Access and Communication Servers Command Reference
Novell IPX Commands

Table Of Contents

Novell IPX Commands

access-list (extended)

access-list (SAP filtering)

access-list (standard)

area-address

clear ipx accounting

clear ipx cache

clear ipx nlsp neighbors

clear ipx route

distribute-list in

distribute-list out

ipx access-group

ipx accounting

ipx accounting-list

ipx accounting-threshold

ipx accounting-transits

ipx advertise-default-route-only

ipx backup-server-query-interval

ipx default-output-rip-delay

ipx default-output-sap-delay

ipx default-route

ipx default-triggered-rip-delay

ipx default-triggered-sap-delay

ipx delay

ipx down

ipx gns-reply-disable

ipx gns-response-delay

ipx gns-round-robin

ipx hello-interval eigrp

ipx helper-address

ipx helper-list

ipx hold-time eigrp

ipx input-network-filter

ipx input-sap-filter

ipx internal-network

ipx ipxwan

ipx ipxwan error

ipx ipxwan static

ipx link-delay

ipx maximum-hops

ipx maximum-paths

ipx netbios input-access-filter

ipx netbios output-access-filter

ipx network

ipx nlsp csnp-interval

ipx nlsp enable

ipx nlsp hello-interval

ipx nlsp metric

ipx nlsp priority

ipx nlsp retransmit-interval

ipx nlsp rip

ipx nlsp sap

ipx output-gns-filter

ipx output-network-filter

ipx output-rip-delay

ipx output-sap-delay

ipx output-sap-filter

ipx pad-process-switched-packets

ipx ping-default

ipx rip-max-packetsize

ipx rip-multiplier

ipx route

ipx route-cache

ipx router

ipx router-filter

ipx router-sap-filter

ipx routing

ipx sap

ipx sap-incremental

ipx sap-interval

ipx sap-max-packetsize

ipx sap-multiplier

ipx sap-queue-maximum

ipx source-network-update

ipx split-horizon eigrp

ipx spx-idle-time

ipx spx-spoof

ipx throughput

ipx triggered-rip-delay

ipx triggered-sap-delay

ipx type-20-helpered

ipx type-20-input-checks

ipx type-20-output-checks

ipx type-20-propagation

ipx update-time

ipx watchdog-spoof

lsp-gen-interval

lsp-mtu

lsp-refresh-interval

max-lsp-lifetime

netbios access-list

network

ping (privileged)

ping (user)

redistribute

show ipx accounting

show ipx cache

show ipx eigrp neighbors

show ipx eigrp topology

show ipx interface

show ipx nlsp database

show ipx nlsp neighbors

show ipx route

show ipx servers

show ipx spx-spoof

show ipx traffic

spf-interval


Novell IPX Commands


Novell Internet Packet Exchange (IPX) is derived from the Xerox Network Systems (XNS) Internet Datagram Protocol (IDP). One major difference between IPX and XNS is that they do not always use the same Ethernet encapsulation format. A second difference is that IPX uses Novell's proprietary Service Advertisement Protocol (SAP) to advertise special network services.

Our implementation of Novell's IPX protocol has been certified as providing full IPX access server functionality. Our access server connects Ethernet, Token Ring, and FDDI networks, either directly or through high-speed serial lines (56 kbps to T1 speeds), X.25, or Frame Relay. The Cisco X.25 and T1 support currently is not compatible with Novell. This means that our access servers must be used on both ends of T1 and X.25 circuits.


Note   One or more of the commands that previously appeared this chapter have been replaced by new commands. See the Router Products Command Reference publication for command information. The old commands continue to perform their normal function in the current release, but support for them will cease in future releases.


Use the commands in this chapter to configure and monitor Novell IPX networks. For IPX configuration information and examples, refer to the "Configuring Novell IPX" chapter in the Access and Communication Servers Configuration Guide.


Note   For all commands that previously had the keyword novell, this keyword has been changed to ipx. However, you can still use the keyword novell in all commands.


access-list (extended)

To define an extended Novell IPX access list, use the extended version of the access-list global configuration command. To remove an extended access list, use the no form of this command.

access-list access-list-number {deny | permit} protocol [source-network][[[.source-node]
source-node-mask] | [.source-node source-network-mask.source-node-mask]]
[
source-socket] [destination.network][[[.destination-node] destination-node-mask] |
[
.destination-node destination-network-mask.destination-nodemask]] [destination-socket]

no access-list access-list-number {deny | permit} protocol [source-network][[[.source-node]
source-node-mask] | [.source-node source-network-mask.source-node-mask]]
[
source-socket] [destination.network][[[.destination-node] destination-node-mask] |
[
.destination-node destination-network-mask.destination-nodemask]] [destination-socket]

Syntax Description

access-list-number

Number of the access list. This is a decimal number from 900 to 999.

deny

Denies access if the conditions are matched.

permit

Permits access if the conditions are matched.

protocol

Number of an IPX protocol type, in decimal. This also is sometimes referred to as the packet type. in the "Usage Guidelines" section lists some IPX protocol numbers.

source-network

(Optional) Number of the network from which the packet is being sent. This is an eight-digit hexadecimal number that uniquely identifies a network cable segment. It can be a number in the range 1 to FFFFFFFE. A network number of 0 matches the local network. A network number of -1 matches all networks.

You do not need to specify leading zeros in the network number; for example, for the network number 000000AA, you can just enter AA.

source-node

(Optional) Node on source-network from which the packet is being sent. This is a 48-bit value represented by a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx).

source-network-mask

(Optional) Mask to be applied to source-network. This is an eight-digit hexadecimal mask. Place ones in the bit positions you want to mask.

The mask must immediately be followed by a period, which must in turn immediately be followed by source-node-mask.

source-node-mask

(Optional) Mask to be applied to source-node. This is a 48-bit value represented as a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx). Place ones in the bit positions you want to mask.

source-socket

Socket number from which the packet is being sent, in hexadecimal. in the "Usage Guidelines" section lists some IPX socket numbers.

destination-network

(Optional) Number of the network to which the packet is being sent. This is an eight-digit hexadecimal number that uniquely identifies a network cable segment. It can be a number in the range 1 to FFFFFFFE. A network number of 0 matches the local network. A network number of -1 matches all networks.

You do not need to specify leading zeros in the network number. For example, for the network number 000000AA, you can enter just AA.

destination-node

(Optional) Node on destination-network to which the packet is being sent. This is a 48-bit value represented by a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx).

destination-network-mask

(Optional) Mask to be applied to destination-network. This is an eight-digit hexadecimal mask. Place ones in the bit positions you want to mask.

The mask must immediately be followed by a period, which must in turn immediately be followed by destination-node-mask.

destination-node-mask

(Optional) Mask to be applied to destination-node. This is a

48-bit value represented as a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx). Place ones in the bit positions you want to mask.

destination-socket

(Optional) Socket number to which the packet is being sent, in hexadecimal. in the "Usage Guidelines" section lists some IPX socket numbers.


Default

No access lists are predefined.

Command Mode

Global configuration

Usage Guidelines

Extended IPX access lists filter on protocol type. All other parameters are optional.

If a network mask is used, all other fields are required.

Use the ipx access-group command to assign an access list to an interface. You can apply only one extended or one standard access list to an interface. The access list filters all outgoing packets on the interface.


Note   For some versions of NetWare, the protocol type field is not a reliable indicator of the type of packet encapsulated by the IPX header. In these cases, use the source and destination socket fields to make this determination. For additional information, contact Novell.


lists some IPX protocol numbers. lists some IPX socket numbers. For additional information about IPX protocol numbers and socket numbers, contact Novell.

Table 20-1 Some IPX Protocol Numbers

IPX Protocol Number (Decimal)
Protocol (Packet Type)

-1

Wild card; matches any packet type.

0

Could be any protocol; refer to the socket number to determine the packet type.

1

Routing Information Protocol (RIP)..

4

Service Advertisement Protocol (SAP)

5

Sequenced Packet Exchange (SPX)..

17

NetWare Core Protocol (NCP)

20

IPX NetBIOS..


Table 20-2 Some IPX Socket Numbers

IPX Socket Number (Hexadecimal)
Socket

0

All sockets, wild card used to match all sockets

451

NetWare Core Protocol (NCP) process.

452

Service Advertisement Protocol (SAP) process..

453

Routing Information Protocol (RIP) process

455

Novell NetBIOS process..

456

Novell diagnostic packet

457

Novell serialization socket..

4000-7FFF

Dynamic sockets; used by workstations for interaction with file servers and other network servers.

8000-FFFF

Well-known sockets as assigned by Novell.


To delete an extended access list, specify the minimum number of keywords and arguments needed to delete the proper access list. For example, to delete the entire access list, use the following command:

no access-list access-list-number

To delete the access list for a specific protocol, use the following command:

no access-list access-list-number {deny | permit} protocol

Examples

The following example denies access to all RIP packets (protocol number 1) from socket 453 (RIP process socket) on source network 1 that are destined for socket 453 on network 2. It permits all other traffic.

access-list 900 deny 1 453 2 453 
access-list 900 permit 0 -1 0 -1 0 

The following example permits type 2 packets from any socket on network 10 to access any sockets on any nodes on networks 1000 through 100F. It denies all other traffic (with an implicit deny all):

access-list 910 permit 20 10.0000.0C00.0000 0000.0000.FFFF 0  
 1000.0000.0000.0000 F.FFFF.FFFF.FFFF 0

Note   This type is chosen only as an example. The actual type to use depends on the specific application.


Related Commands

A dagger (†) indicates that the command is documented in another chapter.

access-list (standard)
ipx access-group
ipx input-network-filter
ipx output-network-filter
ipx router-filter
priority-list protocol

access-list (SAP filtering)

To define an access list for filtering Service Advertisement Protocol (SAP) requests, use the SAP filtering form of the access-list global configuration command. To remove the access list, use the no form of this command.

access-list access-list-number {deny | permit} network[.node] [network.node-mask]
[service-type [server-name]]
no access-list access-list-number {deny | permit} network[.node] [network.node-mask]
[service-type [server-name]]

Syntax Description

access-list-number

Number of the SAP access list. This is a decimal number from 1000 to 1099.

deny

Denies access if the conditions are matched.

permit

Permits access if the conditions are matched.

network

Network number. This is an eight-digit hexadecimal number that uniquely identifies a network cable segment. It can be a number in the range 1 to FFFFFFFE. A network number of 0 matches the local network. A network number of -1 matches all networks.

You do not need to specify leading zeros in the network number. For example, for the network number 000000AA, you can enter just AA.

node

(Optional) Node on network. This is a 48-bit value represented by a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx).

network.node-mask

(Optional) Mask to be applied to network and node. Place ones in the bit positions to be masked.

service-type

(Optional) Service type on which to filter. This is a hexadecimal number. A value of 0 means all services. in the "Usage Guidelines" section lists examples of service types.

server-name

(Optional) Name of the server providing the specified service type. This can be any contiguous string of printable ASCII characters. Use double quotation marks (" ") to enclose strings containing embedded spaces. You can use an asterisk (*) at the end of the name as a wildcard to match one or more trailing characters.


Default

No access lists are predefined.

Command Mode

Global configuration

Usage Guidelines

When configuring SAP filters for NetWare 3.11 and later servers, use the server's internal network and node number (the node number is always 0000.0000.0001) as its address in the access-list command. Do not use the network.node address of the particular interface board.

lists some sample IPX SAP types. For more information about SAP types, contact Novell. Note that in the filter (specified by the service-type argument), we define a value of 0 to filter all SAP services. If, however, you receive a SAP packet with a SAP type of 0, this indicates an unknown service.

Table 20-3 Sample IPX SAP Services

Service Type (Hexadecimal)
Description

0

All SAP services; IPX defines server type 0 to be an unknown service, which means that you cannot define an access list to permit or deny unknown services

1

User

2

User group

3

Print server queue

4

File server

5

Job server

7

Print server

9

Archive server

A

Queue for job servers

21

NAS SNA gateway

2D

Time Synchronization VAP

2E

Dynamic SAP

47

Advertising print server

4B

Btrieve VAP 5.0

4C

SQL VAP

7A

TES—NetWare for VMS

98

NetWare access server

9A

Named Pipes server

9E

Portable NetWare—UNIX

111

Test server

166

NetWare management (Novell's Network Management Station [NMS])

26A

NetWare management (NMS console)

FFFF

Wildcard (any SAP service)


To delete a SAP access list, specify the minimum number of keywords and arguments needed to delete the proper access list. For example, to delete the entire access list, use the following command:

no access-list access-list-number

To delete the access list for a specific network, use the following command:

no access-list access-list-number {deny | permit} network

Example

The following access list blocks all access to a file server (service type 4) on the directly attached network by resources on other Novell networks, but allows access to all other available services on the interface:

access-list 1001 deny -1 4
access-list 1001 permit -1

Related Commands

A dagger (†) indicates that the command is documented in another chapter.

ipx input-sap-filter
ipx output-gns-filter
ipx output-sap-filter
ipx router-sap-filter
priority-list protocol

access-list (standard)

To define a standard IPX access list, use the standard version of the access-list global configuration command. To remove a standard access list, use the no form of this command.

access-list access-list-number {deny | permit} source-network[.source-node
[source-node-mask]] [destination-network[.destination-node [destination-node-mask]]]
no access-list access-list-number {deny | permit} source-network[.source-node
[source-node-mask]] [destination-network[.destination-node [destination-node-mask]]]

Syntax Description

access-list-number

Number of the access list. This is a decimal number from 800 to 899.

deny

Denies access if the conditions are matched.

permit

Permits access if the conditions are matched.

source-network

Number of the network from which the packet is being sent. This is an eight-digit hexadecimal number that uniquely identifies a network cable segment. It can be a number in the range 1 to FFFFFFFE. A network number of 0 matches the local network. A network number of -1 matches all networks.

You do not need to specify leading zeros in the network number. For example, for the network number 000000AA, you can enter just AA.

source-node

(Optional) Node on source-network from which the packet is being sent. This is a 48-bit value represented by a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx).

source-node-mask

(Optional) Mask to be applied to source-node. This is a 48-bit value represented as a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx). Place ones in the bit positions you want to mask.

destination-network

(Optional) Number of the network to which the packet is being sent. This is an eight-digit hexadecimal number that uniquely identifies a network cable segment. It can be a number in the range 1 to FFFFFFFE. A network number of 0 matches the local network. A network number of -1 matches all networks.

You do not need to specify leading zeros in the network number. For example, for the network number 000000AA, you can enter just AA.

destination-node

(Optional) Node on destination-network to which the packet is being sent. This is a 48-bit value represented by a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx).

destination-node-mask

(Optional) Mask to be applied to destination-node. This is a 48-bit value represented as a dotted triplet of four-digit hexadecimal numbers (xxxx.xxxx.xxxx). Place ones in the bit positions you want to mask.


Default

No access lists are predefined.

Command Mode

Global configuration

Usage Guidelines

Standard IPX access lists filter on the source network. All other parameters are optional.

Use the ipx access-group command to assign an access list to an interface. You can apply only one extended or one standard access list to an interface. The access list filters all outgoing packets on the interface.

To delete a standard access list, specify the minimum number of keywords and arguments needed to delete the proper access list. For example, to delete the entire access list, use the following command:

no access-list access-list-number

To delete the access list for a specific network, use the following command:

no access-list access-list-number {deny | permit} source-network

Examples

The following example denies access to traffic from all IPX networks (-1) to destination network 2:

access-list 800 deny -1 2

The following example denies access to all traffic from IPX address 1.0000.0c00.1111:

access-list 800 deny 1.0000.0c00.1111

The following example denies access from all nodes on network 1 that have a source address beginning with 0000.0c:

access-list 800 deny 1.0000.0c00.0000 0000.00ff.ffff

The following example denies access from source address 1111.1111.1111 on network 1 to destination address 2222.2222.2222 on network 2:

access-list 800 deny 1.1111.1111.1111 0000.0000.0000 2.2222.2222.2222 0000.0000.0000

or

access-list 800 deny 1.1111.1111.1111 2.2222.2222.2222

Related Commands

A dagger (†) indicates that the command is documented in another chapter.

access-list (extended)
ipx access-group
ipx input-network-filter
ipx output-network-filter
ipx router-filter
priority-list protocol

area-address

To define a set of network numbers to be part of the current NLSP area, use the area-address router configuration command. To remove a set of network numbers from the current NLSP area, use the no form of this command.

area-address address mask
no area-address address mask

Syntax Description

address

Network number prefix. This is a 32-bit hexadecimal number.

mask

Mask that defines the length of the network number prefix. This is a 32-bit hexadecimal number.


Default

No area address is defined by default.

Command Mode

Router configuration

Usage Guidelines

You must configure at least one area address before NLSP will operate.

The area-address command defines a prefix that includes all networks that are in the area.

All networks that are part of the NLSP area (that is, all networks that are configured on an interface on which NLSP is enabled) must fall under the area address prefix. This configuration is for future compatibility: when Level 2 NLSP becomes available, the only route advertised for the area will be the area address prefix (the prefix represents all networks within the area).

All routers and access server in an NLSP area must be configured with a common area address, or they will form separate areas.

The area address must have zero bits in all bit positions where the mask has zero bits. The mask must consist of only left-justified contiguous one bits.

Examples

The following example defines an area address that includes networks AAAABBC0 through AAAABBDF:

area-address AAAABBC0 FFFFFFE0

The following example defines an area address that includes all networks:

area-address 0 0

Related Command

ipx router nlsp

clear ipx accounting

To delete all entries in the active accounting database when IPX accounting is enabled, use the clear ipx accounting EXEC command.

clear ipx accounting [checkpoint]

Syntax Description

checkpoint

(Optional) Clears the checkpointed database.


Command Mode

EXEC

Usage Guidelines

If you omit the checkpoint argument, all the entries in the active database are deleted. You can also delete all entries in the checkpointed database by issuing the clear ipx accounting command twice in succession.

Example

The following example clears all entries in the active database:

clear ipx accounting

Related Commands

ipx accounting
ipx accounting-list
ipx accounting-threshold
ipx accounting-transits
show ipx accounting

clear ipx cache

To delete entries from the IPX fast-switching cache, use the clear ipx cache EXEC command.

clear ipx cache

Syntax Description

This command has no arguments or keywords.

Command Mode

EXEC

Usage Guidelines

The clear ipx cache command clears entries used for fast switching.

Example

The following example deletes all entries from the IPX fast-switching cache:

clear ipx cache

Related Commands

ipx route-cache
show ipx cache

clear ipx nlsp neighbors

To delete all NLSP adjacencies from the router's adjacency database, use the clear ipx nlsp neighbors EXEC command.

clear ipx nlsp neighbors

Syntax Description

This command has no arguments or keywords.

Command Mode

EXEC

Usage Guidelines

Deleting all entries from the adjacency database forces all routers in the area to perform the shortest path first (SPF) calculation.

Example

The following example deletes all NLSP adjacencies from the router's adjacency database:

clear ipx nlsp neighbors

Related Commands

ipx router nlsp
spf-interval

clear ipx route

To delete routes from the IPX routing table, use the clear ipx route EXEC command.

clear ipx route {network | default | *}

Syntax Description

network

Number of the network whose routing table entry you want to delete. This is an eight-digit hexadecimal number that uniquely identifies a network cable segment. It can be a number in the range 1 to FFFFFFFD. You do not need to specify leading zeros in the network number. For example, for the network number 000000AA, you can enter just AA.

default

Deletes the default route from the routing table.

*

Deletes all routes in the routing table.


Command Mode

EXEC

Usage Guidelines

After you use the clear ipx route command, RIP/SAP general requests are issued on all IPX interfaces.

Example

The following example clears the entry for network 3 from the IPX routing table:

clear ipx route 3

Related Command

show ipx route

distribute-list in

To filter networks received in updates, use the distribute-list in router configuration command. To change or cancel the filter, use the no form of this command.

distribute-list access-list-number in [interface-name]
no distribute-list access-list-number in [interface-name]

Syntax Description

access-list-number

Standard IPX access list number in the range 800 to 899. The list explicitly specifies which networks are to be received and which are to be suppressed.

in

Applies the access list to incoming routing updates.

interface-name

(Optional) Interface on which the access list should be applied to incoming updates. If no interface is specified, the access list is applied to all incoming updates.


Default

Disabled

Command Mode

Router configuration

Example

The following example causes only two networks—network 2 and network 3—to be accepted by an IP Enhanced IGRP routing process:

access-list 800 permit 2
access-list 800 permit 3
access-list 800 deny -1
!
ipx router eigrp 100
 network 3
 distribute-list 800 in

Related Commands

A dagger (†) indicates that the command is documented in another chapter.

access-list
distribute-list out
redistribute

distribute-list out

To suppress networks from being advertised in updates, use the distribute-list out router configuration command. To cancel this function, use the no form of this command.

distribute-list access-list-number out [interface-name | routing-process]
no distribute-list access-list-number out [interface-name | routing-process]

Syntax Description

access-list-number

Standard IPX access list number in the range 800 to 899. The list explicitly specifies which networks are to be sent and which are to be suppressed in routing updates.

out

Applies the access list to outgoing routing updates.

interface-name

(Optional) Interface on which the access list should be applied to outgoing updates. If no interface is specified, the access list is applied to all outgoing updates.

routing-process

(Optional) Name of a particular routing process (rip or eigrp autonomous system number).


Default

Disabled

Usage Guidelines

When redistributing networks, a routing process name can be specified as an optional trailing argument to the distribute-list out command. This causes the access list to be applied to only those routes derived from the specified routing process. After the process-specific access list is applied, any access list specified by a distribute-list out command without a process name argument is applied. Addresses not specified in the distribute-list out command are not advertised in outgoing routing updates.

Example

The following example causes only one network—network 3—to be advertised by an IPX Enhanced IGRP routing process:

access-list 800 permit 3
access-list 800 deny -1
!
ipx router eigrp 100
 network 3
 distribute-list 800 out

Related Commands

A dagger (†) indicates that the command is documented in another chapter.

access-list
distribute-list in
redistribute

ipx access-group

To apply a generic output filter to an interface, use ipx access-group interface configuration command. To remove the access list, use the no form of this command.

ipx access-group access-list-number
no ipx access-group access-list-number

Syntax Description

access-list-number

Number of the access list. All outgoing packets defined with either standard or extended access lists and forwarded through the interface are filtered by the entries in this access list. For standard access lists, access-list-number is a decimal number from 800 to 899. For extended access lists, access-list-number is a decimal number from 900 to 999.


Default

No filters are predefined.

Command Mode

Interface configuration

Usage Guidelines

Generic filters control which packets are sent out an interface based on the packet's source and destination addresses, IPX protocol type, and source and destination socket numbers. You use the standard access-list and extended access-list commands to specify the filtering conditions.

You can apply only one generic filter to an interface.

Example

In the following example, access list 801 is applied to Ethernet interface 1:

interface ethernet 1
 ipx access-group 801

Related Commands

A dagger (†) indicates that the command is documented in another chapter.

access-list (standard)
access-list (SAP filtering)
priority-list protocol

ipx accounting

To enable IPX accounting, use the ipx accounting interface configuration command. To disable IPX accounting, use the no form of this command.

ipx accounting
no ipx accounting

Syntax Description

This command has no arguments or keywords.

Default

Disabled

Command Mode

Interface configuration

Usage Guidelines

IPX accounting allows you to collect information about IPX packets and the number of bytes that are switched through the access server. You collect information based on the source and destination IPX address. Accounting tracks only IPX traffic that is passing out of the access server; it does not track traffic generated by or terminating at the access server.

IPX accounting statistics will be accurate even if IPX fast switching is enabled or if IPX access lists are being used. However, IPX accounting does not keep statistics if autonomous switching is enabled.

The access server software maintains two accounting databases: an active database and a checkpointed database.

Example

The following example enables IPX accounting on Ethernet interface 0:

interface ethernet 0
 ipx accounting

Related Commands

clear ipx accounting
ipx accounting-list
ipx accounting-threshold
ipx accounting-transits
show ipx accounting

ipx accounting-list

To filter the networks for which IPX accounting information is kept, use the ipx accounting-list global configuration command. To remove the filter, use the no form of this command.

ipx accounting-list number mask
no ipx accounting-list number mask

Syntax Description

number

Network number. This is an eight-digit hexadecimal number that uniquely identifies a network cable segment. It can be a number in the range 1 to FFFFFFFD.

You do not need to specify leading zeros in the network number. For example, for the network number 000000AA you can enter AA.

mask

Network mask.


Default

No filters are predefined.

Command Mode

Global configuration

Usage Guidelines

The source and destination addresses of each IPX packet are logically ANDed with the mask and compared with the network number. If there is a match, accounting information about the IPX packet is entered into the accounting database. If there is no match, the IPX packet is considered to be a transit packet and may be counted, depending on the setting of the ipx accounting-transits global configuration command.

Example

The following example adds all networks with IPX network numbers beginning with 1 to the list of networks for which accounting information is kept:

ipx accounting-list 1 0000.0000.0000

Related Commands

clear ipx accounting
ipx accounting
ipx accounting-threshold
ipx accounting-transits
show ipx accounting

ipx accounting-threshold

To set the maximum number of accounting database entries, use the ipx accounting-threshold global configuration command. To restore the default, use the no form of this command.

ipx accounting-threshold threshold
no ipx accounting-threshold threshold

Syntax Description

threshold

Maximum number of entries (source and destination address pairs) that the access server can accumulate


Default

512 entries

Command Mode

Global configuration

Usage Guidelines

The accounting threshold defines the maximum number of entries (source and destination address pairs) that the access server accumulates. The threshold is designed to prevent IPX accounting from consuming all available free memory. This level of memory consumption could occur in an access server that is switching traffic for many hosts. To determine whether overflows have occurred, used the show ipx accounting EXEC command.

Example

The following example sets the IPX accounting database threshold to 500 entries:

ipx accounting-threshold 500

Related Commands

clear ipx accounting
ipx accounting
ipx accounting-list
ipx accounting-list
show ipx accounting

ipx accounting-transits

To set the maximum number of transit entries that will be stored in the IPX accounting database, use the ipx accounting-transits global configuration command. To disable this function, use the no form of this command.

ipx accounting-transits count
no ipx accounting-transits

Syntax Description

count

Number of transit entries that will be stored in the IPX accounting database


Default

0 entries

Command Mode

Global configuration

Usage Guidelines

Transit entries are those that do not match any of the filters specified by ipx accounting-list global configuration commands. If you have not defined any filters, no transit entries are possible.

To maintain accurate accounting totals, the access server software maintains two accounting databases: an active database and a checkpointed database.

Example

The following example specifies a maximum of 100 transit records to be stored in the IPX accounting database:

ipx accounting-transits 100

Related Commands

clear ipx accounting
ipx accounting
ipx accounting-list
ipx accounting-threshold
show ipx accounting

ipx advertise-default-route-only

To advertise only the RIP default route via the specified network, use the ipx advertise-default-route-only interface configuration command. To advertise all routes out the interface, use the no form of this command.

ipx advertise-default-route-only network
no ipx advertise-default-route-only network

Syntax Description

network

Number of the network via which to advertise the RIP default route. This is the only network advertised.


Default

Disabled. All default routes are advertised.

Command Mode

Interface configuration

Usage Guidelines

If you specify the ipx advertise-default-route-only command, only the default route, if known, will be advertised out the interface. If you have a large number of routes in the routing table, for example, 1000 routes, none of them will be advertised out the interface. Nodes on the interface can still reach any of the 1000 networks because they know the default. Specifying the ipx advertise-default-route-only command results in a significant reduction in CPU processing overhead when there are many routes and many interfaces. It also reduces the load on downstream routers.


Note   Services are not reachable through the RIP default route. Therefore, do not specify the ipx advertise-default-route-only command if you want services advertised on this interface.


Example

The following example enables the advertising of the RIP default route only:

ipx advertise-default-route-only 3c.7389.4339

ipx backup-server-query-interval

To change the time between successive queries of each IPX Enhanced IGRP neighbor's backup server table, use the ipx backup-server-query-interval global configuration command. To restore the default time, use the no form of this command.

ipx backup-server-query-interval interval
no ipx backup-server-query-interval

Syntax Description

interval

Minimum time, in seconds, between successive queries of each Enhanced IGRP neighbor's backup server table. The default is 15 seconds.


Default

15 seconds

Command Mode

Global configuration

Usage Guidelines

A lower interval may use more CPU resources, but may cause lost server information to be retrieved from other servers' tables sooner.

Example

The following example changes the server query time to 5 seconds:

ipx backup-server-query-interval 5

ipx default-output-rip-delay

To set the default interpacket delay for Routing Information Protocol (RIP) updates sent on all interfaces, use the ipx default-output-rip-delay global configuration command. To return to the initial default delay value, use the no form of this command.

ipx default-output-rip-delay delay
no ipx default-output-rip-delay [delay]

Syntax Description

delay

Delay, in milliseconds, between packets in a multiple-packet RIP update. With Cisco IOS Release 10.0 and Release 10.2, the default delay is 0 ms. With Cisco IOS Release 10.3 and Release 11.0, the default delay is 5 ms. Novell recommends a delay of 55 ms.


Default

With Cisco IOS Release 10.0 and Release 10.2, the default delay is 0 ms (that is, no additional delay between routing update packets). With Cisco IOS Release 10.3 and Release 11.0, the default delay is 5 ms.

Command Mode

Global configuration

Usage Guidelines

The interpacket delay is the delay between the individual packets sent in a multiple-packet routing update. The ipx default-output-rip-delay command sets a default interpacket delay for all interfaces.

The system uses the delay specified by the ipx default-output-rip-delay command for periodic and triggered routing updates when no delay is set for periodic and triggered routing updates on an interface. When you set a delay for triggered routing updates, the system uses the delay specified by the ipx default-output-rip-delay command for only the periodic routing updates sent on all interfaces.

To set a delay for triggered routing updates, see the ipx triggered-rip-delay or ipx default-triggered-rip-delay commands.

Novell recommends a delay of 55 ms for compatibility with older and slower IPX machines. These machines may lose RIP updates because they process packets more slowly than the router sends them. The delay imposed by this command forces the router to pace its output to the slower-processing needs of these IPX machines.

The default delay on a NetWare 3.11 server is about 100 ms.

This command is also useful on limited bandwidth point-to-point links or X.25 and Frame Relay multipoint interfaces.

Example

The following example sets a default interpacket delay of 55 ms for RIP updates sent on all interfaces:

ipx default-output-rip-delay 55

Related Command

ipx default-triggered-rip-delay
ipx output-rip-delay
ipx triggered-rip-delay

ipx default-output-sap-delay

To set a default interpacket delay for Service Advertisement Protocol (SAP) updates sent on all interfaces, use the ipx default-output-sap-delay global configuration command. To return to the initial default delay value, use the no form of this command.

ipx default-output-sap-delay delay
no ipx default-output-sap-delay [delay]

Syntax Description

delay

Delay, in milliseconds, between packets in a multiple-packet SAP update. With Cisco IOS Release 10.0 and Release 10.2, the default delay is 0 ms. With Cisco IOS Release 10.3 and Release 11.0, the default delay is 5 ms. Novell recommends a delay of 55 ms.


Default

With Cisco IOS Release 10.0 and Release 10.2, the default delay is 0 ms (that is, no additional delay between update packets). With Cisco IOS Release 10.3 and Release 11.0, the default delay is 5 ms.

Command Mode

Global configuration

Usage Guidelines

The interpacket delay is the delay between the individual packets sent in a multiple-packet SAP update. The ipx default-output-sap-delay command sets a default interpacket delay for all interfaces.

The system uses the delay specified by the ipx default-output-sap-delay command for periodic and triggered SAP updates when no delay is set for periodic and triggered updates on an interface. When you set a delay for triggered updates, the system uses the delay specified by the ipx default-output-sap-delay command only for the periodic SAP updates sent on all interfaces.

To set a delay for triggered updates, see the ipx triggered-sap-delay or ipx default-triggered-sap-delay commands.

Novell recommends a delay of 55 ms for compatibility with older and slower IPX servers. These servers may lose SAP updates because they process packets more slowly than the router sends them. The delay imposed by this command forces the router to pace its output to the slower-processing needs of these servers.

The default delay on a NetWare 3.11 server is about 100 ms.

This command is also useful on limited bandwidth point-to-point links or X.25 interfaces.

Example

The following example sets a default interpacket delay of 55 ms for SAP updates sent on all interfaces:

ipx default-output-sap-delay 55

Related Command

ipx default-triggered-sap-delay
ipx output-sap-delay
ipx triggered-sap-delay

ipx default-route

To forward packets to a default network it the a route to the packet's destination network is unknown, use the ipx default-route global configuration command. To discard all packets if the route to the destination network is unknown, use the no form of this command.

ipx default-route
no ipx default-route

Syntax Description

This command has no arguments or keywords.

Default

Enabled; that is, all packets for which a route to the destination is unknown are forwarded towards the default network, which is -2.

Command Mode

Global configuration

Example

The following example disables the forwarding of packets towards the default network:

no ipx default-route

Related Command

ipx advertise-default-route-only

ipx default-triggered-rip-delay

To set the default interpacket delay for triggered Routing Information Protocol (RIP) updates sent on all interfaces, use the ipx default-triggered-rip-delay global configuration command. To return to the system default delay, use the no form of this command.

ipx default-triggered-rip-delay delay
no ipx default-triggered-rip-delay [delay]

Syntax Description

delay

Delay, in milliseconds, between packets in a multiple-packet RIP update. With Cisco IOS Release 10.0 and Release 10.2, the default delay is 0 ms. With Cisco IOS Release 10.3 and Release 11.0, the default delay is 5 ms. Novell recommends a delay of 55 ms.


Default

With Cisco IOS Release 10.0 and Release 10.2, the default delay is 0 ms (that is, no additional delay between routing update packets). With Cisco IOS Release 10.3 and Release 11.0, the default delay is 5 ms.

Command Mode

Global configuration

Usage Guidelines

The interpacket delay is the delay between the individual packets sent in a multiple-packet routing update. A triggered routing update is one that the system sends in response to a "trigger" event, such as a request packet, interface up/down, route up/down, or server up/down.

The ipx default-triggered-rip-delay command sets the default interpacket delay for triggered routing updates sent on all interfaces. On a single interface, you can override this global default delay for triggered routing updates using the ipx triggered-rip-delay interface command.

The global default delay for triggered routing updates overrides the delay value set by the ipx output-rip-delay or ipx default-output-rip-delay command for triggered routing updates.

If the delay value set by the ipx output-rip-delay or ipx default-output-rip-delay command is high, then we strongly recommend a low delay value for triggered routing updates so that updates triggered by special events are sent in a more timely manner than periodic routing updates.

Novell recommends a delay of 55 ms for compatibility with older and slower IPX machines. These machines may lose RIP updates because they process packets more slowly than the router sends them. The delay imposed by this command forces the router to pace its output to the slower-processing needs of these IPX machines.

The default delay on a NetWare 3.11 server is about 100 ms.

When you do not set the interpacket delay for triggered routing updates, the system uses the delay specified by the ipx output-rip-delay or ipx default-output-rip-delay command for both periodic and triggered routing updates.

When you use the no form of the ipx default-triggered-rip-delay command, the system uses the delay set by the ipx output-rip-delay or ipx default-output-rip-delay command for triggered RIP updates, if set. Otherwise, the system uses the initial default delay as described in the "Default" section.

This command is also useful on limited bandwidth point-to-point links or X.25 and Frame Relay multipoint interfaces.

Example

The following example sets an interpacket delay of 55 ms for triggered routing updates sent on all interfaces:

ipx default-triggered-rip-delay 55

Related Command

ipx default-output-rip-delay
ipx output-rip-delay
ipx triggered-rip-delay

ipx default-triggered-sap-delay

To set the default interpacket delay for triggered Service Advertisement Protocol (SAP) updates sent on all interfaces, use the ipx default-triggered-sap-delay global configuration command. To return to the system default delay, use the no form of this command.

ipx default-triggered-sap-delay delay
no ipx default-triggered-sap-delay [delay]

Syntax Description

delay

Delay, in milliseconds, between packets in a multiple-packet SAP update. With Cisco IOS Release 10.0 and Release 10.2, the default delay is 0 ms. With Cisco IOS Release 10.3 and Release 11.0, the default delay is 5 ms. Novell recommends a delay of 55 ms.


Default

With Cisco IOS Release 10.0 and Release 10.2, the default delay is 0 ms (that is, no additional delay between update packets). With Cisco IOS Release 10.3 and Release 11.0, the default delay is 5 ms.

Command Mode

Global configuration

Usage Guidelines

The interpacket delay is the delay between the individual packets sent in a multiple-packet SAP update. A triggered SAP update is one that the system sends in response to a "trigger" event, such as a request packet, interface up/down, route up/down, or server up/down.

The ipx default-triggered-sap-delay command sets the default interpacket delay for triggered SAP updates sent on all interfaces. On a single interface, you can override this global default delay for triggered updates using the ipx triggered-sap-delay interface command.

The global default delay for triggered updates overrides the delay value set by the ipx output-sap-delay or ipx default-output-sap-delay command for triggered updates.

If the delay value set by the ipx output-sap-delay or ipx default-output-sap-delay command is high, then we strongly recommend a low delay value for triggered updates so that updates triggered by special events are sent in a more timely manner than periodic updates.

Novell recommends a delay of 55 ms for compatibility with older and slower IPX servers. These servers may lose SAP updates because they process packets more slowly than the router sends them. The delay imposed by this command forces the router to pace its output to the slower-processing needs of these IPX servers.

The default delay on a NetWare 3.11 server is about 100 ms.

When you do not set the interpacket delay for triggered SAP updates, the system uses the delay specified by the ipx output-sap-delay or ipx default-output-sap-delay command for both periodic and triggered SAP updates.

When you use the no form of the ipx default-triggered-sap-delay command, the system uses the delay set by the ipx output-sap-delay or ipx default-output-sap-delay command for triggered SAP updates, if set. Otherwise, the system uses the initial default delay as described in the "Default" section.

This command is also useful on limited bandwidth point-to-point links or X.25 and Frame Relay multipoint interfaces.

Example

The following example sets an interpacket delay of 55 ms for triggered SAP updates sent on all interfaces:

ipx default-triggered-sap-delay 55

Related Command

ipx default-output-sap-delay
ipx output-sap-delay
ipx triggered-sap-delay

ipx delay

To set the tick count, use the ipx delay interface configuration command. To reset the default increment in the delay field, use the no form of this command.

ipx delay ticks
no ipx delay

Syntax Description

ticks

Number of IBM clock ticks of delay to use. One clock tick is 1/18th of a second (approximately 55 milliseconds).


Default

The default delay is determined from the delay configured on the interface with the delay command. It is (interface delay + 333) / 334. Therefore, unless you change the delay by a value greater than 334, you will not notice a difference.

Command Mode

Interface configuration

Usage Guidelines

The ipx delay command sets the count used in the IPX RIP delay field, which is also known as the ticks field.

Leaving the delay at its default value is sufficient for most interfaces.

If you do not specify the ipx delay command on an interface and you have not changed the interface delays with the interface delay interface configuration command, all LAN interfaces have a delay of 1 and all WAN interfaces have a delay of 6. The preferred method of adjusting delays is to use the ipx delay command, not the interface delay command. The show ipx interface EXEC command display only the delay value configured with the ipx delay command.

With IPXWAN, if you change the interface delay with the interface delay command, the ipx delay command uses that delay when calculating a delay to use. Also, when changing delays with IPXWAN, the changes affect only the link's calculated delay on the side considered to be the master.

Example

The following example changes the delay for serial interface 0 to 10 ticks:

interface serial 0 
 ipx delay 10

Related Commands

A dagger (†) indicates that the command is document