🚀 go-pugleaf

We have some problems with CAP when using Cisco routers to selectively 
route AppleTalk Phase 2. 

Our net consists of a backbone net with 10 Cisco routers attached. On the 
other sides of these routers we have local nets for our different 
departments. 

We wish to put a CAP file server on the backbone net and let 
all local nets have acess to it. At the same time we want to block all 
access from one local net to another.

We have configured each Cisco in the following way (with obvious 
differences between the Ciscos). This is exactly according to the manual.

  access-list 601 permit cable 7-7
  access-list 601 deny other-access
  interface ethernet 1
  appletalk cable-range 7-7
  appletalk zone BackboneZone
  appletalk distribute-list 601 out
  appletalk distribute-list 601 in

where 7-7 is the cable range on the backbone net, BackboneZone is the 
zone on the same net and ethernet1 is the interface on the backbone side 
of the Cisco.

This works well if we put a Mac with file sharing on the backbone net. 
Macs on the local nets can see and access it, but they can't see and 
access the other local nets.

If, however, we put an AUFS server on the backbone net it is *not* visible 
to the local nets.

We have traced the traffic on each net and when the Mac on 
the local net does an NBPLookUp the Mac on the backbone net sends out 
answers addressed to *all* the Cisco routers and they reach the calling
Mac.
If we have an AUFS server instead it will only send it's reply to *one* 
Cisco. Consequently the reply will not reach the calling Mac and it cannot 
access the AUFS server. 

Whats going on? Any suggestions would be much appreciated.

                                                _______________
                                               |  AppleShare   |
                                               | (Mac or AUFS) |
                                               |_______________|
                                                       |
           Cable range=7-7   Zone=BackboneZone         |
         ______________________________________________|_________ ...
     E1 |                      |                       |
     ___|___                ___|___                 ___|___            
    | Cisco |              | Cisco |               | Cisco |
    |_______|              |_______|               |_______|      ...
     E0 |                      |                       |
        |                      |                       |
     ___|___                ___|___                 ___|___
    | Local |              | Local |               | Local |             
    |  Mac  |              |  Mac  |               |  Mac  |      ...
    |_______|              |_______|               |_______|
    
    
                          Local nets
                          
                          
======================================================================
Anders Liljegren                      Snail mail:   UDAC
Phone:  +46 18 18 77 51                             Box 174
Fax:    +46 18 51 66 00                             S-751 04 UPPSALA
E-mail: Anders.Liljegren@UDAC.UU.SE                 Sweden
======================================================================