Re: different port numbers for reverse telnet operation?

[IC Lee]

When you do a reverse Telnet (from your router to the modem), you need to
pur Telnet host port in the Ecex command. If the modem is line 4, you need
to put 2004 (2000+4(line no) in the port no. the command line should thus
look like Telnet 192.168.3.115 2004



""Yee, Jason"" <[EMAIL PROTECTED]> wrote in message
859B90209E2FD311BE5600902751445D2E7E0C@LYNX">news:859B90209E2FD311BE5600902751445D2E7E0C@LYNX...
> hi all,
>
> Got a question on Reverse Telnet :) . It goes this way
>
> Services Provided Base TCP Port for Individual lines Base
> TCP Port for Rotary Groups
>
>
> Telnet Protocol 2000 3000
>
> Raw TCP protocol
> (no Telnet) 4000 5000
>
> Telnet Protocol
> binary mode 6000 7000
>
> Xremote Protocol 9000
> 1
>
>
> My question is what is the significance of this table when one do reverse
> telnet?
>
> Jason
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Hard Scenario in 3rd world

[Leonard Ong]

Title: RE: BCSN



Hello 
All,
 
I would like to ask for 
the following Scenario.
Our country has depleted 
its ISDN Supply and we have to go either leased line or analog phone to have 
interconnection to ISP.
 
We 
have a leased line ( frame-relay ) to our ISP, however we would like to have a 
backup procedure when this link goes down, we would like to have like DDR but 
using analog modem ( say aux port ??? ) to dial up to another ISP using regular 
dial up account.
 
1) 
Will only Aux will achieve this or other alternative ?
2) how 
to make sure the routing static entry automatically change when it detects 
primary connection goes down, adn move the default gateway to the dial up 
interface.
3) 
Making it harder the dial up account will assign dynamic IP.
 
So 
basically it's
 
Switch 
 Router  - leased line to ISP's router
  

 
Thanks
 

HDLC, SDLC...

[perez claude-vincent]

Dear all,

I am a little bit confused about the difference of
framing between hdlc, sdlc, lapb, lapd, llc2.

Can someone help me?

Thank you, cvp.



__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

4000 flash erased, help!

[Jim Bond]

Hello,

I accidentally erased my 4000 router flash and can't
boot up. It didn't recognize my ethernet port so won't
boot from net.

How do I recover the IOS?

Thanks in advance.


Jim


__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BCSN

[Raees Ahmed Shaikh]

Title: RE: BCSN





I would go are B theoritically.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 11:52 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: BCSN



My mistake, sorry.


-Original Message-
From: Donald B Johnson Jr [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 6:37 PM
To: Patrick Bass; [EMAIL PROTECTED]
Subject: Re: BCSN
Importance: Low



Na vlans have nothing to do with the transport layer.
Does it?
Duck
- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, September 05, 2000 1:26 PM
Subject: RE: BCSN



> A
>
> -Original Message-
> From: Donald B Johnson Jr [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 05, 2000 5:53 PM
> To: [EMAIL PROTECTED]
> Subject: BCSN
> Importance: Low
>
>
> What would be the right answer to this question.
> I got this off the cisco site and I answered c but they marked it rong. I
> think this is a mistake.
> Thanks
> Duck
> VLANs have been designed to _.
>
>   A. address forwarding decisions based on transport layer information and
> spanning tree
> scalability
>   B. maximize the amount of traffic switched at Layer 3 and minimize the
> amount of traffic switched at Layer 2
>   C. address the scalability issues of a flat network topology and the
> addition of network
> management through Layer 3 routing protocols
>   D. address redundant access to the workgroup and migration of servers to
> server farms for increased security and management of data resources
>   E. address segmenting broadcast domains while still providing
network-wide
> shared services and allowing users to use hyperlinks to hop transparently
> between servers across enterprise networks
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

I want download cisco IOS,who can help me?

[liu]

HI
  I want to know who can give me free cco account,so I can down load some
IOS to update my router.please!
   thank you very much
  [EMAIL PROTECTED]



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

I want download cisco IOS,who can help me?

[liu]

HI
  I want to know who can give me free cco account,so I can down load some
IOS to update my router.please!
   thank you very much
  [EMAIL PROTECTED]





___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Catalyst 2800 password recovery

[Clay Stuckey]

I have been fighting this cursed switch. I finally found the instructions at

http://www.cisco.com/warp/public/474/pswdrec_2800.html


However, it asks which firmware version I have. I don't know and I don't see
it when it boots. all I get is that it is the 2800 mgmt consile copyright
cisco 1993-1996 and "enter password". The instructions ask for the MAC
address which is supposed to be on the PROM chip I see 2 chips that look
like that bur they only have 924 E ODD 7657 and 925E-GJ EVEN. Those dont
look like any MAC addy I have ever seen. I must not be looking at the
correct chip. If that is not enough of a challenge, I am told that I need to
be a registered CCO user to get the password recovery utility. I cant see
how to become one outside of becomming a cisco employee!! Any ideas???


clay




--
Clay Stuckey - MCSE  | My Resume: http://24.9.74.46/clayres.doc
1237 Llewellyn Road  | [EMAIL PROTECTED]
Mt. Pleasant, SC 29464   | Phone (843) 224-9141

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

different port numbers for reverse telnet operation?

[Yee, Jason]

hi all,

Got a question on Reverse Telnet :) . It goes this way 

Services Provided   Base TCP Port for Individual lines  Base
TCP Port for Rotary Groups


Telnet Protocol 20003000

Raw TCP protocol
(no Telnet) 40005000

Telnet Protocol
binary mode 60007000

Xremote Protocol9000
1


My question is what is the significance of this table when one do reverse
telnet?

Jason

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Exam order & book for BCMSN

[Dost]

Hello everyone:

I am CCNA and pursuing CCNP and wondering about
exam orders for CCNP and good book for BCMSN.
Any recommendations about exam order I should be writing for CCNP ?
Would any one recommend good book for BCMSN exam ?
There are quite few books including one from Cisco Press.
Any help would be appreciated.

Thank you.

Dost

MCSE, CCNA


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BGP4 implementation

[Abdul_Mateen]

Hi Elmer !

Just u need to configure the community filtering at RouterA as

RouterA # neighbourremote-as xxx
RouterA # neighbour   send-community
RouterA # neighbour   route-map abcd out

route-map abcd 100
 match ip 
 set community no-export


These set of commands will tell the RTB not to export the routes learned frm ur
AS to its other external peers. I hope this will cmet ur configuration. Pls
update me if u find better alternate solution.

Regrds




"Deloso, Elmer G." <[EMAIL PROTECTED]> on 09/05/2000 06:45:08 PM

Please respond to "Deloso, Elmer  G." <[EMAIL PROTECTED]>

To:   "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
cc:(bcc: Abdul Mateen/Satyam)

Subject:  BGP4 implementation




Hi, group.
I need some help on filtering BGP4. The scenario is this: my routerA is set
up
with a T1 to routerB via static classB address. However, RouterB is also
connected to other clouds running BGP4. I do want users in RouterB cloud to
get to my network, but I don't want the other clouds that connect to RouterB
to get into my network. The simple questions are: is it just a matter of
RouterA
using ACL to allow only RouterB? Is it telling the NetAdmin of RouterB to
modify his route-redistribution config so no routes outside of RouterB's
cloud
gets sent to my RouterA? Are there any other issues or configurations I'm
better off implementing? Thanks as always to all kind responses.

Elmer


Title: BGP4 implementation





Hi, group.
I need some help on filtering BGP4. The scenario is this: my routerA is set up
with a T1 to routerB via static classB address. However, RouterB is also connected to other clouds running BGP4. I do want users in RouterB cloud to get to my network, but I don't want the other clouds that connect to RouterB to get into my network. The simple questions are: is it just a matter of RouterA

using ACL to allow only RouterB? Is it telling the NetAdmin of RouterB to modify his route-redistribution config so no routes outside of RouterB's cloud

gets sent to my RouterA? Are there any other issues or configurations I'm better off implementing? Thanks as always to all kind responses.

Elmer

Help! setting up new 7513 Configuration driving me bananas!

[rtc9]

  Does anyone know an easy way to get a 7513 going out of the box? Like as
ez as setting up a 2501 and 2621 and 3102?
   The 7513 master slave RSP is one stumbling block; the other is the
bootdlr commands.
The other is the router's present initial attempt to boot from the
network.cfg, cisconet.cfg, a.cfg file sequentially. Whatever happened to an
easy confreg 0x102 method? I accidentally set confreg to --boy was that
a mistake! I had to swap the master and slave RSP boards to get out of that
mess.
   How do I set confreg so that it stops trying to boot from network.cfg,
cisconet.cfg, a.cfg file sequentially? Why cant I set it to initiate a
straightforward "Do you want to enter initial configuration dialogue" like
all the other routers mentioned above?
  Please help

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: best practice

[Buddy Venne]

JMcL -
I can think of a few that are standard here. These may be more basic than
you are asking for, but it's a start:

service timestamps debug datetime localtime show-timezone // who needs
milliseconds anyway??

service password-encryption
logging buffered 4096 debugging // keep the log locally
ip subnet-zero // a default I think
clock timezone PST -8 // ymmv
clock summer-time PDT recurring // ymmv

On each interface:
  no ip directed-broadcast

On a Frame Relay interface, I put the port speed as the bandwidth, and the
sub-interfaces get their respective PVC CIR as the bandwidth. eigrp
calculations use the subs, and the other is there for documentation only.
(Although I think Concord uses it for graphs.)

In the router eigrp section
  eigrp log-neighbor-changes

ip classless // defaults
ip http server // defaults

logging trap debugging // lots of detail
logging source-interface Loopback0 // all log messages sourced from lo0

logging 10.2.1.20 // our syslog server
snmp-server chassis-id JAB0332A3Q5  // so I have the serial number
documented

banner exec ^C// so I "remember" the model & version as I log in

Model 2610, Version 12.0(3c)
^C

ntp server 10.252.1.1 prefer  // centralized time server

I hope this is a start. I welcome any feedback. bv

Buddy Venne
WAN/LAN Specialist
Onyx Acceptance
(949) 465-3775


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Monday, September 04, 2000 11:01 PM
To: [EMAIL PROTECTED]
Subject: best practice




This question is sort of off topic (and very broad) but it could start up
all
sorts of interesting on-topic threads so I'll ask it anyway.  And anyway,
groupstudy's quiet - does the US have a holiday yesterday or something
(timezones do funny things to sentences :-)?

I'm doing a clean up and general revision of some of our router configs -
removing stuff that is no longer needed, changing parameters that are no
longer
appropriate, etc etc.

What commands/configurations are viewed as current general 'best practice'?
I'm
thinking of things like 'no ip directed-broadcast', 'ip classless' and 'no
service blah blah', that have become defaults in later IOS versions, and
also
more specific stuff like when to use which form of route caching, or
guidelines
from presentations/remote corners of CCO (e.g. I've got some configuration
guidelines for configuring frame relay traffic shaping which come from a
Networker's presentation - I've posted them before but let me know if anyone
wants them posted again).

I know the ultimate answer will be 'it depends' (after all, if there was a
single 'best way' the parameters wouldn't have to be user-configurable) -
I'm
more looking for things to consider.

To restrict it a bit, some of the things I am running on the routers
include...
IOS 11.2
frame relay (using sub-interfaces and frame relay traffic shaping)
ISDN (natively and using an external TA)
IPX (with IPX RIP)
IP (with OSPF and statics)
prioritisation
access lists for filtering and prioritisation
SNMP/RMON
NTP
HSRP

Thanks,
JMcL


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

7513 into worthless pile of silicon? Help on resetting slave Confreg

[rtc9]

  I accidentally set confreg on the Master RSP board to --boy was that a
mistake! I had to swap the master and slave RSP boards to get out of that
mess.
  Now that I have a normal master again, I'm afraid to turn the 7513 into a
pile of worthless metal and silicon before I tinker with  the new master
Confreg before I set the slave back to 0x102 vice 1-1-1-1. PLEASE HELP

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

anyone want to swap lab dates

[greg]

I have a sept 23 date and need more time 
anyone with a date after that and would like to swap call 
me at 
 
646 242 8178
 
i would like a few more weeks 
 
remember you have to wait 30 days
 
call anytime
 
 

RE: Does it have to be 255?

[Kevin Welch]

Not to mention your RFC1918 Address ranges.

-- Kevin Welch

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> ElephantChild
> Sent: Tuesday, September 05, 2000 5:59 PM
> To: Cthulu, CCIE Candidate
> Cc: [EMAIL PROTECTED]
> Subject: Re: Does it have to be 255?
>
>
> On Tue, 5 Sep 2000, Cthulu, CCIE Candidate wrote:
>
> > why shouldn't I do this (see below):   Granted, classful
> routing protocols
> > such as RIP V1 would probably sicken and be unable to handle
> something like
> > this, but what of EIGRP and OSPF?  IS-IS?  Something like this
> would be good
> > for aggregation purposes (BGP)??
> >
> > Technically, doing the straight math, we have two subnets
> containing all the
> > host addresses in the free world!!!  Wowza!  ("Bob, we just
> lost Wichita!")
> >
> > 0.0.0.0 to 127.255.255.255 (subnet number and its associated broadcast
> > address, first host address would be 0.0.0.1)
> > 128.0.0.0 to 255.255.255.255 (subnet number and its associated broadcast
> > address, first host address would be 128.0.0.1)
>
> 128.0.0.0/1 includes the multicast address range (224.0.0.0/4) aka
> "class D" and the reserved address range (240.0.0.0/16) aka "class E"
> (IIRC). This is a Bad Thing(tm).
>
> --
> Bungee jumping and skydiving are for wimps. If you want to experience
> true gut-wrenching terror, have children. --Dusty Rhoades.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: what is dark fiber?

[Choi, Howard CW]

Hello,

Dark fibre simply means unused fibre, or "a piece of unconnected fibre". If
you connect OC-3c interfaces to both ends of a dark fibre, then the fibre
becomes an OC-3c link. If you connect both ends of the dark fibre to gigabit
ethernet interfaces, then that becomes a GE link. Got it ?

Howard
 --
From: Yee, Jason
To: 'bahadir korkmaz'; '[EMAIL PROTECTED]'
Subject: RE: what is dark fiber?
Date: Wednesday, September 06, 2000 10:27AM

I think dark fibre means a OC3 or OC12 link

Jason

 -Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
bahadir korkmaz
Sent: Wednesday, September 06, 2000 12:04 AM
To: [EMAIL PROTECTED]
Subject: what is dark fiber?


hi.
what is dark fiber?
i found some sites that says dark fiber means unused fiber.
is it so?
i think dark fiber must be different then unused fiber.
i mean for example. 10gigabit ethernet runs on dark fiber.
dark must be something related to bandwidth or wavelength.

if someone knows dark fiber definition i ll be happy.
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

catOS image differences...

[Kevin Welch]

Could someone please 
help me understand the difference between catOS images and catOS images with a 
CSX in the description.
 
-- 
Thanks

RE: Routing 2.0 passed!!!

[Jay Hennigan]

On Tue, 5 Sep 2000, Yee, Jason wrote:

> thank you, do you mind if I send an invitation to you to join my e-circle on
> cisco certification?

There exists this list, do we need another?

-- 
Jay Hennigan  -  Network Administration  -  [EMAIL PROTECTED] 
NetLojix Communications, Inc.  NASDAQ: NETX  -  http://www.netlojix.com/
WestNet:  Connecting you to the planet.  805 884-6323 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: what is dark fiber?

[Yee, Jason]

I think dark fibre means a OC3 or OC12 link

Jason

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
bahadir korkmaz
Sent: Wednesday, September 06, 2000 12:04 AM
To: [EMAIL PROTECTED]
Subject: what is dark fiber?


hi.
what is dark fiber?
i found some sites that says dark fiber means unused fiber.
is it so?
i think dark fiber must be different then unused fiber.
i mean for example. 10gigabit ethernet runs on dark fiber.
dark must be something related to bandwidth or wavelength.

if someone knows dark fiber definition i ll be happy.
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Etherchannel on a XL series.

[Kevin Welch]

I also 
found the link for the LAN Switching Command Reference, which was what I 
wanted... I will post it just in case someone else is interested.  I have 
to say that navigating CCO is an art form in its own right.
 
http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35sa6/cmdref/macrcli.htm#xtocid2498845
 
-- 
Kevin

  -Original Message-From: Kevin Welch 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 2000 
  7:21 PMTo: [EMAIL PROTECTED]Subject: RE: Etherchannel 
  on a XL series.
  I 
  answered my own question I think:
  http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35xp/scg/kiconfig.htm#xtocid109327
   
  
-Original Message-From: Kevin Welch 
[mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 
2000 7:01 PMTo: [EMAIL PROTECTED]Subject: 
Etherchannel on a XL series.
I cant seem to 
find documentation on configuring a XL series witch for etherchannel.  
Could someone please direct me to such information. or sample configs I 
would appreciate it.
 
Thanks
 
-- Kevin 
Welch

Re: IP NAT

[E A Moran]

Title: RE: Load balancing two T1 of two ISP



NAT is a one-way procedure by default. You 
define Inside and Outside Interfaces. You define which way NAT runs. Check 
out the NAT commands off of Cisco's website.
 
-- E A MoranNetwork 
EngineerCNE,MCSE,CCNA,CCDATeleCommunication Systems, Incwww.telecomsys.com

  "Jin Tam" <[EMAIL PROTECTED]> wrote in 
  message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  
  I have a server with an internal IP 
  address of 1.1.1.1 and I have 2 external addresses 2.2.2.1 and 
  2.2.2.2.
  How can I translate incoming destination 
  addresses 2.2.2.1 and 2.2.2.2 to 1.1.1.1 while keeping outgoing packets from 
  1.1.1.1 from being translated.
  Thanks is advance.

RE: calling all telco experts....framed/unframed mode

[Rossetti, Stan]

We have the same setup on one of our E1s (??).  We continue to see CRC
errors, but we can't seem to locate the problem.  Is it clocking?  Is a
problem with the Orion CSU?  We have performed tons of loopbacks and
replaced just above all the equipment but we still see the problems.  Is it
related to a clocking problem??  It is becoming a big pain in the ??##@$@@$
Let me know if you have the same problems or can help me with my problems,
because I am out of ideas.

-Original Message-
From: Bart Kurek [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 1:22 PM
To: Steve DAvies; [EMAIL PROTECTED]
Subject: Re: calling all telco expertsframed/unframed mode


How much bandwidth are you actually looking for? A full E1 of capacity is
going to be fairly expensive going from the US to the UK. How much actual
CIR and burst are you looking to get?

-Bart Kurek
Sales Engineer
Electric Lightwave Inc. (ELIX)
http://www.eli.net
mailto:[EMAIL PROTECTED]


- Original Message -
From: "Steve DAvies" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 05, 2000 10:36 AM
Subject: calling all telco expertsframed/unframed mode


> Hi,
>
> We have a telco in the states who are offering us 2048 (E1) capacity link
by
> muxing 2 T1's, this is being presented to us on V.35 (US end). In the UK
it
> is being presented to us on X.21
>
> They say this is possible, not being big on telco stuff I can do nothing
but
> wait and see.
>
> They say that at the UK end the service is framed and at the US end it is
> unframed, and they are asking us if we can configure our router(s) to
> accomodate this.
>
> After much searching on the Cisco website we can only find info on
> configuring G.703/704 interfaces for framed/unframed mode using timeslot
> command:
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/inter
_c/icserint.htm#14633
>
> So my question is, does anyone know what our telco is upto? Has anyone
heard
> of this? Can we configure either our 7200 or 2600 to accomodate this
> request?
>
> Thanks in advance
>
> Steve
>
> Steve
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Etherchannel on a XL series.

[Kevin Welch]

I 
answered my own question I think:
http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35xp/scg/kiconfig.htm#xtocid109327
 

  -Original Message-From: Kevin Welch 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 2000 
  7:01 PMTo: [EMAIL PROTECTED]Subject: Etherchannel on 
  a XL series.
  I cant seem to find 
  documentation on configuring a XL series witch for etherchannel.  Could 
  someone please direct me to such information. or sample configs I would 
  appreciate it.
   
  Thanks
   
  -- Kevin 
  Welch

Re: ATM - LANE - LES SERVER

[Cthulu, CCIE Candidate]

The Charlie Answer:

LEC:  edge device such as a router with ATM interface.
LES:  registers clients and keeps a database of clients who have registered.
1 per ELAN.
BUS:  handles broadcasts, multicasts and "unknown" casts!!!   1 per ELAN.
LECS:  tells LEC what LES to use.1 per administrative domain (analogous
to an AS).



More info than you need:
http://www.cisco.com/univercd/cc/td/doc/cisintwk/idg4/nd2008.htm#xtocid29822
6


Good LANE presentation here (my CATM instructor who is a member of ATM forum
created them):

http://www.net2245.com/


HTH,

Charles



"Nadeem Khawaja" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Could any body tell me what are the roles of LES Server in LANE
>
> Thanks
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: access list is not working! why?

[Bradley J. Wilson]

That would block all HTTP traffic, which would probably not be desireable.

"If it doesn't fit, don't force it, just get a bigger hammer."  - Wally
Wilson

Sincerely,

Bradley J. Wilson
CCNA, CCDA, MCSE, CCSE, CNX-A, NNCSS, MCT, CTT


- Original Message -
From: Leonardo Rocha
To: beth shriver ; [EMAIL PROTECTED]
Sent: Tuesday, September 05, 2000 9:55 PM
Subject: RES: access list is not working! why?


dear,

do not forget setting the port 80 to deny www access ok.

best regards,

-leonardo


-Mensagem original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Em nome de beth
shriver
Enviada em: terça-feira, 5 de setembro de 2000 17:16
Para: [EMAIL PROTECTED]
Assunto: access list is not working! why?


here is a VERY simple access list i have put on a
router that is providing our internet connection to
prevent connections to www.radiowave.com and
www.entrypoint.com(used to be pointcast):

access-list 100 deny   ip any host 206.64.127.11 log
access-list 100 deny   ip any host 64.37.194.196 log
access-list 100 permit ip any any

then on every interface i have put:
ip access-group 100 in
ip access-group 100 out

yet this is not preventing the connections. can
someone tell me why? the router this is on is the only
link we have to the internet. this is very puzzling to
me.
thanks
Beth


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Etherchannel on a XL series.

[Kevin Welch]

I cant seem to find 
documentation on configuring a XL series witch for etherchannel.  Could 
someone please direct me to such information. or sample configs I would 
appreciate it.
 
Thanks
 
-- Kevin 
Welch

RES: access list is not working! why?

[Leonardo Rocha]

dear,

do not forget setting the port 80 to deny www access ok.

best regards,

-leonardo


-Mensagem original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Em nome de beth
shriver
Enviada em: terça-feira, 5 de setembro de 2000 17:16
Para: [EMAIL PROTECTED]
Assunto: access list is not working! why?


here is a VERY simple access list i have put on a
router that is providing our internet connection to
prevent connections to www.radiowave.com and
www.entrypoint.com(used to be pointcast):

access-list 100 deny   ip any host 206.64.127.11 log
access-list 100 deny   ip any host 64.37.194.196 log
access-list 100 permit ip any any

then on every interface i have put:
ip access-group 100 in
ip access-group 100 out

yet this is not preventing the connections. can
someone tell me why? the router this is on is the only
link we have to the internet. this is very puzzling to
me.
thanks
Beth


__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Anyone achieve their CCIE through self study not from work!

[William E Gragido]

Yes, if you have the appropraite gear or access and enough dinero for lab
time.

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Wind
> Sent: Tuesday, September 05, 2000 7:42 PM
> To: [EMAIL PROTECTED]
> Subject: Anyone achieve their CCIE through self study not from work!
>
>
> Hiya;
>
> Now I finished my CCNP.   I should go for the CCIE,
> otherwise my
> ccnp status is just a paperwork.
> I just wondering does CCIE can be earned through self study, not from
> working with system integrator?
>
> Thanks
> Vincent
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Static Route Question

[Priscilla Oppenheimer]

Are they using a new IP address for the customer's Web site and e-mail 
server? If they are using the old IP addresses and they started with 
204.90.95.0, they can't get there now since you removed the static route to 
that destination. It makes sense.

This would be like removing the sidewalk to your house and then complaining 
that you can't get mail. &;-)

Also keep in mind that Web servers and e-mail servers are actually accessed 
using Domain Name System names, which would have to be changed to map to 
the new IP addresses from the customer's new provider. DNS changes can take 
a long time to propagate around the Internet. The old information can get 
cached in a variety of places, including places that you have no control over.

Priscilla

At 02:15 PM 9/5/00, Nadine Langlois wrote:
>No.  The ISP is providing the T1 service.  The customer went with
>another T1 provider, therefore the ISP wanted the static route for the
>customer removed from their router.  But once this was done, they could
>not e-mail that customer or view their web site.  The actual static
>route was:
>
>204.90.95.0 255.255.255.0 157.130.119.113
>
>The 204.90.95.0 address was the former customer's IP.  The
>157.130.119.113 is the IP of the ISP's backbone provider.
>
>Nadine
>
>"Greene, Patrick" wrote:
>
> >
> >
> > We are assuming the T1 is no longer there!?
> >
> > -Original Message-
> > From: Nadine Langlois [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, September 05, 2000 2:34 PM
> > To: [EMAIL PROTECTED]
> > Subject: Static Route Question
> >
> > To the Group,
> >  I currently have a situation where I need some advice or some
> > suggestions for where to look for information.  I have a client who is
> >
> > an ISP.  I was called by a contact there and told to remove a static
> > route - it belonged to a customer who was using their T1 service but
> > had
> > changed providers.  So I removed the route.  For the record, this is a
> >
> > Cisco 2511 running IOS 11.1 over BGP.  The client then called back and
> >
> > said that they could now not access the customer's web site or send
> > them
> > e-mail.  I added the route back, but I can't figure out why removing
> > the
> > static route caused them to lose these capabilities.  Surely you don't
> >
> > need a static route to every web site's IP address to access it or to
> > send out e-mail.  I searched around on the web, CCO - looked through
> > my
> > ACRC book and other routing books and didn't find an answer.  What am
> > I
> > missing here?
> >
> > Nadine
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Priscilla Oppenheimer
http://www.priscilla.com

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: difference between cvoice 1 and cvoice 2

[Priscilla Oppenheimer]

I don't know about the exam, but I do know that the CVOICE 2 class has much 
less emphasis on fundamental analog and digital voice theory.

Priscilla


At 03:42 PM 9/4/00, you wrote:
>Hi all,
>
>anybody knows the difference between CVoice 1 and CVoice 2
>in terms of exam objective?
>
>Thanks,
>
>_
>
>Jae-Joon Kang - Senior Network Integration Engineer.
>Ipex Information Technology Group
>
>Ph:(07) 3406 5887   Fax: (07) 3406 5859
>Mobile:   0410 556 107 E-mail: [EMAIL PROTECTED]
>Address: 88 Commercial Rd Newstead, Brisbane,
>   Queensland, Australia
>_
>
>
>
>This e-mail may be confidential. Any opinions expressed herein are the
>opinion of the writer unless there is an express indication to the contrary.
>If you are not the intended recipient of this communication please delete
>and destroy all copies and immediately reply by return e-mail. Ipex ITG
>disclaims all liability and responsibility for any direct or indirect loss
>arising from this e-mail and/or any attachments.
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Priscilla Oppenheimer
http://www.priscilla.com

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Routing 2.0 passed!!!

[Yee, Jason]

thank you, do you mind if I send an invitation to you to join my e-circle on
cisco certification?


thanks

Jason

-Original Message-
From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 9:38 PM
To: Yee, Jason; cisco@groupstudy. com (E-mail)
Subject: RE: Routing 2.0 passed!!!


Congratulations Jason,

My recommendation for the BCRAN can be found here:

http://www.insync.net/~drews/bcran

Ole


 Ole Drews Jensen
 Systems Network Manager
 CCNA, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
 http://www.insync.net/~drews/ccnp




-Original Message-
From: Yee, Jason [mailto:[EMAIL PROTECTED]]
Sent: Sunday, September 03, 2000 8:32 PM
To: cisco@groupstudy. com (E-mail)
Subject: Routing 2.0 passed!!!


hi, guys and gals

Thanks for your support and help !!! I passed my Routing 2.0 exam on
Saturday 2nd September .

Apparently , this is not a very easy exam with nearly 30% on BGP stuff so
know your BGP stuff well , also like what the rest in the list has just
mentioned there are no fill in the blanks cisco ios commands questions but
they do have choices of over 90 to let you choose so know your command well
especially the mode that you are supposed to execute those commands. The
rest of the questions focus on the other routing protocols like EIGRP, OSPF
know them well especially the LSA types in OSPF and the types of areas ,
types of routers etc.

So I am off to take my next paper BCRAN , any tips and pointers for this
exam will be greatly appreciated 

thanks once again

Jason

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: "Multiring All" Confusion

[Kent]

Hi All,

Never worked with Token Ring in the real life, do not
understand why we need to have 'multiring all' there
to route ip, does it just enalbe the all route
explorer of ip traffic? If it does, can I say if I
have two cisco routers hooked up on a hub(or MAU), and
give them ip address in the same lan, say 1.1.1.1/8
and 1.1.1.2/8, I can not ping one from one the other
before put 'multiring ip ' under their interfaces?

Thanks

Kent 

__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Upgrading switch IOS problem.(permission denied)

[Richard]

set BOOT=flash:c2900XL-c3h2s-mz-120_5_2-XU.bin works.


Thanks for trying to help.


""Dale Cantrell"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I'm not any good at this, but you can't get to Diagnostic Console or
> anything like that? What are your LED lights doing? If it won't boot, I
> guess these are non-valid questions.
> Dale
>
> Original Message Follows
> From: "Richard" <[EMAIL PROTECTED]>
> Reply-To: "Richard" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Upgrading switch IOS problem.(permission denied)
> Date: Tue, 5 Sep 2000 15:50:14 -0700
>
> I've decided to bite the bullet and copy the new image to the switch using
> "copy tftp flash:". After the image is copied over the the switch, I set
it
> as a bootable image through this command "boot system
> c2900XL-c3h2s-mz-120_5_2-XU.bin". Upon restarting/reloading the switch,
> below is the error message I am getting. Help help help!
>
>
>
> C2900XL Boot Loader (C2900-HBOOT-M) Version 11.2(8)SA5, RELEASE SOFTWARE
> (fc1)
> Compiled Tue 23-Mar-99 11:54 by rheaton
>   starting...
> Base ethernet MAC Address: 00:d0:58:f0:aa:80
> Xmodem file system is available.
> Initializing Flash...
> flashfs[0]: 177 files, 2 directories
> flashfs[0]: 0 orphaned files, 0 orphaned directories
> flashfs[0]: Total bytes: 3612672
> flashfs[0]: Bytes used: 3174400
> flashfs[0]: Bytes available: 438272
> flashfs[0]: flashfs fsck took 0 seconds.
> ...done Initializing Flash.
> Boot Sector Filesystem (bs:) installed, fsid: 3
> Parameter Block Filesystem (pb:) installed, fsid: 4
> Loading
"c2900XL-c3h2s-mz-120_5_2-XU.bin"...c2900XL-c3h2s-mz-120_5_2-XU.bin:
> per
> mission denied
>
> Error loading "c2900XL-c3h2s-mz-120_5_2-XU.bin"
>
> Interrupt within 5 seconds to abort boot process.
> Boot process failed...
>
> The system is unable to boot automatically.  The BOOT
> environment variable needs to be set to a bootable
> image.
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Upgrading switch IOS problem.(permission denied)

[Dale Cantrell]

I'm not any good at this, but you can't get to Diagnostic Console or 
anything like that? What are your LED lights doing? If it won't boot, I 
guess these are non-valid questions.
Dale

Original Message Follows
From: "Richard" <[EMAIL PROTECTED]>
Reply-To: "Richard" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Upgrading switch IOS problem.(permission denied)
Date: Tue, 5 Sep 2000 15:50:14 -0700

I've decided to bite the bullet and copy the new image to the switch using
"copy tftp flash:". After the image is copied over the the switch, I set it
as a bootable image through this command "boot system
c2900XL-c3h2s-mz-120_5_2-XU.bin". Upon restarting/reloading the switch,
below is the error message I am getting. Help help help!



C2900XL Boot Loader (C2900-HBOOT-M) Version 11.2(8)SA5, RELEASE SOFTWARE
(fc1)
Compiled Tue 23-Mar-99 11:54 by rheaton
  starting...
Base ethernet MAC Address: 00:d0:58:f0:aa:80
Xmodem file system is available.
Initializing Flash...
flashfs[0]: 177 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 3612672
flashfs[0]: Bytes used: 3174400
flashfs[0]: Bytes available: 438272
flashfs[0]: flashfs fsck took 0 seconds.
...done Initializing Flash.
Boot Sector Filesystem (bs:) installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4
Loading "c2900XL-c3h2s-mz-120_5_2-XU.bin"...c2900XL-c3h2s-mz-120_5_2-XU.bin:
per
mission denied

Error loading "c2900XL-c3h2s-mz-120_5_2-XU.bin"

Interrupt within 5 seconds to abort boot process.
Boot process failed...

The system is unable to boot automatically.  The BOOT
environment variable needs to be set to a bootable
image.


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BCSN

[Bradley J. Wilson]

Looks like a detailed breakdown of this one is in order:

VLANs have been designed to _.

  A. address forwarding decisions based on transport layer information and
spanning tree scalability

(VLANs have nothing to do with Layer 4, so we can cross this one out.)

  B. maximize the amount of traffic switched at Layer 3 and minimize the
amount of traffic switched at Layer 2

(Design dictates that we want to take the opposite approach, and besides -
VLANs are Layer 2 services, not Layer 3.)

  C. address the scalability issues of a flat network topology and the
addition of network management through Layer 3 routing protocols

(Well, I like the use of the words "scalability" and "flat," but VLANs have
nothing to do with routing protocols, and routing protocols don't have
anything to do with network management!)

  D. address redundant access to the workgroup and migration of servers to
server farms for increased security and management of data resources

(H...redundancy?  Not sure that's the thrust behind using VLANs...I like
the security idea, but think design again - that's a Distribution Layer
problem, not an Access Layer problem, which is where VLANs live.  Scratch
this one too.)

  E. address segmenting broadcast domains while still providing network-wide
shared services and allowing users to use hyperlinks to hop transparently
between servers across enterprise networks

(Okay, segmenting broadcast domains I love...but *hyperlinks*?  Your signal
is breaking up, Captain...)

Every answer given is a tug-o-war in itself - it gives enough "correctness"
to make you want to pick it, but then throws a bunch of crap at you from
left field.  So, the verdict is: this has to be one of the most
poorly-worded quiz questions *ever* written.  Ignore it. :-)

Sincerely,

Bradley J. Wilson
CCNA, CCDA, MCSE, CCSE, CNX-A, MCT, CTT


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Anyone achieve their CCIE through self study not from work!

[Wind]

Hiya;

Now I finished my CCNP.   I should go for the CCIE, otherwise my
ccnp status is just a paperwork.
I just wondering does CCIE can be earned through self study, not from
working with system integrator?

Thanks
Vincent


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BCSN

[luobin Yang]

I don't see why D is preferable than E

cslx wrote:

> if it is a single choice,it is D,otherwise it is D,E
> "Donald B Johnson Jr" <[EMAIL PROTECTED]> wrote in message
> 02c001c0178c$1643b450$[EMAIL PROTECTED]">news:02c001c0178c$1643b450$[EMAIL PROTECTED]...
> > What would be the right answer to this question.
> > I got this off the cisco site and I answered c but they marked it rong. I
> > think this is a mistake.
> > Thanks
> > Duck
> > VLANs have been designed to _.
> >
> >   A. address forwarding decisions based on transport layer information and
> > spanning tree
> > scalability
> >   B. maximize the amount of traffic switched at Layer 3 and minimize the
> > amount of traffic switched at Layer 2
> >   C. address the scalability issues of a flat network topology and the
> > addition of network
> > management through Layer 3 routing protocols
> >   D. address redundant access to the workgroup and migration of servers to
> > server farms for increased security and management of data resources
> >   E. address segmenting broadcast domains while still providing
> network-wide
> > shared services and allowing users to use hyperlinks to hop transparently
> > between servers across enterprise networks
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Does it have to be 255?

[Adrian Chew]

Stop thinkking subnets, start thinking in CIDR terms.  It should
theoretically be possible to aggregate with up to a /0 (0.0.0.0/0 -
everything!).

However, if we look at usable address space, besides /0, some of the
smallest prefixes are not practical:-

0.0.0.0/1 = 0.0.0.0 - 127.255.255.255 (includes the 0.0.0.0 and 127.0.0.0
address space that is reserved for the all networks and loopback)
0.0.0.0/2 = 0.0.0.0 - 63.255.255.255 (includes the 0.0.0.0)
64.0.0.0/2 = 64.0.0.0 - 127.255.255.255 (includes the 127.0.0.0)

Starting from a /3 you can actually get usable aggredated address space:-

32.0.0.0/3 = 32.0.0.0 - 63.255.255.255

However, I doubt if any single AS has been given more than a Class A...  so
the use of a prefix smaller than /8 is probably rare/unheard of in
practice...  but theoretically should work with any classless IP routing
protocol.

Regards,
Adrian

""Cthulu, CCIE Candidate"" <[EMAIL PROTECTED]> wrote in message
8p3k0e$ik7$[EMAIL PROTECTED]">news:8p3k0e$ik7$[EMAIL PROTECTED]...
> Hi, all,
>
> I wanted to stimulate some discussion on subnetting here.  I was playing
> around with subnetting today (I was not trying to solve any problem in
> particular).  Anyways,  on a router interface, I entered:
>
>
> ip address 192.0.0.1 128.0.0.0
>
>
> The router happily took it.  I could ping the interface...scarey!  I am
well
> aware that in the real world, we start things with a 255 on that first
> octet.  But for discussion purposes...
>
>
> why shouldn't I do this (see below):   Granted, classful routing protocols
> such as RIP V1 would probably sicken and be unable to handle something
like
> this, but what of EIGRP and OSPF?  IS-IS?  Something like this would be
good
> for aggregation purposes (BGP)??
>
>
> Technically, doing the straight math, we have two subnets containing all
the
> host addresses in the free world!!!  Wowza!  ("Bob, we just lost
Wichita!")
>
> 0.0.0.0 to 127.255.255.255 (subnet number and its associated broadcast
> address, first host address would be 0.0.0.1)
> 128.0.0.0 to 255.255.255.255 (subnet number and its associated broadcast
> address, first host address would be 128.0.0.1)
>
>
> Would be interesting to hear some theories and feedback
>
> Flames to:  [EMAIL PROTECTED]
>
>
> Charles
>
>
>
>
>
>
>
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

firewall interface

[Dennis Ighomereho]

I would appreciate it if anyone can help me on this.I have a router which 
its interface is connected to
nokia firewall.Another interface on the firewall is connected to a switch 
which this client machine sits off


router(192.168.2.2)--firewall(192.168.2.1)

firewall 
int(192.168.1.254)---switchmachine(192.168.1.20)

Nat is running on the firewall.The machine has 192.168.1.20 address has an 
internet address on the nat.
The problem is that you cant seem to access this machine from the router.Can 
anyone help out on this.I can ping as far as the 192.168.2.1 from the 
router.

cheers,
Dennis
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BCSN

[cslx]

if it is a single choice,it is D,otherwise it is D,E
"Donald B Johnson Jr" <[EMAIL PROTECTED]> wrote in message
02c001c0178c$1643b450$[EMAIL PROTECTED]">news:02c001c0178c$1643b450$[EMAIL PROTECTED]...
> What would be the right answer to this question.
> I got this off the cisco site and I answered c but they marked it rong. I
> think this is a mistake.
> Thanks
> Duck
> VLANs have been designed to _.
>
>   A. address forwarding decisions based on transport layer information and
> spanning tree
> scalability
>   B. maximize the amount of traffic switched at Layer 3 and minimize the
> amount of traffic switched at Layer 2
>   C. address the scalability issues of a flat network topology and the
> addition of network
> management through Layer 3 routing protocols
>   D. address redundant access to the workgroup and migration of servers to
> server farms for increased security and management of data resources
>   E. address segmenting broadcast domains while still providing
network-wide
> shared services and allowing users to use hyperlinks to hop transparently
> between servers across enterprise networks
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Upgrading switch IOS problem.(permission denied)

[Richard]

I've decided to bite the bullet and copy the new image to the switch using
"copy tftp flash:". After the image is copied over the the switch, I set it
as a bootable image through this command "boot system
c2900XL-c3h2s-mz-120_5_2-XU.bin". Upon restarting/reloading the switch,
below is the error message I am getting. Help help help!



C2900XL Boot Loader (C2900-HBOOT-M) Version 11.2(8)SA5, RELEASE SOFTWARE
(fc1)
Compiled Tue 23-Mar-99 11:54 by rheaton
 starting...
Base ethernet MAC Address: 00:d0:58:f0:aa:80
Xmodem file system is available.
Initializing Flash...
flashfs[0]: 177 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 3612672
flashfs[0]: Bytes used: 3174400
flashfs[0]: Bytes available: 438272
flashfs[0]: flashfs fsck took 0 seconds.
...done Initializing Flash.
Boot Sector Filesystem (bs:) installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4
Loading "c2900XL-c3h2s-mz-120_5_2-XU.bin"...c2900XL-c3h2s-mz-120_5_2-XU.bin:
per
mission denied

Error loading "c2900XL-c3h2s-mz-120_5_2-XU.bin"

Interrupt within 5 seconds to abort boot process.
Boot process failed...

The system is unable to boot automatically.  The BOOT
environment variable needs to be set to a bootable
image.


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: high speed internet access over satellite dish?

[Gressel, Shawn M.]

 
I work for PanAmSat and we are the leading provider of internet access over
satellite.  what exactly are you looking for?
-Original Message-
From: joel.studtmann
To: cisco@groupstudy. com (E-mail)
Sent: 9/5/00 7:01 PM
Subject: Re: high speed internet access over satellite dish?

That depends:  Are you looking at available bandwidth limitations, cost
estimates, or names of carriers that support them?  Are you providing
your
own satellite system?


- Original Message -
From: "Yee, Jason" <[EMAIL PROTECTED]>
To: "cisco@groupstudy. com (E-mail)" <[EMAIL PROTECTED]>
Sent: Tuesday, September 05, 2000 4:36 AM
Subject: high speed internet access over satellite dish?


> hi ,
>
> Anyone got any knowledge on establishing high speed internet access
over
> satellite dish?
>
> thanks b4 hand
>
> Jason
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

router trainer question?

[Kracavetc]

where could i posibly download the router traning software
to get my hands on experience without buing the actual router?
please respond

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Break command under hyperterm

[joel.studtmann]

The "Pause" key, generally located up by the Scroll Lock and Print Screen
keys on American layouts, should also have 'Break' written on it somewhere.

I don't remember if you use the SHIFT or Control key with it, but hit both
of them real fast as the router boots and it will drop you into rommon.

I've done it with Windows 9x and Windows NT, but I vaguely remember a
problem getting it to work under Win2000.

HIH

Joel Studtmann

- Original Message -
From: "Clay Stuckey" <[EMAIL PROTECTED]>
To: "group study" <[EMAIL PROTECTED]>
Sent: Tuesday, September 05, 2000 3:28 PM
Subject: Break command under hyperterm


> What is the proper key stroke combination to send a break command under
> hyperterminal? Or what other terminal emulation program will do it? I have
> net term and procom plus also.
>
>
>
>
>
> --
> Clay Stuckey - MCSE  | My Resume: http://24.9.74.46/clayres.doc
> 1237 Llewellyn Road  | [EMAIL PROTECTED]
> Mt. Pleasant, SC 29464   |
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: high speed internet access over satellite dish?

[joel.studtmann]

That depends:  Are you looking at available bandwidth limitations, cost
estimates, or names of carriers that support them?  Are you providing your
own satellite system?


- Original Message -
From: "Yee, Jason" <[EMAIL PROTECTED]>
To: "cisco@groupstudy. com (E-mail)" <[EMAIL PROTECTED]>
Sent: Tuesday, September 05, 2000 4:36 AM
Subject: high speed internet access over satellite dish?


> hi ,
>
> Anyone got any knowledge on establishing high speed internet access over
> satellite dish?
>
> thanks b4 hand
>
> Jason
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BGP on the Brain - Design Issue

[Phillip Heller]

There are several ways you can affect how traffic enters your autonomous
system.  The most popular is prepending your autonomous system number 1 or
more times on your outbound announcements.  Though, some find that
prepending is not granular enough.

You can go a step further, and prepend outbound only on specific prefixes.
Some ISP's also will allow you to set certain communites on your outbound
announcements and alter how they announce your networks to their peers.
Inquire with you ISP's as to whether they implement any such features.

Some of this is dependent upon the size of your announcements, though.  If
you're announcing a /24, and it can be aggregated into a /8 at your ISP's
borders, it's not likely that your ISP will announce a specific just for
the benefit of your traffic flows.

Internet Routing Architectures is an excellent book by Sam Halabi that you
may wish to reference.  Also of value is BGP4: Inter-Domain Routing in the
Internet by John Stewart III.

Good luck!

--phil
  [EMAIL PROTECTED]

On Tue, 5 Sep 2000, Krake, Kris wrote:

Along the lines of this thread I have something to ponder

Suppose we have the situation as posed below but I need to manipulate how
data comes into my AS not out of it.


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Does it have to be 255?

[David Williams]

And with a 0.0.0.0 network, just how are you going to handle a gateway of
last resort?

""Cthulu, CCIE Candidate"" <[EMAIL PROTECTED]> wrote in message
8p3k0e$ik7$[EMAIL PROTECTED]">news:8p3k0e$ik7$[EMAIL PROTECTED]...
> Hi, all,
>
> I wanted to stimulate some discussion on subnetting here.  I was playing
> around with subnetting today (I was not trying to solve any problem in
> particular).  Anyways,  on a router interface, I entered:
>
>
> ip address 192.0.0.1 128.0.0.0
>
>
> The router happily took it.  I could ping the interface...scarey!  I am
well
> aware that in the real world, we start things with a 255 on that first
> octet.  But for discussion purposes...
>
>
> why shouldn't I do this (see below):   Granted, classful routing protocols
> such as RIP V1 would probably sicken and be unable to handle something
like
> this, but what of EIGRP and OSPF?  IS-IS?  Something like this would be
good
> for aggregation purposes (BGP)??
>
>
> Technically, doing the straight math, we have two subnets containing all
the
> host addresses in the free world!!!  Wowza!  ("Bob, we just lost
Wichita!")
>
> 0.0.0.0 to 127.255.255.255 (subnet number and its associated broadcast
> address, first host address would be 0.0.0.1)
> 128.0.0.0 to 255.255.255.255 (subnet number and its associated broadcast
> address, first host address would be 128.0.0.1)
>
>
> Would be interesting to hear some theories and feedback
>
> Flames to:  [EMAIL PROTECTED]
>
>
> Charles
>
>
>
>
>
>
>
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: what is dark fiber?

[Jaeger, Dennis (CC-Network Dev)]

Exactly.  Dark means that the provider does not see your traffic or manage
the fiber.  Dark fiber is hard to acquire these days for that reason; most
telco's want to manage the fiber that they provide at an additional cost.
If they don't manage it they don't make too much of a profit.  I have a few
strands in my network.  I provide the muxes and light it; the telco just
provides the fiber itself.

Dennis

-Original Message-
From: Nabil Fares [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 1:07 PM
To: 'Darren Johnson'; 'bahadir korkmaz'; [EMAIL PROTECTED]
Subject: RE: what is dark fiber?


When we use this term at my work place, it means we manage the fiber.  Dark
fiber = Customer managed.


Nabil

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Darren Johnson
Sent: Tuesday, September 05, 2000 1:26 PM
To: bahadir korkmaz; [EMAIL PROTECTED]
Subject: RE: what is dark fiber?


Blatantly ripped from Newton Telecom Dictionary:
Dark Fiber Unused fiber through which no light in transmitted or installed
fiber optic cable not carrying a signal. Sometimes dark fiber is sold by a
carrier without the (usually) accompanying transmission service.  It's
"dark" because it's sold without light communication transmission.  The
customer is expected to put his own electronics and signals on the fiber and
make it light.

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> bahadir korkmaz
> Sent: Tuesday, September 05, 2000 11:04 AM
> To: [EMAIL PROTECTED]
> Subject: what is dark fiber?
>
>
> hi.
> what is dark fiber?
> i found some sites that says dark fiber means unused fiber.
> is it so?
> i think dark fiber must be different then unused fiber.
> i mean for example. 10gigabit ethernet runs on dark fiber.
> dark must be something related to bandwidth or wavelength.
>
> if someone knows dark fiber definition i ll be happy.
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

CCIE london study group

[Lauren Child]

> Date: Tue, 5 Sep 2000 13:12:35 +0100
> From: "keith wood" <[EMAIL PROTECTED]>
> Subject: CCIE studygroup in London area...
> 
> Anyone know of a CCIE studygroup in the London (UK) area?  Preferably in
> the
> Reading/Slough vacinity (thats west London).
> 

Could be good if we can get some people together - Im in Watford at the
mo, but we are moving to hammersmith soon.  Anyone else on the list
interested ?

TTFN
Lauren
--
[EMAIL PROTECTED]   Lauren Child, BSc. CCNP-ATM & CCDP Certified
http://www.laurenchild.net/  http://www.routerfaq.net/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Telnet password

[Jay Hennigan]

On Tue, 5 Sep 2000, Dale Holmes wrote:

> Then you are done... Note that you will not be able to determine what the 
> new password is from reading the config... If you want to be able to see the 
> password in the config file in plain text (and I have NO IDEA why you would 
> want this), use the "no service password-encryption" command from global 
> config mode...

Note that this won't work to display a password that has previously been
encrypted.  In other words, if "service password-encryption" was enabled 
when the configuration containing the password was saved, then going back
later and entering "no service password-encryption" won't cause it to 
display.  

See the perl script I posted previously if you really need to do this.

-- 
Jay Hennigan  -  Network Administration  -  [EMAIL PROTECTED] 
NetLojix Communications, Inc.  NASDAQ: NETX  -  http://www.netlojix.com/
WestNet:  Connecting you to the planet.  805 884-6323 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Recertification

[pbass]

After all this I thought I did have Prometric stock already! ;-)

-Original Message-
From: Bradley J. Wilson [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 4:20 PM
To: [EMAIL PROTECTED]
Subject: Re: Recertification
Importance: Low


Anyone else here thinking that buying stock in Prometric would be a really
good idea right about now? :-)


- Original Message -
From: Craig Johnson
To: [EMAIL PROTECTED]
Sent: Tuesday, September 05, 2000 4:42 PM
Subject: Recertification


I just got this from my Cisco Channel Account Manager, thought I'd pass it
along.

http://www.cisco.com/warp/public/146/pressroom/2000/sep00/wwc_090500.htm



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Telnet password

[Jay Hennigan]

On Wed, 6 Sep 2000, Marshal Schoener wrote:

> Thank you :-)
> That is almost exactly what I am seeing.
> Only difference is the password is: 7 a9vyt3...
> 7 is in front...
> So, that means it is encrypted.
> If I want to change this, can I just go in and change it there, or 
> is there something else I have to do first?

You can simply change it

conf t
line vty 0 4
password WORD

if you have service password-encryption enabled, then when you show run it
will be encrypted.  When changing it, don't include the "7" ahead of the 
password, or the router will assume you're entering the encrypted string.  

Likewise, don't use a password that starts with "7" (or "5").

The encryption is rather weak on all but the enable secret, btw.  

--- cut here ---
#!/usr/local/bin/perl -w
# $Id: ios7decrypt.pl,v 1.1 1998/01/11 21:31:12 mesrik Exp $
#
# Credits for orginal code and description [EMAIL PROTECTED],
# SPHiXe, .mudge et al. and for John Bashinski <[EMAIL PROTECTED]>
# for Cisco IOS password encryption facts.
#
# Use for any malice or illegal purposes strictly prohibited!
#
 
@xlat = ( 0x64, 0x73, 0x66, 0x64, 0x3b, 0x6b, 0x66, 0x6f, 0x41,
  0x2c, 0x2e, 0x69, 0x79, 0x65, 0x77, 0x72, 0x6b, 0x6c,
  0x64, 0x4a, 0x4b, 0x44, 0x48, 0x53 , 0x55, 0x42 );

while (<>) {
if (/(password|md5)\s+7\s+([\da-f]+)/io) {
if (!(length($2) & 1)) {
$ep = $2; $dp = "";
($s, $e) = ($2 =~ /^(..)(.+)/o);
for ($i = 0; $i < length($e); $i+=2) {
$dp .= sprintf "%c",hex(substr($e,$i,2))^$xlat[$s++];
}
s/7\s+$ep/$dp/;
}
}
print;
}
# eof
--- cut here ---

If you don't have a perl interpreter, e-mail me the string starting
with "password 7" and I'll let you know the plaintext.

-- 
Jay Hennigan  -  Network Administration  -  [EMAIL PROTECTED] 
NetLojix Communications, Inc.  NASDAQ: NETX  -  http://www.netlojix.com/
WestNet:  Connecting you to the planet.  805 884-6323 


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Fw: All CCNA 2.0 & CCNP 2.o Beta Questions - FREE

[Frank Haun]

Have you lazy bastards tried studying yet?  Why would you need the
questions if you know the answers?
Muhammad wrote:

I am also in need of
a copy of the CCNP questions and material regards,Muhammad 
- Original Message -
From: manoj
kumar
To: JJE
; CiscoKing
; [EMAIL PROTECTED]Sent:
Friday, August 25, 2000 9:52 PMSubject: Re: All CCNA 2.0 & CCNP
2.o Beta Questions - FREE
 
  Hello,
 
 
I would like a copy of CCNP questions and material.
I have finished my CCNA and am preparing for my CCNP.
 
 
I would be greateful to you
 
 
 
 
warm regards
 
 
manoj
 
 
India
 

Do You Yahoo!?
Yahoo! Mail - Free email you can
access from anywhere!

Just testing

[Ed Crowe]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Break command under hyperterm

[Vern Stitt]

I think that this link covers most of the bases.

http://www.cisco.com/warp/public/701/61.html

HTH,
Vern Stitt
ASE, CCA, CCNA, MCSE

""Clay Stuckey"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
What is the proper key stroke combination to send a break command under
hyperterminal? Or what other terminal emulation program will do it? I have
net term and procom plus also.





--
Clay Stuckey - MCSE  | My Resume: http://24.9.74.46/clayres.doc
1237 Llewellyn Road  | [EMAIL PROTECTED]
Mt. Pleasant, SC 29464   |

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Telnet password

[Daniel Cotts]

You can just change the password. Because you have "service
password-encryption" in your config the new password will be encrypted also.
For fun you can do a "no service password-encryption", then change the
password. You will see the new password in plain text in the config. Then,
if you wish, go back to password encryption.

> -Original Message-
> From: Marshal Schoener [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 05, 2000 3:42 PM
> To: 'Dale Holmes'; [EMAIL PROTECTED]; Marshal Schoener;
> [EMAIL PROTECTED]
> Subject: RE: Telnet password
> 
> 
> Thank you :-)
> That is almost exactly what I am seeing.
> Only difference is the password is: 7 a9vyt3...
> 7 is in front...
> So, that means it is encrypted.
> If I want to change this, can I just go in and change it there, or 
> is there something else I have to do first?
> Thanks a million.
> 
> -Original Message-
> From: Dale Holmes [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 05, 2000 1:39 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; 
> [EMAIL PROTECTED]
> Subject: Re: Telnet password
> 
> 
> Eh?
> 
> No, I meant is the "service password-encryption" configured 
> on the router? 
> If so, then the password will not be written in plain text in 
> the router 
> config file... so if you use a command like:
> 
> show running-config
> 
> You might see something like:
> 
> line vty 0 4
> password a9vyt3$l3 7
> login
> 
> In this case, the password is encrypted. The actual password is not 
> "a9vyt3$l3". Typing that string in when prompted for a 
> password will not log
> 
> you into the router. That's what I am saying (and I thought 
> that's what the 
> original poster was seeing).
> 
> What traverses the wire is of course not encrypted, unless 
> you make it so by
> 
> some other means not described here...
> 
> Dale
> [=`)
> 
> >From: "jh" <[EMAIL PROTECTED]>
> >To: "Dale Holmes" <[EMAIL PROTECTED]>, 
> <[EMAIL PROTECTED]>, 
> ><[EMAIL PROTECTED]>
> >Subject: Re: Telnet password
> >Date: Tue, 5 Sep 2000 17:14:28 -0400
> >
> >The telnet session as a whole, password,communication is not 
> encrypted. It
> >is very easily sniffed.
> >
> >  How is goes across the wire and how it is stored are two 
> different items.
> >
> >
> >- Original Message -
> >From: "Dale Holmes" <[EMAIL PROTECTED]>
> >To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> >Sent: Tuesday, September 05, 2000 1:14 PM
> >Subject: Re: Telnet password
> >
> >
> > > Is the password encrypted? If so, the then what you see 
> in the config is
> >the
> > > encrypted password, not the password itself...
> > >
> > > Dale
> > > [=`)
> > >
> > > >From: Marshal Schoener <[EMAIL PROTECTED]>
> > > >Reply-To: Marshal Schoener <[EMAIL PROTECTED]>
> > > >To: [EMAIL PROTECTED]
> > > >Subject: Telnet password
> > > >Date: Wed, 6 Sep 2000 00:06:00 +0800
> > > >
> > > >I'm telnetting into a router using a password that I can't find 
> >anywhere
> > > >:-)
> > > >
> > > >I look at the running-config, and see 'line vty 0 4'
> > > >password (password)...
> > > >login
> > > >
> > > >However, this isn't the password that I use to telnet in, and it 
> >doesn't
> > > >work if
> > > >I try it!!!  Can anyone help me to understand this :-)
> > > >I would like to change the password used to telnet in, 
> but I just can't
> > > >figure
> > > >this out...
> > > >Thanks a million in advance.
> > > >
> > > >
> > > >___
> > > >UPDATED Posting Guidelines: 
> http://www.groupstudy.com/list/guide.html
> > > >FAQ, list 
> archives, and subscription info: http://www.groupstudy.com
> > > >Report misconduct and Nondisclosure violations to 
> [EMAIL PROTECTED]
> > >
> > > 
> >_

> 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Recertification

[Bradley J. Wilson]

Anyone else here thinking that buying stock in Prometric would be a really
good idea right about now? :-)


- Original Message -
From: Craig Johnson
To: [EMAIL PROTECTED]
Sent: Tuesday, September 05, 2000 4:42 PM
Subject: Recertification


I just got this from my Cisco Channel Account Manager, thought I'd pass it
along.

http://www.cisco.com/warp/public/146/pressroom/2000/sep00/wwc_090500.htm



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: ftp out

[Seth Wilson]

Just tried this with my home lab which has a couple of routers and subnets
on it.  I'm not sure if the ftp-data port is necessary.  The list seemed to
do its job though.

Extended IP access list 169
permit tcp any any eq ftp established
permit tcp any any eq ftp-data established
deny tcp any any eq ftp
deny tcp any any eq ftp-data
permit ip any any

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Telnet password

[Dale Holmes]

Login to the router
Enter Priveleged mode
Enter config mode
Enter Line config mode
Change the password

EX:
password:***
Router>enable
password: *
Router#config term
Router(config)#line vty 0 4
Router(config-line)#password whatever
Ctrl-Z
Router#copy runn start

Then you are done... Note that you will not be able to determine what the 
new password is from reading the config... If you want to be able to see the 
password in the config file in plain text (and I have NO IDEA why you would 
want this), use the "no service password-encryption" command from global 
config mode...

Dale
[=`)



>From: Marshal Schoener <[EMAIL PROTECTED]>
>Reply-To: Marshal Schoener <[EMAIL PROTECTED]>
>To: "'Dale Holmes'" <[EMAIL PROTECTED]>, [EMAIL PROTECTED],
>Marshal Schoener <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
>Subject: RE: Telnet password
>Date: Wed, 6 Sep 2000 04:41:32 +0800
>
>Thank you :-)
>That is almost exactly what I am seeing.
>Only difference is the password is: 7 a9vyt3...
>7 is in front...
>So, that means it is encrypted.
>If I want to change this, can I just go in and change it there, or
>is there something else I have to do first?
>Thanks a million.
>
>-Original Message-
>From: Dale Holmes [mailto:[EMAIL PROTECTED]]
>Sent: Tuesday, September 05, 2000 1:39 PM
>To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
>Subject: Re: Telnet password
>
>
>Eh?
>
>No, I meant is the "service password-encryption" configured on the router?
>If so, then the password will not be written in plain text in the router
>config file... so if you use a command like:
>
>show running-config
>
>You might see something like:
>
>line vty 0 4
>password a9vyt3$l3 7
>login
>
>In this case, the password is encrypted. The actual password is not
>"a9vyt3$l3". Typing that string in when prompted for a password will not 
>log
>
>you into the router. That's what I am saying (and I thought that's what the
>original poster was seeing).
>
>What traverses the wire is of course not encrypted, unless you make it so 
>by
>
>some other means not described here...
>
>Dale
>[=`)
>
> >From: "jh" <[EMAIL PROTECTED]>
> >To: "Dale Holmes" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>,
> ><[EMAIL PROTECTED]>
> >Subject: Re: Telnet password
> >Date: Tue, 5 Sep 2000 17:14:28 -0400
> >
> >The telnet session as a whole, password,communication is not encrypted. 
>It
> >is very easily sniffed.
> >
> >  How is goes across the wire and how it is stored are two different 
>items.
> >
> >
> >- Original Message -
> >From: "Dale Holmes" <[EMAIL PROTECTED]>
> >To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> >Sent: Tuesday, September 05, 2000 1:14 PM
> >Subject: Re: Telnet password
> >
> >
> > > Is the password encrypted? If so, the then what you see in the config 
>is
> >the
> > > encrypted password, not the password itself...
> > >
> > > Dale
> > > [=`)
> > >
> > > >From: Marshal Schoener <[EMAIL PROTECTED]>
> > > >Reply-To: Marshal Schoener <[EMAIL PROTECTED]>
> > > >To: [EMAIL PROTECTED]
> > > >Subject: Telnet password
> > > >Date: Wed, 6 Sep 2000 00:06:00 +0800
> > > >
> > > >I'm telnetting into a router using a password that I can't find
> >anywhere
> > > >:-)
> > > >
> > > >I look at the running-config, and see 'line vty 0 4'
> > > >password (password)...
> > > >login
> > > >
> > > >However, this isn't the password that I use to telnet in, and it
> >doesn't
> > > >work if
> > > >I try it!!!  Can anyone help me to understand this :-)
> > > >I would like to change the password used to telnet in, but I just 
>can't
> > > >figure
> > > >this out...
> > > >Thanks a million in advance.
> > > >
> > > >
> > > >___
> > > >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > > >FAQ, list archives, and subscription info: http://www.groupstudy.com
> > > >Report misconduct and Nondisclosure violations to 
>[EMAIL PROTECTED]
> > >
> > >
> >_
> > > Get Your Private, Free E-mail from MSN Hotmail at
> >http://www.hotmail.com.
> > >
> > > Share information about yourself, create your own public profile at
> > > http://profiles.msn.com.
> > >
> > > ___
> > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
>
>_
>Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
>Share information about yourself, create your own public profile at
>http://profiles.msn.com.
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

__

Like swap a CCIE R/S Lab Date

[Bill O'Brien]

Greetings,

Just finished first try on the CCIE R/S lab and have
rescheduled with a date of 10 Jan. 2001. But I'd like
to take asap, I'm able to take the test again after 1
Oct 99.

So if you have or know of anyone interesting in
swapping lab dates please let me know. I have one for
10 January 2001 at RTP, but would be willing to take
any location. San Jose, Halifax or RTP after 1 Oct 99.

Cisco is willing to swap dates, and the earliest
available dates any location is now mid to late
January 01.

Thanks

Bill


__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

FW: Cisco Announces Recertification Policy for Career-Certified Associates and Professionals

[Montgomery, Robert WARCOM Contractor]

What's new here?

-Original Message-
From: Cisco Public Relations [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, September 05, 2000 1:54 PM
To: [EMAIL PROTECTED]
Subject: Cisco Announces Recertification Policy for Career-Certified
Associates and Professionals


Unsubscribe instructions are at the bottom of this press release.


Press Contact:  Investor Relations Contact:
Lang TibbilsBlair Christie
Cisco Systems   Cisco Systems
(408) 853-9013  (408) 525-4856
[EMAIL PROTECTED]  [EMAIL PROTECTED]


Cisco Announces Recertification Policy for Career-Certified Associates and 
Professionals

Policy Highlights Commitment to Address Industry-Wide Need for more 
Qualified Network Technicians 


SAN JOSE, Calif., September 5, 2000 - Cisco Systems, the worldwide leader 
in networking for the Internet, today announced the recertification policy 
for its career-certified associates and professionals.  The policy 
highlights the Cisco commitment to address an industry-wide need for 
qualified technicians who can solve the complex issues created by the 
latest network technology.

"Our commitment to continue to provide world-class customer service is 
dependent on our ability to make sure our certified professionals are 
well-trained on the latest networking technology," said Tom Kelly, vice 
president, Worldwide Training.  "In today's fast-paced Internet economy 
recertification is a tangible indication, to both IT professionals and the 
organizations that employ them, that our career certification holders are 
current on the latest technology trends."

Recertification has been part of the Cisco Career Certifications Program 
since 1997, when the company implemented recertification for the coveted 
Cisco Certified Internetwork Expert (CCIE(TM)) certificate.  Under the 
guidelines of the Cisco Career Certification Program, career 
certifications at the associate and professional levels, including Cisco 
Certified Network Associate (CCNA(TM)), Cisco Certified Design Associate 
(CCDA(TM)), Cisco Certified Network Professional (CCNP(TM)) and Cisco 
Certified Design Professional (CCDP(TM)) certificates, are valid for three 
years.  The CCIE and career specializations, including security, voice 
access, network management, SNA/IP network management, LAN ATM and SNA/IP 
integration, are valid for two years.  Renewing a Cisco associate or 
professional certification requires passing the appropriate 
recertification exam before expiration.  Alternatively, certifying at a 
more advanced level also recertifies an individual's existing 
certifications.

certified and licensed its numerous worldwide Cisco learning partners to 
offer training needs analysis, certified instructor-led career courses, 
access to Cisco learning tools and technologies as well as e-learning 
editions of courseware for exam preparation.  Go to 
www.cisco.com/go/training to find a local Cisco learning partner.


Career Certifications Tracking System

The password-protected Cisco Career Certifications Tracking System 
database, available on the certification Web site 
(www.cisco.com/go/certifications), serves as the certified professional's 
informational resource.  Cisco uses the contact information from the 
database to notify certified professionals about expiring certificates.  
Thus, Cisco certified professionals are encouraged to regularly update 
their contact information.  In addition, the database tracks exam history 
and certification progress for the more than 100,000 Cisco career 
certified and specialized network professionals.


Exam Availability

Associate recertification exams are now available worldwide with 
professional exams due to be available worldwide next month.  The first 
set of professional and associate Cisco Career Certifications expire on 
September 5, 2001, giving certified network professionals a minimum of one 
year to prepare, register, and pass the required recertification exam.  Go 
personal information, check certification expiration, locate the nearest 
test center and register for a recertification exam.


Cisco Systems

Cisco Systems Inc. (NASDAQ: CSCO) is the worldwide leader in networking 
for the Internet.  News and information are available at http:// 
www.cisco.com.

 # # # #

CCDA, CCDP, CCIE, CCNA, and CCNP are trademarks, and Cisco, Cisco Systems 
and the Cisco Systems logo are registered trademarks of Cisco Systems, 
Inc. or its affiliates in the US and certain other countries.  All other 
trademarks mentioned in this document are the property of their respective 
owners.  The use of the word partner does not imply a partnership 
relationship between Cisco and any other company. (0005R)



  ###

To unsubscribe from the Cisco News Release email service,
go to 

Recertification

[Craig Johnson]

I just got this from my Cisco Channel Account Manager, thought I'd pass it
along.

http://www.cisco.com/warp/public/146/pressroom/2000/sep00/wwc_090500.htm

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re:virtualcircuit.com

[Bessette, Jesse]

thanks, its my 
site

IP NAT

[Jin Tam]

Title: RE: Load balancing two T1 of two ISP









I have a server with an internal IP address of 1.1.1.1 and I have 2
external addresses 2.2.2.1 and 2.2.2.2.

How can I translate incoming destination addresses 2.2.2.1 and
2.2.2.2 to 1.1.1.1 while keeping outgoing packets from 1.1.1.1 from being
translated.

Thanks is advance.

Re: access list is not working! why?

[Michael Fountain]

You have to be carefull trying to block web sites by IP address. Some of 
them have more then one.

www.radiowave.com resolves to 64.37.194.196 & 64.37.194.252 when I try to 
ping it by name.

Doing a whois gave the folling DNS servers for them -
 64.37.194.219
 208.216.144.18

www.entrypoint.com pinged on 205.228.184.11, with DNS servers at
199.221.47.7
207.24.245.179



>
>here is a VERY simple access list i have put on a
>router that is providing our internet connection to
>prevent connections to www.radiowave.com and
>www.entrypoint.com(used to be pointcast):
>
>access-list 100 deny   ip any host 206.64.127.11 log
>access-list 100 deny   ip any host 64.37.194.196 log
>access-list 100 permit ip any any
>
>then on every interface i have put:
>ip access-group 100 in
>ip access-group 100 out
>
>yet this is not preventing the connections. can
>someone tell me why? the router this is on is the only
>link we have to the internet. this is very puzzling to
>me.
>thanks
>Beth
>
>
>__
>Do You Yahoo!?
>Yahoo! Mail - Free email you can access from anywhere!
>http://mail.yahoo.com/
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Telnet password

[Marshal Schoener]

Thank you :-)
That is almost exactly what I am seeing.
Only difference is the password is: 7 a9vyt3...
7 is in front...
So, that means it is encrypted.
If I want to change this, can I just go in and change it there, or 
is there something else I have to do first?
Thanks a million.

-Original Message-
From: Dale Holmes [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 1:39 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: Telnet password


Eh?

No, I meant is the "service password-encryption" configured on the router? 
If so, then the password will not be written in plain text in the router 
config file... so if you use a command like:

show running-config

You might see something like:

line vty 0 4
password a9vyt3$l3 7
login

In this case, the password is encrypted. The actual password is not 
"a9vyt3$l3". Typing that string in when prompted for a password will not log

you into the router. That's what I am saying (and I thought that's what the 
original poster was seeing).

What traverses the wire is of course not encrypted, unless you make it so by

some other means not described here...

Dale
[=`)

>From: "jh" <[EMAIL PROTECTED]>
>To: "Dale Holmes" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, 
><[EMAIL PROTECTED]>
>Subject: Re: Telnet password
>Date: Tue, 5 Sep 2000 17:14:28 -0400
>
>The telnet session as a whole, password,communication is not encrypted. It
>is very easily sniffed.
>
>  How is goes across the wire and how it is stored are two different items.
>
>
>- Original Message -
>From: "Dale Holmes" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
>Sent: Tuesday, September 05, 2000 1:14 PM
>Subject: Re: Telnet password
>
>
> > Is the password encrypted? If so, the then what you see in the config is
>the
> > encrypted password, not the password itself...
> >
> > Dale
> > [=`)
> >
> > >From: Marshal Schoener <[EMAIL PROTECTED]>
> > >Reply-To: Marshal Schoener <[EMAIL PROTECTED]>
> > >To: [EMAIL PROTECTED]
> > >Subject: Telnet password
> > >Date: Wed, 6 Sep 2000 00:06:00 +0800
> > >
> > >I'm telnetting into a router using a password that I can't find 
>anywhere
> > >:-)
> > >
> > >I look at the running-config, and see 'line vty 0 4'
> > >password (password)...
> > >login
> > >
> > >However, this isn't the password that I use to telnet in, and it 
>doesn't
> > >work if
> > >I try it!!!  Can anyone help me to understand this :-)
> > >I would like to change the password used to telnet in, but I just can't
> > >figure
> > >this out...
> > >Thanks a million in advance.
> > >
> > >
> > >___
> > >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > >FAQ, list archives, and subscription info: http://www.groupstudy.com
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > 
>_
> > Get Your Private, Free E-mail from MSN Hotmail at 
>http://www.hotmail.com.
> >
> > Share information about yourself, create your own public profile at
> > http://profiles.msn.com.
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Telnet password

[Dale Holmes]

Eh?

No, I meant is the "service password-encryption" configured on the router? 
If so, then the password will not be written in plain text in the router 
config file... so if you use a command like:

show running-config

You might see something like:

line vty 0 4
password a9vyt3$l3 7
login

In this case, the password is encrypted. The actual password is not 
"a9vyt3$l3". Typing that string in when prompted for a password will not log 
you into the router. That's what I am saying (and I thought that's what the 
original poster was seeing).

What traverses the wire is of course not encrypted, unless you make it so by 
some other means not described here...

Dale
[=`)

>From: "jh" <[EMAIL PROTECTED]>
>To: "Dale Holmes" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, 
><[EMAIL PROTECTED]>
>Subject: Re: Telnet password
>Date: Tue, 5 Sep 2000 17:14:28 -0400
>
>The telnet session as a whole, password,communication is not encrypted. It
>is very easily sniffed.
>
>  How is goes across the wire and how it is stored are two different items.
>
>
>- Original Message -
>From: "Dale Holmes" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
>Sent: Tuesday, September 05, 2000 1:14 PM
>Subject: Re: Telnet password
>
>
> > Is the password encrypted? If so, the then what you see in the config is
>the
> > encrypted password, not the password itself...
> >
> > Dale
> > [=`)
> >
> > >From: Marshal Schoener <[EMAIL PROTECTED]>
> > >Reply-To: Marshal Schoener <[EMAIL PROTECTED]>
> > >To: [EMAIL PROTECTED]
> > >Subject: Telnet password
> > >Date: Wed, 6 Sep 2000 00:06:00 +0800
> > >
> > >I'm telnetting into a router using a password that I can't find 
>anywhere
> > >:-)
> > >
> > >I look at the running-config, and see 'line vty 0 4'
> > >password (password)...
> > >login
> > >
> > >However, this isn't the password that I use to telnet in, and it 
>doesn't
> > >work if
> > >I try it!!!  Can anyone help me to understand this :-)
> > >I would like to change the password used to telnet in, but I just can't
> > >figure
> > >this out...
> > >Thanks a million in advance.
> > >
> > >
> > >___
> > >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > >FAQ, list archives, and subscription info: http://www.groupstudy.com
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > 
>_
> > Get Your Private, Free E-mail from MSN Hotmail at 
>http://www.hotmail.com.
> >
> > Share information about yourself, create your own public profile at
> > http://profiles.msn.com.
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BCSN

[Donald B Johnson Jr]

Na vlans have nothing to do with the transport layer.
Does it?
Duck
- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, September 05, 2000 1:26 PM
Subject: RE: BCSN


> A
>
> -Original Message-
> From: Donald B Johnson Jr [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 05, 2000 5:53 PM
> To: [EMAIL PROTECTED]
> Subject: BCSN
> Importance: Low
>
>
> What would be the right answer to this question.
> I got this off the cisco site and I answered c but they marked it rong. I
> think this is a mistake.
> Thanks
> Duck
> VLANs have been designed to _.
>
>   A. address forwarding decisions based on transport layer information and
> spanning tree
> scalability
>   B. maximize the amount of traffic switched at Layer 3 and minimize the
> amount of traffic switched at Layer 2
>   C. address the scalability issues of a flat network topology and the
> addition of network
> management through Layer 3 routing protocols
>   D. address redundant access to the workgroup and migration of servers to
> server farms for increased security and management of data resources
>   E. address segmenting broadcast domains while still providing
network-wide
> shared services and allowing users to use hyperlinks to hop transparently
> between servers across enterprise networks
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BCSN

[pbass]

My mistake, sorry.

-Original Message-
From: Donald B Johnson Jr [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 6:37 PM
To: Patrick Bass; [EMAIL PROTECTED]
Subject: Re: BCSN
Importance: Low


Na vlans have nothing to do with the transport layer.
Does it?
Duck
- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, September 05, 2000 1:26 PM
Subject: RE: BCSN


> A
>
> -Original Message-
> From: Donald B Johnson Jr [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 05, 2000 5:53 PM
> To: [EMAIL PROTECTED]
> Subject: BCSN
> Importance: Low
>
>
> What would be the right answer to this question.
> I got this off the cisco site and I answered c but they marked it rong. I
> think this is a mistake.
> Thanks
> Duck
> VLANs have been designed to _.
>
>   A. address forwarding decisions based on transport layer information and
> spanning tree
> scalability
>   B. maximize the amount of traffic switched at Layer 3 and minimize the
> amount of traffic switched at Layer 2
>   C. address the scalability issues of a flat network topology and the
> addition of network
> management through Layer 3 routing protocols
>   D. address redundant access to the workgroup and migration of servers to
> server farms for increased security and management of data resources
>   E. address segmenting broadcast domains while still providing
network-wide
> shared services and allowing users to use hyperlinks to hop transparently
> between servers across enterprise networks
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Telnet password

[Dale Holmes]

Eh?

No, I meant is the "service password-encryption" configured on the router? 
If so, then the password will not be written in plain text in the router 
config file... so if you use a command like:

show running-config

You might see something like:

line vty 0 4
password a9vyt3$l3 7
login

In this case, the password is encrypted. The actual password is not 
"a9vyt3$l3". Typing that string in when prompted for a password will not log 
you into the router. That's what I am saying (and I thought that's what the 
original poster was seeing).

What traverses the wire is of course not encrypted, unless you make it so by 
some other means not described here...

Dale
[=`)

>From: "jh" <[EMAIL PROTECTED]>
>To: "Dale Holmes" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, 
><[EMAIL PROTECTED]>
>Subject: Re: Telnet password
>Date: Tue, 5 Sep 2000 17:14:28 -0400
>
>The telnet session as a whole, password,communication is not encrypted. It
>is very easily sniffed.
>
>  How is goes across the wire and how it is stored are two different items.
>
>
>- Original Message -
>From: "Dale Holmes" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
>Sent: Tuesday, September 05, 2000 1:14 PM
>Subject: Re: Telnet password
>
>
> > Is the password encrypted? If so, the then what you see in the config is
>the
> > encrypted password, not the password itself...
> >
> > Dale
> > [=`)
> >
> > >From: Marshal Schoener <[EMAIL PROTECTED]>
> > >Reply-To: Marshal Schoener <[EMAIL PROTECTED]>
> > >To: [EMAIL PROTECTED]
> > >Subject: Telnet password
> > >Date: Wed, 6 Sep 2000 00:06:00 +0800
> > >
> > >I'm telnetting into a router using a password that I can't find 
>anywhere
> > >:-)
> > >
> > >I look at the running-config, and see 'line vty 0 4'
> > >password (password)...
> > >login
> > >
> > >However, this isn't the password that I use to telnet in, and it 
>doesn't
> > >work if
> > >I try it!!!  Can anyone help me to understand this :-)
> > >I would like to change the password used to telnet in, but I just can't
> > >figure
> > >this out...
> > >Thanks a million in advance.
> > >
> > >
> > >___
> > >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > >FAQ, list archives, and subscription info: http://www.groupstudy.com
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > 
>_
> > Get Your Private, Free E-mail from MSN Hotmail at 
>http://www.hotmail.com.
> >
> > Share information about yourself, create your own public profile at
> > http://profiles.msn.com.
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

www.virtualcircuit.com

[Cooksey, Rodney]

Check out this site. 
http://www.virtualcircuit.com
alot of resources. 
sorry about the spam.

Re: Aironet

[Ed]

Aironet is wireless LAN technology.  The channels refer to different
2.4GHz channels, just like you would have on your cordless phone...

-Ed

"Olden Pieterse" <[EMAIL PROTECTED]> wrote in message
613278FCB1FFD011A3C400608C33FC24B58918@CTN_EXCHANGE">news:613278FCB1FFD011A3C400608C33FC24B58918@CTN_EXCHANGE...
> Hi there gang
>
> Do any of you know where I can get comparisons between the aironets and
> other vendors ?
> I see they talk about 11 channels (US&Japan) & 13 channels (ETSI
countries)
> .
> Does this imply that it works like E1 & T1 ? Dividing your bandwidth into
> those channels ?
>
> Any help would be appreciated
>
> Cheers
>
> Olden Pieterse
> Pre-Sales Consultant
> Westcon
> Tel:   +27 21 415 7211
> Fax:  +27 21 419 7537
> Mobile:  +27 82 564 0709
> Email: [EMAIL PROTECTED]
> Web:   http://www.westcon.co.za 
>
> Remember, our product range includes:
> 3Com, Addtron, APC, IMC, Cisco, Extreme, Lucent, Motorola, Nortel-Networks
> and Ramp.
>
> E-mail Disclaimer:
>
> Any email message from a WESTCON employee, and all attached thereto ("the
> message") may contain confidential information, and is intended for a
> specific addressee and purpose.  If you are not the addressee
>
> * you may not use, disclose, copy, distribute, retransmit, review,
> disseminate or take any action based on the contents thereof;
> * kindly inform the sender immediately and destroy all copies thereof.
>
> Any copying, publication, dissemination, retransmission or
> disclosure of this message, or part thereof, in any form whatsoever,
without
> the sender's expressed written consent, is prohibited.  No opinion
expressed
> or implied by the sender necessarily constitutes the opinion of WESTCON.
> This message does not constitute a guarantee or proof of the facts
mentioned
> therein.  WESTCON accepts no responsibility or liability in respect of:-
>
> * any opinion or guarantee of fact, whether expressed or implied; or
> any action or failure to act as a result of any information contained in
> this message, unless such information or opinion has been confirmed in
> writing by an authorised WESTCON director.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Load balancing two T1 of two ISP

[Greene, Patrick]

Title: RE: Load balancing two T1 of two ISP



Ok..."request"
 
The 
semantics of this are irrelevant...please don't waste our time with 
them.
[Greene, Patrick] 
 -Original 
Message-From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 2000 4:29 
PMTo: [EMAIL PROTECTED]; [EMAIL PROTECTED]; 
[EMAIL PROTECTED]Subject: RE: Load balancing two T1 of two 
ISP
I 
believe that your statement...
 
"What this entails is you acquiring your own 
Autonomous-System(AS) number from ARIN"
 
...Is incorrect as you do not 
acquire an AS from ARIN.

  -Original Message-From: Greene, Patrick 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 2000 
  2:54 PMTo: 'rayza manesh'; [EMAIL PROTECTED]Subject: 
  RE: Load balancing two T1 of two ISPImportance: 
  Low
  Rayza, The only way to truely 
  load-balance this scenario is via BGP.  What this entails is you 
  acquiring your own Autonomous-System(AS) number from ARIN.  Once you have 
  your own AS you can then setup BGP on your routers going to your ISP's (I am 
  assuming you have 2 different ISP's and not just 2 links going to the same 
  ISP).  BGP will then provide optimal routing and 
  fault-tolerance.
  We design and install Internet Co-Location Facilities 
  nationwide.  We are generally provisioning at least redundant DS3's with 
  a fully redundant router and switch core with full BGP routing.  If you 
  would like any addional assistance...please feel free to email me 
  privately.
  Patrick Greene Information 
  Technologies Enterprise (ITE) [EMAIL PROTECTED] 704-896-9495 
  
  -Original Message- From: rayza 
  manesh [mailto:[EMAIL PROTECTED]] 
  Sent: Tuesday, September 05, 2000 3:10 PM To: [EMAIL PROTECTED] Subject: Load 
  balancing two T1 of two ISP 
  Dear Group members, I have been search 
  every corner of Cisco site to see if I will find anything about the following scenario. I have read some white paper that explain 
  BGP in enterprise level but I need little bit more of 
  a smaller picture. Anyhow thanks for your help. 
  
  how would you implement Load balancing between two T-1 
  internet connections from two different ISP on a 
  LAN. 
  By this question I mean if there are two active internet 
  connection terminated on two different routers 
  connecting to the LAN setting a bandwidth threshold 
  that when it passes that on the primary router sends/reroutes the traffic to the secondary router (path). 
  the type of traffic are FTP from outside downloading files and 
  HTTP traffic 
  from inside browsing the Internet. 
  Thanks for your help 
  Rayza _ 
  Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. 
  
  Share information about yourself, create your own public 
  profile at http://profiles.msn.com. 
  ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html 
  FAQ, list archives, and subscription info: http://www.groupstudy.com 
  Report misconduct and Nondisclosure violations to 
  [EMAIL PROTECTED] 

ATM - LANE - LES SERVER

[Nadeem Khawaja]

Could any body tell me what are the roles of LES Server in LANE

Thanks

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: access list is not working! why?

[Williamson, Paul]

our dns resolves 
www.radiowave.com to 64.37.194.252
www.entrypoint.com to 205.228.184.11

Regards
-Paul

-Original Message-
From: beth shriver [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 9:16 PM
To: [EMAIL PROTECTED]
Subject: access list is not working! why?


here is a VERY simple access list i have put on a
router that is providing our internet connection to
prevent connections to www.radiowave.com and
www.entrypoint.com(used to be pointcast):

access-list 100 deny   ip any host 206.64.127.11 log
access-list 100 deny   ip any host 64.37.194.196 log
access-list 100 permit ip any any 

then on every interface i have put:
ip access-group 100 in
ip access-group 100 out  

yet this is not preventing the connections. can
someone tell me why? the router this is on is the only
link we have to the internet. this is very puzzling to
me.
thanks
Beth


__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Load balancing two T1 of two ISP

[pbass]

Title: RE: Load balancing two T1 of two ISP



I 
believe that your statement...
 
"What this entails is you acquiring your own 
Autonomous-System(AS) number from ARIN"
 
...Is incorrect as you do not 
acquire an AS from ARIN.

  -Original Message-From: Greene, Patrick 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 2000 
  2:54 PMTo: 'rayza manesh'; [EMAIL PROTECTED]Subject: 
  RE: Load balancing two T1 of two ISPImportance: 
  Low
  Rayza, The only way to truely 
  load-balance this scenario is via BGP.  What this entails is you 
  acquiring your own Autonomous-System(AS) number from ARIN.  Once you have 
  your own AS you can then setup BGP on your routers going to your ISP's (I am 
  assuming you have 2 different ISP's and not just 2 links going to the same 
  ISP).  BGP will then provide optimal routing and 
  fault-tolerance.
  We design and install Internet Co-Location Facilities 
  nationwide.  We are generally provisioning at least redundant DS3's with 
  a fully redundant router and switch core with full BGP routing.  If you 
  would like any addional assistance...please feel free to email me 
  privately.
  Patrick Greene Information 
  Technologies Enterprise (ITE) [EMAIL PROTECTED] 704-896-9495 
  
  -Original Message- From: rayza 
  manesh [mailto:[EMAIL PROTECTED]] 
  Sent: Tuesday, September 05, 2000 3:10 PM To: [EMAIL PROTECTED] Subject: Load 
  balancing two T1 of two ISP 
  Dear Group members, I have been search 
  every corner of Cisco site to see if I will find anything about the following scenario. I have read some white paper that explain 
  BGP in enterprise level but I need little bit more of 
  a smaller picture. Anyhow thanks for your help. 
  
  how would you implement Load balancing between two T-1 
  internet connections from two different ISP on a 
  LAN. 
  By this question I mean if there are two active internet 
  connection terminated on two different routers 
  connecting to the LAN setting a bandwidth threshold 
  that when it passes that on the primary router sends/reroutes the traffic to the secondary router (path). 
  the type of traffic are FTP from outside downloading files and 
  HTTP traffic 
  from inside browsing the Internet. 
  Thanks for your help 
  Rayza _ 
  Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. 
  
  Share information about yourself, create your own public 
  profile at http://profiles.msn.com. 
  ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html 
  FAQ, list archives, and subscription info: http://www.groupstudy.com 
  Report misconduct and Nondisclosure violations to 
  [EMAIL PROTECTED] 

RE: Net X Ray

[Jorge Rodriguez]

You may look into www.sniffer.com,  NetXray is now called
Sniffer Basic for the sniffing basic product. Now, don't
get confused, www.sniffer.com is a division of Network Associates inc that
is mostly focus on LAN/WAN sniffing technologies.

Good luck.




--Original Message--
From: "FRS" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Sent: September 5, 2000 1:21:05 PM GMT
Subject: Net X Ray


I cannot seem to find a manual on the Internet for Net X Ray.
Does anyone know of a site to get instructions to use Net X Ray.

Thanks in advance.


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Jorge Rodriguez /CCNA
Network Analyst
R&S Networks Inc
1112 Boylston Street
Suite 222
Boston, MA 02115
1-781-614-1294
1-617-989-8634 Evenings
http://www.netwire.n3.net/
http://www.learncisco.n3.net/


 
iWon.com   http://www.iwon.com why wouldn't you? 


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BGP on the Brain - Design Issue

[Krake, Kris]

Along the lines of this thread I have something to ponder

Suppose we have the situation as posed below but I need to manipulate how
data comes into my AS not out of it.

I have two links to two separate ISPs with two separate AS numbers.  My
links are not identical (say one is a T1 and the other is a 512K frame
circuit) and I need to make sure that the majority of the traffic coming
into my AS is from the T1.  I know there is the MED attribute
(non-transitive)  that can influence my neighbor AS to prefer a specific
path from two different paths in the same AS but what about two different
AS's.  How can I get them to "share my preference" ?  I saw in the Cisco
docs the Always compare MED command but I'm uncertain that applies in this
situation as the MED is non-transitive.  I've read up and have been told
that this can be handled with route maps but I'm not sure how that would
affect external AS's.

ISP #1 AS -512k(My
AS)T1(ISP #2 AS)


If someone has done this or has any insight would you post any sample
configs?

Thanks, 

Kris


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 8:41 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Fw: BGP on the Brain - Design Issue


Maybe I can help with this.

BGP doesn't do load balancing in the traditional sense of the word.  The
only time you'll see a router have two BGP learned routes to the same
network is when that router has two connections to the same ISP and you
have configured the command "maximum-paths 2" under the BGP routing
process.  And I venture to say that you'll never see a BGP router doing
"per-packet" load balancing.  Not in the real world.  Per-packet load
balancing requires process switching which drags performance of the router
down.

Typically, to make sure that both links get utilized, the edge BGP routers
will advertise a default route into the IGP and from there it is up to the
IGP to make the best routing decision.  For instance:

--Router1Router2--
Router3-Router4--

Both Router1 and Router4 are injecting 0.0.0.0 into OSPF.  Now Router2 will
prefer the 0.0.0.0 coming from Router1 because it has a lower OSPF Metric
than the one coming from Router4.  (and the inverse is true of Router3).

Of course, you as the Design Engineer have every option open.  You can
influence all the traffic to go one way or another.  But you have to know
the network and the traffic patterns very well before you start.  You can
set metrics to influence path selection.  Or you can use Route Maps (Policy
routing).  You can have Router2 Send all HTTP traffic over Router1's
default link, and all other traffic over Router4's link.

You can customize BGP to suit your needs, but the difference between it and
other Routing Protocols is that you have to decide the direction, you can't
leave it up to BGP to pick the best path (like you would with an IGP).

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: ftp out

[Paul Harlow]

But how would that affect outbound return traffic? An extended access list
will block a port; from this either in of outbound traffic can be denied.
What we noticed in lab was that if we blocked inbound telnet sessions, we
could not telnet to another student's router. The return packets were
denied. Either that or the other end had somehow blocked us as well (which
they shouldn't have for the purposes of the lab). What are thoughts on that?

Paul

-Original Message-
From: Dale Holmes [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 1:56 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: ftp out


Access lists are applied in one direction or the other - in, or out. So you 
are probably looking at an access list that is applied to inbound traffic, 
blocking incoming ftp requests.

A very rudimentary access list entry, that blocks ftp from any source to any

destination might look like this:

access-list 101 deny tcp any any eq ftp

Keep in mind that this entry on its own blocks everything, not just incoming

ftp, because all access lists end with an implicit deny any.
You have to explicitly permit something...

Here is an example that blocks ftp, but permits everything else:

access-list 101 deny tcp any any eq ftp
access-list 101 permit ip any any

You then need to apply the access-list to an interface, and specify whether 
it applies to inbound or outbound traffic. Use the "ip access-group" 
command.

Router(config)#interface s0
Router(config-if)ip access-group 101 in

You can get much more detail on this here (watch for URL word wrap):

http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/n
p1_r/1rip.htm#1250

I hope this helps...

Dale
[=`)

>From: "SH Wesson" <[EMAIL PROTECTED]>
>Reply-To: "SH Wesson" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: ftp out
>Date: Tue, 05 Sep 2000 19:23:03 GMT
>
>How do I configre an access list such that it only allow users to ftp out,
>but not any ftp in. Thanks.
>_

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BCSN

[pbass]

A

-Original Message-
From: Donald B Johnson Jr [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 5:53 PM
To: [EMAIL PROTECTED]
Subject: BCSN
Importance: Low


What would be the right answer to this question.
I got this off the cisco site and I answered c but they marked it rong. I
think this is a mistake.
Thanks
Duck
VLANs have been designed to _.

  A. address forwarding decisions based on transport layer information and
spanning tree
scalability
  B. maximize the amount of traffic switched at Layer 3 and minimize the
amount of traffic switched at Layer 2
  C. address the scalability issues of a flat network topology and the
addition of network
management through Layer 3 routing protocols
  D. address redundant access to the workgroup and migration of servers to
server farms for increased security and management of data resources
  E. address segmenting broadcast domains while still providing network-wide
shared services and allowing users to use hyperlinks to hop transparently
between servers across enterprise networks

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

access list is not working! why?

[beth shriver]

here is a VERY simple access list i have put on a
router that is providing our internet connection to
prevent connections to www.radiowave.com and
www.entrypoint.com(used to be pointcast):

access-list 100 deny   ip any host 206.64.127.11 log
access-list 100 deny   ip any host 64.37.194.196 log
access-list 100 permit ip any any 

then on every interface i have put:
ip access-group 100 in
ip access-group 100 out  

yet this is not preventing the connections. can
someone tell me why? the router this is on is the only
link we have to the internet. this is very puzzling to
me.
thanks
Beth


__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: ftp out

[Greene, Patrick]

Title: RE: ftp out





! Allow any internal connection back in
access-list 101 permit tcp any any established
! Allow FTP for non-passive ftp modes
access-list 101 permit tcp any eq ftp-data gt 1024
access-list 101 deny tcp any any


-Original Message-
From: SH Wesson [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 3:23 PM
To: [EMAIL PROTECTED]
Subject: ftp out



How do I configre an access list such that it only allow users to ftp out, 
but not any ftp in. Thanks.
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.


Share information about yourself, create your own public profile at 
http://profiles.msn.com.


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Telnet password

[jh]

The telnet session as a whole, password,communication is not encrypted. It
is very easily sniffed.

 How is goes across the wire and how it is stored are two different items.


- Original Message -
From: "Dale Holmes" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, September 05, 2000 1:14 PM
Subject: Re: Telnet password


> Is the password encrypted? If so, the then what you see in the config is
the
> encrypted password, not the password itself...
>
> Dale
> [=`)
>
> >From: Marshal Schoener <[EMAIL PROTECTED]>
> >Reply-To: Marshal Schoener <[EMAIL PROTECTED]>
> >To: [EMAIL PROTECTED]
> >Subject: Telnet password
> >Date: Wed, 6 Sep 2000 00:06:00 +0800
> >
> >I'm telnetting into a router using a password that I can't find anywhere
> >:-)
> >
> >I look at the running-config, and see 'line vty 0 4'
> >password (password)...
> >login
> >
> >However, this isn't the password that I use to telnet in, and it doesn't
> >work if
> >I try it!!!  Can anyone help me to understand this :-)
> >I would like to change the password used to telnet in, but I just can't
> >figure
> >this out...
> >Thanks a million in advance.
> >
> >
> >___
> >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> >FAQ, list archives, and subscription info: http://www.groupstudy.com
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Group Study Archive ATTN: PAUL

[Davis, John D.]

Paul, archive is down again.  Can you please take a look when you have time?
Thank you.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Does it have to be 255?

[Cthulu, CCIE Candidate]

Hi, all,

I wanted to stimulate some discussion on subnetting here.  I was playing
around with subnetting today (I was not trying to solve any problem in
particular).  Anyways,  on a router interface, I entered:


ip address 192.0.0.1 128.0.0.0


The router happily took it.  I could ping the interface...scarey!  I am well
aware that in the real world, we start things with a 255 on that first
octet.  But for discussion purposes...


why shouldn't I do this (see below):   Granted, classful routing protocols
such as RIP V1 would probably sicken and be unable to handle something like
this, but what of EIGRP and OSPF?  IS-IS?  Something like this would be good
for aggregation purposes (BGP)??


Technically, doing the straight math, we have two subnets containing all the
host addresses in the free world!!!  Wowza!  ("Bob, we just lost Wichita!")

0.0.0.0 to 127.255.255.255 (subnet number and its associated broadcast
address, first host address would be 0.0.0.1)
128.0.0.0 to 255.255.255.255 (subnet number and its associated broadcast
address, first host address would be 128.0.0.1)


Would be interesting to hear some theories and feedback

Flames to:  [EMAIL PROTECTED]


Charles









___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Cisco dumps

[Chuck Larrieu]

If you're looking to dump some old Cisco equipment, just let me know. I'll
be happy to take your old routers and switches off your hands. And my
disposal fees are very reasonable.

Chuck


-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of CCxx
Infomation
Sent:   Monday, September 04, 2000 3:00 PM
To: [EMAIL PROTECTED]
Subject:Cisco dumps

Does anyone have any links to some good Cisco dump
sites?

I found one here www.sasaschool.com/cisco


__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BCSN

[E A Moran]

I would say "D". Cisco has really looked at using VLANs for security and
management. But with Cisco's mindset, "E" is also possible. VLANS do help
segment broadcast domains.


""Donald B Johnson Jr"" <[EMAIL PROTECTED]> wrote in message
02c001c0178c$1643b450$[EMAIL PROTECTED]">news:02c001c0178c$1643b450$[EMAIL PROTECTED]...
> What would be the right answer to this question.
> I got this off the cisco site and I answered c but they marked it rong. I
> think this is a mistake.
> Thanks
> Duck
> VLANs have been designed to _.
>
>   A. address forwarding decisions based on transport layer information and
> spanning tree
> scalability
>   B. maximize the amount of traffic switched at Layer 3 and minimize the
> amount of traffic switched at Layer 2
>   C. address the scalability issues of a flat network topology and the
> addition of network
> management through Layer 3 routing protocols
>   D. address redundant access to the workgroup and migration of servers to
> server farms for increased security and management of data resources
>   E. address segmenting broadcast domains while still providing
network-wide
> shared services and allowing users to use hyperlinks to hop transparently
> between servers across enterprise networks
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Load balancing two T1 of two ISP

[Greene, Patrick]

Title: RE: Load balancing two T1 of two ISP





Rayza,
The only way to truely load-balance this scenario is via BGP.  What this entails is you acquiring your own Autonomous-System(AS) number from ARIN.  Once you have your own AS you can then setup BGP on your routers going to your ISP's (I am assuming you have 2 different ISP's and not just 2 links going to the same ISP).  BGP will then provide optimal routing and fault-tolerance.

We design and install Internet Co-Location Facilities nationwide.  We are generally provisioning at least redundant DS3's with a fully redundant router and switch core with full BGP routing.  If you would like any addional assistance...please feel free to email me privately.

Patrick Greene
Information Technologies Enterprise (ITE)
[EMAIL PROTECTED]
704-896-9495


-Original Message-
From: rayza manesh [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 3:10 PM
To: [EMAIL PROTECTED]
Subject: Load balancing two T1 of two ISP




Dear Group members,
I have been search every corner of Cisco site to see if I will find anything
about the following scenario. I have read some white paper that explain BGP
in enterprise level but I need little bit more of a smaller picture. Anyhow
thanks for your help.


how would you implement Load balancing between two T-1 internet connections
from two different ISP on a LAN.


By this question I mean if there are two active internet connection
terminated on two different routers connecting to the LAN setting a
bandwidth threshold that when it passes that on the primary router
sends/reroutes the traffic to the secondary router (path).


the type of traffic are FTP from outside downloading files and HTTP traffic


from inside browsing the Internet.


Thanks for your help


Rayza
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.


Share information about yourself, create your own public profile at 
http://profiles.msn.com.


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: ftp out

[Dale Holmes]

Access lists are applied in one direction or the other - in, or out. So you 
are probably looking at an access list that is applied to inbound traffic, 
blocking incoming ftp requests.

A very rudimentary access list entry, that blocks ftp from any source to any 
destination might look like this:

access-list 101 deny tcp any any eq ftp

Keep in mind that this entry on its own blocks everything, not just incoming 
ftp, because all access lists end with an implicit deny any.
You have to explicitly permit something...

Here is an example that blocks ftp, but permits everything else:

access-list 101 deny tcp any any eq ftp
access-list 101 permit ip any any

You then need to apply the access-list to an interface, and specify whether 
it applies to inbound or outbound traffic. Use the "ip access-group" 
command.

Router(config)#interface s0
Router(config-if)ip access-group 101 in

You can get much more detail on this here (watch for URL word wrap):

http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/np1_r/1rip.htm#1250

I hope this helps...

Dale
[=`)

>From: "SH Wesson" <[EMAIL PROTECTED]>
>Reply-To: "SH Wesson" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: ftp out
>Date: Tue, 05 Sep 2000 19:23:03 GMT
>
>How do I configre an access list such that it only allow users to ftp out,
>but not any ftp in. Thanks.
>_
>Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
>Share information about yourself, create your own public profile at
>http://profiles.msn.com.
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: ftp out

[Dale Holmes]

Oops, I forgot the most important part in my previous reply... You need to 
look at the "established" keyword to allow replies back in to FTP session 
requests that originate within your organization...

Dale
[=`)


>From: "SH Wesson" <[EMAIL PROTECTED]>
>Reply-To: "SH Wesson" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: ftp out
>Date: Tue, 05 Sep 2000 19:23:03 GMT
>
>How do I configre an access list such that it only allow users to ftp out,
>but not any ftp in. Thanks.
>_
>Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
>Share information about yourself, create your own public profile at
>http://profiles.msn.com.
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

BCSN

[Donald B Johnson Jr]

What would be the right answer to this question.
I got this off the cisco site and I answered c but they marked it rong. I
think this is a mistake.
Thanks
Duck
VLANs have been designed to _.

  A. address forwarding decisions based on transport layer information and
spanning tree
scalability
  B. maximize the amount of traffic switched at Layer 3 and minimize the
amount of traffic switched at Layer 2
  C. address the scalability issues of a flat network topology and the
addition of network
management through Layer 3 routing protocols
  D. address redundant access to the workgroup and migration of servers to
server farms for increased security and management of data resources
  E. address segmenting broadcast domains while still providing network-wide
shared services and allowing users to use hyperlinks to hop transparently
between servers across enterprise networks

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Static Route Question

[Nadine Langlois]

No.  The ISP is providing the T1 service.  The customer went with
another T1 provider, therefore the ISP wanted the static route for the
customer removed from their router.  But once this was done, they could
not e-mail that customer or view their web site.  The actual static
route was:

204.90.95.0 255.255.255.0 157.130.119.113

The 204.90.95.0 address was the former customer's IP.  The
157.130.119.113 is the IP of the ISP's backbone provider.

Nadine

"Greene, Patrick" wrote:

>
>
> We are assuming the T1 is no longer there!?
>
> -Original Message-
> From: Nadine Langlois [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 05, 2000 2:34 PM
> To: [EMAIL PROTECTED]
> Subject: Static Route Question
>
> To the Group,
>  I currently have a situation where I need some advice or some
> suggestions for where to look for information.  I have a client who is
>
> an ISP.  I was called by a contact there and told to remove a static
> route - it belonged to a customer who was using their T1 service but
> had
> changed providers.  So I removed the route.  For the record, this is a
>
> Cisco 2511 running IOS 11.1 over BGP.  The client then called back and
>
> said that they could now not access the customer's web site or send
> them
> e-mail.  I added the route back, but I can't figure out why removing
> the
> static route caused them to lose these capabilities.  Surely you don't
>
> need a static route to every web site's IP address to access it or to
> send out e-mail.  I searched around on the web, CCO - looked through
> my
> ACRC book and other routing books and didn't find an answer.  What am
> I
> missing here?
>
> Nadine
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

study group in Milwaukee?

[Stull, Cory]

Anyone know of any Cisco CCNP level study groups in Milwaukee, WI. ??
 
If not would any one be interested in one?
 

Cory R. Stull 
MCSE, Bay Router Specialist, CCNA,CCDA 
Communications Concepts Unlimited 
262-814-7214 

 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Standard Cisco passwords

[Erik Mintz]

>From the default password database, maintained by Eric Knight.
see -http://www.securityparadigm.com/defaultpw.htm

Cisco,IOS,,Multi,enable,cisco,,"IOS technically has no ""default pw'"
Cisco,IOS,2600 series,Multi,n/a,c,,but these are common misconfigurations
Cisco,IOS,,Multi,n/a,cc,,
Cisco,IOS,,Multi,n/a,cisco,,
Cisco,IOS,,Multi,n/a,Cisco router,,
Cisco,CiscoWorks 2000,,,guest,(none),User,
Cisco,CiscoWorks 2000,,,admin,cisco,Admin,

Looking at the full list will give you an appreciation of cisco's design, as
the database is filled with default passwords for other vendors.

Erik Mintz
Mail.com


- Original Message -
From: "Hans Stout" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 29, 2000 6:30 AM
Subject: Standard Cisco passwords


> Hi colleagues,
>
> do you know what the Cisco standard passwords are ? As far as I remember,
> they are 'cisco' and 'sanfran', but I am not sure (also not sure about
> lower/upper case).
> Thanks for your help in advance.
>
> Georg Pauwen
>



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: LanRover - offtopic?

[Dave Hennen]

You can get support on the Lanrovers from Intel, they bought Shiva out a
year or two ago.  There is a toll support number for Shiva products that I
can't find right now, but you can call 800-539-3373, go to tech support,
tell them you have a shiva product and they'll give you the right number.

The lanrovers are pretty good for dialin ras servers.  You can use them up
as a dialout server too, but you need a software app on the workstation that
redirects a com port.  I've never seen their "lan2lan" function in
production use and I'm sure you'd rather use Cisco routers.  I'm pretty sure
the LanRover 4/E has one ethernet (maybe just 10Base2) and 4 serial ports to
which you can connect analog or isdn modems.

You need Shiva Net Manager to configure and manage them.  They have their
own user/password database  or you can use tacacs server for authentication
(never tried it). If you need a dialin system for remote users or support
from home you might be able to make use of them.

hope this is helpful,
daveh

-Original Message-
From: Chris McNally [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 2:37 PM
To: [EMAIL PROTECTED]
Subject: LanRover - offtopic?


My apologies if this topic is not appropriate.
I view this forum as home of the network gurus and hope-to-be gurus.
If my subject matter is not on topic, please suggest an appropriate
newsgroup.

At work I have been given 5 Shiva LanRover/4E units and asked to see
if I can make any use of them. Seems to me I could use them as routers
(ignoring the dialing capabilites for now). Does anyone have any
experience with these units? My first stumbling block is an admin
password. These units have been sitting in the corner for who knows
how long, and anyone who had the password is long gone. I can run a
device discovery but anything beyond that is protected. I looked
inside and there is no battery I can pull. I didn't expect so, as
probably the password is part of the firmware. Also no jumpers, again
as expected, to clear settings. At least none that I can determine.
Probably a firmware upgrade is needed, about $700, though chances are
the same stumbling block would come into play. As well, I have asked
to see if I can get any functionality as is.
This isn't a critical assignment, more of a "give it to the new CCNA
guy and see what he can do, if nothing, then no worse off".

Any thoughts greatly appreciated.

Chris McNally

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Switch Design

[Lorenzo Montezemolo]

I think you must mean bottleneck, and not collision.  In a switch, the
collision domain is restricted to the NIC and the port it is connected to -
there is no collision between ports.  In full duplex, there is no collision
because there is a direct circuit between send on the NIC, receive on the
switch port, and vice versa.

The question of whether there's a bottleneck is a question of traffic
analysis.  How many concurrent data streams (and of what size) are there
between the resource node (server) and demand nodes (clients)?  This can
only be determined be doing an analysis of the communication between the
systems involved?


"Ole Drews Jensen" <[EMAIL PROTECTED]> wrote in message
2019FB428FD3D311893700508B71EBFB2C5B2F@RWR_MAIL_SVR">news:2019FB428FD3D311893700508B71EBFB2C5B2F@RWR_MAIL_SVR...
| Thanks,
|
| If I have the servers attached to 100 Mbps ports, wouldn't that create
many
| collisions when a lot of workstations attached to 100 Mbps ports try to
| access data at the same time?
|
| That was the reason why I was thinking about Gbps solutions for the
servers.
|
| Thanks for your comment on this,
|
| Ole
|
| ~~
|  Ole Drews Jensen
|  Systems Network Manager
|  CCNA, MCSE, MCP+I
|  RWR Enterprises, Inc.
|  [EMAIL PROTECTED]
| ~~
|
|
|
| -Original Message-
| From: E A Moran [mailto:[EMAIL PROTECTED]]
| Sent: Tuesday, September 05, 2000 12:40 PM
| To: [EMAIL PROTECTED]
| Subject: Re: Switch Design
|
|
| Using Catalyst switches will reduce collisions. Remember that switches
| create their own collision domains per port. I would recommend using two
| Cat3548's and you can stack them with GBICs or add them to the Gigabit
| backbone. You will spend less money and have fewer devices to maintain.
| Unles you have a reason to want more switches.
|
| "Ole Drews Jensen" <[EMAIL PROTECTED]> wrote in message
| 2019FB428FD3D311893700508B71EBFB2C5B2A@RWR_MAIL_SVR">news:2019FB428FD3D311893700508B71EBFB2C5B2A@RWR_MAIL_SVR...
| > I know that I can find all the information about switches on the Cisco
| site,
| > but I would like some feedback and advise from experienced Cisco Switch
| > users.
| >
| > I have a "small" LAN where the total amount of connections are below
100.
| > Seven of the connections are servers.
| >
| > Since I am redesigning the hardware, I would like to know what you think
| > would be the best solution.
| >
| > I would like to give everyone Fast Ethernet access, so I though about
| > putting four 3524's together on a Gigabit backbone, but would that cause
| to
| > many collisions with my servers on Fast Ethernet too?
| >
| > I could also get a 12 port Gigabit switch that connects my servers and
| four
| > 3524's so I have a Gigabit backbone with less collisions on my servers,
| but
| > I do not know how well Gigabit NIC's work with NT 4.0 and Novell 4.0.
| >
| > If any of you have comments to this, or any other recommendations, I
would
| > appreciate a reply.
| >
| > I have started my BCMSN studying, but so far it has been concentrating
on
| > big networks with the three Cisco layers. As far as the layers go, I
| believe
| > my LAN stays in the Access layer.
| >
| > Thanks,
| >
| > Ole
| >
| > ~~
| >  Ole Drews Jensen
| >  Systems Network Manager
| >  CCNA, MCSE, MCP+I
| >  RWR Enterprises, Inc.
| >  [EMAIL PROTECTED]
| > ~~
| >
| >
| > ___
| > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
| > FAQ, list archives, and subscription info: http://www.groupstudy.com
| > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
| >
|
|
| ___
| UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
| FAQ, list archives, and subscription info: http://www.groupstudy.com
| Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
|
| ___
| UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
| FAQ, list archives, and subscription info: http://www.groupstudy.com
| Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
|


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: what is dark fiber?

[Robert Padjen]

David is correct. Dark fiber is unprovisioned by the
carrier and is useful for campus and MAN
installations. For example, I can order dark fiber
between buildings in the same city (under 70 miles)
and run whatever services I wish (DWDM, GE, etc).
'Light' fiber (the term does not exist) is provisioned
by a carrier. In this instance, I must coordinate and
pay for whatever service I am running. For example, I
would specify SONET, GE, etc. The benefit of this
installation is that the service is generally managed
and I can greatly increase the distances. Given the
option, and a good price, however, I would always seek
out dark fiber - it provides the most flexability.
Check out mmfn.com for more information on providers
that have dark fiber (I don't work for them, but they
just presented me with a great sales pitch a month
ago).

Hope this helps.


--- David <[EMAIL PROTECTED]> wrote:
> It is my understanding that dark fiber is
> un-used/non-saturated fiber. I
> havn't heard that its a special type of fiber, just
> a condition of the
> fiber.
> 
> 
> 
> "bahadir korkmaz" <[EMAIL PROTECTED]>
> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > hi.
> > what is dark fiber?
> > i found some sites that says dark fiber means
> unused fiber.
> > is it so?
> > i think dark fiber must be different then unused
> fiber.
> > i mean for example. 10gigabit ethernet runs on
> dark fiber.
> > dark must be something related to bandwidth or
> wavelength.
> >
> > if someone knows dark fiber definition i ll be
> happy.
> >
>
_
> > Get Your Private, Free E-mail from MSN Hotmail at
> http://www.hotmail.com.
> >
> > Share information about yourself, create your own
> public profile at
> > http://profiles.msn.com.
> >
> > ___
> > UPDATED Posting Guidelines:
> http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
> >
> 
> 
> ___
> UPDATED Posting Guidelines:
> http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


=
Robert Padjen

__
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

ftp out

[SH Wesson]

How do I configre an access list such that it only allow users to ftp out, 
but not any ftp in. Thanks.
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Static Route Question

[Greene, Patrick]

Title: RE: Static Route Question





We are assuming the T1 is no longer there!?  


-Original Message-
From: Nadine Langlois [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 05, 2000 2:34 PM
To: [EMAIL PROTECTED]
Subject: Static Route Question



To the Group,
 I currently have a situation where I need some advice or some
suggestions for where to look for information.  I have a client who is
an ISP.  I was called by a contact there and told to remove a static
route - it belonged to a customer who was using their T1 service but had
changed providers.  So I removed the route.  For the record, this is a
Cisco 2511 running IOS 11.1 over BGP.  The client then called back and
said that they could now not access the customer's web site or send them
e-mail.  I added the route back, but I can't figure out why removing the
static route caused them to lose these capabilities.  Surely you don't
need a static route to every web site's IP address to access it or to
send out e-mail.  I searched around on the web, CCO - looked through my
ACRC book and other routing books and didn't find an answer.  What am I
missing here?


Nadine


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]