RE: CCIE - Security [7:10486]

2001-06-30 Thread George Wu

--forget to ask this:
Or can anyone tell me what are the score report categories in 
CCIE-Security written exam?

Thanks, 
George


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10488&t=10486
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE - Security [7:10486]

2001-06-30 Thread Ali J Khan

Hi  George

Cisco has quite a Cisco-centric exam model.  I am preparing currently for
CCIE Security exam and I believe there will be quite a lot of Cisco commands
based questions even in the Written exam.  Taking a look at the blueprint of
the exam on Cisco Website also shows that many Cisco devices are part of the
curriculum.  These include such devices as Cisco AS 5300 besides the
security products such as firewall / ids.  Also "ios specifics" is given
separately in the blueprint which covers the entire domain of cisco
commands.

Hope that answers your questions. However, the passing score I can only give
you once I achieve it :)) somewhere in August.

regards

Ali J Khan, CCNP


- Original Message -
From: "George Wu" 
To: 
Sent: Saturday, June 30, 2001 11:28 AM
Subject: CCIE - Security [7:10486]


> Hi,
>
> I am intested in taking CCIE-security written test. I have a fairly good
and
> detailed understanding of all listed protocols in the security blueprint.
> However, I am not familar with Cisco's security product lines. Do I need
> that to pass the written exam?
>
> Cisco's specific firewall/vpn/intrusion detection products are only listed
> as study suggestions. Does anyone know if they are also part of CCIE
written
> exam? If yes, to what level? Do I need to be familar with IOS commands?
>
> --Thank you,
>
> George




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10489&t=10486
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE - Security [7:10486]

2001-06-30 Thread Javier Contreras

Hi

Be prepared very well on cisco products. For example ipsec configs,
IDS sensor concepts, signature numbers, etc.

I presented it while in beta, was an "interesting" test... (I passed
BTW)

Don4t forget to study BGP, OSPF, FR.

Regards!


George Wu wrote:
> 
> Hi,
> 
> I am intested in taking CCIE-security written test. I have a fairly good
and
> detailed understanding of all listed protocols in the security blueprint.
> However, I am not familar with Cisco's security product lines. Do I need
> that to pass the written exam?
> 
> Cisco's specific firewall/vpn/intrusion detection products are only listed
> as study suggestions. Does anyone know if they are also part of CCIE
written
> exam? If yes, to what level? Do I need to be familar with IOS commands?
> 
> --Thank you,
> 
> George
-- 
---
Javier Contreras Albesa
Professional Trainer

PRO IN Training S.L.
PROfessional Information Networks
World Trade Center, Moll de Barcelona S/N
Edif Sur, Planta 4

Phone: (+34) 93-5088850 E-mail:
[EMAIL PROTECTED]
Fax:  (+34) 93-5088860 Internet:  http://www.proin.com

SHAPING THE FUTURE - BE PART OF IT!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10490&t=10486
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Specifying username/password on Catalyst 5000/5500 [7:10491]

2001-06-30 Thread Gareth Hinton

I asked a similar question a few days ago referring to the Cat4000 (set
based). No one came back with a suitable answer, but it was hidden within a
load of other questions so maybe everyone had fallen asleep by that point.
You probably already know you can use TACACS/Radius if they're available.
I haven't been able to find a way to set different local user names and
passwords yet.

My question was with refernce to the Ciscoview package on the Cat4000's
(also on the 5000's) which asks for username and password, but username has
to be left blank at the moment.

Anybody got any ideas.

I'll go off and have another dig on CCO

Thanks,

Gaz

""tazman""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Is there a way to setup individual usernames/passwords on a set based
> switch. I know the commands to setup the username/password on a IOS based
> box but is there a option to perform the same thing a a set based box like
> the Catalyst 5000/5500??? Any help is greatly appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10491&t=10491
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Proposed Network Design [7:10494]

2001-06-30 Thread Sammi

Hello all,

We are migrating off of Banyan to Windows 2000 in late July and
through August. Concurrent with the migration will be an
infrastructure overhaul. I would like to lay out my plans and
thoughts; any comments, advice, criticism, improvements, etc. greatly
appreciated.

I have 95% of my hardware:

Dell Poweredge servers:
1550 (6) - file servers
6450 (2) - SQL and Exchange servers
2450 (1) - SQL

Cisco Switches:
2948G (1) - distribution switch
2900xl (8) - access switches
various numbers of 1900/2800 to be phased out

Cisco Aironet Wireless:
2 parabolic, various yaggi and omni antennae
a number of workgroup and access bridges, various sizes.

The new environment will consist entirely of new servers, no upgrades
from old environment.

I've taken my first crack at using Visio 2000 to try and lay out a
high level conceptualization of my planned design. If interested,
please download the diagram: http://www.tuzzy.org/design.zip 200k

Currently our network is on one segment and I am creating vlan's. This
is an ambitious project for my experience but I'm confident, although
I realize it'll take a lot of work and study as I go. I've been
researching this scenario for some time now, and have attended a BCMSN
week long course with Global Knowledge. So, I may be in dim light but
not totally in the dark ;-)

Physical Sites consist of:

Main site; includes main administrative building and 6 outlying
quonset (huts). Fiber from main building to one hut, fiber between
huts. Currently in place and operable. Main server room; distribution
switch, access switches in main building and physical locations.

Heritage site: approx. 4 miles from main. Will connect to Main Site
via Aironet, parabolic at Heritage and at Main.

Northstar site: approx. 400 yds. from Heritage, connected via fibre,
currently in place and operable.

Daycare site: approx. 800 yds. from Heritage, will connect via
Aironet.

Home: approx. 1 mi. from Heritage, will connect via Aironet.

All operations must take place within 10.200.x.x range. Our
organization is  one of three trees within the 2000 forest. Each tree
is an independent organization with close ties. One domain per tree.

My plans:

All servers are Windows 2000, all desktops 2000 Professional.
Each VLAN consists of 6 ports on the 2948 switch, each port (as
needed) will go to a 2900xl switch for eventual end user access,
possible direct 2948 to desktop in some cases.

VLAN 1
10.200.1.x / 24
Serving enterprise; 
Exchange 2000 / Universal file server box
ISA (firewall) box
Primary DNS, DC, DHCP, Global Catalog

VLAN 2
10.200.2.x / 24
File server for info systems, main building.
Secondary DNS, DC
DHCP?
3 users

VLAN 3
10.200.3.x / 24
File server for huts.
SQL backend server for online application, access from huts.
DHCP?
50 users, web server.

VLAN 4
10.200.4.x / 24
One box, 6450, SQL server and file server for finance and services,
main building.
DHCP?
6 - 12 users, critical data, high resource demand

VLAN 5
10.200.5.x / 24
File server for administrative staff, main building.
DHCP?
75 users

VLAN 6
10.200.6.0 / 24
Spans from main building to heritage center, approx. 4 miles distant.
Parabolic and bridge, Aironet, at main building and Heritage center.
Bridge on each end connected to a 2900xl switch.
File server for Heritage center, possibly daycare.
Daycare connected via workstations -> 2900xl -> aironet -> heritage
Northstar has own servers, connected to Heritage via fiber.
Home will connect to Heritage via wireless (low priority).
Possible (probable) second server at Heritage, possible server at
Daycare.
DNS (cache only), DC, Global Catalog
DHCP?
50 users

VLAN 7
Not utilized.

VLAN 8
Gateway to existing Banyan network.


So there we have it. 

This is actually my first time writing it out in detail and that in
itself has been beneficial. 
If anyone is feeling ambitious and generous I would more than welcome
a picking apart of my logic, diagramming, any input at all welcome.
I'm sure I have some gaping omissions, leaps of logic or
considerations not yet considered. Chances are I'm going  overboard
with the segmenting? I realize the extra admin chores but think the
trade off is tolerable.

If you've read this through, I already owe you my thanks ;-)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10494&t=10494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cat 5002 Query [7:10495]

2001-06-30 Thread Rashid Lohiya

Guys,

Pls. can someone let me know if I will be able to do most things necessary
for practising for the CCIE Lab exam with a Cat 5002, Supervisor Engine 1,
FE Blade, 4MB Flash, 20MB DRAM, SW version 2.2.3.

It is costing around 1375.00 GBP, (1800 USD). Is this a good price.

Regards,

Rashid Lohiya
[EMAIL PROTECTED]
020 8509 2990
07785 362626
www.pioneer-computers.com
London UK

Free Cisco Certification links - www.angelfire.com/home/rashidl




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10495&t=10495
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: HSRP [7:10428]

2001-06-30 Thread Charles Manafa

There are two possible scenarios here. One is to divide the user community
into two - half will use one gateway, the other will use the second gateway.
To accomplish this 2 HSRP groups will be configured on the routers. Each
router will be active for one group, and backup for the other group. 2 DHCP
servers will then need to be setup, each serving half of the scope with the
gateway set to one of the HSRP groups. This solution will, in principle,
divide the traffic evenly. Obviously, in practice, several issues such as
traffic pattern, and DHCP availability will need to be considered.

The second solution depends on whether you are running a routing protocol
with your ISPs. If you receive full or partial routes from your ISPs, then
it is possible to have one HSRP group, but enable ICMP redirect on the
routers. This will have the effect of using both links intelligently, using
which ever router has a better route/metric to the destination.

I don't think that HSRP can be used to invoke a backup link, depending on
the traffic threshold.

CM

-Original Message-
From: Sam Sneed
To: [EMAIL PROTECTED]
Sent: 29/06/01 20:58
Subject: HSRP [7:10428]

I was doing a little research on HSRP and had a question for anyone who
has
configured it. I read the whole RFC 2281 and could not find my answer
there.
If you have two routers running HSRP with T1 lines to the internet, 1 is
the
standby and one is the active. Does all traffic only go through the
active
at all times unless it dies? If so isn't it a waste not ever utilizing
the
T1 line thats on standby (of course until the active fails)?

If bandwidth exceeded 1.5MB would the second router kick in to share the
load or would it totally take over?

With these 2 routers acting as a single virtual router would throughput
ever be able to exceed 1.54 MB assuming each has its own T1 connection?

thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10496&t=10428
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



48 bit MAC address Access-lists [7:10497]

2001-06-30 Thread Hamid

Hello group

How can I deny a couple of MAC addresses on an interface using an
access-list.( I have put all of the MAC addresses into an access-list)

Thanks in advance

Hamid




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10497&t=10497
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Specifying username/password on Catalyst 5000/5500 [7:10499]

2001-06-30 Thread Kenneth

I think he's asking about local username/password accounts.

""FELIX KISSIEDU""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> set system name  is the command to assign the hostname name.
> set password  is the command to assign the pasword. to assign the password
> to go into enable mode use the set enablepass  command.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10499&t=10499
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Router as PPTP server - problems [7:10481]

2001-06-30 Thread Kenneth

I had this similar problem on my setup just 3 weeks ago, I had to downgrade
to a 12.1.5T7 IOS image and it worked fine. But, if you want to require
encryption, make sure your RADIUS server support MS-CHAP-MPPE-KEYS. I am
using Funk's Steel-Belted radius configured with the MS-CHAP-MPPE-KEYS but
still am having problem so I had to resort to using CHAP without MPPE for
now (testing stage).

Try the dowgrade and see if it works with your router, I'm pretty sure it
will.

On another note, make sure that in your configuration on the PPTP of Windows
2000, select Point-to-point tunneling protocol as opposed to letting windows
do "automatic".

Let me know.

Hope this helps.



""nrf""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I got a 2514 running 12.2, and I want to set it up to be a PPTP server.  I
> have reviewed the CCO docs' and I believe I have done everything they told
> me to do.  But it doesn't work.   For example, when I fire up a PPTP
client
> from W2k, I see that the router is contacted and it gets to the "Verifying
> Username and password" stage, but doesn't proceed further.  Does anybody
> know what it up with that?
>
> Here is what I configured on the router:
>
>
> username me password 0 me
> ip local pool default 120.1.1.1 120.1.1.2
> vpdn enable
>
> vpdn-group mypptpgroup
> ! Default PPTP VPDN group
>  accept-dialin
>   protocol pptp
>   virtual-template 3
>
>
> interface Virtual-Template3
>  ip unnumbered Loopback0
>  peer default ip address pool default
>  ppp encrypt mppe 40
>  ppp authentication ms-chap
>
> I set up Windows2000 for PPTP client (no L2TP),  using MsCHAP v1 (not v2
> because I saw the CCO warnings not to use v2), and PPP LCP extensions.  I
> have tried it with and without software compression.
>
> When I debug PPP nego and VPDN event and VPDN packet, I just get the
> following over and over.  The error at the very end is really odd, perhaps
> that has something to do with it?
>
>
>
> router#
> 03:22:34: Vi1 VPDN: Virtual interface created
> 03:22:34: Vi1 VPDN: Clone from Vtemplate 3
> 03:22:36: Vi1 VPDN: Bind interface direction=2
> Jun 30 05:13:21: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state
to
> up
> 03:22:36: Vi1 PPP: Treating connection as a dedicated line
> 03:22:36: Vi1 PPP: Phase is ESTABLISHING, Active Open [0 sess, 0 load]
> 03:22:36: Vi1 LCP: O CONFREQ [Closed] id 181 len 15
> 03:22:36: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:36: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:36: Vi1 VPDN: O out
> router#
> Jun 30 05:13:22: %LINEPROTO-5-UPDOWN: Line protocol on Interface
> Virtual-Access1
> , changed state to up
> router#
> 03:22:38: Vi1 LCP: TIMEout: State REQsent
> 03:22:38: Vi1 LCP: O CONFREQ [REQsent] id 182 len 15
> 03:22:38: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:38: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:38: Vi1 VPDN: O out
> router#
> 03:22:40: Vi1 LCP: TIMEout: State REQsent
> 03:22:40: Vi1 LCP: O CONFREQ [REQsent] id 183 len 15
> 03:22:40: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:40: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:40: Vi1 VPDN: O out
> router#
> 03:22:42: Vi1 LCP: TIMEout: State REQsent
> 03:22:42: Vi1 LCP: O CONFREQ [REQsent] id 184 len 15
> 03:22:42: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:42: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:42: Vi1 VPDN: O out
> router#
> 03:22:44: Vi1 LCP: TIMEout: State REQsent
> 03:22:44: Vi1 LCP: O CONFREQ [REQsent] id 185 len 15
> 03:22:44: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:44: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:44: Vi1 VPDN: O out
> router#
> 03:22:46: Vi1 LCP: TIMEout: State REQsent
> 03:22:46: Vi1 LCP: O CONFREQ [REQsent] id 186 len 15
> 03:22:46: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:46: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:46: Vi1 VPDN: O out
> router#
> 03:22:48: Vi1 LCP: TIMEout: State REQsent
> 03:22:48: Vi1 LCP: O CONFREQ [REQsent] id 187 len 15
> 03:22:48: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:48: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:48: Vi1 VPDN: O out
> router#
> 03:22:50: Vi1 LCP: TIMEout: State REQsent
> 03:22:50: Vi1 LCP: O CONFREQ [REQsent] id 188 len 15
> 03:22:50: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:50: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:50: Vi1 VPDN: O out
> router#
> 03:22:52: Vi1 LCP: TIMEout: State REQsent
> 03:22:52: Vi1 LCP: O CONFREQ [REQsent] id 189 len 15
> 03:22:52: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:52: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:52: Vi1 VPDN: O out
> router#
> 03:22:54: Vi1 LCP: TIMEout: State REQsent
> 03:22:54: Vi1 LCP: O CONFREQ [REQsent] id 190 len 15
> 03:22:54: Vi1 LCP:AuthProto MS-CHAP (0x0305C22380)
> 03:22:54: Vi1 LCP:MagicNumber 0x6100C064 (0x05066100C064)
> 03:22:54: Vi1 VPDN: O out
> router#
> Jun 30 0

Funk Steel-belted radius [7:10500]

2001-06-30 Thread Kenneth

has anyone ever used the MS-CHAP-MPPE-KEYS attribute in Funk to make PPTP
tunneling work on a cisco router? I couldn't get it to work as the AAA log
shows:

MPPE: RADIUS keying material missing

Any inputs would help. I tried playing around with the .dct file but didn't
do anything that was helpful.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10500&t=10500
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proposed Network Design [7:10494]

2001-06-30 Thread hal9001

Sammi,

This may be a bit ungracious but how is your security as it seems now that
we have all the plans?

Karl
- Original Message -
From: "Sammi" 
To: 
Sent: Saturday, June 30, 2001 12:05 PM
Subject: Proposed Network Design [7:10494]


> Hello all,
>
> We are migrating off of Banyan to Windows 2000 in late July and
> through August. Concurrent with the migration will be an
> infrastructure overhaul. I would like to lay out my plans and
> thoughts; any comments, advice, criticism, improvements, etc. greatly
> appreciated.
>
> I have 95% of my hardware:
>
> Dell Poweredge servers:
> 1550 (6) - file servers
> 6450 (2) - SQL and Exchange servers
> 2450 (1) - SQL
>
> Cisco Switches:
> 2948G (1) - distribution switch
> 2900xl (8) - access switches
> various numbers of 1900/2800 to be phased out
>
> Cisco Aironet Wireless:
> 2 parabolic, various yaggi and omni antennae
> a number of workgroup and access bridges, various sizes.
>
> The new environment will consist entirely of new servers, no upgrades
> from old environment.
>
> I've taken my first crack at using Visio 2000 to try and lay out a
> high level conceptualization of my planned design. If interested,
> please download the diagram: http://www.tuzzy.org/design.zip 200k
>
> Currently our network is on one segment and I am creating vlan's. This
> is an ambitious project for my experience but I'm confident, although
> I realize it'll take a lot of work and study as I go. I've been
> researching this scenario for some time now, and have attended a BCMSN
> week long course with Global Knowledge. So, I may be in dim light but
> not totally in the dark ;-)
>
> Physical Sites consist of:
>
> Main site; includes main administrative building and 6 outlying
> quonset (huts). Fiber from main building to one hut, fiber between
> huts. Currently in place and operable. Main server room; distribution
> switch, access switches in main building and physical locations.
>
> Heritage site: approx. 4 miles from main. Will connect to Main Site
> via Aironet, parabolic at Heritage and at Main.
>
> Northstar site: approx. 400 yds. from Heritage, connected via fibre,
> currently in place and operable.
>
> Daycare site: approx. 800 yds. from Heritage, will connect via
> Aironet.
>
> Home: approx. 1 mi. from Heritage, will connect via Aironet.
>
> All operations must take place within 10.200.x.x range. Our
> organization is  one of three trees within the 2000 forest. Each tree
> is an independent organization with close ties. One domain per tree.
>
> My plans:
>
> All servers are Windows 2000, all desktops 2000 Professional.
> Each VLAN consists of 6 ports on the 2948 switch, each port (as
> needed) will go to a 2900xl switch for eventual end user access,
> possible direct 2948 to desktop in some cases.
>
> VLAN 1
> 10.200.1.x / 24
> Serving enterprise;
> Exchange 2000 / Universal file server box
> ISA (firewall) box
> Primary DNS, DC, DHCP, Global Catalog
>
> VLAN 2
> 10.200.2.x / 24
> File server for info systems, main building.
> Secondary DNS, DC
> DHCP?
> 3 users
>
> VLAN 3
> 10.200.3.x / 24
> File server for huts.
> SQL backend server for online application, access from huts.
> DHCP?
> 50 users, web server.
>
> VLAN 4
> 10.200.4.x / 24
> One box, 6450, SQL server and file server for finance and services,
> main building.
> DHCP?
> 6 - 12 users, critical data, high resource demand
>
> VLAN 5
> 10.200.5.x / 24
> File server for administrative staff, main building.
> DHCP?
> 75 users
>
> VLAN 6
> 10.200.6.0 / 24
> Spans from main building to heritage center, approx. 4 miles distant.
> Parabolic and bridge, Aironet, at main building and Heritage center.
> Bridge on each end connected to a 2900xl switch.
> File server for Heritage center, possibly daycare.
> Daycare connected via workstations -> 2900xl -> aironet -> heritage
> Northstar has own servers, connected to Heritage via fiber.
> Home will connect to Heritage via wireless (low priority).
> Possible (probable) second server at Heritage, possible server at
> Daycare.
> DNS (cache only), DC, Global Catalog
> DHCP?
> 50 users
>
> VLAN 7
> Not utilized.
>
> VLAN 8
> Gateway to existing Banyan network.
>
>
> So there we have it.
>
> This is actually my first time writing it out in detail and that in
> itself has been beneficial.
> If anyone is feeling ambitious and generous I would more than welcome
> a picking apart of my logic, diagramming, any input at all welcome.
> I'm sure I have some gaping omissions, leaps of logic or
> considerations not yet considered. Chances are I'm going  overboard
> with the segmenting? I realize the extra admin chores but think the
> trade off is tolerable.
>
> If you've read this through, I already owe you my thanks ;-)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10501&t=10494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMA

Re: The cost of ISS? [7:10305]

2001-06-30 Thread Kenneth

I think it cost us $1500 for a 30 day usage for about 250 nodes.

""Justin Lofton""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> How much is the ISS software?  Does anyone know?
>
> Thanks Everyone!
>
> Justin Lofton
> Account Executive/CCNA
> Tredent Data Systems
> [EMAIL PROTECTED]
> V: (818) 222-3770
> F: (818) 222-3778
> http://www.tredent.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10503&t=10305
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BRI backup configurations [7:10504]

2001-06-30 Thread Kenneth

Guys, I am currently configuring 12 remote sites connected via frame-relay
to our HQ. Each site has an ISDN connection for backup to our HQ. At our HQ,
I have a dedicated router to accept BRI connection for these sites except I
only have 4 BRIs.

The reason for this is based on my "statistical analysis" (don't know if
it's that accurate), I don't anticipate more than 4 offices being down at
any particular time.

Now, I want these offices to be able to dial into HQ and be smart enough to
sort of do a rotary-group dialing (I know it only works for PRI). If BRI
port 1 on HQ is busy, it goes to BRI port 2. If that's busy, it goes to 3
and so on.

How do you normally do this? On the HQ site, I have configured 12 Dailer
interfaces and each of the 4 BRI is a member of the 12 dialer-pools. Im just
not sure how you do the remote site... do I just put in multiple
dialer-string, one after the other in the sequence I'd like them to be or
are there special commands?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10504&t=10504
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Technical Questions [7:10427]

2001-06-30 Thread Howard C. Berkowitz

>I'm pretty good at allocating address blocks in binary as well. What I'm not
>good at is analyzing several decimal addresses (with variable-length masks)
>to see if they overlap. I almost always am forced to write these out in
>binary.
>
>See additional in-line comment.
>
>""Howard C. Berkowitz""  wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>>  >Open Forum might be more up to speed if your free-time consists of
>working
>>  >address plans in binary or looking for probability in the pregnant chads
>of
>>  >Fortran punch cards :o)
>>
>>  There's something wrong with doing address plans in binary?  Best way
>>  to learn, once you realize you don't have to do all 32 bits in
>>  binary.  Seriously, when I plan an address structure, and I am
>>  documenting it, my primary mode is binary, and then converting to
>>  dotted decimal where appropriate.  Now, when I say planning address
>>  structures, it often is to say "a /19 here, split into 8 /21 for
>
>
>I'll agree you're probably pretty good at subne


Harrumph.  I was using that technique known only to true addressing 
experts, where you polarize the bits and use Northern and Southern 
addresses in the same space. It might LOOK like ordinary mortals 
could only get 4 /21 out of a /19, but with polarizing overload, you 
double the space!

The only real problem with polarizing as a general technique is that 
if you test the network in North America but move it to Australia, 
you have to readdress.  If part of the network is in the Northern 
Hemisphere while some remains in the Southern Hemisphere, you have to 
use NAT (Network Address Turnover), and no host will work properly 
_on_ the equator.

Just as the modem modulation people kept getting more and more bits 
into a baud, there are research efforts to get more address space by 
adding polarization modes.  Unfortunately, bits seem stable only in a 
vertical polarization.  If they aren't solidly grounded, they fall 
over and are eaten by bit-scavenging bacteria. Virus protection 
software is ineffective against bacteria.

While prions are not strictly viruses, there is strong belief that a 
prion infection, against which antiviruses would not have helped, 
caused the Mad Dow Syndrome that has affected our industry. It is 
unclear if the prions were inserted by a cyberterrorist, or are 
merely a NASDAQ mutation.

If anyone wonders, the power went out in the middle of the night 
(tree branch hit a wire) and I am short on sleep.

>tting in your head. Your
>typing skills could be further honed, however.
>
>:-)
>
>>  areas".
>>
>>  Not boasting here, but when you've been doing these for what...15
>>  years or so, I can do a fair bit of subnetting in my head. There are
>>  tricks, but I wouldn't confuse a beginner with them.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10505&t=10427
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TACACS+ and AAA [7:10211]

2001-06-30 Thread Kenneth

Cisco's site

search for "configuring AAA"

""anthony moore""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Anyone got any good reference or know where to get documentation on
> configuring TACACS+, AAA, and Cisco ACS server




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10506&t=10211
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proposed Network Design [7:10494]

2001-06-30 Thread Sammi

On 30 Jun 2001 08:50:34 -0400, [EMAIL PROTECTED] ("hal9001") wrote:

>Sammi,
>
>This may be a bit ungracious but how is your security as it seems now that
>we have all the plans?

Don't see that it'd be any different.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10507&t=10494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 48 bit MAC address Access-lists [7:10497]

2001-06-30 Thread Circusnuts

This would require you to redesign the router to a layer 2 device or extend
the source code on the Catalyst equipment :o)

- Original Message -
From: "Hamid" 
To: 
Sent: Saturday, June 30, 2001 11:41 AM
Subject: 48 bit MAC address Access-lists [7:10497]


> Hello group
>
> How can I deny a couple of MAC addresses on an interface using an
> access-list.( I have put all of the MAC addresses into an access-list)
>
> Thanks in advance
>
> Hamid




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10508&t=10497
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cat 5002 Query [7:10495]

2001-06-30 Thread Circusnuts

It's deffinately an OK move.  The price pretty good, I have seen them
better.  The max code you can run is 4.5(8), which is plenty for the CCIE
practice.  Your next step "up" would be a Sup III & Netflow (Sup II allows
for 5.x code, but no much of a gain in commands).  So- unless you are ready
to spend big money, the Sup I is fine.  The 12 port 10/100 is really the
only blade you need now that LANE is off the practical.  Megs FLASH & 20 RAM
is pretty much all you need in the Sup I.  Here is the show version from my
switch.

Cat5K Show Version
WS-C5000 Software, Version McpSW: 4.5(8) NmpSW: 4.5(8)
Copyright (c) 1995-2000 by Cisco Systems
NMP S/W compiled on Jul 19 2000, 21:46:34
MCP S/W compiled on Jul 19 2000, 21:51:36

System Bootstrap Version: 2.1

Hardware Version: 1.9 Model: WS-C5000 Serial #: 003627851

Mod Port Model Serial # Versions
---  -- - 
1 2 WS-X5009 003627851 Hw : 1.9
Fw : 2.1
Fw1: 2.1(4)
Sw : 4.5(8)
2 12 WS-X5213A 006491956 Hw : 2.0
Fw : 1.4
Sw : 4.5(8)

DRAM FLASH NVRAM
Module Total Used Free Total Used Free Total Used Free
-- --- --- --- --- --- --- - - -
1 20480K 10332K 10148K 4096K 3584K 512K 256K 129K 127K

Uptime is 0 day, 0 hour, 2 minutes

Phil

- Original Message -
From: "Rashid Lohiya" 
To: 
Sent: Saturday, June 30, 2001 10:50 AM
Subject: Cat 5002 Query [7:10495]


> Guys,
>
> Pls. can someone let me know if I will be able to do most things necessary
> for practising for the CCIE Lab exam with a Cat 5002, Supervisor Engine 1,
> FE Blade, 4MB Flash, 20MB DRAM, SW version 2.2.3.
>
> It is costing around 1375.00 GBP, (1800 USD). Is this a good price.
>
> Regards,
>
> Rashid Lohiya
> [EMAIL PROTECTED]
> 020 8509 2990
> 07785 362626
> www.pioneer-computers.com
> London UK
>
> Free Cisco Certification links - www.angelfire.com/home/rashidl




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10509&t=10495
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: fast ehternet cables for Cat 5000 [7:10480]

2001-06-30 Thread Circusnuts

Are you referring to multimode fiber ???

Phil

- Original Message -
From: "Omer Ehsan Dar" 
To: 
Sent: Saturday, June 30, 2001 4:15 AM
Subject: fast ehternet cables for Cat 5000 [7:10480]


> Hi all, where Can I obtain Fast ethernet cables for a cat 5000 modules
> supervisor engine
> Thanks
> Omer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10510&t=10480
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OFF TOPIC RANT - Who Cares? WAS: MPLS [7:220]

2001-06-30 Thread Circusnuts

>

I think there is a little piece of genious in this statement :o)
Phil

- Original Message -
From: "Chuck Larrieu" 
To: 
Sent: Saturday, June 30, 2001 2:54 AM
Subject: OFF TOPIC RANT - Who Cares? WAS: MPLS [7:220]


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Howard C. Berkowitz
> Sent: Friday, June 29, 2001 5:25 PM
> To: [EMAIL PROTECTED]
> Subject: Re: MPLS [7:220]
>
>
> >Does anyone have a simple MPLS configuration they could post?
>
> >To solve what problem with MPLS?
>
> Oh give it up, Howard. Nobody cares. All they want is The Answer.
>
> I've been kicking around the CCIE list for several months now. People who
> want to be CCIE's but don't read the RFC's. Or Comer. Or Stevens. Or
> Berkowitz. Or Oppenheimer. Or anything else. Doyle, Halabi, and Caslow -
> that's what gets you to the CCIE level! And why should they do otherwise?
I
> don't recall seeing anything on my lab that made me wish I'd spend more
time
> studying RFC's. Or TCP/IP theory. In fact just about everything I saw on
my
> lab made me wish I'd spent less time with the RFC's and more time doing
> other things.
>
> How does routing work? How does redistribution work? How does OSPF work?
Who
> cares? Just give me the configs that will help me pass. If I memorize
enough
> variations, I'm ready for anything the lab throws my way.
>
> OK. Out of my system. Back to memorizing configs ;->
>
> Chuck




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10511&t=220
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proposed Network Design [7:10494]

2001-06-30 Thread hal9001

I.E. None then!
- Original Message -
From: "Sammi" 
To: 
Sent: Saturday, June 30, 2001 2:36 PM
Subject: Re: Proposed Network Design [7:10494]


> On 30 Jun 2001 08:50:34 -0400, [EMAIL PROTECTED] ("hal9001") wrote:
>
> >Sammi,
> >
> >This may be a bit ungracious but how is your security as it seems now
that
> >we have all the plans?
>
> Don't see that it'd be any different.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10512&t=10494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



test [7:10513]

2001-06-30 Thread OALZO

test




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10513&t=10513
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE Study Partner [7:10514]

2001-06-30 Thread OALZO

Hi All,

I am looking for a study partner in the Chicago land area.  My lab is about
three months away and parley have time to get ready.  If you're interested
please respond.

Thanks,
OMZ




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10514&t=10514
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



non cisco help [7:10515]

2001-06-30 Thread Jennifer Cribbs

I would like to know who has an extensive through knowledge of dos that I
might e-mail a few questions to for detailed
answers.

Jenn


Have a great day!!
Jennifer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10515&t=10515
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proposed Network Design [7:10494]

2001-06-30 Thread Tony Medeiros

Comments inline.

- Original Message -
From: Sammi 
To: 
Sent: Saturday, June 30, 2001 4:05 AM
Subject: Proposed Network Design [7:10494]


> Hello all,
>
> We are migrating off of Banyan to Windows 2000 in late July and
> through August. Concurrent with the migration will be an
> infrastructure overhaul. I would like to lay out my plans and
> thoughts; any comments, advice, criticism, improvements, etc. greatly
> appreciated.
>
> I have 95% of my hardware:
>
> Dell Poweredge servers:
> 1550 (6) - file servers
> 6450 (2) - SQL and Exchange servers
> 2450 (1) - SQL
>
> Cisco Switches:
> 2948G (1) - distribution switch
> 2900xl (8) - access switches
> various numbers of 1900/2800 to be phased out

I hope that 2948 is a 2948G-L3 layer 3 switch.  If not, you going to need
some kind of router for inter-vlan connectivity.

> Cisco Aironet Wireless:
> 2 parabolic, various yaggi and omni antennae
> a number of workgroup and access bridges, various sizes.

I hope you are using a full bridge at that hub site.  I don't think
workgroup bridges will do a point to multipoint setup.

> The new environment will consist entirely of new servers, no upgrades
> from old environment.
>
> I've taken my first crack at using Visio 2000 to try and lay out a
> high level conceptualization of my planned design. If interested,
> please download the diagram: http://www.tuzzy.org/design.zip 200k

It's not bad for a high level concept drawing. As you progress in your
design, add as much detail as you can.  Put in mangement ip addresses on
network equipment.  VLAN ranges,  hostnames, etc.  I am a firm believer in
making a network work on paper before I configure anything.  This way you
can spot as many issues ahead of time.  Also, when you are done,  you
network is already documented !!

> Currently our network is on one segment and I am creating vlan's. This
> is an ambitious project for my experience but I'm confident, although
> I realize it'll take a lot of work and study as I go. I've been
> researching this scenario for some time now, and have attended a BCMSN
> week long course with Global Knowledge. So, I may be in dim light but
> not totally in the dark ;-)
>
> Physical Sites consist of:
>
> Main site; includes main administrative building and 6 outlying
> quonset (huts). Fiber from main building to one hut, fiber between
> huts. Currently in place and operable. Main server room; distribution
> switch, access switches in main building and physical locations.

Are you going to use media converters for the uplinks ??  There is a version
of the 2900 that comes with a fiber FastE port for uplinks.

> Heritage site: approx. 4 miles from main. Will connect to Main Site
> via Aironet, parabolic at Heritage and at Main.

If you are using a parabolic at your hub site.  It won't work for a
multipoint setup.  Unless you have a bridge for each link or the two branchs
are on the same line of sight.  Consider using an omni at the hub and
parabolics at the branches.

> Northstar site: approx. 400 yds. from Heritage, connected via fibre,
> currently in place and operable.
>
> Daycare site: approx. 800 yds. from Heritage, will connect via
> Aironet.
>
> Home: approx. 1 mi. from Heritage, will connect via Aironet.
>
> All operations must take place within 10.200.x.x range. Our
> organization is  one of three trees within the 2000 forest. Each tree
> is an independent organization with close ties. One domain per tree.
>
> My plans:
>
> All servers are Windows 2000, all desktops 2000 Professional.
> Each VLAN consists of 6 ports on the 2948 switch, each port (as
> needed) will go to a 2900xl switch for eventual end user access,
> possible direct 2948 to desktop in some cases.
>
> VLAN 1
> 10.200.1.x / 24
> Serving enterprise;
> Exchange 2000 / Universal file server box
> ISA (firewall) box
> Primary DNS, DC, DHCP, Global Catalog
>
> VLAN 2
> 10.200.2.x / 24
> File server for info systems, main building.
> Secondary DNS, DC
> DHCP?
> 3 users
>
> VLAN 3
> 10.200.3.x / 24
> File server for huts.
> SQL backend server for online application, access from huts.
> DHCP?
> 50 users, web server.
>
> VLAN 4
> 10.200.4.x / 24
> One box, 6450, SQL server and file server for finance and services,
> main building.
> DHCP?
> 6 - 12 users, critical data, high resource demand
>
> VLAN 5
> 10.200.5.x / 24
> File server for administrative staff, main building.
> DHCP?
> 75 users
>
> VLAN 6
> 10.200.6.0 / 24
> Spans from main building to heritage center, approx. 4 miles distant.
> Parabolic and bridge, Aironet, at main building and Heritage center.
> Bridge on each end connected to a 2900xl switch.
> File server for Heritage center, possibly daycare.
> Daycare connected via workstations -> 2900xl -> aironet -> heritage
> Northstar has own servers, connected to Heritage via fiber.
> Home will connect to Heritage via wireless (low priority).
> Possible (probable) second server at Heritage, possible server at
> Daycare.
> DNS (cache only), DC, Global Catalog
> DH

failed telnet [7:10517]

2001-06-30 Thread [EMAIL PROTECTED]

After disconnecting a SUN server from a Catalyst 6509, i tried to 
telnet it and a proxy Network Appliance respond the telnet.
There are any strange IP configuration (no NAT, no virtual, etc.)
Thanks in advance.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10517&t=10517
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proposed Network Design [7:10494]

2001-06-30 Thread Sammi

Sorry if I sounded abrupt, wasn't meant that way.

Fact is, *I* don't see that it'd compromise security, so that doesn't
mean it doesn't in fact make a difference.
My thinking was; if someone could get to my internal network they'd
find that out quick enough.
I appreciate the thought, and if there's room for criticism there,
then that's exactly what I'm looking for.

Constructive criticism is a great learning tool IMO.

On 30 Jun 2001 10:22:48 -0400, [EMAIL PROTECTED] ("hal9001")
wrote:

>I.E. None then!
>- Original Message -
>From: "Sammi" 
>To: 
>Sent: Saturday, June 30, 2001 2:36 PM
>Subject: Re: Proposed Network Design [7:10494]
>
>
>> On 30 Jun 2001 08:50:34 -0400, [EMAIL PROTECTED] ("hal9001") wrote:
>>
>> >Sammi,
>> >
>> >This may be a bit ungracious but how is your security as it seems now
>that
>> >we have all the plans?
>>
>> Don't see that it'd be any different.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10518&t=10494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proposed Network Design [7:10494]

2001-06-30 Thread Sammi

On 30 Jun 2001 11:45:37 -0400, [EMAIL PROTECTED] ("Tony Medeiros")
wrote:

>Comments inline.

Thanks for the input, followups below:

>I hope that 2948 is a 2948G-L3 layer 3 switch.  If not, you going to need
>some kind of router for inter-vlan connectivity.

Yes, it is a L3, chosen specifically for its routing capabilities.

>I hope you are using a full bridge at that hub site.  I don't think
>workgroup bridges will do a point to multipoint setup.

Full bridges, yes. Model numbers are at the office and I couldn't
recall off hand.

>It's not bad for a high level concept drawing. As you progress in your
>design, add as much detail as you can.  Put in mangement ip addresses on
>network equipment.  VLAN ranges,  hostnames, etc.  I am a firm believer in
>making a network work on paper before I configure anything.  This way you
>can spot as many issues ahead of time.

That was my intent, to put in as much detail as possible. But it
seemed my drawing threatened to become so cluttered as to be
unreadable. I didn't see that the workspace would "expand" as needed,
but will play with it more.

>  Also, when you are done,  you
>network is already documented !!

That bonus occurred to me as I was constructing my post, the process
also brings issues clearer to mind.

>Are you going to use media converters for the uplinks ??  There is a version
>of the 2900 that comes with a fiber FastE port for uplinks.

The uplinks are already in place and operable, using converters. For
the outlying buildings it's a matter of upgrading the switches,
tidying the mess of cable, and configuring for VLAN.

>If you are using a parabolic at your hub site.  It won't work for a
>multipoint setup.  Unless you have a bridge for each link or the two branchs
>are on the same line of sight.  Consider using an omni at the hub and
>parabolics at the branches.

The two main sites, 4 mi. distance, I have established a direct line
of sight. The other site I'd like to bring into a parabolic is along
the same path, slightly to the west. I figure if I'm lucky the dish
will catch it, if not I have antennae to do the job.
I have yaggis and omnis, I had thought yaggi would be better suited
for distance and direct line. Do you feel the omni is a better option?

Thanks again for your comments, very much appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10519&t=10494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Technical Questions [7:10427]

2001-06-30 Thread Charles Manafa

Anyone know of a position going at McDonalds...this networking business is
getting a bit too strenuous for me.

CM 

-Original Message-
From: Howard C. Berkowitz
To: [EMAIL PROTECTED]
Sent: 30/06/01 14:12
Subject: Re: Technical Questions [7:10427]

>I'm pretty good at allocating address blocks in binary as well. What
I'm not
>good at is analyzing several decimal addresses (with variable-length
masks)
>to see if they overlap. I almost always am forced to write these out in
>binary.
>
>See additional in-line comment.
>
>""Howard C. Berkowitz""  wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>>  >Open Forum might be more up to speed if your free-time consists of
>working
>>  >address plans in binary or looking for probability in the pregnant
chads
>of
>>  >Fortran punch cards :o)
>>
>>  There's something wrong with doing address plans in binary?  Best
way
>>  to learn, once you realize you don't have to do all 32 bits in
>>  binary.  Seriously, when I plan an address structure, and I am
>>  documenting it, my primary mode is binary, and then converting to
>>  dotted decimal where appropriate.  Now, when I say planning address
>>  structures, it often is to say "a /19 here, split into 8 /21 for
>
>
>I'll agree you're probably pretty good at subne


Harrumph.  I was using that technique known only to true addressing 
experts, where you polarize the bits and use Northern and Southern 
addresses in the same space. It might LOOK like ordinary mortals 
could only get 4 /21 out of a /19, but with polarizing overload, you 
double the space!

The only real problem with polarizing as a general technique is that 
if you test the network in North America but move it to Australia, 
you have to readdress.  If part of the network is in the Northern 
Hemisphere while some remains in the Southern Hemisphere, you have to 
use NAT (Network Address Turnover), and no host will work properly 
_on_ the equator.

Just as the modem modulation people kept getting more and more bits 
into a baud, there are research efforts to get more address space by 
adding polarization modes.  Unfortunately, bits seem stable only in a 
vertical polarization.  If they aren't solidly grounded, they fall 
over and are eaten by bit-scavenging bacteria. Virus protection 
software is ineffective against bacteria.

While prions are not strictly viruses, there is strong belief that a 
prion infection, against which antiviruses would not have helped, 
caused the Mad Dow Syndrome that has affected our industry. It is 
unclear if the prions were inserted by a cyberterrorist, or are 
merely a NASDAQ mutation.

If anyone wonders, the power went out in the middle of the night 
(tree branch hit a wire) and I am short on sleep.

>tting in your head. Your
>typing skills could be further honed, however.
>
>:-)
>
>>  areas".
>>
>>  Not boasting here, but when you've been doing these for what...15
>>  years or so, I can do a fair bit of subnetting in my head. There are
>>  tricks, but I wouldn't confuse a beginner with them.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10520&t=10427
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proposed Network Design [7:10494]

2001-06-30 Thread hal9001

Wasn't having a go but I think you were too specific and pinned exactly down
to who you are and where you are etc etc, somebody will go sniffing just for
the kicks.

Karl
- Original Message -
From: "Sammi" 
To: 
Sent: Saturday, June 30, 2001 7:18 PM
Subject: Re: Proposed Network Design [7:10494]


> Sorry if I sounded abrupt, wasn't meant that way.
>
> Fact is, *I* don't see that it'd compromise security, so that doesn't
> mean it doesn't in fact make a difference.
> My thinking was; if someone could get to my internal network they'd
> find that out quick enough.
> I appreciate the thought, and if there's room for criticism there,
> then that's exactly what I'm looking for.
>
> Constructive criticism is a great learning tool IMO.
>
> On 30 Jun 2001 10:22:48 -0400, [EMAIL PROTECTED] ("hal9001")
> wrote:
>
> >I.E. None then!
> >- Original Message -
> >From: "Sammi"
> >To:
> >Sent: Saturday, June 30, 2001 2:36 PM
> >Subject: Re: Proposed Network Design [7:10494]
> >
> >
> >> On 30 Jun 2001 08:50:34 -0400, [EMAIL PROTECTED] ("hal9001") wrote:
> >>
> >> >Sammi,
> >> >
> >> >This may be a bit ungracious but how is your security as it seems now
> >that
> >> >we have all the plans?
> >>
> >> Don't see that it'd be any different.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10521&t=10494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: failed telnet [7:10517]

2001-06-30 Thread Kenneth

What exactly is the question now?

 wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> After disconnecting a SUN server from a Catalyst 6509, i tried to
> telnet it and a proxy Network Appliance respond the telnet.
> There are any strange IP configuration (no NAT, no virtual, etc.)
> Thanks in advance.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10522&t=10517
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: non cisco help [7:10515]

2001-06-30 Thread marc maréchal

DOS knowledge was part of my formal studies. I have learned the commands and
programation, including TSR programs.

I have also studied DOS CLI on Windows and NT, as part of my MCSE study.

I will be happy if I can help you.

My e-mail : [EMAIL PROTECTED]


Marc.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10524&t=10515
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNA scoring [7:10407]

2001-06-30 Thread hongkong phim

You got a Lucky test
:-)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10525&t=10407
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



help how do I post to study groups [7:10526]

2001-06-30 Thread drewgans

help how do I post to study groups




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10526&t=10526
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OFF TOPIC RANT - Who Cares? WAS: MPLS [7:220]

2001-06-30 Thread Tom Lisa

In defense of the original poster, perhaps he/she (?) merely wanted some
configs for
study purposes.  When I start my students out I give them working configs so
they can
analyze them to see why they work and to understand why something is done
that way and
the possible alternatives.

Then again, perhaps Chuck is right and the poster just wanted "The Answer"
without doing
any work.

Prof. Tom Lisa, CCAI
Community College of Southern Nevada
Cisco Regional Networking Academy

Chuck Larrieu wrote:

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Howard C. Berkowitz
> Sent: Friday, June 29, 2001 5:25 PM
> To: [EMAIL PROTECTED]
> Subject: Re: MPLS [7:220]
>
> >Does anyone have a simple MPLS configuration they could post?
>
> >To solve what problem with MPLS?
>
> Oh give it up, Howard. Nobody cares. All they want is The Answer.
>
> I've been kicking around the CCIE list for several months now. People who
> want to be CCIE's but don't read the RFC's. Or Comer. Or Stevens. Or
> Berkowitz. Or Oppenheimer. Or anything else. Doyle, Halabi, and Caslow -
> that's what gets you to the CCIE level! And why should they do otherwise? I
> don't recall seeing anything on my lab that made me wish I'd spend more
time
> studying RFC's. Or TCP/IP theory. In fact just about everything I saw on my
> lab made me wish I'd spent less time with the RFC's and more time doing
> other things.
>
> How does routing work? How does redistribution work? How does OSPF work?
Who
> cares? Just give me the configs that will help me pass. If I memorize
enough
> variations, I'm ready for anything the lab throws my way.
>
> OK. Out of my system. Back to memorizing configs ;->
>
> Chuck




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10527&t=220
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: internet telephony [7:10484]

2001-06-30 Thread Michael L. Williams

Help how?   Are you looking for references?  Books?  Exam numbers?

Mike W.

"Adeel Ahmad"  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> hi,
>if any body there can help regarding internet telephony then i would be
> greatful.
>thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10528&t=10484
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: help how do I post to study groups [7:10526]

2001-06-30 Thread Patrick Bass

if you find out; let me know too.

""drewgans""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> help how do I post to study groups




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10529&t=10526
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OFF TOPIC RANT - Who Cares? WAS: MPLS [7:220]

2001-06-30 Thread Cisco Nuts

Hi Chuck et all,
The more and more I read about your postings, the more confident I feel 
about the lab. As I have heard/been told, that the lab is just a mere exam, 
half of the configs. which you will not see in the real world. As Chuck so 
clearly puts it, if all you want is to pass the lab, read and Memorize 
different configs, and practise, practise, practise. This I am sure is 
enough to pass the lab-just pass it.. and get that magic number!
Peace!!
Anyone feel differently?? :-)



>From: "John Neiberger" 
>Reply-To: "John Neiberger" 
>To: [EMAIL PROTECTED]
>Subject: Re: OFF TOPIC RANT - Who Cares? WAS: MPLS [7:220]
>Date: Sat, 30 Jun 2001 02:04:21 -0400
>
>Yikes, Chuck!  I'm usually the grumpy one around here!  ;-)  Cheer up, my
>man!
>
>But, I know how you feel.  Sometimes it seems that all too many people want
>the certifications without having to work at it.  (By the way, I completely
>missed the MPLS thread [since I don't know a thing about it] and I'm not
>saying the original poster was being lazy.)
>
>In fact, it sometimes does help me to understand a concept if I see a
>working config all at once.  On the other hand, my chances of remembering
>something are infinitely better if I figure it out myself.
>
>For instance, I was reading some Caslow last night and then worked on some
>bridging configs with two 2501s and my PC to generate traffic.  I was
>working on transparent bridging but I was running into some problems.  As 
>it
>turns out, to completely test my config using my current setup, I ended up
>configuring IRB on the remote router (from my PC's perspective.)  I will
>now, always and forever, remember how I solved this particular issue 
>because
>I figured it out myself.
>
>Okay, I'm now through with my Chuck-inspired partial rant.  :-)
>
>We now return to our regular programming.
>
>John
>
>|  -Original Message-
>|  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
>|  Howard C. Berkowitz
>|  Sent: Friday, June 29, 2001 5:25 PM
>|  To: [EMAIL PROTECTED]
>|  Subject: Re: MPLS [7:220]
>|
>|
>|  >Does anyone have a simple MPLS configuration they could post?
>|
>|  >To solve what problem with MPLS?
>|
>|  Oh give it up, Howard. Nobody cares. All they want is The Answer.
>|
>|  I've been kicking around the CCIE list for several months now. People 
>who
>|  want to be CCIE's but don't read the RFC's. Or Comer. Or Stevens. Or
>|  Berkowitz. Or Oppenheimer. Or anything else. Doyle, Halabi, and Caslow -
>|  that's what gets you to the CCIE level! And why should they do 
>otherwise?
>I
>|  don't recall seeing anything on my lab that made me wish I'd spend more
>time
>|  studying RFC's. Or TCP/IP theory. In fact just about everything I saw on
>my
>|  lab made me wish I'd spent less time with the RFC's and more time doing
>|  other things.
>|
>|  How does routing work? How does redistribution work? How does OSPF work?
>Who
>|  cares? Just give me the configs that will help me pass. If I memorize
>enough
>|  variations, I'm ready for anything the lab throws my way.
>|
>|  OK. Out of my system. Back to memorizing configs ;->
>|
>|  Chuck
>|
>|
>|
>|
>___
>Send a cool gift with your E-Card
>http://www.bluemountain.com/giftcenter/
_
Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10530&t=220
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Lab Equipment - Does anyone ACTUALLY know??? [7:10531]

2001-06-30 Thread Cisco Nuts

Hi all,
I have been trying to figure out for a couple of months as to what 
route/switch models would one actually see on the lab? Does anyone actually 
know or people like Chuck etc. who have already been there, can you share 
this with us without violating NDA!!
Mentor has their setup for their ECP classess which I found different from 
the web-site somewhere in NC that someone posted a couple of weeks back! Who 
knows??
Can anyone advise.
Thanks!!
_
Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10531&t=10531
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Async Line Numbering (2600 & 3600) [7:10532]

2001-06-30 Thread Circusnuts

Had nothing better to do than sell my easy to configure & predictably slow
2511 for a 2621 with an NM-16 async module.  I am @ a loss as to logic
involved with the async line numbering.  With the 2500 Access-Server, line 1
is 2001 (2000 being Telnet protocol).  My 2621 has the NM-16 in slot 1 (as
seen in the below output):

Firewall#sh diag
Slot 1:
Async port adapter, 16 ports

The given formula is this: interface # = (16 x slot #) + unit # +1

 (16x slot # 1) + 1 (physical connection 1) + 1= gives me 18  The router
starts the count @ 33 as the first useable line #.  So- my range of 16
useable
lines is 33 thru 48.  My question is:

What gives ???

What's the logic here ???

Thanks !!!
Phil




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10532&t=10532
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: help how do I post to study groups [7:10526]

2001-06-30 Thread Michael L. Williams

LOL

"Patrick Bass"  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> if you find out; let me know too.
>
> ""drewgans""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > help how do I post to study groups




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10534&t=10526
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



quest. for AAA / VPDN experts [7:10535]

2001-06-30 Thread nrf

I am trying to set up a L2F VPDN, using CiscoSecure for Windows (acting as a
Radius server).  I have yet to actually get the VPDN up.

I believe that the problem has something to do with the Radius configuration
on Ciscosecure.  I say this because when I configure it as a Tacacs+ server,
the VPDN settings all work perfectly.  This indicates to me that the NAS and
the home gateway are set up correctly, and Ciscosecure is set up correctly,
when using Tacacs+.  But when I shift everything to Radius (both the aaa
settings on the router and the network settings on Ciscosecure), all hell
breaks loose.  Shift it back to Tacacs+, and everything is fine again.

So, has anybody ever successfully done a VPDN using Radius (not just
Ciscosecure, but any kind of Radius)?  If so, could you just provide a
walkthrough of how to do it - what AV pairs to use, etc.?

Note, I am not interested in being pointed to a bunch of sample CCO configs,
because I have already read them, and have copied them, and they seem not to
work.  I am interested in finding somebody who has actually done a VPDN
w/Radius  and can confirm that it works.

Thanx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10535&t=10535
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Async Line Numbering (2600 & 3600) [7:10532]

2001-06-30 Thread Oddy

now imagine that you had the async module in slot 5 on
a 3662.  (big evil grin)  

actually, the logic behind the numbering scheme is
based on the assumption that you could put in a NM-32
into any of the slots in a 3600.  therefore, each slot
has the potential to contain 32 async ports and then
throw in the aux port for the +1.

that's why i ended up buying your "easy to configure &
predictably slow" 2511.  :-)  (actually, i needed the
slot for a voice module.)

oddy

--- Circusnuts  wrote:
> Had nothing better to do than sell my easy to
> configure & predictably slow
> 2511 for a 2621 with an NM-16 async module.  I am @
> a loss as to logic
> involved with the async line numbering.  With the
> 2500 Access-Server, line 1
> is 2001 (2000 being Telnet protocol).  My 2621 has
> the NM-16 in slot 1 (as
> seen in the below output):
> 
> Firewall#sh diag
> Slot 1:
> Async port adapter, 16 ports
> 
> The given formula is this: interface # = (16 x slot
> #) + unit # +1
> 
>  (16x slot # 1) + 1 (physical connection 1) + 1=
> gives me 18  The router
> starts the count @ 33 as the first useable line #. 
> So- my range of 16
> useable
> lines is 33 thru 48.  My question is:
> 
> What gives ???
> 
> What's the logic here ???
> 
> Thanks !!!
> Phil
[EMAIL PROTECTED]


__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10536&t=10532
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DELIVERY FAILURE: User r wilewski (r wilewski@ibmpl) not [7:10537]

2001-06-30 Thread Oddy

now imagine that you had the async module in slot 5 on
a 3662.  (big evil grin)
 
actually, the logic behind the numbering scheme is
based on the assumption that you could put in a
NM-32async into any of the slots in a 3600. 
therefore, each slot has the potential to contain 32
async ports and then throw in the aux port for the +1.

that's why i ended up buying your "easy to configure &
predictably slow" 2511.  :-)  (actually, i needed
the slot for a voice module.)

oddy

> --- Circusnuts  wrote:
> > Had nothing better to do than sell my easy to
> > configure & predictably slow
> > 2511 for a 2621 with an NM-16 async module.  I am
> @
> > a loss as to logic
> > involved with the async line numbering.  With the
> > 2500 Access-Server, line 1
> > is 2001 (2000 being Telnet protocol).  My 2621 has
> > the NM-16 in slot 1 (as
> > seen in the below output):
> >
> > Firewall#sh diag
> > Slot 1:
> > Async port adapter, 16 ports
> >
> > The given formula is this: interface # = (16 x
> slot
> > #) + unit # +1
> >
> >  (16x slot # 1) + 1 (physical connection 1) + 1=
> > gives me 18  The router
> > starts the count @ 33 as the first useable line #.
> > So- my range of 16
> > useable
> > lines is 33 thru 48.  My question is:
> >
> > What gives ???
> >
> > What's the logic here ???
> >
> > Thanks !!!
> > Phil
> [EMAIL PROTECTED]
> 
> 
> __
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/
> [EMAIL PROTECTED]
> 
> 


__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10537&t=10537
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Technical Questions [7:10427]

2001-06-30 Thread Karen E Young

I have to agree with the subnetting thing. IP addresses are onlywri

*** REPLY SEPARATOR  ***

On 6/29/2001 at 8:24 PM Howard C. Berkowitz wrote:

>>Open Forum might be more up to speed if your free-time consists of working
>>address plans in binary or looking for probability in the pregnant chads of
>>Fortran punch cards :o)
>
>There's something wrong with doing address plans in binary?  Best way 
>to learn, once you realize you don't have to do all 32 bits in 
>binary.  Seriously, when I plan an address structure, and I am 
>documenting it, my primary mode is binary, and then converting to 
>dotted decimal where appropriate.  Now, when I say planning address 
>structures, it often is to say "a /19 here, split into 8 /21 for 
>areas".
>
>Not boasting here, but when you've been doing these for what...15 
>years or so, I can do a fair bit of subnetting in my head. There are 
>tricks, but I wouldn't confuse a beginner with them.
>
>I do miss punch cards, though. Blank punch cards were really great 
>for shopping lists.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10538&t=10427
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



argh! -- darn bookstores [7:10539]

2001-06-30 Thread [EMAIL PROTECTED] (John Nemeth)

A site for which I've recently taken over the networking wants to
multihome in the next two months, and probably connect to a regional
exchange point that is supposed to be setup within a year.  This means
that it's time to bone up on BGP.  So, I wander off to the bookstores.
First place is Half Price Computer Books (always check there first); no
luck, second is the local Chapter's (major chain here in Canada with
very large stores); no luck there, and finally I checked the website of
Bolen's (a very large independent store); no luck there either.  In
general, both Chapter's and Bolen's tend to be very good and have lots
of high end technical books.  But, of course, when I want a real high
end book and want it RIGHT NOW, nobody has it.  Looks like I'm going to
have to order on-line, or possibly check the Vancouver (big city across
the pond {Juan de Fuca strait}) book stores next week.  I just had to
get that off my chest.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10539&t=10539
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Async Line Numbering (2600 & 3600) [7:10532]

2001-06-30 Thread Circusnuts

OK- so this is a slot issue based upon the largest possible # of async lines
per NM.  I guess what confuses me (even though my configs work & I've gotten
over it :o), is that the documentation gave the formula for 16 & 32
intervals (for the 2 different modules I assume).  I have the 16 line module
& it defaulted to the starting # of 33, which would be the 32 + 1 formula.

I was covered on the voice, but needed FE's @ a somewhat reasonable price.
Ya gotta admit, as far as 2511's go, that's a clean box :o)

Thanks Oddy !!!
Phil

- Original Message -
From: "Oddy" 
To: 
Sent: Sunday, July 01, 2001 2:27 AM
Subject: Re: Async Line Numbering (2600 & 3600) [7:10532]


> now imagine that you had the async module in slot 5 on
> a 3662.  (big evil grin)
>
> actually, the logic behind the numbering scheme is
> based on the assumption that you could put in a NM-32
> into any of the slots in a 3600.  therefore, each slot
> has the potential to contain 32 async ports and then
> throw in the aux port for the +1.
>
> that's why i ended up buying your "easy to configure &
> predictably slow" 2511.  :-)  (actually, i needed the
> slot for a voice module.)
>
> oddy
>
> --- Circusnuts  wrote:
> > Had nothing better to do than sell my easy to
> > configure & predictably slow
> > 2511 for a 2621 with an NM-16 async module.  I am @
> > a loss as to logic
> > involved with the async line numbering.  With the
> > 2500 Access-Server, line 1
> > is 2001 (2000 being Telnet protocol).  My 2621 has
> > the NM-16 in slot 1 (as
> > seen in the below output):
> >
> > Firewall#sh diag
> > Slot 1:
> > Async port adapter, 16 ports
> >
> > The given formula is this: interface # = (16 x slot
> > #) + unit # +1
> >
> >  (16x slot # 1) + 1 (physical connection 1) + 1=
> > gives me 18  The router
> > starts the count @ 33 as the first useable line #.
> > So- my range of 16
> > useable
> > lines is 33 thru 48.  My question is:
> >
> > What gives ???
> >
> > What's the logic here ???
> >
> > Thanks !!!
> > Phil
> [EMAIL PROTECTED]
>
>
> __
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10540&t=10532
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Async Line Numbering (2600 & 3600) [7:10532]

2001-06-30 Thread Oddy

it's a REALLY clean box.  :o)  (no dust bunnies hiding
inside for me to catch when i first opened it up) 
i've seen some scary things that came with some of my
other boxes.  some of them were nests for dust
bunnies.

oddy

--- Circusnuts  wrote:
> OK- so this is a slot issue based upon the largest
> possible # of async lines
> per NM.  I guess what confuses me (even though my
> configs work & I've gotten
> over it :o), is that the documentation gave the
> formula for 16 & 32
> intervals (for the 2 different modules I assume).  I
> have the 16 line module
> & it defaulted to the starting # of 33, which would
> be the 32 + 1 formula.
> 
> I was covered on the voice, but needed FE's @ a
> somewhat reasonable price.
> Ya gotta admit, as far as 2511's go, that's a clean
> box :o)
> 
> Thanks Oddy !!!
> Phil
> 
> - Original Message -
> From: "Oddy" 
> To: 
> Sent: Sunday, July 01, 2001 2:27 AM
> Subject: Re: Async Line Numbering (2600 & 3600)
> [7:10532]
> 
> 
> > now imagine that you had the async module in slot
> 5 on
> > a 3662.  (big evil grin)
> >
> > actually, the logic behind the numbering scheme is
> > based on the assumption that you could put in a
> NM-32
> > into any of the slots in a 3600.  therefore, each
> slot
> > has the potential to contain 32 async ports and
> then
> > throw in the aux port for the +1.
> >
> > that's why i ended up buying your "easy to
> configure &
> > predictably slow" 2511.  :-)  (actually, i needed
> the
> > slot for a voice module.)
> >
> > oddy
> >
> > --- Circusnuts  wrote:
> > > Had nothing better to do than sell my easy to
> > > configure & predictably slow
> > > 2511 for a 2621 with an NM-16 async module.  I
> am @
> > > a loss as to logic
> > > involved with the async line numbering.  With
> the
> > > 2500 Access-Server, line 1
> > > is 2001 (2000 being Telnet protocol).  My 2621
> has
> > > the NM-16 in slot 1 (as
> > > seen in the below output):
> > >
> > > Firewall#sh diag
> > > Slot 1:
> > > Async port adapter, 16 ports
> > >
> > > The given formula is this: interface # = (16 x
> slot
> > > #) + unit # +1
> > >
> > >  (16x slot # 1) + 1 (physical connection 1) + 1=
> > > gives me 18  The router
> > > starts the count @ 33 as the first useable line
> #.
> > > So- my range of 16
> > > useable
> > > lines is 33 thru 48.  My question is:
> > >
> > > What gives ???
> > >
> > > What's the logic here ???
> > >
> > > Thanks !!!
> > > Phil
> > [EMAIL PROTECTED]
> >
> >
> > __
> > Do You Yahoo!?
> > Get personalized email addresses from Yahoo! Mail
> > http://personal.mail.yahoo.com/
> [EMAIL PROTECTED]
> >
> 


__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10541&t=10532
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Lab Equipment - Does anyone ACTUALLY know??? [7:10531]

2001-06-30 Thread EA Louie

this is a recurring question, and it's been answered before.  There is one
definitive source -

http://www.cisco.com/warp/public/625/ccie/certifications/routing.html#45

Here's a site that claims that to have a good mockup of the CCIE Lab

http://www.engr.twsu.edu/cisco/ and click on the Facilities link

But, you know what?  It doesn't really matter.  Once you're in a router, you
don't know or care what it is, except that it has a bunch of interfaces on
it.  Know more what the CONCEPTS are and how they transfer into Cisco
commands, because the commands are pretty much universal across the
platforms.  I've been listening to the CCIE Power Session tapes from last
year's Networkers, and they stress that point rather than what gear is
actually there.

-e-

- Original Message -
From: Cisco Nuts 
To: 
Sent: Saturday, June 30, 2001 6:54 PM
Subject: Lab Equipment - Does anyone ACTUALLY know??? [7:10531]


> Hi all,
> I have been trying to figure out for a couple of months as to what
> route/switch models would one actually see on the lab? Does anyone
actually
> know or people like Chuck etc. who have already been there, can you share
> this with us without violating NDA!!
> Mentor has their setup for their ECP classess which I found different from
> the web-site somewhere in NC that someone posted a couple of weeks back!
Who
> knows??
> Can anyone advise.
> Thanks!!
> _
> Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10542&t=10531
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re:Re: Async Line Numbering (2600 & 3600) [7:10532]

2001-06-30 Thread Oddy

it's a REALLY clean box.  :o)  (no dust bunnies hiding
inside for me to catch when i first opened it up)
i've seen some scary things that came with some of my
other boxes.  some of them were nests for dust
bunnies.
 
oddy
 
> --- Circusnuts  wrote:
> > OK- so this is a slot issue based upon the largest
> > possible # of async lines
> > per NM.  I guess what confuses me (even though my
> > configs work & I've gotten
> > over it :o), is that the documentation gave the
> > formula for 16 & 32
> > intervals (for the 2 different modules I assume). 
> I
> > have the 16 line module
> > & it defaulted to the starting # of 33, which
> would
> > be the 32 + 1 formula.
> >
> > I was covered on the voice, but needed FE's @ a
> > somewhat reasonable price.
> > Ya gotta admit, as far as 2511's go, that's a
> clean
> > box :o)
> >
> > Thanks Oddy !!!
> > Phil
> >
> > - Original Message -
> > From: "Oddy"
> > To:
> > Sent: Sunday, July 01, 2001 2:27 AM
> > Subject: Re: Async Line Numbering (2600 & 3600)
> > [7:10532]
> >
> >
> > > now imagine that you had the async module in
> slot
> > 5 on
> > > a 3662.  (big evil grin)
> > >
> > > actually, the logic behind the numbering scheme
> is
> > > based on the assumption that you could put in a
> > NM-32
> > > into any of the slots in a 3600.  therefore,
> each
> > slot
> > > has the potential to contain 32 async ports and
> > then
> > > throw in the aux port for the +1.
> > >
> > > that's why i ended up buying your "easy to
> > configure &
> > > predictably slow" 2511.  :-)  (actually, i
> needed
> > the
> > > slot for a voice module.)
> > >
> > > oddy
> > >
> > > --- Circusnuts  wrote:
> > > > Had nothing better to do than sell my easy to
> > > > configure & predictably slow
> > > > 2511 for a 2621 with an NM-16 async module.  I
> > am @
> > > > a loss as to logic
> > > > involved with the async line numbering.  With
> > the
> > > > 2500 Access-Server, line 1
> > > > is 2001 (2000 being Telnet protocol).  My 2621
> > has
> > > > the NM-16 in slot 1 (as
> > > > seen in the below output):
> > > >
> > > > Firewall#sh diag
> > > > Slot 1:
> > > > Async port adapter, 16 ports
> > > >
> > > > The given formula is this: interface # = (16 x
> > slot
> > > > #) + unit # +1
> > > >
> > > >  (16x slot # 1) + 1 (physical connection 1) +
> 1=
> > > > gives me 18  The router
> > > > starts the count @ 33 as the first useable
> line
> > #.
> > > > So- my range of 16
> > > > useable
> > > > lines is 33 thru 48.  My question is:
> > > >
> > > > What gives ???
> > > >
> > > > What's the logic here ???
> > > >
> > > > Thanks !!!
> > > > Phil
> > > [EMAIL PROTECTED]
> > >
> > >
> > >
> __
> > > Do You Yahoo!?
> > > Get personalized email addresses from Yahoo!
> Mail
> > > http://personal.mail.yahoo.com/
> > [EMAIL PROTECTED]
> > >
> >
> 
> 
> __
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/
> [EMAIL PROTECTED]
> 
> 


__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10543&t=10532
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Off Topic - CAT5 vs. CAT5e ( or CAT5E "Ehannced" ) [7:10544]

2001-06-30 Thread Bac Nguyen

Hi all,
Do you know where I can find more information about CAT5, CAT5E, and CAT5e ?
Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10544&t=10544
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]