"off-topic" posts - WAS - RE: What tools can tell u r using [7:66661]

2003-04-02 Thread cebuano
Paul,
How many more of these "off-topic" threads are you going to allow?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
LaWanda Daivs
Sent: Tuesday, April 01, 2003 8:38 PM
To: [EMAIL PROTECTED]
Subject: Re: What tools can tell u r using lease line or ISDN? [7:66561]

Take a look at this web site and let me know what you
think.

http://www.imagine2020.com/761368002.


--- Link Teo  wrote:
> I am using leased line to connect my remote offices
> to HQ. All the leased
> line are backup by ISDN. Is there any tools which
> can inform me via email or
> other means about whether I am using leased line now
> or ISDN backup? In
> other words, any tools which can inform me when the
> primary line is down and
> the ISDN kick in?
> 
> Thanks a lot. 
[EMAIL PROTECTED]


__
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://platinum.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1&t=1
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Cisco 2511 Hardware Issue [7:66662]

2003-04-02 Thread Tim Champion
Has anyone experienced, or heard of, the following problem:

I recently bought a 2nd hand 2511 but only async interfaces 9-16 work. 1-8
receive data but do not transmit. Could it possibly be due to one of the
numerous jumper settings?

many thanks in advance.

Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2&t=2
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: a question about ospf virtual-link auth [7:66648]

2003-04-02 Thread Danny Free
OOPS,
I forgot to add on Router 2:
!
router ospf 100
area 0 authentication message-digest.

:))


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4&t=66648
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: a question about ospf virtual-link auth [7:66648]

2003-04-02 Thread Danny Free
Hi,
Yes. If Area 0 is MD5 then virtual link must be MD5 also.
Example:
ROUTER 1
!
int loopback0
ip address 150.150.1.1 255.255.255.0
ip ospf network point-to-point
!
router ospf 100
network 150.150.1.0 0.0.0.255 area 0
network 150.150.10.0 0.0.0.255 area 0
network 150.150.20.0 0.0.0.255 area 1
area 0 authentication message-digest 
area 1 virtual-link 150.150.2.2 message-digest-key 1 md5 cisco
!
int s0
ip address 150.150.10.1 255.255.255.0
ip ospf message-digest-key 1 md5 cisco
!
int s1
ip address 150.150.20.1 255.255.255.0
!
ROUTER 2
!
int loopback0
ip address 150.150.2.2 255.255.255.0
ip ospf network point-to-point
!
router ospf 100
network 150.150.2.0 0.0.0.255 area 1
network 150.150.20.0 0.0.0.255 area 1
network 150.150.30.0 0.0.0.255 area 2
area 1 virtual-link 150.150.1.1 message-digest-key 1 md5 cisco
!
int s0
ip address 150.150.20.2 255.255.255.0
!
int s1
ip address 150.150.30.1 255.255.255.0
!
Router 3
!
int loopback0
ip address 150.150.3.3 255.255.255.0
ip ospf network point-to-point
!
router ospf 100
network 150.150.3.0 0.0.0.255 area 2
network 150.150.30.0 0.0.0.255 area 2
!
int s0
ip address 150.150.30.2 255.255.255.0
!
Best of luck.
   Danny


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3&t=66648
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


so how does IGRP unequal load-balancing work anyway? [7:66665]

2003-04-02 Thread nwo
It occurs to me that I do not understand how IGRP unequal load balancing
works.

Yes, I understand what the commands are, and I am well aware of the
intricacies involved in fast-switching and CEF.  So please don't respond by
telling me to configure 'variance' or stuff like that.  I already know all
that.

What I don't understand is this.  A fundamental part of EIGRP unequal load
balancing is the concept of the feasible successor, where routes of unequal
metric to a particular destination will be considered only if the
corresponding neighbor is a feasible successor for the destination in
question.  This is in order to prevent the problem of packets being sent to
to a router that is actually further away from the destination than the
sending router is to that destination.

Yet, I am aware of no such safeguards in IGRP.  IGRP has no such concept of
a topology table with neighbor's advertised distances and whatnot.
Therefore it seems that packets could easily be forwarded away from the
destination.  Furthermore, it would seem to me that packets could actually
bounce back and forth between 2 routers for awhile.

Please say it ain't so.  Yet I am unaware of any construct within IGRP that
would prevent it from being so.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5&t=5
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Need a Management Software [7:66666]

2003-04-02 Thread Jagan Krishnaraj
Hello Group

One of my customers need a Management software.

The management software should mail / page / sms network admin of

CISCO switch port status UP / Down and switch down status.

Can  any body advise me a good cheap commercial SNMP management software
with these features.

Thanks You in advance

Regards
jagan






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6&t=6
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: so how does IGRP unequal load-balancing work anyway? [7:66667]

2003-04-02 Thread Tim Champion
I can't remember the exact terminology but an IGRP router is aware of a
neighbors metric to a destination as well as its own metric to the same
destination. The router will only consider routes to be valid if the
upstream router's metric to the destination is lower than its own metric to
the same destination. This prevents the problems you mentioned below. You
may want to get a second opinion on this!

Tim

""nwo""  wrote in message
news:[EMAIL PROTECTED]
> It occurs to me that I do not understand how IGRP unequal load balancing
> works.
>
> Yes, I understand what the commands are, and I am well aware of the
> intricacies involved in fast-switching and CEF.  So please don't respond
by
> telling me to configure 'variance' or stuff like that.  I already know all
> that.
>
> What I don't understand is this.  A fundamental part of EIGRP unequal load
> balancing is the concept of the feasible successor, where routes of
unequal
> metric to a particular destination will be considered only if the
> corresponding neighbor is a feasible successor for the destination in
> question.  This is in order to prevent the problem of packets being sent
to
> to a router that is actually further away from the destination than the
> sending router is to that destination.
>
> Yet, I am aware of no such safeguards in IGRP.  IGRP has no such concept
of
> a topology table with neighbor's advertised distances and whatnot.
> Therefore it seems that packets could easily be forwarded away from the
> destination.  Furthermore, it would seem to me that packets could actually
> bounce back and forth between 2 routers for awhile.
>
> Please say it ain't so.  Yet I am unaware of any construct within IGRP
that
> would prevent it from being so.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7&t=7
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Errata of TCP/IP Volume I by Jeff [7:66668]

2003-04-02 Thread galvin lu
Could Someone provide the  Errata of TCP/IP Volume I by Jeff ? I have seen
it before in this BBS , but now I can not find it . Thanks!!!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8&t=8
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Mic shoeps
Hopefully I'm not going to stir another whirpool here.

Today I was surfing job sites and found out that where there are less than
dozen jobs available for CCIE in Silicon valley, there are more than 80 jobs
available for Linux engineers. Their initial salaries seem to be better than
CCIE nowaday.
We all understand that we take great pride in achieving CCIE. It is not only
the hardest network certifications to get, but also financial rewards used
to be excellent, too.

No matter how much efforts we put in these CCIE certifications, our fates
are still being subject to the cruel law of supply and demand especially in
this time of war.

Linux is not easy. There are many commands to remember. But it doesn't
require to invest thousands of dollars in routers and switches for training.
However their demands are higher than ever. On the other hand, the supply
for the CCIEs seems to surpass today's demand and for some serious time to
come.

Some might say, you study CCIE because you love the networking. Alright, but
if the future salaries for CCIEs are going to be somewhere near MCSE level,
would you put such an effort to get CCIE certs and still pursuing the career
of Cisco?

Where are we heading? Someone please enlighten us.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9&t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Data Compression [7:66670]

2003-04-02 Thread srinivas kunthuri
Hi all

I had implemented compression on my routers. avg raio of transmission and
receive is less than one in receiving.

Can I enable compression in one direction. i.e I want to enable compression
in
tranmit direction only.


Regards,
K.Srinivas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66670&t=66670
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread ciscoGo2002
Hello folks,
I have question for you, we want to do dynamic NAT
with a pool of 128 public ip addresses (we haven't got
more public IP addresses :(  ). Now, when the router
does 128 translation no one can access internet... We
would like to do PAT when NAT public addresses are
exhausted.. is it possible? Can we do a mix of PAT and
NAT configuration? Any ideas? Any configs?

Thanks to all of you clever man and ladyies!!!




___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas...
http://messenger.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66672&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: R&S CCIE Written Question [7:66619]

2003-04-02 Thread Router Kid
Yes!
 it does have a lot of redistribution questions on EIGRP and IPX with
complicated scenarios. I didn't have any on AppleTalk.


""Tim Champion""  wrote in message
news:[EMAIL PROTECTED]
> Does the R&S written exam include any questions on EIGRP being used for
IPX
> or Appletalk?
>
> Many thanks
>
> Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66673&t=66619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: ISDN Question [7:66610]

2003-04-02 Thread Martin J.
maybe with

debug isdn q921

or debug isdn events

regards martin


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66671&t=66610
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Errata of TCP/IP Volume I by Jeff [7:66668]

2003-04-02 Thread [EMAIL PROTECTED]
Go here:

http://www.ciscopress.com/catalog/product.asp?product_id={37DFB87F-2989-45A6
-8D01-0521D33054E7}

Click on "Errata" about halfway down the page.

HTH,

BJ



Original Message:
-
From: galvin lu [EMAIL PROTECTED]
Date: Wed, 2 Apr 2003 09:47:31 GMT
To: [EMAIL PROTECTED]
Subject: Errata of TCP/IP Volume I by Jeff [7:8]


Could Someone provide the  Errata of TCP/IP Volume I by Jeff ? I have seen
it before in this BBS , but now I can not find it . Thanks!!!
mail2web - Check your email from the web at
http://mail2web.com/ .




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66677&t=8
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread richard dumoulin
Of course you can, but why not doing just PAT ?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66674&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: access-list logging rate-limited [7:66520]

2003-04-02 Thread Bikespace
Can't think of a reason why you would use the three lines. As far as I know
(unless there are any little tricks or gotchas) this does make the first two
redundant.

Gareth


""Charlie Wehner""  wrote in message
news:[EMAIL PROTECTED]
> Two quick questions:
>
> I've configured an access-list to only permit certain tcp and udp ports
> above 1024.  At the end of the access-list I have the following commands:
>
> access-list 101 deny tcp any any log
> access-list 101 deny udp any any log
> access-list 101 deny ip any any log
>
> Question 1:  Do I even need the "deny tcp" and "deny udp" statements since
I
> also have a deny ip statement?
>
> Question 2:  When I perform a port scan through the router it logs some of
> the events but it seems to miss the majority of them giving me the
following
> error message:
>
> "%SEC-6-IPACCESSLOGRL. access-list logging rate-limited or missed 142
> packets"
>
> Is access-list logging rate-limited by default?  Is there anyway for me to
> ensure everything gets logged?  I'm not sure if I understand?
>
> Thanks,
> Charlie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66675&t=66520
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Is this addressing permissible ? [7:66676]

2003-04-02 Thread Peter P
SEE BELOW. I have a router with a loopback address
This address is being used by Serial0/0.1 and Serial0/0.3.
Is this a legal use of loopback addressing - or would it lead to ip
duplicate conflicts within routing processes. (The ARP table shows no
entries when these i/faces are pinged).
Is this addressing 'valid' ? 

..Sh ip int brie...
Serial0/0 unassigned  YES unset  upup
Serial0/0.1   146.135.171.209 YES unset  upup
Serial0/0.2   10.220.38.30YES NVRAM  upup
Serial0/0.3   146.135.171.209 YES unset  upup

.sh run..
interface Loopback1
 ip address 146.135.171.209 255.255.255.255
 no ip directed-broadcast
!
interface Ethernet0/0
 ip address 10.31.0.1 255.255.252.0
 no ip directed-broadcast
 ipx encapsulation SAP
 ipx network 1031
!
interface Serial0/0
 no ip address
 no ip directed-broadcast
 encapsulation frame-relay
 no ip mroute-cache
 random-detect
 frame-relay lmi-type ansi
!
interface Serial0/0.1 point-to-point
 ip unnumbered Loopback1
 no ip directed-broadcast
 frame-relay interface-dlci 445
!
interface Serial0/0.2 point-to-point
 ip address 10.220.38.30 255.255.255.252
 no ip directed-broadcast
 ipx network 19468416
 frame-relay interface-dlci 150
!
interface Serial0/0.3 point-to-point
 description 8K Management PVC to Docklands
 bandwidth 8
 ip unnumbered Loopback1
 no ip directed-broadcast
 frame-relay interface-dlci 446
!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66676&t=66676
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Troy Leliard
Yes it can be done, you just need to redefine you pool, for 1-1 nat, use all
but 1 of your available IP's, then do another nat with overload on the last
ip address.

=?iso-8859-1?q?ciscoGo2002?= wrote:
> 
> Hello folks,
> I have question for you, we want to do dynamic NAT
> with a pool of 128 public ip addresses (we haven't got
> more public IP addresses :(  ). Now, when the router
> does 128 translation no one can access internet... We
> would like to do PAT when NAT public addresses are
> exhausted.. is it possible? Can we do a mix of PAT and
> NAT configuration? Any ideas? Any configs?
> 
> Thanks to all of you clever man and ladyies!!!
> 
> 
> 
> 
> ___
> Yahoo! Messenger - Nueva versisn GRATIS
> Super Webcam, voz, caritas animadas, y mas...
> http://messenger.yahoo.es
> 
> 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66679&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Andrew Larkins
The combination of both can be done without any issues. I would keep 1 IP
from the assigned range for the PAT address and have the others as 1 - 1
translations.

Andrew
CCNP, CCDP, CSS1

-Original Message-
From: ciscoGo2002 [mailto:[EMAIL PROTECTED]
Sent: 02 April 2003 12:58
To: [EMAIL PROTECTED]
Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]


Hello folks,
I have question for you, we want to do dynamic NAT
with a pool of 128 public ip addresses (we haven't got
more public IP addresses :(  ). Now, when the router
does 128 translation no one can access internet... We
would like to do PAT when NAT public addresses are
exhausted.. is it possible? Can we do a mix of PAT and
NAT configuration? Any ideas? Any configs?

Thanks to all of you clever man and ladyies!!!




___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas...
http://messenger.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66678&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: A career in MPLS..... [7:66609]

2003-04-02 Thread Peter van Oene
At 03:27 AM 4/2/2003 +, Priscilla Oppenheimer wrote:
>I wonder if Cisco's MPLS class is just dated. It takes a long time to
>develop and roll out a new class, especially if there's also a Cisco Press
>book, exam, instructor materials, course binder, instructor training, beta
>testing, etc.

More than likely, Cisco chose to teach what a broad range of their gear 
could do.  L2vpn doesn't fit this category, though I would expect that they 
have better luck with RSVP.

>In the early days of MPLS, was there more emphasis on LDP than on RSVP-TE?

I find the two technologies not competitive actually.  I am just now 
building a network that runs LDP on a large number of devices for ease of 
provisioning, yet rides a TE core that is signalled by RSVP-TE.  To me, 
these are two tools.  However, I agree with nrf that glossing over RSVP 
will leave a bit of a hole in one's knowledge.  I again expect that Cisco 
may have had wider platform support for LDP than they did for RSVP, but I'd 
have to check that out as I know they were an early supporter of RSVP, but 
may not have offered it beyond their 7500/12000 product lines.

>Were MPLS L3 VPNs around before L2 VPNs?

RFC2547bis, or BGP/MPLS VPNs, was the first widely inter operable vpn 
technology that used MPLS in the forwarding plane.  It is thus also the 
most mature of the many variants and again more widely support across the 
product line.  L2vpn (ptp) is still pretty fresh, particularly in the Cisco 
camp.  Very few platforms have a wide range of support for the many 
encapsulations defined by the various martini specs.  (Luca Martini from L3 
has taken the lead on the many L2 over MPLS encap standards as well as 
defined a signalling mechanism via LDP)  I expect the standard course gear 
doesn't have enough support for these technologies to make labs feasible.

I should note that the L2vpn (if you want to call it that and most 
marketing types do) I've been discussing (though briefly) are the point to 
point type (Virtual Private Wire Services -VPWS).  Think frame relay with 
ethernet in the last mile and 802.1q tags for DLCIs.  There are also a set 
of standards dealing with point to multipoint delivery, usually known as 
Virtual Private Lan Services that are attracting a bunch of a 
attention.  These specs made the provider network look like a single 
broadcast domain.  I'm not convinced that is a good thing (don't know many 
providers using LANE for what its worth), but it certainly seems exciting 
to marketing and IETF types.

Anyway, I suppose my overall point is that I fully agree with nrf, that to 
the curricula is not entirely representative of the more interesting bits 
of MPLS, however I expect the underlying reason is lack of platform/sw 
support to enable effective classroom lecture on the subjects.

Pete



>Maybe it's just a matter of "course development latency." Thanks for your
>insights.
>
>Priscilla
>
>
>nrf wrote:
> >
> > ""Henry D.""  wrote in message
> > news:[EMAIL PROTECTED]
> > > I don't mean to start any type of argument here, especially
> > with someone
> > > who obviously has more experience than I do. Yes, you've been
> > > contributing to this study group many times. But also many
> > times
> > > your contributions are rather rethorical than practical and
> > at the same
> > > time you seem to draw attention to what your opinion is
> > rather than to
> > > give an educated and objective view backed by any type of
> > real life
> > > examples.
> >
> > First of all, given the subject matter (MPLS), it is most
> > difficult to be
> > giving out real-life examples.  The fact is, MPLS is at this
> > time not widely
> > implemented, so therefore few examples abound.
> >
> > Second of all, it is essentially impossible for anybody to make
> > a posting
> > that is not necessarily colored with an opinion, particularly
> > when they are
> > discussing a subjective question.  Questions like whether they
> > should study
> > MPLS or what they should do with their future are necessarily
> > going to draw
> > a wide range of opinions.  If everybody is supposed to
> > dogmatically answer
> > 'yes' or 'no', then what's the point of even asking the
> > question in the
> > first place?  The point is that subjective questions must
> > necessarily elicit
> > subjective answers.  People are not robots.   Everybody has to
> > call it like
> > they see it.  You ask a subjective question, and people should
> > be able to
> > chime in with whatever they think.  It's all about freedom of
> > speech.
> >
> > Third of all, Cisconuts and I have taken the discussion
> > offline, and while I
> > don't want to speak for him, I would venture to say that he is
> > quite happy
> > with my responses.  So if he's cool, then what exactly is your
> > beef?
> >
> > Fourth of all, I resent the implication that my views are not
> > educated.  Be
> > careful when you go around saying stuff like that.  I seem to
> > recall a story
> > a  few years ago how one particular 

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Symon Thurlow
Yes, this is a typical setup.

Search cisco.com and you will find a sample config.

Symon

-Original Message-
From: ciscoGo2002 [mailto:[EMAIL PROTECTED] 
Sent: 02 April 2003 11:58
To: [EMAIL PROTECTED]
Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]


Hello folks,
I have question for you, we want to do dynamic NAT
with a pool of 128 public ip addresses (we haven't got
more public IP addresses :(  ). Now, when the router
does 128 translation no one can access internet... We
would like to do PAT when NAT public addresses are
exhausted.. is it possible? Can we do a mix of PAT and
NAT configuration? Any ideas? Any configs?

Thanks to all of you clever man and ladyies!!!




___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es
=

 This email has been content filtered and
 subject to spam filtering. If you consider
 this email is unsolicited please forward
 the email to [EMAIL PROTECTED] and
 request that the sender's domain be
 blocked from sending any further emails.

=



=




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66680&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: A career in MPLS..... [7:66609]

2003-04-02 Thread Cisco Nuts
Thank you so much for your enlightening reply!!

And thank God I moved away from Novell to MS to Citrix and finally Cisco
and now onto MPLS...And thank God "it is a very specialized and small
market right now that is looking for MPLS experience"All the more
better to develop skills in MPLS as every Tom, Dick and Harry is either
just  routing or switching   ;- )

Looks like MPLS is the way to go!!! Come'on Sprint.Let's get on with
the Show :-)

>From:  >Reply-To:  >To: [EMAIL PROTECTED] >Subject: Re: A
career in MPLS. [7:66609] >Date: Wed, 2 Apr 2003 04:47:44 GMT > >Ah -
MPLS. Yes there are several large carriers with MPLS >deployed or in the
process of deploying it (equant, global >crossing...). Some on their core
and some on their layer 2 networks >such as ATM (AT&T for example).
Others backed away from it but >are now looking at it since it's a huge
marketing beast that can't be >ignored (Sprint for example). > >Aside
from ISP's some large enterprises are using it for things like >MPLS
enabled VPN's. As to the market for someone that knows >MPLS - what I
have seen is it's a very specialized and small market >right now that is
looking for MPLS experience. Mostly due to it still >being relatively new
in deployments and being relatively small in the >number of deployments.
> >I do believe however after saying that - that it never hurts to have a
>wide background of skills. Imagine if you specialized in Novell and
>never moved into other areas for example. Novell is a great product >but
the market for Novell pro's dried up a lot from the good ole days. >You
would be much less marketable if you didn't also know other >things such
as Microsoft or Routing or ... > >I could go into my opinions of the
pros and cons of MPLS and where >I think it fits - but that's another
boring story for later :) > > >www.ccie4u.com > > > >On 1 Apr 2003 at
15:47, nrf wrote: > > > ""Cisco Nuts"" wrote in message > >
news:[EMAIL PROTECTED] > > > Hello group, How
does one feel about a career in MPLS...I mean doing MPLS > > > as part of
your core job day in and out.Is it worth it? Since our > > > network
does not use MPLS (maybe never will) inspite of being one of the > > >
Big Four Tier 1 SP's > > > > Let me guess. Do you work for Sprint? >
> > > >are there other SP's that use MPLS in their > > > backbone?? > > >
> Yeah, there are some. > > > > >I have just given myself a month or so
break from my CCIE Lab > > > Prep.(yeah!yeah! most would consider me
stupid on this) to study MPLS > > > for the CCIP and am thinking if I
should pursue this subject just like I > > > did for BGP.know it
inside out cold.and maybe consider a new > > > career/job in MPLS
(obviously along with BGP, MBGP, MCast etc...) Does > > > anyone know of
how MPLS is viewed out there? I mean, in terms of > > > implementation,
popularity and last but not the least , $$$ ??? >;->Which > > > of the
Big SP's or Enterprise networks have implemented MPLS? Has it been > > >
worth the advantages that MPLS proposes??Thank you.Sincerely,CN > > > >
The way I see it is this. MPLS is potentially powerful technology for it
> > can be used as a lingua-franca among a carrier's network and
transport >layer > > and also as a way to impose circuit-switching
discipline upon IP and > > therefore offer circuit-switching services
with a pure IP network. > > > > But MPLS is by no means a slam-dunk.
Certain carriers, most notably > > Sprint, have elected not to go down
the MPLS path because they believe the > > technology is immature (and
they are correct) and also because they believe > > that they can garner
the benefits of MPLS by other means (also correct). > > The point is that
while MPLS offers great potential, it also presents > > problems, so
implementing it is not a no-brainer. > > > > And furthermore, I don't
particularly like the way that Cisco is pushing > > MPLS, particularly in
its cert program. In my opinion, I think Cisco's >cert > > programs
emphasize the least useful parts of MPLS while neglecting the more > >
useful parts. For example, I don't understand why Cisco pushes LDP the
way > > it does, for LDP merely builds LSP's that correspond to the route
table, >but > > what's so useful about having LDP's that look like the
route table? It is > > far more useful to build LSP's that differ from
the route table, but the > > methods of doing that are not really covered
very much (if at all) in the > > Cisco curricula. Also, I don't
understand why Cisco places such an >emphasis > > on L3VPN's, as if
L3VPNs were the only important service that MPLS enables. > > L3VPN's are
only one of the new services that you can enable, and in my > > opinion,
one of the less important ones. Far more important are the L2VPN > >
capabilities and the ability to unify IP, ATM, and optical into a single
> > management plane. The point I'm making is that if you merely study
MPLS > > according to the Cisco curricula, you really haven't learned
much about it > >

Re: A career in MPLS..... [7:66609]

2003-04-02 Thread Cisco Nuts
Oh! Boy!! What have I got myself into???

Sorry guys, I had NO intention at all to start any kind of flame which I
have literally "despised"  in the past

I have been frequenting this groupstudy since 1998 and have learn a LOT!!

And really advanced my career and  ;->

Thank you for people like nrf who have always been there to answer and
advise young newbies like us in this field

Thank you nrf...

So guys, let's refrain from turning this discussion into a 'flame' and
get on with our quest for greater knowledge and skills!!

Just wish that "old-timers" like Pamela and Laura were still around with
us in this group!!

Thank God for Priscilla, she is still there with us along with Howard and
Chuck !!

Thank you all.

Sorry for anything that I might have invoked!!

   PEACE 

>From: "nrf" >Reply-To: "nrf" >To: [EMAIL PROTECTED] >Subject: Re: A
career in MPLS. [7:66609] >Date: Tue, 1 Apr 2003 21:38:58 GMT >
>""Henry D."" wrote in message
>news:[EMAIL PROTECTED] > > Let me say up
front, I don't have much experience in MPLS, I have > > only played with
it in the lab and not all that extensively either. > > But CN is simply
trying to get an idea of what to expect to go that road. > >I believe
that was precisely what I answered. > > > Is "nrf" saying not to advance
in this field by studying Cisco's way of > > emphasising MPLS ? > >What I
said is that if you want to advance in that field, you will need
>substantially more than what Cisco wants you to know about it. Read my
post >again. > > >You know, we all have our doubts, he's brave enough > >
to come to this group and ask questions. As far as L3VPN's, why not > >
concentrate > > on that at least to start with. > >I never said not to
learn L3VPN's. Read my post again. What I said is that >study of L3VPN's
shouldn't be emphasized to the degree that Cisco seems to >emphasize it.
> > > It's still one reason to do the MPLS thing. > > By just > > doing
that he'll need to touch on many aspects of MPLS anyway. He will >still >
> use either LDP or RSVP, he still will use the LSP establishment, he
might >as > > well > > learn the TE options available for establishment
of those LSP's. He'll >need > > to learn > > how to use the LSP's for
pushing traffic over them. He'll learn what and >how > > the > > labels
get pushed/popped. Then why not study it that way. He's not >advancing >
> his > > MPLS skills, he might not have any yet. He's simply trying to
see if he >will > > be able to utilize any of the skills he will have to
learn to make it >worth > > it his while. > >No doubt all learning is
good. Again, read my post again. I never said >that he shouldn't learn
it. What I said is that he shouldn't necessarily >learn it "the Cisco
way". > > > > > Well, maybe someone else with more experience in MPLS
arena and someone >more > > objective can give a better insight as to
whether there is a demand for > > these skills. > >Are you implying that
I'm not objective - that I have some kind of agenda? > > > > > > > > >
""nrf"" wrote in message > >
news:[EMAIL PROTECTED] > > > ""Cisco Nuts""
wrote in message > > > news:[EMAIL PROTECTED]
> > > > Hello group, How does one feel about a career in MPLS...I mean
doing > > MPLS > > > > as part of your core job day in and out.Is it
worth it? Since our > > > > network does not use MPLS (maybe never will)
inspite of being one of >the > > > > Big Four Tier 1 SP's > > > > > >
Let me guess. Do you work for Sprint? > > > > > > >are there other SP's
that use MPLS in their > > > > backbone?? > > > > > > Yeah, there are
some. > > > > > > >I have just given myself a month or so break from my
CCIE Lab > > > > Prep.(yeah!yeah! most would consider me stupid on this)
to study MPLS > > > > for the CCIP and am thinking if I should pursue
this subject just >like > > I > > > > did for BGP.know it inside out
cold.and maybe consider a new > > > > career/job in MPLS (obviously
along with BGP, MBGP, MCast etc...) Does > > > > anyone know of how MPLS
is viewed out there? I mean, in terms of > > > > implementation,
popularity and last but not the least , $$$ ??? > > ;->Which > > > > of
the Big SP's or Enterprise networks have implemented MPLS? Has it > >
been > > > > worth the advantages that MPLS proposes??Thank
you.Sincerely,CN > > > > > > The way I see it is this. MPLS is
potentially powerful technology for >it > > > can be used as a
lingua-franca among a carrier's network and transport > > layer > > > and
also as a way to impose circuit-switching discipline upon IP and > > >
therefore offer circuit-switching services with a pure IP network. > > >
> > > But MPLS is by no means a slam-dunk. Certain carriers, most notably
> > > Sprint, have elected not to go down the MPLS path because they
believe >the > > > technology is immature (and they are correct) and also
because they > > believe > > > that they can garner the benefits of MPLS
by other means (also correct). > > > The point is that

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Lee Carter
Yes you can just take your nat statement (ip nat inside source list 1...)
and add the word overload on the end of the command.

You will use a 1:1 NAT for the first set of users. Once your IP's are used
up you will use PAT. It is important to note that some issues arise with PAT
versus NAT like IPSEC or DLSW.

just an fyi.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66685&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: A career in MPLS..... [7:66609]

2003-04-02 Thread Symon Thurlow
FWIW I have seen quite a few Cisco jobs recently on jobserve looking for
people with MPLS skills specifically.



-Original Message-
From: nrf [mailto:[EMAIL PROTECTED] 
Sent: 02 April 2003 02:52
To: [EMAIL PROTECTED]
Subject: Re: A career in MPLS. [7:66609]


""Henry D.""  wrote in message
news:[EMAIL PROTECTED]
> I don't mean to start any type of argument here, especially with 
> someone who obviously has more experience than I do. Yes, you've been 
> contributing to this study group many times. But also many times your 
> contributions are rather rethorical than practical and at the same 
> time you seem to draw attention to what your opinion is rather than to

> give an educated and objective view backed by any type of real life 
> examples.

First of all, given the subject matter (MPLS), it is most difficult to
be giving out real-life examples.  The fact is, MPLS is at this time not
widely implemented, so therefore few examples abound.

Second of all, it is essentially impossible for anybody to make a
posting that is not necessarily colored with an opinion, particularly
when they are discussing a subjective question.  Questions like whether
they should study MPLS or what they should do with their future are
necessarily going to draw a wide range of opinions.  If everybody is
supposed to dogmatically answer 'yes' or 'no', then what's the point of
even asking the question in the first place?  The point is that
subjective questions must necessarily elicit
subjective answers.  People are not robots.   Everybody has to call it
like
they see it.  You ask a subjective question, and people should be able
to chime in with whatever they think.  It's all about freedom of speech.

Third of all, Cisconuts and I have taken the discussion offline, and
while I don't want to speak for him, I would venture to say that he is
quite happy with my responses.  So if he's cool, then what exactly is
your beef?

Fourth of all, I resent the implication that my views are not educated.
Be careful when you go around saying stuff like that.  I seem to recall
a story a  few years ago how one particular guy harangued another guy
about BGP, essentially saying that he knew nothing about how BGP really
worked - only to find out later that the second guy was none other than
a certain Tony Li,
the father of BGP.   Now, don't get me wrong, I'm not saying that I'm Li
or
anywhere close to him.  What I'm saying is that you should watch your
fire.

>So yes, I'm saying that some times you don't quite stick
> to the subject at hand. I don't see how your view on Cisco's 
>curriculum  in re to MPLS can be taken seriously without you putting 
>actual examples  of how you came to that conclusion.

Ok, fine, then let's review the CCIP curricula vis-a-vis MPLS, and in
particular, let's review what exactly they teach.  I know for a fact
that they teach primarily LDP and gloss over RSVP-TE.  Do you think this
is wise? There is no evidence  in the industry of a consensus that LDP
will automatically win out over RSVP-TE.  If you have such evidence, I
would like to see it.  I doubt that LDP will ever win out simply because
you can't do TE with LDP unless you go with CR-LDP which Cisco does not
have any plans to support at this time.  TE is one of the more important
features available within MPLS.  The point I'm making is that neglecting
RSVP-TE within an MPLS exam seems rather dubious.

Second,  the last 2-3 modules of that class deal specifically with
l3vpn's, with nary a mention of any l2vpn technology whatsoever.  Again,
why such an emphasis on L3 but no discussion of L2?  Much of the most
exciting work in MPLSCON is about l2vpn's.  Don't get me wrong, L3 is
good to know, but a good MPLS class would also get into a discussion of
l2.

The point I'm making is this.  If all you do is follow the official
Cisco MPLS class, you will get a warped view of how real-world MPLS is.
LDP is not the ultimate no-brainer signalling path for constructing
LSP's and MPLS can do far more than just L3VPN's.  I'm not telling you
not to follow Cisco's curricula.  What I'm saying is that you should
supplement it with other readings and experience.

>Even if the knowledge required for
> achieving
> Cisco's recognition in re to MPLS was not as advanced as one would 
>hope,  shouldn't we look at positives of the whole process ?

Again, it's not a matter of being advanced as it has to do with
emphasis.  I think that the coursework emphasizes some of the
not-so-important things and does not discuss some of the more important
things.

Also, I don't think it's my job to 'play nice'.  If things are not good,
then I think people should say that they're not good.  Why engage in
diplomatic euphemisms?  Does it really do anybody any good to dress
things up so that they look better than they really are?  I'm not
running a marketing campaign.

> There are still things
> to be learnt, and emphasising them rather than the weaknesses would be

> a better idea. You won't become an e

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread ciscoGo2002
Thanks Symon, 

We really want to know more about the way the overload
works... 
Maybe we were not so exactly as we wanted... We want
to know how can we use PAT when any others publics ips
are exhausted after using NAT?
For example, if we configure this:
ip nat inside source list  pool 
overload

How does it work?? The router uses NAT with every
public IP in the pool and when the pool is exhausted
the router begins doing PATH with first IP address of
the pool,and so on..?? Can you please respond to this
question??? (be more specific, thx)

Thanks people...








 --- Symon Thurlow  escribis: >
Yes, this is a typical setup.
> 
> Search cisco.com and you will find a sample config.
> 
> Symon
> 
> -Original Message-
> From: ciscoGo2002 [mailto:[EMAIL PROTECTED] 
> Sent: 02 April 2003 11:58
> To: [EMAIL PROTECTED]
> Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
> 
> 
> Hello folks,
> I have question for you, we want to do dynamic NAT
> with a pool of 128 public ip addresses (we haven't
> got
> more public IP addresses :(  ). Now, when the router
> does 128 translation no one can access internet...
> We
> would like to do PAT when NAT public addresses are
> exhausted.. is it possible? Can we do a mix of PAT
> and
> NAT configuration? Any ideas? Any configs?
> 
> Thanks to all of you clever man and ladyies!!!
> 
> 
> 
> 
> ___
> Yahoo! Messenger - Nueva versisn GRATIS
> Super Webcam, voz, caritas animadas, y mas...
> http://messenger.yahoo.es
> [EMAIL PROTECTED]
> 
> =
> 
>  This email has been content filtered and
>  subject to spam filtering. If you consider
>  this email is unsolicited please forward
>  the email to [EMAIL PROTECTED] and
>  request that the sender's domain be
>  blocked from sending any further emails.
> 
> =
> 
> 
> 
> = 

___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas...
http://messenger.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66686&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Peter van Oene
Just study both and go easy on the incitement of textual riots.

At 10:15 AM 4/2/2003 +, you wrote:
>Hopefully I'm not going to stir another whirpool here.
>
>Today I was surfing job sites and found out that where there are less than
>dozen jobs available for CCIE in Silicon valley, there are more than 80 jobs
>available for Linux engineers. Their initial salaries seem to be better than
>CCIE nowaday.
>We all understand that we take great pride in achieving CCIE. It is not only
>the hardest network certifications to get, but also financial rewards used
>to be excellent, too.
>
>No matter how much efforts we put in these CCIE certifications, our fates
>are still being subject to the cruel law of supply and demand especially in
>this time of war.
>
>Linux is not easy. There are many commands to remember. But it doesn't
>require to invest thousands of dollars in routers and switches for training.
>However their demands are higher than ever. On the other hand, the supply
>for the CCIEs seems to surpass today's demand and for some serious time to
>come.
>
>Some might say, you study CCIE because you love the networking. Alright, but
>if the future salaries for CCIEs are going to be somewhere near MCSE level,
>would you put such an effort to get CCIE certs and still pursuing the career
>of Cisco?
>
>Where are we heading? Someone please enlighten us.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66688&t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Congratulations!! [7:66644]

2003-04-02 Thread ccnp ccnp2002
Priscilla,

Congratulations Again! You deserve it!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66690&t=66644
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Need a Management Software [7:66666]

2003-04-02 Thread Tunde Kalejaiye
Jagan,
a software called 'whatsupgold' will do just fine. it costs about $700. this
includes 1 yr support and subscription which is optional.
http://www.whatsupgold.co.uk/

Tunde

- Original Message -
From: "Jagan Krishnaraj" 
To: 
Sent: Wednesday, April 02, 2003 10:10 AM
Subject: Need a Management Software [7:6]


> Hello Group
>
> One of my customers need a Management software.
>
> The management software should mail / page / sms network admin of
>
> CISCO switch port status UP / Down and switch down status.
>
> Can  any body advise me a good cheap commercial SNMP management software
> with these features.
>
> Thanks You in advance
>
> Regards
> jagan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66691&t=6
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: TCP Algorithm - Slow Start - Congestion Avoida [7:66605]

2003-04-02 Thread alaerte Vidali
Thanks


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66689&t=66605
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Adam
I knew this was possible on the pix, but have never configured it on an IOS
router.  It would be really appreciated if someone wouldn't mind posting a
sample config as I cannot locate one on cisco's site or the netpro forum
specific to IOS routers with both NAT and PAT configured like outlined in
this post.
Thanks.


> Yes you can just take your nat statement (ip nat inside source list 1...)
> and add the word overload on the end of the command.
> 
> You will use a 1:1 NAT for the first set of users. Once your IP's are used
> up you will use PAT. It is important to note that some issues arise with
PAT
> versus NAT like IPSEC or DLSW.
> 
> just an fyi.
-- 
Composed with Newz Crawler 1.3 http://www.newzcrawler.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66694&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


PAT AFTER NAT (More detailed) [7:66692]

2003-04-02 Thread ciscoGo2002
Thank you Troy, but I am afraid this is not enough. 

Let's see an example:

 Public Pool: X.X.X.0 --- X.X.X.128 (128
addresses)
 Private addresses: 10.10.10.X  (256
addresses)

 NAT CONFIG:

  access-list 1 X.X.X.0 0.0.0.255
  ip nat pool kk X.Y.Z.0 X.Y.Z.128 netmask 255.0.0.0 
   
  ip nat inside source list 1 pool kk overlad

 
  How will this work?? 
   A friend of mine told me that the router will
start doing NAT (one private address to one public
address) until the public pool is finished. After that
the router will start doing PAT. What do you think?? I
am very curious about this and I don't have a router
to test it...

(Richard, I don't like PAT because some applications
works bad with it, and because a lot of places in
internet block more than one access with the same IP.)

I want to thank all people who is answering me...







Por favor, responda a "Troy Leliard"

Enviado por:[EMAIL PROTECTED]
Destinatarios:  [EMAIL PROTECTED]
CC:  
Asunto: RE: PAT AFTER NAT...IS IT POSSIBLE???
[7:66672]

Yes it can be done, you just need to redefine you
pool, for 1-1 nat, use all
but 1 of your available IP's, then do another nat with
overload on the last
ip address.

=?iso-8859-1?q?ciscoGo2002?= wrote:
>
> Hello folks,
> I have question for you, we want to do dynamic NAT
> with a pool of 128 public ip addresses (we haven't
got
> more public IP addresses :(  ). Now, when the router
> does 128 translation no one can access internet...
We
> would like to do PAT when NAT public addresses are
> exhausted.. is it possible? Can we do a mix of PAT
and
> NAT configuration? Any ideas? Any configs?
>
> Thanks to all of you clever man and ladyies!!!
>

___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas...
http://messenger.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66692&t=66692
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: CCIE written exam passed! [7:66364]

2003-04-02 Thread chan Lu
Can you tell us the minimum passing score for the CCIE wrtiiren test?
I realized Cisco has changed the written to a 2hr/100 Qs format starting
3/28.

Thanks,


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66693&t=66364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Thomas Larus
You have to think about what you want to do, and about the long term.  While
the rest of the economy experienced a mild and short recession-- so mild
that it is debatable whether it technically should have counted as a
recession, the telecommunications sector experienced something much more
serious.  If I use the word "depression," someone will say that is not
accurate, as you can't have a depression in one industry, or some such
technicality.  This condition will not last forever.  No one is throwing
away their computer and giving up internet access.  We are moving toward
more and more high speed internet access and wireless access, which means
more business and more support work.

 Cisco has just bought Linksys, a consumer networking equip company, which
suggests that Cisco may soon move heavily into the mass market arena.  As
lower-cost Cisco consumer and SOHO devices proliferate,  perhaps the trend
will be for there to be a growing number of Cisco-related jobs, but at lower
pay than we saw in the tech boom.   I think the long-term future for people
near the top of the Cisco knowledgebase pyramid is very good.  Someone will
have to teach all these lower-level support folks, and write books on how to
use such and such Cisco consumer router or switch or firewall, in addition
to doing all the corporate network design/install/troubleshooting work done
now.

Linux is very difficult to learn really well.  True, CCIE lab equipment is
expensive, but I think it may take less time for some people to become a
CCIE than to get the kind of facility with Linux that the Linux-guru jobs
require.  Okay, maybe this is going to be true for only a very few people,
but it might have been true for me.  I mean, the UNIX command line syntax
(-this, /that) often bears no relation to anything that can be used a
mnemonic, while Cisco IOS is very much like plain English.  I know I made a
conscious decision to put away my various Unix platforms (FREEBSD, Red Hat
Linux, Solaris) and concentrate on CCIE.

Anyway, I love the Cisco material I am immersed in now.  You will need to
decide for yourself what you want to do, but if you decide based on the
relative salaries offered right now, you could make the wrong decision.

Tom Larus, CCIE #10,014



""Mic shoeps""  wrote in message
news:[EMAIL PROTECTED]
> Hopefully I'm not going to stir another whirpool here.
>
> Today I was surfing job sites and found out that where there are less than
> dozen jobs available for CCIE in Silicon valley, there are more than 80
jobs
> available for Linux engineers. Their initial salaries seem to be better
than
> CCIE nowaday.
> We all understand that we take great pride in achieving CCIE. It is not
only
> the hardest network certifications to get, but also financial rewards used
> to be excellent, too.
>
> No matter how much efforts we put in these CCIE certifications, our fates
> are still being subject to the cruel law of supply and demand especially
in
> this time of war.
>
> Linux is not easy. There are many commands to remember. But it doesn't
> require to invest thousands of dollars in routers and switches for
training.
> However their demands are higher than ever. On the other hand, the supply
> for the CCIEs seems to surpass today's demand and for some serious time to
> come.
>
> Some might say, you study CCIE because you love the networking. Alright,
but
> if the future salaries for CCIEs are going to be somewhere near MCSE
level,
> would you put such an effort to get CCIE certs and still pursuing the
career
> of Cisco?
>
> Where are we heading? Someone please enlighten us.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66695&t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RV: Need a Management Software [7:66666]

2003-04-02 Thread Phil Sosaya
Hello,

There is the freeware package "KiwiSyslog" that is fairly impressive for
something that costs nothing.  
http://www.kiwisyslog.com/products.htm

It will send a daily logfile also but if you want to be emailed about
traps etc, ya need the Registered Version (about $50).


I also use "Cattools" from the same company, which saves me that
annoying task of backing up all of our router and switch configs, by
doing it at the click of a button.  It is also freeware - tho you pay 50
bucks if you want the advanced version (backs up more than 2 devices
automatically without any manual intervention).  

Rgds
  

- Original Message -
From: "Jagan Krishnaraj" 
To: 
Sent: Wednesday, April 02, 2003 10:10 AM
Subject: Need a Management Software [7:6]


> Hello Group
>
> One of my customers need a Management software.
>
> The management software should mail / page / sms network admin of
>
> CISCO switch port status UP / Down and switch down status.
>
> Can  any body advise me a good cheap commercial SNMP management 
> software with these features.
>
> Thanks You in advance
>
> Regards
> jagan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66697&t=6
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Brian
IMHO if you are studying to get CCIE for money you are doing if for the
wrong reasons.

Doing a job you enjoy will give you more satisfation than doing a job
because the money is good.


Thats my $0.02


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66696&t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: A career in MPLS..... [7:66609]

2003-04-02 Thread Howard C. Berkowitz
Cisco developers have, and continue to make, major contributions into 
what I hesitate to call MPLS.  Some context may help here.

First, one has to understand that protocol families like MPLS do not 
cleanly fit into the traditional model, and you can't force-fit them. 
When I say "traditional" model, however, I'm restricting that to the 
seven-story apartment house of ISO 7498.  MPLS fits better with the 
revisions in the ISO document "Internal Organization of the Network 
Layer".

Even beyond that, however, the IETF struggled with how to handle 
these and related protocols, and eventually set up the "sub-IP" 
directorate -- intelligent transmission systems below IP but far more 
complex than traditional data links.  This isn't restricted to MPLS, 
but also covers IP over optical, IP over cable, generic switch 
management protocol, and daughter-of-MPLS, Generalized MPLS (GMPLS).

Cisco educational materials have long overemphasized the forwarding 
part of MPLS and sort of assumed "here a miracle happens" regarding 
path setup.  I remember trying to teach a beta class on MPLS on the 
ex-Stratacom 8850, turning off the projector, turning to the class of 
Cisco SE's, and going to the whiteboard to spend 45 minutes 
introducing how MPLS actually worked.

In particular, the roles of MPLS signaling protocols such as basic 
LDP, RSVP-TE, and extended LDP were skimmed over, and the dependence 
of these protocols on conventional IP routing was minimized. Little 
attention also was given to the extremely rich traffic management and 
high availability features of MPLS, which I consider the main 
motivation for using it -- not forwarding performance improvements, 
which, at best, are minimal.

Truly understanding the direction of these technologies works much 
better when you understand the generalization of GMPLS and see how it 
gives a common way of dealing with traditional technologies.  Up to 
now, MPLS was packet/frame oriented.  The GMPS extensions, however, 
allow you to use a largely common control framework for:

packets/frames
wavelengths (lambdas) in pure optical networking
timeslots in TDM networking
port identifiers when working with DACS and the like.

I can't necessarily recommend any pure MPLS books, because I go 
directly to the IETF documents when I need to check something -- and 
am on the developer mailing lists.  There is a significant amount 
about ISP applications of MPLS, however, in my book, _Building 
Service Provider Networks_ (Wiley, 2002, ISBN 0-471-09922-8), for 
which our own Annlee Hines was my peer reviewer, and Scott Bradner 
and Lyman Chapin were advisors.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66698&t=66609
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: VLAN loop problem [7:66656]

2003-04-02 Thread Thomas N.
No, we don't have portfast bpdu-guard enabled.  What does it do?  Thanks
Larry!

Thomas


""Larry Letterman""  wrote in message
news:[EMAIL PROTECTED]
> port mac address security might work, altho its a lot of admin
> overhead..are you running portfast bpdu-guard on the access ports?
>
>
> Larry Letterman
> Network Engineer
> Cisco Systems
>
>
>   - Original Message -
>   From: Thomas N.
>   To: [EMAIL PROTECTED]
>   Sent: Tuesday, April 01, 2003 8:14 PM
>   Subject: VLAN loop problem [7:66656]
>
>
>   Hi All,
>
>   I got a problem in the production campus LAN here between VLANs.  Please
>   help me out!  Below is the scenario:
>
>   We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.  Routing is
>   enable/allowed between the two subnets using MSFC of the 6500.  Each
subnet
>   has a DHCP server to assign IP address to devices on its subnet.
>   Spanning-tree is enable; however, portfast is turned on on all
>   non-trunking/uplink ports.  Recently, devices on VLAN 10 got assigned an
IP
>   address of 10.20.x.x , which is from the DHCP on the other scope and
also
>   from 10.10.x.x scope, and vice versa.  It seems that we a loop somewhere
>   between the 2 subnets but we don't know where.  I noticed lots of end
users
>   have a little unmanged hub/switch hang off the network jacks in their
>   cubicals and potentially cause loop.
>
>   Is there any way that we can block the loop on the Cisco switches
without
>   visiting cubicals taking those little umanaged hubs/switches?  Thanks!
>
>   Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66699&t=66656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread [EMAIL PROTECTED]
I would alter this sentiment slightly: if you're doing it *just* for
money...

Honestly - would anyone do this stuff on a completely voluntary basis?  I
didn't think so. ;-)

BJ



Original Message:
-
From: Brian [EMAIL PROTECTED]
Date: Wed, 2 Apr 2003 15:19:14 GMT
To: [EMAIL PROTECTED]
Subject: Re: CCIE Vs. Linux engineer (not Ph.d) [7:9]


IMHO if you are studying to get CCIE for money you are doing if for the
wrong reasons.

Doing a job you enjoy will give you more satisfation than doing a job
because the money is good.


Thats my $0.02
mail2web - Check your email from the web at
http://mail2web.com/ .




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66700&t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Microsoft IAS and VPN 3000/Client Authentication [7:66703]

2003-04-02 Thread kwindancer
Hello All: I'm looking into using Microsoft IAS and Windows NT4 PDC  to
authenticate VPN client users who are accessinga VPN 3000 concentrator.  I
want home VPN client users to utilize the NT4 PDC for their login
authentication. The VPN 3000 concentrator is located on the outside
interface of the PIX while the NT 4 PDC is located on the inside. My
questions are: a) Should I combine the PDC and IAS into one server?  My
preference is to use separate servers, and would this scenario works? b)
What ports should I open to allow Radius and NT authentication from the
outside to the inside?   Thanks. Ken

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66703&t=66703
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Pxe over cisco 6509 ports [7:66702]

2003-04-02 Thread Jordan Turek
I am wondering what i may be missing. Probably something really simple, (i
hope). We are using PXe to communicate with pc's from the altiris server (
remote control, helpdesk, and inventory control system). We are able to get
a pxe client to boot if a hub is plugged into the switch and the pc to the
hub.. If we directly connect the pc to the switch port, then we cannot get
pxe to boot. The 6509 has portfast enabled, and also the pxe server and
client are in same vlan for troubleshooting purposes. Even though portfast
is enabled, is pxe reply possibly too quick for the pxe client computer to
recieve during port startup?

Any suggestions or ideas on cisco config to add or check?? 

TIA

Jordan


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66702&t=66702
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: NT domain access after connecting through VPN [7:66618]

2003-04-02 Thread Doug Korell
Thanks for your input. I'm looking around at other vendors to see what they
offer with this. One thing I don't like with the PIX vpn is the lack of
logging capabilites. I want to know when someone logged in, when the logged
out, where they went, etc. I'm looking at the concentrators but don't
remember seeing this. As far as I can see, AAA can do some of this but you
have to use http, ftp, or telnet.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66705&t=66618
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Taking Support Exam this Friday...Need some pointers [7:66704]

2003-04-02 Thread Sudarshan N Chari
Hi All,

Planning to take the support exam (my last one in line for CCNP), this
Firday. What is the passing score ? How many quesions ?

Pls send me good pointers and also the pitfalls I need to look for, if
any.

Thanks
Sudarshan

__
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66704&t=66704
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


New CCIE revised exam preparation [7:66706]

2003-04-02 Thread Jörg Buesink
Hi there,

Currently I'm studing for the new revised 100 question 
CCIE R&S written exam. Currently I use the book

"CCIE Routing and Switching" exam cert guide bt A. Bruno.

I think this book is fine for CCNP, but not for a CCIE written test.
I would like to buy other material, what are your suggestions?

With kind regard,

Jorg.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66706&t=66706
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: New CCIE revised exam preparation [7:66706]

2003-04-02 Thread rbx10 Defcom
Jorg,
 go to Denis Laganiere link and read it.
He has a wealth of information. 


http://home.attbi.com/~blaga/Written.htm

rbx10Jörg Buesink wrote:
> 
> Hi there,
> 
> Currently I'm studing for the new revised 100 question 
> CCIE R&S written exam. Currently I use the book
> 
> "CCIE Routing and Switching" exam cert guide bt A. Bruno.
> 
> I think this book is fine for CCNP, but not for a CCIE written
> test.
> I would like to buy other material, what are your suggestions?
> 
> With kind regard,
> 
> Jorg.
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66707&t=66706
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: New CCIE revised exam preparation [7:66706]

2003-04-02 Thread Mirza, Timur
so it went from 150 questions/3 hrs to 100 questions/2 hours on march 28th?
the cisco page does indicate the reduction from 3 to 2 hrs but no mention of
the # of questions

-Original Message-
From: Jvrg Buesink [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 02, 2003 10:06 AM
To: [EMAIL PROTECTED]
Subject: New CCIE revised exam preparation [7:66706]


Hi there,

Currently I'm studing for the new revised 100 question 
CCIE R&S written exam. Currently I use the book

"CCIE Routing and Switching" exam cert guide bt A. Bruno.

I think this book is fine for CCNP, but not for a CCIE written test.
I would like to buy other material, what are your suggestions?

With kind regard,

Jorg.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66709&t=66706
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Microsoft IAS and VPN 3000/Client Authentication [7:66703]

2003-04-02 Thread Mark W. Odette II
Though I haven't done it myself, you should be able to keep the IAS box
(Windows 2000 Member Server) and the NT4PDC Box separate.

You're authentication AND access can be defined by the IAS box.

You would only need to allow RADIUS Ports...

1645 RADIUS Authentication 
1646 RADIUS Accounting

OR

1812 RADIUS server 
1813 RADIUS accounting

..on the PIX between the concentrator and the IAS box.

It would be more advisable to put the VPN Concentrator on the DMZ port
of the PIX if you have it; this is left to interpretation and opinion.

NOTE: I have no experience with the Concentrators, so, your mileage may
vary.

-Mark

-Original Message-
From: kwindancer [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, April 02, 2003 11:27 AM
To: [EMAIL PROTECTED]
Subject: Microsoft IAS and VPN 3000/Client Authentication [7:66703]

Hello All: I'm looking into using Microsoft IAS and Windows NT4 PDC  to
authenticate VPN client users who are accessinga VPN 3000 concentrator.
I
want home VPN client users to utilize the NT4 PDC for their login
authentication. The VPN 3000 concentrator is located on the outside
interface of the PIX while the NT 4 PDC is located on the inside. My
questions are: a) Should I combine the PDC and IAS into one server?  My
preference is to use separate servers, and would this scenario works? b)
What ports should I open to allow Radius and NT authentication from the
outside to the inside?   Thanks. Ken

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66710&t=66703
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Ben Woltz
I've found that you cannot do this, at least not when you do nat to a pool
of addresses.  You have to do static nat, then overload the rest.  I tried
adding overload to the end of my existing nat statment with the pool, it
started PATing the addresses from the beginning.  Instead of using the 1:1
from the pool, then pating anything beyond that.

""Lee Carter""  wrote in message
news:[EMAIL PROTECTED]
> Yes you can just take your nat statement (ip nat inside source list 1...)
> and add the word overload on the end of the command.
>
> You will use a 1:1 NAT for the first set of users. Once your IP's are used
> up you will use PAT. It is important to note that some issues arise with
PAT
> versus NAT like IPSEC or DLSW.
>
> just an fyi.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66708&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: VLAN loop problem [7:66656]

2003-04-02 Thread Thomas N.
What does "portfast bpdu-guard" do?  Does it prevent interfaces with
portfast enabled from causing the loop in my scenario?


""Larry Letterman""  wrote in message
news:[EMAIL PROTECTED]

> port mac address security might work, altho its a lot of admin
> overhead..are you running portfast bpdu-guard on the access ports?
>
>
> Larry Letterman
> Network Engineer
> Cisco Systems
>
>
>   - Original Message -
>   From: Thomas N.
>   To: [EMAIL PROTECTED]
>   Sent: Tuesday, April 01, 2003 8:14 PM
>   Subject: VLAN loop problem [7:66656]
>
>
>   Hi All,
>
>   I got a problem in the production campus LAN here between VLANs.  Please
>   help me out!  Below is the scenario:
>
>   We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.  Routing is
>   enable/allowed between the two subnets using MSFC of the 6500.  Each
subnet
>   has a DHCP server to assign IP address to devices on its subnet.
>   Spanning-tree is enable; however, portfast is turned on on all
>   non-trunking/uplink ports.  Recently, devices on VLAN 10 got assigned an
IP
>   address of 10.20.x.x , which is from the DHCP on the other scope and
also
>   from 10.10.x.x scope, and vice versa.  It seems that we a loop somewhere
>   between the 2 subnets but we don't know where.  I noticed lots of end
users
>   have a little unmanged hub/switch hang off the network jacks in their
>   cubicals and potentially cause loop.
>
>   Is there any way that we can block the loop on the Cisco switches
without
>   visiting cubicals taking those little umanaged hubs/switches?  Thanks!
>
>   Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66711&t=66656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Adam
This is what I have run into in the past and I was almost certain that it
was not possible.  I set it up in the lab here with various configs and had
the same result.
As far as I was told in the last routing update I attended at our local
cisco office, the SE's there confirmed that the PIX can be defined with a
NAT Pool of addresses and then have the same pool statement entered only
this time specifying the same address (ie. PAT) as an overload.  They
confirmed that the IOS router code does not function like this and that you
would have to statically NAT those addresses that you wanted 1:1 on and then
have a blanket PAT (overload) statement in to cover the rest.
In the case of the original question with wanting to NAT 128 clients 1:1 and
then have PAT for the rest, this would require a lot of configuration and to
guarantee that 1:1 would occur (or to at least keep track of it) you would
require static IPs on the clients wishing to 1:1 NAT.
Hope I'm not flying way offline here but I believe this is the only way
possible with an IOS router.

Cheers

> I've found that you cannot do this, at least not when you do nat to a pool
> of addresses.  You have to do static nat, then overload the rest.  I tried
> adding overload to the end of my existing nat statment with the pool, it
> started PATing the addresses from the beginning.  Instead of using the 1:1
> from the pool, then pating anything beyond that.
> 
> ""Lee Carter""  wrote in message
> news:[EMAIL PROTECTED]
> > Yes you can just take your nat statement (ip nat inside source list 1...)
> > and add the word overload on the end of the command.
> >
> > You will use a 1:1 NAT for the first set of users. Once your IP's are
used
> > up you will use PAT. It is important to note that some issues arise with
> PAT
> > versus NAT like IPSEC or DLSW.
> >
> > just an fyi.
-- 
Composed with Newz Crawler 1.3 http://www.newzcrawler.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66712&t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Mic shoeps
Thank you all folks. 
I don't know much about Linux. But I would like to use the analogy that
Cisco engineers are like traffic officers in major intersections in a city
and Linux (Lexus), Microsoft (Mercedes), Solaris (Saab), Visual+ (Volvo)
engineers are like thousands of drivers passing through these intersections.
As the traffic gets heavy, those intersections will get bog down and another
intersections will be build to accomodate the throughput of the traffics.
But the Lexus, Mercedes, Saab and Volvo engineers will build more bigger,
faster and powerful sofisticated cars to get the most out of the
infrastructures and elicit more customers to learn how to drive their cars.

But the trouble is that the city is not expanding or get connected with
another cities (hats off to the mayor Bush). Seems to me that there will be
plenty of fuel and asphalt to build the road and power the cars. But the
land is limited and more cars will be build to meet the insatiable consumer
appetite. But soon the automations will catch up with the demand and the
traffic officers will standing in his post like the Maytag technician.

Worst of all, more traffic officers will become increasingly territorial to
new and old alike. They will use the terms like 'ph'd' and 'lab rat' to
boost their egos and deter others who are trying to enter into their realm.

Yes, I love the challenge and that's what I'm doing right now. But I'll
seriously reconsider if my presence becomes a threat to another traffic
officer's pizza and the only choice I'll be left with is a big mac. Looks
like Linux (open system for free) provide you that unhostile pizzaria and
more. Your friendly insignt is appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66713&t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: VLAN loop problem [7:66656]

2003-04-02 Thread Larry Letterman
Yes,
it prevents loops in spanning tree on layer 2 switches from causing a loop
by disabling the port on a cisco switch...


Larry Letterman
Network Engineer
Cisco Systems





> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> Thomas N.
> Sent: Wednesday, April 02, 2003 12:18 PM
> To: [EMAIL PROTECTED]
> Subject: Re: VLAN loop problem [7:66656]
>
>
> What does "portfast bpdu-guard" do?  Does it prevent interfaces with
> portfast enabled from causing the loop in my scenario?
>
>
> ""Larry Letterman""  wrote in message
> news:[EMAIL PROTECTED]
>
> > port mac address security might work, altho its a lot of admin
> > overhead..are you running portfast bpdu-guard on the access ports?
> >
> >
> > Larry Letterman
> > Network Engineer
> > Cisco Systems
> >
> >
> >   - Original Message -
> >   From: Thomas N.
> >   To: [EMAIL PROTECTED]
> >   Sent: Tuesday, April 01, 2003 8:14 PM
> >   Subject: VLAN loop problem [7:66656]
> >
> >
> >   Hi All,
> >
> >   I got a problem in the production campus LAN here between
> VLANs.  Please
> >   help me out!  Below is the scenario:
> >
> >   We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.
> Routing is
> >   enable/allowed between the two subnets using MSFC of the 6500.  Each
> subnet
> >   has a DHCP server to assign IP address to devices on its subnet.
> >   Spanning-tree is enable; however, portfast is turned on on all
> >   non-trunking/uplink ports.  Recently, devices on VLAN 10 got
> assigned an
> IP
> >   address of 10.20.x.x , which is from the DHCP on the other scope and
> also
> >   from 10.10.x.x scope, and vice versa.  It seems that we a
> loop somewhere
> >   between the 2 subnets but we don't know where.  I noticed lots of end
> users
> >   have a little unmanged hub/switch hang off the network jacks in their
> >   cubicals and potentially cause loop.
> >
> >   Is there any way that we can block the loop on the Cisco switches
> without
> >   visiting cubicals taking those little umanaged hubs/switches?  Thanks!
> >
> >   Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66714&t=66656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Question about the Revised R&S CCIE Written Exam [7:66715]

2003-04-02 Thread Zahid Hassan
Dear All,

Could someone please confirm about the number of questions in the new R&S
written
exam after March 28 2003 as it is not mentioned on CCIE information page.

Thanks in advance.

Regards,

Zahid




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66715&t=66715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Taking Support Exam this Friday...Need some pointe [7:66704]

2003-04-02 Thread rbx10 Defcom
Sudarshan, hope this help:

Exam Number: 640-606 
Associated Certifications: CCNP 
Duration: 75 min (50-60 questions) 


Make sure you use the Exam Cram for support. I took the exam long ago so I
dont' remember passing score. You might want to check this link for further
info.


http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_exams/640-606.html

Good luck

-rbx10
CCIE-n-training




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66716&t=66704
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: so how does IGRP unequal load-balancing work anywa [7:66665]

2003-04-02 Thread Priscilla Oppenheimer
nwo wrote:
> 
> It occurs to me that I do not understand how IGRP unequal load
> balancing
> works.
> 
> Yes, I understand what the commands are, and I am well aware of
> the
> intricacies involved in fast-switching and CEF.  So please
> don't respond by
> telling me to configure 'variance' or stuff like that.  I
> already know all
> that.
> 
> What I don't understand is this.  A fundamental part of EIGRP
> unequal load
> balancing is the concept of the feasible successor, where
> routes of unequal
> metric to a particular destination will be considered only if
> the
> corresponding neighbor is a feasible successor for the
> destination in
> question.  This is in order to prevent the problem of packets
> being sent to
> to a router that is actually further away from the destination
> than the
> sending router is to that destination.
> 
> Yet, I am aware of no such safeguards in IGRP.  IGRP has no
> such concept of

I don't think such a safeguard is necessary. A router running even a simple
distance-vector protocol like IGRP knows the metric of its neighbors because
the neighbors report it in update packets. The router can add routes to the
routing table based on this information alone and knowledge of the variance
and maximum-paths values. It would be a broken protocol indeed if it added
routes that included a next-hop neighbor that was farther away.

The business of feasible successors, unique to EIGRP, helps maintain the
routing table when changes happen, such as when a directly connected link
fails or when update or queries arrive. I don't know if it's used for load
balancing though. It wouldn't need to be.

If you have a URL that explains what feasible successor has to do with load
balancing, please send it. Thanks. But I would probably still say that it's
not necessary for load balancing to work.

> a topology table with neighbor's advertised distances and
> whatnot.
> Therefore it seems that packets could easily be forwarded away
> from the
> destination. 

Not if the distance-vector protocol is working correctly.

> Furthermore, it would seem to me that packets
> could actually
> bounce back and forth between 2 routers for awhile.

Once again, not if the distance-vector protocol is working correctly, unless
I'm missing something.

Priscilla


> 
> Please say it ain't so.  Yet I am unaware of any construct
> within IGRP that
> would prevent it from being so.
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66717&t=5
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Question about the Revised R&S CCIE Written Exam [7:66715]

2003-04-02 Thread Karsten
A ccie at Boson told me it was 120.

-Karsten


On Wednesday 02 April 2003 02:07 pm, Zahid Hassan wrote:
> Dear All,
>
> Could someone please confirm about the number of questions in the new R&S
> written
> exam after March 28 2003 as it is not mentioned on CCIE information page.
>
> Thanks in advance.
>
> Regards,
>
> Zahid
> Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66719&t=66715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Cisco 2511 Hardware Issue [7:66662]

2003-04-02 Thread Scott Roberts
I'm assuming your configuration is fine, but what do the controllers show
and are the interfaces showing any errors?

scott

""Tim Champion""  wrote in message
news:[EMAIL PROTECTED]
> Has anyone experienced, or heard of, the following problem:
>
> I recently bought a 2nd hand 2511 but only async interfaces 9-16 work. 1-8
> receive data but do not transmit. Could it possibly be due to one of the
> numerous jumper settings?
>
> many thanks in advance.
>
> Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66721&t=2
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


hacking challenge [7:66720]

2003-04-02 Thread Wilmes, Rusty
this is a general question for the security specialists.

Im trying to convince a client that they need a firewall

so hypothetically, 

if you had telnet via the internet open to a router (with an access list
that allowed smtp and telnet) (assuming you didn't know the telnet password
or the enable password)that had a bunch of nt servers on another interface,
how long would it take a determined hacker a) cause some kind of network
downtime and b) to map a network drive to a share on a file server over the
internet. 

Thanks,
Rusty

> -Original Message-
> From: Larry Letterman [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, April 02, 2003 1:44 PM
> To: [EMAIL PROTECTED]
> Subject: RE: VLAN loop problem [7:66656]
> 
> 
> Yes,
> it prevents loops in spanning tree on layer 2 switches from 
> causing a loop
> by disabling the port on a cisco switch...
> 
> 
> Larry Letterman
> Network Engineer
> Cisco Systems
> 
> 
> 
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] Behalf Of
> > Thomas N.
> > Sent: Wednesday, April 02, 2003 12:18 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: VLAN loop problem [7:66656]
> >
> >
> > What does "portfast bpdu-guard" do?  Does it prevent interfaces with
> > portfast enabled from causing the loop in my scenario?
> >
> >
> > ""Larry Letterman""  wrote in message
> > news:[EMAIL PROTECTED]
> >
> > > port mac address security might work, altho its a lot of admin
> > > overhead..are you running portfast bpdu-guard on the access ports?
> > >
> > >
> > > Larry Letterman
> > > Network Engineer
> > > Cisco Systems
> > >
> > >
> > >   - Original Message -
> > >   From: Thomas N.
> > >   To: [EMAIL PROTECTED]
> > >   Sent: Tuesday, April 01, 2003 8:14 PM
> > >   Subject: VLAN loop problem [7:66656]
> > >
> > >
> > >   Hi All,
> > >
> > >   I got a problem in the production campus LAN here between
> > VLANs.  Please
> > >   help me out!  Below is the scenario:
> > >
> > >   We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.
> > Routing is
> > >   enable/allowed between the two subnets using MSFC of 
> the 6500.  Each
> > subnet
> > >   has a DHCP server to assign IP address to devices on its subnet.
> > >   Spanning-tree is enable; however, portfast is turned on on all
> > >   non-trunking/uplink ports.  Recently, devices on VLAN 10 got
> > assigned an
> > IP
> > >   address of 10.20.x.x , which is from the DHCP on the 
> other scope and
> > also
> > >   from 10.10.x.x scope, and vice versa.  It seems that we a
> > loop somewhere
> > >   between the 2 subnets but we don't know where.  I 
> noticed lots of end
> > users
> > >   have a little unmanged hub/switch hang off the network 
> jacks in their
> > >   cubicals and potentially cause loop.
> > >
> > >   Is there any way that we can block the loop on the 
> Cisco switches
> > without
> > >   visiting cubicals taking those little umanaged 
> hubs/switches?  Thanks!
> > >
> > >   Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66720&t=66720
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Router-to-external MODEM connection [7:66585]

2003-04-02 Thread Scott Roberts
yes daniel cotts was right, the 1601 serial interface is a asyc/sync one and
since you have one you're in luck! the only thing you're missing though is a
cable that is db60 to rs-232. you can get these straight from a cisco
reseller or off of ebay (though its hard to find these on ebay unless you
look).

the configuration of a modem is an entire chapter of most books, so it
depends on what you're looking to do with the modem. dial in, dial out,
access the network behind the router or access the router itself? you can
find configuration example in many books and also try searching cisco.com
for 'modem router configuration'

hope this helps,
scott

""Diego Martmnez Boqui""  wrote in message
news:[EMAIL PROTECTED]
> Hi Scott, yes my router is a 1601 which has an integrated wic (async/sync
> serial interface (db60).
>
> Ok, so you confirm to me that this connection is possible, the thing is
that
> I need some kind of instructions to do the connection.  Do you know how to
> do this or can you point me to some url where I can find step-by-step
> instructions to configure this.
>
> Thanks a lot for your time and help.
> - Original Message -
> From: "Scott Roberts"
> Date: Tue, 1 Apr 2003 19:51:34 GMT
> To: [EMAIL PROTECTED]
> Subject: Re: Router-to-external MODEM connection [7:66585]
>
> you'll need a WIC with a async/syn serial port, I know they're available
for
> the 1700's, but I'm not sure if the same wic will work in a 1600. then you
> can specify the interface as async and connect up the modem with a
> db60-rs232 cable.
>
> scott
>
> ""Diego Martmnez Boqui""  wrote in message
> news:[EMAIL PROTECTED]
> > Hello Steve, yes, I can do this using the aux port but my 1600 router
does
> > not have an aux port, I need to do this using my serial sync/async
> > interface, I just don`t know how and have not found a document about
this
> > type of connection.
> >
> > Thanks for your help anyway
> >
> > Peace
> > - Original Message -
> > From: "Steve"
> > Date: Tue, 1 Apr 2003 03:21:41 GMT
> > To: [EMAIL PROTECTED]
> > Subject: Re: Router-to-external MODEM connection [7:66585]
> >
> > this can be done look for cisco doc to connect external modem to aux
port
> >
> > --
> > Regards,
> >
> > Steve
> >
> >
> > ""Diego Martmnez Boqui""  wrote in message
> > news:[EMAIL PROTECTED]
> > > Hello Group.
> > >
> > > Is it possible to connect an external modem to a Cisco 1600 series
> > > router?
> > >
> > > And if it is, then how is it done?
> > >
> > > Can I connect using the serial interface?
> > >
> > > Any link with step by step instructions?
> > >
> > > Thank you all!
> > > --
> > > __
> > > Sign-up for your own FREE Personalized E-mail at Mail.com
> > > http://www.mail.com/?sr=signup
> > Diego Martmnez Boqui
> >
> > --
> > __
> > Sign-up for your own FREE Personalized E-mail at Mail.com
> > http://www.mail.com/?sr=signup
> Diego Martmnez Boqui
>
> --
> __
> Sign-up for your own FREE Personalized E-mail at Mail.com
> http://www.mail.com/?sr=signup




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66718&t=66585
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: "off-topic" posts - WAS - RE: What tools can tell u r using [7:66723]

2003-04-02 Thread Scott Roberts
something tells me you never fully considered the merits of that website.
take another hard look at it and then questions its relevance to cisco. ;)

scott

""cebuano""  wrote in message
news:[EMAIL PROTECTED]
> Paul,
> How many more of these "off-topic" threads are you going to allow?
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> LaWanda Daivs
> Sent: Tuesday, April 01, 2003 8:38 PM
> To: [EMAIL PROTECTED]
> Subject: Re: What tools can tell u r using lease line or ISDN? [7:66561]
>
> Take a look at this web site and let me know what you
> think.
>
> http://www.imagine2020.com/761368002.
>
>
> --- Link Teo  wrote:
> > I am using leased line to connect my remote offices
> > to HQ. All the leased
> > line are backup by ISDN. Is there any tools which
> > can inform me via email or
> > other means about whether I am using leased line now
> > or ISDN backup? In
> > other words, any tools which can inform me when the
> > primary line is down and
> > the ISDN kick in?
> >
> > Thanks a lot.
> [EMAIL PROTECTED]
>
>
> __
> Do you Yahoo!?
> Yahoo! Tax Center - File online, calculators, forms, and more
> http://platinum.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66723&t=66723
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: so how does IGRP unequal load-balancing work anyway? [7:66722]

2003-04-02 Thread Scott Roberts
considering hold-down times and split horison, why do you think that packets
would bounces in a loop under normal conditions? I think under normal
conditions if a route is considered valid enough to be included in a routing
table, its not going to be a loop.

I think EIGRP only looked for alternate successors when the feasible
successor was a really bad cost, was because of an optimization standpoint
and not a loop issue.

I agree that there can be some issues with classful protocols and routing,
but I think the issue of load balancing legitimately discovered routes isn't
worrisome. you'll pretty much have an eye on your network and know if
something isn't right, but it seems like you're worried that if you setup a
network and leave it for a few years unattended there might be problems,
well what network won't under those circumstances?

scott

""nwo""  wrote in message
news:[EMAIL PROTECTED]
> It occurs to me that I do not understand how IGRP unequal load balancing
> works.
>
> Yes, I understand what the commands are, and I am well aware of the
> intricacies involved in fast-switching and CEF.  So please don't respond
by
> telling me to configure 'variance' or stuff like that.  I already know all
> that.
>
> What I don't understand is this.  A fundamental part of EIGRP unequal load
> balancing is the concept of the feasible successor, where routes of
unequal
> metric to a particular destination will be considered only if the
> corresponding neighbor is a feasible successor for the destination in
> question.  This is in order to prevent the problem of packets being sent
to
> to a router that is actually further away from the destination than the
> sending router is to that destination.
>
> Yet, I am aware of no such safeguards in IGRP.  IGRP has no such concept
of
> a topology table with neighbor's advertised distances and whatnot.
> Therefore it seems that packets could easily be forwarded away from the
> destination.  Furthermore, it would seem to me that packets could actually
> bounce back and forth between 2 routers for awhile.
>
> Please say it ain't so.  Yet I am unaware of any construct within IGRP
that
> would prevent it from being so.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66722&t=66722
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Question about the Revised R&S CCIE Written Exam [7:66715]

2003-04-02 Thread Mirza, Timur
do you know what the pass mark is?

-Original Message-
From: Karsten [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 02, 2003 3:43 PM
To: [EMAIL PROTECTED]
Subject: Re: Question about the Revised R&S CCIE Written Exam [7:66715]


A ccie at Boson told me it was 120.

-Karsten


On Wednesday 02 April 2003 02:07 pm, Zahid Hassan wrote:
> Dear All,
>
> Could someone please confirm about the number of questions in the new R&S
> written
> exam after March 28 2003 as it is not mentioned on CCIE information page.
>
> Thanks in advance.
>
> Regards,
>
> Zahid
> Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66725&t=66715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: VLAN loop problem [7:66656]

2003-04-02 Thread Thomas N.
I'll check it out tomorrow.  Thanks much Larry!

Thomas


""Larry Letterman""  wrote in message
news:[EMAIL PROTECTED]
> Yes,
> it prevents loops in spanning tree on layer 2 switches from causing a loop
> by disabling the port on a cisco switch...
>
>
> Larry Letterman
> Network Engineer
> Cisco Systems
>
>
>
>
>
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> > Thomas N.
> > Sent: Wednesday, April 02, 2003 12:18 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: VLAN loop problem [7:66656]
> >
> >
> > What does "portfast bpdu-guard" do?  Does it prevent interfaces with
> > portfast enabled from causing the loop in my scenario?
> >
> >
> > ""Larry Letterman""  wrote in message
> > news:[EMAIL PROTECTED]
> >
> > > port mac address security might work, altho its a lot of admin
> > > overhead..are you running portfast bpdu-guard on the access ports?
> > >
> > >
> > > Larry Letterman
> > > Network Engineer
> > > Cisco Systems
> > >
> > >
> > >   - Original Message -
> > >   From: Thomas N.
> > >   To: [EMAIL PROTECTED]
> > >   Sent: Tuesday, April 01, 2003 8:14 PM
> > >   Subject: VLAN loop problem [7:66656]
> > >
> > >
> > >   Hi All,
> > >
> > >   I got a problem in the production campus LAN here between
> > VLANs.  Please
> > >   help me out!  Below is the scenario:
> > >
> > >   We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.
> > Routing is
> > >   enable/allowed between the two subnets using MSFC of the 6500.  Each
> > subnet
> > >   has a DHCP server to assign IP address to devices on its subnet.
> > >   Spanning-tree is enable; however, portfast is turned on on all
> > >   non-trunking/uplink ports.  Recently, devices on VLAN 10 got
> > assigned an
> > IP
> > >   address of 10.20.x.x , which is from the DHCP on the other scope and
> > also
> > >   from 10.10.x.x scope, and vice versa.  It seems that we a
> > loop somewhere
> > >   between the 2 subnets but we don't know where.  I noticed lots of
end
> > users
> > >   have a little unmanged hub/switch hang off the network jacks in
their
> > >   cubicals and potentially cause loop.
> > >
> > >   Is there any way that we can block the loop on the Cisco switches
> > without
> > >   visiting cubicals taking those little umanaged hubs/switches?
Thanks!
> > >
> > >   Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66724&t=66656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: "off-topic" posts - WAS - RE: What tools can tell u r using [7:66726]

2003-04-02 Thread cebuano
Scott,
This forum has been created for the purpose of study, NOT MARKETING.
Unless the owner and moderators of this server has changed this POLICY.
If so, then I'll go ahead and post my own MARKETING messages as well.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Scott Roberts
Sent: Wednesday, April 02, 2003 7:35 PM
To: [EMAIL PROTECTED]
Subject: Re: "off-topic" posts - WAS - RE: What tools can tell u r using
[7:66723]

something tells me you never fully considered the merits of that
website.
take another hard look at it and then questions its relevance to cisco.
;)

scott

""cebuano""  wrote in message
news:[EMAIL PROTECTED]
> Paul,
> How many more of these "off-topic" threads are you going to allow?
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of
> LaWanda Daivs
> Sent: Tuesday, April 01, 2003 8:38 PM
> To: [EMAIL PROTECTED]
> Subject: Re: What tools can tell u r using lease line or ISDN?
[7:66561]
>
> Take a look at this web site and let me know what you
> think.
>
> http://www.imagine2020.com/761368002.
>
>
> --- Link Teo  wrote:
> > I am using leased line to connect my remote offices
> > to HQ. All the leased
> > line are backup by ISDN. Is there any tools which
> > can inform me via email or
> > other means about whether I am using leased line now
> > or ISDN backup? In
> > other words, any tools which can inform me when the
> > primary line is down and
> > the ISDN kick in?
> >
> > Thanks a lot.
> [EMAIL PROTECTED]
>
>
> __
> Do you Yahoo!?
> Yahoo! Tax Center - File online, calculators, forms, and more
> http://platinum.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66726&t=66726
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: A career in MPLS..... [7:66609]

2003-04-02 Thread nrf
""Cisco Nuts""  wrote in message
news:[EMAIL PROTECTED]
> Thank you so much for your enlightening reply!!
>
> And thank God I moved away from Novell to MS to Citrix and finally Cisco
> and now onto MPLS...And thank God "it is a very specialized and small
> market right now that is looking for MPLS experience"All the more
> better to develop skills in MPLS as every Tom, Dick and Harry is either
> just  routing or switching   ;- )
>
> Looks like MPLS is the way to go!!! Come'on Sprint.Let's get on with
> the Show :-)

Well, actually, I would temper my enthusiasm.  Like you said, MPLS is indeed
a very small and specialized market, meaning there really aren't many jobs
because there are so few implementations.  True, you might reply that there
are also few people who know MPLS.  But almost all those MPLS are within the
large carriers where if you want to be the MPLS engineer, you can't just
know MPLS, you have to REALLY REALLY REALLY know it, with verifiable
experience and/or published papers to boot.  Carriers aren't going to snap
you up just because you may have read a book or took a 1-week class.  .

>
> >From:  >Reply-To:  >To: [EMAIL PROTECTED] >Subject: Re: A
> career in MPLS. [7:66609] >Date: Wed, 2 Apr 2003 04:47:44 GMT > >Ah -
> MPLS. Yes there are several large carriers with MPLS >deployed or in the
> process of deploying it (equant, global >crossing...). Some on their core
> and some on their layer 2 networks >such as ATM (AT&T for example).
> Others backed away from it but >are now looking at it since it's a huge
> marketing beast that can't be >ignored (Sprint for example). > >Aside
> from ISP's some large enterprises are using it for things like >MPLS
> enabled VPN's. As to the market for someone that knows >MPLS - what I
> have seen is it's a very specialized and small market >right now that is
> looking for MPLS experience. Mostly due to it still >being relatively new
> in deployments and being relatively small in the >number of deployments.
> > >I do believe however after saying that - that it never hurts to have a
> >wide background of skills. Imagine if you specialized in Novell and
> >never moved into other areas for example. Novell is a great product >but
> the market for Novell pro's dried up a lot from the good ole days. >You
> would be much less marketable if you didn't also know other >things such
> as Microsoft or Routing or ... > >I could go into my opinions of the
> pros and cons of MPLS and where >I think it fits - but that's another
> boring story for later :) > > >www.ccie4u.com > > > >On 1 Apr 2003 at
> 15:47, nrf wrote: > > > ""Cisco Nuts"" wrote in message > >
> news:[EMAIL PROTECTED] > > > Hello group, How
> does one feel about a career in MPLS...I mean doing MPLS > > > as part of
> your core job day in and out.Is it worth it? Since our > > > network
> does not use MPLS (maybe never will) inspite of being one of the > > >
> Big Four Tier 1 SP's > > > > Let me guess. Do you work for Sprint? >
> > > > >are there other SP's that use MPLS in their > > > backbone?? > > >
> > Yeah, there are some. > > > > >I have just given myself a month or so
> break from my CCIE Lab > > > Prep.(yeah!yeah! most would consider me
> stupid on this) to study MPLS > > > for the CCIP and am thinking if I
> should pursue this subject just like I > > > did for BGP.know it
> inside out cold.and maybe consider a new > > > career/job in MPLS
> (obviously along with BGP, MBGP, MCast etc...) Does > > > anyone know of
> how MPLS is viewed out there? I mean, in terms of > > > implementation,
> popularity and last but not the least , $$$ ??? >;->Which > > > of the
> Big SP's or Enterprise networks have implemented MPLS? Has it been > > >
> worth the advantages that MPLS proposes??Thank you.Sincerely,CN > > > >
> The way I see it is this. MPLS is potentially powerful technology for it
> > > can be used as a lingua-franca among a carrier's network and
> transport >layer > > and also as a way to impose circuit-switching
> discipline upon IP and > > therefore offer circuit-switching services
> with a pure IP network. > > > > But MPLS is by no means a slam-dunk.
> Certain carriers, most notably > > Sprint, have elected not to go down
> the MPLS path because they believe the > > technology is immature (and
> they are correct) and also because they believe > > that they can garner
> the benefits of MPLS by other means (also correct). > > The point is that
> while MPLS offers great potential, it also presents > > problems, so
> implementing it is not a no-brainer. > > > > And furthermore, I don't
> particularly like the way that Cisco is pushing > > MPLS, particularly in
> its cert program. In my opinion, I think Cisco's >cert > > programs
> emphasize the least useful parts of MPLS while neglecting the more > >
> useful parts. For example, I don't understand why Cisco pushes LDP the
> way > > it does, for LDP merely builds LSP's that correspond to the route
> table, >but > > 

Re: so how does IGRP unequal load-balancing work anywa [7:66727]

2003-04-02 Thread nwo
OK, consider this scenario.

You have a large network of IGRP routers.  You have routers A and B who each
have a metric of, say, 10 to a given destination (I am going to use simple
values for the metrics of IGRP to make things easy).  Routers A and B are
also directly connected, and the link between them has a metric of 1.
Router A sends an update to B that the destination has a metric of 10, and
router B adds the value of the link to arrive at a total metric of 11.
Therefore, router B has 2 ways to get to the destination, the first would be
through the normal way (through the path that has a metric of 10) and the
other through router A (which has a metric of 11).  Vice versa is also true
with respect to router A.  When you configure variance of larger than 1,
then both paths will be entered into the route table.

If this is the case, then you can see that some packets can bounce around.
For example, router A may, through unequal load-balancing, send some of the
dest packets to B, and then B will, again through unequal balancing, send
some of those packets back to A, etc.  Yes, the number of packets sent the
'wrong way' decreases exponentially but the point is that there is still
some bouncing around.

The only way I can see that this would not happen is if a router would
compare the metric of a received route (before the cost of the link is
added) to the metric that the router is currently holding for that route,
and if it is equal to or greater than that value, the route is rejected
unconditionally for unequal balancing.  This would be something similar to
what the whole EIGRP successor algorithm accomplishes.  Does anybody know
for a fact whether this is in the IGRP algorithm?


""Priscilla Oppenheimer""  wrote in message
news:[EMAIL PROTECTED]
> nwo wrote:
> >
> > It occurs to me that I do not understand how IGRP unequal load
> > balancing
> > works.
> >
> > Yes, I understand what the commands are, and I am well aware of
> > the
> > intricacies involved in fast-switching and CEF.  So please
> > don't respond by
> > telling me to configure 'variance' or stuff like that.  I
> > already know all
> > that.
> >
> > What I don't understand is this.  A fundamental part of EIGRP
> > unequal load
> > balancing is the concept of the feasible successor, where
> > routes of unequal
> > metric to a particular destination will be considered only if
> > the
> > corresponding neighbor is a feasible successor for the
> > destination in
> > question.  This is in order to prevent the problem of packets
> > being sent to
> > to a router that is actually further away from the destination
> > than the
> > sending router is to that destination.
> >
> > Yet, I am aware of no such safeguards in IGRP.  IGRP has no
> > such concept of
>
> I don't think such a safeguard is necessary. A router running even a
simple
> distance-vector protocol like IGRP knows the metric of its neighbors
because
> the neighbors report it in update packets. The router can add routes to
the
> routing table based on this information alone and knowledge of the
variance
> and maximum-paths values. It would be a broken protocol indeed if it added
> routes that included a next-hop neighbor that was farther away.
>
> The business of feasible successors, unique to EIGRP, helps maintain the
> routing table when changes happen, such as when a directly connected link
> fails or when update or queries arrive. I don't know if it's used for load
> balancing though. It wouldn't need to be.
>
> If you have a URL that explains what feasible successor has to do with
load
> balancing, please send it. Thanks. But I would probably still say that
it's
> not necessary for load balancing to work.
>
> > a topology table with neighbor's advertised distances and
> > whatnot.
> > Therefore it seems that packets could easily be forwarded away
> > from the
> > destination.
>
> Not if the distance-vector protocol is working correctly.
>
> > Furthermore, it would seem to me that packets
> > could actually
> > bounce back and forth between 2 routers for awhile.
>
> Once again, not if the distance-vector protocol is working correctly,
unless
> I'm missing something.
>
> Priscilla
>
>
> >
> > Please say it ain't so.  Yet I am unaware of any construct
> > within IGRP that
> > would prevent it from being so.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66727&t=66727
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: New CCNP Exam, pls clarify [7:66599]

2003-04-02 Thread hinwoto
Thank you folks,

I appreciate your comments, and Priscilla, I have the same thought as yours
that Cisco will
not be so selfish not to appreciate the exams we took hardly.

I will try to contact Cisco guy around here, meanwhile I hope that there
will be some Cisco
guy out there confirming about this confusion and let all the community here
know for sure.

Hi, Uday, any comment , thx

cheers
Hin

""Priscilla Oppenheimer""  wrote in message
news:[EMAIL PROTECTED]
> hinwoto wrote:
> >
> > Hi all,
> >
> > I just went for BCRAN training and I got information from the
> > instructor
> > that there will be new CCNP version exam. It will be launched
> > about June /
> > July this year.
> >
> > According to him, if u wanna take the old CCNP exam ,
> > please quickly have all the 4 exams passed before the new one
> > launched,
> > since the old exam wont be valid,
>
> I don't think that's how it works. Cisco wouldn't be THAT mean. I would
> question your instructor on this. Was the training with a certified Cisco
> Learning Partner? They would be more knowledgeable. Or try to talk to
Cisco
> directly.
>
> Does anyone remember how it worked when they replaced Routing with BSCI?
If
> you were already in the process of getting your CCNP, couldn't you use a
> pass on Routing to finish, even though that exam had been replaced?
>
> Priscilla
>
>
> > let say we have passed 3 exams, and unfortunately before we
> > take the
> > last one, the new CCNP version has been launched all the 3
> > exams are
> > invalid .. by then..
> >
> > I've been trying to search such information on www.cisco.com
> > but  I am still
> > unable to get the straight info.
> >
> > Please, show the light, if you guys know for sure.
> > It will be very helpfull for my consideration about taking the
> > exams
> >
> > Thanks and cheers
> > Hin




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66728&t=66599
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


VLAN Trunk Question and spanning tree [7:66730]

2003-04-02 Thread John Brandis
hi All,
 
Please tell me if I am wrong and best practices
 
A trunk link, by default, is a member of all VLANS
 
Would it be best practice, to place your trunk ports in a particualr VLAN,
then define what you want pruned/not pruned ?
 
Reason I ask is that I am getting the hostflapping error every now and then,
which first made me believe I had a developer plugging in hubs around the
place. However, now I think its a question of my design/config. Here is an
example of the error on my cat-4006 gig ports which trunk to my floor
switchs.
 
Host 00:06:29:F9:75:A2 in vlan 23 is flapping between port Gi2/12 and port
Gi2/11
 
NOTE: 2/12 go's to sw2 and 2/11 go's to sw1, which are connected to one
another as you can see below
 
I checked it out, there are no hubs any where that could do this, and I have
spanning tree in place to stop the redundant links on my floor switch;s
coming back into the core. Here is the config of my trunk ports on the floor
switch
 
SW1
interface GigabitEthernet0/1
description link to core
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/2
description link to sw2 floor switch
 switchport mode trunk
 no ip address
 
SW2
interface GigabitEthernet0/1
description link to core
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/2
description link to sw1 floor switch
 switchport mode trunk
 no ip address

If any one can suggest anything, I would appreciate it 
(I am interested in the use of the bpdu-port guard, would this help here ?)
 
Thanks
John
Sydney Australia


**

This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.

*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66730&t=66730
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread nrf
""Mic shoeps""  wrote in message
news:[EMAIL PROTECTED]
> Thank you all folks.
> I don't know much about Linux. But I would like to use the analogy that
> Cisco engineers are like traffic officers in major intersections in a city
> and Linux (Lexus), Microsoft (Mercedes), Solaris (Saab), Visual+ (Volvo)
> engineers are like thousands of drivers passing through these
intersections.
> As the traffic gets heavy, those intersections will get bog down and
another
> intersections will be build to accomodate the throughput of the traffics.
> But the Lexus, Mercedes, Saab and Volvo engineers will build more bigger,
> faster and powerful sofisticated cars to get the most out of the
> infrastructures and elicit more customers to learn how to drive their
cars.

Actually, to extend your analogy, I think the real problem is that there the
world built WAY too many roads than needed.  This is why there is such talk
of a telco capacity glut.  While Internet traffic was doubling every year,
providers were building out as if traffic was doubling every 100 days.
Couple that with the fact that carriers have essentially almost to a man
have not figured out how to make money off the Internet.  For example,
consider the following quotes:

"...we have the spectacle of three once powerful, "next gen" carriers in
total collapse: UUNet as part of the WorldCom debacle, PSINet and Genuity.
Makes no mistake: these bankruptcies are not the result of an economic
downturn or solely due to corruption and fraud. Rather, as we have said
before many times in many of our publications: the underlying carrier
business models are fundamentally flawed...we are led to a conclusion that
at this time there is no sound business model for the carrier side of the
Internet. The carrier industry has come to an absolute dead-end under the
current set of business models,"

http://www.proberesearch.com/alerts/2002/ipproblems.htm

"...Where one of the alternative networks (again, the Internet) isn't
profitable in the present, it undermines the whole premise of convergence.
Why would the market move to select a network choice that doesn't make money
even for the core services it's intended to provide? "
http://www.networkmagazine.com/article/NMG20020930S0011/3

>
> But the trouble is that the city is not expanding or get connected with
> another cities (hats off to the mayor Bush).

Without getting political, I think this is more the fault of a certain Mr.
bin Laden.

>Seems to me that there will be
> plenty of fuel and asphalt to build the road and power the cars. But the
> land is limited and more cars will be build to meet the insatiable
consumer
> appetite. But soon the automations will catch up with the demand and the
> traffic officers will standing in his post like the Maytag technician.

True indeed, networks and network engineering will become ordinary.
>
> Worst of all, more traffic officers will become increasingly territorial
to
> new and old alike. They will use the terms like 'ph'd' and 'lab rat' to
> boost their egos and deter others who are trying to enter into their
realm.

Uh, here we must part company.  I think you grant far too much power to some
of us 'traffic officers'.

The fact is if certain designations are considered good or bad, it is not
because the old-timers say so, but because the free market says so.  Holders
of PhD's tend to make more money and suffer from less unemployment than
nonholders of PhD's (all other things being equal) not because companies
enjoy paying those PhD guys more (oh please please, take our money because
we want to make less profit), but because on average those PhD holders tend
to be scarcer and more productive.   By the same token, 'lab-rat' CCIE's
(and by that I mean people who have little to no experience as compared to
the average CCIE) tend to be paid less and tend to suffer from more
unemployment not because companies 'enjoy' screwing them but because it is
widely acknowledged that those with less experience tend to be less
productive than those with more experience.  Simple as that.

Therefore, as far as the term 'lab-rat' is concerned, the only thing that
the older traffic officers did was give the phenomenom a name - basically
those guys who had little or no experience working in actual production
environments but somehow got their CCIE anyway were termed 'lab-rats'.  But
that's just a name.  To quote Shakespeare:  "What's in a name?"  You can
change the term from 'lab-rats' to 'lab-teddy bears' or whatever you want to
call it.  At the end of the day, it doesn't change a thing.  The fact
remains that, regardless of certification or lack thereof, those with less
or no experience will on average have fewer/worse job prospects than those
with more experience, and that's not because the old-timers are saying so
but because the free market for labor says so. It's really as simple and as
complicated as that.
>
> Yes, I love the challenge and that's what I'm doing right now. But I'll
> seriously reconside

Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread nrf
> Linux is very difficult to learn really well.  True, CCIE lab equipment is
> expensive, but I think it may take less time for some people to become a
> CCIE than to get the kind of facility with Linux that the Linux-guru jobs
> require.

I think a far bigger problem with choosing Linux as a financially stable
career is something you just hit on the head right there - barriers to
entry.  Financially speaking, there are none. Anybody can just piece
together a couple of old PC's and fire up Linux and start learning.  And
right now, there are literally tens of thousands of high school and college
kids playing with Linux - and, I don't want to sound morbid, but they're
going to be your job competition in a few years.  Do you really have much to
work with if you know Linux, but so does every college student graduating
with a CS degree in the future (and they will)?   Not to mention all those
people in countries like China, India, and Russia who are short on cash but
long on brains and tenacity?

That therefore means that if you want to remain employable in the Linux
space, you will always need to stay ahead of the Jones's, and the Jones's in
this case are obsessed high-school nerds who think it's actually fun to code
for 100 hours a week.  Hey, if you have the brains and the tenacity to keep
pace, then more power to you.  Or, if you happen to like Linux (I gotta
admit, it is pretty cool), then by all means.  But if you're seeing Linux
just as an opportunity to make money, then unless you possess Herculean
fortitude, I think you'll be disappointed.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66732&t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]