Monitoring IPX on Cisco Routers 415
equal-cost lines, without regard to the destination. However, if you want to
ensure that all packets sent to a destination or host will always go over the
same line, use the IPX per-host-load-share command.
The ipx maximum-paths command is shown below. It tells the IPX RIP
protocol to perform a round-robin load balance across two equal costs
paths.
Router#config t
Router(config)#ipx maximum-paths 2
Router(config)#^Z
Router#sh ipx route
Codes: C - Connected primary network, c - Connected
[output cut]
5 Total IPX routes. Up to 2 parallel paths and 16 hops
allowed.
[output cut]
The show ipx route command shows that two parallel paths are now
supported.
Show IPX Traffic
The show ipx traffic command gives you a summary of the number and
type of IPX packets received and transmitted by the router. Notice that this
command will show you both the IPX RIP and SAP update packets.
2501A#sh ipx traffic
System Traffic for 0.0000.0000.0001 System-Name: RouterA
Rcvd: 15 total, 0 format errors, 0 checksum errors, 0
bad hop count, 0 packets pitched, 15 local destination, 0
multicast
Bcast: 10 received, 249 sent
Sent: 255 generated, 0 forwarded
0 encapsulation failed, 0 no route
SAP: 1 SAP requests, 0 SAP replies, 0 servers

interface e0 command shows you the IPX address and encapsulation type
of the interface. If you use the show interface e0 command, remember
that it does not provide the IPX address of the interface, only the IP address.
2501A#sh ipx int e0
Ethernet0 is up, line protocol is up
IPX address is 10.0000.0c8d.5c9d, NOVELL-ETHER [up]
Delay of this IPX network, in ticks is 1 throughput 0
link delay 0
IPXWAN processing not enabled on this interface.
IPX SAP update interval is 1 minute(s)
IPX type 20 propagation packet forwarding is disabled
Incoming access list is not set
Outgoing access list is not set
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
Monitoring IPX on Cisco Routers 417
IPX helper access list is not set
SAP GNS processing enabled, delay 0 ms, output filter
list is not set
SAP Input filter list is not set
SAP Output filter list is not set
SAP Router filter list is not set
Input filter list is not set
Output filter list is not set
Router filter list is not set
Netbios Input host access list is not set
Netbios Input bytes access list is not set
Netbios Output host access list is not set
Netbios Output bytes access list is not set
Updates each 60 seconds, aging multiples RIP: 3 SAP: 3

Serial0 is up, line protocol is up
Internet address is 172.16.20.1/24
IPX address is 20.0060.7015.63d6
Notice that you can see all configured interfaces addresses, even for the
subinterfaces. However, although the primary, secondary, and subinterfaces
show the interface addresses, the subinterfaces do not show the encapsula-
tion types.
Remember, there are only two commands that show you the IPX address
of an interface: show ipx interface and show protocols.
Debug IPX
The debug ipx commands show you IPX as it’s running through your inter-
network. It’s noteworthy that you can see the IPX RIP and SAP updates with
this command, but be careful—it can consume your precious CPU if you
don’t use it wisely.
The two commands that are the most useful with IPX are debug ipx
routing activity and debug ipx sap activity, as shown in the router
output below:
RouterA#debug ipx routing ?
activity IPX RIP routing activity
events IPX RIP routing events
Let’s take a look at each command.
Debug IPX Routing Activity
The debug ipx routing activity command shows information about
IPX routing updates that are transmitted or received on the router.
RouterA#debug ipx routing act
IPX routing debugging is on
RouterA#
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
Monitoring IPX on Cisco Routers 419

10.0000.0000.0001(451), 2 hops
02:31:18: type 0x4, "SalesFS", 30.0000.0000.0001(451),
2 hops
02:31:18: type 0x4, "MarketingFS",
30.0000.0000.0001(451), 2 hops
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
420 Chapter 8

Configuring Novell IPX
02:31:18: type 0x7, "SalesFS", 50.0000.0000.0001(451),
2 hops
You can turn the debug command off by using undebug all (un al, for
short), or you can type the whole command as demonstrated below:
RouterA#undebug ipx sap activity
IPX routing debugging is off
RouterA#IPX Ping
By either telnetting into a remote router or using the show cdp neighbor
detail or show cdp entry * commands, you can find the IPX address of
a neighbor router. This will allow you to ping that address with IPX and test
your internetwork.
You can ping an IPX address from a router through a regular ping or
through an extended ping. The following command was run on Router C
and was used to find the IPX network address for Router B.
RouterC#sh cdp entry *

Device ID: RouterB
Entry address(es):
IP address: 172.16.40.1
Novell address: 40.0000.0c8d.5c9d

In this chapter, we covered the following points:

The required IPX address and encapsulation types and the frame types
that Cisco routers can use when running IPX.

How to enable the Novell IPX protocol and configure router inter-
faces. We talked about and gave examples of how to configure IPX on
Cisco routers and its interfaces.

How to monitor the Novell IPX operation on the router. We covered
some basic tools for monitoring IPX on your routers.

The two parts of network addressing and these parts in specific pro-
tocol address examples.

The IPX host address and the different parts of this address.
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
422 Chapter 8

Configuring Novell IPX
Key Terms
Be sure you’re familiar with the following terms before taking the exam:
connection ID
encapsulation
framing
socket
virtual circuit
Commands in This Chapter
Command Description

the addresses on each interface.
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
424 Chapter 8

Configuring Novell IPX
Written Lab
In this section, you will write out the answers to the following IPX
related questions.
1. Write the command that lets you view your configured routed proto-
cols on your router.
2. Write the command to enable the IPX-routed protocol.
3. Write the command that enables IPX on individual interfaces. Config-
ure an Ethernet 0 interface with IPX network 11, Token Ring with
IPX network 15, and serial 0 with IPX network 20.
4. Write the command that lets you see the IPX routing table.
5. Write the two commands you can use to see the IPX address of an
interface.
6. Write the two commands that will find your neighbor’s IPX address.
7. Add the Ethernet_II frame type to an Ethernet 0 interface, but don’t
use a subinterface to accomplish this. Use IPX network number 11a.
8. Add the 802.2 and SNAP frame types to an Ethernet 0 interface using
subinterfaces. Use 11b and 11c IPX network numbers.
9. Write the commands that you can use to verify your IPX
configuration.
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
Hands-on Labs 425
Hands-on Labs
In this section, you will configure three 2501 routers with IPX routing.

www.sybex.com
426 Chapter 8

Configuring Novell IPX
4. Check your routed protocols again to see if IPX routing is enabled by
typing the commands sh prot or show protocol. Notice that IPX rout-
ing is enabled, but the interfaces don’t have IPX addresses, only IP
addresses.
5. Enable IPX on the individual interfaces by using the interface com-
mand ipx network. You can use any number, up to eight characters,
hexadecimal (A through F and 0 through 9). Here is an example for
router 2501A:
2501A#config t
2501A(config)#int e0
2501A(config-if)#ipx network 11
2501A(config-if)#int to0
2501A(config-if)#ipx network 15
2501A(config-if)#int s0
2501A(config-if)#ipx network 20
6. Configure the other routers in the lab with IPX networking.
7. Test your configuration. One of the best ways to do this is with the
show ipx route command.
8. Use the show protocol command and show ipx interface com-
mand to see the IPX addresses of an interface.
9. Once you find the IPX address of your neighbor routers, ping using
the IPX protocol. (You can either go to the neighbor routers’ console
port, use the show protocol or show ipx interface command, or
use the CDP protocol to gather the protocol information, as sh cdp
entry *.)
10. Use the ipx maximum-paths command to tell a Cisco router that it is

Ring, and FDDI
2. Notice the different options available. To use the Ethernet_II frame
type, you need to use the arpa keyword. You can use sec instead of
the full command secondary. Notice that you are adding the
Ethernet_II frame type to your Ethernet LAN off of interface E0 on
Router A.
RouterA(config-if)#ipx network 11a encapsulation
arpa ?
secondary Make this network a secondary network
<cr>
RouterA(config-if)#ipx network 11a encapsulation
arpa secondary
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
428 Chapter 8

Configuring Novell IPX
3. You can also add a secondary network number and frame type by
using subinterfaces. There is not a functional difference between using
the secondary command and subinterfaces. However, using subinter-
faces will possibly allow you more configuration control over using
the secondary command. Use a subinterface command on an Ether-
net network:
RouterC#config t
RouterC(config)#int e0.?
<0-4294967295> Ethernet interface number
RouterC(config)#int e0.1500
RouterC(config-subif)#ipx network 10b encap ?
arpa Novell Ethernet_II
hdlc HDLC on serial links

6. Verify your IPX configuration by using the show ipx route, show
ipx interface, and show protocol commands.
7. For practice, configure secondary and subinterfaces on all other routers.
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
430 Chapter 8

Configuring Novell IPX
Review Questions
1. Which of the following provides connection-oriented transport to
upper-layer protocols?
A. RIP
B. NLSP
C. SPX
D. NCP
2. Which of the following can respond to a client GNS request? (Choose
all that apply.)
A. Local NetWare server
B. Remote NetWare server
C. Local client
D. Cisco router
3. How often do servers exchange RIP and SAP information unless set
otherwise?
A. Every 15 seconds
B. Every 30 seconds
C. Every 60 seconds
D. Every 120 seconds
4. How can you configure a secondary subinterface on your Ethernet
interface?
A. Config t, int e0.24010

D. sho ipx servers
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
432 Chapter 8

Configuring Novell IPX
9. Which command would you use to check if the router is hearing your
server SAPs?
A. sho ipx route
B. sho ipx traffic
C. sho ipx interface
D. sho ipx servers
10. Which commands will allow you to display the IPX address of an
interface? (Choose all that apply.)
A. sh ipx route
B. sh int
C. sh prot
D. debug ipx int
E. show ipx inter
11. You want to forward IPX packets over multiple paths. What com-
mand do you use?
A. ipx forward maximum-paths
B. ipx maximum-paths
C. ipx forward
D. ipx forward-paths
12. Which of the following are valid Cisco encapsulation names? (Choose
all that apply.)
A. arpa = IPX Ethernet
B. hdlc = HDLC on serial links
C. novell-ether = IPX Ethernet_802.3

B. 802.2
C. Ethernet_II
D. SAP
E. Novell-Ether
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
434 Chapter 8

Configuring Novell IPX
17. If you want to enable the Ethernet_II frame type on your Ethernet
interface, which encapsulation should you use?
A. arpa
B. rarpa
C. sap
D. rip
E. snap
F. novell-ether
18. Which of the following commands will show you the routed protocols
running on your Cisco router?
A. show ipx traffic
B. show ip route
C. show protocols
D. show ipx protocols
19. Which command will show the network servers advertising on your
network?
A. sh novell
B. sh ipx sap
C. sh ipx servers
D. sh servers
20. Which command will show you the IPX RIP packets being sent and

RouterA(config)#int e0.10
RouterA(config-subif)#ipx network 11b encap sap
RouterA(config-subif)#int e0.11
RouterA(config-subif)#ipx network 11c encap snap
9. Sh ipx route
Sh protocol
Sh ipx int
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com
Answer to Review Questions 437
Answer to Review Questions
1. C. Sequenced Packet Exchange works with IPX to make a connection-
oriented service at the Transport layer.
2. A, D. Only a local NetWare server or a router can respond to a GNS
request. A remote server will never see the request.
3. C. IPX RIP and SAP are broadcast every 60 seconds by default by
every router and server on the internetwork.
4. A. The only correct answer is A. The command to create a subinter-
face is int type int.number (int e0.10, for example).
5. B. The IPX address is four bytes for the network and six bytes for the
node address, in hex.
6. C. It is possible that the frame types on a LAN interface are not the
same between the server and the clients. This would cause the clients
to not see the server.
7. A, B. You can either use the secondary command or create subinter-
faces on a LAN interface to create multiple virtual IPX networks.
8. C. The command show ipx traffic shows all the RIP and SAP
information received on the router, but the command show ipx
interface shows the RIP and SAP information received only on a
certain interface.

advertising SAPs on your network.
20. C. The debug ipx routing activity command will show you the
IPX RIP packets being sent and received on your router.
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com

Chapter

9

Managing Traffic with
Access Lists

THE CCNA EXAM TOPICS COVERED IN THIS
CHAPTER INCLUDE THE FOLLOWING:


Configure IP and IPX standard access lists


Configure IP and IPX extended access lists


Configure IPX SAP filters


Monitor and verify access lists
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com


www.sybex.com