Martin Davies wrote:
>
> A client of mine has a need to install a firewall between his network
> and a client network that will pass both IPX and DecNET in addition to
> the more normal IP-based protocols. I don't want to have to put separate
> products for each protocol in parallel, so does anyone know of a product
> that will provide firewall protection for all three protocols?
Yuck...
Your only option that I can think of is a Cisco router. This will allow
you to do static packet filtering (dynamic for TCP) for both IP and IPX.
The killer is that you want to add DecNET to the mix. If memory servers,
this protocol has no layer 3 component so it must be bridged. With this
in mind most filtering devices will not be able to handle it. With a
Cisco, you could bridge just the DecNET traffic and *maybe* do something
with the Ethernet Type codes or MAC address access list filtering. I've
personally never tried to apply these ACL's in bridge mode. Not sure if
it will work.
There used to be a product called CarlBridge or something similar. This
may do the trick as well but I have not heard or see it in quite some
time.
Good luck!
Chris
--
**************************************
[EMAIL PROTECTED]
* Multiprotocol Network Design & Troubleshooting
http://www.amazon.com/exec/obidos/ASIN/0782120822/geekspeaknet
* Mastering Network Security
http://www.amazon.com/exec/obidos/ASIN/0782123430/geekspeaknet
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
