Mixing IOS versions in CCNP Lab, Kosher or Not?

2000-12-30 Thread henrygguzman

Hello All,
I just started doing CCNP labs at home and am having some problems
getting BGP to work correctly. My home lab consists of 2 Cisco 3000 series
routers with v12.0 IOS, two  2501's (borrowed) with version 11.0, and one
Cisco Access Pro router card with version 11.3. My question is could the mix
and match nature of the different IOS's in my home lab cause problems with
BGP syncing up correctly? For instance, in one lab I did with 3 routers, all
the routers "found" each others routes via BGP but I could not ping end to
end thru the middle router. In other words if the routes are seen in the
routing table, why can't I ping? Yes I checked clocking and the ports are
all up & up.  Or what's going on if routes don't show up and I've correctly
followed the instructions for entering the neighbor and network statements?
I can ping from point to point. BTW, the labs I'm doing are from The Cisco
Networking Academy Level 5 Chapter 8.
Is it just me messing up somewhere, or should I get all the routers
talking the same IOS? Problem is, I don't have a login at Cisco's web site
that will enable me to download an IOS image. Suggestions anyone?

Thanks for your time and input.
 Happy New Year!

Henry Guzman


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF summary problem!

2000-12-30 Thread Mohamed Heeba

hi Greg;
thx for your help , but i guess the problem is something else , the OSPF
domain is supposed to send a route to the IGRP with 24 bit mask , which
never happened 
the route exits in the OSPF as 28 bit mask subnet , so it is natural that it
will not be propagated to the IGRP domain unless I summarize at the 24 bit .

i did already this summarization , i tried area range command to summarize
from area 0 to the others , i tried aslo the summary-address at the ASBR
router , still the route 
didnt propagate ...and the weired part is there is another subnet in the
OSPF domain which is 26 bit ,i summarized it and it propagate naturally to
the IGRP .


anyone has any comment??
thx 

> -Original Message-
> From: Schmitt, Greg [SMTP:[EMAIL PROTECTED]]
> Sent: Saturday, December 30, 2000 1:14 PM
> To:   'Mohamed Heeba'
> Subject:  RE: OSPF summary problem!
> 
> Hi Mohamed,
> 
> On way around the variable length versus fixed length redistribution
> problem with igrp is through the use of the 'ip
> default-network' command.
> 
> In your case, look at the routing table on r5, and find a classful route
> that is being redistributed into igrp on r4. That
> is, a route in the routing table that is defined at the default boundary
> (e.g. 137.225.0.0). Once you've found that route
> (you may have to create something on routers r1, r2, or r3) type the ip
> default-route xxx.xxx.xxx.xxx command on r5
> (replacing the xxx's with the actual route).
> 
> This acts like a static route, but (may) gets you around the "can't use
> any static routes" restriction.
> 
> Hope this helps!
> 
> Happy New Year!
> 
> Greg
> 
> Greg Schmitt
> 
> Internetwork Solutions Engineer
> ThruPoint, Inc. (formerly Total Network Solutions)
> Voice: 410-349-9772
> Cell:  443-822-5183
> Pager: 888-773-0423 or [EMAIL PROTECTED]
> e-mail: [EMAIL PROTECTED]
> 
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Mohamed Heeba
> Sent: Friday, December 29, 2000 1:30 PM
> To: '[EMAIL PROTECTED]'
> Cc: '[EMAIL PROTECTED]'
> Subject: OSPF summary problem!
> 
> 
> i was trying the Fatkid 501 redistribution lab when i got this problem
> 
> the lab is 5 routers , 3 of them  (R1,R2,R3) are in area 0 over Frame
> relay
> with a subnet of 28 bit mask
> one of this routers ( R3) are connected to another router ( R4) forming
> area
> 3 on the link between them , and another area on its loopback interface
> (area 2 )
> 
> now R4 is connected to another router (R5) and the link between them is
> running IGRP with subnet of mask 24 ...i hope this is clear to you
> 
> the problem is
> i have formed a virtual link between R4 and R3 and things looked fine to
> me
> BUT when i redistribute the OSPF to the IGRP , the 28 bit subnet never
> appeared to R5
> i summarized the network , trying the AREA range command at R3 , then at
> R4
>  i tried also the summary-address at R4but the subnet never appeared
> in
> R5
> although some other networks ( of 26 bit masks) appreared fine when i
> summarized them at 24 bit boundry
> can anyone knows where is the problem ??
> 
> 
> NOTE:when i configured the frame relay interfaces as point-to-mulitpoint ,
> only the 32 address appreared in the routing tables , when i changed the
> network type to broadcast type , the 28 bit subnet appeared ..but still it
> didnt go to the far IGRP router ...
> wat is the problem 
> 
> 
> 
> Mohamed HEEBA
> 
> 
> 
> 
> 
> 
> ___
> To unsubscribe from the CCIELAB list, send a message to
> [EMAIL PROTECTED] with the body containing:
> unsubscribe ccielab

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



V.11, X.21, and RS232 are =

2000-12-30 Thread John lay

Guys,

are the V.11, X.21 and the RS232 are the same interface.

Thanks 





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Help Required - Desperately

2000-12-30 Thread Mani .K

Hi all,
I am badly in need of help from you Cisco gurus. We have a 2522 Router
which was bought around 1996/1997. It doesnt boot now. The console
screenshot is shown below.



System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 8192 Kbytes of main memory

  Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

   cisco Systems, Inc.
   170 West Tasman Drive
   San Jose, California 95134-1706



Cisco Internetwork Operating System Software 
IOS (tm) 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c),
RELEASE SOFTWARE (fc1)
Copyright (c) 1986-1996 by cisco Systems, Inc.
Compiled Fri 27-Dec-96 17:33 by loreilly
Image text-base: 0x0101, data-base: 0x1000

Local Timeout (control reg=0x118) Error, address: 0x2101884 at 0x1076504
(PC)
---

I have tried to enter the ROM Monitor prompt and tried to set the config
register as to boot from ROM and enter setup mode. But Neither does it
enter the setup mode nor does it come up to the router promt. The above
screen repeats itself.

Can anyone infer what is the problem with the router. Also please tell
me what I can do to get the router prompt.

Thanks in advance.
S.Kalidasan



http://mail.indiainfo.com
First you had 10MB of free mail space.
Now you can send mails in your own language !!!

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Hyperterminal

2000-12-30 Thread Kevin_Cullimore

If you're trapped within a microsoft platform, the minimium enhancement you
should consider is the free upgrade from http://www.hilgraeve.com, although
i'm more than willing to allow that other alternatives might in fact be far
superior.





"Gary Joyce" <[EMAIL PROTECTED]>@groupstudy.com on 12/31/2000 12:55:03 AM

Please respond to "Gary Joyce" <[EMAIL PROTECTED]>

Sent by:  [EMAIL PROTECTED]

To:   <[EMAIL PROTECTED]>
cc:(bcc: Kevin Cullimore)
Subject:  RE: Hyperterminal


I've also had problems with Hyperterminal. Try TeraTerm Pro, it's freeware
and even has an SSH plug-in. You can get it here:

http://hp.vector.co.jp/authors/VA002416/teraterm.html

This is the first app to go on any PC I use. You can Telnet, SSH, and
console all from the same program.

Gary

-Original Message-
From: Lauren Child [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 30, 2000 9:16 PM
To: [EMAIL PROTECTED]
Subject: Re: Hyperterminal




Austin wrote:
>
> All of a sudden, the router will not accept me hitting the ENTER key to
get
> started. Same thing happens on a break sequence. I cannot seem to send
> anything to the terminal.
> This is how far it goes and then nothing:
>

I had the same problem with a 2501 this christmas - I was selling it and
another to a chap at home, one was fine and the other wouldnt accept any
input except a break at bootup.  Then it was just frozen.  After
fiddling with cables, taking the lid off the router and wiggling simms
in case theyd come loose, rebooting several times, and taking mem and
flash out to force a boot to rom, we switched the cable on to my laptop
(it was connected to my brothers PC) and it worked fine.

The only difference was - 1) my brothers PC was having problems with an
AGP graphics card at the time, and my laptop wasnt, and 2) My brothers
PC was win98, mine was win98SE

I have no idea what went on, and why it only affected one router and not
the other (which is why we figured corrupt ios or something).

Have you tried a different PC/OS?

TTFN
Lauren

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



+-+
| This message may contain confidential and/or privileged |
| information.  If you are not the addressee or authorized to |
| receive this for the addressee, you must not use, copy, |
| disclose or take any action based on this message or any|
| information herein.  If you have received this message in   |
| error, please advise the sender immediately by reply e-mail |
| and delete this message.  Thank you for your cooperation.   |
+-+

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Help Required - Desperately

2000-12-30 Thread S.Kalidasan Shanmugakani

Hi all,
I am badly in need of help from you Cisco gurus. We have a 2522 Router which 
was bought around 1996/1997. It doesnt boot now. The console screenshot is 
shown below.



System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 8192 Kbytes of main memory

  Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

   cisco Systems, Inc.
   170 West Tasman Drive
   San Jose, California 95134-1706



Cisco Internetwork Operating System Software
IOS (tm) 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE 
SOFTWARE (fc1)
Copyright (c) 1986-1996 by cisco Systems, Inc.
Compiled Fri 27-Dec-96 17:33 by loreilly
Image text-base: 0x0101, data-base: 0x1000

Local Timeout (control reg=0x118) Error, address: 0x2101884 at 0x1076504 
(PC)
---

I have tried to enter the ROM Monitor prompt and tried to set the config 
register as to boot from ROM and enter setup mode. But Neither does it enter 
the setup mode nor does it come up to the router promt. The above screen 
repeats itself.

Can anyone infer what is the problem with the router. Also please tell me 
what I can do to get the router prompt.

Thanks in advance.
S.Kalidasan
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Hyperterminal

2000-12-30 Thread Gary Joyce

I've also had problems with Hyperterminal. Try TeraTerm Pro, it's freeware
and even has an SSH plug-in. You can get it here:

http://hp.vector.co.jp/authors/VA002416/teraterm.html

This is the first app to go on any PC I use. You can Telnet, SSH, and
console all from the same program.

Gary

-Original Message-
From: Lauren Child [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 30, 2000 9:16 PM
To: [EMAIL PROTECTED]
Subject: Re: Hyperterminal




Austin wrote:
> 
> All of a sudden, the router will not accept me hitting the ENTER key to
get
> started. Same thing happens on a break sequence. I cannot seem to send
> anything to the terminal.
> This is how far it goes and then nothing:
>

I had the same problem with a 2501 this christmas - I was selling it and
another to a chap at home, one was fine and the other wouldnt accept any
input except a break at bootup.  Then it was just frozen.  After
fiddling with cables, taking the lid off the router and wiggling simms
in case theyd come loose, rebooting several times, and taking mem and
flash out to force a boot to rom, we switched the cable on to my laptop
(it was connected to my brothers PC) and it worked fine.

The only difference was - 1) my brothers PC was having problems with an
AGP graphics card at the time, and my laptop wasnt, and 2) My brothers
PC was win98, mine was win98SE

I have no idea what went on, and why it only affected one router and not
the other (which is why we figured corrupt ios or something).

Have you tried a different PC/OS?

TTFN
Lauren

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Welcome to a new year

2000-12-30 Thread Natasha

Actually a late Fridays funnies.


  (I'd like to dedicate this to my boyfriend, who is living proof that
uncontrollable compulsive
  switching of TV channels with a remote control is a testosterone
influenced condition.) 


  Because I'm A Man.. 

  When I lock my keys in the car I will fiddle with a wire 
  clothes hanger and ignore your suggestions that we call a road service 
  until long after hypothermia has set in and I have damaged the
vehicle. 
  -- 
  Because I'm a man, 

  When the car isn't running very well, I will pop the hood and 
  stare at the engine as if I know what I'm looking at. If another man 
  shows up one of us will say to the other, "I used to be able to fix
these 
  things, but now with all these computers and everything, I wouldn't 
  know where to start." 

  -- 
  Because I'm a man, 

  When I catch a cold I need someone to bring me soup and take 
  care of me while I lie in bed and moan. You never get as sick as I 
  do, so for you this isn't an issue. 

  - 
  Because I'm a man, 

  I can be relied upon to purchase basic groceries at the 
  store, like milk or bread. I cannot be expected to find exotic items 
  like "Cumin" or "lady fingers." For all I know these could be the same 
  thing. And never, under any circumstances, expect me to pick up 
  anything for which "feminine hygiene product" is a euphemism. 

  -- 
  Because I'm a man, 

  When one of our appliances stops working I will insist on 
  taking it apart, despite evidence that this will just cost me twice 
  as much once the repair person gets here and has to put it back
together. 

  -- 
  Because I'm a man, 

  I must hold the television remote control in my hand while I 
  watch TV. If the thing has been misplaced, I may miss a whole show 
  looking for it (though one time I was able to survive by holding a 
  calculator). 

   
  Because I'm a man, 

  I don't think we're all that lost, and no, I don't think we 
  should stop and ask someone. Why would you listen to a 
  complete stranger? I mean, could he know where we're going? 
  -- 
  Because I'm a man, 

  There is no need to ask me what I'm thinking about, especially 
  while driving quietly. The answer is always either sex or football, 
  though I have to make up something else when you ask, so don't. 

  -- 
  Because I'm a man, 

  I do not want to visit your mother, or have your mother come 
  visit us, or talk to her when she calls, or think about her any more 
  than I have to. Whatever you got her for mother's day is okay, I don't
need 
  to 
  see it. And don't forget to pick up something for my Mom, too! 

  - 
  Because I'm a man, 

  You don't have to ask me if I liked the movie. Chances are, 
  if you're crying at the end of it, I didn't. 
  -- 
  Because I'm a man, 

  I think what you're wearing is fine. I thought what you were 
  wearing five minutes ago was fine, too. Either pair of shoes is fine. 
  With the belt or without it looks fine. Your hair is fine. You look 
  fine. 

   
  Because I'm a man, 

  And this is, after all, the 90's, I will share equally in the 
  housework. You just do the laundry, the cooking, gardening, 
  the cleaning, and the dishes. I'll do all the rest. 

  -- 
  This has been a Public Service message for women, to better 
  understand the male animal. 
-- 
Natasha Flazynski
440.949.1399
http://www.ciscobot.com
My Cisco information site.
http://www.botbuilders.com 
Artificial Intelligence and Linux development 

A bus station is where a bus stops.
A train station is where a train stops.
On my desk, I have a work station...

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: NetBios forwarding (Addendum)

2000-12-30 Thread Shaw, Winston Mr 5 SIG CMD

If you have decided to do it with these commands, do not forget the other
UDP broadcasts which are automatically forwarded.
Have you also considered putting permanent static routes in the workstation
and server ?. Will the application allow this for communication ? If it does
, you do not have to touch the router.
Let us know how it turns out.

example:
ip helper address 10.2.2.2
no ip forward-protocol udp 69 !(this does not allow tftp broadcasts)

Winston.

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Sunday, December 31, 2000 5:34 AM
To: Trentj; [EMAIL PROTECTED]
Subject: Re: NetBios forwarding (Addendum)


You're right, I do need that in my config.  I had it in the first post, but
forgot to add it to the second one.  These two lines should be in the second
version:

int s0
ip helper-address 10.2.2.2

int s1
ip helper-address 10.1.1.1

I think this would accomplish what I'm trying, but I'm wondering what any
downsides might be and if there is a better way.

>  I've never used the "ip directed-broadcast" config to do what your trying
to
>  do. You may need to use the "ip helper-address" config to forward your
>  netbios traffic. Check out the attached URL. Hope this helps.
>  
> 
http://www.cisco.com/univercd/cc/td/doc/product/software/ssr83/rpc_r/48383.h
>  tm#xtocid670622
>  
>  
>  "John Neiberger" <[EMAIL PROTECTED]> wrote in message
>  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>  > Okay, after a tad more research, I've come up with the following
config,
>  > which corrects some mistakes and misunderstandings in my previous
config.
>  >
>  > interface Serial0
>  >  ip address 10.1.1.254 255.255.255.0
>  >  ip directed-broadcast 101
>  > !
>  > interface Serial1
>  >  ip address 10.2.2.254 255.255.255.0
>  >  ip directed-broadcast 102
>  > !
>  > access-list 101 permit udp host 10.1.1.1 any eq netbios-ns
>  > access-list 101 permit udp host 10.1.1.1 any eq netbios-dgm
>  > access-list 102 permit udp host 10.2.2.2 any eq netbios-ns
>  > access-list 102 permit udp host 10.2.2.2 any eq netbios-dgm
>  >
>  > Now, from what I can tell, this will do what I'm attempting, but I'd
still
>  > love to have your opinions because I have *zero* experience with
netbios
>  or
>  > broadcast forwarding.  I'd hate to break one thing while trying to fix
>  > another.  (gee, I've never done that before!)
>  >
>  > Thanks again,
>  > John
>  >
>  > >  We have some new software running on a single workstation that is
>  trying
>  > to
>  > >  use netbios to communicate with a server on a different subnet.  We
do
>  > not
>  > >  currently allow this type of forwarding, and I've never configured
it
>  > >  before.  We'd like to limit netbios forwarding to just these two
>  > machines.
>  > >  Here is my idea, let me know if this would be the way to do it.
>  > >
>  > >  access-list 1 permit 10.1.1.1  (workstation)
>  > >  access-list 2 permit 10.2.2.2  (server)
>  > >
>  > >  ip forward-protocol udp 137
>  > >  ip forward-protocol udp 138
>  > >  ip forward-protocol udp 139
>  > >
>  > >  int fastethernet1/0
>  > >  ip add 10.1.1.254 255.255.255.0
>  > >  ip directed-broadcast 1
>  > >  ip helper-address 10.2.2.2
>  > >
>  > >  int fastethernet2/0
>  > >  ip add 10.2.2.254 255.255.255.0
>  > >  ip directed-broadcast 2
>  > >  ip helper-address 10.1.1.1
>  > >
>  > >  Would this do what I'm trying to accomplish?  If not, please let me
>  know,
>  > or
>  > >  if anyone has any tips for this sort of thing, I'd love to hear
them.
>  > >
>  > >  Thanks a million, as usual!
>  > >
>  > >  John
>  > >
>  > >
>  > >
>  > >
>  > >
>  > >  ___
>  > >  Send a cool gift with your E-Card
>  > >  http://www.bluemountain.com/giftcenter/
>  > >
>  > >
>  > >  _
>  > >  FAQ, list archives, and subscription info:
>  > http://www.groupstudy.com/list/cisco.html
>  > >  Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
>  >
>  >
>  >
>  >
>  >
>  > ___
>  > Send a cool gift with your E-Card
>  > http://www.bluemountain.com/giftcenter/
>  >
>  >
>  > _
>  > FAQ, list archives, and subscription info:
>  http://www.groupstudy.com/list/cisco.html
>  > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>  >
>  
>  
>  _
>  FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://ww

RE: NetBios forwarding (Addendum)

2000-12-30 Thread Shaw, Winston Mr 5 SIG CMD

Hello John,
Here is my opinion. Temporarily, take the software or the workstation to the
same subnet of the Server and see if it runs OK. While it is there, you can
capture a few packets to see the conversations and the ports that are being
utilized. This gives you a pretty good idea of the goal. If that is
inconvenient, then do a ip forward-protocol any-local-broadcast very
temporarily. Contrary to popular belief, it should not kill your router
unless it is already on the brink.
Assuming that it is the Netbios ports(137,138,139), You might be better of
using the ip helper-address command and the no ip helper-address command for
the ports you do not want to be sent across the router. I think that there
is a default of 7 UDP protocols which are automatically forwarded with this
command.

In your config below, I think it might work, but only 1 access-list would do
the trick because the server should not do any broadcasting once it is
contacted by the client. Of course, that depends on the application
software. What is it called anyway ?

Access-Lists are a necessary evil which should be avoided whenever possible.
Personally, I think that less resources would be used to decide whether to
drop or foward a broadcast than to compare it to an access list.

Winston.

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Sunday, December 31, 2000 2:01 AM
To: [EMAIL PROTECTED]
Subject: Re: NetBios forwarding (Addendum)


Okay, after a tad more research, I've come up with the following config,
which corrects some mistakes and misunderstandings in my previous config.  

interface Serial0
 ip address 10.1.1.254 255.255.255.0
 ip directed-broadcast 101
!
interface Serial1
 ip address 10.2.2.254 255.255.255.0
 ip directed-broadcast 102
!
access-list 101 permit udp host 10.1.1.1 any eq netbios-ns
access-list 101 permit udp host 10.1.1.1 any eq netbios-dgm
access-list 102 permit udp host 10.2.2.2 any eq netbios-ns
access-list 102 permit udp host 10.2.2.2 any eq netbios-dgm

Now, from what I can tell, this will do what I'm attempting, but I'd still
love to have your opinions because I have *zero* experience with netbios or
broadcast forwarding.  I'd hate to break one thing while trying to fix
another.  (gee, I've never done that before!)

Thanks again,
John

>  We have some new software running on a single workstation that is trying
to
>  use netbios to communicate with a server on a different subnet.  We do
not
>  currently allow this type of forwarding, and I've never configured it
>  before.  We'd like to limit netbios forwarding to just these two
machines. 
>  Here is my idea, let me know if this would be the way to do it.
>  
>  access-list 1 permit 10.1.1.1  (workstation)
>  access-list 2 permit 10.2.2.2  (server)
>  
>  ip forward-protocol udp 137
>  ip forward-protocol udp 138
>  ip forward-protocol udp 139
>  
>  int fastethernet1/0
>  ip add 10.1.1.254 255.255.255.0
>  ip directed-broadcast 1
>  ip helper-address 10.2.2.2
>  
>  int fastethernet2/0
>  ip add 10.2.2.254 255.255.255.0
>  ip directed-broadcast 2
>  ip helper-address 10.1.1.1
>  
>  Would this do what I'm trying to accomplish?  If not, please let me know,
or
>  if anyone has any tips for this sort of thing, I'd love to hear them.
>  
>  Thanks a million, as usual!
>  
>  John
>  
>  
>  
>  
>  
>  ___
>  Send a cool gift with your E-Card
>  http://www.bluemountain.com/giftcenter/
>  
>  
>  _
>  FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CLNS

2000-12-30 Thread Louie Belt

A number of Government agencies use clns to this day, it was supposed to be
the replacement for IP (which was running out of addresses prior to cidr)
and of course some branches of government adopted it - and now refuse to
change.

LAB

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jay Swan
Sent: Saturday, December 30, 2000 8:18 PM
To: [EMAIL PROTECTED]
Subject: CLNS


I was noticing the removal of CLNS from the CCIE lab requirements. While
I've never personally seen a lot of the more obscure protocols "in the
wild", I don't even know anyone who's seen a production CLNS network.
Anybody out there seen one?

Jay



_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NetBios forwarding (Addendum)

2000-12-30 Thread John Neiberger

You're right, I do need that in my config.  I had it in the first post, but
forgot to add it to the second one.  These two lines should be in the second
version:

int s0
ip helper-address 10.2.2.2

int s1
ip helper-address 10.1.1.1

I think this would accomplish what I'm trying, but I'm wondering what any
downsides might be and if there is a better way.

>  I've never used the "ip directed-broadcast" config to do what your trying
to
>  do. You may need to use the "ip helper-address" config to forward your
>  netbios traffic. Check out the attached URL. Hope this helps.
>  
> 
http://www.cisco.com/univercd/cc/td/doc/product/software/ssr83/rpc_r/48383.h
>  tm#xtocid670622
>  
>  
>  "John Neiberger" <[EMAIL PROTECTED]> wrote in message
>  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>  > Okay, after a tad more research, I've come up with the following
config,
>  > which corrects some mistakes and misunderstandings in my previous
config.
>  >
>  > interface Serial0
>  >  ip address 10.1.1.254 255.255.255.0
>  >  ip directed-broadcast 101
>  > !
>  > interface Serial1
>  >  ip address 10.2.2.254 255.255.255.0
>  >  ip directed-broadcast 102
>  > !
>  > access-list 101 permit udp host 10.1.1.1 any eq netbios-ns
>  > access-list 101 permit udp host 10.1.1.1 any eq netbios-dgm
>  > access-list 102 permit udp host 10.2.2.2 any eq netbios-ns
>  > access-list 102 permit udp host 10.2.2.2 any eq netbios-dgm
>  >
>  > Now, from what I can tell, this will do what I'm attempting, but I'd
still
>  > love to have your opinions because I have *zero* experience with
netbios
>  or
>  > broadcast forwarding.  I'd hate to break one thing while trying to fix
>  > another.  (gee, I've never done that before!)
>  >
>  > Thanks again,
>  > John
>  >
>  > >  We have some new software running on a single workstation that is
>  trying
>  > to
>  > >  use netbios to communicate with a server on a different subnet.  We
do
>  > not
>  > >  currently allow this type of forwarding, and I've never configured
it
>  > >  before.  We'd like to limit netbios forwarding to just these two
>  > machines.
>  > >  Here is my idea, let me know if this would be the way to do it.
>  > >
>  > >  access-list 1 permit 10.1.1.1  (workstation)
>  > >  access-list 2 permit 10.2.2.2  (server)
>  > >
>  > >  ip forward-protocol udp 137
>  > >  ip forward-protocol udp 138
>  > >  ip forward-protocol udp 139
>  > >
>  > >  int fastethernet1/0
>  > >  ip add 10.1.1.254 255.255.255.0
>  > >  ip directed-broadcast 1
>  > >  ip helper-address 10.2.2.2
>  > >
>  > >  int fastethernet2/0
>  > >  ip add 10.2.2.254 255.255.255.0
>  > >  ip directed-broadcast 2
>  > >  ip helper-address 10.1.1.1
>  > >
>  > >  Would this do what I'm trying to accomplish?  If not, please let me
>  know,
>  > or
>  > >  if anyone has any tips for this sort of thing, I'd love to hear
them.
>  > >
>  > >  Thanks a million, as usual!
>  > >
>  > >  John
>  > >
>  > >
>  > >
>  > >
>  > >
>  > >  ___
>  > >  Send a cool gift with your E-Card
>  > >  http://www.bluemountain.com/giftcenter/
>  > >
>  > >
>  > >  _
>  > >  FAQ, list archives, and subscription info:
>  > http://www.groupstudy.com/list/cisco.html
>  > >  Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
>  >
>  >
>  >
>  >
>  >
>  > ___
>  > Send a cool gift with your E-Card
>  > http://www.bluemountain.com/giftcenter/
>  >
>  >
>  > _
>  > FAQ, list archives, and subscription info:
>  http://www.groupstudy.com/list/cisco.html
>  > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>  >
>  
>  
>  _
>  FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NetBios forwarding

2000-12-30 Thread Neil Desai

NetBIOS runs on top of TCP/IP (NBT). If you have WINS server then it will
not broadcast to find the server, unless there is no record in the WINS
server. You could configure a LMHOSTS file on the workstation. This would
have the servers NetBIOS name to IP address mapping. If you include the
"#PRE" tag it will be loaded into the NetBIOS cache at boot time. I am not
sure if this helps.
Neil



"John Neiberger" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> We have some new software running on a single workstation that is trying
to
> use netbios to communicate with a server on a different subnet.  We do not
> currently allow this type of forwarding, and I've never configured it
> before.  We'd like to limit netbios forwarding to just these two machines.
> Here is my idea, let me know if this would be the way to do it.
>
> access-list 1 permit 10.1.1.1  (workstation)
> access-list 2 permit 10.2.2.2  (server)
>
> ip forward-protocol udp 137
> ip forward-protocol udp 138
> ip forward-protocol udp 139
>
> int fastethernet1/0
> ip add 10.1.1.254 255.255.255.0
> ip directed-broadcast 1
> ip helper-address 10.2.2.2
>
> int fastethernet2/0
> ip add 10.2.2.254 255.255.255.0
> ip directed-broadcast 2
> ip helper-address 10.1.1.1
>
> Would this do what I'm trying to accomplish?  If not, please let me know,
or
> if anyone has any tips for this sort of thing, I'd love to hear them.
>
> Thanks a million, as usual!
>
> John
>
>
>
>
>
> ___
> Send a cool gift with your E-Card
> http://www.bluemountain.com/giftcenter/
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: can SPAN port transmit?

2000-12-30 Thread Neil Desai

I use a 2900XL with many span ports. I use one of them for an Internet
monitoring software. It has the ability to monitor at 100Mbps full duplex
and transmitt on that same port. I have a Sniffer Pro DSS and I am able to
transmitt data on that span port also.
Neil




"Priscilla Oppenheimer" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi folks,
>
> If I connect a Sniffer-like device to the SPAN port of a switch, will the
> Sniffer-like device be able to transmit data?
>
> My guess is no. From my reading on Cisco's SwitchProbe external hardware
> probes, it appears that the SwitchProbe needs an additional port to send
> data to a network management system. One port connects to a SPAN port on
> the switch and the other port connects to a normal port and is configured
> in "management mode."
>
> But, does anyone have experience with trying to send from a device
> connected to a SPAN port?
>
> Thanks
>
> Priscilla
>
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: can SPAN port transmit?

2000-12-30 Thread Shaw, Winston Mr 5 SIG CMD

It would be a pleasant surprise to me if the normal switched SPAN port
captured all your LANE traffic.
It is not supported because of the way the LECs talk to the LES and other
LECs. BUS traffic you should see very easily in an ELAN. ELANs may appear to
be similiar to Broadcast VLANS but they use a different
mechanism(addressing, etc) to do the simulation. In other words, I do not
think it is supported. Having said that, if you do find a way to capture
this traffic, I hope that you will share it with us. There might be a
vendor-specific way to do it. I love this ATM stuff, why did they remove it
from the CCIE Lab exam ???

Winston.

-Original Message-
From: Lou Nelson [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 30, 2000 7:19 PM
To: Nigel Taylor; Lou Nelson; [EMAIL PROTECTED];
[EMAIL PROTECTED]; Priscilla Oppenheimer
Cc: Bryant Andrews
Subject: RE: can SPAN port transmit?


I do use intra-vlan routing in that a within the vlan is a gateway for that
VLAN of course an arp (that I see) for the gateway occurs... then when
traffic is sent to the vlans gateway to route to another vlan or anywhere...
I do NOT see that
As you said I would have to go to where the mapping occurs (a bunch of 7507s
with AIPs)... I would find the HSRP active router... no problems...  Still
this does not give me what I was looking for...
In Top Down Design (shameless Plug), a lot of discussion goes to knowing
thyself and the traffic.  What I wanted to see was the amount of traffic,
type of traffic, broadcast versus standard on a given VLAN.  First to
baseline the VLAN, then to identify within my network where I may need
additional improvements.  We have some 16000 host and seem rock solid...  We
have way more bandwidth then needed but expect a huge amount of growth..
not in host but in applications...  two of my 120+ work group managers
constantly insist on infrastructure related problems... yet LMS and HP Open
view show nothing.  Each time they raise a stink, me or one of my
technicians find not only nothing wrong, but often see no symptoms.  Still
these WGMs get managements ear.  In all we have proven each and every time
these guys are off their rockers but it did raise my desire to span the
entire VLAN to Sniffer Pro and get some baselines of the VLANs traffic.  I
wanted to do this from my office simply by creating the LEC spanning the
vlan ... and wham...  In the end all I catch mostly is some CDP, HSRP, and
other type broadcast

Now spanning the port works exactly and accomplished everything I have
wanted it to where I use it.  I have been able to get profiles of our
outbound and inbound data to our network.  I have been able to show growth
and get additional assets with empirical data...

Anyway  thanks Nigel...  I keep looking for a way to capture ALL the data in
a given VLAN... this kinda does make ya wish for a HUB mode.. not



-Original Message-
From: Nigel Taylor [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 30, 2000 5:25 AM
To: Lou Nelson; [EMAIL PROTECTED]; [EMAIL PROTECTED];
Priscilla Oppenheimer
Cc: Bryant Andrews
Subject: Re: can SPAN port transmit?


See Inline.


- Original Message -
From: Lou Nelson <[EMAIL PROTECTED]>
To: Nigel Taylor <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>; Priscilla Oppenheimer <[EMAIL PROTECTED]>;
Lou Nelson <[EMAIL PROTECTED]>
Cc: Bryant Andrews <[EMAIL PROTECTED]>
Sent: Saturday, December 30, 2000 3:13 AM
Subject: RE: can SPAN port transmit?


> hmmm.
> I fully understand the Lane ATM Vlan Elan relationships.
> What is happening is that I only see the broadcast on the specific Vlan.
I
> do not see the direct Vlan to Vlan traffic nor the Vlan to Vlan Gateway
> address...

NT: This won't happen unless you implement some type of inter-vlan routing
in
which case you're no longer monitoring at layer 2 which is where the span
ports
on the switched devices are suppose to monitor/capture. Of course to monitor
different vlans you would have to redefine you SPAN port values if you were
looking to still mointor on Layer 2 .  However, To monitor the VLAN to VLAN
or VLANto VLAn gateway traffic you would have to do this where your VLAN
maps to layer 3, which would mean at either the RSM(where you would
probably have your HSRP gateways defined) or at router with
a AIP card that provides the layer 3 requirememt.


I assumed that the trunked ports were not passing the traffic
> out the lane blades because the Cam Dynamics recognized that the
destination
> MAC was not down that port (trunked port... therefore it dropped the frame
> and my spanned port on the other side of the cloud never got the frame...
> and yes everything else is in place... a lec is configured on my Spanned
> port switch's lane blade...
>
> I clearly do not know what I am missing...  I really feel I have covered
> everything
>
>
> -Original Message-
> From: Nigel Taylor [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, December 30, 2000 1:54 AM
> To: [EMAIL PROTECTED]; [E

Re: Hyperterminal

2000-12-30 Thread Lauren Child



Austin wrote:
> 
> All of a sudden, the router will not accept me hitting the ENTER key to get
> started. Same thing happens on a break sequence. I cannot seem to send
> anything to the terminal.
> This is how far it goes and then nothing:
>

I had the same problem with a 2501 this christmas - I was selling it and
another to a chap at home, one was fine and the other wouldnt accept any
input except a break at bootup.  Then it was just frozen.  After
fiddling with cables, taking the lid off the router and wiggling simms
in case theyd come loose, rebooting several times, and taking mem and
flash out to force a boot to rom, we switched the cable on to my laptop
(it was connected to my brothers PC) and it worked fine.

The only difference was - 1) my brothers PC was having problems with an
AGP graphics card at the time, and my laptop wasnt, and 2) My brothers
PC was win98, mine was win98SE

I have no idea what went on, and why it only affected one router and not
the other (which is why we figured corrupt ios or something).

Have you tried a different PC/OS?

TTFN
Lauren

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NetBios forwarding (Addendum)

2000-12-30 Thread Trentj

I've never used the "ip directed-broadcast" config to do what your trying to
do. You may need to use the "ip helper-address" config to forward your
netbios traffic. Check out the attached URL. Hope this helps.

http://www.cisco.com/univercd/cc/td/doc/product/software/ssr83/rpc_r/48383.h
tm#xtocid670622


"John Neiberger" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Okay, after a tad more research, I've come up with the following config,
> which corrects some mistakes and misunderstandings in my previous config.
>
> interface Serial0
>  ip address 10.1.1.254 255.255.255.0
>  ip directed-broadcast 101
> !
> interface Serial1
>  ip address 10.2.2.254 255.255.255.0
>  ip directed-broadcast 102
> !
> access-list 101 permit udp host 10.1.1.1 any eq netbios-ns
> access-list 101 permit udp host 10.1.1.1 any eq netbios-dgm
> access-list 102 permit udp host 10.2.2.2 any eq netbios-ns
> access-list 102 permit udp host 10.2.2.2 any eq netbios-dgm
>
> Now, from what I can tell, this will do what I'm attempting, but I'd still
> love to have your opinions because I have *zero* experience with netbios
or
> broadcast forwarding.  I'd hate to break one thing while trying to fix
> another.  (gee, I've never done that before!)
>
> Thanks again,
> John
>
> >  We have some new software running on a single workstation that is
trying
> to
> >  use netbios to communicate with a server on a different subnet.  We do
> not
> >  currently allow this type of forwarding, and I've never configured it
> >  before.  We'd like to limit netbios forwarding to just these two
> machines.
> >  Here is my idea, let me know if this would be the way to do it.
> >
> >  access-list 1 permit 10.1.1.1  (workstation)
> >  access-list 2 permit 10.2.2.2  (server)
> >
> >  ip forward-protocol udp 137
> >  ip forward-protocol udp 138
> >  ip forward-protocol udp 139
> >
> >  int fastethernet1/0
> >  ip add 10.1.1.254 255.255.255.0
> >  ip directed-broadcast 1
> >  ip helper-address 10.2.2.2
> >
> >  int fastethernet2/0
> >  ip add 10.2.2.254 255.255.255.0
> >  ip directed-broadcast 2
> >  ip helper-address 10.1.1.1
> >
> >  Would this do what I'm trying to accomplish?  If not, please let me
know,
> or
> >  if anyone has any tips for this sort of thing, I'd love to hear them.
> >
> >  Thanks a million, as usual!
> >
> >  John
> >
> >
> >
> >
> >
> >  ___
> >  Send a cool gift with your E-Card
> >  http://www.bluemountain.com/giftcenter/
> >
> >
> >  _
> >  FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> >  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>
>
>
>
> ___
> Send a cool gift with your E-Card
> http://www.bluemountain.com/giftcenter/
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CLNS

2000-12-30 Thread Jay Swan

I was noticing the removal of CLNS from the CCIE lab requirements. While
I've never personally seen a lot of the more obscure protocols "in the
wild", I don't even know anyone who's seen a production CLNS network.
Anybody out there seen one?

Jay



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ip route question

2000-12-30 Thread Pamela Forsyth

Lou,

Nothing to say you can't have an Ethernet link that is in fact 
point-to-point.  However, the router still needs a MAC address to get to 
the router on the opposite side, due to the frame structure of 
Ethernet.  He will still need to ARP for a MAC address, and if there's no 
next-hop IP address specified in the IP route statement the only address 
the router can ARP for is the destination IP address in each packet 
forwarded.  So your ARP cache will still fill up with redundant entries.

It is always a design decision, but the art consists in understanding the 
impacts your decisions may have down the road.  The least obvious impacts 
are the ones that are the most difficult to troubleshoot when things go 
very wrong.

Understand that when the router uses up all its memory for ARP cache it 
spontaneously reboots.  This can be an extremely disruptive event on a busy 
network, and most layer-three guys are not oriented toward checking the 
size of the ARP cache to troubleshoot what appears to be an IOS instability 
or maybe a hardware bug.  Just a word to the wise.

Pamela

At 02:32 AM 12/30/00 -0600, Lou Nelson wrote:
>Cory,
>I read thru the responses and they are all good but I would like to
>add...
>Who is to say that an Ethernet interface is not a point to point.   Using
>media converters changing a FE interface from tx to fiber and then back
>again I have many WAN FE point to point  interfaces.
>In a few cases I prefer the interface because it prevent routing loops when
>links fail.  I run HSRP on three gateway 7507s with gig uplinks to a 7513.
>The 3 7507 are logically connected via ATM interfaces that also house the
>HSRP.  By using the interface to point out the gig links versus the opposite
>end ip interface on the gig link I prevent on 7507 believing that sending
>packets back to the originating router is a preferred EIGRP route to get to
>the 7513.
>
>
>So the Eth interface does not have to be a broadcast environment... it can
>be a point to point!
>
>-Original Message-
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
>Stull, Cory
>Sent: Friday, December 29, 2000 11:31 AM
>To: '[EMAIL PROTECTED]'
>Subject: ip route question
>
>
>
>I know I'm showing my ignorance here but I'm tired of trying to find the
>answer on CCO.  Must be looking in the wrong places.
>
>
>I just saw a Boson question asking about  ip route 0.0.0.0 0.0.0.0 int
>ethernet0
>
>
>I thought you could only point static routes like that out of point to point
>interfaces?  For example:   ip route 0.0.0.0 0.0.0.0 int ser0

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NetBios forwarding (Addendum)

2000-12-30 Thread John Neiberger

Okay, after a tad more research, I've come up with the following config,
which corrects some mistakes and misunderstandings in my previous config.  

interface Serial0
 ip address 10.1.1.254 255.255.255.0
 ip directed-broadcast 101
!
interface Serial1
 ip address 10.2.2.254 255.255.255.0
 ip directed-broadcast 102
!
access-list 101 permit udp host 10.1.1.1 any eq netbios-ns
access-list 101 permit udp host 10.1.1.1 any eq netbios-dgm
access-list 102 permit udp host 10.2.2.2 any eq netbios-ns
access-list 102 permit udp host 10.2.2.2 any eq netbios-dgm

Now, from what I can tell, this will do what I'm attempting, but I'd still
love to have your opinions because I have *zero* experience with netbios or
broadcast forwarding.  I'd hate to break one thing while trying to fix
another.  (gee, I've never done that before!)

Thanks again,
John

>  We have some new software running on a single workstation that is trying
to
>  use netbios to communicate with a server on a different subnet.  We do
not
>  currently allow this type of forwarding, and I've never configured it
>  before.  We'd like to limit netbios forwarding to just these two
machines. 
>  Here is my idea, let me know if this would be the way to do it.
>  
>  access-list 1 permit 10.1.1.1  (workstation)
>  access-list 2 permit 10.2.2.2  (server)
>  
>  ip forward-protocol udp 137
>  ip forward-protocol udp 138
>  ip forward-protocol udp 139
>  
>  int fastethernet1/0
>  ip add 10.1.1.254 255.255.255.0
>  ip directed-broadcast 1
>  ip helper-address 10.2.2.2
>  
>  int fastethernet2/0
>  ip add 10.2.2.254 255.255.255.0
>  ip directed-broadcast 2
>  ip helper-address 10.1.1.1
>  
>  Would this do what I'm trying to accomplish?  If not, please let me know,
or
>  if anyone has any tips for this sort of thing, I'd love to hear them.
>  
>  Thanks a million, as usual!
>  
>  John
>  
>  
>  
>  
>  
>  ___
>  Send a cool gift with your E-Card
>  http://www.bluemountain.com/giftcenter/
>  
>  
>  _
>  FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NetBios forwarding

2000-12-30 Thread John Neiberger

We have some new software running on a single workstation that is trying to
use netbios to communicate with a server on a different subnet.  We do not
currently allow this type of forwarding, and I've never configured it
before.  We'd like to limit netbios forwarding to just these two machines. 
Here is my idea, let me know if this would be the way to do it.

access-list 1 permit 10.1.1.1  (workstation)
access-list 2 permit 10.2.2.2  (server)

ip forward-protocol udp 137
ip forward-protocol udp 138
ip forward-protocol udp 139

int fastethernet1/0
ip add 10.1.1.254 255.255.255.0
ip directed-broadcast 1
ip helper-address 10.2.2.2

int fastethernet2/0
ip add 10.2.2.254 255.255.255.0
ip directed-broadcast 2
ip helper-address 10.1.1.1

Would this do what I'm trying to accomplish?  If not, please let me know, or
if anyone has any tips for this sort of thing, I'd love to hear them.

Thanks a million, as usual!

John





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco's TFTP Program

2000-12-30 Thread Evan You

Jennifer,

The best program that I have used for a Windows box is TFTPPro by Walusoft.
The only drawback is that it costs $99 but well worth the cost.

http://www.tftp.co.uk/

-Evan You

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Jennifer Mellone
Sent:   Friday, December 29, 2000 7:45 PM
To: [EMAIL PROTECTED]
Subject:Cisco's TFTP Program

Hi Gang,

Is it me, or has anyone else had this problem using the Cisco TFTP
program---

I TFTPed software from my laptop to a switch just fine today.

But then I tried to TFTP IOS code from my laptop to a router today.  I got
an error message (from the TFTP program itself), and the program immediately
closed down.  I even rebooted the laptop and this did not help.

- Jennifer Mellone

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Hyperterminal

2000-12-30 Thread Larry Osei-Kwaku

Try a different console cable with the router or try a
different router with the same cable. You may have the
wrong pin outs on the console cable.

Also check the Cabling Guide for RJ-45 Console and AUX
Ports(Cisco's 1000 series, 2500 series, and AS5100) at
http://www.cisco.com/warp/public/701/14.html

I hope this helps
Lawrrence Osei-Kwaku
London
UK

--- Austin <[EMAIL PROTECTED]> wrote:
> All of a sudden, the router will not accept me
> hitting the ENTER key to get
> started. Same thing happens on a break sequence. I
> cannot seem to send
> anything to the terminal.
> This is how far it goes and then nothing:
> 
> Cisco Internetwork Operating System Software
> IOS (tm) 3000 Software (IGS-I-L), Version 11.0(22),
> RELEASE SOFTWARE (fc1)
> Copyright (c) 1986-1998 by cisco Systems, Inc.
> Compiled Tue 08-Dec-98 05:20 by jaturner
> Image text-base: 0x0301E7AC, data-base: 0x1000
> 
> cisco 2511 (68030) processor (revision C) with
> 16384K/2048K bytes of memory.
> Processor board ID 01736515, with hardware revision
> 
> Bridging software.
> X.25 software, Version 2.0, NET2, BFE and GOSIP
> compliant.
> 1 Ethernet/IEEE 802.3 interface.
> 2 Serial network interfaces.
> 16 terminal lines.
> 32K bytes of non-volatile configuration memory.
> 4096K bytes of processor board System flash (Read
> ONLY)
> 
> 
> 
> Press RETURN to get started!
> 
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
> 
> 
> 


=
"Wear a smile and have friends; wear a scowl and  have wrinkles."
  - George Eliot

"the greatest glory is not in never falling, but rising up each time we fall."

"The greatest man is not he who does not fall but he who falls and rises again to win"

__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



E-books

2000-12-30 Thread Iyuri Yagami

Hello everybody.

I am looking for Sybex CCNP 2.0 E-books. If anybody is interested to sell /
trade these books than please contact me confidentially at
[EMAIL PROTECTED]

Thanks
Iyuri Yagami



Get free email and a permanent address at http://www.netaddress.com/?N=1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



O/T Anyone familiar with the CLEC application

2000-12-30 Thread Circusnuts

Totally off the topic, but I have an opportunity to purchase a Copper =
mountain DSLAM, live in a relatively small suburb of DC, & have DSL/ATM =
experience.  Any experience is applying for CLEC privileges (I fairly up =
to speed with the ILEC & ISP dealings :-(

Thanks=20
Phil

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco's TFTP Program

2000-12-30 Thread Circusnuts

I find if the "Root Directory" is buried, that a shorter path solves all.
On my laptop, I usually send the IOS to the windows TEMP file.  I may not be
smart enough to explain why this works, but it keeps the TFTP Server from
timing out when going for the IOS

All the best !!!
Phil

- Original Message -
From: "Kelly D Griffin" <[EMAIL PROTECTED]>
To: "Jennifer Mellone" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Saturday, December 30, 2000 4:29 PM
Subject: Re: Cisco's TFTP Program


> I just used the program to load some IOS on several routers from my Dell
> laptop and all went fine.
>
> Kelly D Griffin, CCNA
> Network Engineer
> Kg2 Network Design
> http://www.kg2.com
>
>
> - Original Message -
> From: "Jennifer Mellone" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, December 29, 2000 6:45 PM
> Subject: Cisco's TFTP Program
>
>
> > Hi Gang,
> >
> > Is it me, or has anyone else had this problem using the Cisco TFTP
> > program---
> >
> > I TFTPed software from my laptop to a switch just fine today.
> >
> > But then I tried to TFTP IOS code from my laptop to a router today.  I
got
> > an error message (from the TFTP program itself), and the program
> immediately
> > closed down.  I even rebooted the laptop and this did not help.
> >
> > - Jennifer Mellone
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> 
> http://1cis.com
> Free E-mail Servers with unlimited mailboxes
> 1st Class Internet Solutions
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NAP peering media

2000-12-30 Thread Howard C. Berkowitz

>Dan West <[EMAIL PROTECTED] wrote,
>
>Just wondering how those NAP xchange points are
>connected physically. VIA
>
>GIG ETHER?
>100Mb Fast Ether?
>ATM PVCs?

Things are in transition. I'd guess that the largest number of ports 
today are FE with a good deal of transition to GE.  There are 
operational inter-NAP links at 10GE.

ATM is still definitely present.  Remember that not all NAPs are in 
one room, but are physically distributed.  ATM is natural for those, 
although metro optical Ethernet will be more and more common.

FDDI has been used historically but are fading out.

>
>Basically, switched and not routed right? I am trying
>to learn about MPLS also. Anyways

Switched, in a very restricted way -- for example, at the last NANOG, 
Paul Vixie (PAIX/MFN) issued a plea for vendors to make switches 
available that did NOT run spanning tree or many of the other 
features enterprises crave. In the NAP context, VLANs are basically a 
simple multiplexing technique.

Not sure I'd immediately associate MPLS with the NAP environment. 
Contrary to urban legend, most tier 1 and tier 2 providers do not 
interconnect in NAP fabrics, but via private peering. Since one of 
the values of MPLS is using it for traffic engineering and SLA 
enforcement, I'd hesitate running it through the relative chaos of a 
public NAP.

The whole NAP definition is blurring as hosting centers get more NAP-like.

As far as routing vs. switching, the early NAPs switched in the data 
plane but peered to a route server to reduce the number of BGP peers. 
There's been a trend toward direct peering, although the route server 
peerings are retained for statistics collection.

>
>Anybody in this group actually working at a MAJOR
>peer?

Well-- I build things for them.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Hyperterminal

2000-12-30 Thread Daniel Cotts

First, have you ever been able to connect to any router using the same PC
and Hyperterminal?
1) Some versions of Hyperterminal won't send a break sequence. Go to
Hilgraeve.com and download a better version.
2) Not being able to send an "enter". Check your serial cable. I have a DB-9
to RJ-45 adapter from Cisco that won't transmit. You may have received a
similar "gift".

If your PC, cable, and Hyperterminal works on other routers then suspect the
router.

> -Original Message-
> From: Austin [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, December 30, 2000 12:33 PM
> To: [EMAIL PROTECTED]
> Subject: Hyperterminal
> 
> 
> All of a sudden, the router will not accept me hitting the 
> ENTER key to get
> started. Same thing happens on a break sequence. I cannot seem to send
> anything to the terminal.
> This is how far it goes and then nothing:
> 
> Cisco Internetwork Operating System Software
> IOS (tm) 3000 Software (IGS-I-L), Version 11.0(22), RELEASE 
> SOFTWARE (fc1)
> Copyright (c) 1986-1998 by cisco Systems, Inc.
> Compiled Tue 08-Dec-98 05:20 by jaturner
> Image text-base: 0x0301E7AC, data-base: 0x1000
> 
> cisco 2511 (68030) processor (revision C) with 16384K/2048K 
> bytes of memory.
> Processor board ID 01736515, with hardware revision 
> Bridging software.
> X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
> 1 Ethernet/IEEE 802.3 interface.
> 2 Serial network interfaces.
> 16 terminal lines.
> 32K bytes of non-volatile configuration memory.
> 4096K bytes of processor board System flash (Read ONLY)
> 
> 
> 
> Press RETURN to get started!
> 
> 
> _
> FAQ, list archives, and subscription info: 
> http://www.groupstudy.com/list/cisco.html
> Report misconduct 
> and Nondisclosure violations to [EMAIL PROTECTED]
> 

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



testing -- please ignore

2000-12-30 Thread Jason Weden



Get ThinkLink! Your All-In-One Communications Center.
Free Voicemail, Email and 5¢ a minute calling - anytime, anywhere.
http://www.thinklink.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Certification Digest V2 #912

2000-12-30 Thread Daniel Keller

I will be on vacation until January 8 and out of pager and cell phone range.  For all 
network related issues please contact our Network Operations Center at 800-610-4684.

Dan Keller

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NAP peering media

2000-12-30 Thread Dan West

Hey Gang,


Just wondering how those NAP xchange points are
connected physically. VIA 

GIG ETHER?
100Mb Fast Ether?
ATM PVCs?

Basically, switched and not routed right? I am trying
to learn about MPLS also. Anyways

Anybody in this group actually working at a MAJOR
peer?

Happy Holidays my fellow Cisco Nuts!

=
Dan West -- CCNA, CCNP (in progress)

__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco's TFTP Program

2000-12-30 Thread Kelly D Griffin

I just used the program to load some IOS on several routers from my Dell
laptop and all went fine.

Kelly D Griffin, CCNA
Network Engineer
Kg2 Network Design
http://www.kg2.com


- Original Message -
From: "Jennifer Mellone" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 29, 2000 6:45 PM
Subject: Cisco's TFTP Program


> Hi Gang,
>
> Is it me, or has anyone else had this problem using the Cisco TFTP
> program---
>
> I TFTPed software from my laptop to a switch just fine today.
>
> But then I tried to TFTP IOS code from my laptop to a router today.  I got
> an error message (from the TFTP program itself), and the program
immediately
> closed down.  I even rebooted the laptop and this did not help.
>
> - Jennifer Mellone
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


http://1cis.com
Free E-mail Servers with unlimited mailboxes
1st Class Internet Solutions

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Hyperterminal

2000-12-30 Thread Austin

All of a sudden, the router will not accept me hitting the ENTER key to get
started. Same thing happens on a break sequence. I cannot seem to send
anything to the terminal.
This is how far it goes and then nothing:

Cisco Internetwork Operating System Software
IOS (tm) 3000 Software (IGS-I-L), Version 11.0(22), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-1998 by cisco Systems, Inc.
Compiled Tue 08-Dec-98 05:20 by jaturner
Image text-base: 0x0301E7AC, data-base: 0x1000

cisco 2511 (68030) processor (revision C) with 16384K/2048K bytes of memory.
Processor board ID 01736515, with hardware revision 
Bridging software.
X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
1 Ethernet/IEEE 802.3 interface.
2 Serial network interfaces.
16 terminal lines.
32K bytes of non-volatile configuration memory.
4096K bytes of processor board System flash (Read ONLY)



Press RETURN to get started!


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: can SPAN port transmit?

2000-12-30 Thread Lou Nelson

I do use intra-vlan routing in that a within the vlan is a gateway for that
VLAN of course an arp (that I see) for the gateway occurs... then when
traffic is sent to the vlans gateway to route to another vlan or anywhere...
I do NOT see that
As you said I would have to go to where the mapping occurs (a bunch of 7507s
with AIPs)... I would find the HSRP active router... no problems...  Still
this does not give me what I was looking for...
In Top Down Design (shameless Plug), a lot of discussion goes to knowing
thyself and the traffic.  What I wanted to see was the amount of traffic,
type of traffic, broadcast versus standard on a given VLAN.  First to
baseline the VLAN, then to identify within my network where I may need
additional improvements.  We have some 16000 host and seem rock solid...  We
have way more bandwidth then needed but expect a huge amount of growth..
not in host but in applications...  two of my 120+ work group managers
constantly insist on infrastructure related problems... yet LMS and HP Open
view show nothing.  Each time they raise a stink, me or one of my
technicians find not only nothing wrong, but often see no symptoms.  Still
these WGMs get managements ear.  In all we have proven each and every time
these guys are off their rockers but it did raise my desire to span the
entire VLAN to Sniffer Pro and get some baselines of the VLANs traffic.  I
wanted to do this from my office simply by creating the LEC spanning the
vlan ... and wham...  In the end all I catch mostly is some CDP, HSRP, and
other type broadcast

Now spanning the port works exactly and accomplished everything I have
wanted it to where I use it.  I have been able to get profiles of our
outbound and inbound data to our network.  I have been able to show growth
and get additional assets with empirical data...

Anyway  thanks Nigel...  I keep looking for a way to capture ALL the data in
a given VLAN... this kinda does make ya wish for a HUB mode.. not



-Original Message-
From: Nigel Taylor [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 30, 2000 5:25 AM
To: Lou Nelson; [EMAIL PROTECTED]; [EMAIL PROTECTED];
Priscilla Oppenheimer
Cc: Bryant Andrews
Subject: Re: can SPAN port transmit?


See Inline.


- Original Message -
From: Lou Nelson <[EMAIL PROTECTED]>
To: Nigel Taylor <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>; Priscilla Oppenheimer <[EMAIL PROTECTED]>;
Lou Nelson <[EMAIL PROTECTED]>
Cc: Bryant Andrews <[EMAIL PROTECTED]>
Sent: Saturday, December 30, 2000 3:13 AM
Subject: RE: can SPAN port transmit?


> hmmm.
> I fully understand the Lane ATM Vlan Elan relationships.
> What is happening is that I only see the broadcast on the specific Vlan.
I
> do not see the direct Vlan to Vlan traffic nor the Vlan to Vlan Gateway
> address...

NT: This won't happen unless you implement some type of inter-vlan routing
in
which case you're no longer monitoring at layer 2 which is where the span
ports
on the switched devices are suppose to monitor/capture. Of course to monitor
different vlans you would have to redefine you SPAN port values if you were
looking to still mointor on Layer 2 .  However, To monitor the VLAN to VLAN
or VLANto VLAn gateway traffic you would have to do this where your VLAN
maps to layer 3, which would mean at either the RSM(where you would
probably have your HSRP gateways defined) or at router with
a AIP card that provides the layer 3 requirememt.


I assumed that the trunked ports were not passing the traffic
> out the lane blades because the Cam Dynamics recognized that the
destination
> MAC was not down that port (trunked port... therefore it dropped the frame
> and my spanned port on the other side of the cloud never got the frame...
> and yes everything else is in place... a lec is configured on my Spanned
> port switch's lane blade...
>
> I clearly do not know what I am missing...  I really feel I have covered
> everything
>
>
> -Original Message-
> From: Nigel Taylor [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, December 30, 2000 1:54 AM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; Priscilla
> Oppenheimer; Lou Nelson
> Cc: Bryant Andrews
> Subject: Re: can SPAN port transmit?
>
>
> Lou,
> The answer is yes.  I must be more specific in stating that since
> LANE extends layer 2 characteristics through the ATM cloud.  ELANs are
> simply a way of extending a VLAN(lan segment/broadcast domain).
> So plugging a sniffer onto a span port that is configured to a specific
VLAN
> which is mapped to a possible specific ELAN you should be able to capture
> all/any traffic within the E-LAN(Extended-VLAN).
>
> What you're seeing would tend to suggest a incorrectly SPAN port.
>
> HTH
>
> Nigel
>
> - Original Message -
> From: Lou Nelson <[EMAIL PROTECTED]>
> To: Priscilla Oppenheimer <[EMAIL PROTECTED]>;
> <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Saturday, December 30, 2000 12:02 AM
> Subject: RE: can SPAN port transmit?
>
>
> > The answer is

Passed Switching 2.0

2000-12-30 Thread Kevin Welch

I passed my switching 2.0 test yesterday, I was very pleased with the =
results.  I did poorly exactly where I expected to do poorly, ip =
multicasting.  My final score was 867/1000.  In studying for the BCMSN I =
was able to rely heavily on the cisco press book and some on the job =
training.  I also studied the sybex training guide because I dont like =
to rely on just one source of information.

Now I need to move on to the BCRAN or BSCN.  I may not post to this list =
too often, but I do read the posts and find the information very =
helpful.  Thanks goes out to everyone who helps answer questions on this =
list.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ccie questions

2000-12-30 Thread Chuck Larrieu

Looking over my own printout, I see that there is no listing of the number
of questions in each category. Just the percent correct.

If I were to guess, based on my percentages and the fact that I passed with
plenty of room to spare, I would guess that there are 1 or 2 multiservice
questions, and 3 security questions tops.

Your mileage may vary.

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
umerkhan
Sent:   Saturday, December 30, 2000 8:59 AM
To: [EMAIL PROTECTED]
Subject:ccie questions

can any one tell me how many questions come from security and =
multiservice in the r/s written paper.
and would the articles available at the following site be sufficient.=20
Internetworking Technologies Overview =
(http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/index.htm)

thanx

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VoIP Lab

2000-12-30 Thread Tommy Mitchell

It really depends on what you want to do.  Using an ICS7750 sounds like you
want to do something more like IP Telephony. So in addition to the server
and a switch, you'll have to use get a handful of Cisco IP phones, not your
typical office phone.
If you're just interested in voice over IP, you can use a couple of routers
with FXS cards (1700s work well for this).  These will accept your standard
analog phones and provide dialtone.  Set the routers up back to back and
make calls over your little mock-up wan.

Tommy

>   jim klane <[EMAIL PROTECTED]> wrote:
> Could someone tell me what is needed to use cisco's voice over ip .
> I would like to connect 5 phones in my office but i can not seem to find
the
> necessary info to help me choose the components ,
> I figure i should need
> 1 cisco ics7750
> 1 catalyst switch


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ccie questions

2000-12-30 Thread umerkhan

can any one tell me how many questions come from security and =
multiservice in the r/s written paper.
and would the articles available at the following site be sufficient.=20
Internetworking Technologies Overview =
(http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/index.htm)

thanx

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Product images

2000-12-30 Thread Ronald James

you have to purchase the visio enterprise version in order to get the cisco
product icons...

""Steven Crawford"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello All,
>
> Does Cisco have a location on their site where they keep image files of
> their products? The Visio files at
> http://www.cisco.com/warp/customer/503/2.html are good, but I would like
> actual pictures of the products to make network diagrams with.
>
> Does such a database exist??
>
> Thanks.
>
> Steven Crawford BA MCSE CCDA CCNP A+
>
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BGP Route Servers

2000-12-30 Thread Chuck Larrieu

Topic came up on the NANOG list yesterday - apparently the cerf.net public
route server was down and someone asked for alternatives.

So, for all you BGP fans who want to know how many routes are in the
"internet routing table" here are a number of places you can check. Note
that there is no one number. it seems to depend upon your point of view.

route-server.ip.att.net
route-views.oregon-ix.net
ner-routes.bbnplanet.net
route-server-eu.exodus.net
route-server.as5388.net
route-server.cerf.net
route-server.exodus.net
route-server.gblx.net

www.traceroute.org

this last one is pretty interesting. Might want to bookmark it.


Chuck
--
I am Locutus, a CCIE Lab Proctor. Xx_Brain_dumps_xX are futile. Your life as
it has been is over ( if you hope to pass ) From this time forward, you will
study US!
( apologies to the folks at Star Trek TNG )

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



about connect the ISP

2000-12-30 Thread gary gary

Hi guys:
We are a small ISP, just using static routing connect
the mother ISP, the mother ISP assign a class C
address to us, I want to know how the mother ISP
locate the Class c networking , just using static
routing? Need they redistribute the static to their
dynamic routing (for example OSPF) in order to the
internet router know the class c network,?
Did the mother ISP create the stub area, then assign
the lots of ip address to stub area ,if so  how to
create the stub area by static routing? Anyone can
give me some configuration,


Thanks in advice



gary




__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco's TFTP Program

2000-12-30 Thread Steve Smith

I run W2K professional "workstation" and use it very frequently. I have
not had one problem with it yet.

regards,
Steve

-Original Message-
From: suaveguru [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 29, 2000 8:22 PM
To: Jennifer Mellone; [EMAIL PROTECTED]
Subject: Re: Cisco's TFTP Program


hi,

from what I know cisco TFTP program does not run well
on NT workstation OS but works ok on NT Server

regards,

suaveguru
--- Jennifer Mellone <[EMAIL PROTECTED]> wrote:
> Hi Gang,
> 
> Is it me, or has anyone else had this problem using
> the Cisco TFTP
> program---
> 
> I TFTPed software from my laptop to a switch just
> fine today.
> 
> But then I tried to TFTP IOS code from my laptop to
> a router today.  I got
> an error message (from the TFTP program itself), and
> the program immediately
> closed down.  I even rebooted the laptop and this
> did not help.
> 
> - Jennifer Mellone
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routing Problem

2000-12-30 Thread Katson PN Yeung

Hi, this is what I can think of. Correct me if I am wrong. Thanks.

If your route is too specific and not able to be accepted by your upstream
provider(s), the next good thing I can think of is to use a load balancer
and insert it between the firewall and the web servers.

- You obtain another block of IP from pacbell. Small size may do.
- You configure your IGP to include IP addresses from both government and
Pacbell.
- You configure EBGP so that both of your router knows the best routes to
return. Don't forget iBGP also. Set local preference if required. Also,
inject default (or u do your own) if necessary. You don't need to annouce
anything to ur upstream, therefore a private AS is needed.
- You use a single block of private IP for your webservers.
- At your load balancer, configure two IP maps. One map for IP of
governmental ISP, another map for IP from Pacbell.
- Configure ur DNS to announce 2(or more, if needed) IPs for any host you
need to load balance.

- Done -

There are pros and cons.
- The good thing is, you have another level of protection by the load
balancer. (Smurf, ICMP bomb, scanning won't hurt you now). You may even
consider throw away your PIXs.
- The bad thing is, you have to buy two load balancers.  :(
- Also, you have to make sure the IP packet with right source IP to get out
to the right uplink. Otherwise, the packet will be dropped by your ISP. This
may need route-map.

"Brian Wilcox" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I am currently adding another circuit to an additional
> ISP for my network.  I want to be able to use the
> first circuit for a redundant backup but am not clear
> on how to accomplish this.
>
> The setup:
> (diagram located at
> http://www.geocities.com/bwilcox_email/Routing_Design.html)
> - watch word wrap
> Internal LAN connected to two PIX's, one in failover
> mode.  The PIX's current default route points to the
> old ISP (government).  All of our internal (public)
> addresses are from the Government ISP's address space,
> which we have a /25 block.  I'm currently NATing my 10
> net to this pool.  I have an internal web server that
> the users need access to from outside the network.
> I'm adding the new circuit via PacBell and would like
> traffic to take that route and failover to the
> Government ISP.
>
> First solution: do BGP.  Well, I can't.  I only have a
> /25, too specific, from the Government ISP and I have
> to maintain the same address space.  So my next
> thought would be to PAT everything out the PacBell
> circuit.  That's fine and dandy but then the web
> server will reply to the source with a different
> address.  I'd like to route the web server to the
> Government ISP.  The only way I can think of doing
> that is via some sort of route map or policy map.
>
> Any comments would be greatly appreciated.
>
> Thanks,  Brian
>
> __
> Do You Yahoo!?
> Yahoo! Photos - Share your holiday photos online!
> http://photos.yahoo.com/
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



about connect the ISP

2000-12-30 Thread gary gary

Hi guys:
We are a small ISP, just using static routing connect
the mother ISP, the mother ISP assign a class C
address to us, I want to know how the mother ISP
locate the Class c networking , just using static
routing? Need they redistribute the static to their
dynamic routing (for example OSPF) in order to the
internet router know the class c network,?
Did the mother ISP create the stub area, then assign
the lots of ip address to stub area ,if so  how to
create the stub area by static routing? Anyone can
give me some configuration,


Thanks in advice


  
gary


__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What should we be learning? * OR * Howard I'm hurt

2000-12-30 Thread Ed Moss

Chuck:
Haven't you figured it out?  Keep the RFC's next to the bed so they can put
you to sleep!  No, seriously though - I am from the school where we should
know the theory behind it, not necessarily the bitwise detail.  If we have
the theory behind it, know who is suppose to talk first, then what kind of
replies there should be - the general flow of the process -  we *should*
know when there is a problem and the general area when troubleshooting. And
then if we have to, we can go to the RFC to look at the detail.

I am with you,  I don't write the underlying code for how the equipment
behaves, so I don't believe I need to be able to recall the detail from
memory.

Ed


"Chuck Larrieu" <[EMAIL PROTECTED]> wrote in message
003801c07208$abb8e560$[EMAIL PROTECTED]">news:003801c07208$abb8e560$[EMAIL PROTECTED]...
> RFC2328 ( OSPF ver 2 ) almost done. Have modified my thoughts on it. Still
> seems to be a lot of repetition, but I believe I am beginning to
appreciate
> the complexity of the protocol.
>
> Seriously, for those of us browsing RFC's as part of our preparations,
what
> is it we should be learning?
>
> As someone who probably will not be writing router code ever, at what
point
> do I turn the page or just close it down entirely?
>
> Chuck
> --
> I am Locutus, a CCIE Lab Proctor. Xx_Brain_dumps_xX are futile. Your life
as
> it has been is over ( if you hope to pass ) From this time forward, you
will
> study US!
> ( apologies to the folks at Star Trek TNG )
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco's TFTP Program

2000-12-30 Thread Mike Fountain

There is a flaky bug in their software that sometimes occurs, sometimes
doesn't.

Try going into the option and turn off logging and displaying download
progress  ((I don't have it on this PC so I can't remember the exact
options)) and then it should work ok.

hope that helps


- Original Message -
From: "Jennifer Mellone" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 29, 2000 7:45 PM
Subject: Cisco's TFTP Program


> Hi Gang,
>
> Is it me, or has anyone else had this problem using the Cisco TFTP
> program---
>
> I TFTPed software from my laptop to a switch just fine today.
>
> But then I tried to TFTP IOS code from my laptop to a router today.  I got
> an error message (from the TFTP program itself), and the program
immediately
> closed down.  I even rebooted the laptop and this did not help.
>
> - Jennifer Mellone
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco's TFTP Program

2000-12-30 Thread Kenneth Lorenzo

Try the solarwinds TFTP. Much more functional.

www.solarwinds.com

"Jennifer Mellone" <[EMAIL PROTECTED]> wrote in message
000101c071f9$ca790ca0$[EMAIL PROTECTED]">news:000101c071f9$ca790ca0$[EMAIL PROTECTED]...
> Hi Gang,
>
> Is it me, or has anyone else had this problem using the Cisco TFTP
> program---
>
> I TFTPed software from my laptop to a switch just fine today.
>
> But then I tried to TFTP IOS code from my laptop to a router today.  I got
> an error message (from the TFTP program itself), and the program
immediately
> closed down.  I even rebooted the laptop and this did not help.
>
> - Jennifer Mellone
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



setting bit pattern for extended ping

2000-12-30 Thread suaveguru

hi anyone knows why changing the bit pattern in
extended ping from 0xABCD to some other thing can test
sensitivity of networking devices and test for
crosstalk?


I read this to prepare for support 2.0

thanks

suaveguru

__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ip route question

2000-12-30 Thread suaveguru

thanks  

suaveguru
--- Chuck Larrieu <[EMAIL PROTECTED]> wrote:
> Admittedly it is not good practice, particularly in
> the case of the original
> question of this thread. On the other hand, in
> prepping for the CCIE lab, I
> find myself looking at a LOT of scenarios that are
> filled with instances of
> things that are definitely NOT good practice.
> 
> Chuck
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of
> suaveguru
> Sent: Friday, December 29, 2000 10:52 PM
> To:   Chuck Larrieu; [EMAIL PROTECTED]
> Subject:  RE: ip route question
> 
> You are right, but forwarding packets to a network
> seems less seldom use right?
> 
> thanks
> suaveguru
> 
> --- Chuck Larrieu <[EMAIL PROTECTED]> wrote:
> > Sure. If the route is in your routing table.
> >
> >  Works for me here in the lab. IOS accepts the
> > command. The destination
> > router sees the ping requests coming in.
> >
> > Why not? The router forwards packets based on
> > entries in the routing table.
> > What, fundamentally, is the difference between ip
> > route 0.0.0.0 0.0.0.0
> > 172.16.75.45 and ip route 0.0.0.0 0.0.0.0
> > 172.16.0.0?
> >
> > As long as there is an entry in the routing table
> > for either, the router
> > will forward the packet out the appropriate
> > interface.
> >
> > Chuck
> >
> >
> > -Original Message-
> > From:   suaveguru [mailto:[EMAIL PROTECTED]]
> > Sent:   Friday, December 29, 2000 6:39 PM
> > To: Chuck Larrieu; Stull, Cory;
> [EMAIL PROTECTED]
> > Subject:RE: ip route question
> >
> > you can point static route out to any network , I
> > have
> > not done that b4 can you please enlighten me?
> >
> > I always thought that you can only point static
> > routes
> > to physical interfaces, logical interfaces and a
> > specific host's ip address but not a network
> >
> >
> > suaveguru
> > --- Chuck Larrieu <[EMAIL PROTECTED]> wrote:
> > > Nope. In the Cisco world, anyway, you can point
> a
> > > static route out a
> > > physical interface, out a logical interface, out
> a
> > > null interface, or to any
> > > network that appears in your routing table.
> Neat,
> > > isn't it!
> > >
> > > Chuck
> > > -Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]] On Behalf Of
> > > Stull, Cory
> > > Sent: Friday, December 29, 2000 9:31 AM
> > > To:   '[EMAIL PROTECTED]'
> > > Subject:  ip route question
> > >
> > >
> > > I know I'm showing my ignorance here but I'm
> tired
> > > of trying to find the
> > > answer on CCO.  Must be looking in the wrong
> > places.
> > >
> > >
> > > I just saw a Boson question asking about  ip
> > > route 0.0.0.0 0.0.0.0 int
> > > ethernet0
> > >
> > >
> > > I thought you could only point static routes
> like
> > > that out of point to point
> > > interfaces?  For example:   ip route 0.0.0.0
> > > 0.0.0.0 int ser0
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > Cory
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations
> to
> > > [EMAIL PROTECTED]
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations
> to
> > [EMAIL PROTECTED]
> >
> >
> > __
> > Do You Yahoo!?
> > Yahoo! Photos - Share your holiday photos online!
> > http://photos.yahoo.com/
> >
> 
> 
> __
> Do You Yahoo!?
> Yahoo! Photos - Share your holiday photos online!
> http://photos.yahoo.com/
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
> 


__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Knowledge Net

2000-12-30 Thread Jeff Duchin

Has anyone taken any of the classes through Knowledge Net? I just did the
6509 class which was pretty cool.

Jeff


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: crossover or straight = CROSSOVER

2000-12-30 Thread Lowell Sharrah

A good rule of thumb is this: 

Think of the OSI 7 layer model.  If you have to connect two devices that are 'peer to 
peer'-such as a router to router (L3-L3), hub to hub (L1-L1), or switch to 
switch(L2-L2), use a crossover cable.  If you connect between layers 
(L1-L3/L2-L3/L1-L2), use straight thru.  I have found this very helpful.

>>> L Reid <[EMAIL PROTECTED]> 12/30/00 07:48AM >>>

 In my lab there are two (2) 1900's Trunking and in accordance with the documentiation 
a CrossOver cable is need.

This was done and worked fine.

Trunking did not work with a Straight.  A straight was used and Trucking failed.


  "D. J. Jones" <[EMAIL PROTECTED]> wrote: 
Straight cable.

""sean"" wrote in message
92e71h$qg7$[EMAIL PROTECTED]">news:92e71h$qg7$[EMAIL PROTECTED]...
> Hi,
>
> I am just wondering... does trunking use crossover or straight cable?
>
> Thanks
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html 
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] 
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html 
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] 

= = = = = = = = = = = = = = = = = =
[EMAIL PROTECTED] 
= = = = = = = = = = = = = = = = = =


-
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html 
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: crossover or straight = CROSSOVER

2000-12-30 Thread L Reid


 In my lab there are two (2) 1900's Trunking and in accordance with the documentiation 
a CrossOver cable is need.

This was done and worked fine.

Trunking did not work with a Straight.  A straight was used and Trucking failed.


  "D. J. Jones" <[EMAIL PROTECTED]> wrote: 
Straight cable.

""sean"" wrote in message
92e71h$qg7$[EMAIL PROTECTED]">news:92e71h$qg7$[EMAIL PROTECTED]...
> Hi,
>
> I am just wondering... does trunking use crossover or straight cable?
>
> Thanks
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

= = = = = = = = = = = = = = = = = =
[EMAIL PROTECTED]
= = = = = = = = = = = = = = = = = =


-
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VoIP Lab

2000-12-30 Thread L Reid


While at AT&T I took in some training on Voice Over IP and according to that, there 
needed to be a PBX and a Voice Over IP module from Cisco.  In the Cisco 2620 or 2621 
(do not remember which one was used) the module was a card.  On the Test and Turn-up 
things went smooth.  


  jim klane <[EMAIL PROTECTED]> wrote: 

Could someone tell me what is needed to use cisco's voice over ip .

I would like to connect 5 phones in my office but i can not seem to find the 
necessary info to help me choose the components ,


I figure i should need

1 cisco ics7750
1 catalyst switch


Where could i find more info. I have checked cisco.com but t become more 
confused..Does anyone have a case study or a design guide..


Please let me know

jim k
_
Get your FREE download of MSN Explorer at http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

= = = = = = = = = = = = = = = = = =
[EMAIL PROTECTED]
= = = = = = = = = = = = = = = = = =


-
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ip route question

2000-12-30 Thread Lowell Sharrah

Another question, what would happen if you ended up redistributing static under the 
routing protocol and did not make the interface where the default route is pointed 
passive?  Might run into some weird routing problems.  I prefer to send the default 
route to an address rather than an interface.

>>> "Chuck Larrieu" <[EMAIL PROTECTED]> 12/29/00 01:17PM >>>
To which rule are you referring?

Router_2(config)#ip route 0.0.0.0 0.0.0.0 ?
  A.B.C.D   Forwarding router's address
  Ethernet  IEEE 802.3
  Loopback  Loopback interface
  Null  Null interface
  SerialSerial

Chuck

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Andy
Walden
Sent:   Friday, December 29, 2000 10:01 AM
To: Stull, Cory
Cc: '[EMAIL PROTECTED]' 
Subject:Re: ip route question


That is the rule. I will say that when there was only one device on the
ethernet I have done it accidently and it worked though.

andy

On Fri, 29 Dec 2000, Stull, Cory wrote:

>
> I know I'm showing my ignorance here but I'm tired of trying to find the
> answer on CCO.  Must be looking in the wrong places.
>
>
> I just saw a Boson question asking about  ip route 0.0.0.0 0.0.0.0 int
> ethernet0
>
>
> I thought you could only point static routes like that out of point to
point
> interfaces?  For example:   ip route 0.0.0.0 0.0.0.0 int ser0
>
>
>
>
>
>
>
> Cory
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html 
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] 
>

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html 
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] 

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html 
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Null Modem Cable

2000-12-30 Thread Tariq Bin Azad

Hello Everybody.

I am preparing for BCRAN Exam.
I have following setup in my home lab.
ROUTER A (2501)   Connected with Computer A
I want to dial from Computer B to Router A so that Router A will
authenticate my client on Computer B.
I don't have 2 telephone lines. I think that we can use NULL MODEM to do
this lab but I don't know how to do this and how to comfigure ROUTER
A(2501).
Can anubody in this news group help me to do this lab 
If you have any idea to do this comfiguration than please send me an email.

All ideas and comments will be appreciated

Thanks

Tariq

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: can SPAN port transmit?

2000-12-30 Thread Nigel Taylor

See Inline.


- Original Message -
From: Lou Nelson <[EMAIL PROTECTED]>
To: Nigel Taylor <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>; Priscilla Oppenheimer <[EMAIL PROTECTED]>;
Lou Nelson <[EMAIL PROTECTED]>
Cc: Bryant Andrews <[EMAIL PROTECTED]>
Sent: Saturday, December 30, 2000 3:13 AM
Subject: RE: can SPAN port transmit?


> hmmm.
> I fully understand the Lane ATM Vlan Elan relationships.
> What is happening is that I only see the broadcast on the specific Vlan.
I
> do not see the direct Vlan to Vlan traffic nor the Vlan to Vlan Gateway
> address...

NT: This won't happen unless you implement some type of inter-vlan routing
in
which case you're no longer monitoring at layer 2 which is where the span
ports
on the switched devices are suppose to monitor/capture. Of course to monitor
different vlans you would have to redefine you SPAN port values if you were
looking to still mointor on Layer 2 .  However, To monitor the VLAN to VLAN
or VLANto VLAn gateway traffic you would have to do this where your VLAN
maps to layer 3, which would mean at either the RSM(where you would
probably have your HSRP gateways defined) or at router with
a AIP card that provides the layer 3 requirememt.


I assumed that the trunked ports were not passing the traffic
> out the lane blades because the Cam Dynamics recognized that the
destination
> MAC was not down that port (trunked port... therefore it dropped the frame
> and my spanned port on the other side of the cloud never got the frame...
> and yes everything else is in place... a lec is configured on my Spanned
> port switch's lane blade...
>
> I clearly do not know what I am missing...  I really feel I have covered
> everything
>
>
> -Original Message-
> From: Nigel Taylor [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, December 30, 2000 1:54 AM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; Priscilla
> Oppenheimer; Lou Nelson
> Cc: Bryant Andrews
> Subject: Re: can SPAN port transmit?
>
>
> Lou,
> The answer is yes.  I must be more specific in stating that since
> LANE extends layer 2 characteristics through the ATM cloud.  ELANs are
> simply a way of extending a VLAN(lan segment/broadcast domain).
> So plugging a sniffer onto a span port that is configured to a specific
VLAN
> which is mapped to a possible specific ELAN you should be able to capture
> all/any traffic within the E-LAN(Extended-VLAN).
>
> What you're seeing would tend to suggest a incorrectly SPAN port.
>
> HTH
>
> Nigel
>
> - Original Message -
> From: Lou Nelson <[EMAIL PROTECTED]>
> To: Priscilla Oppenheimer <[EMAIL PROTECTED]>;
> <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Saturday, December 30, 2000 12:02 AM
> Subject: RE: can SPAN port transmit?
>
>
> > The answer is no.  I have tried before and I now think of spanning a
port
> as
> > a 6th state of the STP...  Listen only to the other port  .. to TX
and
> > receive to the sniffer you will need another NIC and Port
> >
> > Now a question back to the group... Across an ATM cloud... using LANE...
> and
> > ELANS Is there a way to see ALL Vlan traffic (Inc. from switches
> across
> > the cloud) when you span a VLAN on a switch... Thus far I can ONLY see
the
> > broadcast traffic!
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Priscilla Oppenheimer
> > Sent: Friday, December 29, 2000 4:42 PM
> > To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> > Subject: Re: can SPAN port transmit?
> >
> >
> > The reason I ask is that my client is developing a network management
box
> > that will connect to a SPAN port and collect traffic as well as
> > occasionally send SNMP queries and other UDP packets.
> >
> > He realizes that if the user were collecting data from many ports there
> > would be performance issues. However, he wants to know, in the absence
of
> > performance problems, will his device be able to send some queries? Is
> > sending disabled on the SPAN port? The other answers (from people who
have
> > tried it) make me think the answer is no, sending is not disabled.
> >
> > Priscilla
> >
> > At 04:46 PM 12/29/00, [EMAIL PROTECTED] wrote:
> >
> >
> > >Cisco employees have confirmed for me that devices connected to span
> ports
> > >are unable to act as normal hosts by design.
> > >
> > >
> > >
> > >
> > >
> > >
> > >Priscilla Oppenheimer <[EMAIL PROTECTED]>@groupstudy.com on
12/29/2000
> > >03:27:52 PM
> > >
> > >Please respond to Priscilla Oppenheimer <[EMAIL PROTECTED]>
> > >
> > >Sent by:  [EMAIL PROTECTED]
> > >
> > >To:   [EMAIL PROTECTED]
> > >cc:(bcc: Kevin Cullimore)
> > >Subject:  can SPAN port transmit?
> > >
> > >
> > >Hi folks,
> > >
> > >If I connect a Sniffer-like device to the SPAN port of a switch, will
the
> > >Sniffer-like device be able to transmit data?
> > >
> > >My guess is no. From my reading on Cisco's SwitchProbe external
hardware
> > >probes, it appears that the SwitchProbe needs an additional port to
send
> > >dat

Re: Network Authorization - seek help

2000-12-30 Thread leonz

hi,
For TACACS+ servers, I know you can set something similar to "acl=" in
service section.
but that's for Cisco routers, don't know if it's applicable to the server
you are talking about though.

Leon
CCNP+Security, CCDA


- Original Message -
From: "NY" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, December 30, 2000 8:38 PM
Subject: Network Authorization - seek help


> Hi,
>
> Our policy is to only allow remote users telneting into a server called A
through our RAS with authorization from CSNT.   But the problem is we cannot
stop the users from telneting to other servers in the LAN from the server A.
We are NOT allowed to modify the server setting to exclude the telnet
service.  Is that possible to solve it on the RAS or AAA server level ?
Thank you.
>
> Cheers,
> NY
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Revisted - OSPF Virtual Links and RIDs

2000-12-30 Thread Nigel Taylor

Chuck,
I finally got a chance to mock this up in the lab and I've
got
some pretty cool resultsFirst of all when I did this using pretty much
the same scenario the virtual link never went down at any time when
 the connection to r3 from r2 was shutdown.  After clearing the routes
and ospf redistribution the virtual-link was still up/up.

Theory that stood the testI then used a external routing
 info.(rip) to advertise routes to the loopback identified with the
virtual-link command.  With a direct path/route between both
loopbacks I then shut down the physical link between R1 and R2.
As expected, the virtual-link stayed down and never  came back up.

In Doyle's book (Routing TCP/IP) he states that the virtual-link must be
configured between two ABR's and the area it transits must having full
routing info.  I take the meaning of this as having a full map of the
network.
There is also a mention of using a non-backbone area, which I also
take to mean - "An OSPF Area"  in which case any external routing
info used to obtain a path to the loopback would prove useless if not
 part of an OSPF area that is either directly connected to area or
is connected by the same process a virtual-link

Just some observations..

Any thoughts...!

This is some really cool stuff.

Nigel.



- Original Message -
From: Chuck Larrieu <[EMAIL PROTECTED]>
To: CCIE_Lab Groupstudy List <[EMAIL PROTECTED]>
Sent: Sunday, December 24, 2000 1:12 PM
Subject: OSPF Virtual Links and RIDs


> Just got through with one of the multiprotocol redistribution practice
labs
> ( Mentor Labs 4141 )
>
> Got a question regarding virtual links and loopback RIDs.
>
> In the realm of OSPF, when direct ( meaning through the OSPF process )
> access to a particular router is lost, does that mean that any virtual
link
> associated with that router is lost? Well, yes, I know, and duh!
>
> But my question has to do with the placement of the RID into the routing
> process.
>
> The deal is that there is an alternative link to the OSPF area 0. However
it
> is through a different routing protocol. All routes are redistributed
> through that protocol, and when the direct i.e. OSPF link between the two
> endpoints of the virtual link are severed, even though the route to the
RID
> is seen via the redistribution process, the virtual link apparently does
not
> come back up.
>
> This leads back to the question of the value of loopback addresses as a
cure
> all for routing process interruptions. In the scenario I ran, there was a
> classic virtual link.
>
> R1-R2---R3  connected via serial links
> Area2area1.area0
>
> All routers have loopbacks, which under the rules of the game have become
> the RID's
>
> There is also an external routing domain connecting R1 and R3 via the
> ethernet ports. Redistribution is established, and works just fine.
>
> When I severed the serial link between R2 and R3, the virtual link goes
> down, and does not re-establish itself, even though the RID is being
> advertised as a route into the exterior domain, and remains in the routing
> tables of all routers as external routes.
>
> I kinda expected this behaviour, but it still raises the question of the
> supposed benefit of loopbacks as an interface that is "always up" and
> therefore advantageous to use.
>
> One of those "pitfalls" someone was asking about a couple of weeks back, I
> suppose.
>
> Chuck
> --
> I am Locutus, a CCIE Lab Proctor. Xx_Brain_dumps_xX are futile. Your life
as
> it has been is over ( if you hope to pass ) From this time forward, you
will
> study US!
> ( apologies to the folks at Star Trek TNG )
>
> ___
> To unsubscribe from the CCIELAB list, send a message to
> [EMAIL PROTECTED] with the body containing:
> unsubscribe ccielab
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TCP/IP port 1761 and 1762

2000-12-30 Thread Chris McCoy


TCP port 1761 through 1764 are used for the Microsoft
Management Console (remote management for WinNT/2000).

Chris M.

--- keith wood <[EMAIL PROTECTED]> wrote:
> Any idea what exactly these ports are used for?  I
> know they are for cft-0
> and cft-1.  What is CFT?  All the RFC gives me is a
> name and number (no
> descriptions), but as it is Christmas I wont call
> this number untill in the
> New Year - I am just curious in the meantime so if
> anyone knows the answer I
> would appreciate it.
> 
> I am asking as I have just started reading on the
> subject of security, and a
> port-scan of the network shows a lot of machines
> with these 2 ports
> active...
> 
> Keith ;-)
> 
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


__
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ip route question

2000-12-30 Thread Lou Nelson

Cory,
I read thru the responses and they are all good but I would like to
add...
Who is to say that an Ethernet interface is not a point to point.   Using
media converters changing a FE interface from tx to fiber and then back
again I have many WAN FE point to point  interfaces.
In a few cases I prefer the interface because it prevent routing loops when
links fail.  I run HSRP on three gateway 7507s with gig uplinks to a 7513.
The 3 7507 are logically connected via ATM interfaces that also house the
HSRP.  By using the interface to point out the gig links versus the opposite
end ip interface on the gig link I prevent on 7507 believing that sending
packets back to the originating router is a preferred EIGRP route to get to
the 7513.


So the Eth interface does not have to be a broadcast environment... it can
be a point to point!

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Stull, Cory
Sent: Friday, December 29, 2000 11:31 AM
To: '[EMAIL PROTECTED]'
Subject: ip route question



I know I'm showing my ignorance here but I'm tired of trying to find the
answer on CCO.  Must be looking in the wrong places.


I just saw a Boson question asking about  ip route 0.0.0.0 0.0.0.0 int
ethernet0


I thought you could only point static routes like that out of point to point
interfaces?  For example:   ip route 0.0.0.0 0.0.0.0 int ser0







Cory

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Network Authorization - seek help

2000-12-30 Thread NY

Hi,

Our policy is to only allow remote users telneting into a server called A through our 
RAS with authorization from CSNT.   But the problem is we cannot stop the users from 
telneting to other servers in the LAN from the server A.  We are NOT allowed to modify 
the server setting to exclude the telnet service.  Is that possible to solve it on the 
RAS or AAA server level ?  Thank you.

Cheers,
NY

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Mgmt Vlan at Cat3548

2000-12-30 Thread badai chaputuo sorakai


Cheers,

I have a headache problem with management vlan of my Cat3548 in every floors. The 
existing users at floor already separated in vlans and connect to a Cat65 for 
intervlan routing. Now my boss need to add a new vlan in every cat3548 for mgmt ( e.g 
: vlan99 ). I have tried isl encap for this 2 vlan for merge at cat65 ( one for users 
vlan and one for vlan99 for mgmt ) but it didn't work. Should I use int bvi at this ??
any inputs will be appreciated.
the int sc0 at cat65 need to be grouped into vlan99 also..

thanks

Badai





Join 18 million Eudora users by signing up for a free Eudora Web-Mail account at 
http://www.eudoramail.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: can SPAN port transmit?

2000-12-30 Thread Lou Nelson

hmmm.
I fully understand the Lane ATM Vlan Elan relationships.
What is happening is that I only see the broadcast on the specific Vlan.  I
do not see the direct Vlan to Vlan traffic nor the Vlan to Vlan Gateway
address...  I assumed that the trunked ports were not passing the traffic
out the lane blades because the Cam Dynamics recognized that the destination
MAC was not down that port (trunked port... therefore it dropped the frame
and my spanned port on the other side of the cloud never got the frame...
and yes everything else is in place... a lec is configured on my Spanned
port switch's lane blade...

I clearly do not know what I am missing...  I really feel I have covered
everything


-Original Message-
From: Nigel Taylor [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 30, 2000 1:54 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; Priscilla
Oppenheimer; Lou Nelson
Cc: Bryant Andrews
Subject: Re: can SPAN port transmit?


Lou,
The answer is yes.  I must be more specific in stating that since
LANE extends layer 2 characteristics through the ATM cloud.  ELANs are
simply a way of extending a VLAN(lan segment/broadcast domain).
So plugging a sniffer onto a span port that is configured to a specific VLAN
which is mapped to a possible specific ELAN you should be able to capture
all/any traffic within the E-LAN(Extended-VLAN).

What you're seeing would tend to suggest a incorrectly SPAN port.

HTH

Nigel

- Original Message -
From: Lou Nelson <[EMAIL PROTECTED]>
To: Priscilla Oppenheimer <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Saturday, December 30, 2000 12:02 AM
Subject: RE: can SPAN port transmit?


> The answer is no.  I have tried before and I now think of spanning a port
as
> a 6th state of the STP...  Listen only to the other port  .. to TX and
> receive to the sniffer you will need another NIC and Port
>
> Now a question back to the group... Across an ATM cloud... using LANE...
and
> ELANS Is there a way to see ALL Vlan traffic (Inc. from switches
across
> the cloud) when you span a VLAN on a switch... Thus far I can ONLY see the
> broadcast traffic!
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Priscilla Oppenheimer
> Sent: Friday, December 29, 2000 4:42 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Re: can SPAN port transmit?
>
>
> The reason I ask is that my client is developing a network management box
> that will connect to a SPAN port and collect traffic as well as
> occasionally send SNMP queries and other UDP packets.
>
> He realizes that if the user were collecting data from many ports there
> would be performance issues. However, he wants to know, in the absence of
> performance problems, will his device be able to send some queries? Is
> sending disabled on the SPAN port? The other answers (from people who have
> tried it) make me think the answer is no, sending is not disabled.
>
> Priscilla
>
> At 04:46 PM 12/29/00, [EMAIL PROTECTED] wrote:
>
>
> >Cisco employees have confirmed for me that devices connected to span
ports
> >are unable to act as normal hosts by design.
> >
> >
> >
> >
> >
> >
> >Priscilla Oppenheimer <[EMAIL PROTECTED]>@groupstudy.com on 12/29/2000
> >03:27:52 PM
> >
> >Please respond to Priscilla Oppenheimer <[EMAIL PROTECTED]>
> >
> >Sent by:  [EMAIL PROTECTED]
> >
> >To:   [EMAIL PROTECTED]
> >cc:(bcc: Kevin Cullimore)
> >Subject:  can SPAN port transmit?
> >
> >
> >Hi folks,
> >
> >If I connect a Sniffer-like device to the SPAN port of a switch, will the
> >Sniffer-like device be able to transmit data?
> >
> >My guess is no. From my reading on Cisco's SwitchProbe external hardware
> >probes, it appears that the SwitchProbe needs an additional port to send
> >data to a network management system. One port connects to a SPAN port on
> >the switch and the other port connects to a normal port and is configured
> >in "management mode."
> >
> >But, does anyone have experience with trying to send from a device
> >connected to a SPAN port?
> >
> >Thanks
> >
> >Priscilla
>
>
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]