CCNP ROUTING [7:33350]

2002-01-26 Thread Seme rollands
Whats the best book for CCNP Routing exam ? RTING 640-503 looking to sit the exam and need a good study guide Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33350&t=33350 -- FAQ, list archives, and subscription info: http:

Recovered Mail From 22 Jan 2002 [7:33349]

2002-01-26 Thread Exchange Administrator
> From: "Darrell Newcomb" X-GroupStudy-Version: 3.1.1a X-GroupStudy: Network Technical To: [EMAIL PROTECTED] Subject: Re: Stupid Question [7:32591] Sender: [EMAIL PROTECTED] Reply-To: "Darrell Newcomb" Precedence: bulk With the key NT cheap shot being: It doesn't matter how coherent the file s

Re: Is CCIEprep on crack or what ? [7:32787]

2002-01-26 Thread [EMAIL PROTECTED] (John Nemeth)
On Jun 14, 2:36pm, "Tom Lisa" wrote: } } I've had that problem with my CCNA students. With a little effort it is } quite easy to } put a DB60 on upside down (even though I labled them "this side up"). The When it is upside down they can't see the "this side up" label, so you need to put a

Re: PIX % DNS Doctoring [7:33331]

2002-01-26 Thread Allen May
Workstations should be in the highest security NIC & therefore should be able to connect to the DNS servers on a DMZ with no doctoring. In some cases people use an alias to translate the internal IP of the DNS server to the external for users inside the firewall trying to reach the DNS server. If

Re: Cisco Works 2000 & Cisco Works for Windows [7:33321]

2002-01-26 Thread Ozzie Sutcliffe
It's on my to do list .. Which has a to do list of it's own.. I will be busy this weekend cabling up my lab and coaxing an old MGS back to life. And getting ready for a 2 week road trip . So maybe during the week if the beer is lousy in a bar I will put together a list of stuff.. So look next fr

Re: PIX % DNS Doctoring [7:33331]

2002-01-26 Thread Godswill HO
Hi, It really depends on what you want to do or implement for the DNS. The DNS guard on PIX is enabled by default and it cannot be disabled not configured. It help to prevent against DoS attacks by tearing down the UDP conduit on the PIX firewall as soon as the DNS response is received not waitin

Re: Cisco Works 2000 & Cisco Works for Windows [7:33321]

2002-01-26 Thread ferg
Oz, Could you elaborate on what packages you are talking about? I would like to try a few to see how they work. I only have a couple of routers to play with learning to use the the different tools helps me learn the technology :^) Thanks, -Joe- ""Ozzie Sutcliffe"" wrote in message [EMAIL P

Re: Routing Problem 2501's and 675 [7:33261]

2002-01-26 Thread Alan McEntee
Gaz, I tried to renumber my subnet to 10.0.1.0, 10.0.2.0 and 10.0.3.0 (mask 255.255.255.0) with those statements below and no luck. I received a suggestion to enable rfc1483 bridging. That did work, but then I lost my internet connection since I am in PPP mode for IP assignment. Any other sugg

Re: about the ping in pix ? [7:33333]

2002-01-26 Thread Godswill HO
No, though the PIX allow traffic from a higher security interface to a lower one, you cannot ping the dmz interface from the inside interface successfully because the echo-reply (response from the dmz interface) will be disallowed from entering the inside interface, so you will end up having time-

RE: Cisco Works 2000 & Cisco Works for Windows [7:33321]

2002-01-26 Thread Ozzie Sutcliffe
Going to get heck for this.. but here goes.. Ciscoworks has some cool features and maybe with a gadzillion routers it would help but if you have say 20 or so routers you do most of the Cisco works stuff with free and share ware. IF you have a CCO account you can get demo of some stuff or you can

RE: Simple routing problem... [7:33262]

2002-01-26 Thread Ozzie Sutcliffe
Nortel products unstable noo heh Kinda funny as shasta is a generic soda pop in the states and does make you burp a lot.. kinda fitting I guess Oz Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=8&t=33262 -- FAQ, list ar

Re: Xmodem fails [7:33289]

2002-01-26 Thread the-other-jason
Its possible on many platforms to tftp download from the rom monitor. If you have physical access and a laptop with ether, you are be back on the air pretty fast. Sounds like you talked with the TAC, and they should have told you if this was an option on your platform, but Jason Michael

RE: Router problem inserting into token ring [7:33304]

2002-01-26 Thread Daniel Cotts
It is possible that the MAUs are defective. Substitution is a good troubleshooting step. Do you know anyone who does have TR working? If so, substitute your MAU for theirs and see if it works for them. Try their MAU with your routers. > -Original Message- > From: Joseph Slawinski [mailto:

das [7:33334]

2002-01-26 Thread Dante Martins
ada Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=4&t=4 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

about the ping in pix ? [7:33333]

2002-01-26 Thread cage
Is it true :"Traffic is ALWAYS allowed between from a higher security interface to a lower security interface without doing anything special?" If it is true,can I ping from the inside or dmz to outside without the configuring of the access-list icmp any any? Message Posted at: http://www.group

PIX % DNS Doctoring [7:33331]

2002-01-26 Thread Dante Martins
Somebody knows how to do DNS doctoring on PIX I have the DNS on DMZ with static and the clients workstations are on inside interface. Dante This email has been scanned for all viruses by the MessageLabs service. Messa

Re: Router problem inserting into token ring [7:33304]

2002-01-26 Thread Ken Diliberto
Are you running 4Mb or 16? Make sure all speeds are all the same. Are you plugging the routers into Ring-In or Ring-Out? (That's a no-no) You say the lights light up every 15 seconds. Does this mean they are only on for a few seconds? >>> "Joseph Slawinski" 01/26/02 02:26PM >>> I am having a

Re: Limit access to serial link to four users [7:33306]

2002-01-26 Thread Gaz
I must admit I've not even touched on streaming media, H323, but apparently it's just RealPlayer 8.5 anyway. Your suggestions have led me to RSVP at the moment, so I have some reading to do. Thanks for idea's. Feel free to keep em coming. I'm off to get some reading done. Cheers, Gaz ""Steven A

Re: Router problem inserting into token ring [7:33304]

2002-01-26 Thread ocsiC
Try the troubleshooting techniques from Cisco -> http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/index.htm select Token-Ring and follow the instructions! If that doesn't give you any luck then turn on debug and check the status of the interface... Also if you have CCO then dump the Tec

Re: Router problem inserting into token ring [7:33304]

2002-01-26 Thread Joseph Slawinski
The MAU's speed cannot be changed, so I am guessing this is controlled between the token ring cards and the router, (they have to negotiate together). The 15 second blinking of the port light on the MAU is only when one PC is attached. I used this as an indicator to prove that the ports were wor

Re: Cisco PIX firewall book [7:33216]

2002-01-26 Thread ipguru1
book seems to be pretty decent, but I have to admit, Ali is right. The manual that comes with a 515 is pretty good at getting right into what you need. Not very hard to read and has good examples. The Chapman book is a lot like the manual. bk sam sneed wrote: > Has anyone read the Cisco Secu

Re: Router problem inserting into token ring [7:33304]

2002-01-26 Thread Mike Mandulak
That would be my first guess, you can shut down a ring by mixing speeds on a MAU. Can 2 PC's see each other? On the rings that I've worked on, once a PC entered the ring the light stays on so I would question the 15 second blink. Also check the duplex settings. (sorry couldn't resist) - Ori

Re: Router problem inserting into token ring [7:33304]

2002-01-26 Thread Joseph Slawinski
I have checked the ring speed, its the same on the token ring cards and the router. The hub doesn't have a setting for ring speed though. Author: Charles Manafa (---.blueyonder.co.uk) Date: 01-26-02 17:26 Have you checked the ring speed? CM - Original Message - From: "Joseph Slawi

Cisco Works 2000 & Cisco Works for Windows [7:33321]

2002-01-26 Thread Jonathan Mian
Hi Gang, Is there such a thing as an eval copy...I'd like to know what this thing looks like since I've heard/read so much about. Alos is there an eval copy for Cisco Works for Windows? All the best, Jon Mian Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33321&t=33321 --

Re: Router problem inserting into token ring [7:33304]

2002-01-26 Thread Jonathan Mian
Is the ring completed on the MAU, IE do you have a patch lead in the RI & RO to complete the ring? I had a similar issue using a MAU which had a similar description as yours, I sused it finally...used one patch lead in RI & RO...Bingo it all works. As Charlles said make sure there both either 4

Re: Limit access to serial link to four users [7:33306]

2002-01-26 Thread Darrell Newcomb
If all of my responses get through this will be embarassing. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33318&t=33306 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct an

Re: Limit access to serial link to four users [7:33306]

2002-01-26 Thread Steven A. Ridder
Is it H.323 media? Then you could set up a gatekeeper, and limit to 4 connections. Or, if you know the size of the bandwidth stream, you could create a PQ in LLQ that will only let enough bw for 4 users, then the rest wouldn't go through. ""Gaz"" wrote in message [EMAIL PROTECTED]">news:[EMAI

Re: Router problem inserting into token ring [7:33304]

2002-01-26 Thread Charles Manafa
Have you checked the ring speed? CM - Original Message - From: "Joseph Slawinski" To: Sent: Saturday, January 26, 2002 8:26 PM Subject: Router problem inserting into token ring [7:33304] > I am having a problem I know most of you folks could help me with. I have > two 2502 routers an

Re: PIX [7:33281]

2002-01-26 Thread Godswill HO
Have try using nat/pat to allow both subnets in the inside interface access to the internet? eg #nat (inside) 1 0 0 #global(outside) 1 216.72.201.1 Will allow all inside users to initiat an outbound connection to the internet using the public address 216.72.201.1 ie PAT. Regards. Oletu - O

RE: Config Maker Tutorial Error ! [7:33272]

2002-01-26 Thread Ozzie Sutcliffe
Larn to do it the proper way thru TFTP, console and telnet. Solves all the runmaybesomtime errors Oz Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33307&t=33272 -- FAQ, list archives, and subscription info: http://www.groupstudy

Limit access to serial link to four users [7:33306]

2002-01-26 Thread Gaz
Hi all, I'm after some ideas if you'd be so kind :-) A 2Mb link being used mainly for streaming media has about 15 potential users. The task is to limit the number of users at any one time to four, so they have half a Mb each (ish). My initial idea, which I must admit, I dont think is such a go

Re: ACLs, TCP segements, and the "fragments" keyword [7:32922]

2002-01-26 Thread Priscilla Oppenheimer
At 09:39 AM 1/26/02, bergenpeak wrote: >Thanks for the responses so far. One more variation to this question. >What if there was an application on my network that instead of blocking, >I wanted to control the amount of bandwidth it consumed. One might >define an ACL to identify the traffic by L4

Router problem inserting into token ring [7:33304]

2002-01-26 Thread Joseph Slawinski
I am having a problem I know most of you folks could help me with. I have two 2502 routers and two token ring hubs. The hubs are "dumb hubs," they have no network management capabilities. They don't even have external power supplies. The problem is I am able to hook up my computers to the hubs

RE: Custom Upgrade for Cat 5000 Switch [7:33294]

2002-01-26 Thread Jonathan Mian
Found this on Cisco site: http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/c5krn/sw_rns/78_3829.htm Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33303&t=33294 -- FAQ, list archives, and subscription info: http://www.g

RE: Custom Upgrade for Cat 5000 Switch [7:33294]

2002-01-26 Thread Mike Sweeney
I found it :) right on top of the piles Anyways.. the kit I have is for Supervisor cards models 73-1414-01 to 73-1414-08 ONLY. this is custom SIMM that is needed for softwaare upgrades from 2.1 The actual kit number is MEM-C5K-4M-V21 let me know if this is what you need MikeS Message Posted

RE: PIX [7:33281]

2002-01-26 Thread Glenn Johnson
One more time-- //www.cisco.com/warp/public/110/19b.html -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Glenn Johnson Sent: Saturday, January 26, 2002 1:33 PM To: [EMAIL PROTECTED] Subject: RE: PIX [7:33281] -Original Message- From: [EMAIL

RE: Custom Upgrade for Cat 5000 Switch [7:33294]

2002-01-26 Thread Mike Sweeney
Derek- is this the odd memory upgrade for the early Sup1s? if so, I *may* have one around here.. let me know before I tear the office apart :) MikeS Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33300&t=33294 -- FAQ, list arch

Re: pix problem [7:33184]

2002-01-26 Thread Paul Borghese
You guys may want to ask this on the CCIE Security list as well :-) http://www.groupstudy.com/list/security.html Paul ""Gaz"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Can't see anything wrong. Have you done a 'clear xlate', and if necessary a > reboot? > Otherwise can't

help me with the pix problem! [7:33287]

2002-01-26 Thread cage
hi,everybody. My envirment is: the outside interface of pix 525 is connected to the fibre-ethernet transceiver ,no router availble, and the dmz interface of the pix is connected to several severs like www,dns,etc. The inside interface is connected to the lan, no proxy availble. When I finished my

RE: wic 1T [7:32133]

2002-01-26 Thread suaveguru
thank you , looks useful can I still use the other WIC port to run another link if that WIC port is not the one on the NM-2W but the one that comes with the 2600 chasis regards, suaveguru --- "Woods, Randall, SOBUS" wrote: > check it > > The WIC-2T provides two serial ports using the Smart

Re: Which switch for CCNP home lab ? [7:33283]

2002-01-26 Thread Brad Ellis
1912 should be plenty for a CCNP lab. a 2950 would be nice, but I think that would be overkill and there are better uses of your "study funds" then to waste it on that switch. thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] used Cisco gear: www.optsys.net C

RE: PIX [7:33281]

2002-01-26 Thread Glenn Johnson
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of WW Sent: Saturday, January 26, 2002 7:51 AM To: [EMAIL PROTECTED] Subject: PIX [7:33281] our company have two subnet need to go to internet. however, just one FE internal interface is availible, one is dm

RE: Acceptable light levels for fiber.... [7:31971]

2002-01-26 Thread Ken Corkins
Found this link while looking for something else. Hope this helps; http://www.cisco.com/warp/customer/534/21.html Kelsey Miller wrote: > > Hello All, > > I've been searching for the acceptable amount of Db loss for > multimode fiber > run. I've found a variety of information on core diameter,

RE: Token Ring DB9 to RJ45 connector [7:33060]

2002-01-26 Thread Joseph Slawinski
You will need a token ring media filter which has a DB9 connector on one end, and an RJ-45 connector on the other. The media filter basically "filters" out noise on UTP cables. A picture of one is listed in the link below. http://www.pulsewan.com/rad/mf3.htm Hope this helps, Joseph J. Slawinsk

Re: can't establish the ISDN connection [7:33177]

2002-01-26 Thread Ian Henderson
On Fri, 25 Jan 2002, John Neiberger wrote: > Also, what IOS are these routers using? There are some versions of IOS > with a LOT of ISDN-related bugs. I often see routers (generally 801s and 1003s) using basic-net3 that won't bring up layer one or get stuck in TEI_ASSIGNED until a call is place

Custom Upgrade for Cat 5000 Switch [7:33294]

2002-01-26 Thread Derek Gaff
Hi All I am desperately looking for a custom upgrade for the Cat 5000 Switch Supervisor Engine 1. I cannot upgrade the software without it. Can anybody help me out here or even the cheapest place to get on. I am trying to get this for my home lab. The Product number is MSM-C5K-16M-Custom= Thanks

Cat 5K Modules [7:33293]

2002-01-26 Thread NKP
Hi , I wanted to know what would be the ideal modules to purchase for a catalyst 5000 with the software version for the purpose of setting up a CCIE lab for preparation . Would the Supervisor engine 1 do , or would it be advisable to go for SUP 2 . I have heard that this switch is

NSG ISDN Emulator [7:33292]

2002-01-26 Thread Karl Brusen
Does anyone have experience with or information on the NSG ISDN-BRI 2-144EA? I am considering buying one, but I can't find any information on it. It looks a lot like a Merge 2000, so I'm wondering whether it is the same instrument, but branded by NSG. Can't find anything on the NSG Data web sit

RE: Interface Reset? [7:33275]

2002-01-26 Thread Bond, Jeffrey T
It's the number of times an interface has been completely reset. This can happen if packets queued for transmission were not sent within several seconds. On a serial line, this can be caused by a malfunctioning modem that is not supplying the transmit clock signal, or by a cable problem. If the sy

Re: EtherChannel alternatives(??) [7:33187]

2002-01-26 Thread Brant Stevens
Ditto on the no VLAN policy inquiry... But as far as answering your question, I think that you may be SOL as far as aggregation goes... You may not be able to aggregate, but you can use CEF per-packet LB in order to solve the problem of needing more bandwidth... - Original Message - Fro

Xmodem fails [7:33289]

2002-01-26 Thread Michael Smith
After booting, at the console we got the rommon#> 1 prompt, and error messages that the image decompression had failed, invalid format, blah blah blah. Everything had been working fine for a couple of months, then this, just as this beast is to go into production. We tried to install new IOS o

hi all !!! [7:33288]

2002-01-26 Thread Raees Ahmed Shaikh
Dear Group, I passed the CID montser yesterday the very tough exam i had ever seen harder the the Win2k 4 hours accelerated But i managed to pass it. Can anyone guide me what are the exams needed for CCNP security specialization, I recently installed a firewall and also vpn through that firewall

Re: ACLs, TCP segements, and the "fragments" keyword [7:32922]

2002-01-26 Thread bergenpeak
Thanks for the responses so far. One more variation to this question. What if there was an application on my network that instead of blocking, I wanted to control the amount of bandwidth it consumed. One might define an ACL to identify the traffic by L4 port and map this traffic to a rate-limiti

Re: Interface Reset? [7:33275]

2002-01-26 Thread Rich Russell
According to Laura Chappel's book on troubleshooting, the interface is reset (which is usually token ring) is a physical hardware problem Rich ""norsyam ariffin"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi guys, > > Could somebody explain what is the meaning of interfa

Re: PIX [7:33281]

2002-01-26 Thread Gaz
If your company already has two subnets, what are you using to route between them already? Connect your pix inside interface to one of the subnets directly and route to the other one as you do now. Gaz ""WW"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > our company have two

Which switch for CCNP home lab ? [7:33283]

2002-01-26 Thread Graham Andrew
Hi, Could anyone tell me which I should buy for a CCNP home lab, a Cisco 1912-EN or a 2950 XL EN. Or would you recommend something else ? Thanks, Graham. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33283&t=33283 -- FAQ, li

Re: PIX [7:33281]

2002-01-26 Thread M.C. van den Bovenkamp
WW wrote: > Since one FE interface can't bound two different subnet. Two subnet can't go > to internet at the same time. > > Would anyone know how to solve the problem? PIX != router. Which gives you the answer as well: use something in front of the PIX that is. Regards,

PIX [7:33281]

2002-01-26 Thread WW
our company have two subnet need to go to internet. however, just one FE internal interface is availible, one is dmz and one is for internet. Since one FE interface can't bound two different subnet. Two subnet can't go to internet at the same time. Would anyone know how to solve the problem?

test [7:33280]

2002-01-26 Thread WW
test Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33280&t=33280 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Interface Reset? [7:33275]

2002-01-26 Thread Gaz
Depends. Not normally a good sign, but can be various reasons for them. Number of resets has to be relative to the period. If it's over a long period it's probably nothing. I had a customer recently saying that interface resets were high. Got the show interface and the interface counters had not b

Re: default-metric 64 vs 2.....why?? [7:33231]

2002-01-26 Thread Charles Manafa
Those values came from Caslow. I don't have mine at hand right now, so can't give you the exact page number. I believe it is under the Redistribution section though. I will try and locate my Caslow, and email you the page number. CM - Original Message - From: Kane, Christopher A. To

Re: EtherChannel alternatives(??) [7:33187]

2002-01-26 Thread Darrell Newcomb
One thing to remember if you do the etherchannel for this customer is the src/dst mac pairs and their respective flows may not be diverse enough to offer good load balancing. This is the case for most router to router subnets such as in customer hand-offs like you seem to have. Yes some of the c