Catalyst 5000 Advice?

2001-03-03 Thread Mark Holloway

Since ATM Lane is off the exam, what is the reasoning for having the
Catalyst 5000 other than 802.1q and ISL Vlans?  Not to sound skimpy, but the
Cisco Interactive Mentor "LAN Switching" simulates the Catalyst 5000 series
and part of the objective is to configure ISL and 802.1q, among many other
things.  I know it sounds cheezy, but maybe now that ATM Lane is gone we
don't need to actually buy a Catalyst 5000 anymore?   The C.I.M. indicates
that it is preperation for CCIE Candidates.

Assuming the worst, and I need a Catalyst 5000 series switch, would a
Catalyst 2926 be a waste (not the 2926XL)?  I don't know if it allows the
configuration of ISL and 802.1q .. plus is there any way to test it?  On the
Catalyst 6500 with a Layer 3 blade you can route, but with a Layer 2 blade
you can only perform Layer 2 switching.  You can assign different ports to
different VLANs, but something else must still perform the routing, such as
a 7200 with multiple ethernet interfaces.

Regards,
Mark



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CID beta

2001-03-03 Thread F.G.J. Ruiz-Alaniz

Well, the Foundation 2 beta exam took 13 weeks to appear on galton and
it took at least another 3 weeks to get my score report from Sylvan,
which they mailed to my office address instead of my home address...

I have never experienced a longer wait, and I've done CompTIA (8
weeks), Novell (one time 2 weeks, but usually 4-6) , & Microsoft betas
(6-8 weeks) ...


On 3 Mar 2001 11:05:01 -0500, [EMAIL PROTECTED] ("GNOME") wrote:

>I think have to wait till 15 Mar..exactly 12 weeks!!!
>
>does anyone passed on past experience how long will a beta exam result be
>out?
>
>
>Fomes Iain <[EMAIL PROTECTED]> wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> Anyone got their results yet?
>> *
>> DISCLAIMER:   The information contained in this e-mail may be confidential
>> and is intended solely for the use of the named addressee.  Access,
>copying
>> or re-use of the e-mail or any information contained therein by any other
>> person is not authorized.  If you are not the intended recipient please
>> notify us immediately by returning the e-mail to the originator.
>>
>> _
>> FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>>
>
>
>_
>FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Did I luck out or what!

2001-03-03 Thread John Neiberger

I'm in the beginning stages of throwing together a home lab (otherwise known
as electric heating.)  All I had to mess around with before was a 2501 with
one broken serial port.

Today an acquaintance gave me--for free--two Cisco 4000 routers (one with a
2-port serial module, the other is empty and running 9.1!!), a 3COM
Netbuilder router, and a AT&T 16-port hub.  Heck of a deal, huh?  Well, the
Cisco stuff is a good deal.  Hubs are cheaper than dirt nowadays, and the
3com POS is annoying.  To say that its user interface was not intuitive
would be kind.  It appears that it can do a lot, I just don't know if I have
the patience to decipher the CLI!  

Anyway, I now need to find a couple more cables and some network modules for
the 4000's.  Do any of you know where I can get these *really* cheap?  Yes,
I'm becoming a tightwad, but only because I married one.

I need another 2-port serial module, at least one ethernet module, and
perhaps even a fast ethernet module. 

Any thoughts on who to call?

Thanks,
John





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Skip the HEXquestions--BCMSN?

2001-03-03 Thread Larry Lamb

BCMSN gives you an exhibit with all the base-10 to base-16 conversions. So
it's pretty simple to make the IP into a multicast MAC.

"rtc" wrote in message ...
should I even bother doing the hex questions
on BCMSN?
I know and understand binary, hex,
multicast MAC address (00-00-05e +13 lsbs) very well,hex conversions
but why waste the time on the test doing
all the messy hEx for 5 minutes?
I'm guessing only 1 hex question--wouldnt it
be better to spend this time/effort elsewhres?

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Skip the HEXquestions--BCMSN?

2001-03-03 Thread BS

If you take 5 mins, you don't really understand binary, hex . The Q
shouldn't take more than 3 mins AT MOST..

""rtc"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> should I even bother doing the hex questions
> on BCMSN?
>  I know and understand binary, hex,
> multicast MAC address (00-00-05e +13 lsbs) very well,hex conversions
> but why waste the time on the test doing
> all the messy hEx for 5 minutes?
>  I'm guessing only 1 hex question--wouldnt it
> be better to spend this time/effort elsewhres?
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Skip the HEXquestions--BCMSN?

2001-03-03 Thread rtc

should I even bother doing the hex questions
on BCMSN?
 I know and understand binary, hex,
multicast MAC address (00-00-05e +13 lsbs) very well,hex conversions
but why waste the time on the test doing
all the messy hEx for 5 minutes?
 I'm guessing only 1 hex question--wouldnt it
be better to spend this time/effort elsewhres?

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Difference between Rendezvous Point ,Designated Router

2001-03-03 Thread username

Assuming you are talking about PIM-SM , then  where you have two routers (PIM-SM)
connected to a shared network with a receiver,  a single DR should be chosen  for the
purpose of sending "joins" to the RP in order to build the share tree for that group.
If both routers sent joins to the RP for the group you would have duplicate paths and
the host/reciever would receive duplicate multicast traffic.

PIM-SM is centered on a single, unidirectional shared tree.  The root of the tree is 
the
RP.  In a shared tree, sources must send the multicast traffic to the root (RP) for the
traffic to reach all receivers.

Here is two sites for your reading pleasure.  Also the Cisco Press book by Beu 
Willamson
is pretty good.
http://www.cisco.com/warp/public/732/Tech/multicast/index.html
ftp://ftp-eng.cisco.com/ipmulticast.html

"Bradley J. Wilson" wrote:

> Er...duh, the DR in a multicast environment.  Sorry, brain lock there.
>
> The DR is again an element on a broadcast network.  The DR acts as the
> "manager" for that broadcast network if and when it is the upstream network
> from another router.  The downstream router sends its join/leave requests to
> the DR, regardless of the multicast group it is joining or leaving.  This
> streamlines things from the downstream router's perspective, since it only
> needs to interact with one other router across this broadcast network.  But
> the DR may not be the direct path to the source of the multicast stream, so
> the DR might have to forward the request to the correct upstream router
> across the same network.
>
> I'm getting my info from Maufer's "Deploying IP Multicast in the
> Enterprise" - which isn't Cisco-specific.  Maybe someone else could post
> quotes from the Cisco Press books or CCO about the difference.
>
> BJ
>
> - Original Message -
> From: Bradley J. Wilson
> To: cisco
> Sent: Saturday, March 03, 2001 5:07 PM
> Subject: Re: Difference between Rendezvous Point ,Designated Router
>
> The rendezvous point is an element in a multicasting environment - can't
> recall which protocol off the top of my head, it's probably either PIM-DM
> or -SM.
>
> The designated router is an element of OSPF on a broadcast network
> (ethernet, token ring, etc.).  The other routers on the network form their
> adjacencies with the DR, and the DR makes sure that every router on the
> broadcast network have the same LSDB.
>
> BJ
>
> - Original Message -
> From: rtc
> To: Cisco ; CISCO GROUPSTUDY
> Cc: Cisco ; CISCO GROUPSTUDY
> Sent: Saturday, March 03, 2001 4:48 PM
> Subject: Difference between Rendezvous Point ,Designated Router
>
>   what is the Difference between Rendezvous Point and Designated Router?
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How would you Explain it.

2001-03-03 Thread Jack

PacBell is also offering a "GigaMan" service in selected citiies
Priscilla Oppenheimer wrote in message
<[EMAIL PROTECTED]>...
>We have public IP addresses, our own DNS servers, Web servers, etc. The
>only sort of strange thing is that the layer-two LAN crosses the MAN, if
>that makes any sense. At our site we just have a two-port switch. A
>single-mode fiber link connects our switch to a router port at the
>provider's site across town. The provider is connected to the Internet.
>
>(When the provider said he was installing a two-port switch, I had to laugh
>and ask, isn't that a bridge??)
>
>Priscilla
>
>At 09:09 AM 3/3/01, Kenneth wrote:
>>I'm curious, if you're connected to a switch, then you don't have control
>>over your public IP Addresses then such as DNS,... or is this mostly used
>>for office to office links as opposed to a gateway to the internet?
>>
>>I guess the reason i'm wondering is we currently have an entire class C
and
>>we host our own DNS, web servers, ftp,... and I'm curious as to how this
>>would affect our routings if we do go with such a service.
>>
>>
>>Priscilla Oppenheimer <[EMAIL PROTECTED]> wrote in message
>>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> > We upgraded our T1 WAN link that cost $1500 per month to a single-mode
>> > fiber-optic 10-Mbps Ethernet MAN link that costs $700 per month. We
just
>> > have a switch at our site, no router even. Seriously. Our local
>> > municipality has a Gigabit Ethernet single-mode fiber-optic ring
running
>> > around town, and they lease capacity on it. The city is connected to
the
>> > Internet via a Cisco 7200 and a Sprint T3 link. We piggy back onto
that.
>> >
>> > And I'm in Southern Oregon, a supposedly rural area. It's happening in
>> > other towns also. Sometimes I forget how lucky we are!
>> >
>> > Priscilla
>> >
>> > At 02:28 PM 3/2/01, Howard C. Berkowitz wrote:
>> > > >I have a customer who wants to upgrade his 128K ISDN point to point
>> > > >connections to at lease a 10mbps connection.  He is thinking along
the
>>lines
>> > > >of LAN technologies.  He idea connection is a 1gb connection.  How
>>would go
>> > > >about explaining to this guy that he is out of his mind without
>>damaging his
>> > > >ego.  His the IT manager and thinks he's knowledgeable about
networks.
>> > >
>> > >I wouldn't say he is totally out of his mind, if he's in a geographic
>> > >area served by one of the bleeding edge Optical Ethernet providers.
>> > >Very rare so far, but there are 100 or 1000 Mbps physical facilities
>> > >over which the user pays for the amount of bandwidth he needs.  Most
>> > >of the ones I'm aware of are in Europe.
>> > >
>> > >In the vast majority of locations, he is out of his mind.  Assuming
>> > >he needs 10 Mbps, your choices include inverse multiplexed T1 and
>> > >ATM, fractional T3, or 10 Mbps over OC-3 facilities. I had a design
>> > >not too long ago where we were able to bring in some of the voice as
>> > >well, and found that OC-3 was quite cost-effective.  It ran into a
>> > >7200.  A 3600 is probably the lowest end router to consider.
>> > >
>> > > >
>> > > >btw...
>> > > >
>> > > >I've gone ahead and gotten quotes on a t1 and t3 lines.  I know I
can
>>use a
>> > > >2600 for the T1 connection but what is there a adapter for taking a
>>clear
>> > > >channel T3 for the 2600 or do I have to look at a 7000 series
router.
>> > > >
>> > > >Thanks,
>> > > >
>> > > >Keith Townsend
>> > > >www.townsendconsulting.com
>> > >\
>> > >
>> > >_
>> > >FAQ, list archives, and subscription info:
>> > >http://www.groupstudy.com/list/cisco.html
>> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>> >
>> >
>> > 
>> >
>> > Priscilla Oppenheimer
>> > http://www.priscilla.com
>> >
>> > _
>> > FAQ, list archives, and subscription info:
>>http://www.groupstudy.com/list/cisco.html
>> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>> >
>>
>>
>>_
>>FAQ, list archives, and subscription info:
>>http://www.groupstudy.com/list/cisco.html
>>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>
>
>
>Priscilla Oppenheimer
>http://www.priscilla.com
>
>_
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Can't get console on a Cisco WS-C1924C-A

2001-03-03 Thread Marco Rodrigues

Hello group,

I recently got a hold of a Catalyst WS-C1924C-A. I want to begin the
process of upgrading it to Enterprise edition. Problem is I can't get a
console on the switch. My original problem was getting something on my
HyperTerm/SecureCRT/tips/minicom whatever. I use to get garbage characters.
>From recent threads I read that I have to get a hold of a null modem cable
which I have. Problem now is when I type something on the emulator I
actually see my characters being typed in but I get no output on the screen.
The terminal setting are fine (9600 8N1).  Should I be rebooting the switch
and doing something before startup? I've tried holding down the mode button
as it starts up and nothing.  The documentation doesn't seem to specify
anything specific so that's what I'm asking here.

Thanks in advance!


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Any ethernet Cabling questions on BCMSN Exam?

2001-03-03 Thread Larry Lamb

I don't remember any, but it's covered in the book so I'd suspect it's fair
game.

"rtc" wrote in message ...
such as 100BaseTX,100Base T4,1000LX and thier ranges?

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Flash RAM erro - Cisco 2500

2001-03-03 Thread John Hardman

Hi

Chances are pretty good that your boot proms do not recognize the newer
flash. Call TAC and order new ones, they are free plus shipping.

HTH
--
John Hardman CCNP MCSE+I


""Ken W. Alger"" <[EMAIL PROTECTED]> wrote in message
97sf8d$6eg$[EMAIL PROTECTED]">news:97sf8d$6eg$[EMAIL PROTECTED]...
> I have a 2505, IOS 10.2(6) which I am attempting to add more Flash RAM to
in
> order to run a more current IOS.  I purchased an 8 MB chip, but when I
> install it and boot the router up I get the following error that doesn't
> occur with the current 4 MB chip:
>
> ERR:  Invalid chip id 0x80B5(reversed: 0x1AD) detected in system flash
>
> Any ideas as to what this means as I have not encountered this one before.
>
> Thanks,
> Ken
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Route-map

2001-03-03 Thread Brandon Peyton

You should be able to run BGP with your 2611, just wont be able to
accept full routes.

If you upgrade to 128 you could, you might be able to handle partial
routes if you have 64.

Brandon

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jacek Malinowski
Sent: Sunday, March 04, 2001 1:27 AM
To: [EMAIL PROTECTED]
Subject: Route-map


I have a big problem with the route-map command.
My network looks like :

ISP A ISP B
  | |
  | |
  | |
  --s0--(router 2611)--- s1--

configuration (hypothetical):

interface Serial0
 ip address 1.1.1.1 255.255.255.0
  !
interface Serial1
 ip address 100.100.100.100 255.255.255.0
!
interface FastEthernet0
 ip address 10.0.0.222 255.255.255.0 secondary
 ip address 192.168.1.1 255.255.255.0
 ip policy route-map POLICY
 no ip directed-broadcast
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial1
no ip http server
!
access-list 2 permit 10.0.0.0 0.0.0.255
route-map POLICY permit 10
 match ip address 2
 set ip next-hop 1.1.1.1

traffic from the network 10.0.0.0 should go through serial 0 and ISP A
traffic from the network 192.168.1.0 should go through serial 1 and ISP B.

I don't understand how is it possible, that ping from 10.0.0.0 goes through
serial 1 and return through serial 0.
there is the policy on the ethernet interface.

I can't run BGP :( because my router is only 2611




_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Any ethernet Cabling questions on BCMSN Exam?

2001-03-03 Thread rtc

such as 100BaseTX,100Base T4,1000LX and thier ranges?

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Flash RAM erro - Cisco 2500

2001-03-03 Thread Ken W. Alger

I have a 2505, IOS 10.2(6) which I am attempting to add more Flash RAM to in
order to run a more current IOS.  I purchased an 8 MB chip, but when I
install it and boot the router up I get the following error that doesn't
occur with the current 4 MB chip:

ERR:  Invalid chip id 0x80B5(reversed: 0x1AD) detected in system flash

Any ideas as to what this means as I have not encountered this one before.

Thanks,
Ken


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



***Flaws in IOS 11.x and 12.x***

2001-03-03 Thread Deepak Sharma

"Cisco fixes flaw in IOS software"

Cisco Systems said there is a vulnerability in all of the 11.x and 12.x
versions
of its Internetworking Operating System software that could allow an
attacker to
intercept and modify TCP traffic going to and from routers and switches
running
the IOS software. Cisco officials said the company has fixes for all of
the
affected versions and has made them available to all of its customers.

SOURCE: eWeek
http://www.zdnet.com/eweek/stories/general/0,11011,2691594,00.html


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: [Re: Windows NT DHCP with multiple Scopes]

2001-03-03 Thread R. Scott Sutor

Two factors converge to make this work.

1.) The IP Helper address
Converts the broadcast request to a unicast.  The destination being
the helper address, and the source address being the Router interface
that received the request *Very Important*

2.) The NT server is configured with one interface/IP address.  A scope
is created for the directly connected network, and a scope is created
for the network on the other side of the router.  These two scopes are
bound together as one superscope. (see NT/DHCP docs for how, like all
things NT, it's just a few button-pushes).

It works in this way.  The DHCP server will assign addresses from a
scope which corresponds to the directly connected network on which the
receiving interface sits.  The superscope binds the secondary network's
scope to the directly connected networks scope, in effect, saying "it's
ok to assign addresses from this scope to requests on this other
directly connected network".

Now, to answer your question.  The source address of the forwarded
request is on the other net (remember the changed source address
above?).  In this way, the NT server knows that it should assign an
address from the other nets pool.

HTH
-S.

Larry Lamb wrote:
> 
> You'll only want the 1 IP on the server if the local network has 1 IP range.
> If memory serves me right, you just add a 2nd scope and setup the ip
> helper-address to the server.  It acts as the DHCP relay and the server will
> know the request came from the other network.  Hopefully someone will add
> something additional if this isn't correct.  It's been ages since I've dealt
> with this.
> 
> "Hatim badr" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Thank you for your response
> >
> > I want tp put 2 scopes in that server, which means that I have 1 IP
> address or
> > evan two but how can I force a client to take from specific scope
> >
> > Thanks
> >
> >
> > "Larry Lamb" <[EMAIL PROTECTED]> wrote:
> > As long as you have a router to move the traffic between the two VLANs,
> you
> > can use the ip helper-address to forward the broadcast to a known unicast
> > address for the DHCP server.
> >
> > "Hatim badr" <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Dear All,
> > >
> > > I'm using Windows NT DHCP server with 2 scopes in that server. I'm
> > creating 2
> > > VLANs. To be able to use the DHCP with this situation , I'm using 2 NIC
> > card ,
> > > one for each VLAN.
> > >
> > > I wonder if I can use only one NIC card and the IP HELPER ADDRESS with
> it!
> > > given that I want to use the same structure, I mean each VLAN has its
> own
> > > scope.
> > >
> > > Thanks
> > >
> > > Hatim
> > >
> > >
> > > 
> > > Get free email and a permanent address at http://www.netaddress.com/?N=1
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
> > 
> > Get free email and a permanent address at http://www.netaddress.com/?N=1
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> 
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How would you Explain it.

2001-03-03 Thread Priscilla Oppenheimer

We have public IP addresses, our own DNS servers, Web servers, etc. The 
only sort of strange thing is that the layer-two LAN crosses the MAN, if 
that makes any sense. At our site we just have a two-port switch. A 
single-mode fiber link connects our switch to a router port at the 
provider's site across town. The provider is connected to the Internet.

(When the provider said he was installing a two-port switch, I had to laugh 
and ask, isn't that a bridge??)

Priscilla

At 09:09 AM 3/3/01, Kenneth wrote:
>I'm curious, if you're connected to a switch, then you don't have control
>over your public IP Addresses then such as DNS,... or is this mostly used
>for office to office links as opposed to a gateway to the internet?
>
>I guess the reason i'm wondering is we currently have an entire class C and
>we host our own DNS, web servers, ftp,... and I'm curious as to how this
>would affect our routings if we do go with such a service.
>
>
>Priscilla Oppenheimer <[EMAIL PROTECTED]> wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > We upgraded our T1 WAN link that cost $1500 per month to a single-mode
> > fiber-optic 10-Mbps Ethernet MAN link that costs $700 per month. We just
> > have a switch at our site, no router even. Seriously. Our local
> > municipality has a Gigabit Ethernet single-mode fiber-optic ring running
> > around town, and they lease capacity on it. The city is connected to the
> > Internet via a Cisco 7200 and a Sprint T3 link. We piggy back onto that.
> >
> > And I'm in Southern Oregon, a supposedly rural area. It's happening in
> > other towns also. Sometimes I forget how lucky we are!
> >
> > Priscilla
> >
> > At 02:28 PM 3/2/01, Howard C. Berkowitz wrote:
> > > >I have a customer who wants to upgrade his 128K ISDN point to point
> > > >connections to at lease a 10mbps connection.  He is thinking along the
>lines
> > > >of LAN technologies.  He idea connection is a 1gb connection.  How
>would go
> > > >about explaining to this guy that he is out of his mind without
>damaging his
> > > >ego.  His the IT manager and thinks he's knowledgeable about networks.
> > >
> > >I wouldn't say he is totally out of his mind, if he's in a geographic
> > >area served by one of the bleeding edge Optical Ethernet providers.
> > >Very rare so far, but there are 100 or 1000 Mbps physical facilities
> > >over which the user pays for the amount of bandwidth he needs.  Most
> > >of the ones I'm aware of are in Europe.
> > >
> > >In the vast majority of locations, he is out of his mind.  Assuming
> > >he needs 10 Mbps, your choices include inverse multiplexed T1 and
> > >ATM, fractional T3, or 10 Mbps over OC-3 facilities. I had a design
> > >not too long ago where we were able to bring in some of the voice as
> > >well, and found that OC-3 was quite cost-effective.  It ran into a
> > >7200.  A 3600 is probably the lowest end router to consider.
> > >
> > > >
> > > >btw...
> > > >
> > > >I've gone ahead and gotten quotes on a t1 and t3 lines.  I know I can
>use a
> > > >2600 for the T1 connection but what is there a adapter for taking a
>clear
> > > >channel T3 for the 2600 or do I have to look at a 7000 series router.
> > > >
> > > >Thanks,
> > > >
> > > >Keith Townsend
> > > >www.townsendconsulting.com
> > >\
> > >
> > >_
> > >FAQ, list archives, and subscription info:
> > >http://www.groupstudy.com/list/cisco.html
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
> > 
> >
> > Priscilla Oppenheimer
> > http://www.priscilla.com
> >
> > _
> > FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Priscilla Oppenheimer
http://www.priscilla.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN with 1 Spid

2001-03-03 Thread Craig Columbus

As in the areas of the country that assign you 64k ISDN service?  In that 
case, you'll still need two SPIDS if you're using BRI; the 64k restriction 
just means that the provider doesn't support the multilink function.  Enter 
both SPIDs in your config.

With that said, what is the specific problem that you're encountering?  Is 
it that the interface won't come up?  Is it that the call won't dial?  Is 
it that the call dials, but won't authenticate?  Try using some of the more 
common debug commands for this scenario:  debug isdn events, debug isdn 
q931, debug isdn q921, debug ppp authentication, debug ppp negotiation, 
etc..  Only turn up the ones you need or you'll have so much information 
that it'll be difficult to sort through it all.

Good luck,
Craig

At 05:31 PM 3/3/2001 -0600, you wrote:
>What if you only one have B channel?
>
>""J Roysdon"" <[EMAIL PROTECTED]> wrote in message
>97q345$os1$[EMAIL PROTECTED]">news:97q345$os1$[EMAIL PROTECTED]...
> > Custom Centrex (sp?) ISDN groups often use single or even no SPIDs.  Try
> > specifying the SPID twice, or not at all.  Basically, the SPID is assigned
> > to both B channels.
> >
> > --
> > Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> > List email: [EMAIL PROTECTED]
> > Homepage: http://jason.artoo.net/
> > Cisco resources: http://r2cisco.artoo.net/
> >
> >
> > ""John"" <[EMAIL PROTECTED]> wrote in message
> > 97pbsf$4n7$[EMAIL PROTECTED]">news:97pbsf$4n7$[EMAIL PROTECTED]...
> > > I have included a config I am deploying on a hub-and-spoke deployment
>via
> > > frame-relay.  I am having problems getting the ISDN interface to come up
> > > with only one spid.  I do not have a strong background in ISDN and would
> > > appreciate assistance to tell me where I am going wrong in my config.
> > >
> > > Thank you in advance for your help.
> > >
> > > Regards,
> > >
> > > John Huston
> > > [EMAIL PROTECTED]
> > >
> > > begin config===
> > >
> > > service timestamps debug uptime
> > > service timestamps log uptime
> > > service password-encryption
> > > !
> > > hostname me
> > > !
> > > enable password you
> > > !
> > > logging buffered 4096 debugging
> > > !
> > > username test password 0 test
> > > username me password 0 you
> > > !
> > > !
> > > !
> > > !
> > > memory-size iomem 25
> > > ip subnet-zero
> > > no ip domain-lookup
> > > ip dhcp excluded-address x.x.x.x x.x.x.x
> > > !
> > > ip dhcp pool primary
> > >network x.x.x.x x.x.x.x
> > >netbios-name-server x.x.x.x
> > >default-router x.x.x.x
> > >lease 5
> > > !
> > > isdn switch-type basic-ni
> > > !
> > > !
> > > !
> > > interface Serial0
> > >  ip unnumbered FastEthernet0
> > >  encapsulation frame-relay
> > >  no fair-queue
> > >  service-module t1 timeslots 23-24
> > >  frame-relay map ip x.x.x.x xxx broadcast
> > >  no shut
> > > !
> > >
> > > interface BRI0
> > >  description Backup ISDN interface
> > >  ip address x.x.x.x x.x.x.x
> > >  encapsulation ppp
> > >  dialer idle-timeout 30
> > >  dialer string xxx
> > >  dialer load-threshold 25 outbound
> > >  dialer-group 1
> > >  isdn switch-type basic-ni
> > >  isdn spid1 xxx
> > >  no cdp enable
> > >  ppp authentication pap callin
> > >  ppp pap sent-username me password you
> > >  no shut
> > > !
> > > interface FastEthernet0
> > >  ip address x.x.x.x x.x.x.x
> > >  no ip route-cache
> > >  speed auto
> > >  no fair-queue
> > >  no shut
> > > !
> > > router eigrp 20
> > >  network x.x.x.x
> > > !
> > > ip classless
> > > no ip http server
> > > !
> > > !
> > > map-class dialer 64k
> > > access-list 101 deny   eigrp any any
> > > access-list 101 permit ip any any
> > > dialer-list 1 protocol ip list 101
> > > !
> > > line con 0
> > >  exec-timeout 0 0
> > >  transport input none
> > > line aux 0
> > > line vty 0 4
> > >  password xxx
> > >  login
> > > !
> > > no scheduler allocate
> > > end
> > >
> > >
> > >
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Ethernet MAC <--> Token Ring MAC

2001-03-03 Thread Craig Columbus

Nope...you're right on the money...and with a pretty good explanation too!

Craig

At 02:34 PM 3/3/2001 -0500, you wrote:
>1) For each byte: abcdefgh
>
>2) Stick an axis right down the middle: abcd efgh (essentially separating
>the byte into two nibbles)
>
>3) Spin the byte around the axis: hgfe dcba
>
>4) Do this for each byte in the octet separately.  The order of the bytes
>doesn't change: 1.2.3.4 -> 1.2.3.4
>
>So, your example:
> .  1100.0110 0101.0100 0011.0010 0001 (which has five bytes,
>for some reason, so I'll ignore the last one)
>
>would translate into:
> . 0011 . 1010 0110. 1100 0010
>
>That's about it - I think.  If I'm wrong, someone please let me know - I've
>just started studying for the CCIE written, and this is all from memory of
>Rossi's paper (about a week ago :-).
>
>BJ
>
>
>
>- Original Message -
>From: Michael Snyder
>Newsgroups: groupstudy.cisco
>To: [EMAIL PROTECTED]
>Sent: Saturday, March 03, 2001 1:45 PM
>Subject: Ethernet MAC <--> Token Ring MAC
>
>
>What is the bit by bit method of going from a Ethernet Mac address to a
>Tokenring Mac address?
>
>I've read the paper's, I still can't do it, and I've been doing HEX for
>years.
>
>
>For example
>
>00.00.0c.65.43.21 Ethernet MAC would be?
>
> .  1100.0110 0101.0100 0011.0010 0001
>
>Next step is?
>
>a) reverse complete bit sequence?  1000 0100.1100 0010.1010 0110. 0011 .
>.
>b) reverse sequence in groups of four? 0001 0010.0011 0100.0101 0110.1100
> 
>c) Transpose bits in groups of four, per byte?  a.b ->b.a (seen this one a
>lot in programing)
>
>help?
>
>
>
>
>
>""perryb"" <[EMAIL PROTECTED]> wrote in message
>007901c0a011$52ec4d00$1e00a8c0@GOLDIE1">news:007901c0a011$52ec4d00$1e00a8c0@GOLDIE1...
> > Hi all,
> >
> > I'm goinf to diverge from the star/bus issue in Mr. Rossi's paper, and
> > direct everyones attention to what I believe could be a mistake (clerical
> > error) in the paper on the DLSW piece.
> >
> > Directly underneath Mr. Rossi's very first DLSW diagram, you see the RIF
> > values for "Router_A," and "Router_B."  Isn't the RIF show for "Router_B"
> > just a tad bit inverted and incorrect ?  Shouldn't it read
>"0630.00a1.0230"
> > instead?  The reason that I say this is because I had a "not so different"
> > question on a recent exam.  On this exam there were no "none of the above"
> > responses and only two possible valid RIFs.  The only plausable response
>was
> > in the order that I describe above.
> >
> >
> > Forgive me if this has already been pointed out before.
> > - Original Message -
> > From: <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Monday, February 26, 2001 6:45 AM
> > Subject: RE: Lou Rossi's Token Ring paper
> >
> >
> > > I agree with Nigel. It should be a physical star and a logical ring.
> > >
> > > Cletus Ugwu
> > >
> > > -Original Message-
> > > From: Nigel van Tura [mailto:[EMAIL PROTECTED]]
> > > Sent: Monday, February 26, 2001 7:29 AM
> > > To: Bradley J. Wilson; [EMAIL PROTECTED]
> > > Subject: RE: Lou Rossi's Token Ring paper
> > >
> > >
> > > But Bradley
> > >
> > > If we connect all to the MAU as a central hub then it becomes a physical
> > > star and a logical ring inside the MAU.
> > >
> > > Or what ?
> > > Nigel van Tura
> > >
> > > -Original Message-
> > > From: Bradley J. Wilson [mailto:[EMAIL PROTECTED]]
> > > Sent: 24 February 2001 01:50
> > > To: cisco
> > > Subject: Lou Rossi's Token Ring paper
> > >
> > >
> > > I'm sitting here reading Lou Rossi's Token Ring paper, and right off the
> > bat
> > > I have a question:
> > >
> > > He says that token ring is "a physical ring and a logical bus" - but
>isn't
> > > this backward?  Isn't it a physical bus and a logical ring?  We're not
> > > physically connecting stations together in a ring - they're all plugged
> > into
> > > a MAU and the "ring" is a logical entity inside the MAU, isn't it?
> > >
> > > Thanks in advance,
> > >
> > > BJ
> > >
> > >
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
>_
>FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Non

Re: **Login Scripts (Long)

2001-03-03 Thread Adam Burgess



> I have users in branches all across the company that logon to other
> BDC's in other city's.  Eg. Someone in vancouver logging into say
> montreal.
> Does anyone know of a port that I can block that off of each branch
> router ( im currently using 3661's ) to stop that.  Or a Win2k setting I
> can modify to specify what server to login to?.I know i can probably
> specify that in that in the login script, if so, What command do I use?
> Or a registry setting in Win2k/9x


I assume that you are using NT 4 servers in the backend?  If you are using
Win2K servers, you can make the NT/9x clients Active Directory aware by
installing DSClient.exe, which will 'encourage' the clients to authenticate
with their local DC before running over the WAN to a random DC.

There is no real way to control what DC authenticates a client in the NT 4
world, and you can't block a logon script 'port' as the client runs the
logon script using a UNC path (ie. \\DCNAME\netlogon\yourscript.bat).  The
only way to stop this would be to block all file sharing traffic over the
link (which I assume you don't).

A way around the problem is to use a batch file that allows initial
authentication to occur at any DC, but then forces the logon script to
execute from a local DC.  The basic idea is to run ipconfig on the client,
which will output the IP address, network mask and default router.  These
settings are saved to a text file and can be searched the matches on the
default router value can be made to determine the LAN that the user is
logging in from.

Sample script:

@echo off

rem The CFG_SVR is your 'default' DC, probably the PDC or at least a DC
rem closest to the 'centre' of your NT network.  This is an initial value to
rem ensure that the script always has a server to contact.

  set CFG_SVR=DEFDC

rem If Windows 95 - need to copy down ipconfig.exe in order to
rem complete the following task.  Always do the initial copy
rem from CFG_SVR.  All other OS's have a compatible copy of
rem ipconfig.exe installed with their TCP/IP stack.

  ver | find /I "95"
  if not errorlevel 1 goto 95_98
  goto ALL_SYS

:95_98

  if not exist %windir%\ipconfig.exe copy \\LOGON5\netlogon\bin\ipconfig.exe
%windir%\ipconfig.exe

:ALL_SYS

  net use /persistent:no  > NUL

rem Find the current subnetwork by checking the output from ipconfig
rem against a list of known default router addresses

  ipconfig > %windir%\ipconfig.logon

  type %windir%\ipconfig.logon | find /I "10.1.1.254" > NUL
  if not errorlevel 1 goto SITE1

  type %windir%\ipconfig.logon | find /I "10.1.1.254" > NUL
  if not errorlevel 1 goto SITE2

  goto SLOW_NET

:SITE1

rem In this section you set the CFG_SVR variable to a DC at the specific
site
rem that you are trying to control the logon script for.  Then once you have
rem set the variable, you can execute a logon script on a specific server
that
rem has been created for this site only.  Remember that the CFG_SVR
rem variable will be available to the new batch file (in this case
SITE1.bat)
rem so you can use it to launch other processes on a specific server in a
rem controlled fashion.

  set CFG_SVR=SITE1DC  echo.
  echo Current LAN:   SITE1
  echo LAN Logon Server:  %CFG_SVR%

  start /wait \\%CFG_SVR%\netlogon\SITE1.bat

  goto RUN_MAIN

:SITE2

  set CFG_SVR=SITE2DC
  echo Current LAN:   SITE2
  echo LAN Logon Server:  %CFG_SVR%

  start /wait \\%CFG_SVR%\netlogon\SITE1.bat

  goto RUN_MAIN

:SLOW_NET

rem This part of the script is just a handler for unknown
rem networks or in the event of an error.

  set CFG_SVR=DEFDC
  echo.
  echo Current LAN:   Remote or Unknown
  echo LAN Logon Server:  %CFG_SVR%
  echo
  echo NOTICE:
  echo.
  echo You have connected to the network
  echo from an unknown or undefined location
  echo.
  echo Please call the Help Desk for Assistance.
  echo.
  pause
  goto RUN_MAIN

:RUN_MAIN

  echo Script Completed

  set CFG_SVR=

Hope this helps.

Regards

Adam Burgess
Brisbane, Australia

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN with 1 Spid

2001-03-03 Thread John

What if you only one have B channel?

""J Roysdon"" <[EMAIL PROTECTED]> wrote in message
97q345$os1$[EMAIL PROTECTED]">news:97q345$os1$[EMAIL PROTECTED]...
> Custom Centrex (sp?) ISDN groups often use single or even no SPIDs.  Try
> specifying the SPID twice, or not at all.  Basically, the SPID is assigned
> to both B channels.
>
> --
> Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> List email: [EMAIL PROTECTED]
> Homepage: http://jason.artoo.net/
> Cisco resources: http://r2cisco.artoo.net/
>
>
> ""John"" <[EMAIL PROTECTED]> wrote in message
> 97pbsf$4n7$[EMAIL PROTECTED]">news:97pbsf$4n7$[EMAIL PROTECTED]...
> > I have included a config I am deploying on a hub-and-spoke deployment
via
> > frame-relay.  I am having problems getting the ISDN interface to come up
> > with only one spid.  I do not have a strong background in ISDN and would
> > appreciate assistance to tell me where I am going wrong in my config.
> >
> > Thank you in advance for your help.
> >
> > Regards,
> >
> > John Huston
> > [EMAIL PROTECTED]
> >
> > begin config===
> >
> > service timestamps debug uptime
> > service timestamps log uptime
> > service password-encryption
> > !
> > hostname me
> > !
> > enable password you
> > !
> > logging buffered 4096 debugging
> > !
> > username test password 0 test
> > username me password 0 you
> > !
> > !
> > !
> > !
> > memory-size iomem 25
> > ip subnet-zero
> > no ip domain-lookup
> > ip dhcp excluded-address x.x.x.x x.x.x.x
> > !
> > ip dhcp pool primary
> >network x.x.x.x x.x.x.x
> >netbios-name-server x.x.x.x
> >default-router x.x.x.x
> >lease 5
> > !
> > isdn switch-type basic-ni
> > !
> > !
> > !
> > interface Serial0
> >  ip unnumbered FastEthernet0
> >  encapsulation frame-relay
> >  no fair-queue
> >  service-module t1 timeslots 23-24
> >  frame-relay map ip x.x.x.x xxx broadcast
> >  no shut
> > !
> >
> > interface BRI0
> >  description Backup ISDN interface
> >  ip address x.x.x.x x.x.x.x
> >  encapsulation ppp
> >  dialer idle-timeout 30
> >  dialer string xxx
> >  dialer load-threshold 25 outbound
> >  dialer-group 1
> >  isdn switch-type basic-ni
> >  isdn spid1 xxx
> >  no cdp enable
> >  ppp authentication pap callin
> >  ppp pap sent-username me password you
> >  no shut
> > !
> > interface FastEthernet0
> >  ip address x.x.x.x x.x.x.x
> >  no ip route-cache
> >  speed auto
> >  no fair-queue
> >  no shut
> > !
> > router eigrp 20
> >  network x.x.x.x
> > !
> > ip classless
> > no ip http server
> > !
> > !
> > map-class dialer 64k
> > access-list 101 deny   eigrp any any
> > access-list 101 permit ip any any
> > dialer-list 1 protocol ip list 101
> > !
> > line con 0
> >  exec-timeout 0 0
> >  transport input none
> > line aux 0
> > line vty 0 4
> >  password xxx
> >  login
> > !
> > no scheduler allocate
> > end
> >
> >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: dumb Linux terminal-router question

2001-03-03 Thread Rod M Rodericks

minitab or minicom? i believe it is minicom. i use the same!

Rod


- Original Message -
From: "Roberts, Timothy" <[EMAIL PROTECTED]>
To: "'Priscilla Oppenheimer'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Friday, March 02, 2001 11:57 PM
Subject: RE: dumb Linux terminal-router question


> Yes he will.  Most distributions of Linux come with a program called
> Minitab.  It is similar to HyperTerminal.
>
> -Original Message-
> From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
> Sent: Friday, March 02, 2001 3:48 PM
> To: [EMAIL PROTECTED]
> Subject: dumb Linux terminal-router question
>
>
> Next week I'm teaching basic router configuration to some high school
> students. One of the students has a notebook computer that runs Linux.
> Assuming there is a normal serial port on the notebook, will he able to
> easily run a terminal emulator to connect to the console port on the Cisco
> routers?
>
> I know he'll be able to do Telnet once we have an initial config, but
> before we get to that point, can he config the routers in a similar
fashion
> to the HyperTerminal the Windoze users will be using?
>
> Thank-you very much for your help.
>
> Priscilla
>
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Difference between Rendezvous Point ,Designated Router

2001-03-03 Thread Kane, Christopher A.

RTC,

I'm studying for my BCMSN right now (test Monday). Coming from an ISP
background (high end routers), I'm not used to this "Campus Network" type
stuff. I'm reading Karen Webb's Cisco Press book. She mentions DRs in the
Multicast section. She states that DRs are elected on Multi-access Segments
for both PIM-SM and PIM-DM configurations. She doesn't explain it real
deeply (not like you see explanations for the DR/BDR setup of OSPF). But she
does say that the routers that are PIM enabled elect the router with the
Highest IP address as the DR for the network. In this scenario the DR is
responsible for sending out the IGMP query messages. And similar to OSPF,
you don't need a DR on point-to-point links. 

The Rendezvous Point is needed when you configure a router with PIM
sparse-mode. Unlike the DR that's used regardless of PIM-SM or PIM-DM.

I'm starting to get the feeling that the Rendezvous Point is more important
when the hosts that are part of the multicast group are widely spread out
through the network.

I'd really like to hear from someone experienced with Multicast, my exposure
to it is all book-based. This will be the weakest part of my CCNP.

Chris


-Original Message-
From: rtc [mailto:[EMAIL PROTECTED]]
Sent: Saturday, March 03, 2001 4:48 PM
To: Cisco; CISCO GROUPSTUDY
Cc: Cisco; CISCO GROUPSTUDY
Subject: Difference between Rendezvous Point ,Designated Router


  what is the Difference between Rendezvous Point and Designated Router?

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How would you Explain it.

2001-03-03 Thread Craig Columbus

I don't think it's fair to say that they don't have control of DNS or 
public IP space.  I've got a customer now leasing bandwidth in a very 
similar setup...a 10Mb fiber connection to a local switch.  These guys are 
assigned then assigned a /26 to use as they see fit.  Their DNS is 
maintained locally on the "public" side of the network.  They also have a 
router that NATs from the private internal network to the public block of IPs.
In your case, you have a /24 block available on which you host all of your 
network.  Assuming that your provider has the Ethernet MAN type service 
available, and you want them to use your current block and setup this 
service, you'd have to allocate one of your local addresses to them to use 
on their router's Ethernet interface, and then change your nodes to point 
to the new gateway.  You'd still have full control of DNS and your /24 IP 
allocation, though you'll have to work closely with the provider on policy 
decisions.
If your provider doesn't offer this service and you go with a new provider, 
you'll either have to readdress your network or implement NAT with 
non-RFC1918 addresses on your inside network (not recommended).  In either 
case, it's still possible for you to maintain control of your address 
allocations.

Craig

At 09:09 AM 3/3/2001 -0500, you wrote:
>I'm curious, if you're connected to a switch, then you don't have control
>over your public IP Addresses then such as DNS,... or is this mostly used
>for office to office links as opposed to a gateway to the internet?
>
>I guess the reason i'm wondering is we currently have an entire class C and
>we host our own DNS, web servers, ftp,... and I'm curious as to how this
>would affect our routings if we do go with such a service.
>
>
>Priscilla Oppenheimer <[EMAIL PROTECTED]> wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > We upgraded our T1 WAN link that cost $1500 per month to a single-mode
> > fiber-optic 10-Mbps Ethernet MAN link that costs $700 per month. We just
> > have a switch at our site, no router even. Seriously. Our local
> > municipality has a Gigabit Ethernet single-mode fiber-optic ring running
> > around town, and they lease capacity on it. The city is connected to the
> > Internet via a Cisco 7200 and a Sprint T3 link. We piggy back onto that.
> >
> > And I'm in Southern Oregon, a supposedly rural area. It's happening in
> > other towns also. Sometimes I forget how lucky we are!
> >
> > Priscilla
> >
> > At 02:28 PM 3/2/01, Howard C. Berkowitz wrote:
> > > >I have a customer who wants to upgrade his 128K ISDN point to point
> > > >connections to at lease a 10mbps connection.  He is thinking along the
>lines
> > > >of LAN technologies.  He idea connection is a 1gb connection.  How
>would go
> > > >about explaining to this guy that he is out of his mind without
>damaging his
> > > >ego.  His the IT manager and thinks he's knowledgeable about networks.
> > >
> > >I wouldn't say he is totally out of his mind, if he's in a geographic
> > >area served by one of the bleeding edge Optical Ethernet providers.
> > >Very rare so far, but there are 100 or 1000 Mbps physical facilities
> > >over which the user pays for the amount of bandwidth he needs.  Most
> > >of the ones I'm aware of are in Europe.
> > >
> > >In the vast majority of locations, he is out of his mind.  Assuming
> > >he needs 10 Mbps, your choices include inverse multiplexed T1 and
> > >ATM, fractional T3, or 10 Mbps over OC-3 facilities. I had a design
> > >not too long ago where we were able to bring in some of the voice as
> > >well, and found that OC-3 was quite cost-effective.  It ran into a
> > >7200.  A 3600 is probably the lowest end router to consider.
> > >
> > > >
> > > >btw...
> > > >
> > > >I've gone ahead and gotten quotes on a t1 and t3 lines.  I know I can
>use a
> > > >2600 for the T1 connection but what is there a adapter for taking a
>clear
> > > >channel T3 for the 2600 or do I have to look at a 7000 series router.
> > > >
> > > >Thanks,
> > > >
> > > >Keith Townsend
> > > >www.townsendconsulting.com
> > >\
> > >
> > >_
> > >FAQ, list archives, and subscription info:
> > >http://www.groupstudy.com/list/cisco.html
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
> > 
> >
> > Priscilla Oppenheimer
> > http://www.priscilla.com
> >
> > _
> > FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Be happy and in bliss.

2001-03-03 Thread Michael Ericcson

Cisco Certified Internetwork Expert (CCIE) status, the master builders of 
the New World of networking.

Yeah!!  That is us.  Keep working hard.  We are the future and the only 
one at that
_
Get your FREE download of MSN Explorer at http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Difference between Rendezvous Point ,Designated Router

2001-03-03 Thread Bradley J. Wilson

Er...duh, the DR in a multicast environment.  Sorry, brain lock there.

The DR is again an element on a broadcast network.  The DR acts as the
"manager" for that broadcast network if and when it is the upstream network
from another router.  The downstream router sends its join/leave requests to
the DR, regardless of the multicast group it is joining or leaving.  This
streamlines things from the downstream router's perspective, since it only
needs to interact with one other router across this broadcast network.  But
the DR may not be the direct path to the source of the multicast stream, so
the DR might have to forward the request to the correct upstream router
across the same network.

I'm getting my info from Maufer's "Deploying IP Multicast in the
Enterprise" - which isn't Cisco-specific.  Maybe someone else could post
quotes from the Cisco Press books or CCO about the difference.

BJ


- Original Message -
From: Bradley J. Wilson
To: cisco
Sent: Saturday, March 03, 2001 5:07 PM
Subject: Re: Difference between Rendezvous Point ,Designated Router


The rendezvous point is an element in a multicasting environment - can't
recall which protocol off the top of my head, it's probably either PIM-DM
or -SM.

The designated router is an element of OSPF on a broadcast network
(ethernet, token ring, etc.).  The other routers on the network form their
adjacencies with the DR, and the DR makes sure that every router on the
broadcast network have the same LSDB.

BJ

- Original Message -
From: rtc
To: Cisco ; CISCO GROUPSTUDY
Cc: Cisco ; CISCO GROUPSTUDY
Sent: Saturday, March 03, 2001 4:48 PM
Subject: Difference between Rendezvous Point ,Designated Router


  what is the Difference between Rendezvous Point and Designated Router?

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Difference between Rendezvous Point ,Designated Router

2001-03-03 Thread Bradley J. Wilson

The rendezvous point is an element in a multicasting environment - can't
recall which protocol off the top of my head, it's probably either PIM-DM
or -SM.

The designated router is an element of OSPF on a broadcast network
(ethernet, token ring, etc.).  The other routers on the network form their
adjacencies with the DR, and the DR makes sure that every router on the
broadcast network have the same LSDB.

BJ

- Original Message -
From: rtc
To: Cisco ; CISCO GROUPSTUDY
Cc: Cisco ; CISCO GROUPSTUDY
Sent: Saturday, March 03, 2001 4:48 PM
Subject: Difference between Rendezvous Point ,Designated Router


  what is the Difference between Rendezvous Point and Designated Router?

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



mega multicast question

2001-03-03 Thread rtc


Take these 3 pairs
DR VICE RP
SPARSE VICE DENSE
SHARED VICE SOURCE TREE

make the 3 sqared=9 possibilities, such as:

Explain what the Designated Router does when  sparse mode on a shared Tree?
Explain what the DR does in dense mode on a source tree?
Explain what the RP  does in dense mode on a shared tree?
etc.

after this i guess multicast would no longer be confusing

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Difference between Rendezvous Point ,Designated Router

2001-03-03 Thread rtc

  what is the Difference between Rendezvous Point and Designated Router?

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Ethernet MAC <--> Token Ring MAC

2001-03-03 Thread Bradley J. Wilson

1) For each byte: abcdefgh

2) Stick an axis right down the middle: abcd efgh (essentially separating
the byte into two nibbles)

3) Spin the byte around the axis: hgfe dcba

4) Do this for each byte in the octet separately.  The order of the bytes
doesn't change: 1.2.3.4 -> 1.2.3.4

So, your example:
 .  1100.0110 0101.0100 0011.0010 0001 (which has five bytes,
for some reason, so I'll ignore the last one)

would translate into:
 . 0011 . 1010 0110. 1100 0010

That's about it - I think.  If I'm wrong, someone please let me know - I've
just started studying for the CCIE written, and this is all from memory of
Rossi's paper (about a week ago :-).

BJ



- Original Message -
From: Michael Snyder
Newsgroups: groupstudy.cisco
To: [EMAIL PROTECTED]
Sent: Saturday, March 03, 2001 1:45 PM
Subject: Ethernet MAC <--> Token Ring MAC


What is the bit by bit method of going from a Ethernet Mac address to a
Tokenring Mac address?

I've read the paper's, I still can't do it, and I've been doing HEX for
years.


For example

00.00.0c.65.43.21 Ethernet MAC would be?

 .  1100.0110 0101.0100 0011.0010 0001

Next step is?

a) reverse complete bit sequence?  1000 0100.1100 0010.1010 0110. 0011 .
.
b) reverse sequence in groups of four? 0001 0010.0011 0100.0101 0110.1100
 
c) Transpose bits in groups of four, per byte?  a.b ->b.a (seen this one a
lot in programing)

help?





""perryb"" <[EMAIL PROTECTED]> wrote in message
007901c0a011$52ec4d00$1e00a8c0@GOLDIE1">news:007901c0a011$52ec4d00$1e00a8c0@GOLDIE1...
> Hi all,
>
> I'm goinf to diverge from the star/bus issue in Mr. Rossi's paper, and
> direct everyones attention to what I believe could be a mistake (clerical
> error) in the paper on the DLSW piece.
>
> Directly underneath Mr. Rossi's very first DLSW diagram, you see the RIF
> values for "Router_A," and "Router_B."  Isn't the RIF show for "Router_B"
> just a tad bit inverted and incorrect ?  Shouldn't it read
"0630.00a1.0230"
> instead?  The reason that I say this is because I had a "not so different"
> question on a recent exam.  On this exam there were no "none of the above"
> responses and only two possible valid RIFs.  The only plausable response
was
> in the order that I describe above.
>
>
> Forgive me if this has already been pointed out before.
> - Original Message -
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, February 26, 2001 6:45 AM
> Subject: RE: Lou Rossi's Token Ring paper
>
>
> > I agree with Nigel. It should be a physical star and a logical ring.
> >
> > Cletus Ugwu
> >
> > -Original Message-
> > From: Nigel van Tura [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, February 26, 2001 7:29 AM
> > To: Bradley J. Wilson; [EMAIL PROTECTED]
> > Subject: RE: Lou Rossi's Token Ring paper
> >
> >
> > But Bradley
> >
> > If we connect all to the MAU as a central hub then it becomes a physical
> > star and a logical ring inside the MAU.
> >
> > Or what ?
> > Nigel van Tura
> >
> > -Original Message-
> > From: Bradley J. Wilson [mailto:[EMAIL PROTECTED]]
> > Sent: 24 February 2001 01:50
> > To: cisco
> > Subject: Lou Rossi's Token Ring paper
> >
> >
> > I'm sitting here reading Lou Rossi's Token Ring paper, and right off the
> bat
> > I have a question:
> >
> > He says that token ring is "a physical ring and a logical bus" - but
isn't
> > this backward?  Isn't it a physical bus and a logical ring?  We're not
> > physically connecting stations together in a ring - they're all plugged
> into
> > a MAU and the "ring" is a logical entity inside the MAU, isn't it?
> >
> > Thanks in advance,
> >
> > BJ
> >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Looking for Catalyst 5000 parts

2001-03-03 Thread Circusnuts

Hey all- I picked up a stripped 5005 fairly reasonably...

I'm looking for:

blank shelf covers
power supply cover
Supervisor I
WS-X5213A (12 port 10/100)

Thanks
Phil

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



passed routing - THANKS!

2001-03-03 Thread Brad Beck

Hi Everyone,

I just wanted to say thanks to all the posters on this list.  I've mostly 
been a lurker on this list, but the knowledge gained from those who do post 
helped me pass BSCN with a 931.  This test was incredibly more difficult 
than both the CCNA and BCMSN tests.  I thought for sure I failed that thing!

take care,
brad


---
Brad Beck
Network Engineer
Macromedia, Inc.


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Ethernet MAC <--> Token Ring MAC

2001-03-03 Thread Michael Snyder

What is the bit by bit method of going from a Ethernet Mac address to a
Tokenring Mac address?

I've read the paper's, I still can't do it, and I've been doing HEX for
years.


For example

00.00.0c.65.43.21 Ethernet MAC would be?

 .  1100.0110 0101.0100 0011.0010 0001

Next step is?

a) reverse complete bit sequence?  1000 0100.1100 0010.1010 0110. 0011 .
.
b) reverse sequence in groups of four? 0001 0010.0011 0100.0101 0110.1100
 
c) Transpose bits in groups of four, per byte?  a.b ->b.a (seen this one a
lot in programing)

help?





""perryb"" <[EMAIL PROTECTED]> wrote in message
007901c0a011$52ec4d00$1e00a8c0@GOLDIE1">news:007901c0a011$52ec4d00$1e00a8c0@GOLDIE1...
> Hi all,
>
> I'm goinf to diverge from the star/bus issue in Mr. Rossi's paper, and
> direct everyones attention to what I believe could be a mistake (clerical
> error) in the paper on the DLSW piece.
>
> Directly underneath Mr. Rossi's very first DLSW diagram, you see the RIF
> values for "Router_A," and "Router_B."  Isn't the RIF show for "Router_B"
> just a tad bit inverted and incorrect ?  Shouldn't it read
"0630.00a1.0230"
> instead?  The reason that I say this is because I had a "not so different"
> question on a recent exam.  On this exam there were no "none of the above"
> responses and only two possible valid RIFs.  The only plausable response
was
> in the order that I describe above.
>
>
> Forgive me if this has already been pointed out before.
> - Original Message -
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, February 26, 2001 6:45 AM
> Subject: RE: Lou Rossi's Token Ring paper
>
>
> > I agree with Nigel. It should be a physical star and a logical ring.
> >
> > Cletus Ugwu
> >
> > -Original Message-
> > From: Nigel van Tura [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, February 26, 2001 7:29 AM
> > To: Bradley J. Wilson; [EMAIL PROTECTED]
> > Subject: RE: Lou Rossi's Token Ring paper
> >
> >
> > But Bradley
> >
> > If we connect all to the MAU as a central hub then it becomes a physical
> > star and a logical ring inside the MAU.
> >
> > Or what ?
> > Nigel van Tura
> >
> > -Original Message-
> > From: Bradley J. Wilson [mailto:[EMAIL PROTECTED]]
> > Sent: 24 February 2001 01:50
> > To: cisco
> > Subject: Lou Rossi's Token Ring paper
> >
> >
> > I'm sitting here reading Lou Rossi's Token Ring paper, and right off the
> bat
> > I have a question:
> >
> > He says that token ring is "a physical ring and a logical bus" - but
isn't
> > this backward?  Isn't it a physical bus and a logical ring?  We're not
> > physically connecting stations together in a ring - they're all plugged
> into
> > a MAU and the "ring" is a logical entity inside the MAU, isn't it?
> >
> > Thanks in advance,
> >
> > BJ
> >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: wildcard in access-list

2001-03-03 Thread Howard C. Berkowitz

>I have two parts of a large network, the first part using 141.120.0.0
>thru 141.120.7.255 and the second part using 141.120.128.0 thru
>141.120.135.255. At the router connecting to Internet I want access from
>outside limited only to these subnets and not to other addresses used. I
>know that the following will work for TCP:
>
>access-list 101 tcp permit any 141.120.0.0 0.0.7.255
>access-list 101 tcp permit any 141.120.128.0 0.0.7.255
>
>I want to condesnse this to a single statement as follows:
>
>access-list 101 tcp permit any 141.120.0.0 0.0.135.255


Why?

Or, to put in other terms, how would you like to find that access 
list statement in an undocumented configuration you've just been 
asked to troubleshoot?

A good rule of thumb:  suspect any mask octet that doesn't have 
contiguous bits,
unless you are EXACTLY sure why it's being done:

   Subnet   Wildcard
   --   
  255   0
  254   1
  252   3
  248   7
  240  15
  224  31
  192  63
  128 127
0 255

>
>Will this work?
>For example 141.120.9.2 should not be allowed.
>In binary 141.120.9.2 is 10001101.0000.1001.0010.
>
>My understanding of the steps of how the access-list works is :
>
>1) perform a NOT the mask, which gives in binary
>   ..0000.
>2) perform an AND between this and the IP address, which gives in binary
>   10001101.0000.1000.
>3) compare the result with the original IP address in the access-list
>   the comparison fails
>4) if successful, allow, otherwise drop.
>   so the packet is dropped.
>
>Is the above correct?
>I don't have a lab to test this. I would appreciate any help. Thanks.
>
>Nelluri

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE Passed

2001-03-03 Thread Bruce Moran

Congratulations Jayesh!   I know for a fact how hard its
been.  I hope to join you in the winners circle too!

Corby Tate
- Original Message -
From: Jayesh Patel <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, March 03, 2001 11:05 AM
Subject: CCIE Passed


> Hello to everyone
>
> I am writting with great pleasure to inform you guys and girls that i
> have passed my CCIE Written today. I would be grateful if someone
> could guide me on the LAB. The postings of the group have been very
> helpful.
>
>
> --
> Best regards,
>  Jayesh  mailto:[EMAIL PROTECTED]
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Doing things backwards - Question for the CCDPs in the list.

2001-03-03 Thread Scott

I have done a groupstudy archive search.  It is well documented that
Top-Down Network Design is an excellent design guide and prep tool for CCDA.
In addition to this book, and work experience, what is recommended in
preparation for the CID exam?

Two recommendations from the archive were:

Internetwork Design Guide
http://www.cisco.com/univercd/cc/td/doc/cisintwk/idg4/
and
Online Course Material
http://www.vstream.com/login/CISCOCID/CISCOCID_login.vhtm

Scott T. Wolfe
CCNP, MCSE+I, CCDA


"Priscilla Oppenheimer" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> CID and DCN are quite different, but that doesn't mean you'll have a hard
> time with DCN necessarily. DCN tests design skills and knowledge about
> design methodologies, whereas CID tests technology knowledge. DCN has case
> studies and expects you to glean requirements, info about the existing
> network, etc. from the case study. DCN is focused on small to medium-sized
> networks, whereas CID is supposedly for larger networks (despite the
> zillions of Microsoft networking questions on CID).
>
> If you have experience, you might do fine on DCN without studying, but
your
> best bet is to do a bit of studying, especially since Cisco expects you to
> know their methodology. For example, when would you test your design using
> a prototype versus a pilot? (A question that I'm sure I missed since I
> still don't understand how Cisco distinguishes the two. &;-)
>
> Priscilla
>
> At 09:17 AM 3/2/01, you wrote:
> >I know that this is not the list for CCDA questions but I hope that you
will
> >humor me.  I have recently completed CCNP and studied with another
engineer
> >who was already CCDA certified.  We studied for the CID (640-025) exam
> >together and I passed this exam today.  My question is this:  Is the DCN
> >(CCDA) exam sufficiently different from the CID that I will need to study
> >for it separately or will the prep for the CID exam suffice.  Thanks in
> >advance for your advice.
> >
> >Nathan Miller, CCNP
> >Enterprise Network Engineer
> >Catholic Healthcare West
> >602-307-2659
> >
> >
> >_
> >FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



wildcard in access-list

2001-03-03 Thread Nelluri Reddy

I have two parts of a large network, the first part using 141.120.0.0
thru 141.120.7.255 and the second part using 141.120.128.0 thru
141.120.135.255. At the router connecting to Internet I want access from
outside limited only to these subnets and not to other addresses used. I
know that the following will work for TCP:

access-list 101 tcp permit any 141.120.0.0 0.0.7.255
access-list 101 tcp permit any 141.120.128.0 0.0.7.255

I want to condesnse this to a single statement as follows:

access-list 101 tcp permit any 141.120.0.0 0.0.135.255

Will this work?
For example 141.120.9.2 should not be allowed.
In binary 141.120.9.2 is 10001101.0000.1001.0010.

My understanding of the steps of how the access-list works is :

1) perform a NOT the mask, which gives in binary
  ..0000.
2) perform an AND between this and the IP address, which gives in binary
  10001101.0000.1000.
3) compare the result with the original IP address in the access-list
  the comparison fails
4) if successful, allow, otherwise drop.
  so the packet is dropped.

Is the above correct?
I don't have a lab to test this. I would appreciate any help. Thanks.

Nelluri

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Route-map

2001-03-03 Thread Kane, Christopher A.

Jacek,

You can run BGP, it doesn't matter that your router is only a 2611. What
matters is how many routes you receive from your ISP (or from both ISPs as
is your case). True, your router might not be too happy getting 97,000+
routes from both ISP's, but who says you need any routes from your ISP.?.

Not knowing your true config leaves questions. So let me make some
assumptions. Look at this from 4 perspectives. Outbound/Inbound with ISP A
and Outbound/Inbound with ISP B.

ISP A (Outbound)
You could set your default route out to serial 0. This would make ISP A your
primary path out. 
ISP A (Inbound)
You don't need any routes from this ISP if it's your default out anyway.
Adding another twist, suppose you have a /24. You could advertise a couple
/25's to this ISP (if they'll let you), via the BGP that you turn on with
them.

ISP B (Outbound)
You could set another default (weighted) to make ISP B your secondary route
out via serial 1. You don't need this ISP to send you routes if they are
merely a default route out.
ISP B (Inbound)
Again, using the example that you have a /24, you could advertise some other
/25's to this ISP (if they'll let you).

Summary
You'll most likely need your own AS. Alot of providers don't like routing to
a customer if that customer is multi-homed and doesn't have their own AS. By
breaking up the /24 and sending some of it to one provider and some of it to
the other provider, you can build in some "resilience" in case one ISP's
routing breaks or one of your WAN lines drop. That way, people can always
reach atleast some of the networks you have onsite. To further add
"resilience", advertise to ISP A the networks your sending to ISP B with
heavy weights (AS-Path prepend, Local Pref, etc..keeping in mind that some
attributes are Transitive and some are not). That way if ISP B breaks, all
of your networks will now be available via ISP A. Do the same for ISP B,
advertise your ISP A advertised networks with a larger value so that if ISP
A breaks, ISP B can now advertise all of your routes. 

Hope this helps
Chris

-Original Message-
From: Jacek Malinowski [mailto:[EMAIL PROTECTED]]
Sent: Saturday, March 03, 2001 9:27 AM
To: [EMAIL PROTECTED]
Subject: Route-map


I have a big problem with the route-map command.
My network looks like :

ISP A ISP B
  | |
  | |
  | |
  --s0--(router 2611)--- s1--

configuration (hypothetical):

interface Serial0
 ip address 1.1.1.1 255.255.255.0
  !
interface Serial1
 ip address 100.100.100.100 255.255.255.0
!
interface FastEthernet0
 ip address 10.0.0.222 255.255.255.0 secondary
 ip address 192.168.1.1 255.255.255.0
 ip policy route-map POLICY
 no ip directed-broadcast
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial1
no ip http server
!
access-list 2 permit 10.0.0.0 0.0.0.255
route-map POLICY permit 10
 match ip address 2
 set ip next-hop 1.1.1.1

traffic from the network 10.0.0.0 should go through serial 0 and ISP A
traffic from the network 192.168.1.0 should go through serial 1 and ISP B.

I don't understand how is it possible, that ping from 10.0.0.0 goes through
serial 1 and return through serial 0.
there is the policy on the ethernet interface.

I can't run BGP :( because my router is only 2611




_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE Passed

2001-03-03 Thread Jayesh Patel

Hello to everyone

I am writting with great pleasure to inform you guys and girls that i
have passed my CCIE Written today. I would be grateful if someone
could guide me on the LAB. The postings of the group have been very
helpful.


-- 
Best regards,
 Jayesh  mailto:[EMAIL PROTECTED]


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Passed CID 2 complete CCDP

2001-03-03 Thread Sundar

Hi there,

Passed the CID exam yesterday (3/2) to complete my CCDP exam.

I completely agree with group member, John Neiberger who had posted a
message about this exam yesterday.

Many questions have multiple correct answers and Cisco wants you to choose
the best answer and not just the right answer. Confusing, isn't it? - and
that's all the exam is all about.

I used the Sybex book by Robert Pajden and it was good - however, just as
many members had indicated in the past this book alone is not sufficient
enough to pass the exam. I like the simplicity of this book. Hope Robert
doesn't get mad at me for this claim!

I supplemented the Sybex book with some course material on sections like
SNA, NetBios, Apple Talk and X25. My work experience came in very handy.

By the way, did I tell you that I passed the exam with the least margin of
all the Cisco exams I had taken so far. I scored 776/1000 and the passing
score is 755. But, who cares atleast I passed it in the first attempt.

The exam is 100 questions, 2 hours and not too many multiple choice
questions.

Onto the CCNP-ATM specialization before moving to the CCIE written.

Good luck to all out there!

Cheers,
Sundar Palaniappan MCSE, CCNP, CCDP..
Customer Support Engineer 2
Verizon







_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Frame Relay Charges

2001-03-03 Thread Andrew Cook

Let me just say this - I work for Sprint Local Telephone Division (LTD) and
we do not do 0 CIR.  Sprint Long Distance Division (LDD) does do 0 CIR.  It
is just a difference in philosophy.  I have spoken with some LDD engineers
and their justification is that their network is so robust that there is no
need for an actual CIR.  It always surprises me that the sales guys don't go
nuts at this because CIR is added revenue for them!

Andrew Cook

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Kenneth
> Sent: Saturday, March 03, 2001 10:46 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Frame Relay Charges
>
>
> That's true. All packets will be DE marked but 99% of the time, these DE
> marked packets will get through - that's what our SLA with them is. Their
> reason for this is that their network is "bleeding edge" and that they are
> willing to create an SLA for 0 CIR as compared to most providers who won't
> promise you anything.
>
> You can pay, like i said, for CIR and their SLA will guarantee
> 99.99% packet
> delivery up to CIR.
>
>
> Lauren Child <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> >
> >
> > Kenneth wrote:
> > >
> > > I'm not sure who the provider is but 0 CIR sounds like "Sprint-speak".
> >
> > Id imagine it would be fine if you get garuantees as to how much would
> > get through but a 0CIR means all our frames would be discard eligible,
> > so you couldnt garuntee anything getting through.  It would be a bit
> > like shared etherenet - fine unless you experience congestion and then
> > its pot luck who's frames get through.  You are at the mercy of the
> > telco's oversubscription.
> >
> > TTFN
> > Lauren
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Route-map

2001-03-03 Thread J Roysdon

The traffic is going to return through the ISP who owns the netblock you're
using.  If ISP owns the IP, the traffic will return via that ISP no matter
which way you send it, as that ISP is announcing it (most likely in a larger
netblock).

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Jacek Malinowski"" <[EMAIL PROTECTED]> wrote in message
97r9gs$u7h$[EMAIL PROTECTED]">news:97r9gs$u7h$[EMAIL PROTECTED]...
> Sorry, there is a bug in my hypothetical configuration.
> in set ip next-hope
> should be ISP A (1.1.1.2)
>
>
> ""Bradley J. Wilson"" <[EMAIL PROTECTED]> wrote in message
> 014301c0a3fa$e349f400$f402f7a5@bwilson">news:014301c0a3fa$e349f400$f402f7a5@bwilson...
> > This is just a guess, but how about setting the next hop in the
route-map
> to
> > the IP address of ISP A?
> >
> >
> > - Original Message -
> > From: Jacek Malinowski
> > Newsgroups: groupstudy.cisco
> > To: [EMAIL PROTECTED]
> > Sent: Saturday, March 03, 2001 9:27 AM
> > Subject: Route-map
> >
> >
> > I have a big problem with the route-map command.
> > My network looks like :
> >
> > ISP A ISP B
> >   | |
> >   | |
> >   | |
> >   --s0--(router 2611)--- s1--
> >
> > configuration (hypothetical):
> >
> > interface Serial0
> >  ip address 1.1.1.1 255.255.255.0
> >   !
> > interface Serial1
> >  ip address 100.100.100.100 255.255.255.0
> > !
> > interface FastEthernet0
> >  ip address 10.0.0.222 255.255.255.0 secondary
> >  ip address 192.168.1.1 255.255.255.0
> >  ip policy route-map POLICY
> >  no ip directed-broadcast
> > !
> > ip classless
> > ip route 0.0.0.0 0.0.0.0 Serial1
> > no ip http server
> > !
> > access-list 2 permit 10.0.0.0 0.0.0.255
> > route-map POLICY permit 10
> >  match ip address 2
> >  set ip next-hop 1.1.1.1
> >
> > traffic from the network 10.0.0.0 should go through serial 0 and ISP A
> > traffic from the network 192.168.1.0 should go through serial 1 and ISP
B.
> >
> > I don't understand how is it possible, that ping from 10.0.0.0 goes
> through
> > serial 1 and return through serial 0.
> > there is the policy on the ethernet interface.
> >
> > I can't run BGP :( because my router is only 2611
> >
> >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Peering over non-peering link

2001-03-03 Thread J Roysdon

Comments inline.

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Howard C. Berkowitz"" <[EMAIL PROTECTED]> wrote in message
news:p05001903b6c6a62de3ce@[63.216.127.100]...
> >This may take some explaining, so just bear with me.  Also keep in mind
that
> >I've been having hardly any time to read Halabi's BGP book, but will
> >probably go read some after this.
> >
> >We're connected to a few ISPs which allow BGP peering (which I should be
> >settings up sometime soon).
>
> I need to get clarification here. There are two meanings of the term
> "peer" in the BGP context, the first being a simple establishment of
> any BGP relationships, and the second being an economic relationship
> of equals, where you exchange customer routes without financial
> compensation.  The alternative to the second is to buy transit from
> an upstream ISP.

Peering for cost with the larger ISPs who will transit our traffic.

> >We've also got two ISPs that will not peer, nor
> >exchange customer routes with us.  One is a free 1.5mbit SDSL connection
as
> >we're one of their VARs, the other is a lame T1 that we're stuck in a 3
year
> >contract for a bit more.
> >
> >Right now, I just use static routes to send traffic out the SDSL
connection
> >as the provider only has a single class B.  For the T1 to a much larger
> >provider with address space all over, it's just not worth it to try and
do
> >much with it...
>
> I don't understand what you mean by address space all over, or not
> being worth it.  Sometimes the whole motivation for BGP is to
> exchange very specific and extensive address information with
> adjacent AS, at the same time avoiding leaking large numbers of
> irrelevant routes into the global routing system.
>

Well, a large amount of  >
> >Anyway, here is the thought:  I happen to know the admins a at number of
> >other ISPs that are connected to the T1 and some other sites that have
SDSL
> >access to the same provider as us.
> >
> >The catch is that of course we could set static routes out to these ISPs,
> >but it's somewhat risky, especially with the SDSL as even though the
> >ethernet interface it's connected to may still be up, the SDSL line
itself,
> >or perhaps something along the SDSL provider's backbone might be down
> >between us and another of the SDSL customers, but the static routes to
the
> >SDSL link would stay up as the interface is still up.  Same is true with
the
> >T1.
>
> I don't think there's any way you can know there is a reachability
> failure in a non-directly-connected link without running a routing
> protocol.  In the case of an ISP, that pretty well has to be BGP.

Ok, but how would BGP know which interface to go out?  These equal peers
would be connected to my non-default interface.

> >
> >Since neither of these ISPs will peer with us, could we still establish
some
> >routing protocol with the smaller ISPs like us that are connected off of
> >them and want to transit traffic through these lesser used links.
>
> Why not BGP to the smaller ISPs?  There might be a need to coordinate
> private AS numbers.

Not opposed to it, just looking for the best solution, and this is probably
how we'll go to start with.

> Remember that the BGP tunnels can be between loopback interfaces, so
> as long as you can reach the loopback in the other AS, and
> appropriately set ebgp multihop, you should be able to run a session
> without the intervening ISP being aware of it.  Can't promise what
> the performance would be.

Right, but here's what I'm missing:  BGP has to know how to reach the other
loopback to exchange routes with the other neighbor.  I'll be able to
exchange their netblocks, and then can I tag those netblocks and use a route
map or something to have the router send it out a non-default interface?  I
mean, how will the router know what interface to go out?  I'm guessing I'd
set a static route out the non-default interface that will get me
reachability to the BGP neighbor.  As this neighbor is out a certain
interface, will the router know to send traffic for BGP routes learned from
that neighbor out that same interface?

> >Otherwise, the netblocks we have would route traffic back through the
ISPs
> >they belong to or that we're announcing them with BGP on.
> >
> >The biggest thing is that it needs to be dynamic.  If the route over the
> >common single upstream ISP is down, but the connections to these ISPs are
> >up, routes out to our defaults/BGP peers might still get us connected.
> >
> >Thoughts?  Comments?  Am I just nuts?
> >
> >--
> >Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> >List email: [EMAIL PROTECTED]
> >Homepage: http://jason.artoo.net/
> >Cisco resources: http://r2cisco.artoo.net/



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violation

Re: How would you Explain it.

2001-03-03 Thread J Roysdon

Most likely the ISP has a layer 3 switch that has a single port (the port
out to them) configured for their subnet, and the route processor handles
their routing.  Essentially they're just bridging to their ISP.

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Kenneth"" <[EMAIL PROTECTED]> wrote in message
97r218$c0d$[EMAIL PROTECTED]">news:97r218$c0d$[EMAIL PROTECTED]...
> I'm curious, if you're connected to a switch, then you don't have control
> over your public IP Addresses then such as DNS,... or is this mostly used
> for office to office links as opposed to a gateway to the internet?
>
> I guess the reason i'm wondering is we currently have an entire class C
and
> we host our own DNS, web servers, ftp,... and I'm curious as to how this
> would affect our routings if we do go with such a service.
>
>
> Priscilla Oppenheimer <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > We upgraded our T1 WAN link that cost $1500 per month to a single-mode
> > fiber-optic 10-Mbps Ethernet MAN link that costs $700 per month. We just
> > have a switch at our site, no router even. Seriously. Our local
> > municipality has a Gigabit Ethernet single-mode fiber-optic ring running
> > around town, and they lease capacity on it. The city is connected to the
> > Internet via a Cisco 7200 and a Sprint T3 link. We piggy back onto that.
> >
> > And I'm in Southern Oregon, a supposedly rural area. It's happening in
> > other towns also. Sometimes I forget how lucky we are!
> >
> > Priscilla
> >
> > At 02:28 PM 3/2/01, Howard C. Berkowitz wrote:
> > > >I have a customer who wants to upgrade his 128K ISDN point to point
> > > >connections to at lease a 10mbps connection.  He is thinking along
the
> lines
> > > >of LAN technologies.  He idea connection is a 1gb connection.  How
> would go
> > > >about explaining to this guy that he is out of his mind without
> damaging his
> > > >ego.  His the IT manager and thinks he's knowledgeable about
networks.
> > >
> > >I wouldn't say he is totally out of his mind, if he's in a geographic
> > >area served by one of the bleeding edge Optical Ethernet providers.
> > >Very rare so far, but there are 100 or 1000 Mbps physical facilities
> > >over which the user pays for the amount of bandwidth he needs.  Most
> > >of the ones I'm aware of are in Europe.
> > >
> > >In the vast majority of locations, he is out of his mind.  Assuming
> > >he needs 10 Mbps, your choices include inverse multiplexed T1 and
> > >ATM, fractional T3, or 10 Mbps over OC-3 facilities. I had a design
> > >not too long ago where we were able to bring in some of the voice as
> > >well, and found that OC-3 was quite cost-effective.  It ran into a
> > >7200.  A 3600 is probably the lowest end router to consider.
> > >
> > > >
> > > >btw...
> > > >
> > > >I've gone ahead and gotten quotes on a t1 and t3 lines.  I know I can
> use a
> > > >2600 for the T1 connection but what is there a adapter for taking a
> clear
> > > >channel T3 for the 2600 or do I have to look at a 7000 series router.
> > > >
> > > >Thanks,
> > > >
> > > >Keith Townsend
> > > >www.townsendconsulting.com
> > >\
> > >
> > >_
> > >FAQ, list archives, and subscription info:
> > >http://www.groupstudy.com/list/cisco.html
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
> > 
> >
> > Priscilla Oppenheimer
> > http://www.priscilla.com
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: From CHAP to PAP

2001-03-03 Thread J Roysdon

You shouldn't have to do this.  By default the routers exchange their
hostnames as usernames.  You just need to make sure you have a 'username
bleh password blehbleh' configured that matches the password the other
router has configured for your router:

R1 config:
username R2 password blehbleh

R2 config:
username R1 password blehbleh

I think you're better off sorting through it than forcing a username.  Of
course, that's a great solution when you're doing dialup to an ISP, but a
poor solution for DDR with more than a single host.

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Pierre-Alex"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Thank You!
>
> -Original Message-
> From: Sam [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, March 03, 2001 5:35 AM
> To: Pierre-Alex
> Subject: Re: From CHAP to PAP
>
>
> use the pap "sent user-name" command ..to specify the user credentials it
> will send to the remote router.
> i dont remember theexact syntax.. look it up on the CD..
> i remember using it when i was practicing PAP
> - Original Message -
> From: "Pierre-Alex" <[EMAIL PROTECTED]>
> To: "Jason Roysdon" <[EMAIL PROTECTED]>
> Cc: "Cisco" <[EMAIL PROTECTED]>
> Sent: Wednesday, March 01, 2000 3:19 PM
> Subject: RE: From CHAP to PAP
>
>
> > I just wanted to make sure I also knew how to configure the "simple"
> > stuff...
> >
> > Pierre-Alex
> >
> >
> > -Original Message-
> > From: Jason Roysdon [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, March 02, 2001 10:48 PM
> > To: '[EMAIL PROTECTED]'
> > Subject: Re: From CHAP to PAP
> >
> >
> > Shutdown the interfaces and bring them back up.  Worst case, save and
> reload
> > each one.
> >
> > Why would you want to use PAP instead of CHAP?  It's less secure and
> leaves
> > you more vulnerable as the passwords are sent in the clear.
> >
> > --
> > Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> > List email: [EMAIL PROTECTED]
> > Homepage: http://jason.artoo.net/
> > Cisco resources: http://r2cisco.artoo.net/
> >
> >
> > ""Pierre-Alex"" <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > My two ISDN routers R1 and R2 are currently authenticating using Chap.
> > >
> > > I wanted to change the authentication to pap, so I went to both
routers
> > >
> > > and changed "ppp  authentication chap" to "ppp authentication pap"
> > >
> > > Now the routers won't authenticate. I cannot see what I did wrong. Can
> you
> > > help?
> > >
> > > Pierre-Alex
> > >
> > >
> > >
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Route-map

2001-03-03 Thread Howard C. Berkowitz

Your route map affects how your traffic flows outbound to the ISP. 
Even with BGP, there is no way to guarantee how external ISPs send to 
you, or, even more, how external sources not directly connected to 
your ISP will send   It's quite common to see 30-40% of queries sent 
to one ISP have the associated response come back via a different ISP.

>I have a big problem with the route-map command.
>My network looks like :
>
> ISP A ISP B
>   | |
>   | |
>   | |
>   --s0--(router 2611)--- s1--
>
>configuration (hypothetical):
>
>interface Serial0
>  ip address 1.1.1.1 255.255.255.0
>   !
>interface Serial1
>  ip address 100.100.100.100 255.255.255.0
>!
>interface FastEthernet0
>  ip address 10.0.0.222 255.255.255.0 secondary
>  ip address 192.168.1.1 255.255.255.0
>  ip policy route-map POLICY
>  no ip directed-broadcast
>!
>ip classless
>ip route 0.0.0.0 0.0.0.0 Serial1
>no ip http server
>!
>access-list 2 permit 10.0.0.0 0.0.0.255
>route-map POLICY permit 10
>  match ip address 2
>  set ip next-hop 1.1.1.1
>
>traffic from the network 10.0.0.0 should go through serial 0 and ISP A
>traffic from the network 192.168.1.0 should go through serial 1 and ISP B.
>
>I don't understand how is it possible, that ping from 10.0.0.0 goes through
>serial 1 and return through serial 0.
>there is the policy on the ethernet interface.
>
>I can't run BGP :( because my router is only 2611
>
>
>
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Route-map

2001-03-03 Thread Santosh Koshy

Hi jacek,

Your config regarding the route-map seems ok. On the flip side let
me tell you what I think is happenning :=
1) you have a default route statement throgh serial 1 = "ip route 0.0.0.0
0.0.0.0 Serial1"
2) therefore a packet generated from 10.x.x.x by default will go through S1
3) now rememeber that the packet will have a Source Ip of 10.x.x.x and a
destination IP of y.y.y.y
4) when the packet is returned, it will obviously return it to 10.x.x.x
5) hence it comes BACK THROUGH S0

Test to see if the above is true, by doing an extended ping. If it is so
then remove the default route statement and that should solve the problem.
In any case please tell me how u went about fixing it.

Santosh Koshy




""Jacek Malinowski"" <[EMAIL PROTECTED]> wrote in message
97r3bn$etj$[EMAIL PROTECTED]">news:97r3bn$etj$[EMAIL PROTECTED]...
> I have a big problem with the route-map command.
> My network looks like :
>
> ISP A ISP B
>   | |
>   | |
>   | |
>   --s0--(router 2611)--- s1--
>
> configuration (hypothetical):
>
> interface Serial0
>  ip address 1.1.1.1 255.255.255.0
>   !
> interface Serial1
>  ip address 100.100.100.100 255.255.255.0
> !
> interface FastEthernet0
>  ip address 10.0.0.222 255.255.255.0 secondary
>  ip address 192.168.1.1 255.255.255.0
>  ip policy route-map POLICY
>  no ip directed-broadcast
> !
> ip classless
> ip route 0.0.0.0 0.0.0.0 Serial1
> no ip http server
> !
> access-list 2 permit 10.0.0.0 0.0.0.255
> route-map POLICY permit 10
>  match ip address 2
>  set ip next-hop 1.1.1.1
>
> traffic from the network 10.0.0.0 should go through serial 0 and ISP A
> traffic from the network 192.168.1.0 should go through serial 1 and ISP B.
>
> I don't understand how is it possible, that ping from 10.0.0.0 goes
through
> serial 1 and return through serial 0.
> there is the policy on the ethernet interface.
>
> I can't run BGP :( because my router is only 2611
>
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Hexadecimal numbers

2001-03-03 Thread robert lowery

TAKE A LOOK AT WWW.CATSPACE.COM

[EMAIL PROTECTED] wrote:

> Does anyone know a good Web site to learn about the Structure of Hex Numbers
> and how to convert, from Hex to  Binary, to Dec and back and forth between
> the systems and IPX Addresses also.
>
> TIA,
>
> Jess
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: off topic -- min reqs for obtaining an AS?

2001-03-03 Thread J Roysdon

I don't think there is any problem with that.  The main this is that you
have to show that you need it to be able to announce your netblock to two
ISPs.  Plus, at $500 up front, it's not like they're just giving them away:

http://arin.net/regserv.html


--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Dropped Packet"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>
> Is it possible to obtain an AS for one full class c, or is this just too
> tiny?
> _
> Get your FREE download of MSN Explorer at http://explorer.msn.com
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Route-map

2001-03-03 Thread Jacek Malinowski

Sorry, there is a bug in my hypothetical configuration.
in set ip next-hope
should be ISP A (1.1.1.2)


""Bradley J. Wilson"" <[EMAIL PROTECTED]> wrote in message
014301c0a3fa$e349f400$f402f7a5@bwilson">news:014301c0a3fa$e349f400$f402f7a5@bwilson...
> This is just a guess, but how about setting the next hop in the route-map
to
> the IP address of ISP A?
>
>
> - Original Message -
> From: Jacek Malinowski
> Newsgroups: groupstudy.cisco
> To: [EMAIL PROTECTED]
> Sent: Saturday, March 03, 2001 9:27 AM
> Subject: Route-map
>
>
> I have a big problem with the route-map command.
> My network looks like :
>
> ISP A ISP B
>   | |
>   | |
>   | |
>   --s0--(router 2611)--- s1--
>
> configuration (hypothetical):
>
> interface Serial0
>  ip address 1.1.1.1 255.255.255.0
>   !
> interface Serial1
>  ip address 100.100.100.100 255.255.255.0
> !
> interface FastEthernet0
>  ip address 10.0.0.222 255.255.255.0 secondary
>  ip address 192.168.1.1 255.255.255.0
>  ip policy route-map POLICY
>  no ip directed-broadcast
> !
> ip classless
> ip route 0.0.0.0 0.0.0.0 Serial1
> no ip http server
> !
> access-list 2 permit 10.0.0.0 0.0.0.255
> route-map POLICY permit 10
>  match ip address 2
>  set ip next-hop 1.1.1.1
>
> traffic from the network 10.0.0.0 should go through serial 0 and ISP A
> traffic from the network 192.168.1.0 should go through serial 1 and ISP B.
>
> I don't understand how is it possible, that ping from 10.0.0.0 goes
through
> serial 1 and return through serial 0.
> there is the policy on the ethernet interface.
>
> I can't run BGP :( because my router is only 2611
>
>
>
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Route-map

2001-03-03 Thread Bradley J. Wilson

This is just a guess, but how about setting the next hop in the route-map to
the IP address of ISP A?


- Original Message -
From: Jacek Malinowski
Newsgroups: groupstudy.cisco
To: [EMAIL PROTECTED]
Sent: Saturday, March 03, 2001 9:27 AM
Subject: Route-map


I have a big problem with the route-map command.
My network looks like :

ISP A ISP B
  | |
  | |
  | |
  --s0--(router 2611)--- s1--

configuration (hypothetical):

interface Serial0
 ip address 1.1.1.1 255.255.255.0
  !
interface Serial1
 ip address 100.100.100.100 255.255.255.0
!
interface FastEthernet0
 ip address 10.0.0.222 255.255.255.0 secondary
 ip address 192.168.1.1 255.255.255.0
 ip policy route-map POLICY
 no ip directed-broadcast
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial1
no ip http server
!
access-list 2 permit 10.0.0.0 0.0.0.255
route-map POLICY permit 10
 match ip address 2
 set ip next-hop 1.1.1.1

traffic from the network 10.0.0.0 should go through serial 0 and ISP A
traffic from the network 192.168.1.0 should go through serial 1 and ISP B.

I don't understand how is it possible, that ping from 10.0.0.0 goes through
serial 1 and return through serial 0.
there is the policy on the ethernet interface.

I can't run BGP :( because my router is only 2611




_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Frame Relay Charges

2001-03-03 Thread Kenneth

That's true. All packets will be DE marked but 99% of the time, these DE
marked packets will get through - that's what our SLA with them is. Their
reason for this is that their network is "bleeding edge" and that they are
willing to create an SLA for 0 CIR as compared to most providers who won't
promise you anything.

You can pay, like i said, for CIR and their SLA will guarantee 99.99% packet
delivery up to CIR.


Lauren Child <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>
>
> Kenneth wrote:
> >
> > I'm not sure who the provider is but 0 CIR sounds like "Sprint-speak".
>
> Id imagine it would be fine if you get garuantees as to how much would
> get through but a 0CIR means all our frames would be discard eligible,
> so you couldnt garuntee anything getting through.  It would be a bit
> like shared etherenet - fine unless you experience congestion and then
> its pot luck who's frames get through.  You are at the mercy of the
> telco's oversubscription.
>
> TTFN
> Lauren
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Lab Swap Question

2001-03-03 Thread Lauren Child



Craig Columbus wrote:
> 
> I see a lot of requests for lab swaps.  What's Cisco's policy on this?  How
> do they verify with both individuals that the swap is valid?

Last time I looked it was the same way they did to start with - they 
have to have passed the written.  Its not a problem if both candidates
have a lab booked and just swap them round, since to  book they must
have passed the requirements anyway :)

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Frame Relay Charges

2001-03-03 Thread Lauren Child



Kenneth wrote:
> 
> I'm not sure who the provider is but 0 CIR sounds like "Sprint-speak". 

Id imagine it would be fine if you get garuantees as to how much would
get through but a 0CIR means all our frames would be discard eligible,
so you couldnt garuntee anything getting through.  It would be a bit
like shared etherenet - fine unless you experience congestion and then
its pot luck who's frames get through.  You are at the mercy of the
telco's oversubscription.

TTFN
Lauren

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Full Duplex Hub?

2001-03-03 Thread Patrick McAllister

To all who responded, thank you.=20

Mark - that's one (of my no doubt many) points of confusion. I know a =
switch breaks up collision domains and a hub is shared media, therefore =
one collision domain. I also know that the NIC set to 100 means nothing =
as far as half or full duplex goes, as you can run 100 in either. I've =
searched around - trying Cogent's site though I think they are out of =
business - even reading and rereading Charles Spurgeon's Ethernet - The =
Definitive Guide. Yeah, I know, there's reading and there's the real =
world, I just wanted to check if my logic was correct. No where do I see =
anything about 100 Full Duplex hubs. Switches, sure, that's their reason =
for living for the most part. I have found some writings on the web =
saying that with certain "proprietary" (read - not based on the Ethernet =
Standard) hubs will run at 100 Full Duplex. What I haven't found is WHY =
or HOW they can do this.=20

Gene - yes that makes sense, but how do the NIC's decide to run half =
duplex if I've forced them to full? (I avoid auto-negotiate like the =
plague)?=20

David - Exactly my understanding. Collision detection is turned off at =
full duplex, so how in the hell is this thing working? I suspect the =
answer lies in the hardware specs (clever, aren't I?) but since I can't =
find them I'm bumbling around blindly.

Anyway, thanks for all the responses, it helps to no I wasn't entirely =
crazy...regarding this at least.

Thanks again
Patrick


"Mark Holloway" <[EMAIL PROTECTED]> wrote in message =
97poso$m4e$[EMAIL PROTECTED]">news:97poso$m4e$[EMAIL PROTECTED]...
> Well, a full duplex hub is typically called a switch.  Just because =
the NICs
> are at 100 Full doesn't mean anything.  Many times devices can be set =
for
> auto negotiate and not configure properly.  You can force a setting on =
a NIC
> and even if it wrong, it will still work, but there may be errors and
> retransmissions will occur.  If you only have two devices in this hub =
and
> they are only talking to each other, there may not be any collisions.
>=20
> Regards,
> Mark
>=20
> ""Patrick McAllister"" <[EMAIL PROTECTED]> wrote in message
> 007201c0a383$7e2ff7d0$6401a8c0@cartman">news:007201c0a383$7e2ff7d0$6401a8c0@cartman...
> > I know this isn't a Cisco question per se, and I apologize in =
advance.=3D20
> >
> > Is there such a thing as a full duplex 100BaseTx hub or repeater? I =
=3D
> > thought all hubs/repeaters had to run in half duplex.
> >
> > Here's the scenario, of sorts. I have a Cogent 1200 100Base TX Class =
I =3D
> > Repeater. I hook two PC's up to them and start transferring files. =
=3D
> > Everything works swimmingly. I look at the config after I'm done and =
=3D
> > both NIC's in the PC's are set to full duplex. There is (of course) =
no =3D
> > setting on the Cogent, and there is (of course) a collision light, =
but =3D
> > it never flashed during the transfer. I know I'm not the sharpest =
knife =3D
> > in the drawer, I accept that. But have I been laboring under a =3D
> > misconception all this time?=3D20
> >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to =
[EMAIL PROTECTED]
> >
>=20
>=20
> _
> FAQ, list archives, and subscription info: =
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Passed CCIE Written

2001-03-03 Thread James Haynes

Congratulations Chad.

Jim


""Chad Humphries"" <[EMAIL PROTECTED]> wrote in message
97pptf$oui$[EMAIL PROTECTED]">news:97pptf$oui$[EMAIL PROTECTED]...
> Took R&S written for the 1st time today and passed with 84%.  Thanks to
> everyone that post great questions and answers in this group.  Seems like
I
> learn something new every week or at least see other viewpoints.  Best of
> luck to everyone!
> On to the LAB!
>
> Chad Humphries
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CID beta

2001-03-03 Thread GNOME

I think have to wait till 15 Mar..exactly 12 weeks!!!

does anyone passed on past experience how long will a beta exam result be
out?


Fomes Iain <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Anyone got their results yet?
> *
> DISCLAIMER:   The information contained in this e-mail may be confidential
> and is intended solely for the use of the named addressee.  Access,
copying
> or re-use of the e-mail or any information contained therein by any other
> person is not authorized.  If you are not the intended recipient please
> notify us immediately by returning the e-mail to the originator.
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Switch Problem

2001-03-03 Thread Jeff Duchin

2900's have a problem if you leave a consol cable plugged into them as well.
It will automatically reboot and is a known bug.

Jeff

""Stuart J Pittwood"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi,
>
> Many of my users have been reporting network connectivity disapearing and
> comming back about a min later.
>
> While looking through the logs of one switch (a 2924M-CL-EN) I noticed it
> had been rebooted recently.
>
> What would make a switch reboot itself? The switch isn't anywhere near
> capacity (according to the scale on the front).
>
> Any help greatly appreciated
> __
> Stuart J Pittwood, CCNA
> [EMAIL PROTECTED]
> http://www.stuartpittwood.net
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off-Topic: Grad School (again?)

2001-03-03 Thread Howard C. Berkowitz

Some people enjoy the educational experience, and that's an adequate 
motivation.
If not, the planning issue is "what would your dream job be?"

>I know Grad School has been discussed in the archives "as opposed" to
>CCIE but I have a different question...what about "in addition".
>
>Opinions, maybe a few pointers, and some hindsight from people thats been
>in this longer than I have are what I am looking for.  My situation is
>this; I have a BS in MIS (spring 99), I've passed np and ie written (last
>year), attempted the lab once and was only a few points short of
>troubleshooting--and will be trying it again in the very near future.
>About 5 years in the field overall and 2 solid years of cisco and related
>wan stuff.  Been in computers in general for as long as I can remember so I
>would call it more than 15 years.
>
>Call me crazy, but I pretty much enjoyed college and had always seen myself
>going past the usual BS (woot, pun)--and get a graduate degree.  I am
>thinking MBA, but I can honestly say I'm not overjoyed in being
>management--but I realize that will be a reality.

MBA doesn't strictly mean that you will manage people.  With an MIS 
concentration, it can deal with requirements analysis, business 
process analysis, etc.  The sorts of things that MUST be understood 
before a successful technical solution can be defined.

>
>Like I mentioned, I know there has been lots of debate on CCIE vs MS.. my
>question is what about CCIE _and_ MS.  In a nutshell is it worth getting
>the MS as well? 
>
>Yes, of course, the conventional wisdom would say if you got the shot, then
>go for it (which I will do reguardless).  The hypothetical question is how
>much of a difference would a ccie with a masters make than one without?

Again, what are you aiming for?  Let me turn it around a bit.  If you 
were going for a job in networking product development, a MS in 
computer science would be the key credential at entry level, but many 
hiring managers would look favorably on the CCIE (especially with 
some field experience), as an indication you can also understand the 
operational aspects.  I work with some excellent programmers that 
write fine routing protocol code, but don't have any real idea how 
the code will be used.

It's more complex, I think, to picture how a relevant* MS would help 
someone going into implementation and support.  If the hiring 
organization isn't all that technical, they may simply seize on the 
CCIE as a credential "because Cisco said it is" and not realize the 
utility of CS background, quantitative methods, etc., in what the 
CCIE does.  A more technical employer would.

Without getting into the old folks discussion, I'm not a good 
example.  I don't have a graduate degree or a CCIE, and there's no 
particular job-related reason to have them.  Ironically, the general 
assumption is that people in my current job (network technology R&D 
beyond the immediate product generation) probably have a PhD.  My 
demonstrated Cisco experience is valued, but my resume is more 
important than any certification. I'd sort of like to get an advanced 
degree only because I think I'd enjoy doing some academic teaching, 
but I find it difficult to justify the time.

* relevance is in the eye of the beholder.  Courses I took in 
psychological operations and propaganda have been most useful in 
corporate America.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Route-map

2001-03-03 Thread Jacek Malinowski

I have a big problem with the route-map command.
My network looks like :

ISP A ISP B
  | |
  | |
  | |
  --s0--(router 2611)--- s1--

configuration (hypothetical):

interface Serial0
 ip address 1.1.1.1 255.255.255.0
  !
interface Serial1
 ip address 100.100.100.100 255.255.255.0
!
interface FastEthernet0
 ip address 10.0.0.222 255.255.255.0 secondary
 ip address 192.168.1.1 255.255.255.0
 ip policy route-map POLICY
 no ip directed-broadcast
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial1
no ip http server
!
access-list 2 permit 10.0.0.0 0.0.0.255
route-map POLICY permit 10
 match ip address 2
 set ip next-hop 1.1.1.1

traffic from the network 10.0.0.0 should go through serial 0 and ISP A
traffic from the network 192.168.1.0 should go through serial 1 and ISP B.

I don't understand how is it possible, that ping from 10.0.0.0 goes through
serial 1 and return through serial 0.
there is the policy on the ethernet interface.

I can't run BGP :( because my router is only 2611




_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How would you Explain it.

2001-03-03 Thread Kenneth

I'm curious, if you're connected to a switch, then you don't have control
over your public IP Addresses then such as DNS,... or is this mostly used
for office to office links as opposed to a gateway to the internet?

I guess the reason i'm wondering is we currently have an entire class C and
we host our own DNS, web servers, ftp,... and I'm curious as to how this
would affect our routings if we do go with such a service.


Priscilla Oppenheimer <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> We upgraded our T1 WAN link that cost $1500 per month to a single-mode
> fiber-optic 10-Mbps Ethernet MAN link that costs $700 per month. We just
> have a switch at our site, no router even. Seriously. Our local
> municipality has a Gigabit Ethernet single-mode fiber-optic ring running
> around town, and they lease capacity on it. The city is connected to the
> Internet via a Cisco 7200 and a Sprint T3 link. We piggy back onto that.
>
> And I'm in Southern Oregon, a supposedly rural area. It's happening in
> other towns also. Sometimes I forget how lucky we are!
>
> Priscilla
>
> At 02:28 PM 3/2/01, Howard C. Berkowitz wrote:
> > >I have a customer who wants to upgrade his 128K ISDN point to point
> > >connections to at lease a 10mbps connection.  He is thinking along the
lines
> > >of LAN technologies.  He idea connection is a 1gb connection.  How
would go
> > >about explaining to this guy that he is out of his mind without
damaging his
> > >ego.  His the IT manager and thinks he's knowledgeable about networks.
> >
> >I wouldn't say he is totally out of his mind, if he's in a geographic
> >area served by one of the bleeding edge Optical Ethernet providers.
> >Very rare so far, but there are 100 or 1000 Mbps physical facilities
> >over which the user pays for the amount of bandwidth he needs.  Most
> >of the ones I'm aware of are in Europe.
> >
> >In the vast majority of locations, he is out of his mind.  Assuming
> >he needs 10 Mbps, your choices include inverse multiplexed T1 and
> >ATM, fractional T3, or 10 Mbps over OC-3 facilities. I had a design
> >not too long ago where we were able to bring in some of the voice as
> >well, and found that OC-3 was quite cost-effective.  It ran into a
> >7200.  A 3600 is probably the lowest end router to consider.
> >
> > >
> > >btw...
> > >
> > >I've gone ahead and gotten quotes on a t1 and t3 lines.  I know I can
use a
> > >2600 for the T1 connection but what is there a adapter for taking a
clear
> > >channel T3 for the 2600 or do I have to look at a 7000 series router.
> > >
> > >Thanks,
> > >
> > >Keith Townsend
> > >www.townsendconsulting.com
> >\
> >
> >_
> >FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Frame Relay Charges

2001-03-03 Thread Kenneth

I'm not sure who the provider is but 0 CIR sounds like "Sprint-speak". Most
service providers won't allow or recommends against 0 CIR but on the other
hand, Sprint pushes it.

We are currently using 0 CIR and I think the quality has been good and we
haven't had a whole lot of dropped packets. In fact, I think they still
guarantee 99% delivery up to port speed which is pretty good specially
compared to most providers 99.9% delivery up to CIR and no guarantee beyond
that.



"Nabil Fares" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Greetings all,
>
> Can you guys shed some light on how FR providers base their charges.  How
> they charge when going above CIR (etc...)?
>
> also,  if I have site with network access between 8-5, is it worth risking
a
> zero CIR?
>
> We had a meeting with an account rep for a FR provider, he kept pressing
on
> 0 CIR.  This is a new trend?
>
> Thanks,
>
> Nabil
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Peering over non-peering link

2001-03-03 Thread Howard C. Berkowitz

>This may take some explaining, so just bear with me.  Also keep in mind that
>I've been having hardly any time to read Halabi's BGP book, but will
>probably go read some after this.
>
>We're connected to a few ISPs which allow BGP peering (which I should be
>settings up sometime soon).

I need to get clarification here. There are two meanings of the term 
"peer" in the BGP context, the first being a simple establishment of 
any BGP relationships, and the second being an economic relationship 
of equals, where you exchange customer routes without financial 
compensation.  The alternative to the second is to buy transit from 
an upstream ISP.

>We've also got two ISPs that will not peer, nor
>exchange customer routes with us.  One is a free 1.5mbit SDSL connection as
>we're one of their VARs, the other is a lame T1 that we're stuck in a 3 year
>contract for a bit more.
>
>Right now, I just use static routes to send traffic out the SDSL connection
>as the provider only has a single class B.  For the T1 to a much larger
>provider with address space all over, it's just not worth it to try and do
>much with it...

I don't understand what you mean by address space all over, or not 
being worth it.  Sometimes the whole motivation for BGP is to 
exchange very specific and extensive address information with 
adjacent AS, at the same time avoiding leaking large numbers of 
irrelevant routes into the global routing system.

>
>Anyway, here is the thought:  I happen to know the admins a at number of
>other ISPs that are connected to the T1 and some other sites that have SDSL
>access to the same provider as us.
>
>The catch is that of course we could set static routes out to these ISPs,
>but it's somewhat risky, especially with the SDSL as even though the
>ethernet interface it's connected to may still be up, the SDSL line itself,
>or perhaps something along the SDSL provider's backbone might be down
>between us and another of the SDSL customers, but the static routes to the
>SDSL link would stay up as the interface is still up.  Same is true with the
>T1.

I don't think there's any way you can know there is a reachability 
failure in a non-directly-connected link without running a routing 
protocol.  In the case of an ISP, that pretty well has to be BGP.

>
>Since neither of these ISPs will peer with us, could we still establish some
>routing protocol with the smaller ISPs like us that are connected off of
>them and want to transit traffic through these lesser used links.

Why not BGP to the smaller ISPs?  There might be a need to coordinate 
private AS numbers.

Remember that the BGP tunnels can be between loopback interfaces, so 
as long as you can reach the loopback in the other AS, and 
appropriately set ebgp multihop, you should be able to run a session 
without the intervening ISP being aware of it.  Can't promise what 
the performance would be.

>Otherwise, the netblocks we have would route traffic back through the ISPs
>they belong to or that we're announcing them with BGP on.
>
>The biggest thing is that it needs to be dynamic.  If the route over the
>common single upstream ISP is down, but the connections to these ISPs are
>up, routes out to our defaults/BGP peers might still get us connected.
>
>Thoughts?  Comments?  Am I just nuts?
>
>--
>Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
>List email: [EMAIL PROTECTED]
>Homepage: http://jason.artoo.net/
>Cisco resources: http://r2cisco.artoo.net/
>
>
>
>
>_
>FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: off topic -- min reqs for obtaining an AS?

2001-03-03 Thread Howard C. Berkowitz

>Is it possible to obtain an AS for one full class c, or is this just too
>tiny?

You can get the AS number with proper justification, although there 
is no guarantee that this prefix will propagate through the Internet 
as a whole and the prefix will be reachable.  In general, you would 
have to demonstrate to the registry:

  -- you plan to multihome
  -- you can demonstrate contracts with at least two upstream providers

you may be asked to document your routing policy, which, in any case, 
is a good idea.  ARIN recommends doing so, RIPE NCC requires it.

Your design may be scrutinized, and questions are likely to be asked 
why this can't be done with provider-assigned address space.  The 
registry might evaluate whether your links are fast enough to support 
the number of routes you plan to receive.

Hint:  to get into the right mindset for such a request, be sure you 
understand you have a /24.  From the perspective of global routing, 
there is no such thing as a class A, B, or C.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2 ISP's

2001-03-03 Thread Howard C. Berkowitz

I've asked a fair number of questions here, which would only be a 
starting point if I were building a solution to this problem -- even 
though I don't fully understand the problem yet.  The key message I'm 
trying to convey is that the first task in developing a solution is 
to translate customer wants/perceptions into specific technical 
requirements (e.g., SLAs, routing policies, and the like). Selecting 
the specific technology is the second task, and selecting platforms 
and configuring them follows.

>See my dear this solution to done for a customer and not for the ISP.  One
>of the Software development firm (MY friend works there and i want to help
>him out) they have two internet link from different internet  service
>provider.  earlier they were using 2 router for differnet link but now they
>want to go for only one router (3640).

Why?  If they had two, clearly that is more reliable.  Is it that the 
3640 will have more power than the previous two, which might be a 
perfectly good reason.

>What can be done for this.  In normal
>condition they use one internet link always to upload their software to
>some web server and another link is used internet browsing.  Now when any
>one link goes down how everything will function normally ?

As you have stated the problem., things will NOT function normally if 
one link goes down.  I might guess that in the event of one failure, 
you want all the traffic to move to the other link, but you don't 
explicitly say that and assumptions are dangerous.

If both types of traffic are going over the same link, is some sort 
of traffic conditioning -- rate limiting, queueing, etc., 
appropriate?  What sort of availability and performance do they need 
for each services.

What about other services?  Is the uploading FTP, HTTP, RPC, or what? 
Do telnet, FTP downloads, etc., qualify as web browsing, or is web 
browsing limited to HTTP?

>  why i am asking
>this is there arevalid  ip address which belongs to both the ISP's.



>And any
>one ISP goes down what about routing of that perticular ip address stream.

If the address spaces are much smaller than /24, there may not be a 
routing based solution.  Any routing solution will require 
coordination among the customer and the two ISPs.

It may be appropriate to look at various NAT, tunneling, and DNS 
techniques as well. There's just not enough information to know.

>   Hope this helps you to give some more clear cut solution.
>
>Regards
>Atul
\

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: From CHAP to PAP

2001-03-03 Thread Pierre-Alex

Thank You!

-Original Message-
From: Sam [mailto:[EMAIL PROTECTED]]
Sent: Saturday, March 03, 2001 5:35 AM
To: Pierre-Alex
Subject: Re: From CHAP to PAP


use the pap "sent user-name" command ..to specify the user credentials it
will send to the remote router.
i dont remember theexact syntax.. look it up on the CD..
i remember using it when i was practicing PAP
- Original Message -
From: "Pierre-Alex" <[EMAIL PROTECTED]>
To: "Jason Roysdon" <[EMAIL PROTECTED]>
Cc: "Cisco" <[EMAIL PROTECTED]>
Sent: Wednesday, March 01, 2000 3:19 PM
Subject: RE: From CHAP to PAP


> I just wanted to make sure I also knew how to configure the "simple"
> stuff...
>
> Pierre-Alex
>
>
> -Original Message-
> From: Jason Roysdon [mailto:[EMAIL PROTECTED]]
> Sent: Friday, March 02, 2001 10:48 PM
> To: '[EMAIL PROTECTED]'
> Subject: Re: From CHAP to PAP
>
>
> Shutdown the interfaces and bring them back up.  Worst case, save and
reload
> each one.
>
> Why would you want to use PAP instead of CHAP?  It's less secure and
leaves
> you more vulnerable as the passwords are sent in the clear.
>
> --
> Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> List email: [EMAIL PROTECTED]
> Homepage: http://jason.artoo.net/
> Cisco resources: http://r2cisco.artoo.net/
>
>
> ""Pierre-Alex"" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > My two ISDN routers R1 and R2 are currently authenticating using Chap.
> >
> > I wanted to change the authentication to pap, so I went to both routers
> >
> > and changed "ppp  authentication chap" to "ppp authentication pap"
> >
> > Now the routers won't authenticate. I cannot see what I did wrong. Can
you
> > help?
> >
> > Pierre-Alex
> >
> >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



help

2001-03-03 Thread Shane Stockman

I am going to connect a cable from the telco's chrono directly to the PRI
module on the 3640. I need the pinouts for the cable from the chrono to the
port.I am using cat5 cable.

This is what I have found but I am unsure whether it is correct to use as I
don't want to blow the module port.

Pinouts
Telco Chrono PRI Module DB15
1 TX Tip>9  TX Tip
2 TX Ring   >2  TX Ring

4 RX Tip>8  RX Tip
5 RX Ring   >15 RX Ring

I think this would be 120-Ohm balanced connection.

Thanks

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: off topic -- min reqs for obtaining an AS?

2001-03-03 Thread Larry Lamb

According to ARIN http://www.arin.net/regserv/asnguide.htm the minimum
requirements are unique routing policy and being a multihomed site.  I don't
see any requirements other than this regarding ASNs.  If there is, they have
it burried pretty deep.

"Dropped Packet" wrote in message ...

Is it possible to obtain an AS for one full class c, or is this just too
tiny?
_
Get your FREE download of MSN Explorer at http://explorer.msn.com

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Off-Topic: Grad School (again?)

2001-03-03 Thread Nick Tucker

I know Grad School has been discussed in the archives "as opposed" to
CCIE but I have a different question...what about "in addition".

Opinions, maybe a few pointers, and some hindsight from people thats been
in this longer than I have are what I am looking for.  My situation is
this; I have a BS in MIS (spring 99), I've passed np and ie written (last
year), attempted the lab once and was only a few points short of
troubleshooting--and will be trying it again in the very near future.
About 5 years in the field overall and 2 solid years of cisco and related
wan stuff.  Been in computers in general for as long as I can remember so I
would call it more than 15 years.

Call me crazy, but I pretty much enjoyed college and had always seen myself
going past the usual BS (woot, pun)--and get a graduate degree.  I am
thinking MBA, but I can honestly say I'm not overjoyed in being
management--but I realize that will be a reality.

Like I mentioned, I know there has been lots of debate on CCIE vs MS.. my
question is what about CCIE _and_ MS.  In a nutshell is it worth getting
the MS as well?  

Yes, of course, the conventional wisdom would say if you got the shot, then
go for it (which I will do reguardless).  The hypothetical question is how
much of a difference would a ccie with a masters make than one without?  




_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



followup to ASN off-topic

2001-03-03 Thread Dropped Packet

The network will be multihomed to 2 (possibly 3) ISPs.

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]