Understanding the network.pdf - Back to Home

!
access-list 601 permit nbp 1 object CO server
access-list 601 permit nbp 1 type AFPServer
access-list 601 permit nbp 1 zone co-zone
access-list 601 permit nbp 2 object Finance Server
access-list 601 permit nbp 2 type AFPServer
access-list 601 permit nbp 2 zone co-zone
access-list 601 permit nbp 3 object p-press
access-list 601 permit nbp 3 type LaserWriter
access-list 601 permit nbp 3 zone co-zone
access-list 601 permit other-access
access-list 601 deny other-nbps
!
access-list 608 permit zone co-zone
access-list 608 permit zone outland
access-list 608 deny additional-zones
The ACL applied as the permits the servers
"co-server" and "Finance Server" and the printer to be accessible from the "outland"
network. To suppress the zone announcements to the router and other workstations,
ACL 608 was applied as the and the
. The numbers used with the
action statement are sequence numbers that tie the object:name@zone elements
together in the list.
IPX Access-Lists
The virtues of IPX filtering cannot be underestimated. With the IPX protocols, the
filtering of the protocol's chattiness on some networks becomes a necessity, not an
option. IPX, like IP, has two types of lists: standard and extended (IOS also supports
named IPX lists). Standard lists are created using the global configuration command
. The source
and destination address match values can be either the IPX 32-bit network address
or 96-bit network and node address. Here is an example standard IPX ACL that
allows any packet to reach network 45:
asbr-a2(config)#access-list 810 permit -1 45
NOTE