Re: Switch to Switch Connectivity [7:11104]

2001-07-06 Thread Reinhold Fischer

Stan,

are you seeing the other switch via cdp from both sides of the link ?
I had a similar issue where i could see the other switch via cdp what
fooled me into thinking that there is bidirectional communication possible.
On the other side i saw no cdp neigbor. The link light was fine on both
sides.
After inspecting the cable and replacing a bad connector it worked fine.

HTH

Reinhold

On Thu, 5 Jul 2001, Rossetti, Stan wrote:

> Hello All,
>
> I am trying to connect two 2916 switches together using 100BaseFX.  I am
> currently trying to do this across an underground fiber between two
> buildings.  At one time I moved the switches to my office and connected
them
> together using a short piece of test fiber and they worked (i could ping
> >from one device to the next).  I have since moved the switches back using
> the underground fiber between buildings and they don't work (i can't ping
> form one switch to the other).  I am getting a good link light on both ends
> and I can see the other switch via cdp but it doesn't show the ip
address???
> There are no other devices connected to the switches at this time and the
ip
> addresses assigned to the switches are in the same subnet and in vlan 1.
>
>
> Thanks
>
> Stan Rossetti
>
>
> NASA - PriSMS
> Advanced Technology Group
> IP Phone:  (256) 961-7097
> Voice:  (256) 544-5031
> Email:  [EMAIL PROTECTED]
> Beeper:  544-1183 pin 0112
>
> CCDA, CCNA, CCSE




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11160&t=11104
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco ACL's [7:11114]

2001-07-06 Thread [EMAIL PROTECTED]

Cisco IOS Access Lists has just been published

"--Central to securing routers and networks, access lists are a critical
aspect of the Cisco Internet Operating System, or IOS. Unlike other Cisco
router titles, this book focuses on practical instructions for setting
router-access policies rather than on interfaces and routing-protocol
settings. Cisco IOS Access Lists covers Intranets, including an
introduction and a reference for network engineers who are implementing
routing policies within Intranet networking; firewalls, including
descriptions of common packet-filtering tasks; and the Internet, including
a guide to using route maps. Sample Chapter 5, Debugging Access Lists, is
available online."

See http://sysadmin.oreilly.com/

I've only just started reading it but I can highly reccomend it.

Dom Stocqueler







   

   
"Caballero,
Eddie"   To:
[EMAIL PROTECTED]
Subject: Cisco ACL's
[7:4]
Sent
by:
   
nobody@groups
   
tudy.com
   

   

   
05/07/2001
   
21:37
   
Please
respond
to
   
"Caballero,
   
Eddie"
   

   





Hi,

   Anyone know of a good book or source of information on Cisco
Access-lists.  Is there any sort of book with a plethora of examples and
information on the subject?

Thanks,

Eddie Caballero




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11161&t=4
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VOFR /VOATM in Lab? [7:11162]

2001-07-06 Thread Faisal Athar

Hi Guys,

Just a quick check..

Any thing in R&S LAB from VOFR and VOATM 

Please recommend some good resources to cover ATM & IPSEC.


Thanks.

Faisal.

Faisal Athar
On the Way to CCIE..





#The  oNLY People who never succeded are#
### Only those who never Try 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11162&t=11162
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VOFR /VOATM in Lab? [7:11163]

2001-07-06 Thread Jon Carmichael

For VoIP, I would recommend Cisco Press, "Cisco Voice over Frame Relay, ATM
and IP" by Steve McQuerry, Kelly McGraw, Stephen Foy.

For ATM, I would use Cisco Press, "Cisco ATM Solutions" by Galina Diker
Pildush, Chapter 9 is the most you need to know for the lab test.

For IPSEC, I would use McGraw Hill, Implementing Cisco VPNs, Chapter 6 is
the most you need to know for IPSec.

JONC





-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Faisal Athar
Sent: Friday, July 06, 2001 10:58 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: VOFR /VOATM in Lab?


Hi Guys,

Just a quick check..

Any thing in R&S LAB from VOFR and VOATM 

Please recommend some good resources to cover ATM & IPSEC.


Thanks.

Faisal.

Faisal Athar
On the Way to CCIE..





#The  oNLY People who never succeded are#
### Only those who never Try 
**Please read:http://www.groupstudy.com/list/posting.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11163&t=11163
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-06 Thread Elmer Deloso

Tony,
Seriously speaking, i thought at this point you'd be the hunted and not the
hunter when it comes to jobs. Or has teh CCIE market become "saturated"?

Elmer

-Original Message-
From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 06, 2001 12:30 AM
To: [EMAIL PROTECTED]
Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]


Boy,
That CCIE verification tool is buggy.  I put my name in 4 times before It
verified me.  Tried different capitalization methods untill it finially
worked.  Then it worked on all capitalization methods !!!  Go figure

I'm looking for a job right now and I hope that a prospective employeer
doesn't use this thing !!

Tony Medeiros
CCIE #6172 (damnit )

- Original Message -
From: John Hardman 
To: 
Sent: Thursday, July 05, 2001 3:50 PM
Subject: FYI Check out the CCIE "whats new" page. [7:11128]


> Hi All
>
> There are a couple of new items on the whats new page of the CCO CCIE
site.
> Interesting...
> http://www.cisco.com/warp/public/625/ccie/ccie_program/whatsnew.html
>
> --
> John Hardman CCNP MCSE




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11164&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Unable to ping Multipoint address [7:7364]

2001-07-06 Thread Eric Lam

That is because there is not mapping between L2 and L3 address.  Try to do a
static map for your interface PVC (DLCI in F/R case) and IP, then you can
ping it.

hope this help

Eric
""Ali Amir""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi,
> When we configure ATM subinterface as multipoint as shown below, you
cannot
> ping this address from the same router. But you can ping it only if you
are
> atleast one hop away from the router where you have define this multipoint
> address. Can someone tell me why ?
>
> Exmaple
> --
> interface ATM1/1/0.200 multipoint
> ip address 2.2.2.1 255.255.255.0
> no ip directed-broadcast
>  pvc 2/200
>  protocol ip 2.2.2.2 broadcast
>
> For example you cannot ping 2.2.2.1 from this router, but if you would go
> atleast one hop away from it, you can ping.
>
> Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11165&t=7364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Switch to Switch Connectivity [7:11104]

2001-07-06 Thread Rossetti, Stan

Yes, I can see the cdp neigh from one switch, but not the oher.  I have
called the cable guys to come have a look at the cable, but they can't look
at it until this afternoon or Monday.


Thanks

Stan Rossetti


NASA - PriSMS
Advanced Technology Group
IP Phone:  (256) 961-7097
Voice:  (256) 544-5031
Email:  [EMAIL PROTECTED]
Beeper:  544-1183 pin 0112

CCDA, CCNA, CCSE


-Original Message-
From: Reinhold Fischer [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 06, 2001 2:47 AM
To: [EMAIL PROTECTED]
Subject: Re: Switch to Switch Connectivity [7:11104]


Stan,

are you seeing the other switch via cdp from both sides of the link ?
I had a similar issue where i could see the other switch via cdp what
fooled me into thinking that there is bidirectional communication possible.
On the other side i saw no cdp neigbor. The link light was fine on both
sides.
After inspecting the cable and replacing a bad connector it worked fine.

HTH

Reinhold

On Thu, 5 Jul 2001, Rossetti, Stan wrote:

> Hello All,
>
> I am trying to connect two 2916 switches together using 100BaseFX.  I am
> currently trying to do this across an underground fiber between two
> buildings.  At one time I moved the switches to my office and connected
them
> together using a short piece of test fiber and they worked (i could ping
> >from one device to the next).  I have since moved the switches back using
> the underground fiber between buildings and they don't work (i can't ping
> form one switch to the other).  I am getting a good link light on both
ends
> and I can see the other switch via cdp but it doesn't show the ip
address???
> There are no other devices connected to the switches at this time and the
ip
> addresses assigned to the switches are in the same subnet and in vlan 1.
>
>
> Thanks
>
> Stan Rossetti
>
>
> NASA - PriSMS
> Advanced Technology Group
> IP Phone:  (256) 961-7097
> Voice:  (256) 544-5031
> Email:  [EMAIL PROTECTED]
> Beeper:  544-1183 pin 0112
>
> CCDA, CCNA, CCSE




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11166&t=11104
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



source-route bridging help [7:11167]

2001-07-06 Thread Burnham, Chris

To all you Token Ring & SNA gurus out there. Do you have to enable spanning
tree on a token ring network, or will the RIF field guarantee loop avoidance
as a bridge will not forward the frame over the same ring twice.
If so when is spanning tree required on a token ring SNA or netbios
network

Chris Burnham,
Systems Engineer,
Delphis Consulting Plc.
Tel:   +(44) 020 7916 0200
Mob: +(44) 07799403576
[EMAIL PROTECTED]


This e-mail and any files transmitted with it are intended solely for the
addressee and are confidential. They may also be legally privileged.
Copyright in them is reserved by Delphis Consulting PLC ["Delphis"] and they
must not be disclosed to, or used by, anyone other than the addressee. If
you have received this e-mail and any accompanying files in error, you may
not copy, publish or use them in any way and you should delete them from
your system and notify us immediately.E-mails are not secure.  Delphis does
not accept responsibility for changes to e-mails that occur after they have
been sent.  Any opinions expressed in this e-mail may be personal to the
author and may not necessarily reflect the opinions of Delphis.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11167&t=11167
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-06 Thread Circusnuts

Uh Ohhh- let's not start a rant here... "CCIE's out of work, is it worth
it."

:o)
Phil

- Original Message -
From: "Elmer Deloso" 
To: 
Sent: Friday, July 06, 2001 8:24 AM
Subject: RE: FYI Check out the CCIE "whats new" page. [7:11128]


> Tony,
> Seriously speaking, i thought at this point you'd be the hunted and not
the
> hunter when it comes to jobs. Or has teh CCIE market become "saturated"?
>
> Elmer
>
> -Original Message-
> From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
> Sent: Friday, July 06, 2001 12:30 AM
> To: [EMAIL PROTECTED]
> Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
>
>
> Boy,
> That CCIE verification tool is buggy.  I put my name in 4 times before It
> verified me.  Tried different capitalization methods untill it finially
> worked.  Then it worked on all capitalization methods !!!  Go figure
>
> I'm looking for a job right now and I hope that a prospective employeer
> doesn't use this thing !!
>
> Tony Medeiros
> CCIE #6172 (damnit )
>
> - Original Message -
> From: John Hardman
> To:
> Sent: Thursday, July 05, 2001 3:50 PM
> Subject: FYI Check out the CCIE "whats new" page. [7:11128]
>
>
> > Hi All
> >
> > There are a couple of new items on the whats new page of the CCO CCIE
> site.
> > Interesting...
> > http://www.cisco.com/warp/public/625/ccie/ccie_program/whatsnew.html
> >
> > --
> > John Hardman CCNP MCSE




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11169&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Freebie cisco lab time [7:11170]

2001-07-06 Thread NY50TT

For a limited time, a cisco lab is being made availible for free for users
on this mailing list.

it's set up as
unit1.den.co.bbnow.net port 2023

For a diagram of what's there look at the ebay auction # 1253115777

Have fun, and let me know what you think.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11170&t=11170
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Selling CHEAP..Networkers Registration for Chicago (7/16/01 [7:11171]

2001-07-06 Thread Riisen, Robert (1128)

If anyone is interested in going to Cisco Networkers (Chicago 7/16-7/20),
please let me know immediately.  I'm sure there are companies out there
sending a bunch of engineers...I can help provide a discount.  Unfortunately
I can not go. I have 2 passes that I can sell at substantially less than the
early registration.  Please let me know ASAP as the conference is less than
2 weeks away.

Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11171&t=11171
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Passed BCRAN [7:11122]

2001-07-06 Thread Buri, Heather H

Congrats George!  Don't dwell on it too much.  What I usually do is review
the areas I scored lower in to see where I went wrong, then start moving
forward to the next exam.  :-)  So which one is next for you?

Heather Buri   
CSC Technology Services - Houston

Phone:  (713)-961-8592
Fax:(713)-961-8249
Mobile: 
Alpha Page: 

Mailing:1360 Post Oak Blvd
  Suite 500
  Houston, TX 77056



-Original Message-
From: George Yiannibas [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 05, 2001 4:44 PM
To: [EMAIL PROTECTED]
Subject: Passed BCRAN [7:11122]


Passed today. A very near pass I must add. This has been the hardest test
for me so far. Please don't get me wrong I  am not trying to intimidate
anyone. Maybe I was unlucky and I got the hard test but let me say just
this: don't bother showing up at the test center unless you are VERY well
prepared.
I got a couple of poorly worded questions and one that was not in the exam
objectives.
I thought I was going to do better by I was wrong. Anyway a pass is pass no
matter the score (two down two to go).My method of preparing: CCNP Remote
Access Exam Certification Guide by Cisco Press and for testing Boson
exams.As always thank you group for your support.

George Yiannibas
MCSE CCNA
EOM 

NOTICE - This message contains information intended only for the use of the
addressee named above.  It may also be confidential and/or privileged.  If
you are not the intended recipient of this message you are hereby notified
that you must not disseminate, copy or take any action in reliance on it.
If you have received this message in error please notify [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11172&t=11122
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



giving boot after hostname [7:11173]

2001-07-06 Thread Quddus Khan

my host name is test but its giving me boot in such a way how can i remove
it ?
my router is cisco 2522
test(boot)#


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11173&t=11173
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Capacity guidelines [7:11174]

2001-07-06 Thread Barronton, Ken

Hello All,
I am looking for some resources on guidelines on network capacity. 

Example: I have x# of users and x# of servers, some running 10mbps some
running 100mbps how to calculate when I am oversubscribed. I know I would
need a sniffer to get very accurate on actual usage...any good guidelines?

What is a good figure to oversubscribe frame-relay circuits? 2-1, 4-1?

I have completed the CCNP and CCDP, however, I don't recall ever seeing
guidelines other than stuff like ethernet not over 40% token ring not over
70%, router CPU not over 70% etc...

Any links or resources greatly appreciated.

Thanks,
Ken




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11174&t=11174
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: giving boot after hostname [7:11173]

2001-07-06 Thread Kelly D Griffin

It is in the wrong config setting.

Try this:

conf t
!
config 0x2102
end
!
relo

Do not save the config when it prompts you to and confirm the reload.  This
should clear your problem.

Kelly D Griffin, CCNA, CCDA
Network Engineer
Kg2 Network Design
877.418.4025
http://www.kg2.com
- Original Message -
From: "Quddus Khan" 
To: 
Sent: Friday, July 06, 2001 9:52 AM
Subject: giving boot after hostname [7:11173]


> my host name is test but its giving me boot in such a way how can i remove
> it ?
> my router is cisco 2522
> test(boot)#
> ___
> The 1st Class Mail Server 3.0 has lots of cool new features.
> Best of all, it's still free!  To download the latest version,
> go to http://www.1cis.com/download/1cismail.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11175&t=11173
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Freebie cisco lab time [7:11170]

2001-07-06 Thread Mark Odette II

login and pw??

- Original Message -
From: "NY50TT" 
To: 
Sent: Friday, July 06, 2001 9:18 AM
Subject: Freebie cisco lab time [7:11170]


> For a limited time, a cisco lab is being made availible for free for users
> on this mailing list.
>
> it's set up as
> unit1.den.co.bbnow.net port 2023
>
> For a diagram of what's there look at the ebay auction # 1253115777
>
> Have fun, and let me know what you think.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11176&t=11170
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT - of minor interest - OSI and wireless [7:11177]

2001-07-06 Thread Chuck Larrieu

ran across this while reading up on wireless standards

http://boole.computer.org/itpro/homepage/May_Jun01/stall/04.htm#fig3

keep that OSI model in mind!

Chuck




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11177&t=11177
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: giving boot after hostname [7:11173]

2001-07-06 Thread Kane, Christopher A.

How is the router acting? Can you actually route? Looks like your IOS could
be corrupted. That's typically the problem when you see (boot). Don't know
if anyone else has seen (boot) at any other time. What messages are
displayed when the router starts up?

Chris


-Original Message-
From: Quddus Khan [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 06, 2001 10:53 AM
To: [EMAIL PROTECTED]
Subject: giving boot after hostname [7:11173]


my host name is test but its giving me boot in such a way how can i remove
it ?
my router is cisco 2522
test(boot)#




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11179&t=11173
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: source-route bridging help [7:11167]

2001-07-06 Thread Peter Slow

enabling spanning tree will reduce your explorer traffic and free up your
network.
-Peter slow

-Original Message-
From: Burnham, Chris [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 06, 2001 9:50 AM
To: [EMAIL PROTECTED]
Subject: source-route bridging help [7:11167]


To all you Token Ring & SNA gurus out there. Do you have to enable spanning
tree on a token ring network, or will the RIF field guarantee loop avoidance
as a bridge will not forward the frame over the same ring twice.
If so when is spanning tree required on a token ring SNA or netbios
network

Chris Burnham,
Systems Engineer,
Delphis Consulting Plc.
Tel:   +(44) 020 7916 0200
Mob: +(44) 07799403576
[EMAIL PROTECTED]


This e-mail and any files transmitted with it are intended solely for the
addressee and are confidential. They may also be legally privileged.
Copyright in them is reserved by Delphis Consulting PLC ["Delphis"] and they
must not be disclosed to, or used by, anyone other than the addressee. If
you have received this e-mail and any accompanying files in error, you may
not copy, publish or use them in any way and you should delete them from
your system and notify us immediately.E-mails are not secure.  Delphis does
not accept responsibility for changes to e-mails that occur after they have
been sent.  Any opinions expressed in this e-mail may be personal to the
author and may not necessarily reflect the opinions of Delphis.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11178&t=11167
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: giving boot after hostname [7:11173]

2001-07-06 Thread Chuck Larrieu

I have a terminal server that comes up in boot mode once in a while, for no
apparent reason. I issue the "i" command, it comes up in the proper mode,
and I get down to business. No rhyme or reason that I can figure. Register
settings are ok.

yeah - maybe a corrupt IOS or a bad chip, although I would expect the
problem consistently if that were the case. or just one of those things.

Chuck

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Kane, Christopher A.
Sent: Friday, July 06, 2001 8:58 AM
To: [EMAIL PROTECTED]
Subject: RE: giving boot after hostname [7:11173]


How is the router acting? Can you actually route? Looks like your IOS could
be corrupted. That's typically the problem when you see (boot). Don't know
if anyone else has seen (boot) at any other time. What messages are
displayed when the router starts up?

Chris


-Original Message-
From: Quddus Khan [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 06, 2001 10:53 AM
To: [EMAIL PROTECTED]
Subject: giving boot after hostname [7:11173]


my host name is test but its giving me boot in such a way how can i remove
it ?
my router is cisco 2522
test(boot)#




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11180&t=11173
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Catalyst 3900 Power Supply ??? [7:11181]

2001-07-06 Thread .

Can anyone tell me where I can get a Cat 3900 Power supply ?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11181&t=11181
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco 2513 Router for Sale on Ebay [7:11182]

2001-07-06 Thread [EMAIL PROTECTED]

Item # 1252123459 

Cisco 2513 1 token ring, 1 AUI (10 Base-T MAU included) and 2 serial
interfaces and power cord. 16 meg DRAM and 16 meg Flash.  Unit works and
running 11.2 As is.

Come and check it out.





__
Get your own FREE, personal Netscape Webmail account today at
http://webmail.netscape.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11182&t=11182
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Freebie cisco lab time [7:11170]

2001-07-06 Thread NY50TT

cisc0 that is cisco with a zero.
enable password is r0uter with a 0 on the terminal server.

""Mark Odette II""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> login and pw??
>
> - Original Message -
> From: "NY50TT"
> To:
> Sent: Friday, July 06, 2001 9:18 AM
> Subject: Freebie cisco lab time [7:11170]
>
>
> > For a limited time, a cisco lab is being made availible for free for
users
> > on this mailing list.
> >
> > it's set up as
> > unit1.den.co.bbnow.net port 2023
> >
> > For a diagram of what's there look at the ebay auction # 1253115777
> >
> > Have fun, and let me know what you think.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11183&t=11170
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



SNA in the lab [7:11184]

2001-07-06 Thread Jim Franklin

What do I need to simulate an SNA over the wan environment in the lab?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11184&t=11184
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-06 Thread Tony Medeiros

Geeze,
I have only been without a job 2 weeks and I have been doing independent
contract work like crazy during that time.  It takes time to interview for
jobs, especially in my pay range.  Company's don't just look at your number
and hire you on the spot,  At least not any company I want to work for.

To answer Elmers question: Yes, the market is very different now.
Especially in the VAR area.  Small VARs are struggling to make 2 or 3 points
on hardware sales.  "Grey" market hardware from auctions and bankruptcies is
everywhere.  Large resellers like ATT and SBC (sorry Chuck) are drop
shipping at cost, it seems, just to make a little margin on deployment.

Another factor that seems to be affecting CCIE employment around the bay
area is the layoff at Cisco.  Believe it or not, Cisco laid off quit a few
of them recently, and they are all looking for jobs.  I recently interviewed
at a job where they specifically want a CCIE and they had 10 interviews...
10   That was unheard of a year ago!!   Maybe it's just like this in the
Silicon Valley, I don't know.  All I know is the market is very soft right
now around here.  I know I'll find a job though.  I just can't be picky.

So is the CCIE market saturated ?  I don't know, maybe.  Does the high tech
economy suck right now ?  Hell yes !!  However, ebb and flow is the way
capitalism works.  Things are certain to get better.

So you who are going for your high end certs, keep studying !!  You will be
in a better position when things get better.

Tony M.
#6172


- Original Message -
From: Circusnuts 
To: 
Sent: Friday, July 06, 2001 7:13 AM
Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]


> Uh Ohhh- let's not start a rant here... "CCIE's out of work, is it worth
> it."
>
> :o)
> Phil
>
> - Original Message -
> From: "Elmer Deloso"
> To:
> Sent: Friday, July 06, 2001 8:24 AM
> Subject: RE: FYI Check out the CCIE "whats new" page. [7:11128]
>
>
> > Tony,
> > Seriously speaking, i thought at this point you'd be the hunted and not
> the
> > hunter when it comes to jobs. Or has teh CCIE market become "saturated"?
> >
> > Elmer
> >
> > -Original Message-
> > From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, July 06, 2001 12:30 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
> >
> >
> > Boy,
> > That CCIE verification tool is buggy.  I put my name in 4 times before
It
> > verified me.  Tried different capitalization methods untill it finially
> > worked.  Then it worked on all capitalization methods !!!  Go figure
> >
> > I'm looking for a job right now and I hope that a prospective employeer
> > doesn't use this thing !!
> >
> > Tony Medeiros
> > CCIE #6172 (damnit )




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11185&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPSec question [7:10965]

2001-07-06 Thread Casey Fahey

I don't have your config, HW version, etc., so this could be off, but it 
sounds like you are on a PIX, 5.1x or later.  Drop me a mail if you are 
something else.

The issue you are running into is common and that is why on PIX IOS there is 
a NAT 0 (don't NAT) command.

So, let's say you have access list 100 for your crypto list, you then do a 
NAT 0 for the same list (i.e. do not NAT that which you intend to tunnel).  
This would look like

nat (inside) 0 access-list 100

And that should solve your problem.

HTH,

Casey Fahey CCNP, MCSE

>From: "Vyacheslav Luschinsky" 
>Reply-To: "Vyacheslav Luschinsky" 
>To: [EMAIL PROTECTED]
>Subject: Re: IPSec question [7:10965]
>Date: Fri, 6 Jul 2001 02:12:24 -0400
>
>Thank you for your reply.
>The problem was solved but I have another:)
>I have some static NAT translations and when I try to connect or ping host
>trough IPSec tunnel using its privet address NAT occurs and packet is no
>longer can go through tunnel. Cisco site has the article about this but
>there is only configuration with no explanation how loopback can help and
>what that config does.
>http://www.cisco.com/warp/public/707/static.html
_
Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11187&t=10965
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Freebie cisco lab time [7:11170]

2001-07-06 Thread NY50TT

ok the enable secret is router without a 0 and the password is router with a
0 whatever that means.
""NY50TT""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> cisc0 that is cisco with a zero.
> enable password is r0uter with a 0 on the terminal server.
>
> ""Mark Odette II""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > login and pw??
> >
> > - Original Message -
> > From: "NY50TT"
> > To:
> > Sent: Friday, July 06, 2001 9:18 AM
> > Subject: Freebie cisco lab time [7:11170]
> >
> >
> > > For a limited time, a cisco lab is being made availible for free for
> users
> > > on this mailing list.
> > >
> > > it's set up as
> > > unit1.den.co.bbnow.net port 2023
> > >
> > > For a diagram of what's there look at the ebay auction # 1253115777
> > >
> > > Have fun, and let me know what you think.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11186&t=11170
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



4908-L3 [7:11188]

2001-07-06 Thread max hill

All,
Has anyone configured a 4908-L3 using VTP?
I have read mixed informatin concerning this switch.
Does this support VTP and if it does, what modes such
as client, server, or transparent? Also, will this
support pruning?

I have found where it supports 802.1Q and under an
older IOS will not support VTP, is there a newer IOS
which supports VTP ver 1 or 2?

I need this switch to at least pass VTP adver. so my
3500 switches behind/attached to it can learn about
vlans etc from/created on my 5500 core (4908 attached
to the 5500).

Thanks for the help!

[EMAIL PROTECTED]

__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11188&t=11188
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IBM laptops and CCO CD [7:11189]

2001-07-06 Thread techo lady

All,
I have 3 IBM laptops (new and old) which will not read
the Cisco CCO documentation CD using either IE or
Netscape and/or Win98, 2000 o/s etc

I am in the process of contacting IBM to see if this
is a bug. But I am just wondering has anyone else had
any problems reading the Cisco CD off of the IBM
laptops or other vendor laptops. We will be ordering
more laptops and dont want to run into this problem
again.

If you have run into this problem, how did you fix it!

Thanks for the help!
[EMAIL PROTECTED]

__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11189&t=11189
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-06 Thread Kelly D Griffin

I, too, lost my full time gig last week and I am finding it very hard to
find another position for similar pay.  It seems as though this round of
layoffs is like the one in the 80's.  They are laying off and then hiring
later for a lot less pay.

Anyone else see this?

Kelly D Griffin, CCNA, CCDA
Network Engineer
Kg2 Network Design
877.418.4025
http://www.kg2.com
- Original Message -
From: "Tony Medeiros" 
To: 
Sent: Friday, July 06, 2001 12:32 PM
Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]


> Geeze,
> I have only been without a job 2 weeks and I have been doing independent
> contract work like crazy during that time.  It takes time to interview for
> jobs, especially in my pay range.  Company's don't just look at your
number
> and hire you on the spot,  At least not any company I want to work for.
>
> To answer Elmers question: Yes, the market is very different now.
> Especially in the VAR area.  Small VARs are struggling to make 2 or 3
points
> on hardware sales.  "Grey" market hardware from auctions and bankruptcies
is
> everywhere.  Large resellers like ATT and SBC (sorry Chuck) are drop
> shipping at cost, it seems, just to make a little margin on deployment.
>
> Another factor that seems to be affecting CCIE employment around the bay
> area is the layoff at Cisco.  Believe it or not, Cisco laid off quit a few
> of them recently, and they are all looking for jobs.  I recently
interviewed
> at a job where they specifically want a CCIE and they had 10 interviews...
> 10   That was unheard of a year ago!!   Maybe it's just like this in
the
> Silicon Valley, I don't know.  All I know is the market is very soft right
> now around here.  I know I'll find a job though.  I just can't be picky.
>
> So is the CCIE market saturated ?  I don't know, maybe.  Does the high
tech
> economy suck right now ?  Hell yes !!  However, ebb and flow is the way
> capitalism works.  Things are certain to get better.
>
> So you who are going for your high end certs, keep studying !!  You will
be
> in a better position when things get better.
>
> Tony M.
> #6172
>
>
> - Original Message -
> From: Circusnuts
> To:
> Sent: Friday, July 06, 2001 7:13 AM
> Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
>
>
> > Uh Ohhh- let's not start a rant here... "CCIE's out of work, is it worth
> > it."
> >
> > :o)
> > Phil
> >
> > - Original Message -
> > From: "Elmer Deloso"
> > To:
> > Sent: Friday, July 06, 2001 8:24 AM
> > Subject: RE: FYI Check out the CCIE "whats new" page. [7:11128]
> >
> >
> > > Tony,
> > > Seriously speaking, i thought at this point you'd be the hunted and
not
> > the
> > > hunter when it comes to jobs. Or has teh CCIE market become
"saturated"?
> > >
> > > Elmer
> > >
> > > -Original Message-
> > > From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
> > > Sent: Friday, July 06, 2001 12:30 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
> > >
> > >
> > > Boy,
> > > That CCIE verification tool is buggy.  I put my name in 4 times before
> It
> > > verified me.  Tried different capitalization methods untill it
finially
> > > worked.  Then it worked on all capitalization methods !!!  Go figure
> > >
> > > I'm looking for a job right now and I hope that a prospective
employeer
> > > doesn't use this thing !!
> > >
> > > Tony Medeiros
> > > CCIE #6172 (damnit )
> ___
> The 1st Class Mail Server 3.0 has lots of cool new features.
> Best of all, it's still free!  To download the latest version,
> go to http://www.1cis.com/download/1cismail.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11190&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: IBM laptops and CCO CD [7:11189]

2001-07-06 Thread David Toalson

I could not get the May 2001 CD to load on my NT 4.0 desktop.  After
installing the program and launching the Documentation CD IE loaded with
"About:Blank" on the Address line.  Ralph with Cisco TAC gave me the "fix"
as shown below which worked for my workstation.  He said he had seen this
with other OS's as well.


Please try this work around on the machines you are having trouble with. Be
advised, this only applies to machines that have IE5 as the default browser.
This has fixed the "About:Blank" problem in a number of cases.

Here is the workaround: 
- edit the installed search.ini (c:\CISCO\search.ini) 
- change the line 'Browser=c:\program files\internet explorer\iexplore.exe'
to 'Browser=msie' 
- ensure that search.exe is not running 
- go ahead and start the application

David Toalson
816-701-4142

> --
> From: techo lady[SMTP:[EMAIL PROTECTED]]
> Reply To: techo lady
> Sent: Friday, July 06, 2001 12:54 PM
> To:   [EMAIL PROTECTED]
> Subject:  IBM laptops and CCO CD [7:11189]
> 
> All,
> I have 3 IBM laptops (new and old) which will not read
> the Cisco CCO documentation CD using either IE or
> Netscape and/or Win98, 2000 o/s etc
> 
> I am in the process of contacting IBM to see if this
> is a bug. But I am just wondering has anyone else had
> any problems reading the Cisco CD off of the IBM
> laptops or other vendor laptops. We will be ordering
> more laptops and dont want to run into this problem
> again.
> 
> If you have run into this problem, how did you fix it!
> 
> Thanks for the help!
> [EMAIL PROTECTED]
> 
> __
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11192&t=11189
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



advertising IP blocks [7:11191]

2001-07-06 Thread Daniel Wilson

We are looking into multi-homing our network and running BGP on our router.

I was told by some of you before that some ISPs won't advertise a block of
IP's smaller than /22 and many won't do any smaller than /24.  That leads to
this question.

Are our ISPs the only ones that need to advertise our block?  Or does
everybody out there need to advertise the block?

Thanks!

--
Daniel Wilson
CompuSoft Solutions and The Worthwhile Company http://www.worthwhile.com
Your complete e-business solution partners.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11191&t=11191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-06 Thread Circusnuts

I agree & I've seen a lot of people I worked with that had too much pride to
accept less.  I'd have to admit in my short few years I've always been paid
top dollar (even when I didn't warrant it).  I would still recommend IT to
anyone, based on opportunity & income potential alone.  Anyone who has been
around for a couple of years has seen some of the crazy hiring practices &
it surely had to level-off.  In early 99' I saw guys hired out of my ICRC
classes with a starting salary of 50k.  That's not realistic by today's
standards.

Don't lose hope, your services are still very needed !!!  Just brush
yourself off & keep interviewing.
Phil

- Original Message -
From: "Kelly D Griffin" 
To: 
Sent: Friday, July 06, 2001 1:58 PM
Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]


> I, too, lost my full time gig last week and I am finding it very hard to
> find another position for similar pay.  It seems as though this round of
> layoffs is like the one in the 80's.  They are laying off and then hiring
> later for a lot less pay.
>
> Anyone else see this?
>
> Kelly D Griffin, CCNA, CCDA
> Network Engineer
> Kg2 Network Design
> 877.418.4025
> http://www.kg2.com
> - Original Message -
> From: "Tony Medeiros"
> To:
> Sent: Friday, July 06, 2001 12:32 PM
> Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
>
>
> > Geeze,
> > I have only been without a job 2 weeks and I have been doing independent
> > contract work like crazy during that time.  It takes time to interview
for
> > jobs, especially in my pay range.  Company's don't just look at your
> number
> > and hire you on the spot,  At least not any company I want to work for.
> >
> > To answer Elmers question: Yes, the market is very different now.
> > Especially in the VAR area.  Small VARs are struggling to make 2 or 3
> points
> > on hardware sales.  "Grey" market hardware from auctions and
bankruptcies
> is
> > everywhere.  Large resellers like ATT and SBC (sorry Chuck) are drop
> > shipping at cost, it seems, just to make a little margin on deployment.
> >
> > Another factor that seems to be affecting CCIE employment around the bay
> > area is the layoff at Cisco.  Believe it or not, Cisco laid off quit a
few
> > of them recently, and they are all looking for jobs.  I recently
> interviewed
> > at a job where they specifically want a CCIE and they had 10
interviews...
> > 10   That was unheard of a year ago!!   Maybe it's just like this in
> the
> > Silicon Valley, I don't know.  All I know is the market is very soft
right
> > now around here.  I know I'll find a job though.  I just can't be picky.
> >
> > So is the CCIE market saturated ?  I don't know, maybe.  Does the high
> tech
> > economy suck right now ?  Hell yes !!  However, ebb and flow is the way
> > capitalism works.  Things are certain to get better.
> >
> > So you who are going for your high end certs, keep studying !!  You will
> be
> > in a better position when things get better.
> >
> > Tony M.
> > #6172
> >
> >
> > - Original Message -
> > From: Circusnuts
> > To:
> > Sent: Friday, July 06, 2001 7:13 AM
> > Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
> >
> >
> > > Uh Ohhh- let's not start a rant here... "CCIE's out of work, is it
worth
> > > it."
> > >
> > > :o)
> > > Phil
> > >
> > > - Original Message -
> > > From: "Elmer Deloso"
> > > To:
> > > Sent: Friday, July 06, 2001 8:24 AM
> > > Subject: RE: FYI Check out the CCIE "whats new" page. [7:11128]
> > >
> > >
> > > > Tony,
> > > > Seriously speaking, i thought at this point you'd be the hunted and
> not
> > > the
> > > > hunter when it comes to jobs. Or has teh CCIE market become
> "saturated"?
> > > >
> > > > Elmer
> > > >
> > > > -Original Message-
> > > > From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
> > > > Sent: Friday, July 06, 2001 12:30 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
> > > >
> > > >
> > > > Boy,
> > > > That CCIE verification tool is buggy.  I put my name in 4 times
before
> > It
> > > > verified me.  Tried different capitalization methods untill it
> finially
> > > > worked.  Then it worked on all capitalization methods !!!  Go figure
> > > >
> > > > I'm looking for a job right now and I hope that a prospective
> employeer
> > > > doesn't use this thing !!
> > > >
> > > > Tony Medeiros
> > > > CCIE #6172 (damnit )
> > ___
> > The 1st Class Mail Server 3.0 has lots of cool new features.
> > Best of all, it's still free!  To download the latest version,
> > go to http://www.1cis.com/download/1cismail.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11193&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: SNA in the lab [7:11184]

2001-07-06 Thread John Neiberger

About a month ago I posted some configs that will let you test your RSRB
and DLSw configs without outboard gear.  You can do this by configuring
your routers as APPN nodes.  If done correctly, you know your configs
are correct if your APPN sessions come up.

If that suits your purposes, a quick search in the archives should
provide the necessary configuration info.

HTH,
John

>>> "Jim Franklin"  7/6/01 11:23:14 AM >>>
What do I need to simulate an SNA over the wan environment in the lab?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11194&t=11184
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: advertising IP blocks [7:11191]

2001-07-06 Thread John Neiberger

Keep in mind what is actually occurring when using BGP.  You are
advertising prefixes from your AS into your provider's AS.  They in turn
either include your specific prefix in their announcements to other
providers, or they aggregate your smaller prefix into larger
advertisements.  It is at this stage that you need to worry about what
other providers are doing as far as filtering.

If your provider is advertising your specific prefix, a /24 for
instance, but the other companies won't accept anything less than a /22,
then you're up a creek.  We are advertising a /24 to two separate
providers and I haven't seen any reachability problems from anywhere in
the world.  As far as I'm concerned, if we can be reached by either path
from just about anywhere, especially in the US, then I'm happy.

I've been following your posts and I'm curious about your motivation
for adding a second provider.  This adds a measure of complexity that
might not be necessary, depending on your goals.  Can your current
provider give you a circuit that follows a separate path then your first
circuit?  If so, that would eliminate a couple of issues.

First, you wouldn't even necessarily need to run BGP, although I would
prefer to do so.  But instead of getting full routes, you could accept
defaults-only from your provider and advertise your addresses on both
links.

Second, you wouldn't worry about getting an entire /24--or
larger--block of addresses.  In this scenario, your provider will
aggregate your prefix into their larger announcements, but when traffic
destined for your network arrives in their network, internally they'll
see two available paths.  This has the additional benefit of not wasting
registered addresses since you probably don't really need an entire
/24.

Third,  you won't have to apply for your own AS number from Arin.  If
you run BGP over two links to the same provider, they will either let
you use their ASN or let you use a private ASN that will only be seen by
their network.

Would  a solution like this work for you?

Regards,
John

--
John Neiberger
Firstbank Data Corporation
12345 W. Colfax Ave.
Lakewood, CO 80215
(303) 235-1093


>>> "Daniel Wilson"  7/6/01 12:23:46 PM >>>
We are looking into multi-homing our network and running BGP on our
router.

I was told by some of you before that some ISPs won't advertise a block
of
IP's smaller than /22 and many won't do any smaller than /24.  That
leads to
this question.

Are our ISPs the only ones that need to advertise our block?  Or does
everybody out there need to advertise the block?

Thanks!

--
Daniel Wilson
CompuSoft Solutions and The Worthwhile Company
http://www.worthwhile.com 
Your complete e-business solution partners.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11195&t=11191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-06 Thread hal9001

You got it here in good old blighty (England - not new) Telcos and there
ex-employees are a bit like Saddam Hussein, without the benefits.  If you
can cross train quick (Nortel NNCSS and NNCDS) or get an MCSE 2000 then you
are more likely to work.

I beginning to wonder whether something should be done inside the list
(especially for USA members who I think will be hurt the worst) to help here
as I strongly suspect we are in for a longish downturn!

Sorry Paul just thinking aloud.

Karl

- Original Message -
From: "Kelly D Griffin" 
To: 
Sent: Friday, July 06, 2001 6:58 PM
Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]


> I, too, lost my full time gig last week and I am finding it very hard to
> find another position for similar pay.  It seems as though this round of
> layoffs is like the one in the 80's.  They are laying off and then hiring
> later for a lot less pay.
>
> Anyone else see this?
>
> Kelly D Griffin, CCNA, CCDA
> Network Engineer
> Kg2 Network Design
> 877.418.4025
> http://www.kg2.com
> - Original Message -
> From: "Tony Medeiros"
> To:
> Sent: Friday, July 06, 2001 12:32 PM
> Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
>
>
> > Geeze,
> > I have only been without a job 2 weeks and I have been doing independent
> > contract work like crazy during that time.  It takes time to interview
for
> > jobs, especially in my pay range.  Company's don't just look at your
> number
> > and hire you on the spot,  At least not any company I want to work for.
> >
> > To answer Elmers question: Yes, the market is very different now.
> > Especially in the VAR area.  Small VARs are struggling to make 2 or 3
> points
> > on hardware sales.  "Grey" market hardware from auctions and
bankruptcies
> is
> > everywhere.  Large resellers like ATT and SBC (sorry Chuck) are drop
> > shipping at cost, it seems, just to make a little margin on deployment.
> >
> > Another factor that seems to be affecting CCIE employment around the bay
> > area is the layoff at Cisco.  Believe it or not, Cisco laid off quit a
few
> > of them recently, and they are all looking for jobs.  I recently
> interviewed
> > at a job where they specifically want a CCIE and they had 10
interviews...
> > 10   That was unheard of a year ago!!   Maybe it's just like this in
> the
> > Silicon Valley, I don't know.  All I know is the market is very soft
right
> > now around here.  I know I'll find a job though.  I just can't be picky.
> >
> > So is the CCIE market saturated ?  I don't know, maybe.  Does the high
> tech
> > economy suck right now ?  Hell yes !!  However, ebb and flow is the way
> > capitalism works.  Things are certain to get better.
> >
> > So you who are going for your high end certs, keep studying !!  You will
> be
> > in a better position when things get better.
> >
> > Tony M.
> > #6172
> >
> >
> > - Original Message -
> > From: Circusnuts
> > To:
> > Sent: Friday, July 06, 2001 7:13 AM
> > Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
> >
> >
> > > Uh Ohhh- let's not start a rant here... "CCIE's out of work, is it
worth
> > > it."
> > >
> > > :o)
> > > Phil
> > >
> > > - Original Message -
> > > From: "Elmer Deloso"
> > > To:
> > > Sent: Friday, July 06, 2001 8:24 AM
> > > Subject: RE: FYI Check out the CCIE "whats new" page. [7:11128]
> > >
> > >
> > > > Tony,
> > > > Seriously speaking, i thought at this point you'd be the hunted and
> not
> > > the
> > > > hunter when it comes to jobs. Or has teh CCIE market become
> "saturated"?
> > > >
> > > > Elmer
> > > >
> > > > -Original Message-
> > > > From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
> > > > Sent: Friday, July 06, 2001 12:30 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
> > > >
> > > >
> > > > Boy,
> > > > That CCIE verification tool is buggy.  I put my name in 4 times
before
> > It
> > > > verified me.  Tried different capitalization methods untill it
> finially
> > > > worked.  Then it worked on all capitalization methods !!!  Go figure
> > > >
> > > > I'm looking for a job right now and I hope that a prospective
> employeer
> > > > doesn't use this thing !!
> > > >
> > > > Tony Medeiros
> > > > CCIE #6172 (damnit )
> > ___
> > The 1st Class Mail Server 3.0 has lots of cool new features.
> > Best of all, it's still free!  To download the latest version,
> > go to http://www.1cis.com/download/1cismail.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11197&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IBM laptops and CCO CD [7:11189]

2001-07-06 Thread hal9001

Please look into/search the Study Group Archives this is a known problem
with Windows 2000 (although I did think 98 was OK).  There is a fix for 2000
I think your kit/hardware is probably not the problem!

Karl
- Original Message -
From: "techo lady" 
To: 
Sent: Friday, July 06, 2001 6:54 PM
Subject: IBM laptops and CCO CD [7:11189]


> All,
> I have 3 IBM laptops (new and old) which will not read
> the Cisco CCO documentation CD using either IE or
> Netscape and/or Win98, 2000 o/s etc
>
> I am in the process of contacting IBM to see if this
> is a bug. But I am just wondering has anyone else had
> any problems reading the Cisco CD off of the IBM
> laptops or other vendor laptops. We will be ordering
> more laptops and dont want to run into this problem
> again.
>
> If you have run into this problem, how did you fix it!
>
> Thanks for the help!
> [EMAIL PROTECTED]
>
> __
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11198&t=11189
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: SNA in the lab [7:11184]

2001-07-06 Thread John Neiberger

I don't think there is a good way to simulate token ring, exactly, but
you could set up RSRB between several routers and configure the end
points as APPN nodes.  That would simulate an SRB environment without
the token ring interfaces.

Here is the link to the configs:

http://www.groupstudy.com/archives/cisco/200106/msg01146.html 

Regards,
John

>>>  7/6/01 1:51:34 PM >>>
I can't find those configs? Can you help me out?
Thanks
- Original Message -
From: "John Neiberger" 
To: 
Sent: Friday, July 06, 2001 1:05 PM
Subject: Re: SNA in the lab [7:11184]


> About a month ago I posted some configs that will let you test your
RSRB
> and DLSw configs without outboard gear.  You can do this by
configuring
> your routers as APPN nodes.  If done correctly, you know your
configs
> are correct if your APPN sessions come up.
>
> If that suits your purposes, a quick search in the archives should
> provide the necessary configuration info.
>
> HTH,
> John
>
> >>> "Jim Franklin"  7/6/01 11:23:14 AM >>>
> What do I need to simulate an SNA over the wan environment in the
lab?
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11199&t=11184
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Oops! APPN configs, was SNA in the lab [7:11184]

2001-07-06 Thread John Neiberger

Oops!  I sent the wrong link.  That one shows the non-working configs. 
Here is the link to the corrected--and working--configs:

http://www.groupstudy.com/archives/cisco/200106/msg01186.html 

John

>>>  7/6/01 1:49:38 PM >>>
I don't have any token ring equipment. Is there any way to simulate
token
ring?
- Original Message -
From: "John Neiberger" 
To: 
Sent: Friday, July 06, 2001 1:05 PM
Subject: Re: SNA in the lab [7:11184]


> About a month ago I posted some configs that will let you test your
RSRB
> and DLSw configs without outboard gear.  You can do this by
configuring
> your routers as APPN nodes.  If done correctly, you know your
configs
> are correct if your APPN sessions come up.
>
> If that suits your purposes, a quick search in the archives should
> provide the necessary configuration info.
>
> HTH,
> John
>
> >>> "Jim Franklin"  7/6/01 11:23:14 AM >>>
> What do I need to simulate an SNA over the wan environment in the
lab?
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11200&t=11184
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Disconnection and data stuck problem [7:11201]

2001-07-06 Thread Quddus Khan

I am using AS5300 with E1 pri i am facing frequently disconnection and
sutcking data from my clients. plz help me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11201&t=11201
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Modifying files in flash [7:11202]

2001-07-06 Thread Lupi, Guy

Ok, this question may be a little bit strange but here goes.  Lets say that
you have a file in flash: called OSPF.  It is a file you saved of a
configuration.  Now I know that you can tftp the image to somewhere and then
modify it and load it back up, and I know you can use the more command to
view the file.  Is there a way to modify the file from the router without
making it active?  I want to modify the file and then copy it into the
running config without leaving the router.  No reason, just wondering if
anyone knows of a way.  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11202&t=11202
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Freebie cisco lab time [7:11170]

2001-07-06 Thread NY50TT

I opened the firewall to allow outbound NTP queries with stateful
inspection. the time functions ought to work now.

""NY50TT""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> For a limited time, a cisco lab is being made availible for free for users
> on this mailing list.
>
> it's set up as
> unit1.den.co.bbnow.net port 2023
>
> For a diagram of what's there look at the ebay auction # 1253115777
>
> Have fun, and let me know what you think.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11203&t=11170
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



breezecom+cisco [7:11204]

2001-07-06 Thread Axilleas Likotsetas

Hi guys,

i'm from greece and i work in a telecommunication company
we're working with breezecom wireless products
if anyone of you has some experiance in this products
please answer to me
i have some questions to ask


thanks,
axilleas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11204&t=11204
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Specifying username/password on Catalyst 5000/5500 [7:11205]

2001-07-06 Thread Gareth Hinton

Thanks Karen,

Delayed response - I've been away all week.

Gaz


""Karen E Young""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I did some research on this about a year ago for a project at work.
>
> As of version 5.4(3) of the catalyst OS code, local Usernames and
Passwords
> were not supported. Sorry guys, you can't do it.
>
> HTH,
> Karen
>
> *** REPLY SEPARATOR  ***
>
> On 6/30/2001 at 4:56 AM Gareth Hinton wrote:
>
> >I asked a similar question a few days ago referring to the Cat4000 (set
> >based). No one came back with a suitable answer, but it was hidden within
a
> >load of other questions so maybe everyone had fallen asleep by that
point.
> >You probably already know you can use TACACS/Radius if they're available.
> >I haven't been able to find a way to set different local user names and
> >passwords yet.
> >
> >My question was with refernce to the Ciscoview package on the Cat4000's
> >(also on the 5000's) which asks for username and password, but username
has
> >to be left blank at the moment.
> >
> >Anybody got any ideas.
> >
> >I'll go off and have another dig on CCO
> >
> >Thanks,
> >
> >Gaz
> >
> >""tazman""  wrote in message
> >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> >> Is there a way to setup individual usernames/passwords on a set based
> >> switch. I know the commands to setup the username/password on a IOS
based
> >> box but is there a option to perform the same thing a a set based box
like
> >> the Catalyst 5000/5500??? Any help is greatly appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11205&t=11205
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Modifying files in flash [7:11202]

2001-07-06 Thread McCallum, Robert

I don't know of anyway but would be very interested to find out if there is.

-Original Message-
From: Lupi, Guy [mailto:[EMAIL PROTECTED]]
Sent: 06 July 2001 21:51
To: [EMAIL PROTECTED]
Subject: Modifying files in flash [7:11202]


Ok, this question may be a little bit strange but here goes.  Lets say that
you have a file in flash: called OSPF.  It is a file you saved of a
configuration.  Now I know that you can tftp the image to somewhere and then
modify it and load it back up, and I know you can use the more command to
view the file.  Is there a way to modify the file from the router without
making it active?  I want to modify the file and then copy it into the
running config without leaving the router.  No reason, just wondering if
anyone knows of a way.  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11206&t=11202
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: advertising IP blocks [7:11191]

2001-07-06 Thread Daniel Wilson

Thank you for the response, John.

Accessibility from just about anywhere, especially in the US, keeps me happy
too.  But our ISPs have a tendency to mess up routing table entries or
otherwise shut us off.  We have outgrown a single T1, and want to add some
redundancy.

I need a solution that will mean that a *single* mistake outside of our
control doesn't shut us down.  There's an ISP in town that's willing to run
BGP with us -- and they want us to get both lines from them.  But would that
put us back into the position of being vulnerable to a single mistake at
their location?  If *both* our ISPs mess up at the same time -- well, that's
exceptionally bad luck.  I realize we have to accept some risk for things
that are so unlikely.  But yesterday morning, one ISP was down for 45
minutes, taking down most of our sites.  This afternoon the other one is
down, taking down one of our newest clients.

You're right we don't quite need a /24 ... /25 or probably even /26 would
work.  And the ISP in town wants to set us up on one of their private ASN's.
They're also trying to talk us out of running BGP, though they'll do it if
we insist.

If an ISP -- either our current one or another one -- can provide us
circuits that follow different paths, would that give us the level of
redundancy we're looking for?

Thanks again!

--
Daniel Wilson

""John Neiberger""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Keep in mind what is actually occurring when using BGP.  You are
> advertising prefixes from your AS into your provider's AS.  They in turn
> either include your specific prefix in their announcements to other
> providers, or they aggregate your smaller prefix into larger
> advertisements.  It is at this stage that you need to worry about what
> other providers are doing as far as filtering.
>
> If your provider is advertising your specific prefix, a /24 for
> instance, but the other companies won't accept anything less than a /22,
> then you're up a creek.  We are advertising a /24 to two separate
> providers and I haven't seen any reachability problems from anywhere in
> the world.  As far as I'm concerned, if we can be reached by either path
> from just about anywhere, especially in the US, then I'm happy.
>
> I've been following your posts and I'm curious about your motivation
> for adding a second provider.  This adds a measure of complexity that
> might not be necessary, depending on your goals.  Can your current
> provider give you a circuit that follows a separate path then your first
> circuit?  If so, that would eliminate a couple of issues.
>
> First, you wouldn't even necessarily need to run BGP, although I would
> prefer to do so.  But instead of getting full routes, you could accept
> defaults-only from your provider and advertise your addresses on both
> links.
>
> Second, you wouldn't worry about getting an entire /24--or
> larger--block of addresses.  In this scenario, your provider will
> aggregate your prefix into their larger announcements, but when traffic
> destined for your network arrives in their network, internally they'll
> see two available paths.  This has the additional benefit of not wasting
> registered addresses since you probably don't really need an entire
> /24.
>
> Third,  you won't have to apply for your own AS number from Arin.  If
> you run BGP over two links to the same provider, they will either let
> you use their ASN or let you use a private ASN that will only be seen by
> their network.
>
> Would  a solution like this work for you?
>
> Regards,
> John
>
> --
> John Neiberger
> Firstbank Data Corporation
> 12345 W. Colfax Ave.
> Lakewood, CO 80215
> (303) 235-1093
>
>
> >>> "Daniel Wilson"  7/6/01 12:23:46 PM >>>
> We are looking into multi-homing our network and running BGP on our
> router.
>
> I was told by some of you before that some ISPs won't advertise a block
> of
> IP's smaller than /22 and many won't do any smaller than /24.  That
> leads to
> this question.
>
> Are our ISPs the only ones that need to advertise our block?  Or does
> everybody out there need to advertise the block?
>
> Thanks!
>
> --
> Daniel Wilson
> CompuSoft Solutions and The Worthwhile Company
> http://www.worthwhile.com
> Your complete e-business solution partners.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11207&t=11191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



One of the Best True & Veifiable Stories I've heard for Years [7:11208]

2001-07-06 Thread hal9001

Well it is absolutely miserable at the moment but I think I have something
that will leave even Natasha and her Friday Funnies in convulsions.

Today at Cardiff Crown Court, Wales, United Kingdom a young Hacker was
sentenced for breaking into Internet Shopping Sites and harvesting their
customers data including their Credit Card Numbers.

He then posted all the numbers on his own web site and tried to point out
the security issues.  Now whatever you may think of the mis-guided nature of
the hack the results were more than spectacular.

You know even more than I do that if he had contacted these sites direct
then very little would have happened and alot of covering up would have
taken place.  So like the young man he was he was also naive and so it is
alleged now mentally ill, convenient, no.

The investigation involved English/Welsh Police, the Home Office (State
Dept.) very likely MI5 & MI6 to tap his phones, and the FBI, very likely the
NSA (Shhhsh) also.

The lad was sentenced to a three year community order and to seek help for
his mental illness.  What it is to you mean being one step ahead of the pace
then.  However the Judge it would appear said that at least he had a real
sense of humour.

APPARENTLY HE HAD USED BILL GATES OWN CREDIT CARD TO MAKE SURE THAT BILL GOT
A READY SUPPLY OF...VIAGRA!

Please feel free to verify this via UK Sources, BBC, Sky etc.

Off Topic - I think not.

Karl


IMPORTANT NOTICE:
This message is intended solely for the use of the Individual or
organisation to whom it is addressed. It may contain privileged or
confidential information.  If you have received this message in error,
please notify the originator immediately.

If you are not the intended recipient, you should not use, copy, alter, or
disclose the contents of this message.  All information or opinions
expressed in this message and/or any attachments are those of the author and
are not necessarily those of Karl or Pauline HUTCHINSON.
Karl & Pauline HUTCHINSON accepts no responsibility
for loss or damage arising from its use, including damage from virus.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11208&t=11208
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: advertising IP blocks [7:11191]

2001-07-06 Thread John Neiberger

It's important to think about what we consider to be failures in our ISP
and then ask the question: "What are we protecting ourselves from?"  In
our case, more often than not an outage is caused by downtime on our
directly connected router or a failure on the physical link itself,
between the CO and our building.

In both of those cases, redundant links to different locations of the
same provider would give us a reasonable level of assurance.  Unless
there is an ISP-wide failure of some sort, you shouldn't have much of a
problem.  These are known to occur from time to time but I don't think
they're very common, especially if you choose a reputable provider. 
We're have two Sprint circuits at the moment and are tentatively
planning for a third.  I've been very happy with them so far.

I'd imagine that any large ISP like Sprint, Cable & Wireless, AT&T,
UUnet, or Global Crossing would be able to provide this type of service
for a reasonable fee.  This would eliminate the hassle of trying to get
a /24 *and* an AS number from ARIN, and it most likely would resolve the
issues you have.

John

>>> "Daniel Wilson"  7/6/01 3:16:59 PM >>>
Thank you for the response, John.

Accessibility from just about anywhere, especially in the US, keeps me
happy
too.  But our ISPs have a tendency to mess up routing table entries or
otherwise shut us off.  We have outgrown a single T1, and want to add
some
redundancy.

I need a solution that will mean that a *single* mistake outside of
our
control doesn't shut us down.  There's an ISP in town that's willing to
run
BGP with us -- and they want us to get both lines from them.  But would
that
put us back into the position of being vulnerable to a single mistake
at
their location?  If *both* our ISPs mess up at the same time -- well,
that's
exceptionally bad luck.  I realize we have to accept some risk for
things
that are so unlikely.  But yesterday morning, one ISP was down for 45
minutes, taking down most of our sites.  This afternoon the other one
is
down, taking down one of our newest clients.

You're right we don't quite need a /24 ... /25 or probably even /26
would
work.  And the ISP in town wants to set us up on one of their private
ASN's.
They're also trying to talk us out of running BGP, though they'll do it
if
we insist.

If an ISP -- either our current one or another one -- can provide us
circuits that follow different paths, would that give us the level of
redundancy we're looking for?

Thanks again!

--
Daniel Wilson

""John Neiberger""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Keep in mind what is actually occurring when using BGP.  You are
> advertising prefixes from your AS into your provider's AS.  They in
turn
> either include your specific prefix in their announcements to other
> providers, or they aggregate your smaller prefix into larger
> advertisements.  It is at this stage that you need to worry about
what
> other providers are doing as far as filtering.
>
> If your provider is advertising your specific prefix, a /24 for
> instance, but the other companies won't accept anything less than a
/22,
> then you're up a creek.  We are advertising a /24 to two separate
> providers and I haven't seen any reachability problems from anywhere
in
> the world.  As far as I'm concerned, if we can be reached by either
path
> from just about anywhere, especially in the US, then I'm happy.
>
> I've been following your posts and I'm curious about your motivation
> for adding a second provider.  This adds a measure of complexity
that
> might not be necessary, depending on your goals.  Can your current
> provider give you a circuit that follows a separate path then your
first
> circuit?  If so, that would eliminate a couple of issues.
>
> First, you wouldn't even necessarily need to run BGP, although I
would
> prefer to do so.  But instead of getting full routes, you could
accept
> defaults-only from your provider and advertise your addresses on
both
> links.
>
> Second, you wouldn't worry about getting an entire /24--or
> larger--block of addresses.  In this scenario, your provider will
> aggregate your prefix into their larger announcements, but when
traffic
> destined for your network arrives in their network, internally
they'll
> see two available paths.  This has the additional benefit of not
wasting
> registered addresses since you probably don't really need an entire
> /24.
>
> Third,  you won't have to apply for your own AS number from Arin. 
If
> you run BGP over two links to the same provider, they will either
let
> you use their ASN or let you use a private ASN that will only be seen
by
> their network.
>
> Would  a solution like this work for you?
>
> Regards,
> John
>
> --
> John Neiberger
> Firstbank Data Corporation
> 12345 W. Colfax Ave.
> Lakewood, CO 80215
> (303) 235-1093
>
>
> >>> "Daniel Wilson"  7/6/01 12:23:46 PM >>>
> We are looking into multi-homing our network and running BGP o

Re: advertising IP blocks [7:11191]

2001-07-06 Thread Richard Chang

Daniel,

Unless you are going to get your own IPs from ARIN, you don't have to worry
about getting anything smaller than /24. Just like John said, if you are
using IPs assigned from ISPs, they should do the aggregation job for you to
make sure your IPs get global routability.

If you could get two circuits from these two ISPs(make sure that they don't
use the same carrier if you could...) and run some kind of dynamic routing
protocols with these two ISPs. That would definitely give you the level of
redundancy you are looking for.

The only problem I can think of is that you might need to make quite a few
changes in your network as you would be getting two blocks of IPs from these
two ISPs. e.g. load-balancing.

Richard

"Daniel Wilson"  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Thank you for the response, John.
>
> Accessibility from just about anywhere, especially in the US, keeps me
happy
> too.  But our ISPs have a tendency to mess up routing table entries or
> otherwise shut us off.  We have outgrown a single T1, and want to add some
> redundancy.
>
> I need a solution that will mean that a *single* mistake outside of our
> control doesn't shut us down.  There's an ISP in town that's willing to
run
> BGP with us -- and they want us to get both lines from them.  But would
that
> put us back into the position of being vulnerable to a single mistake at
> their location?  If *both* our ISPs mess up at the same time -- well,
that's
> exceptionally bad luck.  I realize we have to accept some risk for things
> that are so unlikely.  But yesterday morning, one ISP was down for 45
> minutes, taking down most of our sites.  This afternoon the other one is
> down, taking down one of our newest clients.
>
> You're right we don't quite need a /24 ... /25 or probably even /26 would
> work.  And the ISP in town wants to set us up on one of their private
ASN's.
> They're also trying to talk us out of running BGP, though they'll do it if
> we insist.
>
> If an ISP -- either our current one or another one -- can provide us
> circuits that follow different paths, would that give us the level of
> redundancy we're looking for?
>
> Thanks again!
>
> --
> Daniel Wilson
>
> ""John Neiberger""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Keep in mind what is actually occurring when using BGP.  You are
> > advertising prefixes from your AS into your provider's AS.  They in turn
> > either include your specific prefix in their announcements to other
> > providers, or they aggregate your smaller prefix into larger
> > advertisements.  It is at this stage that you need to worry about what
> > other providers are doing as far as filtering.
> >
> > If your provider is advertising your specific prefix, a /24 for
> > instance, but the other companies won't accept anything less than a /22,
> > then you're up a creek.  We are advertising a /24 to two separate
> > providers and I haven't seen any reachability problems from anywhere in
> > the world.  As far as I'm concerned, if we can be reached by either path
> > from just about anywhere, especially in the US, then I'm happy.
> >
> > I've been following your posts and I'm curious about your motivation
> > for adding a second provider.  This adds a measure of complexity that
> > might not be necessary, depending on your goals.  Can your current
> > provider give you a circuit that follows a separate path then your first
> > circuit?  If so, that would eliminate a couple of issues.
> >
> > First, you wouldn't even necessarily need to run BGP, although I would
> > prefer to do so.  But instead of getting full routes, you could accept
> > defaults-only from your provider and advertise your addresses on both
> > links.
> >
> > Second, you wouldn't worry about getting an entire /24--or
> > larger--block of addresses.  In this scenario, your provider will
> > aggregate your prefix into their larger announcements, but when traffic
> > destined for your network arrives in their network, internally they'll
> > see two available paths.  This has the additional benefit of not wasting
> > registered addresses since you probably don't really need an entire
> > /24.
> >
> > Third,  you won't have to apply for your own AS number from Arin.  If
> > you run BGP over two links to the same provider, they will either let
> > you use their ASN or let you use a private ASN that will only be seen by
> > their network.
> >
> > Would  a solution like this work for you?
> >
> > Regards,
> > John
> >
> > --
> > John Neiberger
> > Firstbank Data Corporation
> > 12345 W. Colfax Ave.
> > Lakewood, CO 80215
> > (303) 235-1093
> >
> >
> > >>> "Daniel Wilson"  7/6/01 12:23:46 PM >>>
> > We are looking into multi-homing our network and running BGP on our
> > router.
> >
> > I was told by some of you before that some ISPs won't advertise a block
> > of
> > IP's smaller than /22 and many won't do any smaller than /24.  T

Re: advertising IP blocks [7:11191]

2001-07-06 Thread John Neiberger

If you go with two ISPs, aggregation by the ISP you received the
addresses from might cause some traffic-related issues you need to be
aware of.  Let's say you have a /24 from Bill's ISP and you then add an
additional connection to Ted's ISP.  You are running BGP with both and
advertise your /24 from your own AS into Bill's AS and Ted's AS, both of
whom will announce your prefix to the rest of the world.

Now, let's say that Bill's ISP decides to filter your /24 and simply
announce an aggregate.  Ted, meanwhile, is advertising the more-specific
/24.  Now, some user out in Dave's ISP tries to reach your network.  The
router at that ISP looks into its routing table for your prefix and
finds a /24 available through Ted and a less-specific route through
Bill.  The router will choose the more-specific prefix, forcing all
return traffic to your network to come through your second ISP.

So, unless this is acceptable to you, make sure you choose two ISPs
that will advertise your specific prefix.

John

>>> "Richard Chang"  7/6/01 3:57:54 PM >>>
Daniel,

Unless you are going to get your own IPs from ARIN, you don't have to
worry
about getting anything smaller than /24. Just like John said, if you
are
using IPs assigned from ISPs, they should do the aggregation job for
you to
make sure your IPs get global routability.

If you could get two circuits from these two ISPs(make sure that they
don't
use the same carrier if you could...) and run some kind of dynamic
routing
protocols with these two ISPs. That would definitely give you the level
of
redundancy you are looking for.

The only problem I can think of is that you might need to make quite a
few
changes in your network as you would be getting two blocks of IPs from
these
two ISPs. e.g. load-balancing.

Richard

"Daniel Wilson"  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Thank you for the response, John.
>
> Accessibility from just about anywhere, especially in the US, keeps
me
happy
> too.  But our ISPs have a tendency to mess up routing table entries
or
> otherwise shut us off.  We have outgrown a single T1, and want to add
some
> redundancy.
>
> I need a solution that will mean that a *single* mistake outside of
our
> control doesn't shut us down.  There's an ISP in town that's willing
to
run
> BGP with us -- and they want us to get both lines from them.  But
would
that
> put us back into the position of being vulnerable to a single mistake
at
> their location?  If *both* our ISPs mess up at the same time --
well,
that's
> exceptionally bad luck.  I realize we have to accept some risk for
things
> that are so unlikely.  But yesterday morning, one ISP was down for
45
> minutes, taking down most of our sites.  This afternoon the other one
is
> down, taking down one of our newest clients.
>
> You're right we don't quite need a /24 ... /25 or probably even /26
would
> work.  And the ISP in town wants to set us up on one of their
private
ASN's.
> They're also trying to talk us out of running BGP, though they'll do
it if
> we insist.
>
> If an ISP -- either our current one or another one -- can provide us
> circuits that follow different paths, would that give us the level
of
> redundancy we're looking for?
>
> Thanks again!
>
> --
> Daniel Wilson
>
> ""John Neiberger""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Keep in mind what is actually occurring when using BGP.  You are
> > advertising prefixes from your AS into your provider's AS.  They in
turn
> > either include your specific prefix in their announcements to
other
> > providers, or they aggregate your smaller prefix into larger
> > advertisements.  It is at this stage that you need to worry about
what
> > other providers are doing as far as filtering.
> >
> > If your provider is advertising your specific prefix, a /24 for
> > instance, but the other companies won't accept anything less than a
/22,
> > then you're up a creek.  We are advertising a /24 to two separate
> > providers and I haven't seen any reachability problems from
anywhere in
> > the world.  As far as I'm concerned, if we can be reached by either
path
> > from just about anywhere, especially in the US, then I'm happy.
> >
> > I've been following your posts and I'm curious about your
motivation
> > for adding a second provider.  This adds a measure of complexity
that
> > might not be necessary, depending on your goals.  Can your current
> > provider give you a circuit that follows a separate path then your
first
> > circuit?  If so, that would eliminate a couple of issues.
> >
> > First, you wouldn't even necessarily need to run BGP, although I
would
> > prefer to do so.  But instead of getting full routes, you could
accept
> > defaults-only from your provider and advertise your addresses on
both
> > links.
> >
> > Second, you wouldn't worry about getting an entire /24--or
> > larger--block of addresses.  In this scenario, your provider will
> > aggregate your prefix into their larger announcements, 

Re: advertising IP blocks [7:11191]

2001-07-06 Thread David Raistrick

On Fri, 6 Jul 2001, John Neiberger wrote:

> It's important to think about what we consider to be failures in our ISP
> and then ask the question: "What are we protecting ourselves from?"  In
> our case, more often than not an outage is caused by downtime on our
> directly connected router or a failure on the physical link itself,
> between the CO and our building.

Mmm.

I'm prone to disagree.  Most of the outages with the last ISP i ran, as
far as our backbone was concerned, were major outages with our
upstream.  Bellsouth.net of all wonderful things.

Between local hardware upgrades lasting three days (at the local bs.n pop,
NOT telco issues), instead of two hours, or various flapping interfaces
further upstream, to complete loss of connectivity to their upstream. (uu)

And this was with two circuits in two seperate lata. both ds3 frames.

A small dialup operation that we picked up as a bs.n line and a sprintlink
line.  Both had fairly regular failure patterns upstream as well.

And going back further to another small ISP, we had a t1 to uu...and
again, other then having /two/ 2525's die cold turkey, the only outages
were upstream of us at at uu's end.

Sure, there are a reasonable number of local problems that hit us all, but
I still put more faith on my local side the I do the upstreams.


my few worthless thoughts..

..david

---
david raistrick (deep in the south georgia woods)
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11212&t=11191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: advertising IP blocks [7:11191]

2001-07-06 Thread John Neiberger

Certainly, your mileage may vary.  That's why I prefaced that statement
with "in our case".  

Since we've implemented our dual-homing strategy we haven't had any
major issues that did not involve either the telco and our local loop or
the next upstream router, usually on Verio's side.  The Sprint side has
been exceptionally painless.

All in all it doesn't sound like you've had much luck.  Or, perhaps
I've just been lucky so far.  We have another internet access T-1 from
Qwest that's been very stable, strangely enough.  I wouldn't expect that
from Qwest.  ;-)

>>> David Raistrick  7/6/01 4:17:41 PM >>>
On Fri, 6 Jul 2001, John Neiberger wrote:

> It's important to think about what we consider to be failures in our
ISP
> and then ask the question: "What are we protecting ourselves from?" 
In
> our case, more often than not an outage is caused by downtime on our
> directly connected router or a failure on the physical link itself,
> between the CO and our building.

Mmm.

I'm prone to disagree.  Most of the outages with the last ISP i ran,
as
far as our backbone was concerned, were major outages with our
upstream.  Bellsouth.net of all wonderful things.

Between local hardware upgrades lasting three days (at the local bs.n
pop,
NOT telco issues), instead of two hours, or various flapping
interfaces
further upstream, to complete loss of connectivity to their upstream.
(uu)

And this was with two circuits in two seperate lata. both ds3 frames.

A small dialup operation that we picked up as a bs.n line and a
sprintlink
line.  Both had fairly regular failure patterns upstream as well.

And going back further to another small ISP, we had a t1 to uu...and
again, other then having /two/ 2525's die cold turkey, the only
outages
were upstream of us at at uu's end.

Sure, there are a reasonable number of local problems that hit us all,
but
I still put more faith on my local side the I do the upstreams.


my few worthless thoughts..

..david

---
david raistrick (deep in the south georgia woods)
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11213&t=11191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Some wireless Links [7:11214]

2001-07-06 Thread Chuck Larrieu

I've been researching wireless lan and wan for various clients. as a result
of my research I've come across the following links I thought might be of
interest.

outdoor antenna calculator tool

http://www.cisco.com/warp/public/cc/pd/witc/ao340ap/prodlit/obrc_in.xls

good overview:

http://computer.org/itpro/homepage/May_Jun01/stall/

cisco also has some worthwhile training available to partners and resellers.
check with your Cisco account manager to get more info. I can say after
going through a couple of the presentations, and even accounting for the
marking BS, I walked away with a much better idea about how this works. I
feel a lot more confident that I can talk intelligently about wireless.
Still a lot more to learn.

Chuck




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11214&t=11214
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Fridays Funnies [7:11215]

2001-07-06 Thread Natasha

A woman bought a new BMW and was out on the interstate for a
nice evening drive. The top was down, the breeze was blowing through
her hair and he decided to open her up. As the needle
jumped up to 80 mph, he suddenly saw flashing red and blue lights
behind her. "There's no way they can catch a Bimmer," she thought
to herself and opened her up further. The needle hit 90, 100 Then
the reality of the situation hit her. "What am I doing?" she thought and
pulled over. 

The cop came up to her, took her license without a word and
examined it and the car. "It's been a long day, this is the end of my
shift and it's Friday the 13th. I don't feel like more paperwork, so if
you
can give me an excuse for your driving that I haven't heard before, you
can go." 

The Woman thinks for a second and says, "Last week my boyfriend ran off
with
a cop. I was afraid you were trying to give him back!" 

"Have a nice weekend," said the officer. 
-
Hotter than Hades

A thermodynamics professor had written a take home exam
for his graduate students. It had one question:

"Is Hell exothermic (gives off heat) or endothermic
(absorbs heat)? Support your answer with a proof."

Most of the students wrote proofs of their beliefs
using Boyle's Law (gas cools off when it expands and
heats up when it is compressed) or some variant.

One student, however, wrote the following: First, we
need to know how the mass of Hell is changing in time.
So, we need to know the rate that souls are moving into
Hell and the rate they are leaving. I think that we can
safely assume that once a soul gets to Hell, it will
not leave. Therefore, no souls are leaving. As for how
many souls are entering Hell, let's look at the
different religions that exist in the world today.

Some of these religions state that if you are not a
member of their religion, you will go to Hell. Since
there are more than one of these religions and since
people do not belong to more than one religion, we can
project that all people and all souls go to Hell. With
birth and death rates as they are, we can expect the
number of souls in Hell to increase exponentially.

Now, we look at the rate of change of the volume in
Hell because Boyle's Law states that in order for the
temperature and pressure in Hell to stay the same, the
volume of Hell has to expand as souls are added. This
gives two possibilities.

#1 If Hell is expanding at a slower rate than the rate
at which souls enter Hell, then the temperature and
pressure in Hell will increase until all Hell breaks
loose.

#2 Of course, if Hell is expanding at a rate faster
than the increase of souls in Hell, then the
temperature and pressure will drop until Hell freezes
over. So which is it? If we accept the postulate given
to me by Ms. Laura Turner during my Freshman year,
"That it will be a cold night in Hell before I sleep
with you," and take into account the fact that I still
have not succeeded in having sexual relations with her,
then #2 cannot be true, and so Hell is exothermic.

The student got the only A.
--

Have a great weekend!!!

Natasha Flazynski
CCNA, MCSE
http://www.ciscobot.com
My Cisco information site.
http://www.botbuilders.com 
Artificial Intelligence and Linux development 





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11215&t=11215
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: advertising IP blocks [7:11191]

2001-07-06 Thread Chuck Larrieu

comments below:

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
David Raistrick
Sent: Friday, July 06, 2001 3:33 PM
To: [EMAIL PROTECTED]
Subject: Re: advertising IP blocks [7:11191]


On Fri, 6 Jul 2001, John Neiberger wrote:

> It's important to think about what we consider to be failures in our ISP
> and then ask the question: "What are we protecting ourselves from?"  In
> our case, more often than not an outage is caused by downtime on our
> directly connected router or a failure on the physical link itself,
> between the CO and our building.

Mmm.

I'm prone to disagree.  Most of the outages with the last ISP i ran, as
far as our backbone was concerned, were major outages with our
upstream.  Bellsouth.net of all wonderful things.

-
CL: does Bellsouth run their own backbone, or use someone else's? I ask
because at least one major telco with whom I have some experience is not
permitted by the regulatory agencies to run their own, so they use "major
carrier's" backbone
---

Between local hardware upgrades lasting three days (at the local bs.n pop,
NOT telco issues), instead of two hours, or various flapping interfaces
further upstream, to complete loss of connectivity to their upstream. (uu)

CL: check out the NANOG archives for discussions about "clue"

And this was with two circuits in two seperate lata. both ds3 frames.

CL: see previous comment

A small dialup operation that we picked up as a bs.n line and a sprintlink
line.  Both had fairly regular failure patterns upstream as well.
--
CL: just cuz you think you have diversity doesn't mean you do. there was an
incident in a relatively large metro area someplace out west not too long
ago. The whole area's internet access went down when "major backbone
provider" went down. Turns out every ISP in that area eventually connected
to "major backbone provider"
---

And going back further to another small ISP, we had a t1 to uu...and
again, other then having /two/ 2525's die cold turkey, the only outages
were upstream of us at at uu's end.

Sure, there are a reasonable number of local problems that hit us all, but
I still put more faith on my local side the I do the upstreams.


CL: in the end, it's all about faith, isn't it.

my few worthless thoughts..

CL: worthless? NOT! - your points are well made and well worth considering.
thanks for the conversation.




..david

---
david raistrick (deep in the south georgia woods)
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11216&t=11191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: advertising IP blocks [7:11191]

2001-07-06 Thread David Raistrick

On Fri, 6 Jul 2001, Chuck Larrieu wrote:

> CL: does Bellsouth run their own backbone, or use someone else's? I ask

They back into uunet somewhere around atlanta, for this area at
least.  Bounces through 2-4 hops..the general idea seems to be to drop a
pop at the CO of the lata, and frame all the lata's customers to that pop,
then aggregate and run back to atlanta.

The jax circuit we had appeared to go somewhere else first, then to
atlanta. Tampa, i suspect, but I'm really unfamiliar with the Flordia
telco operations.


> CL: just cuz you think you have diversity doesn't mean you do. there was an
> incident in a relatively large metro area someplace out west not too long
> ago. The whole area's internet access went down when "major backbone
> provider" went down. Turns out every ISP in that area eventually connected
> to "major backbone provider"

Oh, agreed!  One should certianly have a clear, and complete, 
understanding of where their circuits terminate, how they get there, and
where they go from there and plan accordingly. (and I'm not going to think
about how many grammar rules I just ignored..)

later...david




---
david raistrick (deep in the south georgia woods)
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11217&t=11191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: advertising IP blocks [7:11191]

2001-07-06 Thread David Raistrick

On Fri, 6 Jul 2001, Chuck Larrieu wrote:


> -
> CL: does Bellsouth run their own backbone, or use someone else's? I ask

Oh. I forgot.  They /claim/ to peer with other NSPs at each of there, for
lack of better term, megapops...but I've never seen anything /not/ go
through uu, even when uu, or the interface to uu, goes down.

And if you ever consider a bs.net line...be sure oyu compare the uunet
line. Always seems to be cheaper..wonder how that is. heh. :)




> because at least one major telco with whom I have some experience is not
> permitted by the regulatory agencies to run their own, so they use "major
> carrier's" backbone

Well, apparently bs.net is run independantly of bs the ilec..and they
always seem to do their best to make that clear to you when they have
screwed something up. :)

but I'm sure they keep relatively within their regulated limits.

---
david raistrick (deep in the south georgia woods)
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11218&t=11191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: tracking rogue dialup users [7:11220]

2001-07-06 Thread [EMAIL PROTECTED]

"Security Basics (E-mail)" 


On Tue, 3 Jul 2001, [iso-8859-1]  - wrote:

> Greetz.
>
> Just a matter of interest.
>
> Say there is user A, he dials up to ISP J. User A breaks into server
> X. Server X has the ip, he contacts the isp How is the user
> tracked from there on...
>

A good Radius server should log the IP used by user A, as well as the time
user A stays connected.  The latter information is vital to most ISP
business models as they use the length of time a user stays connected as
basis for their billing.  Most modern digital phone systems should have
caller ID, so the phone number is also logged if Radius can get this
information somehow.  So if Server X was able to get the IP used by user A
to connect to it, ISP J should be able to trace user A back to the phone
he used to dial up into them, *provided the clock skew between ISP J's
Radius server and Server X is minimal*.

Which is why all people who operate major servers, and ISP's most
especially, should synchronize their clocks correctly.  Clock skew of any
serious length can make correlating events on different servers iffy if
not impossible.  Skew of even one minute may make pinning down a culprit
hard to prove.

--
Rafael R. Sevilla+63(2)   8177746 ext. 8311
Programmer, InterdotNet Philippines  +63(917) 4458925
http://dido.engr.internet.org.ph/

-+---BEGIN GEEK CODE BLOCK-
Version: 3.12
GAT d- s:- a- C UL+++ P+++ L+++ E++ W++ N+ o K- w---
O- M-- V- PS+ PE Y+ PGP++ t+ 5 X+ R tv+ b+++ DI++ D+
G e++ h! r++ y+
-+END GEEK CODE BLOCK--




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11220&t=11220
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



show ip route connected!! [7:11219]

2001-07-06 Thread Jeongwoo Park

Hi all
We have eigrp network.
When I do "sh ip rou co" --- what ip address are those under "C"? it says it
is directly connected. Then why couldn't I ping?
It is not local router's interface address, or remote router's serial
interface. Then what ip address ? 
Thanks 
JP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11219&t=11219
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



No Arrow Keys & Hyper Term ??? [7:11221]

2001-07-06 Thread Circusnuts

Anyone else had this issue ???  I upgraded my PC from 98 to 2000 & the arrow
keys no longer work in Hyper Term only ???

Thanks
Phil




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11221&t=11221
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: show ip route connected!! [7:11219]

2001-07-06 Thread John Feuerherd

Park,
   When you do a "show ip route connected" it shows you the network/subnet
that is assigned to a directly connectd interface on that router, not the
interfaces IP address. My guess would be that you are trying to ping the
network and not the interfaces IP address.

JF


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11222&t=11219
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Triggered updates [7:11223]

2001-07-06 Thread John Feuerherd

Hello all,
   I understand how triggered updates works, but I don't get how they
pervent routing loops. Could someone explan that one to me?

Thanks,
JF


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11223&t=11223
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: breezecom+cisco [7:11204]

2001-07-06 Thread Lori

I believe that Breezecom does frequency hopping whereas Cisco Aironet uses
direct
sequencing.  I think this is the main difference, but correct me if I'm
wrong.
Lori

Axilleas Likotsetas wrote:

> Hi guys,
>
> i'm from greece and i work in a telecommunication company
> we're working with breezecom wireless products
> if anyone of you has some experiance in this products
> please answer to me
> i have some questions to ask
>
> thanks,
> axilleas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11224&t=11204
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



3000 VPN client to PIX IPsec [7:11225]

2001-07-06 Thread Jim Bond

Hello,

I'm trying to configure IPSec between 3000
Concentrator VPN client (ver 3.0) to PIX (ver 6.01)
and I follow the sample config from: 
http://www.cisco.com/warp/public/110/pix3000.html

As soon as I get connected, I lost connection, I can't
even ping my gateway. If I disconnect VPN, connection
comes back. Here is my configuration:
PIX Version 6.0(1)
access-list 101 permit ip 172.16.1.0 255.255.255.0 
172.16.2.0 255.255.255.0 
ip address outside 63.47.199.254 255.255.255.248
ip address inside 172.16.1.1 255.255.255.0
ip local pool bigpool 172.16.2.1-172.16.2.254
global (outside) 1 interface
nat (inside) 0 access-list 101
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
route outside 0.0.0.0 0.0.0.0 63.47.199.249 1
sysopt connection permit-ipsec
no sysopt route dnat
crypto ipsec transform-set myset esp-des esp-md5-hmac 
crypto dynamic-map dynmap 10 set transform-set myset
crypto map mymap 10 ipsec-isakmp dynamic dynmap
crypto map mymap client configuration address initiate
crypto map mymap client configuration address respond
crypto map mymap interface outside
isakmp enable outside
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup vpn3000 address-pool bigpool
vpngroup vpn3000 dns-server 207.69.188.185
207.69.188.186
vpngroup vpn3000 wins-server 172.16.1.20
vpngroup vpn3000 default-domain Pisco
vpngroup vpn3000 idle-time 1800
vpngroup vpn3000 password 

Thanks in advance.

Jim



__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11225&t=11225
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: No Arrow Keys & Hyper Term ??? [7:11221]

2001-07-06 Thread Darren S. Crawford

I had the same problem.  Use Cntrl-P for the old up arrow functionality and
Cntrl-N for the old down arrow functionality.  P=previous and N=next.

HTH

Darren

At 09:44 PM 7/6/2001 -0400, Circusnuts wrote:
>Anyone else had this issue ???  I upgraded my PC from 98 to 2000 & the arrow
>keys no longer work in Hyper Term only ???
>
>Thanks
>Phil
x$:0`0:$xx$:0`0:$xx$:0`0:$xx$:0`0:$x$:0`0:$xx$:0`0:$xx 

Darren S. Crawford 
Network Systems Consultant 
Lucent Technologies - Sacramento 

email: [EMAIL PROTECTED] 
page via email: [EMAIL PROTECTED] 
pager: 800-467-1467 

"You always have time for things you put first" - Tucker Resources

x$:0`0:$xx$:0`0:$xx$:0`0:$xx$:0`0:$x$:0`0:$xx$:0`0:$xx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11226&t=11221
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fw: No Arrow Keys & Hyper Term ??? [7:11221]

2001-07-06 Thread Joe Morabito

Yup, I had the same problem, you must install service pack 2 for win 2k.  I
 found the bug on Microsofts web site.
> 
> 
> Joe Morabito
> 
> mailto:[EMAIL PROTECTED]
> 
> 
> - Original Message -
> From: "Circusnuts" 
> To: 
> Sent: Friday, July 06, 2001 9:44 PM
> Subject: No Arrow Keys & Hyper Term ??? [7:11221]
> 
> 
> > Anyone else had this issue ???  I upgraded my PC from 98 to 2000 & the
> arrow
> > keys no longer work in Hyper Term only ???
> >
> > Thanks
> > Phil




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11227&t=11221
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IBM laptops and CCO CD [7:11189]

2001-07-06 Thread Carlos Venancio

I had this issue also, It's not about your Windows version or computer
model, it's about the Verity web server, version 2.0 worked fine but 3.0 is
flawed somehow (hmm or it was 3.0 ok, 4.0 flawed? don't remember exactly).


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11228&t=11189
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: breezecom+cisco [7:11204]

2001-07-06 Thread Chuck Larrieu

according to the breezecom web site, breezecom products do both FHSS and
DSSS

www.breezecom.com

for those who haven't entered this strange world yet, FSSS has a data rate
of up to 2mbs whereas DSSS currently has speeds up to 11 mbs. YMMV depending
upon a LOT of factors ( well, breezecom claims 3 mbs, but they may do
something proprietary to increase throughput. Symbol does something funny as
well. these kinds of things might change as the 802.11 standards take
hold. )

I posted a couple of web links earlier today concerning wireless. check the
archive

Chuck



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Lori
Sent: Friday, July 06, 2001 7:02 PM
To: [EMAIL PROTECTED]
Subject: Re: breezecom+cisco [7:11204]


I believe that Breezecom does frequency hopping whereas Cisco Aironet uses
direct
sequencing.  I think this is the main difference, but correct me if I'm
wrong.
Lori

Axilleas Likotsetas wrote:

> Hi guys,
>
> i'm from greece and i work in a telecommunication company
> we're working with breezecom wireless products
> if anyone of you has some experiance in this products
> please answer to me
> i have some questions to ask
>
> thanks,
> axilleas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11229&t=11204
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Output Drops [7:11230]

2001-07-06 Thread Akshay Parikh

Hello,

We have a satellite gateway to our upstream provider. The bandwidth for us
is 5.6Mbps for Outgoing traffic (upstream from our end) & 28Mbps Incoming
traffic (downstream on our end).
This circuit is terminated on a HSSI port on Cisco 7513. Offlate, we are
facing a problem in our outgoing traffic.
We are observing a lot of Output Drops on our HSSI port.
This is happening even when my outbound traffic is 3.5Mbps - 4Mbps, which is
very less than the max limit.
IOS version is 12.0(5)

Thanks in advance
Akshay




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11230&t=11230
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-06 Thread [EMAIL PROTECTED]

Try anywhere but SF. I am pulling in almost 2 bills an hour consulting on
the east coast. I beat out a CCIE for the spot at a major power utility
because I knew protocols, applications, and many other technologies. I also
provided my own protocol analyzers and will train their staff in advance
Cisco design, troubleshooting and forensic protocol analysis while working
on and improving the existing enterprise network. I am not knocking the
CCIE, I find it very challenging, my first lab is in March 02. I passed the
written in March 01 but then this gig fell in my lap so I pushed off the
lab. Billing always comes first. My point is that the market is tight but
not as tight one may think. With the influx of talent real or fake(those who
jumped in on the bandwagon during the last couple of years) clients can now
afford to be very picky so they want someone who also understands things
outside the proverbial "Cisco" box. If you have many talents and are strong
in them all, you will find something soon. Try an out of state contract I
turned down a government spot in NC for the utility spot so there are gigs
out there. Good luck to all.

/JS
CCNP, CCDP, CNX,
Oracle Master, CNE, PMG NetAnalyst, EIEIO
 17 years of experience.

""Tony Medeiros""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Geeze,
> I have only been without a job 2 weeks and I have been doing independent
> contract work like crazy during that time.  It takes time to interview for
> jobs, especially in my pay range.  Company's don't just look at your
number
> and hire you on the spot,  At least not any company I want to work for.
>
> To answer Elmers question: Yes, the market is very different now.
> Especially in the VAR area.  Small VARs are struggling to make 2 or 3
points
> on hardware sales.  "Grey" market hardware from auctions and bankruptcies
is
> everywhere.  Large resellers like ATT and SBC (sorry Chuck) are drop
> shipping at cost, it seems, just to make a little margin on deployment.
>
> Another factor that seems to be affecting CCIE employment around the bay
> area is the layoff at Cisco.  Believe it or not, Cisco laid off quit a few
> of them recently, and they are all looking for jobs.  I recently
interviewed
> at a job where they specifically want a CCIE and they had 10 interviews...
> 10   That was unheard of a year ago!!   Maybe it's just like this in
the
> Silicon Valley, I don't know.  All I know is the market is very soft right
> now around here.  I know I'll find a job though.  I just can't be picky.
>
> So is the CCIE market saturated ?  I don't know, maybe.  Does the high
tech
> economy suck right now ?  Hell yes !!  However, ebb and flow is the way
> capitalism works.  Things are certain to get better.
>
> So you who are going for your high end certs, keep studying !!  You will
be
> in a better position when things get better.
>
> Tony M.
> #6172
>
>
> - Original Message -
> From: Circusnuts
> To:
> Sent: Friday, July 06, 2001 7:13 AM
> Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
>
>
> > Uh Ohhh- let's not start a rant here... "CCIE's out of work, is it worth
> > it."
> >
> > :o)
> > Phil
> >
> > - Original Message -
> > From: "Elmer Deloso"
> > To:
> > Sent: Friday, July 06, 2001 8:24 AM
> > Subject: RE: FYI Check out the CCIE "whats new" page. [7:11128]
> >
> >
> > > Tony,
> > > Seriously speaking, i thought at this point you'd be the hunted and
not
> > the
> > > hunter when it comes to jobs. Or has teh CCIE market become
"saturated"?
> > >
> > > Elmer
> > >
> > > -Original Message-
> > > From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
> > > Sent: Friday, July 06, 2001 12:30 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
> > >
> > >
> > > Boy,
> > > That CCIE verification tool is buggy.  I put my name in 4 times before
> It
> > > verified me.  Tried different capitalization methods untill it
finially
> > > worked.  Then it worked on all capitalization methods !!!  Go figure
> > >
> > > I'm looking for a job right now and I hope that a prospective
employeer
> > > doesn't use this thing !!
> > >
> > > Tony Medeiros
> > > CCIE #6172 (damnit )




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11231&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Output Drops [7:11230]

2001-07-06 Thread Rahul Kachalia

Akshay,

Temporary increase output buffer on interface with "hold-queue out xxx",
but make sure you are calculating MaxBw correctly. Also if possible provide
outputs from following commands :
- show interface ( of your output drop intf )
- show buffers
- show mem

thanks,
rahul.

""Akshay Parikh""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello,
>
> We have a satellite gateway to our upstream provider. The bandwidth for us
> is 5.6Mbps for Outgoing traffic (upstream from our end) & 28Mbps Incoming
> traffic (downstream on our end).
> This circuit is terminated on a HSSI port on Cisco 7513. Offlate, we are
> facing a problem in our outgoing traffic.
> We are observing a lot of Output Drops on our HSSI port.
> This is happening even when my outbound traffic is 3.5Mbps - 4Mbps, which
is
> very less than the max limit.
> IOS version is 12.0(5)
>
> Thanks in advance
> Akshay




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11232&t=11230
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



csu-dsu [7:11233]

2001-07-06 Thread Moahzam Durrani

At present I have a 7500 that has aN external DSU -CSU (RAD FCD-1) .
Providing a T1 conectivity netween two of our sites. We are going to be
using a 2600 for this same connection .The 2600 has a built in CSU/DSU. My
problem is I do not get a coneectivity between the two sites when I use the
2600.  I know the card works as I tested it with another T1 conection. No
problem. the carrier is using SF Framing , linecode  AMI . the encapsulation
is HDLC. the 7500 with the external CSU/DSU works fine. however with the
2600 I keep on seeing Serial up , line down.  I know on our existing 2600
with built in csu/dsu I have chanel-group 0 , time slot1-24 and speed 64
configured on the controllers.  one thing I noticed on the 7500 csu/dsu  it
was set up with clk_master : LBT .is this specific to the carrier ? is there
something im missing on my configs. The route statementsconfigured on teh
2600 are exactly the same as the 7500 , so  there is no routing issue.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11233&t=11233
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IPsec tunnel mode vs. GRE tunnel with IPsec [7:11236]

2001-07-06 Thread Ciscodog

I was recently looking at these two options for connecting branch offices for
an alternative to a point-to-point WAN link. I have in the past implemented
IPsec which by default is in tunnel mode for any packet that doesn't
originate
from the direct peers. However I was reading a bit the other day and came
across the GRE tunnel with IPsec solution and was wondering if this was
legacy, or better option for my situation. Does anyone have a quick pros/cons
response to the 2 scenarios?


Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11236&t=11236
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCDA after CCNP, How tough???? [7:10960]

2001-07-06 Thread horace_guba

i passed cid 3.0 on 2nd attempt.questions are all of difference than the
first try.
maybe i took the test twice in one week.
""Sean C.""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> CID - 100 questions - Passing is 755  Final score based on scale of 300 to
> 1000 (ie - I think some questions are weighted heavier for scoring
> purposes).  Unlike CCIE written where there are 100 questions and each is
> worth 1 point.
>
> I'm copying an old rant of mine.  Check the GroupStudy archives, there are
> tons of gripes with the CID:
>
> Took the CID last week and passed - 2nd attempt.  The horror stories you
> have read about this test are true.
>
> The questions have misspellings (VALN instead of VLAN), some answers are
> written twice, one question address had a third octet of .286., etc.
Couple
> this with the limited study material available and I think it would be
wise
> to wait for the CID 4.0, when, hopefully, there will be more study
material
> available.
>
> I used the CiscoPress book and the Boson #1 test.  The Lammle book you own
> has the best section on StrataCom - the questions I had were could all be
> answered from Lammle's book.
>
> I agree with the general concensus:  CiscoPress covers 50%, Lammle covers
> 50% between them you will know about 75% of the test.
>
> Good luck,
> Sean C.
>
> CCNP, CCDP, MCSE
> Email:  [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11238&t=10960
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]