IP Backbone [7:6016]

2001-05-26 Thread norsyam ariffin

Hi guys,

Could I know what is IP BACKBONE and where I can find the information about 
it either website, books and so on?


Thanks in advance.

Syam




_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6016t=6016
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ARP versus Proxy-arp [7:5664]

2001-05-26 Thread Priscilla Oppenheimer

At 03:32 PM 5/25/01, Chuck Larrieu wrote:
Forgive the silly questions, but 1) was proxy arp enabled on the router

It's not a silly question and I really wondered about that also. It doesn't 
show up in the config because it's the default, but I typed no ip 
proxy-arp and ip proxy-arp in Ethernet interface config mode to make 
sure. And I did get the router to actually do proxy arp in a few cases. My 
latest testing was with 172.16.0.0 networks:

My address was set to 172.16.10.10/16. My default gateway address was set 
to 172.16.10.1.

The default gateway's e0 was set to 172.16.10.1/24 and the router also had 
direct connections and EIGRP routes to 172.16.20.0, 172.16.30.0, and 
172.16.40.0 and 172.16.50.0.

Router responded on behalf of my PC's ARPs for 172.16.20.1, 172.16.30.1, 
172.16.40.1 and 172.16.50.1. Yeah. Proxy ARP lives!


If I configured my PC with its own address as the default gateway, I got 
the same results. Hooray!

If I left out the configuration for the default gateway, my PC couldn't get 
anywhere off its major net. It didn't even try. The application just 
responded immediately with an error and no packets were seen with debug or 
sniffer. Boo. My PC could get to other networks within 172.16.0.0 because 
of Proxy ARP.


I added a default route to my router while my PC was configured to use 
itself as the gateway.

ip route 0.0.0.0 0.0.0.0 172.16.20.2

I pinged 200.200.200.200. My PC ARPed for it. The router responded! Hooray! 
Proxy ARP rocks.


I also tried the original case, once I was sure Proxy ARP was really 
enabled. I left my PC on its normal office config on network 208.x.x.x, but 
connected to the lab network. The router complained about the source being 
on a different cable and did not respond to an ARP for my default gateway. 
If I had my default gateway set to myself, causing me to ARP for non-remote 
stations, the router also did not respond, complaining about the source 
being on a different cable. See Chuck's comments and quote from RFC below.


Conclusions:
Using Proxy ARP would not solve our travelling hotel user's problems. The 
user would have to do some reconfigs.
Proxy ARP is a HACK.

Caveats: I was running IOS 11.0 and Windows 98, both hacks themselves!? ;-)

Priscilla

and
2) was there a route to the 10dot network, or a default route in the routing
table of the router in question?

 From RFC 1027:

To permit multiple subnets per physical network, an ARP subnet gateway must
use the physical network interface, not the subnet number to determine when
to reply to an ARP request. That is, it should send a proxy ARP reply only
when the source network interface differs from the target network interface.
In addition, appropriate routing table entries for these phantom subnets
must be added to the subnet gateway routing tables.

OK. I get it. The router still needs to be one the same subnet as the host
making the request. The RFC refers to multiple subnets of the same major
network. In the case you, PO, mention, the router interface would  have to
have secondary addressing to cover all possibilities. Score one for the
designer! Good call.

Chuck


-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Priscilla Oppenheimer
Sent:   Friday, May 25, 2001 3:24 PM
To: [EMAIL PROTECTED]
Subject:RE: ARP versus Proxy-arp [7:5664]

At 05:05 PM 5/25/01, Bob Vance wrote:

 Once the Proxy ARP answers the client's request for his
 DG on net 10, then all the other packets will be to real Internet
 addresses.

OK, I hear you on the routing questions, but it turns out the router does
NOT respond to the ARP for the DG. I decided to try it. It doesn't work for
a different reason than expected.

I left my PC configured as I use it on a real network and plugged it into
my lab network, which uses a different addressing scheme. I was emulating a
traveller connecting to the hotel network without reconfiguring the TCP/IP
control panel.

I had debug arp on and here was the result:

IP ARP req filtered src 10.0.0.2 .0ed5.c7e7, dst 10.0.0.1 ..
 wrong cable

The router won't respond to an ARP from a station that isn't on its subnet.
Remember that an ARP packet has the sender's IP address in it. I was
running 11.0 because my lab network is old so your results may vary.

I think the hotel network is on fantasy island. ;-)

Priscilla



 -
 Tks|
 BV |
 Sr. Technical Consultant,  SBM, A Gates/Arrow Co.
 Vox 770-623-3430   11455 Lakefield Dr.
 Fax 770-623-3429   Duluth, GA 30097-1511
 =
 
 
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 Priscilla Oppenheimer
 Sent: Friday, May 25, 2001 3:04 PM
 To: [EMAIL PROTECTED]
 Subject: RE: ARP versus Proxy-arp [7:5664]
 
 
 If a router running Proxy ARP didn't have a route of last resort or
 default route would it 

Re: ARP versus Proxy-arp [7:5664]

2001-05-26 Thread Jason Roysdon

But say it could magically use proxy arp for nodes not on it's subnet (say
you had software that was sniffing the line and would add that subnet).  To
answer Priscilla's question: They've got to do (P)NAT for all those
addresses anyway, since even if it was a public or private address, it
wouldn't get routed back to the hotel.

Of course, if the software could add any network it saw in use internally,
Priscilla couldn't get to her public subnet (since it would have added that
network to it's inside interface).  You could even purposely/accidentally
blackhole sites by doing this, which is all the more reason it's not
likely.

No doubt hotels are just using DHCP, or maybe even giving out statics to
track who is one what.  For LA Networkers I'm staying at a Marriott with
in-room CAIS internet access, so I'll be able to tell one way or another.
You'd better believe I'll bring my new Sniffer as well and I'll be hacking
the thing.  No doubt they use some sort of vlan setup (default vlan gets you
dhcp and net access just to the hotel pay website, once you pay up you get
moved to the vlan with real access).

Oh, and I'm going to bring a Cache Engine and Aironet 340 access point, so
anyone nearby can have free internet access on me (costs me like $10/night,
but the company is paying for it).  As the hotel is already completely
booked and it was reserved by Cisco, I'm guessing there may be a fair amount
of folks with 802.11 NICs.

$(%$%(#$ my router just crashed again, hehee.  Silly me, I should just stop
trying to do an Offline Sync with IE with this CE507 proxying for me:

falcon#sh mem
HeadTotal(b) Used(b) Free(b)   Lowest(b)
Largest(b)
Processor   80FA04D8 7732008 7138812  593196  305376
358784
  I/O170 1048644  694056  354588  354588
354012



falcon#
May 25 19:26:13.573 PDT: %SYS-2-MALLOCFAIL: Memory allocation of 152 bytes
failed from 0x8
00FA964, pool Processor, alignment 0
-Process= IP Input, ipl= 4, pid= 29
-Traceback= 800F83B8 800FA0B0 800FA968 8085CFFC 8085D784 80858034 808575A4
80856B3C 802350
FC 80233738 80233938 80233A94 8011A09Csh mem
HeadTotal(b) Used(b) Free(b)   Lowest(b)
Largest(b)
Processor   80FA04D8 7732008 7676276   55732   10832
32728
  I/O170 1048644  694056  354588  354588
354012



--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/



Chuck Larrieu  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Forgive the silly questions, but 1) was proxy arp enabled on the router
and
 2) was there a route to the 10dot network, or a default route in the
routing
 table of the router in question?

 From RFC 1027:

 To permit multiple subnets per physical network, an ARP subnet gateway
must
 use the physical network interface, not the subnet number to determine
when
 to reply to an ARP request. That is, it should send a proxy ARP reply only
 when the source network interface differs from the target network
interface.
 In addition, appropriate routing table entries for these phantom subnets
 must be added to the subnet gateway routing tables.

 OK. I get it. The router still needs to be one the same subnet as the host
 making the request. The RFC refers to multiple subnets of the same major
 network. In the case you, PO, mention, the router interface would  have to
 have secondary addressing to cover all possibilities. Score one for the
 designer! Good call.

 Chuck


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
 Priscilla Oppenheimer
 Sent: Friday, May 25, 2001 3:24 PM
 To: [EMAIL PROTECTED]
 Subject: RE: ARP versus Proxy-arp [7:5664]

 At 05:05 PM 5/25/01, Bob Vance wrote:

 Once the Proxy ARP answers the client's request for his
 DG on net 10, then all the other packets will be to real Internet
 addresses.

 OK, I hear you on the routing questions, but it turns out the router does
 NOT respond to the ARP for the DG. I decided to try it. It doesn't work
for
 a different reason than expected.

 I left my PC configured as I use it on a real network and plugged it into
 my lab network, which uses a different addressing scheme. I was emulating
a
 traveller connecting to the hotel network without reconfiguring the TCP/IP
 control panel.

 I had debug arp on and here was the result:

 IP ARP req filtered src 10.0.0.2 .0ed5.c7e7, dst 10.0.0.1 ..
  wrong cable

 The router won't respond to an ARP from a station that isn't on its
subnet.
 Remember that an ARP packet has the sender's IP address in it. I was
 running 11.0 because my lab network is old so your results may vary.

 I think the hotel network is on fantasy island. ;-)

 Priscilla



 -
 Tks|
 BV |
 Sr. Technical Consultant,  SBM, A Gates/Arrow Co.
 Vox 770-623-3430   11455 Lakefield Dr.
 

Lots of brodacast packets [7:6018]

2001-05-26 Thread Inamul

I am getting lot of broadcast packets on FastEthernet interface when I do sh
interface on cisco 7505. I also
get input errors on that interface and big ping (up to 1200ms) latency to
isdn sites.
What to expect if I turn off these broadcasts ? Do I
need receive broadcast packets on interface ?
Thanks

Inamul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6018t=6018
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Router problems, memory dropping like a rock [7:6004]

2001-05-26 Thread GNOME

I have experienced that same problem. My content engine crashed my 7204
router when i deployed it. Bascially the router's memory drop till 1MB and
auto reboot itself. This happens every hour

i opened a TAC case and they told me is the bug in my IOS. I am using
12.1(4)


Jason Roysdon  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 My poor little 827-4v just started crashing.  I've been tweaking with a
 Content Engine 507 (used as a proxy box, no WCCP support on the 827).  I'm
 guessing that's what is hammering the box, but why is it the memory not
 returning to free use?

 falcon#sh ver
 Cisco Internetwork Operating System Software
 IOS (tm) C820 Software (C820-K2NOSV6Y6-M), Version 12.1(5)YB, EARLY
 DEPLOYMENT RELEASE SOF
 TWARE (fc1)
 TAC:Home:SW:IOS:Specials for info
 Copyright (c) 1986-2001 by cisco Systems, Inc.
 Compiled Thu 08-Feb-01 01:00 by detang
 Image text-base: 0x80013170, data-base: 0x80997DE4

 ROM: System Bootstrap, Version 12.1(1r)XB1, RELEASE SOFTWARE (fc1)
 ROM: C820 Software (C820-K2NOSV6Y6-M), Version 12.1(5)YB, EARLY DEPLOYMENT
 RELEASE SOFTWAR
 E (fc1)

 falcon uptime is 5 minutes
 System returned to ROM by reload at 18:32:58 PDT Fri May 25 2001
 System restarted at 18:34:23 PDT Fri May 25 2001
 System image file is flash:c820-k2nosv6y6-mz.121-5.YB.bin

 CISCO C827-4V (MPC855T) processor (revision 0x502) with 23552K/1024K bytes
 of memory.
 Processor board ID JAD04390QBC (72633648), with hardware revision 
 CPU rev number 5
 Bridging software.
 4 POTS Ports
 1 Ethernet/IEEE 802.3 interface(s)
 1 ATM network interface(s)
 128K bytes of non-volatile configuration memory.
 8192K bytes of processor board System flash (Read/Write)

 Configuration register is 0x2

 falcon#sh mem
 HeadTotal(b) Used(b) Free(b)   Lowest(b)
 Largest(b)
 Processor   80FA04D8 7732008 6068088 1663920 1662060
 1663268
   I/O170 1048644  692208  356436  356436
 355860

 If I fire up my IE5 Offline Syncronize (Cisco Field Notices, Cisco
 Headlines, Slashdot.org), within a few minutes it's dropped to:
 falcon#sh mem
 HeadTotal(b) Used(b) Free(b)   Lowest(b)
 Largest(b)
 Processor   80FA04D8 7732008 6362292 1369716 1350056
 1345636
   I/O170 1048644  692208  356436  356436
 355860

 This time it appears to have settled (probably because the CE507 has a
large
 portion of the content cached now).

 After about 5 minutes:
 falcon#sh mem
 HeadTotal(b) Used(b) Free(b)   Lowest(b)
 Largest(b)
 Processor   80FA04D8 7732008 6693236 1038772 1038444
 1029716
   I/O170 1048644  692208  356436  356436
 355860

 Can we see a trend?  All the while, my Offline Syncronization is busy
 pulling down sites (no doubt getting them faster with the CE507 reading
 ahead and pulling down images to proxy to me before my PC even asks for
 them).

 Ok, so my question is, why is it getting hammered so hard?  I am running
 CBAC Firewall and IPSEC with 6 tunnels (nothing going on with VPN), so
that
 all adds up with ACLs that packets have to go through.  But the overall
 traffic speed is nothing staggering (less than 21K), but it's small web
 traffic, so the pps are probably the more intense item.

 Oh, about 10 minutes into it, and we're destined for memory allocation
 problems as soon as we bottom out (which means telnet and console access
 dies):
 falcon#sh mem
 HeadTotal(b) Used(b) Free(b)   Lowest(b)
 Largest(b)
 Processor   80FA04D8 7732008 6946532  785476  745176
 735040
   I/O170 1048644  692208  356436  356436
 355860

 I'm also curious why my Processor + I/O total doesn't come anywhere near
 24mb (only about a third).

 falcon#sh mem
 HeadTotal(b) Used(b) Free(b)   Lowest(b)
 Largest(b)
 Processor   80FA04D8 7732008 7092000  640008  311376
 357996
   I/O170 1048644  692208  356436  356436
 355860

 At least the box is recovering now.  Before, the free and lowest would
track
 the same all the way 'till I lost my session when it bottomed out.  Now,
it
 at least appears to be recovering (It looks like the Cisco stuff finised,
 and just Slashdot.org now and it seems to be crawling).

 Anyway, any ideas on why this is happening so drastically?  The only time
 I've ever killed ram is with routing protocols and tables getting to big
(on
 old 2500s with only 2mb).

 Ok, and now it's really screwy.  I do a show run and it's blank.  I
check
 show version, and sure enough I've got something odd set (0x2).

 Fixed that and bounced the box just before it was going to kill my telnet:

 Configuration register is 0x2 (will be 0x2102 at next reload)

 falcon#sh mem
 HeadTotal(b) Used(b) Free(b)   Lowest(b)
 Largest(b)
 Processor   80FA04D8 

How do I change flash on 2500 to read-write from read only [7:6020]

2001-05-26 Thread Boomie Okeowo

__
FREE voicemail, email, and fax...all in one place.
Sign Up Now! http://www.onebox.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6020t=6020
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



help --------------Pls ................OIR Error [7:6021]

2001-05-26 Thread Arun

Hi
I have router configured as X25 router .I have 2 slots in it with each
having 4 serial ports on them.The problem is that when i connect the cisco
provided cable just the cable to the administratively shutdown serial port
it gives me error :
%OIRINT:OIR Event has occured OIR_ctrl 50 oir stat 8F88
( i have checked OIR it stands online insertion and removal but i could not
find this particular error)
and this also hangs the router i have checked the cable i can not do many
thngs on the router as it is in live n/w ..Please help ..the router works
well after i remove cable and restart the router .
Any help will be appreciated


Regards
Arun Sharma




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6021t=6021
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Lots of brodacast packets [7:6018]

2001-05-26 Thread Dennis R

I am getting lot of broadcast packets on FastEthernet interface when I do 
sh interface on cisco 7505.

What does, Lots, mean? Broadcasts are part of life in a network, cf. ARP, 
GNS, SAP, RIP updates, etc.

I also get input errors on that interface

What percentage of your input packets is it? Are they collisions (normal in 
an unswitched environment), CRC's, or ?? You may want to check your cabling, 
and your speed/duplex settings if the router is plugged into a switch.

and big ping (up to 1200ms) latency to isdn sites.

Could be caused by many, many things. It's unlikely this has anything to do 
with your ethernet interface. You might start by looking for overutilized 
circuits causing routers to drop packets from their output queues.

What to expect if I turn off these broadcasts?

ARP won't work, therefore TCP/IP won't work.

Do I need receive broadcast packets on interface?

Yes.

HTH,
doctorcisco
_
Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6022t=6018
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: DNS and ISP question [7:5898]

2001-05-26 Thread Bob Vance

still there:

http://www.acmebw.com/askmrdns/


-
Tks| 
BV | 
Sr. Technical Consultant,  SBM, A Gates/Arrow Co.
Vox 770-623-3430   11455 Lakefield Dr.
Fax 770-623-3429   Duluth, GA 30097-1511
=





-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
ElephantChild
Sent: Friday, May 25, 2001 1:36 PM
To: [EMAIL PROTECTED]
Subject: Re: DNS and ISP question [7:5898]


On Fri, 25 May 2001, Scott Meyer wrote:

 I have a question about changing ISP's when a domain name(s) is
registered
 to an IP address(s) owned by the ISP.

 Obviously, we need to get the DNS registration changed to an address
owned
 by the new ISP. I have had some transitions that have not been real
smooth,
 and would like the current best practice for doing this.

 Any input is apprectiated.

ObWhereDidItGo: Does anyone know where the Ask Dr. DNS web site went?
I wanted to point the poster to it, but couldn't find it. Oh well...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6024t=5898
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Isn't MPLS basically just ATM PNNI, but for layer 3? [7:6027]

2001-05-26 Thread Peter Van Oene

Ahh, thanks for the insight.  I didn't realize that was the case.  My MPLS
experience is restricted to Juniper at this point.

Pete


*** REPLY SEPARATOR  ***

On 5/26/2001 at 8:58 AM Michael Cohen wrote:

Yes, that's true.  TLV's #22 and #135 are used to carry information needed
for MPLS TE however, in order to enable these TLV's on a cisco router, wide
metric support is required...

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120
t/120t7/te120_7t.htm#xtocid214168


Cheers,

-Michael Cohen

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Peter Van Oene
Sent: Saturday, May 26, 2001 1:02 AM
To: [EMAIL PROTECTED]
Subject: RE: Isn't MPLS basically just ATM PNNI, but for layer 3?
[7:6015]


A small correction.  Traffic engineering databases are populated via new
TLV's in IS-IS (see Draft-ietf-isis-traffic-0x.txt).  Wide metric support
is
not required.

*** REPLY SEPARATOR  ***

On 5/25/2001 at 12:06 PM Michael Cohen wrote:

Quite right.  RSVP-TE is only for path creation and setup.  Actual
bandwidth
allocation information is disseminated to all TE devices using the IGP
(OSPF
Opaque LSA's and IS-IS wide metrics).  This also leads to the current
limitation of only running MPLS-TE within a single area of the link state
IGP since the bandwidth information doesn't cross area boundaries.  Each
head end of TE tunnels should know what bandwidth is available through the
entire tunnel path prior to RSVP signaling.

Cheers,

-Michael Cohen

-Original Message-
From: Irwin Lazar [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 25, 2001 10:25 AM
To: 'Michael Cohen'; [EMAIL PROTECTED]
Subject: RE: Isn't MPLS basically just ATM PNNI, but for layer 3?
[7:5765]


Just to clarify, most other vendors are now heading down the RSVP-TE road
for MPLS LDP provisioning (or at the very least, they are agreeing to
support RSVP-TE).  The RSVP-TE vs. CR-LDP argument seems to finally be
dying
down.

It should be noted that RSVP-TE is only for path creation and setup, it
doesn't perform the same role as was envisioned for IntServ.

If anyone is interested in comparing the two protocols, Data Connection
has
a good white paper on their site, which I link to from the MPLS Resource
Center - www.mplsrc.com.


Irwin


-Original Message-
From: Michael Cohen [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 24, 2001 2:17 PM
To: [EMAIL PROTECTED]
Subject: RE: Isn't MPLS basically just ATM PNNI, but for layer 3?
[7:5765]


I think there might be some confusion as to where RSVP and CR-LDP are
being
used.  Steve is correct in saying that Cisco is using RSVP and most other
vendors are using CR-LDP for Traffic Engineering.  Cisco is also using the
proprietary TDP to distribute tags in their MPLS solution while other
vendors are conforming to the MPLS standard LDP.  Cisco does support LDP
for
tag distribution in their 12.0.10ST and higher software and plans on
deploying it in 12.2T for availability on most platforms.  I haven't heard
Cisco planning support for CR-LDP with Traffic Engineering in the near
future...

-Mike

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Stephen Skinner
Sent: Thursday, May 24, 2001 12:13 PM
To: [EMAIL PROTECTED]
Subject: RE: Isn't MPLS basically just ATM PNNI, but for layer 3?
[7:5758]


guys,

thanks for your imput .

yes i was loosely discribing MPLS ...it does have all the functions you
state... and more ,

i must be mistaken about the RVSP because i seem to remeber reading
somewhere that cisco is favoring RSVPand that there LDP is based on
this

but hey i must be mistaken .

also the RFC you list does not come up as valid ont the ITEF...please can
you re-send this

many thanks

steve
From: Marc-Andre Giroux
Reply-To: Marc-Andre Giroux
To: [EMAIL PROTECTED]
Subject: RE: Isn't MPLS basically just ATM PNNI, but for layer 3?
[7:5723]
Date: Thu, 24 May 2001 08:56:43 -0400

Steve,
 MPLS is alot more then just ATM PNNI at layer 3. Your statement is
semi true when talking about MPLS VPN's the concept does come from ATM
but
there is so much more you can do with it go read on traffic engineering,
the
fish bowl effect, valued added services (VPNs) and the network
protection.

 As for your other statement saying that cisco uses RSVP and everyone
else doesn't. This also is wrong. Cisco uses TDP wich is a label
distribution protocol that is proprietary but they also support the
standard
LDP (RFC 3630) that Juniper and Everyone else are supporting. Juniper
personnaly doesn't have as much support for LDP then RSVP-TE (rsvp has
existed for a couple of years its the TE extensions that are used in
Traffic
engineering). But when you start talking about this be sure to know what
you
are talking about. BTW you can't use LDP or TDP to do MPLS
traffic-Engineering ( and this is the killer app of MPLS).

 I hope this clarifies a few things, I also hope you don't take 

RE: help --------------Pls ................OIR Error [7:6021]

2001-05-26 Thread Chuck Larrieu

Have you tried reloading the router with the cable attached?

Or blowing away the X.35 config, reloading with the cable attached, then
putting in the X.25

What version of IOS are you running? I have documented a couple of problems
revolving around serial port cables with 12.0.4 or so.

Chuck

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Arun
Sent:   Saturday, May 26, 2001 3:58 AM
To: [EMAIL PROTECTED]
Subject:help --Pls OIR Error [7:6021]

Hi
I have router configured as X25 router .I have 2 slots in it with each
having 4 serial ports on them.The problem is that when i connect the cisco
provided cable just the cable to the administratively shutdown serial port
it gives me error :
%OIRINT:OIR Event has occured OIR_ctrl 50 oir stat 8F88
( i have checked OIR it stands online insertion and removal but i could not
find this particular error)
and this also hangs the router i have checked the cable i can not do many
thngs on the router as it is in live n/w ..Please help ..the router works
well after i remove cable and restart the router .
Any help will be appreciated


Regards
Arun Sharma
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6028t=6021
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Pix 6.0 [7:5950]

2001-05-26 Thread Bruce Griffis

Spencer,

Wildpackets notes the following ports:
   Yahoo! Instant Messenger:Port 5050 TCP 
   Real Networks: Port 554 and 7070 TCP 
   Windows Media Player: Port 7007 TCP 
   MSN/Hotmail Messenger: Port 1863 TCP 

You could also put up a sniffer (or Etherpeek, or, ...) and play around to
see what you come up with. Don't be suprised if users simply move over to a
web based chat protocol or find other ways around it ;-)

Bruce


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6029t=5950
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: help --------------Pls ................OIR Error [7:6021]

2001-05-26 Thread Arun

hi
yes i tried reloading the router with the cables attached and it worked
..
thanks for the help but what could be the reason for that if i know it will
be a help .

Arun Sharma
Chuck Larrieu  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Have you tried reloading the router with the cable attached?

 Or blowing away the X.35 config, reloading with the cable attached, then
 putting in the X.25

 What version of IOS are you running? I have documented a couple of
problems
 revolving around serial port cables with 12.0.4 or so.

 Chuck

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Arun
 Sent: Saturday, May 26, 2001 3:58 AM
 To: [EMAIL PROTECTED]
 Subject: help --Pls OIR Error [7:6021]

 Hi
 I have router configured as X25 router .I have 2 slots in it with each
 having 4 serial ports on them.The problem is that when i connect the cisco
 provided cable just the cable to the administratively shutdown serial port
 it gives me error :
 %OIRINT:OIR Event has occured OIR_ctrl 50 oir stat 8F88
 ( i have checked OIR it stands online insertion and removal but i could
not
 find this particular error)
 and this also hangs the router i have checked the cable i can not do many
 thngs on the router as it is in live n/w ..Please help ..the router works
 well after i remove cable and restart the router .
 Any help will be appreciated


 Regards
 Arun Sharma
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6031t=6021
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Pix 6.0 [7:5950]

2001-05-26 Thread Chuck Larrieu

Gee, is it time to repeat my observation that the firewall is no longer the
appropriate device for doing this kind of stuff.? What happens when some
user or group has a valid business reason to use instant messenger  or real
audio? Now how to distinguish between the valid and non-valid uses and
users?

IF this is problem, and IF your management has directed you to do
something the first thing to do is work with HR to get an acceptable
internet use policy into the employee handbook. Next, get a third party
package like web sense or surf control, and use it to enforce policies as
determined by management. This will also do a lot to stop the p*rn and the
frivolity. And thee products allow for different users and groups to have
different privileges.

Chuck

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent:   Saturday, May 26, 2001 7:54 AM
To: [EMAIL PROTECTED]
Subject:RE: Pix 6.0 [7:5950]

Spencer,

Wildpackets notes the following ports:
   Yahoo! Instant Messenger:Port 5050 TCP
   Real Networks: Port 554 and 7070 TCP
   Windows Media Player: Port 7007 TCP
   MSN/Hotmail Messenger: Port 1863 TCP

You could also put up a sniffer (or Etherpeek, or, ...) and play around to
see what you come up with. Don't be suprised if users simply move over to a
web based chat protocol or find other ways around it ;-)

Bruce
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6032t=5950
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: help --------------Pls ................OIR Error [7:6021]

2001-05-26 Thread Chuck Larrieu

Beat the hell out of me.

In the past I have posted about problems with earlier 12.x codes, where if I
plugged serial cables into a serial interface while the router was powered
on, IP would not work, although IPX would.

I've had people tell me I was an idiot, and this couldn't happen. But Pamela
Forsythe told me she recognized the phenomenon.

I've moved my routers onto various versions of 12.1 code, and have not seen
the problem. Actually, I don't think I ever saw the problem with later
versions of 12.0 code either.

Still curious what IOS version you are running.

Chuck


-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Arun
Sent:   Saturday, May 26, 2001 8:02 AM
To: [EMAIL PROTECTED]
Subject:Re: help --Pls OIR Error [7:6021]

hi
yes i tried reloading the router with the cables attached and it worked
..
thanks for the help but what could be the reason for that if i know it will
be a help .

Arun Sharma
Chuck Larrieu  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Have you tried reloading the router with the cable attached?

 Or blowing away the X.35 config, reloading with the cable attached, then
 putting in the X.25

 What version of IOS are you running? I have documented a couple of
problems
 revolving around serial port cables with 12.0.4 or so.

 Chuck

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Arun
 Sent: Saturday, May 26, 2001 3:58 AM
 To: [EMAIL PROTECTED]
 Subject: help --Pls OIR Error [7:6021]

 Hi
 I have router configured as X25 router .I have 2 slots in it with each
 having 4 serial ports on them.The problem is that when i connect the cisco
 provided cable just the cable to the administratively shutdown serial port
 it gives me error :
 %OIRINT:OIR Event has occured OIR_ctrl 50 oir stat 8F88
 ( i have checked OIR it stands online insertion and removal but i could
not
 find this particular error)
 and this also hangs the router i have checked the cable i can not do many
 thngs on the router as it is in live n/w ..Please help ..the router works
 well after i remove cable and restart the router .
 Any help will be appreciated


 Regards
 Arun Sharma
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6033t=6021
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Remote Access [7:6034]

2001-05-26 Thread Akin Durosinmi-Etti

Hi Guys,

What command line do I use to configure my router to receive multiple
remote connections. I use ISDN line, I have already configured DOD, and
its working fine.
Please assist...

Regards, 
Akin Durosinmi-Etti. HND, MCSE, CCNA 
Cisco Specialist
Techno Zone Limited
WoodGreen, London.
Phone: +44 (0)20 8881 6729
Fax: +44 (0)20 8881 6705
Mobile: +44 (0)7958 294 720
E-mail: [EMAIL PROTECTED]


**
This message may contain information proprietary to Techno Zone Limited so
any
unauthorised disclosure, copying or distribution of its contents is strictly
prohibited.
**




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6034t=6034
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Pass CCNA with 953, I have a lot of study stuff!! [7:6035]

2001-05-26 Thread killer

I have a lot of studying material here for CCNA (over 2000 MCs and other
notes)  and MCSE W2K Core!

If you have other studying material such as CCNP/CCIE/ MCSE W2K electives ,
pls email to me!

I can exchange my  material with you!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6035t=6035
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Remote Access [7:6034]

2001-05-26 Thread Circusnuts

I believe you're referring to a dialer profiles, using a dialer interface
instead of legacy.

http://www.cisco.com/warp/public/793/access_dial/ddr_dialer_profile.html

Phil



- Original Message -
From: Akin Durosinmi-Etti 
To: 
Sent: Saturday, May 26, 2001 12:38 PM
Subject: Remote Access [7:6034]


 Hi Guys,

 What command line do I use to configure my router to receive multiple
 remote connections. I use ISDN line, I have already configured DOD, and
 its working fine.
 Please assist...

 Regards,
 Akin Durosinmi-Etti. HND, MCSE, CCNA
 Cisco Specialist
 Techno Zone Limited
 WoodGreen, London.
 Phone: +44 (0)20 8881 6729
 Fax: +44 (0)20 8881 6705
 Mobile: +44 (0)7958 294 720
 E-mail: [EMAIL PROTECTED]




**
 This message may contain information proprietary to Techno Zone Limited so
 any
 unauthorised disclosure, copying or distribution of its contents is
strictly
 prohibited.


**
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6036t=6034
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Upload over console port. [7:5912]

2001-05-26 Thread James Haynes

Hit it right on the head Kevin.

 I follow this group because people on it are asking/doing things that my
current situation doesn't expose me to. Just because I have those letters
after my name does not mean I'm the purveyor of all things Cisco, or
otherwise for that matter.

 I had some time at work Friday afternoon ( it was dead before the holiday
weekend) where a 2610 router I was going to configure for a remote site was
not needed until later next week. I figured I'd play with it a little and
try to do something I knew nothing about xmodem. I had seen it talked
about here and had looked on CCO for information about it and it was always
in the context of downloading an image. I was wondering if I could upload
it, and having never used xmodem I figured I'd ask.

I'll take my lumps on the tftp attempt. About five minutes after I tried it
I was kicking myself for being that dumb. Wasn't the first time I've done
something like that and I'm sure it won't be the last.

As I promised myself I'd not play with any routers at home this weekend and
instead play some golf  I haven't been able to try the advice given by EJAY,
but I'll give it a shot on Tuesday. Thanks all.

Jim


Kevin Wigle  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 that's where experience comes in

 I have all those initials too (except the A+ but then I got others...)
 but I didn't have to do that myself until just a while ago.

 I became one with tftpdnld and xmodem.

 Kevin Wigle
 lots of letters but still learning

 - Original Message -
 From: James
 To:
 Sent: Friday, May 25, 2001 5:08 PM
 Subject: RE: Upload over console port. [7:5912]


  I don't mean to be sarcastic or rude. Just being
  curious... How come he's certified CCNA,CCDA,CCNP,CCDP
  but he's not aware of that ??
 
  --- Hire, Ejay  wrote:
   You can't tftp across the console port, you have to
   tftp from something you
   have IP connectivity to.  If you have to upload from
   the console, the
   command you want is (From Rom IOS)
   copy xmodem flash:yourfilename.bin
  
   Ejay Hire
   -Original Message-
   From: James Haynes [mailto:[EMAIL PROTECTED]]
   Sent: Friday, May 25, 2001 2:44 PM
   To: [EMAIL PROTECTED]
   Subject: Re: Upload over console port. [7:5912]
  
  
   As an aside, I've tried copy flash tftp using the
   console port connected to
   my PC and TFTPD32 running on the PC. I keep getting
   the error:
  
   #copy flash tftp
   Source filename []? c2600-is40-mz.120-4.T
   Address or name of remote host []? XXX.XXX.XXX.XXX
   Destination filename [c2600-is40-mz.120-4.T]?
   .
   %Error opening
   tftp://XXX.XXX.XXX.XXX/c2600-is40-mz.120-4.T
   (Undefined
   error)
  
   --
   James Haynes
   Network Architect
   Cendant IT
   A+,MCSE,CCNA,CCDA,CCNP,CCDP
   James Haynes  wrote in message
   [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
I've found various documents at Cisco and have
   seen discussion here about
downloading an image to a router using the console
   port and xmodem. I
haven't in my searches seen whether it is possible
   to upload images from
   the
console port to a tftp server. If anyone has any
   information or can find a
relevant link on CCO I'd appreciate it.
   
--
James Haynes
Network Architect
Cendant IT
A+,MCSE,CCNA,CCDA,CCNP,CCDP
FAQ, list archives, and subscription info:
   http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to
   [EMAIL PROTECTED]
   FAQ, list archives, and subscription info:
   http://www.groupstudy.com/list/cisco.html
   Report misconduct and Nondisclosure violations to
   [EMAIL PROTECTED]
   FAQ, list archives, and subscription info:
   http://www.groupstudy.com/list/cisco.html
   Report misconduct and Nondisclosure violations to
  [EMAIL PROTECTED]
 
 
  __
  Do You Yahoo!?
  Yahoo! Auctions - buy the things you want at great prices
  http://auctions.yahoo.com/
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6037t=5912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ARP versus Proxy-arp [7:5664]

2001-05-26 Thread Priscilla Oppenheimer

It would be terrific if PCs could join a network without tinkering with the 
TCP/IP control panel. It would be similar to the AppleTalk design of 1984! 
;-) Anyway, I think I've proven my point that the hotel network will 
require quite a bit of ingenious design beyond just depending on Proxy ARP.

Do let us know what you discover about the Marriott hotel network! Don't do 
too much hacking now.

I installed an Apple 802.11 Airport access point in a Starbucks that is 
connected to a high-speed MAN via a cable modem. Customers come in with 
their laptops and get on the net no problem. But the instructions for what 
they have to do on their PCs is a page long. One of the gotchas is the 
annoying issue with TCP/IP being bound to an Ethernet card instead of the 
wireless card. This may not be an issue with newer OSs than Win 98. The 
other annoying thing with Win 98 is the need to reboot with every little 
change to the TCP/IP control panel.

The list of instructions for Macintoshes, by the way, is only 1/2 a page. ;-)

Priscilla

At 02:29 AM 5/26/01, Jason Roysdon wrote:
But say it could magically use proxy arp for nodes not on it's subnet (say
you had software that was sniffing the line and would add that subnet).  To
answer Priscilla's question: They've got to do (P)NAT for all those
addresses anyway, since even if it was a public or private address, it
wouldn't get routed back to the hotel.

Of course, if the software could add any network it saw in use internally,
Priscilla couldn't get to her public subnet (since it would have added that
network to it's inside interface).  You could even purposely/accidentally
blackhole sites by doing this, which is all the more reason it's not
likely.

No doubt hotels are just using DHCP, or maybe even giving out statics to
track who is one what.  For LA Networkers I'm staying at a Marriott with
in-room CAIS internet access, so I'll be able to tell one way or another.
You'd better believe I'll bring my new Sniffer as well and I'll be hacking
the thing.  No doubt they use some sort of vlan setup (default vlan gets you
dhcp and net access just to the hotel pay website, once you pay up you get
moved to the vlan with real access).

Oh, and I'm going to bring a Cache Engine and Aironet 340 access point, so
anyone nearby can have free internet access on me (costs me like $10/night,
but the company is paying for it).  As the hotel is already completely
booked and it was reserved by Cisco, I'm guessing there may be a fair amount
of folks with 802.11 NICs.

$(%$%(#$ my router just crashed again, hehee.  Silly me, I should just stop
trying to do an Offline Sync with IE with this CE507 proxying for me:

falcon#sh mem
 HeadTotal(b) Used(b) Free(b)   Lowest(b)
Largest(b)
Processor   80FA04D8 7732008 7138812  593196  305376
358784
   I/O170 1048644  694056  354588  354588
354012



falcon#
May 25 19:26:13.573 PDT: %SYS-2-MALLOCFAIL: Memory allocation of 152 bytes
failed from 0x8
00FA964, pool Processor, alignment 0
-Process= IP Input, ipl= 4, pid= 29
-Traceback= 800F83B8 800FA0B0 800FA968 8085CFFC 8085D784 80858034 808575A4
80856B3C 802350
FC 80233738 80233938 80233A94 8011A09Csh mem
 HeadTotal(b) Used(b) Free(b)   Lowest(b)
Largest(b)
Processor   80FA04D8 7732008 7676276   55732   10832
32728
   I/O170 1048644  694056  354588  354588
354012



--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/




Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6039t=5664
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Advantages/disadvantages of WS-x5006 module over ws-x5009 [7:6040]

2001-05-26 Thread Daniel Cotts

Side issue is that older blades require an expensive SIMM upgrade. Avoid any
with Hardware revision 1.6 and lower. Another way to identify these cards
are that the part number is 73-1414-08 Rev A0 and below. 73-1414-09 and
above are OK. 

 -Original Message-
 From: Ed Dombrowski [mailto:[EMAIL PROTECTED]]
 Sent: Saturday, May 26, 2001 7:49 AM
 To: [EMAIL PROTECTED]
 Subject: Advantages/disadvantages of WS-x5006 module over ws-x5009
 [7:6023]
 
 
 Can anybody offer any insight into the advantages or 
 disadvantages of a
 ws-x5006 SUP I module (FX uplinks) compared to a ws-x5009 SUP 
 I module (TX
 uplinks) in a typical CCNP/CCIE lab environment where the 
 CAT5K is probably
 the only switch or maybe there is one other switch like a 
 2924 xl. In a
 single switch environment it doesnt seem like there would be 
 much difference
 and there seems to be many more CAT5k switches with 5006 
 modules on ebay.
 In an environment where you have say a 2924 downstream from the CAT5k
 wouldnt you just use a 10/100 link from something like a 5213 
 card? I know
 this is kind of a basic question but i am just looking for 
 some insight on
 this issue.
 
 Ed
 FAQ, list archives, and subscription info: 
 http://www.groupstudy.com/list/cisco.html
 Report misconduct 
 and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6040t=6040
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: The disgusting and useless nslookup [7:6041]

2001-05-26 Thread Bob Vance

Let me rephrase this response:

I didn't mean to imply that I *only* use 'nslookup' or that I use it to
troubleshoot DNS problems.  I use it to resolve :) resolver issues, in
which case it is perfect and 'dig' is useless.

-
Tks| 
BV | 
Sr. Technical Consultant,  SBM, A Gates/Arrow Co.
Vox 770-623-3430   11455 Lakefield Dr.
Fax 770-623-3429   Duluth, GA 30097-1511
=





-Original Message-
From: bob vance
Sent: Saturday, May 26, 2001 3:55 PM
To: blst
Subject: RE: The disgusting and useless nslookup


I didn't say that I used it to troubleshoot DNS problems -- only
resolver issues, in which case it is perfect and 'dig' is useless.


-
Tks| 
BV | 
Sr. Technical Consultant,  SBM, A Gates/Arrow Co.
Vox 770-623-3430   11455 Lakefield Dr.
Fax 770-623-3429   Duluth, GA 30097-1511
=





-Original Message-
From: Jim Reid [mailto:[EMAIL PROTECTED]]
Sent: Saturday, May 26, 2001 3:25 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: The disgusting and useless nslookup


 Bob == Bob Vance  writes:

Bob That's the main reason that I use it -- in fact I always use
Bob the vendor's copy so that things like nsswitch are accounted
Bob for.  The other reason that I use it is laziness -- I'd
Bob rather type ping bobv than ping bobv.dyn.atl.sbm.com

This is one of the major reasons for *not* using nslookup. If nslookup
is returning answers from other lookup mechanisms on the computer, how
can you expect it to troubleshoot DNS problems? How can you tell which
lookup facility the answer came from? What if that answer differs from
what's in the DNS (which wasn't queried because nsswitch and friends
say look at /etc/hosts or NIS before going to the DNS)?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6041t=6041
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



A suggestion when posting answers to questions. [7:6042]

2001-05-26 Thread Chris Rock

Can I make a suggestion that might help to improve the usefulness of this
site?

If someone is going to post an answer to a question on this web site, can
they make sure that they post a reference where one can look up the answer /
explanation?

I've seen a number of answers to questions that either weren't correct, or
missed the key points that are needed to understand the issue.

If we post a reference to either a web page (Cisco TAC), or a page in a book
(ie Comer Vol 1, pgs 120 - 125), we can garner enough material to truly
understand the associated topic instead of just memorizing an answer that
may or may not be correct.

Thanks

Chris

 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6042t=6042
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CISCOWORKS 2000 [7:5582]

2001-05-26 Thread Jon Kadis

JohnMail wrote:

 I am trying to decide whether or not I should attend a CISCOWORKS 2000 BOOT
 CAMP  program that costs $4000 for 5 days.  The name of the course is
 CISCOWORKS 2000 FUNDAMENTALS  LAN/WAN

 Is there a better way of acquiring the same training at a lower cost via
 online sources.  I am also interested in books on this subject.

Mentor offers Ciscoworks Fundamentals and will shortly be offering 
Ciscoworks LAN/WAN
as two separate classes. There's no way that you can take in all of the
information that
you need about both of these products in a one week boot camp.

-Jon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6044t=5582
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX Software V6.0 [7:5969]

2001-05-26 Thread Vijay Ramcharan

Whoever you spoke to at TAC was misinformed.  I'm using the free 56bit DES
key on our PIX and I can authenticate using the VPN 3.0 client.  You sure
don't need any 3DES key.
And in response to an earlier question posed regarding Diffie-Hellman Group
2 usage.  I originally had the isakmp policy using Group 1 but the VPN 3.0
client bombed out on attempting to authenticate.  As soon as I changed the
statement on the PIX to group 2, voila!, it worked right away.  I guess the
VPN3.0 client is using group 2 by default so the PIX must also use group 2.
I can't find any settings where you can change to group 1 on the VPN client
software.

Vijay Ramcharan

- Original Message -
From: Alex Lee 
To: 
Sent: Friday, May 25, 2001 7:38 PM
Subject: Re: PIX Software V6.0 [7:5969]


 No more DES.

 I was told by TAC that if you want to use VPN 3.0 client, your PIX must
have
 3 DES activated. A pre-sale told me that this costs $1,000.00 plus license
 for VPN clients.

 Can someone confirm this ?

 Alex Lee


 Carroll Kong wrote in message ...
 At 05:17 PM 5/25/01 -0400, Vijay Ramcharan wrote:
 If anyone wasn't aware, V6.0 of the PIX software is now available.
 And as I just found out, to use the VPN 3.0 client, isakmp policy ?
 group 2 must be used to enable successful authentication.
 
 Vijay Ramcharan
 
 Are you sure this is not user configurable?  Group 2 refers to the
 Diffie-Hellman group used.  I suppose unless they made it a standard to
not
 allow you to use Group 1 (weaker), but sheesh, if they made that the
 requirement, how dare they let people use DES.
 
 
 
 -Carroll Kong
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6045t=5969
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Simulated SmartJack [7:6046]

2001-05-26 Thread Malik Muhammad

I want to simulate a serial connection between my 3 2600 routers in my home
lab.  Each router has a T-1/CSU Module installed.  Shouldn't I be able to
connect them through a crossover cable, or do I need to simulate a SmartJack
in another way? Maybe some other sort of PIN manipulation.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6046t=6046
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Simulated SmartJack [7:6046]

2001-05-26 Thread Daniel Cotts

T-1 uses pins 12 and 45. Let's call one end A, the other B. Make a
crossover cable that connects A1 to B4, A2 to B5, A4 to B1, and A5 to B2. If
you don't have the tools to make cables, get two RJ-45 jacks. Create the
crossover between them (back to back - using the punchdown slots). Use
pliers or a thin screwdriver to force the wires in the slots. Not
recommended for production networks! Use regular patch cables from the jacks
to the routers.

 -Original Message-
 From: Malik Muhammad [mailto:[EMAIL PROTECTED]]
 Sent: Saturday, May 26, 2001 8:14 PM
 To: [EMAIL PROTECTED]
 Subject: Simulated SmartJack [7:6046]
 
 
 I want to simulate a serial connection between my 3 2600 
 routers in my home
 lab.  Each router has a T-1/CSU Module installed.  Shouldn't 
 I be able to
 connect them through a crossover cable, or do I need to 
 simulate a SmartJack
 in another way? Maybe some other sort of PIN manipulation.
 FAQ, list archives, and subscription info: 
 http://www.groupstudy.com/list/cisco.html
 Report misconduct 
 and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6047t=6046
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT -- BGP scalability [7:5468]

2001-05-26 Thread Howard C. Berkowitz

Nice piece of writing, Howard.

There is a point you make ( English commons ) which sounds an awful lot like
democracy lasts only until the participants realize they can vote
themselves privileges, at which point it turns quickly to anarchy
  paraphrased badly, I'm sure )

De Toqueville said something along similar lines -- that American 
democracy would end when the people realized they could vote 
themselves money.


People always act in their own perceived best interest. That perception may
be clueless. It may be well intentioned.

There's some relevance here to certification.  Sometimes, the most 
knowledgeable people don't do well on exams, because they see nuances 
in the potential answers of which the test writer wasn't even aware.

The only time I know that an experienced, thoroughly clueful CID or 
CIT instructor failed the CCIE lab involved the instructor arguing 
with the proctor that the scenarios were insane, and that anyone who 
built a network that way in the real world should be summarily fired.


Have you been wasting your time reading the NANOG threads on email != ftp
and the related? Interesting only in that it seems to beg the issue.

There is an art to reading NANOG, a more subtle art than reading 
USENET.  With USENET, Godwin's Law is one way of telling when a 
thread has degenerated completely:  assuming the thread has nothing 
to do with modern European history, Godwin's condition is true when 
one person refers to another as a Nazi.  Some NANOG threads, 
especially dealing with sp*m*ing (don't know if that's a filter 
word), do, in fact, trigger the Godwin condition.

Other threads will tend to die when Susan Harris or another MERIT 
staffer says ENOUGH! This seems to happen a lot with domain policy.

Even with all that, NANOG does convey a tremendous amount of useful 
information.

In the
end, ease of use ( and therefore more bandwidth ) will win out. Limiting
file xfer size will lose. Virus replication is not the result of Microsoft's
evil intentions, but rather their very good intention of  trying to make
computer use as simple as toaster use.

Long ago, at the internal GTE networking symposium (1980? 1981?) I 
defined electronic mail as a technology to lose the mail at the speed 
of light.  The president of GTE, who was technical, rose and inquired 
then what about your own division's offering, Telemail?

I thought for a moment, and answered Dr. Vanderslice, Oh. We lose it 
more slowly.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6048t=5468
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Simulated SmartJack [7:6046]

2001-05-26 Thread Dennis R

Crossover cable, pins 1-2/4-5 crossed. 1 end needs to have the clock source 
set to internal (default is line). Make sure you select the same timeslots 
on both sides. You won't be able to connect all 3 routers unless one of them 
has 2 CSU's in it, of course.

HTH,
doctorcisco


From: Malik Muhammad 
Reply-To: Malik Muhammad 
To: [EMAIL PROTECTED]
Subject: Simulated SmartJack [7:6046]
Date: Sat, 26 May 2001 21:13:45 -0400

I want to simulate a serial connection between my 3 2600 routers in my home
lab.  Each router has a T-1/CSU Module installed.  Shouldn't I be able to
connect them through a crossover cable, or do I need to simulate a 
SmartJack
in another way? Maybe some other sort of PIN manipulation.
FAQ, list archives, and subscription info: 
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6049t=6046
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Simulated SmartJack [7:6046]

2001-05-26 Thread Larry Lamb

In article , Malik Muhammad
 wrote:

I'm pretty sure I've seen this posed in the past so you may wish to check
the archives.  I found http://www.cisco.com/warp/public/471/75.html which
describes the crossover cable for a T1 CSU/DSU which should work.  I've
never done this so hopefully someone with a little more lab background
can chime in.  Also see http://www.cisco.com/warp/public/471/59.html for
clocking info.

 I want to simulate a serial connection between my 3 2600 routers in my
 home lab.  Each router has a T-1/CSU Module installed.  Shouldn't I be
 able to connect them through a crossover cable, or do I need to simulate
 a SmartJack in another way? Maybe some other sort of PIN manipulation.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6050t=6046
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: A suggestion when posting answers to questions. [7:6042]

2001-05-26 Thread Jennifer Cribbs

I, for one, think that is an excellent idea.  I read this site more than
post,
but I had to reply to this.  Many times when reading something here, I wish 
there was just a little more information than what was given.  It is hard to 
learn without some source.

Jenn C

= Original Message From Chris Rock  =
Can I make a suggestion that might help to improve the usefulness of this
site?

If someone is going to post an answer to a question on this web site, can
they make sure that they post a reference where one can look up the answer /
explanation?

I've seen a number of answers to questions that either weren't correct, or
missed the key points that are needed to understand the issue.

If we post a reference to either a web page (Cisco TAC), or a page in a book
(ie Comer Vol 1, pgs 120 - 125), we can garner enough material to truly
understand the associated topic instead of just memorizing an answer that
may or may not be correct.

Thanks

Chris
FAQ, list archives, and subscription info: 
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Have a great day!
Jenn




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6051t=6042
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Olicom switch [7:5815]

2001-05-26 Thread Jason

Is this legal ?

Brad Ellis  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Try a later version of code.  4.1(3) should work.  We have been loading
that
 version of code on the Olicom's we've been selling.

 -Brad Ellis
 CCIE#5796
 [EMAIL PROTECTED]
 Cisco gear:  www.optsys.net

   goroupstudy.com  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hello All -
 
  I just downloaded the Cat 3920 code 3.0(7) to an Olicom 8600. Now it
gives
  me a message which says:
 
  FATAL SYSTEM ERROR: Unknown System Board ID
 
  It was my understanding (based on what I heard here) that this switch is
 Cat
  3920 compatible. Anyone know a) how to break in/recover from this mess
  and/or b) what is a good image to use for the box?
 
  Im totally hosed, so any help is appreciated!
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6052t=5815
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: help --------------Pls ................OIR Error [7:6021]

2001-05-26 Thread Arun

Hi
Here the detail for u i have ver 11.8 runnign on it

Cisco Internetwork Operating System Software
IOS (tm) 3600 Software (C3640-JS-M), Version 11.3(8), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 02-Feb-99 14:13 by dschwart
Image text-base: 0x60008918, data-base: 0x608E8000

ROM: System Bootstrap, Version 11.1(20)AA1, EARLY DEPLOYMENT RELEASE
SOFTWARE (f
c1)
System image file is flash:c3640-js-mz.113-8, booted via flash

cisco 3640 (R4700) processor (revision 0x00) with 49152K/16384K bytes of
memory.
Processor board ID 13831748
R4700 processor, Implementation 33, Revision 1.0
Bridging software.


Regards
Arun Sharma

Chuck Larrieu  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Beat the hell out of me.

 In the past I have posted about problems with earlier 12.x codes, where if
I
 plugged serial cables into a serial interface while the router was powered
 on, IP would not work, although IPX would.

 I've had people tell me I was an idiot, and this couldn't happen. But
Pamela
 Forsythe told me she recognized the phenomenon.

 I've moved my routers onto various versions of 12.1 code, and have not
seen
 the problem. Actually, I don't think I ever saw the problem with later
 versions of 12.0 code either.

 Still curious what IOS version you are running.

 Chuck


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Arun
 Sent: Saturday, May 26, 2001 8:02 AM
 To: [EMAIL PROTECTED]
 Subject: Re: help --Pls OIR Error [7:6021]

 hi
 yes i tried reloading the router with the cables attached and it worked
 ..
 thanks for the help but what could be the reason for that if i know it
will
 be a help .

 Arun Sharma
 Chuck Larrieu  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Have you tried reloading the router with the cable attached?
 
  Or blowing away the X.35 config, reloading with the cable attached, then
  putting in the X.25
 
  What version of IOS are you running? I have documented a couple of
 problems
  revolving around serial port cables with 12.0.4 or so.
 
  Chuck
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
 Arun
  Sent: Saturday, May 26, 2001 3:58 AM
  To: [EMAIL PROTECTED]
  Subject: help --Pls OIR Error [7:6021]
 
  Hi
  I have router configured as X25 router .I have 2 slots in it with each
  having 4 serial ports on them.The problem is that when i connect the
cisco
  provided cable just the cable to the administratively shutdown serial
port
  it gives me error :
  %OIRINT:OIR Event has occured OIR_ctrl 50 oir stat 8F88
  ( i have checked OIR it stands online insertion and removal but i could
 not
  find this particular error)
  and this also hangs the router i have checked the cable i can not do
many
  thngs on the router as it is in live n/w ..Please help ..the router
works
  well after i remove cable and restart the router .
  Any help will be appreciated
 
 
  Regards
  Arun Sharma
  FAQ, list archives, and subscription info:
  http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6053t=6021
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pass CCNA with 953, I have a lot of study stuff!! [7:6035]

2001-05-26 Thread Arun

hi
i am preparing for ccna can u pls email me the stuff for that ...i know i
won't be able to do the exchange ..but that will be a help to me
thanks in advance
Regarsd
Arun Sharma

killer  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 I have a lot of studying material here for CCNA (over 2000 MCs and other
 notes)  and MCSE W2K Core!

 If you have other studying material such as CCNP/CCIE/ MCSE W2K electives
,
 pls email to me!

 I can exchange my  material with you!
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6054t=6035
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Regarding dte and dce for x25 router--urgent [7:6055]

2001-05-26 Thread Arun

Hi
i have a network like this ...
device-dte--x25 int 1/2 dce.clockrate 64000
device-dcex25 int 2/3 dte
i just wanted to know if two interfaces on router need to communicate will
they need to act as same both dte or dce or it doesn't matter at all.Router
will just route the packets

Regards
Arun Sharma




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6055t=6055
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Upload over console port. [7:5912]

2001-05-26 Thread Moh'd, Quayoom

But we can upload the IOS image from flash to tftp, thru  Telnet session.
Pls correct me if I am wrong
Mohd.  

 -Original Message-
 From: Hire, Ejay [SMTP:[EMAIL PROTECTED]]
 Sent: Fri, May 25, 2001 11:38 PM
 To:   [EMAIL PROTECTED]
 Subject:  RE: Upload over console port. [7:5912]
 
 You can't tftp across the console port, you have to tftp from something
 you
 have IP connectivity to.  If you have to upload from the console, the
 command you want is (From Rom IOS)
 copy xmodem flash:yourfilename.bin
 
 Ejay Hire
 -Original Message-
 From: James Haynes [mailto:[EMAIL PROTECTED]]
 Sent: Friday, May 25, 2001 2:44 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Upload over console port. [7:5912]
 
 
 As an aside, I've tried copy flash tftp using the console port connected
 to
 my PC and TFTPD32 running on the PC. I keep getting the error:
 
 #copy flash tftp
 Source filename []? c2600-is40-mz.120-4.T
 Address or name of remote host []? XXX.XXX.XXX.XXX
 Destination filename [c2600-is40-mz.120-4.T]?
 .
 %Error opening tftp://XXX.XXX.XXX.XXX/c2600-is40-mz.120-4.T (Undefined
 error)
 
 --
 James Haynes
 Network Architect
 Cendant IT
 A+,MCSE,CCNA,CCDA,CCNP,CCDP
 James Haynes  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  I've found various documents at Cisco and have seen discussion here
 about
  downloading an image to a router using the console port and xmodem. I
  haven't in my searches seen whether it is possible to upload images from
 the
  console port to a tftp server. If anyone has any information or can find
 a
  relevant link on CCO I'd appreciate it.
 
  --
  James Haynes
  Network Architect
  Cendant IT
  A+,MCSE,CCNA,CCDA,CCNP,CCDP
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6056t=5912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ping not coming back. [7:6057]

2001-05-26 Thread chris fong

Hi all,
I have several routers running OSPF. One of them is
connected to my network by a T-1 on its S/0 port. The
E/0 port is connected to another network through a
hub. The outside network is using Novell and is not
OSPF. I have some PC's and printers directly connected
to the hub. The problem: Ping timeouts when I try to
ping those devices on the hub. I can ping the the S/0
and E/0 ports on the router. I can telnet into that
router and ping all the devices attached to the hub.
Devices on the hub can ping back into my network but I
can not ping them. There are no access-lists
configured on any routers. Any ideas?

Thanks,
Chris

__
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6057t=6057
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]