what is Bearer capability not implemented in ISDN ? [7:13182]

2001-07-20 Thread [EMAIL PROTECTED]

Hello all,
 When I am trying to generate the call on ISDN ,I am not able to connect
the ISDN Upon debug ISDN events and debug isdn q931 ,I got the cause to be
as follow

Cause i = 0x82C1 - Bearer capability not implemented


The sample of the debug is given below for more help.Can anybody tell me
this could be due to what ?
Is it a line problem because I tested the line voltage and found to be
around 105.6 Volts ,Also Upon connecting the ISDN instrument to this line I
am able to get dial tone as well as generate voice calls?

4w1d: ISDN BR1/1: Outgoing call id = 0x8F65
4w1d: ISDN BR1/1: Event: Call to 6156540 at 64 Kb/s
4w1d: ISDN BR1/1: TX ->  SETUP pd = 8  callref = 0x0B
4w1d: Bearer Capability i = 0x8890
4w1d: Channel ID i = 0x83
4w1d: Called Party Number i = 0x80, '6156540'
4w1d: ISDN BR1/1: RX <-  RELEASE_COMP pd = 8  callref = 0x8B
4w1d: Cause i = 0x82C1 - Bearer capability not implemented
4w1d: ISDN BR1/1: received HOST_DISCONNECT_ACK call_id 0x8F65
4w1d: ISDN BR1/1: Error: Unexpected Disconnect_Ack - call id 0x8F65.
Success rate is 0 percent (0/5)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13182&t=13182
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Wireless Exam [7:13179]

2001-07-20 Thread Tony Medeiros

Use this link for VOD course.  You need partner level login on CCO

http://cisco.partnerelearning.com/pec/main.asp?Nav=EmpHome&Body=ingtoday%2Ea
sp&Task=1&ObjID=26939

(watch the word wrap)

Tony M.
#6172


- Original Message -
From: Rumblebelly 
To: 
Sent: Friday, July 20, 2001 10:21 PM
Subject: Wireless Exam [7:13179]


> I need to take the wireless exam soon. Is there any study material for it?
>
> Thanks,
>
> Rbelly




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13181&t=13179
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Disaster Recovery Documentation? was Re: what's wrong with CCIE [7:13180]

2001-07-20 Thread Torren Craigie-Manson

""Sean Young""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> What's wrong with CCIEs today?  I know that I am making a general
{snip}
> one of our tacacs servers (solaris) die due to hardware
> failure and the amazingly the tacacs process on the Linux die.
{snip}
> As to our problems, the simple to do is just
> to restart the tacacs process byfirst:  "killall tac_plus" and second
> "/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
> have absolutely no clues.

Were the instructions for verifying and restarting your tacacs process
available in your disaster recovery documentation? Do your CCIEs know where
the disaster recovery documentation is, and how it's organized?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13180&t=13180
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Wireless Exam [7:13179]

2001-07-20 Thread Rumblebelly

I need to take the wireless exam soon. Is there any study material for it?

Thanks,

Rbelly




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13179&t=13179
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Guy Russell

Well, This Cisco guy knows how to configure, trouble shoot, install, and
just about anything on an NT or 2000 box... As well as a Novell Box
v3-1x -4.x. As far as Unix, well, not much expertise there... I can install
various versions of Linux, but my demands of other areas have been far too
great to specialize in everything...

If it were my company, and I needed someone to work on my NT servers, I
would hire an MCSE, or Novell Servers, a CNE... if I need a Cisco guy, thats
what I would hire...

I agree that skills should be spread around, but you need to specialize...
Not be a jack of all trades... master of none... But instead a master of
one, and some knowledge of a few others...

A CCIE is a bit too expensive to be fooling around with unix Box configs...

But knowledge of different systems wont hurt, but I dont see it as beeing
mandatory...

Now for the first CCIES...

I doubt they have had any pressing need over the past few years to learn or
certify in Operating Systems... In fact the first ones, have been held on to
by Cisco, and are probobly the ones who came up with things like EIGRP
etc... Doubt the company they work for has asked them to modify client
systems...


- Original Message -
From: "Sean Young" 
To: 
Sent: Friday, July 20, 2001 9:12 PM
Subject: Re: what's wrong with CCIE today? [7:13151]


> Well, a ccie doesn't know how to fix the NT server; however, he/she does
> know how change the IP address of the NT server or how to reboot the box
> right?  I would expect that CCIE to be able to do the same thing with a
> Unix box.  He/she doesn't have to manage the Unix server, just know that
> basic troubleshooting stuffs.  To my knowledge, Linux and Solaris x86 are
> free so those basic Unix skills can be learned very quickly.
>
> >From: "B.J. Wilson" >Reply-To: "B.J. Wilson" >To: [EMAIL PROTECTED]
> >Subject: Re: what's wrong with CCIE today? [7:13151] >Date: Fri, 20 Jul
> 2001 19:38:56 -0400 > >You're attributing a fault in "these guys" to a
> certification which doesn't >test on UNIX skills. In other words, they're
> CCIEs - they know more than >you or I do about routing and switching on
> Cisco routers (presumably). But >the CCIE is the *beginning* of an
> overall understanding of how networks >work - it's not the end-all-be-all
> certification which automatically >elevates someone to godlike status, as
> much as you might want them to be >networking gods. > >This is actually
> one thing I'm worried about, should I ever achieve the CCIE
> >certification: I don't want some future employer to say "Oh, you're a
> CCIE, >great - come over here and fix this NT server," only to be
> disappointed to >learn that I know nothing about NT! > >The bottom line
> is: don't criticize a CCIE because they don't know how to >use or manage
> a UNIX server. That's not what they've been trained to do, >it's not what
> they're certified to do, and if you're smart, you won't hire >someone to
> do UNIX stuff without making them prove that they *can* do it. >In other
> words, quit your bellyaching. ;-) > >BJ > > >- Original Message -
> >From: "Sean Young" >To: >Sent: Friday, July 20, 2001 6:14 PM >Subject:
> what's wrong with CCIE today? [7:13151] > > > > What's wrong with CCIEs
> today? I know that I am making a general > > assumptions; however,this is
> the second time that it has happend to the > > company that I work for.
> We have several tacacs servers that use to > > authenticate users. These
> tacacs servers are running on a combination of > > Linux and Solaris
> platforms. While I was away at the Networker > > Conference, one of our
> tacacs servers (solaris) die due to hardware > > failure and the
> amazingly the tacacs process on the Linux die. Because > > of this,
> everyone has to login to the routers and switches via local > > account.
> We hire these CCIEs to maintain the network while I am away for > > a few
> weeks. None of these CCIEs have any background with tacacs servers > >
> running on Unix platforms. As to our problems, the simple to do is just >
> > to restart the tacacs process byfirst: "killall tac_plus" and second >
> > "/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys >
> > have absolutely no clues. Furthermore, they don't even know how to use
> > > editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
> > > configuration files. We have a few employees that need tacacs account
> > > but these CCIEs guys have no clues how to addnew users to a
> configuration > > file which if anyone has done tacacs on the unix
> platform know that you > > just modify the configuration file
> tac_plus.conf and restart tacacs > > process. These CCIE guys say that
> they come from a windows environment > > so they don't have too much with
> Unix platforms. I also notice that a > > lot of CCIEs these days lack the
> Unix skills that are required for the > > Service Providers environment.
> Most don't even know how to tunnel > > X-application through Secure 

Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread MacDonald

Hey, Please dont use the CCIE Certificate number to classify the
level of the CCIE .

that's your opinion, please respect with those late comers...





""Sean Young""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Come on guys.  Everyone's point is very well taken.  I am NOT saying that
> a CCIE also has to be an expert with Unix.  All I am saying is that at
> the very least, have a basic understand of Unix OS so that one can
> accomplish basic tasks required by the job.  I bet that all CCIEs knows
> how to change the network configuration in microsoft windows but not all
> CCIEs know how to do the same thing to a Unix system.  The point I am
> trying to make here is that know the basic.  I do notice the older CCIEs
> (#3500 and lower) are very well diversifed with both their Cisco and Unix
> skills.  The newer only know "point and click".
>
>
>
> >From: "John Neiberger" >Reply-To: "John Neiberger" >To:
> [EMAIL PROTECTED] >Subject: Re: what's wrong with CCIE today?
> [7:13151] >Date: Fri, 20 Jul 2001 19:32:53 -0400 > >Last time I checked,
> there was none of the following on the CCIE written >or lab: > >Unix
> >Tacacs Server Configuration >X-application tunneling over SSL > >Would
> you also expect a CCIE to be able to configure CICS on your >mainframe
> and troubleshoot terminal controller problems in VTAM on your >FEP? >
> >No, I don't think so. Remember, the first "C" in CCIE stands for
> >"CISCO". Just because it's incredibly hard to get does not mean it's
> >the ultimate pinnacle of networking achievement and there is nothing
> >left to learn. > >In fact, I relate it to a black belt in martial arts.
> Those with >experience understand that a black belt is yet another
> starting point, >it's not the end of the road. > >Okay, enough rambling.
> Time to go home! > >John > > >>> "Sean Young" 7/20/01 5:14:47 PM >>>
> >What's wrong with CCIEs today? I know that I am making a general
> >assumptions; however,this is the second time that it has happend to >the
> >company that I work for. We have several tacacs servers that use to
> >authenticate users. These tacacs servers are running on a combination
> >of >Linux and Solaris platforms. While I was away at the Networker
> >Conference, one of our tacacs servers (solaris) die due to hardware
> >failure and the amazingly the tacacs process on the Linux die. >Because
> >of this, everyone has to login to the routers and switches via local
> >account. We hire these CCIEs to maintain the network while I am away
> >for >a few weeks. None of these CCIEs have any background with tacacs
> >servers >running on Unix platforms. As to our problems, the simple to do
> is >just >to restart the tacacs process byfirst: "killall tac_plus" and
> second >"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs
> guys >have absolutely no clues. Furthermore, they don't even know how to
> >use >editing in Unix (i.e vi or emacs) and ended up screwing up my
> tacacs >configuration files. We have a few employees that need tacacs
> account >but these CCIEs guys have no clues how to addnew users to a
> >configuration >file which if anyone has done tacacs on the unix platform
> know that >you >just modify the configuration file tac_plus.conf and
> restart tacacs >process. These CCIE guys say that they come from a
> windows >environment >so they don't have too much with Unix platforms. I
> also notice that a >lot of CCIEs these days lack the Unix skills that are
> required for the >Service Providers environment. Most don't even know how
> to tunnel >X-application through Secure Shell (SSH). I still remember
> those days >when Cisco Engineers are very well verse in both unix and
> routers >skills. I long for those days again. Comments anyone? >
> >
> > >Get your FREE download of MSN Explorer at http://explorer.msn.com > >
> misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> 
>
> Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13177&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What's wrong with ccie today [7:13160]

2001-07-20 Thread MacDonald

Want to do unix job, why dont you employ a UNIX Certified Expert ?

Before you employ a person, you should ask yourself what are you wanting to
do?

A Cisco Expert sometimes also not familiar with other vendor's Router config
although the Routing concept is the same.

McDonald!  ^_^  ho ho ho!





""Jim McDowell""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Doggone those CCIEs.  Shame on them for not knowing UNIX startup scripts.
I
> guess I'll be a step ahead of them if I ever get my CCIE. :)
>
>
>
> What's wrong with CCIEs today? I know that I am making a general
> assumptions; however,this is the second time that it has happend to the
> company that I work for. We have several tacacs servers that use to
> authenticate users. These tacacs servers are running on a combination of
> Linux and Solaris platforms. While I was away at the Networker
> Conference, one of our tacacs servers (solaris) die due to hardware
> failure and the amazingly the tacacs process on the Linux die. Because
> of this, everyone has to login to the routers and switches via local
> account. We hire these CCIEs to maintain the network while I am away for
> a few weeks. None of these CCIEs have any background with tacacs servers
> running on Unix platforms. As to our problems, the simple to do is just
> to restart the tacacs process byfirst: "killall tac_plus" and second
> "/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
> have absolutely no clues. Furthermore, they don't even know how to use
> editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
> configuration files. We have a few employees that need tacacs account
> but these CCIEs guys have no clues how to addnew users to a configuration
> file which if anyone has done tacacs on the unix platform know that you
> just modify the configuration file tac_plus.conf and restart tacacs
> process. These CCIE guys say that they come from a windows environment
> so they don't have too much with Unix platforms. I also notice that a
> lot of CCIEs these days lack the Unix skills that are required for the
> Service Providers environment. Most don't even know how to tunnel
> X-application through Secure Shell (SSH). I still remember those days
> when Cisco Engineers are very well verse in both unix and routers
> skills. I long for those days again. Comments anyone?
>
> 
>
> Get your FREE download of MSN Explorer at




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13176&t=13160
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



thank you for the responses [7:13175]

2001-07-20 Thread [EMAIL PROTECTED]

Hello everyone,
Phil and Gareth, you are right. they were AT modem commands and that i
needed
a null modem cable to get in. The cable i ordered came in and i got access
to
the switch upon plugging it in. and thank you to everyone who responded with 
the info that they were modem commands.


Joe Gearhart , CCNP with a long ways to go




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13175&t=13175
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Datagram size bigger than 200 get packet loss [7:13166]

2001-07-20 Thread John Neiberger

Check your interfaces for late collisions.  It could be that you have a
duplex mismatch and a device that is set for full duplex is stomping on
other devices set for half duplex.  This is very common when you have
devices connected to an ethernet hub.  They should all be set for half
duplex, and if one of them is set for full duplex it will transmit without
checking to see if someone else is transmitting.

You didn't say how much packet loss you had, but in the scenario above, the
larger the packet transmitted by the half duplex station, the more likely it
is that the full duplex station will try to transmit at the same time.

HTH,
John

|  Hi All,
|  
|  When I try to ping with a Datagram Size bigger than 200 in a LAN I get
|  packet loss. Dose any one know the reason?
|  
|  Regards,
|  
|  Tarry
|  
|  
|  -- 
|  GMX - Die Kommunikationsplattform im Internet.
|  http://www.gmx.net
|  
|  GMX Tipp:
|  
|  Machen Sie Ihr Hobby zu Geld bei unserem Partner 1&1!
|  http://profiseller.de/info/index.php3?ac=OM.PS.PS003K00596T0409a
|  
|  
|  
|  
___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13174&t=13166
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Datagram size bigger than 200 get packet loss [7:13166]

2001-07-20 Thread Chuck Larrieu

wild guess - heavily utilized links with lots of small packets on the wire.
statistically speaking, the bigger packets have more of a chance of
problems - late collisions etc.

might want to get a Fluke or a sniffer and do some analysis of your network

Chuck

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, July 20, 2001 6:58 PM
To: [EMAIL PROTECTED]
Subject: Datagram size bigger than 200 get packet loss [7:13166]


Hi All,

When I try to ping with a Datagram Size bigger than 200 in a LAN I get
packet loss. Dose any one know the reason?

Regards,

Tarry


--
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net

GMX Tipp:

Machen Sie Ihr Hobby zu Geld bei unserem Partner 1&1!
http://profiseller.de/info/index.php3?ac=OM.PS.PS003K00596T0409a




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13173&t=13166
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread David Raistrick

On Fri, 20 Jul 2001, Sean Young wrote:

> Come on guys.  Everyone's point is very well taken.  I am NOT saying that
> a CCIE also has to be an expert with Unix.  All I am saying is that at
> the very least, have a basic understand of Unix OS so that one can

???  Cisco has no relation to any UN*Xso why should a CCIE be expected
to be familiar with it just becuase he is a CCIE?  Obviously, if you had
spec'd that you needed a CCIE who was familar with unix, as well as the
software in question, you would have had people who could do the task.

> accomplish basic tasks required by the job.  I bet that all CCIEs knows
> how to change the network configuration in microsoft windows but not all

I'd be willing to bet last months rent payment that there is at least one
CCIE out there who /doesnt/ know how to make the required changes on a
windows machine..perhaps he or she grew up out of a Mac environment, for
example.

If you have a position that requires certian skillsets make SURE the
people who fill the position match those skillsets.  If you rely on a
certification that has nothing to do with any of the other skills you
need..well. You get what you get.

Everyone was a newbie at one time or another.  And the rest of us find
there is always more to learn, certifications or no.


...david

---
david raistrick (deep in the south georgia woods)
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13172&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread KY

Okay, what is BASIC?
Knowing how to change network configuration of windows is basic, because
most people use windows on their PCs. If some CCIEs do not know how to
configure Unix boxes and still finish their daily tasks, this means to these
CCIEs Unix skills are not basic.
When you hire them, you should know what they can do, if you want to them to
do something they still do not know yet, let them know your requirement and
give them time or some training to learn it. All CCIEs know how to learn,
this is how they got their numbers.
If I am not the administrator of a box, the last thing I want to do is to
touch the box without letting the admin know it, we all know this typical
story happening to everyone all the time:"
You walk into a computer room, put a card on a router, the time you finish
this, the router on a seperate rack 30 feet away reboots itself, you are the
only one in the computer room, so you, to some extend on your boss mind, are
resposible for this."

KY


""Sean Young""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Come on guys.  Everyone's point is very well taken.  I am NOT saying that
> a CCIE also has to be an expert with Unix.  All I am saying is that at
> the very least, have a basic understand of Unix OS so that one can
> accomplish basic tasks required by the job.  I bet that all CCIEs knows
> how to change the network configuration in microsoft windows but not all
> CCIEs know how to do the same thing to a Unix system.  The point I am
> trying to make here is that know the basic.  I do notice the older CCIEs
> (#3500 and lower) are very well diversifed with both their Cisco and Unix
> skills.  The newer only know "point and click".
>
>
>
> >From: "John Neiberger" >Reply-To: "John Neiberger" >To:
> [EMAIL PROTECTED] >Subject: Re: what's wrong with CCIE today?
> [7:13151] >Date: Fri, 20 Jul 2001 19:32:53 -0400 > >Last time I checked,
> there was none of the following on the CCIE written >or lab: > >Unix
> >Tacacs Server Configuration >X-application tunneling over SSL > >Would
> you also expect a CCIE to be able to configure CICS on your >mainframe
> and troubleshoot terminal controller problems in VTAM on your >FEP? >
> >No, I don't think so. Remember, the first "C" in CCIE stands for
> >"CISCO". Just because it's incredibly hard to get does not mean it's
> >the ultimate pinnacle of networking achievement and there is nothing
> >left to learn. > >In fact, I relate it to a black belt in martial arts.
> Those with >experience understand that a black belt is yet another
> starting point, >it's not the end of the road. > >Okay, enough rambling.
> Time to go home! > >John > > >>> "Sean Young" 7/20/01 5:14:47 PM >>>
> >What's wrong with CCIEs today? I know that I am making a general
> >assumptions; however,this is the second time that it has happend to >the
> >company that I work for. We have several tacacs servers that use to
> >authenticate users. These tacacs servers are running on a combination
> >of >Linux and Solaris platforms. While I was away at the Networker
> >Conference, one of our tacacs servers (solaris) die due to hardware
> >failure and the amazingly the tacacs process on the Linux die. >Because
> >of this, everyone has to login to the routers and switches via local
> >account. We hire these CCIEs to maintain the network while I am away
> >for >a few weeks. None of these CCIEs have any background with tacacs
> >servers >running on Unix platforms. As to our problems, the simple to do
> is >just >to restart the tacacs process byfirst: "killall tac_plus" and
> second >"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs
> guys >have absolutely no clues. Furthermore, they don't even know how to
> >use >editing in Unix (i.e vi or emacs) and ended up screwing up my
> tacacs >configuration files. We have a few employees that need tacacs
> account >but these CCIEs guys have no clues how to addnew users to a
> >configuration >file which if anyone has done tacacs on the unix platform
> know that >you >just modify the configuration file tac_plus.conf and
> restart tacacs >process. These CCIE guys say that they come from a
> windows >environment >so they don't have too much with Unix platforms. I
> also notice that a >lot of CCIEs these days lack the Unix skills that are
> required for the >Service Providers environment. Most don't even know how
> to tunnel >X-application through Secure Shell (SSH). I still remember
> those days >when Cisco Engineers are very well verse in both unix and
> routers >skills. I long for those days again. Comments anyone? >
> >
> > >Get your FREE download of MSN Explorer at http://explorer.msn.com > >
> misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> 
>
> Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/

Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Sean Young

"X-application tunneling over SSL".  This is a very interesting concept. 
I didn't know that this is possible.

>From: "John Neiberger" >Reply-To: "John Neiberger" >To:
[EMAIL PROTECTED] >Subject: Re: what's wrong with CCIE today?
[7:13151] >Date: Fri, 20 Jul 2001 19:32:53 -0400 > >Last time I checked,
there was none of the following on the CCIE written >or lab: > >Unix
>Tacacs Server Configuration >X-application tunneling over SSL > >Would
you also expect a CCIE to be able to configure CICS on your >mainframe
and troubleshoot terminal controller problems in VTAM on your >FEP? >
>No, I don't think so. Remember, the first "C" in CCIE stands for
>"CISCO". Just because it's incredibly hard to get does not mean it's
>the ultimate pinnacle of networking achievement and there is nothing
>left to learn. > >In fact, I relate it to a black belt in martial arts.
Those with >experience understand that a black belt is yet another
starting point, >it's not the end of the road. > >Okay, enough rambling.
Time to go home! > >John > > >>> "Sean Young" 7/20/01 5:14:47 PM >>>
>What's wrong with CCIEs today? I know that I am making a general
>assumptions; however,this is the second time that it has happend to >the
>company that I work for. We have several tacacs servers that use to
>authenticate users. These tacacs servers are running on a combination
>of >Linux and Solaris platforms. While I was away at the Networker
>Conference, one of our tacacs servers (solaris) die due to hardware
>failure and the amazingly the tacacs process on the Linux die. >Because
>of this, everyone has to login to the routers and switches via local
>account. We hire these CCIEs to maintain the network while I am away
>for >a few weeks. None of these CCIEs have any background with tacacs
>servers >running on Unix platforms. As to our problems, the simple to do
is >just >to restart the tacacs process byfirst: "killall tac_plus" and
second >"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs
guys >have absolutely no clues. Furthermore, they don't even know how to
>use >editing in Unix (i.e vi or emacs) and ended up screwing up my
tacacs >configuration files. We have a few employees that need tacacs
account >but these CCIEs guys have no clues how to addnew users to a
>configuration >file which if anyone has done tacacs on the unix platform
know that >you >just modify the configuration file tac_plus.conf and
restart tacacs >process. These CCIE guys say that they come from a
windows >environment >so they don't have too much with Unix platforms. I
also notice that a >lot of CCIEs these days lack the Unix skills that are
required for the >Service Providers environment. Most don't even know how
to tunnel >X-application through Secure Shell (SSH). I still remember
those days >when Cisco Engineers are very well verse in both unix and
routers >skills. I long for those days again. Comments anyone? >
>
> >Get your FREE download of MSN Explorer at http://explorer.msn.com > >
misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13170&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Sean Young

These guys are CCIE certified.  I checked with cisco. 

Wait a minute, I didn't say that these guys have to configure a Tacacs
Server.  Tacacs Server is already configured.  They just have to restart
it and add new users.  I don't think it is too much to ask for CCIEs to
learn the basic skills set of Unix.  It seems CCIEs know how to use
Microsoft Windows?  Why not Unix?  Didn't these guys ever attend
college?  As far as I am concerns that's where most people learn their
Unix skills

>From: "David Wolsefer" >To: "'Sean Young'" >CC: >Subject: RE: what's
wrong with CCIE today? [7:13151] >Date: Fri, 20 Jul 2001 16:37:35 -0700 >
>While I agree that a lot of engineers could use more Unix skills (myself
>included), the CCIE in routing and switching does not test skills for
>running Unix TACACs servers. The CCIE in ISP-DIAL, however, is a
different >matter entirely since the ISP-Dial CCIE tests the ability to
configure Cisco >Secure under Windows NT and Solaris. Many R&S CCIEs are
not from a carrier >background, but many are. When I worked at a major
carrier, I never had to >configure the Tacacs server. There was a
seperate team for that. I did, >however, frequently configure Tacacs+ on
routers and switches. I have yet to >have a single customer request to
tunnel X-application through Secure Shell >(SSH). A CCIE is not an all
knowing being. All that you can really infer >from a person's CCIE status
is that he/she knows routing and switching >reasonably well on the 3600s,
2600s, 2500, Cat 5000s etc. I do think that >even though a CCIE (R&S)
might not know how to configure a Tacacs server off >the top of their
head, they should have the skills to research the >appropriate
documentation, get help from TAC, and configure things given a
>reasonable amount of time. I would also like to point out that there are
>many people out there calling themselves CCIEs these days. Did you
verify >with Cisco that these people are really CCIEs? Why didn't you ask
these >people about their Tacacs knowledge before you hired them if this
was >important to you? Finally, this post is off topic. Why is it even
posted to >a Cisco certification mailing list without "OFF TOPIC" in the
subject. > >Regards, > >David Wolsefer, CCIE #5858 > >-Original
Message- >From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of >Sean Young >Sent: Friday,
July 20, 2001 4:15 PM >To: [EMAIL PROTECTED] >Subject: what's wrong
with CCIE today? [7:13151] > > >What's wrong with CCIEs today? I know
that I am making a general >assumptions; however,this is the second time
that it has happend to the >company that I work for. We have several
tacacs servers that use to >authenticate users. These tacacs servers are
running on a combination of >Linux and Solaris platforms. While I was
away at the Networker >Conference, one of our tacacs servers (solaris)
die due to hardware >failure and the amazingly the tacacs process on the
Linux die. Because >of this, everyone has to login to the routers and
switches via local >account. We hire these CCIEs to maintain the network
while I am away for >a few weeks. None of these CCIEs have any background
with tacacs servers >running on Unix platforms. As to our problems, the
simple to do is just >to restart the tacacs process byfirst: "killall
tac_plus" and second >"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg"
but these CCIEs guys >have absolutely no clues. Furthermore, they don't
even know how to use >editing in Unix (i.e vi or emacs) and ended up
screwing up my tacacs >configuration files. We have a few employees that
need tacacs account >but these CCIEs guys have no clues how to addnew
users to a configuration >file which if anyone has done tacacs on the
unix platform know that you >just modify the configuration file
tac_plus.conf and restart tacacs >process. These CCIE guys say that they
come from a windows environment >so they don't have too much with Unix
platforms. I also notice that a >lot of CCIEs these days lack the Unix
skills that are required for the >Service Providers environment. Most
don't even know how to tunnel >X-application through Secure Shell (SSH).
I still remember those days >when Cisco Engineers are very well verse in
both unix and routers >skills. I long for those days again. Comments
anyone? >
>
> >Get your FREE download of MSN Explorer at http://explorer.msn.com > >
misconduct and Nondisclosure violations to [EMAIL PROTECTED] >



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13169&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Sean Young

Well, a ccie doesn't know how to fix the NT server; however, he/she does
know how change the IP address of the NT server or how to reboot the box
right?  I would expect that CCIE to be able to do the same thing with a
Unix box.  He/she doesn't have to manage the Unix server, just know that
basic troubleshooting stuffs.  To my knowledge, Linux and Solaris x86 are
free so those basic Unix skills can be learned very quickly. 

>From: "B.J. Wilson" >Reply-To: "B.J. Wilson" >To: [EMAIL PROTECTED]
>Subject: Re: what's wrong with CCIE today? [7:13151] >Date: Fri, 20 Jul
2001 19:38:56 -0400 > >You're attributing a fault in "these guys" to a
certification which doesn't >test on UNIX skills. In other words, they're
CCIEs - they know more than >you or I do about routing and switching on
Cisco routers (presumably). But >the CCIE is the *beginning* of an
overall understanding of how networks >work - it's not the end-all-be-all
certification which automatically >elevates someone to godlike status, as
much as you might want them to be >networking gods. > >This is actually
one thing I'm worried about, should I ever achieve the CCIE
>certification: I don't want some future employer to say "Oh, you're a
CCIE, >great - come over here and fix this NT server," only to be
disappointed to >learn that I know nothing about NT! > >The bottom line
is: don't criticize a CCIE because they don't know how to >use or manage
a UNIX server. That's not what they've been trained to do, >it's not what
they're certified to do, and if you're smart, you won't hire >someone to
do UNIX stuff without making them prove that they *can* do it. >In other
words, quit your bellyaching. ;-) > >BJ > > >- Original Message -
>From: "Sean Young" >To: >Sent: Friday, July 20, 2001 6:14 PM >Subject:
what's wrong with CCIE today? [7:13151] > > > > What's wrong with CCIEs
today? I know that I am making a general > > assumptions; however,this is
the second time that it has happend to the > > company that I work for.
We have several tacacs servers that use to > > authenticate users. These
tacacs servers are running on a combination of > > Linux and Solaris
platforms. While I was away at the Networker > > Conference, one of our
tacacs servers (solaris) die due to hardware > > failure and the
amazingly the tacacs process on the Linux die. Because > > of this,
everyone has to login to the routers and switches via local > > account.
We hire these CCIEs to maintain the network while I am away for > > a few
weeks. None of these CCIEs have any background with tacacs servers > >
running on Unix platforms. As to our problems, the simple to do is just >
> to restart the tacacs process byfirst: "killall tac_plus" and second >
> "/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys >
> have absolutely no clues. Furthermore, they don't even know how to use
> > editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
> > configuration files. We have a few employees that need tacacs account
> > but these CCIEs guys have no clues how to addnew users to a
configuration > > file which if anyone has done tacacs on the unix
platform know that you > > just modify the configuration file
tac_plus.conf and restart tacacs > > process. These CCIE guys say that
they come from a windows environment > > so they don't have too much with
Unix platforms. I also notice that a > > lot of CCIEs these days lack the
Unix skills that are required for the > > Service Providers environment.
Most don't even know how to tunnel > > X-application through Secure Shell
(SSH). I still remember those days > > when Cisco Engineers are very well
verse in both unix and routers > > skills. I long for those days again.
misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13168&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Sean Young

Come on guys.  Everyone's point is very well taken.  I am NOT saying that
a CCIE also has to be an expert with Unix.  All I am saying is that at
the very least, have a basic understand of Unix OS so that one can
accomplish basic tasks required by the job.  I bet that all CCIEs knows
how to change the network configuration in microsoft windows but not all
CCIEs know how to do the same thing to a Unix system.  The point I am
trying to make here is that know the basic.  I do notice the older CCIEs
(#3500 and lower) are very well diversifed with both their Cisco and Unix
skills.  The newer only know "point and click".

 

>From: "John Neiberger" >Reply-To: "John Neiberger" >To:
[EMAIL PROTECTED] >Subject: Re: what's wrong with CCIE today?
[7:13151] >Date: Fri, 20 Jul 2001 19:32:53 -0400 > >Last time I checked,
there was none of the following on the CCIE written >or lab: > >Unix
>Tacacs Server Configuration >X-application tunneling over SSL > >Would
you also expect a CCIE to be able to configure CICS on your >mainframe
and troubleshoot terminal controller problems in VTAM on your >FEP? >
>No, I don't think so. Remember, the first "C" in CCIE stands for
>"CISCO". Just because it's incredibly hard to get does not mean it's
>the ultimate pinnacle of networking achievement and there is nothing
>left to learn. > >In fact, I relate it to a black belt in martial arts.
Those with >experience understand that a black belt is yet another
starting point, >it's not the end of the road. > >Okay, enough rambling.
Time to go home! > >John > > >>> "Sean Young" 7/20/01 5:14:47 PM >>>
>What's wrong with CCIEs today? I know that I am making a general
>assumptions; however,this is the second time that it has happend to >the
>company that I work for. We have several tacacs servers that use to
>authenticate users. These tacacs servers are running on a combination
>of >Linux and Solaris platforms. While I was away at the Networker
>Conference, one of our tacacs servers (solaris) die due to hardware
>failure and the amazingly the tacacs process on the Linux die. >Because
>of this, everyone has to login to the routers and switches via local
>account. We hire these CCIEs to maintain the network while I am away
>for >a few weeks. None of these CCIEs have any background with tacacs
>servers >running on Unix platforms. As to our problems, the simple to do
is >just >to restart the tacacs process byfirst: "killall tac_plus" and
second >"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs
guys >have absolutely no clues. Furthermore, they don't even know how to
>use >editing in Unix (i.e vi or emacs) and ended up screwing up my
tacacs >configuration files. We have a few employees that need tacacs
account >but these CCIEs guys have no clues how to addnew users to a
>configuration >file which if anyone has done tacacs on the unix platform
know that >you >just modify the configuration file tac_plus.conf and
restart tacacs >process. These CCIE guys say that they come from a
windows >environment >so they don't have too much with Unix platforms. I
also notice that a >lot of CCIEs these days lack the Unix skills that are
required for the >Service Providers environment. Most don't even know how
to tunnel >X-application through Secure Shell (SSH). I still remember
those days >when Cisco Engineers are very well verse in both unix and
routers >skills. I long for those days again. Comments anyone? >
>
> >Get your FREE download of MSN Explorer at http://explorer.msn.com > >
misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13167&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Datagram size bigger than 200 get packet loss [7:13166]

2001-07-20 Thread [EMAIL PROTECTED]

Hi All,

When I try to ping with a Datagram Size bigger than 200 in a LAN I get
packet loss. Dose any one know the reason?

Regards,

Tarry


-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net

GMX Tipp:

Machen Sie Ihr Hobby zu Geld bei unserem Partner 1&1!
http://profiseller.de/info/index.php3?ac=OM.PS.PS003K00596T0409a




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13166&t=13166
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What's wrong with ccie today [7:13160]

2001-07-20 Thread hal9001

The next time you step onto an aircraft to go to any conference, business
trip or holiday you make sure that the pilots are certified for 747/757/767
or whatever.  The principles are all the same but the cheaper airlines will
always hope they can employee someone from 747's to fly 767's cause it all
starts with seven don't it.  You buy a horse for a course and your lucky if
it can do two races in the same day.  Happy next business trip/holiday
etc..etc.

Karl

- Original Message -
From: "Jim McDowell" 
To: 
Sent: Saturday, July 21, 2001 1:03 AM
Subject: What's wrong with ccie today [7:13160]


> Doggone those CCIEs.  Shame on them for not knowing UNIX startup scripts.
I
> guess I'll be a step ahead of them if I ever get my CCIE. :)
>
>
>
> What's wrong with CCIEs today? I know that I am making a general
> assumptions; however,this is the second time that it has happend to the
> company that I work for. We have several tacacs servers that use to
> authenticate users. These tacacs servers are running on a combination of
> Linux and Solaris platforms. While I was away at the Networker
> Conference, one of our tacacs servers (solaris) die due to hardware
> failure and the amazingly the tacacs process on the Linux die. Because
> of this, everyone has to login to the routers and switches via local
> account. We hire these CCIEs to maintain the network while I am away for
> a few weeks. None of these CCIEs have any background with tacacs servers
> running on Unix platforms. As to our problems, the simple to do is just
> to restart the tacacs process byfirst: "killall tac_plus" and second
> "/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
> have absolutely no clues. Furthermore, they don't even know how to use
> editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
> configuration files. We have a few employees that need tacacs account
> but these CCIEs guys have no clues how to addnew users to a configuration
> file which if anyone has done tacacs on the unix platform know that you
> just modify the configuration file tac_plus.conf and restart tacacs
> process. These CCIE guys say that they come from a windows environment
> so they don't have too much with Unix platforms. I also notice that a
> lot of CCIEs these days lack the Unix skills that are required for the
> Service Providers environment. Most don't even know how to tunnel
> X-application through Secure Shell (SSH). I still remember those days
> when Cisco Engineers are very well verse in both unix and routers
> skills. I long for those days again. Comments anyone?
>
> 
>
> Get your FREE download of MSN Explorer at




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13165&t=13160
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF [7:13105]

2001-07-20 Thread Chuck Larrieu

in addition to the fine books others have mentioned, it never hurts to take
a peek at the bible - RFC 2328

ftp://ftp.isi.edu/in-notes/rfc2328.txt

warning - not for the faint of heart.

Chuck

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 10:08 AM
To: [EMAIL PROTECTED]
Subject: OSPF [7:13105]


Hello all

Is there a book out there (besides Cisco's BSCN)that will break down OSPF in
all its glory to me? Design and Implementation in a backbone environment?

Any help will be greatly appreciated.

Thanks

Mike




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13163&t=13105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Multiple OSPF areas on the same router [7:13108]

2001-07-20 Thread Chuck Larrieu

couple of weeks ago I posted links to Cisco design documents that talked
about Cisco recommendations with regards to number of routers per area and
number of areas per router.

check out the design guides on CCO. follow the links to technical documents.

Chuck

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Lupi, Guy
Sent: Friday, July 20, 2001 10:30 AM
To: [EMAIL PROTECTED]
Subject: Multiple OSPF areas on the same router [7:13108]


Lets say you have a router with 6 DS3s, has anyone ever heard that it is not
a good practice to have each DS3 be its own area?  I was talking to someone
and they said that it may not be a good idea to have multiple areas on the
same router, but I have never heard that.  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13164&t=13108
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Code Red impact on Cisco products - FW: [I] Cisco Security [7:13162]

2001-07-20 Thread Leigh Anne Chisholm

I received this email from one of the SE's in Cisco's Calgary office.  Code
Red may impact certain Cisco products.

Both Cisco and Microsoft are advertising a fix (details are included below).

-Original Message-
Most of you have probably seen the Code Red worm affecting Microsoft IIS.

As some Cisco software uses Microsoft IIS for the underlying Operating
System, please read the field alert to see if you are running the following
Cisco products listed below.  Please contact your local Cisco SE for help.

http://www.cisco.com/warp/public/707/cisco-code-red-worm-pub.shtml


Cisco Security Advisory: "Code Red" Worm - Customer Impact

Revision 1.0

For Public Release 2001 July 20 12:00

Summary

A malicious self-replicating program known as the "Code Red" worm is
targeted at systems running the Microsoft Internet Information Server
(IIS). Several Cisco products are installed or provided on targeted
systems. Additionally, the behavior of the worm can cause problems for
other network devices.

The following Cisco products are vulnerable because they run affected
versions of Microsoft IIS:

 Cisco CallManager
 Cisco Unity Server
 Cisco uOne
 Cisco ICS7750

Other Cisco products may also be adversely affected by the "Code Red" worm.
Please see the Affected Products section for further details.

The worm and its effects may be remedied by applying the Microsoft patch to
affected servers:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/MS01-033.asp.

This advisory is available at
http://www.cisco.com/warp/public/707/cisco-code-red-worm-pub.shtml.

Affected Products

The following Cisco products are directly vulnerable because they run
affected versions of Microsoft IIS:

 Cisco CallManager
 Cisco Unity Server
 Cisco uOne
 Cisco ICS7750
 Cisco Building Broadband Service Manager

Other Cisco products may be indirectly affected by the IIS vulnerability
(this is not an exhaustive list):

 Cisco 600 series of DSL routers that have not been patched per the
Cisco Security Advisory,
http://www.cisco.com/warp/public/707/CBOS-multiple.shtml, will stop
forwarding traffic when scanned by a system infected by the "Code Red"
worm. The power must be cycled to restore normal service.

 Cisco Network Management products are not directly affected, but they
might be installed on a Microsoft platform running a vulnerable version of
IIS.

Details

The "Code Red" worm exploits a known vulnerability in Microsoft IIS by
passing a specially crafted Uniform Resource Identifier (URI) to the
default HTTP service, port 80, on a susceptible system. The URI consists of
binary instructions which cause the infected host to either begin scanning
other random IP addresses and pass the infection on to any other vulnerable
systems it finds, or launch a denial of service attack targeted at the IP
address 198.137.240.91 which, until very recently, was assigned to
www.whitehouse.gov. In both cases, the worm replaces the web server's
default web page with a defaced page at the time of initial infection.

The worm does not check for pre-existing infection, so that any given
system may be executing as many copies of the worm as have scanned it, with
a compounding effect on system and network demand.

As a side-effect, the URI used by the worm to infect other hosts causes
Cisco 600 series DSL routers to stop forwarding traffic by triggering a
previously-published vulnerability. Any 600 series routers scanned by the
"Code Red" worm will not resume normal service until the power to the
router has been cycled.

The nature of the "Code Red" worm's scan of random IP addresses and the
resulting sharp increase in network traffic can noticeably affect Cisco
Content Service Switches and Cisco routers running Cisco IOS software,
depending on the device and its configuration. Unusually high CPU
utilization and memory starvation may occur.

Impact

The "Code Red" worm is causing widespread denial of service on the Internet
and is compromising large numbers of vulnerable systems. Once infected, the
management of a Cisco CallManager product is disabled or severely limited
until the defaced web page is removed and the original management web page
is restored.

Software Versions and Fixes

Microsoft has made a patch available for affected systems at .

Cisco is providing the same patch at
http://www.cisco.com/pcgi-bin/Software/Tablebuild/doftp.pl?ftpfile=cisco/voi
ce/callmgr/win-IIS-SecurityUpdate-2.exe&swtype=FCS&code=&size=246296.

Documentation is available at
http://www.cisco.com/pcgi-bin/Software/Tablebuild/doftp.pl?ftpfile=cisco/voi
ce/callmgr/win-IIS-SecurityUpdate-Readme-2.htm&swtype=FCS&code=&size=4541.

The Cisco Building Broadband Service Manager is documented separately at
http://www.cisco.com/univercd/cc/td/doc/product/aggr/bbsm/bbsm50/urgent.htm
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violati

Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Doug Hammond

Hmm, maybe the fault lies in companies that only hire people who have a
specific set of certifications  to manage their networks. I, and for that
matter several other non-CCIEs I know, could easily have handled your
problem. I'm betting that you never even got the chance to see us, as the
insistence on having a CCIE never let us get past the recruiter, HR
department, or whoever made the hiring decision. I have met a lot of CCIEs
that don't understand the first thing about supporting a production network.
In fact, having a CCIE does not guarantee anything to anyone about anything
other than you have passed the CCIE lab.

If, in fact, your network has mutiple OSPF areas with a non-broadcast
Frame-relay WAN, redistribuition of RIP, EIGRP into damn near everything,
BGP confederations for three routers, and no static routes ever, the CCIEs
would be emminently qualified to support your network. A CCIE number does
not guarantee the ability to isolate and correct non-cisco issues, or the
ability to clearly articulate a thought to a non-techie person. For that
matter, the same can be said for hiring someone on the basis of having a 4.0
GPA, or being class president, or being a friend of your uncle Larry. When
looking for someone to support your network you really need to sit down and
discuss what that means and having an open mind as to the ability of the
person sitting across from you to do the job. Of course, that is a lot
harder than calling a recruiter and saying "I need a CCIE to manage my
network".

- just doing a little "not getting through HR" venting!

""Sean Young""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> What's wrong with CCIEs today?  I know that I am making a general
> assumptions; however,this is the second time that it has happend to the
> company that I work for.  We have several tacacs servers that use to
> authenticate users.  These tacacs servers are running on a combination of
> Linux and Solaris platforms.  While I was away at the Networker
> Conference, one of our tacacs servers (solaris) die due to hardware
> failure and the amazingly the tacacs process on the Linux die.  Because
> of this, everyone has to login to the routers and switches via local
> account.  We hire these CCIEs to maintain the network while I am away for
> a few weeks.  None of these CCIEs have any background with tacacs servers
> running on Unix platforms.  As to our problems, the simple to do is just
> to restart the tacacs process byfirst:  "killall tac_plus" and second
> "/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
> have absolutely no clues.  Furthermore, they don't even know how to use
> editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
> configuration files.  We have a few employees that need tacacs account
> but these CCIEs guys have no clues how to addnew users to a configuration
> file which if anyone has done tacacs on the unix platform know that you
> just modify the configuration file tac_plus.conf and restart tacacs
> process.   These CCIE guys say that they come from a windows environment
> so they don't have too much with Unix platforms.  I also notice that a
> lot of CCIEs these days lack the Unix skills that are required for the
> Service Providers environment.  Most don't even know how to tunnel
> X-application through Secure Shell (SSH).  I still remember those days
> when Cisco Engineers are very well verse in both unix and routers
> skills.  I long for those days again. Comments anyone?
>
> 
>
> Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13161&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



What's wrong with ccie today [7:13160]

2001-07-20 Thread Jim McDowell

Doggone those CCIEs.  Shame on them for not knowing UNIX startup scripts.  I
guess I'll be a step ahead of them if I ever get my CCIE. :)



What's wrong with CCIEs today? I know that I am making a general
assumptions; however,this is the second time that it has happend to the
company that I work for. We have several tacacs servers that use to
authenticate users. These tacacs servers are running on a combination of
Linux and Solaris platforms. While I was away at the Networker
Conference, one of our tacacs servers (solaris) die due to hardware
failure and the amazingly the tacacs process on the Linux die. Because
of this, everyone has to login to the routers and switches via local
account. We hire these CCIEs to maintain the network while I am away for
a few weeks. None of these CCIEs have any background with tacacs servers
running on Unix platforms. As to our problems, the simple to do is just
to restart the tacacs process byfirst: "killall tac_plus" and second
"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
have absolutely no clues. Furthermore, they don't even know how to use
editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
configuration files. We have a few employees that need tacacs account
but these CCIEs guys have no clues how to addnew users to a configuration
file which if anyone has done tacacs on the unix platform know that you
just modify the configuration file tac_plus.conf and restart tacacs
process. These CCIE guys say that they come from a windows environment
so they don't have too much with Unix platforms. I also notice that a
lot of CCIEs these days lack the Unix skills that are required for the
Service Providers environment. Most don't even know how to tunnel
X-application through Secure Shell (SSH). I still remember those days
when Cisco Engineers are very well verse in both unix and routers
skills. I long for those days again. Comments anyone?



Get your FREE download of MSN Explorer at 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13160&t=13160
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Carroll Kong

At 07:14 PM 7/20/01 -0400, Sean Young wrote:
>process.   These CCIE guys say that they come from a windows environment
>so they don't have too much with Unix platforms.  I also notice that a
>lot of CCIEs these days lack the Unix skills that are required for the
>Service Providers environment.  Most don't even know how to tunnel
>X-application through Secure Shell (SSH).  I still remember those days
>when Cisco Engineers are very well verse in both unix and routers
>skills.  I long for those days again. Comments anyone?

So what is the problem?  I mean, yes, it is unfortunate.  However, in no 
way is it a requirement to become a CCIE.  Would I prefer a CCIE with a 
unix background, yeah definitely.  However, that is just asking for more 
candy coating.

My guess is, past CCIEs had more experience because Cisco ACS was only 
available on unix maybe?



-Carroll Kong




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13159&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MAC control [7:13148]

2001-07-20 Thread EA Louie

you don't.  You apply them to bridge groups, so you'd have to configure IRB
or CRB in order to apply the MAC address access list.

see
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/ibm_c
/bcprt1/bctb.htm#xtocid1230338 (watch the html word wrap)

-e-

- Original Message -
From: Jim Bond 
To: 
Sent: Friday, July 20, 2001 3:37 PM
Subject: MAC control [7:13148]


> Hello,
>
> I want to block a MAC address to cross a router
> interface, is there a way to do it? I tried to
> configure a 700 access-list but how do I put it on an
> interface?
>
> Thanks in advance.
>
> Jim
>
> __
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13158&t=13148
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread David Wolsefer

While I agree that a lot of engineers could use more Unix skills (myself
included), the CCIE in routing and switching does not test skills for
running Unix TACACs servers. The CCIE in ISP-DIAL, however, is a different
matter entirely since the ISP-Dial CCIE tests the ability to configure Cisco
Secure under Windows NT and Solaris. Many R&S CCIEs are not from a carrier
background, but many are. When I worked at a major carrier, I never had to
configure the Tacacs server. There was a seperate team for that. I did,
however, frequently configure Tacacs+ on routers and switches. I have yet to
have a single customer request to tunnel X-application through Secure Shell
(SSH). A CCIE is not an all knowing being. All that you can really infer
from a person's CCIE status is that he/she knows routing and switching
reasonably well on the 3600s, 2600s, 2500, Cat 5000s etc. I do think that
even though a CCIE (R&S) might not know how to configure a Tacacs server off
the top of their head, they should have the skills to research the
appropriate documentation, get help from TAC, and configure things given a
reasonable amount of time. I would also like to point out that there are
many people out there calling themselves CCIEs these days. Did you verify
with Cisco that these people are really CCIEs? Why didn't you ask these
people about their Tacacs knowledge before you hired them if this was
important to you? Finally, this post is off topic. Why is it even posted to
a Cisco certification mailing list without "OFF TOPIC" in the subject.

Regards,

David Wolsefer, CCIE #5858

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Sean Young
Sent: Friday, July 20, 2001 4:15 PM
To: [EMAIL PROTECTED]
Subject: what's wrong with CCIE today? [7:13151]


What's wrong with CCIEs today?  I know that I am making a general
assumptions; however,this is the second time that it has happend to the
company that I work for.  We have several tacacs servers that use to
authenticate users.  These tacacs servers are running on a combination of
Linux and Solaris platforms.  While I was away at the Networker
Conference, one of our tacacs servers (solaris) die due to hardware
failure and the amazingly the tacacs process on the Linux die.  Because
of this, everyone has to login to the routers and switches via local
account.  We hire these CCIEs to maintain the network while I am away for
a few weeks.  None of these CCIEs have any background with tacacs servers
running on Unix platforms.  As to our problems, the simple to do is just
to restart the tacacs process byfirst:  "killall tac_plus" and second
"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
have absolutely no clues.  Furthermore, they don't even know how to use
editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
configuration files.  We have a few employees that need tacacs account
but these CCIEs guys have no clues how to addnew users to a configuration
file which if anyone has done tacacs on the unix platform know that you
just modify the configuration file tac_plus.conf and restart tacacs
process.   These CCIE guys say that they come from a windows environment
so they don't have too much with Unix platforms.  I also notice that a
lot of CCIEs these days lack the Unix skills that are required for the
Service Providers environment.  Most don't even know how to tunnel
X-application through Secure Shell (SSH).  I still remember those days
when Cisco Engineers are very well verse in both unix and routers
skills.  I long for those days again. Comments anyone?



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13157&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What do I need to complete a Token ring lab? [7:13092]

2001-07-20 Thread Tony Medeiros

If anybody needs some RJ-45 token ring MAU's,  I have 4 for sale and they
all work.  Contact me offline

Tony M.
#6172
[EMAIL PROTECTED]

- Original Message -
From: EA Louie 
To: 
Sent: Friday, July 20, 2001 9:22 AM
Subject: Re: What do I need to complete a Token ring lab? [7:13092]


> You'll need a few token ring devices - a 2513 would be a good choice for a
> 2nd T/R router (it will allow you to do SR/TLB), and a 2515 would be a
good
> idea too, so you can do SRB.  You'll also want Enterprise IOS on those or
a
> couple of other routers so you can practice DLSw.
>
> -e-
> - Original Message -
> From: Kenneth Woodely
> To:
> Sent: Friday, July 20, 2001 7:24 AM
> Subject: What do I need to complete a Token ring lab? [7:13092]
>
>
> > I'm trying to get my home lab ready to take the CCIE R/S written and
lab.
> > However, I need to know what equipment to get to complete token ring
> > section. I know I need a cisco 2502.
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13156&t=13092
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Ayers, Michael

Sean
Not everyone can know everything about all Networking and OS's.  You
obviously know how your network runs, but is it documented?, and if so, is
the documentation in a coherent library format?   Sounds to me like this
important information may not have passed on during your network turnover to
these CCIEs.  If you had planed ahead, you would have hired the people with
a skill set that matches your business need.  Yes, there may be CCIEs that
can't do anything but Cisco products, but the assumption that everyone has
your exact, and (by the sound of it) diverse skill set.  I never would have
turned my network over to a group without making sure they had the required
skill set, or at least access to a large skill set base.

Clarify before you flame!

BTW, I'm not a CCIE, and may never be one. (only Cisco VARs benefit in my
opinion)



 -Original Message-
From:   Sean Young [mailto:[EMAIL PROTECTED]] 
Sent:   Friday, July 20, 2001 4:15 PM
To: [EMAIL PROTECTED]
Subject:what's wrong with CCIE today? [7:13151]

What's wrong with CCIEs today?  I know that I am making a general
assumptions; however,this is the second time that it has happend to the
company that I work for.  We have several tacacs servers that use to
authenticate users.  These tacacs servers are running on a combination of
Linux and Solaris platforms.  While I was away at the Networker
Conference, one of our tacacs servers (solaris) die due to hardware
failure and the amazingly the tacacs process on the Linux die.  Because
of this, everyone has to login to the routers and switches via local
account.  We hire these CCIEs to maintain the network while I am away for
a few weeks.  None of these CCIEs have any background with tacacs servers
running on Unix platforms.  As to our problems, the simple to do is just
to restart the tacacs process byfirst:  "killall tac_plus" and second
"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
have absolutely no clues.  Furthermore, they don't even know how to use
editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
configuration files.  We have a few employees that need tacacs account
but these CCIEs guys have no clues how to addnew users to a configuration
file which if anyone has done tacacs on the unix platform know that you
just modify the configuration file tac_plus.conf and restart tacacs
process.   These CCIE guys say that they come from a windows environment
so they don't have too much with Unix platforms.  I also notice that a
lot of CCIEs these days lack the Unix skills that are required for the
Service Providers environment.  Most don't even know how to tunnel
X-application through Secure Shell (SSH).  I still remember those days
when Cisco Engineers are very well verse in both unix and routers
skills.  I long for those days again. Comments anyone? 



Get your FREE download of MSN Explorer at http://explorer.msn.com
Privileged/Confidential Information may be contained in this message or
attachments hereto.  Please advise immediately if you or your employer do
not consent to Internet email for messages of this kind.  Opinions,
conclusions and other information in this message that do not relate to the
official business of this company shall be understood as neither given nor
endorsed by it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13155&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread B.J. Wilson

You're attributing a fault in "these guys" to a certification which doesn't
test on UNIX skills.  In other words, they're CCIEs - they know more than
you or I do about routing and switching on Cisco routers (presumably).  But
the CCIE is the *beginning* of an overall understanding of how networks
work - it's not the end-all-be-all certification which automatically
elevates someone to godlike status, as much as you might want them to be
networking gods.

This is actually one thing I'm worried about, should I ever achieve the CCIE
certification: I don't want some future employer to say "Oh, you're a CCIE,
great - come over here and fix this NT server," only to be disappointed to
learn that I know nothing about NT!

The bottom line is: don't criticize a CCIE because they don't know how to
use or manage a UNIX server.  That's not what they've been trained to do,
it's not what they're certified to do, and if you're smart, you won't hire
someone to do UNIX stuff without making them prove that they *can* do it.
In other words, quit your bellyaching. ;-)

BJ


- Original Message -
From: "Sean Young" 
To: 
Sent: Friday, July 20, 2001 6:14 PM
Subject: what's wrong with CCIE today? [7:13151]


> What's wrong with CCIEs today?  I know that I am making a general
> assumptions; however,this is the second time that it has happend to the
> company that I work for.  We have several tacacs servers that use to
> authenticate users.  These tacacs servers are running on a combination of
> Linux and Solaris platforms.  While I was away at the Networker
> Conference, one of our tacacs servers (solaris) die due to hardware
> failure and the amazingly the tacacs process on the Linux die.  Because
> of this, everyone has to login to the routers and switches via local
> account.  We hire these CCIEs to maintain the network while I am away for
> a few weeks.  None of these CCIEs have any background with tacacs servers
> running on Unix platforms.  As to our problems, the simple to do is just
> to restart the tacacs process byfirst:  "killall tac_plus" and second
> "/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
> have absolutely no clues.  Furthermore, they don't even know how to use
> editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
> configuration files.  We have a few employees that need tacacs account
> but these CCIEs guys have no clues how to addnew users to a configuration
> file which if anyone has done tacacs on the unix platform know that you
> just modify the configuration file tac_plus.conf and restart tacacs
> process.   These CCIE guys say that they come from a windows environment
> so they don't have too much with Unix platforms.  I also notice that a
> lot of CCIEs these days lack the Unix skills that are required for the
> Service Providers environment.  Most don't even know how to tunnel
> X-application through Secure Shell (SSH).  I still remember those days
> when Cisco Engineers are very well verse in both unix and routers
> skills.  I long for those days again. Comments anyone?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13154&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread John Neiberger

Last time I checked, there was none of the following on the CCIE written
or lab:

Unix
Tacacs Server Configuration
X-application tunneling over SSL

Would you also expect a CCIE to be able to configure CICS on your
mainframe and troubleshoot terminal controller problems in VTAM on your
FEP?  

No, I don't think so.  Remember, the first "C" in CCIE stands for
"CISCO".  Just because it's incredibly hard to get does not mean it's
the ultimate pinnacle of networking achievement and there is nothing
left to learn.

In fact, I relate it to a black belt in martial arts.  Those with
experience understand that a black belt is yet another starting point,
it's not the end of the road.

Okay, enough rambling.  Time to go home!

John

>>> "Sean Young"  7/20/01 5:14:47 PM >>>
What's wrong with CCIEs today?  I know that I am making a general
assumptions; however,this is the second time that it has happend to
the
company that I work for.  We have several tacacs servers that use to
authenticate users.  These tacacs servers are running on a combination
of
Linux and Solaris platforms.  While I was away at the Networker
Conference, one of our tacacs servers (solaris) die due to hardware
failure and the amazingly the tacacs process on the Linux die. 
Because
of this, everyone has to login to the routers and switches via local
account.  We hire these CCIEs to maintain the network while I am away
for
a few weeks.  None of these CCIEs have any background with tacacs
servers
running on Unix platforms.  As to our problems, the simple to do is
just
to restart the tacacs process byfirst:  "killall tac_plus" and second
"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
have absolutely no clues.  Furthermore, they don't even know how to
use
editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
configuration files.  We have a few employees that need tacacs account
but these CCIEs guys have no clues how to addnew users to a
configuration
file which if anyone has done tacacs on the unix platform know that
you
just modify the configuration file tac_plus.conf and restart tacacs
process.   These CCIE guys say that they come from a windows
environment
so they don't have too much with Unix platforms.  I also notice that a
lot of CCIEs these days lack the Unix skills that are required for the
Service Providers environment.  Most don't even know how to tunnel
X-application through Secure Shell (SSH).  I still remember those days
when Cisco Engineers are very well verse in both unix and routers
skills.  I long for those days again. Comments anyone? 



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13153&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Jaspreet Bhatia

I agree with Sean that a CCIE should be able to perform basic UNIX tasks and
be familiar
with UNIX as such but this here can quickly become a grey area . Because
UNIX and
networking are both vast fields in themselves ,expecting one person to be a
master of
both is not right . I   work as  a  System Administrator and I have worked
as a Network
Engineer during my past projects . Not to say that I am a master of UNIX , I
just know
how to find my way through it . And then there are gifted individuals who
have been
around too long and came from Sys Admin positions and  moved to Network
Engineer
positions .They might have best of both worlds .But remember Sean , you
cannot have your
cake and eat it too... Just my 2 cents


Jaspreet

Sean Young wrote:

> What's wrong with CCIEs today?  I know that I am making a general
> assumptions; however,this is the second time that it has happend to the
> company that I work for.  We have several tacacs servers that use to
> authenticate users.  These tacacs servers are running on a combination of
> Linux and Solaris platforms.  While I was away at the Networker
> Conference, one of our tacacs servers (solaris) die due to hardware
> failure and the amazingly the tacacs process on the Linux die.  Because
> of this, everyone has to login to the routers and switches via local
> account.  We hire these CCIEs to maintain the network while I am away for
> a few weeks.  None of these CCIEs have any background with tacacs servers
> running on Unix platforms.  As to our problems, the simple to do is just
> to restart the tacacs process byfirst:  "killall tac_plus" and second
> "/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
> have absolutely no clues.  Furthermore, they don't even know how to use
> editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
> configuration files.  We have a few employees that need tacacs account
> but these CCIEs guys have no clues how to addnew users to a configuration
> file which if anyone has done tacacs on the unix platform know that you
> just modify the configuration file tac_plus.conf and restart tacacs
> process.   These CCIE guys say that they come from a windows environment
> so they don't have too much with Unix platforms.  I also notice that a
> lot of CCIEs these days lack the Unix skills that are required for the
> Service Providers environment.  Most don't even know how to tunnel
> X-application through Secure Shell (SSH).  I still remember those days
> when Cisco Engineers are very well verse in both unix and routers
> skills.  I long for those days again. Comments anyone?
>
> 
>
> Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13152&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



what's wrong with CCIE today? [7:13151]

2001-07-20 Thread Sean Young

What's wrong with CCIEs today?  I know that I am making a general
assumptions; however,this is the second time that it has happend to the
company that I work for.  We have several tacacs servers that use to
authenticate users.  These tacacs servers are running on a combination of
Linux and Solaris platforms.  While I was away at the Networker
Conference, one of our tacacs servers (solaris) die due to hardware
failure and the amazingly the tacacs process on the Linux die.  Because
of this, everyone has to login to the routers and switches via local
account.  We hire these CCIEs to maintain the network while I am away for
a few weeks.  None of these CCIEs have any background with tacacs servers
running on Unix platforms.  As to our problems, the simple to do is just
to restart the tacacs process byfirst:  "killall tac_plus" and second
"/usr/sbin/tac_plus -C /etc/tacacs/tac_plus.cfg" but these CCIEs guys
have absolutely no clues.  Furthermore, they don't even know how to use
editing in Unix (i.e vi or emacs) and ended up screwing up my tacacs
configuration files.  We have a few employees that need tacacs account
but these CCIEs guys have no clues how to addnew users to a configuration
file which if anyone has done tacacs on the unix platform know that you
just modify the configuration file tac_plus.conf and restart tacacs
process.   These CCIE guys say that they come from a windows environment
so they don't have too much with Unix platforms.  I also notice that a
lot of CCIEs these days lack the Unix skills that are required for the
Service Providers environment.  Most don't even know how to tunnel
X-application through Secure Shell (SSH).  I still remember those days
when Cisco Engineers are very well verse in both unix and routers
skills.  I long for those days again. Comments anyone? 



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13151&t=13151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: looking for tech support newsgroup [7:11769]

2001-07-20 Thread Leonardo Borda

And what4s the news server?

thanks!




""no mail""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Don't know why it didn't stick last time.
>
> comp.dcom.sys.cisco
>
>
> ""john""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hello,
> > I'm in the wrong newsgroup. I wondered if anyone could point me in
the
> > direction of a cisco tech support newsgroup.
> >
> > Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13149&t=11769
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



MAC control [7:13148]

2001-07-20 Thread Jim Bond

Hello,

I want to block a MAC address to cross a router
interface, is there a way to do it? I tried to
configure a 700 access-list but how do I put it on an
interface?

Thanks in advance.

Jim

__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13148&t=13148
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: AGS+ as a frame-relay switch [7:13133]

2001-07-20 Thread Daniel Cotts

In the context of a Frame Relay switch there are two uses of DCE. On the
physical layer DCE refers to the end that requires clocking. On the layer
two or Frame Relay area of the config the FR Switch needs to be identified
as acting as DCE equipment. So a router acting as a Frame Relay Switch can
use either DTE or DCE cables. It must identify itself as DCE as Ejay gave
before "frame-relay intf-type dce"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13147&t=13133
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: AGS+ as a frame-relay switch [7:13133]

2001-07-20 Thread Hire, Ejay

This is exactly the same problem I was seeing before I switched the jumper
on the CSC card for DTe.

-Ejay


-Original Message-
From: Charles Ryan [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 5:28 PM
To: Hire, Ejay; [EMAIL PROTECTED]
Subject: Re: AGS+ as a frame-relay switch [7:13133]


I'm getting this from "debug frame-relay lmi":


Serial0(in): Unexpected StEnq, clock 1535608
Serial0(out): StEnq, clock 1542300, myseq 13, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

 FR encap = 0x00010308
00 75 95 01 01 00 03 02 0D 00

Serial0(in): Unexpected StEnq, clock 1545608
Serial0(out): StEnq, clock 1552300, myseq 14, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

 FR encap = 0x00010308
00 75 95 01 01 00 03 02 0E 00

Serial0(in): Unexpected StEnq, clock 1555608
Serial0(out): StEnq, clock 1562300, myseq 15, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

 FR encap = 0x00010308
00 75 95 01 01 00 03 02 0F 00

Serial0(in): Unexpected StEnq, clock 1565608
Serial0(out): StEnq, clock 1572300, myseq 16, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

 FR encap = 0x00010308
00 75 95 01 01 00 03 02 10 00

Serial0(in): Unexpected StEnq, clock 1575608
Serial0(out): StEnq, clock 1582300, myseq 17, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

It's almost like it's confused that it's receiving clock source from the
other end of the connection, and is trying to provide clocking on it's own.

In looking at the "show controllers mci" command, it shows that the ports
are setup for DTE, so now I'm really confused. Swapping cables didn't work,
line protocol comes up, then goes down.

I'll keep digging..

- Original Message -
From: "Hire, Ejay" 
To: 
Sent: Friday, July 20, 2001 5:22 PM
Subject: RE: AGS+ as a frame-relay switch [7:13133]


> It doesn't matter which end of the cable is dce, as long as you are using
a
> dte-dce cable and the dce end is configured with a clock rate.
>
> I have an AGS configured as a frame-relay switch with a csc/4t serial card
> and HDv.35 dce to Cisco HD60 Dte cables.  I also had difficulty getting
the
> confuration to work until I RTFM and discovered that I had to change a
> jumper on the CSC/4t serial card to place the ags ports in DCE mode.
>
> Here is a my config
> version 10.2
>
> service config
>
> !
>
> enable secret 5 $1$1uBB$Tg1x6HtEuWjLJCsVgGEp11
>
> enable password passwor
>
> !
>
> frame-relay switching
>
> !
>
> interface Ethernet0
>
> no ip address
>
> shutdown
>
>
> ...
>
>
> interface Ethernet11
>
> no ip address
>
> shutdown
>
> !
>
> interface Serial0
>
> ip address 10.1.0.2 255.255.255.0
>
> encapsulation frame-relay
>
> clockrate 64000
>
> frame-relay intf-type dce
>
> frame-relay route 16 interface Serial1 17
>
> !
>
> interface Serial1
>
> ip address 10.2.0.1 255.255.255.0
>
> encapsulation frame-relay
>
> clockrate 64000
>
> frame-relay intf-type dce
>
> frame-relay route 17 interface Serial0 16
>
> !
>
>
> ...
> !
>
> line con 0
>
> exec-timeout 0 0
>
> line aux 0
>
> line vty 0 4
>
> password password
>
> login
>
> !
>
> end
>
>
>
> -Original Message-
> From: Charles Ryan [mailto:[EMAIL PROTECTED]]
> Sent: Friday, July 20, 2001 4:04 PM
> To: [EMAIL PROTECTED]
> Subject: AGS+ as a frame-relay switch [7:13133]
>
>
> Apologies if this has already been covered once before.
>
> Quick question regarding setting up an AGS+ as a frame switch.
>
> Do the cables connecting to the AGS+ have to be DCE in order to get the
> frame-relay switching to work, or can it still work if the cables are DTE?
I
> currently have DTE cables into the AGS+ and am not getting line protocol
to
> come up, even though the other ends are DCE and I have "clock rate 64000"
> configured on the other ends.
>
> I also have encap frame-realy ietf on both sides, frame-relay lmi-type
ansi
> as well.
>
> I'll search the archives while I await an answer.
>
> Thanks!
>
> -Chuck
>
>
>
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13146&t=13133
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AGS+ as a frame-relay switch [7:13133]

2001-07-20 Thread EA Louie

Did you check the jumper the applique on the AGS+ serial interface to make
it DCE?  It was on the webpage that was presented in a previous email.

-e-

- Original Message -
From: Charles Ryan 
To: 
Sent: Friday, July 20, 2001 2:44 PM
Subject: Re: AGS+ as a frame-relay switch [7:13133]


> I'm getting this from "debug frame-relay lmi":
>
>
> Serial0(in): Unexpected StEnq, clock 1535608
> Serial0(out): StEnq, clock 1542300, myseq 13, yourseen 0, DTE down
>  datagramstart = 0x558B18, datagramsize = 14
>
>  FR encap = 0x00010308
> 00 75 95 01 01 00 03 02 0D 00
>
> Serial0(in): Unexpected StEnq, clock 1545608
> Serial0(out): StEnq, clock 1552300, myseq 14, yourseen 0, DTE down
>  datagramstart = 0x558B18, datagramsize = 14
>
>  FR encap = 0x00010308
> 00 75 95 01 01 00 03 02 0E 00
>
> Serial0(in): Unexpected StEnq, clock 1555608
> Serial0(out): StEnq, clock 1562300, myseq 15, yourseen 0, DTE down
>  datagramstart = 0x558B18, datagramsize = 14
>
>  FR encap = 0x00010308
> 00 75 95 01 01 00 03 02 0F 00
>
> Serial0(in): Unexpected StEnq, clock 1565608
> Serial0(out): StEnq, clock 1572300, myseq 16, yourseen 0, DTE down
>  datagramstart = 0x558B18, datagramsize = 14
>
>  FR encap = 0x00010308
> 00 75 95 01 01 00 03 02 10 00
>
> Serial0(in): Unexpected StEnq, clock 1575608
> Serial0(out): StEnq, clock 1582300, myseq 17, yourseen 0, DTE down
>  datagramstart = 0x558B18, datagramsize = 14
>
> It's almost like it's confused that it's receiving clock source from the
> other end of the connection, and is trying to provide clocking on it's
own.
>
> In looking at the "show controllers mci" command, it shows that the ports
> are setup for DTE, so now I'm really confused. Swapping cables didn't
work,
> line protocol comes up, then goes down.
>
> I'll keep digging..
>
> - Original Message -
> From: "Hire, Ejay"
> To:
> Sent: Friday, July 20, 2001 5:22 PM
> Subject: RE: AGS+ as a frame-relay switch [7:13133]
>
>
> > It doesn't matter which end of the cable is dce, as long as you are
using
> a
> > dte-dce cable and the dce end is configured with a clock rate.
> >
> > I have an AGS configured as a frame-relay switch with a csc/4t serial
card
> > and HDv.35 dce to Cisco HD60 Dte cables.  I also had difficulty getting
> the
> > confuration to work until I RTFM and discovered that I had to change a
> > jumper on the CSC/4t serial card to place the ags ports in DCE mode.
> >
> > Here is a my config
> > version 10.2
> >
> > service config
> >
> > !
> >
> > enable secret 5 $1$1uBB$Tg1x6HtEuWjLJCsVgGEp11
> >
> > enable password passwor
> >
> > !
> >
> > frame-relay switching
> >
> > !
> >
> > interface Ethernet0
> >
> > no ip address
> >
> > shutdown
> >
> >
> > ...
> >
> >
> > interface Ethernet11
> >
> > no ip address
> >
> > shutdown
> >
> > !
> >
> > interface Serial0
> >
> > ip address 10.1.0.2 255.255.255.0
> >
> > encapsulation frame-relay
> >
> > clockrate 64000
> >
> > frame-relay intf-type dce
> >
> > frame-relay route 16 interface Serial1 17
> >
> > !
> >
> > interface Serial1
> >
> > ip address 10.2.0.1 255.255.255.0
> >
> > encapsulation frame-relay
> >
> > clockrate 64000
> >
> > frame-relay intf-type dce
> >
> > frame-relay route 17 interface Serial0 16
> >
> > !
> >
> >
> > ...
> > !
> >
> > line con 0
> >
> > exec-timeout 0 0
> >
> > line aux 0
> >
> > line vty 0 4
> >
> > password password
> >
> > login
> >
> > !
> >
> > end
> >
> >
> >
> > -Original Message-
> > From: Charles Ryan [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, July 20, 2001 4:04 PM
> > To: [EMAIL PROTECTED]
> > Subject: AGS+ as a frame-relay switch [7:13133]
> >
> >
> > Apologies if this has already been covered once before.
> >
> > Quick question regarding setting up an AGS+ as a frame switch.
> >
> > Do the cables connecting to the AGS+ have to be DCE in order to get the
> > frame-relay switching to work, or can it still work if the cables are
DTE?
> I
> > currently have DTE cables into the AGS+ and am not getting line protocol
> to
> > come up, even though the other ends are DCE and I have "clock rate
64000"
> > configured on the other ends.
> >
> > I also have encap frame-realy ietf on both sides, frame-relay lmi-type
> ansi
> > as well.
> >
> > I'll search the archives while I await an answer.
> >
> > Thanks!
> >
> > -Chuck
> >
> >
> >
> > _
> > Do You Yahoo!?
> > Get your free @yahoo.com address at http://mail.yahoo.com
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13145&t=13133
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTE

Re: Minicom [7:13132]

2001-07-20 Thread Sean Young

Brian,

go to www.google.com and look for a software called seyon.  This is
equivalent to Teraterm

Pro in windows.  It is the best hyperterminal (freeware) for linux.  Just
download the rpm

package and rpm it with "rpm -Uvh package-name".  to run, just type
seyon. 

Good luck

>From: "bjp" >Reply-To: "bjp" >To: [EMAIL PROTECTED] >Subject: Minicom
[7:13132] >Date: Fri, 20 Jul 2001 16:03:45 -0400 > >I want to use my
RedHat 7.1 box to log into my Cisco routers. I'm not >real sure how to go
about doing this. I know that I will need to use >minicom to do so. The
command to configure mincom is minicom -s but then >I'm stuck. I do not
misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13144&t=13132
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AGS+ as a frame-relay switch [7:13133]

2001-07-20 Thread Charles Ryan

I'm getting this from "debug frame-relay lmi":


Serial0(in): Unexpected StEnq, clock 1535608
Serial0(out): StEnq, clock 1542300, myseq 13, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

 FR encap = 0x00010308
00 75 95 01 01 00 03 02 0D 00

Serial0(in): Unexpected StEnq, clock 1545608
Serial0(out): StEnq, clock 1552300, myseq 14, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

 FR encap = 0x00010308
00 75 95 01 01 00 03 02 0E 00

Serial0(in): Unexpected StEnq, clock 1555608
Serial0(out): StEnq, clock 1562300, myseq 15, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

 FR encap = 0x00010308
00 75 95 01 01 00 03 02 0F 00

Serial0(in): Unexpected StEnq, clock 1565608
Serial0(out): StEnq, clock 1572300, myseq 16, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

 FR encap = 0x00010308
00 75 95 01 01 00 03 02 10 00

Serial0(in): Unexpected StEnq, clock 1575608
Serial0(out): StEnq, clock 1582300, myseq 17, yourseen 0, DTE down
 datagramstart = 0x558B18, datagramsize = 14

It's almost like it's confused that it's receiving clock source from the
other end of the connection, and is trying to provide clocking on it's own.

In looking at the "show controllers mci" command, it shows that the ports
are setup for DTE, so now I'm really confused. Swapping cables didn't work,
line protocol comes up, then goes down.

I'll keep digging..

- Original Message -
From: "Hire, Ejay" 
To: 
Sent: Friday, July 20, 2001 5:22 PM
Subject: RE: AGS+ as a frame-relay switch [7:13133]


> It doesn't matter which end of the cable is dce, as long as you are using
a
> dte-dce cable and the dce end is configured with a clock rate.
>
> I have an AGS configured as a frame-relay switch with a csc/4t serial card
> and HDv.35 dce to Cisco HD60 Dte cables.  I also had difficulty getting
the
> confuration to work until I RTFM and discovered that I had to change a
> jumper on the CSC/4t serial card to place the ags ports in DCE mode.
>
> Here is a my config
> version 10.2
>
> service config
>
> !
>
> enable secret 5 $1$1uBB$Tg1x6HtEuWjLJCsVgGEp11
>
> enable password passwor
>
> !
>
> frame-relay switching
>
> !
>
> interface Ethernet0
>
> no ip address
>
> shutdown
>
>
> ...
>
>
> interface Ethernet11
>
> no ip address
>
> shutdown
>
> !
>
> interface Serial0
>
> ip address 10.1.0.2 255.255.255.0
>
> encapsulation frame-relay
>
> clockrate 64000
>
> frame-relay intf-type dce
>
> frame-relay route 16 interface Serial1 17
>
> !
>
> interface Serial1
>
> ip address 10.2.0.1 255.255.255.0
>
> encapsulation frame-relay
>
> clockrate 64000
>
> frame-relay intf-type dce
>
> frame-relay route 17 interface Serial0 16
>
> !
>
>
> ...
> !
>
> line con 0
>
> exec-timeout 0 0
>
> line aux 0
>
> line vty 0 4
>
> password password
>
> login
>
> !
>
> end
>
>
>
> -Original Message-
> From: Charles Ryan [mailto:[EMAIL PROTECTED]]
> Sent: Friday, July 20, 2001 4:04 PM
> To: [EMAIL PROTECTED]
> Subject: AGS+ as a frame-relay switch [7:13133]
>
>
> Apologies if this has already been covered once before.
>
> Quick question regarding setting up an AGS+ as a frame switch.
>
> Do the cables connecting to the AGS+ have to be DCE in order to get the
> frame-relay switching to work, or can it still work if the cables are DTE?
I
> currently have DTE cables into the AGS+ and am not getting line protocol
to
> come up, even though the other ends are DCE and I have "clock rate 64000"
> configured on the other ends.
>
> I also have encap frame-realy ietf on both sides, frame-relay lmi-type
ansi
> as well.
>
> I'll search the archives while I await an answer.
>
> Thanks!
>
> -Chuck
>
>
>
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13143&t=13133
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF [7:13105]

2001-07-20 Thread mike rose

Thanks all, running to the internet book store now. !!!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13142&t=13105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AGS+ as a frame-relay switch [7:13133]

2001-07-20 Thread Charles Ryan

So what am I looking for within this web page? I was actually looking for a
"yes" or "no" answer, and hopefully some insight as to what else I may need
to configure on the AGS+.

Odd thing is, when I have it configured for normal back-to-back operations
via HDLC, it works just fine. No problems whatsoever.

It appears that the router is configured as DTE, as best that I can tell
from the "show controllers mci" command:

AGS+#sh controllers mci
MCI 1, controller type 1.1, microcode version 1.11
  128 Kbytes of main memory, 4 Kbytes cache memory
  23 system TX buffers, largest buffer size 1520
  Restarts: 0 line down, 0 hung output, 0 controller error

  Interface 1 is Serial0, electrical interface is V.35 DTE
14 total RX buffers, 11 buffer TX queue limit, buffer size 1520
Tx buffer in-use count is 0
Transmitter delay is 0 microseconds
High speed synchronous serial interface

  Interface 3 is Serial1, electrical interface is V.35 DTE
14 total RX buffers, 11 buffer TX queue limit, buffer size 1520
Tx buffer in-use count is 0
Transmitter delay is 0 microseconds
High speed synchronous serial interface

MCI 2, controller type 1.1, microcode version 1.11
  128 Kbytes of main memory, 4 Kbytes cache memory
  23 system TX buffers, largest buffer size 1520
  Restarts: 0 line down, 0 hung output, 0 controller error

  Interface 1 is Serial2, electrical interface is V.35 DTE
14 total RX buffers, 11 buffer TX queue limit, buffer size 1520
Tx buffer in-use count is 0
Transmitter delay is 0 microseconds
High speed synchronous serial interface

  Interface 3 is Serial3, electrical interface is V.35 DTE
14 total RX buffers, 11 buffer TX queue limit, buffer size 1520
Tx buffer in-use count is 0
Transmitter delay is 0 microseconds
High speed synchronous serial interface

MCI 3, controller type 1.1, microcode version 1.11
  128 Kbytes of main memory, 4 Kbytes cache memory
  23 system TX buffers, largest buffer size 1520
  Restarts: 0 line down, 0 hung output, 0 controller error

Interface 1 is Serial4, electrical interface is V.35 DTE
14 total RX buffers, 11 buffer TX queue limit, buffer size 1520
Tx buffer in-use count is 0
Transmitter delay is 0 microseconds
High speed synchronous serial interface

  Interface 3 is Serial5, electrical interface is V.35 DTE
14 total RX buffers, 11 buffer TX queue limit, buffer size 1520
Tx buffer in-use count is 0
Transmitter delay is 0 microseconds
High speed synchronous serial interface

MCI 4, controller type 1.1, microcode version 1.11
  128 Kbytes of main memory, 4 Kbytes cache memory
  23 system TX buffers, largest buffer size 1520
  Restarts: 0 line down, 0 hung output, 0 controller error

Interface 1 is Serial6, electrical interface is RS-232 DTE
14 total RX buffers, 11 buffer TX queue limit, buffer size 1520
Tx buffer in-use count is 0
Transmitter delay is 0 microseconds
High speed synchronous serial interface

  Interface 3 is Serial7, electrical interface is RS-232 DTE
14 total RX buffers, 11 buffer TX queue limit, buffer size 1520
Tx buffer in-use count is 0
Transmitter delay is 0 microseconds
High speed synchronous serial interface

I currently have cables plugged into Serial ports 0,1,2, & 3. Serial ports 4
& 5 have no cables plugged in at the moment, and it appears that they are
currently setup for DTE.

Any other ideas? I'm gonna try and swap cables to see if that makes any
difference.


- Original Message -
From: "Farhan Ahmed" 
To: "'Charles Ryan'" ; 
Sent: Friday, July 20, 2001 4:10 PM
Subject: RE: AGS+ as a frame-relay switch [7:13133]


>
>
>
>
>
>
>
>
http://www.cisco.com/univercd/cc/td/doc/product/core/cisagspl/agshim/69679.h
> tm
>
>
>
>
>
> -Original Message-
> From: Charles Ryan [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, July 21, 2001 12:04 AM
> To: [EMAIL PROTECTED]
> Subject: AGS+ as a frame-relay switch [7:13133]
>
>
> Apologies if this has already been covered once before.
>
> Quick question regarding setting up an AGS+ as a frame switch.
>
> Do the cables connecting to the AGS+ have to be DCE in order to get the
> frame-relay switching to work, or can it still work if the cables are DTE?
I
> currently have DTE cables into the AGS+ and am not getting line protocol
to
> come up, even though the other ends are DCE and I have "clock rate 64000"
> configured on the other ends.
>
> I also have encap frame-realy ietf on both sides, frame-relay lmi-type
ansi
> as well.
>
> I'll search the archives while I await an answer.
>
> Thanks!
>
> -Chuck
>
>
>
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13141&t=13133
---

RE: AGS+ as a frame-relay switch [7:13133]

2001-07-20 Thread Hire, Ejay

It doesn't matter which end of the cable is dce, as long as you are using a
dte-dce cable and the dce end is configured with a clock rate.

I have an AGS configured as a frame-relay switch with a csc/4t serial card
and HDv.35 dce to Cisco HD60 Dte cables.  I also had difficulty getting the
confuration to work until I RTFM and discovered that I had to change a
jumper on the CSC/4t serial card to place the ags ports in DCE mode.

Here is a my config 
version 10.2

service config

!

enable secret 5 $1$1uBB$Tg1x6HtEuWjLJCsVgGEp11

enable password passwor

!

frame-relay switching

!

interface Ethernet0

no ip address

shutdown


...
 

interface Ethernet11

no ip address

shutdown

!

interface Serial0

ip address 10.1.0.2 255.255.255.0

encapsulation frame-relay

clockrate 64000

frame-relay intf-type dce

frame-relay route 16 interface Serial1 17

!

interface Serial1

ip address 10.2.0.1 255.255.255.0

encapsulation frame-relay

clockrate 64000

frame-relay intf-type dce

frame-relay route 17 interface Serial0 16

!


...
!

line con 0

exec-timeout 0 0

line aux 0

line vty 0 4

password password

login

!

end

 

-Original Message-
From: Charles Ryan [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 4:04 PM
To: [EMAIL PROTECTED]
Subject: AGS+ as a frame-relay switch [7:13133]


Apologies if this has already been covered once before.

Quick question regarding setting up an AGS+ as a frame switch.

Do the cables connecting to the AGS+ have to be DCE in order to get the
frame-relay switching to work, or can it still work if the cables are DTE? I
currently have DTE cables into the AGS+ and am not getting line protocol to
come up, even though the other ends are DCE and I have "clock rate 64000"
configured on the other ends.

I also have encap frame-realy ietf on both sides, frame-relay lmi-type ansi
as well.

I'll search the archives while I await an answer.

Thanks!

-Chuck



_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13140&t=13133
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNP - Switching [7:13139]

2001-07-20 Thread Chris Headings

Just completed 503what are some good books for the 504 exam

Thx

Chris


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13139&t=13139
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How good are ECP 1 and 2 classes? [7:13111]

2001-07-20 Thread Jaspreet Bhatia

Rajesh,
I have asked this exact same question to a person who
recently
cleared the lab and had taken the ECP1 course .According to him , ECP 1 is
good enough
for the lab ...

Jaspreet

Rajesh Kumar wrote:

> Hi all,
>
> I just wanted to know about the classes - ECP 1 and 2 conducted by mentor
> tech. in CA.
> Is ECP 2 really necessary to take up the lab or just ECP 1 should do fine.
> What
> additions are there in ECP 2?
>
> Your comments are appreciated.
>
> Thanks
> Rajesh
>
> [GroupStudy.com removed an attachment of type text/x-vcard which had a name
> of pikumar.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13138&t=13111
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Networkers presentation links [7:13121]

2001-07-20 Thread Joe

> Does anyone have the URL's of the 2001 Networkers' CCIE Power Sessions?
>
> Thank You!
>
> - Sean
>
>
>
>
>
> "Padhu
> (LFG)"
> , Cisco Mail List
> oe.com>  , CCIE_Lab Groupstudy List
> Sent by:
> cc:
> nobody@groupsSubject: RE: Networkers
> presentation links
>
> tudy.com
>
>
>
> 07/19/2001
> 01:17
> PM
>
> Please
> respond
> to
> "Padhu
> (LFG)"
>
>
>
>
>
> Thanks Chuck,
>
> Great resource here.
>
http://www.cisco.com/networkers/nw01/pres/preso/RoutingandSwitchingTechnolog
>
> ies/RST-204.pdf
> Was just going thro this ...Look at te one on privilege levels. I am
> pasting
> whats out there.
> show running-config looks like it needs more than the defined privilege
> levels to get this
> to work. I have tried enabling router level, Ip under interface etc...only
> to still see part of the config.. I wonder if you have to enable a long
> list
> of things to see the entire running-config... Might as well give 'em a
> print
> out of the config for the level 5 users. -)
>
>
> any ideas ?
>
> Cheers,Padhu
> --
--
>
> -
> username gltest privilege 5 password 0 gltest
> privilege configure level 5 interface
> privilege interface level 5 shutdown
> privilege exec level 5 show ip route
> privilege exec level 5 configure terminal
> privilege exec level 5 show running-config
>
>
> Now i do disable 5
> R5#show running-config
> Building configuration...
>
> Current configuration:
> !
> !
> !
> interface Loopback0
> !
> interface Ethernet0
> !
> interface Serial0
> !
> interface Serial0.1 point-to-point
> !
> interface Serial0.2 multipoint
> !
> interface Serial1
> !
> interface BRI0
>  shutdown
> !
> !
> end
>
> R5#
>
>
> -Original Message-
> From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, July 19, 2001 2:39 PM
> To: Cisco Mail List; CCIE_Lab Groupstudy List
> Subject: Networkers presentation links
>
>
> I know these have been posted before, but in case you missed it:
>
> http://www.cisco.com/networkers/nw01/pres/index.html
>
> lots of big PDF files. you may want to download or view over higher speed
> connections.
>
> enjoy
>
> Chuck
> **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13137&t=13121
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE LAB [7:13136]

2001-07-20 Thread Kissiedu, Felix

Hi Guys,
I'm in Atlanta and getting ready to prepare for my CCIE lab exam. I'll like
to know if there are any guys studying for this test since, I'm looking for
learning partners.
Thank you.
Felix Kissiedu.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13136&t=13136
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Networkers presentation links [7:13135]

2001-07-20 Thread Craig H

Here you go..

http://www.cisco.com/networkers/au/internal_html/session_info/ccie.html

http://www.cisco.com/networkers/nw01/pres/pr/570/

Regards,
Craig

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: 20 July 2001 18:55
To: Padhu (LFG)
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: RE: Networkers presentation links


Does anyone have the URL's of the 2001 Networkers' CCIE Power Sessions?

Thank You!

- Sean





"Padhu (LFG)"
, Cisco Mail List
oe.com>  , CCIE_Lab
Groupstudy List 
Sent by: cc:
nobody@groupsSubject: RE: Networkers
presentation links
tudy.com


07/19/2001
01:17 PM
Please
respond to
"Padhu (LFG)"





Thanks Chuck,

Great resource here.
http://www.cisco.com/networkers/nw01/pres/preso/RoutingandSwitchingTechnolog

ies/RST-204.pdf
Was just going thro this ...Look at te one on privilege levels. I am
pasting
whats out there.
show running-config looks like it needs more than the defined privilege
levels to get this
to work. I have tried enabling router level, Ip under interface etc...only
to still see part of the config.. I wonder if you have to enable a long
list
of things to see the entire running-config... Might as well give 'em a
print
out of the config for the level 5 users. -)


any ideas ?

Cheers,Padhu


-
username gltest privilege 5 password 0 gltest
privilege configure level 5 interface
privilege interface level 5 shutdown
privilege exec level 5 show ip route
privilege exec level 5 configure terminal
privilege exec level 5 show running-config


Now i do disable 5
R5#show running-config
Building configuration...

Current configuration:
!
!
!
interface Loopback0
!
interface Ethernet0
!
interface Serial0
!
interface Serial0.1 point-to-point
!
interface Serial0.2 multipoint
!
interface Serial1
!
interface BRI0
 shutdown
!
!
end

R5#


-Original Message-
From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 19, 2001 2:39 PM
To: Cisco Mail List; CCIE_Lab Groupstudy List
Subject: Networkers presentation links


I know these have been posted before, but in case you missed it:

http://www.cisco.com/networkers/nw01/pres/index.html

lots of big PDF files. you may want to download or view over higher speed
connections.

enjoy

Chuck
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13135&t=13135
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: AGS+ as a frame-relay switch [7:13133]

2001-07-20 Thread Farhan Ahmed

tm





-Original Message-
From: Charles Ryan [mailto:[EMAIL PROTECTED]]
Sent: Saturday, July 21, 2001 12:04 AM
To: [EMAIL PROTECTED]
Subject: AGS+ as a frame-relay switch [7:13133]


Apologies if this has already been covered once before.

Quick question regarding setting up an AGS+ as a frame switch.

Do the cables connecting to the AGS+ have to be DCE in order to get the
frame-relay switching to work, or can it still work if the cables are DTE? I
currently have DTE cables into the AGS+ and am not getting line protocol to
come up, even though the other ends are DCE and I have "clock rate 64000"
configured on the other ends.

I also have encap frame-realy ietf on both sides, frame-relay lmi-type ansi
as well.

I'll search the archives while I await an answer.

Thanks!

-Chuck



_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13134&t=13133
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



AGS+ as a frame-relay switch [7:13133]

2001-07-20 Thread Charles Ryan

Apologies if this has already been covered once before.

Quick question regarding setting up an AGS+ as a frame switch.

Do the cables connecting to the AGS+ have to be DCE in order to get the
frame-relay switching to work, or can it still work if the cables are DTE? I
currently have DTE cables into the AGS+ and am not getting line protocol to
come up, even though the other ends are DCE and I have "clock rate 64000"
configured on the other ends.

I also have encap frame-realy ietf on both sides, frame-relay lmi-type ansi
as well.

I'll search the archives while I await an answer.

Thanks!

-Chuck



_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13133&t=13133
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Minicom [7:13132]

2001-07-20 Thread bjp

I want to use my RedHat 7.1 box to log into my Cisco routers. I'm not
real sure how to go about doing this. I know that I will need to use
minicom to do so. The command to configure mincom is minicom -s but then
I'm stuck. I do not see an option for tty100.

Thanks,
Brian




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13132&t=13132
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: CodeRed: the next generation [7:13131]

2001-07-20 Thread Farhan Ahmed

-Original Message-
From: Marc Maiffret [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 10:48 PM
To: [EMAIL PROTECTED]
Subject: CodeRed: the next generation


The following is a description of a "variant" "Code Red" worm that we have
found to be in the wild. Sorry for the rough content but we thought it would
be best to get this information out sooner and worry about pretty text
formating later ;-]

--
In this text, we will be refering to the original "Code Red" worm as CRv1
and the second generation "Code Red" worm as CRv2.  This does not preclude
further generations/varioations still in the wild, it is just an analysis of
the worms we have access to.

This information is not currently public. Well, sort of is (we published the
disassembly of CRv1, so CRv1 targeting info may be known), but the existance
of CRv2 with different targeting has not been verified until now as far as
we know. For the evidence surrounding the impetus for this second worm
search, please examine Stuart Staniford's ([EMAIL PROTECTED])
excellent statistical analysis of worm hit data.

The CRv2 worm has the following charecteristics:
second:milisecond randomness added to ip selection process removal of web
page hack display (no notice to the end users via a defaced page)

All other parts of the worm are the same. (still attacks whitehouse.gov (but
the IP address has been blackholed), has time limits/definitions of attack,
notworm lysine)

The worst part about this means that our original tracking methodology
(sensors early in the sequence) is no longer accurate, since CRv2 infected
hosts do not contact early hosts, nor reliably contact any point (other than
the blackholed IP address that use to point to whitehouse.gov).  This means
that potentially ALL(ie: global, coprehensive) ids/logs data must be
organized and sorted to find infected hosts.

The Differences:
It has 13 or so pertient bytes changed, adding a time based randomness
factor and disabling page defacement.  The code had been there all along. It
had intentially (we must assume) been disabled in CRv1 , then reenabled near
the end of the cycle.  There has been discussion that this was a natural
progression of the worm code, however, we do not beleive this is the
case.  From analsysis of CRv1, there seems to be no distinct way to shift
the nessecary bytes to generate CRv2. Hence, it is my belief that this is a
modified worm, rereleased.  It has been posited that the CRv1 was a target
aqusition mechanism, gathering data on infectable hosts to gain a high
initital base for the following CRv2 infection.


The Ip Selection Process:
We will display the effecive CRv1(sequence), and the effective
CRv2(timebased) ip selection processes.  This is a one byte change, at
offset 9C2.  it changes the storage of some time based computations that
were performed in CRv1 but discarded. The new byte changes the storage
location from EBP-1B0( a general purpose holder stack var) to EBP - 18C(the
location of the ip).  This means that the timevars are actively used in
CRv2, while being discarded in CRv1.

These are the targeting algorithms(complete, as far as we can discern) that
are the asm in the CRv1 worm and also in the CRv2  worm.

Seeding the "PRNG" for these examples seed is used for ip through the first
iteration of the connect loop.  the seed does not change between CRv1 and
CRv2, but each thread in the worm has a mildly different seed.

seed = threadcount(based on 1) * 50F0668D;

CRv1:
The ipselection process in CRv1 is a simple sequence generator. This caused
the early sequences that we noticed and refered to in our (eEye's) initital
warning advisory:

ip = (ip * 0x0CF3383) + 0x76BFE53;

CRv2:
The ipselection process in CRs2 is signifigantly more complex.  It takes use
of time and a whole lot more input operations.  In the following  secmsec is
the DWORD pair of seconds and mseconds returned from GetSystemTime

ip = (ip + secmsec*secmsec*0x0CD59E3 +  secmsec*0x1E1B9) * 0x0CF3383 +
0x76BFE53

Other Details:
Coincidentally, if this isn't general public knowledge, the worm is smart
enough to avoid attacking the 127.x.x.x and 224.x.x.x subnets using the
following logic after setting the ip.
if( (ip & 0xFF == 0x7f) || (ip & 0xFF == 0xE0) )ip +=0x20DA9;



the Hacked Page:
The second difference between CRv1 and CRv2 is that CRv2 does not deface the
webpage of an infected system.  It does this by having 12 bytes different
from CRv1.

When TcpSockSend is hooked(this still happens), CRv2 points this to a basic
redirect that performs harmless actions and returns without actually
changing any content. Crv1 pointed to a replacement, CRv2 points to
basically a donothing function.

what is happeinging is that the label "PADDING_BYTES" actually is padding
bytes in CRv1(the code does not disassemble to any sane code).

CRv1:
We've used ida's data feature to show the "padding data" as dwords(instead
of a bunch of bytes)

CD4 - EB F8jmp short n

Re: To CCIE's without a job [7:12805]

2001-07-20 Thread Allen May

Hehe..the guitar on the router thing made me remember a site someone sent me
to once.  It would take you IP address and something about current traffic
from you & all sorts of other unknown variables would generate a song.  And
man did mine suck!  rofl.


- Original Message -
From: "Ole Drews Jensen" 
To: 
Sent: Friday, July 20, 2001 1:54 PM
Subject: RE: To CCIE's without a job [7:12805]


> The funny thing is when you combine Music, Programming and Mathematics.
>
> I made a Guitar Pascal Unit years ago, and had to figure out the formel
for
> how much a frequency changes when you move up one fret on the guitar.
Well,
> since you have to move twelve frets to reach the next octave, and a higher
> octave is the double frequency of the lower, the calculation is Frequency
*
> 2^(1/12).
>
> If you take 440 (A) and multiply it with 2^(1/12) twelve times, you have
880
> (also A) :-)
>
> As for book recommendations - I don't know, but try and search for
> programming and networking together on Amazon.com.
>
> And no, I have not tried to connect my guitar to my routers yet, but I can
> imagine some cool effects with Split Horizon and Load Balancing...
>
> Hth,
>
> Ole
>
> ~~~
>  Ole Drews Jensen
>  Systems Network Manager
>  CCNA, MCSE, MCP+I
>  RWR Enterprises, Inc.
>  [EMAIL PROTECTED]
> ~~~
>  http://www.RouterChief.com
> ~~~
>  NEED A JOB ???
>  http://www.oledrews.com/job
> ~~~
>
>
> -Original Message-
> From: Cisco KIdd78 [mailto:[EMAIL PROTECTED]]
> Sent: Friday, July 20, 2001 1:10 PM
> To: [EMAIL PROTECTED]
> Subject: RE: To CCIE's without a job [7:12805]
>
>
> I agree with what you said about music and math being correlated, because
I
> play an instrument and math has always come easy to me ( I know that this
is
>
> not evidence enough for a theory like that, but, it works for me ).
>
> My question is what is the best way to get into network software
> engineering?  What books should I read?  What courses are most relevant
in
> the undergraduate curriculum?  I am trying to complete my computer science
> degree now and I am one test away from a CCNP.  I like networking but I
also
>
> like programming.  I find it hard to commit to one, so I figured I might
as
> well combine the two.  So I need some advice on how to enter the market
for
> network software engineering?  My guess is I will I have to read all of
> Richard Steven's books.
>
> Thanks
> Paul
>
>
> >From: "Priscilla Oppenheimer"
> >Reply-To: "Priscilla Oppenheimer"
> >To: [EMAIL PROTECTED]
> >Subject: RE: To CCIE's without a job [7:12805]
> >Date: Thu, 19 Jul 2001 14:37:52 -0400
> >
> >I'm sure there are people who are good at both types of tasks: CCIE tasks
> >and software development tasks. For both jobs, you have to be smart,
that's
> >for sure.
> >
> >Well, thinking about the work of Howard Gardner, who wrote some terrific
> >books on multiple intelligences, I would change that. To be a CCIE or
> >software developer you need logical/mathematical intelligence. Linguistic
> >intelligence helps but is not required for either. There seems to be a
high
> >correlation between logical/mathematical and musical intelligence. I
> >suspect that for many support jobs, you need body/kinesthetic
intelligence
> >and spatial intelligence, which many software developers do not have.
> >
> >At my local high school I help with both hardware and Cisco classes. The
> >school requires the hardware class before the Cisco classes. A certain
set
> >of students do really well in the hardware class because they have
> >excellent body and spatial intelligence. They can take apart and rebuild
a
> >computer in seconds. Then they get to the Cisco Academy class and are
> >expected to read volumes of material on the theory of networking, deal
with
> >obscure subnetting scenarios, learn file-naming conventions for Cisco
IOS,
> >pass a written multiple-choice test every other week (requiring
linguistic
> >intelligence), etc. They spend almost no time building networks. Most of
> >the students who were stars in the hardware class do terribly in the
Cisco
> >classes. It's sad to see them decide that maybe they aren't good with
> >computers afterall. I try to build up their egos again, because I think
the
> >Cisco Academy materials are completely wrong for a high school and don't
> >take into account that the networking field needs people of different
types
> >of intelligence.
> >
> >That's my $0001. I'd love to hear those blues, Ole! ;-) I love the
> >blues.
> >
> >Priscilla
> >
> >At 09:07 AM 7/19/01, Ole Drews Jensen wrote:
> > >I hear what you're saying Phil, and agree that these two areas are very
> > >different. My problem was always the forgetting the time when I was
> >diving
> > >in thousands lines of codes, and I would suddently look at the clock
and
> > >discover that it was 4 o'clock in the morning.
> > >
> > >It doesn't 

RE: Large Collisions on Vlan1 [7:12961]

2001-07-20 Thread Hire, Ejay

You need to clear the counters and establish a time frame for this.  19
million collisions isn't a lot in a well loaded switch that has been up for
a long time.  

If you clear the counters and the number increases quickly, you may have a
speed or duplex issue or a bad cable.  You said this was an ISL trunk so you
should manually set both ends at 100 mbps
(or 1000mbps if you've got the special card for the 2924 and a good port on
the 6500) and also manually set the link to full duplex.

 
-Original Message-
From: Kwame [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 19, 2001 12:25 PM
To: [EMAIL PROTECTED]
Subject: Large Collisions on Vlan1 [7:12961]


What does it mean when the "sh int vlan1" output shows large collisions? For
example on a 2924 XL with an ISL trunk to a 6509 I go the ff output upon
issuing the SH INT VLAN1 command:

0 output errors, 19108404 collisions, 0 interface resets




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13129&t=12961
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: To CCIE's without a job [7:12805]

2001-07-20 Thread EA Louie

Kidd - another great book if you want to become a network software designer
is Computer Networks by Andrew Tanenbaum.  The first edition really covered
great basic algorithms for the way the protocols were designed to work.  (I
read the 1st Edition and have the 3rd edition but haven't cracked the cover
yet :-(

As far as entering the market for work is concerned, you might sign on with
a company that designs device drivers, get some experience with developing
and supporting network device drivers, then use that experience to lead you
into one of the larger networking hardware companies (remember, they have to
develop drivers for their interfaces, too).  Once you're inside and
understand the architecture of network protocol software, you'd have a
better chance at moving into a protocol software programming role.

-e-

- Original Message -
From: Priscilla Oppenheimer 
To: 
Sent: Friday, July 20, 2001 11:39 AM
Subject: RE: To CCIE's without a job [7:12805]


> Hi Cisco Kidd,
>
> Once the market turns around again, my guess is that you will have no
> problem finding a job with one of the major networking firms. With a
> computer science degree and a CCNP, you'll be hot. And that's the best way
> to get into network software engineering. On the job training! At some
> companies, college grads start out in software testing rather than
> development, but it would only take a year or so for you to move into
> software engineering. And at some companies you could go right into
> software engineering I would think.
>
> I was going to suggest W. Richard Steven's books, but I see you already
> mentioned that. Douglas Comer's more advanced books are good too. I'm sure
> others will give you advice too. We're good at that on this list! ;-)
>
> Priscilla
>
> At 10:53 AM 7/20/01, Cisco KIdd78 wrote:
> >I agree with what you said about music and math being correlated, because
> >I play an instrument and math has always come easy to me ( I know that
> >this is not evidence enough for a theory like that, but, it works for
me ).
> >
> >My question is what is the best way to get into network software
> >engineering?  What books should I read?  What courses are most
> >relevant  in the undergraduate curriculum?  I am trying to complete my
> >computer science degree now and I am one test away from a CCNP.  I like
> >networking but I also like programming.  I find it hard to commit to one,
> >so I figured I might as well combine the two.  So I need some advice on
> >how to enter the market for network software engineering?  My guess is I
> >will I have to read all of Richard Steven's books.
> >
> >Thanks
> >Paul
> >
> >
> >>From: "Priscilla Oppenheimer"
> >>Reply-To: "Priscilla Oppenheimer"
> >>To: [EMAIL PROTECTED]
> >>Subject: RE: To CCIE's without a job [7:12805]
> >>Date: Thu, 19 Jul 2001 14:37:52 -0400
> >>
> >>I'm sure there are people who are good at both types of tasks: CCIE
tasks
> >>and software development tasks. For both jobs, you have to be smart,
that's
> >>for sure.
> >>
> >>Well, thinking about the work of Howard Gardner, who wrote some terrific
> >>books on multiple intelligences, I would change that. To be a CCIE or
> >>software developer you need logical/mathematical intelligence.
Linguistic
> >>intelligence helps but is not required for either. There seems to be a
high
> >>correlation between logical/mathematical and musical intelligence. I
> >>suspect that for many support jobs, you need body/kinesthetic
intelligence
> >>and spatial intelligence, which many software developers do not have.
> >>
> >>At my local high school I help with both hardware and Cisco classes. The
> >>school requires the hardware class before the Cisco classes. A certain
set
> >>of students do really well in the hardware class because they have
> >>excellent body and spatial intelligence. They can take apart and rebuild
a
> >>computer in seconds. Then they get to the Cisco Academy class and are
> >>expected to read volumes of material on the theory of networking, deal
with
> >>obscure subnetting scenarios, learn file-naming conventions for Cisco
IOS,
> >>pass a written multiple-choice test every other week (requiring
linguistic
> >>intelligence), etc. They spend almost no time building networks. Most of
> >>the students who were stars in the hardware class do terribly in the
Cisco
> >>classes. It's sad to see them decide that maybe they aren't good with
> >>computers afterall. I try to build up their egos again, because I think
the
> >>Cisco Academy materials are completely wrong for a high school and don't
> >>take into account that the networking field needs people of different
types
> >>of intelligence.
> >>
> >>That's my $0001. I'd love to hear those blues, Ole! ;-) I love the
> blues.
> >>
> >>Priscilla
> >>
> >>At 09:07 AM 7/19/01, Ole Drews Jensen wrote:
> >> >I hear what you're saying Phil, and agree that these two areas are
very
> >> >different. My problem was always the forgetting the time when I was
> diving

RE: To CCIE's without a job [7:12805]

2001-07-20 Thread Ole Drews Jensen

The funny thing is when you combine Music, Programming and Mathematics.

I made a Guitar Pascal Unit years ago, and had to figure out the formel for
how much a frequency changes when you move up one fret on the guitar. Well,
since you have to move twelve frets to reach the next octave, and a higher
octave is the double frequency of the lower, the calculation is Frequency *
2^(1/12).

If you take 440 (A) and multiply it with 2^(1/12) twelve times, you have 880
(also A) :-)

As for book recommendations - I don't know, but try and search for
programming and networking together on Amazon.com.

And no, I have not tried to connect my guitar to my routers yet, but I can
imagine some cool effects with Split Horizon and Load Balancing...

Hth,

Ole

~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNA, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~~~ 
 http://www.RouterChief.com
~~~
 NEED A JOB ???
 http://www.oledrews.com/job
~~~


-Original Message-
From: Cisco KIdd78 [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 1:10 PM
To: [EMAIL PROTECTED]
Subject: RE: To CCIE's without a job [7:12805]


I agree with what you said about music and math being correlated, because I 
play an instrument and math has always come easy to me ( I know that this is

not evidence enough for a theory like that, but, it works for me ).

My question is what is the best way to get into network software 
engineering?  What books should I read?  What courses are most relevant  in 
the undergraduate curriculum?  I am trying to complete my computer science 
degree now and I am one test away from a CCNP.  I like networking but I also

like programming.  I find it hard to commit to one, so I figured I might as 
well combine the two.  So I need some advice on how to enter the market for 
network software engineering?  My guess is I will I have to read all of 
Richard Steven's books.

Thanks
Paul


>From: "Priscilla Oppenheimer" 
>Reply-To: "Priscilla Oppenheimer" 
>To: [EMAIL PROTECTED]
>Subject: RE: To CCIE's without a job [7:12805]
>Date: Thu, 19 Jul 2001 14:37:52 -0400
>
>I'm sure there are people who are good at both types of tasks: CCIE tasks
>and software development tasks. For both jobs, you have to be smart, that's
>for sure.
>
>Well, thinking about the work of Howard Gardner, who wrote some terrific
>books on multiple intelligences, I would change that. To be a CCIE or
>software developer you need logical/mathematical intelligence. Linguistic
>intelligence helps but is not required for either. There seems to be a high
>correlation between logical/mathematical and musical intelligence. I
>suspect that for many support jobs, you need body/kinesthetic intelligence
>and spatial intelligence, which many software developers do not have.
>
>At my local high school I help with both hardware and Cisco classes. The
>school requires the hardware class before the Cisco classes. A certain set
>of students do really well in the hardware class because they have
>excellent body and spatial intelligence. They can take apart and rebuild a
>computer in seconds. Then they get to the Cisco Academy class and are
>expected to read volumes of material on the theory of networking, deal with
>obscure subnetting scenarios, learn file-naming conventions for Cisco IOS,
>pass a written multiple-choice test every other week (requiring linguistic
>intelligence), etc. They spend almost no time building networks. Most of
>the students who were stars in the hardware class do terribly in the Cisco
>classes. It's sad to see them decide that maybe they aren't good with
>computers afterall. I try to build up their egos again, because I think the
>Cisco Academy materials are completely wrong for a high school and don't
>take into account that the networking field needs people of different types
>of intelligence.
>
>That's my $0001. I'd love to hear those blues, Ole! ;-) I love the 
>blues.
>
>Priscilla
>
>At 09:07 AM 7/19/01, Ole Drews Jensen wrote:
> >I hear what you're saying Phil, and agree that these two areas are very
> >different. My problem was always the forgetting the time when I was 
>diving
> >in thousands lines of codes, and I would suddently look at the clock and
> >discover that it was 4 o'clock in the morning.
> >
> >It doesn't mean however that you can't do both. It's like when I'm 
>playing
> >my guitar. Sometimes, I grap my Jackson and play Satriani or Nuno, and at
> >other times, I grap my handmade Spanish guitar and play classical music, 
>but
> >most often I use my SRV signature stratocaster and play blues.
> >
> >The fun begins when you're mixing them all together - that's when you 
>start
> >playing like Blackmore or Yngwie...
> >
> >After that being said, I realize that keeping up with new technologies in
> >both areas can be tough and very time dependant, but it can be done.
> >
> >Another 

Re: Reference material on pings?? [7:13107]

2001-07-20 Thread no mail

Does this help?
http://ftp.arl.mil/%7Emike/ping.html


""Jim Newton""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I am trying to find an in-depth guide to pings. I notice with my sniffer
> that when I issue a ping from my laptop that there are three requests for
> each reply. Is this normal?
>
> Also I want to learn more about the TTL field. Do routers really only
> decrement it by one as the packet passes through?
>
> I just have a few questions about the nuts and bolts of this and probably
> traceroute also, stuff that isn't in the normal books.
>
> I have read the RFC and what I want is not there. I have also looked
around
> CCO quite a bit, and haven't found anything, not that this means that the
> info is not there.
>
> If anyone knows of a good book or on-line source, I would appreciate it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13126&t=13107
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: To CCIE's without a job [7:12805]

2001-07-20 Thread Priscilla Oppenheimer

Hi Cisco Kidd,

Once the market turns around again, my guess is that you will have no 
problem finding a job with one of the major networking firms. With a 
computer science degree and a CCNP, you'll be hot. And that's the best way 
to get into network software engineering. On the job training! At some 
companies, college grads start out in software testing rather than 
development, but it would only take a year or so for you to move into 
software engineering. And at some companies you could go right into 
software engineering I would think.

I was going to suggest W. Richard Steven's books, but I see you already 
mentioned that. Douglas Comer's more advanced books are good too. I'm sure 
others will give you advice too. We're good at that on this list! ;-)

Priscilla

At 10:53 AM 7/20/01, Cisco KIdd78 wrote:
>I agree with what you said about music and math being correlated, because 
>I play an instrument and math has always come easy to me ( I know that 
>this is not evidence enough for a theory like that, but, it works for me ).
>
>My question is what is the best way to get into network software 
>engineering?  What books should I read?  What courses are most 
>relevant  in the undergraduate curriculum?  I am trying to complete my 
>computer science degree now and I am one test away from a CCNP.  I like 
>networking but I also like programming.  I find it hard to commit to one, 
>so I figured I might as well combine the two.  So I need some advice on 
>how to enter the market for network software engineering?  My guess is I 
>will I have to read all of Richard Steven's books.
>
>Thanks
>Paul
>
>
>>From: "Priscilla Oppenheimer" 
>>Reply-To: "Priscilla Oppenheimer" 
>>To: [EMAIL PROTECTED]
>>Subject: RE: To CCIE's without a job [7:12805]
>>Date: Thu, 19 Jul 2001 14:37:52 -0400
>>
>>I'm sure there are people who are good at both types of tasks: CCIE tasks
>>and software development tasks. For both jobs, you have to be smart, that's
>>for sure.
>>
>>Well, thinking about the work of Howard Gardner, who wrote some terrific
>>books on multiple intelligences, I would change that. To be a CCIE or
>>software developer you need logical/mathematical intelligence. Linguistic
>>intelligence helps but is not required for either. There seems to be a high
>>correlation between logical/mathematical and musical intelligence. I
>>suspect that for many support jobs, you need body/kinesthetic intelligence
>>and spatial intelligence, which many software developers do not have.
>>
>>At my local high school I help with both hardware and Cisco classes. The
>>school requires the hardware class before the Cisco classes. A certain set
>>of students do really well in the hardware class because they have
>>excellent body and spatial intelligence. They can take apart and rebuild a
>>computer in seconds. Then they get to the Cisco Academy class and are
>>expected to read volumes of material on the theory of networking, deal with
>>obscure subnetting scenarios, learn file-naming conventions for Cisco IOS,
>>pass a written multiple-choice test every other week (requiring linguistic
>>intelligence), etc. They spend almost no time building networks. Most of
>>the students who were stars in the hardware class do terribly in the Cisco
>>classes. It's sad to see them decide that maybe they aren't good with
>>computers afterall. I try to build up their egos again, because I think the
>>Cisco Academy materials are completely wrong for a high school and don't
>>take into account that the networking field needs people of different types
>>of intelligence.
>>
>>That's my $0001. I'd love to hear those blues, Ole! ;-) I love the
blues.
>>
>>Priscilla
>>
>>At 09:07 AM 7/19/01, Ole Drews Jensen wrote:
>> >I hear what you're saying Phil, and agree that these two areas are very
>> >different. My problem was always the forgetting the time when I was
diving
>> >in thousands lines of codes, and I would suddently look at the clock and
>> >discover that it was 4 o'clock in the morning.
>> >
>> >It doesn't mean however that you can't do both. It's like when I'm
playing
>> >my guitar. Sometimes, I grap my Jackson and play Satriani or Nuno, and at
>> >other times, I grap my handmade Spanish guitar and play classical 
>> music, but
>> >most often I use my SRV signature stratocaster and play blues.
>> >
>> >The fun begins when you're mixing them all together - that's when you
start
>> >playing like Blackmore or Yngwie...
>> >
>> >After that being said, I realize that keeping up with new technologies in
>> >both areas can be tough and very time dependant, but it can be done.
>> >
>> >Another 0010 cents.
>> >
>> >Take care,
>> >
>> >Ole
>> >
>> >~~~
>> >  Ole Drews Jensen
>> >  Systems Network Manager
>> >  CCNA, MCSE, MCP+I
>> >  RWR Enterprises, Inc.
>> >  [EMAIL PROTECTED]
>> >~~~
>> >  http://www.RouterChief.com
>> >~~~
>> >  NEED A JOB ???
>> >  http://

Re: Multiple OSPF areas on the same router [7:13108]

2001-07-20 Thread Lance Simon

Core routers do this all the time.  They end up being ABRs and you need to
make sure that the router has a lot of beef to it to be able to efficiently
handle all of the LSDBs thrown at it from each area.
- Original Message -
From: Lupi, Guy 
To: 
Sent: Friday, July 20, 2001 10:29 AM
Subject: Multiple OSPF areas on the same router [7:13108]


> Lets say you have a router with 6 DS3s, has anyone ever heard that it is
not
> a good practice to have each DS3 be its own area?  I was talking to
someone
> and they said that it may not be a good idea to have multiple areas on the
> same router, but I have never heard that.  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13124&t=13108
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF [7:13105]

2001-07-20 Thread Lance Simon

"OSPF - An anatomy of an Internet Routing Protocol" by John Moy is the
gospel of OSPF.  Also, Tom Thomas has a design book by Cisco Press.
- Original Message -
From: mike rose 
To: 
Sent: Friday, July 20, 2001 10:07 AM
Subject: OSPF [7:13105]


> Hello all
>
> Is there a book out there (besides Cisco's BSCN)that will break down OSPF
in
> all its glory to me? Design and Implementation in a backbone environment?
>
> Any help will be greatly appreciated.
>
> Thanks
>
> Mike




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13123&t=13105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: %AMDP2_FE-5-EXCESSCOLL: Ethernet0/0 TDR=9, TRC=0 [7:12994]

2001-07-20 Thread MikeN

Check this out:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121
t/sem121t.htm

Error Message

%AMDP2_FE-6-EXCESSCOLL: [chars] TDR=[dec], TRC=[dec], MSGDEF_LIMIT_SLOW

Explanation   Ethernet or Fast Ethernet is experiencing multiple collisions.
This condition may
occur under heavy traffic loads.

Recommended Action   The system should recover. No action is required.


HTH
MikeN
""Leonardo Borda""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Does anybody already have that message in your routers?
>
> 5w5d: %AMDP2_FE-5-EXCESSCOLL: Ethernet0/0 TDR=9, TRC=0
>
> It4s strange because I have a Cisco 2600 and I have no many workstations
> connected to it...
> If anybody had the same problem and found an answer please
>
> Thanks!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13122&t=12994
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Networkers presentation links [7:13121]

2001-07-20 Thread [EMAIL PROTECTED]

Does anyone have the URL's of the 2001 Networkers' CCIE Power Sessions?

Thank You!

- Sean




   

"Padhu
(LFG)"
, Cisco Mail List  
oe.com>  , CCIE_Lab Groupstudy List  
Sent by:
cc:
nobody@groupsSubject: RE: Networkers
presentation links
   
tudy.com
   

   

   
07/19/2001
01:17
PM
   
Please
respond
to
"Padhu
(LFG)"
   

   




Thanks Chuck,

Great resource here.
http://www.cisco.com/networkers/nw01/pres/preso/RoutingandSwitchingTechnolog

ies/RST-204.pdf
Was just going thro this ...Look at te one on privilege levels. I am
pasting
whats out there.
show running-config looks like it needs more than the defined privilege
levels to get this
to work. I have tried enabling router level, Ip under interface etc...only
to still see part of the config.. I wonder if you have to enable a long
list
of things to see the entire running-config... Might as well give 'em a
print
out of the config for the level 5 users. -)


any ideas ?

Cheers,Padhu


-
username gltest privilege 5 password 0 gltest
privilege configure level 5 interface
privilege interface level 5 shutdown
privilege exec level 5 show ip route
privilege exec level 5 configure terminal
privilege exec level 5 show running-config


Now i do disable 5
R5#show running-config
Building configuration...

Current configuration:
!
!
!
interface Loopback0
!
interface Ethernet0
!
interface Serial0
!
interface Serial0.1 point-to-point
!
interface Serial0.2 multipoint
!
interface Serial1
!
interface BRI0
 shutdown
!
!
end

R5#


-Original Message-
From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 19, 2001 2:39 PM
To: Cisco Mail List; CCIE_Lab Groupstudy List
Subject: Networkers presentation links


I know these have been posted before, but in case you missed it:

http://www.cisco.com/networkers/nw01/pres/index.html

lots of big PDF files. you may want to download or view over higher speed
connections.

enjoy

Chuck
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13121&t=13121
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF [7:13105]

2001-07-20 Thread EA Louie

And for some freebies...

http://www.cisco.com/warp/public/104/1.html (OSPF Design Guide)
http://www.cis.ohio-state.edu/cgi-bin/rfc/rfc2178.html  RFC 2178 OSPF v2
http://www.faqs.org/rfcs/rfc2740.html  RFC 2740 (OSPF for IPv6)

-e-
- Original Message -
From: John Neiberger 
To: 
Sent: Friday, July 20, 2001 10:39 AM
Subject: Re: OSPF [7:13105]


> Routing TCP/IP, Vol. 1 by Jeff Doyle
>
> OSPF Network Design Solutions by Thomas M. Thomas II
>
> OSPF: Anatomy of an Internet Routing Protocol by John Moy
>
> Those ought to get you started!  ;-)
>
> HTH,
> John
>
> >>> "mike rose"  7/20/01 11:07:32 AM >>>
> Hello all
>
> Is there a book out there (besides Cisco's BSCN)that will break down
> OSPF in
> all its glory to me? Design and Implementation in a backbone
> environment?
>
> Any help will be greatly appreciated.
>
> Thanks
>
> Mike
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13120&t=13105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Multiple OSPF areas on the same router [7:13108]

2001-07-20 Thread Schneider, Matt

are you running full bgp routes on the router that you want to put 6 areas
on.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 1:55 PM
To: [EMAIL PROTECTED]
Subject: Re: Multiple OSPF areas on the same router [7:13108]


Guy,

 A router which belongs to multiple OSPF area's is called an Area
Border Router (ABR).   All ABR's must belong to area 0 (The OSPF Backbone
area) in addition to any other areas they belong to.   For each area a
router is a member of, it must store all of the LSA's for that area, and
participate in the Dykstra SPF calculations for that area.  So, the more
area's a router is a member of, the higher the CPU and memory load on the
router.   Recommendations for the maximum number of areas a  router should
belong to vary.   It isn't an exact science.  The number of routers, the
number of circuits (networks), and the stability of the circuits in each
area will affect the max number of areas you can support on a single ABR.
That said, 6 areas plus area 0 on a single router is probably to high.  3-4
areas plus area 0 is generally a good rule of thumb.   Again, keep in mind
there are many variables which affect how many areas a router can support
and so each situation must be considered individually.


 ---Jon





"Lupi, Guy" @groupstudy.com on 07/20/2001 01:29:41
PM

Please respond to "Lupi, Guy" 

Sent by:  [EMAIL PROTECTED]


To:   [EMAIL PROTECTED]
cc:

Subject:  Multiple OSPF areas on the same router [7:13108]


Lets say you have a router with 6 DS3s, has anyone ever heard that it is
not
a good practice to have each DS3 be its own area?  I was talking to someone
and they said that it may not be a good idea to have multiple areas on the
same router, but I have never heard that.  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13118&t=13108
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: BGP [7:13110]

2001-07-20 Thread [EMAIL PROTECTED]

For IBGP to work the ASN for both routers have to be the same, also turn off
synchronisation - unless you are running an IGP with full connectivity. How
do you intend to use both links - active/backup, or active/active?

CM



-Original Message-
From:   "[EMAIL PROTECTED]"  on behalf of   "Tony Higgins" 
Sent:   20 July 2001 17:36
To: "[EMAIL PROTECTED]" 
Subject:BGP [7:13110]



> --
> From: Tony Higgins[SMTP:[EMAIL PROTECTED]]
> Sent: Friday, July 20, 2001 6:36:25 PM
> To:   [EMAIL PROTECTED]
> Subject:  BGP [7:13110]
> Auto forwarded by a Rule
> 
Greetings,

I have a couple of 7140 that we are connecting to ATT and Time Warner via a
couple of T3 circuits.  I have never configured BGP before but for better or
worse it fell on me to do it.  

The ATT circuit wont be in for a couple more days but everything seems to be
working just fine over the time warner circuit using the following bgp
config.

Since I am somewhat of a novice, I thought I would put what I came up with
out to this group for comment and criticism.  

BTW -I am using confederation because I could not get ibgp to work...

The main requirement right now is ISP redundancy...  there wont be a great
deal of growth at this site in term of additional ISPs...  We may upgrade
the T3 to OC3 at some point but that is a long way off.

Appreciate comments thanks


ROUTER 1

router bgp 1
 bgp log-neighbor-changes
 bgp confederation identifier 1
 bgp confederation peers 2 
 network 12.150.224.0 mask 255.255.254.0
 network 206.150.62.0
 neighbor cotennet peer-group
 neighbor cotennet remote-as 2
 neighbor cotennet ebgp-multihop 5
 neighbor cotennet update-source Loopback1
 neighbor 12.150.224.254 peer-group cotennet
 neighbor att peer-group
 neighbor att remote-as 12345
 neighbor att distribute-list 101 out
 neighbor x.x.x.x peer-group att
!
ip classless
ip route 12.150.224.0 255.255.254.0 Null0 254
ip route 206.150.62.0 255.255.255.0 Null0 254

ROUTER 2

router bgp 2
 bgp log-neighbor-changes
 bgp confederation identifier 1
 bgp confederation peers 1 
 network 12.150.224.0 mask 255.255.254.0
 network 206.150.62.0
 neighbor cotennet peer-group
 neighbor cotennet remote-as 1
 neighbor cotennet ebgp-multihop 5
 neighbor 12.150.224.253 peer-group cotennet
 neighbor cotennet update-source Loopback1
 neighbor timewarner peer-group
 neighbor timewarner remote-as 123
 neighbor timewarner distribute-list 101 out
 neighbor 206.150.72.85 peer-group timewarner


ip route 12.150.224.0 255.255.254.0 Null0 254
ip route 206.150.62.0 255.255.255.0 Null0 254


access-list 101 permit ip 12.150.224.0 0.0.1.255 any
access-list 101 permit ip 206.150.62.0 0.0.1.255 any




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13119&t=13110
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: To CCIE's without a job [7:12805]

2001-07-20 Thread Cisco KIdd78

I agree with what you said about music and math being correlated, because I 
play an instrument and math has always come easy to me ( I know that this is 
not evidence enough for a theory like that, but, it works for me ).

My question is what is the best way to get into network software 
engineering?  What books should I read?  What courses are most relevant  in 
the undergraduate curriculum?  I am trying to complete my computer science 
degree now and I am one test away from a CCNP.  I like networking but I also 
like programming.  I find it hard to commit to one, so I figured I might as 
well combine the two.  So I need some advice on how to enter the market for 
network software engineering?  My guess is I will I have to read all of 
Richard Steven's books.

Thanks
Paul


>From: "Priscilla Oppenheimer" 
>Reply-To: "Priscilla Oppenheimer" 
>To: [EMAIL PROTECTED]
>Subject: RE: To CCIE's without a job [7:12805]
>Date: Thu, 19 Jul 2001 14:37:52 -0400
>
>I'm sure there are people who are good at both types of tasks: CCIE tasks
>and software development tasks. For both jobs, you have to be smart, that's
>for sure.
>
>Well, thinking about the work of Howard Gardner, who wrote some terrific
>books on multiple intelligences, I would change that. To be a CCIE or
>software developer you need logical/mathematical intelligence. Linguistic
>intelligence helps but is not required for either. There seems to be a high
>correlation between logical/mathematical and musical intelligence. I
>suspect that for many support jobs, you need body/kinesthetic intelligence
>and spatial intelligence, which many software developers do not have.
>
>At my local high school I help with both hardware and Cisco classes. The
>school requires the hardware class before the Cisco classes. A certain set
>of students do really well in the hardware class because they have
>excellent body and spatial intelligence. They can take apart and rebuild a
>computer in seconds. Then they get to the Cisco Academy class and are
>expected to read volumes of material on the theory of networking, deal with
>obscure subnetting scenarios, learn file-naming conventions for Cisco IOS,
>pass a written multiple-choice test every other week (requiring linguistic
>intelligence), etc. They spend almost no time building networks. Most of
>the students who were stars in the hardware class do terribly in the Cisco
>classes. It's sad to see them decide that maybe they aren't good with
>computers afterall. I try to build up their egos again, because I think the
>Cisco Academy materials are completely wrong for a high school and don't
>take into account that the networking field needs people of different types
>of intelligence.
>
>That's my $0001. I'd love to hear those blues, Ole! ;-) I love the 
>blues.
>
>Priscilla
>
>At 09:07 AM 7/19/01, Ole Drews Jensen wrote:
> >I hear what you're saying Phil, and agree that these two areas are very
> >different. My problem was always the forgetting the time when I was 
>diving
> >in thousands lines of codes, and I would suddently look at the clock and
> >discover that it was 4 o'clock in the morning.
> >
> >It doesn't mean however that you can't do both. It's like when I'm 
>playing
> >my guitar. Sometimes, I grap my Jackson and play Satriani or Nuno, and at
> >other times, I grap my handmade Spanish guitar and play classical music, 
>but
> >most often I use my SRV signature stratocaster and play blues.
> >
> >The fun begins when you're mixing them all together - that's when you 
>start
> >playing like Blackmore or Yngwie...
> >
> >After that being said, I realize that keeping up with new technologies in
> >both areas can be tough and very time dependant, but it can be done.
> >
> >Another 0010 cents.
> >
> >Take care,
> >
> >Ole
> >
> >~~~
> >  Ole Drews Jensen
> >  Systems Network Manager
> >  CCNA, MCSE, MCP+I
> >  RWR Enterprises, Inc.
> >  [EMAIL PROTECTED]
> >~~~
> >  http://www.RouterChief.com
> >~~~
> >  NEED A JOB ???
> >  http://www.oledrews.com/job
> >~~~
> >
> >
> >-Original Message-
> >From: Phil Barker [mailto:[EMAIL PROTECTED]]
> >Sent: Thursday, July 19, 2001 4:56 AM
> >To: Ole Drews Jensen; [EMAIL PROTECTED]
> >Subject: RE: To CCIE's without a job [7:12805]
> >
> >
> >  Ole,
> > I think I know where Priscilla is coming from.
> >I developed software for 10 years (mainly C/C++)
> >before turning to Network Engineering. The difference
> >in the roles in my experience has been dramatic.
> > Software Engineering requires an intensity of
> >concentration that I can only compare to playing
> >chess. I was rarely required to interact with
> >customers and as a result my interpersonal skills
> >didn't develop.
> >  I took my first job in Networking for a major
> >bank. This was very open plan and one day the team
> >leader called the regular meeting. Everyone shuffled

RE: Multiple OSPF areas on the same router [7:13108]

2001-07-20 Thread [EMAIL PROTECTED]

Multiple areas on a single router means that SPF algorithm will be run
multiple times. This could be processor intensive, depending on how many
routers you have per area.

CM



-Original Message-
From:   "[EMAIL PROTECTED]"  on behalf of   "Lupi, Guy" 
Sent:   20 July 2001 17:29
To: "[EMAIL PROTECTED]" 
Subject:Multiple OSPF areas on the same router [7:13108]



> --
> From: Lupi, Guy[SMTP:[EMAIL PROTECTED]]
> Sent: Friday, July 20, 2001 6:29:41 PM
> To:   [EMAIL PROTECTED]
> Subject:  Multiple OSPF areas on the same router [7:13108]
> Auto forwarded by a Rule
> 
Lets say you have a router with 6 DS3s, has anyone ever heard that it is not
a good practice to have each DS3 be its own area?  I was talking to someone
and they said that it may not be a good idea to have multiple areas on the
same router, but I have never heard that.  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13116&t=13108
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Multiple OSPF areas on the same router [7:13108]

2001-07-20 Thread [EMAIL PROTECTED]

Guy,

 A router which belongs to multiple OSPF area's is called an Area
Border Router (ABR).   All ABR's must belong to area 0 (The OSPF Backbone
area) in addition to any other areas they belong to.   For each area a
router is a member of, it must store all of the LSA's for that area, and
participate in the Dykstra SPF calculations for that area.  So, the more
area's a router is a member of, the higher the CPU and memory load on the
router.   Recommendations for the maximum number of areas a  router should
belong to vary.   It isn't an exact science.  The number of routers, the
number of circuits (networks), and the stability of the circuits in each
area will affect the max number of areas you can support on a single ABR.
That said, 6 areas plus area 0 on a single router is probably to high.  3-4
areas plus area 0 is generally a good rule of thumb.   Again, keep in mind
there are many variables which affect how many areas a router can support
and so each situation must be considered individually.


 ---Jon





"Lupi, Guy" @groupstudy.com on 07/20/2001 01:29:41
PM

Please respond to "Lupi, Guy" 

Sent by:  [EMAIL PROTECTED]


To:   [EMAIL PROTECTED]
cc:

Subject:  Multiple OSPF areas on the same router [7:13108]


Lets say you have a router with 6 DS3s, has anyone ever heard that it is
not
a good practice to have each DS3 be its own area?  I was talking to someone
and they said that it may not be a good idea to have multiple areas on the
same router, but I have never heard that.  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13115&t=13108
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF [7:13105]

2001-07-20 Thread Ole Drews Jensen

This one is pretty good...

Routing TCP/IP Volume I by Jeff Doyle. ISBN: 1578700418

Hth,

Ole

~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNA, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~~~ 
 http://www.RouterChief.com
~~~
 NEED A JOB ???
 http://www.oledrews.com/job
~~~


-Original Message-
From: mike rose [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 12:08 PM
To: [EMAIL PROTECTED]
Subject: OSPF [7:13105]


Hello all

Is there a book out there (besides Cisco's BSCN)that will break down OSPF in
all its glory to me? Design and Implementation in a backbone environment?

Any help will be greatly appreciated. 

Thanks 

Mike




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13114&t=13105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF [7:13105]

2001-07-20 Thread Lupi, Guy

Jeff Doyles Routing TCP/IP Volume 1 is a great book as far as configuration,
theory and troubleshooting.  It gets into serious detail.

-Original Message-
From: mike rose [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 1:08 PM
To: [EMAIL PROTECTED]
Subject: OSPF [7:13105]


Hello all

Is there a book out there (besides Cisco's BSCN)that will break down OSPF in
all its glory to me? Design and Implementation in a backbone environment?

Any help will be greatly appreciated. 

Thanks 

Mike




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13113&t=13105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF [7:13105]

2001-07-20 Thread John Neiberger

Routing TCP/IP, Vol. 1 by Jeff Doyle

OSPF Network Design Solutions by Thomas M. Thomas II

OSPF: Anatomy of an Internet Routing Protocol by John Moy

Those ought to get you started!  ;-)

HTH,
John

>>> "mike rose"  7/20/01 11:07:32 AM >>>
Hello all

Is there a book out there (besides Cisco's BSCN)that will break down
OSPF in
all its glory to me? Design and Implementation in a backbone
environment?

Any help will be greatly appreciated. 

Thanks 

Mike




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13112&t=13105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How good are ECP 1 and 2 classes? [7:13111]

2001-07-20 Thread Rajesh Kumar

Hi all,

I just wanted to know about the classes - ECP 1 and 2 conducted by mentor
tech. in CA.
Is ECP 2 really necessary to take up the lab or just ECP 1 should do fine. 
What
additions are there in ECP 2?

Your comments are appreciated.

Thanks
Rajesh

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of pikumar.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13111&t=13111
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BGP [7:13110]

2001-07-20 Thread Tony Higgins

Greetings,

I have a couple of 7140 that we are connecting to ATT and Time Warner via a
couple of T3 circuits.  I have never configured BGP before but for better or
worse it fell on me to do it.  

The ATT circuit wont be in for a couple more days but everything seems to be
working just fine over the time warner circuit using the following bgp
config.

Since I am somewhat of a novice, I thought I would put what I came up with
out to this group for comment and criticism.  

BTW -I am using confederation because I could not get ibgp to work...

The main requirement right now is ISP redundancy...  there wont be a great
deal of growth at this site in term of additional ISPs...  We may upgrade
the T3 to OC3 at some point but that is a long way off.

Appreciate comments thanks


ROUTER 1

router bgp 1
 bgp log-neighbor-changes
 bgp confederation identifier 1
 bgp confederation peers 2 
 network 12.150.224.0 mask 255.255.254.0
 network 206.150.62.0
 neighbor cotennet peer-group
 neighbor cotennet remote-as 2
 neighbor cotennet ebgp-multihop 5
 neighbor cotennet update-source Loopback1
 neighbor 12.150.224.254 peer-group cotennet
 neighbor att peer-group
 neighbor att remote-as 12345
 neighbor att distribute-list 101 out
 neighbor x.x.x.x peer-group att
!
ip classless
ip route 12.150.224.0 255.255.254.0 Null0 254
ip route 206.150.62.0 255.255.255.0 Null0 254

ROUTER 2

router bgp 2
 bgp log-neighbor-changes
 bgp confederation identifier 1
 bgp confederation peers 1 
 network 12.150.224.0 mask 255.255.254.0
 network 206.150.62.0
 neighbor cotennet peer-group
 neighbor cotennet remote-as 1
 neighbor cotennet ebgp-multihop 5
 neighbor 12.150.224.253 peer-group cotennet
 neighbor cotennet update-source Loopback1
 neighbor timewarner peer-group
 neighbor timewarner remote-as 123
 neighbor timewarner distribute-list 101 out
 neighbor 206.150.72.85 peer-group timewarner


ip route 12.150.224.0 255.255.254.0 Null0 254
ip route 206.150.62.0 255.255.255.0 Null0 254


access-list 101 permit ip 12.150.224.0 0.0.1.255 any
access-list 101 permit ip 206.150.62.0 0.0.1.255 any




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13110&t=13110
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE Optical... [7:13104]

2001-07-20 Thread Kevin L. Thorngren

You will be taking the Communications & Services test.  It's supposed to be
open August 1st, but they have not opened registration yet.  I too, am
waiting for this one.

http://www.cisco.com/warp/customer/625/ccie/certifications/services.html

Kev

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Pawel Sikora
> Sent: Friday, July 20, 2001 10:38 AM
> To: [EMAIL PROTECTED]
> Subject: CCIE Optical... [7:13104]
>
>
> When would be optical lab available? And where first.?
> Just got beta exam score report, happily passed at 69%/60%
> but if I have to wait year or longer for the lab I'll forget many
> of the topics.
>
> Pawel/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13109&t=13104
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Multiple OSPF areas on the same router [7:13108]

2001-07-20 Thread Lupi, Guy

Lets say you have a router with 6 DS3s, has anyone ever heard that it is not
a good practice to have each DS3 be its own area?  I was talking to someone
and they said that it may not be a good idea to have multiple areas on the
same router, but I have never heard that.  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13108&t=13108
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Reference material on pings?? [7:13107]

2001-07-20 Thread Jim Newton

I am trying to find an in-depth guide to pings. I notice with my sniffer
that when I issue a ping from my laptop that there are three requests for
each reply. Is this normal?

Also I want to learn more about the TTL field. Do routers really only
decrement it by one as the packet passes through?

I just have a few questions about the nuts and bolts of this and probably
traceroute also, stuff that isn't in the normal books.

I have read the RFC and what I want is not there. I have also looked around
CCO quite a bit, and haven't found anything, not that this means that the
info is not there.

If anyone knows of a good book or on-line source, I would appreciate it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13107&t=13107
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: When booting up i get ATQOHO [7:11261]

2001-07-20 Thread Gareth Hinton

Joe,

Responding a bit late, but I had exactly the same problem today.
Eventually found that I had to use the specific cable, luckily I found one.
The difference between the specific cable and a standard rolled cable with
two terminal connectors, seems to be that pins 1and 6 are looped on the OEM
cable.
Pin 1 is not even connected in the standard cisco connectors.
I reckon if you can get pin 1 and 6 looped somehow on the switch the normal
cable may work. Otherwise get the real cable.

The following link has the right cable at Figure A6:

http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v5x/icg5x/c
sspec.htm#41267


Watch the wrap.

Gaz



 wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello,
> I want to thank all who responded to my problem of accessing through the
> console port. the problem was a background program that tied up the COM1
> port.
> Now when i access my 1924 switch , it responds with the letters "ATQOHO"
and
> "ATQOZO" and just sits there. I am wondering if the flash is corupted and
i
> need to reload the operating system or if i have a bigger problem. I have
> looked at the cisco site and nothing came up regaurding the problem.
> thank you for your time,
> Joe gearhart, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13106&t=11261
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF [7:13105]

2001-07-20 Thread mike rose

Hello all

Is there a book out there (besides Cisco's BSCN)that will break down OSPF in
all its glory to me? Design and Implementation in a backbone environment?

Any help will be greatly appreciated. 

Thanks 

Mike



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13105&t=13105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE Optical... [7:13104]

2001-07-20 Thread Pawel Sikora

When would be optical lab available? And where first.?
Just got beta exam score report, happily passed at 69%/60%
but if I have to wait year or longer for the lab I'll forget many
of the topics. 

Pawel/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13104&t=13104
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Passed the CCIE written exam today.... [7:12927]

2001-07-20 Thread Abran Rivera

Congratulations on passing the CCIE written. I wish the best of luck on the
LAB test.

Abran Rivera ACA

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Patrick Bass
Sent: Friday, July 20, 2001 8:40 AM
To: [EMAIL PROTECTED]
Subject: Re: Passed the CCIE written exam today [7:12927]


hahha...that's like putting CCIE (Candidate) on your sig
line.
..it's funny that people think that passing the written exam is
a certification
unto itself.  I'm a CCIE-Written...haha

""hal9001""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Future? Hopeful etc.
>
> Karl Billionaire (Future)
> - Original Message -
> From: "Dennis H"
> To:
> Sent: Thursday, July 19, 2001 2:05 PM
> Subject: Re: Passed the CCIE written exam today [7:12927]
>
>
> > What does "CCIE (feature)" mean?  That you're not really but wish you
> were?
> >
> >
> >
> > ""Ahmed Amimi""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Hi,
> > > Today i took the exam at 9:00 morning and ended the exam on the last
> > > min
> > > i passed the exam with 71 marks and 70 was the passing WOW!!! too
> > > close...
> > > i was expecting more marks but didn't get... so its my advice to all
to
> > > study hard for the exam as it is not so much easy as i thinked
off.
> > > I have learn by hard the CCNP2.0 course (cover to cover) and was
> > > thinking that i can do the CCIE too for just covering my left over
> > > topics that is ATM, FR, QoS, SRB, RSRB,DSLW+ etc...
> > > but this didnt work the exam was tuff
> > >
> > > I have studied from the following books... they are just great..
> > >
> > > all in one lab study guide
> > > routing TCP/IP (jeff)
> > > router bridges and swtices (second edition)
> > > CCIE preparation (todd lamede). good book...
> > >
> > > u can not cover one topic from one book so u have to read all the
> > > books
> > >
> > > anyways the paper is cleared . either it should be of good
marks
> > > or just pass the one thing i know is that i cleared the paper and is
> > > heading toword my CCIE lab thatz a loog jurney. as
> > > the lab is in my opinion is 10 times harder then the written
exam...
> > > (hope for high).
> > >
> > > -Mamoor
> > > CNE, MCT, CCIE (feature)
> > > CCIP (feature)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13103&t=12927
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What do I need to complete a Token ring lab? [7:13092]

2001-07-20 Thread EA Louie

You'll need a few token ring devices - a 2513 would be a good choice for a
2nd T/R router (it will allow you to do SR/TLB), and a 2515 would be a good
idea too, so you can do SRB.  You'll also want Enterprise IOS on those or a
couple of other routers so you can practice DLSw.

-e-
- Original Message -
From: Kenneth Woodely 
To: 
Sent: Friday, July 20, 2001 7:24 AM
Subject: What do I need to complete a Token ring lab? [7:13092]


> I'm trying to get my home lab ready to take the CCIE R/S written and lab.
> However, I need to know what equipment to get to complete token ring
> section. I know I need a cisco 2502.
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13102&t=13092
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: News on Written Exam [7:13086]

2001-07-20 Thread EA Louie

not yet, Mike - it was still 70% when I took it last month

-e-
- Original Message -
From: ; Michael (CAP, AFS, Contractor)

To: 
Sent: Friday, July 20, 2001 5:58 AM
Subject: News on Written Exam [7:13086]


> If this has been asked in prior emails I apologize .
>
> Has the written exam format [% passing mark] changed or due to change in
the
> near future ??
> I heard that it was supposed to get bumped from 70-80% passing mark.  With
> the lab changing has there been any announcements on the qualification
exam
> ?  Please let me know asap as
> I've got it scheduled for next week and am freekin a bit.
>
> oh never thanked the group but finished my CCNP and this group was of
great
> help. Thanks again
>
> thanks in advance
>
> Mike
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13101&t=13086
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Passed the CCIE written exam today.... [7:12927]

2001-07-20 Thread Patrick Bass

hahha...that's like putting CCIE (Candidate) on your sig
line.
..it's funny that people think that passing the written exam is
a certification
unto itself.  I'm a CCIE-Written...haha

""hal9001""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Future? Hopeful etc.
>
> Karl Billionaire (Future)
> - Original Message -
> From: "Dennis H"
> To:
> Sent: Thursday, July 19, 2001 2:05 PM
> Subject: Re: Passed the CCIE written exam today [7:12927]
>
>
> > What does "CCIE (feature)" mean?  That you're not really but wish you
> were?
> >
> >
> >
> > ""Ahmed Amimi""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Hi,
> > > Today i took the exam at 9:00 morning and ended the exam on the last
> > > min
> > > i passed the exam with 71 marks and 70 was the passing WOW!!! too
> > > close...
> > > i was expecting more marks but didn't get... so its my advice to all
to
> > > study hard for the exam as it is not so much easy as i thinked
off.
> > > I have learn by hard the CCNP2.0 course (cover to cover) and was
> > > thinking that i can do the CCIE too for just covering my left over
> > > topics that is ATM, FR, QoS, SRB, RSRB,DSLW+ etc...
> > > but this didnt work the exam was tuff
> > >
> > > I have studied from the following books... they are just great..
> > >
> > > all in one lab study guide
> > > routing TCP/IP (jeff)
> > > router bridges and swtices (second edition)
> > > CCIE preparation (todd lamede). good book...
> > >
> > > u can not cover one topic from one book so u have to read all the
> > > books
> > >
> > > anyways the paper is cleared . either it should be of good
marks
> > > or just pass the one thing i know is that i cleared the paper and is
> > > heading toword my CCIE lab thatz a loog jurney. as
> > > the lab is in my opinion is 10 times harder then the written
exam...
> > > (hope for high).
> > >
> > > -Mamoor
> > > CNE, MCT, CCIE (feature)
> > > CCIP (feature)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13100&t=12927
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fwd: CERT Advisory CA-2001-19 [7:13077]

2001-07-20 Thread Lowell Sharrah

Be aware.got this form CERT
Received: from SOM-LDAP1.state.mi.us by gwia01.state.mi.us; Thu, 19 Jul
  2001 20:45:12 -0400
Received: from smtp-av1.state.mi.us ([167.240.254.155]) by
  SOM-LDAP1.state.mi.us with Microsoft SMTPSVC(5.0.2195.1600); Thu, 19
  Jul 2001 20:45:03 -0400
Received: from ext-dns1.state.mi.us ([167.240.254.155]) by
  smtp-av1.state.mi.us with Microsoft SMTPSVC(5.0.2172.1); Thu, 19 Jul
  2001 20:41:27 -0400
Received: from 192.88.209.11 by ext-dns1.state.mi.us (InterScan E-Mail
  VirusWall NT); Thu, 19 Jul 2001 20:41:26 -0400 (Eastern Daylight Time)
Received: from localhost (lnchuser@localhost) by canaveral.red.cert.org
  (8.9.3/8.9.3/1.11) with SMTP id TAA00266; Thu, 19 Jul 2001 19:17:58
  -0400 (EDT)
Date: Thu, 19 Jul 2001 19:17:57 -0400 (EDT)
Received: by canaveral.red.cert.org; Thu, 19 Jul 2001 19:14:11 -0400
Message-Id: 
From: CERT Advisory 
To: [EMAIL PROTECTED]
Organization: CERT(R) Coordination Center - +1 412-268-7090
List-Help: , 
List-Subscribe: 
List-Unsubscribe: 
List-Post: NO (posting not allowed on this list)
List-Owner: 
List-Archive: 
Subject: CERT Advisory CA-2001-19
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 20 Jul 2001 00:41:27.0765 (UTC)
  FILETIME=[B60E9050:01C110B4]

-BEGIN PGP SIGNED MESSAGE-

CERT Advisory CA-2001-19 "Code Red" Worm Exploiting Buffer Overflow In IIS
Indexing Service DLL

   Original release date: July 19, 2001
   Source: CERT/CC

   A complete revision history can be found at the end of this file.

Systems Affected

   Systems running Microsoft Windows NT 4.0 and Windows 2000 with IIS 4.0
   or IIS 5.0 enabled

Overview

   The CERT/CC has received reports of new self-propagating malicious
   code that exploits certain configurations of Microsoft Windows
   susceptible to the vulnerability described in CERT advisory CA-2001-13
   Buffer Overflow In IIS Indexing Service DLL. These reports indicate
   that the "Code Red" worm may have already affected as many as 225,000
   hosts, and continues to spread rapidly.

Description

   In examples we have seen, the "Code Red" worm attack proceeds as
   follows:
 * The victim host is scanned for TCP port 80 by the "Code Red" worm.
 * The attacking host sends a crafted HTTP GET request to the victim,
   attempting to exploit a buffer overflow in the Indexing Service
   described in CERT advisory CA-2001-13
 * If the exploit is successful, the worm begins executing on the
   victim host. Initially, the existence of the c:notworm file is
   checked. Should this file be found, the worm ceases execution.
 * If c:notworm is not found, the worm begins spawning threads to
   scan seemingly random IP addresses for hosts listening on TCP port
   80, exploiting any vulnerable hosts it finds.
 * If the victim host's default language is English, then after 100
   scanning threads have started and a certain period of time has
   elapsed following infection, all web pages served by the victim
   host are defaced with the message

 HELLO! Welcome to http://www.worm.com! Hacked By Chinese!

 * If the victim host's default language is not English, the worm
   will continue scanning but no defacement will occur.

System Footprint

   The "Code Red" worm can be identified on victim machines by the
   presence of the following string in IIS log files:

/default.ida?N
NN
NN
NNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531
b%u53ff%u0078%u%u00=a

   Additionally, web pages on victim machines may be defaced with the
   following message:

 HELLO! Welcome to http://www.worm.com! Hacked By Chinese!

   The text of this page is stored exclusively in memory and is not
   written to disk. Therefore, searching for the text of this page in the
   file system may not detect compromise.

Network Footprint

   A host running an active instance of the "Code Red" worm scans random
   IP addresses on port 80/TCP looking for other hosts to infect.

   Additional detailed analysis of this worm has been published by eEye
   Digital Security at http://www.eeye.com.

Impact

   In addition to web site defacement, infected systems may experience
   performance degradation as a result of the scanning activity of this
   worm.

   Non-compromised systems and networks that are being scanned by other
   hosts infected by the "Code Red" worm may experience severe denial of
   service. This occurs because each instance of the "Code Red" worm uses
   the same random number generator seed to create the list of IP
   addresses it scans. Therefore, all victim hosts scan the same IP
   addresses.

   Furthermore, it is important to note that while the "Code Red" worm
   appea

Re: ISL configuration [7:13094]

2001-07-20 Thread [EMAIL PROTECTED]

To the best of my knowledge it will only work with a fastethernet
interface.

Peter.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13099&t=13094
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BRI level 1 status [7:13098]

2001-07-20 Thread STRAND Scott

Hi all,
When I do a show controllers bri 0/0, I'll get a response such as:

level 1 deactivated  ISDN level1 status F3or
level 1 actevated  ISDN level1 status F7

Where can I find what these status' mean. (F3, F7?)

Thanks,
Scott




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13098&t=13098
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Routing Protocol Software Position [7:13097]

2001-07-20 Thread Breaux, DeeDee

Hello All,
I am hoping that someone out there can help me out!   I am working with a
Pre-Ipo company in the Dallas area who is designing and developing an
optical switch that is going to increase bandwidth 100x.   They have raised
over 140 Million Dollars in funding and have enough money to operate for the
next two years without ever even having to sell a product, so they are
pretty stable for a start up.
I am looking for a Software Engineer who is developing routing protcol
software.I am finding tons of Network Engineers who actually do the
router configuration, but I am not finding the Engineers who are actually
developing the software.Below is a description of the position.   If you
happen to know ANYONE doing this, PLEASE either have them contact me or send
me their name and contact information.Thanks, in advance, for any help
you can give me!
Develop network protocol software for a large Internet Router.
Specific experience with BGP, OSPF, IS-IS or MPLS desired. These positions
require individuals who have proven capability to design, implement, and
test quality large system software. Requires a BS/MS CS or equivalent
previous experience with IP protocols or routing. Applicants for these
positions should have strong software skills programming in a large, high
performance environment. Applicants must have excellent oral and written
communication skills.
DeeDee Breaux
Senior Recruiter
Engineering Technical Recruiters
12801 N. Central Expressway, Suite 400
Dallas, Tx 75243
972-991-7569
fax: 972-774-0274
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13097&t=13097
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



how to configure mica modem in 3640? [7:13096]

2001-07-20 Thread zhu kenny

I have a ce1( use e1-r2 signal) and mica modem in 3640. when I use anolog
modem dial to 3640, some types anolog modems can connect to 3640, some types
will disconnect so fast. what's the matter?  If I want to use reverse telnet
to configure mica modem, it's hard to know when the next line of mica modem
will response the dial in. so I want to shutdown some mica modem, but I
cann't find out command. what should I do?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13096&t=13096
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Fridays funnies! [7:13095]

2001-07-20 Thread Natasha

still considered rude to drive the U-Haul to the funeral home.


 DINING OUT:
 1. When decanting wine from the box, make sure that you tilt the paper
cup and pour slowly so as not to "bruise" the fruit of the wine.
 2. If drinking directly from the bottle, always hold it with your
hands.


 ENTERTAINING IN YOUR HOME:
 1. A centerpiece for the table should never be anything prepared by a
taxidermist.
 2. Do not allow the dog to eat at the table, no matter how good his
manners are.

 PERSONAL HYGIENE:
 1. While ears need to be cleaned regularly, this is a job that should
be done in private, using one's OWN truck keys.
 2. Even if you live alone, deodorant is not a waste of good money.
 3. Use of proper toiletries can only delay bathing for a few days.
 4. Dirt and grease under the fingernails is a social no-no, as they
tend to
 detract from a woman's jewelry and alter the taste of finger foods.


 DATING (Outside the Family):
 1. Always offer to bait your date's hook, especially on the first date.
 2. Be assertive, Let her know you're interested: "I've been wanting to
go
 out with you since I read that stuff on the bathroom wall two years
ago".
 3. Establish, with her parents what time, she is expected back. Some
will
 say 10:00 PM., others might say "Monday." If the latter is the
answer,
 it is the man's responsibility to get her to school on time.

 THEATER ETIQUETTE:
 1. Crying babies should be taken to the lobby and picked up immediately
 after the movie has ended
 2. Refrain from talking to characters on the screen. Tests have proven
they
 can't hear you.

 WEDDINGS:
 1. Livestock, usually, is a poor choice for a wedding gift.
 2. Kissing the bride for more than 5 seconds may get you shot.
 3. For the groom, at least, rent a tux. A leisure suit with a
cummerbund
   and a clean bowling shirt can create a tacky appearance.
 4. Though uncomfortable, say "yes" to socks and shoes for that special
occasion.

 DRIVING ETIQUETTE:
 1. Dim your headlights for approaching vehicles, even if the gun is
loaded and the deer is in sight.
 2. When approaching a four-way stop, the vehicle with the largest tires
does not always have the right of way.
 3. Never tow another car using panty hose and duct tape.
 4. When sending your wife down the road with a gas can, it is impolite
to ask her to bring back beer too.
 5. Do not lay rubber while traveling in a funeral procession.
---
According to a report by the Lovenstein Institute,
George Bush has the lowest IQ of all presidents in the last 50
years. Here are the results from the study: The study determined the
following IQs of each
president as accurate to within five percentage points: 
147 Franklin D. Roosevelt (D) 
132 Harry Truman(D) 
122 Dwight D. Eisenhower (R) 
174 John F. Kennedy (D) 
126 Lyndon B. Johnson (D) 
155 Richard M. Nixon (R) 
121 Gerald Ford (R) 
175 James E. Carter (D) 
105 Ronald Reagan (R) 
098 George HW Bush (R) 
182 William J. Clinton (D) 
091 George W. Bush (R)
-
-- 
Natasha Flazynski
CCNA, MCSE
http://www.ciscobot.com
My Cisco information site.
http://www.botbuilders.com 
Artificial Intelligence and Linux development 





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13095&t=13095
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ISL configuration [7:13094]

2001-07-20 Thread Tansel Akyuz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Hi All ; 

I need some infromation about ISL configuration :   Can I use
ISL
between switch and router via RF modems ?

Thanks


Tansel Akyuz



-BEGIN PGP SIGNATURE-
Version: PGP 7.0

iQA/AwUBO1g/ljo2DiqLcdj0EQIt2QCcD0HGCI8LVpzurMvH70fpcuK1IXUAoMXp
qbrwJBXP3gx22YD4kf5TqZ4Y
=REra
-END PGP SIGNATURE-

[GroupStudy.com removed an attachment of type application/octet-stream which
had a name of PGPexch.rtf.asc]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13094&t=13094
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



What do I need to complete a Token ring lab? [7:13092]

2001-07-20 Thread Kenneth Woodely

I'm trying to get my home lab ready to take the CCIE R/S written and lab.
However, I need to know what equipment to get to complete token ring
section. I know I need a cisco 2502.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13092&t=13092
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: finished CCNP [7:13069]

2001-07-20 Thread John Neiberger

Congratulations!

>>> "Gayathri"  7/20/01 1:50:47 AM >>>
Hi Group,

Just passed the last paper CIT today

Would like to thank everybody for sharing their invaluable knowledge
here.

Gayathri




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13093&t=13069
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: E1 interface [7:12864]

2001-07-20 Thread [EMAIL PROTECTED]

Matt,

 Note: if the carrier will only give you a G703 (balanced or
unbalanced) interface, you may want to order a G.703 network module
(NM-1CE1B or NM-1CE1U).   In the U.K., we got an X.21 handoff from the
carrier; however, the Promina conversion unit they used to convert from
G.703 caused us to lose two DS0 channels on the E1.  Int this case, the
carrier was Concert and the E1's were between France and the U.K.   The
French side of the circuits were able to give us all channels with an X.21
handoff. So, bottomline, I recommend finding out what the carriers
prefers and configuring your router with the appropriate interface to
match.   I.e. for X.21 and V.35 standard old serial module (NM-4T, WIC-1T,
WIC-2T, etc.) or for G.703 use a channelized E1/ISDN PRI interface
(NM-1CE1B, NM-2CE1B, NM-2CE1U, etc.).

 --Jon





"Gareth Hinton" @groupstudy.com on 07/18/2001
09:19:49 PM

Please respond to "Gareth Hinton" 

Sent by:  [EMAIL PROTECTED]


To:   [EMAIL PROTECTED]
cc:

Subject:  Re: E1 interface [7:12864]


Matt,

WIC-1T will do the trick. Just make sure of how the provider will terminate
the circuit. You can usually ask to have it terminated as X21 - 15 way
D-Type, so a standard CABX21MT  cable will do.
Another alternative is that they terminate it G703 coax and you use a G703
to X21 converter.

HTH

Gaz


""Matt""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> OK, so do you know the actual serial interface that I should order
assuming
> that they will provide the CSU/DSU?  Is there a WIC-E1?  I can't find it.
> Thanks, by the way, you guys are a huge help...
>
>
> ""Winchester, Derek""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Correct. All you need is a serial interface. If you ask for a T1 or a
E1
> > they will always offer you a Pri or multiflex. Serial is the only
> interface
> > you should ask for when using a T1 or E1
> >
> > Derek S. Winchester
> >
> >
> > -Original Message-
> > From: Daniel Cotts [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, July 18, 2001 4:22 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: E1 interface [7:12864]
> >
> >
> > My experience is that in Europe the Telco provides the CSU/DSU. They
> should
> > hand off to you as V.35 so all you need is a serial port. Verify this.
> >
> > > -Original Message-
> > > From: Matt [mailto:[EMAIL PROTECTED]]
> > > Sent: Wednesday, July 18, 2001 2:54 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: E1 interface [7:12864]
> > >
> > >
> > > Hey, I know that this sounds dumb, but I've never had to
> > > install, configure,
> > > or support an E1 interface.  So today I went to put together
> > > a sales order
> > > for someone installing a router in Europe, and the only E1
> > > interfaces I can
> > > find are PRI and multiflex (?) for doing voice and data.
> > > Obviously I need
> > > to get more info from the provider over there, but I'm
> > > wondering what I'm
> > > missing.  With a T1 interface, you just have to decide
> > > whether or not it
> > > gets an internal CSU/DSU or not and then order a WIC-T1 or a
> > > WIC-1DSU-T1.
> > > Help!
> > > Report misconduct
> > > and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13091&t=12864
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: routing issue with ISDN backup [7:13045]

2001-07-20 Thread pat

why is redistribute command necessary..?
should i redisribute static routes in each of EIGRP.

thanks.


--- Farhan Ahmed  wrote:
> use  redistribute command..
> 
> 
> -Original Message-
> From: pat [mailto:[EMAIL PROTECTED]]
> Sent: Friday, July 20, 2001 6:51 AM
> To: [EMAIL PROTECTED]
> Subject: routing issue with ISDN backup [7:13045]
> 
> 
> Hello everyone:
> 
> 
> I have some routing issue here.
> 
> I have central office with a core router sitting
> behind the PIX. All branch office (remote) routers
> connect to central router using frame relay & ISDN
> as
> back up. Each branch office (having 1 Serial, 1
> ISDN,
> 1 Eth Int) should be able get to any other branch
> office & to Internet through PIX. All IPs used will
> be
> private & PIX will be doing NAT. 
> I am planning on having EIGRP to route between
> all
> routers over frame relay & floating static route to
> trigger ISDN if FR goes down. This floating static
> route will be something like
> 
> ip route 0.0.0.0 0.0.0.0 10.0.0.1 200  (10.0.0.1
> will
> be IP of central router)
> 
> In each branch office router EIGRP will have
> Ethernet
> & serial networks in it. This will make all internal
> routing fine when the network is on FR. But how do I
> route Internet traffic to core router so that it can
> send to PIX? I am already using default static route
> to core router, which I want to be used only when FR
> is down. Is there any way in EIGRP to propagate
> default route through network from core router?
> 
> 
> Thanks a lot,
> pat
> 
> 
> __
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/
[EMAIL PROTECTED]


__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13090&t=13045
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Off topic - Tools for measurement - SLA [7:13087]

2001-07-20 Thread Paulo Cesar Buerger

Dear all,

I would like to deploy some measurements for an IP backbone. The idea is to
publish some report giving information about packet loss, latency,
availability and other stuff related to SLA. What is the best way of doing
this ? Latency and packet loss measurements are enough ? Could you list some
good tools for this (a kind of a probe that could helping on collecting e
publishing the results to the Web)?

I would appreciate your help.

Paulo Buerger
Global Village Telecom




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13087&t=13087
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: finished CCNP [7:13069]

2001-07-20 Thread sakella locuz

congrats

Surya.
- Original Message -
From: Gayathri 
To: 
Sent: Friday, July 20, 2001 1:20 PM
Subject: finished CCNP [7:13069]


> Hi Group,
>
> Just passed the last paper CIT today
>
> Would like to thank everybody for sharing their invaluable knowledge here.
>
> Gayathri




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13088&t=13069
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



News on Written Exam [7:13086]

2001-07-20 Thread

If this has been asked in prior emails I apologize .

Has the written exam format [% passing mark] changed or due to change in the
near future ??
I heard that it was supposed to get bumped from 70-80% passing mark.  With
the lab changing has there been any announcements on the qualification exam
?  Please let me know asap as
I've got it scheduled for next week and am freekin a bit.

oh never thanked the group but finished my CCNP and this group was of great
help. Thanks again

thanks in advance

Mike




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13086&t=13086
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ccie lab study satterlee & hutnik [7:13066]

2001-07-20 Thread jason douglas

IMHO, the all in one book is relatively basic, not at the level the CCIE
is commonly believed to be. It is, however, useful for getting started
in technologies where you might not have that much hands on experience.
Just don't stop there . your mileage may vary

"[EMAIL PROTECTED]" wrote:
> 
> Satterlee & Hutnik has 2 books:  All-In-One Cisco CCIE Lab Study Guide and
> Cisco(r) CCIE(tm) Lab Practice Kit
> 
> As far as I know the Lab practice kit complements the Lab study guide. Is
it
> worth to buy both of them? Any opinions ?
> 

-- 
Jason Douglas
Lucent World Wide Services
Pager 888-451-0755




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13085&t=13066
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 2948 - gigabit over copper [7:13074]

2001-07-20 Thread Hornbeck, Timothy

Just used some of the GBIC's yesterday.  Here is a link to some info :

http://www.cisco.com/warp/public/cc/pd/si/casi/ca3500xl/prodlit/1kbs_ds.htm

Looks like the 2948 is not supported.

- Tim

-Original Message-
From: johan ericsson [mailto:[EMAIL PROTECTED]]
Sent: Friday, July 20, 2001 7:41 AM
To: [EMAIL PROTECTED]
Subject: 2948 - gigabit over copper [7:13074]


Hi!

Searching cisco's releasenotes the past few hours and can't find the answer
for my question.. so thought I could try here instead.

Anyone that can confirm that it is really true that only gigabit over fiber
is supported on the 2948 (and not over copper?).


Thanks!

best regards, Johan Ericsson




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13084&t=13074
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX.. [7:13067]

2001-07-20 Thread [EMAIL PROTECTED]

This might help





Cisco PIX: The PIX is physically more akin to a router than a computer. It
runs on Cisco hardware, using Cisco's proprietary operating system (I
believe it's a modified version of the IOS used in Cisco routers), and the
only options are how big a PIX box you want. There are various model
numbers such as PIX 515, PIX 520, PIX 525, PIX 530 etc., which basically
provide more throughput and/or additional interfaces as they grow.

The key advantages of the PIX are that it's very fast (100 Mbps +), since
it uses custom routing hardware and software, and considered very secure.
Later versions have grown beyond simple packet filtering and do provide
proxying/profiling support for specific protocols, such as HTTP, FTP and
SQLnet.

The major disadvantage with the PIX is that it's a pain to administer and
log, in my opinion. Like routers, configuration is almost always done from
a command line via the console port, which is both inconvenient and
user-unfriendly. While a properly configured PIX should be very secure,
we've run across many that were inexpertly configured and had pretty
significant security holes in some cases.

A nice feature of the PIX is that if you want a highly-available
configuration, the second PIX only costs about ~20% of the price of the
first one. The downside is that it support failover clustering only -- you
can't loadshare across two PIXes. (Of course, they're fast enough that you
shouldn't need to.) Heartbeats between the two firewalls are carried over a
special serial cable, so you can't build geographically dispersed clusters;
both PIXes have to be in the same room. (By contrast, we once built a
Firewall-1 cluster over two sites 4km apart).

Border Manager: BM is something of a niche player in the enterprise
firewall market and frankly we've never seen it outside of dedicated Novell
shops. It's a proxying firewall, which can theoretically be more secure
than packet filtering or stateful-inspection type firewalls but is
considerably slower. (Also, if you want to run an application for which no
proxy is available, you're out of luck.)  On a technical level, BM version
2 apparently had many flaws but BM v3.5 and above are considered quite
secure. The key advantage of BM would be that it's easy to tie it into your
Novell directory and enforce user-level authentication and security
policies.

If the client isn't using NDS, I don't really see the point. It's running
on Windows NT, which we usually advise against for reasons of reliability
and security vs. Unix solutions. An NT server can be hardened, but that
takes several hours and should be done by someone who knows what they're
doing. The Word document talks about tying the firewall into NT domains,
which is a very bad idea: a firewall should always be a stand alone server.
(Cross-authenticating a high security server with a low security server
provides obvious opportunities for side-channel attacks).

That said, if they already have NDS client machines and Novell skills
in-house, a properly-installed BM solution may be appropriate.

The firewall we usually recommend for high-security environments is
Checkpoint Firewall-1, on Sun Solaris or a Nokia network appliance. It's
fast (not as fast as a PIX, but we've never had a client with a fat enough
Internet pipe for that to become a problem), has good stateful-inspection
technology and the ability to proxy protocols when desired, and has a great
GUI-based adminstration and logging facility. It's particularly good for
enterprise deployments where a number of firewalls and/or firewall clusters
can log to a single management station.

Fundamentally the choice comes down to the client requirements. Are they
looking for high-speed connections and they already have plenty of Cisco
expertise? Get a PIX. Do all their client desktops authenticate through
NDS? Use Border Manager. Are they looking at a large-scale enterprise wide
deployment? FW-1 is probably the best choice. It's not really possible to
make a conclusive recommendation without more information on their business
drivers and existing environment, but hopefully the above quick&dirty
summary will be of some use.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13083&t=13067
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: HELP with BOOTUP !!!! [7:13031]

2001-07-20 Thread Ray Smith

But if I write any file name won't it also give me an error after searching 
for that name and not finding it?  Have you ever had this same problem 
before?  Please say.  Thanks for you input and await your response.


>From: Farhan Ahmed 
>To: 'Ray Smith' , [EMAIL PROTECTED]
>Subject: RE: HELP with BOOTUP  [7:13031]
>Date: Fri, 20 Jul 2001 11:21:18 +0400
>
>write any file name .bin
>
>-Original Message-
>From: Ray Smith [mailto:[EMAIL PROTECTED]]
>Sent: Friday, July 20, 2001 4:54 AM
>To: [EMAIL PROTECTED]
>Subject: HELP with BOOTUP  [7:13031]
>
>
>I have a cisco 2503 router that is in the mode of Router(boot)>.  I have
>tried doing a "copy tftp flash" with another 2500 file stored on my tftp
>server, but it would not work, because when I got to the option that asked
>for destination file name there was none present in the router.  Any
>suggestions as to how I can get this mess solved?  Thanks
>
>
>
>Ray
>
>_
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13081&t=13031
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



  1   2   >