🚀 go-pugleaf

Hi Pascal,

In article <BzF3Js.1Ln@CAM.ORG> pascal@CAM.ORG (Pascal Gosselin) writes:
>Situation: Large LAN with EtherTalk, TCP/IP and LocalTalk. HP router used
>to route everything (including 56/112Kbps WAN).  A gatorbox exists somewhere
>in there to provide MacTCP over ARA services.
>
>Problem: A need to hide LaserWriters from users who are not in the same
>ZONE as the printer.
>
>My proposed solution: Generate a bunch of zones with the Gatorbox, put the
>LaserWriters (such as the IIg that are on EtherTalk) in the newly created\zones
>(thanks to that nifty postscript code).  Put the users (they are all on
>EtherTalk) into a zone that matches the printers that they have access to.
>
>Then, rename the printers to start with a "tidle" so that they are visible
>from other zones. 
>
>Question: Is this possible? Will it work?  What are the limitations, especially
>with regards to multiple routers, network numbers and zone names in this
>type of setup ???

	Only in specific topologies.  First a little about tilde '~' filtering.
	In a few routers out there, like Cayman's, there are some crude
	service filtering features, one of which is tilde.  When you add a
	tilde to the _end_ of a service name (AFPServer or LaserWriter, etc.),
	the router that has this enabled will drop the NBP LkUp Response
	packets as they cross the router.  When the user is in the same zone
	as the service, the router should still pass them.

	The problem is that you need this in strategic points of your
	internet.  What's a strategic point?  Depends on your topology.
	The point is that you need one of these special routers between
	the client and service, and no alternate routes between them that
	don't have special routers.  That's the nutshell rule, but is
	usually not obvious unless you sit down and really think it through.
	I'd be willing to give pointers, though.  What kind of other
	AppleTalk routers do you have?

	Chris
---
Chris Ranch
Internetworking Products Division
Novell, Inc.  San Jose, CA
(408)473-8667  cranch@novell.com
I may work for Novell, but I don't speak for them...