Re: I need Boson Cisco Test Pack v3.22 demo for download !

[Clayton Price]

A lot has been upgraded since 3.22.  Let me guess, you can't find a crack
for anything newer than version 3.22


""Romeo"" <[EMAIL PROTECTED]> wrote in message
90fceq$df2$[EMAIL PROTECTED]">news:90fceq$df2$[EMAIL PROTECTED]...
> Hi there!
>
> Please, from where can I download Boson Cisco Test Pack v3.22 demo? It
> missing on Boson site.
>
> TIA
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

hub-and-spoke

[Hook Soso]

Could someone tell me what's the meaning of hub-and-spoke topology?

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Serial port with identity crisis

[Tim Ross]

I have been upgrading a couple 3104 routers (2 
serial port, 1 ether, 1 BRI) and got them up and running on 11.1 IOS as DTE 
devices into an AGS+ operating as a frame-switch. The two 3104's can ping each 
other, but can't ping its own serial port. This is the first time that I have 
had this happen. I can ping a remote serial port, but not the local serial port. 
Can someone explain why this happens? Since this, I have upgraded the (2) 3104's 
to IOS ver 12.0.9 and am having worse problems, but am still curious about the 
local router unable to ping its own ser0 port.
 
Thanks,
Tim

High availability with Cisco PIX.

[Ryan Ngai Hon Kong]

Does anyone know if Cisco PIX could provide redundant or fail-over, work
hand-in-hand with HSRP?

Ryan Ngai @ ENT
E-mail: hkngaiExt:6805


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

why can ping but traceroute stop half way

[Sim, CT (Chee Tong)]

Hi..Dear all,  

i wonder why I can ping to a site but when I do a traceroute stop half way..
I thought traceroute are based on ICMP as well??  See below


sin-uunet>ping 210.24.136.242
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 210.24.136.242, timeout is 2 seconds:
!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/96/156 ms
sin-uunet>traceroute 210.24.136.242

Type escape sequence to abort.
Tracing the route to 210.24.136.242

  1 Loopback0.GW2.SIN1.Alter.Net (210.80.0.25) 12 msec 12 msec 12 msec
  2 322.ATM5-0-0.XR2.SIN1.Alter.Net (210.80.3.65) 8 msec 12 msec 8 msec
  3 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 12 msec 12 msec 8 msec
  4 202.95.96.30 20 msec 16 msec 16 msec
  5 scipk017.pacific.net.sg (203.120.90.17) 12 msec 16 msec 16 msec
  6 202.42.42.234 20 msec 92 msec 36 msec
  7  *  *  *
  8  *  *  *
  9  *  *  *

==
De informatie opgenomen in dit bericht kan vertrouwelijk zijn en 
is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht 
onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en 
de afzender direct te informeren door het bericht te retourneren. 
==
The information contained in this message may be confidential 
and is intended to be exclusively for the addressee. Should you 
receive this message unintentionally, please do not use the contents 
herein and notify the sender immediately by return e-mail.


==

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

is there a command to trace https traffic to particular site

[Sim, CT (Chee Tong)]

Hi.. Dear all and Jason,

Thank you teaching me, but I need to ask one more question

I need to know whether my https traffic can be passed thru from my WAN
router to particular site?  What command I need to use?  I use traceroute to
trace the packet from my WAN router to the site but it failed but I want to
know what kind of traffic did traceroute command generated? As I tried to
ping that site, it does response but my application software which based on
https traffic cannot reach there. Pls guide me

Tong



-Original Message-
From: Jason Roysdon [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 02, 2000 8:45 PM
To: '[EMAIL PROTECTED]'
Subject: Re: Is there a command to view what kind of traffic in router's
s eria l port


If you have ip route-cache enabled on an interface, the following will work:
show ip cache flow

--
Jason Roysdon, CCNA, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Sim, CT (Chee Tong)"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Dear all,
>
> Is there a command to view what kind of traffic eg FTP, TELNET passing
thru
> the router's serial port?
>
> Tong
>
> ==
> De informatie opgenomen in dit bericht kan vertrouwelijk zijn en
> is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht
> onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en
> de afzender direct te informeren door het bericht te retourneren.
> ==
> The information contained in this message may be confidential
> and is intended to be exclusively for the addressee. Should you
> receive this message unintentionally, please do not use the contents
> herein and notify the sender immediately by return e-mail.
>
>
> ==
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


==
De informatie opgenomen in dit bericht kan vertrouwelijk zijn en 
is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht 
onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en 
de afzender direct te informeren door het bericht te retourneren. 
==
The information contained in this message may be confidential 
and is intended to be exclusively for the addressee. Should you 
receive this message unintentionally, please do not use the contents 
herein and notify the sender immediately by return e-mail.


==

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Cannot load flash.

[oluwakemi ojo]

I have two routers(Cisco 1610). At boot up the first router gave "Loadprog: 
bad file magic number : 0x0"
  " boot: cannnot load flash"

and the Second router at boot up decompressed the image file and then gave 
this error " % error opening tftp://255.255.255.255/1:aaa1317.bin(Timeout )
Sleeping for 2 secs before next netboot attempt".

I used tftp to download a working image file from a working router to the 
TFTP Server. Attempt at using the "tftpdnld" command from the rommon mode in 
fixing the above problems was unsuccessful.

Is there anything I am doing wrong.

Regards.
Moses.
_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Cannot load flash.

[oluwakemi ojo]

I have two routers(Cisco 1610). At boot up the first router gave "Loadprog: 
bad file magic number : 0x0"
   boot: cannnot load flash"

and the Second router at boot up decompress the image file and then gave 
this error " % error opening tftp://255.255.255.255/1:aaa1317.bin(Timeout )
Sleeping for 2 secs before next netboot attempt.

I used tftp to download a working image file from a working router to the 
TFTP Server. Attempt at using the "tftpdnld" command from the rommon mode in 
fixing the above problems was unsuccessful.

Is there anything I am doing wrong.

Regards.
Moses.
_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

access-lists and NAT (PAT)

[Schimek, Hans]

Hi !

concerning access lists with nat !
is there any problem combining access-lists with PAT ?

i configured PAT on the serial external interface and an outgoing
access-list
on the ethernet interface ( where our customer connects his equipement  -
using 192.168.4.x addresses ) - on static mapping
for his exchange server !

outgoing packets are translated and send out but response packets are
dropped - though i configured
tcp established - 
could this be any problem, configuring the access-list after doing network
address translation . ? :


ip nat pool inside source list 1 interface serial 0/0:0 netmask
255.255.255.248 overload 
ip nat inside source static 192.168.4.2 x.x.x.100


access-list 1 permit 192.168.4.0 0.0.0.255
access-list 100 permit ip host 195.x.x.x.x host 192.168.4.2
access-list 100 permit ip host 195.x.x.x host 192.168.4.2
access-list 100 permit tcp any any established

thanx in advance

hans

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: hub-and-spoke

[SAM Meng Wai]

Hub-and-spoke topology refer to the role of router in the networking
world. Spoke router send out request and receive request but not passing
the request from one interface to the other interface in the router.

This function will be perform by the Hub router. For example,

- Router A direct connect to Router B
- Router C direct connect to Router B
- Router B direct connect to both router A and C

Router A and C are the spoke router and router B is Hub router.
Router A can ping to router B and router C can ping to router B.
Router A is unable to ping to router C as they don't have direct
connection. However, since router B is acting as a Hub. It will translate
the ping packet so that router A is able to ping router C without any direct

connection.

Rgds,
Sam

> -Original Message-
> From: Hook Soso [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, December 04, 2000 3:51 PM
> To:   [EMAIL PROTECTED]
> Subject:  hub-and-spoke
> 
> Could someone tell me what's the meaning of hub-and-spoke topology?
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

BSCN questions --need help

[Mahesh Gupta]

Hi,

Attached are some of the BSCN questions which are creating lot doubts in
my mind. I found these questions on one of the web site while preparing
for BSCN exam. Please help me in understanding them as web site's
evaluation said that my answers were wrong.

Please spare some time for these questions.. if possible today...

Thanks a lot.

Regards,
Mahesh



Here are the questions with my answers :-


Question 9 of 40.
Which OSPF mode of operation is not supported over NBMA
topologies on a Cisco router?
   A. Broadcast
   B. Nonbroadcast point-to-point
   C. Nonbroadcast multi-access
   D. Point-to-point
   E. Point-to-multipoint
My answer :-  E as it is RPC mode and is not supported in some scenarios
e.g. IP over ATM. Here I tried with option B as well but
that was also wrong.

Question 10 of 40.
What generates an OSPF type-2 LSA?
   A. ABRs
   B. ASBRs
   C. DRs
   D. BDRs
   E. Each router for each area to which it belongs
My answer :- C as Type 2  LSA's are Link LSA's.

Question 13 of 40.
Given the following configuration:

outer ospf 20
network 10.3.3.2 0.0.0.0 area 0
network 10.4.4.1 0.0.0.0 area 3
network 10.5.0.0 0.0.255.255 area 3
area 0 range 10.3.0.0 255.255.0.0
area 3 range 10.4.4.0 255.255.255.0
area 3 range 10.5.0.0 255.255.0.0

Which statement about the difference between the effects of line 6 and
the effects of line 7 is true?
   A. Line 6 advertises a single subnet into area 3 while line 7
advertises all subnets into area 3
   B. Line 6 generates a host advertisement while line 7 generates a
subnet advertisement
   C. Line 6 creates a more specific entry in the routing table of a
router belonging to area 3 than does line 7
   D. Line 6 advertises a single subnet into area 0 while line 7
advertises all subnets into area 0
My answer :-C seems to most logical...


Question 27 of 40.
Which of the following best completes the following statement?

When configuring EIGRP for WAN interfaces, the BANDWIDTH statement is
_.
  A. required for Frame Relay only
   B. required for subinterfaces only
   C. not required
   D. only used for multipoint circuits
My answer :- no clue as very generic question guess was A or D but
both were wrong. I thought A becasue specially in
framerelay multipoint networks we put bandwidth but not necessarily only
on subinterfaces. We may want to use the bandwidth
command directly on a interface so that we can change the default value
of T1 (1.544MB).

Question 29 of 40.
When using Enhanced IGRP in large scalable networks, why is additional
EIGRP configuration required?
   A. To be hierarchical
   B. To adjust only WAN bandwidth because EIGRP is preconfigured (Plug
and Play)
   C. To be monitored by the administrator
   D. To create manually entered summary routes
My answer :-  I tried A and D but both were wrong. any clue

Question 37 of 40.
Which is not a benefit of manual route summarization in EIGRP
networks?
   A. Smaller routing tables
   B. Boundaries for query packets
   C. More rapid convergence
   D. A route to the null interface
My answer :-  C becasue if we limit query boundry, rapid concergence
will automatically happen ??

Question 38 of 40.
Which statement about an extended IP access list is true when
configuring a distribute-list to filter BGP route advertisements on a
Cisco router?
   A. It cannot be used; only standard IP access lists can be configured

   B. It can be used, to specify the source and destination IP address
of the routes
   C. It can be used, to specify the network number and subnet mask of
the routes
   D. It can be used, with a different syntax than the usual use of the
extended IP access list
My answer :-  Tried B and D but was wrong ?? no idea ..

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: 802.1q between HP and Cisco

[Elias Aggelidis]

When you are using 802.1q
DO NOT use the management VLAN (I mean VLAN 1)

Vlan 1 on the ISL trunks is used only for management (as CISCO says)
and Vlan 1 is the default Trunk Vlan on 802.1q.

If you use VLAN 1 on the 802.1q you will find out that big packets (> 1482 )
would not be processed correct !!

Regards

Elias

P.S.
I have found out this with the hard way. After 4 hours trying to make the Cat
4000
to switch big packets on the VLAN 1, I have found out that VLAN 1 when it is
used for trunking connections it can not switch big packets.
- Original Message -
From: "Brian" <[EMAIL PROTECTED]>
To: "Ben Hockenhull" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, December 04, 2000 12:42 AM
Subject: Re: 802.1q between HP and Cisco


>
> Don't use vlan 1, the native vlan, for trunking to the 4000.  Use vlans
> 2-9 instead of 1-8
>
> On Sun, 3 Dec 2000, Ben Hockenhull wrote:
>
> > Folks,
> >
> > I have a Cat6509 here that I'm trying to configure to do 802.1q VLAN
> > trunking between itself and an HP ProCurve 4000M switch.
> >
> > I've run into a problem, though.  I have 8 vlans configured on both
> > switches, 802.1q ID 1-8.  The vlan *names* on either end match except for
> > the first vlan.  On the HP, it's 'vlan1'.  On the Cat, it's 'default'
> > because it cannot be changed, which is annoying.  The vlan IDs match
> > throughout.
> >
> > I can ping devices on any of the vlans except for vlan 1, from the Cat.  I
> > cannot get any connectivity from the Cat to the HP on vlan1.  If I disable
> > tagged vlans on the HP, I can get ping to vlan1, even while 802.1q is
> > enabled on the Cat.
> >
> > Just for fun, I changed the name of vlan1 on the HP to 'default' and it
> > had no effect, so it doesn't seem to be some weirdness with plain english
> > identifiers.
> >
> > Now for the really weird part.  If I configure the trunk on the HP to be
> > untagged on vlan1 and tagged on all other vlans, I seem to get
> > connectivity to all vlans from the Cat.
> >
> > Is there something inherently funky about vlan 1 on the cisco stuff?  It's
> > really odd that all the other vlans work if configured to be tagged at
> > both ends, and the config for all 8 vlans is the same at both ends.
> >
> > This is driving me crazy.
> >
> > Ben
> >
> > --
> > Ben Hockenhull
> > [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> ---
> Brian Feeny, CCNP, CCDP   [EMAIL PROTECTED]
> Network Administrator
> ShreveNet Inc. (ASN 11881)
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: why can ping but traceroute stop half way

[SAM Meng Wai]

Hope i can answer your questions. Some of the routers disable ICMP
response. Thus, they will not reply you but able to route packet through
and the host you ping to will reply your ICMP packets.

Rgds,
Sam


> -Original Message-
> From: Sim, CT (Chee Tong) [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, December 04, 2000 5:05 PM
> To:   [EMAIL PROTECTED]
> Subject:  why can ping but traceroute stop half way
> 
> Hi..Dear all,  
> 
> i wonder why I can ping to a site but when I do a traceroute stop half
> way..
> I thought traceroute are based on ICMP as well??  See below
> 
> 
> sin-uunet>ping 210.24.136.242
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 210.24.136.242, timeout is 2 seconds:
> !
> Success rate is 100 percent (5/5), round-trip min/avg/max = 32/96/156 ms
> sin-uunet>traceroute 210.24.136.242
> 
> Type escape sequence to abort.
> Tracing the route to 210.24.136.242
> 
>   1 Loopback0.GW2.SIN1.Alter.Net (210.80.0.25) 12 msec 12 msec 12 msec
>   2 322.ATM5-0-0.XR2.SIN1.Alter.Net (210.80.3.65) 8 msec 12 msec 8 msec
>   3 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 12 msec 12 msec 8 msec
>   4 202.95.96.30 20 msec 16 msec 16 msec
>   5 scipk017.pacific.net.sg (203.120.90.17) 12 msec 16 msec 16 msec
>   6 202.42.42.234 20 msec 92 msec 36 msec
>   7  *  *  *
>   8  *  *  *
>   9  *  *  *
> 
> ==
> De informatie opgenomen in dit bericht kan vertrouwelijk zijn en 
> is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht 
> onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en 
> de afzender direct te informeren door het bericht te retourneren. 
> ==
> The information contained in this message may be confidential 
> and is intended to be exclusively for the addressee. Should you 
> receive this message unintentionally, please do not use the contents 
> herein and notify the sender immediately by return e-mail.
> 
> 
> ==
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: picture of router?

[Zhang Benjamin-QCH1696]

Hi,

you can get them from CiscoWorks. there's a directory full of pictures of router, NM 
and WIC.

Ben.

-Original Message-
From: jeongwoo park [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 01, 2000 11:49 AM
To: [EMAIL PROTECTED]
Subject: picture of router?


Hi all
Do you know any website that shows the back of the
cisco routers in clear picture?
Thanks in adv.
jw

__
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: High availability with Cisco PIX.

[Girish G. Pai]

As per my knowledge goes Cisco PIX does not support HSRP, but it does
support Failover. To have this feature you need to have another PIX hardware
of the similar configurations. During normal condition failover unit will
work as monitor. You can also have "statefull" failover wherein active
sessions need not be re-started during changeover, but feature needs to have
a dedicated Ethernet port towards the both PIX units.


Girish

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Ryan Ngai Hon Kong
> Sent: Monday, December 04, 2000 1:37 PM
> To: '[EMAIL PROTECTED]'
> Subject: High availability with Cisco PIX.
>
>
> Does anyone know if Cisco PIX could provide redundant or fail-over, work
> hand-in-hand with HSRP?
>
> Ryan Ngai @ ENT
> E-mail: hkngaiExt:6805
>
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and
> Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Static Routes

[Hussam Adili]

Hi everyone,

I looking for an answer to the following questions:
1) How many equal path cost static routes to the same destination
network can a cisco router support.
2) how Can traffic be load shared between two redundant links on 1 to 3
ratio  using static routing  (i.e. 1 packet on one interface and 3
packets on the other.)

Your help is highly appreciated

--
Hussam N. Adili

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Off Topic - Household Configuration Problem

[Bradley J. Wilson]

Following is the configuration in question:

Process Home
Wife 1  (she is, after all, number one in my book :->)
Nag off
   ^ you might get an error there, Chuck...I'm not aware of any platform
that supports this configuration. ;-)

BJ



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Fast Ethernet MTU Size

[Darren Ward]

Ethernet can indeed run at a higher MTU as our discussion showed, in fact we are 
trying to get hold of some 2FE cards to do just that, we already run MTU4470 on our 
gig to gig links but remember these do not go through any switches but are router to 
router only so fixed MTU ports are avoided.

Now a giant is only detected if the packet was over 4470 not 1500 (Have tested that 
already).

However back to your point, you can't raise a normal ethernet or single port fast 
ethernet card to more than 1500 bytes and most switches don't like a higher MTU either.

Still it is possible, does work and changes the sizes of giants automatically as the 
MTU is modified.

Darren

Tony van Ree wrote:

> Hi all,
>
> I was under the impression that an ethernet frame had a maximum size of 1500 bytes.  
>This did not include the addresses or the FCS.  To increase the MTU beyond that size 
>would indeed create a giant on ethernet.  As it is you will find some devices give an 
>error message when including an ISL header.  (A gig port on a 2984 is a good example) 
> In the case of the 2984 the data still goes through ok but when you get a packet 
>over 1484 bytes an whack it through the port the error rate rises.   Anything small 
>is ok.
>
> It does seem to me that the basic ethernet standards define the max MTU pretty well.
>
> I could however have mis understood all these years.
>
> Thanks,
>
> Teunis,
> Hobart, Tasmania
> Australia.
>
> On Saturday, December 02, 2000 at 12:25:13 AM, Kevin Wigle wrote:
>
> > there is a "mtu" command.
> >
> > In a somewhat similar situation - I had built a circuit using lan emulation
> > that terminated on a bvi on a 7505.
> >
> > The bvi had an ip address and placed into an OSPF area.
> >
> > I'm not aware of the defaults with a router that has both ATM and ethernet
> > but I didn't take notice of the mtu that the bvi had - I assumed that it was
> > just like an ethernet interface
> >
> > On the distant end of the lan emulation was an ordinary router with an
> > ethernet interface and it was also configured into the OSPF area.
> >
> > However, OSPF didn't work.  debugging showed that an adjacency wasn't being
> > formed.
> >
> > Turning up yet more debugging - finally an error about "mtu size not equal"
> > was noticed.
> >
> > sure enough, the bvi had the ATM mtu of 4470..
> >
> > using the mtu command on the bvi interface "mtu 1500", the adjacency formed
> > immediately and all was well.
> >
> > so, my guess would be that a fast ethernet probably has the same "mtu"
> > command, try it out.
> >
> > Kevin Wigle
> >
> > - Original Message -
> > From: "Darren Ward" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Friday, 01 December, 2000 22:02
> > Subject: Fast Ethernet MTU Size
> >
> >
> > > Hi All,
> > >
> > > Is it at all possible to raise the MTU size on Fast Ethernet?
> > >
> > > I'll give you all a scenario
> > >
> > > ATM on one side with an MTU of 4470, fast ethernet connecting the two
> > > routers, Gigabit Ethernet the other side with an MTU of 4470.
> > >
> > > How can I raise the MTU of a Full Duplex Fast Ethernet Connection above
> > > 1500?
> > >
> > > I assume it's not possible when going through switched as they will show
> > > every packet as a giant but in a router to router cross-over connection
> > > I was hoping there was some way to keep the MTU static across the path
> > > rather than force the routers to fragment and re-assemble (of course the
> > > destination re-assembles).
> > >
> > > Darren Ward
> > > CCNP, CCDP, CCIE Wannabee
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> > _
> > FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
>
> --
> www.tasmail.com
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Fast Ethernet MTU Size

[Darren Ward]

Priscilla Oppenheimer wrote:

> Some sort of maximum is necessary, of course, in order to assure fairness.
> The myths about the maximum having something to do with making CSMA/CD work
> correctly are inaccurate, (not that anyone said that in this thread). The
> myths are a mistake by analogy. The minimum size frame is necessary for
> CSMA/CD to work correctly.

Totally agree, you simply can't get around (nor should you want to get around) the
minimum packet size because of the whole collision detection (magic 32 bit
time/distance) issue.

But as I've seen the MTU can indeed be set much higher, but relatively few cards/ports
support it.

Gigabit ports and 2FE cards are the only exception I've found so far but the 
performance
boost this gives some router to router traffic such as BGP is quite significant.

We have iBGP between GSR's in one area and the convergence and transfer times are
phenomenal.

Darren

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: why can ping but traceroute stop half way

[Brandon Peyton]

Weird.

Within UUNET network from AU:

Tracing route to 210.24.136.242 over a maximum of 30 hops

  1   110 ms   110 ms   110 ms  tnt7.syd2.da.uu.net [63.12.31.206]
  2   101 ms   100 ms   110 ms  63.12.150.1
  3   100 ms   111 ms   100 ms  351.ATM3-0-0.XR1.SYD2.Alter.Net
[210.80.3.225]
  4   100 ms   120 ms   121 ms  ATM5-0-0.TR1.SYD2.Alter.Net [210.80.48.133]
  5   581 ms   600 ms   591 ms  296.ATM9-0-0.TR1.SIN1.Alter.Net
[210.80.48.173]

  6   580 ms   591 ms   591 ms  POS1-0-0.XR1.SIN1.Alter.Net [210.80.48.50]
  7   641 ms   611 ms   591 ms  311.ATM5-0-0.GW1.SIN1.Alter.Net
[210.80.3.42]
  8   591 ms   581 ms   591 ms  202.95.96.30
  9   580 ms   591 ms   591 ms  scipk017.pacific.net.sg [203.120.90.17]
 10  1522 ms   821 ms   872 ms  202.42.42.234
 11   791 ms   921 ms   831 ms  210.24.136.242


Tracing from GW2.SIN1(where you're connected)...from SG

GW2.SIN1#tr 210.24.136.242

Type escape sequence to abort.
Tracing the route to 210.24.136.242

  1 422.ATM8-0-0.XR1.SIN1.Alter.Net (210.80.3.45) 0 msec
  2 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 4 msec
  3 202.95.96.30 188 msec 368 msec 484 msec
  4 scipk017.pacific.net.sg (203.120.90.17) [AS 4628] 176 msec 116 msec 136
msec
  5 202.42.42.234 [AS 4628] 204 msec 116 msec 120 msec
  6  *  *  *

Would anyone like to explain why (still in uunet network) this happens?
Without doing much research(cuz im at home)...

Thanks,
Brandon



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
SAM Meng Wai
Sent: Monday, December 04, 2000 2:11 AM
To: 'Sim, CT (Chee Tong)'; [EMAIL PROTECTED]
Subject: RE: why can ping but traceroute stop half way


Hope i can answer your questions. Some of the routers disable ICMP
response. Thus, they will not reply you but able to route packet through
and the host you ping to will reply your ICMP packets.

Rgds,
Sam


> -Original Message-
> From: Sim, CT (Chee Tong) [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, December 04, 2000 5:05 PM
> To:   [EMAIL PROTECTED]
> Subject:  why can ping but traceroute stop half way
>
> Hi..Dear all,
>
> i wonder why I can ping to a site but when I do a traceroute stop half
> way..
> I thought traceroute are based on ICMP as well??  See below
>
>
> sin-uunet>ping 210.24.136.242
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 210.24.136.242, timeout is 2 seconds:
> !
> Success rate is 100 percent (5/5), round-trip min/avg/max = 32/96/156 ms
> sin-uunet>traceroute 210.24.136.242
>
> Type escape sequence to abort.
> Tracing the route to 210.24.136.242
>
>   1 Loopback0.GW2.SIN1.Alter.Net (210.80.0.25) 12 msec 12 msec 12 msec
>   2 322.ATM5-0-0.XR2.SIN1.Alter.Net (210.80.3.65) 8 msec 12 msec 8 msec
>   3 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 12 msec 12 msec 8 msec
>   4 202.95.96.30 20 msec 16 msec 16 msec
>   5 scipk017.pacific.net.sg (203.120.90.17) 12 msec 16 msec 16 msec
>   6 202.42.42.234 20 msec 92 msec 36 msec
>   7  *  *  *
>   8  *  *  *
>   9  *  *  *
>
> ==
> De informatie opgenomen in dit bericht kan vertrouwelijk zijn en
> is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht
> onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en
> de afzender direct te informeren door het bericht te retourneren.
> ==
> The information contained in this message may be confidential
> and is intended to be exclusively for the addressee. Should you
> receive this message unintentionally, please do not use the contents
> herein and notify the sender immediately by return e-mail.
>
>
> ==
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: 802.1q between HP and Cisco

[Ben Hockenhull]

At 12:01 PM +0200 12/4/00, Elias Aggelidis wrote:
>When you are using 802.1q
>DO NOT use the management VLAN (I mean VLAN 1)
>
>Vlan 1 on the ISL trunks is used only for management (as CISCO says)
>and Vlan 1 is the default Trunk Vlan on 802.1q.
>
>If you use VLAN 1 on the 802.1q you will find out that big packets (> 1482 )
>would not be processed correct !!

What I ended up doing, after some prompting from Brian, was to change the
native vlan to something other than 1, at which point vlan 1 trunking
works.  I can put the management interface in any vlan I want on the 6k.

Ben


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Passed the CCIE Written

[Rishard Chapoteau]

Did you buy any books to study for the CCIE written aside from what you
studied for the CCNP, or did u just use the boson exams?  I recently
finished the CCNP,  and I plan on doing the CID this friday I'f I'm lucky.
I wanted to know if I need to get other books or if my current knowledge
with the boson will be enough.  Thanx.

Rishard


""Gordon Olson"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I want to say thank you, a BIG Thank You to Bernard who wrote the Boson
> tests for the CCIE. They are Super!! A few weeks ago I bought the MCNS
Boson
> Exam and received an email from Bernard. After a few emails back n' forth
he
> convinced me that I should go for the CCIE Written because he felt I was
85%
> there, being a CCNP. Well, I thought about it and went for it.
>
> Being a CCNP I have read a lot of books along the way that helped prepare
> me, but I did not know that, but Bernard did. I bought Both his tests for
> the CCIE and passed the written on the first attempt. The Exams are
written
> with Cisco links that help you develop areas that may be unclear. The
> answers are backed up with Excellent explanations so you really understand
> the concept. If you are going after the CCIE - these tests, BOSON CCIE
> Pre-qual, are a MUST!
>
> I apologize if I sound like a commercial or something but I thought it
would
> be a good idea to give these guys credit for writing an excellent test
prep
> tool for under $30 - you cannot beat that!
>
> Gordon Olson
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: another one passes the BSCN

[Bharat Suneja]

Congragulations!! What did you use to study for the BSCN ?

Thanks,

Bharat

""whitaker"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Just passed the BSCN today - thanks to everyone who helped answer my
routing
> questions!
>
> Although I did pass, I'm still going to go back and do some reviewing,
> particularly on redistribution.
>
> Three down, two to go...
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CiscoPress.com

[Bharat Suneja]

CiscoPress.com is back up, no ODBC erros, 6:17 AM on Monday. But the
products have probably not been populated in the database.. nothing shows up
in any of the catalogs - CCNA, CCDA, CCNP, et al. They're working on it I
guess.. but how's this any different or better than the previous site. I
fail to see any difference. :-)

Bharat Suneja

""Greg Reaume"" <[EMAIL PROTECTED]> wrote in message
90ba00$p6t$[EMAIL PROTECTED]">news:90ba00$p6t$[EMAIL PROTECTED]...
> Website is back up but I'm just getting Oracle ODBC driver errors on every
> page.  Can't see anything.  I've already e-mailed [EMAIL PROTECTED]
> because there is no [EMAIL PROTECTED]  No response yet.
>
> Is anyone else having the same problem?
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Passed the CCIE Written

[Bharat Suneja]

Gordon,

Congragulations!! And thanks a lot for the input on Boson. Unabashed praise
is quite justified if you feel a product or service has truly WOWed you.. I
think it's very helpful to know that the Boson test was incredibly helpful
in building your confidence and helping you learn what was required for the
CCIE Written.

Please keep us posted about the CCIE Lab - when you intend to take it, what
you used/will use to practice for it, what you read, and other helpful
stuff.

Regards,

Bharat Suneja

""Gordon Olson"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I want to say thank you, a BIG Thank You to Bernard who wrote the Boson
> tests for the CCIE. They are Super!! A few weeks ago I bought the MCNS
Boson
> Exam and received an email from Bernard. After a few emails back n' forth
he
> convinced me that I should go for the CCIE Written because he felt I was
85%
> there, being a CCNP. Well, I thought about it and went for it.
>
> Being a CCNP I have read a lot of books along the way that helped prepare
> me, but I did not know that, but Bernard did. I bought Both his tests for
> the CCIE and passed the written on the first attempt. The Exams are
written
> with Cisco links that help you develop areas that may be unclear. The
> answers are backed up with Excellent explanations so you really understand
> the concept. If you are going after the CCIE - these tests, BOSON CCIE
> Pre-qual, are a MUST!
>
> I apologize if I sound like a commercial or something but I thought it
would
> be a good idea to give these guys credit for writing an excellent test
prep
> tool for under $30 - you cannot beat that!
>
> Gordon Olson
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

OSPF question

[Elaluf, Sylvia,]

Hello everybody 

I need some help with the following:

Given the following

loopback 0
ip address 10.10.10.1 255.255.255.0

router ospf 1
network 10.0.0.0 0.0.0.255 area 0

sh ip route 10.10.10.1
known via connected loopback 0
distributed via ospf 1
 10.10.10.1 255.255.255.255

 what I want is to Advertise the loopback interface as class C and not host
specific route.

distributed via ospf 1
 10.10.10.1 255.255.255.0

How do I do that?

Silvia Elaluf-Calderwood  
[EMAIL PROTECTED]

"Only two things are infinite, the universe and human stupidity, and I'm not
sure about the former." 
- Albert Einstein



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: High availability with Cisco PIX.

[Yadav, Arvind K (CAP, GECIS)]

Ciso PIX does not support HSRP, but it support failover by using other PIX
box. You don't require a dedicated Ethernet port. It has a failover port you
to connect two PIX by using this failover port with failover cable

Arvind.


> -Original Message-
> From: Girish G. Pai [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, December 04, 2000 5:04 AM
> To:   Ryan Ngai Hon Kong; [EMAIL PROTECTED]
> Subject:  RE: High availability with Cisco PIX.
> 
> As per my knowledge goes Cisco PIX does not support HSRP, but it does
> support Failover. To have this feature you need to have another PIX
> hardware
> of the similar configurations. During normal condition failover unit will
> work as monitor. You can also have "statefull" failover wherein active
> sessions need not be re-started during changeover, but feature needs to
> have
> a dedicated Ethernet port towards the both PIX units.
> 
> 
> Girish
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Ryan Ngai Hon Kong
> > Sent: Monday, December 04, 2000 1:37 PM
> > To: '[EMAIL PROTECTED]'
> > Subject: High availability with Cisco PIX.
> >
> >
> > Does anyone know if Cisco PIX could provide redundant or fail-over, work
> > hand-in-hand with HSRP?
> >
> > Ryan Ngai @ ENT
> > E-mail: hkngaiExt:6805
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and
> > Nondisclosure violations to [EMAIL PROTECTED]
> >
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

how to config multilay switch modul internal interface in cat 6509

[kw.wong(Ah Wang)^_^]

Hi All :

I 've don't the cisco note about the MSM install/config.
But, some concept don't know ?

1 ) what is g/0/0/0 -g4/0/0/0 address ? between sub interface
g/0/0/0 is vlan1 or add vlan in sub interface .

2) how to assign the ip address in each interface ant sub interface port
channel 1.x

3) how to do the vlan routing between in vlan 1 to vlan 4.

4 )any exiting for me reference.

Thanks !

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

BGP Loadbalancing !

[Schimek, Hans]

my company is an internet-provider in austria.

the following situation.
one of our customers has his own network ( with own AS Number ) - currently 
he is connected to another ISP. but plans to connect to our network soon..
the problem in here is : if he connects to another ISP - he intends to do 
loadbalancing across two ISP. 
my question : is it possible to loadbalance across multiple ISPs.

 
--NETWAY-\
ViennaInternetExchange
CUSTOMER
   ---COLT
TELECOM--/



thanx in advance
   

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Static Routes

[Brian]

On Mon, 4 Dec 2000, Hussam Adili wrote:

> Hi everyone,
>
> I looking for an answer to the following questions:
> 1) How many equal path cost static routes to the same destination
> network can a cisco router support.

usually 4 by default, but expandable to 6 with the maximum-paths command.

> 2) how Can traffic be load shared between two redundant links on 1 to 3
> ratio  using static routing  (i.e. 1 packet on one interface and 3
> packets on the other.)

I don't believe you can do this.not "balancing" like that.  Do you
have something against running EIGRP on those links?

Brian


>
> Your help is highly appreciated
>
> --
> Hussam N. Adili
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

---
Brian Feeny, CCNP, CCDP   [EMAIL PROTECTED]
Network Administrator
ShreveNet Inc. (ASN 11881)

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CiscoPress.com

[Greg Reaume]

I don't understand why they wouldn't build & test this thing in the
background while the old one was still up.  It blows me away that they would
post a site with no database content.  Why even put it up!?  That under
construction message seemed to be fine with them to have it up before, why
the rush now!?


""Bharat Suneja"" <[EMAIL PROTECTED]> wrote in message
90gd2n$2om$[EMAIL PROTECTED]">news:90gd2n$2om$[EMAIL PROTECTED]...
CiscoPress.com is back up, no ODBC erros, 6:17 AM on Monday. But the
products have probably not been populated in the database.. nothing shows up
in any of the catalogs - CCNA, CCDA, CCNP, et al. They're working on it I
guess.. but how's this any different or better than the previous site. I
fail to see any difference. :-)

Bharat Suneja

""Greg Reaume"" <[EMAIL PROTECTED]> wrote in message
90ba00$p6t$[EMAIL PROTECTED]">news:90ba00$p6t$[EMAIL PROTECTED]...
> Website is back up but I'm just getting Oracle ODBC driver errors on every
> page.  Can't see anything.  I've already e-mailed [EMAIL PROTECTED]
> because there is no [EMAIL PROTECTED]  No response yet.
>
> Is anyone else having the same problem?
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

how to config multilay switch modul internal interface in cat 6509

[kw.wong(Ah Wang)^_^]

Hi All :

I 've don't the cisco note about the MSM install/config.
But, some consep don't know ?

1 ) what is g/0/0/0 -g4/0/0/0

2) how to assign the ip address in each interface ant sub interface port
channel 1.x

3) how to do the vlan routing between in vlan 1 to vlan 4.

4 )any exiting for me reference.

Thanks !

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

CiscoWorks 2000 Upgrade for Windows 2000

[Bharat Suneja]

Hi all,

A recent thread suggested CiscoWorks 2000 can now run on Windows 2000 Server
platform, and the Cisco web site also says the same thing.

Just wondering if anyone knows of any upgrades to older CiscoWorks 2000
software (the one that runs on Win NT Server 4.0 w/SP5 - and it's not SP5
and above, but specifically SP5!! It will not run with SP6 installed!!
Weird!) that makes it Windows 2000 compatible.

Thanks in advance for the reply,

Bharat Suneja



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

CATM 2.1 study notes

[Brian]

I leave in a few minutes to take the CATM 2.1 test.  I have been studying
mostly material from the official CATM 2.1 class, cisco.com, and the boson
tests.  I have assembled information into study notes that I felt would
help me.

WARNING: This is FAR from complete.  I only put down information I felt
could be bulleted easily.  I didn't put anything down about LANE 1/2,
MPOA, SSRP, and tons of other stuff.  Don't think this is some blueprint
to the test, read it and try to take it, because you will fail :).

However if you are studying for CATM 2.1, you may find some of this
helpfull to glance at.  Lots of acronyms in CATM 2.1.

If anyone has any study notes for CVOICE or MCNS please email them to me,
I am taking MCNS in a few days, and CVOICE in about 2 weeks.

Brian


ATM Interface Types specified by ATM Forum
==
100-Mbps 4B/5B over MMF TAXI
155-Mbps OC-3c over MMF SONET
155-Mbps OC-3c over SMF SONET
45-Mbps DS3 over coax
34-Mbps E3 over coax
155-Mbps 8B/10B over MMF
155-Mbps 8B/10B over SMF
25-Mbps over UTP
1.544-Mbps T1 (Over TP)
2.048-Mbps E1 (Over TP and Coax)
nxT1 IMA (Over TP)
nxE1 IMA (Over TP and coax)
155-Mbps STS-3c over UTP-5
622-Mbps OC-12c over SMF SONET
51.84-Mbps STS-1 over UTP-3
2.5-Gbps OC-48 over SMF SONET

Well Known VPI/VCI's

Signaling   x/5 0/5
ILMIx/160/16
LECSx/170/17
PNNIx/180/18

Traffic Parameters
==
PCR Peak Cell Rate
SCR Sustainable Cell Rate
MBS Maximum Burst Size
MCR Minimum Cell Rate   (ABR Only)

QoS Parameters
==
MCTDMaximum Cell Transfer Delay
CDVTCell Delay Variation Tolerance
CLR Cell Loss Ratio

Traffic Classifications - Service Categories
(Traffic Parameters Used)

CBR Constant Bit Rate (PCR)
VBR-RT  Variable Bit Rate Real Time (PCR, SCR, MBS)
VBR-NRT Variable Bit Rate Non Real Time (PCR, SCR, MBS)
UBR Unspecified Bit Rate (None)
ABR Available Bit Rate (PCR, MCR)

ATM Adaptation Layers
=
AAL1CBR Connection-Oriented
AAL2VBR Connection-Oriented
AAL3/4  UBR Connectionless
AAL5ABR Connection-Oriented
UBR
VBR
CBR


ATM Signalling is based on ITU -T Q.2931


UNI 4.0
===
Multicast support (Leaf initiated joins (LIJ, Anycast addressing)
Signaling of individule QoS paramters
ABR signaling
Proxy siganling
Virtual UNI

Soft PVC's are established MANUALLY across UNI
   DYNAMICALLY across NNI

UNI Connection Types

Point to Point  Unidirectional
Bidirectional
Point to Multipoint Unidirectional

ATM Adressing Formats
=
ICD has AFI of 47
DCC has AFI of 39
E.164   has AFI of 45

RFC1483 encapsulation types
===
aal5mux VC Multiplexing Single protocol per VC
aal5snapLLC/SNAP encapsulation  Multiprotocols over VC

VC multiplexing is also known as "null encapsulation"

ATM Router Interfaces
=
NPM Cisco 4500/4700
AIM Cisco 7000
CES-PA  Cisco 7200

AIM
  Physical Layer Interface Modules (PLIMs)
  =
  155-Mbps STS-3c SONET/SDH MMF
  connectors: one duplex SC or two simplex SC

  155-Mbps STS-3c SONET/SDH SMF
  connectors: ST2

  100-Mbps TAXI 4B/5B MMF
  connectors: MIC

  34-Mbps E3/45Mbps DS-3
  connectors: 75ohm RG-59 Coax

  AAL encapsulation types
  ===
  aal5snap
  aal5mux
  aal5nlpid
  aal34smds
  qsaal
  ilmi

  Max-bandwidth for all AIP's total: 200Mbps

  Default MTU: 4470

  Max VC's: 2048

  RFC1483 Multiprotocol Support: IP, IPX, DECnet,
 Appletalk, CLNS,
 XNS, VINES

  Rate Queues: 8 (4 low, 4 high)

  AIP MIBs: LEC, RFC1695 AToM, RFC1407 DS3,
RFC1595 SONET/SDH, ATM ILMI

NPM
  One per 4500/4700

  Max VC's: 1024

  OC-3, STS-3c/STM-1, DS-3, E3 Physical Interfaces

  Rate-Queues: 4

  RFC1483 Multiprotocol Support: IP, IPX, DECnet,
 Appletalk, CLNS,
 XNS, VINES

CES-PA
  CES interfaces: 4xT1, 4xE1 (structured or unstructured)
  Trunk interfaces: OC-3 (SM), DS3, E3

  Clocking from: SRTS, Adaptive

  Max VC's: Over 2000

  Max VP's: 64

  Traffic Shaping per VC or VP

  Managed via: IOS CLI, Web, CiscoView


LS1010
==
ASP can be installed in slot 13 of a Cat 5500
can be installed in slot 2  of a LS1010

5Gbps switch fabric

Same chassis as Cat 5000

4 Carrier Modules, each holds 2 Port Adapter Modules
   each can do 1.2Gbps

8 Port Adapter Modules max
Up to 622Mbps per port adapter

ASP - up to 64MB DRAM (16MB Standard)
  up to 16MB Flash (8MB Standard)

Feature Card - a daughter card that goes inside the ASP
   Allows for Intelligent packet discard (TPD/E

Re: 802.1q between HP and Cisco

[Brian]

Nod, I found that out when trying to trunk a Foundry FastIron II to a
Cisco router.  You can however change the native vlan to something like
say "50", and then that will allow you to use vlan 1 (just not 50).

Brian


On Mon, 4 Dec 2000, Elias Aggelidis wrote:

> When you are using 802.1q
> DO NOT use the management VLAN (I mean VLAN 1)
>
> Vlan 1 on the ISL trunks is used only for management (as CISCO says)
> and Vlan 1 is the default Trunk Vlan on 802.1q.
>
> If you use VLAN 1 on the 802.1q you will find out that big packets (> 1482 )
> would not be processed correct !!
>
> Regards
>
> Elias
>
> P.S.
> I have found out this with the hard way. After 4 hours trying to make the Cat
> 4000
> to switch big packets on the VLAN 1, I have found out that VLAN 1 when it is
> used for trunking connections it can not switch big packets.
> - Original Message -
> From: "Brian" <[EMAIL PROTECTED]>
> To: "Ben Hockenhull" <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Monday, December 04, 2000 12:42 AM
> Subject: Re: 802.1q between HP and Cisco
>
>
> >
> > Don't use vlan 1, the native vlan, for trunking to the 4000.  Use vlans
> > 2-9 instead of 1-8
> >
> > On Sun, 3 Dec 2000, Ben Hockenhull wrote:
> >
> > > Folks,
> > >
> > > I have a Cat6509 here that I'm trying to configure to do 802.1q VLAN
> > > trunking between itself and an HP ProCurve 4000M switch.
> > >
> > > I've run into a problem, though.  I have 8 vlans configured on both
> > > switches, 802.1q ID 1-8.  The vlan *names* on either end match except for
> > > the first vlan.  On the HP, it's 'vlan1'.  On the Cat, it's 'default'
> > > because it cannot be changed, which is annoying.  The vlan IDs match
> > > throughout.
> > >
> > > I can ping devices on any of the vlans except for vlan 1, from the Cat.  I
> > > cannot get any connectivity from the Cat to the HP on vlan1.  If I disable
> > > tagged vlans on the HP, I can get ping to vlan1, even while 802.1q is
> > > enabled on the Cat.
> > >
> > > Just for fun, I changed the name of vlan1 on the HP to 'default' and it
> > > had no effect, so it doesn't seem to be some weirdness with plain english
> > > identifiers.
> > >
> > > Now for the really weird part.  If I configure the trunk on the HP to be
> > > untagged on vlan1 and tagged on all other vlans, I seem to get
> > > connectivity to all vlans from the Cat.
> > >
> > > Is there something inherently funky about vlan 1 on the cisco stuff?  It's
> > > really odd that all the other vlans work if configured to be tagged at
> > > both ends, and the config for all 8 vlans is the same at both ends.
> > >
> > > This is driving me crazy.
> > >
> > > Ben
> > >
> > > --
> > > Ben Hockenhull
> > > [EMAIL PROTECTED]
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> > ---
> > Brian Feeny, CCNP, CCDP   [EMAIL PROTECTED]
> > Network Administrator
> > ShreveNet Inc. (ASN 11881)
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

---
Brian Feeny, CCNP, CCDP   [EMAIL PROTECTED]
Network Administrator
ShreveNet Inc. (ASN 11881)

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: I need Boson Cisco Test Pack v3.22 demo for download !

[John Hardman]

It might be just as likely that he has Win2K which has lots of problems
running the current 3.34 tests. I know I had to build out a NT 4 box to run
the current tests.

$0.02
--
John Hardman CCNP MCSE+I


""Clayton Price"" <[EMAIL PROTECTED]> wrote in message
90flq2$327$[EMAIL PROTECTED]">news:90flq2$327$[EMAIL PROTECTED]...
> A lot has been upgraded since 3.22.  Let me guess, you can't find a crack
> for anything newer than version 3.22
>
>
> ""Romeo"" <[EMAIL PROTECTED]> wrote in message
> 90fceq$df2$[EMAIL PROTECTED]">news:90fceq$df2$[EMAIL PROTECTED]...
> > Hi there!
> >
> > Please, from where can I download Boson Cisco Test Pack v3.22 demo? It
> > missing on Boson site.
> >
> > TIA
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: OSPF question

[Adam Hickey]

Correct me if I am wrong, but I don't think you can advertise a class C if
the address is assigned to the loopback. Because the router is not aware of
any network, only that address. I believe you would have to assign the ip to
an eth interface (or any other besides lo0) which would be known to the
router as a network directly connected and thus able to be advertised.

Please correct this if it is incorrect.

Adam Hickey
[EMAIL PROTECTED]

- Original Message -
From: "Elaluf, Sylvia," <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, December 04, 2000 6:10 AM
Subject: OSPF question


> Hello everybody
>
> I need some help with the following:
>
> Given the following
>
> loopback 0
> ip address 10.10.10.1 255.255.255.0
>
> router ospf 1
> network 10.0.0.0 0.0.0.255 area 0
>
> sh ip route 10.10.10.1
> known via connected loopback 0
> distributed via ospf 1
>  10.10.10.1 255.255.255.255
>
>  what I want is to Advertise the loopback interface as class C and not
host
> specific route.
>
> distributed via ospf 1
>  10.10.10.1 255.255.255.0
>
> How do I do that?
>
> Silvia Elaluf-Calderwood
> [EMAIL PROTECTED]
>
> "Only two things are infinite, the universe and human stupidity, and I'm
not
> sure about the former."
> - Albert Einstein
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCDA Question

[Bharat Suneja]

I don't think the CCDA exam changed.. there's no old version new version
confusion here. I took it about couple of weeks ago - it's still the DCN
test 640-441. Go for it!

Bharat Suneja


""Jeff Douglas"" <[EMAIL PROTECTED]> wrote in message
90ejil$nm7$[EMAIL PROTECTED]">news:90ejil$nm7$[EMAIL PROTECTED]...
> I have recently passed the CCNA exam and I have the old version of the
Cisco
> Press CCDA book. Does this book contain enough information for me to be
> successful with the CCDA ver 2 exam?
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

CCIE Prep: WAS: CCIE LAB Groupstudy list

[Chuck Larrieu]

Sam, the first place to start your preparation is on CCO  www.cisco.com

Follow the links to certification, and eventually CCIE certification.
Everything you need to know to begin the process can be found there. This
included suggested reading, description of the process, and suggested
preparations. Once you have read through this documentation ( I recommend
printing it out and keeping it handy for reference ) you can begin your
preparations from a place of understanding.

One of the books on the recommended reading list is Jeff Doyle's Routing
TCP/IP. Often overlooked because of the wealth of excellent content is
Appendix C, offering a preparation plan worth considering.

The journey can be long and hard and frustrating. But it is eminently
doable, if you want it, and do the work.

Best wishes.

Chuck

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of SAM
Meng Wai
Sent:   Sunday, December 03, 2000 10:08 PM
To: 'ElephantChild'; Brian
Cc: Paul Borghese; Nigel Taylor; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject:RE: CCIE LAB Groupstudy list

Do anyboody have any information of taking CCIE Lab Test. How can
i prepare for this exam ?

Rgds,
Sam


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BGP Loadbalancing !

[McCallum, Robert]

I would say yes.  All he needs is a policy which could say for example... if
you try to go to microsoft go through 1 ISP and any other site through the
other ISP.
In all - BGP can do whatever you want it to do - whatever the companies
policy is.
No flames please.


Robert McCallum CCNP CCDP
CCIE Written R&S 2 days to go!
CCIE Written Design 4 days to go!


-Original Message-
From: Schimek, Hans [mailto:[EMAIL PROTECTED]]
Sent: 04 December 2000 14:48
To: '[EMAIL PROTECTED]'
Subject: BGP Loadbalancing !


my company is an internet-provider in austria.

the following situation.
one of our customers has his own network ( with own AS Number ) - currently 
he is connected to another ISP. but plans to connect to our network soon..
the problem in here is : if he connects to another ISP - he intends to do 
loadbalancing across two ISP. 
my question : is it possible to loadbalance across multiple ISPs.

 
--NETWAY-\
ViennaInternetExchange
CUSTOMER
   ---COLT
TELECOM--/



thanx in advance
   

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

ATM Lane in switching 2.0(BCMSN)

[Waqar M]

Dear All,

Can someone plz tell me that does SWITCHING (BCMSN)exam contain ATM Lane 
questions??? I have completed my preparation and i m bit confused a bit that 
whether to prepare for LANE also or not. Moreover, any sort of final tips as 
i m going to have this exam after 3 days. Any sort of help will be highly 
appreciated.

Thanks,

Waqar M.
Network Engineer
_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: another one passes the BSCN

[Rah Sta]

Whitaker,

What materials did you use to study?


   Raheem


>From: "whitaker" <[EMAIL PROTECTED]>
>Reply-To: "whitaker" <[EMAIL PROTECTED]>
>To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
>Subject: another one passes the BSCN
>Date: Sat, 2 Dec 2000 13:36:14 -0800
>
>Just passed the BSCN today - thanks to everyone who helped answer my 
>routing
>questions!
>
>Although I did pass, I'm still going to go back and do some reviewing,
>particularly on redistribution.
>
>Three down, two to go...
>
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: I need Bcran exam advise from you, sir.

[Joseph Ezerski]

Young William, I just took BCRAN 24 hours ago.  It is still fresh in my
mind.  I will attempt to give you my impressions on the exam and how I
prepared.

I read Building Cisco Remote Access Networks by Catherine Paquet (A fine
Cisco Press publication).  I also used all three Boson test series covering
the same.  It took me about a week to read the book.  My peers said the book
was dry and a bit boring, but I found it to be rather enjoyable.  Anyway,
the book provided me with a strong foundation of the concepts.  The Boson
tests were slightly better than average and a good way to get yourself into
the frame of mind to take a test.  Once I had mastered the Boson exmas, I
took the test.  I passed with an 887.

On the test, I saw a bunch of ISDN questions, from concepts and theory to
actual usage.  There were about 5-6 questions on DDR.  There were many
(about 12-15) questions where they ask you which Cisco command does this or
that.  They give you an exhibit to choose from 50 or so commands.  The way
they ask the question and the way the commands are listed in the exhibit,
they practically give the answer away.  There were the requisite Frame Relay
questions too.  Basic stuff there.  The few questions I saw on X25 were of
the most basic sort.  There were also about 5 questions on what particular
router would you put in a specific location (i.e. Central Office, Remote
Location or SOHO)  There were about 2 very general questions on the Cisco
700, and not very in depth questions at that.

There were also a few questions related to Dialer Groups, Dialer Lists and
Dialer Pools.  Enough to be annoying.

Finally, there were those few questions that Cisco likes to drop in there
that are totally ambiguous and serve only to shake your confidence.

I saw no blind "fill in the blank" type questions.

Hope all of this helps.  Good luck on your test!

Joseph

-Original Message-
From: william [mailto:[EMAIL PROTECTED]]
Sent: Sunday, December 03, 2000 7:43 PM
To: [EMAIL PROTECTED]
Subject: I need Bcran exam advise from you, sir.


Hi guys

I'm taking Bcran exam on coming wednesday.  Can you all guys advise me on
this?

Thanks.


William


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Passed the CCIE Written

[Jim Brown]

The questions are trickier and more detailed than the CCNP. The test also
covers all areas of the CCNP in a single seating.

I studied and sat the test last week. I finally decided to sit the test and
spend the $200 to get a feel for it. I expected a retake in the very near
future, but I passed! 

Read Doyle's TCP/IP bible and make sure you know your IBM network
technologies.

After sitting the exam it was clear as a bell. This exam is not there to
test the obscure areas of Cisco networking, it is to make sure you have some
foundation necessary for ATTEMPTING the lab. The exam is not for weeding out
candidates. The lab is what Cisco uses to weed out the candidates. 

The written exam is really to control the number of people attempting the
lab. I have to wait six months for an opening! I'm glad because I really
need the time for preparation.

Don't let the written exam scare you, it is more bark than bite. The lab
should be a different story.

-Original Message-
From: Rishard Chapoteau [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 04, 2000 6:29 AM
To: [EMAIL PROTECTED]
Subject: Re: Passed the CCIE Written


Did you buy any books to study for the CCIE written aside from what you
studied for the CCNP, or did u just use the boson exams?  I recently
finished the CCNP,  and I plan on doing the CID this friday I'f I'm lucky.
I wanted to know if I need to get other books or if my current knowledge
with the boson will be enough.  Thanx.

Rishard


""Gordon Olson"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I want to say thank you, a BIG Thank You to Bernard who wrote the Boson
> tests for the CCIE. They are Super!! A few weeks ago I bought the MCNS
Boson
> Exam and received an email from Bernard. After a few emails back n' forth
he
> convinced me that I should go for the CCIE Written because he felt I was
85%
> there, being a CCNP. Well, I thought about it and went for it.
>
> Being a CCNP I have read a lot of books along the way that helped prepare
> me, but I did not know that, but Bernard did. I bought Both his tests for
> the CCIE and passed the written on the first attempt. The Exams are
written
> with Cisco links that help you develop areas that may be unclear. The
> answers are backed up with Excellent explanations so you really understand
> the concept. If you are going after the CCIE - these tests, BOSON CCIE
> Pre-qual, are a MUST!
>
> I apologize if I sound like a commercial or something but I thought it
would
> be a good idea to give these guys credit for writing an excellent test
prep
> tool for under $30 - you cannot beat that!
>
> Gordon Olson
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: OSPF question

[Howard C. Berkowitz]

>"Elaluf, Sylvia," <[EMAIL PROTECTED]> wrote,



>Given the following
>
>loopback 0
>ip address 10.10.10.1 255.255.255.0
>
>router ospf 1
>network 10.0.0.0 0.0.0.255 area 0
>
>sh ip route 10.10.10.1
>known via connected loopback 0
>distributed via ospf 1
>  10.10.10.1 255.255.255.255
>
>  what I want is to Advertise the loopback interface as class C and not host
>specific route.
>
>distributed via ospf 1
>  10.10.10.1 255.255.255.0
>
>How do I do that?
>

First, what problem are you trying to solve?  I understand that you 
can advertise or not advertise the loopback, but why do you 
specifically want to advertise it as a /24?  In my past experience, 
however, there were differences in advertising it as a /32, a /30, 
and a shorter-than-/30.

There have been some modifications, over time, about how Cisco's 
implementation of OSPF handles loopbacks. The developer with whom I 
discussed them is no longer at Cisco, so I don't have an instant 
source on the code, but probably can get one.

Before then, a couple of questions:

what do the following commands show with your configuration:

sh ip route 10.0.0.0
sh ip route 10.10.10.0
sh ip int   10.10.10.1
sh proto

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BGP Loadbalancing !

[Howard C. Berkowitz]

"Schimek, Hans" <[EMAIL PROTECTED]> wrote,

>my company is an internet-provider in austria.
>
>the following situation.
>one of our customers has his own network ( with own AS Number ) - currently
>he is connected to another ISP. but plans to connect to our network soon..
>the problem in here is : if he connects to another ISP - he intends to do
>loadbalancing across two ISP.
>my question : is it possible to loadbalance across multiple ISPs.

My questions in response:

1. What do you mean by load balance?
2. What does your customer mean by load balance? (not necessarily the same)

There's a radical difference between load splitting/sharing and 
balancing.  The basic principle is that you want to send outgoing 
traffic for any given destination to one AS or the other, as long as 
both are up. Incoming traffic is a quite different matter, and far 
more difficult to do.

Simply by having your customer take full routes from each ISP, and 
assuming that the ISPs have at least somewhat different upstream 
providers, you will get some outbound load sharing. Another common 
approach is to assign a higher preference to routes that either 
originate, or are one AS away, in the directly connected AS.

More questions:

1. Does the customer have provider-independent address space? How large
   a prefix?
2. If the customer uses address space from the first provider, what is
   that provider's policy about having other AS advertise part of its
   address space?  Is it willing to advertise both its aggregate and the
   more-specific customer allocation?


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Static Routes

[Phillip Heller]

> 2) how Can traffic be load shared between two redundant links on 1 to 3
> ratio  using static routing  (i.e. 1 packet on one interface and 3
> packets on the other.)

I don't believe you can do this.not "balancing" like that.  Do you
have something against running EIGRP on those links?

How about 2 secondary addresses on the interface that you wish to send 3/4
of the traffic over?

ex:

int s0
ip address 10.0.0.1 255.255.255.252

int s0
ip address 10.0.0.5 255.255.255.252
ip address 10.0.0.9 255.255.255.252 sec
ip address 10.0.0.13 255.255.255.252 sec

ip route 192.168.0.0 255.255.255.0 10.0.0.2
ip route 192.168.0.0 255.255.255.0 10.0.0.6
ip route 192.168.0.0 255.255.255.0 10.0.0.10
ip route 192.168.0.0 255.255.255.0 10.0.0.14

Don't know if this'll work; never tried it.

Regards,

--phil

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Re: OSPF question

[psimmons]

Silvia,

It is possible if you configure the loopback as a point to point
network.

e.g. 
int lo0
ip ospf network point-to-point
ip address 172.16.1.1 255.255.255.0

router ospf 1
network 172.16.1.0 0.0.0.255 area 0

Requires IOS 11.3T or 12.0. Stops the loopback from being used
as the router ID though.

>From http://www.cisco.com/warp/public/104/9.html

Q: Why are loopbacks advertised as /32 host routes in OSPF?

A: Loopbacks are considered host routes in OSPF, and they're
advertised as /32. For more information, see section 9.1 of RFC
2328. In Cisco IOS ® version 11.3T and 12.0, if the ip ospf network
point-to-point command is configured under loopbacks, then OSPF
advertises the loopback subnet as the actual subnet configured
on loopbacks.

See "Advanced IP Network Design" Cisco Press for more details.

Hope this helps.

Regards

Pete S.


--- Original Message ---
"Adam Hickey" <[EMAIL PROTECTED]> Wrote on 
Mon, 4 Dec 2000 07:06:19 -0800
 -- 
Correct me if I am wrong, but I don't think you can advertise
a class C if
the address is assigned to the loopback. Because the router is
not aware of
any network, only that address. I believe you would have to assign
the ip to
an eth interface (or any other besides lo0) which would be known
to the
router as a network directly connected and thus able to be advertised.

Please correct this if it is incorrect.

Adam Hickey
[EMAIL PROTECTED]

- Original Message -
From: "Elaluf, Sylvia," <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, December 04, 2000 6:10 AM
Subject: OSPF question


> Hello everybody
>
> I need some help with the following:
>
> Given the following
>
> loopback 0
> ip address 10.10.10.1 255.255.255.0
>
> router ospf 1
> network 10.0.0.0 0.0.0.255 area 0
>
> sh ip route 10.10.10.1
> known via connected loopback 0
> distributed via ospf 1
>  10.10.10.1 255.255.255.255
>
>  what I want is to Advertise the loopback interface as class
C and not
host
> specific route.
>
> distributed via ospf 1
>  10.10.10.1 255.255.255.0
>
> How do I do that?
>
> Silvia Elaluf-Calderwood
> [EMAIL PROTECTED]
>
> "Only two things are infinite, the universe and human stupidity,
and I'm
not
> sure about the former."
> - Albert Einstein
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



-
Sent using MailStart.com ( http://MailStart.Com/welcome.html )
The FREE way to access your mailbox via any web browser, anywhere!

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

NAT

[carmelo Garofalo]

Hi Guys,
I have a question for you.

Is it possibile configure two IP NAT Pool address for the same IP source
class?

We have the requirement of traslate a IP Class to two IP Classes out of our
organization.

Thanks a lot

Regards, Carmelo


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: PIX problem?

[Patrick W. Bass]

you need to set your telnet command

telnet ip_address [netmask] [if_name]

ip_address = a host or network that can access the PIX firewall telnet
console.  Default is internal interface.


"Dinesh B" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi..
>
> I am trying to make a connection to a remote server ( WAN link) from my
> LAN. The remote end has made configuration to allow my desktop to do a
> telnet to it. The setup is like this.
>
> PC(172.18.10.1) -- PIX ( 172.18.0.1)-Router ---WAN link Remote
>
> server ( 165.132.0.1).
>
> The router configuration doesnot have any accesslist to deny the tcp
> packets to establish a session and only ahs a defoult route for "any any"
> via serial0.
>
> Even though, I have configured a mapping for my pc to an registered IP
> address on PIX , which will be allowed by the remote server, I am unable
> to do a telnet. Am I missing something? I also have a conduit statement
> even though that is not necessary.
>
> any comments, welcome.
>
> Thanks
> Dinesh
>
>
> __
> Do You Yahoo!?
> Yahoo! Shopping - Thousands of Stores. Millions of Products.
> http://shopping.yahoo.com/
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 2610 csu/dsu configuration

[lawrence sculark]

now what about the configuration of ipx on the serial interfacesany 
suggestions.i am unable to configure ipx on the serials...


>From: "Chuck Larrieu" <[EMAIL PROTECTED]>
>Reply-To: "Chuck Larrieu" <[EMAIL PROTECTED]>
>To: "Taylor, Don" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
>Subject: RE: 2610 csu/dsu configuration
>Date: Fri, 1 Dec 2000 16:02:06 -0800
>MIME-Version: 1.0
>Received: from [208.32.175.78] by hotmail.com (3.2) with ESMTP id 
>MHotMailBBF1F63E001AD820F3B0D020AF4E118123; Fri Dec 01 23:59:26 2000
>Received: from localhost (mail@localhost)by groupstudy.com (8.9.3/8.9.3) 
>with SMTP id AAA22819;Sat, 2 Dec 2000 00:10:46 -0500
>Received: by groupstudy.com (bulk_mailer v1.12); Sat, 2 Dec 2000 00:10:45 
>-0500
>Received: (from listserver@localhost)by groupstudy.com (8.9.3/8.9.3) id 
>AAA22805GroupStudy Mailer; Sat, 2 Dec 2000 00:10:45 -0500
>Received: from goliath.cnchost.com (goliath.cnchost.com [207.155.252.47])by 
>groupstudy.com (8.9.3/8.9.3) with ESMTP id AAA22785GroupStudy Mailer; Sat, 
>2 Dec 2000 00:10:43 -0500
>Received: from ChuckHome.concentric.net (w008.z064220150.sjc-ca.dsl.cnc.net 
>[64.220.150.8])by goliath.cnchost.comid TAA28086; Fri, 1 Dec 2000 19:02:06 
>-0500 (EST)[ConcentricHost SMTP Relay 1.10]
>From [EMAIL PROTECTED] Sat Dec 02 00:00:45 2000
>Message-ID: <003601c05bf3$1b5f8800$[EMAIL PROTECTED]>
>X-Priority: 3 (Normal)
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook 8.5, Build 4.71.2377.0
>X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
>In-Reply-To: 
><[EMAIL PROTECTED]>
>Importance: Normal
>Sender: [EMAIL PROTECTED]
>Precedence: bulk
>
>RE: 2610 csu/dsu configurationDon, I believe that a CSU is a layer one
>device. I have never seen any option on any CSU I have ever worked with,
>internal or external, for line encapsulation. It is always AMI / B8ZS and 
>SF
>/ ESF choices.
>
>on the router interface is where you configure HDLC or PPP. ( Or SDLC or
>SMDS or frame relay, for that matter. ) This is done with both internal and
>external CSU's.
>
>notice that within the Cisco config, you even differentiate between the
>serial interface and the service module when issuing commands.
>
>Chuck
>   -Original Message-
>   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
>Taylor, Don
>   Sent: Friday, December 01, 2000 2:38 PM
>   To: 'Kelly Scroggins'; [EMAIL PROTECTED]
>   Subject: RE: 2610 csu/dsu configuration
>
>
>   There's not too much to it. HDLC is the default encapsulation, so you
>won't have to change that. And if the second router you're connecting too
>has a Cisco internal CSU, they'll have the same default. Basically you just
>need to put clocking on one of the routers and that should do it. The
>command is "clock rate ?" (you get to choose the speed - might as well go
>with the fastest, 400).
>
>   The commands for configuring your CSU, though, are (in interface config
>mode) "service-module t1 ?" (get the list). The ones I use most often are:
>
>   "service-module t1 timeslots 1-24 speed 64"; this sets the CSU up for 24
>channels at 64K per channel (T1 speed)
>   "service-module t1 linecode b8zs"; B8ZS line coding, as opposed to AMI
>(your provider can tell you which one to use)
>   "service-module t1 framing esf"; ESF or SF are your framing choices
>
>   Hope that helps. Lemme know if you need something else.
>
>   - Don
>
>   -Original Message-
>   From: Kelly Scroggins [mailto:[EMAIL PROTECTED]]
>   Sent: Friday, December 01, 2000 12:35 PM
>   To: [EMAIL PROTECTED]
>   Subject: 2610 csu/dsu configuration
>
>
>
>   Can someone point me to some good documentation on
>   how to configure the csu/dsu module in a 2610 for
>   a plain ordinary hdlc t1 connection?
>
>   Thanks,
>   kelly
>
>
>
>   _
>   FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>   Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

IPX Sap output filter

[Lance Warner]

When adding an IPX network address to an output-sap-filter I add a 0 for the
service type that is supposed to allow all services, right? I'm trying to
print to a remote site over FR using a HP jet direct printer and HP jet
admin.. It won't print. I sent TAC my configs and they are stumped. I am
wondering about the 0 because it seems everyone uses it for 'all services'
but I have read that the 0 represents 'unknown services' which is not the
same thing. Any help on this one would be great. Thanks,

Lance Warner
Network Operations Center
First American Corporation
(714) 800-4105


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: OSPF question

[Frédéric Bosquet-Denis]

Well,

i think you should try the command "ip ospf network point-to-point" under
the loopback.

bye.



-Message d'origine-
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de
Elaluf, Sylvia,
Envoyé : lundi 4 décembre 2000 15:11
À : [EMAIL PROTECTED]
Objet : OSPF question


Hello everybody

I need some help with the following:

Given the following

loopback 0
ip address 10.10.10.1 255.255.255.0

router ospf 1
network 10.0.0.0 0.0.0.255 area 0

sh ip route 10.10.10.1
known via connected loopback 0
distributed via ospf 1
 10.10.10.1 255.255.255.255

 what I want is to Advertise the loopback interface as class C and not host
specific route.

distributed via ospf 1
 10.10.10.1 255.255.255.0

How do I do that?

Silvia Elaluf-Calderwood
[EMAIL PROTECTED]

"Only two things are infinite, the universe and human stupidity, and I'm not
sure about the former."
- Albert Einstein



_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: I need Boson Cisco Test Pack v3.22 demo for download !

[hmalmgren]

I've got no problem running the boson 3.34 on win2k.  Just as an
intellectual exercise, I searched some of the common crack sites, and found
that the latest crack for Boson tests is for 3.22.  

-Original Message-
From: John Hardman [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 04, 2000 8:49 AM
To: [EMAIL PROTECTED]
Subject: Re: I need Boson Cisco Test Pack v3.22 demo for download !


It might be just as likely that he has Win2K which has lots of problems
running the current 3.34 tests. I know I had to build out a NT 4 box to run
the current tests.

$0.02
--
John Hardman CCNP MCSE+I


""Clayton Price"" <[EMAIL PROTECTED]> wrote in message
90flq2$327$[EMAIL PROTECTED]">news:90flq2$327$[EMAIL PROTECTED]...
> A lot has been upgraded since 3.22.  Let me guess, you can't find a crack
> for anything newer than version 3.22
>
>
> ""Romeo"" <[EMAIL PROTECTED]> wrote in message
> 90fceq$df2$[EMAIL PROTECTED]">news:90fceq$df2$[EMAIL PROTECTED]...
> > Hi there!
> >
> > Please, from where can I download Boson Cisco Test Pack v3.22 demo? It
> > missing on Boson site.
> >
> > TIA
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE LAB Groupstudy list

[Bob Snyder]

Paul Borghese <[EMAIL PROTECTED]> wrote in message
003501c05d56$a37b20a0$[EMAIL PROTECTED]">news:003501c05d56$a37b20a0$[EMAIL PROTECTED]...

> Please if anyone has any ideas...

Which is consuming the bandwidth?  Mail? Web? News?

If it's mail, you may be able to do something like vger.kernel.org does,
where you farm out the mail to volunteer servers   e.g., all mail for
.org gets sent to server A, all mail for .us, .ar, .id gets sent to server
B

That way your server is sending out one message for each delegated domain,
and they handle a portion of the load

Bob
CCNP, CCDP, MCSE+I, Sun Solaris Certified Admin


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: I need Boson Cisco Test Pack v3.22 demo for download !

[John Hardman]

Hi

I had no problem running it either, until I had to reinstall my Win2K and
start with Boson 3.34. I had in the past just upgraded to the lastest
version, but with a fresh install it stoped working. I have gone thru the
excellent tech support at Boson for the last week and a half and finally
gave up on ever getting it run on Win2K and built out a NT 4 box.

Yes you are right he is likely looking for a crack-able version, but I
always try to error on the side of the positive instead of the negive.

John Hardman CCNP MCSE+I

<[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I've got no problem running the boson 3.34 on win2k.  Just as an
> intellectual exercise, I searched some of the common crack sites, and
found
> that the latest crack for Boson tests is for 3.22.
>
> -Original Message-
> From: John Hardman [mailto:[EMAIL PROTECTED]]
> Sent: Monday, December 04, 2000 8:49 AM
> To: [EMAIL PROTECTED]
> Subject: Re: I need Boson Cisco Test Pack v3.22 demo for download !
>
>
> It might be just as likely that he has Win2K which has lots of problems
> running the current 3.34 tests. I know I had to build out a NT 4 box to
run
> the current tests.
>
> $0.02
> --
> John Hardman CCNP MCSE+I
>
>
> ""Clayton Price"" <[EMAIL PROTECTED]> wrote in message
> 90flq2$327$[EMAIL PROTECTED]">news:90flq2$327$[EMAIL PROTECTED]...
> > A lot has been upgraded since 3.22.  Let me guess, you can't find a
crack
> > for anything newer than version 3.22
> >
> >
> > ""Romeo"" <[EMAIL PROTECTED]> wrote in message
> > 90fceq$df2$[EMAIL PROTECTED]">news:90fceq$df2$[EMAIL PROTECTED]...
> > > Hi there!
> > >
> > > Please, from where can I download Boson Cisco Test Pack v3.22 demo? It
> > > missing on Boson site.
> > >
> > > TIA
> > >
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Switching 2.0 BCMSN

[Mark]

Well, took the switching 2.0 today and passed it, I didn't think it was too
hard and about in line with Routing on difficulty.  I think if you study the
course book and the know what's on the requirements from Cisco you will do
fine.  I also used the LAN Switching book from the CCIE series but be
careful because this book goes into serious detail.

I think this news group helps a lot from the perspective of researching
questions about troubleshooting and configs and others.  I try not to
concern my self with what is covered more or less on the exam.  Making sure
I have a complete knowledge of the material is what is important because
someone will ask me to do this someday.

On to BCRAN.

Later

ML


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Should i take up this Job at Cisco : Juniper vs Cisco

[Marc Giroux]

Rajesh,
If you want to work for a company that only has one real product and that 
product is buggy and being pulled out of most major ISP then look elsewhere 
then Cisco (OC-192 and UUnet hehe they yanked those boxes out in a hurry). 
If you want to work for the leader in IP (layer 3) join cisco we also cover 
everything from layer 2 to 7 we are the world leader in VOIP MPLS and almost 
every Networking technologies we are taking over the optical world by storm 
ehhe, cisco invented tag switching which is the base of MPLS (the hottest 
layer 3 protocol on the market today). If you want to learn, the Internal 
version of the CCO has endless ressources I could spend 10 lives and never 
read all of whats written. The learning at cisco is unmatched in my opinion. 
As for claims by other vendors that they've taken 30% of the core market I 
laught at that statement. I'm looking in Canada right now and I know for a 
fact there are over 350 GSR routers installed and last time I looked (today) 
and the competition has 0, yes that is correct 0 core routers SOLD in 
canada.

If you work for a ISP I would love to hear your feedback on what you think 
of the claims made by our competitor. They claim to be the best core router 
due the fact they are ASIC. Big deal we've been doing this for YEARS ever 
hear of CEF. I'm sorry for venting off, the competition does have a decent 
product but Marketing claims will always be what they are Marketing 
Claims...
Cisco made 20Billion dollars last year most of it with its core products 
how much did the competition make... btw we are on track to make 30Billion 
this year... does that look like a company losing its market share come 
on be real you have a good product... just not what you claim.

As a last statement I would love to hear feedback from Anyone who has worked 
with the juniper product line and especially those of you who have worked 
with there OC-192 card what do you think about it

comments that I am replying to are below and made by a juniper employee

BTW I interviewed a Juniper and turned them down a niche player is only that 
a niche player and Yes I do work for Cisco

-I would have to disagree with your belief of Cisco being the premier
-company to learn leading edge technologies.  As far as research, what
-about the USC/ISI's, the MIT's, the LLNL's, the NSF's, etc...
-
-I chose another company over Cisco because I felt I would learn more.
-I'm not saying Cisco is a bad choice, I'm just saying there are other
-opportunities out there that you should consider.  It also depends on
-the technology you want to specialize in.
-
-For example, in my case, I wanted to do high speed core networks.
-Although I received an offer with Cisco, I chose to go with Juniper
-instead.  Why?  For several reasons:
-Juniper has better high end routers.  In two years, they have gained -30%
-of the market share for core routers.  I imagine they will surpass -Cisco
-in that area in less than two years.
-http://www.thestreet.com/tech/networking/1184179.html
-Juniper routers are faster.
-JunOS is more intuitive than IOS...IMHO.
-Juniper uses standard protocols only... OSPF, BGP, IS-IS, MPLS no
-proprietary stuff like IGRP and EIGRP.

-more subjective reasons:
-Juniper has a very selective, smart group of engineers.  Many CCIE's
-have been turned away.  Of course, many CCIE's have been hired as -well.
-Cisco has 30,000+ employees, Juniper has 700+... I spoke with a few
-former Cisco employees who felt there were too many layer of
-bureaucracy.  I enjoy working at smaller companies where you can make
-more of an impact as well as be recognized for your achievements.
-Juniper was harder to get into to.  When you interview with a company
-and they ask you difficult technical questions, you respect that.  -You
-want them to be as knowledgeable, if not more knowledgeble than
-yourself...the more knowledgeable they are, the better.  I don't mean -to
-say that Cisco's interview process was a piece of cake... it's just -that
-Juniper's was tougher.
-Other reasons such as atmosphere, benefits, role, etc... were also -taken
-into consideration.
-
-On the other hand, if you want to learn layer 2 technologies, then
-Juniper would not be the company for you... since they don't make
-switches.  If I wanted to get more involved in Content switching, I
-would have looked into Alteon, F5, or Cisco.  If I wanted to do
-research, I would have stayed with my former employer, ISI  It
-depends on what you want to do... thinking Cisco is the one and only
-company to work for is a narrow minded approach when job hunting.  -You
-have to get several offers and weigh your options.  Don't get me -wrong,
-I do feel Cisco is a great company... but they are not the best at
-everything.

-Mark Juniper Networks


_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

__

Re: why can ping but traceroute stop half way

[Gareth Hinton]

I believe, but am willing to be shot down in flames if I'm wrong that
Traceroute uses different port numbers to ICMP. I've allowed ICMP through
firewalls before, then tried to traceroute and the trace has been dropped.
The destination port being dropped was logged as something like 34543 and
incremented by one for each hop (thats not the exact number but it's in that
order-5 figures).
If you try an extended trace the default port number (last requirement) is
around that mark too.

I know how a ping works (increasing TTL for each hop, but on a fixed port)
but not sure at all of trace route. Is there any way to fix the traceroute
port, or am I barking up the wrong tree?

Been wondering about this for a while. Anybody care to put me out of my
misery. (Or do I take another side track and find out myself)

Cheers,

Gaz

""Brandon Peyton"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Weird.
>
> Within UUNET network from AU:
>
> Tracing route to 210.24.136.242 over a maximum of 30 hops
>
>   1   110 ms   110 ms   110 ms  tnt7.syd2.da.uu.net [63.12.31.206]
>   2   101 ms   100 ms   110 ms  63.12.150.1
>   3   100 ms   111 ms   100 ms  351.ATM3-0-0.XR1.SYD2.Alter.Net
> [210.80.3.225]
>   4   100 ms   120 ms   121 ms  ATM5-0-0.TR1.SYD2.Alter.Net
[210.80.48.133]
>   5   581 ms   600 ms   591 ms  296.ATM9-0-0.TR1.SIN1.Alter.Net
> [210.80.48.173]
>
>   6   580 ms   591 ms   591 ms  POS1-0-0.XR1.SIN1.Alter.Net [210.80.48.50]
>   7   641 ms   611 ms   591 ms  311.ATM5-0-0.GW1.SIN1.Alter.Net
> [210.80.3.42]
>   8   591 ms   581 ms   591 ms  202.95.96.30
>   9   580 ms   591 ms   591 ms  scipk017.pacific.net.sg [203.120.90.17]
>  10  1522 ms   821 ms   872 ms  202.42.42.234
>  11   791 ms   921 ms   831 ms  210.24.136.242
>
> 
> Tracing from GW2.SIN1(where you're connected)...from SG
>
> GW2.SIN1#tr 210.24.136.242
>
> Type escape sequence to abort.
> Tracing the route to 210.24.136.242
>
>   1 422.ATM8-0-0.XR1.SIN1.Alter.Net (210.80.3.45) 0 msec
>   2 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 4 msec
>   3 202.95.96.30 188 msec 368 msec 484 msec
>   4 scipk017.pacific.net.sg (203.120.90.17) [AS 4628] 176 msec 116 msec
136
> msec
>   5 202.42.42.234 [AS 4628] 204 msec 116 msec 120 msec
>   6  *  *  *
>
> Would anyone like to explain why (still in uunet network) this happens?
> Without doing much research(cuz im at home)...
>
> Thanks,
> Brandon
>
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> SAM Meng Wai
> Sent: Monday, December 04, 2000 2:11 AM
> To: 'Sim, CT (Chee Tong)'; [EMAIL PROTECTED]
> Subject: RE: why can ping but traceroute stop half way
>
>
> Hope i can answer your questions. Some of the routers disable ICMP
> response. Thus, they will not reply you but able to route packet through
> and the host you ping to will reply your ICMP packets.
>
> Rgds,
> Sam
>
>
> > -Original Message-
> > From: Sim, CT (Chee Tong) [SMTP:[EMAIL PROTECTED]]
> > Sent: Monday, December 04, 2000 5:05 PM
> > To: [EMAIL PROTECTED]
> > Subject: why can ping but traceroute stop half way
> >
> > Hi..Dear all,
> >
> > i wonder why I can ping to a site but when I do a traceroute stop half
> > way..
> > I thought traceroute are based on ICMP as well??  See below
> >
> >
> > sin-uunet>ping 210.24.136.242
> > Type escape sequence to abort.
> > Sending 5, 100-byte ICMP Echos to 210.24.136.242, timeout is 2 seconds:
> > !
> > Success rate is 100 percent (5/5), round-trip min/avg/max = 32/96/156 ms
> > sin-uunet>traceroute 210.24.136.242
> >
> > Type escape sequence to abort.
> > Tracing the route to 210.24.136.242
> >
> >   1 Loopback0.GW2.SIN1.Alter.Net (210.80.0.25) 12 msec 12 msec 12 msec
> >   2 322.ATM5-0-0.XR2.SIN1.Alter.Net (210.80.3.65) 8 msec 12 msec 8 msec
> >   3 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 12 msec 12 msec 8 msec
> >   4 202.95.96.30 20 msec 16 msec 16 msec
> >   5 scipk017.pacific.net.sg (203.120.90.17) 12 msec 16 msec 16 msec
> >   6 202.42.42.234 20 msec 92 msec 36 msec
> >   7  *  *  *
> >   8  *  *  *
> >   9  *  *  *
> >
> > ==
> > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en
> > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht
> > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en
> > de afzender direct te informeren door het bericht te retourneren.
> > ==
> > The information contained in this message may be confidential
> > and is intended to be exclusively for the addressee. Should you
> > receive this message unintentionally, please do not use the contents
> > herein and notify the sender immediately by return e-mail.
> >
> >
> > ==
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groups

More on VLANs

[Ben Hockenhull]

Now that I have the native vlan and trunking issue resolved, I'm turning
my attention to another problem.

I have a host that will reside on a vlan all by itself.  I've created the
vlan (vlan 200) and configured a fast ethernet port to be a member of that
vlan, and attached the host to it.

The port is up, and I can ping the host on that vlan from the switch
management interface, once I set the management interface to an IP in that
vlan, and set the vlan membership of the management port appropriately.

However, I am unable to ping the host from inside the MSFC.  I've
configured a vlan200 interface, assigned it an IP and brought the
interface up, but I can't reach the host.  Vlan200 is allowed on the ISL
trunk to the MSFC.

I suspect that this is because I misunderstand something fundamental about
how vlans work on the Cat 6500.  I further suspect that this is related to
the native vlan problem I was having before.

If I change the vlan on the host port to the native vlan, and change the
vlan interface on the MSFC to the native vlan, I can ping from the MSFC.
Therefore, I think that frames from vlan200 are not being forwarded to
the MSFC for some reason.  The documentation I've read doesn't seem to
touch on this too much.

Ben

--
Ben Hockenhull
[EMAIL PROTECTED]


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Help with Access List

[Perry Lucas]

Here is the scenario...
 
A 2600 series router is connecting multiple offices 
in the same location to the Internet.  The offices are seperated via VLANs 
on a Cisco 3500 series switch with ISL Tunk links to the router which is running 
IP Plus.  The IP Subnets are 10.0.1.0, 10.0.2.0, 10.0.3.0, etc with 
a Class C mask.  The router is also NATing the 10.0.x.0 address 
to a Public IP Pool.  The client wants to prevent any traffic from 
being routed between subnets.  (i.e. 10.0.1.0 can not talk to 10.0.2.0 or 
10.0.3.0 and vice versa.)
 
What is the access list to prevent the subnets from 
routing to each other, as well as the correct access group on the 
sub-interface (inbound or outbound) while not interrupting connectivity to 
the Internet or the IP Nat pool...
 
Perry

Re: ATM Lane in switching 2.0(BCMSN)

[Brian]

Its been a while, but thinking back, I don't believe so.  And if it did,
it was so little I wouldn't worry to much on lane.

Spanning Tree, VLANs, EtherChannel, MultiLayer Switchingthats the
type of stuff you want to study up on


On Mon, 4 Dec 2000, Waqar M wrote:

> Dear All,
>
> Can someone plz tell me that does SWITCHING (BCMSN)exam contain ATM Lane
> questions??? I have completed my preparation and i m bit confused a bit that
> whether to prepare for LANE also or not. Moreover, any sort of final tips as
> i m going to have this exam after 3 days. Any sort of help will be highly
> appreciated.
>
> Thanks,
>
> Waqar M.
> Network Engineer
> _
> Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

---
Brian Feeny, CCNP+ATM, CCDP   [EMAIL PROTECTED]
Network Administrator
ShreveNet Inc. (ASN 11881)

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 2610 csu/dsu configuration

[Benjamin Walling]

You know, Cisco's ConfigMaker handles the 26xx series as well as the WIC
cards.  It will guide you through a wizard and then make the config for you.
You can use this to see how to do things that you don't know.

-Original Message-
From: lawrence sculark [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 04, 2000 12:43 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: 2610 csu/dsu configuration


now what about the configuration of ipx on the serial interfacesany 
suggestions.i am unable to configure ipx on the serials...

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BGP Loadbalancing !

[Peter Van Oene]

Getting traffic off the net in a somewhat balanced fashion is the easy part.  Finding 
a way to have equal amounts of it traverse multiple AS's and end up at two differing 
entry points into the AS is the stuff of GODS :)  

Pete


*** REPLY SEPARATOR  ***

On 12/4/2000 at 4:07 PM McCallum, Robert wrote:

>I would say yes.  All he needs is a policy which could say for example... if
>you try to go to microsoft go through 1 ISP and any other site through the
>other ISP.
>In all - BGP can do whatever you want it to do - whatever the companies
>policy is.
>No flames please.
>
>
>Robert McCallum CCNP CCDP
>CCIE Written R&S 2 days to go!
>CCIE Written Design 4 days to go!
>
>
>-Original Message-
>From: Schimek, Hans [mailto:[EMAIL PROTECTED]]
>Sent: 04 December 2000 14:48
>To: '[EMAIL PROTECTED]'
>Subject: BGP Loadbalancing !
>
>
>my company is an internet-provider in austria.
>
>the following situation.
>one of our customers has his own network ( with own AS Number ) - currently 
>he is connected to another ISP. but plans to connect to our network soon..
>the problem in here is : if he connects to another ISP - he intends to do 
>loadbalancing across two ISP. 
>my question : is it possible to loadbalance across multiple ISPs.
>
> 
>--NETWAY-\
>ViennaInternetExchange
>CUSTOMER
>   ---COLT
>TELECOM--/
>
>
>
>thanx in advance
>   
>
>_
>FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>_
>FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Passed the CCIE Written

[Peter Van Oene]

I would concur that the written is not a challenging test.  If you've managed to get 
through the NP cert, you should be able to pass with little (if any) additional prep 
work.  I do recall more IBM technology stuff on the written than in the NP track so 
checking into that would help.  

I too wrote in once to figure out what was on it and happened to pass.  I had fully 
intended on studying for it once I knew what it was all about.  

*** REPLY SEPARATOR  ***

On 12/4/2000 at 9:12 AM Jim Brown wrote:

>The questions are trickier and more detailed than the CCNP. The test also
>covers all areas of the CCNP in a single seating.
>
>I studied and sat the test last week. I finally decided to sit the test and
>spend the $200 to get a feel for it. I expected a retake in the very near
>future, but I passed! 
>
>Read Doyle's TCP/IP bible and make sure you know your IBM network
>technologies.
>
>After sitting the exam it was clear as a bell. This exam is not there to
>test the obscure areas of Cisco networking, it is to make sure you have some
>foundation necessary for ATTEMPTING the lab. The exam is not for weeding out
>candidates. The lab is what Cisco uses to weed out the candidates. 
>
>The written exam is really to control the number of people attempting the
>lab. I have to wait six months for an opening! I'm glad because I really
>need the time for preparation.
>
>Don't let the written exam scare you, it is more bark than bite. The lab
>should be a different story.
>
>-Original Message-
>From: Rishard Chapoteau [mailto:[EMAIL PROTECTED]]
>Sent: Monday, December 04, 2000 6:29 AM
>To: [EMAIL PROTECTED]
>Subject: Re: Passed the CCIE Written
>
>
>Did you buy any books to study for the CCIE written aside from what you
>studied for the CCNP, or did u just use the boson exams?  I recently
>finished the CCNP,  and I plan on doing the CID this friday I'f I'm lucky.
>I wanted to know if I need to get other books or if my current knowledge
>with the boson will be enough.  Thanx.
>
>Rishard
>
>
>""Gordon Olson"" <[EMAIL PROTECTED]> wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> I want to say thank you, a BIG Thank You to Bernard who wrote the Boson
>> tests for the CCIE. They are Super!! A few weeks ago I bought the MCNS
>Boson
>> Exam and received an email from Bernard. After a few emails back n' forth
>he
>> convinced me that I should go for the CCIE Written because he felt I was
>85%
>> there, being a CCNP. Well, I thought about it and went for it.
>>
>> Being a CCNP I have read a lot of books along the way that helped prepare
>> me, but I did not know that, but Bernard did. I bought Both his tests for
>> the CCIE and passed the written on the first attempt. The Exams are
>written
>> with Cisco links that help you develop areas that may be unclear. The
>> answers are backed up with Excellent explanations so you really understand
>> the concept. If you are going after the CCIE - these tests, BOSON CCIE
>> Pre-qual, are a MUST!
>>
>> I apologize if I sound like a commercial or something but I thought it
>would
>> be a good idea to give these guys credit for writing an excellent test
>prep
>> tool for under $30 - you cannot beat that!
>>
>> Gordon Olson
>>
>> _
>> FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>>
>
>
>_
>FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>_
>FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: OSPF question

[Hugo _]

In order to advertise the loopback interface as /24 instead of /32 you 
should use the command interface:  ip ospf network point-to-point.

Regards.

Hugo, CCIE


>From: "Howard C. Berkowitz" <[EMAIL PROTECTED]>
>Reply-To: "Howard C. Berkowitz" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: OSPF question
>Date: Mon, 4 Dec 2000 11:34:01 -0500
>
>>"Elaluf, Sylvia," <[EMAIL PROTECTED]> wrote,
>
>
>
>>Given the following
>>
>>loopback 0
>>ip address 10.10.10.1 255.255.255.0
>>
>>router ospf 1
>>network 10.0.0.0 0.0.0.255 area 0
>>
>>sh ip route 10.10.10.1
>>known via connected loopback 0
>>distributed via ospf 1
>>  10.10.10.1 255.255.255.255
>>
>>  what I want is to Advertise the loopback interface as class C and not 
>>host
>>specific route.
>>
>>distributed via ospf 1
>>  10.10.10.1 255.255.255.0
>>
>>How do I do that?
>>
>
>First, what problem are you trying to solve?  I understand that you
>can advertise or not advertise the loopback, but why do you
>specifically want to advertise it as a /24?  In my past experience,
>however, there were differences in advertising it as a /32, a /30,
>and a shorter-than-/30.
>
>There have been some modifications, over time, about how Cisco's
>implementation of OSPF handles loopbacks. The developer with whom I
>discussed them is no longer at Cisco, so I don't have an instant
>source on the code, but probably can get one.
>
>Before then, a couple of questions:
>
>what do the following commands show with your configuration:
>
>sh ip route 10.0.0.0
>sh ip route 10.10.10.0
>sh ip int   10.10.10.1
>sh proto
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Off Topic - Household Configuration Problem

[Gareth Hinton]

Chuck,

I've not heard of anyone with a perfect working solution.
I tried similar config (Version 1) with Wife hardware which eventually fell
over completely.
Did try Switching temporarily just prior to this failure, but remedy was
temporary and caused further problems through incompatibility with Wife
(Version 1).
The trouble is, it takes so long to get the right configuration that by the
time you get there the hardware is starting to get flaky.
Eventually traded mine in for newer model, but virtually the same problem
arose with new image.
Hardware upgrades can be very expensive and costs may need to be spread over
many years.
It has been suggested that operator error may be the cause of the problem,
but most of my colleagues had a go at mine with no real improvement.
Working in a stand-alone environment could satisfy most of your
requirements, but requires considerable manual intervention and after 15
years out, a fair amount of refresher training is required initially.

A few tips though:

The nag-off command does not work. I have tried it many times, but
re-appears. Best work-around is to create a nag access-list. Whatever you
do, make sure slave device is configured as passive interface, otherwise you
will have collision problems.

"Coffee-process hot" can cause problems during aforementioned collisions.

"Exceed budget-no" is ineffective. The "Household-budget command" only sets
the CIR, but device continually uses burst rate.

Good luck  :~)












""Chuck Larrieu"" <[EMAIL PROTECTED]> wrote in message
001901c05d95$00e51fa0$[EMAIL PROTECTED]">news:001901c05d95$00e51fa0$[EMAIL PROTECTED]...
> Gang, please forgive me for bringing this to the list. But I am having a
> major problem with my household configuration, and I am hoping that you
good
> people can show me where my mistakes are.
>
> Following is the configuration in question:
>
> Process Home
> Wife 1  (she is, after all, number one in my book :->)
> Household-budget = ( dollar amount of budget )
> Exceed-budget no
> Laundry-process regular
> Housework-process daily
> Dinner-process on-time
> Coffee-process hot
> Toast-preparation light-with-jam
> Refrigerator-status filled-with-food
> Pleasurable-activities nightly
> Nag off
>
> Since I started this process 15 years ago, it has never seemed to operate
> according to this configuration. In fact, it seems that almost every
result
> is exactly the opposite to what the command states. I'm wondering if
someone
> has a link someplace to the documentation, so I can correct this
> configuration and get my wife-process to operate according to my design.
;->
>
> Chuck
> --
> Q. How many Democrats survived the Titanic?
> A. None. They couldn't follow the arrows to the lifeboats.
>
> Q. How many Floridians does it take to replace a light bulb?
> A. They're still counting.
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Rip problem , suppressing null update!

[Mohamed Heeba]

guys !
i have two routers connected through their serial , im configuring rip on
them 

R1 e0 ip add is 172.16.1.1/27 
ser 0 ip add is 172.16.1.33/28

R2 e0 ip add is 172.16.1.49/29 
ser 0 ip add is 172.16.1.34/28

there is no rip updates between the two routers ..im getting only
"suppressing null  updates "

also when i change the mask of ser0 on R1 to /27 , the updates pass normally
and take the mask of the 
/28 on the other end 

my question is 
Does this mean that if the mask is inconsistent on RIP router , it will not
send updates ?
this means when R1 mask is consistent (/27) for both interfaces , the R1
will send updates but it will not receive anything because R2 masks are  not
consistent ??


somebody to confirm please !

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: OSPF question

[Chuck Larrieu]

Under the loopback interface, you may issue the command ip ospf network
point-to-point

Cisco's implementation by default advertises loopbacks as host routes
( /32 )

By implementing the network type point-to-point, you cause the IOS to
advertise a loopback as a full network, as defined by the subnet mask you
use.

Seems to me we had a discussion of this a few weeks ago. If memory serves,
it was as part of a discussion about optimum ways to migrate from EIGRP to
OSPF

HTH

Chuck


-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Elaluf, Sylvia,
Sent:   Monday, December 04, 2000 6:11 AM
To: [EMAIL PROTECTED]
Subject:OSPF question

Hello everybody

I need some help with the following:

Given the following

loopback 0
ip address 10.10.10.1 255.255.255.0

router ospf 1
network 10.0.0.0 0.0.0.255 area 0

sh ip route 10.10.10.1
known via connected loopback 0
distributed via ospf 1
 10.10.10.1 255.255.255.255

 what I want is to Advertise the loopback interface as class C and not host
specific route.

distributed via ospf 1
 10.10.10.1 255.255.255.0

How do I do that?

Silvia Elaluf-Calderwood
[EMAIL PROTECTED]

"Only two things are infinite, the universe and human stupidity, and I'm not
sure about the former."
- Albert Einstein



_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Rip problem , suppressing null update!

[Jim Erickson]

Which RIP version are you using? IIRC, version 1 doesn't support VLSM since
it doesn't carry subnet mask info in its routing updates.

---JRE---

"Mohamed Heeba" <[EMAIL PROTECTED]> wrote in message
91B200CBBEC3D111992A00805F31E6CB880765@MINAMAIL">news:91B200CBBEC3D111992A00805F31E6CB880765@MINAMAIL...
> guys !
> i have two routers connected through their serial , im configuring rip on
> them
>
> R1 e0 ip add is 172.16.1.1/27
> ser 0 ip add is 172.16.1.33/28
>
> R2 e0 ip add is 172.16.1.49/29
> ser 0 ip add is 172.16.1.34/28
>
> there is no rip updates between the two routers ..im getting only
> "suppressing null  updates "
>
> also when i change the mask of ser0 on R1 to /27 , the updates pass
normally
> and take the mask of the
> /28 on the other end
>
> my question is
> Does this mean that if the mask is inconsistent on RIP router , it will
not
> send updates ?
> this means when R1 mask is consistent (/27) for both interfaces , the R1
> will send updates but it will not receive anything because R2 masks are
not
> consistent ??
>
>
> somebody to confirm please !
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Designing Network Security and MCNS

[Brian]

Has anyone read Designing Network Security (ciscopress), and can comment
on its applicability to the MCNS exam?  I purchased it and intend to use
it to study for the exam.  Reviews at amazon are good, but I just don't
know how well it aligns with the test objectives.

Brian


---
Brian Feeny, CCNP+ATM, CCDP   [EMAIL PROTECTED]
Network Administrator
ShreveNet Inc. (ASN 11881)

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

L3 Switch Individual Host Route

[Hartnell, George]

Hi,

Let's imagine that you have a L3 switch with a segment (x) serving a
(actually more) router feeding another segment (y).  The L3 has other BVIs
(w and z).

Let's also imagine that one has a server belonging to the routed segment y,
(y.1) Let's also imagine that the server has crashed, and needs to
physically be located at the L3 switch site, several miles from its "home"
on physical segment y.  Server Y's IP address is, as aforementioned, Y.1.

Can routing switch L3 have an individual port configured for an individual
host route?

So, steps?  The static ip route statement is fine, but for the next
interface entry?
What about the existing ip route to the router server segment X?  All routes
do go through that L3 first.  Router (YX) would also have the static entry
for Y.1.

Or, am I barking up the wrong pole?  Simpler solutions do exist.

Jus' wonderin'

Best, G.

--YRouterX---L3Z--Router-cloud
 |
 |
  host Y.1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

OSPF redistribution into RIP

[Anthony Anderson]

Hi all...

I have a slight problem and I know you people can help.  I have a
question regarding OSPF behavior and the loopback address.  Our backbone is
running OSPF and we have installed a Cache-Flow server to cache webpages.
The cache-flow does not support OSPF so I attempted to redistribute OSPF
into RIP.  I use a private address for the loopback on all of our routers
and the advertisement to the cacheflow shows the loopback as the interface
the advertisement is coming from.  So, say a network of 192.168.5.1 lies of
router A's serial port, the loopback address of that router is 10.0.2.2, and
the ethernet interface is 172.16.0.2 - note - all devices share a common
ethernet segment.  The route in the cache-flow is:  192.168.5.1 via 10.0.2.2
even though the ethernet address is a totally different network. Can someone
explain why this is happening and what I can do about it?  I have static
routes configured now, but I would like to make it dynamic if possible.


Thanks,
--
Anthony Anderson CCNA
Manager-Data Network Engineering
Bluegrass Cellular, Inc.

"Man's life, as required by his nature, is not the life of a mindless brute,
of a looting thug or a mooching mystic,
 but the life of a thinking being -- not life by means of force or fraud,
but life by means of achievement." - Ayn Rand


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: PIX 520 ethernet cards

[Abu Salmaan Sheikh]

"Patrick W. Bass" wrote:

> Do so at your own peril.
>
> ""Frank Wells"" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hey Folks,
> > Can I put a non-Cisco ethernet card (Intel/3com) in my PIX 520 as a third
> > interface, and if so, how does one load the driver for it?  I assume the
> > driver for the cards that come with it are built in to the IOS.
> >
> > Cheers
> >
>

To repeat DO SO AT YOUR OWN PERIL.

But having said that I have used non-Cisco NIC in a PIX and had it work. I had a PIX 
520
and they used Intel cards. So I hunted in my store room for an Intel nic, trying to
match the chipset as closely to the original Cisco card.

Once I had this, and booted up the PIX the IOS recognised the third card and there were
no problems with drivers or any other error messages.

As for proprietary firmware on the Cisco NICs, and they being modified to disable
promiscuous mode,  may be something you should look into. I never thought of that until
now, because when I booted up the PIX everything worked and I was just happy with that.

One thing to note - The MAC address on the NIC defines it to be Cisco instead of an
Intel, even though they use an Intel chipset. Also when you do do something like this,
you have to know (or instruct your client) that if anything breaks down Cisco TAC can
refuse to help you or honor any warranty when you call them.

Thanks
Abu Sheikh


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: ATM Lane in switching 2.0(BCMSN)

[STRAND Scott]

There wasn't any on the one I took back in late August. Add trunking to the list 
mentioned below.

--Scott Strand
CCNP

Brian wrote:

> Its been a while, but thinking back, I don't believe so.  And if it did,
> it was so little I wouldn't worry to much on lane.
>
> Spanning Tree, VLANs, EtherChannel, MultiLayer Switchingthats the
> type of stuff you want to study up on
>
> On Mon, 4 Dec 2000, Waqar M wrote:
>
> > Dear All,
> >
> > Can someone plz tell me that does SWITCHING (BCMSN)exam contain ATM Lane
> > questions??? I have completed my preparation and i m bit confused a bit that
> > whether to prepare for LANE also or not. Moreover, any sort of final tips as
> > i m going to have this exam after 3 days. Any sort of help will be highly
> > appreciated.
> >
> > Thanks,
> >
> > Waqar M.
> > Network Engineer
> > 
>_
> > Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com
> >
> > _
> > FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> ---
> Brian Feeny, CCNP+ATM, CCDP   [EMAIL PROTECTED]
> Network Administrator
> ShreveNet Inc. (ASN 11881)
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Rip problem , suppressing null update!

[Mohamed Heeba]

hi 
it is ver 1 rip , i know it will not carry mask info , my questing is if the
mask is inconsistent , will it send updates or not ??

thx

> -Original Message-
> From: Jim Erickson [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, December 04, 2000 12:01 PM
> To:   [EMAIL PROTECTED]
> Subject:  Re: Rip problem , suppressing null update!
> 
> Which RIP version are you using? IIRC, version 1 doesn't support VLSM
> since
> it doesn't carry subnet mask info in its routing updates.
> 
> ---JRE---
> 
> "Mohamed Heeba" <[EMAIL PROTECTED]> wrote in message
> 91B200CBBEC3D111992A00805F31E6CB880765@MINAMAIL">news:91B200CBBEC3D111992A00805F31E6CB880765@MINAMAIL...
> > guys !
> > i have two routers connected through their serial , im configuring rip
> on
> > them
> >
> > R1 e0 ip add is 172.16.1.1/27
> > ser 0 ip add is 172.16.1.33/28
> >
> > R2 e0 ip add is 172.16.1.49/29
> > ser 0 ip add is 172.16.1.34/28
> >
> > there is no rip updates between the two routers ..im getting only
> > "suppressing null  updates "
> >
> > also when i change the mask of ser0 on R1 to /27 , the updates pass
> normally
> > and take the mask of the
> > /28 on the other end
> >
> > my question is
> > Does this mean that if the mask is inconsistent on RIP router , it will
> not
> > send updates ?
> > this means when R1 mask is consistent (/27) for both interfaces , the R1
> > will send updates but it will not receive anything because R2 masks are
> not
> > consistent ??
> >
> >
> > somebody to confirm please !
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> 
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Have anyone downloaded this free CCNA material [1:1026]

[TSQR1951]

Patrick:

could you go into more detail, as to why it is well worth it??

thanks,

Jess

<< Send him a e-mail he will reply with the password, i also suggest buying
 whathe has to offer it is well worth it
 
 Patrick
  >>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: how to config multilay switch modul internal interface in cat 6509

[Marc Russell]

This may be more info than you want, but here is some info I've put togther
that I plan on using in one of our training classes.




Cisco 6500 Series MSFC Native IOS Layer 3 Switching


 This concept blends switching and routing into one platform. The Native IOS
mode on this platform allows the switching and routing to be configured and
managed through the familiar and powerful IOS user
interface.

Currently the 6500 switch/routers are shipped configured in the Hybrid mode.
This mode requires configuration on two different interfaces. One interface
using the XDI set commands configures the switching function. The other
interface uses the familiar Cisco IOS command set for configuring routing
functions.



MSFC Native IOS Mode Operating Concepts


1st CPU is the (SP) switch processor, 150Mhz R4700 used by the Layer-2
oriented Supervisor card
2nd CPU is the (RP) route processor, 200Mhz R5000 (This is the same as the
NPE-200 from a 7200 router)

In native mode IOS both CPU¡¦s run full IOS software. In native IOS mode the
RP acts as the primary CPU, and the SP acts as the secondary processor.

Both CPU¡¦s work in tandem to enhance performance. The SP CPU concentrates
on port-level management (such as link up/down) and layer-2 protocols such
as Spanning-Tree, VTP, and DTP. The RP CPU performs duties such as routing
the first packet in every IP or IPX flow (or all packets for protocols that
are not supported by the NFFC)

The two CPUs boot from different binary image files. First, the SP CPU takes
control and loads an image from flash memory. Then, it passes control to the
RP image (along with passing control of the console port) so that it can
boot another image and take over as the primary CPU for the entire device.

The native IOS mode MSFC maintains two sets of NVRAM for storing
configuration information. These two NVRAM storage locations also correspond
to two different configuration modes: VLAN database configuration mode and
normal IOS configuration mode.

--The VLAN database  (applied immediately upon exit)
--The local switch configuration (must use write mem or copy run start to
apply)


To enter VLAN database configuration mode enter ¡§vlan database¡¨ at the
router# prompt. The prompt will be modified to router#(vlan) when you enter
this mode. Type exit to return to native IOS and apply changes. This command
mode is where you add and name VLANs.





Native IOS Mode Interface Types


Routed interfaces

--Routed physical interfaces
--Routed SVI interfaces (SVI= switch virtual interface)


Switched interfaces (also called switchport interfaces)

--Access switchport interfaces
--Trunk switchport interfaces


Routed physical interfaces

In this configuration very port receives its own IP and/or IPX address.

Router# conf t
Router(config)#int fa3/1
Router(config-if)# ip address 10.3.1.1 255.255.0.0
Router(config-if)#end
Router#


Access switchport interfaces

To place several ports into the same IP subnet you will need to convert the
ports from a routed interface to a switched interface. Use the command
¡§switchport¡¨ under config-if section to activate this. An access
switchport only supports one VLAN.

Switchports automatically default to VLAN 1. However, this assignment is not
made until after the switchport command has been entered.


Placing two interfaces in the same VLAN (Default= VLAN 1)

Router# conf t
Router(config)#int fa3/1
Router(config-if)# switchport
Router(config)#int fa3/2
Router(config-if)# switchport
Router(config-if)#end
Router#


Placing two interfaces in the same VLAN for VLAN 2 (You can¡¦t apply IP
addressing directly to these interfaces as these are layer 2 ports.

Router# conf t
Router(config)#int fa3/1
Router(config-if)# switchport mode access
Router(config-if)# switchport access vlan 2
Router(config)#int fa3/2
Router(config-if)# switchport mode access
Router(config-if)# switchport access vlan 2
Router(config)#int range 5/1-5, 6/1-24
Router(config-if)# switchport mode access
Router(config-if)# switchport access vlan 3
Router(config-if)#end
Router#



Routed SVI interfaces

To assign an IP address to 3/1 and 3/2 above you will need a separate
interface that can act as the routed interface on behalf of both
switchports. This is where the concept of the Switch Virtual Interface (SVI)
applies. SVI¡¦s use names like interface VLAN 1 or interface VLAN 2. The two
switch ports from above 3/1 and 3/2 are integrated into one layer three
interface and given layer-3 addressing such as IP addresses as needed. To
create a SVI, just enter the command ¡§interface VLAN #¡¨

Router# conf t
Router(config)#int vlan 1
Router(config-if)#ip address 10.1.1.1 255.255.0.0
Router(config)#int vlan 2
Router(config-if)#ip address 10.2.1.1 255.255.0.0
Router(config-if)#end
Router#



Trunk switchport interfaces

Trunk interfaces can be created to carry multiple VLANs using ISL or 802.1Q
encapsulations.

Router# conf t
Router(config)#int fa3/1
Router(config-if)# switchport
Router(config-if)# switchport trunk en

CCNA Chat rooms--24X7

[TSQR1951]

Does anyone know where there is a CHAT room for CCNA's that is open 24 hours 
a day, 7 days a week??

TIA,

Jess

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: why can ping but traceroute stop half way

[Perusek, Rick]

Most versions of traceroute (including Cisco's I believe) use UDP echo
packets rather than ICMP echo. There may be a router or a firewall that is
blocking the UDP echoes while allowing the ICMP echoes through. Microsoft's
tracert command in Windows 95/98 uses ICMP. You might want to try the same
test from a Windows PC and see what you get.

Rick

-Original Message-
From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 04, 2000 4:05 AM
To: [EMAIL PROTECTED]
Subject: why can ping but traceroute stop half way


Hi..Dear all,  

i wonder why I can ping to a site but when I do a traceroute stop half way..
I thought traceroute are based on ICMP as well??  See below


sin-uunet>ping 210.24.136.242
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 210.24.136.242, timeout is 2 seconds:
!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/96/156 ms
sin-uunet>traceroute 210.24.136.242

Type escape sequence to abort.
Tracing the route to 210.24.136.242

  1 Loopback0.GW2.SIN1.Alter.Net (210.80.0.25) 12 msec 12 msec 12 msec
  2 322.ATM5-0-0.XR2.SIN1.Alter.Net (210.80.3.65) 8 msec 12 msec 8 msec
  3 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 12 msec 12 msec 8 msec
  4 202.95.96.30 20 msec 16 msec 16 msec
  5 scipk017.pacific.net.sg (203.120.90.17) 12 msec 16 msec 16 msec
  6 202.42.42.234 20 msec 92 msec 36 msec
  7  *  *  *
  8  *  *  *
  9  *  *  *

==
De informatie opgenomen in dit bericht kan vertrouwelijk zijn en 
is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht 
onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en 
de afzender direct te informeren door het bericht te retourneren. 
==
The information contained in this message may be confidential 
and is intended to be exclusively for the addressee. Should you 
receive this message unintentionally, please do not use the contents 
herein and notify the sender immediately by return e-mail.


==

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Help about BGP regular expression

[Jaeheon Yoo]

Hi,

I quite agree with vtam, 

>From p.376 of "Internet Routing Architectures" Sec. Edition,

  ip as-path access-list 4 permit ^1 ?[0-9]*$

This has some side effects, which allow as-paths such as 109, 110, 120
like vtam has pointed out, in addition to "all the AS paths that start
with 1 and that are of length 2-that is, AS1 and its direct customers"
I think the right answer would be as follows:

  ip as-path access-list 4 permit ^1 [0-9]*$
  ip as-path access-list 4 permit ^1$

The first line is for its direct cumstomers, and the second line for
its local networks. I'm afraid there's no one line version of this.
Am I right?

On 1 Dec 2000 11:41:56 -0500, [EMAIL PROTECTED] ("michael champion")
wrote:

>Although I am by no means a regular expression expert, I do not believe that
>^1 [0-9]*$ will match an AS-path of 1; the space forces a requirement of  a
>maximum of two path elements, with the first element a 1. A single AS-path
>of 1 would not match. Multiple AS-path elements are separated by a space .
>Thus, the expression would match 1 100, 1 200, 1 1, 1 {any AS number}, but
>would not match just 1. What is confusing about regular expressions is that
>every element in the expression is an operator, and sometimes you have
>operators acting on other operators. Thus .* matches all paths because . is
>an operator representing any single character and * is an operator
>representing . repeated as many times as necessary (not just the particular
>character that . matched). This is thus equivalent to .., ..., , etc. as
>many times as necessary.
>
>Powerful, but cryptic, and not well-documented at all by Cisco (who knows
>which type of regular expression engine they are using?) This all comes from
>the Unix world, which is why you see it in Perl, Tcl, egrep, etc.
>
>Regards,
>MLC
>"vtam" <[EMAIL PROTECTED]> wrote in message 907i83$9l6$[EMAIL PROTECTED]">news:907i83$9l6$[EMAIL PROTECTED]...
>> The space is the books. Because it said it match all the AS_paths that
>start
>> with 1 and of length 2, such as AS_path=1, =1 10, =1 200, etc. As you
>said,
>> ? # 0 or 1 of the preceding characters (in this case a space). So if ?=0,
>it
>> is ^1[0-9]*$; if ?=1, it is ^1 [0-9]*$.
>> Do i misread your meaning?
>>
>>
>> "Drew Simonis" <[EMAIL PROTECTED]> wrote in message
>> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> >
>> > ^1 ?[0-9]*$
>> >   ^
>> >   ^
>> >
>> > Is that space yours or the books?  Broken apart, that regex matches
>> > (assuming standard egrep'ish metachars)
>> >
>> > ^ # beginning of line
>> > 1 # followed by the digit 1
>> > (space) # followed by a space
>> > ? # 0 or 1 of the preceding characters (in this case a space)
>> > [0-9] # a single digit within the range of 0-9
>> > * # 0 or more of the preceding characters, up to the end of
>> > # the pattern
>> > $ # end of line char
>> >
>> > So, is this equivalent to ^1[0-9]*$?  I don't think so.  Assuming
>> > that the pattern with a space was a typo, we are allowed an
>> > optional 1. Assuming it wasn't a typo, we are allowed the space
>> > character.  Neither of these options would be matched by your more
>> > restrictive pattern.  As for the specific pattern to match, you
>> > can't really say without knowing what you are matching with.
>> >
>> > Different regex engines support different metachars.
>>
>>
>>
>> _
>> FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>>
>
>
>_
>FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Help with Access List

[Chuck Larrieu]

use 
route maps and policy routing

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]On Behalf Of Perry LucasSent: 
  Monday, December 04, 2000 11:18 AMTo: 
  [EMAIL PROTECTED]Subject: Help with Access 
  List
  Here is the scenario...
   
  A 2600 series router is connecting multiple 
  offices in the same location to the Internet.  The offices are seperated 
  via VLANs on a Cisco 3500 series switch with ISL Tunk links to the router 
  which is running IP Plus.  The IP Subnets are 10.0.1.0, 10.0.2.0, 
  10.0.3.0, etc with a Class C mask.  The router is also NATing 
  the 10.0.x.0 address to a Public IP Pool.  The client wants to 
  prevent any traffic from being routed between subnets.  (i.e. 10.0.1.0 
  can not talk to 10.0.2.0 or 10.0.3.0 and vice versa.)
   
  What is the access list to prevent the subnets 
  from routing to each other, as well as the correct access group on 
  the sub-interface (inbound or outbound) while not interrupting 
  connectivity to the Internet or the IP Nat pool...
   
  Perry

Re: OSPF question

[Paul Schultz]

interface loopback 0
  ip ospf network point-to-point
!

that'll make it push it out as a /24, not /32.





On Mon, 4 Dec 2000, Elaluf, Sylvia, wrote:

> Hello everybody 
> 
> I need some help with the following:
> 
> Given the following
> 
> loopback 0
> ip address 10.10.10.1 255.255.255.0
> 
> router ospf 1
> network 10.0.0.0 0.0.0.255 area 0
> 
> sh ip route 10.10.10.1
> known via connected loopback 0
> distributed via ospf 1
>  10.10.10.1 255.255.255.255
> 
>  what I want is to Advertise the loopback interface as class C and not host
> specific route.
> 
> distributed via ospf 1
>  10.10.10.1 255.255.255.0
> 
> How do I do that?
> 
> Silvia Elaluf-Calderwood  
> [EMAIL PROTECTED]
> 
> "Only two things are infinite, the universe and human stupidity, and I'm not
> sure about the former." 
> - Albert Einstein
> 
> 
> 
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: High availability with Cisco PIX.

[Greene, Patrick]

Title: RE: High availability with Cisco PIX.





No flames for suggestion a non-Cisco box please.  But, I heard RadWare has a firewall loadbalancing appliance so you can have 2 active PIX's instead of using the PIX-FO option.  I have not used it nor heard anything about it..but it may be an option.

Patrick


-Original Message-
From: Yadav, Arvind K (CAP, GECIS) [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 04, 2000 9:39 AM
To: 'Girish G. Pai'; Ryan Ngai Hon Kong; [EMAIL PROTECTED]
Subject: RE: High availability with Cisco PIX.
Importance: High



Ciso PIX does not support HSRP, but it support failover by using other PIX
box. You don't require a dedicated Ethernet port. It has a failover port you
to connect two PIX by using this failover port with failover cable


Arvind.



> -Original Message-
> From: Girish G. Pai [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, December 04, 2000 5:04 AM
> To:   Ryan Ngai Hon Kong; [EMAIL PROTECTED]
> Subject:  RE: High availability with Cisco PIX.
> 
> As per my knowledge goes Cisco PIX does not support HSRP, but it does
> support Failover. To have this feature you need to have another PIX
> hardware
> of the similar configurations. During normal condition failover unit will
> work as monitor. You can also have "statefull" failover wherein active
> sessions need not be re-started during changeover, but feature needs to
> have
> a dedicated Ethernet port towards the both PIX units.
> 
> 
> Girish
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Ryan Ngai Hon Kong
> > Sent: Monday, December 04, 2000 1:37 PM
> > To: '[EMAIL PROTECTED]'
> > Subject: High availability with Cisco PIX.
> >
> >
> > Does anyone know if Cisco PIX could provide redundant or fail-over, work
> > hand-in-hand with HSRP?
> >
> > Ryan Ngai @ ENT
> > E-mail: hkngai    Ext:6805
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and
> > Nondisclosure violations to [EMAIL PROTECTED]
> >
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCDA Question

[Jeff Douglas]

Thanks, I will.

Jeff

""Bharat Suneja"" <[EMAIL PROTECTED]> wrote in message
90gcmr$2ce$[EMAIL PROTECTED]">news:90gcmr$2ce$[EMAIL PROTECTED]...
> I don't think the CCDA exam changed.. there's no old version new version
> confusion here. I took it about couple of weeks ago - it's still the DCN
> test 640-441. Go for it!
>
> Bharat Suneja
>
>
> ""Jeff Douglas"" <[EMAIL PROTECTED]> wrote in message
> 90ejil$nm7$[EMAIL PROTECTED]">news:90ejil$nm7$[EMAIL PROTECTED]...
> > I have recently passed the CCNA exam and I have the old version of the
> Cisco
> > Press CCDA book. Does this book contain enough information for me to be
> > successful with the CCDA ver 2 exam?
> >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: More on VLANs

[Greene, Patrick]

Title: RE: More on VLANs





You need to enable routing for that VLAN interface with the mls command.


Example
interface vlan 200
ip address 10.1.1.1 255.255.255.0
mls rp vtp-domain 
mls rp ip


Patrick Greene


-Original Message-
From: Ben Hockenhull [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 04, 2000 2:22 PM
To: [EMAIL PROTECTED]
Subject: More on VLANs



Now that I have the native vlan and trunking issue resolved, I'm turning
my attention to another problem.


I have a host that will reside on a vlan all by itself.  I've created the
vlan (vlan 200) and configured a fast ethernet port to be a member of that
vlan, and attached the host to it.


The port is up, and I can ping the host on that vlan from the switch
management interface, once I set the management interface to an IP in that
vlan, and set the vlan membership of the management port appropriately.


However, I am unable to ping the host from inside the MSFC.  I've
configured a vlan200 interface, assigned it an IP and brought the
interface up, but I can't reach the host.  Vlan200 is allowed on the ISL
trunk to the MSFC.


I suspect that this is because I misunderstand something fundamental about
how vlans work on the Cat 6500.  I further suspect that this is related to
the native vlan problem I was having before.


If I change the vlan on the host port to the native vlan, and change the
vlan interface on the MSFC to the native vlan, I can ping from the MSFC.
Therefore, I think that frames from vlan200 are not being forwarded to
the MSFC for some reason.  The documentation I've read doesn't seem to
touch on this too much.


Ben


--
Ben Hockenhull
[EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

100BaseT Between Buildings

[Rossetti, Stan]

Does anyone know of a way to implement 100BaseT between 2 buildings that are
¾  (~ 4100 feet) of a mile apart?  I think the distance limitation per
segment is 200 meters.




Thanks

Stan Rossetti

Russia Services Group
Voice:  (256) 544-5031
Email:  [EMAIL PROTECTED]
Beeper:  544-5031 pin 0112

CCDA, CCNA, CCSE

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Rip problem , suppressing null update!

[Jim Erickson]

I believe, and am very prepared to be proven wrong, that when sending the
update it *should* assume the mask of the sending interface since it is in
the same classful network. If it were in a different classful network, it
would assume a classful mask of 255.255.0.0.

However, it seems to be acting as though it is assuming a classful mask in
this case. Which means that you could get the "suppressing null update" due
to split horizon.

---JRE---

"Mohamed Heeba" <[EMAIL PROTECTED]> wrote in message
91B200CBBEC3D111992A00805F31E6CB880767@MINAMAIL">news:91B200CBBEC3D111992A00805F31E6CB880767@MINAMAIL...
> hi
> it is ver 1 rip , i know it will not carry mask info , my questing is if
the
> mask is inconsistent , will it send updates or not ??
>
> thx
>
> > -Original Message-
> > From: Jim Erickson [SMTP:[EMAIL PROTECTED]]
> > Sent: Monday, December 04, 2000 12:01 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: Rip problem , suppressing null update!
> >
> > Which RIP version are you using? IIRC, version 1 doesn't support VLSM
> > since
> > it doesn't carry subnet mask info in its routing updates.
> >
> > ---JRE---
> >
> > "Mohamed Heeba" <[EMAIL PROTECTED]> wrote in message
> > 91B200CBBEC3D111992A00805F31E6CB880765@MINAMAIL">news:91B200CBBEC3D111992A00805F31E6CB880765@MINAMAIL...
> > > guys !
> > > i have two routers connected through their serial , im configuring rip
> > on
> > > them
> > >
> > > R1 e0 ip add is 172.16.1.1/27
> > > ser 0 ip add is 172.16.1.33/28
> > >
> > > R2 e0 ip add is 172.16.1.49/29
> > > ser 0 ip add is 172.16.1.34/28
> > >
> > > there is no rip updates between the two routers ..im getting only
> > > "suppressing null  updates "
> > >
> > > also when i change the mask of ser0 on R1 to /27 , the updates pass
> > normally
> > > and take the mask of the
> > > /28 on the other end
> > >
> > > my question is
> > > Does this mean that if the mask is inconsistent on RIP router , it
will
> > not
> > > send updates ?
> > > this means when R1 mask is consistent (/27) for both interfaces , the
R1
> > > will send updates but it will not receive anything because R2 masks
are
> > not
> > > consistent ??
> > >
> > >
> > > somebody to confirm please !
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: 100BaseT Between Buildings

[Jim Erickson]

Fiber in the middle, UTP-fiber converters on the ends.

---JRE---

""Rossetti, Stan"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Does anyone know of a way to implement 100BaseT between 2 buildings that
are
> ¾  (~ 4100 feet) of a mile apart?  I think the distance limitation per
> segment is 200 meters.
>
>
>
>
> Thanks
>
> Stan Rossetti
>
> Russia Services Group
> Voice:  (256) 544-5031
> Email:  [EMAIL PROTECTED]
> Beeper:  544-5031 pin 0112
>
> CCDA, CCNA, CCSE
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: OSPF question

[Eddie Parra]

You can also summarize the route

-Eddie

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Paul Schultz
Sent: Monday, December 04, 2000 6:31 PM
To: Elaluf, Sylvia,
Cc: [EMAIL PROTECTED]
Subject: Re: OSPF question




interface loopback 0
  ip ospf network point-to-point
!

that'll make it push it out as a /24, not /32.





On Mon, 4 Dec 2000, Elaluf, Sylvia, wrote:

> Hello everybody
>
> I need some help with the following:
>
> Given the following
>
> loopback 0
> ip address 10.10.10.1 255.255.255.0
>
> router ospf 1
> network 10.0.0.0 0.0.0.255 area 0
>
> sh ip route 10.10.10.1
> known via connected loopback 0
> distributed via ospf 1
>  10.10.10.1 255.255.255.255
>
>  what I want is to Advertise the loopback interface as class C and not
host
> specific route.
>
> distributed via ospf 1
>  10.10.10.1 255.255.255.0
>
> How do I do that?
>
> Silvia Elaluf-Calderwood
> [EMAIL PROTECTED]
>
> "Only two things are infinite, the universe and human stupidity, and I'm
not
> sure about the former."
> - Albert Einstein
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Rip problem , suppressing null update!

[Brian]

On Mon, 4 Dec 2000, Mohamed Heeba wrote:

> guys !
> i have two routers connected through their serial , im configuring rip on
> them
>
> R1 e0 ip add is 172.16.1.1/27
> ser 0 ip add is 172.16.1.33/28
>
> R2 e0 ip add is 172.16.1.49/29
> ser 0 ip add is 172.16.1.34/28
>
> there is no rip updates between the two routers ..im getting only
> "suppressing null  updates "

are you using rip v1?  you need to use something that understands VLSM.
Otherwise split horizon will get you in the above case.

>
> also when i change the mask of ser0 on R1 to /27 , the updates pass normally
> and take the mask of the
> /28 on the other end

yes they use the mask of the interface they have that subnet on..

>
> my question is
> Does this mean that if the mask is inconsistent on RIP router , it will not
> send updates ?

you can't use inconsistant masks for a network running a FLSM protocol
like RIPv1.  You have to either use like masks, or use a VLSM capible
protocol.

> this means when R1 mask is consistent (/27) for both interfaces , the R1
> will send updates but it will not receive anything because R2 masks are  not
> consistent ??
>

brian

>
> somebody to confirm please !
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

---
Brian Feeny, CCNP+ATM, CCDP   [EMAIL PROTECTED]
Network Administrator
ShreveNet Inc. (ASN 11881)

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: ATM Lane in switching 2.0(BCMSN)

[SAM Meng Wai]

There isn't any questions on ATM LANE which i take on this
year Sept papers. Good Luck

Rgds,
Sam

> -Original Message-
> From: STRAND Scott [SMTP:[EMAIL PROTECTED]]
> Sent: Tuesday, December 05, 2000 4:39 AM
> To:   Brian; Waqar M
> Cc:   [EMAIL PROTECTED]
> Subject:  Re: ATM Lane in switching 2.0(BCMSN)
> 
> There wasn't any on the one I took back in late August. Add trunking to
> the list mentioned below.
> 
> --Scott Strand
> CCNP
> 
> Brian wrote:
> 
> > Its been a while, but thinking back, I don't believe so.  And if it did,
> > it was so little I wouldn't worry to much on lane.
> >
> > Spanning Tree, VLANs, EtherChannel, MultiLayer Switchingthats
> the
> > type of stuff you want to study up on
> >
> > On Mon, 4 Dec 2000, Waqar M wrote:
> >
> > > Dear All,
> > >
> > > Can someone plz tell me that does SWITCHING (BCMSN)exam contain ATM
> Lane
> > > questions??? I have completed my preparation and i m bit confused a
> bit that
> > > whether to prepare for LANE also or not. Moreover, any sort of final
> tips as
> > > i m going to have this exam after 3 days. Any sort of help will be
> highly
> > > appreciated.
> > >
> > > Thanks,
> > >
> > > Waqar M.
> > > Network Engineer
> > >
> __
> ___
> > > Get more from the Web.  FREE MSN Explorer download :
> http://explorer.msn.com
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> > ---
> > Brian Feeny, CCNP+ATM, CCDP   [EMAIL PROTECTED]
> > Network Administrator
> > ShreveNet Inc. (ASN 11881)
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Official Cisco Courseware

[Roman McDonald]

Yes

At 09:46 PM 12/3/00 -0600, you wrote:

>Has anyone ever taken a Cisco course, and they give you a 3 ring binder
>(not a spiral) with hole punched pages that go into it.  And the pages are
>NOT color, but just like black and white/xerox?  Or are the pages in the 3
>ring binders suppose to be color?
>
>Brian
>
>
>---
>Brian Feeny, CCNP, CCDP   [EMAIL PROTECTED]
>Network Administrator
>ShreveNet Inc. (ASN 11881)
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Static Routes

[SAM Meng Wai]

Yes. I agree with Philip static route will not support load uneven balancing
but
EIGRP will. Static route will send out the packet in rotating basis and
ignore
the BW define.

Q 1. Up to 6 static routes can be supported by Cisco IOS. 

Rgds,
Sam

> -Original Message-
> From: Phillip Heller [SMTP:[EMAIL PROTECTED]]
> Sent: Tuesday, December 05, 2000 1:47 AM
> To:   Brian
> Cc:   Hussam Adili; [EMAIL PROTECTED]
> Subject:  Re: Static Routes
> 
> > 2) how Can traffic be load shared between two redundant links on 1
> to 3
> > ratio  using static routing  (i.e. 1 packet on one interface and 3
> > packets on the other.)
> 
> I don't believe you can do this.not "balancing" like that.  Do
> you
> have something against running EIGRP on those links?
> 
> How about 2 secondary addresses on the interface that you wish to send 3/4
> of the traffic over?
> 
> ex:
> 
> int s0
> ip address 10.0.0.1 255.255.255.252
> 
> int s0
> ip address 10.0.0.5 255.255.255.252
> ip address 10.0.0.9 255.255.255.252 sec
> ip address 10.0.0.13 255.255.255.252 sec
> 
> ip route 192.168.0.0 255.255.255.0 10.0.0.2
> ip route 192.168.0.0 255.255.255.0 10.0.0.6
> ip route 192.168.0.0 255.255.255.0 10.0.0.10
> ip route 192.168.0.0 255.255.255.0 10.0.0.14
> 
> Don't know if this'll work; never tried it.
> 
> Regards,
> 
> --phil
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Rip problem , suppressing null update!

[Mohamed Heeba]

i believe that i shouldnt use different masks on Ripv1 router , i was trying
to check if the mask will be changed on the other end of the connection
(which is right :)) , although now this doesnt have any meaning since the
serial link should aslo have the same mask of the ethernet subnet of the
source router (which will force me to make consistant mask for the entire
network to make everything work fine )


i dont think split horizon has anything here ...hasnt it ??
 
thx for the help 
> -Original Message-
> From: Brian [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, December 04, 2000 3:50 PM
> To:   Mohamed Heeba
> Cc:   '[EMAIL PROTECTED]'
> Subject:  Re: Rip problem , suppressing null update!
> 
> On Mon, 4 Dec 2000, Mohamed Heeba wrote:
> 
> > guys !
> > i have two routers connected through their serial , im configuring rip
> on
> > them
> >
> > R1 e0 ip add is 172.16.1.1/27
> > ser 0 ip add is 172.16.1.33/28
> >
> > R2 e0 ip add is 172.16.1.49/29
> > ser 0 ip add is 172.16.1.34/28
> >
> > there is no rip updates between the two routers ..im getting only
> > "suppressing null  updates "
> 
> are you using rip v1?  you need to use something that understands VLSM.
> Otherwise split horizon will get you in the above case.
> 
> >
> > also when i change the mask of ser0 on R1 to /27 , the updates pass
> normally
> > and take the mask of the
> > /28 on the other end
> 
> yes they use the mask of the interface they have that subnet on..
> 
> >
> > my question is
> > Does this mean that if the mask is inconsistent on RIP router , it will
> not
> > send updates ?
> 
> you can't use inconsistant masks for a network running a FLSM protocol
> like RIPv1.  You have to either use like masks, or use a VLSM capible
> protocol.
> 
> > this means when R1 mask is consistent (/27) for both interfaces , the R1
> > will send updates but it will not receive anything because R2 masks are
> not
> > consistent ??
> >
> 
> brian
> 
> >
> > somebody to confirm please !
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> 
> ---
> Brian Feeny, CCNP+ATM, CCDP   [EMAIL PROTECTED]
> Network Administrator
> ShreveNet Inc. (ASN 11881)

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Have anyone downloaded this free CCNA material [1:1026]

[NeoLink2000]

In a message dated 12/4/00 7:03:49 PM Eastern Standard Time, [EMAIL PROTECTED] writes:


Patrick:

could you go into more detail, as to why it is well worth it??

thanks,

Jess


Well I didn't see the original post but from the subject line I would say it's deffinately well worth it. Why? It's free...

Mark Zabludovsky ~ CCNA, CCDA, 1/2-NP
[EMAIL PROTECTED]

 "Even if I knew I had only 1 more week to live, I would still schedule my CCIE lab. I would just have to work a little harder I guess. After all, without any goals in life, I'm dead already."
   ~Mark Zabludovsky~

RE: hub-and-spoke

[jenny . mcleod]

More generally, hub and spoke topology just refers to a configuration with
a central site (which could be a single router, a collection of networks,
or a whole campus) which has remote sites connected to it, but where the
remote sites do not connect to each other directly.  So if you draw a
diagram of the network, you have the central site as the hub of a wheel
with the remote sites connected to the central site by the spokes of the
wheel.
Hub and spoke doesn't necessarily mean the remote sites can't ping each
other, although that is what happens with some configurations.  It just
means that any communication between the remote sites goes via the central
site.
Also often known as a star topology.

The glossary of 'Top-Down Network Design' gives this definition:
"hub-and-spoke topology - a topology that consists of one central network
and a set of remote networks each with one connection to the central
network and no direct connections to each other.  Traffic between remote
networks goes through the hub network."

JMcL

-- Forwarded by Jenny Mcleod/NSO/CSDA on 05/12/2000
10:14 am ---


SAM Meng Wai <[EMAIL PROTECTED]>@groupstudy.com on 04/12/2000 08:49:44
pm

Please respond to SAM Meng Wai <[EMAIL PROTECTED]>

Sent by:  [EMAIL PROTECTED]



To:   "'Hook Soso'" <[EMAIL PROTECTED]>
  [EMAIL PROTECTED]
cc:


Subject:  RE: hub-and-spoke



Hub-and-spoke topology refer to the role of router in the networking
world. Spoke router send out request and receive request but not passing
the request from one interface to the other interface in the router.

This function will be perform by the Hub router. For example,

- Router A direct connect to Router B
- Router C direct connect to Router B
- Router B direct connect to both router A and C

Router A and C are the spoke router and router B is Hub router.
Router A can ping to router B and router C can ping to router B.
Router A is unable to ping to router C as they don't have direct
connection. However, since router B is acting as a Hub. It will translate
the ping packet so that router A is able to ping router C without any
direct

connection.

Rgds,
Sam

> -Original Message-
> From:   Hook Soso [SMTP:[EMAIL PROTECTED]]
> Sent:   Monday, December 04, 2000 3:51 PM
> To: [EMAIL PROTECTED]
> Subject: hub-and-spoke
>
> Could someone tell me what's the meaning of hub-and-spoke topology?
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: why can ping but traceroute stop half way

[Priscilla Oppenheimer]

For traceroute, Cisco and most Unix platforms use an outgoing frame that 
goes to a large UDP port number, starting with 33434. This allows the frame 
to get past routers and to the end station, which should send a Destination 
Unreachable, Port Unreachable.

Newer vendor implementations (like Microsoft) use ICMP Echo (ping) for the 
outgoing frame.

The routers in the path return Destination Unreachable, TTL Exceeded. The 
end node sends Destination Unreachable, Port Unreachable for Cisco, et. al. 
For Microsoft the end node should just send a normal Ping response. So 
writing access lists, and getting through access lists, can get a bit 
complicated.

Priscilla

At 06:33 PM 12/4/00, Gareth Hinton wrote:
>I believe, but am willing to be shot down in flames if I'm wrong that
>Traceroute uses different port numbers to ICMP. I've allowed ICMP through
>firewalls before, then tried to traceroute and the trace has been dropped.
>The destination port being dropped was logged as something like 34543 and
>incremented by one for each hop (thats not the exact number but it's in that
>order-5 figures).
>If you try an extended trace the default port number (last requirement) is
>around that mark too.
>
>I know how a ping works (increasing TTL for each hop, but on a fixed port)
>but not sure at all of trace route. Is there any way to fix the traceroute
>port, or am I barking up the wrong tree?
>
>Been wondering about this for a while. Anybody care to put me out of my
>misery. (Or do I take another side track and find out myself)
>
>Cheers,
>
>Gaz
>
>""Brandon Peyton"" <[EMAIL PROTECTED]> wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Weird.
> >
> > Within UUNET network from AU:
> >
> > Tracing route to 210.24.136.242 over a maximum of 30 hops
> >
> >   1   110 ms   110 ms   110 ms  tnt7.syd2.da.uu.net [63.12.31.206]
> >   2   101 ms   100 ms   110 ms  63.12.150.1
> >   3   100 ms   111 ms   100 ms  351.ATM3-0-0.XR1.SYD2.Alter.Net
> > [210.80.3.225]
> >   4   100 ms   120 ms   121 ms  ATM5-0-0.TR1.SYD2.Alter.Net
>[210.80.48.133]
> >   5   581 ms   600 ms   591 ms  296.ATM9-0-0.TR1.SIN1.Alter.Net
> > [210.80.48.173]
> >
> >   6   580 ms   591 ms   591 ms  POS1-0-0.XR1.SIN1.Alter.Net [210.80.48.50]
> >   7   641 ms   611 ms   591 ms  311.ATM5-0-0.GW1.SIN1.Alter.Net
> > [210.80.3.42]
> >   8   591 ms   581 ms   591 ms  202.95.96.30
> >   9   580 ms   591 ms   591 ms  scipk017.pacific.net.sg [203.120.90.17]
> >  10  1522 ms   821 ms   872 ms  202.42.42.234
> >  11   791 ms   921 ms   831 ms  210.24.136.242
> >
> > 
> > Tracing from GW2.SIN1(where you're connected)...from SG
> >
> > GW2.SIN1#tr 210.24.136.242
> >
> > Type escape sequence to abort.
> > Tracing the route to 210.24.136.242
> >
> >   1 422.ATM8-0-0.XR1.SIN1.Alter.Net (210.80.3.45) 0 msec
> >   2 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 4 msec
> >   3 202.95.96.30 188 msec 368 msec 484 msec
> >   4 scipk017.pacific.net.sg (203.120.90.17) [AS 4628] 176 msec 116 msec
>136
> > msec
> >   5 202.42.42.234 [AS 4628] 204 msec 116 msec 120 msec
> >   6  *  *  *
> >
> > Would anyone like to explain why (still in uunet network) this happens?
> > Without doing much research(cuz im at home)...
> >
> > Thanks,
> > Brandon
> >
> >
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > SAM Meng Wai
> > Sent: Monday, December 04, 2000 2:11 AM
> > To: 'Sim, CT (Chee Tong)'; [EMAIL PROTECTED]
> > Subject: RE: why can ping but traceroute stop half way
> >
> >
> > Hope i can answer your questions. Some of the routers disable ICMP
> > response. Thus, they will not reply you but able to route packet through
> > and the host you ping to will reply your ICMP packets.
> >
> > Rgds,
> > Sam
> >
> >
> > > -Original Message-
> > > From: Sim, CT (Chee Tong) [SMTP:[EMAIL PROTECTED]]
> > > Sent: Monday, December 04, 2000 5:05 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: why can ping but traceroute stop half way
> > >
> > > Hi..Dear all,
> > >
> > > i wonder why I can ping to a site but when I do a traceroute stop half
> > > way..
> > > I thought traceroute are based on ICMP as well??  See below
> > >
> > >
> > > sin-uunet>ping 210.24.136.242
> > > Type escape sequence to abort.
> > > Sending 5, 100-byte ICMP Echos to 210.24.136.242, timeout is 2 seconds:
> > > !
> > > Success rate is 100 percent (5/5), round-trip min/avg/max = 32/96/156 ms
> > > sin-uunet>traceroute 210.24.136.242
> > >
> > > Type escape sequence to abort.
> > > Tracing the route to 210.24.136.242
> > >
> > >   1 Loopback0.GW2.SIN1.Alter.Net (210.80.0.25) 12 msec 12 msec 12 msec
> > >   2 322.ATM5-0-0.XR2.SIN1.Alter.Net (210.80.3.65) 8 msec 12 msec 8 msec
> > >   3 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 12 msec 12 msec 8 msec
> > >   4 202.95.96.30 20 msec 16 msec 16 msec
> > >   5 scipk017.pacific.net.sg (203.120.90.17) 12 msec 16 msec 16 msec
> > >   6 202.42.42.234 20 msec 92 msec 36 msec
> > >   7  *  * 

RE: Rip problem , suppressing null update!

[Brian]

On Tue, 5 Dec 2000, Mohamed Heeba wrote:

> i believe that i shouldnt use different masks on Ripv1 router , i was trying
> to check if the mask will be changed on the other end of the connection
> (which is right :)) , although now this doesnt have any meaning since the
> serial link should aslo have the same mask of the ethernet subnet of the
> source router (which will force me to make consistant mask for the entire
> network to make everything work fine )
>
>
> i dont think split horizon has anything here ...hasnt it ??

your right.  What I was thinking (without reading) was that sometimes when
using VLSM, you'll create a situation where you have overlapping subnets,
and that can lead to a problem where a router won't accept the update
because it thinks it already is announcing that same route..I was
to quick with the reply

brian


>
> thx for the help
> > -Original Message-
> > From:   Brian [SMTP:[EMAIL PROTECTED]]
> > Sent:   Monday, December 04, 2000 3:50 PM
> > To: Mohamed Heeba
> > Cc: '[EMAIL PROTECTED]'
> > Subject:Re: Rip problem , suppressing null update!
> >
> > On Mon, 4 Dec 2000, Mohamed Heeba wrote:
> >
> > > guys !
> > > i have two routers connected through their serial , im configuring rip
> > on
> > > them
> > >
> > > R1 e0 ip add is 172.16.1.1/27
> > > ser 0 ip add is 172.16.1.33/28
> > >
> > > R2 e0 ip add is 172.16.1.49/29
> > > ser 0 ip add is 172.16.1.34/28
> > >
> > > there is no rip updates between the two routers ..im getting only
> > > "suppressing null  updates "
> >
> > are you using rip v1?  you need to use something that understands VLSM.
> > Otherwise split horizon will get you in the above case.
> >
> > >
> > > also when i change the mask of ser0 on R1 to /27 , the updates pass
> > normally
> > > and take the mask of the
> > > /28 on the other end
> >
> > yes they use the mask of the interface they have that subnet on..
> >
> > >
> > > my question is
> > > Does this mean that if the mask is inconsistent on RIP router , it will
> > not
> > > send updates ?
> >
> > you can't use inconsistant masks for a network running a FLSM protocol
> > like RIPv1.  You have to either use like masks, or use a VLSM capible
> > protocol.
> >
> > > this means when R1 mask is consistent (/27) for both interfaces , the R1
> > > will send updates but it will not receive anything because R2 masks are
> > not
> > > consistent ??
> > >
> >
> > brian
> >
> > >
> > > somebody to confirm please !
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> > ---
> > Brian Feeny, CCNP+ATM, CCDP   [EMAIL PROTECTED]
> > Network Administrator
> > ShreveNet Inc. (ASN 11881)
>

---
Brian Feeny, CCNP+ATM, CCDP   [EMAIL PROTECTED]
Network Administrator
ShreveNet Inc. (ASN 11881)

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

dhcp questions ???

[lawrence sculark]

how can yu monitor a dhcp server to ensure that it is operating 
correctly...??
any suggestions...
can you monitor it from snmp, do you need sms for nt to monitor ists 
services...can you only monitor or test from the server itselflawrence

>From: Benjamin Walling <[EMAIL PROTECTED]>
>Reply-To: Benjamin Walling <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED], "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
>Subject: RE: 2610 csu/dsu configuration
>Date: Mon, 4 Dec 2000 14:12:29 -0500
>MIME-Version: 1.0
>Received: from [208.32.175.78] by hotmail.com (3.2) with ESMTP id 
>MHotMailBBF55EA300464004318DD020AF4E04A017; Mon Dec 04 14:00:43 2000
>Received: from localhost (mail@localhost)by groupstudy.com (8.9.3/8.9.3) 
>with SMTP id PAA07811;Mon, 4 Dec 2000 15:25:55 -0500
>Received: by groupstudy.com (bulk_mailer v1.12); Mon, 4 Dec 2000 15:25:55 
>-0500
>Received: (from listserver@localhost)by groupstudy.com (8.9.3/8.9.3) id 
>PAA07794GroupStudy Mailer; Mon, 4 Dec 2000 15:25:53 -0500
>Received: from primary.edentaldirect.com ([64.182.115.70])by groupstudy.com 
>(8.9.3/8.9.3) with ESMTP id PAA07774GroupStudy Mailer; Mon, 4 Dec 2000 
>15:25:51 -0500
>Received: by PRIMARY with Internet Mail Service (5.5.2650.21)id ; 
>Mon, 4 Dec 2000 14:12:30 -0500
>From [EMAIL PROTECTED] Mon Dec 04 14:01:23 2000
>Message-ID: 
>X-Mailer: Internet Mail Service (5.5.2650.21)
>Sender: [EMAIL PROTECTED]
>Precedence: bulk
>
>You know, Cisco's ConfigMaker handles the 26xx series as well as the WIC
>cards.  It will guide you through a wizard and then make the config for 
>you.
>You can use this to see how to do things that you don't know.
>
>-Original Message-
>From: lawrence sculark [mailto:[EMAIL PROTECTED]]
>Sent: Monday, December 04, 2000 12:43 PM
>To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
>Subject: RE: 2610 csu/dsu configuration
>
>
>now what about the configuration of ipx on the serial interfacesany
>suggestions.i am unable to configure ipx on the serials...
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]