconds.!!!!!Successrateis100percent(0/5)

Useaccesslist800-899forstandardDenyPermitDestinationAddressSourceAddressAnExampleUsinganIPXPacketDataPacket(IPXheader)FrameHeader(forexample,

novell-ether)TestingPacketswithAccessLists

Useaccesslist900-999forextendedDenyPermitDestinationAddressSourceAddressAnExampleUsinganIPXPacketDataPacket(IPXheader)FrameHeader(forexample,

novell-ether)TestingPacketswithAccessListsProtocol,SocketNumber

Useaccesslist1000-1099

forSAPfilteringDenyPermitService

AdvertisementAnExampleUsinganIPXPacketDataPacket(IPXheader)FrameHeader(forexample,

novell-ether)TestingPacketswithAccessListsService

Advertisement

UseACL800-899standard900-999extended1000-1099SAPDenyPermitDestinationAddressSourceAddressAnExampleUsinganIPXPacketDataPacket(IPXheader)FrameHeader(forexample,

novell-ether)TestingPacketswithAccessListsProtocol,

SocketNumberKeyConceptsforIPXAccessListsIPXaddressingusesanetwork.nodeSocketnumberidentifiesanapplicationorprocessStandardaccesslists(800-899)canfiltersourceanddestinationaddressesExtendedaccesslists(900-999)addprotocolandsocketnumbercapabilitiestothefilterAccesslists(1000-1099)areSAPfiltersforservicetypesandserversononeormorenetworks

FrequentupdatesreducethebandwidthforusertrafficControllingIPXOverheadServerServerSAP

RIPSAP

RIPRouterRouterSAPRIPSAPRIPWANLinkFlooded

withOverheadTrafficClientGNSStep1:Setparametersforthisaccesslisttest

statement(whichcanbeoneofseveralstatements)Router(config)#access-listaccess-list-number

{deny|permit}

{testconditions}Step2:Enableaninterfacetobecomepartofthe

groupthatusesthespecifiedaccesslistRouter(config-if)#ipxaccess-group

access-list-number|name[in|out]

AccessListCommandOverviewIPXaccesslistsarenumberedornamed800-899-standard900-999-extendedSetsparametersforthislistentryStandardaccesslistuseslistnumberinrange800to899Router(config)#access-listaccess-list-number

{deny|permit}source-network[.source-node

[source-node-mask]][destination-network][.destination-node[destination-node-mask]]]IPXStandardAccessList

ConfigurationIPXStandardAccessList

ConfigurationRouter(config-if)#ipxaccess-group

access-list-number[in|out]ActivatestheaccesslistonaninterfaceSetsparametersforthislistentryStandardaccesslistuseslistnumberinrange800to899Router(config)#access-listaccess-list-number

{deny|permit}source-network[.source-node

[source-node-mask]][destination-network][.destination-node[destination-node-mask]]]StandardIPXAccessListExampleClientServerClientE0E2E1Network2bNetwork3cNetwork4daccess-list800permit2b4d(implicitdenyall)inte0ipxnetwork4dipxaccess-group800outinte1ipxnetwork3cinte2ipxnetwork2binte3ipxnetwork1aServerE3Network1aIPXExtendedAccessList

ConfigurationRouter(config)#access-listaccess-list-number

{deny|permit}protocol[source-network][[[.source-node]source-node-mask]|

[.source-nodesource-network-mask.source-node-mask]]

[source-socket][work]

[[[.destination-node]destination-node-mask]|

[.destination-nodedestination-network-mask.

destination-nodemask]][destination-socket][log]SetsparametersforthislistentryExtendedaccesslistuseslist-numberinrange900to999IPXExtendedAccessList

ConfigurationRouter(config-if)#ipxaccess-group

access-list-number[in|out]ActivatestheIPXextendedaccesslistonaninterfaceRouter(config)#access-listaccess-list-number

{deny|permit}protocol[source-network][[[.source-node]source-node-mask]|

[.source-nodesource-network-mask.source-node-mask]]

[source-socket][work]

[[[.destination-node]destination-node-mask]|

[.destination-nodedestination-network-mask.

destination-nodemask]][destination-socket][log]SetsparametersforthislistentryExtendedaccesslistuseslist-numberinrange900to999NormalIPXSAPOperation

RoutersdoesnotforwardSAPbroadcastsServer/RouterCServer/RouterDClient2ALarge

IPXNetworkServer/RouterAClient1Server/RouterBNormalIPXSAPOperation

RoutersdoesnotforwardSAPbroadcastsIPXrouterssendSAPtableevery60

secondsSAP

TableServer/RouterCServer/RouterDClient2ALarge

IPXNetworkServer/RouterAClient1Server/RouterBSAP

TableSAP

TableSAP

TableSAP

TableApplytheaccesslisttotheinterface

asaninputoroutputSAPfilterOutputfilter:DonotaddfilteredSAPstotheSAPtablesentHowtoUseSAPFiltersInputfilter:DonotaddfilteredSAPstoSAPtableSAPSAP

TableSAPSAPSAPSAP

TableSAPSAPSAPSAPSAPSAPSAPSAPFilterConfigurationRouter(config)#access-listaccess-list-number

{deny|permit}network[.node][network-mask

.node-mask][service-type[server-name]]CreatesaSAPfilterlistRouter(config)#access-listaccess-list-number

{deny|permit}network[.node][network-mask

.node-mask][service-type[server-name]]Router(config-if)#ipxoutput-sap-filter

access-list-numberRouter(config-if)#ipxinput-sap-filter

access-list-numberSAPFilterConfigurationCreatesaSAPfilterlistActivatesanoutputSAPFilteroninterfaceActivatesaninputSAPfilteroninterfaceSAPFilterExample1E0FS-AFS-BInternalIPXNetwork1aInternalIPXNetwork2aFS-CFS-DNetwork11bInternalIPXNetworkccInternalIPXNetworkddNetwork4aNetwork9eNetwork12bE0E1S0S0

CiscoBCiscoASAPFilterExample1access-list1000permit1a4access-list1000permit2a4interfaceethernet0ipxnetwork11binterfaceserial0ipxnetwork12bipxoutput-sap-filter1000OnlyfromFS-AandFS-BareadvertisedacrossrouterCiscoB’sS0interfaceE0FS-AFS-BInternalIPXNetwork1aInternalIPXNetwork2aFS-CFS-DNetwork11bInte