IPX ACL don't work correctly

[scytmax_2]

Dear Sirs!

I've such router configuration (question-related):

ipx routing 0008.21c4.7460

ipx maximum-paths 4

int s0/0

ipx network 111

ipx access-group 900 in

access-list 900 permit rip 111 cping any cping

access-list 900 permit rip 111 nping any nping

access-list 900 permit rip any rip any rip

access-list 900 permit sap any sap any sap

access-list 900 deny any any all any all

Then I try to ping 111.0008.21c4.7460 from directly-connected router R2:

R1#ping 111.0008.21c4.7460

Translating "111.0008.21c4.7460"

Type escape sequence to abort.

Sending 5, 100-byte IPXcisco Echoes to 111.0008.21c4.7460, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/14/16 ms

R1#

BUT can't do it with novell pings:

R1#ping 111.0008.21c4.7460

4d00h: %SYS-5-CONFIG_I: Configured from console by console

Translating "111.0008.21c4.7460"

Type escape sequence to abort.

Sending 5, 100-byte IPX Novell Echoes to 111.0008.21c4.7460, timeout is 2 second

s:

.....

Success rate is 0 percent (0/5)

R1#

Why?

Best regards,

Nick

[Prashanth Krishnappa]

A cisco router implements two types of IPX ping:

Cisco IPX ping: this is the default Cisco proprietary protocol a router will use

when you attempt to ping an IPX address.

Novell IPX ping: this is the only one that Novell servers can run, and it is not compatible with Cisco's implementation.

So basically, you can use Cisco IPX ping to test connectivity between Cisco devices configured for IPX. If you want to ping a Novell server, you have to configure the router to send Novell IPX ping, using the global configuration

command: "ipx ping-default novell"

[scytmax_2]

Thank you for answer, but it's not this case:

as I find, this ACL works with nping only if the protocol pointed are sap:

access-list 900 permit rip 111 cping any cping log

access-list 900 permit sap 111 nping any nping log

Best regards,

Nick