Re: Debug ip mpacket produces no output [7:5394]
Try turning off your mroute-cache on the incoming interface. At 01:08 AM 5/22/01, you wrote: >Debug mpacket produces no output to terminal. Packets are flowing though >the router and router seems to be working fine, but no out is produced from >any debug. > >Flex-Rtr-2#ter mon >Flex-Rtr-2#debug ip mpacket >IP multicast packets debugging is on >Flex-Rtr-2# > >No output is being produced to console or telnet session.. > >Anyone have any ideas?? >_ >Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5396&t=5394 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Newbie question [7:5309]
Well, this wouldn't be in the default configuration of any IOS rev I've seen, but you may want to check for a "sysopt noproxyarp (interface)" command in your configuration. Such an option, viewed as a security enhancement, can cause the problem you're having. If you wish to use it, you'll probably need to statically configure the arp cache to include the external router's mac addresses. -Brad McConnell. ""Roger"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > My ISP just placed a new router outside of our PIX 515, and now, every 4 > hours, the PIX loses connectivity and needs to be rebooted. Is this an ARP > problem (is it looking for the mac of the old server)? Any info would be > appreciated. Thanks. > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5397&t=5309 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: access lists for ccie written [7:5366]
written.nothe exam covers a lot of things (some basic...like what happens when a particular signal is recived on an ethernet line) but no Reflexive(enought though they are cool) on the lab..again no but the lab seems to be changeing daily??... HTH Steve >From: "Cesar Suguitan" >Reply-To: "Cesar Suguitan" >To: [EMAIL PROTECTED] >Subject: access lists for ccie written [7:5366] >Date: Mon, 21 May 2001 22:39:47 -0400 > >Does anybody know if reflexive and/or dynamic access lists appear on the >CCIE written or lab exam? > >TIA >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5399&t=5366 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: who said CCIE make big bucks? [7:5393]
Well, if that is you. Then maybe it's time to move on to bigger and better things =) Albert > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Jim Bond > Sent: Tuesday, 22 May 2001 4:41 > To: [EMAIL PROTECTED] > Subject: who said CCIE make big bucks? [7:5393] > > > $29/hr... > > __ > Do You Yahoo!? > Yahoo! Auctions - buy the things you want at great prices > http://auctions.yahoo.com/ > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5398&t=5393 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Controlling console access via tacacs+ [7:5400]
Hi all I have tacacs loaded on all our routers in our network and would like to configure the console ports to use it also, not only the vty lines. I noticed that on IOS ver 10.x, you could actually configure 'login tacacs' on the console port, but can't do it on the new version of the IOS. Any assistance will be highly appreciated. ___ http://www.webmail.co.za the South-African free email service Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5400&t=5400 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
2600 router " NAS " [7:5401]
Hi all , I have a network access server "2600" I am using it for the employee to connect from home , I am connecting 6 telephone lines right now to the 2600 router ..is there any way to see the telephone numbers of who are connecting Now . Regards Ahmed Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5401&t=5401 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE Lab [7:5402]
Hello, my name is Pedro and I've my Lab exam schedule to June 14/15, but unfortunately I can4t do it in that date. I wonder if someone is interested in swap with me. Thanks. Pedro Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5402&t=5402 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How is IS-IS more scalable than OSPF? [7:5207]
So some people have said that IS-IS is more scalable because it doesn't run Dijsktra as much as OSPF does. OK, then why not? Is it because of the partial-routing update thing, or is there more to it? Also, I agree that IS-IS level-1 areas are by their nature "totally stubby". But that doesn't completely explain why real-world IS-IS networks have been shown to be more scalable than real-world OSPF networks, because if this was the cause, then it would seem to me that you could just scale OSPF to the same level of IS-IS just by making non-backbone areas totally stubby. Yet, apparently nobody has been able to scale OSPF like that, which indicates to me that it's not that simple. So I must ask again, what exactly is it about IS-IS that seems to make it more scalable overall than OSPF? And, as a side question, could OSPF be reasonably adjusted to accomodate greater scalability? I would especially like to invite Howard Berkowitz, aka Sir Network Deity, to answer this question. Thanx ""NRF"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello > > Several people have asserted that IS-IS (for IP) has demonstrated more > scalability than OSPF. What accounts for this? I have heard that it has > to do with IS-IS being able to take advantage of Partial-route Updates when > IP information changes, as opposed to running Dijkstra all the time, is that > the only factor, or are there other reasons? > > Thanx > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5403&t=5207 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CIPT Study Material [7:5404]
Hello, Does any body can send me material on studying CIPT ? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5404&t=5404 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX question... [7:5248]
OK basic PIX stuff High to Low: use NAT and Global command Low to High: use Static and Conduits (or ACLs) Now... You want people to access your internal boxes using external IPs OK First way.. Statically assign external addresses to the internal hosts that need to be accessed and have the users acccess them with external addresses instead of the real ones... These "external address" could be actual routable addresses provided by your ISP and you can make this secure by constraining your conduit (or ACL) to only allow your pool of dial-up IPs to access these particular services. Or you can introduce a private address pool (lets say 172.16.1.0/24) on the perimeter. Statically assign these with a blanket (net to net) static statement and use the appropriate conduits. Add a route statement in the router to send 172.16.1.0/24 --> your PIXs external interface IP. This would solve some security issues since no one on the NET can access these IPs. These two methods can cause DNS issues. You can get around this one of two ways... Create a new DNS server and have the DHCP from teh dial-up pool map to this (this could be easy since your first 3 octets change when you do a net to net static) or you could use NAT 0, but this would limit Internet access to inside hosts, but with some tricky configs this may also work... You could run a sub-interface on your router There are many other things you could do to get around your issue. As for the guy who said to not use the PIX. That only shows his ability to read and implement. He needs a GUI... Well stick to Check-point, run it on a UNIX box... The PIX is very capable in capable hands... Not morons... Moe. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5405&t=5248 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: "network logon problems" [7:5271]
HI, Check the login policies. Somewhere in the policy remove the click to cache logins. Use poledit & you will find your answer as one of my friend was also having a similar problem & it got sorted out by disabling the cache feature in the system policy editor. I had a win2k server with the Active Directory crashed(not working), clients running WInNt could login from the cache but could'nt access anything from the network on this server. Robert Perez wrote: > > HELP!! > I have an issue where it appears that multiple users cannot > login. I > receive the error "you will be logged on using a cached > account" and once > logged on, all network devices are available. I have ensured > that on the > catalyst 3548XL, all ports have Port fast enabled and I have > also enabled > STP to try and overcome the problem with no success. I have > also moved the > users to switches that have no issues and I still have the same > problem. I > also did a ipconfig /release renew and replaced the nic card > and did a cold > boot and warm boot on the machines with no success. All other > user are fine > and it is only affecting like 3 people. I even set them to > auto, auto and > the switch to auto,auto and this did not work either. I then > tried 100 full > and half and that did not work either. I also do not have port > security > enabled. It appears to be a network issue with the catalystr > switches, but > I am unsure as to the root of the problem.Don't know if > this would do > anything, but I did a NBTSTAT -RR from the command line as > well. Any help > would be greatly appreciated.Thank you. > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5406&t=5271 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Regarding negotiations [7:5380]
Yes i tried different cables ..at it seems i have seen this problem on 3com 3300 series switch..also with different location different cable and different n/w cards Regards ""Andras Bellak"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Have you tried any other network cables - sounds like a distance issue, but > could also easily be a bad cable. > > andras > > -Original Message- > From: Arun [mailto:[EMAIL PROTECTED]] > Sent: Monday, May 21, 2001 10:12 PM > To: [EMAIL PROTECTED] > Subject: Regarding negotiations [7:5380] > > > Hi > I have catalyst 5000 series switch > the problem is when i connect a laptop or pc to it with a small length cable > say 10-20 feet ..i can talk to it with my settings of duplex as auto-select > and speed as auto-select both the settings are of network card i am using > ( i am using xircom pc card and 3com pc card for the laptops ) > but when the length is increased say 50-70 feet i cann't talk to it anymore > and it shows blinking lights on the switch side which i think it means > negotiations problemso i set my laptop or pc to duplex full and speed to > 10mbps then i am only able to talk to it .no other mode is working > ..both this settings are on the workstations side . > Can anyone explain what the problem is or what is wrong somewhere . > > Regards > > Arun Sharma > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5407&t=5380 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX question... [7:5248]
Hi all, Just configure the outside interface as you would configure the inside interface (nat on the outside with a global pool on the inside). Regards, = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Rizzo Damian [mailto:[EMAIL PROTECTED]] > Sent: Monday, May 21, 2001 5:16 PM > To: [EMAIL PROTECTED] > Subject: PIX question... [7:5248] > > > Hey all, is it possible to translate public IP addresses (outside) to > private IP addresses (inside) on a PIX firewall. Basically the exact > opposite of what's usually performed on a firewall. We are > going to have > users dial in to our internet router and receive a Public IP > address. They > have to get through our firewall to gain access to our LAN. > Is there a way > to translate the Public IP address they will obtain into a private IP > address used by our LAN so they can access it? I thank you > for your help... > > > -Rizzo > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5408&t=5248 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX question... [7:5248]
Hi, Firstly, I haven't tested this but - I think that a solution consisting of external addresses being nat'd into internal private address simply won't work. Even if it did Cisco would not support it. I checked the TAC and they state quite clearly that NAT is (on the PIX) designed in the direction of internal to external. The only reliable, secure and supported solution is a static/conduit setup. Hope this helps -Original Message- From: PSIHOYIOS PANAYIOTIS [mailto:[EMAIL PROTECTED]] Sent: 22 May 2001 11:11 To: [EMAIL PROTECTED] Subject: RE: PIX question... [7:5248] Hi all, Just configure the outside interface as you would configure the inside interface (nat on the outside with a global pool on the inside). Regards, = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Rizzo Damian [mailto:[EMAIL PROTECTED]] > Sent: Monday, May 21, 2001 5:16 PM > To: [EMAIL PROTECTED] > Subject: PIX question... [7:5248] > > > Hey all, is it possible to translate public IP addresses (outside) to > private IP addresses (inside) on a PIX firewall. Basically the exact > opposite of what's usually performed on a firewall. We are > going to have > users dial in to our internet router and receive a Public IP > address. They > have to get through our firewall to gain access to our LAN. > Is there a way > to translate the Public IP address they will obtain into a private IP > address used by our LAN so they can access it? I thank you > for your help... > > > -Rizzo > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] ** This communication is confidential and is intended only for the person to whom it is addressed. If you are not that person you are not permitted to make use of the information and you are requested to notify mailto:[EMAIL PROTECTED] immediately that you have received it and then destroy the copy in your possession. comdirect ltd is regulated by the SFA and is a member of the LSE. ** Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5410&t=5248 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX question... [7:5248]
Global pools on the inside doesn't solve the issues associated with actually trying to do useful work. The only way to do anything on the inside is to map the addresses that you want to access on the inside to an outside address. You'll also have the possibility of ending up with name resolution issues from outside to inside. As an addition, if you are going to expose (however minimal the exposure) your inside address to your outside addresses, I'd like to suggest using a seperate tacacs server to authenticate people coming through the firewall. All in all, a better solution is to use the pix to terminate connections from a VPN client of some sort, and not deal with allowing any type of un-encrypted or un-tunnelled access across the firewall, at least to none-dmz machines. Hope this is a theoretical exercise - letting folks come into your network deeper than a dmz is never a good idea, no matter how you do it. Anyone who's worked with IDS at all will be able to vouch for that one. Andras -Original Message- From: PSIHOYIOS PANAYIOTIS [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 22, 2001 3:11 AM To: [EMAIL PROTECTED] Subject: RE: PIX question... [7:5248] Hi all, Just configure the outside interface as you would configure the inside interface (nat on the outside with a global pool on the inside). Regards, = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Rizzo Damian [mailto:[EMAIL PROTECTED]] > Sent: Monday, May 21, 2001 5:16 PM > To: [EMAIL PROTECTED] > Subject: PIX question... [7:5248] > > > Hey all, is it possible to translate public IP addresses (outside) to > private IP addresses (inside) on a PIX firewall. Basically the exact > opposite of what's usually performed on a firewall. We are > going to have > users dial in to our internet router and receive a Public IP > address. They > have to get through our firewall to gain access to our LAN. > Is there a way > to translate the Public IP address they will obtain into a private IP > address used by our LAN so they can access it? I thank you > for your help... > > > -Rizzo > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5411&t=5248 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Regarding negotiations [7:5380]
Do the same computers have the same issues regardless of which port you use on the switch? What do the switch ports negotiate to when autonegotiation is enabled on the pc? andras -Original Message- From: Arun [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 22, 2001 2:50 AM To: [EMAIL PROTECTED] Subject: Re: Regarding negotiations [7:5380] Yes i tried different cables ..at it seems i have seen this problem on 3com 3300 series switch..also with different location different cable and different n/w cards Regards ""Andras Bellak"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Have you tried any other network cables - sounds like a distance issue, but > could also easily be a bad cable. > > andras > > -Original Message- > From: Arun [mailto:[EMAIL PROTECTED]] > Sent: Monday, May 21, 2001 10:12 PM > To: [EMAIL PROTECTED] > Subject: Regarding negotiations [7:5380] > > > Hi > I have catalyst 5000 series switch > the problem is when i connect a laptop or pc to it with a small length cable > say 10-20 feet ..i can talk to it with my settings of duplex as auto-select > and speed as auto-select both the settings are of network card i am using > ( i am using xircom pc card and 3com pc card for the laptops ) > but when the length is increased say 50-70 feet i cann't talk to it anymore > and it shows blinking lights on the switch side which i think it means > negotiations problemso i set my laptop or pc to duplex full and speed to > 10mbps then i am only able to talk to it .no other mode is working > ..both this settings are on the workstations side . > Can anyone explain what the problem is or what is wrong somewhere . > > Regards > > Arun Sharma > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5413&t=5380 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX question... [7:5248]
Actually, this can and does work. I've set up at least one box this way during a network transition (not that it's a good idea, mind you). In addition, the instructions, direct from Cisco, may be found in the URL that I previously posted. Remember, the PIX passes what it's told to pass; if the conf tells it to pass traffic, it passes traffic. Thanks, Craig At 08:14 PM 5/21/2001 -0400, you wrote: >hi Rizzo! > >You can not even telnet into your PIx from the outside interface, nor you >can telnet into it without VPN or SSH. Making the PIX work the way you want >(in contrary to the usual way of NATing high security to Low security) won't >work; It's how PIXs are made & can not be modified to suite every needs. >You might be looking at other routers to get your idea to work . but not >PIX. Any ideas, suggestions, corrects & comments; I would like to hear from >you guys! > >Syson Suy > >If Life is a Game, These are the Rules: >Experience is a hard teacher. >She give the test first and the lessons afterwards. >- Original Message - >From: "Richie, Nathan" >To: >Sent: Monday, May 21, 2001 5:05 PM >Subject: RE: PIX question... [7:5248] > > > > I beg to differ. I do not believe this can be done. When the PIX > > translates (either dynamically or statically), it takes a private IP >address > > (inside interface) and translates it to a Public IP address (outside). >Then > > the outside interface will process ALL packets for that Public IP address > > and direct them to the internal source (private IP address). So if you >have > > a static NAT, say for like this > > > > static (inside, outside) 99.99.99.99 10.1.1.1 netmask 255.255.255.255 > > > > and on the router you have assigned the 99.99.99.99 to the dialup user, >then > > you have 2 devices on the LAN that are assigned the 99.99.99.99 address >(the > > router and the PIX) > > > > You translate an IP address from a more secure network to the less secure > > network, in this case from the inside network to the outside network. So > > you would have to reverse the security settings, effectively opening up >your > > LAN to the world. > > > > You could do a couple of other solutions: > > > > 1) VPN between router & PIX > > 2) Terminate clients inside the PIX > > 3) Create an IP pool on the router and allow full access with an > > access-list (for this range of IP addresses) on the outside interface of >the > > PIX. > > > > This is my understanding of how the PIX and NAT translations work, but I > > have not tested this to disprove it, so if I am in error and some has >tested > > this and I am wrong, please let me know. > > > > Hope this helps. > > > > Nathan > > > > -Original Message- > > From: Darren Crawford [mailto:[EMAIL PROTECTED]] > > Sent: Monday, May 21, 2001 4:01 PM > > To: [EMAIL PROTECTED] > > Subject: RE: PIX question... [7:5248] > > > > > > OK kids. Allowing packets from a lower security level interface to a >higher > > security level interface requires a conduit or access list. So yes, it >can > > be > > done. I wouldn't forget about security though. ;^) > > > > D. > > > > At 01:50 PM 05/21/2001 -0400, Rizzo Damian wrote: > > >Actually it seems as if you understand exactly what I'm asking. Your idea > > is > > >very similar to mine. However it didn't work unfortunately. Let me ask >this > > >another way, if you don't mind...You have an internet router which is > > >directly connected to the external (un-trusted) interface of your PIX > > >firewall. Basically I want to be able to access my internal LAN with > > private > > >IP addresses from the Internet router with Public IP addresses. So I >should > > >be able to telnet onto my internet router and ping my privately held LAN. > > >Forget about Security, I just want to know if it can be done. The static > > >mapping doesn't seem to work. Probably because it require a one-to-one > > >mapping no? Thanks for any help in advance! > > > > > > > > > > > > -Rizzo > > > > > > > > > > > > > > > > > >-Original Message- > > >From: Craig Columbus [mailto:[EMAIL PROTECTED]] > > >Sent: Monday, May 21, 2001 1:12 PM > > >To: [EMAIL PROTECTED] > > >Subject: RE: PIX question... [7:5248] > > > > > >I'm not clear on what you're asking. Are you asking if the PIX can take >a > > >public IP and make it appear as a private IP on the internal network? >The > > >answer is yes, although you certainly want to be careful with this and I > > >can't say that this is a recommended config. You'll need a config >similar > > >to the one below: > > > > > >nat (outside) 1 0 0 > > >static (inside,outside) > > > netmask 255.255.255.255 > > >access-list permit ip any host > > > > > >For more info, reference > > > >http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v52/config/ex > > a > > >mples.htm#xtocid274896 > > > > > >Thanks, > > >Craig > > > > > >At 12:14 PM 5/21/2001 -0400, you wrote: > > >>We are aware of the VPN solution and that is our long term goal. >However, > > >
OSPF on demand circuit [7:5414]
OSPF on demand circuit I am testing a dialbackup in an OSPF network. When I start the router, link is brought UP, the OSPF databases are syncronized, the LSA are marked as DoNotAge and all works fine. But when the link goes down, the routing table is cleared. So I can4t reach any destination. Should the routing table hold the routes learned from OSPF via demand circuit, even if the link is down? If yes, what is wrong? If no, How can the router route the packets? -- Eng. Paulo Roque Network Engineer [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5414&t=5414 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Pix with 2 different ISPs [7:5349]
I am pretty sure you can only have one "outside" interface ... To achieve what you want, I would think you could connect it to an intermediary router and let the *it* make the routing decisions between which ISP traffic goes to ... Thanks! TJ (2 * PIX = Pices?) -Original Message- From: Andras Bellak [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 22, 2001 02:07 To: [EMAIL PROTECTED] Subject:RE: Pix with 2 different ISPs [7:5349] Have you tried putting a default route in for both of the cards? Will the pix accept it? I don't have a pix with two Outside cards, just one outside and one DMZ, and my lab system is in the middle of a different experiment. If you could do each interface with a seperate default route, you might make it work. The PIX knows what interface a packet came in from, and should put the exiting packet back on the same wire it came in on. I'd be curious. Might have to try that one tomorrow. Tai Ngo wrote: > > Hi All, > > Can somebody tell me if this is possible? If so, please provide > configuration details. We have 2 ISPs, one that is > 204.23.23.x and the > other is 205.23.23.x. We have 2 Pix firewalls, one which is > configured > for active with both outside interfaces. The other pix is > configured as > standby. Will the Pix firewall be smart enough to know how to > route > traffic back out the network it came from? For example, if a > user came > into our website from 204.23.23.x , will the Pix know how to > route the > info back out that interface instead of through the 205.23.23.x > network? > > > My guess is it's not possible because when you look at the > configuration > on the Pix, to route info outside, you would use "route 0.0.0.0 > 204.23.23.x 1" . > > Thanks! FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] * The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. When addressed to our clients any opinions or advice contained in this email are subject to the terms and conditions expressed in the governing KPMG client engagement letter. * Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5415&t=5349 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Choosing among multiple intra-area ASBR routers [7:5416]
Hi, all According to rfc2328. p.175, when we have multiple intra-area paths to ASBR,a intra-area path using non-backbone area should be chosen over one using backbone area. But I always have opposite result. doesn't Cisco's implementation yet conform to rfc2328 in this respect? Here's from my cisco 2501 router. r2#sh ip ospf data -omitted Type-5 AS External Link States Link ID ADV Router Age Seq# Checksum Tag 131.108.0.0 192.168.40.3324 0x8003 0xE930 0 r2# r2#sh ip ospf border OSPF Process 10 internal Routing Table Codes: i - Intra-area route, I - Inter-area route i 192.168.40.3 [74] via 172.16.2.2, Serial0, ABR/ASBR, Area 0, SPF 7 i 192.168.40.3 [1562] via 172.16.30.33, Serial1, ABR/ASBR, Area 6, SPF 5 r2#sh ip route -omitted O E2 131.108.0.0/16 [110/20] via 172.16.2.2, 00:03:38, Serial0 r2# Could somebody explain this to me? Thanks in advance. Regards, Jaeheon Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5416&t=5416 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OSPF - Do Not Age LSA [7:5417]
Hi All, In the following situation, where sholud I see the "DoNotAge LSA" a- only in router R2 b- only in router R1 c- in R2 and R3 d- in all router. Please, explain your answer Router R2 is configured with "ip ospf demand-circuit" area 0 x--- | x-- | R1 | ABR area 6 x-- | | [PTSN] | | x- -x-- | R2 || R3| x- -x-- || x---x area 25 -- Eng. Paulo Roque Network Engineer [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5417&t=5417 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF on demand circuit [7:5414]
It should, do you have any other OSPF neighbors on this router learning the same routes with lower cost? In that scenario those routes will be used. With only a ISDN line cconfigured as a demand circuit, the OSPF adj. should always be there along with the routes if OSPF adj formed properly, etc. Try putting the demand circuit command on the other router or on both sides (I've seen it act up at times). --- Paulo Roque wrote: > OSPF on demand circuit > I am testing a dialbackup in an OSPF network. > When I start the router, link is brought UP, the > OSPF databases are > syncronized, the LSA are marked as DoNotAge and all > works fine. But when the > link goes down, the routing table is cleared. So I > can4t reach any > destination. > > Should the routing table hold the routes learned > from OSPF via demand > circuit, even if the link is down? > If yes, what is wrong? > If no, How can the router route the packets? > > -- > Eng. Paulo Roque > Network Engineer > [EMAIL PROTECTED] > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5418&t=5414 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: How is IS-IS more scalable than OSPF? [7:5207]
First, don't misunderstand me. ISIS and OSPF are both good protocols, and the decision to use one or the other in a given provider network can come down to personal preference. OSPF has a lot of features that tend to be needed more in an enterprise, but can be bandwidth-conserving from a POP to a core when bandwidth is an issue. A lot of the Cisco "traditional wisdom" about OSPF is meant as guidelines that will work in the worst case. The restriction on number of routers per area assumes routers with fairly slow CPUs, and fairly unstable links. You could put a lot more 7200's than 2500's in an area! The number of areas per ABR is based on the statistical likelihood of there needing to be a simultaneous recomputation in more than one area. I've had no trouble hooking seven areas to an ABR, where each area was an all-optical, well-maintained campus. >Use the search string "isis" ( no dash ) > >From my own limited studies: > >IS-IS tends to treat level-1 areas as stub networks - therefore smaller >routing tables Standard ISIS doesn't just treat them as stub, but as totally stubby. While the majority of ISP implementations are a single area anyway, this restriction has become a limitation for some networks, and controlled L2 leaking has been added to the protocol. Sort of the reverse of OSPF, where you primarily decide in the nonbackbone area what to advertise in the backbone. > >IS-IS sure looks a lot chattier than OSPF. Debug ISIS adjacency reveals a >LOT of traffic generated just by the protocol keepalives In principle, yes. They are lighter weight, and the timer range is greater than in OSPF. > >The killer in OSPF is the SPF algorithm, and the related processor intensive >activity It has less to do with size of routing tables. Not really. Both use the SPF algorithm, although a little more detail is needed to understand this. Intra-area routes in both use the Dijkstra algorithm, whose processor load is on the order of: (number of routes**2) * log(number of routers) Inter-area and external routes are in the second part of the SPF algorithm, and their additional load is linear with the number of routes. ISIS, of course, is far less likely to have lots of inter-area and external routes. > >IS-IS tends to be more efficient than Ospf in that it is not beholden to the >area 0 concept and the necessity for all inter area traffic to go through >area 0. U...well, ISIS doesn't have an area 0.0.0.0 per se, but it does have a backbone: the set of L2 routers. All inter-area traffic still has to go through the backbone. > >BTW, I have been told by folks who work in really big networks that none of >the routing protocols scale beyond 4-5K routers. I'd tend to agree, although I might not even put the limit that high; more like 2-3K. In really big networks, there usually are good reasons why you want to separate things into routing domains and have a backbone-of-backbones. For example, I dealt with a couple of intercontinental networks where the North American, Asian, and European line speeds tended to be significantly different (DS3,lots of 64 Kbps and some T1, E1 and lots of nailed-up ISDN), and it was far more deterministic to have fairly consistent line speeds at each level of the hierarchy. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5419&t=5207 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VLAN 0? Huh?? [7:5420]
Has anyone ever seen vlan 0? I have a Cat 5000 with a RSM module in it. When I'm on the RSM module and I do a sh ip arp I see several ip addresses with a vlan of 0...I thought vlans were in the range 1-1005??? Also the IP addresses that I see on vlan 0 are loopback addresses, 127.X.X.X. and directly connected. Of course on the catalyst switch there is no vlan 0 defined and on the RSM the is no int vlan 0 defined. Anybody ever see this?? Am I going nuts?? Thanks, Scott CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5420&t=5420 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How is IS-IS more scalable than OSPF? [7:5207]
See my earlier comments to Chuck. >So some people have said that IS-IS is more scalable because it doesn't run >Dijsktra as much as OSPF does. OK, then why not? Is it because of the >partial-routing update thing, or is there more to it? True, both run Dijkstra, but ISIS allows longer timer settings of the equivalent to MaxAge. Thus, less frequent recomputations in a stable network, which is far more characteristic of a carrier than an enterprise network. And some carriers do run OSPF, for reasons ranging from feature support to simple familiarity. There are a lot of very poorly documented extensions to ISIS. > >Also, I agree that IS-IS level-1 areas are by their nature "totally stubby". >But that doesn't completely explain why real-world IS-IS networks have been >shown to be more scalable than real-world OSPF networks, because if this was >the cause, then it would seem to me that you could just scale OSPF to the >same level of IS-IS just by making non-backbone areas totally stubby. I'm not exactly sure that the scalability argument is being made correctly. ISIS is definitely more scalable in single areas. Most providers run it as a single area. With the more extensive controls at the backbone to nonbackbone boundary, OSPF may very well be more scalable in more heterogeneous networks. >Yet, >apparently nobody has been able to scale OSPF like that, which indicates to >me that it's not that simple. > >So I must ask again, what exactly is it about IS-IS that seems to make it >more scalable overall than OSPF? And, as a side question, could OSPF be >reasonably adjusted to accomodate greater scalability? > >I would especially like to invite Howard Berkowitz, aka Sir Network Deity, >to answer this question. In any case, there are many more factors of development interest than the number of routers per area. One carrier interest is getting IGP reconvergence time into the millisecond range, which will require, at least, much faster hellos, an update or replacement for Dijkstra, and probably restrictions on routes per area. Traffic engineering is also an issue -- the work is further along with ISIS, but that's simply been a matter of development priority. Some OSPF features that ISIS doesn't have include demand circuits, native NBMA support, external routers outside the backbone, virtual links, and the opaque LSA. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5421&t=5207 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Choosing among multiple intra-area ASBR routers [7:5416]
Did you get my response to your original post? The route on r2 is a E2 route so it is not intra-area, but a externally learned route so different rules come into play. With external routes, there is a forwarding address (next-hop value) of the lowest cost route to that destination. Look at the RFC again - pages 23-25 or so, the section dealing with external routes. They explain it there well and have an example. --- Jaeheon Yoo wrote: > Hi, all > According to rfc2328. p.175, when we have multiple > intra-area paths to > ASBR,a intra-area path using non-backbone area > should be chosen over > one using backbone area. > But I always have opposite result. doesn't Cisco's > implementation yet > conform to rfc2328 in this respect? > > Here's from my cisco 2501 router. > > r2#sh ip ospf data > -omitted >Type-5 AS External Link States > > Link ID ADV Router Age Seq# > Checksum Tag > 131.108.0.0 192.168.40.3324 > 0x8003 0xE930 0 > r2# > r2#sh ip ospf border > > OSPF Process 10 internal Routing Table > > Codes: i - Intra-area route, I - Inter-area route > > i 192.168.40.3 [74] via 172.16.2.2, Serial0, > ABR/ASBR, Area 0, SPF 7 > i 192.168.40.3 [1562] via 172.16.30.33, Serial1, > ABR/ASBR, Area 6, SPF > 5 > > r2#sh ip route > -omitted > O E2 131.108.0.0/16 [110/20] via 172.16.2.2, > 00:03:38, Serial0 > r2# > > Could somebody explain this to me? > Thanks in advance. __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5422&t=5416 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: share Ethernet [7:5368]
If I'm understanding you correctly, you have a server on the same Ethernet segment as two routers, and you want to know which one should be set as the default gateway for the server. Easy-Answer: The default gateway should be set to the router that services the maximum number of destinations in the minimum number of hops. I.e., If RouterA services a 30 location frame network, and RouterB only services a single t1, you would use RouterA as the Default gateway. Why? Because you would have the least number of hops for a maximum number of sites. Slightly-More-Difficult-but-better-answer: Both! Run HSRP on both routers, which will create a single virtual router that is maintained even if one of the routers fails. Your server will maintain connectivity to available sites even if one of the routers fails. Good luck, search Cisco.com for HSRP Ejay Hire -Original Message- From: md. nazri [mailto:[EMAIL PROTECTED]] Sent: Monday, May 21, 2001 11:24 PM To: [EMAIL PROTECTED] Subject: Fw: share ethernet [7:5368] > hi all, > i got 2 routers sharing the same ethernet...both ether should active at the > same time(so i think hsrp not meaningful) with each ether have different ip > address with same subnet. Server on LAN should point to one particular > ip(can it be two..?)...how do i achieve that...?? pls help > > tq > > rgds > nazri FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5423&t=5368 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
DHCP Client setup [7:5424]
I wanna to setup a ISDN dailup networking. It is on DHCP. How to configure the ISDN router? I mean it is in the remote branch. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5424&t=5424 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Choosing among multiple intra-area ASBR routers [7:5416]
Hi, Erick
Thanks for your kind reply again.
But it is a different story.
I guess I know what you're trying to say.
Have you really read the page 175 yourself.
If you read it, you would know what I'm curious about.
This is about multiple intra-area paths to ASBR.
Please refer to "OSPF Complete Implementation", p.223
It says that:
"... , paths through nonbackbone areas area preferred over paths
through the backbone area 0.0.0.0. When multiple preferred paths are
available, the one with the smallest cost is used."
But in Cisco routers with IOS 12.0, we have different result.
it seems to conform to rfc 1583.
Hope somebody can clarify this for me.
Regards,
Jaeheon
On 22 May 2001 08:55:46 -0400, [EMAIL PROTECTED] ("Erick B.") wrote:
>Did you get my response to your original post?
>
>The route on r2 is a E2 route so it is not intra-area,
>but a externally learned route so different rules come
>into play. With external routes, there is a forwarding
>address (next-hop value) of the lowest cost route to
>that destination. Look at the RFC again - pages 23-25
>or so, the section dealing with external routes. They
>explain it there well and have an example.
>
>--- Jaeheon Yoo wrote:
>> Hi, all
>> According to rfc2328. p.175, when we have multiple
>> intra-area paths to
>> ASBR,a intra-area path using non-backbone area
>> should be chosen over
>> one using backbone area.
>> But I always have opposite result. doesn't Cisco's
>> implementation yet
>> conform to rfc2328 in this respect?
>>
>> Here's from my cisco 2501 router.
>>
>> r2#sh ip ospf data
>>
>-omitted
>>Type-5 AS External Link States
>>
>> Link ID ADV Router Age Seq#
>> Checksum Tag
>> 131.108.0.0 192.168.40.3324
>> 0x8003 0xE930 0
>> r2#
>> r2#sh ip ospf border
>>
>> OSPF Process 10 internal Routing Table
>>
>> Codes: i - Intra-area route, I - Inter-area route
>>
>> i 192.168.40.3 [74] via 172.16.2.2, Serial0,
>> ABR/ASBR, Area 0, SPF 7
>> i 192.168.40.3 [1562] via 172.16.30.33, Serial1,
>> ABR/ASBR, Area 6, SPF
>> 5
>>
>> r2#sh ip route
>> -omitted
>> O E2 131.108.0.0/16 [110/20] via 172.16.2.2,
>> 00:03:38, Serial0
>> r2#
>>
>> Could somebody explain this to me?
>> Thanks in advance.
>
>
>
>__
>Do You Yahoo!?
>Yahoo! Auctions - buy the things you want at great prices
>http://auctions.yahoo.com/
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5425&t=5416
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Router as TFTP Server [7:5426]
I have configured a 2500 as a tftp server and have it connected via a WAN link in my lab to another 2500. I can ping across the circuit in both directions, but when I attempt a tftp transfer I get this: R2#copy tftp flash NOTICE Flash load helper v1.0 This process will accept the copy options and then terminate the current system image to use the ROM based image for the copy. Routing functionality will not be available during that time. If you are logged in via telnet, this connection will terminate. Users with console access can see the results of the copy operation. Proceed? [confirm] System flash directory: File Length Name/status 1 6418792 igs-j-l.110-13 [6418856 bytes used, 1969752 available, 8388608 total] Address or name of remote host [1.1.1.1]? 1.1.1.1 Source file name? c2500-d-l.120-9.bin Destination file name [c2500-d-l.120-9.bin]? Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... Loading c2500-d-l.120-9.bin from 1.1.1.1 (via Serial0): ! [OK] Erase flash device before writing? [confirm] Flash contains files. Are you sure you want to erase? [confirm] Copy 'c2500-d-l.120-9.bin' from server as 'c2500-d-l.120-9.bin' into Flash WITH erase? [yes/no]yes %SYS-5-RELOAD: Reload requested %FLH: c2500-d-l.120-9.bin from 1.1.1.1 to flash ... System flash directory: File Length Name/status 1 6418792 igs-j-l.110-13 [6418856 bytes used, 1969752 available, 8388608 total] Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... Loading c2500-d-l.120-9.bin ... [timed out] [failed] I can ping across the circuit from the tftp server router while the timeouts are occurring. The 1.1.1.1 address is the address of Loopback0 on R1. I am running EIGRP for routing and do not have a default route statement in either router. Any ideas? Kelly D Griffin, CCNA, CCDA Network Engineer Kg2 Network Design 877.418.4025 http://www.kg2.com http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5426&t=5426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to Multiplex 3 T1s [7:4625]
Has anyone done this successfully and shown an increase in bandwidth? Has anyone done this with PVCs on the same router and frame port? Kelly D Griffin, CCNA, CCDA Network Engineer Kg2 Network Design 877.418.4025 http://www.kg2.com - Original Message - From: "Wojtek Zlobicki" To: Sent: Monday, May 21, 2001 8:54 PM Subject: Re: How to Multiplex 3 T1s [7:4625] > What is to be gained by using an inverse mux ? How much extra overhead is > caused by this rather than running in inversed mode? > > > ""Jon Wagner"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Take a look at this config and see if it work for you: > > http://www.cisco.com/warp/public/131/7.html > > > > > > -Original Message- > > From: Al Smith [mailto:[EMAIL PROTECTED]] > > Sent: Tuesday, May 15, 2001 8:57 PM > > To: [EMAIL PROTECTED] > > Subject: How to Multiplex 3 T1s [7:4625] > > > > > > Colleagues, > > > > I am currently trying to multiplex / bind 3 parallel T1 clear channel > > circuits. > > The circuits will be terminating on a 7206 router on an 8 port multi > > channel T1 card. > > > > My question is how do I bind the 3 T1s together to get the total aggregate > > bandwidth of 3 T1s. > > I have only found info on Inverse multiplexing for ATM which is not what I > > am trying to achieve. > > what I have is strictly 3 Point to Point T1 circuits using PPP. > > > > Albert Smith > > Lucent Technologies > > System Engineer, CCNP MCSE > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5427&t=4625 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
cisconetlabs.com Availability [7:5428]
On the 1st of July cisconetlabs.com will be open, offering a single lab of six routers, with another security lab with PIX and IPSec devices opening shortly after. What would the list like to see from this, what would people pay (please be realistic, $5 per hour is not really enough)? I was thinking about $150 per four hour session for the first lab, #200 per four hour session for the second. Where would be the best place (other than the web) to advertise this? It's kind of on-topic, so no OT on the subject line. ;^) Rob./ _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5428&t=5428 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Independent IP space, BGP [7:5429]
Hey guys/gals, Got a quick question. How long would it take (assuming that we can get a class C) to get a independent class C from ARIN and a AS for use with 2 ISPS and BGP? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5429&t=5429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router as TFTP Server [7:5426]
can you show us your config of the router which is setup as the tftp server? -Original Message- From: Kelly D Griffin [mailto:[EMAIL PROTECTED]] Sent: 22 May 2001 14:24 To: [EMAIL PROTECTED] Subject: Router as TFTP Server [7:5426] I have configured a 2500 as a tftp server and have it connected via a WAN link in my lab to another 2500. I can ping across the circuit in both directions, but when I attempt a tftp transfer I get this: R2#copy tftp flash NOTICE Flash load helper v1.0 This process will accept the copy options and then terminate the current system image to use the ROM based image for the copy. Routing functionality will not be available during that time. If you are logged in via telnet, this connection will terminate. Users with console access can see the results of the copy operation. Proceed? [confirm] System flash directory: File Length Name/status 1 6418792 igs-j-l.110-13 [6418856 bytes used, 1969752 available, 8388608 total] Address or name of remote host [1.1.1.1]? 1.1.1.1 Source file name? c2500-d-l.120-9.bin Destination file name [c2500-d-l.120-9.bin]? Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... Loading c2500-d-l.120-9.bin from 1.1.1.1 (via Serial0): ! [OK] Erase flash device before writing? [confirm] Flash contains files. Are you sure you want to erase? [confirm] Copy 'c2500-d-l.120-9.bin' from server as 'c2500-d-l.120-9.bin' into Flash WITH erase? [yes/no]yes %SYS-5-RELOAD: Reload requested %FLH: c2500-d-l.120-9.bin from 1.1.1.1 to flash ... System flash directory: File Length Name/status 1 6418792 igs-j-l.110-13 [6418856 bytes used, 1969752 available, 8388608 total] Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... Loading c2500-d-l.120-9.bin ... [timed out] [failed] I can ping across the circuit from the tftp server router while the timeouts are occurring. The 1.1.1.1 address is the address of Loopback0 on R1. I am running EIGRP for routing and do not have a default route statement in either router. Any ideas? Kelly D Griffin, CCNA, CCDA Network Engineer Kg2 Network Design 877.418.4025 http://www.kg2.com http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5430&t=5426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Help Needed for AS5300 with primary-NTT switch(PRI) [7:5431]
Hi All I havea problem when AS 5300 for voip in Japan. I'm using a ISDN PRI line for the AS5300. I have configure the switch type as primary-ntt (information as given by the telco). after configure the AS5300 i can originate call to other AS 5300 in oversea.But my AS5300 in oversea can't terminate call into Japan AS 5300. I do an debug isdn q931 i got this message : invalid element content Later i change the switch type to primary-net 5, is there other way round. It can terminate call into Japan but cannot originate call(engage tone). Hope that someone can help me resolve this problem. Thank you Chan Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5431&t=5431 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router as TFTP Server [7:5426]
Current configuration: ! ! Last configuration change at 08:19:12 CDT Tue May 22 2001 by kegrif ! NVRAM config last updated at 08:19:13 CDT Tue May 22 2001 by kegrif ! version 12.0 service timestamps debug datetime localtime show-timezone service timestamps log datetime localtime show-timezone no service password-encryption ! hostname R1 ! ! username kegrif privilege 15 password 0 xxx ip subnet-zero ip name-server 10.xx.226.225 clock timezone CDT -5 ! ! ! interface Loopback0 ip address 1.1.1.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0 ip address 172.25.21.109 255.255.255.0 no ip directed-broadcast ! interface Serial0 ip address 192.168.255.1 255.255.255.252 no ip directed-broadcast encapsulation frame-relay ip ospf interface-retry 0 no ip mroute-cache frame-relay map ip 192.168.255.2 103 frame-relay lmi-type cisco ! interface Serial1 no ip address no ip directed-broadcast shutdown ! router eigrp 1 redistribute connected redistribute static network 172.25.0.0 network 192.168.255.0 ! ip classless ! tftp-server flash c2500-d-l.120-9.bin ! line con 0 transport input none line aux 0 line vty 0 4 login local ! ntp clock-period 17179684 ntp source Loopback0 ntp peer 172.25.21.1 end Kelly D Griffin, CCNA, CCDA Network Engineer Kg2 Network Design 877.418.4025 http://www.kg2.com - Original Message - From: "McCallum, Robert" To: Sent: Tuesday, May 22, 2001 8:48 AM Subject: RE: Router as TFTP Server [7:5426] > can you show us your config of the router which is setup as the tftp server? > > -Original Message- > From: Kelly D Griffin [mailto:[EMAIL PROTECTED]] > Sent: 22 May 2001 14:24 > To: [EMAIL PROTECTED] > Subject: Router as TFTP Server [7:5426] > > > I have configured a 2500 as a tftp server and have it connected via a WAN > link in my lab to another 2500. I can ping across the circuit in both > directions, but when I attempt a tftp transfer I get this: > > R2#copy tftp flash > NOTICE > Flash load helper v1.0 > This process will accept the copy options and then terminate > the current system image to use the ROM based image for the copy. > Routing functionality will not be available during that time. > If you are logged in via telnet, this connection will terminate. > Users with console access can see the results of the copy operation. > > Proceed? [confirm] > > System flash directory: > File Length Name/status > 1 6418792 igs-j-l.110-13 > [6418856 bytes used, 1969752 available, 8388608 total] > Address or name of remote host [1.1.1.1]? 1.1.1.1 > Source file name? c2500-d-l.120-9.bin > Destination file name [c2500-d-l.120-9.bin]? > Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... > Loading c2500-d-l.120-9.bin from 1.1.1.1 (via Serial0): ! [OK] > > Erase flash device before writing? [confirm] > Flash contains files. Are you sure you want to erase? [confirm] > > Copy 'c2500-d-l.120-9.bin' from server > as 'c2500-d-l.120-9.bin' into Flash WITH erase? [yes/no]yes > > %SYS-5-RELOAD: Reload requested > %FLH: c2500-d-l.120-9.bin from 1.1.1.1 to flash ... > > System flash directory: > File Length Name/status > 1 6418792 igs-j-l.110-13 > [6418856 bytes used, 1969752 available, 8388608 total] > Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... > Loading c2500-d-l.120-9.bin ... [timed out] > [failed] > > > I can ping across the circuit from the tftp server router while the timeouts > are occurring. The 1.1.1.1 address is the address of Loopback0 on R1. I am > running EIGRP for routing and do not have a default route statement in > either router. > > Any ideas? > > Kelly D Griffin, CCNA, CCDA > Network Engineer > Kg2 Network Design > 877.418.4025 > http://www.kg2.com > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5432&t=5426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: access lists for ccie written [7:5366]
What does the lab criteria on the Cisco website state? If it is listed. Then it CAN and WILL be there. http://www.cisco.com/warp/public/625/ccie/certifications/routing.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5433&t=5366 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Independent IP space, BGP [7:5429]
Hi The smallest IP space that ARIN assigns is a /19. Which means you are going to have to use your providers IP space until you can prove that can use a /20 in accordance with the guide lines that ARIN uses. I suggest you go to the ARIN site and read up. As for how long... that last time I filed for an ASN it took about one week to get it. There are restrictions to getting an ASN too... HTH -- John Hardman CCNP MCSE ""Richard Tufaro"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hey guys/gals, > > Got a quick question. How long would it take (assuming that we can get > a class C) to get a independent class C from ARIN and a AS for use with 2 > ISPS and BGP? > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5434&t=5429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router as TFTP Server [7:5426]
I think you may be missing a : in between the command tftp-server flash filename. I reckon it should be tftp-server flash:filename. HTH -Original Message- From: Kelly D Griffin [mailto:[EMAIL PROTECTED]] Sent: 22 May 2001 14:58 To: [EMAIL PROTECTED] Subject: Re: Router as TFTP Server [7:5426] Current configuration: ! ! Last configuration change at 08:19:12 CDT Tue May 22 2001 by kegrif ! NVRAM config last updated at 08:19:13 CDT Tue May 22 2001 by kegrif ! version 12.0 service timestamps debug datetime localtime show-timezone service timestamps log datetime localtime show-timezone no service password-encryption ! hostname R1 ! ! username kegrif privilege 15 password 0 xxx ip subnet-zero ip name-server 10.xx.226.225 clock timezone CDT -5 ! ! ! interface Loopback0 ip address 1.1.1.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0 ip address 172.25.21.109 255.255.255.0 no ip directed-broadcast ! interface Serial0 ip address 192.168.255.1 255.255.255.252 no ip directed-broadcast encapsulation frame-relay ip ospf interface-retry 0 no ip mroute-cache frame-relay map ip 192.168.255.2 103 frame-relay lmi-type cisco ! interface Serial1 no ip address no ip directed-broadcast shutdown ! router eigrp 1 redistribute connected redistribute static network 172.25.0.0 network 192.168.255.0 ! ip classless ! tftp-server flash c2500-d-l.120-9.bin ! line con 0 transport input none line aux 0 line vty 0 4 login local ! ntp clock-period 17179684 ntp source Loopback0 ntp peer 172.25.21.1 end Kelly D Griffin, CCNA, CCDA Network Engineer Kg2 Network Design 877.418.4025 http://www.kg2.com - Original Message - From: "McCallum, Robert" To: Sent: Tuesday, May 22, 2001 8:48 AM Subject: RE: Router as TFTP Server [7:5426] > can you show us your config of the router which is setup as the tftp server? > > -Original Message- > From: Kelly D Griffin [mailto:[EMAIL PROTECTED]] > Sent: 22 May 2001 14:24 > To: [EMAIL PROTECTED] > Subject: Router as TFTP Server [7:5426] > > > I have configured a 2500 as a tftp server and have it connected via a WAN > link in my lab to another 2500. I can ping across the circuit in both > directions, but when I attempt a tftp transfer I get this: > > R2#copy tftp flash > NOTICE > Flash load helper v1.0 > This process will accept the copy options and then terminate > the current system image to use the ROM based image for the copy. > Routing functionality will not be available during that time. > If you are logged in via telnet, this connection will terminate. > Users with console access can see the results of the copy operation. > > Proceed? [confirm] > > System flash directory: > File Length Name/status > 1 6418792 igs-j-l.110-13 > [6418856 bytes used, 1969752 available, 8388608 total] > Address or name of remote host [1.1.1.1]? 1.1.1.1 > Source file name? c2500-d-l.120-9.bin > Destination file name [c2500-d-l.120-9.bin]? > Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... > Loading c2500-d-l.120-9.bin from 1.1.1.1 (via Serial0): ! [OK] > > Erase flash device before writing? [confirm] > Flash contains files. Are you sure you want to erase? [confirm] > > Copy 'c2500-d-l.120-9.bin' from server > as 'c2500-d-l.120-9.bin' into Flash WITH erase? [yes/no]yes > > %SYS-5-RELOAD: Reload requested > %FLH: c2500-d-l.120-9.bin from 1.1.1.1 to flash ... > > System flash directory: > File Length Name/status > 1 6418792 igs-j-l.110-13 > [6418856 bytes used, 1969752 available, 8388608 total] > Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... > Loading c2500-d-l.120-9.bin ... [timed out] > [failed] > > > I can ping across the circuit from the tftp server router while the timeouts > are occurring. The 1.1.1.1 address is the address of Loopback0 on R1. I am > running EIGRP for routing and do not have a default route statement in > either router. > > Any ideas? > > Kelly D Griffin, CCNA, CCDA > Network Engineer > Kg2 Network Design > 877.418.4025 > http://www.kg2.com > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted
OSPF process ID [7:5436]
I tried to enable ospf on a router by given the process ID 1: router ospf 1 I obtain the error : Unknown routing protocol the IOS version that I am usig is : 11.1 does any body know why ? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5436&t=5436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router as TFTP Server [7:5426]
You may want to put in a static to where you want to go until you are done with the upgrade. Duncan > -Original Message- > From: Kelly D Griffin [mailto:[EMAIL PROTECTED]] > Sent: 22 May 2001 14:24 > To: [EMAIL PROTECTED] > Subject: Router as TFTP Server [7:5426] > > > I have configured a 2500 as a tftp server and have it connected via a WAN > link in my lab to another 2500. I can ping across the circuit in both > directions, but when I attempt a tftp transfer I get this: > > R2#copy tftp flash > NOTICE > Flash load helper v1.0 > This process will accept the copy options and then terminate > the current system image to use the ROM based image for the copy. > Routing functionality will not be available during that time. > If you are logged in via telnet, this connection will terminate. > Users with console access can see the results of the copy operation. > > Proceed? [confirm] > > System flash directory: > File Length Name/status > 1 6418792 igs-j-l.110-13 > [6418856 bytes used, 1969752 available, 8388608 total] > Address or name of remote host [1.1.1.1]? 1.1.1.1 > Source file name? c2500-d-l.120-9.bin > Destination file name [c2500-d-l.120-9.bin]? > Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... > Loading c2500-d-l.120-9.bin from 1.1.1.1 (via Serial0): ! [OK] > > Erase flash device before writing? [confirm] > Flash contains files. Are you sure you want to erase? [confirm] > > Copy 'c2500-d-l.120-9.bin' from server > as 'c2500-d-l.120-9.bin' into Flash WITH erase? [yes/no]yes > > %SYS-5-RELOAD: Reload requested > %FLH: c2500-d-l.120-9.bin from 1.1.1.1 to flash ... > > System flash directory: > File Length Name/status > 1 6418792 igs-j-l.110-13 > [6418856 bytes used, 1969752 available, 8388608 total] > Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... > Loading c2500-d-l.120-9.bin ... [timed out] > [failed] > > > I can ping across the circuit from the tftp server router while the timeouts > are occurring. The 1.1.1.1 address is the address of Loopback0 on R1. I am > running EIGRP for routing and do not have a default route statement in > either router. > > Any ideas? > > Kelly D Griffin, CCNA, CCDA > Network Engineer > Kg2 Network Design > 877.418.4025 > http://www.kg2.com > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5437&t=5426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE bootcamp [7:5438]
I've seen a boot camp for the CCIE written exam for about 1700 pounds. I'd like to know if this is good value, currently I'm about 2 weeks away from taking my CIT support exam to get CCNP, comments welcomed Regards -- Pat Donlon Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5438&t=5438 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: b**** tests [7:5194]
On Sun, 20 May 2001, John Andrews wrote: > First of all: > > I worded the subject space that way because I was unsure if the word B > is > banned here or not, so that was to be on the safe side so this would go > through to the group. > > My question: > > Are the above tests for switching close to the exam type questions that > appear > on the prometric. I have both switching exams and have been using them for > practice examinations. If the name you're thinking of is the same as that of the class of elementary pbrticles that follow the Bose-Einstein statistics, as opposed to say, a female representative of species Canis domesticus or (according to some) Homo sapiens, you can use it here. Boson. Boson. Boson boson bosonbosonboson. See? :-) And it's been abundantly discussed on this here fine list, so hitting the archives is probably your best bet. -- "Someone approached me and asked me to teach a javascript course. I was about to decline, saying that my complete ignorance of the subject made me unsuitable, then I thought again, that maybe it doesn't, as driving people away from it is a desirable outcome." --Me FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5439&t=5194 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help Needed for AS5300 with primary-NTT switch(PRI) [7:5441]
Can I see the config of the PRIs and your dial peers? It could be a problem with the peer and not the PRI, what version of IOS are you using for VoIP Regardas ""Chan"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi All > > I havea problem when AS 5300 for voip in Japan. I'm using a ISDN PRI > line for the AS5300. I have configure the switch type as primary-ntt > (information as given by the telco). after configure the AS5300 i can > originate call to other AS 5300 in oversea.But my AS5300 in oversea > can't terminate call into Japan AS 5300. > > I do an debug isdn q931 > > i got this message : invalid element content > > > Later i change the switch type to primary-net 5, is there other way > round. It can terminate call into Japan but cannot originate call(engage > tone). > > Hope that someone can help me resolve this problem. > > > Thank you > Chan > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5441&t=5441 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: b**** tests [7:5194]
>On Sun, 20 May 2001, John Andrews wrote: > >> First of all: >> >> I worded the subject space that way because I was unsure if the word B >> is >> banned here or not, so that was to be on the safe side so this would go >> through to the group. >> >> My question: >> >> Are the above tests for switching close to the exam type questions that >> appear >> on the prometric. I have both switching exams and have been using them for >> practice examinations. > >If the name you're thinking of is the same as that of the class of >elementary pbrticles that follow the Bose-Einstein statistics, as >opposed to say, a female representative of species Canis domesticus or >(according to some) Homo sapiens, you can use it here. Boson. Boson. >Boson boson bosonbosonboson. See? :-) And it's been abundantly discussed >on this here fine list, so hitting the archives is probably your best >bet. > Somehow, you remind me that the answer to the CID beta delay may be that the test designer is Schrodinger's Cat. Test takers were in a state of either having passed or not passed, but the state could not be known without opening the box. (Reminding my cat that this is only theoretical and that he should not worry.) FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5440&t=5194 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco Certification Digest V2 #1296 [7:5442]
I'm not sure why this came up on ISDN material, since it is most often used in T1's. AMI is "alternate mark inversion," and it is a way of varying a continuous pattern of 1's or 0's so that the receiving device can separate them out. When you're pulling clock signal from the line, you are relying on a relatively steady "pulse" to break out your bits. If a bunch of 1's comes across, represented by a long period of positive voltage, ++ , the device has a hard time figuring out where to break the bits out of that signal. What AMI does is vary the polarity of every other 1, for instance +-+-+-+-+-+-+-. That allows discrete 1's to be picked out of the signal. But what happens when you have a bunch of zeroes? Same problem. Enter B8ZS, Binary 8 Zeroes Suppression. It becomes necessary if you are sending a long string of 0's across the wire, which is often done by a lack of signal. What B8ZS does, is replace a string of eight zeroes with a known pattern of voltage ( +-0-+ ) The other device recognizes this, and says, "Oh, you must be sending eight zeroes." This technique is called "maintaining the 1's density." This is it in a rough explanation, don't quote me on this ;) But the good news is that this is as much as you'll likely ever have to know about B8ZS and AMI, unless your job involves desinging CSU/DSU's or something. Kenneth Mays Sr. Network Analyst AutoZone Date: Mon, 21 May 2001 20:51:54 -0400 From: "Lists Wizard" Subject: ISDN line transition and the linecode command [7:5353] Hi group. I am using the CISCO CIM for ISDN. There is talk about line transition and line-level changes and how the linecode command prvent the loss of synchronization. Can some one explain this better. The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5442&t=5442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Independent IP space, BGP [7:5429]
Cool thanks, off to the books/site. >>> "John Hardman" 05/22 10:10 AM >>> Hi The smallest IP space that ARIN assigns is a /19. Which means you are going to have to use your providers IP space until you can prove that can use a /20 in accordance with the guide lines that ARIN uses. I suggest you go to the ARIN site and read up. As for how long... that last time I filed for an ASN it took about one week to get it. There are restrictions to getting an ASN too... HTH -- John Hardman CCNP MCSE ""Richard Tufaro"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hey guys/gals, > > Got a quick question. How long would it take (assuming that we can get > a class C) to get a independent class C from ARIN and a AS for use with 2 > ISPS and BGP? > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5444&t=5429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF process ID [7:5436]
> >I tried to enable ospf on a router by given the process ID 1: >router ospf 1 >I obtain the error : >Unknown routing protocol > >the IOS version that I am usig is : 11.1 > >does any body know why ? Because you're trying to run OSPF on a c1600 without an OSPF image? Rob./ >Thanks >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5443&t=5436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF process ID [7:5436]
Well that is not the error message I got, mine said: OSPF: Could not allocate router id Which I would say is the reason the router had already allocated process ID 1 for: CPU utilization for five seconds: 2%/2%; one minute: 2%; five minutes: 0% PID Runtime(ms) Invoked uSecs5Sec 1Min 5Min TTY Process 1 410400 0.00% 0.00% 0.00% 0 Load Meter Why not just pick another process ID? this is only significant to the local router. >>>Brian >From: "Mechbal, Hind (MED-DEVOTEAM)" >Reply-To: "Mechbal, Hind (MED-DEVOTEAM)" >To: [EMAIL PROTECTED] >Subject: OSPF process ID [7:5436] >Date: Tue, 22 May 2001 10:24:11 -0400 > >I tried to enable ospf on a router by given the process ID 1: >router ospf 1 >I obtain the error : >Unknown routing protocol > >the IOS version that I am usig is : 11.1 > >does any body know why ? >Thanks >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ Get your FREE download of MSN Explorer at http://explorer.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5445&t=5436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: How to Multiplex 3 T1s [7:4625]
I am doing this right now with our frame provider. We will be using 2 for now but up to 8 t1s. We have to use the inverse mux on each side of the line (ours and the providers). With 2 T1s we just get a 3 meg frame port and off we go. We are using Quick Eagle DL3800 8 port inverse muxs. Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kelly D Griffin Sent: Tuesday, May 22, 2001 8:28 AM To: [EMAIL PROTECTED] Subject: Re: How to Multiplex 3 T1s [7:4625] Has anyone done this successfully and shown an increase in bandwidth? Has anyone done this with PVCs on the same router and frame port? Kelly D Griffin, CCNA, CCDA Network Engineer Kg2 Network Design 877.418.4025 http://www.kg2.com - Original Message - From: "Wojtek Zlobicki" To: Sent: Monday, May 21, 2001 8:54 PM Subject: Re: How to Multiplex 3 T1s [7:4625] > What is to be gained by using an inverse mux ? How much extra overhead is > caused by this rather than running in inversed mode? > > > ""Jon Wagner"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Take a look at this config and see if it work for you: > > http://www.cisco.com/warp/public/131/7.html > > > > > > -Original Message- > > From: Al Smith [mailto:[EMAIL PROTECTED]] > > Sent: Tuesday, May 15, 2001 8:57 PM > > To: [EMAIL PROTECTED] > > Subject: How to Multiplex 3 T1s [7:4625] > > > > > > Colleagues, > > > > I am currently trying to multiplex / bind 3 parallel T1 clear channel > > circuits. > > The circuits will be terminating on a 7206 router on an 8 port multi > > channel T1 card. > > > > My question is how do I bind the 3 T1s together to get the total aggregate > > bandwidth of 3 T1s. > > I have only found info on Inverse multiplexing for ATM which is not what I > > am trying to achieve. > > what I have is strictly 3 Point to Point T1 circuits using PPP. > > > > Albert Smith > > Lucent Technologies > > System Engineer, CCNP MCSE > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions http://1cis.com Free E-mail Servers with unlimited mailboxes 1st Class Internet Solutions FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5446&t=4625 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OSPF process ID [7:5436]
What is the model number of the router? Some of the smaller routers may not support OSPF. > -Original Message- > From: Mechbal, Hind (MED-DEVOTEAM) [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, May 22, 2001 9:24 AM > To: [EMAIL PROTECTED] > Subject: OSPF process ID [7:5436] > > > I tried to enable ospf on a router by given the process ID 1: > router ospf 1 > I obtain the error : > Unknown routing protocol > > the IOS version that I am usig is : 11.1 > > does any body know why ? > Thanks > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct > and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5447&t=5436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF process ID [7:5436]
Depends on which image you are using and on which platform. Do "router ?" and see what protocols it allows. Adam Hickey [EMAIL PROTECTED] _ Before you criticize someone, make sure to walk a mile in their shoes. That way, when you do criticize them, you're a mile away and you have their shoes. - Original Message - From: "Mechbal, Hind (MED-DEVOTEAM)" To: Sent: Tuesday, May 22, 2001 7:24 AM Subject: OSPF process ID [7:5436] > I tried to enable ospf on a router by given the process ID 1: > router ospf 1 > I obtain the error : > Unknown routing protocol > > the IOS version that I am usig is : 11.1 > > does any body know why ? > Thanks > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5448&t=5436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VLAN 0? Huh?? [7:5420]
That's how the RSM talks to the Sup card. You'll have to search on CCO for the details. > -Original Message- > From: STRAND Scott [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, May 22, 2001 7:37 AM > To: [EMAIL PROTECTED] > Subject: VLAN 0? Huh?? [7:5420] > > > Has anyone ever seen vlan 0? I have a Cat 5000 with a RSM > module in it. When > I'm on the RSM module and I do a sh ip arp I see > several ip addresses with a vlan of 0...I thought vlans > were in the > range 1-1005??? Also the IP addresses that I see on vlan 0 > are loopback addresses, 127.X.X.X. and directly connected. > Of course on the > catalyst switch there is no vlan 0 defined and on the > RSM the is no int vlan 0 defined. Anybody ever see this?? Am > I going nuts?? > > Thanks, > Scott > CCNP > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct > and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5449&t=5420 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Rough Explanation of Line-coding, AMi, B8zs [7:5450]
This is the clearest most concise explanation of this i've ever seen. Bravo. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 22, 2001 10:53 AM To: [EMAIL PROTECTED] Subject: Re: Cisco Certification Digest V2 #1296 [7:5442] I'm not sure why this came up on ISDN material, since it is most often used in T1's. AMI is "alternate mark inversion," and it is a way of varying a continuous pattern of 1's or 0's so that the receiving device can separate them out. When you're pulling clock signal from the line, you are relying on a relatively steady "pulse" to break out your bits. If a bunch of 1's comes across, represented by a long period of positive voltage, ++ , the device has a hard time figuring out where to break the bits out of that signal. What AMI does is vary the polarity of every other 1, for instance +-+-+-+-+-+-+-. That allows discrete 1's to be picked out of the signal. But what happens when you have a bunch of zeroes? Same problem. Enter B8ZS, Binary 8 Zeroes Suppression. It becomes necessary if you are sending a long string of 0's across the wire, which is often done by a lack of signal. What B8ZS does, is replace a string of eight zeroes with a known pattern of voltage ( +-0-+ ) The other device recognizes this, and says, "Oh, you must be sending eight zeroes." This technique is called "maintaining the 1's density." This is it in a rough explanation, don't quote me on this ;) But the good news is that this is as much as you'll likely ever have to know about B8ZS and AMI, unless your job involves desinging CSU/DSU's or something. Kenneth Mays Sr. Network Analyst AutoZone Date: Mon, 21 May 2001 20:51:54 -0400 From: "Lists Wizard" Subject: ISDN line transition and the linecode command [7:5353] Hi group. I am using the CISCO CIM for ISDN. There is talk about line transition and line-level changes and how the linecode command prvent the loss of synchronization. Can some one explain this better. The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5450&t=5450 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Need some advice on the followings questions [7:5451]
Hi All, By reading Jeff Doyle book I come across with the following questions an I need some helpto better understand those. 1. If you have the followings:Windows Size Sequence # Ackovledge# 512 14441957 What numbers (Seq, Ack) the next segment should have and what is the math corelation between them ? 2. What means a PUSH flag on TCP ? 3 What is the purpose of ICMP messages? 4. What are the features of SNMP ? 5. If you are Multihomed to two ISPs let say you are AS3 and your ISPs are AS1 and AS7 like in this schema , and you want to use AS1 as a primary and AS7 as backup: AS 4-AS2AS1 | | | | AS5AS6-AS7AS3What can you ask your providers AS1 and AS7 to do for you in order to accomodate your needs 1. By using local preference attribute; 2. To use a weight attribute 3. To use as-path attribute 4. ETC...ETC So , which is the best scenariouse too use? 6. What is LE_ARP ? 7. In the followings OSPF area: --| |||--| AREA 50 || AREA 4 || AREA 0 | | | ||| | | RTRA--/ | | || | |/-| ABR-|--RTRB| ABR|---RTRC | | | | || | -- - --- What do you need to do in order to connect RTRA to Backbone Area ( 0) 1. a virtual link2. Serial link ; 3. ETC..; 8.What is ERLANG B? 9.On ISDN debug , what means the message: ...config stack, may not have a password... 1. not authenticate; 2. ETC. 10. What means "LOOP UP" a DSU ? 11. It this network IP schema viable or not ? Why ? 233.245.152.0/24 10.12.0.0/16233.245.152.0/24 | | | PC_A --|RTR|PC_B | | | .12. What is the corelations between a " JAM SIGNAL" and "COLLISIONS" 13. If you have a router configured as a SAP server and a wkst is sending queries (GNS) tohim what the router will do ? Thank you for your help. Mike Get your FREE download of MSN Explorer at http://explorer.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5451&t=5451 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CIPT Study Material [7:5404]
The CIPT exam is based around the actual CIPT Course. The course is pretty good if you want to work with the Cisco IP Telephony products. It gives you a good background in the technologies and products. The exam is very product oriented, you need to know the CIPT products pretty well, as well as how to configure and administer them. CCO will give you some information, but much of the required knowledge is gained from actually using the products. tim medley Network Architect iReadyWorld VoIP Group -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Philip Suen Sent: Tuesday, May 22, 2001 5:28 AM To: [EMAIL PROTECTED] Subject: CIPT Study Material [7:5404] Hello, Does any body can send me material on studying CIPT ? Thanks FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5452&t=5404 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
routing exam [7:5453]
How good is the routing book isbn# 1-58720-20-001-5 by Clare Gough? I have just purchased this book for preparation for the 503 test. Do I need more than this or is this an adequate preparation for this test? Comments? John Have a great day! John Andrews Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5453&t=5453 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco - CCNP Recertification Exam (CCNPR640-519) [7:5454]
s/640-519.html [GroupStudy.com removed an attachment of type application/octet-stream which had a name of Cisco - CCNP Recertification Exam (CCNPR640-519).url] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5454&t=5454 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router as TFTP Server [7:5426]
On Tue, 22 May 2001, Kelly D Griffin wrote: > I have configured a 2500 as a tftp server and have it connected via a WAN > link in my lab to another 2500. I can ping across the circuit in both > directions, but when I attempt a tftp transfer I get this: > > R2#copy tftp flash > NOTICE > Flash load helper v1.0 > This process will accept the copy options and then terminate > the current system image to use the ROM based image for the copy. > Routing functionality will not be available during that time. (snip rest of session) > I can ping across the circuit from the tftp server router while the timeouts > are occurring. The 1.1.1.1 address is the address of Loopback0 on R1. I am > running EIGRP for routing and do not have a default route statement in > either router. > > Any ideas? Yes. Pay attention to the last line I left of the notice above. :-) If from R1 (which I assume is the TFTP server) you did an extended ping using lo0 as the source interface, it would also fail. -- "Someone approached me and asked me to teach a javascript course. I was about to decline, saying that my complete ignorance of the subject made me unsuitable, then I thought again, that maybe it doesn't, as driving people away from it is a desirable outcome." --Me Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5455&t=5426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: cisconetlabs.com Availability [7:5428]
On Tue, 22 May 2001, Robert Nelson-Cox wrote: > On the 1st of July cisconetlabs.com will be open, offering a single lab of > six routers, with another security lab with PIX and IPSec devices opening > shortly after. > > What would the list like to see from this, what would people pay (please be > realistic, $5 per hour is not really enough)? > > I was thinking about $150 per four hour session for the first lab, #200 per > four hour session for the second. This is rather more expensive than cciebootcamp's racks. You may be able to get away with it for your planned second rack, as I'm not aware of any other rack having PIXen, but even the largest of cciebootcamp's racks are priced at $200 per 24 hours. -- "Someone approached me and asked me to teach a javascript course. I was about to decline, saying that my complete ignorance of the subject made me unsuitable, then I thought again, that maybe it doesn't, as driving people away from it is a desirable outcome." --Me Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5456&t=5428 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Study Materials! [7:5458]
Hello Everyone!, I am currently studying for the CCIE Written test. I am reading "Cisco Certification: Bridges, Routers, & Switches for CCIE's and I have the Boson practice exams. Is there any other materials or resources that I might want to take a look at before I go take the exam. Any advice pertaining to this matter is highly welcome and appreciated. Thank You! Kareem A. Jones Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5458&t=5458 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco Certification Digest V2 #1296 [7:5442]
more data on this b8zs/esf leads to 64k time slots ami/sf leads to 56k time slots, because 1 bit out of each slot is used for location tracking. usually these days, I have only seen ami used in cases where people wanted to use some portion for a pbx. Brian - Original Message - From: To: Sent: Tuesday, May 22, 2001 7:52 AM Subject: Re: Cisco Certification Digest V2 #1296 [7:5442] > I'm not sure why this came up on ISDN material, since it is most often used > in T1's. > > AMI is "alternate mark inversion," and it is a way of varying a continuous > pattern of 1's or 0's so that the receiving device can separate them out. > When you're pulling clock signal from the line, you are relying on a > relatively steady "pulse" to break out your bits. If a bunch of 1's comes > across, represented by a long period of positive voltage, > ++ , the device has a hard time figuring out where to break > the bits out of that signal. What AMI does is vary the polarity of every > other 1, for instance +-+-+-+-+-+-+-. That allows discrete 1's to be > picked out of the signal. > > But what happens when you have a bunch of zeroes? Same problem. Enter > B8ZS, Binary 8 Zeroes Suppression. > > It becomes necessary if you are sending a long string of 0's across the > wire, which is often done by a lack of signal. What B8ZS does, is replace > a string of eight zeroes with a known pattern of voltage ( +-0-+ ) The > other device recognizes this, and says, "Oh, you must be sending eight > zeroes." This technique is called "maintaining the 1's density." > > This is it in a rough explanation, don't quote me on this ;) > > But the good news is that this is as much as you'll likely ever have to > know about B8ZS and AMI, unless your job involves desinging CSU/DSU's or > something. > > > Kenneth Mays > Sr. Network Analyst > AutoZone > > Date: Mon, 21 May 2001 20:51:54 -0400 > From: "Lists Wizard" > Subject: ISDN line transition and the linecode command [7:5353] > > Hi group. > > I am using the CISCO CIM for ISDN. There is talk about line transition and > line-level changes and how the linecode command prvent the loss of > synchronization. Can some one explain this better. > The information transmitted is intended only for the person or entity to > which it is addressed and may contain confidential and/or privileged > material. Any review, retransmission, dissemination or other use of, or > taking of any action in reliance upon, this information by persons or > entities other than the intended recipient is prohibited. If you received > this in error, please contact the sender and delete the material from any > computer. > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5457&t=5442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Need Urgent Help Please! [7:5459]
There are two similar configurations that we are trying to get running that include the Cisco router. DS3 4xT1 IMA DS3 Frame ->BSTDX > CBX- --> SA 600 > Cisco 7204 -> Relay 9000500 This is pretty close to a customer config that is having IMA problems. The IMA links are going in and out of service when Frame Relay traffic is being passed. To try and get the 7204 router up and passing data, I tried to get the following config running. Ethernet 4Xt1 IMA DS3 Ethernet SmartBits > SA 1200 -> Cisco 7204 > SA 1200 ->. SmartBits The problem I had with this config is that I configured Bridge Groups and tunnels thru the SA 1200 and I was told that the Cisco was looking for routed PDU's. I changed the config in the SA 1200's to routed interfaces and then the IP addresses required did not seem to be what the customer config would be using. Does anyone think that it might be IP scheme that is playing a havoc here. Do you have any Cisco documentation that might be better than what is on their web site? Please let me know. Rajeev __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5459&t=5459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Washington DC Router Roast Saturday [7:5460]
Dear Fellow Students of Ciscology, Our DC Cisco group will be holding its May picnic on: Saturday, May 26, 2001 Time: 10 am to 4 pm Place: Bruce's House We will be discussing various topics, including but not limited to: Job-hunting, Certifications, The Economy, and interconnections between all 3 topics. Volunteers for talks are most welcome! We will also drag the routers and switches out if the weather is nice and practise various arcane Cisco technologies under the trees As usual there is no charge or fee, but it's always appreciated if you bring desserts, snacks, sodas, routers, switches, and laptops. Make sure all the equipment is well-marked so that we can send it home with the person who brought it. (Do not mark the potato chips please) Yours Truly - Bruce Evry DIRECTIONS TO THE HOUSE 1607 Thomas Road, Fort Washington, MD 20744 >From Maryland take I-95 to exit 3a in MD, >From Virginia take Exit 2 in MD To the Indian Head Highway South. Go about 3 miles, turn Left on Old Fort Road. Go exactly 2 miles on Old Fort Road, Turn Right on Thomas Road. We are 1607 Thomas Rd, almost all the way down the street on the left. Look for the pumpkin & a long gravel driveway With no House visible from street! If lost, our phone # is 301-292-5231, call us! Please E-mail to [EMAIL PROTECTED], thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5460&t=5460 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF process ID [7:5436]
Do you have any active (up/up) interfaces with an IP address assigned? Try creating a loopback interface, assign it an IP, and then re-try... HTH, Charles ""Brian Lodwick"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Well that is not the error message I got, mine said: > OSPF: Could not allocate router id > Which I would say is the reason the router had already allocated process ID > 1 for: > CPU utilization for five seconds: 2%/2%; one minute: 2%; five minutes: 0% > PID Runtime(ms) Invoked uSecs5Sec 1Min 5Min TTY Process >1 410400 0.00% 0.00% 0.00% 0 Load Meter > > Why not just pick another process ID? this is only significant to the local > router. > > >>>Brian > > > >From: "Mechbal, Hind (MED-DEVOTEAM)" > >Reply-To: "Mechbal, Hind (MED-DEVOTEAM)" > >To: [EMAIL PROTECTED] > >Subject: OSPF process ID [7:5436] > >Date: Tue, 22 May 2001 10:24:11 -0400 > > > >I tried to enable ospf on a router by given the process ID 1: > >router ospf 1 > >I obtain the error : > >Unknown routing protocol > > > >the IOS version that I am usig is : 11.1 > > > >does any body know why ? > >Thanks > >FAQ, list archives, and subscription info: > >http://www.groupstudy.com/list/cisco.html > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > _ > Get your FREE download of MSN Explorer at http://explorer.msn.com > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5461&t=5436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF process ID [7:5436]
Use IP-Plus featured IOS... --- "Mechbal, Hind (MED-DEVOTEAM)" wrote: > I tried to enable ospf on a router by given the > process ID 1: > router ospf 1 > I obtain the error : > Unknown routing protocol > > the IOS version that I am usig is : 11.1 > > does any body know why ? > Thanks > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5462&t=5436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: How is IS-IS more scalable than OSPF? [7:5207]
When discussing routing protocols, a lot of literature refers to routers as "nodes." I think you were right the first time, Chuck. A RIP network with a few thousand router nodes would work, depending on the topology, as you mention below. The 15-hop count limits the distance between networks, not the max number of routers. In addition to the other scalability problems Chuck mentions, if there were any slow links you might run into a bandwidth problem. RIP sends the whole table (after applying split horizon) every 30 seconds. Each packet fits just 25 routes, so multiple packets are required to send 1000s of routes. Each packet is 532 bytes long. Don't know how we got here from a question on IS-IS versus OSPF. One design challenge with OSPF that Chuck alluded to is that sometimes a network topology doesn't have a good candidate for the area 0 network. If the network grew without much concern for hierarchy, there may not be any obvious high-speed core that could work as Area O. Priscilla At 12:33 AM 5/22/01, Chuck Larrieu wrote: >I rechecked the NANOG archive, and I believe you are correct. It was several >thousand nodes. > >As to the number of routers theoretically possible in a RIP domain, you >might be surprised if you were to think through the math. > >Take a router. Connect ten routers. Connect ten routers to each of those >ten. You can do this seven times, and the max distance from any router on >the periphery to any other router on the periphery is 15 hops - seven in >and seven out again. > >10^7 = 10,000,000 > >if that center router began with 100 directly connected routers, the number >grows astronomically, and yet the max diameter would remain 15 hops. > >the real restraint would be the ability of the router to hold a routing >table that big. Along with the problem of convergence. Even if there were no >network problems ever, I bet that sucker would take forever to converge! >Literally! > >Chuck > >-Original Message- >From: Curtis Call [mailto:[EMAIL PROTECTED]] >Sent: Monday, May 21, 2001 6:38 PM >To: Chuck Larrieu >Cc: [EMAIL PROTECTED] >Subject:RE: How is IS-IS more scalable than OSPF? [7:5207] > > > >BTW, I have been told by folks who work in really big networks that none of > >the routing protocols scale beyond 4-5K routers. As an interesting aside, a > >few weeks ago on NANOG there was a discussion about the largest RIPv1 > >network in existence. It was revealed that until a year or two ago, Xerox > >used RIPv1 and had a few thousand routers running RIPv1 on the network. > > >I believe that the RIP network you are referring to had a few thousand >nodes, not a few thousand routers. I doubt a few thousand routers could >handle RIPs max 15 hop limitation. >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5463&t=5207 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Study Materials! [7:5458]
Kareem, Read something on Token Ring RIF Calculations Doyle & Comer were very useful Also read the old versions of CCNP books, because they have Appletalk, LANE and Bridging. There are a couple of Study guides around for this exam, I used the one by QUE, CCIE Prep Study Guide, (or something like that). This just amalgamates all the subjects into one book, handy for revision, but not really detailed enough, (in my opinion). You could download a free cramsession document, from brainbuzz to condense your revision down to pocket-size. Best of luck! Rashid Lohiya [EMAIL PROTECTED] 020 8509 2990 07785 362626 www.pioneer-computers.com "Kareem Jones" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello Everyone!, > > > I am currently studying for the CCIE Written test. I am reading "Cisco > Certification: Bridges, Routers, & Switches for CCIE's and I have the Boson > practice exams. Is there any other materials or resources that I might want > to take a look at before I go take the exam. Any advice pertaining to this > matter is highly welcome and appreciated. > > > > Thank You! > > Kareem A. Jones > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5464&t=5458 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OSPF type 3 LSA [7:5465]
Hi All, My question(s) mostly concern the type 3 (network summary) LSA's. The way I understand it, is that a type 3 could contain an LSA from three sources: (1) Default route - resulting from my coding area as STUB. (2) Summarized address range - resulting from my manual coding an AREA RANGE. (3) A singe, explicit LSA - resulting from me doing neither of the two above. This last one creates my question(s). If that is correct, then there are a couple of statements about OSPF workings that don't seem to fit. (1) Even though the type 1 or 2 LSA is not (in that format) flooded outside the area, it ESSCENTIALLY is by simply being re-sent as a type 3 (ie: same info and effect, different packaging)? (The statement is made that "type 1 and 2 are not flooded outside area"). (2) That also means that a change in that single link state WOULD cause a change to be propagated into the other area? Statement is made that "a change in one area is not reflected into another". (I'm assuming that all links in a summarized LSA would have to go down before THAT would cause change.) (3) How would this save any resources or be any different than if it were sent through as a type 1/2? Does that Inter-Area network/link appear to the other-area routers as being directly connected to the ABR and they therefore don't have to run SPF for it, just add cost to ABR? The realization I came to(with this in mind) was that OSPF is designed with summarization etc. in mind, but it's really up to you to manually design the ip addr space and code the summarization to make it work in it's documented fashion? Is this an accuarate statement? THanks for any feedback/opinions. This communication (including all attachments) is intended solely for the use of the person or persons to whom it is addressed and should be treated as a confidential xwave communication. If you are not the intended recipient, any use, distribution, printing, or copying of this email is strictly prohibited. If you received this email in error, please immediately delete it from your system and notify the originator. Your cooperation is appreciated. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5465&t=5465 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router as TFTP Server [7:5426]
I was under the impression that a loopback address had to be a 32bit subnet mask! According to the config, I must be wrong. Any feedback is welcome! Rashid "Kelly D Griffin" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I have configured a 2500 as a tftp server and have it connected via a WAN > link in my lab to another 2500. I can ping across the circuit in both > directions, but when I attempt a tftp transfer I get this: > > R2#copy tftp flash > NOTICE > Flash load helper v1.0 > This process will accept the copy options and then terminate > the current system image to use the ROM based image for the copy. > Routing functionality will not be available during that time. > If you are logged in via telnet, this connection will terminate. > Users with console access can see the results of the copy operation. > > Proceed? [confirm] > > System flash directory: > File Length Name/status > 1 6418792 igs-j-l.110-13 > [6418856 bytes used, 1969752 available, 8388608 total] > Address or name of remote host [1.1.1.1]? 1.1.1.1 > Source file name? c2500-d-l.120-9.bin > Destination file name [c2500-d-l.120-9.bin]? > Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... > Loading c2500-d-l.120-9.bin from 1.1.1.1 (via Serial0): ! [OK] > > Erase flash device before writing? [confirm] > Flash contains files. Are you sure you want to erase? [confirm] > > Copy 'c2500-d-l.120-9.bin' from server > as 'c2500-d-l.120-9.bin' into Flash WITH erase? [yes/no]yes > > %SYS-5-RELOAD: Reload requested > %FLH: c2500-d-l.120-9.bin from 1.1.1.1 to flash ... > > System flash directory: > File Length Name/status > 1 6418792 igs-j-l.110-13 > [6418856 bytes used, 1969752 available, 8388608 total] > Accessing file 'c2500-d-l.120-9.bin' on 1.1.1.1... > Loading c2500-d-l.120-9.bin ... [timed out] > [failed] > > > I can ping across the circuit from the tftp server router while the timeouts > are occurring. The 1.1.1.1 address is the address of Loopback0 on R1. I am > running EIGRP for routing and do not have a default route statement in > either router. > > Any ideas? > > Kelly D Griffin, CCNA, CCDA > Network Engineer > Kg2 Network Design > 877.418.4025 > http://www.kg2.com > > http://1cis.com > Free E-mail Servers with unlimited mailboxes > 1st Class Internet Solutions > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5466&t=5426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Washington DC Router Roast Saturday [7:5460]
>Dear Fellow Students of Ciscology, > > Our DC Cisco group will be holding its May picnic on: > Saturday, May 26, 2001 > Time: 10 am to 4 pm > Place: Bruce's House > > We will be discussing various topics, including but not limited >to: Job-hunting, Certifications, The Economy, and interconnections between >all 3 topics. Volunteers for talks are most welcome! > > We will also drag the routers and switches out if the weather is >nice and practise various arcane Cisco technologies under the trees > > As usual there is no charge or fee, but it's always appreciated if >you bring desserts, snacks, sodas, routers, switches, and laptops. Make >sure all the equipment is well-marked so that we can send it home with the >person who brought it. (Do not mark the potato chips please) Shouldn't some of the chips be marked SAINT, SAMBA, EARL, etc.? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5467&t=5460 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: routing exam [7:5453]
That's what I wanted to know. Somehow or other, I enjoy the dryness of cisco press materials. Much better than others I have looked at. I like the detail. I just wanted to be sure. Thanks again, John >= Original Message From [EMAIL PROTECTED] = >John, I used only this book for this exam. It's a hard read to follow if you >have no routing experience, but I did pass the exam... > >Rick Have a great day! John Andrews Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5469&t=5453 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Portland Oregon Area Study Groups or Cisco Groups? [7:5470]
Comrades... Does any one know if there are any study groups in the Portland, Oregon area? Is there an Organization or club? Is there a group of fellow "Ciscologiest" continuing their CCNP studies? I appreciate the information, John L. Reel Intel Corporation Gig Lab Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5470&t=5470 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP scalability [7:5468]
While we're on the subject of scalability, check out this fascinating article by Geoff Huston on BGP scalability. He studied the effects of a denser, more meshed edge of the Internet (due to small networks increasingly multihoming) on the growth of the BGP routing table. He comments that service resiliency in the Internet is becoming the responsibility of the customer, not the service provider. Instead of insisting on service provider resiliency, companies are implementing their own resiliency by multihoming. This means that resiliency is provided through the function of the BGP routing system rather than being a function of the bearer or switching subsystem. Can the BGP routing system scale adequately to continue to undertake this role? Aside from Priscilla (not Geoff Huston): What if the phone system had evolved this way? How many companies have redundant trunk lines? Don't we just assume that the "phone company" will always provide service? We don't multihome to the phone system, (do we?) Back to Geoff Huston: Further driving the growth in the routing table is the use of selective advertisement of smaller prefixes along different paths in an effort to undertake traffic engineering. (MPLS) Very interesting read. The URL is: http://www.cisco.com/warp/public/759/ipj_4-1/ipj_4-1_bgp.html Priscilla At 08:38 AM 5/22/01, Howard C. Berkowitz wrote: >See my earlier comments to Chuck. > > >So some people have said that IS-IS is more scalable because it doesn't run > >Dijsktra as much as OSPF does. OK, then why not? Is it because of the > >partial-routing update thing, or is there more to it? > >True, both run Dijkstra, but ISIS allows longer timer settings of the >equivalent to MaxAge. Thus, less frequent recomputations in a stable >network, which is far more characteristic of a carrier than an >enterprise network. > >And some carriers do run OSPF, for reasons ranging from feature >support to simple familiarity. There are a lot of very poorly >documented extensions to ISIS. > > > > >Also, I agree that IS-IS level-1 areas are by their nature "totally stubby". > >But that doesn't completely explain why real-world IS-IS networks have been > >shown to be more scalable than real-world OSPF networks, because if this was > >the cause, then it would seem to me that you could just scale OSPF to the > >same level of IS-IS just by making non-backbone areas totally stubby. > >I'm not exactly sure that the scalability argument is being made >correctly. ISIS is definitely more scalable in single areas. Most >providers run it as a single area. With the more extensive controls >at the backbone to nonbackbone boundary, OSPF may very well be more >scalable in more heterogeneous networks. > > >Yet, > >apparently nobody has been able to scale OSPF like that, which indicates to > >me that it's not that simple. > > > >So I must ask again, what exactly is it about IS-IS that seems to make it > >more scalable overall than OSPF? And, as a side question, could OSPF be > >reasonably adjusted to accomodate greater scalability? > > > >I would especially like to invite Howard Berkowitz, aka Sir Network Deity, > >to answer this question. > >In any case, there are many more factors of development interest than >the number of routers per area. One carrier interest is getting IGP >reconvergence time into the millisecond range, which will require, at >least, much faster hellos, an update or replacement for Dijkstra, and >probably restrictions on routes per area. > >Traffic engineering is also an issue -- the work is further along >with ISIS, but that's simply been a matter of development priority. > >Some OSPF features that ISIS doesn't have include demand circuits, >native NBMA support, external routers outside the backbone, virtual >links, and the opaque LSA. >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5468&t=5468 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: How is IS-IS more scalable than OSPF? [7:5207]
At 02:59 PM 5/22/01, Priscilla Oppenheimer wrote: >One design >challenge with OSPF that Chuck alluded to is that sometimes a network >topology doesn't have a good candidate for the area 0 network. If the >network grew without much concern for hierarchy, there may not be any >obvious high-speed core that could work as Area O. Actually that's probably not a good way to distinguish IS-IS and OSPF because IS-IS designs have a similar caveat. IS-IS has its backbone of L2 routers. All inter-area traffic must go through the backbone. Don't you just love it when I reply to my own replies? To be honest, I know very little about IS-IS. IS-IS=0 in my mind. ;-) Priscilla >At 12:33 AM 5/22/01, Chuck Larrieu wrote: > >I rechecked the NANOG archive, and I believe you are correct. It was several > >thousand nodes. > > > >As to the number of routers theoretically possible in a RIP domain, you > >might be surprised if you were to think through the math. > > > >Take a router. Connect ten routers. Connect ten routers to each of those > >ten. You can do this seven times, and the max distance from any router on > >the periphery to any other router on the periphery is 15 hops - seven in > >and seven out again. > > > >10^7 = 10,000,000 > > > >if that center router began with 100 directly connected routers, the number > >grows astronomically, and yet the max diameter would remain 15 hops. > > > >the real restraint would be the ability of the router to hold a routing > >table that big. Along with the problem of convergence. Even if there were no > >network problems ever, I bet that sucker would take forever to converge! > >Literally! > > > >Chuck > > > >-Original Message- > >From: Curtis Call [mailto:[EMAIL PROTECTED]] > >Sent: Monday, May 21, 2001 6:38 PM > >To: Chuck Larrieu > >Cc: [EMAIL PROTECTED] > >Subject:RE: How is IS-IS more scalable than OSPF? [7:5207] > > > > > > >BTW, I have been told by folks who work in really big networks that none >of > > >the routing protocols scale beyond 4-5K routers. As an interesting aside, >a > > >few weeks ago on NANOG there was a discussion about the largest RIPv1 > > >network in existence. It was revealed that until a year or two ago, Xerox > > >used RIPv1 and had a few thousand routers running RIPv1 on the network. > > > > > >I believe that the RIP network you are referring to had a few thousand > >nodes, not a few thousand routers. I doubt a few thousand routers could > >handle RIPs max 15 hop limitation. > >FAQ, list archives, and subscription info: > >http://www.groupstudy.com/list/cisco.html > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > >Priscilla Oppenheimer >http://www.priscilla.com >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5471&t=5207 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BGP scalability [7:5468]
>Aside from Priscilla (not Geoff Huston): What if the phone system had >evolved this way? How many companies have redundant trunk lines? Don't we >just assume that the "phone company" will always provide service? We don't >multihome to the phone system, (do we?) [Warning: Slightly OT] Actually, here at our corporate headquarters we have redundant fiber connections to separate telco central offices. The fiber links exit on opposite sides of the building to frustrate Backhoe Bob in case he tries to cut through them. These links carry two separate channelized DS-3s that carry our voice and data circuits. Theoretically, you could bomb one of the CO and we'd be just fine; both DS-3s would stay up and running without a hiccup. I hope we never have occasion to test this. John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5472&t=5468 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Multiple ISDN switch type on the same router [7:5198]
The source is CIM for ISDN. Thanks ""Brad McConnell"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I'd want to question the source of the concrete information. > > True, you can only configure one in global configuration mode, but you can > then configure the switch-type on the interface as well. Any interface > configured switch-type will override the global one. > > -Brad McConnell. > > > ""Lists Wizard"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Group, > > > > I got concrete information that if you have multiple bri interfaces on the > > router, all of them must be connected to > > the same ISDN switch type. How about if you have a router with multiple > PRI > > interfaces? Should I connect all the PRI interfaces to the same ISDN > switch > > type? > > > > > > Thanks > > L. W. > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5473&t=5198 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
What is a Jumbo frame [7:5474]
Hi Could some one explain what a jumbo frame is? Thanks Lw Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5474&t=5474 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Denver Cisco Group Study [7:5475]
Dear group, Is there a Cisco group study in the denver area?? _ Get your FREE download of MSN Explorer at http://explorer.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5475&t=5475 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: What is a Jumbo frame [7:5474]
huge mtu frames, looking at http://www.cisco.com/warp/public/cc/pd/si/casi/ca8500/prodlit/atmrm_in.htm Supports a maximum MTU of 9K bytes via Request For Comments (RFC) 1483 and RFC 1577 Brian From: "Lists Wizard" To: Sent: Tuesday, May 22, 2001 1:44 PM Subject: What is a Jumbo frame [7:5474] > Hi > > Could some one explain what a jumbo frame is? > > Thanks > > Lw > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5476&t=5474 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: what is a good intrusion detection software? [7:4610]
My comments imbedded: On 15 May 2001, at 22:46, Drew Simonis wrote: > Sean Young wrote: > > > > I have a few suggestions for you: > > > > 1) get rid of Microsoft windows servers and Sun Solaris; > > Use only NetBSD and software that are open-source, > > This is the most ignorant suggestion I have ever seen. How many times > will it have to be repeated before it gets through... OS's aren't > secure. None of them. Proper administration, among other things, > makes them more secure, but nothing is ever totally secure. While I agree with the gist of this statement, it is true that some OSes are more secure in their default configuration than others. Granted, anyone who installs a default config for publically accessible devices is asking for trouble no matter what the OS is. It's also true that in theory, open source software gives security benefits that cannot be gained through closed source code. In practice, not many companies seem to have the knowledge or experience to audit the code they use, so this benefit may not be that big in practice. > And to the OP... to be specifically technical, an IDS does nothing to > assist your security. It allows you a greater incident response > capability. (and anyone who mentions things like dynamic ACL updates > and router shunning, etc... Show me a network that does this, I'd > love to see one.) I've seen companies that were experimenting with this with mixed results. The problem is that you have to really prune down the false positives. This is an area of ongoing research and I think some companies are getting better at eliminating false positives or getting them down to a bare minimum. > > Maybe one day someone will release an IPS (intrusion prevention > system) but until then, we can only react. > I'd say that there already is an IPS "system", but it's a process, not a product. :-) Securing perimeters, hardening hosts, auditing the apps and protocols in use and creating security policies that work are all part of the process. If done properly, the bar can be raised to a sufficiently high level that only the most motiviated attackers can reach it, and all others will be deterred. Problem is, one has to constantly check the bar and make sure it is high enough in light of new security issues and/or changes to the environment. One can formalize the process to an extent, but I doubt any single or even set of products will get to the point where they are sufficiently self-tuning to perform this correction process on their own, at least in the near future. To the OP, I would say that if your concerned about your sites security, you need to understand what the process of security is all about before you start buying and implementing products. I recommend getting "The process of network security" by Wadlow as a good introduction to the task at hand. Once you understand the process, you'll be in a much better position to evaluate what products can assist the process. HTH, Kent > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html Report misconduct and > Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5478&t=4610 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: 100mb Ethernet over Type 1 ... [7:4897]
Timothy, As others have pointed out, this can be done. I investigated this about 5 years ago for a client and the main issue is that some of the IBM connectors and patch panels cannot support the higher frequencies needed for 100MB Ethernet (it has to do with the way the connectors are constructed). They will work fine for 10MB, but not 100. There are IBM connectors and patch panels that are 100MB certified, but if your client doesn't already have the infrastructure to support 100MB, they will be far better off pulling new CAT5 cabling. To find out if they're cabling will support 100MB, just get a couple of IBM media filter cables (IBM type 1 connector to RJ45 adapters) and try to connect at 100MB. If it works at 10 but not at 100, your infrastructure most likely is not 100MB capable. HTH, Kent On 17 May 2001, at 15:24, Hornbeck, Timothy wrote: > Is it possible to run 100mb Ethernet over Type1 cabling? If so what > are some of the issues in doing so? Looking to cut some costs on a > project. > > Timothy J. Hornbeck > Technical Analyst III > Infrastructure Implementation - LAN/WAN > "6EQUJ5" - By Unknown (recorded at OSU "Big Ear") > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html Report misconduct and > Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5477&t=4897 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Denver Cisco Group Study [7:5475]
HTH, John >>> "Travis Parrill" 5/22/01 2:47:07 PM >>> Dear group, Is there a Cisco group study in the denver area?? _ Get your FREE download of MSN Explorer at http://explorer.msn.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5479&t=5475 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Washington DC Router Roast Saturday [7:5460]
Pity I will not be able to make it. Have to take a test in the morning and have my tires replaced in the afternoon. Got I coupon from the garage and have to use it before this weekend. Have a fun!! KY ""Bruce Evry"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Dear Fellow Students of Ciscology, > > Our DC Cisco group will be holding its May picnic on: > Saturday, May 26, 2001 > Time: 10 am to 4 pm > Place: Bruce's House > > We will be discussing various topics, including but not limited > to: Job-hunting, Certifications, The Economy, and interconnections between > all 3 topics. Volunteers for talks are most welcome! > > We will also drag the routers and switches out if the weather is > nice and practise various arcane Cisco technologies under the trees > > As usual there is no charge or fee, but it's always appreciated if > you bring desserts, snacks, sodas, routers, switches, and laptops. Make > sure all the equipment is well-marked so that we can send it home with the > person who brought it. (Do not mark the potato chips please) > > Yours Truly - Bruce Evry > > > DIRECTIONS TO THE HOUSE > > 1607 Thomas Road, >Fort Washington, MD 20744 > > From Maryland take I-95 to exit 3a in MD, > From Virginia take Exit 2 in MD > >To the Indian Head Highway South. > > Go about 3 miles, turn Left on Old Fort Road. > > Go exactly 2 miles on Old Fort Road, >Turn Right on Thomas Road. > We are 1607 Thomas Rd, > almost all the way down the street on the left. > > Look for the pumpkin & a long gravel driveway > With no House visible from street! > > If lost, our phone # is 301-292-5231, call us! > Please E-mail to [EMAIL PROTECTED], thanks. > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5480&t=5460 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PIX Config backup [7:5481]
HI , I have PIX 520 ( Ver 4.4 ) with 2MB of flash which has a floppy drive . I have purchased a new 16 MB flash card . I would like to know 1) can we back up the PIX config to the floppy using the command . write floppy IF so then does the floppy need any special formatting . 2) once i install the new flash card and i can restore the configuration from the floppy using the command configure floppy . please help thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5481&t=5481 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT -- BGP scalability [7:5468]
Hi Keep in mind that many people site the phone as a highly available system, but do you know that it is highly available? People get the impression that the phone system is very reliable because they are used to hearing a dial tone when they pick it up. But most people are not on the phone 24x7 and have no real idea if their phone is available or not. I wish I could find the URL, but there was a study done at one of the universities back east that actually checked the availability of the phone system there and compared it to peoples belief's as to the availability of the system. Most people felt the phone system was up more than 99.9% of the time, as they almost never picked up a dead phone, but in fact the phone system was only up about 98% of the time. Now this begs the next question... do people need 99.999% uptime on the phone system or on their network? Keep in mind that 99.999% uptime equals to apx 1 minute of downtime per 30 days. Many network managers want to give the 99.999% guarantee to their internal/external customer and are willing to give SLA's to that effect without ever seeing if there really is a need for it. I am asked a couple of times a month for a 99.999% solution. By the time they answer a few questions they figure out that they can easily withstand more than 1 minute per month of down time. With the idea that BGP is growing widely with all of the /24 companies joining the table, is a real shame. I would venture to say that many of the companies out there could stand to take the down time of a single connection or a multiple connection to the same ISP and never really hurt their business. I can not say if BGP will scale to meet this growing "need", but I can tell you that having to get more and more memory and CPU to handle the larger and larger routing table is a burden and a pain. Hopefully someone much more intelligent than I will find a simple and easy solution. BTW, yes some places multihome their phones too... I was at one for awhile. $0.02 -- John Hardman CCNP MCSE ""Priscilla Oppenheimer"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Aside from Priscilla (not Geoff Huston): What if the phone system had > evolved this way? How many companies have redundant trunk lines? Don't we > just assume that the "phone company" will always provide service? We don't > multihome to the phone system, (do we?) > > Priscilla > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5482&t=5468 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT -- BGP scalability [7:5468]
Well, you're preaching to the choir, but I have a couple comments in line nonetheless. A really technical discussion would require more knowledge of statistics, queuing theory, etc., than I have. But it can't hurt to discuss the issues at a high level also. At 05:44 PM 5/22/01, John Hardman wrote: >Hi > >Keep in mind that many people site the phone as a highly available system, >but do you know that it is highly available? People get the impression that >the phone system is very reliable because they are used to hearing a dial >tone when they pick it up. But most people are not on the phone 24x7 and >have no real idea if their phone is available or not. In the phone industry, we can use Erlang and other obscure methods for calculating the amount of bandwidth needed based on an acceptable frequency of someone picking up the phone and not getting dial tone. Why can't we do something similar with networking? I suspect it's because network traffic is so different from phone traffic. We claim that network traffic is "bursty," but it's not nearly as bursty as phone traffic. There's very little quiet time. Even if the user isn't doing something there's still overhead traffic, keepalives, routing table updates, etc. The consequences of not being able to send this overhead traffic can result in serious performance degradation. >I wish I could find the URL, but there was a study done at one of the >universities back east that actually checked the availability of the phone >system there and compared it to peoples belief's as to the availability of >the system. Most people felt the phone system was up more than 99.9% of the >time, as they almost never picked up a dead phone, but in fact the phone >system was only up about 98% of the time. > >Now this begs the next question... do people need 99.999% uptime on the >phone system or on their network? Keep in mind that 99.999% uptime equals to >apx 1 minute of downtime per 30 days. On an AVERAGE, 99.999% uptime equals 1 minute of downtime per 30 days. It's the cases where the amount of downtime deviates a lot from the average that kill you. What if you go a couple years with no downtime and then it all hits at once when you are printing pink slips for all the employees you laid off and are walking out the door. I'm sure we can all come up with stories like this. (The example probably makes more sense with 99.99% uptime, but even with 99.999%, it's important to consider the standard deviation from the average, not just the average.) >Many network managers want to give the >99.999% guarantee to their internal/external customer and are willing to >give SLA's to that effect without ever seeing if there really is a need for >it. > >I am asked a couple of times a month for a 99.999% solution. By the time >they answer a few questions they figure out that they can easily withstand >more than 1 minute per month of down time. > >With the idea that BGP is growing widely with all of the /24 companies >joining the table, is a real shame. I would venture to say that many of the >companies out there could stand to take the down time of a single connection >or a multiple connection to the same ISP and never really hurt their >business. >I can not say if BGP will scale to meet this growing "need", but I >can tell you that having to get more and more memory and CPU to handle the >larger and larger routing table is a burden and a pain. Hopefully someone >much more intelligent than I will find a simple and easy solution. But as Howard and Geoff would say, we're dealing with the "tragedy of the commons." Everyone wants to meet their own particular needs and is unwilling to meet the needs of the overall community. The phrase comes from something to do with sheep herders sharing a common area in Medieval Britain, if I recall. ;-) Priscilla >BTW, yes some places multihome their phones too... I was at one for awhile. > >$0.02 >-- >John Hardman CCNP MCSE > > >""Priscilla Oppenheimer"" wrote in message >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Aside from Priscilla (not Geoff Huston): What if the phone system had > > evolved this way? How many companies have redundant trunk lines? Don't we > > just assume that the "phone company" will always provide service? We don't > > multihome to the phone system, (do we?) > > > > > Priscilla >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5483&t=5468 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Fwd: Re: Subject: ISDN [7:5295]
Thanks for all the help. It turns out that I just don't know enough about ISDN. I could actually make the call and showed this with the "show isdn status", and "debug dialer". I'm not sure that I actually needed to put in the ppp authentication chap command; seemed like it worked anyway before I did that. I also did a "debug ppp negotiation" and that showed "install route to 192.168.x.x" So, the call was good through layer 3, but the customer had to get rid of his access list before I could ping. Sometimes you have to do so much just to prove/confirm everything is good on your side before the customer will admit something is configured wrong on his side... Note: forwarded message attached. - Do You Yahoo!? Yahoo! Auctions $2 Million Sweepstakes - Got something to sell? X-Apparently-To: [EMAIL PROTECTED] via web5104; 21 May 2001 22:08:03 -0700 (PDT) X-Track: 1: 40 Received: from mail.ureach.com (EHLO ureach.com) (63.150.151.36) by mta205.mail.yahoo.com with SMTP; 21 May 2001 22:08:02 -0700 (PDT) Received: from www20.ureach.com (IDENT:[EMAIL PROTECTED] [172.16.2.48]) by ureach.com (8.9.1/8.8.5) with ESMTP id BAA09666; Tue, 22 May 2001 01:07:31 -0400 Received: (from nobody@localhost) by www20.ureach.com (8.9.3/8.9.1) id BAA32299; Tue, 22 May 2001 01:07:31 -0400 Date: Tue, 22 May 2001 01:07:31 -0400 Message-Id: To: [EMAIL PROTECTED], [EMAIL PROTECTED], "[EMAIL PROTECTED]" From: Paul Werner Reply-to: Subject: Re: Subject: ISDN [7:5295] Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-vsuite-type: e Content-Length: 2252 A couple of thoughts on this issue(some generic, some specific to your problem): 1. What results do you get with "show isdn status"? 2. While running "debug dialer" during this ping, is a cause code reflected for dial? Specifically, is it attempting to dial out at all? Do you have the following statement present on this router: dialer-list 1 protocol ip permit or something closely similar? 3. I noted the absence of the following line under the interface config: ppp authentication chap That might likely cause the PROTREJ message you saw(although it could be for other protocols requested). You probably need to copy a sample of the debug to get a better answer. 4. What does the other router config look like? 5. Was this previously working, or is the first time this circuit came up? -Need more input...and configs/debugs HTH, Paul Werner > Please help, I can't ping the remote side of this ISDN connection. > > Here is the config AND the log with debug ppp negotiation showing a > PROTREJ(toward the end of output). Does that mean PPP is not working or > setup right? > > When I ping the remote, the call is made to the customer but I don't get > a > reply. Also, if I show ip route after I ping(while the line is still > up) I > see a route like this 192.168.2.58/32 what does the /32 mean- I know it's > subnet bits but how is it 32? Before the dialer makes the call if I > show ip > route I see it as 192.168.2.56/29(I'm 192.168.2.57 and customer is > 192.168.2.58) The rest of the output show what happens when I ping the > other > side with debug ppp negotiation on. Thanks for any help. > > isdn switch-type basic-ni1 > ! > interface BRI0/0 > ip address 192.168.2.57 255.255.255.248 > encapsulation ppp > isdn spid1 9258255950 > isdn spid2 9258255957 > dialer idle-timeout 57 > dialer map ip 192.168.2.58 name customer 1904296 > dialer-group 1 > ppp chap hostname service > ppp chap password xxx > > ping 192.168.2.58 > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 192.168.2.58, timeout is 2 seconds: Get your own "800" number Voicemail, fax, email, and a lot more Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5484&t=5295 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Can anyone recommend the best Boson sample exam for the CCDA [7:5485]
thanks, Dirk _ Get your FREE download of MSN Explorer at http://explorer.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5485&t=5485 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Bandwidth Tester [7:5062]
Thanks Michael. Iperf is excellent Regards Michael ""Michael Peled"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > solarwinds.net > > At 05:43 PM 5/18/2001 -0400, Russ Kreigh wrote: > >ftp > > > > > > > >-Original Message- > >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > >Mike Baker > >Sent: Friday, May 18, 2001 3:57 PM > >To: [EMAIL PROTECTED] > >Subject: Bandwidth Tester [7:5062] > > > > > >Does anyone know of a freeware app I can load on a windows box on either > >side of a serial link to test the maximum bandwidth of a link? > > > > > >Regards > > > > > >Mike > >FAQ, list archives, and subscription info: > >http://www.groupstudy.com/list/cisco.html > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > >FAQ, list archives, and subscription info: > >http://www.groupstudy.com/list/cisco.html > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > Schlumberger Network Solutions > > Michael L. Peled, CCNA, MCP > LAN/WAN/SECURITY Project Engineer > Schlumberger Network Solutions > SLB North America > 5599 San Felipe > Suite 400 > Houston, TX 77056 > (713) 499-6513 Voice > (713) 403-7204 Fax > (713) 240-7579 Cell > email: [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5486&t=5062 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to enlarge Switching Backplane of 6509 [7:5487]
from 32G to 256G? Thanks Frank Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5487&t=5487 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Switching exam Friday [7:5488]
I am taking the Switching exam on Friday. Any focus points I should be aware of? Any type-in? Thanks in advance -- Terence Lee, MCSE, CCNA, A+, Cisco IP Specialist IKON Remote Management Services 7 Technology Cirlce Columbia, SC 29203 Direct line:803.758.5369 Remote Management:803.758.5550 Email:[EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5488&t=5488 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT -- BGP scalability [7:5468]
(with a red face, reconstructing my original response. We're having a violent thunderstorm, and the power went out. I saved a lot of things, but trusted my UPS. Unfortunately, the UPS is much more helpful when the CPU is plugged into one of the battery backup outlets, not a surge protector outlet. Now it is!) >Priscilla wrote, in response to John Hardman, >Well, you're preaching to the choir, but I have a couple comments in line >nonetheless. A really technical discussion would require more knowledge of >statistics, queuing theory, etc., than I have. But it can't hurt to discuss >the issues at a high level also. > > > >In the phone industry, we can use Erlang and other obscure methods for >calculating the amount of bandwidth needed based on an acceptable frequency >of someone picking up the phone and not getting dial tone. Why can't we do >something similar with networking? I suspect it's because network traffic >is so different from phone traffic. We claim that network traffic is >"bursty," but it's not nearly as bursty as phone traffic. There's very >little quiet time. Even if the user isn't doing something there's still >overhead traffic, keepalives, routing table updates, etc. The consequences >of not being able to send this overhead traffic can result in serious >performance degradation. While Erlang C distributions can be of some use in estimating buffered data network device capacity, the statistical aspects get complex. The "conventional wisdom" was that packet interarrivals were exponential, but more recent research (e.g., by Will Leland at Telecordia) showed that fractal distributions were much more accurate. There's also the aspect that traffic in a routed system is actively affected by congestion and other feedback. A surprisingly large number of Internet packets are 40 to 48 bytes. These turn out to be TCP, and primarily HTTP, acknowledgements, possibly with some buffer padding beyond the essential 20 bytes of IP and 20 bytes of TCP. HTTP is _not_ bandwidth efficient, or address space efficient, but there's a lot of inertia in upgrading it. > > > > >>Now this begs the next question... do people need 99.999% uptime on the >>phone system or on their network? Keep in mind that 99.999% uptime equals to >>apx 1 minute of downtime per 30 days. And adding each additional nine adds a lot of cost. Also, adding redundancy in particular parts of the overall system doesn't necessarily make things better. Perhaps going wildly off topic, perhaps not, professional futurists use the idea of a "Hahn-Strasseman point" in forecasting technology. That refers to the physical demonstration of nuclear fission. All the theoretical work in the world wasn't going to go much farther without that experimental breakthrough. In other cases, all the experiments in the world may be waiting on theoretical breakthroughs. In networking, there's a point at which you MUST physically diversify, to protect against major disasters. Military command posts like Cheyenne Mountain or Raven Rock could at one point have a chance against nuclear attack, but not when warheads reached a certain level of accuracy. Nuclear warfighting strategy means get the National Command Authority into an airborne, mobile command post ASAP--and have a chain of delegation if that plane becomes a fireball. If your mission-critical data center sits on the San Andreas Fault, it might survive The Big One, but the power and data cables to it aren't as likely. There's also the sorts of problems that redundancy doesn't help. Radia Perlman's dissertation is on the Byzantine Corruption Problem, which deals with the class of reliability problems that are caused by at least partially incorrect information rather than nodal failures. Routing protocols are subject to Byzantine Corruption. > > > >>With the idea that BGP is growing widely with all of the /24 companies >>joining the table, is a real shame. I would venture to say that many of the >>companies out there could stand to take the down time of a single connection > >or a multiple connection to the same ISP and never really hurt their >>business. >>I can not say if BGP will scale to meet this growing "need", but I >>can tell you that having to get more and more memory and CPU to handle the >>larger and larger routing table is a burden and a pain. Hopefully someone > >much more intelligent than I will find a simple and easy solution. Simple answer: without at least some operational changes, we have 2-5 years before the global routing system gets into real trouble. There are short-term fixes being considered, but 7-10 years out calls for new research ideas. I'm one of the speakers at the Internet Society meeting coming up in Stockholm, in the "New Approaches to Internet Routing" session chaired by Lyman Chapin. I will be defining the problem space--the "what problem are we trying to solve" section. Sue Hares will talk about short-term fixes to b
How do I set up Windows DHCP for multiple VLANS? [7:5490]
Any good links? Thanks. Justin Lofton Account Executive/CCNA Tredent Data Systems [EMAIL PROTECTED] (818) 222-3770 http://www.tredent.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5490&t=5490 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Controlling console access via tacacs+ [7:5400]
Assuming - you realize and could recover from locked console : there is global config command (hidden) from 11.3 onwards : aaa authentication console It will apply "default" list or other list specificed on "line" to the console. HTH GS ""Andras Bellak"" wrote in message news:[EMAIL PROTECTED]... > The newer versions allow it, but the setup is different - you need to setup > a list of tacacs servers/parameters (not sure of the makeup off the top of > my head) and then apply that list to your line con 0. > > The cisco page that discusses with examples is at cisco.com + > univercd/cc/td/doc/product/software/ios120/12supdoc/dsqcg3/qcsecur.htm > > good luck > > andras > -Original Message- > From: Marakalas [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, May 22, 2001 1:31 AM > To: [EMAIL PROTECTED] > Subject: Controlling console access via tacacs+ [7:5400] > > > Hi all > > I have tacacs loaded on all our routers in our network and would like > to configure the console ports to use it also, not only the vty lines. > I noticed that on IOS ver 10.x, you could actually configure 'login > tacacs' on the console port, but can't do it on the new version of the > IOS. Any assistance will be highly appreciated. > ___ > http://www.webmail.co.za the South-African free email service > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5491&t=5400 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how to enlarge Switching Backplane of 6509 [7:5487]
The easiest way would be to purchase two of the WS-C6500-SFM cards. These must be placed into slots 5 & 6, and provide the 256 gig backplane enhancement. Bookmark the following link. it is the Cisco public tool for equipment configuration. Does everything the partner tool does except give you list price. http://www.cisco.com/pcgi-bin/front.x/newConfig/config_root.pl Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of frank Sent: Tuesday, May 22, 2001 4:53 PM To: [EMAIL PROTECTED] Subject:how to enlarge Switching Backplane of 6509 [7:5487] from 32G to 256G? Thanks Frank FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5492&t=5487 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
TCP/IP disabled [7:5493]
Hi, I apparently cannot ping or telnet to one of my hosts. A program informed me that my TCP/IP configuration was disabled. A second computer has it enabled, both configurations are identical. Any suggestions, Stephen Flint [EMAIL PROTECTED] _ Get your FREE download of MSN Explorer at http://explorer.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5493&t=5493 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Watchdog [7:5494]
I have a 7100 series, on the fast ethernet interface there is a watchdog counter, anyone know what the significance of that is? Thanks in advance. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5494&t=5494 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: how to enlarge Switching Backplane of 6509 [7:5487]
Don't expect to find this spelled out clearly anywhere on CCO, but to the best of my knowledge, you must have: 1. Supervisor Engine 2 (with PFC2) 2. MSFC2 3. 128G Switch Fabric Module 4. 16-port GE module (WS-X6516-GBIC or WS-X6816-GBIC) 5. Distributed Forwarding Card (DFC) Until recently this last piece has not been available... Search CCO for details on these fine products. Bring your wallet. Dave On Tue, 22 May 2001, frank wrote: > > from 32G to 256G? > > Thanks > > > Frank Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5495&t=5487 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Knozall Software E-KNews for May 2001 [7:5496]
Welcome to Knozall Knozall Software E-KNews for May 2001 This mail is sent to Thomas Cunningham because you requested information or downloaded a product from Knozall. 1. Imagine how good your organization would be if you could tap the true potential of all your employees. Get started with ProductivityWizard. 2. What is going on with your server space? Find out what files have been created in the last month, Produce a list of the 10 largest files created in the last month, Produce a list of all files larger than 5MB created in the last month, Produce a list of all tmp files created in the last month Plus lots more. Schedule reports to be produced automatically. 3. Compress NetWare files on the server with a PKZip compatible NLM. Supports long filenames 4. HSM for NetWare?We have a solution for all size enterprises. If you are using TSM Without TSM 5. Last, and perhaps least, we changed our name from Knozall Software to Knozall Software. This change was made to more closely align our name and our products. Best Regards Knozall Software, Inc. 8912 E. Pinnacle Peak Rd. #601 Scottsdale, AZ 85282 Main: 800-333-8698 efax: 520-223-9924 Tech Support: URL: If you do not wish to receive further Knozall Software KNews Click Here Powered by AutomationWizard Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5496&t=5496 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
