Re: Subject: Re: Dead console port [7:9621]

2001-06-23 Thread Paul Werner

Comments within and below.

> Subject: Dead console port [7:9621]
> 
> 
> > Okay gang, here's a challenge that I'm trying to overcome 
(warning: 
> it
> may
> > not be solvable)
> >
> > I just got a 2514 where I couldn't get any response from 
the console
> port.

Can you be very specific here?  Does this mean that you saw 
absolutely *zero* characters go by on the screen, or that any 
amount of input on your part did not cause any reaction on the 
part of the router?

> > Of course, I tried changing baud rates, etc, 

When you say you tried changing "baud rates, etc" How exactly 
did you do this?  I have found that a lot of folks never 
complete *all* the necessary steps to fully change over to a 
different speed setting in hyperterm.  To be precise, did you 
do the following for each console speed (1200bps, 2400bps, 
4800bps) change listed in the paragraphs below?

I'll assume you are using hyperterm.  If you are, you will need 
to disconnect the connection(phone off hook button).  Once 
disconnected, go into the properties button (hand with a piece 
of paper?) and select the configure button. Change the console 
speed to 1200bps. Press okay twice.  **Close hyperterm** and 
reopen it.  Hyperterm is now set to read/operate at 1200bps.

At this point, you would want to reload the router.  Hopefully, 
within the first 15-20 seconds you should see something you 
recognize. If not, redo the procedures in the paragraph above 
for both 2400bps and 4800bps respectively. Once you do get 
recognizable text, send a regular break to the router.  Use the 
rommon procedures to reset the config register to 0x2142:

>o/r 0x2142


but when I finally
> connected
> to
> > the AUX port, I was able to get in.  

I assume this was the first time you tried the AUX port?  also, 
what speed was Hyperterm's console set to when you accessed the 
AUX port?  Remember, the AUX port speed is set with the values 
specified in the startup config.  Since there is nothing set to 
interrupt that startup config, it can be any of the following 
possible values: 1200bps, 2400bps, 4800bps, or 9600bps.  Also 
don't forget that somebody who was messing with the config 
could have set other parameters, such as stopbits, etc.

The enable password was cisco, so
> I
> > gleefully got into the config and changed the config 
register, hoping
> that
> > would solve the problem. 

You have not mentioned what value you had and what value you 
changed it to.  Can I presume that the config register was set 
to something other than 0x2102?  If so, what value did it 
have?  When you changed it back presumably to 0x2102, did you 
remember to reset hyperterm's console speed to use 9600bps 
using the procedure above?

 It didn't, so I did the next (very stupid)
> thing -
> > I erased the config (I'm beating my head against the desk 
as I type).

Well, if you mean to say you erased the config, I assume you 
meant "erase startup"?  if so, the default settings should have 
allowed access to the AUX port once the router was fully 
booted.  The big assumption here is that your hyperterm 
settings were set to 9600, 8, N, 1 and no flow control.  If 
not, the AUX port may not work.

> Now,
> > of course, the problem is when I go to the AUX port and try 
to get
> into
> > enable mode, I can't ("no password set").

So you are able to access the AUX port, but it will not permit 
you to set a privileged level password via the AUX port. That 
is not good.  The AUX port cannot be used for password 
recovery, but I am sure you have already figured that out.  
Even if you could send a break to the router somehow without 
using the keyboard (electrically), you would still not be able 
to access the AUX port to change the config register.

> > Is there any way for me to "bypass" the console port by 
using the AUX
> port,

Not for password recovery purposes.

> > or have I just rendered this device useless until I find a 
way to fix
> the
> > console port? 

To my knowledge, it is not repairable.  The best you can do is 
get a Smartnet Contract for it and send it to the great router 
heaven in the sky (a.k.a Cisco's dumpsters :-)

 I don't think I can get into ROMMON mode from the AUX
> port,

Correct.

> > and I can't get into priveleged EXEC mode, either.

Make 100% sure you cannot access the router from each of the 
console speeds mentioned.  A router without a fully functioning 
console port is a disaster waiting to happen. If the console 
port really and truly is dead, you need to get rid of the router
(hopefully viia replacement from Smartnet).

HTH,

Paul Werner


Get your own "800" number
Voicemail, fax, email, and a lot more
http://www.ureach.com/reg/tag




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9671&t=9621
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL

RE: configuring Hyperterminal Private edition w/Wi [7:9590]

2001-06-23 Thread Perry J. Lucas

You may want to go the step further and get SecureCRT from vandyke,
which allows SSH v1 and v2 connections.  It's a $100, but worth the
extra functionality if you want to use secure communications.

Perry J. Lucas


-Original Message-
From: Jon Thomasberg [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, June 24, 2001 1:06 AM
To: [EMAIL PROTECTED]
Subject: Re: configuring Hyperterminal Private edition w/Wi [7:9590]

Basically, Hyperterm for WinME and Win2000 are horible and rarely work
properly.

Get CRT.  Here's the link to download it.

ftp://ftp.vandyke.com/pub/CRT/ntcrt331.exe

30day shareware. 35 bucks to reg.

Worth every penny IMHO.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9670&t=9590
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: I can't use dialer 1 int to connect internet [7:9662]

2001-06-23 Thread Brian Dennis

Try using "dialer pool 1" under the dialer interface and "dialer pool-member
1" under the BRI interface(s).

Brian Dennis, CCIE #2210 (R&S)(ISP/Dial) CCSI #98640
5G Networks, Inc.
[EMAIL PROTECTED]

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> hwen
> Sent: Saturday, June 23, 2001 8:50 PM
> To: [EMAIL PROTECTED]
> Subject: I can't use dialer 1 int to connect internet [7:9662]
>
>
> Hi,
> when I only config the bri int , I can  ping any ip in route.
> Now, I use the dialer 1 int, I can't ping any ip in route
>
> my config
>
> version 12.0
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname 2600
> !
> !
> !
> !
> !
> !
> ip subnet-zero
> no ip domain-lookup
> !
> isdn switch-type basic-net3
> isdn voice-call-failure 0
> !
> !
> !
> interface FastEthernet0/0
>  ip address 192.168.1.250 255.255.255.0
>  no ip directed-broadcast
>  ip nat inside
>  duplex auto
>  speed auto
> !
> interface BRI1/0
>  ip address negotiated
>  no ip directed-broadcast
>  ip nat outside
>  encapsulation ppp
>  dialer rotary-group 1
>  dialer-group 1
>  isdn switch-type basic-net3
> !
> interface BRI1/1
>  no ip address
>  no ip directed-broadcast
>  ip nat outside
>  encapsulation ppp
>  shutdown
>  dialer rotary-group 1
>  isdn switch-type basic-net3
> !
> interface BRI1/2
>  no ip address
>  no ip directed-broadcast
>  shutdown
>  isdn switch-type basic-net3
> !
> interface BRI1/3
>  no ip address
>  no ip directed-broadcast
>  shutdown
>  isdn switch-type basic-net3
> !
> interface Dialer1
>  ip address negotiated
>  no ip directed-broadcast
>  ip nat outside
>  encapsulation ppp
>  dialer in-band
>  dialer idle-timeout 1800
>  dialer string 169
>  dialer load-threshold 1 either
>  dialer-group 1
>  ppp authentication pap callin
>  ppp pap sent-username 169 password 7 055A5056
>  ppp multilink
> !
> ip classless
> ip route 0.0.0.0 0.0.0.0 Dialer1
> no ip http server
> !
> dialer-list 1 protocol ip permit
> !
> line con 0
>  transport input none
> line aux 0
> line vty 0 4
>  login
> !
> no scheduler allocate
> end
>
>
> when I ping somewhere in route , the message is
>
> Sending 5, 100-byte ICMP Echos to 166.111.8.28, timeout is 2 seconds:
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9669&t=9662
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ccie dump trading [7:9668]

2001-06-23 Thread tim

anybody wants ccie written dump trading?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9668&t=9668
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: configuring Hyperterminal Private edition w/Wi [7:9590]

2001-06-23 Thread Jon Thomasberg

Basically, Hyperterm for WinME and Win2000 are horible and rarely work
properly.

Get CRT.  Here's the link to download it.

ftp://ftp.vandyke.com/pub/CRT/ntcrt331.exe

30day shareware. 35 bucks to reg.

Worth every penny IMHO.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9667&t=9590
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: configuring Hyperterminal Private edition w/Wi [7:9590]

2001-06-23 Thread Jon Thomasberg

Hypeterm for Win ME and 2000 has issues.  Goto download.cnet.com and
download CRT.  Its a much better program.  Hope this helps.  I will never
use hypeterm again.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9666&t=9590
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Certification Digest V2 #1388 (Out of office) [7:9665]

2001-06-23 Thread Brad Cameron

I will be out of the office until Monday, July 2. If you need further
assistance, please contact the East Jefferson Information Systems Help Desk
at (504) 454-4847.

Thanks
Brad




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9665&t=9665
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Netcool [7:9152]

2001-06-23 Thread Perry J. Lucas

I have yet to personally work on a Netcool system and have only seen it
at an ISP that a friend was working at.  I understand it to be an
excellent product, but I have also heard that it is very expensive.


Perry J. Lucas


-Original Message-
From: CCB [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, June 20, 2001 4:36 AM
To: [EMAIL PROTECTED]
Subject: Netcool [7:9152]

Can anyone recommend some good links to documentation on and give some
opinions on Netcool.

Thank You




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9664&t=9152
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Nokia Firewall vs PIX? [7:9371]

2001-06-23 Thread Perry J. Lucas

Having worked on both platforms, they each have their strength's and
weaknesses.  I tend to use Nokia Checkpoint firewalls when guarding
office type environments to the internet and then use PIX firewalls for
guarding production networks.

Perry J. Lucas


-Original Message-
From: Keyboard_Cowboy [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, June 21, 2001 12:21 PM
To: [EMAIL PROTECTED]
Subject: Nokia Firewall vs PIX? [7:9371]

Anyone have any have a Nokia firewall that they have played with and how
does it rate against the PIX?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9663&t=9371
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



I can't use dialer 1 int to connect internet [7:9662]

2001-06-23 Thread hwen

Hi,
when I only config the bri int , I can  ping any ip in route.
Now, I use the dialer 1 int, I can't ping any ip in route

my config

version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 2600
!
!
!
!
!
!
ip subnet-zero
no ip domain-lookup
!
isdn switch-type basic-net3
isdn voice-call-failure 0
!
!
!
interface FastEthernet0/0
 ip address 192.168.1.250 255.255.255.0
 no ip directed-broadcast
 ip nat inside
 duplex auto
 speed auto
!
interface BRI1/0
 ip address negotiated
 no ip directed-broadcast
 ip nat outside
 encapsulation ppp
 dialer rotary-group 1
 dialer-group 1
 isdn switch-type basic-net3
!
interface BRI1/1
 no ip address
 no ip directed-broadcast
 ip nat outside
 encapsulation ppp
 shutdown
 dialer rotary-group 1
 isdn switch-type basic-net3
!
interface BRI1/2
 no ip address
 no ip directed-broadcast
 shutdown
 isdn switch-type basic-net3
!
interface BRI1/3
 no ip address
 no ip directed-broadcast
 shutdown
 isdn switch-type basic-net3
!
interface Dialer1
 ip address negotiated
 no ip directed-broadcast
 ip nat outside
 encapsulation ppp
 dialer in-band
 dialer idle-timeout 1800
 dialer string 169
 dialer load-threshold 1 either
 dialer-group 1
 ppp authentication pap callin
 ppp pap sent-username 169 password 7 055A5056
 ppp multilink
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
!
dialer-list 1 protocol ip permit
!
line con 0
 transport input none
line aux 0
line vty 0 4
 login
!
no scheduler allocate
end


when I ping somewhere in route , the message is

Sending 5, 100-byte ICMP Echos to 166.111.8.28, timeout is 2 seconds:
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Load balancing [7:9627]

2001-06-23 Thread 謝建成

I think ip load-sharing per-packet command only work on serial port. 
Since it is "IP" load sharing, it should only work on layer 3 interface. 

You can implement Ethernet load sharing by " FastEther Channel (
FEC).  How does FEC choose a way to go? It calculate the  XOR
between the destination MAC address and port MAC address. 

Todd

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Andy Barkl
Sent: Saturday, June 23, 2001 9:59 PM
To: [EMAIL PROTECTED]
Subject: Load balancing [7:9627]


I am trying to configure load balancing across two FT1s that connect into a 
3620's Ethernet ports.

I have enabled IP load-sharing per-packet on each interface but it doesn't 
seem to help.

I have also removed the 512K link and nothing changes regardless of the 
load-sharing statement. But when I pull the 128K link, all connectivity is 
lost.
I am thinking there is a problem with the 512K link and I have asked the 
client to contact the provider.

My question is, will the IP load-sharing per-packet command work across the 
Ethernet ports, or does it only apply to Serial ports?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9661&t=9627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Multicast on the Internet - what is the status [7:9655]

2001-06-23 Thread Ron Goff Jr

Actually, I think you've already partially answered your own question.
Recently, I moved to a new location and didn't bother getting any television
hook up (obviously being either cable or dish).  While I feel the "jones"
once in a while to watch TV, it doesn't bother me much.  Back to the
original point: The problem exists in the companies.  In the companies
minds, they ask the questions: what hardware do I have (as opposed to what I
need)?  What software do I have (as opposed to what I need)?  And, most
importantly: "Am I going to make a profit on my investment?".
I personally believe that Internet TV will be a reality in around five
years.  I will qualify this by saying that I think it will have some
consumer expense tagged onto it - in other words, it's not going to be as
simple as clicking on "Happy Days" or "Family Ties".  Business is business.
If advertisers can't foot the bill, we're talking pay-per-view.  The upside
is that we will (hopefully) be able to see what we want, when we want.  In
other words, while you may have to watch commercials during your favorite
show, you won't have to wait unitl a specific day/hour to see it.
""nrf""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> hello gang:
>
> I hope some experts like Howard Berkowitz can respond:
>
> question - what is the status of multicasting on the Internet today?  Both
> technically, and non-technically?
>
> I understand that the first iteration involved some version of PIM
(probably
> sparse-dense) in an internal network, connected to the MBONE vie DVMRP
> tunnels .  Many experts disliked this method due to the inherent lack of
> scalability of DVMRP and, I believe, there was also no standard way to
> allocate group addresses (only via SDR/SAP, I believe)
>
> So, the second iteration consisted of, once again, PIM (almost certainly
> sparse-dense) used in an internal network, but with MBGP to connect to the
> Internet and MSDP to locate other sources while still providing RP
placement
> flexibility.  And I also thought MASC/MADCAP was an attempt to solve the
> whole address allocation problem (but it still leaves several problems
> unresolved, like how to allocate addresses fairly).
>
> But now I've noticed yet another group of technologies emerging - BGMP
> (which I am told is supposed to be better than MSDP/MBGP, but I don't yet
> understand how it is better), bidirectional PIM (which seems to be another
> name for CBT), and SSM with IGMP V3 (which still leaves open the question
> that how would you know who to block and who not to block?).  Plus, I seem
> to see less emphasis on CGMP, and more emphasis on RGMP and IGMP snooping.
>
>
> But the bottom line is that I still don't see too many widespread
> consumer-uses of multicasting.  I only see real-world uses of multicasting
> within companies (financial information in investment companies), or,
across
> the Internet, meetings of standards bodies.
> But, for example, I don't see anything like the Superbowl or the World
> Series being delivered via multicast.  OK, OK, that's because of corporate
> licensing restrictions, but I think you see my point, I don't see a whole
> lot of multicasting that delivers information of interest to the average
> user.
>
>
> So, are these new multicasting technologies becoming very popular, and if
> so, why (and if not, why not)?  And will these technologies make Internet
> multicasting more wide-spread, or does that have to do with things like
> politics, money, and that kind of thing (layer 8 of the OSI model)?
> Exactly what is happening with Internet multicasting?
>
> Thanx
>
> NRF




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9660&t=9655
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: access-list /TCP & UDP ! [7:9638]

2001-06-23 Thread Ron Goff Jr

First I'll give you links to port assignments and documents that will
help, then I'll give you my understanding of the workings of TCP and UDP (if
you don't mind doing a little reading).  The first link is to a listing of
UDP/TCP ports:
http://www.networkice.com/advice/Exploits/Ports/
Additionally, I would advise you to go to the Cisco Web site www.cisco.com,
and investigate the details concerning TCP/IP.  I'm sure you've already
checked there, and I don't mean to offend you by indicating this, however
the issue concerning ports and transport protocols is vague and needs to be
investigated at length in order for someone to gain a clear understanding.
That being said, here is what I personally know (once again, this is not
gospel, this is one persons understanding).
  We first have to agree that TCP/IP does not directly correlate to the OSI
Reference Model.  If we can agree on that, then we can discuss how an
application or service talks to the TCP/IP protocol, and how TCP and UDP
relate to port assignments.  If you looked at the first link I indicated,
you will see that there are no specific listings for TCP or UDP ports, only
listings for services that operate over certain ports.  There are two kinds
of port assignments: those that are well known and used to provide specific
services using the TCP/IP suite as an application level service, and those
ports that are negotiated for a particular application that exists outside
of TCP/IP.  An analogy would be:  If you choose to Telnet into another
computer, you are using an application which is part of the TCP/IP suite.
The innerworkings of Telnet are included in the TCP/IP specification.  If,
however, you are going to connect to a server to play Quake III or something
of that nature, you are using TCP/IP only as a transport.  Quake III is an
application, but is not an application that is contained in the TCP/IP
suite.  To that end, you are not using TCP/IP on the Application,
Presentation, or Session layers of the OSI, but rather the Quake III
application uses TCP or UDP as a transport for communication.  In the case
of Quake III, it provides it's own application, presentation, and session
layer information, and then communicates with the TCP/IP protocol, telling
it whether it needs connection-oriented or connectionless transmission.  And
now the discussion turns to which ports are TCP (connection-oriented) ports
and which ports are UDP (connectionless) ports.
 Regarding the issue of which ports are UDP and which are TCP; I've never
seen a document which explains this to my satisfaction.  This is where my
logic (and or the failure there of) comes into play.  My understanding is
that TCP and UDP do not have port assignments.  If you are using an
application that is outside of the services of the TCP/IP protocol suite,
the application must request either a connection-oriented (TCP), or
connectionless (UDP) transport.  If this train of thought is correct, then
it doesn't matter what port an application requests, it will be able to
request either TCP or UDP based on whether the application needs a
connection-oriented or connectionless transport.  There are (by RFC
specification I believe) 1024 well known ports.  The first 1024 have been
reserved (so to speak)for the TCP/IP protocol.  This logic might indicate
that these ports (for the purposes of security and convenience) have been
designated as either UDP or TCP, however I'm not sure this is the case.  I
will give you an example, however, to clarify this point.  FTP is known as a
TCP/IP suite protocol known to be a File Transfer Protocol.  It is also
known to use the Transport Control Protocol (TCP) as its transport (end to
end connection)and actually uses two ports: 20 and 21.  If you look at those
ports, one controls data flow and the other actually transmits data.  This
is important in that when we use FTP we are declaring that the information
being sent is critical and we need confirmation that it is being received
correctly.  Conversly, TFTP uses port 69.  The Trivial File Transport
Protocol uses UDP, a connectionless protocol, which assumes that the data is
not critical.  In the case of UDP, we're saying that we'd like to send
information, but It's not neccessary to acknowledge it.  Both these
protocols are part of the TCP/IP suite, and both use a different transport
method.  My question would be in regards to the 1024 well known ports and
whether there are assignments specifically designated to the TCP/IP suite,
or is rather just a matter that applications developed using these ports use
this standard for the sake of continuity?
 If you wish to extend this discussion, we could consider why anyone would
consider using a connectionless protocol at all, considering it's unreliable
nature.  The answer lies (lays?) in its history.  At a certain point in
time, applications didn't provide any error correction, they merely provided
information.  As technology evolved, programs were capable of providing this
servi

Re: Rack Time Available. [7:9628]

2001-06-23 Thread Scott O'Donnell

I forget to mention ISDN is on the 3620 routers with a switch.

""Scott O'Donnell""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> To All,
>
> I'm currently gearing up for a second CCIE Cert (hopefully) and have a
> pretty good rack to pratice on.
> It's the rack I used to studying and pass the R/S exam.
> I'm offering access to the rack as a way of recovering some of the
expensive
> of buying it from my previous employer.
>
> I will charge a very low cost or barter for access.
>
> The current cabling configuration will allow for you to do ccbootcamp labs
> 1-8, (I don't have the others, but if you
> send me the cable info, I'll try to work it out.)
>
> Please contact me directly if anyone is interested.
>
> The rack is made up of the following
>
> 1 x 2511 access server
> 2 x 2514 dual e /dual wan
> 2 x 2513 1 eth/1 tok/ 2 wan
> 2 x 3810 eth / 2 wan / voice t1 / MFT ATM t1
> 2 x 3620 eth /wan /voice FXS
> 1 x 1750
> 1 x 1605
> 1 x AGS frame switch
> 1 x pix 506
> 1 x Cat 2901
> 1 x Cat 2900 XL




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9658&t=9628
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX 525 Password Recovery? / Need Help!!! [7:9549]

2001-06-23 Thread Patrick Bass

Try again; this time really follow the directionsit works every time.

""Justin Lofton""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I'm trying to erase the PIX password.  I used the instructions on CCO but
> after I tftp it never asks me if I want to erase the passwords, then it
> continues and reboots like nothing happened.  Is there another way that
will
> just blow out the whole config?  Please let me know if you have any ideas.
>
> Thanks for all your help!
>
>
> Justin Lofton
> Account Executive/CCNA
> Tredent Data Systems
> [EMAIL PROTECTED]
> V: (818) 222-3770
> F: (818) 222-3778
> http://www.tredent.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9657&t=9549
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Certification Digest V2 #1387 (Out of office) [7:9656]

2001-06-23 Thread Patrick Bass

Brad; I had a few problems I needed help with.  I called the number, but no
one could help me.

WHASUP!?

""Brad Cameron""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I will be out of the office until Monday, July 2. If you need further
> assistance, please contact the East Jefferson Information Systems Help
Desk
> at (504) 454-4847.
>
> Thanks
> Brad




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9656&t=9656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Multicast on the Internet - what is the status [7:9655]

2001-06-23 Thread nrf

hello gang:

I hope some experts like Howard Berkowitz can respond:

question - what is the status of multicasting on the Internet today?  Both
technically, and non-technically?

I understand that the first iteration involved some version of PIM (probably
sparse-dense) in an internal network, connected to the MBONE vie DVMRP
tunnels .  Many experts disliked this method due to the inherent lack of
scalability of DVMRP and, I believe, there was also no standard way to
allocate group addresses (only via SDR/SAP, I believe)

So, the second iteration consisted of, once again, PIM (almost certainly
sparse-dense) used in an internal network, but with MBGP to connect to the
Internet and MSDP to locate other sources while still providing RP placement
flexibility.  And I also thought MASC/MADCAP was an attempt to solve the
whole address allocation problem (but it still leaves several problems
unresolved, like how to allocate addresses fairly).

But now I've noticed yet another group of technologies emerging - BGMP
(which I am told is supposed to be better than MSDP/MBGP, but I don't yet
understand how it is better), bidirectional PIM (which seems to be another
name for CBT), and SSM with IGMP V3 (which still leaves open the question
that how would you know who to block and who not to block?).  Plus, I seem
to see less emphasis on CGMP, and more emphasis on RGMP and IGMP snooping.


But the bottom line is that I still don't see too many widespread
consumer-uses of multicasting.  I only see real-world uses of multicasting
within companies (financial information in investment companies), or, across
the Internet, meetings of standards bodies.
But, for example, I don't see anything like the Superbowl or the World
Series being delivered via multicast.  OK, OK, that's because of corporate
licensing restrictions, but I think you see my point, I don't see a whole
lot of multicasting that delivers information of interest to the average
user.


So, are these new multicasting technologies becoming very popular, and if
so, why (and if not, why not)?  And will these technologies make Internet
multicasting more wide-spread, or does that have to do with things like
politics, money, and that kind of thing (layer 8 of the OSI model)?
Exactly what is happening with Internet multicasting?

Thanx

NRF




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9655&t=9655
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 7000 memory upgrade - memory spec [7:9647]

2001-06-23 Thread Daniel Cotts

>From the CCO Open Forum Q&A #1996 List of Supprted Vendors for Memory and
Flash. Cut the RP64 from a long list of other routers.
RP-64
PCA,SUB,ROUTE PROCESSOR,64MB4   15-1352-01  IC,DRAM  , 16Mx 9,
70ns,SIM30

Part Number ManufacturerManufacturer #  Status  Approved

--- --  --  

15-1352-01  SAMSUNG KMM5916000/AT-7 QualApproved*

15-1352-01  MITSUBISHI  MH16M09ATJ-7QualApproved

BTW Saw another reply suggesting RSP1. The RSP1 is for the 7505 box. The
7000 series replaces the RP and (S)SP with the RSP7000 and CI7000 set. In
theory they will run any code that the RSPs in 7500s will run.

> -Original Message-
> From: Peter Whittle [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, June 23, 2001 6:26 PM
> To: [EMAIL PROTECTED]
> Subject: 7000 memory upgrade - memory spec [7:9647]
> 
> 
> I have an old 7000 router with RP & SP in my home lab. The RP only has
> 16Mb ram fitted (4 x 4Mb), it is Hardware 1.2 rev D0 (pn 73-0877-06).
> Which according to CCO should upgrade to 64 MB (4 of 16Mb x 9 SIMMS).
> 
> Does anyone know the spec for the SIMMS?  Are they the same 
> as any other
> router or PC platform?
> 
> I am after a source of an inexpensive set for my home lab.
> 
> Many thanks for the help
> 
> Peter
> 
> -- 
> Peter Whittle
> Report misconduct 
> and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9654&t=9647
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Wan technology [7:9475]

2001-06-23 Thread Bradley J. Wilson

You know, I couldn't agree more with this.  I sat down one day to read
Pepelnjak's MPLS novella from Cisco Press, but by page 100 I said to myself,
"Am I missing something here??" ;-)

Can anyone else recommend an easy-to-read tutorial on MPLS?  Or is that an
oxymoron? ;-)

BJ


- Original Message -
From: Howard C. Berkowitz
To: [EMAIL PROTECTED]
Sent: Saturday, June 23, 2001 8:49 PM
Subject: RE: Wan technology [7:9475]


Unfortunately, most vendor marketeers and course writers focus on
part 3 above -- the forwarding part.  At best, they tend to wave
their hands and say some magic set up the paths.





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9653&t=9475
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: duplex for WAN connection ? [7:9462]

2001-06-23 Thread Howard C. Berkowitz

>Yes, WAN connections are almost always full duplex.  I say "almost"
>because there are probably some that I'm not aware of that are half
>duplex.
>
>John

Before frame relay and ISDN were widely available, IBM terminal 
networks commonly used polled multidrop analog lines, which are 
inherently half-duplex. You still may see this sort of thing on 
automatic teller machines, credit authorization terminals, and 
various remote monitoring (e.g., utility meter reading), but it's 
largely obsolete.

What is worth mentioning, especially to someone in Australia where 
intercontinental bandwidth is expensive, is that you can have full 
duplex circuits with asymmetrical bandwidth -- say 1 Mbps in one 
direction and 128 Kbps in the other. This is entirely appropriate for 
applications where you primarily are transferring data in one 
direction and just sending acknowledgements in the other.  Indeed, 
the "fast" path can go over a  long-delay satellite facility, the 
"slow" path can go over low-latency terrestrial, and you may get the 
best of both worlds.  This is sometimes called unidirectional link 
routing, but that is rarely true simplex -- there needs to be a 
control channel opposite the directin of the main data flow.

>
  "Justin Vo"  6/21/01 7:49:29 PM >>>
>Hi all,
>
>I need to verify to see if the WAN connection is somewhat "full-duplex"
>?
>another word, for a 64kbps WAN connection, do I have 64K incoming and
>another 64 K outgoing or the total of incoming and outgoing is 64 Kbps
>?
>
>Much thanks
>Justin Vo
>[EMAIL PROTECTED]
>Network Adminsitrator




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9652&t=9462
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Wan technology [7:9475]

2001-06-23 Thread Howard C. Berkowitz

Both the Cisco/Stratacom and Nortel/Passport WAN switches have 
well-established industry positions. I've worked with both. 
Historically, WAN switches -- including other major vendors such as 
Ascend/Lucent -- use proprietary provisioning and layer 2 routing 
technology.

This, however, is changing significantly with MPLS and Generalized 
MPLS (GMPLS). Now, you need to understand that MPLS is not a 
replacement for IP routing protocols. I like to think of it as an 
"overdrive" to them.

   1.  The IP routing protocols, perhaps with traffic engineering 
extensions, figure out the network topology.
   2.  MPLS path setup protocols such as RSVP-TE, LDP, and CR-LDP, set 
up label switched paths.
   3.  MPLS forwarding actually moves labeled data units to the next hop.

GMPLS generalizes these concepts beyond the idea of frames and 
packets.  Typically with additional path setup mechanisms including 
GSMP, it can set up paths that are not aware of packets/frames -- but 
work on multiplex time slots (e.g., SONET), wavelengths (DWDM), or 
physical ports (arbitrary cross-connects).

So I would argue that a good knowledge of MPLS and its extensions may 
be even more important than a specific WAN switch vendor technology. 
Unfortunately, most vendor marketeers and course writers focus on 
part 3 above -- the forwarding part.  At best, they tend to wave 
their hands and say some magic set up the paths.  When I taught some 
internal Cisco SE courses on the Stratacoms, I remember turning off 
the projector -- with slides totally focused on forwarding -- and 
spending 45 minutes introducing the ways in which label switched 
paths are created.  IMNSHO, knowing that parts 1 and 2 precede part 
3, and understanding all 3 parts, is the real competitive advantage.


>Cisco ofcourse.
>
>StrataCom and the MGX range of switches ROCK.


Seriously -- what about them do you especially like?  I don't think 
there's a WAN switch in the industry that has as friendly an 
interface as router IOS -- scary, isn't it?

>
>M
>
>
>--- Rico Ortiz  wrote:
>>  diversity is key. know them all and don't pigeon
>>  hole your self.
>>
>>  Rico
>>
>>  -Original Message-
>>  From: [EMAIL PROTECTED]
>>  [mailto:[EMAIL PROTECTED]]On Behalf Of
>>  Ronnie Poon
>>  Sent: Friday, June 22, 2001 1:33 AM
>>  To: [EMAIL PROTECTED]
>>  Subject: Wan technology [7:9475]
>>
>>
>>  Dear all,
>>
>>  Which vendor's WAN technology is more valuable in
>>  the market.
>>  Nortel passport , juniper or Cisco.
>>
>>  Thanks
>>  Ronnie Poon
>[EMAIL PROTECTED]
>
>
>__
>Do You Yahoo!?
>Get personalized email addresses from Yahoo! Mail
>http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9651&t=9475
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 7000 memory upgrade - memory spec [7:9647]

2001-06-23 Thread Circusnuts

Peter- from what experience I've had with the 7000's, 11.2 is the best you
can do with that combination.  You need an RSP1 to upgrade this router.
Ebay usually has a large assortment of the RSP's ($150 being a fair price)

Phil

- Original Message -
From: "Peter Whittle" 
To: 
Sent: Saturday, June 23, 2001 10:26 PM
Subject: 7000 memory upgrade - memory spec [7:9647]


> I have an old 7000 router with RP & SP in my home lab. The RP only has
> 16Mb ram fitted (4 x 4Mb), it is Hardware 1.2 rev D0 (pn 73-0877-06).
> Which according to CCO should upgrade to 64 MB (4 of 16Mb x 9 SIMMS).
>
> Does anyone know the spec for the SIMMS?  Are they the same as any other
> router or PC platform?
>
> I am after a source of an inexpensive set for my home lab.
>
> Many thanks for the help
>
> Peter
>
> --
> Peter Whittle




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9650&t=9647
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco STS problem Please Help [7:9603]

2001-06-23 Thread Kent Hundley

I knew someday my knowledge of STS-10 cabling would come in handy. :-)

I have one of these in my lab, and it took a while to get the cabling right,
but here you go:

sts-10 side router console
--- --
Green-white Blue-white
Orange-whiteBlue
Brown-white Orange-white
Blue-white  Orange
BlueGreen-white
Orange  Green
Green   Brown-white
Brown   Brown

This cable will also work for the PC to console port on the sts-10.  If you
have any non-router hardware that you want a console for like a sparc
workstation, you need to cross-over the "router console" end.

Other combinations of signals may work, but I know these work.

HTH,
Kent


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Curtis Newman
Sent: Friday, June 22, 2001 7:41 PM
To: [EMAIL PROTECTED]
Subject: Cisco STS problem Please Help [7:9603]


Hello Everybody, I just brought a Cisco STS 10x terminal server and I
have tried to access it via rolled cable using hyperterminal but nothing
happens, I have checked the cable and it works on my other routers, Am I
connecting to this terminal server incorrectly? If anyone has any
experience with one of these can you please send me a reply on how to
access this device. Thank You



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9649&t=9603
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: network security issue [7:9556]

2001-06-23 Thread Kent Hundley

Jim,

First, physical site security is always your first line of defense.  It is a
rule of thumb that if your site security is so bad that you cannot at least
have some assurance that unauthorized people are not coming into your site,
there's always going to be a way for someone to create a security breach.
There are lots of things you can do from a network security perspective, but
a skilled person can bypass almost anything if they have physical access to
your network.

For example, you could create access based on MAC addresses and have acl's,
but if someone can simply walk up to an authorized station when a person
leaves for lunch, what good does any of that do you?  Answer, very little.

So, here is my advice, in order of priority:

1) Create security policies that users must sign that include describing
what users should and should not do with regard to computer _and_ site
security. These policies will include physical access to network
equipment/closets and user education programs.  If users don't know what
they are supposed to do, how can they do the "right" thing?  Unfortunately,
this is usually the last thing an organization implements, if at all and
when policies are created they are usually not adequate or not kept up to
date.

2) You client should have a facilities organization that coordinates all
physical site security around the globe.  Every site needs to have oversight
and management control.

3) IMHO, trying to manage this by MAC address will be so problematic, that
it will eventually be abandoned.  My suggestion would be to use the
authentication proxy feature on all remote site routers.  This feature is
available in 12.0.5T and requires users to authenticate before being allowed
access to the network. (based on acl's you create).  This will require an
AAA server.

Here's a link:



Make the idle timeouts fairly low, like 15-20 minutes.

4) Require all user workstation to have a password protected screen saver
that enables after no more than 10 minutes of inactivity.  This will be part
of the policies you create in #1.

5) Partner with a security organization that has global presence to conduct
regular site reviews to ensure compliance with all policies.  These reviews
should be conducted on at least a annual basis for all large sites and a
semi-annual basis for smaller sites.

There are more things you could do, but if you did only these things you
would be in decent shape.

HTH,
Kent


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jim Bond
Sent: Friday, June 22, 2001 12:49 PM
To: [EMAIL PROTECTED]
Subject: network security issue [7:9556]


Hello,

My client is a Cisco shop and they have many offices
all over the world. They want to make sure that only
authorized person can connect to their network. Their
concern is that someone may just walk into one of
their offices and plug in a laptop and then is on
their network. How can we prevent this?

The only thing I can think of is create a MAC database
and implement security on the 6509 switches. But to
create and manage tens of thousands of MAC addresses
is a pain. Is there any other way?

Thanks in advance.

Jim

__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9648&t=9556
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



7000 memory upgrade - memory spec [7:9647]

2001-06-23 Thread Peter Whittle

I have an old 7000 router with RP & SP in my home lab. The RP only has
16Mb ram fitted (4 x 4Mb), it is Hardware 1.2 rev D0 (pn 73-0877-06).
Which according to CCO should upgrade to 64 MB (4 of 16Mb x 9 SIMMS).

Does anyone know the spec for the SIMMS?  Are they the same as any other
router or PC platform?

I am after a source of an inexpensive set for my home lab.

Many thanks for the help

Peter

-- 
Peter Whittle




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9647&t=9647
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re:strange problem in voice [7:9093]

2001-06-23 Thread Khurrum Shahzad

Use command " no supervisory " on voice ports at FXS router.

>Hi,
>i configured voice on two routers, on one router i ?>hav a phone set
attached with Fxs and on the other >router Pbx is connected with fxo. I can
recieve
>and make calls from both ends, but i m having this >problem that the phone
keeps on ringing even when i > onhook the phone.
>
>Regards,
>Dar



-- 

___
Make PC-to-Phone calls with Net2Phone.
Sign-up today at: http://www.net2phone.com/cgi-bin/link.cgi?121




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9646&t=9093
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Got A Side Job and am baffled by one client...... [7:9612]

2001-06-23 Thread Cthulu

Do it by the layers.

1.  Check nic, cable, and other physical layer (1) issues.

2. Check layer 2 ( arp, mac, etc)

3. Check layer 3 (ping IP address , not host name, start with self, then
local workstation, then server, etc).  Ping local router, than ISP router.

Once that is done, then try ping a local server by its DNS name, then WINS
name, etc.   If that is successful, ping a remote server by its DNS server.
If unsuccessful, you,needless to say, have a DNS problem of some sort.
Check what DNS server you are pointing to, and see if it has any weird***
reqs or settings.

Your biggest problem right now may be a lack of structure to your
troubleshooting.  Design a plan of attack similar to what I just described,
and them implent it.  It's a pain in the *** but better than guessimating.


HTH, and let us know what the final problem is...

Charles


""George Murphy CCNP""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> =0D
> Hey Folks... I just wanted to get your opinions on this:=0D
> =0D
> I snagged a side job (pays great) and am wondering about a situation. Ok.=
> =2E. here goes. One PC out of about 15 that work great can see Server res=
> ources but cannot browse the web or ping outside. They are using an NT 2k=
>  Server,  2900XL switch and CELLPipe router to the web via ADSL. I have t=
> ried sitching drives, copycatting configs from other clients, reinstallin=
> g stack and client (no domain just a workgroup) and even a different NIC,=
>  still no web for this node. I have checked th router and switch and ther=
>  are no filters and no access lists yada yada yada... The only clue i=
> s the last group they had in did not resolve the server backup issues and=
>  left things unresolvd so they let them go this makes me think there =
> may be some trickery in her since these folks left the router exposed to =
> the web with no password (which I have fixed) and were able to access unt=
> il yesterday. I guess my question in retrospect is there some way to bloc=
> k the bosses PC from TCP/IP via MAC address that I am rusty or unknowledg=
> able of? What arer your thoughts The client is DHCP and the serve=
> r is no domain but providing DHCP and workgroup..?
>
> [GroupStudy.com removed an attachment of type Image/jpeg]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9645&t=9612
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Dead console port [7:9621]

2001-06-23 Thread [EMAIL PROTECTED]

Just a thought - if you have access to another router with same capabilities 
- install that routers operational flash - i.e. swapping flash and 
preprogramming it.

Just a thought - might work?


Okay gang, here's a challenge that I'm trying to overcome (warning:  it may
not be solvable)

I just got a 2514 where I couldn't get any response from the console port.
Of course, I tried changing baud rates, etc., but when I finally connected to
the AUX port, I was able to get in.  The enable password was cisco, so I
gleefully got into the config and changed the config register, hoping that
would solve the problem.  It didn't, so I did the next (very stupid) thing -
I erased the config (I'm beating my head against the desk as I type).  Now,
of course, the problem is when I go to the AUX port and try to get into
enable mode, I can't ("no password set").

Is there any way for me to "bypass" the console port by using the AUX port,
or have I just rendered this device useless until I find a way to fix the
console port?  I don't think I can get into ROMMON mode from the AUX port,
and I can't get into priveleged EXEC mode, either.

TIA,
-e-



Ray
CCNP, CADA




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9644&t=9621
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BGP Community queries [7:9616]

2001-06-23 Thread Mike

It seems to me that you are trying to force traffic from AS 300 destined to
10.1.1.0/24 through AS 200, rather then directly to AS 100.  If this is
correct you really don't need to do anything on R5.  The following will
accomplish this:


//Assume R3 is neighor 3.3.3.3 for R1://

route-map pre-pend permit 10
 match ip address prefix-list pre-pend
 set community 100:10
!
!
route-map pre-pend permit 20
 match ip address
!
!
ip prefix-list pre-pend seq 10 permit 10.1.1.0/24
access-list 1 permit any
!
!
//In your router bgp  section//
neighbor 3.3.3.3 route-map pre-pend out
!


Assume R4 is neighbor IP address 4.4.4.4 for R3
Assume R3 is neighbor IP address 33.33.33.33 for R4
route-map pre-pend permit 10
 match community 10:100
 set as-path prepend 1000 2000 3000
!
!
route-map pre-pend permit 20
 match ip address
!
!
ip prefix-list pre-pend seq 10 permit 10.1.1.0/24
access-list 1 permit any

//In your router bgp  section//
neighbor 33.33.33.33 route-map pre-pend in

""Grad Alfons Kanon""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Dear All, need help:
>
> Given:
> ==
> As 100 = R1, R2, R3
> AS 200 = R5
> AS 300 = R4
>
> Physical connection:
>
> R3 has three connection: R1, R2 and R4
> R2 has two : R5 and R3
> R4 has two: R3 and R5
>
>
>
> R1 to R2 with IBGP
> R3 to R4 with EBGP
> R3 to R2 with IBGP
> R2 to R5 with EBGP
> R4 and R5 with EBGP
> R3 is route reflector
> R1 will advertise 10.1.1.0
>
> Question:
> How can Iconfigure R1 and R5 so,
> AS300 will prepend with 1000 2000 3000 for network 10.1.1.0 with community
> 100:10 that coming from AS100..?
>
>
> tx,
>
> Grad
>
>
>
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9643&t=9616
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Console vs access server ! [7:9636]

2001-06-23 Thread Kevin Wigle

that depends, how is the access server connected to the router?

or do you mean via a modem connected to the router on an async line other
than the console?

I just want to clear up your methods of reaching the router now.

If the router is dead or hung, all it might need is to be power cycled.  If
it is hung the console port might be dead also until a reset is performed.

Need more info.

Kevin Wigle

- Original Message -
From: "shella kevin" 
To: 
Sent: Saturday, 23 June, 2001 12:38
Subject: Console vs access server ! [7:9636]


> Hi,
> I have a remote site to logon in the router via Access server in case if
we
> are unable to logon via telnet etc. I had a router freeze and I was not
been
> able to telnet to it which is a usual practice. Then I tried via Access
> server but could not.
>
> My Q is if I go use the console port via console cable will I be able to
log
> in ? or should I assume if I am not able to logon via access server I will
> not be able to log in via console port ?
>
> Thanks
> S. Kevin
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9642&t=9636
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX v5.25 logging [7:9640]

2001-06-23 Thread Allen Erkman

I usually log to a syslog server (*NIX), and then use tail and/or grep to 
get the traffic I'm interested in. I haven't found a way to filter on the 
PIX itself for specific traffic other than using debug levels ( 1-7) which 
usually don't give you exactly what you are looking for.

Allen.


At 11:14 AM 6/23/2001, Mike wrote:
>Is there anyway to view logs on a PIX and filter by a specific property,
>such as IP address or TCP Port?
>thanks,
>Mike




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9641&t=9640
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX v5.25 logging [7:9640]

2001-06-23 Thread Mike

Is there anyway to view logs on a PIX and filter by a specific property,
such as IP address or TCP Port?
thanks,
Mike




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9640&t=9640
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



access-list /TCP & UDP ! [7:9638]

2001-06-23 Thread shella kevin

I am confusing little about the UDP and TCP ports in the access list 
statement. Can any one tell me any document explaining it ?

Also any document showing the ports information like port 5001 or 2918 ? 
what are they for and what is the function ?

Thanks
S. Kevin


_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9638&t=9638
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



access-list /TCP & UDP ! [7:9639]

2001-06-23 Thread shella kevin

I am confusing little about the UDP and TCP ports in the access list 
statement. Can any one tell me any document explaining it ?

Also any document showing the ports information like port 5001 or 2918 ? 
what are they for and what is the function ?

Thanks
S. Kevin


_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9639&t=9639
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Dead console port [7:9621]

2001-06-23 Thread Ron Goff Jr

I was looking for Louie's link, and it didn't come up.  Considering the fact
that 99% of problems are physical, plus the fact that you just bought this
piece of hardware, I would look at replacement as an issue.  I know that
it's a pain in the ass to do this, but the reality is you could knock
yourself out for two or three weeks trying to figure it out when it's simply
a hardware problem.  Simple analogy:  I was (at one time in my young life)
trying to learn about Windows NT.  In order to load NT you have to create
three boot disks.  I had many floppy disks laying around, so I used a couple
of them to create my boot disks.  I ran into all these indescrimate problems
along the way -  no matter which disks I used, NT never worked.  Feeling
like a failure, I finally looked at the last hope: all new disks.  Wouldn't
you know when I did this everything worked like a charm.  Before beating
your brains out, make sure the hardware is good to go.

I defer to anyone with superior knowledge

P01NT

""Tony Medeiros""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I think the only way to get in to puppy is to set it up for autoinstall.
> See link:
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios112/112cg_cr/1cb
> ook/1cclkstr.htm
>
> Tony M.
> #6172
>
>
> - Original Message -
> From: EA Louie
> To:
> Sent: Saturday, June 23, 2001 2:11 AM
> Subject: Dead console port [7:9621]
>
>
> > Okay gang, here's a challenge that I'm trying to overcome (warning:  it
> may
> > not be solvable)
> >
> > I just got a 2514 where I couldn't get any response from the console
port.
> > Of course, I tried changing baud rates, etc, but when I finally
connected
> to
> > the AUX port, I was able to get in.  The enable password was cisco, so I
> > gleefully got into the config and changed the config register, hoping
that
> > would solve the problem.  It didn't, so I did the next (very stupid)
> thing -
> > I erased the config (I'm beating my head against the desk as I type).
> Now,
> > of course, the problem is when I go to the AUX port and try to get into
> > enable mode, I can't ("no password set").
> >
> > Is there any way for me to "bypass" the console port by using the AUX
> port,
> > or have I just rendered this device useless until I find a way to fix
the
> > console port?  I don't think I can get into ROMMON mode from the AUX
port,
> > and I can't get into priveleged EXEC mode, either.
> >
> > TIA,
> > -e-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9637&t=9621
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Console vs access server ! [7:9636]

2001-06-23 Thread shella kevin

Hi,
I have a remote site to logon in the router via Access server in case if we 
are unable to logon via telnet etc. I had a router freeze and I was not been 
able to telnet to it which is a usual practice. Then I tried via Access 
server but could not.

My Q is if I go use the console port via console cable will I be able to log 
in ? or should I assume if I am not able to logon via access server I will 
not be able to log in via console port ?

Thanks
S. Kevin
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9636&t=9636
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Wan technology [7:9475]

2001-06-23 Thread M

Cisco ofcourse.

StrataCom and the MGX range of switches ROCK.

M


--- Rico Ortiz  wrote:
> diversity is key. know them all and don't pigeon
> hole your self.
> 
> Rico
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> Ronnie Poon
> Sent: Friday, June 22, 2001 1:33 AM
> To: [EMAIL PROTECTED]
> Subject: Wan technology [7:9475]
> 
> 
> Dear all,
> 
> Which vendor's WAN technology is more valuable in
> the market.
> Nortel passport , juniper or Cisco.
> 
> Thanks
> Ronnie Poon
[EMAIL PROTECTED]


__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9635&t=9475
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to set my 2611 router to enable vpn on win2k? [7:9622]

2001-06-23 Thread Ron Goff Jr

I'm assuming the WAN IP address is a valid Internet IP address.  In that
case the next question is: how many other devices use this router to forward
traffic?  If your Windows 2000 server is the only host attached to this
router, I would suggest an access list that permits hosts to connect,
however this is a broad interpretation and I would prefer to defer to more
experienced people in this area.  If this puts you in the right direction,
kewl - glad I helped.

p01nt

""Derric Gu""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> My vpn server uses win2k routing and remote access method, and it is
behind
> the router, but it has a  static wan ip address. How to set the router to
> enable the remote user to access our intranet using PPTP protocol through
> dial-up.
> thanx a lot.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9634&t=9622
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Token Ring stuff for sale [7:9633]

2001-06-23 Thread John Chang

Anyone interested in these?  Thank you.

2 IBM 8228 MAUs $10 ea.
1 HP 600N (model# j3112A) internal Token-Ring print server card $30
13 IBM Auto 16/4 Token Ring ISA card $2.50/ea.
1 Olicom (model# OC-3118) 16/4 Token Ring ISA card $2.50
1 HP JetDirect Ex Plus 3 (model#2594A) print server $30
4 ~16ft IBM-type (brand Black Box) Type-1 to DB-9 Token-Ring cable $6/ea.
9 8ft IBM-type (brand Black Box) Type-1 to DB-9 Token-Ring cable $6/ea.
6 8ft IBM Type-1 to DB-9 Token-Ring cable  $6/ea.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9633&t=9633
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Opinions please... [7:9624]

2001-06-23 Thread Ron Goff Jr

I know there is a CCIP specialty that I've been told deals with
ISP/Broadband technologies, however I don't know that it addresses your need
specifically.  There is a new test that's in beta right now called CCIP.
While I'm personally not investigating this, my brother-in-law is.  He's
taking the beta test either this Sunday or next Sunday.  His indications on
the curriculum for this test indicated that not only does it involve the ISP
and the home user market, but that it's very similar to the routing test
with the exception of IS-IS, which he found documentation for in the Routing
TCP/IP book from Cisco Press.  Hope this helps.

p01nt

""Mark Z.""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi Group,
> I decided that I want to go for more Cisco training (self study for
> certs). I haven't been to the site in a while and I just went back and was
> amazed as to how many things on the cert side have changed. There are so
many
> new ones now. I already have my NP and DA and want to go onto one of the
> Cisco
> Qualified Specialist programs. I'm trying to decide between the security
> track
> or the internet solutions one. I am more interested in the Internet
solutions
> one because it seems to deal with business and e-commerce and I like that
> type
> of stuff. The only thing stopping me from going for that without a doubt
is
> that I don't see where there are any training materials on it yet. If
there
> aren't I'll just go ahead with the security track. Anybody know if there
are
> books out for the internet specialization or should I just go the security
> route? Thanks all,
>
> Mark Z. ~ CCNP, CCDA
>
> "I feel like technology's interpretation of a starving artist."




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9632&t=9624
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Got A Side Job and am baffled by one client...... [7:9612]

2001-06-23 Thread Kevin Wigle

I had a similar problem with my home network lab.

I have both NT4 /W2k servers. (as well as NT4, W2K, W9* workstations)

The first big problem was that I could log in from one machine but not
another.

It turned out that W2K played with the auto duplex on the card.  It seemed
that after every boot, I could log in, then I couldn't.  It was strange
because I could see packets going in and leaving the W2K server (properties
on the card) but it wasn't reacting.

Nailing the duplex speed on the W2K fixed that one.

Then, as you say surfing the net became a problem.  It seemed the NT4(W9*)
family could and the W2K family could not although they had the exact same
IP config.

It turned out that the W2K family wasn't playing with DNS properly as
configured on the ADSL router.  I can't explain it further.

I installed a W2K DNS and pointed it to the ISP DNS.  The W2K machines point
to the W2K DNS and everything works.  The NT4 (W9*) machines point to the
ADSL and everything works.

You have not said if you can get to a web site using their IP address or if
the problem machines can ping anywhere (local or remote) via IP.

Have a look at a DNS issue and try again.

Kevin Wigle

- Original Message -
From: "George Murphy CCNP" 
To: 
Sent: Saturday, 23 June, 2001 02:30
Subject: Got A Side Job and am baffled by one client.. [7:9612]


> =0D
> Hey Folks... I just wanted to get your opinions on this:=0D
> =0D
> I snagged a side job (pays great) and am wondering about a situation. Ok.=
> =2E. here goes. One PC out of about 15 that work great can see Server res=
> ources but cannot browse the web or ping outside. They are using an NT 2k=
>  Server,  2900XL switch and CELLPipe router to the web via ADSL. I have t=
> ried sitching drives, copycatting configs from other clients, reinstallin=
> g stack and client (no domain just a workgroup) and even a different NIC,=
>  still no web for this node. I have checked th router and switch and ther=
>  are no filters and no access lists yada yada yada... The only clue i=
> s the last group they had in did not resolve the server backup issues and=
>  left things unresolvd so they let them go this makes me think there =
> may be some trickery in her since these folks left the router exposed to =
> the web with no password (which I have fixed) and were able to access unt=
> il yesterday. I guess my question in retrospect is there some way to bloc=
> k the bosses PC from TCP/IP via MAC address that I am rusty or unknowledg=
> able of? What arer your thoughts The client is DHCP and the serve=
> r is no domain but providing DHCP and workgroup..?
>
> [GroupStudy.com removed an attachment of type Image/jpeg]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9631&t=9612
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Dead console port [7:9621]

2001-06-23 Thread Tony Medeiros

I think the only way to get in to puppy is to set it up for autoinstall.
See link:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios112/112cg_cr/1cb
ook/1cclkstr.htm

Tony M.
#6172


- Original Message -
From: EA Louie 
To: 
Sent: Saturday, June 23, 2001 2:11 AM
Subject: Dead console port [7:9621]


> Okay gang, here's a challenge that I'm trying to overcome (warning:  it
may
> not be solvable)
>
> I just got a 2514 where I couldn't get any response from the console port.
> Of course, I tried changing baud rates, etc, but when I finally connected
to
> the AUX port, I was able to get in.  The enable password was cisco, so I
> gleefully got into the config and changed the config register, hoping that
> would solve the problem.  It didn't, so I did the next (very stupid)
thing -
> I erased the config (I'm beating my head against the desk as I type).
Now,
> of course, the problem is when I go to the AUX port and try to get into
> enable mode, I can't ("no password set").
>
> Is there any way for me to "bypass" the console port by using the AUX
port,
> or have I just rendered this device useless until I find a way to fix the
> console port?  I don't think I can get into ROMMON mode from the AUX port,
> and I can't get into priveleged EXEC mode, either.
>
> TIA,
> -e-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9630&t=9621
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Got A Side Job and am baffled by one client...... [7:9612]

2001-06-23 Thread Walter Rogowski

have you tried changing the hostname whilst the pc is in a workgroup and
then rejoin the domain with a new hostname ?
- Original Message -
From: "George Murphy CCNP" 
To: 
Sent: Saturday, June 23, 2001 7:30 AM
Subject: Got A Side Job and am baffled by one client.. [7:9612]


> =0D
> Hey Folks... I just wanted to get your opinions on this:=0D
> =0D
> I snagged a side job (pays great) and am wondering about a situation. Ok.=
> =2E. here goes. One PC out of about 15 that work great can see Server res=
> ources but cannot browse the web or ping outside. They are using an NT 2k=
>  Server,  2900XL switch and CELLPipe router to the web via ADSL. I have t=
> ried sitching drives, copycatting configs from other clients, reinstallin=
> g stack and client (no domain just a workgroup) and even a different NIC,=
>  still no web for this node. I have checked th router and switch and ther=
>  are no filters and no access lists yada yada yada... The only clue i=
> s the last group they had in did not resolve the server backup issues and=
>  left things unresolvd so they let them go this makes me think there =
> may be some trickery in her since these folks left the router exposed to =
> the web with no password (which I have fixed) and were able to access unt=
> il yesterday. I guess my question in retrospect is there some way to bloc=
> k the bosses PC from TCP/IP via MAC address that I am rusty or unknowledg=
> able of? What arer your thoughts The client is DHCP and the serve=
> r is no domain but providing DHCP and workgroup..?
>
> [GroupStudy.com removed an attachment of type Image/jpeg]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9629&t=9612
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Rack Time Available. [7:9628]

2001-06-23 Thread Scott O'Donnell

To All,

I'm currently gearing up for a second CCIE Cert (hopefully) and have a
pretty good rack to pratice on.
It's the rack I used to studying and pass the R/S exam.
I'm offering access to the rack as a way of recovering some of the expensive
of buying it from my previous employer.

I will charge a very low cost or barter for access.

The current cabling configuration will allow for you to do ccbootcamp labs
1-8, (I don't have the others, but if you
send me the cable info, I'll try to work it out.)

Please contact me directly if anyone is interested.

The rack is made up of the following

1 x 2511 access server
2 x 2514 dual e /dual wan
2 x 2513 1 eth/1 tok/ 2 wan
2 x 3810 eth / 2 wan / voice t1 / MFT ATM t1
2 x 3620 eth /wan /voice FXS
1 x 1750
1 x 1605
1 x AGS frame switch
1 x pix 506
1 x Cat 2901
1 x Cat 2900 XL




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9628&t=9628
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Load balancing [7:9627]

2001-06-23 Thread Andy Barkl

I am trying to configure load balancing across two FT1s that connect into a 
3620's Ethernet ports.

I have enabled IP load-sharing per-packet on each interface but it doesn't 
seem to help.

I have also removed the 512K link and nothing changes regardless of the 
load-sharing statement. But when I pull the 128K link, all connectivity is 
lost.
I am thinking there is a problem with the 512K link and I have asked the 
client to contact the provider.

My question is, will the IP load-sharing per-packet command work across the 
Ethernet ports, or does it only apply to Serial ports?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9627&t=9627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Got A Side Job and am baffled by one client...... [7:9612]

2001-06-23 Thread [EMAIL PROTECTED]

George,
I think you just answered your own question.  IMHO, if the other PC's have 
the sameconfig and are able to get an address, it is most likely a SID that 
is gotten corrupt on the box in question.  I would back up data, rebuild,
and
readd it to the workgroup.
My .02c,
BTW, if you want to block by MAC address, use an access list # 700 - 799.
Robert Hugo
CCNP, CCDA, MCSE
Network Engineer
Ameritech / SBC
Bloomington, IL.
W: 309-530-2456
H: 217-424-2425




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9626&t=9612
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BGP Community queries [7:9616]

2001-06-23 Thread Bradley J. Wilson

I'm not quite clear on what you're trying to accomplish here.

Since R1 doesn't have any external neighbors, I don't think you'd configure
it to set any community strings.  R5 is not in AS300, and therefore can't
force the routers in AS300 to prepend anything.  It looks like you're trying
to force the traffic to 10.1.1.0 (/24?) through either AS200 or AS300, but
again I'm not clear.  Are you trying to set a community string, or prepend
an as-path?


- Original Message -
From: Grad Alfons Kanon
To: [EMAIL PROTECTED]
Sent: Saturday, June 23, 2001 3:04 AM
Subject: BGP Community queries [7:9616]


Dear All, need help:

Given:
==
As 100 = R1, R2, R3
AS 200 = R5
AS 300 = R4

Physical connection:

R3 has three connection: R1, R2 and R4
R2 has two : R5 and R3
R4 has two: R3 and R5



R1 to R2 with IBGP
R3 to R4 with EBGP
R3 to R2 with IBGP
R2 to R5 with EBGP
R4 and R5 with EBGP
R3 is route reflector
R1 will advertise 10.1.1.0

Question:
How can Iconfigure R1 and R5 so,
AS300 will prepend with 1000 2000 3000 for network 10.1.1.0 with community
100:10 that coming from AS100..?


tx,

Grad




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9625&t=9616
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Opinions please... [7:9624]

2001-06-23 Thread Mark Z.

Hi Group,
I decided that I want to go for more Cisco training (self study for
certs). I haven't been to the site in a while and I just went back and was
amazed as to how many things on the cert side have changed. There are so many
new ones now. I already have my NP and DA and want to go onto one of the
Cisco
Qualified Specialist programs. I'm trying to decide between the security
track
or the internet solutions one. I am more interested in the Internet solutions
one because it seems to deal with business and e-commerce and I like that
type
of stuff. The only thing stopping me from going for that without a doubt is
that I don't see where there are any training materials on it yet. If there
aren't I'll just go ahead with the security track. Anybody know if there are
books out for the internet specialization or should I just go the security
route? Thanks all,

Mark Z. ~ CCNP, CCDA

"I feel like technology's interpretation of a starving artist."




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9624&t=9624
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Error when Booting up [7:9614]

2001-06-23 Thread EA Louie

nope, ... flash is there, just there is no image on flash, indicated by the

> Cisco Internetwork Operating System Software
> IOS (tm) 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE
> SOFTWARE (fc1)

and the
> 8192K bytes of processor board System flash (Read/Write)

Based on the prompt, it probably has no config either, so from the prompt,
type enable to enter priveleged EXEC mode, give it an IP address, set up a
TFTP server, copy tftp flash, and download an image.  If not, then look up
the password recovery for the 2500.  (exercise left to the reader ;-)

-e-

- Original Message -
From: Chuck Larrieu 
To: 
Sent: Saturday, June 23, 2001 1:40 AM
Subject: RE: Error when Booting up [7:9614]


> On the other hand, it may well be that you have no flash chips in the
> router. I see no evidence of an IOS. 2 meg DRAM? You didn't buy this on a
> street corner from a guy wearing asbestos gloves, did you? ;->
>
> Chuck
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> Steiven Poh - Jaring Mailbox
> Sent: Friday, June 22, 2001 11:57 PM
> To: [EMAIL PROTECTED]
> Subject: Error when Booting up [7:9614]
>
> Folks,
>
> I'm having below error when booting up my router, any advice?
>
> System Bootstrap, Version 11.0(10c), SOFTWARE
> Copyright (c) 1986-1996 by cisco Systems
> 2500 processor with 2048 Kbytes of main memory
>
> %SYS-4-CONFIG_NEWER: Configurations from version 11.1 may not be correctly
> understood.
> No usable interfaces
>
> System Bootstrap, Version 11.0(10c), SOFTWARE
> Copyright (c) 1986-1996 by cisco Systems
> 2500 processor with 2048 Kbytes of main memory
>
>   Restricted Rights Legend
>
> Use, duplication, or disclosure by the Government is
> subject to restrictions as set forth in subparagraph
> (c) of the Commercial Computer Software - Restricted
> Rights clause at FAR sec. 52.227-19 and subparagraph
> (c) (1) (ii) of the Rights in Technical Data and Computer
> Software clause at DFARS sec. 252.227-7013.
>
>cisco Systems, Inc.
>170 West Tasman Drive
>San Jose, California 95134-1706
>
> Cisco Internetwork Operating System Software
> IOS (tm) 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE
> SOFTWARE (fc1)
> Copyright (c) 1986-1996 by cisco Systems, Inc.
> Compiled Fri 27-Dec-96 17:33 by loreilly
> Image text-base: 0x0101, data-base: 0x1000
>
> cisco 2511 (68030) processor (revision M) with 2048K/2048K bytes of
memory.
> Processor board ID 10297453, with hardware revision 
> X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
> 1 Ethernet/IEEE 802.3 interface.
> 2 Serial network interfaces.
> 16 terminal lines.
> 32K bytes of non-volatile configuration memory.
> 8192K bytes of processor board System flash (Read/Write)
>
> Press RETURN to get started!
>
> Router(boot)>




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9623&t=9614
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How to set my 2611 router to enable vpn on win2k? [7:9622]

2001-06-23 Thread Derric Gu

My vpn server uses win2k routing and remote access method, and it is behind
the router, but it has a  static wan ip address. How to set the router to
enable the remote user to access our intranet using PPTP protocol through
dial-up.
thanx a lot.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9622&t=9622
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Dead console port [7:9621]

2001-06-23 Thread EA Louie

Okay gang, here's a challenge that I'm trying to overcome (warning:  it may
not be solvable)

I just got a 2514 where I couldn't get any response from the console port.
Of course, I tried changing baud rates, etc, but when I finally connected to
the AUX port, I was able to get in.  The enable password was cisco, so I
gleefully got into the config and changed the config register, hoping that
would solve the problem.  It didn't, so I did the next (very stupid) thing -
I erased the config (I'm beating my head against the desk as I type).  Now,
of course, the problem is when I go to the AUX port and try to get into
enable mode, I can't ("no password set").

Is there any way for me to "bypass" the console port by using the AUX port,
or have I just rendered this device useless until I find a way to fix the
console port?  I don't think I can get into ROMMON mode from the AUX port,
and I can't get into priveleged EXEC mode, either.

TIA,
-e-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9621&t=9621
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Error when Booting up [7:9614]

2001-06-23 Thread Chuck Larrieu

On the other hand, it may well be that you have no flash chips in the
router. I see no evidence of an IOS. 2 meg DRAM? You didn't buy this on a
street corner from a guy wearing asbestos gloves, did you? ;->

Chuck

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Steiven Poh - Jaring Mailbox
Sent:   Friday, June 22, 2001 11:57 PM
To: [EMAIL PROTECTED]
Subject:Error when Booting up [7:9614]

Folks,

I'm having below error when booting up my router, any advice?

System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 2048 Kbytes of main memory

%SYS-4-CONFIG_NEWER: Configurations from version 11.1 may not be correctly
understood.
No usable interfaces

System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 2048 Kbytes of main memory

  Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

   cisco Systems, Inc.
   170 West Tasman Drive
   San Jose, California 95134-1706

Cisco Internetwork Operating System Software
IOS (tm) 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-1996 by cisco Systems, Inc.
Compiled Fri 27-Dec-96 17:33 by loreilly
Image text-base: 0x0101, data-base: 0x1000

cisco 2511 (68030) processor (revision M) with 2048K/2048K bytes of memory.
Processor board ID 10297453, with hardware revision 
X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
1 Ethernet/IEEE 802.3 interface.
2 Serial network interfaces.
16 terminal lines.
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)

Press RETURN to get started!

Router(boot)>




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9620&t=9614
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Got A Side Job and am baffled by one client...... [7:9612]

2001-06-23 Thread Chuck Larrieu

>>(not that this has anything at all to do with cisco..but
anyway.)

my first thought was a NAT / NAT overload issue.  Depending upon how the DSL
router in question works, is there one more PC than outside nattable
addresses available?

My other thought was improper machine configuration, as you suggested.

Chuck


-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
[EMAIL PROTECTED]
Sent:   Saturday, June 23, 2001 12:10 AM
To: [EMAIL PROTECTED]
Subject:Re: Got A Side Job and am baffled by one client.. [7:9612]

On Sat, 23 Jun 2001, George Murphy CCNP wrote:

> I snagged a side job (pays great) and am wondering about a situation. Ok.=
> =2E. here goes. One PC out of about 15 that work great can see Server res=
> ources but cannot browse the web or ping outside. They are using an NT 2k=
>  Server,  2900XL switch and CELLPipe router to the web via ADSL. I have t=

Have you checked to see that the machine has a valid default gateway
assigned?  Have you tried a tracert to see where the machine thinks it is
going?

> able of? What arer your thoughts The client is DHCP and the serve=
> r is no domain but providing DHCP and workgroup..?

So we have verified the machine HAS recieved a valid IP address from the
DHCP server?  That it is even making the request?

winipcfg or similar would be a good place to look


david (not that this has anything at all to do with cisco..but
anyway.)

---
david raistrick (deep in the south georgia woods)
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9618&t=9612
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Error when Booting up [7:9614]

2001-06-23 Thread Chuck Larrieu

This may or may not be an error. It is possible that some prankster has
renamed your router to Router(boot)>

Hostname Router

If you type a question mark ( help ) ? do you get the boot menu, or do you
get a full set of commands?

Have you tried to enter an enable to see if you can get to privilege level?

Chuck

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Steiven Poh - Jaring Mailbox
Sent:   Friday, June 22, 2001 11:57 PM
To: [EMAIL PROTECTED]
Subject:Error when Booting up [7:9614]

Folks,

I'm having below error when booting up my router, any advice?

System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 2048 Kbytes of main memory

%SYS-4-CONFIG_NEWER: Configurations from version 11.1 may not be correctly
understood.
No usable interfaces

System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 2048 Kbytes of main memory

  Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

   cisco Systems, Inc.
   170 West Tasman Drive
   San Jose, California 95134-1706

Cisco Internetwork Operating System Software
IOS (tm) 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-1996 by cisco Systems, Inc.
Compiled Fri 27-Dec-96 17:33 by loreilly
Image text-base: 0x0101, data-base: 0x1000

cisco 2511 (68030) processor (revision M) with 2048K/2048K bytes of memory.
Processor board ID 10297453, with hardware revision 
X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
1 Ethernet/IEEE 802.3 interface.
2 Serial network interfaces.
16 terminal lines.
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)

Press RETURN to get started!

Router(boot)>




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9619&t=9614
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]