Can I use the GE interfaces on the Cat4000-L3 for trunking?
does someone know how to configure trunking between two cat4003 equipped with a L3-modul using the gbic's? respectively is it possible at all, because the are routed interfaces? i think it should work with bridging, but i was unable to find some infos on the cisco website and the trial and error method wasn't very fruitful. thx thomas _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Catalyst 4840G discontinued?
hi, i've heard a rumor that the Cat4840G will be discontinued in favor of the CSS products, does someone know more about that issue? i would need that info for some decisions. thx thomas _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
TACACS and Telnet
Hi all I intend to setup TACACS+ authentication for all our network devices and I need to understand the following question: Is the telnet authentication sequence encrypted ? I am asking about the situation when the net. device is set up to work with TACACS+. If it isn't what should I do to have a secure connection during the authentication phase. I have to say that I use an IP connection not PPP. (It's just a simple Telnet session from our internal LAN) In my opinion it is not a secure session but I would like to be a secure one and I don't know how to set it. I will be waiting for your advice. Thanks in advance Cristian _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Ping response between subnets slow
The Response time of pinging from switch to switch is not slow > -Original Message- > From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, January 03, 2001 8:16 AM > To: [EMAIL PROTECTED] > Subject: Re: Ping response between subnets slow > > What about the times when you ping from switch to switch? Is it slow when > you > try that? > > In a message dated 1/2/01 6:10:33 PM Eastern Standard Time, > [EMAIL PROTECTED] writes: > > > > Hi, > > > > 10 ms seems high on a switched network. > > > > I assume that both networks (Switches) have a trunk between each other > and > > from one switch back to the router if you are using VLAN's. > > > > Check your ethernet interface on your router. See what traffic it is > > doing. Check for collisions, Late collisions, CRC's. > > > > Check the port on the switch connecting to the router. Make sure the > > aggree on the port speed (they will or no comms) and the duplex settings > > > (the most common problem). DO NOT LEAVE THE SWITCH IN AUTO NEGOTIATE > MODE. > > > > > > Just some thoughts. > > > > Teunis > > Hobart, Tasmania > > Australia > > > > > > On Tuesday, January 02, 2001 at 05:25:17 AM, Amit Gupta wrote: > > > > > Hi Everybody, > > > > > > Need some help on the following problem > > > > > > I have 2 subnets configured on my LAN say ( x.x.1.0 > > > and x.x.2.0 )with a SM of 255.255.255.0. > > > There are 2 Catalyst switches ( each one on a > > > different subnet) > > > > > > The router is configured with a primary and a > > > secondary address on the ethernet port say x.x.1.1 and > > > x.x.2.1 > > > > > > When I ping a station on one subnet to another and > > > viceversa the response time is very high (sometimes > > > upto 80ms) while the response time while pinging in > > > the same subnet is less than 10ms. > > > > > > Need some clues on the possible reasons for this > > > > > > > > > Thanks & Regards > > > > > > Amit > > > > > Mark Zabludovsky ~ CCNA, CCDA, 1/2-NP > [EMAIL PROTECTED] > > "Even if I knew I had only 1 more week to live, I would still > schedule > my CCIE lab. I would just have to work a little harder I guess. After all, > > without any goals in life, I'm dead already." >~Mark Zabludovsky~ > > _ > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Timeouts on Ethernet and WAN interface
Hi, We have this 3600 router connected to a WAN through a PRI interface an a LAN through an ethernet interface. We have recently been experiencing timeouts on these interfaces. Over noght the timeouts did not appear, just this morning it has started again. What could be wrong? Dzilo Get free email and a permanent address at http://www.netaddress.com/?N=1 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: TACACS and Telnet
Cristian, Good question! No your telnet session is not secure. When you type in your password you are sending it across the network in clear text. However, the session that is used between your router and the TACACS server is encrypted using the shared key that you define when you setup TACACS. If you want secure communications using a telnet like session you will have to use SSH. I believe it was implemented in IOS 12.0, but I could be wrong. Just remember that you will have to have a SSH client in order to use SSH to communicate with your router. Here is a link for more info. http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121t/121t1/sshv1.htm (watch the wrap) HTH, AQ At 03:47 AM 1/3/01, Piatnitchi Cristian wrote: >Hi all > >I intend to setup TACACS+ authentication for all our network devices and >I need to understand the following question: > >Is the telnet authentication sequence encrypted ? I am asking about the >situation >when the net. device is set up to work with TACACS+. >If it isn't what should I do to have a secure connection during the >authentication phase. > >I have to say that I use an IP connection not PPP. (It's just a simple >Telnet session from our internal LAN) > >In my opinion it is not a secure session but I would like to be a secure one >and I don't know how to set it. >I will be waiting for your advice. > >Thanks in advance >Cristian > > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] ** Adam Quiggle Senior Network Engineer MCI Worldcom/NOC/BP Amoco [EMAIL PROTECTED] ** _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TACACS and Telnet
Hi Adam Thanks for the link. Now the question is clear for me. Yes is is true ssh is supported starting with IOS 12 but IOS 12.1 not IOS 12.0 Is the upgrade free from a version to a higher one. I mean from 12.0 to 12.1 ? Thanks for help. Cristian -Original Message- From: Adam Quiggle [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 11:22 AM To: Piatnitchi Cristian; '[EMAIL PROTECTED]' Subject: Re: TACACS and Telnet Cristian, Good question! No your telnet session is not secure. When you type in your password you are sending it across the network in clear text. However, the session that is used between your router and the TACACS server is encrypted using the shared key that you define when you setup TACACS. If you want secure communications using a telnet like session you will have to use SSH. I believe it was implemented in IOS 12.0, but I could be wrong. Just remember that you will have to have a SSH client in order to use SSH to communicate with your router. Here is a link for more info. http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121 t/121t1/sshv1.htm (watch the wrap) HTH, AQ At 03:47 AM 1/3/01, Piatnitchi Cristian wrote: >Hi all > >I intend to setup TACACS+ authentication for all our network devices and >I need to understand the following question: > >Is the telnet authentication sequence encrypted ? I am asking about the >situation >when the net. device is set up to work with TACACS+. >If it isn't what should I do to have a secure connection during the >authentication phase. > >I have to say that I use an IP connection not PPP. (It's just a simple >Telnet session from our internal LAN) > >In my opinion it is not a secure session but I would like to be a secure one >and I don't know how to set it. >I will be waiting for your advice. > >Thanks in advance >Cristian > > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] ** Adam Quiggle Senior Network Engineer MCI Worldcom/NOC/BP Amoco [EMAIL PROTECTED] ** _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Enhanced Interior Gateway Routing Protocol
You can always go to www.certificationzone.com. The free whitepaper this month for the CCIE study zone is on EIGRP :) "Tony van Ree" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > This looks good. > > Teunis > Hobart, Tasmania > Australia > > On Tuesday, January 02, 2001 at 10:35:34 PM, [EMAIL PROTECTED] wrote: > > > http://cio.cisco.com/warp/public/103/eigrp5.html > > > > _ > > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > > > -- > www.tasmail.com > > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TACACS and Telnet
Sorry I was wrong it seems to be supported starting with 12.0(5)S. My questions is still up. How about the upgrade ? Thanks Cristian -Original Message- From: Piatnitchi Cristian Sent: Wednesday, January 03, 2001 12:19 PM To: 'Adam Quiggle'; Piatnitchi Cristian; '[EMAIL PROTECTED]' Subject: RE: TACACS and Telnet Hi Adam Thanks for the link. Now the question is clear for me. Yes is is true ssh is supported starting with IOS 12 but IOS 12.1 not IOS 12.0 Is the upgrade free from a version to a higher one. I mean from 12.0 to 12.1 ? Thanks for help. Cristian -Original Message- From: Adam Quiggle [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 11:22 AM To: Piatnitchi Cristian; '[EMAIL PROTECTED]' Subject: Re: TACACS and Telnet Cristian, Good question! No your telnet session is not secure. When you type in your password you are sending it across the network in clear text. However, the session that is used between your router and the TACACS server is encrypted using the shared key that you define when you setup TACACS. If you want secure communications using a telnet like session you will have to use SSH. I believe it was implemented in IOS 12.0, but I could be wrong. Just remember that you will have to have a SSH client in order to use SSH to communicate with your router. Here is a link for more info. http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121 t/121t1/sshv1.htm (watch the wrap) HTH, AQ At 03:47 AM 1/3/01, Piatnitchi Cristian wrote: >Hi all > >I intend to setup TACACS+ authentication for all our network devices and >I need to understand the following question: > >Is the telnet authentication sequence encrypted ? I am asking about the >situation >when the net. device is set up to work with TACACS+. >If it isn't what should I do to have a secure connection during the >authentication phase. > >I have to say that I use an IP connection not PPP. (It's just a simple >Telnet session from our internal LAN) > >In my opinion it is not a secure session but I would like to be a secure one >and I don't know how to set it. >I will be waiting for your advice. > >Thanks in advance >Cristian > > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] ** Adam Quiggle Senior Network Engineer MCI Worldcom/NOC/BP Amoco [EMAIL PROTECTED] ** _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TACACS and Telnet
Cristian, If you are asking me if the IOS upgrade is free or not, that I couldn't answer. It all depends upon how you like to pay the piper. :-) If you have smartnet maintenance, then I think it is free. If not you will probably have to purchase it. I am no expert in this area, maybe someone who works for a reseller can help you out here .Bueller? Bueller? anyone? ;-) Later, AQ At 05:18 AM 1/3/01, Piatnitchi Cristian wrote: >Hi Adam > >Thanks for the link. Now the question is clear for me. >Yes is is true ssh is supported starting with IOS 12 but IOS 12.1 not >IOS 12.0 >Is the upgrade free from a version to a higher one. I mean from 12.0 to 12.1 >? > >Thanks for help. >Cristian > > >-Original Message- >From: Adam Quiggle [mailto:[EMAIL PROTECTED]] >Sent: Wednesday, January 03, 2001 11:22 AM >To: Piatnitchi Cristian; '[EMAIL PROTECTED]' >Subject: Re: TACACS and Telnet > > >Cristian, > >Good question! No your telnet session is not secure. When >you type in your password you are sending it across the network >in clear text. However, the session that is used between your >router and the TACACS server is encrypted using the shared key >that you define when you setup TACACS. > >If you want secure communications using a telnet like session >you will have to use SSH. I believe it was implemented in IOS 12.0, >but I could be wrong. Just remember that you will have to have >a SSH client in order to use SSH to communicate with your router. > >Here is a link for more info. > >http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121 >t/121t1/sshv1.htm >(watch the wrap) > >HTH, >AQ > >At 03:47 AM 1/3/01, Piatnitchi Cristian wrote: > >Hi all > > > >I intend to setup TACACS+ authentication for all our network devices and > >I need to understand the following question: > > > >Is the telnet authentication sequence encrypted ? I am asking about the > >situation > >when the net. device is set up to work with TACACS+. > >If it isn't what should I do to have a secure connection during the > >authentication phase. > > > >I have to say that I use an IP connection not PPP. (It's just a simple > >Telnet session from our internal LAN) > > > >In my opinion it is not a secure session but I would like to be a secure >one > >and I don't know how to set it. > >I will be waiting for your advice. > > > >Thanks in advance > >Cristian > > > > > >_ > >FAQ, list archives, and subscription info: > >http://www.groupstudy.com/list/cisco.html > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > >** > Adam Quiggle > Senior Network Engineer > MCI Worldcom/NOC/BP Amoco > [EMAIL PROTECTED] >** > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TACACS and Telnet
Is there any other solution for a secure communication/session with a remote router/switch ? Thanks in advance Cristian -Original Message- From: Piatnitchi Cristian [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 12:19 PM To: 'Adam Quiggle'; Piatnitchi Cristian; '[EMAIL PROTECTED]' Subject: RE: TACACS and Telnet Hi Adam Thanks for the link. Now the question is clear for me. Yes is is true ssh is supported starting with IOS 12 but IOS 12.1 not IOS 12.0 Is the upgrade free from a version to a higher one. I mean from 12.0 to 12.1 ? Thanks for help. Cristian -Original Message- From: Adam Quiggle [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 11:22 AM To: Piatnitchi Cristian; '[EMAIL PROTECTED]' Subject: Re: TACACS and Telnet Cristian, Good question! No your telnet session is not secure. When you type in your password you are sending it across the network in clear text. However, the session that is used between your router and the TACACS server is encrypted using the shared key that you define when you setup TACACS. If you want secure communications using a telnet like session you will have to use SSH. I believe it was implemented in IOS 12.0, but I could be wrong. Just remember that you will have to have a SSH client in order to use SSH to communicate with your router. Here is a link for more info. http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121 t/121t1/sshv1.htm (watch the wrap) HTH, AQ At 03:47 AM 1/3/01, Piatnitchi Cristian wrote: >Hi all > >I intend to setup TACACS+ authentication for all our network devices and >I need to understand the following question: > >Is the telnet authentication sequence encrypted ? I am asking about the >situation >when the net. device is set up to work with TACACS+. >If it isn't what should I do to have a secure connection during the >authentication phase. > >I have to say that I use an IP connection not PPP. (It's just a simple >Telnet session from our internal LAN) > >In my opinion it is not a secure session but I would like to be a secure one >and I don't know how to set it. >I will be waiting for your advice. > >Thanks in advance >Cristian > > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] ** Adam Quiggle Senior Network Engineer MCI Worldcom/NOC/BP Amoco [EMAIL PROTECTED] ** _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Lab excercises
Guys, Could you recommened any labs excercises concerning Frame relay, ospf, eigrp, rip,so I can practice more on these issues. I would prefer if they are free. Thank you ! ___ Send a cool gift with your E-Card http://www.bluemountain.com/giftcenter/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BADCOPYCOUNT error message ??
Hi Group, I've been experience problems BGP sessions running on our core route, Does anyone know what %BADCOPY-3-BADCOPYCOUNT error message is ??? It would appear that every time this error occur we lose our connectivity with our peers I've enclosed part of the router log, the IOS version is Version 11.1(27)CC, and the router is a 7500 If anyone can help I we'll be most grateful. Thanks in Advance Anthony Log Buffer (16384 bytes): 09:34:13: %BADCOPY-3-BADCOPYCOUNT: bad copy count from 0x6150E67A to 0x6150E8A8 count 0xFFFE -Traceback= 601E0484 60145EB8 603BDB24 603C28F4 603C4D0C 603CBA10 603D096C 60167D08 60167CF4 Jan 3 09:34:29: %BGP-6-NEXTHOP: Invalid next hop (157.130.255.255) received from 157.130.6.101: martian next hop Jan 3 09:35:12: %BADCOPY-3-BADCOPYCOUNT: bad copy count from 0x6150E67A to 0x6150E8A8 count 0xFFFE -Traceback= 601E0484 60145EB8 603BDB24 603C28F4 603C4D0C 603CBA10 603D096C 60167D08 60167CF4 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ISDN switch type
Hello colleagues, I have heard that after changing the ISDN switch type (both global and interface config) the router needs to be reloaded for the change to take effect. Do you know if that is true ? Thanks for your help in advance. Regards, Georg Pauwen _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Query about Catalyst 6509 Software
Hello everybody Currently I am working in collecting more details for a software upgrade in a Catalyst 6509 using software version 5.4(4) our problem is a spanning tree issue that we dont seem to be able to resolve.. TAC has recommended an upgrade of software. Is somebody is using version 6.1(2) could I please given advice about its reability, difference of commands with the current version we use? TIA Silvia Elaluf-Calderwood _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: need routing table tutorial
check out http://www.hotlinks.com/members/sstalib/Tech_-_Network_Resources/ Brian Lodwick wrote: > > Group, > Does anyone have a link to a site that has a good basic tutorial going > over components in a Cisco router routing table? I have been trying to find > one on Cisco's webpage and I can't find anything. I looked under everything. > Well maybe not everything. I would really appreciate anyones help! > > >>>Brian > _ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- Shabbir S. Talib MCSE, CNE, CCNA _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BCMSN Questions - Pls Help
Giggsy If, your 1st question comes from the BCMSN book. Then the question only says large files not large graphic files. Also, if you read the section choosing cisco products in the 1st chapter where this question is from, you will see it recommends the 1900 series switch for a 50-user LAN. So answer C is right. Giggsy wrote: > > Hi > > While i am preparing for my Switching 2.0 Exam, i encounter the following 2 > questions while i do the pracice exams which have different answers. Would > appreciate if someone could enlighten me what should be the CORRECT answer. > > Question 1 > == > The ACME company is a small manufacturing company that wants to interconnect > users on multiple floors in the same building. To date, the company has only > 15 employees but plans to triple in number in the next year. Users require > access to large graphic files on the workgroup servers. What is the most > appropriate device for the access layer? > > A. Catalyst 8500 series switch > B. Catalyst 5500 series switch with an internal RSM > C. Catalyst 1900 series switch with 10 BaseT ports > D. Catalyst 2900 series switch with 100 BaseTX ports > > COLT said that the answer should be D BUT the course book's answer is C. So > which one should it be??? > > Question 2 > === > how to find out what error messages were being sent to the other out-bands > besides the console port. > > So what is the answer for this? > > Hope someone can help. Thanks > > Regards > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- Shabbir S. Talib MCSE, CNE, CCNA _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Frame-Relay question ?
Want to get to setup frame relay on my two routers connectected (2x 2501) back-to-back with a DTE/DCE cables. When both routers boot up I could see the routing table with "sh ip route" and after 30 secondes the protocol on the serial interfaces go down. Can you help Here is the sample config: Router1: interface Serial0 clockrate 64000 bandwidth 64 ip address 10.0.2.5 255.255.255.252 no ip directed-broadcast encapsulation frame-relay frame-relay lmi-type cisco frame-relay interface-dlci 100 Router2: interface Serial0 bandwidth 64 ip address 10.0.2.6 255.255.255.252 no ip directed-broadcast encapsulation frame-relay frame-relay lmi-type cisco frame-relay interface-dlci 200 _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Query about Catalyst 6509 Software
I had to upgrade my 6509 to 6.1(2) for a vmps issue (the 6500's couldn't be a vmps server until this revision). The differences between 5.4 and and 6.1 seem negligable to me, I don't notice any difference at all. Craig -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Elaluf, Sylvia, Sent: Wednesday, January 03, 2001 6:40 AM To: '[EMAIL PROTECTED]' Subject: Query about Catalyst 6509 Software Hello everybody Currently I am working in collecting more details for a software upgrade in a Catalyst 6509 using software version 5.4(4) our problem is a spanning tree issue that we dont seem to be able to resolve.. TAC has recommended an upgrade of software. Is somebody is using version 6.1(2) could I please given advice about its reability, difference of commands with the current version we use? TIA Silvia Elaluf-Calderwood _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
(no subject)
has anyone been preparing for or taken the voice over ip exam (cvoice)? i have the SIM its ok Ciao, Joseph _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VPN location
I'd put it in a DMZ off the PIX. ""SH Wesson"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I'm installing a new VPN box. Traditionally, where in the network does the > VPN box reside. Does it run parallel to the PIX firewall and be connected > to the inside the same way as the pix or should the VPN box be located in > the DMZ with a secure tunnel created between the VPN box and the PIX > firewall and all requests to the inside network would go through PIX firwall > via conduits, etc. Thanks. > > > _ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Frame-Relay question ?
Add the no keepalive commands to both your interfaces. Check out the links below. Back-to-Back Frame Relay http://www.cisco.com/warp/public/125/frbacktoback.html Technical tips for Frame Relay http://www.cisco.com/warp/public/125/ mindiani mindiani wrote: > > Want to get to setup frame relay on my two routers connectected (2x 2501) > back-to-back with a DTE/DCE cables. When both routers boot up I could see > the routing table with "sh ip route" and after 30 secondes the protocol on > the serial interfaces go down. Can you help > > Here is the sample config: > > Router1: > > interface Serial0 > clockrate 64000 > bandwidth 64 > ip address 10.0.2.5 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 100 > > Router2: > > interface Serial0 > bandwidth 64 > ip address 10.0.2.6 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 200 > > _ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- Shabbir S. Talib MCSE, CNE, CCNA _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Frame-Relay question ?
Add the no keepalive commands to both your interfaces. Check out the links below. Back-to-Back Frame Relay http://www.cisco.com/warp/public/125/frbacktoback.html Technical tips for Frame Relay http://www.cisco.com/warp/public/125/ mindiani mindiani wrote: > > Want to get to setup frame relay on my two routers connectected (2x 2501) > back-to-back with a DTE/DCE cables. When both routers boot up I could see > the routing table with "sh ip route" and after 30 secondes the protocol on > the serial interfaces go down. Can you help > > Here is the sample config: > > Router1: > > interface Serial0 > clockrate 64000 > bandwidth 64 > ip address 10.0.2.5 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 100 > > Router2: > > interface Serial0 > bandwidth 64 > ip address 10.0.2.6 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 200 > > _ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- Shabbir S. Talib MCSE, CNE, CCNA _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: need routing table tutorial
Thanks, really having technical good stuff > -Original Message- > From: Shabbir S. Talib [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, January 03, 2001 7:21 AM > To: [EMAIL PROTECTED]; Brian Lodwick > Subject: Re: need routing table tutorial > > check out > http://www.hotlinks.com/members/sstalib/Tech_-_Network_Resources/ > > Brian Lodwick wrote: > > > > Group, > > Does anyone have a link to a site that has a good basic tutorial going > > over components in a Cisco router routing table? I have been trying to find > > one on Cisco's webpage and I can't find anything. I looked under everything. > > Well maybe not everything. I would really appreciate anyones help! > > > > >>>Brian > > _ > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > _ > > FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > -- > > Shabbir S. Talib > MCSE, CNE, CCNA > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Multilink PPP with ISDN between Cisco 2504 and IBM 2210 [Virus checked]
Hello all, we must install Cisco Router in our IBM environment :)) . We solved a = lot of problems but we have one unsolved problem: The Cisco router must dialed-in to the IBM router with both ISDN B channels. The connection comes not up with the feature multilink. We te= sted a lot of possibilties: - dial-in Cisco <-> Cisco with and without Multilink is o.k. - dial-in IBM <-> IBM with and without Multilink is o.k. - dial-in Cisco <-> IBM without Multilink (one ISDN B channel) is also = o.k. Only the multilink solution between Cisco an IBM doesn=B4t work. Have any of you an idea ?? We think that we have a problem with the LCP layer. For instance how ca= n I set the MRRU ? Software: c2500-is-l_120-8.bin and eptf09i.e11 See the files (configuration of the Cisco router and a debug of the IBM= ), please. (See attached file: Multilink.log)(See attached file: cisco2504.log) Thank=B4s a lot. Thomas Wacker (CCNA) OE33 Betriebsplanung/Projekte nbg Netzbetriebsgesellschaft mbH Au=DFenstelle Leipzig E-Mail:[EMAIL PROTECTED]= _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Frame-Relay question ?
Mindiani, In this configuration, there is no switch sending LMI to the routers. The router declares the line protocol down after three missed keepalive intervals (10 seconds each, by default). One way to fix this problem in back-to-back frame relay configs is to add "no keepalive" under the serial interface config. This assumes you have Router1 as the DCE end of the cable. Cheers, Curtis mindiani mindiani wrote: > > Want to get to setup frame relay on my two routers connectected (2x 2501) > back-to-back with a DTE/DCE cables. When both routers boot up I could see > the routing table with "sh ip route" and after 30 secondes the protocol on > the serial interfaces go down. Can you help > > Here is the sample config: > > Router1: > > interface Serial0 > clockrate 64000 > bandwidth 64 > ip address 10.0.2.5 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 100 > > Router2: > > interface Serial0 > bandwidth 64 > ip address 10.0.2.6 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 200 > > _ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VPN location
Typically it runs parallel to the PIX. Check out the Cisco page on that. The Getting Started link will tell you where Cisco thinks you should put it, which is in parallel. http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/vpn3kco/vcogs/index.htm --- SH Wesson <[EMAIL PROTECTED]> wrote: > I'm installing a new VPN box. Traditionally, where > in the network does the > VPN box reside. Does it run parallel to the PIX > firewall and be connected > to the inside the same way as the pix or should the > VPN box be located in > the DMZ with a secure tunnel created between the VPN > box and the PIX > firewall and all requests to the inside network > would go through PIX firwall > via conduits, etc. Thanks. > > > _ > Get your FREE download of MSN Explorer at > http://explorer.msn.com > > _ > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OT: Ft.Knox FW
Anyone know anything about this FW. I know that Internet Devices used to manufacture but they were bought by Alcatel. Any info? ___ To get your own FREE ZDNet Onebox - FREE voicemail, email, and fax, all in one place - sign up today at http://www.zdnetonebox.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ccie lab
I don't see a problem with the lab being so booked. So many people taking the exam and the number of ccie's being so low. Is a good thing. If someone qualifies and feels they are ready let them go. You should schedule your lab at the next available time and go take it. If you fail then tell me how long would you want to wait. Myself I will schedule the next available time and take it again until I pass. Most great battles have been won by attrition, since Moses to CCIE. Duck I certainly agree with all the points Chuck made. One thing that Cisco could do is change the requirements to take the lab besides just passing the written exam. I am not saying by any account that the written is easy, but I know people that have passed it by pure luck and really don't know a darn thing. I know a person right now that has passed the written by getting the passing score on the dime, and he is taking the lab soon. I wish good luck to him, however he is walking in blindly with out EVER actually configured a router. He has no internetworking design or troubleshooting experience in the real world, however he is going to go and take the lab exam just to "see what it is like" I don't think Chuck's ideas are cruel and unusual. I think they really need to make this tougher then it already is. Who wants to put "CCIE #102,000" after their name? If they just open more racks it may get to that point. I believe the written exam should be scratched with a new format with a higher passing score. Truly the money issue sometimes makes little difference. If someone has 30,000 grand to spend on equipment, classes, books etc., a few more grand can't hurt. And if their company is paying then who cares right? I know a company that has spent countless dollars actually flying a guy to Canada, putting him up in a hotel...and paying for his labthey did this 5 times before he passed his lab. Those slots could have been used for someone that actually knew what they were doing and had a chance to pass. It would be nice if they had a 4 hour lab prequal after taking the written. Something that would not require a proctor to pass. You would be given many different scenarios at Sylvan and require to configure them with a virtual IOS. The configs would be sent to an evaluator at Cisco and then you would be contacted a week later concerning scheduling your real lab date. This could weed out some of the flunkies. If Cisco ruins the value of this exam, they are not going to have any future revenue from it. Nate Chuck Larrieu wrote: > >> I was told Cisco was trying to reduce the problem, but not how they were > going to achieve their goal. (I wish them luck)<< > > some cruel and unusual thoughts come to mind. > > 1) Set some arbitrary standard such that people who fail day one by more > than so many points have a 90 day wait for retest, rather than 30 days. Or > you have to at least made it into day 2 to be able to retest within 30 days. > Some such thing > > 2) Limit the number of times one may attempt the lab in any 12 month period. > > 3) Increase the price charged for each lab attempt. E.g. 1K for first > attempt, 2K for 2nd, 5K for third > > I say this half jokingly, but half seriously. I talk to a lot of people who > take the lab, both those who have passed and those who have not. > The old rule of economics holds true - people act according to their > perceived best interest. If someone else is footing the bill, and there is > no disincentive for failure, then people will act accordingly. They will > book themselves and make attempts even when they know they have no hope of > passing. They will schedule attempt after attempt because there is no reason > not to, especially if someone else pays, and especially if there is no > penalty for failure. > > To be frank, I don't see any incentive for Cisco to do anything to change > things on the demand side. They might add more racks, or more lab locations. > But do the numbers some time. Cisco is booking something like 25 - 30 people > a week in San Jose alone. That's 25-30 K per week in revenue, or at least > 1.3 million a year. So they pay a couple of lab proctors 150K each. The rest > is pure profit. ( yes, I know from an accounting standpoint there are > several other cost factors ) So the incentive from Cisco's standpoint is do > figure out ways to add revenue, rather than limit testing attempts. > > I look for Cisco to announce a bit more capacity, either in terms of adding > another location or adding more racks at existing locations. Or both. There > is a ton of money to be made in the certification game, and as the entity > that controls the rules and the market, Cisco certainly enjoys the lion's > share of that revenue. > > Chuck > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of > [EMAIL PROTECTED] > Sent: Sunday, December 31, 2000 9:04 AM > To: [EMAIL PROTECTED] > Subject:Backlog for CCIE Lab (RTP at least) > > I a
Modem access from Router
Hello friends I have a modem connected to the AUX port of my router. I am using this modem to dial into the router. Now I need to access this modem from the router. What do i need to configure on the router to be able to access the modem from the router itself. ie to be able to configure the modem using the AT command set. Could someone help me out on this. Thanks Sam _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Please Remove me from your mailing list...
Thank you... _ Get your FREE download of MSN Explorer at http://explorer.msn.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Boson tests for CIT
Does anyone have any experience with the Boson tests for CIT? I have used them in the past and have found that some are better then others. Can anyone tell me which would be worth my while to buy? Any help would be greatly appreciated as this is my last test to complete my CCNP. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: invalid
it sounds to me that someone has tried to change the proportion of dram allocated to main memory versus io memory this is a cut and paste from a cisco web doc at http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/fun_c /fcprt2/fcmemory.htm Valid I/O memory percentage values are 10, 15, 20, 25, 30, 40 (the default), and 50. I/O memory size is the specified percentage of total memory size, rounded down to the nearest multiple of 1 MB. A minimum of 4 MB of memory is required for I/O memory. The remaining memory is processor memory. dave h -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 02, 2001 9:42 PM To: [EMAIL PROTECTED] Subject: invalid hi: all,i have a router 2620 prompt the information below: cisco 2620 (MPC860) processor (revision 0x102) with 28672K/4096K bytes of memory. Processor board ID JAD04310EXU (2782278826) M860 processor: part number 0, mask 49 Bridging software. X.25 software, Version 3.0.0. Basic Rate ISDN software, Version 1.1. 1 FastEthernet/IEEE 802.3 interface(s) 4 Low-speed serial(sync/async) network interface(s) 1 ISDN Basic Rate interface(s) 32K bytes of non-volatile configuration memory. 8192K bytes of processor board System flash (Read/Write) Invalid percentage: valid values are:10, 15, 20, 25, 30, 40, 50 what's the problem in this router thanks tom _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
MPLS VPN default route to global routing table
Hi Folks, Cisco keeps talking abou a way to provide Internet Access to MPLS VPN customers by implementing a default route on a vrf to the global routing table. Unfortunately, I can't find any command doing just this ... anyone could help on this ? Another question is how the return packet will have a route from the global routing table to the VRF ... feel free to teach me ;) Bye David _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
I'm stumped! (was EIGRP over ISDN) LONG
I'm reposting this in the hopes that someone who didn't see it before might have some ideas about this. Heck, SWAGs, educated guesstimates, or telephone psychic impressions are also welcome. We are completely stumped about how to resolve this. I've even posted this question on the CCO Q&A Forum but I don't think anyone has been answering questions on there lately. Here is the problem: we have an ISDN BRI backup link between two sites, and we want to run eigrp over the link when it's in use. The problem is that even though the line is not flapping, eigrp is behaving as if it were flapping. My side NEVER sees hellos from the other side, but it does receive updates. The other side receives my hellos, but it thinks the link is bouncing and that my router is intermittently unavailable. My side never establishes the other as a neighbor. I've used every debugging command I can find to no avail. Nothing is giving me any information that I don't already know. We have no access lists configured, except for distribute lists but that shouldn't affect neighbor relationships, should it? Here is sample debug output (debug eigrp neighbors and debug eigrp packet): 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up 3d01h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found 3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 303xx theirrouter 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found Here is some info from the remote side: theirrouter# 1d02h: EIGRP: Retransmission retry limit exceeded 1d02h: EIGRP: Holdtime expired 1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 1d02h: EIGRP: New peer 10.120.226.1 theirrouter#sho ip eigrp neighbors IP-EIGRP neighbors for process 2 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 0 10.120.226.1BR0/0 12 00:00:380 5000 1 0 1d02h: EIGRP: Retransmission retry limit exceeded 1d02h: EIGRP: Holdtime expired 1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 1d02h: EIGRP: New peer 10.120.226.1 I'm not getting any errors on the line, and further debugging (isdn q921, isdn q931, ppp error, ppp auth, ppp neg, bri-interface) does not show any problems whatsoever. I've tried ping tests with different payloads and they succeeded wonderfully. I've also made sure that we are in the same 'AS'. We are running 12.1(5) on a 2520, they run 12.0(5) on a 2524. I've searched CCO for any configuration hints or bug reports, and I've read through Doyle's Routing TCP/IP section on eigrp and I can find no possible explanation for this behavior. Any takers? ideas? hints? tips? Do you know a good psychic or witch doctor? Perhaps a good psychiatrist, instead? :-) For anyone who has taken the time to read through all of this, I thank you. Regards, John _
Please Remove me from your Mailing list.TKS
_ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
token channels
Hi all, I have what I think is a design question. I have two catalyst 3920's that need to be in different rooms, but connected. Would I be able to connect them not by stacking, but by using ports as token channels? Has anybody used token channels to connect 3920's this way? Any help would be greatly appreciated. Thanks in advance, Connie Cubberley State of New Jersey _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VPN : 3620 IPsec and CiscoSecure Client
I am about to look in to VPN solutions for SOHO clients, but there is one thing that I am not quiet sure about. If you have a LAN 10.0.0.0 connected to a 3620 where you have configured crypto isakmp keys etc. you can on a workstation connected to the Internet anywhere in the world, install CiscoSecure VPN software and thereby logon the LAN just as if you were there. BUT, what if there's a firewall between the LAN 10.0.0.0 and the 3620 router, then the 3620 router wouldn't be directly connected to the 10.0.0.0 network, and therefore the VPN would not work in that situation. Or..??? Here's a childish drawing to show the setup: /--x.x.x.x[3620]y.y.y.y[firewall]10.0.0.0 INTERNET \--z.z.z.z[router]192.168.0.0[PC with VPN client] Since many companies have firewalls nowadays and more and more implement VPN solutions, I trust that someone else most have had the same scenario or something similar. Any comments are appreciated. Thanks, Ole Ole Drews Jensen Systems Network Manager CCNA, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] http://www.oledrews.com/ccnp NEED A JOB ??? http://www.oledrews.com/job _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
NAT & DNS
Please forgive my ignorance but I have been unable to find anything on the net that adequately defines how to configure DNS records to work with NAT. The scenario is this: Web hosting co. & ISP wants to change all addresses to 10.x.x.x and implement NAT on either a router or firewall. If we have a current address of 175.1.1.1 and change it to 10.1.1.1, what changes would I need to make to the DNS so that proper name resoultion takes place? Additionally, we have a customer that routes their traffic through us to our backbone provider and has a block of our public addresses. This customer is already NAT'd and privately addressed behind their own firewall. How will our NAT implementation affect them? Thanks in advance for your assistance! Jeff Brown _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: I'm stumped! (was EIGRP over ISDN) LONG
We are not using dialer profiles since there is only one call destination. We have CHAP configured on the physical BRI interface and I see no problems with it. 'debug ppp neg' and 'debug ppp auth' report successful CHAP authentication. Is it possible for initial negotiation to work but for subsequent negotiations to fail somehow? > > > 2 quick questions.. > > is there authentication on the isdn link? > are u using the physical bri or dialer profiles? > > my guess is that u r using the physical inerface > without authentication...go ahead and add > authentication, should work like a charm... > > > cheers > > Nnanna > CCIE #6586 > > > --- John Neiberger <[EMAIL PROTECTED]> wrote: > > I'm reposting this in the hopes that someone who > > didn't see it before might > > have some ideas about this. Heck, SWAGs, educated > > guesstimates, or > > telephone psychic impressions are also welcome. We > > are completely stumped > > about how to resolve this. I've even posted this > > question on the CCO Q&A > > Forum but I don't think anyone has been answering > > questions on there lately. > > > > Here is the problem: we have an ISDN BRI backup > > link between two sites, and > > we want to run eigrp over the link when it's in use. > > The problem is that > > even though the line is not flapping, eigrp is > > behaving as if it were > > flapping. My side NEVER sees hellos from the other > > side, but it does > > receive updates. The other side receives my hellos, > > but it thinks the link > > is bouncing and that my router is intermittently > > unavailable. My side never > > establishes the other as a neighbor. > > > > I've used every debugging command I can find to no > > avail. Nothing is giving > > me any information that I don't already know. We > > have no access lists > > configured, except for distribute lists but that > > shouldn't affect neighbor > > relationships, should it? > > > > Here is sample debug output (debug eigrp neighbors > > and debug eigrp packet): > > > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ > > un/rely 0/0 > > > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ > > un/rely 0/0 > > > > 3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed > > state to up > > > > 3d01h: %LINEPROTO-5-UPDOWN: Line protocol on > > Interface BRI0:1, changed state > > to up > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ > > un/rely 0/0 > > > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr > > 10.120.226.2 > > > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr > > 10.120.226.2 > > > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > 3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now > > connected to 303xx > > theirrouter > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ > > un/rely 0/0 > > > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr > > 10.120.226.2 > > > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr > > 10.120.226.2 > > > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ > > un/rely 0/0 > > > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ > > un/rely 0/0 > > > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr > > 10.120.226.2 > > > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > Here is some info from the remote side: > > > > theirrouter# > > 1d02h: EIGRP: Retransmission retry limit exceeded > >
RE: I'm stumped! (was EIGRP over ISDN) LONG
CDP is disabled on both ends and we are in the same 'AS'. I've thought about the timers because I was reading on CCO that the default hello timer on a slower link like a BRI is 60 seconds. However, my side is sending hellos every five seconds as I expected. I need to see if the other side has default timer settings different from mine. As I mentioned, we are running 12.1(5) and they have 12.0(5). There just might be a difference in timer settings. Thanks for the tip! > John > > Just had a bout with ISDN myself. I would check the following things. CDP > on the interface? Same AS number? Timer setting the same on both? Lastly > check to for adjency or in other words all numbers the same > > Hope it helps > Bill Harrison > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > John Neiberger > Sent: Wednesday, January 03, 2001 9:51 AM > To: [EMAIL PROTECTED] > Subject: I'm stumped! (was EIGRP over ISDN) LONG > > > I'm reposting this in the hopes that someone who didn't see it before might > have some ideas about this. Heck, SWAGs, educated guesstimates, or > telephone psychic impressions are also welcome. We are completely stumped > about how to resolve this. I've even posted this question on the CCO Q&A > Forum but I don't think anyone has been answering questions on there lately. > > Here is the problem: we have an ISDN BRI backup link between two sites, and > we want to run eigrp over the link when it's in use. The problem is that > even though the line is not flapping, eigrp is behaving as if it were > flapping. My side NEVER sees hellos from the other side, but it does > receive updates. The other side receives my hellos, but it thinks the link > is bouncing and that my router is intermittently unavailable. My side never > establishes the other as a neighbor. > > I've used every debugging command I can find to no avail. Nothing is giving > me any information that I don't already know. We have no access lists > configured, except for distribute lists but that shouldn't affect neighbor > relationships, should it? > > Here is sample debug output (debug eigrp neighbors and debug eigrp packet): > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > 3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up > > 3d01h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state > to up > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > 3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 303xx > theirrouter > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > Here is some info from the remote side: > > theirrouter# > 1d02h: EIGRP: Retransmission retry limit exceeded > 1d02h: EIGRP: Holdtime expired > 1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 > 1d02h: EIGRP: New peer 10.120.226.1 > > theirrouter#sho ip eigrp neighbors > IP-EIGRP neighbors for process 2 > H Address Interface Hold Uptime SRTT RTO Q Seq > (sec) (ms) Cnt Num > 0 10.120.226.1BR0/0 12 00:00:380 5000 1 0 > > 1d02h: EIGRP: Retransmission retry limit exceeded > 1d02h: EIGRP: Holdtime expired > 1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 > 1d02h: EIGRP: New peer 10.120.226.1 > > I'm not getting any errors on the line, and further debugging (isdn q921, > isdn q931, ppp error, ppp auth, ppp neg, bri-interface) does not
Modem Access from Router
Hello friends I have a modem connected to the AUX port of my router. I am using this modem to dial into the router. Now I need to access this modem from the router. What do i need to configure on the router to be able to access the modem from the router itself. ie to be able to configure the modem using the AT command set. Could someone help me out on this. Thanks Sam _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Frame-Relay question ?
You must do a router be a "frame-relay switch" e declare it a DCE device. In the router with the DCE cable do the following: router(config)#frame-relay switching . . router(if-config)#frame-relay intf-type dce router(if-config)#clockrate 256000 ""mindiani mindiani"" <[EMAIL PROTECTED]> escreveu na mensagem [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Want to get to setup frame relay on my two routers connectected (2x 2501) > back-to-back with a DTE/DCE cables. When both routers boot up I could see > the routing table with "sh ip route" and after 30 secondes the protocol on > the serial interfaces go down. Can you help > > Here is the sample config: > > Router1: > > interface Serial0 > clockrate 64000 > bandwidth 64 > ip address 10.0.2.5 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 100 > > > Router2: > > interface Serial0 > bandwidth 64 > ip address 10.0.2.6 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 200 > > > > > > _ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: I'm stumped! (was EIGRP over ISDN) LONG
Your hold times look to be way low. >From your example a hold of 12 would indicate a high bandwidth interface such as Ethernet, FDDI or token ring. On this router I would bet that the hold time is set to 5. H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 0 10.120.226.1BR0/0 12 00:00:380 5000 1 0 Try setting the hold time with the ip eigrp hold-time interface command to 60 and set the ip eigrp hello-interval to 180 Hope that helps Drew -Original Message- From: John Neiberger [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 7:51 AM To: [EMAIL PROTECTED] Subject: I'm stumped! (was EIGRP over ISDN) LONG I'm reposting this in the hopes that someone who didn't see it before might have some ideas about this. Heck, SWAGs, educated guesstimates, or telephone psychic impressions are also welcome. We are completely stumped about how to resolve this. I've even posted this question on the CCO Q&A Forum but I don't think anyone has been answering questions on there lately. Here is the problem: we have an ISDN BRI backup link between two sites, and we want to run eigrp over the link when it's in use. The problem is that even though the line is not flapping, eigrp is behaving as if it were flapping. My side NEVER sees hellos from the other side, but it does receive updates. The other side receives my hellos, but it thinks the link is bouncing and that my router is intermittently unavailable. My side never establishes the other as a neighbor. I've used every debugging command I can find to no avail. Nothing is giving me any information that I don't already know. We have no access lists configured, except for distribute lists but that shouldn't affect neighbor relationships, should it? Here is sample debug output (debug eigrp neighbors and debug eigrp packet): 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up 3d01h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found 3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 303xx theirrouter 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 3d01h: EIGRP: Neighbor(10.120.226.2) not yet found Here is some info from the remote side: theirrouter# 1d02h: EIGRP: Retransmission retry limit exceeded 1d02h: EIGRP: Holdtime expired 1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 1d02h: EIGRP: New peer 10.120.226.1 theirrouter#sho ip eigrp neighbors IP-EIGRP neighbors for process 2 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 0 10.120.226.1BR0/0 12 00:00:380 5000 1 0 1d02h: EIGRP: Retransmission retry limit exceeded 1d02h: EIGRP: Holdtime expired 1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 1d02h: EIGRP: New peer 10.120.226.1 I'm
Re: I'm stumped! (was EIGRP over ISDN) LONG
Is the spid number's configured right? and did you check to see if Demarc is puch down right _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCNP Boot Camps
Hi all, I would like to find out if anyone out there has gone through CCNP boot camps, are they worthy in terms of learning. If you have taken these Boot camps how do you feel in terms of implementing and troubleshooting an enterprise network. Would you recommend Boot Camps ? Thanks for your input. Jorge Rodriguez /CCNA Network Analyst R&S Networks Inc 1112 Boylston Street Suite 222 Boston, MA 02115 1-781-614-1294 1-617-541-4197 Evenings http://www.netwire.n3.net/ http://www.learncisco.n3.net/ iWon.com http://www.iwon.com why wouldn't you? _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: I'm stumped! (was EIGRP over ISDN) LONG
Have you tried downgrading IOS to a more experienced version, just to see if your problem goes away? >From: John Neiberger <[EMAIL PROTECTED]> >Reply-To: John Neiberger <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: I'm stumped! (was EIGRP over ISDN) LONG >Date: Wed, 3 Jan 2001 07:51:11 -0800 (PST) > >I'm reposting this in the hopes that someone who didn't see it before might >have some ideas about this. Heck, SWAGs, educated guesstimates, or >telephone psychic impressions are also welcome. We are completely stumped >about how to resolve this. I've even posted this question on the CCO Q&A >Forum but I don't think anyone has been answering questions on there >lately. > >Here is the problem: we have an ISDN BRI backup link between two sites, >and >we want to run eigrp over the link when it's in use. The problem is that >even though the line is not flapping, eigrp is behaving as if it were >flapping. My side NEVER sees hellos from the other side, but it does >receive updates. The other side receives my hellos, but it thinks the link >is bouncing and that my router is intermittently unavailable. My side >never >establishes the other as a neighbor. > >I've used every debugging command I can find to no avail. Nothing is >giving >me any information that I don't already know. We have no access lists >configured, except for distribute lists but that shouldn't affect neighbor >relationships, should it? > >Here is sample debug output (debug eigrp neighbors and debug eigrp packet): > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > >3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up > >3d01h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed >state >to up >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > >3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 303xx >theirrouter >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > >Here is some info from the remote side: > >theirrouter# >1d02h: EIGRP: Retransmission retry limit exceeded >1d02h: EIGRP: Holdtime expired >1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 >1d02h: EIGRP: New peer 10.120.226.1 > >theirrouter#sho ip eigrp neighbors >IP-EIGRP neighbors for process 2 >H Address Interface Hold Uptime SRTT RTO Q Seq > (sec) (ms) Cnt Num >0 10.120.226.1BR0/0 12 00:00:380 5000 1 0 > >1d02h: EIGRP: Retransmission retry limit exceeded >1d02h: EIGRP: Holdtime expired >1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 >1d02h: EIGRP: New peer 10.120.226.1 > >I'm not getting any errors on the line, and further debugging (isdn q921, >isdn q931, ppp error, ppp auth, ppp neg, bri-interface) does not show any >problems whatsoever. I've tried ping tests with different payloads and >they >succeeded wonderfully. > >I've also made sure that we are in the same 'AS'. We are running 12.1(5) >on >a 2520, they run 12.0(5) on a 2524. I've searched CCO for any >configuration >hints or bug reports, and I've read through Doyle's Routing TCP/IP section >on eigrp and I can find no possible explanation for this behavior. > >Any takers? ideas? hints? tips? Do you know a good psychic or witch >doctor? Perhaps a good psychiatrist, instead? :-) > >For anyone who has taken the time to read through all of this, I thank you. > >Regards, >John > > > > > >___ >Send a cool gift with your E-Card >http://www.bluemountain.com/giftcenter/ > > >_ >FAQ, list archives, and subscription info: >http:/
CCNP
Hi All Is there any good site can i go to or free study & question for CCNP. Thank Chan CCNA, CCDA _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: I'm stumped! (was EIGRP over ISDN) LONG
Yep, the line is configured correctly and functioning end-to-end with no physical errors. We did initially have a problem with the spids and switch-type because our wonderful provider Qwest has a sucky support department that doesn't even know the difference between switch types. They kept telling us that the remote side was a dms-100 when it was actually a basic-ni1. Once we figured that out, calls began to setup correctly. > >Is the spid number's configured right? and did you check to see if Demarc > is puch down right ___ Send a cool gift with your E-Card http://www.bluemountain.com/giftcenter/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Boson tests for CIT
Christian, congratulations on your progress!, I too am at the same point with CIT left to go for CCNP. I am using Boson and am finding them to be quite helpful in preparing me for the exam. They really drive home the basics and pound debugging and other commands as well as troubleshooting methods into your head and for some reason the #2 test is the most challenging (to me). I am also using Ciscopress's Support book with CD and 200 exam questions and it is a must, even as a resource later on. I hope this helps and best of luck!!! "Wilson, Christian" wrote: > Does anyone have any experience with the Boson tests for CIT? I have used > them in the past and have found that some are better then others. Can > anyone tell me which would be worth my while to buy? Any help would be > greatly appreciated as this is my last test to complete my CCNP. > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Frame Relay PVC
I have a intermittent problem (about a dozen times a day) where a PVC goes from the active to inactive state. It used to happen maybe once a week. I have not changed anything on either router. Furthermore, my other PVC's are unaffected. I did a debug of the lmi packets and the output is below. My telco says there is nothing wrong with the physical connection or the configuration of the PVC. If anyone has an explanation for these events, or even better, a solution to fix the damn thing, I'd love to hear it. Thanks, Dion Serial0(in): Status, myseq 89 RT IE 1, length 1, type 0 KA IE 3, length 2, yourseq 193, myseq 89 PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 PVC IE 0x7 , length 0x3 , dlci 271, status 0x0 *Jan 3 10:23:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state changed to INACTIVE *Jan 3 10:23:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, changed state to down PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 Serial0(out): StEnq, myseq 90, yourseen 193, DTE up datagramstart = 0x401D66CC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5A C1 Serial0(in): Status, myseq 90 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 194, myseq 90 Serial0(out): StEnq, myseq 91, yourseen 194, DTE up datagramstart = 0x40001338, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5B C2 Serial0(in): Status, myseq 91 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 195, myseq 91 Serial0(out): StEnq, myseq 91, yourseen 194, DTE up datagramstart = 0x40001338, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5B C2 Serial0(in): Status, myseq 91 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 195, myseq 91 Serial0(out): StEnq, myseq 92, yourseen 195, DTE up datagramstart = 0x402295A0, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5C C3 Serial0(in): Status, myseq 92 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 196, myseq 92 Serial0(out): StEnq, myseq 93, yourseen 196, DTE up datagramstart = 0x4FB4, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5D C4 Serial0(in): Status, myseq 93 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 197, myseq 93 Serial0(out): StEnq, myseq 94, yourseen 197, DTE up datagramstart = 0x401D5E9C, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5E C5 Serial0(in): Status, myseq 94 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 198, myseq 94 Serial0(out): StEnq, myseq 95, yourseen 198, DTE up datagramstart = 0x43FC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 00 03 02 5F C6 Serial0(in): Status, myseq 95 RT IE 1, length 1, type 0 KA IE 3, length 2, yourseq 199, myseq 95 PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 PVC IE 0x7 , length 0x3 , dlci 271, status 0x2 *Jan 3 10:24:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state changed to ACTIVE *Jan 3 10:24:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, changed state to up PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 Serial0(out): StEnq, myseq 96, yourseen 199, DTE up datagramstart = 0x43FC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 60 C7 Configs: Router A: interface Serial0 no ip address encapsulation frame-relay bandwidth 256 frame-relay lmi-type ansi ! interface Serial0.1 point-to-point ip address 172.19.148.254 255.255.255.0 frame-relay interface-dlci 271 Router B: interface Serial1 no ip address encapsulation frame-relay bandwidth 64 no fair-queue frame-relay lmi-type ansi ! interface Serial1.1 point-to-point ip address 172.19.148.253 255.255.255.0 frame-relay interface-dlci 240 * DISCLAIMER: The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained therein by any other person is not authorized. If you are not the intended recipient please notify us immediately by returning the e-mail to the originator. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: I'm stumped! (was EIGRP over ISDN) LONG
Yes, we've tried 11.2(19), 12.0(14) and 12.1(5) on this end. The remote side has been on 12.0(5) the entire time and they are not able to change at this time. Since it appears to be an issue with the timers, we can set those with ios commands and hopefully alleviate the problem. Thanks, John > Have you tried downgrading IOS to a more experienced version, just to see if > your problem goes away? > > > >From: John Neiberger <[EMAIL PROTECTED]> > >Reply-To: John Neiberger <[EMAIL PROTECTED]> > >To: [EMAIL PROTECTED] > >Subject: I'm stumped! (was EIGRP over ISDN) LONG > >Date: Wed, 3 Jan 2001 07:51:11 -0800 (PST) > > > >I'm reposting this in the hopes that someone who didn't see it before might > >have some ideas about this. Heck, SWAGs, educated guesstimates, or > >telephone psychic impressions are also welcome. We are completely stumped > >about how to resolve this. I've even posted this question on the CCO Q&A > >Forum but I don't think anyone has been answering questions on there > >lately. > > > >Here is the problem: we have an ISDN BRI backup link between two sites, > >and > >we want to run eigrp over the link when it's in use. The problem is that > >even though the line is not flapping, eigrp is behaving as if it were > >flapping. My side NEVER sees hellos from the other side, but it does > >receive updates. The other side receives my hellos, but it thinks the link > >is bouncing and that my router is intermittently unavailable. My side > >never > >establishes the other as a neighbor. > > > >I've used every debugging command I can find to no avail. Nothing is > >giving > >me any information that I don't already know. We have no access lists > >configured, except for distribute lists but that shouldn't affect neighbor > >relationships, should it? > > > >Here is sample debug output (debug eigrp neighbors and debug eigrp packet): > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > >3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up > > > >3d01h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed > >state > >to up > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > >3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 303xx > >theirrouter > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > >Here is some info from the remote side: > > > >theirrouter# > >1d02h: EIGRP: Retransmission retry limit exceeded > >1d02h: EIGRP: Holdtime expired > >1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 > >1d02h: EIGRP: New peer 10.120.226.1 > > > >theirrouter#sho ip eigrp neighbors > >IP-EIGRP neighbors for process 2 > >H Address Interface Hold Uptime SRTT RTO Q Seq > > (sec) (ms) Cnt Num > >0 10.120.226.1BR0/0 12 00:00:380 5000 1 0 > > > >1d02h: EIGRP: Retransmission retry limit exceeded > >1d02h: EIGRP: Holdtime expired > >1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 > >1d02h: EIGRP: New peer 10.120.226.1 > > > >I'm not getting any errors on the line, and further debugging (isdn q921, > >isdn q931, ppp error, ppp auth, ppp neg, bri-interface) does not show any > >problems whatsoever. I've tried ping tests with different payloads and > >they > >succeeded wonderfully. > > > >I've also made sure that we are in the same 'AS'. We are running 12.1(5) > >on > >a 2520, they
Re: CCNP Boot Camps
Jorge, I havent gone to any CCNP bootcamps but they seem worth it if the person is already familiar with Cisco products and has hands on. They would probably get someone up to speed on advanced topics rather quick. I often visit a site called www.examnotes.net , it is free and there ar lots of eager folks who will share experiences and opinions in the CCNP section. I myself have enjoyed my own self paced boot camp, taking about 5 months to complete (practicing on the job) and using equipment from our lab for practice. I am fortunate to have this at my disposal and did not see a need for a bootcamp. Hope this helps, Good Luck! Jorge Rodriguez wrote: > Hi all, > > I would like to find out if anyone out there has gone through > CCNP boot camps, are they worthy in terms of learning. If you have taken > these Boot camps how do you feel in terms of implementing and > troubleshooting an enterprise network. Would you recommend Boot Camps ? > > Thanks for your input. > > Jorge Rodriguez /CCNA > Network Analyst > R&S Networks Inc > 1112 Boylston Street > Suite 222 > Boston, MA 02115 > 1-781-614-1294 > 1-617-541-4197 Evenings > http://www.netwire.n3.net/ > http://www.learncisco.n3.net/ > > > iWon.com http://www.iwon.com why wouldn't you? > > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: I'm stumped! (was EIGRP over ISDN) LONG
You really need to downgrade both routers to be sure. >From: John Neiberger <[EMAIL PROTECTED]> >To: Frank Wells <[EMAIL PROTECTED]>, [EMAIL PROTECTED] >Subject: Re: I'm stumped! (was EIGRP over ISDN) LONG >Date: Wed, 3 Jan 2001 08:53:49 -0800 (PST) > >Yes, we've tried 11.2(19), 12.0(14) and 12.1(5) on this end. The remote >side has been on 12.0(5) the entire time and they are not able to change at >this time. Since it appears to be an issue with the timers, we can set >those with ios commands and hopefully alleviate the problem. > >Thanks, >John > > > Have you tried downgrading IOS to a more experienced version, just to >see >if > > your problem goes away? > > > > > > >From: John Neiberger <[EMAIL PROTECTED]> > > >Reply-To: John Neiberger <[EMAIL PROTECTED]> > > >To: [EMAIL PROTECTED] > > >Subject: I'm stumped! (was EIGRP over ISDN) LONG > > >Date: Wed, 3 Jan 2001 07:51:11 -0800 (PST) > > > > > >I'm reposting this in the hopes that someone who didn't see it before >might > > >have some ideas about this. Heck, SWAGs, educated guesstimates, or > > >telephone psychic impressions are also welcome. We are completely >stumped > > >about how to resolve this. I've even posted this question on the CCO >Q&A > > >Forum but I don't think anyone has been answering questions on there > > >lately. > > > > > >Here is the problem: we have an ISDN BRI backup link between two >sites, > > > >and > > >we want to run eigrp over the link when it's in use. The problem is >that > > >even though the line is not flapping, eigrp is behaving as if it were > > >flapping. My side NEVER sees hellos from the other side, but it does > > >receive updates. The other side receives my hellos, but it thinks the >link > > >is bouncing and that my router is intermittently unavailable. My side > > >never > > >establishes the other as a neighbor. > > > > > >I've used every debugging command I can find to no avail. Nothing is > > >giving > > >me any information that I don't already know. We have no access lists > > >configured, except for distribute lists but that shouldn't affect >neighbor > > >relationships, should it? > > > > > >Here is sample debug output (debug eigrp neighbors and debug eigrp >packet): > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > >3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up > > > > > >3d01h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed > > >state > > >to up > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > >3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 303xx > > >theirrouter > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > >Here is some info from the remote side: > > > > > >theirrouter# > > >1d02h: EIGRP: Retransmission retry limit exceeded > > >1d02h: EIGRP: Holdtime expired > > >1d02h: EIGRP: Neighbor 10.120.226.1 went down on BRI0/0 > > >1d02h: EIGRP: New peer 10.120.226.1 > > > > > >theirrouter#sho ip eigrp neighbors > > >IP-EIGRP neighbors for process 2 > > >H Address Interface Hold Uptime SRTT RTO Q >Seq > > > (sec) (ms) Cnt >Num > > >0 10.120.226.1BR0/0 12 00:00:380 5000 1 0 > > > > > >1d02h: EIGRP: Retransmission retry limit exceeded > > >1d02h: EIGRP: Holdti
Protocol translation
I´m using a cisco router to do protocol translation between X.25 and TCP. The X.25 terminal connect to a X.25 router and the same router opens a telnet session to my TCP/IP host and the translation occurs transparently. It work´s fine in many cases, but I have here some dumb equipament that usually connect directly to a X.25 host and start communicating. It does not wait the router to open the telnet session on TCP/IP hosts. The result is that the begining of the communication is lost and then all connection is lost. The question is: Is there any manner to do router delay the X.25 connection until the telnet session to open? Thank´s in advance. I´m sorry about my poor english. -- Paulo Roque Network Engineer _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco Certification Digest V2 #918
I will be on vacation until January 8 and out of pager and cell phone range. For all network related issues please contact our Network Operations Center at 800-610-4684. Dan Keller _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCNA / CCNP Exam Trade
Hello Everybody. I am looking for CCNP / CCIE books in electronic format. If you have CCNP / CCIE books in electronic / pdf format than please contact me. I have ton of resources / notes and exam preparation material for checkpoint / windows 2000 / MCSE / CNE / A+ / Network +. If anybody is interested in this trade than please contact me at [EMAIL PROTECTED] Thanks for your cooperation Iyuri Get free email and a permanent address at http://www.netaddress.com/?N=1 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
E3 over a T3 port adapter
Have anyone tried to use a T3 port adapter in a E3 line? Will it work?? -- Leonardo _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Frame Relay PVC
My first and last inclination (not to mention every inclination in between) is to blame the telco. If they've truly done testing on the circuit and can't find anything, then consider whether you cross multiple carriers on that PVC. It may not be your local carrier's issue, which is why they haven't found anything. If you're on a single carrier, then I would recommend a redesign of that PVC. It's easy to say there's nothing wrong with the configuration of the PVC when you're talking with someone who doesn't know all the ins and outs of frame switch configuration, but in my experience, most of the carrier techs don't really KNOW their equipment - they just have a script they run through to create new PVCs, hence they may not be exactly accurate when they say that everything is fine. Hope that helps. - Don -Original Message- From: Radford Dion [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 8:46 AM To: [EMAIL PROTECTED] Subject: Frame Relay PVC I have a intermittent problem (about a dozen times a day) where a PVC goes from the active to inactive state. It used to happen maybe once a week. I have not changed anything on either router. Furthermore, my other PVC's are unaffected. I did a debug of the lmi packets and the output is below. My telco says there is nothing wrong with the physical connection or the configuration of the PVC. If anyone has an explanation for these events, or even better, a solution to fix the damn thing, I'd love to hear it. Thanks, Dion Serial0(in): Status, myseq 89 RT IE 1, length 1, type 0 KA IE 3, length 2, yourseq 193, myseq 89 PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 PVC IE 0x7 , length 0x3 , dlci 271, status 0x0 *Jan 3 10:23:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state changed to INACTIVE *Jan 3 10:23:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, changed state to down PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 Serial0(out): StEnq, myseq 90, yourseen 193, DTE up datagramstart = 0x401D66CC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5A C1 Serial0(in): Status, myseq 90 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 194, myseq 90 Serial0(out): StEnq, myseq 91, yourseen 194, DTE up datagramstart = 0x40001338, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5B C2 Serial0(in): Status, myseq 91 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 195, myseq 91 Serial0(out): StEnq, myseq 91, yourseen 194, DTE up datagramstart = 0x40001338, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5B C2 Serial0(in): Status, myseq 91 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 195, myseq 91 Serial0(out): StEnq, myseq 92, yourseen 195, DTE up datagramstart = 0x402295A0, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5C C3 Serial0(in): Status, myseq 92 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 196, myseq 92 Serial0(out): StEnq, myseq 93, yourseen 196, DTE up datagramstart = 0x4FB4, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5D C4 Serial0(in): Status, myseq 93 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 197, myseq 93 Serial0(out): StEnq, myseq 94, yourseen 197, DTE up datagramstart = 0x401D5E9C, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5E C5 Serial0(in): Status, myseq 94 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 198, myseq 94 Serial0(out): StEnq, myseq 95, yourseen 198, DTE up datagramstart = 0x43FC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 00 03 02 5F C6 Serial0(in): Status, myseq 95 RT IE 1, length 1, type 0 KA IE 3, length 2, yourseq 199, myseq 95 PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 PVC IE 0x7 , length 0x3 , dlci 271, status 0x2 *Jan 3 10:24:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state changed to ACTIVE *Jan 3 10:24:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, changed state to up PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 Serial0(out): StEnq, myseq 96, yourseen 199, DTE up datagramstart = 0x43FC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 60 C7 Configs: Router A: interface Serial0 no ip address encapsulation frame-relay bandwidth 256 frame-relay lmi-type ansi ! interface Serial0.1 point-to-point ip address 172.19.148.254 255.255.255.0 frame-relay interface-dlci 271 Router B: interface Serial1 no ip address encapsulation frame-relay bandwidth 64 no fair-queue frame-relay lmi-type ansi ! interface Serial1.1 point-to-point ip address 172.19.148.253 255.255.255.0 frame-relay interface-dlci 240 * DISCLAIMER: The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contai
Equipment for Sale
For those who are interested in the equipment I have for sale, and have contacted me via phone, please email me. I am selling everything on a first come, first serve basis via email using the time & date stamp. I apologize for not stating this earlier. Thank you for your cooperation. -Eddie Eddie M. Parra, CCIE# 6428 Professional Services Project Engineer II | |GCOE Customer Core Design Team ||| ||| Virtual Office: (954) 455-8161 .|. .|. Fax: (954) 458-8148 / eFax (413) 845-5684 .:|:.:|:. Cellular: (954) 647-3656 C i s c o S y s t e m s Email Page: [EMAIL PROTECTED] Email: [EMAIL PROTECTED] "Empowering the Internet Generation" _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Frame Relay PVC
Dion, Request of your carrier to do intrusive testing. This will force them to look at more than just the signaling portion of the circuit. Good luck, Mark Krysinski CTO -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Radford Dion Sent: Wednesday, January 03, 2001 11:46 AM To: [EMAIL PROTECTED] Subject: Frame Relay PVC I have a intermittent problem (about a dozen times a day) where a PVC goes from the active to inactive state. It used to happen maybe once a week. I have not changed anything on either router. Furthermore, my other PVC's are unaffected. I did a debug of the lmi packets and the output is below. My telco says there is nothing wrong with the physical connection or the configuration of the PVC. If anyone has an explanation for these events, or even better, a solution to fix the damn thing, I'd love to hear it. Thanks, Dion Serial0(in): Status, myseq 89 RT IE 1, length 1, type 0 KA IE 3, length 2, yourseq 193, myseq 89 PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 PVC IE 0x7 , length 0x3 , dlci 271, status 0x0 *Jan 3 10:23:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state changed to INACTIVE *Jan 3 10:23:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, changed state to down PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 Serial0(out): StEnq, myseq 90, yourseen 193, DTE up datagramstart = 0x401D66CC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5A C1 Serial0(in): Status, myseq 90 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 194, myseq 90 Serial0(out): StEnq, myseq 91, yourseen 194, DTE up datagramstart = 0x40001338, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5B C2 Serial0(in): Status, myseq 91 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 195, myseq 91 Serial0(out): StEnq, myseq 91, yourseen 194, DTE up datagramstart = 0x40001338, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5B C2 Serial0(in): Status, myseq 91 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 195, myseq 91 Serial0(out): StEnq, myseq 92, yourseen 195, DTE up datagramstart = 0x402295A0, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5C C3 Serial0(in): Status, myseq 92 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 196, myseq 92 Serial0(out): StEnq, myseq 93, yourseen 196, DTE up datagramstart = 0x4FB4, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5D C4 Serial0(in): Status, myseq 93 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 197, myseq 93 Serial0(out): StEnq, myseq 94, yourseen 197, DTE up datagramstart = 0x401D5E9C, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5E C5 Serial0(in): Status, myseq 94 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 198, myseq 94 Serial0(out): StEnq, myseq 95, yourseen 198, DTE up datagramstart = 0x43FC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 00 03 02 5F C6 Serial0(in): Status, myseq 95 RT IE 1, length 1, type 0 KA IE 3, length 2, yourseq 199, myseq 95 PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 PVC IE 0x7 , length 0x3 , dlci 271, status 0x2 *Jan 3 10:24:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state changed to ACTIVE *Jan 3 10:24:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, changed state to up PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 Serial0(out): StEnq, myseq 96, yourseen 199, DTE up datagramstart = 0x43FC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 60 C7 Configs: Router A: interface Serial0 no ip address encapsulation frame-relay bandwidth 256 frame-relay lmi-type ansi ! interface Serial0.1 point-to-point ip address 172.19.148.254 255.255.255.0 frame-relay interface-dlci 271 Router B: interface Serial1 no ip address encapsulation frame-relay bandwidth 64 no fair-queue frame-relay lmi-type ansi ! interface Serial1.1 point-to-point ip address 172.19.148.253 255.255.255.0 frame-relay interface-dlci 240 * DISCLAIMER: The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained therein by any other person is not authorized. If you are not the intended recipient please notify us immediately by returning the e-mail to the originator. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: I'm stumped! (was EIGRP over ISDN) LONG
Why don't you post the configs? Also send them to me @ [EMAIL PROTECTED] It sounds like a config problem. Are you using dialer-watch? What does your dialer-list look like? Do you have the "broadcast" keyword on your map statements? On both sides? Kenny ""Frank Wells"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > You really need to downgrade both routers to be sure. > > > >From: John Neiberger <[EMAIL PROTECTED]> > >To: Frank Wells <[EMAIL PROTECTED]>, [EMAIL PROTECTED] > >Subject: Re: I'm stumped! (was EIGRP over ISDN) LONG > >Date: Wed, 3 Jan 2001 08:53:49 -0800 (PST) > > > >Yes, we've tried 11.2(19), 12.0(14) and 12.1(5) on this end. The remote > >side has been on 12.0(5) the entire time and they are not able to change at > >this time. Since it appears to be an issue with the timers, we can set > >those with ios commands and hopefully alleviate the problem. > > > >Thanks, > >John > > > > > Have you tried downgrading IOS to a more experienced version, just to > >see > >if > > > your problem goes away? > > > > > > > > > >From: John Neiberger <[EMAIL PROTECTED]> > > > >Reply-To: John Neiberger <[EMAIL PROTECTED]> > > > >To: [EMAIL PROTECTED] > > > >Subject: I'm stumped! (was EIGRP over ISDN) LONG > > > >Date: Wed, 3 Jan 2001 07:51:11 -0800 (PST) > > > > > > > >I'm reposting this in the hopes that someone who didn't see it before > >might > > > >have some ideas about this. Heck, SWAGs, educated guesstimates, or > > > >telephone psychic impressions are also welcome. We are completely > >stumped > > > >about how to resolve this. I've even posted this question on the CCO > >Q&A > > > >Forum but I don't think anyone has been answering questions on there > > > >lately. > > > > > > > >Here is the problem: we have an ISDN BRI backup link between two > >sites, > > > > > >and > > > >we want to run eigrp over the link when it's in use. The problem is > >that > > > >even though the line is not flapping, eigrp is behaving as if it were > > > >flapping. My side NEVER sees hellos from the other side, but it does > > > >receive updates. The other side receives my hellos, but it thinks the > >link > > > >is bouncing and that my router is intermittently unavailable. My side > > > >never > > > >establishes the other as a neighbor. > > > > > > > >I've used every debugging command I can find to no avail. Nothing is > > > >giving > > > >me any information that I don't already know. We have no access lists > > > >configured, except for distribute lists but that shouldn't affect > >neighbor > > > >relationships, should it? > > > > > > > >Here is sample debug output (debug eigrp neighbors and debug eigrp > >packet): > > > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > >3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up > > > > > > > >3d01h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed > > > >state > > > >to up > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > > >3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 303xx > > > >theirrouter > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > > >Here is some info from the remote side: > > > > > > > >theirrouter# > > >
Re: VPN : 3620 IPsec and CiscoSecure Client
You should just need to open the appropriate ports, to let the traffic through on the firewall, providing you have your tunnels terminated correctly. Take a look in the Security section, there are lots of configs that could be easily ported to your situation. http://www.cisco.com/warp/public/700/tech_configs.html >From: Ole Drews Jensen <[EMAIL PROTECTED]> >Reply-To: Ole Drews Jensen <[EMAIL PROTECTED]> >To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> >Subject: VPN : 3620 IPsec and CiscoSecure Client >Date: Wed, 3 Jan 2001 10:09:44 -0600 > >I am about to look in to VPN solutions for SOHO clients, but there is one >thing that I am not quiet sure about. > >If you have a LAN 10.0.0.0 connected to a 3620 where you have configured >crypto isakmp keys etc. you can on a workstation connected to the Internet >anywhere in the world, install CiscoSecure VPN software and thereby logon >the LAN just as if you were there. > >BUT, what if there's a firewall between the LAN 10.0.0.0 and the 3620 >router, then the 3620 router wouldn't be directly connected to the 10.0.0.0 >network, and therefore the VPN would not work in that situation. Or..??? > >Here's a childish drawing to show the setup: > > > >/--x.x.x.x[3620]y.y.y.y[firewall]10.0.0.0 >INTERNET >\--z.z.z.z[router]192.168.0.0[PC with VPN >client] > >Since many companies have firewalls nowadays and more and more implement >VPN >solutions, I trust that someone else most have had the same scenario or >something similar. > >Any comments are appreciated. > >Thanks, > >Ole > > > Ole Drews Jensen > Systems Network Manager > CCNA, MCSE, MCP+I > RWR Enterprises, Inc. > [EMAIL PROTECTED] > http://www.oledrews.com/ccnp > > NEED A JOB ??? > http://www.oledrews.com/job > > > > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ Get your FREE download of MSN Explorer at http://explorer.msn.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Frame Relay PVC
Dion, Have you also moved this troublesome link to another "KNOWN GOOD" serial port. If you have none free, just switch two of them. See if the problem follows the serial port or the cable. If possible use a serial port on another interface on your router. This will help you eliminate your equipment. Jim -Original Message- From: Mark Krysinski [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 11:27 AM To: Radford Dion; [EMAIL PROTECTED] Subject: RE: Frame Relay PVC Dion, Request of your carrier to do intrusive testing. This will force them to look at more than just the signaling portion of the circuit. Good luck, Mark Krysinski CTO -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Radford Dion Sent: Wednesday, January 03, 2001 11:46 AM To: [EMAIL PROTECTED] Subject: Frame Relay PVC I have a intermittent problem (about a dozen times a day) where a PVC goes from the active to inactive state. It used to happen maybe once a week. I have not changed anything on either router. Furthermore, my other PVC's are unaffected. I did a debug of the lmi packets and the output is below. My telco says there is nothing wrong with the physical connection or the configuration of the PVC. If anyone has an explanation for these events, or even better, a solution to fix the damn thing, I'd love to hear it. Thanks, Dion Serial0(in): Status, myseq 89 RT IE 1, length 1, type 0 KA IE 3, length 2, yourseq 193, myseq 89 PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 PVC IE 0x7 , length 0x3 , dlci 271, status 0x0 *Jan 3 10:23:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state changed to INACTIVE *Jan 3 10:23:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, changed state to down PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 Serial0(out): StEnq, myseq 90, yourseen 193, DTE up datagramstart = 0x401D66CC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5A C1 Serial0(in): Status, myseq 90 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 194, myseq 90 Serial0(out): StEnq, myseq 91, yourseen 194, DTE up datagramstart = 0x40001338, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5B C2 Serial0(in): Status, myseq 91 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 195, myseq 91 Serial0(out): StEnq, myseq 91, yourseen 194, DTE up datagramstart = 0x40001338, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5B C2 Serial0(in): Status, myseq 91 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 195, myseq 91 Serial0(out): StEnq, myseq 92, yourseen 195, DTE up datagramstart = 0x402295A0, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5C C3 Serial0(in): Status, myseq 92 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 196, myseq 92 Serial0(out): StEnq, myseq 93, yourseen 196, DTE up datagramstart = 0x4FB4, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5D C4 Serial0(in): Status, myseq 93 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 197, myseq 93 Serial0(out): StEnq, myseq 94, yourseen 197, DTE up datagramstart = 0x401D5E9C, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 5E C5 Serial0(in): Status, myseq 94 RT IE 1, length 1, type 1 KA IE 3, length 2, yourseq 198, myseq 94 Serial0(out): StEnq, myseq 95, yourseen 198, DTE up datagramstart = 0x43FC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 00 03 02 5F C6 Serial0(in): Status, myseq 95 RT IE 1, length 1, type 0 KA IE 3, length 2, yourseq 199, myseq 95 PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 PVC IE 0x7 , length 0x3 , dlci 271, status 0x2 *Jan 3 10:24:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state changed to ACTIVE *Jan 3 10:24:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, changed state to up PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 Serial0(out): StEnq, myseq 96, yourseen 199, DTE up datagramstart = 0x43FC, datagramsize = 14 FR encap = 0x00010308 00 75 95 01 01 01 03 02 60 C7 Configs: Router A: interface Serial0 no ip address encapsulation frame-relay bandwidth 256 frame-relay lmi-type ansi ! interface Serial0.1 point-to-point ip address 172.19.148.254 255.255.255.0 frame-relay interface-dlci 271 Router B: interface Serial1 no ip address encapsulation frame-relay bandwidth 64 no fair-queue frame-relay lmi-type ansi ! interface Serial1.1 point-to-point ip address 172.19.148.253 255.255.255.0 frame-relay interface-dlci 240 * DISCLAIMER: The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained therein by any other person is not authorized. If you are not the intended recipient please notify us immediately by ret
RE: Frame Relay PVC
I've experienced these types of symptoms several times and 99% of the time it really is the telco's fault, it just takes some serious pressure to get them to put some resources toward fixing the problem. However, at least once I found that it was a bad extension from the demarc (NIU) to the csu/dsu. The building we were in had lots of other equipment at the demarc, and from time to time throughout the day some of that equipment would generate enough EM noise that it would cause a lot of errors on our line and the PVC would go down. The telco tested and didn't find any problems and even sent a tech who didn't discover any problems. I later went there myself and re-oriented some of the cables in relation to other equipment and the problem went away. > My first and last inclination (not to mention every inclination in between) > is to blame the telco. If they've truly done testing on the circuit and > can't find anything, then consider whether you cross multiple carriers on > that PVC. It may not be your local carrier's issue, which is why they > haven't found anything. If you're on a single carrier, then I would > recommend a redesign of that PVC. It's easy to say there's nothing wrong > with the configuration of the PVC when you're talking with someone who > doesn't know all the ins and outs of frame switch configuration, but in my > experience, most of the carrier techs don't really KNOW their equipment - > they just have a script they run through to create new PVCs, hence they may > not be exactly accurate when they say that everything is fine. > > Hope that helps. > > - Don > > -Original Message- > From: Radford Dion [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, January 03, 2001 8:46 AM > To: [EMAIL PROTECTED] > Subject: Frame Relay PVC > > > > I have a intermittent problem (about a dozen times a day) where a PVC goes > from the active to inactive state. It used to happen maybe once a week. I > have not changed anything on either router. Furthermore, my other PVC's are > unaffected. > > I did a debug of the lmi packets and the output is below. My telco says > there is nothing wrong with the physical connection or the configuration of > the PVC. If anyone has an explanation for these events, or even better, a > solution to fix the damn thing, I'd love to hear it. > > Thanks, > > Dion > > Serial0(in): Status, myseq 89 > RT IE 1, length 1, type 0 > KA IE 3, length 2, yourseq 193, myseq 89 > PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 > PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 > PVC IE 0x7 , length 0x3 , dlci 271, status 0x0 > *Jan 3 10:23:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state > changed to INACTIVE > *Jan 3 10:23:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, > changed state to down > PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 > Serial0(out): StEnq, myseq 90, yourseen 193, DTE up > datagramstart = 0x401D66CC, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5A C1 > > Serial0(in): Status, myseq 90 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 194, myseq 90 > Serial0(out): StEnq, myseq 91, yourseen 194, DTE up > datagramstart = 0x40001338, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5B C2 > > Serial0(in): Status, myseq 91 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 195, myseq 91 > Serial0(out): StEnq, myseq 91, yourseen 194, DTE up > datagramstart = 0x40001338, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5B C2 > > Serial0(in): Status, myseq 91 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 195, myseq 91 > Serial0(out): StEnq, myseq 92, yourseen 195, DTE up > datagramstart = 0x402295A0, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5C C3 > > Serial0(in): Status, myseq 92 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 196, myseq 92 > Serial0(out): StEnq, myseq 93, yourseen 196, DTE up > datagramstart = 0x4FB4, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5D C4 > > Serial0(in): Status, myseq 93 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 197, myseq 93 > Serial0(out): StEnq, myseq 94, yourseen 197, DTE up > datagramstart = 0x401D5E9C, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5E C5 > > Serial0(in): Status, myseq 94 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 198, myseq 94 > Serial0(out): StEnq, myseq 95, yourseen 198, DTE up > datagramstart = 0x43FC, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 00 03 02 5F C6 > > Serial0(in): Status, myseq 95 > RT IE 1, length 1, type 0 > KA IE 3, length 2, yourseq 199, myseq 95 > PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 > PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 > PVC IE 0x7 , length 0x3 , dlci 271, status 0x2 > *Jan 3 10:24:37: %FR-5-DLCICHANGE: Interf
RE: TACACS and Telnet
Kerberized telnet is supported in some feature sets, since 11.2, maybe earlier. You can also use the Kerberos mechanism to do SSO (sign on to the Kerberos server, and use Kerberos credentials to connect to all your routers, without logging in (into an enabled session, if you like). MIT Kerberos is available in BSD, most Linux, Sun, or you can compile it yourself from MIT source, if you like. Getting the router configured is the easy part, though. Kerberos, although tricky to get running, is a lot better than it was a few years ago -- mostly from Kerberos being the core of Win2k security. Note also that Kerberos doesn't do any authorization, only authentication. If anyone wants more info, feel free to ping me offlist. -jon- -Original Message- From: Piatnitchi Cristian [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 2:56 AM To: '[EMAIL PROTECTED]' Subject: RE: TACACS and Telnet Is there any other solution for a secure communication/session with a remote router/switch ? Thanks in advance Cristian -Original Message- From: Piatnitchi Cristian [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 12:19 PM To: 'Adam Quiggle'; Piatnitchi Cristian; '[EMAIL PROTECTED]' Subject: RE: TACACS and Telnet Hi Adam Thanks for the link. Now the question is clear for me. Yes is is true ssh is supported starting with IOS 12 but IOS 12.1 not IOS 12.0 Is the upgrade free from a version to a higher one. I mean from 12.0 to 12.1 ? Thanks for help. Cristian -Original Message- From: Adam Quiggle [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 11:22 AM To: Piatnitchi Cristian; '[EMAIL PROTECTED]' Subject: Re: TACACS and Telnet Cristian, Good question! No your telnet session is not secure. When you type in your password you are sending it across the network in clear text. However, the session that is used between your router and the TACACS server is encrypted using the shared key that you define when you setup TACACS. If you want secure communications using a telnet like session you will have to use SSH. I believe it was implemented in IOS 12.0, but I could be wrong. Just remember that you will have to have a SSH client in order to use SSH to communicate with your router. Here is a link for more info. http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121 t/121t1/sshv1.htm (watch the wrap) HTH, AQ At 03:47 AM 1/3/01, Piatnitchi Cristian wrote: >Hi all > >I intend to setup TACACS+ authentication for all our network devices and >I need to understand the following question: > >Is the telnet authentication sequence encrypted ? I am asking about the >situation >when the net. device is set up to work with TACACS+. >If it isn't what should I do to have a secure connection during the >authentication phase. > >I have to say that I use an IP connection not PPP. (It's just a simple >Telnet session from our internal LAN) > >In my opinion it is not a secure session but I would like to be a secure one >and I don't know how to set it. >I will be waiting for your advice. > >Thanks in advance >Cristian > > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] ** Adam Quiggle Senior Network Engineer MCI Worldcom/NOC/BP Amoco [EMAIL PROTECTED] ** _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Frame Question
Is it possible to specify a CIR for each DLCI on a router that has been converted to a frame switch? Thanks. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: NAT & DNS
You have to manually change all IPs in the DNS record (ie. A record for = www.domain.com 175.1.1.2 to 10.1.1.2, MX record, and so on) or any IPs = you have in 175.1.1.x changed to 10.1.1.x whatever IPs assigned to your = clients. The serial # in each domain/record should change when you change the = IPs, If you use NT it will change automaticly (make sure stop and start = DNS services when you done), but I don't know about UNIX you might need = to change it (ie. from 5 change to 6, increase by one everytime you = modify the file) I not sure that your 10.1.1.x is private or public IPs. I'm not clear about the connection.=20 Anyway good luck "Jeff Brown" <[EMAIL PROTECTED]> wrote in message = 92vnkj$8pt$[EMAIL PROTECTED]">news:92vnkj$8pt$[EMAIL PROTECTED]... > Please forgive my ignorance but I have been unable to find anything on = the > net that adequately defines how to configure DNS records to work with = NAT. >=20 > The scenario is this: >=20 > Web hosting co. & ISP wants to change all addresses to 10.x.x.x and > implement NAT on either a router or firewall. If we have a current = address > of 175.1.1.1 and change it to 10.1.1.1, what changes would I need to = make to > the DNS so that proper name resoultion takes place? >=20 > Additionally, we have a customer that routes their traffic through us = to our > backbone provider and has a block of our public addresses. This = customer is > already NAT'd and privately addressed behind their own firewall. How = will > our NAT implementation affect them? >=20 > Thanks in advance for your assistance! >=20 > Jeff Brown >=20 >=20 > _ > FAQ, list archives, and subscription info: = http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Frame Relay PVC
Really? You had the same PVC dropping regularly because of EM? Dang, that's weird! I've been playing with the idea of taking one of those home study courses in basic electrical theory. Maybe I oughta go ahead and do that; might clear up some ideas in my head. =) - Don -Original Message- From: John Neiberger [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 9:41 AM To: [EMAIL PROTECTED] Subject: RE: Frame Relay PVC I've experienced these types of symptoms several times and 99% of the time it really is the telco's fault, it just takes some serious pressure to get them to put some resources toward fixing the problem. However, at least once I found that it was a bad extension from the demarc (NIU) to the csu/dsu. The building we were in had lots of other equipment at the demarc, and from time to time throughout the day some of that equipment would generate enough EM noise that it would cause a lot of errors on our line and the PVC would go down. The telco tested and didn't find any problems and even sent a tech who didn't discover any problems. I later went there myself and re-oriented some of the cables in relation to other equipment and the problem went away. > My first and last inclination (not to mention every inclination in between) > is to blame the telco. If they've truly done testing on the circuit and > can't find anything, then consider whether you cross multiple carriers on > that PVC. It may not be your local carrier's issue, which is why they > haven't found anything. If you're on a single carrier, then I would > recommend a redesign of that PVC. It's easy to say there's nothing wrong > with the configuration of the PVC when you're talking with someone who > doesn't know all the ins and outs of frame switch configuration, but in my > experience, most of the carrier techs don't really KNOW their equipment - > they just have a script they run through to create new PVCs, hence they may > not be exactly accurate when they say that everything is fine. > > Hope that helps. > > - Don > > -Original Message- > From: Radford Dion [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, January 03, 2001 8:46 AM > To: [EMAIL PROTECTED] > Subject: Frame Relay PVC > > > > I have a intermittent problem (about a dozen times a day) where a PVC goes > from the active to inactive state. It used to happen maybe once a week. I > have not changed anything on either router. Furthermore, my other PVC's are > unaffected. > > I did a debug of the lmi packets and the output is below. My telco says > there is nothing wrong with the physical connection or the configuration of > the PVC. If anyone has an explanation for these events, or even better, a > solution to fix the damn thing, I'd love to hear it. > > Thanks, > > Dion > > Serial0(in): Status, myseq 89 > RT IE 1, length 1, type 0 > KA IE 3, length 2, yourseq 193, myseq 89 > PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 > PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 > PVC IE 0x7 , length 0x3 , dlci 271, status 0x0 > *Jan 3 10:23:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state > changed to INACTIVE > *Jan 3 10:23:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.1, > changed state to down > PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 > Serial0(out): StEnq, myseq 90, yourseen 193, DTE up > datagramstart = 0x401D66CC, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5A C1 > > Serial0(in): Status, myseq 90 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 194, myseq 90 > Serial0(out): StEnq, myseq 91, yourseen 194, DTE up > datagramstart = 0x40001338, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5B C2 > > Serial0(in): Status, myseq 91 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 195, myseq 91 > Serial0(out): StEnq, myseq 91, yourseen 194, DTE up > datagramstart = 0x40001338, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5B C2 > > Serial0(in): Status, myseq 91 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 195, myseq 91 > Serial0(out): StEnq, myseq 92, yourseen 195, DTE up > datagramstart = 0x402295A0, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5C C3 > > Serial0(in): Status, myseq 92 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 196, myseq 92 > Serial0(out): StEnq, myseq 93, yourseen 196, DTE up > datagramstart = 0x4FB4, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5D C4 > > Serial0(in): Status, myseq 93 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 197, myseq 93 > Serial0(out): StEnq, myseq 94, yourseen 197, DTE up > datagramstart = 0x401D5E9C, datagramsize = 14 > FR encap = 0x00010308 > 00 75 95 01 01 01 03 02 5E C5 > > Serial0(in): Status, myseq 94 > RT IE 1, length 1, type 1 > KA IE 3, length 2, yourseq 198, myseq 94 > Serial0(out): StEnq, my
We have a winner! was I'm stumped! (was EIGRP over ISDN) LONG
The 'broadcast' keyword turned out to be the problem. Thank you Kenny! I had it on my side, which is the dialing side, but I did not notice that it was missing on the remote side. I also didn't realize that the broadcast keyword handles both broadcasts AND multicasts. This is why my hellos were making it to his side, but not vice versa. Many, many thanks to all who contributed to this thread. I owe all of you lunch sometime. :-) If you all are in Denver sometime, look me up! heh heh Just don't show up all at once, my wallet wouldn't survive. John > Why don't you post the configs? Also send them to me @ [EMAIL PROTECTED] > > It sounds like a config problem. Are you using dialer-watch? What does > your dialer-list look like? Do you have the "broadcast" keyword on your map > statements? On both sides? > > Kenny > > ""Frank Wells"" <[EMAIL PROTECTED]> wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > You really need to downgrade both routers to be sure. > > > > > > >From: John Neiberger <[EMAIL PROTECTED]> > > >To: Frank Wells <[EMAIL PROTECTED]>, [EMAIL PROTECTED] > > >Subject: Re: I'm stumped! (was EIGRP over ISDN) LONG > > >Date: Wed, 3 Jan 2001 08:53:49 -0800 (PST) > > > > > >Yes, we've tried 11.2(19), 12.0(14) and 12.1(5) on this end. The remote > > >side has been on 12.0(5) the entire time and they are not able to change > at > > >this time. Since it appears to be an issue with the timers, we can set > > >those with ios commands and hopefully alleviate the problem. > > > > > >Thanks, > > >John > > > > > > > Have you tried downgrading IOS to a more experienced version, just to > > >see > > >if > > > > your problem goes away? > > > > > > > > > > > > >From: John Neiberger <[EMAIL PROTECTED]> > > > > >Reply-To: John Neiberger <[EMAIL PROTECTED]> > > > > >To: [EMAIL PROTECTED] > > > > >Subject: I'm stumped! (was EIGRP over ISDN) LONG > > > > >Date: Wed, 3 Jan 2001 07:51:11 -0800 (PST) > > > > > > > > > >I'm reposting this in the hopes that someone who didn't see it > before > > >might > > > > >have some ideas about this. Heck, SWAGs, educated guesstimates, or > > > > >telephone psychic impressions are also welcome. We are completely > > >stumped > > > > >about how to resolve this. I've even posted this question on the > CCO > > >Q&A > > > > >Forum but I don't think anyone has been answering questions on there > > > > >lately. > > > > > > > > > >Here is the problem: we have an ISDN BRI backup link between two > > >sites, > > > > > > > >and > > > > >we want to run eigrp over the link when it's in use. The problem is > > >that > > > > >even though the line is not flapping, eigrp is behaving as if it > were > > > > >flapping. My side NEVER sees hellos from the other side, but it > does > > > > >receive updates. The other side receives my hellos, but it thinks > the > > >link > > > > >is bouncing and that my router is intermittently unavailable. My > side > > > > >never > > > > >establishes the other as a neighbor. > > > > > > > > > >I've used every debugging command I can find to no avail. Nothing > is > > > > >giving > > > > >me any information that I don't already know. We have no access > lists > > > > >configured, except for distribute lists but that shouldn't affect > > >neighbor > > > > >relationships, should it? > > > > > > > > > >Here is sample debug output (debug eigrp neighbors and debug eigrp > > >packet): > > > > > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > > > >3d01h: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up > > > > > > > > > >3d01h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, > changed > > > > >state > > > > >to up > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.226.2 > > > > > > > > > >3d01h: AS 2, Flags 0x1, Seq 67/0 idbQ 0/0 > > > > > > > > > >3d01h: EIGRP: Neighbor(10.120.226.2) not yet found > > > > > > > > > >3d01h: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to > 303xx > > > > >theirrouter > > > > >3d01h: EIGRP: Sending HELLO on BRI0 nbr 10.120.226.2 > > > > > > > > > >3d01h: AS 2, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0 > > > > > > > > > >3d01h: EIGRP: Received UPDATE on BRI0 nbr 10.120.
Re: Frame-Relay question ?
Do you have a router configured as a frame switch ? It seems to me that you are missing the most important part of the puzzle. For the frame relay encapsulation to work,The third router that sits in the middle of your setup will be configured as a fram switch .with the correct route map statements . Manny mindiani mindiani wrote: > Want to get to setup frame relay on my two routers connectected (2x 2501) > back-to-back with a DTE/DCE cables. When both routers boot up I could see > the routing table with "sh ip route" and after 30 secondes the protocol on > the serial interfaces go down. Can you help > > Here is the sample config: > > Router1: > > interface Serial0 > clockrate 64000 > bandwidth 64 > ip address 10.0.2.5 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 100 > > Router2: > > interface Serial0 > bandwidth 64 > ip address 10.0.2.6 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 200 > > _ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Frame Relay PVC
Yep! At least that's what we think was happening, not 100% sure. Re-orienting the cabling and punching down the connections again seemed to alleviate the problem. I admit, it was pretty odd, but we were sharing the demarc with a grocery store that had a room full of equipment that included datacomm stuff as well as their large compressors for the freezers and stuff like that. My guess is that one piece of equipment was the culprit, and whenever it turned onbamm...down goes the PVC. Then, a few minutes later, the errors would go away and the line would come back up clean. John > Really? You had the same PVC dropping regularly because of EM? Dang, that's > weird! I've been playing with the idea of taking one of those home study > courses in basic electrical theory. Maybe I oughta go ahead and do that; > might clear up some ideas in my head. =) > > - Don > > -Original Message- > From: John Neiberger [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, January 03, 2001 9:41 AM > To: [EMAIL PROTECTED] > Subject: RE: Frame Relay PVC > > > I've experienced these types of symptoms several times and 99% of the time > it really is the telco's fault, it just takes some serious pressure to get > them to put some resources toward fixing the problem. > > However, at least once I found that it was a bad extension from the demarc > (NIU) to the csu/dsu. The building we were in had lots of other equipment > at the demarc, and from time to time throughout the day some of that > equipment would generate enough EM noise that it would cause a lot of errors > on our line and the PVC would go down. > > The telco tested and didn't find any problems and even sent a tech who > didn't discover any problems. I later went there myself and re-oriented > some of the cables in relation to other equipment and the problem went away. > > > My first and last inclination (not to mention every inclination in > between) > > is to blame the telco. If they've truly done testing on the circuit and > > can't find anything, then consider whether you cross multiple carriers on > > that PVC. It may not be your local carrier's issue, which is why they > > haven't found anything. If you're on a single carrier, then I would > > recommend a redesign of that PVC. It's easy to say there's nothing wrong > > with the configuration of the PVC when you're talking with someone who > > doesn't know all the ins and outs of frame switch configuration, but in > my > > experience, most of the carrier techs don't really KNOW their equipment - > > they just have a script they run through to create new PVCs, hence they > may > > not be exactly accurate when they say that everything is fine. > > > > Hope that helps. > > > > - Don > > > > -Original Message- > > From: Radford Dion [mailto:[EMAIL PROTECTED]] > > Sent: Wednesday, January 03, 2001 8:46 AM > > To: [EMAIL PROTECTED] > > Subject: Frame Relay PVC > > > > > > > > I have a intermittent problem (about a dozen times a day) where a PVC > goes > > from the active to inactive state. It used to happen maybe once a week. I > > have not changed anything on either router. Furthermore, my other PVC's > are > > unaffected. > > > > I did a debug of the lmi packets and the output is below. My telco says > > there is nothing wrong with the physical connection or the configuration > of > > the PVC. If anyone has an explanation for these events, or even better, a > > solution to fix the damn thing, I'd love to hear it. > > > > Thanks, > > > > Dion > > > > Serial0(in): Status, myseq 89 > > RT IE 1, length 1, type 0 > > KA IE 3, length 2, yourseq 193, myseq 89 > > PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 > > PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 > > PVC IE 0x7 , length 0x3 , dlci 271, status 0x0 > > *Jan 3 10:23:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state > > changed to INACTIVE > > *Jan 3 10:23:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface > Serial0.1, > > changed state to down > > PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 > > Serial0(out): StEnq, myseq 90, yourseen 193, DTE up > > datagramstart = 0x401D66CC, datagramsize = 14 > > FR encap = 0x00010308 > > 00 75 95 01 01 01 03 02 5A C1 > > > > Serial0(in): Status, myseq 90 > > RT IE 1, length 1, type 1 > > KA IE 3, length 2, yourseq 194, myseq 90 > > Serial0(out): StEnq, myseq 91, yourseen 194, DTE up > > datagramstart = 0x40001338, datagramsize = 14 > > FR encap = 0x00010308 > > 00 75 95 01 01 01 03 02 5B C2 > > > > Serial0(in): Status, myseq 91 > > RT IE 1, length 1, type 1 > > KA IE 3, length 2, yourseq 195, myseq 91 > > Serial0(out): StEnq, myseq 91, yourseen 194, DTE up > > datagramstart = 0x40001338, datagramsize = 14 > > FR encap = 0x00010308 > > 00 75 95 01 01 01 03 02 5B C2 > > > > Serial0(in): Status, myseq 91 >
why would SNA be much slower than IP?
We have a customer who uses the same AS400 Server remotely - with terminals, and - with PCs. He tells me the terminals connect via SNA, and the PCs via IP. Now he complains of SNA slowness. On the WAN side, we have two ciscos and frame relay in between, as well as dlsw for the SNA. Is there anybody who has a recent memory of resources which deal with dlsw performance? Sincerely GNaggies -- _ georg naggies' home on the web http://212.17.70.55 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco Certification Digest V2 #919
I will be on vacation until January 8 and out of pager and cell phone range. For all network related issues please contact our Network Operations Center at 800-610-4684. Dan Keller _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: NAT & DNS
Thanks, that's pretty much what I thought but that brings up another question. Does the DNS have to have a public IP address, i.e., one that is valid on the Internet or can it use a 10-net address provided the Internic record of all hosted webs, etc have been changed to point to a valid IP address outside of the NAT? My understanding from all of the docs I've been reading on NAT tell me that the router will pass the DNS request through the NAT and resolve correctly, right?? Does anyone know if "The NAT Handbook" by Bill Dutcher adequately addresses topics such as this? Thanks again, Jeff ""Minh Vu"" <[EMAIL PROTECTED]> wrote in message 011c01c075af$4e6d81e0$[EMAIL PROTECTED]">news:011c01c075af$4e6d81e0$[EMAIL PROTECTED]... > You have to manually change all IPs in the DNS record (ie. A record for = > www.domain.com 175.1.1.2 to 10.1.1.2, MX record, and so on) or any IPs = > you have in 175.1.1.x changed to 10.1.1.x whatever IPs assigned to your = > clients. > > The serial # in each domain/record should change when you change the = > IPs, If you use NT it will change automaticly (make sure stop and start = > DNS services when you done), but I don't know about UNIX you might need = > to change it (ie. from 5 change to 6, increase by one everytime you = > modify the file) > > I not sure that your 10.1.1.x is private or public IPs. > > I'm not clear about the connection.=20 > > Anyway good luck > > > "Jeff Brown" <[EMAIL PROTECTED]> wrote in message = > 92vnkj$8pt$[EMAIL PROTECTED]">news:92vnkj$8pt$[EMAIL PROTECTED]... > > Please forgive my ignorance but I have been unable to find anything on = > the > > net that adequately defines how to configure DNS records to work with = > NAT. > > The scenario is this: > > Web hosting co. & ISP wants to change all addresses to 10.x.x.x and > > implement NAT on either a router or firewall. If we have a current = > address > > of 175.1.1.1 and change it to 10.1.1.1, what changes would I need to = > make to > > the DNS so that proper name resoultion takes place? > > Additionally, we have a customer that routes their traffic through us = > to our > > backbone provider and has a block of our public addresses. This = > customer is > > already NAT'd and privately addressed behind their own firewall. How = > will > > our NAT implementation affect them? _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Boson CCIE tests
How good are these exams? Timothy W. Roberts McKessonHBOC Inc. Network Control Center (916) 636-8777 Main Line (916) 636-8814 Work Line _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Cisco Certification Digest V2 #919
I can't wait for Dan to get back! -Original Message- From: Daniel Keller [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 12:59 PM To: [EMAIL PROTECTED] Subject: Re: Cisco Certification Digest V2 #919 I will be on vacation until January 8 and out of pager and cell phone range. For all network related issues please contact our Network Operations Center at 800-610-4684. Dan Keller _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Frame-Relay question ?
Where is the DCE device that acts as your FR switch? Kelly D Griffin, CCNA Network Engineer Kg2 Network Design http://www.kg2.com - Original Message - From: "mindiani mindiani" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 03, 2001 8:06 AM Subject: Frame-Relay question ? > Want to get to setup frame relay on my two routers connectected (2x 2501) > back-to-back with a DTE/DCE cables. When both routers boot up I could see > the routing table with "sh ip route" and after 30 secondes the protocol on > the serial interfaces go down. Can you help > > Here is the sample config: > > Router1: > > interface Serial0 > clockrate 64000 > bandwidth 64 > ip address 10.0.2.5 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 100 > > > Router2: > > interface Serial0 > bandwidth 64 > ip address 10.0.2.6 255.255.255.252 > no ip directed-broadcast > encapsulation frame-relay > frame-relay lmi-type cisco > frame-relay interface-dlci 200 > > > > > > _ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Timeouts on Ethernet and WAN interface
What is the load on this router? Can you do a SH INT and send me the counters? Kelly D Griffin, CCNA Network Engineer Kg2 Network Design http://www.kg2.com - Original Message - From: "Charles Nunie" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 03, 2001 3:19 AM Subject: Timeouts on Ethernet and WAN interface > Hi, > > We have this 3600 router connected to a WAN through a PRI interface an a LAN > through an ethernet interface. We have recently been experiencing timeouts on > these interfaces. > > Over noght the timeouts did not appear, just this morning it has started > again. > > What could be wrong? > > Dzilo > > > Get free email and a permanent address at http://www.netaddress.com/?N=1 > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Modem Access from Router
What model of router is this on? If you are referring to reverse telnet, it can be done not only from this router, but from a telnet session to this router. Send more details. Kelly D Griffin, CCNA Network Engineer Kg2 Network Design http://www.kg2.com - Original Message - From: "Sam" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 03, 2001 10:22 AM Subject: Modem Access from Router > Hello friends > > I have a modem connected to the AUX port of my router. I am using this modem > to dial into the router. > > Now I need to access this modem from the router. > What do i need to configure on the router to be able to access the modem > from the router itself. ie to be able to configure the modem using the AT > command set. > Could someone help me out on this. > > Thanks > > Sam > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Frame Relay PVC
Here are some statistics from the last year of WAN implementations at my company. 178 Unique circuit installs - 123 FR - 55 point-to-point circuits (T1 or greater) 46 Incomplete installations due to errors - 13 Extended DEMARC - 1 Bad serial port on router - 12 Bad configuration by LEC - 21 Bad configuration by CLEC - 2 Operator error Food for thought. I can give detailed information on this if anyone would like to hear more. Kelly D Griffin, CCNA Network Engineer Kg2 Network Design http://www.kg2.com - Original Message - From: "John Neiberger" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 03, 2001 11:40 AM Subject: RE: Frame Relay PVC > I've experienced these types of symptoms several times and 99% of the time > it really is the telco's fault, it just takes some serious pressure to get > them to put some resources toward fixing the problem. > > However, at least once I found that it was a bad extension from the demarc > (NIU) to the csu/dsu. The building we were in had lots of other equipment > at the demarc, and from time to time throughout the day some of that > equipment would generate enough EM noise that it would cause a lot of errors > on our line and the PVC would go down. > > The telco tested and didn't find any problems and even sent a tech who > didn't discover any problems. I later went there myself and re-oriented > some of the cables in relation to other equipment and the problem went away. > > > My first and last inclination (not to mention every inclination in > between) > > is to blame the telco. If they've truly done testing on the circuit and > > can't find anything, then consider whether you cross multiple carriers on > > that PVC. It may not be your local carrier's issue, which is why they > > haven't found anything. If you're on a single carrier, then I would > > recommend a redesign of that PVC. It's easy to say there's nothing wrong > > with the configuration of the PVC when you're talking with someone who > > doesn't know all the ins and outs of frame switch configuration, but in > my > > experience, most of the carrier techs don't really KNOW their equipment - > > they just have a script they run through to create new PVCs, hence they > may > > not be exactly accurate when they say that everything is fine. > > > > Hope that helps. > > > > - Don > > > > -Original Message- > > From: Radford Dion [mailto:[EMAIL PROTECTED]] > > Sent: Wednesday, January 03, 2001 8:46 AM > > To: [EMAIL PROTECTED] > > Subject: Frame Relay PVC > > > > > > > > I have a intermittent problem (about a dozen times a day) where a PVC > goes > > from the active to inactive state. It used to happen maybe once a week. I > > have not changed anything on either router. Furthermore, my other PVC's > are > > unaffected. > > > > I did a debug of the lmi packets and the output is below. My telco says > > there is nothing wrong with the physical connection or the configuration > of > > the PVC. If anyone has an explanation for these events, or even better, a > > solution to fix the damn thing, I'd love to hear it. > > > > Thanks, > > > > Dion > > > > Serial0(in): Status, myseq 89 > > RT IE 1, length 1, type 0 > > KA IE 3, length 2, yourseq 193, myseq 89 > > PVC IE 0x7 , length 0x3 , dlci 235, status 0x2 > > PVC IE 0x7 , length 0x3 , dlci 250, status 0x2 > > PVC IE 0x7 , length 0x3 , dlci 271, status 0x0 > > *Jan 3 10:23:37: %FR-5-DLCICHANGE: Interface Serial0 - DLCI 271 state > > changed to INACTIVE > > *Jan 3 10:23:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface > Serial0.1, > > changed state to down > > PVC IE 0x7 , length 0x3 , dlci 750, status 0x2 > > Serial0(out): StEnq, myseq 90, yourseen 193, DTE up > > datagramstart = 0x401D66CC, datagramsize = 14 > > FR encap = 0x00010308 > > 00 75 95 01 01 01 03 02 5A C1 > > > > Serial0(in): Status, myseq 90 > > RT IE 1, length 1, type 1 > > KA IE 3, length 2, yourseq 194, myseq 90 > > Serial0(out): StEnq, myseq 91, yourseen 194, DTE up > > datagramstart = 0x40001338, datagramsize = 14 > > FR encap = 0x00010308 > > 00 75 95 01 01 01 03 02 5B C2 > > > > Serial0(in): Status, myseq 91 > > RT IE 1, length 1, type 1 > > KA IE 3, length 2, yourseq 195, myseq 91 > > Serial0(out): StEnq, myseq 91, yourseen 194, DTE up > > datagramstart = 0x40001338, datagramsize = 14 > > FR encap = 0x00010308 > > 00 75 95 01 01 01 03 02 5B C2 > > > > Serial0(in): Status, myseq 91 > > RT IE 1, length 1, type 1 > > KA IE 3, length 2, yourseq 195, myseq 91 > > Serial0(out): StEnq, myseq 92, yourseen 195, DTE up > > datagramstart = 0x402295A0, datagramsize = 14 > > FR encap = 0x00010308 > > 00 75 95 01 01 01 03 02 5C C3 > > > > Serial0(in): Status, myseq 92 > > RT IE 1, length 1, type 1 > > KA IE 3, length 2, yourseq 196, myseq 92 > > Serial0(out): StEnq, myseq 93, yourseen 196, DTE up > > datagramstart = 0x4FB4, datagramsize = 14 > > FR encap = 0x00010308 > > 00 75 95 01 01 01
RE: Boson CCIE tests
Timothy, I just purchased #1 and am on part B. So far I think they cover the material well that will be on the exam but they are full of small mistakes. Click on diagram button and it doesn't work or the diagram button is completely missing, etc.. Still worth the $30 in my opinion. Cory -Original Message- From: Roberts, Timothy [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 03, 2001 1:13 PM To: '[EMAIL PROTECTED]' Subject: Boson CCIE tests How good are these exams? Timothy W. Roberts McKessonHBOC Inc. Network Control Center (916) 636-8777 Main Line (916) 636-8814 Work Line _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Study Group in NW Arkansas
Does anyone know of a study group in NW Arkansas? Fayetteville or Ft. Smith would be fine. Kelly D Griffin, CCNA Network Engineer Kg2 Network Design http://www.kg2.com http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: NAT & DNS
DNS server doesn't have to have an public IP, however its good to have = its own. Router can pass DNS request (port 53 UDP) from outside to inside DNS = server (private IP), but you have to set access-list to permit UDP 53 or = you can map directly ie: ip nat inside source static udp private_ip_here 53 public_ip_here 53 ext ip nat inside source static tcp private_ip_here 53 public_ip_here 53 ext (you might not need TCP line, but it good for secondary try) private_ip_here is your DNS server (private IP) public_ip_here could be your router IP or whichever IP you natting. Have Fun ! "Jeff Brown" <[EMAIL PROTECTED]> wrote in message = 9301el$sq0$[EMAIL PROTECTED]">news:9301el$sq0$[EMAIL PROTECTED]... > Thanks, that's pretty much what I thought but that brings up another > question. Does the DNS have to have a public IP address, i.e., one = that is > valid on the Internet or can it use a 10-net address provided the = Internic > record of all hosted webs, etc have been changed to point to a valid = IP > address outside of the NAT? My understanding from all of the docs I've = been > reading on NAT tell me that the router will pass the DNS request = through the > NAT and resolve correctly, right?? >=20 > Does anyone know if "The NAT Handbook" by Bill Dutcher adequately = addresses > topics such as this? >=20 > Thanks again, >=20 > Jeff >=20 > ""Minh Vu"" <[EMAIL PROTECTED]> wrote in message > 011c01c075af$4e6d81e0$[EMAIL PROTECTED]">news:011c01c075af$4e6d81e0$[EMAIL PROTECTED]... > > You have to manually change all IPs in the DNS record (ie. A record = for =3D > > www.domain.com 175.1.1.2 to 10.1.1.2, MX record, and so on) or any = IPs =3D > > you have in 175.1.1.x changed to 10.1.1.x whatever IPs assigned to = your =3D > > clients. > > > > The serial # in each domain/record should change when you change the = =3D > > IPs, If you use NT it will change automaticly (make sure stop and = start =3D > > DNS services when you done), but I don't know about UNIX you might = need =3D > > to change it (ie. from 5 change to 6, increase by one everytime you = =3D > > modify the file) > > > > I not sure that your 10.1.1.x is private or public IPs. > > > > I'm not clear about the connection.=3D20 > > > > Anyway good luck > > > > > > "Jeff Brown" <[EMAIL PROTECTED]> wrote in message =3D > > 92vnkj$8pt$[EMAIL PROTECTED]">news:92vnkj$8pt$[EMAIL PROTECTED]... > > > Please forgive my ignorance but I have been unable to find = anything on =3D > > the > > > net that adequately defines how to configure DNS records to work = with =3D > > NAT. > > > The scenario is this: > > > Web hosting co. & ISP wants to change all addresses to 10.x.x.x = and > > > implement NAT on either a router or firewall. If we have a current = =3D > > address > > > of 175.1.1.1 and change it to 10.1.1.1, what changes would I need = to =3D > > make to > > > the DNS so that proper name resoultion takes place? > > > Additionally, we have a customer that routes their traffic through = us =3D > > to our > > > backbone provider and has a block of our public addresses. This = =3D > > customer is > > > already NAT'd and privately addressed behind their own firewall. = How =3D > > will > > > our NAT implementation affect them? >=20 >=20 >=20 > _ > FAQ, list archives, and subscription info: = http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Ping response between subnets slow
Hi Amit, I replied to your question off line yesterday let me know if you got it. It was long winded but went into a number of scenarios you might check. The response times between the switches will be fine the problem seems to be the traffic going in and out of the router port based on what you sent me. The idea behind what I sent you is to avoid local traffic having to be handled by the router. As it appears a lot of the traffic hitting your router ethernet is just being turned around and being sent back out. This will cause the delays you were worried about. Teunis, Hobart, Tasmania Australia On Wednesday, January 03, 2001 at 09:43:45 AM, Amit Gupta (EHPT) IS-IT wrote: > The Response time of pinging from switch to switch is not slow > > > -Original Message- > > From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]] > > Sent: Wednesday, January 03, 2001 8:16 AM > > To: [EMAIL PROTECTED] > > Subject:Re: Ping response between subnets slow > > > > What about the times when you ping from switch to switch? Is it slow when > > you > > try that? > > > > In a message dated 1/2/01 6:10:33 PM Eastern Standard Time, > > [EMAIL PROTECTED] writes: > > > > > > > Hi, > > > > > > 10 ms seems high on a switched network. > > > > > > I assume that both networks (Switches) have a trunk between each other > > and > > > from one switch back to the router if you are using VLAN's. > > > > > > Check your ethernet interface on your router. See what traffic it is > > > doing. Check for collisions, Late collisions, CRC's. > > > > > > Check the port on the switch connecting to the router. Make sure the > > > aggree on the port speed (they will or no comms) and the duplex settings > > > > > (the most common problem). DO NOT LEAVE THE SWITCH IN AUTO NEGOTIATE > > MODE. > > > > > > > > > Just some thoughts. > > > > > > Teunis > > > Hobart, Tasmania > > > Australia > > > > > > > > > On Tuesday, January 02, 2001 at 05:25:17 AM, Amit Gupta wrote: > > > > > > > Hi Everybody, > > > > > > > > Need some help on the following problem > > > > > > > > I have 2 subnets configured on my LAN say ( x.x.1.0 > > > > and x.x.2.0 )with a SM of 255.255.255.0. > > > > There are 2 Catalyst switches ( each one on a > > > > different subnet) > > > > > > > > The router is configured with a primary and a > > > > secondary address on the ethernet port say x.x.1.1 and > > > > x.x.2.1 > > > > > > > > When I ping a station on one subnet to another and > > > > viceversa the response time is very high (sometimes > > > > upto 80ms) while the response time while pinging in > > > > the same subnet is less than 10ms. > > > > > > > > Need some clues on the possible reasons for this > > > > > > > > > > > > Thanks & Regards > > > > > > > > Amit > > > > > > > > > Mark Zabludovsky ~ CCNA, CCDA, 1/2-NP > > [EMAIL PROTECTED] > > > > "Even if I knew I had only 1 more week to live, I would still > > schedule > > my CCIE lab. I would just have to work a little harder I guess. After all, > > > > without any goals in life, I'm dead already." > >~Mark Zabludovsky~ > > > > _ > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > -- www.tasmail.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Network services firms
Hi, I know this might not be the right place to ask this question, but I am doing some market analysis on U.S. companies that provide network services, specifically: infrastructure, high availability, and network security. I have a list of some 40 public companies, mainly vendor firms like IBM and Lucent that have network services arms, and system integration houses that provide network services. However, I wanted to gather some private companies as well. I am also looking for profitability and efficiency info such as operating margins, profit margins, rev/employee, etc. If someone could send me some links or suggestions, I would greatly appreciate it. thanks Telemachus _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Lab Swap - RTP Jan 21 and 22 for March or April
I would like to swap dates for my RTP date on Jan 21 and 22 for a late Feb , March or April date. Thanks _ Get your FREE download of MSN Explorer at http://explorer.msn.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX and OSPF help! (Revisited)
Hi, A GRE tunnel may be a way, but to simply pass OSPF through a PIX (which discard Mcast), you may change you OSPF network-type to non-broadcast and specify the neighbours, and OSPF will then use unicast. You add a conduit in your PIX config to allow traffic between your neighbours, it should do the job. Hope this helps, Jean-Marc On 02-Jan-01 gwakin wrote: > it is my understanding that a GRE tunnel is required for passing multicast > traffic over > a VPN link... however I won't even attempt to forge a working config here- > you're better > off checking CCO for that. > > GWA > > Nabil Fares wrote: > >> Greetings, >> >> I can't seem to find any information about PIX passing OSPF traffic between >> routers. I'm trying to install a PIX515 between 2 regional routers. >> >> Router-C1--PIX515---Router-C2 >> >> Cisco recommends using the OSPF neighbor command, anyone out there used this >> configuration before? Any information would be helpful. >> >> Thanks, >> >> Nabil >> >> _ >> FAQ, list archives, and subscription info: >> http://www.groupstudy.com/list/cisco.html >> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > _ > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- E-Mail: Jean-Marc Gilbert <[EMAIL PROTECTED]> Date: 03-Jan-01 Time: 22:52:17 -- _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Network services firms
You're right...this is not the right place. This is a professional study group for career certifications based on Cisco technology. Try a search engine. www.google.com is one of the best. At 01:21 PM 1/3/01 -0800, Telemachus Luu wrote: >Hi, > >I know this might not be the right place to ask this question, but I am >doing some market analysis on U.S. companies that provide network services, >specifically: infrastructure, high availability, and network security. I >have a list of some 40 public companies, mainly vendor firms like IBM and >Lucent that have network services arms, and system integration houses that >provide network services. However, I wanted to gather some private >companies as well. I am also looking for profitability and efficiency info >such as operating margins, profit margins, rev/employee, etc. If someone >could send me some links or suggestions, I would greatly appreciate it. > > >thanks >Telemachus > > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Fwd: CCNP
And is there anywhere where I can buy a CCNP or better yet a CCIE ?? And if it is possible, do you know of anywhere I can get a free breathing machine? I don't wanna do it myself, it's just to difficult !! --- Chiao Liang <[EMAIL PROTECTED]> wrote: > To: [EMAIL PROTECTED] > From: Chiao Liang <[EMAIL PROTECTED]> > Subject: CCNP > Date: Thu, 04 Jan 2001 00:47:49 +0800 > Organization: GroupStudy.com Discussion Groups > Reply-to: Chiao Liang <[EMAIL PROTECTED]> > > Hi All > Is there any good site can i go to or free study & > question for CCNP. > > Thank > > Chan > CCNA, CCDA > > _ > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] = Chris from Chicago MasterCNE, 5.x CNE, ICNE, 4.x CNE, CCNA, MCP __ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Question on CCNA exams [1:1358]
From: Jennifer Cribbs <[EMAIL PROTECTED]> To: Bober <[EMAIL PROTECTED]>, Will ERM <[EMAIL PROTECTED]> Subject: RE: Question on CCNA exams [1:1358] I took my test in early Dec and the questions that had multiple answers all specified the numbers of answers to choose. It would say something like, "choose the two correct choices " or choose the three correct choices". It never left me hanging as in saying, "choose all correct answers". Good Luck!! Jennifer Cribbs [EMAIL PROTECTED] >= Original Message From [EMAIL PROTECTED], Will ERM <[EMAIL PROTECTED]> = >How are the questions worded when there are multiple answers? > >ie - do you get checkboxes instead of radio buttons > - does it say "Select the 1 Best Answer" > >Just wondering. This can be a great tool for answering multiple choice. > >- Will > > > > >Message Posted at: >http://www.groupstudy.com/form/read.php?f=1&i=1358&t=1358 >-- >You are reading GroupStudy's Associate Mailing List. To unsubscribe follow >the directions on http://www.groupstudy.com/list/Associates.html Have a Good Day!! Jennifer Cribbs [EMAIL PROTECTED] Have a Good Day!! Jennifer Cribbs [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: token channels
Hi, Worked for me for a couple of weeks until I got the stacking cable. Regards, Gernot "C. Cubberley" wrote: > > Hi all, > > I have what I think is a design question. I have two catalyst 3920's that > need to be in different rooms, but connected. Would I be able to connect > them not by stacking, but by using ports as token channels? Has anybody > used token channels to connect 3920's this way? Any help would be greatly > appreciated. > > Thanks in advance, > Connie Cubberley > State of New Jersey _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Routing Problem
Ask PACBell for a /24 and coordinate with the govt ISP to route it and do BGP. There's also a very intersting article on Cisco somewhere about using NAT in this situation. Check this out: http://www.cisco.com/warp/public/cc/pd/iosw/ioft/ionetn/tech/emios_wp.htm I've never implemented it but would love to. Good luck, Kenny "Brian Wilcox" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I am currently adding another circuit to an additional > ISP for my network. I want to be able to use the > first circuit for a redundant backup but am not clear > on how to accomplish this. > > The setup: > (diagram located at > http://www.geocities.com/bwilcox_email/Routing_Design.html) > - watch word wrap > Internal LAN connected to two PIX's, one in failover > mode. The PIX's current default route points to the > old ISP (government). All of our internal (public) > addresses are from the Government ISP's address space, > which we have a /25 block. I'm currently NATing my 10 > net to this pool. I have an internal web server that > the users need access to from outside the network. > I'm adding the new circuit via PacBell and would like > traffic to take that route and failover to the > Government ISP. > > First solution: do BGP. Well, I can't. I only have a > /25, too specific, from the Government ISP and I have > to maintain the same address space. So my next > thought would be to PAT everything out the PacBell > circuit. That's fine and dandy but then the web > server will reply to the source with a different > address. I'd like to route the web server to the > Government ISP. The only way I can think of doing > that is via some sort of route map or policy map. > > Any comments would be greatly appreciated. > > Thanks, Brian > > __ > Do You Yahoo!? > Yahoo! Photos - Share your holiday photos online! > http://photos.yahoo.com/ > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Can't telnet- Can't ping
Working for an enterperise has its disadvantages. Based on the new policy, now I (network engineer) am unable to ping the outside world nor telnet to the outside world. Although my main job is taking care of Cisco gear inside the enterprise, I hate the fact that someone with a half brain sitting at a proxy server dictates me what I can do and what I can not do. I might have a chance in removing these restrictions if I can justify that I need to ping or telnet the ouside world. Can you guys think of any justification? TIA, A. Strobel Get free email and a permanent address at http://www.amexmail.com/?A=1 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCNP
well you were given a free breathing machine and it works great, unless you are underwater. - Original Message - From: Chris Haller <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 03, 2001 2:27 PM Subject: Fwd: CCNP > And is there anywhere where I can buy a CCNP or better > yet a CCIE ?? And if it is possible, do you know of > anywhere I can get a free breathing machine? I don't > wanna do it myself, it's just to difficult !! > > > > --- Chiao Liang <[EMAIL PROTECTED]> wrote: > > To: [EMAIL PROTECTED] > > From: Chiao Liang <[EMAIL PROTECTED]> > > Subject: CCNP > > Date: Thu, 04 Jan 2001 00:47:49 +0800 > > Organization: GroupStudy.com Discussion Groups > > Reply-to: Chiao Liang <[EMAIL PROTECTED]> > > > > Hi All > > Is there any good site can i go to or free study & > > question for CCNP. > > > > Thank > > > > Chan > > CCNA, CCDA > > > > _ > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to > [EMAIL PROTECTED] > > > = > Chris from Chicago > MasterCNE, 5.x CNE, ICNE, 4.x CNE, CCNA, MCP > > __ > Do You Yahoo!? > Yahoo! Photos - Share your holiday photos online! > http://photos.yahoo.com/ > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Electrical and General knowledge
A couple of thoughts based on the PVC fault thread but looking at a different angle. Should we as aspiring "communications experts" understand: 1 Fundamental electrical and magnetic propogation theory. 2 Basic cabling technology, design and termination. Well lets consider the number of faults that can be put into this category. It used to be 75%+ faults were of a physical nature. I think the figure would still be quite high but I don't have recent figures. Most intermittent faults are due to connections and/or connectors. Ofter due to poor installation and/or plugs being inserted and removed regularly and/or incorrectly. The next most common cause of intermittent faults is magnetic (Noise) interferance. Usually due to poor cabling layouts and/or poor installation methods. The most common cause of permanent damage to to ports is due to incorrect installation of cables (NT1 to Ethernet ports is a good one that comes up a lot). In switching the most common problems are duplex mismatches. Usually due to a misunderstanding of what duplex setting do. These are just some considerations there are heaps more. Most are easily avoided but difficult to diagnose. An understanding of the fundamentals involved can avoid disaster. Just as a beat up on all. I work in an environment where we supply Telco type services and IP connectivity to thousands (this figure is an understatement). A part of my job is to troubleshoot client connections to our access servers. I can often go for a week or two handling about 10 faults or more per day without finding a fault in the configuration of the access servers, connections to the access servers and/or the clients CPE. This does not leave much but I'll bet most still blame us. I don't know how often I will suggest change this setting in your server an all will be fine. Bink up it comes and so does the question "what did you do at your end to fix my server?" Incidently the next most common problem I come across is username/password errors particularly where people mix cases and/or use non alphanumeric characters in usernames. In my opinoin this shouls be avoided (In Cisco's also). The term username in the Cisco sense is really a hostname (PPP) and should follow the Unix Hostmane rules to avoid stange issues. Most faults a simple and can be avoided by careful planning. Just some thoughts and ramblings from Teunis Teunis Hobart, Tasmania Australia -- www.tasmail.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Fwd: CCNP
> --- Chiao Liang <[EMAIL PROTECTED]> wrote: > > To: [EMAIL PROTECTED] > > From: Chiao Liang <[EMAIL PROTECTED]> > > Subject: CCNP > > Date: Thu, 04 Jan 2001 00:47:49 +0800 > > Organization: GroupStudy.com Discussion Groups > > Reply-to: Chiao Liang <[EMAIL PROTECTED]> > > > > Hi All > > Is there any good site can i go to or free study & > > question for CCNP. http://www.cisco.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Boson tests for CIT
Quick and dirty review. The tests are not 1 for 1 to the actual exam but, they are about as close as you can get without Boson violating the infamous Cisco Non-Disclosure Agreement. I found the Boson CIT and ACRC tests were actually harder than the Cisco Exam so it was a pleasant surprise when I passed the exams. As a recommendation, I have used Boson tests on every Cisco certification that I have passed. The only negative comment I have is on the CID tests. I haven't had much luck with those but, Boson has revised them so, it seems to be a timing issue. I also had problems with the book that I studied originally from . Now that I have the CID book from Cisco and the revised Boson tests, I should be able to pass the CID exam in no time. Boson's test authors are responsive to correcting mistakes. I usually get a response within 8 hours, unless I send a an email at 8:00PM. Additionally, the authors are always ask about ways to improve their product and listen to suggestions. So, if you need some help and give them some constructive feedback they usually get right on it. The CIT exam is not difficult if you have the right study material and study Vigorously for it. I used the books from Cisco and by the one written by T. Thomas from McGaw Hill, all three Boson Tests and the Cisco website. I'd suggest that if you are doing self-studying that you use both books. It takes a little more time but you'll get two perspectives that will help you with retention and understanding. The CIT exam is not for the faint of heart or for folks with Attention Defect Syndrome. At first I was disappointed that Cisco asked fairly convoluted questions until I realized that Cisco is testing you ability to sort out the real issues in the minutia as well as your technical knowledge. Good luck on the CIT exam. JH A+ N+ CNE, MCSE, CCNP, CCDA, some other crap, and hopefully a CCDP soon ;-) P.S. I am using Boson's CCIE practice tests too. ""Wilson, Christian"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Does anyone have any experience with the Boson tests for CIT? I have used > them in the past and have found that some are better then others. Can > anyone tell me which would be worth my while to buy? Any help would be > greatly appreciated as this is my last test to complete my CCNP. > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Can't telnet- Can't ping
You can search the card catalog using Telnet at many public and university libraries. Tell the bureaucrats you need this feature to do research. &;-) A search on Telnet resources in www.google.com found a bunch of other databases reachable via Telnet. You need ping for troubleshooting access to your customers, vendors, resellers, etc. Good luck, Priscilla At 02:53 PM 1/3/01, A.Strobel wrote: >Working for an enterperise has its disadvantages. Based on the new policy, now >I (network engineer) am unable to ping the outside world nor telnet to the >outside world. > >Although my main job is taking care of Cisco gear inside the enterprise, I >hate the fact that someone with a half brain sitting at a proxy server >dictates me what I can do and what I can not do. > >I might have a chance in removing these restrictions if I can justify that I >need to ping or telnet the ouside world. >Can you guys think of any justification? > >TIA, >A. Strobel > > > > > > > >Get free email and a permanent address at http://www.amexmail.com/?A=1 > >_ >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Priscilla Oppenheimer http://www.priscilla.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Can't telnet- Can't ping
Are you responsible for traffic leaving your network? If so, how else would you test connectivity to ensure your network was working properly. Pinging or telneting in is one thing, restricting pings or telnets out is the work of an NT moron that doesn't understand the protocols. andy On 3 Jan 2001, A.Strobel wrote: > Working for an enterperise has its disadvantages. Based on the new policy, now > I (network engineer) am unable to ping the outside world nor telnet to the > outside world. > > Although my main job is taking care of Cisco gear inside the enterprise, I > hate the fact that someone with a half brain sitting at a proxy server > dictates me what I can do and what I can not do. > > I might have a chance in removing these restrictions if I can justify that I > need to ping or telnet the ouside world. > Can you guys think of any justification? > > TIA, > A. Strobel > > > > > > > > Get free email and a permanent address at http://www.amexmail.com/?A=1 > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
