Compatible Systems 5.4 - Manual (Page 214)

208 Chapter 12 - IPX Filtering
• Filter rules specifying out are only applied to server information being
sent from the device.
• Filter rules specifying both are applied to server information in both
directions.
IPX SAP Filter Rule Modifiers
The source address, destination address, source interface or destination inter-
face can be specified using the from and to options. These keywords modify
the global nature of a SAP filter rule.
• from or from This modifier tells the device
to apply the rule only to server information coming from a specified IPX
address, or interface (e.g. Ethernet 0, WAN 1, etc.).
The IPX address parameter is specified as a hexadecimal network
number and node number separated by a dash ( e.g. A011-0:0:A5:0:0:1
indicates a node with the hexadecimal network number of A011 and a
node address of 0:0:A5:0:0:1).
• to or to This modifier tells the device to
apply the rule only to server information being sent to a specified IPX
address (where the address is in the same format as discussed above), or
interface (e.g. Ethernet 0, WAN 1, etc.).
Filter rules can also optionally be set to modify some SAP information as it
is handled by the device.
• metricin This modifier tells the device to increment
the metric on incoming servers which match the filter rule. The value to
increment by can be from 1 to 15.
• metricout This modifier tells the device to increment
the metric on outgoing servers which match the filter rule. The value to
increment by can be from 1 to 15.
IPX SAP Filter Rule Notification
Filter rule matches can optionally cause a log message to be sent. By default,
no logging of matches is performed. See the section on the Logging Config-
uration Dialog Box of this manual for more information.
• log The log keyword causes the device to send information about the
packet to syslog when the condition of the rule is met.
IPX SAP Filter Rule Examples
The following example specifies a rule set to ignore any server named “Test
Server.” The permit line states that all other servers should be entered into
the device’s SAP table.