Cisco Catalyst X4232 Installation And Configuration Note page 66

Configuring Access Control Lists
•
•
Creating IPX ACLs
You can create numbered or named IPX ACLs on the Catalyst 4000 Layer 3 Services module. You can
use IPX ACLs as generic, routing, and broadcast filters.
Note The Catalyst 4000 Layer 3 Services module do not support the .source-node and source
node-mask command variables.
Creating IPX ACLs Using Numbers
To create IPX ACLs using numbers, perform the following task in global configuration mode:
Task
Create a standard IPX ACL using a number.
Creating IPX ACLs Using Names
To create a named standard IPX ACL, perform the following tasks in global configuration mode:
Task
Step 1 Define a standard IPX ACL using a name.
Step 2
In access-list configuration mode, specify one or
more conditions that are to be allowed or denied.
The condition determines whether the packet is
passed or dropped.
Step 3 Exit access-list configuration mode.
Applying the IPX ACL to an Interface
IPX ACLs determine which data packets to receive from or send to an interface, based on the packet's
source and destination addresses, IPX protocol type, and source and destination socket numbers.
To create an IPX ACL, create a standard or an extended access list as described in the "Creating IPX
ACLs" section and then apply the ACL to an interface.
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
66
Do not set up conditions that result in packets getting lost. This situation can happen when a device
or interface is configured to advertise services on a network that has ACLs that deny these packets.
IPX-extended ACL numbers 900 to 999 and the names that identify them are not supported on the
Catalyst 4000 Layer 3 Services module.
Command
Router (config) # access-list access-list-number
{deny | permit} source-network
[destination-network [.destination-node
[destination-node-mask]]]
Command
Router (config) # ipx access-list standard name
Router (config) # {deny | permit}
source-network [destination-network
[.destination-node [destination-node-mask]]]
Router (config) # exit
78-10164-03