
              NOVELL TECHNICAL INFORMATION DOCUMENT

TITLE:              MPR 2.1 / MPR Plus 2.1 IPX RIP/SAP Filter Update 
DOCUMENT ID:        TID200011
DOCUMENT REVISION:  A
DATE:               04NOV93
ALERT STATUS:       Yellow
INFORMATION TYPE:   Symptom Solution
README FOR:         RIPSAP.EXE

NOVELL PRODUCT and VERSION:
NetWare MultiProtocol Router 2.1
NetWare MultiProtocol Router Plus 2.1

ABSTRACT:

This update adds IPX RIP/SAP filtering and NetBIOS broadcast packet filtering
to NetWare MultiProtocol Router 2.1 and 2.1 Plus.  RIP/SAP and NetBIOS
broadcast filtering enables the router to control which networks see IPX
Routing Information Protocol (RIP), Service Advertising Protocol (SAP), and
NetBIOS Broadcast (IPX Type 20) packets.


DISCLAIMER
THE ORIGIN OF THIS INFORMATION MAY BE INTERNAL OR EXTERNAL TO NOVELL.  NOVELL
MAKES EVERY EFFORT WITHIN ITS MEANS TO VERIFY THIS INFORMATION.  HOWEVER, THE
INFORMATION PROVIDED IN THIS DOCUMENT IS FOR YOUR INFORMATION ONLY.  NOVELL
MAKES NO EXPLICIT OR IMPLIED CLAIMS TO THE VALIDITY OF THIS INFORMATION.


SYMPTOM

     NetWare MultiProtocol Router 2.1 and NetWare MultiProtocol Router Plus
     2.1 are unable to filter IPX RIP and SAP traffic and are unable to filter
     IPX transport based NetBIOS broadcast packets.

SOLUTION

     Installing this update will allow NetWare MultiProtocol Router 2.1 and
     NetWare MultiProtocol Router Plus 2.1 to filter IPX RIP and SAP traffic
     and filter IPX type 20 packets (NetBIOS broadcasts).

     Self-Extracting File Name:  RIPSAP.EXE     Revision:  A

     Files Included    Size      Date

     \
       RIPSAP.TXT              (This File)
     RIPSAP_1.EXE     125102    11-03-93
     RIPSP_NW.PS      193314    11-02-93
     RIPSP_NW.TXT      27744    11-03-93

     The file RIPSAP.EXE is a self-extracting archive.

     Before you read the Installation Instructions below, please extract the
     file using the following procedure:

          1) Make a new directory on a hard disk.
          2) Copy RIPSAP.EXE into that directory.
          3) Run RIPSAP to extract the files listed above from them.

     Installation Instructions:

     This README does not contain the installation instructions for this
     update.  The installation and configuration instructions are in a manual
     that is part this update package.

     Please read on for more information about installing and configuring this
     update.

     This README contains the following information necessary for installation
     and configuration:

          1. A description of the files that contain the installation and
          configuration manual along with instructions for printing them.

          2. A description of how to make the installation diskette.  This
          diskette will be used during the installation process.

          3. A list of common problems that might occur during installation
          and configuration.

     1. The installation and configuration manual:

     One manual is shipped with this update:

          The NetWare IPX RIP/SAP Filtering Software - Installation and
          Configuration

     The manual, hereafter referred to as the Installation and Configuration
     manual, is in both a PostScript file called RIPSP_NW.PS, and a text file
     called RIPSP_NW.TXT.

     The Installation and Configuration manual contains instructions for:

          Installing NetWare IPX RIP/SAP Filtering
          Configuring NetWare IPX RIP/SAP Filtering

     You can print the text version of the Installation and Configuration
     manual using a word processor or whatever method you normally use for
     printing text files.  The following command can also be used to print the
     Installation and Configuration manual to a printer attached to those
     ports:

          COPY RIPSP_NW.TXT LPT1 (or LPT2)

     If you have a PostScript printer, you can print the PostScript version of
     the manual.  The following command will print the manual to a PostScript
     printer attached to those ports:

          COPY RIPSP_NW.PS LPT1 (or LPT2)

     If the LPTx port is being redirected to a Novell print queue by the use
     of CAPTURE, be sure to use PRINTCON to create a PostScript 'job' and
     issued the CAPTURE command with the JOB= parameter.

     2. Making the installation diskette:

     The Installation and Configuration manual will give you instructions for
     installing this update.  These instructions will refer to the
     Installation Diskette.  The following instructions will show you how to
     make the installation diskette from the self-extracting file RIPSAP_1.EXE
     (see the list of files in the previous section).

     Use the DOS FORMAT command to format a diskette (3.5" or 5.25"
     high-density media).  The FORMAT command will ask you for the label to
     put on the diskette (this is not the label that you paste on the
     diskette).  When asked, label the diskette:

          RIPSAP

     Now that the diskette is formatted and labeled, the next step is to
     transfer the software to the diskette by running the self-extracting file
     RIPSAP_1.EXE.

     Make sure that you are in the directory on your hard drive where you
     extracted the update files (see the section above titled SOLUTION for
     details).

     Insert the diskette labeled RIPSAP into the diskette drive.

     From the floppy drive's DOS prompt, enter the example command:

          A:> C:RIPSAP_1 <Enter>

     Because you run the self-extracting file from the diskette drive, the
     extraction process will place the files on the diskette.  The extraction
     process displays licensing information and asks you if you want to accept
     the terms and conditions of the licensing.  If you answer Yes, the
     process continues and the software is extracted onto the diskette.

     To check that the installation diskette has been made correctly, make
     sure that the directories and files listed below match what is on the
     diskette:

          \
          PRODUCTS 610      8192 05-21-93   8:53a
          PRODUCTS 515      5120 05-21-93   8:22a
          FILEDATA DAT      3843 11-02-93  12:45p
          PINSTALL HLP      4286 10-28-93  11:13a
          PINSTALL NLM     22523 11-02-93  11:45a
          PIN      DAT     76978 11-02-93  11:43a

          \IPX
          SAPCFG   NLM     44015 11-02-93  12:34p
          SAHANDLE NLM       544 11-02-93  12:30p

          \IPX\MPR
          LHANDLE  NLM     25333 11-02-93  12:31p

          \IPX\MPRPLUS
          WHANDLE  NLM     25522 11-02-93  12:32p
          IRWASM   NLM     27438 11-02-93  12:36p

          \NM
          IPXCFG   NLM     17738 11-02-93  11:55a

     3. Common installation and configuration problems, plus solutions:

     * If you have difficulty installing this update, check the following list
     of common problems and their solutions:

     Diskette is not recognized or accepted during installation.

          - Make sure that the diskettes have been properly labeled (check the
          label with the DOS LABEL command) when they were formatted: RIPSAP
          is the proper label.

          - Make sure that there are no TSRs or other memory resident programs
          loaded on the server before you run SERVER.EXE.

          The best way to do this is to make sure that they are not in the
          server's CONFIG.SYS and AUTOEXEC.BAT files and then boot the server
          before running SERVER.EXE.

          - Check your floppy drive to make sure that it can recognize when
          diskettes are removed and inserted.

     * If you have difficulty using ATCON note that:

     The ATCON utility requires that the SNMP.NLM is loaded with the
     MONITORCOMMUNITY=Public (default) parameter set.  If the MONITORCOMMUNITY
     option is not set to Public, the ATCON utility reports the following
     error message:

          ERROR GETTING ROUTER INFORMATION

     This happens because the ATCON utility expects the MONITORCOMMUNITY
     option to be Public and can't use any other community name.

     * If you are unable to access a network after implementation of an IPX
     RIP/SAP filter: check the following two items for common problems and
     solutions:

     - Using a zero mask

          When defining IPX RIP masks, be aware that the implementation of a
          mask with a "0" becomes universal.

          Example:

          IPX RIP Filter network number: C8000000
          IPX RIP Filter mask:           0

          Because the mask has a "0" (the wildcard match) all IPX RIP packets
          are filtered with RIP FILTERING MODE set to NO PASS.  Conversely,
          with RIP FILTERING MODE set to PASS, all IPX RIP packets are
          forwarded.

     - Using a PASS filter

          Setting the RIP FILTERING MODE to PASS without defining any IPX RIP
          Filter network numbers and mask results in no IPX RIP packets being
          forwarded.  When using a PASS filter, define the network numbers
          that you want forwarded.

     * If you have difficulty configuring IPX RIP and SAP filtering,
     especially a global IPX RIP filter for an entire network, consider a
     small network, as shown in the following figure:

 ___________    |LAN   ___________        WAN        __________
|  Server 1 |___|_____|  Router A |______//_________| Router B |
|___________|   |     |___________|     //          |__________|
                         |
                         |
          ___________    |
         | Server 2  |___|
         |___________|   | Network 1000
                         |
                         |
          .........      |
          __________     |
         | Server 10|____|
         |__________|    |


     To define an IPX RIP filter in Router A to filter all the IPX RIP packets
     coming from Network 1000, set up a RIP filter in Router A that includes
     each server's internal IPX network number, as well as the network number
     1000.

     * If you have IPX RIP and SAP updates that are not working correctly,
     note that:

     When defining a WAN board for NetWare Link/Frame Relay or NetWare/Link
     PPP, you will be given the option to send RIP and SAP updates.  If you
     set IPX RIP and SAP updates set to "Only on Change", IPX routing
     information may not be propagated across the WAN as desired.

     Setting IPX RIP/SAP updates to "Only on Change" assumes that all
     transmitted packets are sent reliably.  Dropping due to queue depth
     exceeded can cause a failure to propagate IPX RIP and SAP information. 
     The "Only on Change" mode should not be used on more than two Frame Relay
     links.

     When using more than two Frame Relay links, IPX RIP and SAP updates
     should be set to "Periodically".  An example of this would be where one
     router establishes two separate PVCs (Permanent Virtual Circuit) to two
     other routers.

     Patch History:

     * IPX RIP/SAP Filter:

     The IPX RIP/SAP filters enable you to control IPX Routing Information
     Protocol (RIP), Service Advertising Protocol (SAP), and NetBIOS Broadcast
     Packet Type 20 traffic on your WAN/LAN internetwork by controlling the
     following:

          - The network addresses and services advertised in RIP and SAP
          packets are stored in the router's database.

          - The network addresses and services are advertised to the LANs and
          WANs attached to the router (and can be seen by the routers).

          - Whether NetBIOS broadcast packets are filtered by the router.

     WARNING: This update is applicable to NetWare MultiProtocol Router Plus
     2.1 and NetWare MultiProtocol Router 2.1.  It is INCOMPATIBLE with
     NetWare MultiProtocol Router 2.0 and WAN LINKS 2.0 and is NOT for use
     with NetWare 3.11 servers that do not have NetWare MultiProtocol Router
     2.1 or MPR Plus 2.1 installed.

     DO NOT INSTALL THIS UPDATE ON ANY NETWARE PLATFORM THAT DOES NOT HAVE MPR
     OR MPR PLUS. DO NOT INSTALL THIS UPDATE ON NETWARE 4.xx SERVERS. 

     This RIP/SAP filtering functionality is also available as part of the
     Frame Relay Update (FRELAY.EXE and FRELY2.EXE), which includes the
     NetWare/Link PPP Data Compression Update.

     Novell's intentions for this software program are to provide a temporary
     work around to the anomalies described in this file.  Such work arounds
     are typically addressed in future releases of the product. 

     Novell will not be responsible for any data loss that may result from
     implementing this program.  Novell strongly recommends a backup be made
     before any program is applied.  Technical support for this program is
     provided at the discretion of Novell.

     NetWare, the N-Design, and Novell are registered trademarks, and IPX
     NetWare Link/Frame Relay, NetWare MultiProtocol Router, and NetWare
     MultiProtocol Router Plus are trademarks of Novell, Inc.  NetWire is a
     registered service mark of Novell, Inc.

     PostScript is a registered trademark of Adobe Systems Inc.