思科网络技术培训之IPX协议

《思科网络技术培训之IPX协议》由会员分享，可在线阅读，更多相关《思科网络技术培训之IPX协议（88页珍藏版）》请在装配图网上搜索。

1、Upon completion of this chapter,you will be able to perform the following tasks:Describe basic IPX operation Determine the required IPX network number and encapsulation type for a given interface Enable the Novell IPX protocol Verify IPX connectivity Configure and monitor IPX Access Lists and SAP tr

2、affic filtersObjectivesNetWare FileServerNetWare FileServerCisco Routers in NetWare NetworksNovell NetWare Protocol Stack1234567Media Access Protocols(Ethernet,Token Ring,WAN,others)PhysicalData LinkNetworkSessionTransportPresentationApplicationNovell NetWare ProtocolsOSIReference ModelIPX(Internetw

3、ork Packet Exchange)SPXSAPRIPNLSPNETBIOSAPPLICATIONSNCP Address is 80 bits(network.node)Interface MAC address is part of logical address Multiple LAN encapsulations per interface Default routing protocol is IPX RIP Novell services are advertised using SAP NetWare clients find servers with GNS packet

4、sKey Novell NetWare FeaturesNovell IPX AddressingE0E1S048 bits(from MAC)Node0000.0c56.de33 Novell IPX AddressingE0E1S048 bits(from MAC)Network.Node2c.0c56.de33 Network 4a1dNetwork 3fNetwork 2cUp to 32 bits Basic NetWare OperationNWFileServerBasic NetWare Operation(cont.)NWFileServer0080.C712.3456-La

5、yer2 MacNICBasic NetWare Operation(cont.)NWFileServer1a.0080.C712.3456-Layer3 NetNICNWFileServerBasic NetWare Operation(cont.)1a.0080.C712.3456-Layer3 NetNetWare Services2b.0000.0000.0001-Internal NetNIC-NW Software RouterBasic NetWare Operation(cont.)NetWare ServicesNICBasic NetWare Operation(cont.

6、)NetWare Services2b1a.NICRoutingTableBasic NetWare Operation(cont.)-4Print Server-47NetWare Services2b1a.ServicesTable447.NICRoutingTableBasic NetWare Operation(cont.)-4Print Server-47NetWare Services2b1a.ServicesTable447.Periodic BroadcastsNICRoutingTableNetWare Services2b1a.ServicesTable447.Period

7、ic Broadcasts-Layer2 Mace0NICRoutingTableBasic NetWare Operation(cont.)Network andEncapsulationmust matchNetWare Services2b1a.ServicesTable447.Periodic Broadcasts1a.-Layer3 Nete0s0NICRoutingTableBasic NetWare Operation(cont.)Network andEncapsulationmust matchNetWare Services2b1a.ServicesTable447.Per

8、iodic Broadcasts1a.-Layer3 Nete0s01b.RoutingTable1a1b2b.NICRoutingTableBasic NetWare Operation(cont.)NetWare Services2b1a1b.ServicesTable447.Periodic Broadcasts1a.e0s01b.RoutingTable1a1b2b.NICRoutingTableBasic NetWare Operation(cont.)NetWare Services2b1a1b.ServicesTable447.Periodic Broadcastse0s0Rou

9、tingTable1a1b2b.447.ServicesTableNICRoutingTable1a.1b.Basic NetWare Operation(cont.)NetWare Services2b1a1b.ServicesTable447.Periodic Broadcastse0s0RoutingTable1a1b2b.447.ServicesTableNW ClientNICNICGNSRoutingTable1a.1b.Basic NetWare Operation(cont.)RoutingTableNetWare Services2b.0000.0000.0001(IPX I

10、nternal Network)2b1a1b.ServicesTable447.Periodic Broadcastse0s0RoutingTable1a1b2b.447.ServicesTableNW ClientNICNICGNSGNS Resp1a.1b.Basic NetWare Operation(cont.)Determining the IPX Network Number Ask the NetWare administratorDetermining the IPX Network Numbercdp Ask the NetWare administrator Use Cis

11、co IOS commands to determine the IPX network number on a neighbor Cisco router Determining the IPX Network Number Ask the NetWare administrator Use Cisco IOS commands to determine the IPX network number a neighbor Cisco router Use NetWare command to check on the NetWare NetWare configcdp Ethernet_80

12、2.3 (default for NetWare 3.11 or earlier)802.3Multiple Novell EncapsulationsFour types of Ethernet framingNovell NameFraming Structure Ethernet_802.2 (default for NetWare 3.12 and later)802.3802.2 LLC Ethernet_802.3 (default for NetWare 3.11 and earlier)802.3Multiple Novell EncapsulationsFour types

13、of Ethernet framingNovell NameFraming Structure Ethernet_802.2 (default for NetWare 3.12 and later)802.3802.2 LLC Ethernet_802.3 (default for NetWare 3.11 and earlier)802.3Multiple Novell EncapsulationsFour types of Ethernet framing Ethernet_IIEthernetNovell NameFraming Structure Ethernet_802.2 (def

14、ault for NetWare 3.12 and later versions)802.3802.2 LLC Ethernet_SNAP802.3802.2 LLCSNAP Ethernet_802.3 (default for NetWare 3.11 and earlier versions)802.3Multiple Novell Encapsulations Ethernet_IIEthernetNovell NameFraming StructureFour types of Ethernet framingCisco Encapsulation TypesNovell IPX N

15、ame Cisco IOS NameEthernetToken RingFDDIFDDI_SNAPFDDI_802.2FDDI_RawEthernet_802.3Ethernet_802.2Ethernet_IIEthernet_SNAPToken-RingToken-Ring_SNAPNovell IPX Name Cisco IOS NameToken-RingToken-Ring_SNAPEthernetToken RingFDDIFDDI_SNAPFDDI_802.2FDDI_RawEthernet_802.3Ethernet_802.2Ethernet_IIEthernet_SNAP

16、Cisco Encapsulation Types Specify encapsulation when you configure IPX networksnovell-ethersaparpasnapsapsnapsnapsapnovell-fddiWritten Exercise:IPX Parameter PlanningEncapsulationNetwork AddressR3 Interface NameS0S1E1Write the IPX addresses and encapsulation types for R3S0 hdlcNetwork b001E0 SAPE1S1

17、S1 hdlcS0Network c0b0Network d100Network b1b0E0 novell-etherR3R4E1R2R1Written Exercise:IPX Parameter PlanningEncapsulationNetwork AddressR3 Interface NameS0S1E1d100 Write the IPX addresses and encapsulation types for R3S0 hdlcNetwork b001E0 SAPE1S1S1 hdlcS0Network c0b0Network d100Network b1b0E0 nove

18、ll-etherR3R4E1R2R1Written Exercise:IPX Parameter PlanningEncapsulationNetwork AddressR3 Interface NameS0hdlcS1E1d100 Write the IPX addresses and encapsulation types for R3S0 hdlcNetwork b001E0 SAPE1S1S1 hdlcS0Network c0b0Network d100Network b1b0E0 novell-etherR3R4E1R2R1Written Exercise:IPX Parameter

19、 PlanningEncapsulationNetwork AddressR3 Interface NameS0hdlcS1E1c0b0d100 Write the IPX addresses and encapsulation types for R3S0 hdlcNetwork b001E0 SAPE1S1S1 hdlcS0Network c0b0Network d100Network b1b0E0 novell-etherR3R4E1R2R1Written Exercise:IPX Parameter PlanningEncapsulationNetwork AddressR3 Inte

20、rface NameS0hdlcS1hdlcE1c0b0d100 Write the IPX addresses and encapsulation types for R3S0 hdlcNetwork b001E0 SAPE1S1S1 hdlcS0Network c0b0Network d100Network b1b0E0 novell-etherR3R4E1R2R1Written Exercise:IPX Parameter PlanningEncapsulationNetwork AddressR3 Interface NameS0hdlcS1hdlcE1b1b0c0b0d100 Wri

21、te the IPX addresses and encapsulation types for R3S0 hdlcNetwork b001E0 SAPE1S1S1 hdlcS0Network c0b0Network d100Network b1b0E0 novell-etherR3R4E1R2R1 Write the IPX addresses and encapsulation types for R3EncapsulationNetwork AddressR3 Interface NameS0hdlcS1hdlcE1novell-etherWritten Exercise:IPX Par

22、ameter PlanningS0 hdlcNetwork b001E0 SAPE1S1S1 hdlcS0Network c0b0Network d100Network b1b0E0 novell-etherR3R4E1b1b0c0b0d100R2R1Novell Uses IPX RIP for Routing Uses ticks(about 1/18 sec.)and hop count(maximum of 15 hops)RIP broadcasts routing information to neighbor routers every 60 seconds,by default

23、 SAP broadcasts NetWare services information to neighbor routers every 60 seconds,by defaultRIP SAPTablesRIP SAPTablesRIP SAPTablesRIP SAPTablesServer advertises SAP packets advertise all NetWare network servicesService Advertising Protocol(SAP)Server advertises print serviceServer advertisesClientS

24、AP SAP packets advertise all NetWare network services Can add excessive broadcast traffic to the networkServer advertises print serviceServer advertisesRouter A listens to SAPsSAPSAP tableClientService Advertising Protocol(SAP)Get Nearest Server Protocol(GNS)FileServerNetWareClientGet Nearest Server

25、 Protocol(GNS)FileServerNetWareClientGNS request GNS is a broadcast from a client needing a serverGet Nearest Server Protocol(GNS)FileServerNetWareClientGNS request GNS is a broadcast from a client needing a server NetWare server and Cisco router get this SAP packetGet Nearest Server Protocol(GNS)GN

26、S is a broadcast from a client needing a server NetWare server and Cisco router get this SAP packet NetWare server provides GNS responseFileServerNetWareClientGNS requestGNS replyNovell IPX Configuration TasksGlobal configuration IPX routingRIPRIPIPXNovell IPX Configuration TasksGlobal configuration

27、 IPX routing Load sharingRIPRIPIPXRIPRIPNetwork 9e encap arpaNetwork 4a encap snapIPXNovell IPX Configuration TasksGlobal configuration IPX routing Load sharingInterface configuration Network numbers Encapsulation typeNovell IPX Global Configurationipx routing node Router(config)#Enables Novell IPX

28、routingRouter(config)#ipx maximum-paths pathsNovell IPX Global Configuration Configures round-robin load sharingover multiple equal metric paths Default=1 Router(config)#ipx routing node Enables Novell IPX routingNovell IPX Interface ConfigurationRouter(config-if)#ipx network network encapsulation e

29、ncapsulation type Enables IPX routing on the interface Assigns IPX network number Selects optional encapsulation typeNetWare SubinterfacesFS1 NW 3.11FS2 NW 4.11e0.1NICNICEthernet_802.3Ethernet_802.21a-novell-ether1b-sape0.2Novell IPX Interface ConfigurationRouter(config-if)#ipx network network encap

30、sulation encapsulation-type secondary Assign primary and secondary network number and encapsulation Router(config)#interface type number.subinterface-number Specify a subinterface,then enable IPX routing with encapsulation typeORRouter(config-subif)#ipx network network encapsulation encapsulation ty

31、pe Novell IPX Configuration ExampleANetwork 9eNetwork 1E0E1S0S0Network 4aNetwork 6cS1S19e.0800.4313.df56 Encapsulation=novell-etherEncapsulation=sap6c.0800.1213.13de Encapsulation=sapNetwork 3BCipx routingipx maximum-paths 2interface ethernet 0.1 ipx network 9e encapsulation novell-etherinterface et

32、hernet 0.2 ipx network 6c encapsulation sap interface ethernet 1 ipx network 4a encapsulation sapinterface serial 0 ipx network 1Interface serial 1 ipx network 3Novell IPX Configuration ExampleANetwork 9eNetwork 1E0E1S0S0Network 4aNetwork 6cS1S19e.0800.4313.df56 Encapsulation=novell-etherEncapsulati

33、on=sap6c.0800.1213.13de Encapsulation=sapNetwork 3BCVerifying IPX Operationshow ipx interfaceshow ipx routeshow ipx serversshow ipx trafficMonitoring CommandsVerifying IPX Operationshow ipx interfaceshow ipx routeshow ipx serversshow ipx trafficMonitoring CommandsTroubleshooting Commandsdebug ipx ro

34、uting activitydebug ipx sap activityping ipxMonitoring the Status of an IPX Interfacewg_ro_a#show ipx interface e0Ethernet0 is up,line protocol is up IPX address is ABC.00e0.1e5d.ae2f,NOVELL-ETHER up Delay of this IPX network,in ticks is 1 throughput 0 link delay 0 IPXWAN processing not enabled on t

35、his interface.IPX SAP update interval is 60 seconds IPX type 20 propagation packet forwarding is disabled Incoming access list is not set Outgoing access list is not set IPX helper access list is not set SAP GNS processing enabled,delay 0 ms,output filter list is not set SAP Input filter list is not

36、 set SAP Output filter list is not set SAP Router filter list is not set Input filter list is not set Output filter list is not set Router filter list is not set Netbios Input host access list is not set Netbios Input bytes access list is not set Netbios Output host access list is not set Netbios Ou

37、tput bytes access list is not set Updates each 60 seconds aging multiples RIP:3 SAP:3 SAP interpacket delay is 55 ms,maximum size is 480 bytes Monitoring IPX Routing Tableswg_ro_a#show ipx routeCodes:C-Connected primary network,c-Connected secondary network S-Static,F-Floating static,L-Local(interna

38、l),W-IPXWAN R-RIP,E-EIGRP,N-NLSP,X-External,A-Aggregate s-seconds,u-uses,U-Per-user static2 Total IPX routes.Up to 1 parallel paths and 16 hops allowed.No default route known.C ABC(NOVELL-ETHER),Et0R DEF 02/01 via ABC.00e0.1e5d.c860,40s,Et0Monitoring IPX Serverswg_ro_a#show ipx serverCodes:S-Static,

39、P-Periodic,E-EIGRP,N-NLSP,H-Holddown,+=detailU-Per-user static2 Total IPX ServersTable ordering is based on routing and server info Type Name Net Address Port Route Hops Itfp 4 fs1 11.0000.0000.0001:0451 4/03 4 Et0p 4 fs2 21.0000.0000.0001:0451 4/03 4 Et0Monitoring IPX Trafficwg_ro_a#show ipx traffi

40、cSystem Traffic for 0.0000.0000.0001 System-Name:wg_ro_aRcvd:15 total,0 format errors,0 checksum errors,0 bad hop count,0 packets pitched,15 local destination,0 multicastBcast:13 received,6 sentSent:6 generated,0 forwarded 0 encapsulation failed,0 no routeSAP:1 Total SAP requests,0 Total SAP replies

41、,0 servers 1 SAP general requests,0 ignored,0 replies 0 SAP Get Nearest Server requests,0 replies 0 SAP Nearest Name requests,0 replies 0 SAP General Name requests,0 replies 0 SAP advertisements received,0 sent 0 SAP flash updates sent,0 SAP format errorsRIP:1 RIP requests,0 ignored,0 RIP replies,2

42、routes 13 RIP advertisements received,0 sent 0 RIP flash updates sent,0 RIP format errorsEcho:Rcvd 0 requests,0 replies Sent 0 requests,0 replies 0 unknown:0 no socket,0 filtered,0 no helper 0 SAPs throttled,freed NDB len 0Watchdog:0 packets received,0 replies spoofedwg_ro_a#debug ipx routing activi

43、tyIPX routing debugging is onIPXRIP:positing full update to 3010.ffff.ffff.ffff via Ethernet0(broadcast)IPXRIP:positing full update to 3000.ffff.ffff.ffff via Ethernet1(broadcast)IPXRIP:positing full update to 3020.ffff.ffff.ffff via Serial0(broadcast)IPXRIP:positing full update to 3021.ffff.ffff.ff

44、ff via Serial1(broadcast)IPXRIP:sending update to 3020.ffff.ffff.ffff via Serial0IPXRIP:src=3020.0000.0c03.14d8,dst=3020.ffff.ffff.ffff,packet sent network 3021,hops 1,delay 6 network 3010,hops 1,delay 6 network 3000,hops 1,delay 6IPXRIP:sending update to 3021.ffff.ffff.ffff via Serial1IPXRIP:src=30

45、21.0000.0c03.14d8,dst=3021.ffff.ffff.ffff,packet sent network 3020,hops 1,delay 6 network 3010,hops 1,delay 6 network 3000,hops 1,delay 6IPXRIP:sending update to 3010.ffff.ffff.ffff via Ethernet0IPXRIP:src=3010.aa00.0400.0284,dst=3010.ffff.ffff.ffff,packet sent network 3030,hops 2,delay 7 network 30

46、20,hops 1,delay 1 network 3021,hops 1,delay 1 network 3000,hops 1,delay 1IPXRIP:sending update to 3000.ffff.ffff.ffff via Ethernet1Troubleshooting IPX Routingwg_ro_a#debug ipx sap activityIPX service debugging is onwg_ro_a#05:31:18:IPXSAP:positing update to 1111.ffff.ffff.ffff via Ethernet0(broadcas

47、t)(full)05:31:18:IPXSAP:Update type 0 x2 len 288 src:1111.00e0.1e5d.ae2f dest:1111.ffff.ffff.ffff(452)05:31:18:type 0 x7,”ps21,21.0000.0000.0001(451),2 hops05:31:18:type 0 x4,fs31,31.0000.0000.0001(451),2 hops05:31:18:type 0 x4,fs41,41.0000.0000.0001(451),2 hops05:31:18:type 0 x7,ps51,51.0000.0000.0

48、001(451),2 hopswg_ro_a#Troubleshooting IPX SAP IPX PingType escape sequence to abort.Sending 5,100-byte IPXcisco Echoes to 211.0000.0c01.f4cf,timeout is 2 seconds.!Success rate is 100 percent(0/5)Useaccess list 800-899 for standard DenyPermitDestinationAddressSourceAddressAn Example Using an IPX Pac

49、ketDataPacket(IPX header)Frame Header(for example,novell-ether)Testing Packets with Access Lists Useaccess list 900-999 for extendedDenyPermitDestinationAddressSourceAddressAn Example Using an IPX PacketDataPacket(IPX header)Frame Header(for example,novell-ether)Testing Packets with Access ListsProt

50、ocol,Socket Number Useaccess list 1000-1099 for SAP filtering DenyPermitService AdvertisementAn Example Using an IPX PacketDataPacket(IPX header)Frame Header(for example,novell-ether)Testing Packets with Access ListsService Advertisement Use ACL800-899 standard900-999 extended1000-1099 SAPDenyPermit

51、DestinationAddressSourceAddressAn Example Using an IPX PacketDataPacket(IPX header)Frame Header(for example,novell-ether)Testing Packets with Access ListsProtocol,Socket NumberKey Concepts for IPX Access Lists IPX addressing uses a network.node Socket number identifies an application or process Stan

52、dard access lists(800-899)can filter source and destination addresses Extended access lists(900-999)add protocol and socket number capabilities to the filter Access lists(1000-1099)are SAP filters for service types and servers on one or more networks Frequent updates reduce the bandwidth for user tr

53、afficControlling IPX OverheadServerServerSAPRIPSAPRIPRouterRouterSAPRIPSAPRIPWAN Link Flooded with Overhead TrafficClientGNSStep 1:Set parameters for this access list test statement(which can be one of several statements)Router(config)#access-list access-list-number deny|permit test conditions Step

54、2:Enable an interface to become part of the group that uses the specified access list Router(config-if)#ipx access-group access-list-number|name in|out Access List Command Overview IPX access lists are numbered or named 800-899-standard 900-999-extended Sets parameters for this list entry Standard a

55、ccess list uses list number in range 800 to 899 Router(config)#access-list access-list-number deny|permit source-network .source-node source-node-mask destination-network .destination-node destination-node-mask IPX Standard Access List ConfigurationIPX Standard Access List ConfigurationRouter(config

56、-if)#ipx access-group access-list-number in|out Activates the access list on an interface Sets parameters for this list entry Standard access list uses list number in range 800 to 899 Router(config)#access-list access-list-number deny|permit source-network .source-node source-node-mask destination-n

57、etwork .destination-node destination-node-mask Standard IPX Access List ExampleClientServerClientE0E2E1Network2bNetwork3cNetwork 4daccess-list 800 permit 2b 4d(implicit deny all)int e 0 ipx network 4d ipx access-group 800 outint e 1 ipx network 3cint e 2 ipx network 2bint e3 ipx network 1aServerE3Ne

58、twork 1aIPX Extended Access List ConfigurationRouter(config)#access-list access-list-number deny|permit protocol source-network .source-node source-node-mask|.source-node source-network-mask.source-node-mask source-socket work .destination-node destination-node-mask|.destination-node destination-net

59、work-mask.destination-nodemask destination-socket log Sets parameters for this list entry Extended access list uses list-number in range 900 to 999IPX Extended Access List ConfigurationRouter(config-if)#ipx access-group access-list-number in|out Activates the IPX extended access list on an interface

60、Router(config)#access-list access-list-number deny|permit protocol source-network .source-node source-node-mask|.source-node source-network-mask.source-node-mask source-socket work .destination-node destination-node-mask|.destination-node destination-network-mask.destination-nodemask destination-soc

61、ket log Sets parameters for this list entry Extended access list uses list-number in range 900 to 999Normal IPX SAP Operation Routers does not forward SAP broadcastsServer/Router CServer/Router DClient 2A Large IPXNetworkServer/Router AClient 1Server/Router BNormal IPX SAP Operation Routers does not

62、 forward SAP broadcasts IPX routers send SAP table every 60 secondsSAP TableServer/Router CServer/Router DClient 2A Large IPXNetworkServer/Router AClient 1Server/Router BSAP TableSAP TableSAP TableSAP TableApply the access list to the interface as an input or output SAP filter Output filter:Do not a

63、dd filtered SAPs to the SAP table sent How to Use SAP Filters Input filter:Do not add filtered SAPs to SAP tableSAPSAP TableSAPSAPSAPSAP TableSAPSAPSAPSAPSAPSAPSAPSAP Filter ConfigurationRouter(config)#access-list access-list-number deny|permit network .node network-mask.node-mask service-type serve

64、r-name Creates a SAP filter listRouter(config)#access-list access-list-number deny|permit network .node network-mask.node-mask service-type server-name Router(config-if)#ipx output-sap-filter access-list-numberRouter(config-if)#ipx input-sap-filter access-list-numberSAP Filter Configuration Creates

65、a SAP filter list Activates an output SAP Filter on interface Activates an input SAP filter on interfaceSAP Filter Example 1E0FS-AFS-BInternal IPXNetwork 1aInternal IPXNetwork 2aFS-CFS-DNetwork 11bInternal IPXNetwork ccInternal IPXNetwork ddNetwork 4aNetwork 9eNetwork 12bE0E1S0S0 SAP Filter Example

66、1access-list 1000 permit 1a 4access-list 1000 permit 2a 4interface ethernet 0 ipx network 11binterface serial 0 ipx network 12b ipx output-sap-filter 1000Only from FS-A and FS-B are advertised across router Cisco Bs S0 interfaceE0FS-AFS-BInternal IPXNetwork 1aInternal IPXNetwork 2aFS-CFS-DNetwork 11bInternal IPXNetwork ccInternal IPXNetwork ddNetwork 4aNetwork 9eNetwork 12bE0E1S0S0 SAP Filter Example 2access-list 1001 deny-1 7access-list 1001 permit -1interface ethernet 0 ipx network 9einterface