Compress IOS software link

2001-04-01 Thread Vincent

Hi;

I am looking for the links that contains software that can compress
Cisco IOS 2500 image.

Can you point to me?

Thanks in advance
Vincent
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Boot from network

2001-04-01 Thread Vincent

Hi;

I have tried to autoinstalled my cisco router thru serial link, but
unsuccessful, any has clue how
to do it, i follow the instruction from cisco web site, but it does not
work.

Also try to load network config to my cisco 2501, but I am
unsuccessful, any has clue about how
to do it/

Thanks
Vincent
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IBM 8228 MAU

2001-04-01 Thread Reinhold Fischer

Please correct me if i am wrong here, but isn't it required to connect RI
to RO to form the ring ? I always kept them connected together when using
the MAU in a lab environment. To test the ports i can only agree to
ElephantChild's method.

Greetings 

Reinhold

On Sun, 1 Apr 2001, ElephantChild wrote:

 On Sat, 31 Mar 2001, John Chang wrote:
 
  I have a IBM 8228 MAU.  What is the easiest/fastest way to test each port 
  including the RI RO?  What is the fastest way to test type 1 cables?  I 
  have this thing that has the type connector on one end.  It's about 3 
  inches long and has a red LED.  What is it called and what is it for?  I 
  looked in the archive and I want to IBM's website but couldn't find 
  anything helpful.  Thanks.
 
 To test all ports except RI and RO, first connect a machine to port 1
 and have it insert into the ring, then connect another to each of ports
 2-8 in turn, each time having it insert and checking that the machines
 see each other.
 
 To test RI and RO, you need 2 trunking cables. Connect the 2 MAUs
 together, then connect the 2nd machine to ports 1-8 of MAU 2 and repeat
 the insert-and-check test as above. Then, with 1 machine connected to
 each MAU, test RI by disconnecting first one end, then the other, then
 both, each time checking that the machines see each other. Reconnect RI
 and check RO the same way.
 
 Warning: If any test fails, it could be the MAU port, the machine, or
 the cable.  Use known good cables and machines to the extent possible. 
 
 -- 
 According to Joyce Melton, "respondability" is cromulent.
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Using a SCO unix box to manage a set of routers

2001-04-01 Thread Frank Kim

Hi folks,
I have a sco unix box which I would like to have 4 vt100 terminals attach
to via serial.  These 4 vty terminals will be used for students who will
be accessing my cisco lab.  I'm running into a situation where I can only
hook up two vt100 terminals to my SCO unix box because the hardware is
Intel and the motherboard has only two serial ports(com1  com2).  Where
can I get a serial cards that allow me to hook up 4 vt100 terminals to
that SCO unix box?  I know this is a silly setup.  This is a requirement,
not an option.  Otherwise, I could setup those students to acess via
telnet.  Thanks for any input.

-Frank
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IOS DHCP options (2514 and picky CATV server)

2001-04-01 Thread John S.

Hello,

I've hooked up my 2415 running 12.1(2)T to the CATV modem, but I'm having a
DHCP problem.  Basically, the CATV company provides registered host names
(format:  ab9-a.catv.area1.catv.com) and the host name must be in the
DHCP request packet, or the CATV system drops the request.

Sniffing my NT4 SP6a machine requesting an IP, I see the host name in under
the DHCP Header in the format:
DHCP Host name = "ab9-a.tv.area1.center2.catv.com".

Sniiffing my Cisco router, this entry is "".

Don't suppose there is any way to force the inclusion of the host name in a
DHCP request in IOS?

FYI, I set the hostname combos below with no luck:

1)
hostname ab9-a
ip domain-name tv.area1.center2.catv.com

2)
hostname ab9-a.tv.area1.center2.catv.com
(This gets truncated though)

Regards,

--john
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BCMSN...set-based or IOS switches

2001-04-01 Thread Circusnuts

  As far as I can tell, all switches 2948 and lower are IOS and 3500 and
up are set-basedis this correct? 

The BCMSN book covers this, in fact the Exam Cram explains it best.  You are
mostly correct.  The 2926, 2901,  there is a third L3 29xx something that
does the Set commands too.  I had a 2924 XL-EN (IOS-based) going into the
Switching exam  bought a Catalyst 5000 a week after.  Even though the Set
based is slated to become IOS based within the next 12 to 18 months, I
couldn't tell by the questions on the test.

All the best
Phil

- Original Message -
From: "Jake Secrist" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 30, 2001 8:56 PM
Subject: BCMSN...set-based or IOS switches


 I've searched the archives, but can't find an answer.

 Which switches are set-based and which are IOSand does the title
 'Catalyst' have anything to do with it?  Seems like all Cisco switches are
 Catalyst switches per their Product Guide.  As far as I can tell, all
 switches 2948 and lower are IOS and 3500 and up are set-basedis this
 correct?

 Thanks,

 Jake
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IOS DHCP options (2514 and picky CATV server)

2001-04-01 Thread Timothy Metz

are you sure they are not also checking your mac address. I think
roadrunner or @home does

Tim

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 John S.
 Sent: Sunday, April 01, 2001 12:36 PM
 To: [EMAIL PROTECTED]
 Subject: IOS DHCP options (2514 and picky CATV server)


 Hello,

 I've hooked up my 2415 running 12.1(2)T to the CATV modem, but
 I'm having a
 DHCP problem.  Basically, the CATV company provides registered host names
 (format:  ab9-a.catv.area1.catv.com) and the host name must be in the
 DHCP request packet, or the CATV system drops the request.

 Sniffing my NT4 SP6a machine requesting an IP, I see the host
 name in under
 the DHCP Header in the format:
 DHCP Host name = "ab9-a.tv.area1.center2.catv.com".

 Sniiffing my Cisco router, this entry is "".

 Don't suppose there is any way to force the inclusion of the host
 name in a
 DHCP request in IOS?

 FYI, I set the hostname combos below with no luck:

 1)
 hostname ab9-a
 ip domain-name tv.area1.center2.catv.com

 2)
 hostname ab9-a.tv.area1.center2.catv.com
 (This gets truncated though)

 Regards,

 --john
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Snapshot Routing Question

2001-04-01 Thread Bradley J. Wilson

Page 192 of Caslow: there's a config there that shows the line "dialer map
snapshot 60 2002."  My question is, what is this "60" and where did it come
from?  The next page shows the output from "show snapshot," and it says "For
dialer address 60," but that doesn't really explain a whole lot.  I tried
entering the command in IOS - I typed in "dialer map snapshot ?" and it came
back with "N   protocol specific address."  Okay, great, so address "60."
Is this IPX or AppleTalk or what?
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Snapshot Routing Question

2001-04-01 Thread Vincent

60 is active time, for the rouer end to end to exchange routing update
between server and client.
2002 is quiet time, router freeze, until next active period.


""Bradley J. Wilson"" [EMAIL PROTECTED] ?
00cd01c0bac3$16b00f80$fd02f7a5@bwilson">news:00cd01c0bac3$16b00f80$fd02f7a5@bwilson...
 Page 192 of Caslow: there's a config there that shows the line "dialer map
 snapshot 60 2002."  My question is, what is this "60" and where did it
come
 from?  The next page shows the output from "show snapshot," and it says
"For
 dialer address 60," but that doesn't really explain a whole lot.  I tried
 entering the command in IOS - I typed in "dialer map snapshot ?" and it
came
 back with "N   protocol specific address."  Okay, great, so address "60."
 Is this IPX or AppleTalk or what?
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: online book sellers

2001-04-01 Thread Justin M. Clark

cbd.booksonline.com or lcis.booksonline.com

you buy 3 books for 1.99 plus shipping, and get one more free.

then you have to buy one more book at regular price, which even at reagular
price its about 20% cheaper than you can get at a bookstore.

ive done it a couple times and have gotten about $400 worth of books for
about $50.


"seifu argaw" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Does any one know the cheapest online computer book
 seller?
 Thank you

 __
 Do You Yahoo!?
 Get email at your own domain with Yahoo! Mail.
 http://personal.mail.yahoo.com/?.refer=text
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Snapshot Routing Question

2001-04-01 Thread Bradley J. Wilson

According to Caslow, the active time is set on the server using the command
"snapshot server time dialer."  The configuration line I mentioned was
"dialer map snapshot 60 2002," which was taken from the client
configuration.  The "2002" is the dialer string - the phone number that the
client calls.

I've actually found the explanation on CCO (wow, who'da thought to look
there? ;-).  The "60" is a sequence number.  In some situations where you
would want to configure multiple dialer maps with snapshot routing, the
sequence number tells the router in which order to execute the dialer map
statements.

Anyone else have any concurring or dissenting opinions or experiences? :-)


- Original Message -
From: Vincent
Newsgroups: groupstudy.cisco
To: [EMAIL PROTECTED]
Sent: Sunday, April 01, 2001 12:17 PM
Subject: Re: Snapshot Routing Question


60 is active time, for the rouer end to end to exchange routing update
between server and client.
2002 is quiet time, router freeze, until next active period.


""Bradley J. Wilson"" [EMAIL PROTECTED] ?
00cd01c0bac3$16b00f80$fd02f7a5@bwilson">news:00cd01c0bac3$16b00f80$fd02f7a5@bwilson...
 Page 192 of Caslow: there's a config there that shows the line "dialer map
 snapshot 60 2002."  My question is, what is this "60" and where did it
come
 from?  The next page shows the output from "show snapshot," and it says
"For
 dialer address 60," but that doesn't really explain a whole lot.  I tried
 entering the command in IOS - I typed in "dialer map snapshot ?" and it
came
 back with "N   protocol specific address."  Okay, great, so address "60."
 Is this IPX or AppleTalk or what?
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX Performance

2001-04-01 Thread Hartnell, George

It *was* broke.

After much wailing and gnashing of teeth, I finally tried shutting down the
primary.

Bandwidth was immediately improved.

S, I'm calling this a faulty 515 primary system E0 interface.

Best, G.
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Using a SCO unix box to manage a set of routers

2001-04-01 Thread Feargal Ledwidge

A couple of places you can try:

Digi International: www.dgii.com

Digi is technically advanced although expensive. Their boards are very
advanced - but are probably more than you need.

Rocketport (from Comtrol):  http://www.comtrol.com/sales/specs/rp.htm

This are simpler and better priced. If you want basic serial connections -
then these are for you.

I've used both of these in more installs than I can remember and both are
excellent.

Hope this helps.

Feargal

Feargal Ledwidge
CCNP CCDA
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Frank Kim
Sent: Sunday, April 01, 2001 3:10 AM
To: [EMAIL PROTECTED]
Subject: Using a SCO unix box to manage a set of routers


Hi folks,
I have a sco unix box which I would like to have 4 vt100 terminals attach
to via serial.  These 4 vty terminals will be used for students who will
be accessing my cisco lab.  I'm running into a situation where I can only
hook up two vt100 terminals to my SCO unix box because the hardware is
Intel and the motherboard has only two serial ports(com1  com2).  Where
can I get a serial cards that allow me to hook up 4 vt100 terminals to
that SCO unix box?  I know this is a silly setup.  This is a requirement,
not an option.  Otherwise, I could setup those students to acess via
telnet.  Thanks for any input.

-Frank
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Secure telnet to your router using SSH

2001-04-01 Thread Groupstudy.com

Thanks, Sean,
PuTTY worked fine.

Ruihai
""Sean Young"" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 do NOT Teraterm Pro, it doesn't work.  The reason is that I think Cisco
 user SSH version 1.5.x or something which is something Teraterm does not
 support.  Try putty.  You can search for it from www.google.com.
 I had the same problem you have before.  When I switch over to putty
 or minterm, it works like a charm.

 Sean


 From: "Groupstudy.com" [EMAIL PROTECTED]
 Reply-To: "Groupstudy.com" [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: Secure telnet to your router using SSH
 Date: Sat, 31 Mar 2001 11:06:37 -0500
 
 Thanks, Clayton,  But I could not connet to the router using Tera Term
Pro
 with SSH.  I know the Tera Term is working because I have been using it
to
 connect to my PIX through SSH.  My router running Version 12.0(7)XK1 with
 DES support.
 I did the following.
 
   Router(config)# hostname hostname
   Router(config)# ip domain-name domainname
   Router(config)# crypto key generate rsaand
line vty 0 4
transport input all
 
 What do you think is the problem.
 
 Thanks
 
 Ruihai
 ""Clayton Price"" [EMAIL PROTECTED] wrote in message
 9a4033$lvh$[EMAIL PROTECTED]">news:9a4033$lvh$[EMAIL PROTECTED]...
   Depending on the platform I think you left out some vital commands.
  
   Router(config)# hostname hostname
   Router(config)# ip domain-name domainname
   Router(config)# crypto key generate rsa
  
  

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/12
1
   t/121t1/sshv1.htm#xtocid265436
  
   Clayton Price
  
   ""Sean Young"" [EMAIL PROTECTED] wrote in message
   [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
The answer is a very easy one.  You need to download Cisco IOS with
either DES or 3DES.  Furthermore, you will need to do this:
   
line vty 0 4
transport input ssh
   
That will do the trick.  If you want to be even more secure,
implement
TACACS server instead of local account.  By the way "transport input
 ssh"
essentially cut-off telnet to your router.  I've heard of newbies in
this group suggesting of implementing access-list to prevent.
That's
 not
the right way to do it.  Another thing, remember Cisco IOS only
 supports
SSH version 1 and keep in mind that SSH 1 does have security
vulnerabilities.  F___ those bastards at Cisco for not implementing
 SSH2
on Cisco IOS.
   
   
   
   
From: "Groupstudy.com" [EMAIL PROTECTED]
Reply-To: "Groupstudy.com" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Secure telnet to your router using SSH
Date: Fri, 30 Mar 2001 18:24:02 -0500

I have been using SSH to secure my telnet connection toPIX.  Does
 anyone
know how to do the samething to IOS router?

Thanks

Ruihai
_
Get your FREE download of MSN Explorer at http://explorer.msn.com
 _
 Get your FREE download of MSN Explorer at http://explorer.msn.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Visio Problem

2001-04-01 Thread Tim Ross

I recently upgrade Visio to Visio 2000. Since doing this, if I save as a
*.gif or *.jpg, the Cisco icons do not appear in the saved file. Other Icons
from "Basic Network", etc appear fine, but not the Cisco icons. I have
downloaded New_Cisco_Icons that someone posted in the groups recently, but
the problem remains. Has anyone else had this problem with Visio? It is
technical edition.

Tim
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Questions for Next-hop attribute

2001-04-01 Thread Hunt Lee

I'm really confused about the how Next-hop attribute works for IBGP and
EBGP.  Can somebody please shed some light on this.  Any tips or help
would be greatly appreciated.

Regards,
Hunt
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fwd: Re: Trade on studying resources (MCSE,CCNA.Solaris..etc)/games/warez

2001-04-01 Thread Arthur Simplina

I am forwarding this email to the group to let you know that this guy has 
sent me directly a reply to my email with the same content as what I have 
sent to him and the group. This [EMAIL PROTECTED] is using my name when 
he communicates to the group but the email that he sent me this time, he 
used "George" [EMAIL PROTECTED].

I have no experience in dealing with this kind of guy. I know that he is in 
our list and he is playing games with me and the group. If he can do this to 
me, he can do this to others.

I would appreciate for any suggestions and assistance in dealing with this 
[EMAIL PROTECTED]

Thanks a lot in advance,

Arthur C. Simplina


From: "George" [EMAIL PROTECTED]
To: "\"Arthur Simplina\"" [EMAIL PROTECTED]
Subject: Re: Trade on studying resources 
(MCSE,CCNA.Solaris..etc)/games/warez
Date: Sun, 1 Apr 2001 11:31:25 +0800
MIME-Version: 1.0
X-Originating-IP: [202.76.14.48]
Message-ID: [EMAIL PROTECTED]
References: [EMAIL PROTECTED]
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2615.200
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200

To [EMAIL PROTECTED]


  Whoever you are, you are using my name. Please discontinue doing this as
  this is not ethical.

  I hope that you made a mistake and is not playing games with me and the
  ciscogroupstudy.com.

  Arthur C. Simplina


- Original Message -
From: "Arthur Simplina" [EMAIL PROTECTED]
Newsgroups: groupstudy.cisco
Sent: Sunday, April 01, 2001 4:22 AM
Subject: Re: Trade on studying resources
(MCSE,CCNA.Solaris..etc)/games/warez


  To [EMAIL PROTECTED],
 
  Whoever you are, you are using my name. Please discontinue doing this as
  this is not ethical.
 
  I hope that you made a mistake and is not playing games with me and the
  ciscogroupstudy.com.
 
  Arthur C. Simplina
 
 
  From: "Arthur Simplina" [EMAIL PROTECTED]
  Reply-To: "Arthur Simplina" [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: Trade on studying resources 
(MCSE,CCNA.Solaris..etc)/games/warez
  Date: Sat, 31 Mar 2001 17:25:21 +0800
  
  If you have sth want to trade including studying material (MCSE W2K, 
CCNA
  2.0, Solaris, CCNP, CCIE...etc)/resources/games/warez, pls write
detail
  to me stating what you have and what you want.
  
  A lot of materials...here.
  
  Thanks!!
  _
  Get your FREE download of MSN Explorer at http://explorer.msn.com
_
Get your FREE download of MSN Explorer at http://explorer.msn.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Secure telnet to your router using SSH

2001-04-01 Thread Sean Young

glad I can help.  Personally, I like mindterm because it has more bell
and whistle.  In either case, both putty and mindterm work well because
there is no installation required.  Damn, these guys are really good
software developers.




From: "Groupstudy.com" [EMAIL PROTECTED]
Reply-To: "Groupstudy.com" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: Secure telnet to your router using SSH
Date: Sun, 1 Apr 2001 15:15:07 -0400

Thanks, Sean,
PuTTY worked fine.

Ruihai
""Sean Young"" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  do NOT Teraterm Pro, it doesn't work.  The reason is that I think Cisco
  user SSH version 1.5.x or something which is something Teraterm does not
  support.  Try putty.  You can search for it from www.google.com.
  I had the same problem you have before.  When I switch over to putty
  or minterm, it works like a charm.
 
  Sean
 
 
  From: "Groupstudy.com" [EMAIL PROTECTED]
  Reply-To: "Groupstudy.com" [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: Re: Secure telnet to your router using SSH
  Date: Sat, 31 Mar 2001 11:06:37 -0500
  
  Thanks, Clayton,  But I could not connet to the router using Tera Term
Pro
  with SSH.  I know the Tera Term is working because I have been using it
to
  connect to my PIX through SSH.  My router running Version 12.0(7)XK1 
with
  DES support.
  I did the following.
  
Router(config)# hostname hostname
Router(config)# ip domain-name domainname
Router(config)# crypto key generate rsaand
 line vty 0 4
 transport input all
  
  What do you think is the problem.
  
  Thanks
  
  Ruihai
  ""Clayton Price"" [EMAIL PROTECTED] wrote in message
  9a4033$lvh$[EMAIL PROTECTED]">news:9a4033$lvh$[EMAIL PROTECTED]...
Depending on the platform I think you left out some vital commands.
   
Router(config)# hostname hostname
Router(config)# ip domain-name domainname
Router(config)# crypto key generate rsa
   
   
 
 http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/12
1
t/121t1/sshv1.htm#xtocid265436
   
Clayton Price
   
""Sean Young"" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 The answer is a very easy one.  You need to download Cisco IOS 
with
 either DES or 3DES.  Furthermore, you will need to do this:

 line vty 0 4
 transport input ssh

 That will do the trick.  If you want to be even more secure,
implement
 TACACS server instead of local account.  By the way "transport 
input
  ssh"
 essentially cut-off telnet to your router.  I've heard of newbies 
in
 this group suggesting of implementing access-list to prevent.
That's
  not
 the right way to do it.  Another thing, remember Cisco IOS only
  supports
 SSH version 1 and keep in mind that SSH 1 does have security
 vulnerabilities.  F___ those bastards at Cisco for not 
implementing
  SSH2
 on Cisco IOS.




 From: "Groupstudy.com" [EMAIL PROTECTED]
 Reply-To: "Groupstudy.com" [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Secure telnet to your router using SSH
 Date: Fri, 30 Mar 2001 18:24:02 -0500
 
 I have been using SSH to secure my telnet connection toPIX.  Does
  anyone
 know how to do the samething to IOS router?
 
 Thanks
 
 Ruihai
 _
 Get your FREE download of MSN Explorer at http://explorer.msn.com
  _
  Get your FREE download of MSN Explorer at http://explorer.msn.com
_
Get your FREE download of MSN Explorer at http://explorer.msn.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Question about frame-relay map statements and frame relay inverse arp

2001-04-01 Thread Raul F. Fernandez

Dear Group,

I have been trying to duplicate the problem where if you enter a frame relay
map stament in a frame realy interface that is also using frame relay
inverse arp that inverse arp will be disabled for specific protocol for that
specific DLCI specified in the frame relay map statement.

I have reloaded my router, yet the interface still does inverse arp and is
able to keep the  mapping to the hub and also ,of course, still has the
frame relay map statement.

My question is this, Has anyone else run into this? Also, I am running 12.09
code and I am wondering if this is something that has been worked around on
the 12.09 code.

Here is the interface config for the frame relay interface:

interface Serial0
 ip address 192.168.10.10 255.255.255.0
 no ip directed-broadcast
 encapsulation frame-relay
 frame-relay map ip 192.168.10.5 211

after the reboot I get this for the "show frame-realy map" :

Satellite2R5#show frame-relay map
Serial0 (up): ip 192.168.10.1 dlci 211(0xD3,0x3430), dynamic,
  broadcast,, status defined, active
Serial0 (up): ip 192.168.10.5 dlci 211(0xD3,0x3430), static,
  CISCO, status defined, active

According to Caslow books and other publication the spoke router should
loose connectivity to the hub router since since it is using frame relay
inverse arp to map to the hub router.
I have a 2523 as my frame relay switch. Anyway, I still maintain an inverse
arp mapping to the hub and do not loose connectivity to it. Anyone have any
input on this?


Thanks for your time,

Raul
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IOS DHCP options (2514 and picky CATV server)

2001-04-01 Thread Raul F. Fernandez

I am doing the same thing running NAT overlaod off my ip address on the
ethernet interface. I had to unplug the cable modem then p;ug it in again so
that it would take the mac address of the ethernet interface. Worked fine
after that.

Raul

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Timothy Metz
Sent: Sunday, April 01, 2001 8:54 AM
To: John S.; [EMAIL PROTECTED]
Subject: RE: IOS DHCP options (2514 and picky CATV server)


are you sure they are not also checking your mac address. I think
roadrunner or @home does

Tim

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 John S.
 Sent: Sunday, April 01, 2001 12:36 PM
 To: [EMAIL PROTECTED]
 Subject: IOS DHCP options (2514 and picky CATV server)


 Hello,

 I've hooked up my 2415 running 12.1(2)T to the CATV modem, but
 I'm having a
 DHCP problem.  Basically, the CATV company provides registered host names
 (format:  ab9-a.catv.area1.catv.com) and the host name must be in the
 DHCP request packet, or the CATV system drops the request.

 Sniffing my NT4 SP6a machine requesting an IP, I see the host
 name in under
 the DHCP Header in the format:
 DHCP Host name = "ab9-a.tv.area1.center2.catv.com".

 Sniiffing my Cisco router, this entry is "".

 Don't suppose there is any way to force the inclusion of the host
 name in a
 DHCP request in IOS?

 FYI, I set the hostname combos below with no luck:

 1)
 hostname ab9-a
 ip domain-name tv.area1.center2.catv.com

 2)
 hostname ab9-a.tv.area1.center2.catv.com
 (This gets truncated though)

 Regards,

 --john
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Questions for Next-hop attribute

2001-04-01 Thread John Neiberger

When an eBGP neighbor forwards routing information to another eBGP neighbor,
it changes the next hop to itself.  When an iBGP neighbors exchange
information they do not, by default, change the next hop.  This is where the
synchronization rule comes in.

An iBGP neighbor will not be able to use a route if it does not have a valid
route to the next hop in its IGP.  Having synchronization turned on is often
unnecessary, so most people turn it off.  You still have a problem, though: 
the receiving iBGP neighbor still might not know how to reach the next hop
for any of the routes in its BGP table.  To solve this, on your iBGP peers
use the next-hop-self command.  Since the peers already know how to reach
each other, this solves your problem.

I hope that helps, and I hope I haven't mischaracterized the issue.  I
haven't really thought through all of this in a while so I may have some
details wrong.

If you really want to understand this stuff, pick up a copy of Internet
Routing Architectures (2nd Ed.) by Sam Halabi.

Another book I really liked is short but sweet.  It's BGP4: Interdomain
Routing in the Internet (or something close to that.)  It's very short but
it's an excellent resource.  Perhaps you should read that first and then
read Halabi.

Or you could also get a subscription to Certification Zone and read Howard's
papers on BGP, they're quite excellent.

HTH,
John

  I'm really confused about the how Next-hop attribute works for IBGP and
  EBGP.  Can somebody please shed some light on this.  Any tips or help
  would be greatly appreciated.
  
  Regards,
  Hunt
___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Books for Support 640-506

2001-04-01 Thread chander goyal

Any suggestions for good must read books on 640-506 CCNP Support Exam.

TIA,
Chander
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN simulator problem

2001-04-01 Thread BS

My ILS 1000 comes with both U and S/T interfaces... Only prob is I need
additional "optional" s/w to simulates Custom ATT, etc.. any has the s/w ,
can tell me what's the diff...


""Nigel Taylor"" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Fred,
 My first question would be which model did you get?  The ILS 2000
 comes with support for both U and ST BRI interfaces, whereas the
 Demonstrator only supports the U interface.  What does this mean...?

 You'll need two NT1's in order to make your connection if this is the
case.

 HTH

 Nigel.

 - Original Message -
 From: Fred Danson [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Sunday, April 01, 2001 12:10 AM
 Subject: ISDN simulator problem


  Hey Group,
 
  I just got my Teltone ISDN simulator in the mail, but I can't seem to
get
 it
  working. The simulator, by default, is setup to use Basic-ni1. I
connected
  both of my routers directly to the simulator using  straight-through
cat5
  cables. I then typed no shut on the bri0 interfaces and set the isdn
  switch-type as basic-ni1 on both of the routers.
 
  When I type show isdn status, I get this:
 
  Router#show isdn status
  The current ISDN Switchtype = basic-ni1
  ISDN BRI0 interface
  Layer 1 Status:
  DEACTIVATED
  Layer 2 Status:
  Layer 2 NOT Activated
  Layer 3 Status:
  No Active Layer 3 Call(s)
  Activated dsl 0 CCBs = 0
  Total Allocated ISDN CCBs = 0
 
  With my basic configuration, shouldn't the layer 2 be working? Can
anyone
  spot any problems with my setup?
 
  Thanks in advance,
  Fred
  _
  Get your FREE download of MSN Explorer at http://explorer.msn.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Visio Problem

2001-04-01 Thread Kevin Wigle

If this is the same problem I'm thinking of..

First, I suggest saving the diagram under a new name.

Then, "select all " from the edit menu.

Now, select "Shape - Grouping - Ungroup"

The newer icons are actually icons within icons.  So you may get the warning
about glue points getting detached (or something similar).

Keep saying yes until it stops.

Now you should be able to save the diagram as a gif and jpeg

Kevin Wigle


- Original Message -
From: "Tim Ross" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, 01 April, 2001 17:40
Subject: Visio Problem


 I recently upgrade Visio to Visio 2000. Since doing this, if I save as a
 *.gif or *.jpg, the Cisco icons do not appear in the saved file. Other
Icons
 from "Basic Network", etc appear fine, but not the Cisco icons. I have
 downloaded New_Cisco_Icons that someone posted in the groups recently, but
 the problem remains. Has anyone else had this problem with Visio? It is
 technical edition.

 Tim
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ATM CCNP Test

2001-04-01 Thread Leonard Ong

Hello,

I would like to verify if the Cisco ATM Specialization test that are going 
to be retired soon,
is still the same / relevant using CATM training version 2.0 ?

And how about MCNS, is it still the only test required to achieve Security ?

Thanks

Regards,
Leonard 
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE lab scenarios to trade

2001-04-01 Thread mike johnson

hello,

Wondering if anyone has any real CCIE lab scenarios to trade?  I am
scheduled for the CCIE lab in July.  I am not too concern with Cisco
NDA because I know that most people don't.  I am willing to trade with
anyone.

Mojo.
_
Get your FREE download of MSN Explorer at http://explorer.msn.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: online book sellers

2001-04-01 Thread Circusnuts

www.bestbookbuys.com  www.halfpricecomputerbooks.com

- Original Message -
From: "seifu argaw" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, April 01, 2001 6:43 AM
Subject: online book sellers


 Does any one know the cheapest online computer book
 seller?
 Thank you

 __
 Do You Yahoo!?
 Get email at your own domain with Yahoo! Mail.
 http://personal.mail.yahoo.com/?.refer=text
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE lab scenarios to trade

2001-04-01 Thread Phillip Heller

I sincerely hope this is an April Fools joke.

--phil

On Sun, 1 Apr 2001, mike johnson wrote:

hello,

Wondering if anyone has any real CCIE lab scenarios to trade?  I am
scheduled for the CCIE lab in July.  I am not too concern with Cisco
NDA because I know that most people don't.  I am willing to trade with
anyone.

Mojo.
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE lab scenarios to trade

2001-04-01 Thread Brad Beck

Mr. Johnson,

I do believe you will find most of us on this list are concerned with the 
NDA.  I can't imagine an inquiry such as yours will prompt positive response.

-brad




At 08:29 PM 04/01/2001 -0500, mike johnson wrote:
hello,

Wondering if anyone has any real CCIE lab scenarios to trade?  I am
scheduled for the CCIE lab in July.  I am not too concern with Cisco
NDA because I know that most people don't.  I am willing to trade with
anyone.

Mojo.
_
Get your FREE download of MSN Explorer at http://explorer.msn.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Trade (2) 2501s for a 2523

2001-04-01 Thread info

I have two 2501s that I would like to trade someone
for a 2523 router.  If you look at pricing on ebay,
you'd be making about $300 on the dealmaybe more.

I'm in a hurry...dont have time to sell the two on ebay
and buy the 2523.  email to [EMAIL PROTECTED]
ASAP!!!
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: online book sellers

2001-04-01 Thread Dennis Laganiere

This is kind of off-topic, but since we're taking about online bookstores, I
saw one of the contestants on battle-bots had a URL for
http://www.robotbooks.com/ as a sponsor.  I thought it was cute and hit the
site.  Just so it's not completely off topic, let me say that if I ever
finish my d$*m CCIE and I'm ready for a new hobby, I'm going to turn this
rack full of stuff into the meanest bas^$#@d that ever ran on treads...

--- Dennis

-Original Message-
From: Circusnuts [mailto:[EMAIL PROTECTED]]
Sent: Sunday, April 01, 2001 3:54 PM
To: seifu argaw; [EMAIL PROTECTED]
Subject: Re: online book sellers


www.bestbookbuys.com  www.halfpricecomputerbooks.com

- Original Message -
From: "seifu argaw" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, April 01, 2001 6:43 AM
Subject: online book sellers


 Does any one know the cheapest online computer book
 seller?
 Thank you

 __
 Do You Yahoo!?
 Get email at your own domain with Yahoo! Mail.
 http://personal.mail.yahoo.com/?.refer=text
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: setting up 2500's

2001-04-01 Thread The.rock

your off.. LOL

""Peter Martinez"" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Please take me off this list

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Pedro
 Quezada
 Sent: Friday, March 30, 2001 7:43 PM
 To: [EMAIL PROTECTED]
 Subject: Re: setting up 2500's

 u can connect with back to back cables but better yet
 get arouter with four serial interfaces and configure it as a frame relay
 switch

 Luke Everett wrote:

  I have 3 Cisco 2500 routers that I want to setup to simulate WAN =
  connections.  What can I do to simulate this with my wan cables without
=
  having to buy a CSU/DSU?  Thanks.
 
  Luke Everett
  MCP+I,MCSE,CCNA
 Do You Yahoo!?
 Get your free @yahoo.com address at http://mail.yahoo.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re:

2001-04-01 Thread Sasa Milic

It all depends what your telco would provide to you. For example,
in my country, telco is using nocrc4 framing with alcatel isdn switches,
and crc4 with siemens switches.

Regards,
  Sasa


 Does anyone have any idea about crc4 and nocrc4 ? 
 I think crc4 used for framing (G.704) and ITU-T recommended.
 Why Cisco put nocrc4 feature in their boxes.
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN simulator problem

2001-04-01 Thread Nigel Taylor

BS,
I don't how much different the ILS 2000 is from your model, but the
one I have has
 a RS-232 async --- DB 9 connection for the software support.  Teltone has
the software that can  be downloaded from their web site.   Basically it
allows you to change between the 4 major bri switch
types...

National ISDN-1
ATT Custom
DMS100
ETSI

The only difference here is that like the National ISDN-1 which requires
"spids" to be configured the
ATT Custom does not require them.

HTH

Nigel..

- Original Message -
From: BS [EMAIL PROTECTED]
Newsgroups: groupstudy.cisco
To: [EMAIL PROTECTED]
Sent: Sunday, April 01, 2001 8:59 PM
Subject: Re: ISDN simulator problem


 My ILS 1000 comes with both U and S/T interfaces... Only prob is I need
 additional "optional" s/w to simulates Custom ATT, etc.. any has the s/w
,
 can tell me what's the diff...


 ""Nigel Taylor"" [EMAIL PROTECTED] wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Fred,
  My first question would be which model did you get?  The ILS
2000
  comes with support for both U and ST BRI interfaces, whereas the
  Demonstrator only supports the U interface.  What does this mean...?
 
  You'll need two NT1's in order to make your connection if this is the
 case.
 
  HTH
 
  Nigel.
 
  - Original Message -
  From: Fred Danson [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Sunday, April 01, 2001 12:10 AM
  Subject: ISDN simulator problem
 
 
   Hey Group,
  
   I just got my Teltone ISDN simulator in the mail, but I can't seem to
 get
  it
   working. The simulator, by default, is setup to use Basic-ni1. I
 connected
   both of my routers directly to the simulator using  straight-through
 cat5
   cables. I then typed no shut on the bri0 interfaces and set the isdn
   switch-type as basic-ni1 on both of the routers.
  
   When I type show isdn status, I get this:
  
   Router#show isdn status
   The current ISDN Switchtype = basic-ni1
   ISDN BRI0 interface
   Layer 1 Status:
   DEACTIVATED
   Layer 2 Status:
   Layer 2 NOT Activated
   Layer 3 Status:
   No Active Layer 3 Call(s)
   Activated dsl 0 CCBs = 0
   Total Allocated ISDN CCBs = 0
  
   With my basic configuration, shouldn't the layer 2 be working? Can
 anyone
   spot any problems with my setup?
  
   Thanks in advance,
   Fred
   _
   Get your FREE download of MSN Explorer at http://explorer.msn.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Question about frame-relay map statements and frame relayinverse arp

2001-04-01 Thread Ping

I have tried what you have been trying below in code 11.2 ...
and if i do a frame relay map statement for that dlc1 and i reboot i does not do iverse
arp.
i had the spoke do inverse arp and then mapped to the dlci; and it shoes the static
maping and the dynamic mapping when i do a "sh fram pvc" and cleared the frame relay 
arp
table .
and i loose the dynamic mapping .

never tried it with 12.xx but it is worth a shot ..It could be a ios version

Elpingu

"Raul F. Fernandez" wrote:

 Dear Group,

 I have been trying to duplicate the problem where if you enter a frame relay
 map stament in a frame realy interface that is also using frame relay
 inverse arp that inverse arp will be disabled for specific protocol for that
 specific DLCI specified in the frame relay map statement.

 I have reloaded my router, yet the interface still does inverse arp and is
 able to keep the  mapping to the hub and also ,of course, still has the
 frame relay map statement.

 My question is this, Has anyone else run into this? Also, I am running 12.09
 code and I am wondering if this is something that has been worked around on
 the 12.09 code.

 Here is the interface config for the frame relay interface:

 interface Serial0
  ip address 192.168.10.10 255.255.255.0
  no ip directed-broadcast
  encapsulation frame-relay
  frame-relay map ip 192.168.10.5 211

 after the reboot I get this for the "show frame-realy map" :

 Satellite2R5#show frame-relay map
 Serial0 (up): ip 192.168.10.1 dlci 211(0xD3,0x3430), dynamic,
   broadcast,, status defined, active
 Serial0 (up): ip 192.168.10.5 dlci 211(0xD3,0x3430), static,
   CISCO, status defined, active

 According to Caslow books and other publication the spoke router should
 loose connectivity to the hub router since since it is using frame relay
 inverse arp to map to the hub router.
 I have a 2523 as my frame relay switch. Anyway, I still maintain an inverse
 arp mapping to the hub and do not loose connectivity to it. Anyone have any
 input on this?

 Thanks for your time,

 Raul
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco training provided by Ascolta

2001-04-01 Thread Andy Barkl

Anyone have any feedback on Cisco training provided by Ascolta?
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CID

2001-04-01 Thread Vivek Singh

Hi All,

Is there any CCDP out there who can help with CID exam on what kind of book
to read and what is the level of toughness of the exam.

Thanks

Vivek
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PAT

2001-04-01 Thread J Roysdon

Which would solve the problem: e0 is down, s0.1 is set for ip unnumbered e0,
so s0.1 is effectively down.  Unless you only can have two interfaces on a
router, never point an ip unnumbered interface at another interface that can
go down unless you have a reason for it to go down when the numbered
interface is down.

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""martijn michiel"" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 First thing that jumps into mind is why don't you define a loopback
 interface with an ip address?

 Martijn

 -Oorspronkelijk bericht-
 Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Namens Ruddy
 Cordero
 Verzonden: vrijdag 30 maart 2001 16:52
 Aan: [EMAIL PROTECTED]
 Onderwerp: PAT


 I have a frame relay circuit connected to a 1750 router with an =
 ip-unnumbered assign to the serial int to  point to the Ethernet =
 interface. I shut down the Ethernet interface and configured a second =
 serial interface on the router with the ip add. that is attached to a =
 Cisco 2600 router. I also changed the ip unnumbered to point to that =
 serial interface. I configured the 2600 to overload Nat and configured =
 some static interfaces. My problem is: this 1750 is connected to the =
 internet via frame relay and I'm unable to get any internet traffic to =
 go pass the 1750. I create a static mapping for the DNS server we are =
 using and I'm still no able to get no traffic. Need some advice from
 _
 Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



The book I need

2001-04-01 Thread seifu argaw

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/?.refer=text
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



The book I need

2001-04-01 Thread seifu argaw

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/?.refer=text
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



The book I need

2001-04-01 Thread seifu argaw

The book I need is CISCO CCNP preparation
library,second edition ISBN:1587050137

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/?.refer=text
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPsec port

2001-04-01 Thread J Roysdon

The names and numbers are correct, but as someone else pointed out a few
posts back, it's not a port number, but a protocol number.

Protocols:
6TCP
17UDP
47GRE (PPTP requirement)
50ESP
51AH

Just to delve a little further about security protocols, ISAKMP does use
TCP/500, and you'll need it too.

Bookmark 'em:
ftp://ftp.isc.org/pub/rfc/rfc1700.txt
http://www.isi.edu/in-notes/iana/assignments/port-numbers

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Kane, Christopher A."" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Actually, you have it backwards. AH = port 51. ESP = port 50.

 Christopher A. Kane, CCNP
 Senior Network Control Tech
 Router Ops Center/Hilliard NOC
 UUNET
 (614)723-7877



 -Original Message-
 From: Rizzo Damian [mailto:[EMAIL PROTECTED]]
 Sent: Friday, March 30, 2001 12:19 PM
 To: 'Ruihai An'; [EMAIL PROTECTED]
 Subject: RE: IPsec port


 AH-port 50, ESP-port 51 and ISAKMP-port 500



 -Original Message-
 From: Ruihai An [mailto:[EMAIL PROTECTED]]
 Sent: Friday, March 30, 2001 12:05 PM
 To: [EMAIL PROTECTED]
 Subject: IPsec port


 I configured my PIX as the IPsec VPN terminator to support DES VPN client.
 I have an inbound access-list  on my perimeter router.  Does any one know
 the ports I need to open for IPsec VPN traffic on my perimeter router ?

 Ruihai
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Stupid question

2001-04-01 Thread J Roysdon

Are you sure all interfaces are 'no shutdown' ?  You can assign even the
same ip address to multiple interfaces if they're shutdown.

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Mask Of Zorro"" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Just to throw a wrinkle in all of this, a Cisco router WILL allow you to
 place up to 4 SERIAL interfaces in the same subnet. Try it... do like
this:

 Routerconf t
 Router(config)int s0
 Router(config-if)ip add 10.1.1.1 255.255.255.0
 Router(config-if)int s1
 Router(config-if)ip add 10.1.1.3 255.255.255.0

 This works... the router will not complain. Why would you need to do this?
I
 dunno, but you can if you want to - only on SERIAL interfaces...

 Z




 From: EA LOUIE [EMAIL PROTECTED]
 Reply-To: EA LOUIE [EMAIL PROTECTED]
 To: "John Neiberger" [EMAIL PROTECTED], [EMAIL PROTECTED]
 CC: [EMAIL PROTECTED]
 Subject: Re: Stupid question
 Date: 30 Mar 2001 10:50:28 PST
 
 "John Neiberger" [EMAIL PROTECTED] wrote:
   The IP address on a switch or hub is for management purposes only and
is
   not applied to an actual physical port.  The IP address in a switch or
   hub is applied to a virtual interface so you can use IP to test
   connectivity or telnet to the device for configuration purposes.
 
 ...and don't forget for SNMP monitoring/management, too, if enabled
 
 :-)
 
 -e-
 
  
"Wang Chia Ta" [EMAIL PROTECTED] 3/30/01 9:40:46 AM 
   Thank you for your response. Another question is when or why would you
   be
   required
   to use set an ip address on a switch and/or hub interface?
  
   Thx.
  
   Wang Chia Ta
   Systems Support
   Mitsubishi Motors
   ---
  
   ""John Neiberger"" [EMAIL PROTECTED] wrote in message
   sac446f2.062@fsutil01">news:sac446f2.062@fsutil01...
This isn't a stupid question, it's a very important point to make.
   If
you are routing, each interface on the router must be in its own
   subnet.
 Otherwise routing would not work.  If you're bridging, then the
   bridged
interfaces are in the same subnet but you don't specifically assign
   an
IP address to those interfaces.
   
I'm guessing that you're really asking the former question:  in a
routing situation can two different interfaces be in the same
   subnet,
and the answer is no.
   
HTH,
John
   
 After removing all of the HTML, Rick appeared to say... 
Dear all,
I have a stupid question, want to clarify.
is it I cannot make two or more interfaces share the same subnet in
the Router?
Thanks
   
Best Regards,
rick
   [EMAIL PROTECTED]
   [EMAIL PROTECTED]
 Get your FREE download of MSN Explorer at http://explorer.msn.com
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: linux on a 2500 ? Was: Programming under IOS

2001-04-01 Thread J Roysdon

I'd be curious to see such a thing.

I just installed Zebra on my linux server so I can give people IOS-like
access to a BGP router.  telnet://r2.artoo.net:2605 with a password of
'bgp'.  The interface is very close to IOS and has nearly all the
BGP-related commands.  I just wish it had traceroute and show ip route (of
course, I think I could do it with the main Zebra daemon, but I don't feel
like messing with it just now).

Zebra is a free routing daemon (bgp, ospf, rip, all with ipv6 support as
well): http://www.zebra.org/

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


"Eric Waguespack" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 You can run Linux on a 2500? I searched the archive for more details..
didn't find any, anyone got a link?

 -Eric

 Karen E Young wrote:

  Chee Leong,
 
  There really isn't a need to write an external interface method (such as
sockets) when one already exists.
 
  Most, if not all, of what you're asking for is available via SNMP. If
you really want to write a program to obtain this info all you need to do is
write one to issue SNMP GETs for the info you want to obtain, collect the
responses, parse the data, and format it into your chosen format.
 
  Perl is a pretty good choice for something like this and it seems to me
that I ran across something in Visual Basic that would let you do it too.
 
  Hope this helps,
 
  Karen Young
 
  *** REPLY SEPARATOR  ***
 
  On 3/30/2001 at 10:30 AM Ryan O'Connell wrote:
 
  There is no porvision for running code other than the IOS itself on a
Cisco
  router. (Except you can run Linux on 2500s, but that's probably not
what
  you're after)
  
  On Fri, Mar 30, 2001 at 04:14:43PM -0800, Tan Chee Leong wrote:
   Hi,
  
   First, my apologies if the question makes no sense at all as I am
just =
   evaluating it's possibility.  I am also fairly new to CISCO stuff
(only =
   got my CCNA a month ago) so your advise on this will be very helpful
=
   although it is off-topic.
  
   I am thinking of writing some small programs within the IOS platform
=
   such that it can communicate with an external host, using socket =
   programming if you like.  I am interested in obtaining the following:
  
   1.basic configuration.  I know it's contained in the
startup-config =
   and with snmp turned on, this information can be retrieved.  However,
=
   what if snmp is not turned on?  Is it possible, without going to all
the =
   routers to enable snmp, to still obtain this information from a host
=
   using tcp? =20
   2.route table.  Particularly I am interested in studying the
dynamic =
   changes of the route table over some period of time.  Hence if the =
   router can periodically send information to some internal host within
=
   the network, a collection of route tables can be obtained.
  
   If in the end I have to do my own programming, it will lead on to =
   several other questions:=20
  
   1.is it feasible in the first place, given that CISCO IOS is =
   proprietory stuff? =20
   2.where can I get programming info?  any recommendations?
  
   Really appreciate if you can help me on this.
  
   Cheers,
   Chee Leong
[EMAIL PROTECTED]
  
  --
  Ryan O'Connell - [EMAIL PROTECTED] - http://www.complicity.co.uk
  
  I'm not losing my mind, no I'm not changing my lines,
  I'm just learning new things with the passage of time
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ASN18506 up and running

2001-04-01 Thread J Roysdon

It was indeed as synchronization problem.  My understanding is that in order
to bring it from BGP into the routing table, it has to be able to reach the
next-hop address from IGP.  What's odd is that both WAN links to the
upstream ISPs were in iBGP, so I need to read up on synchronization some
more.

For now, 'no synchronization' fixed the problem.

As I posted OT in another post (but perhaps more relevant here):
I just installed Zebra on my linux server so I can give people IOS-like
access to a BGP router.  telnet://r2.artoo.net:2605 with a password of 'bgp'
and you can get a look at the world of BGP from AS18506 via UUNET AS701 and
Sprint AS1239.

The Zebra interface is very close to IOS and has nearly all the BGP-related
commands.  I just wish it had traceroute and show ip route (of course, I
think I could do it with the main Zebra daemon, but I don't feel like
messing with it just now).

Zebra is a free routing daemon (bgp, ospf, rip, all with ipv6 support as
well): http://www.zebra.org/



--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""John Neiberger"" [EMAIL PROTECTED] wrote in message
sac48e13.088@fsutil01">news:sac48e13.088@fsutil01...
 [I'm resending this from my work address because the first attempt
 didn't appear to succeed.]

 Forgive me if I missed something but this appears to be the famous
 iBGP
 synchronization problem, which I believe can be fixed by turning off
 synchronization and set 'next-hop-self' on advertisements between your
 two internal routers.

 When one router takes external routes and passes them to an internal
 neighbor, it doesn't alter the next hop attribute.  When the other
 internal neighbor receives the route, the next hop is not the other
 internal peer,
  but the external peer it was received from.  If the second iBGP peer
 in this
 example does not have a valid IGP route to that next hop, the route
 can't
 be installed into the routing table.

 I only quickly looked through your post so I may be way off base here.
 Take
  it with a grain of salt.  g

 HTH,
 John
 
 Ok, more info (plus I have BGP to UUNET up and have the same
 problem
 the
 reverse direction).  206.51.253.1 is part of UUNET AS701.
 64.6.1.1 is
   part
 of Sprint AS1239:
   
 ISC-Mod-3640#sh ip bgp 206.51.253.1
 BGP routing table entry for 206.51.253.0/24, version 0
 Paths: (1 available, no best path)
   Not advertised to any peer
   701
 157.130.196.245 (metric 1) from 63.107.123.249
 (63.107.123.253)
   Origin IGP, localpref 100, valid, internal, not
 synchronized
 ISC-Mod-3640#
   
 ISC-Tur-2600-2#sh ip bgp 64.6.1.1
 BGP routing table entry for 64.6.0.0/20, version 0
 Paths: (1 available, no best path)
   Not advertised to any peer
   1239
 144.232.206.65 (metric 1) from 63.107.123.250 (63.172.195.1)
   Origin IGP, metric 60, localpref 100, valid, internal, not
 synchronized
   
   
 There-in lies my problem.  How do I get each router to
 synchronize so
 it
 will allow it into the routing table?
   
 Two cool public BGP looking glass routers:
 route-views.oregon-ix.net
 route-server.cerf.net
   
 --
 Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
 List email: [EMAIL PROTECTED]
 Homepage: http://jason.artoo.net/
 Cisco resources: http://r2cisco.artoo.net/
   
   
 ""J Roysdon"" [EMAIL PROTECTED] wrote in message
 9a0gj6$c5a$[EMAIL PROTECTED]">news:9a0gj6$c5a$[EMAIL PROTECTED]...
  It's been delayed time and again, but I've finally found the
 time to
   push
  through the docs and configuration notes needed to get our ASN
 up
 and
  running with our upstream providers.
 
  So, this morning we began announcing ASN 18506 and our
 netblocks out
  Sprintlink with no problems.  I had them turn on full routes
 and
 we're
   up
  to: '11176 network entries and 11169 paths' and still
 climbing.
 
  Ok, so hears the setup:
 
  UUNET - [T1/FR] - s0/0.1 2621 s0/1 - [T1] - s0/1 3640 s1/2 -
 [T1] -
   Sprint
 
  I'm still trying to get our Accounts Payable folks to get us
 our
 UUNET
  account number so I haven't got any BGP communications up with
 UUNET
   yet.
  As the 2621 is maxed at 64mb RAM, I'm going to tell UUNET to
 only
 send
   me
  customer routes.  Also, presently I'm filtering non-iBGP info
 from
 the
 3640
  to the 2621 and only allowing Sprint's own ASN through
 (eventually
 I'll
 have
  it pass Sprint and their customers).  The 2621 shows all the
 1238
 netblocks
  that should be getting through in the bgp table, but if I do a
 'sh
 ip
 route'
  they don't appear, and in fact no BGP routes show.
 
  Here's the pertinent current config sections:
  3640:
  interface Serial0/1
   description External T1 to 

Re: Cisco training provided by Ascolta

2001-04-01 Thread John Neiberger

I've taken CLSC and CEMS with them and had excellent instructors both times.
In fact, did you see the movie Good Morning Vietnam?  If so, do you remember
the two expressionless twins that censored the news that Robin Williams
could read?  One of those guys was my instructor for CEMS!  

HTH,
John

  Anyone have any feedback on Cisco training provided by Ascolta?
___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Strange problem, Pls help

2001-04-01 Thread Gunjan Mathur

Hi,
I hve 2621 router and tow WAN links are terminating on
that, my proble is this is one of my wan link goes
down then second link drop the packets. 
What colud be the reason of that.

ravi

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/?.refer=text
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Secure telnet to your router using SSH

2001-04-01 Thread J Roysdon

Simple CCO search of 'router ssh' found:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121
t/121t1/sshv1.htm

"Secure Shell Version 1 Support
...
Supported Platforms

  a.. Cisco 1700 series


  b.. Cisco 2600 series


  c.. Cisco 3600 series


  d.. Cisco 7200 series


  e.. Cisco 7500 series


  f.. Cisco ubr920 series
...
Prerequisites
IPSec Software Image Required



Before configuring the SSH server feature, you must have an IPSec encryption
software image from Cisco IOS Release 12.1(1)T downloaded on your router. "



Some encryption is better than plaintext, of course, but SSHv1 has been
found to have a number of security holes.  My suggestion would be to have a
box running SSHv2 that I can securely connect to, or use an IPSEC tunnel.

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/



""Groupstudy.com"" [EMAIL PROTECTED] wrote in message
9a38nf$kb5$[EMAIL PROTECTED]">news:9a38nf$kb5$[EMAIL PROTECTED]...
 I have been using SSH to secure my telnet connection toPIX.  Does anyone
 know how to do the samething to IOS router?

 Thanks

 Ruihai
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco 2507 Hub Router Function

2001-04-01 Thread J Roysdon

Simple CCO search on "2507" found:
http://www.cisco.com/warp/public/cc/pd/rt/2500/prodlit/2505_pa.htm

It's basically a 2501 (1 ethernet, 2 serial), but the ethernet interface is
connected to an integrated 8-port hub.

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/


""Roger Sohn"" [EMAIL PROTECTED] wrote in message
007e01c0b973$c070cf10$[EMAIL PROTECTED]">news:007e01c0b973$c070cf10$[EMAIL PROTECTED]...
 Does anyone know what the Cisco 2507 Hub Router is good for?  Does it
serve
 a useful purpose?
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]