Re: troubleshooting router dcd etc. [7:16345]

2001-08-17 Thread Tony Medeiros

It depends,  I can't remeber off the top of my head .  Some implimentations
use Data carier detect (DCD)  some don't.  I think it means the modem has
carrier.  I should know all these, but I forgot um.  Some of these signals
indicate that the router or the modem has data ready to send so being up or
down depends on state. Some signals arne't used at all.  One of the best
references I remember is the BCRAN book or courseware  .Here is the best
link that I found that explains RS-232 signaling (now EIA/TIA 232).

http://ewhdbks.mugu.navy.mil/rs-232.htm

Sorry I couldn't be more help.
Tony M
#6172


> hi all
>
> anyone knows When the router was connected to the
> modem -  DSR, DCD and CTS were
> down but RTS and DTR were up. What does this mean? Can
> anyone please explain?
> I guess this has something to do with hardware problem
> right?
>
> regards,
>
> suaveguru




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16346&t=16345
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



DB60-DB25 Cable Configuration - Urgent [7:16347]

2001-08-17 Thread mishaal

hi all,

Does anyone have any info/links on the cable configuration for the
DB60-D25 male & female, pls don't suggest purchasing one, it's costly
enough...

tks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16347&t=16347
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Taking the BCRAN on Monday [7:16348]

2001-08-17 Thread adam lee

Does anyone have any last minute tips?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16348&t=16348
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: troubleshooting router dcd etc. [7:16345]

2001-08-17 Thread suaveguru

that's fine it's good enough you have directed me to
an impressive site also you may want to read tony Re
vee's e-mail which have a crystal clear explanation 

thannks tony


regards,

suaveguru
--- Tony Medeiros  wrote:
> It depends,  I can't remeber off the top of my head
> .  Some implimentations
> use Data carier detect (DCD)  some don't.  I think
> it means the modem has
> carrier.  I should know all these, but I forgot um. 
> Some of these signals
> indicate that the router or the modem has data ready
> to send so being up or
> down depends on state. Some signals arne't used at
> all.  One of the best
> references I remember is the BCRAN book or
> courseware  .Here is the best
> link that I found that explains RS-232 signaling
> (now EIA/TIA 232).
> 
> http://ewhdbks.mugu.navy.mil/rs-232.htm
> 
> Sorry I couldn't be more help.
> Tony M
> #6172
> 
> 
> > hi all
> >
> > anyone knows When the router was connected to the
> > modem -  DSR, DCD and CTS were
> > down but RTS and DTR were up. What does this mean?
> Can
> > anyone please explain?
> > I guess this has something to do with hardware
> problem
> > right?
> >
> > regards,
> >
> > suaveguru
> 
> 


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16349&t=16345
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE lab equipment for sale [7:16350]

2001-08-17 Thread Shaw, Winston Mr 5 SIG CMD

Hello,

I have been successful with the CCIE lab. I would like to resell the
equipment from my home lab.
Available: Cat 2926T,  2509,  two(2) 2513's, two(2) 2503's, 4000M.

Please send an email if you are interested and I will provide equipment
details.

Thanks,
Winston
CCIE#7991




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16350&t=16350
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE lab equipment for sale [7:16350]

2001-08-17 Thread suaveguru

first of all congrats , secondly any pointers for us ?


thirdly how much do you wish to let go those
equipments?


regards,
suaveguru
--- "Shaw, Winston Mr 5 SIG CMD"
 wrote:
> Hello,
> 
> I have been successful with the CCIE lab. I would
> like to resell the
> equipment from my home lab.
> Available: Cat 2926T,  2509,  two(2) 2513's, two(2)
> 2503's, 4000M.
> 
> Please send an email if you are interested and I
> will provide equipment
> details.
> 
> Thanks,
> Winston
> CCIE#7991
[EMAIL PROTECTED]


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16351&t=16350
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE lab equipment for sale [7:16350]

2001-08-17 Thread Laura Grauwin

Hello

I would like to know how much is the 2509 and what s the spec.

Cheers

Laura


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16352&t=16350
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Multicast setup time [7:16353]

2001-08-17 Thread antonio

Hello,
can anyone write me how much is, approximately, the setup time for a
large-scale multicast transmission with a single-sender using
PIM-SM/MSDP/MBGP protocols?

Thanks
Antonio Di Napoli




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16353&t=16353
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Certificationzone White Paper ? [7:16354]

2001-08-17 Thread Phil Barker

Just reading "Layer 2 Switching and Bridging" by Leigh
Anne Chisholm.

Cut-Through

"Since the port does not wait to receive the CRC at
the end 'if/of' the frame, it cannot determine the
integrity of the data received"

Happy with that.

"Cut-through switches CAN perform a CRC check as the
frame passes through the switch, keeping track of the
number of bad frames the port receives".

I'm Confused.

I'm guessing that some form of CRC checksum can be
calculated on the first X-bits of the frame before the
cut-through process is allowed rather than the entire
frame.

Any ideas ?

Phil.




Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16354&t=16354
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



AS5300 voip problem [7:16355]

2001-08-17 Thread Mihai

Hello,

I have a problem seting a voip connection between 2 AS5300. They are both
linked to E1 trunks, ISDN primary-net5 signalling.

Here is a the configuration:

ROUTER A:

controller E1 0
 framing NO-CRC4
 clock source line primary
 pri-group timeslots 1-31
!
interface Ethernet0
 ip address 192.168.101.1 255.255.255.0

interface Serial0:15
 no ip address
 ip mroute-cache
 no logging event link-status
 isdn switch-type primary-net5
 isdn overlap-receiving
 isdn incoming-voice data 64
 isdn T310 6
 no cdp enable
!
voice-port 0:D
 cptone CZ
!
dial-peer voice 1 voip
destination-pattern 1T
session target ipv4:192.168.101.2
!
gateway
!
!

ROUTER B:

controller E1 0
 framing NO-CRC4
 clock source line primary
 pri-group timeslots 1-31
!
interface Ethernet0
 ip address 192.168.101.2 255.255.255.0

interface Serial0:15
 no ip address
 ip mroute-cache
 no logging event link-status
 isdn switch-type primary-net5
 isdn overlap-receiving
 isdn incoming-voice data 64
 isdn T310 6
 no cdp enable
!
voice-port 0:D
 cptone CZ
!
dial-peer voice 1 pots
destination-pattern 1T
port 0:D
!
gateway
!
!


The call never reach the Router B and here is the debug output from Router
A:

1d18h: ISDN Se0:15: RX   CALL_PROC pd = 8  callref = 0x8061
1d18h: Channel ID i = 0xA9838E
1d18h: ISDN Se0:15: TX ->  CONNECT pd = 8  callref = 0x8061
1d18h: Channel ID i = 0xA9838E
1d18h: Se0:13 DDR: dialer protocol up
1d18h: ISDN Se0:15: RX   DISCONNECT pd = 8  callref = 0x8061
1d18h: Cause i = 0x8090 - Normal call clearing
1d18h: ISDN Se0:15: RX   RELEASE_COMP pd = 8  callref = 0x8061


Where you see the Medusa# prompt the call connected and stays connected for
a few seconds. Any ideas ?

Regards,
Mihai




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16355&t=16355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AS5300 voip problem [7:16355]

2001-08-17 Thread Mihai

Here is the exact debug output.

1d18h: ISDN Se0:15: RX   CALL_PROC pd = 8  callref = 0x8061
1d18h: Channel ID i = 0xA9838E
1d18h: ISDN Se0:15: TX ->  CONNECT pd = 8  callref = 0x8061
1d18h: Channel ID i = 0xA9838E
1d18h: Se0:13 DDR: dialer protocol up
1d18h: ISDN Se0:15: RX   DISCONNECT pd = 8  callref = 0x8061
1d18h: Cause i = 0x8090 - Normal call clearing
1d18h: ISDN Se0:15: RX   RELEASE_COMP pd = 8  callref = 0x8061

""Mihai""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello,
>
> I have a problem seting a voip connection between 2 AS5300. They are both
> linked to E1 trunks, ISDN primary-net5 signalling.
>
> Here is a the configuration:
>
> ROUTER A:
>
> controller E1 0
>  framing NO-CRC4
>  clock source line primary
>  pri-group timeslots 1-31
> !
> interface Ethernet0
>  ip address 192.168.101.1 255.255.255.0
>
> interface Serial0:15
>  no ip address
>  ip mroute-cache
>  no logging event link-status
>  isdn switch-type primary-net5
>  isdn overlap-receiving
>  isdn incoming-voice data 64
>  isdn T310 6
>  no cdp enable
> !
> voice-port 0:D
>  cptone CZ
> !
> dial-peer voice 1 voip
> destination-pattern 1T
> session target ipv4:192.168.101.2
> !
> gateway
> !
> !
>
> ROUTER B:
>
> controller E1 0
>  framing NO-CRC4
>  clock source line primary
>  pri-group timeslots 1-31
> !
> interface Ethernet0
>  ip address 192.168.101.2 255.255.255.0
>
> interface Serial0:15
>  no ip address
>  ip mroute-cache
>  no logging event link-status
>  isdn switch-type primary-net5
>  isdn overlap-receiving
>  isdn incoming-voice data 64
>  isdn T310 6
>  no cdp enable
> !
> voice-port 0:D
>  cptone CZ
> !
> dial-peer voice 1 pots
> destination-pattern 1T
> port 0:D
> !
> gateway
> !
> !
>
>
> The call never reach the Router B and here is the debug output from Router
> A:
>
> 1d18h: ISDN Se0:15: RX   CALL_PROC pd = 8  callref = 0x8061
> 1d18h: Channel ID i = 0xA9838E
> 1d18h: ISDN Se0:15: TX ->  CONNECT pd = 8  callref = 0x8061
> 1d18h: Channel ID i = 0xA9838E
> 1d18h: Se0:13 DDR: dialer protocol up
> 1d18h: ISDN Se0:15: RX   DISCONNECT pd = 8  callref = 0x8061
> 1d18h: Cause i = 0x8090 - Normal call clearing
> 1d18h: ISDN Se0:15: RX   RELEASE_COMP pd = 8  callref = 0x8061
>
>
> Where you see the Medusa# prompt the call connected and stays connected
for
> a few seconds. Any ideas ?
>
> Regards,
> Mihai




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16356&t=16355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ospf summary address issue [7:16357]

2001-08-17 Thread Richard Botham

Hi All,


I have the following addresses 152.1.1.65/32 152.1.1.97/27 152.1.1.72/32
152.1.1.69/32 152.1.2.2/30 and have created 2 summary addresses of 152.1.1.0
/24 and 152.1.2.0/24 so that i can redistribute them into an igrp process
that is addressed with a 24bit mask. The summary routes appear when I use
show ip ospf summary-address, they do not appear in ospf routing table and
are not redistributed into igrp. Is this because the routes that make up the
summary have a longer mask than the summary and therefore not entered into
the ospf routing table
 
Any thoughts appreciated


Richard 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16357&t=16357
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



TIMEOUTS !! [7:16358]

2001-08-17 Thread Vijendra Jaiswal

Hello Cisco Champs ,

After every fourth or fifth day my 7500 series router ethernet port's gives
timeouts if i ping to it frm a PC on the same segment.
This problem lasts for 2-3 mins and then it is ok.
1) Can anyone pls help me in finding out the cause of the problem .
2) If it is a resources(mem or CPU ) problem can anyone pls help me out with
the right commands to monitor the usage of resources when i face the above
problem.

Thanks in advance.
Vijendra Jaiswal




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16358&t=16358
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How is the job market for CCNPs and/or CCIEs in NYC/NJ [7:16359]

2001-08-17 Thread Rico Ortiz

Not sure, we lucent just laying off about 3/4 of its work force NJ has been
hit hard. In NYC there are always jobs, but must be willing to travel..

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
George Zhang
Sent: Friday, August 17, 2001 1:13 AM
To: [EMAIL PROTECTED]
Subject: OT: How is the job market for CCNPs and/or CCIEs in NYC/NJ
[7:16344]


Hi All,

I am very curious about the current job market in New York City/New
Jersey area for CCNP, CCIE type of people because I am in the process of
moving to northern New Jersey.  If you are in that area, from that area
or know about that area, please kindly provide your answer/comments.
Your inputs will be greatly appreciated.

Q1. How hard/easy is it for someone with CCNP and/or CCIE with several
years of experience to find a decent job in that area?  Let assume this
candidate has fair amount of hands-on experience and can configure a six
router lab with frame relay, OSPF, EIGRP, RIP, redistribution, IPX RIP,
IPX EIGRP, VLAN, etc in one hour or so.

Q2. What companies in that area are currently hiring?

Q3. What companies in that area are currently frozen?  I know the answer
to this question might be a long list.

Q4. Which employer do you recommend?

Q5. Which employer you don't recommend?

Q6. Which reputable headhunters/search firms are specialized in placing
network professionals in that area?

Q7. Which  headhunters/search firms you recommend?

Q8. Which  headhunters/search firms you don't recommend?

Q9.  Do employers still work with headhunters/search firms nowadays?  It
is said that employers don't work with headhunters/search firms now
because of cost and availability of qualified candidates.

I think that many people in this group might be interest in the answers
to these questions as well.  So your  comments/input will be greatly
appreciated.

Thank you for all your help in advance.

George Zhang




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16359&t=16359
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ospf summary address issue [7:16357]

2001-08-17 Thread Vijendra Jaiswal

Hello Richard ,

You r right the longest prefix match is taken as the best route.
Vijendra



"Richard Botham"  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All,
>
>
> I have the following addresses 152.1.1.65/32 152.1.1.97/27 152.1.1.72/32
> 152.1.1.69/32 152.1.2.2/30 and have created 2 summary addresses of
152.1.1.0
> /24 and 152.1.2.0/24 so that i can redistribute them into an igrp process
> that is addressed with a 24bit mask. The summary routes appear when I use
> show ip ospf summary-address, they do not appear in ospf routing table and
> are not redistributed into igrp. Is this because the routes that make up
the
> summary have a longer mask than the summary and therefore not entered into
> the ospf routing table
>
> Any thoughts appreciated
>
>
> Richard




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16360&t=16357
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BGP Community Notes for Beginners [7:16362]

2001-08-17 Thread Tay Chee Yong

Hi all,

Would appreciate if someone could point out some good sites for read up on 
BGP Communities. I had read through some on the CCO website, but it seems 
quite confusing.

Regards,
Cheeyong




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16362&t=16362
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Certificationzone White Paper ? [7:16354]

2001-08-17 Thread Howard C. Berkowitz

>Just reading "Layer 2 Switching and Bridging" by Leigh
>Anne Chisholm.


Leigh Anne can answer with exactly what she had in mind, but let me 
make some observations.

>
>Cut-Through
>
>"Since the port does not wait to receive the CRC at
>the end 'if/of' the frame, it cannot determine the
>integrity of the data received"
>
>Happy with that.

Note this is per-frame.

>
>"Cut-through switches CAN perform a CRC check as the
>frame passes through the switch, keeping track of the
>number of bad frames the port receives".
>
>I'm Confused.

No, a CRC can be calculated on a frame after it completely passes 
through the ingress port, but by then it's already cut through. But 
this doesn't limit the switch's ability to calculate the percentage 
of bad frames over a period of time.  If this percentage exceeds a 
threshold, the port can switch to store-and-forward mode.

>
>I'm guessing that some form of CRC checksum can be
>calculated on the first X-bits of the frame before the
>cut-through process is allowed rather than the entire
>frame.
>
>Any ideas ?
>
>Phil.
>
>
>
>
>Do You Yahoo!?
>Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
>or your free @yahoo.ie address at http://mail.yahoo.ie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16361&t=16354
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DB60-DB25 Cable Configuration - Urgent [7:16347]

2001-08-17 Thread Donald B Johnson jr

cisco.com


- Original Message -
From: "mishaal" 
To: 
Sent: Friday, August 17, 2001 1:02 AM
Subject: DB60-DB25 Cable Configuration - Urgent [7:16347]


> hi all,
>
> Does anyone have any info/links on the cable configuration for the
> DB60-D25 male & female, pls don't suggest purchasing one, it's costly
> enough...
>
> tks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16363&t=16347
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Certificationzone White Paper ? [7:16354]

2001-08-17 Thread Peter Van Oene

This means that although the switch cannot prevent the forwarding of invalid
frames since it begins forwarding prior to verifying the checksum, it can
keep track of the number of errored frames since it does eventually verify
the checksum.  In other words, unlike store and forward switches who verify
the checksum before forwarding, by the time a cut-through switch realizes
the frame is bad, the damage is done.  This is key for modes like
adaptive/dynamic cut-through or whatever marketing calls it these days,
where a switch can use cut-through until a specific error threshhold is
reached and then dynamically switch to store and forward mode.  In practice
however, the latency variance between modes is so minimal that I believe
almost all switches use store and forward.

Pete
 

*** REPLY SEPARATOR  ***

On 8/17/2001 at 6:39 AM Phil Barker wrote:

>Just reading "Layer 2 Switching and Bridging" by Leigh
>Anne Chisholm.
>
>Cut-Through
>
>"Since the port does not wait to receive the CRC at
>the end 'if/of' the frame, it cannot determine the
>integrity of the data received"
>
>Happy with that.
>
>"Cut-through switches CAN perform a CRC check as the
>frame passes through the switch, keeping track of the
>number of bad frames the port receives".
>
>I'm Confused.
>
>I'm guessing that some form of CRC checksum can be
>calculated on the first X-bits of the frame before the
>cut-through process is allowed rather than the entire
>frame.
>
>Any ideas ?
>
>Phil.
>
>
>
>
>Do You Yahoo!?
>Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
>or your free @yahoo.ie address at http://mail.yahoo.ie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16364&t=16354
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Real world OSPF design dilemma (Longish) [7:16341]

2001-08-17 Thread Peter Van Oene

I'm not sure where you got the idea that one big area zero is a bad thing? 
In this case, I would highly recommend it.  This is a pretty small network
and I really don't see the benefit of adding hierarchy to it from a
multi-area perspective.  Keep in mind that the more you segment an OSPF area
into sub-areas, the more link state qualities you forego.  I'd go with your
boss on this one.

Pete


*** REPLY SEPARATOR  ***

On 8/17/2001 at 12:17 AM Bob Timmons wrote:

>Greetings all,
>
>We're converting our 3Com router world to Cisco soon and I have a question
>regarding the OSPF design.  I'm including a link to a JPG in case anyone
>wants to add their 2 cents.  You can see it at:
>
>http://members.tripod.com/~bobtimmons/network-1.jpg
>
>This is a somewhat simplistic view of our network and the IP's aren't real,
>but I'm hoping it makes sense regardless.  We currently have a full T1 to a
>frame cloud and our other 2 main buildings are off of that cloud as well,
>one is 1M, the other is the balance of the T.  Both of the remote sites are
>pointing to the 1 PVC at our main site.  My question is, would this OSPF
>network work?  I know the OBAZ, (One Big Area Zero - Wow! My first
>acronym! - Hey Howard, feel free to use that one), is frowned upon, but
>that's how my boss wants it, because that's how it is now.  Not good logic,
>but I have to follow orders sometimes.
>
>A note:  We have other sites off of the main site (Site 1) in another Frame
>Cloud.  It shouldn't affect what we're doing here, though.
>
>Also, I didn't include the IPX networks on the Ethernet ports.  That's not
>a
>real issue right now.
>
>Specifically, I'm unsure about using the Loopbacks.  We're going to use
>them
>for our DLSW (not pictured) links.  What I'm unsure about is, can I use
>these addresses, as given, with their masks, and distribute them via OSPF
>and have it work?
>
>If I'm completely off here, please feel free to let me know.
>
>I'm including the proposed configs (snipped)
>
>Thanks!
>
>
>Site1 -
>
>hostname Site1
>!
>ip subnet-zero
>!
>dlsw local-peer peer-id 10.10.0.1
>dlsw remote-peer 0 frame-relay interface Serial5/0.1 200
>dlsw remote-peer 0 frame-relay interface Serial5/0.2 300
>!
>ipx routing 0002.4a8c.xxx1
>!
>interface Loopback0
> ip address 10.10.0.1 255.255.255.255
> no ip directed-broadcast
>!
>interface FastEthernet1/0
> ip address 10.10.1.1 255.255.255.0
> no ip redirects
> no ip directed-broadcast
> ip ospf network broadcast
> ip ospf dead-interval 60
> full-duplex
> ipx network 1 encapsulation SAP
>!
>interface Serial5/0
> no ip address
> no ip directed-broadcast
> encapsulation frame-relay IETF
> no ip mroute-cache
> no fair-queue
> frame-relay interface-dlci 100
>!
>interface Serial5/0.1 multipoint
> description Frame-Relay to Site2 (DLCI 200) Circuit# 2
> ip address 10.10.10.2 255.255.255.252
> no ip directed-broadcast
> ipx network B
> no arp frame-relay
> no frame-relay inverse-arp
>!
>interface Serial5/0.2 multipoint
> description Frame-Relay to Site3 (DLCI 300) Circuit# 3
> ip address 10.10.10.6 255.255.255.252
> no ip directed-broadcast
> ipx network C
> no arp frame-relay
> no frame-relay inverse-arp
>!
>router ospf 1
> network 10.10.0.1 0.0.0.0 area 0.0.0.0
> network 10.10.10.1 0.0.0.0 area 0.0.0.0
> network 10.10.10.5 0.0.0.0 area 0.0.0.0
> network 10.10.1.1 0.0.0.0 area 0.0.0.0
>!
>ip classless
>ip default-network 0.0.0.0
>no ip http server
>
>Site 2 -
>
>hostname Site2
>!
>ip subnet-zero
>!
>dlsw local-peer peer-id 10.10.0.2
>dlsw remote-peer 0 frame-relay interface Serial5/0 100
>!
>ipx routing 0002.4a8c.xxx2
>!
>interface Loopback0
> ip address 10.10.0.2 255.255.255.255
> no ip directed-broadcast
>!
>interface FastEthernet1/0
> ip address 10.10.2.1 255.255.255.0
> no ip redirects
> no ip directed-broadcast
> ip ospf network broadcast
> ip ospf dead-interval 60
> full-duplex
> ipx network 2 encapsulation SAP
>!
>interface Serial5/0
> description Frame-Relay to Site1 (DLCI 100) Circuit# 2
> ip address 10.10.10.2 255.255.255.252
> no ip directed-broadcast
> encapsulation frame-relay IETF
> no ip mroute-cache
> no fair-queue
> frame-relay interface-dlci 200
> ipx network B
> no arp frame-relay
> no frame-relay inverse-arp
>!
>router ospf 1
> network 10.10.0.2 0.0.0.0 area 0.0.0.0
> network 10.10.10.2 0.0.0.0 area 0.0.0.0
> network 10.10.2.1 0.0.0.0 area 0.0.0.0
>!
>ip classless
>ip default-network 0.0.0.0
>no ip http server
>
>Site 3 -
>
>hostname Site3
>!
>ip subnet-zero
>!
>dlsw local-peer peer-id 10.10.0.3
>dlsw remote-peer 0 frame-relay interface Serial5/0 100
>!
>ipx routing 0002.4a8c.xxx3
>!
>interface Loopback0
> ip address 10.10.0.3 255.255.255.255
> no ip directed-broadcast
>!
>interface FastEthernet1/0
> ip address 10.10.3.1 255.255.255.0
> no ip redirects
> no ip directed-broadcast
> ip ospf network broadcast
> ip ospf dead-interval 60
> full-duplex
> ipx network 3 encapsulation SAP
>!
>interface Serial5/0
> description Frame-Relay to Site 1 (DLCI 100) Circuit# 33

Booting From TFTF host [7:16366]

2001-08-17 Thread [EMAIL PROTECTED]

What is the correct syntax to boot a Cisco router from a TFTP host?

Is it:

Boot System [IP_Address_Of_Host] [Filename] or
Boot System [Filename] [IP_Address_Of_Host] 

Or am I incorrect either way?

Thanks for any answers!

Pinkman




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16366&t=16366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Andy

Hi

Does anyone know the correct requirements to allow IPSEC traffic through an
access list on a perimeter router? Everything works OK without the access
list in place.

I know it's something to do with allowing the correct port numbers/protocols
through, etc... but can't seem to find any more info.

Any help greatly appreciated.


Andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16367&t=16367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: To CSU/DSU or not to CSU/DSU [7:16368]

2001-08-17 Thread dragi radovanovic

Jim,

look at it from this perspective:
with an external CSU/DSU you will have two possible point of failure: the
CSU/DSU and the  serial interface (WIC-1T). If you go with wic-1dsu-t1, and
something happens on that link, it is easier to troubleshoot the problem on
the wic-1dsu-t1.
The problem with this card is that you can't split voice and data, not can
you play with cable lenghts.
Regards,
Dragi


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16369&t=16368
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



To CSU/DSU or not to CSU/DSU [7:16368]

2001-08-17 Thread Jim Jones

Should I have the telecom people install a CSU/DSU or can I only  use the 
WAN CSU/DSU module on a 1720 router? Also, what is the differences in using 
the two options.

Thanks,

xw

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16368&t=16368
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Found a good deal [7:16371]

2001-08-17 Thread Juliet Richardson

Hi

Many of us are setting up home labs on a limited budget and I thought this 
might be of help.

Kelly Griffin at Kg2 Network Design has always provided top quality 
equipment at a fair price.  When I needed some back-to-back serial cables 
and an async cable for my new 2509 I went to his web page http://kg2.com.

On the order form there was a space to enter a 10% off coupon.  I didn't 
have one so I e-mailed Kelly and asked how to get one.  He told me to enter 
the word "heatwave" (without the quotes) and I would get the discount.

Hope this helps.

Julie



_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16371&t=16371
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Booting From TFTF host [7:16366]

2001-08-17 Thread dragi radovanovic

Maybe it's boot system tftp filename ipaddress?
I am not 100% sure, but I think this is it.
Regards,
Dragi


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16370&t=16366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Engelhard M. Labiro

Permit the following for IPSEC traffic:
 IKE : UDP port 500
 ESP: protocol 50

HTH

- Original Message -
From: "Andy" 
To: 
Sent: Friday, August 17, 2001 10:38 PM
Subject: Access list to allow IPSEC traffic through? [7:16367]


> Hi
>
> Does anyone know the correct requirements to allow IPSEC traffic through
an
> access list on a perimeter router? Everything works OK without the access
> list in place.
>
> I know it's something to do with allowing the correct port
numbers/protocols
> through, etc... but can't seem to find any more info.
>
> Any help greatly appreciated.
>
>
> Andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16373&t=16367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco Secure ACS for NT/2000 [7:16318]

2001-08-17 Thread george gittins

im running version 2.4 and so far smooth as hell. nice and easy
configuration
excelent product.although the newer version out there havent tried them out

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 16, 2001 1:55 PM
To: [EMAIL PROTECTED]
Subject: Cisco Secure ACS for NT/2000 [7:16318]


Does anyone have any experience good or bad with Cisco Secure Access Control
for Windows NT/2000? Are there any gottchas that I need to be aware of? I am
trying to get approval to purchase this product but managment wants me to
get opinions from someone else besides Cisco.

Thanks,


Harles




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16372&t=16318
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: To CSU/DSU or not to CSU/DSU [7:16368]

2001-08-17 Thread Bill Carter

The WAN CSU/DSU is covered under smartnet!!

^-^-^-^-^-^-^-^-^-^-^
Bill Carter
CCIE 5022
^-^-^-^-^-^-^-^-^-^-^


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jim Jones
Sent: Friday, August 17, 2001 8:45 AM
To: [EMAIL PROTECTED]
Subject: To CSU/DSU or not to CSU/DSU [7:16368]


Should I have the telecom people install a CSU/DSU or can I only  use the
WAN CSU/DSU module on a 1720 router? Also, what is the differences in using
the two options.

Thanks,

xw

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16374&t=16368
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNP Routing exam [7:16377]

2001-08-17 Thread Symon Thurlow

Hi all,

I passed the routing exam today, only just. Not very proud of the
score, 770.

I used the Sybex book (and my lab at home) mostly, that was a big
mistake. THe sybex book is missing a lot of information required to
pass the exam.

I had been told by many people, and the sybex book, that there were
hardly any BGP related questions. At least 20% of the questions I got
were BGP.

Anyway, switching, here I come.

Cheers,

Symon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16377&t=16377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Booting From TFTF host [7:16366]

2001-08-17 Thread Ole Drews Jensen

A good way to find out is to use the ? option on your router.

Look at the following output:

ROUTER#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER(config)#boot ?
  bootstrap   Bootstrap image file
  buffersize  Specify the buffer size for netbooting a config file
  hostRouter-specific config file
  network Network-wide config file
  system  System image file
 
ROUTER(config)#boot system ?
  WORD   TFTP filename or URL
  flash  Boot from flash memory
  mopBoot from a Decnet MOP server
  rcpBoot from a server via rcp
  romBoot from rom
  tftp   Boot from a tftp server
 
ROUTER(config)#boot system tftp ?
  WORD  Configuration filename
 
ROUTER(config)#boot system tftp elvis.bin ?
  Hostname or A.B.C.D  Address from which to download the boot config file
  
 
ROUTER(config)#boot system tftp elvis.bin 10.20.30.40 ?
  
 
ROUTER(config)#exit
ROUTER#exit

Hth,

Ole

~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNA, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~~~ 
 http://www.RouterChief.com
~~~
 NEED A JOB ???
 http://www.oledrews.com/job
~~~

-Original Message-
From: dragi radovanovic [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 8:58 AM
To: [EMAIL PROTECTED]
Subject: RE: Booting From TFTF host [7:16366]


Maybe it's boot system tftp filename ipaddress?
I am not 100% sure, but I think this is it.
Regards,
Dragi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16375&t=16366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Real world OSPF design dilemma (Longish) [7:16341]

2001-08-17 Thread Howard C. Berkowitz

>I'm not sure where you got the idea that one big area zero is a bad thing?

Me, as one example.

But let me make an important distinction, borrowing from George Orwell

 Four legs good   One big area not necessarily bad
 Two legs bad One big area zero bad

If you have a moderate number of routers without any obvious 
hierarchy, a single area can make perfectly good sense.  I do 
recommend, however, numbering that area ANYTHING but 0.0.0.0.

You don't need your first area to be 0.0.0.0.  But if later company 
growth, mergers/acquisitions/divestitures, etc., mean that hierarchy 
becomes appropriate, your second area MUST be 0.0.0.0, and the third, 
etc., are nonzero.
If you start by numbering all the routers in the One Big Area in 
0.0.0.0, that means that you will need to renumber the network 
statements when you grow.  Making the One Big Area 0.0.0.1 won't hurt 
anything and will make things much more flexible with respect to 
future requirements.

Incidentally, in a multivendor conversion like this, be sure to 
specify area numbers and router IDs explicitly and in four-octet 
format -- in other words, area 0.0.0.1, not area 1.  Not all vendors 
interpret area numbers in the same way -- Bay RS, in some versions, 
would convert "area 1" to "area 1.0.0.0."  3Com's default router ID, 
on some platforms, was derived through some strange algorithm based 
on part of an interface MAC address.

See other comments inline.

>
>In this case, I would highly recommend it.  This is a pretty small network
>and I really don't see the benefit of adding hierarchy to it from a
>multi-area perspective.  Keep in mind that the more you segment an OSPF area
>into sub-areas, the more link state qualities you forego.  I'd go with your
>boss on this one.
>
>Pete
>
>
>*** REPLY SEPARATOR  ***
>
>On 8/17/2001 at 12:17 AM Bob Timmons wrote:
>
>>Greetings all,
>>
>>We're converting our 3Com router world to Cisco soon and I have a question
>>regarding the OSPF design.  I'm including a link to a JPG in case anyone
>>wants to add their 2 cents.  You can see it at:
>>
>>http://members.tripod.com/~bobtimmons/network-1.jpg
>>
>>This is a somewhat simplistic view of our network and the IP's aren't real,
>>but I'm hoping it makes sense regardless.  We currently have a full T1 to a
>>frame cloud and our other 2 main buildings are off of that cloud as well,
>>one is 1M, the other is the balance of the T.  Both of the remote sites are
>>pointing to the 1 PVC at our main site.  My question is, would this OSPF
>>network work?  I know the OBAZ, (One Big Area Zero - Wow! My first
>>acronym! - Hey Howard, feel free to use that one), is frowned upon, but
>>that's how my boss wants it, because that's how it is now.  Not good logic,
>>but I have to follow orders sometimes.
>>
>>A note:  We have other sites off of the main site (Site 1) in another Frame
>>Cloud.  It shouldn't affect what we're doing here, though.
>>
>>Also, I didn't include the IPX networks on the Ethernet ports.  That's not
>>a
>>real issue right now.
>>
>>Specifically, I'm unsure about using the Loopbacks.  We're going to use
>>them
>>for our DLSW (not pictured) links.  What I'm unsure about is, can I use
>>these addresses, as given, with their masks, and distribute them via OSPF
>>and have it work?


Yes, you can distribute loopbacks just fine.

>  >
>>If I'm completely off here, please feel free to let me know.
>>
>>I'm including the proposed configs (snipped)
>>
>>Thanks!
>>
>>
>  >Site1 -




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16376&t=16341
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BGP Community Notes for Beginners [7:16362]

2001-08-17 Thread Howard C. Berkowitz

>Hi all,
>
>Would appreciate if someone could point out some good sites for read up on
>BGP Communities. I had read through some on the CCO website, but it seems
>quite confusing.


http://www.ietf.org/rfc/rfc1997.txt
for an application, http://www.ietf.org/rfc/rfc1998.txt

>
>Regards,
>Cheeyong


There's a lot of IETF work going on with extending community 
functions, but these should be a start for a beginner.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16378&t=16362
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Booting From TFTF host [7:16366]

2001-08-17 Thread Tony Medeiros

boot system tftp c2500-is-mz.120-5T.bin  10.1.1.1

#Follow the question mark road  Follow the question mark road ###
follOW, follOW, follOW, follOW ## Follow the questiom mark road follow
the queston MARK,  follow the question MARK, follow the question mark
raaad###

(Excerpt from the "Wizard of OZ)

Sorry, I'm just happy it's Friday !!!
Tony M.
#6172


- Original Message -
From: 
To: 
Sent: Friday, August 17, 2001 6:37 AM
Subject: Booting From TFTF host [7:16366]


> What is the correct syntax to boot a Cisco router from a TFTP host?
>
> Is it:
>
> Boot System [IP_Address_Of_Host] [Filename] or
> Boot System [Filename] [IP_Address_Of_Host]
>
> Or am I incorrect either way?
>
> Thanks for any answers!
>
> Pinkman




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16379&t=16366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: To CSU/DSU or not to CSU/DSU [7:16368]

2001-08-17 Thread william gannon

They will both work just fine.  As with everything, it depends... Do you
anticipate any network changes in the future, e.g ever trunking voice?  If
so you might want to invest in an external DSU that will allow you to add
modules.  If not, then the internal one will work just fine.  One note, some
service provider techs don't like the internal ones, they seem to have
trouble looping them remotely.

-Patrick

On Fri, 17 Aug 2001 09:45:08 -0400, Jim Jones wrote:

>  Should I have the telecom people install a CSU/DSU or can I only  use the

>  WAN CSU/DSU module on a 1720 router? Also, what is the differences in
using 
>  the two options.
>  
>  Thanks,
>  
>  xw
>  
>  _
>  Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp
___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16385&t=16368
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: code red [PIX edition] [7:15286]

2001-08-17 Thread Kent Hundley

The PIX, unfortunately, does not have similar functionality. i.e it doesn't
have NBAR like functionality

Regards,
Kent

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Hartnell, George
Sent: Tuesday, August 14, 2001 12:08 PM
To: [EMAIL PROTECTED]
Subject: RE: code red [PIX edition] [7:15286]


Below is a nice read.  Very helpful.  Can someone translate this for me from
RouterTalk into PIXese?

Best, G.



Subject: code red [7:15286]


I wanted to share this with the group:

http://www.cisco.com/warp/public/63/nbar_acl_codered.shtml




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16384&t=15286
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: blocking PORTS ON PIX!!! [7:16275]

2001-08-17 Thread Kent Hundley

Magdy,

If you want to prevent your internal users from accessing email accounts on
hotmail or yahoo, you could use access-lists to block outbound 110
connections to hotmail or yahoo netblocks.  The problem your going to have
is that a lot of people access those mail systems using a web interface.
You can also block HTTP to hotmail or yahoo and that would solve the issue,
but only if you can live with your users not accessing the hotmail and yahoo
websites at all, not for just email.

If your trying to attempt to keep your users from accessing outside email,
the only good way to do this is to use a web filtering product such as
web-sense.  There are a lot of free email systems on the Internet accessible
through a web browser, so trying to keep up with and block all of those
netblocks is probably going to be an exercise in futility.  You may also
find that some free email sites are on the same server that serves a
legtimate business purpose, so blocking the server for HTTP would not be an
option.

You need something that can filter at the url level.  The PIX alone cannot
do this so 3rd party products would be required.

The alternative would be to implement a policy that external email systems
are not to be used at work, have everyone sign the policy indicating they
understand what is required and that non-compliance could result in
termination, require users to authenticate and then monitor logs to see if
anyone is violating the policy. (You really should have something like this
in place already, typically called an Acceptable Use Policy or AUP)

HTH,
Kent




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Magdy H. Ibrahim
Sent: Thursday, August 16, 2001 5:47 AM
To: [EMAIL PROTECTED]
Subject: blocking PORTS ON PIX!!! [7:16275]


Dear All,

I have a question about how to block ports on PIX firewall:
my case is: I have mail server working behind PIX so I opened POP3 and SMTP
ports for this mail server.
my mail server accessed from inside and outside interfaces.
I want to limit my internal IP only to work with POP3 "using outlook express
or any mail client" from my mail server and deny any request for POP3 from
outside mail servers such as hotmail or yahoo.
can I do something like that ???
Please advice me ASAP...
here is my shortcut of my PIX conf.:
static (inside,outside) 62.21.55.68 10.0.0.21 netmask
255.255.255.255 0 0
access-group acl_in in interface inside
conduit permit icmp any any
conduit permit tcp host 62.21.55.66 eq smtp any
conduit permit tcp host 62.21.55.66 eq pop3 any

Regards,

Magdy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16382&t=16275
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Kent Hundley

Andy,

For future reference, when in doubt its always best to go to the source, i.e
the RFC's.  You can get a complete reference of the RFC's at:

http://www.rfc.net

Having said this, in general for IPSec to work you'll need to allow ISAKMP,
which uses UDP port 500.  This is _usually_ both the source and destination
port, but not always.  Some VPN clients use a random UDP source port, so
you'll have to allow for that unless you know for a fact that your VPN
clients don't have this behavior.

If you use ESP only (which is common), you just need to also allow IP
protocol number 50.  If you use AH, you need to also allow IP protocol 51.
(_not_ TCP/UDP port numbers, IP protocol numbers) These will be both the
source and destination IP protocols.

HTH,
Kent

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Andy
Sent: Friday, August 17, 2001 6:39 AM
To: [EMAIL PROTECTED]
Subject: Access list to allow IPSEC traffic through? [7:16367]


Hi

Does anyone know the correct requirements to allow IPSEC traffic through an
access list on a perimeter router? Everything works OK without the access
list in place.

I know it's something to do with allowing the correct port numbers/protocols
through, etc... but can't seem to find any more info.

Any help greatly appreciated.


Andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16380&t=16367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 1605R with IP/FIREWALL [7:16113]

2001-08-17 Thread Kent Hundley

Have you checked the cisco docs to see if the examples there can help?

http://www.cisco.com/warp/public/707/index.shtml#IOS

Regards,
Kent

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Juli Hato
Sent: Tuesday, August 14, 2001 8:40 PM
To: [EMAIL PROTECTED]
Subject: 1605R with IP/FIREWALL [7:16113]


Halo, could anyone give me some example configuration using firewall that
integrated with the router (software based).
Thank you.

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16383&t=16113
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DB60-DB25 Cable Configuration - Urgent [7:16347]

2001-08-17 Thread EA Louie

...and search for cable pinout.

I'd advise that if you're going to build your own cables, you learn to use
the different search engines and learn the different keywords to search on.
Also, my experience has been building the serial cables is much less
reliable than buying them, but perhaps you're a better crimper/solderer than
I...  :-)

-e-

- Original Message -
From: Donald B Johnson jr 
To: 
Sent: Friday, August 17, 2001 6:09 AM
Subject: Re: DB60-DB25 Cable Configuration - Urgent [7:16347]


> cisco.com
>
>
> - Original Message -
> From: "mishaal"
> To:
> Sent: Friday, August 17, 2001 1:02 AM
> Subject: DB60-DB25 Cable Configuration - Urgent [7:16347]
>
>
> > hi all,
> >
> > Does anyone have any info/links on the cable configuration for the
> > DB60-D25 male & female, pls don't suggest purchasing one, it's costly
> > enough...
> >
> > tks.
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16381&t=16347
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AS5300 voip problem [7:16355]

2001-08-17 Thread Tony Medeiros

Does your 5300 have a DSP blade?  then you should have "ISDN incoming voice
voice"  Also,  I don't see any " ip unumbered e0' or ip address on you
serial interface.  There seems to be a lot missing from your config.   Lots
of infor and release note on this platform for VOIP including this one.  The
config depend on hardware.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fvvf
ax_c/vvfvoip.htm

Note:  you can't do VOIP with MICA modems you need the DSP blade.
Tony M.
#6172
- Original Message -
From: "Mihai" 
To: 
Sent: Friday, August 17, 2001 4:59 AM
Subject: Re: AS5300 voip problem [7:16355]


> Here is the exact debug output.
>
> 1d18h: ISDN Se0:15: RX   CALL_PROC pd = 8  callref = 0x8061
> 1d18h: Channel ID i = 0xA9838E
> 1d18h: ISDN Se0:15: TX ->  CONNECT pd = 8  callref = 0x8061
> 1d18h: Channel ID i = 0xA9838E
> 1d18h: Se0:13 DDR: dialer protocol up
> 1d18h: ISDN Se0:15: RX   DISCONNECT pd = 8  callref = 0x8061
> 1d18h: Cause i = 0x8090 - Normal call clearing
> 1d18h: ISDN Se0:15: RX   RELEASE_COMP pd = 8  callref = 0x8061
>
> ""Mihai""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hello,
> >
> > I have a problem seting a voip connection between 2 AS5300. They are
both
> > linked to E1 trunks, ISDN primary-net5 signalling.
> >
> > Here is a the configuration:
> >
> > ROUTER A:
> >
> > controller E1 0
> >  framing NO-CRC4
> >  clock source line primary
> >  pri-group timeslots 1-31
> > !
> > interface Ethernet0
> >  ip address 192.168.101.1 255.255.255.0
> >
> > interface Serial0:15
> >  no ip address
> >  ip mroute-cache
> >  no logging event link-status
> >  isdn switch-type primary-net5
> >  isdn overlap-receiving
> >  isdn incoming-voice data 64
> >  isdn T310 6
> >  no cdp enable
> > !
> > voice-port 0:D
> >  cptone CZ
> > !
> > dial-peer voice 1 voip
> > destination-pattern 1T
> > session target ipv4:192.168.101.2
> > !
> > gateway
> > !
> > !
> >
> > ROUTER B:
> >
> > controller E1 0
> >  framing NO-CRC4
> >  clock source line primary
> >  pri-group timeslots 1-31
> > !
> > interface Ethernet0
> >  ip address 192.168.101.2 255.255.255.0
> >
> > interface Serial0:15
> >  no ip address
> >  ip mroute-cache
> >  no logging event link-status
> >  isdn switch-type primary-net5
> >  isdn overlap-receiving
> >  isdn incoming-voice data 64
> >  isdn T310 6
> >  no cdp enable
> > !
> > voice-port 0:D
> >  cptone CZ
> > !
> > dial-peer voice 1 pots
> > destination-pattern 1T
> > port 0:D
> > !
> > gateway
> > !
> > !
> >
> >
> > The call never reach the Router B and here is the debug output from
Router
> > A:
> >
> > 1d18h: ISDN Se0:15: RX   CALL_PROC pd = 8  callref = 0x8061
> > 1d18h: Channel ID i = 0xA9838E
> > 1d18h: ISDN Se0:15: TX ->  CONNECT pd = 8  callref = 0x8061
> > 1d18h: Channel ID i = 0xA9838E
> > 1d18h: Se0:13 DDR: dialer protocol up
> > 1d18h: ISDN Se0:15: RX   DISCONNECT pd = 8  callref = 0x8061
> > 1d18h: Cause i = 0x8090 - Normal call clearing
> > 1d18h: ISDN Se0:15: RX   RELEASE_COMP pd = 8  callref = 0x8061
> >
> >
> > Where you see the Medusa# prompt the call connected and stays connected
> for
> > a few seconds. Any ideas ?
> >
> > Regards,
> > Mihai




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16386&t=16355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ospf summary address issue [7:16357]

2001-08-17 Thread EA Louie

the summary-address command is for summarization of routes *into* OSPF (at
an ASBR).

If you want to summarize *out of* OSPF, you'll need to dig a little deeper.

Hint 1:  consider configuring your summary route using the target routing
protocol instead of the source routing protocol

Hint 2:  Get a copy of Jeff Doyle's "Routing TCP/IP Volume 1" for in-depth
treatment of redistribution, especially the metric matching between
protocols

-e-

- Original Message -
From: Richard Botham 
To: 
Sent: Friday, August 17, 2001 5:11 AM
Subject: ospf summary address issue [7:16357]


> Hi All,
>
>
> I have the following addresses 152.1.1.65/32 152.1.1.97/27 152.1.1.72/32
> 152.1.1.69/32 152.1.2.2/30 and have created 2 summary addresses of
152.1.1.0
> /24 and 152.1.2.0/24 so that i can redistribute them into an igrp process
> that is addressed with a 24bit mask. The summary routes appear when I use
> show ip ospf summary-address, they do not appear in ospf routing table and
> are not redistributed into igrp. Is this because the routes that make up
the
> summary have a longer mask than the summary and therefore not entered into
> the ospf routing table
>
> Any thoughts appreciated
>
>
> Richard
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16387&t=16357
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Fridays funnies [7:16388]

2001-08-17 Thread Natasha

Disclaimer, these are jokes!

Three sisters ages 92, 94, and 96 live in a house together. One night
the 96 year old draws a
  bath. She puts her foot in and pauses. She yells down the 
  stairs "was I getting in or out of the bath?". 

  The 94 year old yells back "I don't know. I'll come up and see." She
starts up the stairs and
  pauses. Then she yells "was I going up the stairs or down?" 

  The 92 year old is sitting at the kitchen table having tea listening
to her sisters. She shakes her
  head and says "I sure hope I never get that forgetful." She knocks on
wood for good measure.
  She then yells "I'll come up and help both of you as soon as I see
who's at the door". 

I have the right...I am a blonde

 She Was Soo Blonde:
 ..she took a ruler to bed to see how long she slept.
 ..she sent me a fax with a stamp on it.
 ..she thought a quarterback was a refund.
 ..she tried to put M&M's in alphabetical order.
 ..she thought Boyz II Men was a day care center.

 She Was Soo Blonde:
 ..she thought Eartha Kitt was a set of garden tools.
 ..she thought General Motors was in the army.
 ..she thought Meow Mix was a CD for cats.
 ..she thought TuPac Shakur was a Jewish holiday.
 ..under "education" on her job application, she put "Hooked On
Phonics."

 She Was Soo Blonde:
 ..she tripped over a cordless phone.
 ..she spent 20 minutes looking at the orange juice can because it said
"concentrate."
 ..she told me to meet her at the corner of "WALK" and "ONE WAY."
 ..at the bottom of the application where it says "sign here," she put
"Sagittarius."
 ..she asked for a price check at the Dollar Store.

 She Was Soo Blonde:
 ..she studied for a blood test.
 ..she thought she needed a token to get on "Soul Train."
 ..she sold the car for gas money!
 ..when she missed the 44 bus, she took the 22 bus twice instead.
 ..when she went to the airport and saw a sign that said "Airport Left,"
she
turned around and went home.

 She Was Soo Blonde:
 ..when she heard that 90% of all crimes occur around the home, she
moved.
 ..she thinks Taco Bell is the Mexican phone company.
 ..if she spoke her mind, she'd be speechless.
 ..she thought that she could not use her AM radio in the evening.

 My Favorite:
..she had a shirt that said "TGIF," which she thought stood for "This
Goes
In Front."

-- 
Natasha Flazynski
CCNA, MCSE
http://www.ciscobot.com
My Cisco information site.
http://www.botbuilders.com 
Artificial Intelligence and Linux development 





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16388&t=16388
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ospf summary address issue [7:16357]

2001-08-17 Thread Richard Botham

All,
Thanks for your help - I KNEW THIS - WHAT WAS I THINKING OF.
Sorry to have wasted your time

Richard


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16389&t=16357
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCDP Requirement [7:16317]

2001-08-17 Thread Tim Medley

Part of being able to pass any Cisco certification is the ability to
read and perform research.

Cisco has provided a great resource that can answer most any question
about Cisco Certification. And, get this, this resource is free!

www.cisco.com

Maye you should stop and take a look on CCO and read the reqirements for
the CCDP certification.

But here is an except from the available information:

CCDP Prerequisites
Valid CCNA and CCDA certifications

CCDP Exams
640-503 Routing or 640-900 BSCI

640-504 Switching

640-505 Remote Access

640-025 Design

So to answer your question, if you were a CCNP, you need to take and
pass the CCDA exam and the 640-025 Design (CID) exam to become a CCDP.


Tim Medley - CCNP+Voice
Network Architect
VoIP Group
iReadyWorld



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Zahid Hassan
Sent: Thursday, August 16, 2001 4:43 PM
To: [EMAIL PROTECTED]
Subject: CCDP Requirement [7:16317]


Hi All,

Can anybody pls. state the requirement to become a CCDP after CCNP ?
My confusion is whether one needs to pass only CID or both and CID and
CCDA.

Any assistance will be greately apppreciated.

Zahid




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16391&t=16317
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Real world OSPF design dilemma (Longish) [7:16341]

2001-08-17 Thread Peter Van Oene

I should have limited that to one big area vs one big area 0.  I'm all for
single areas when they suit, but I agree that using a non zero area can have
some benefits.

*** REPLY SEPARATOR  ***

On 8/17/2001 at 10:24 AM Howard C. Berkowitz wrote:

>>I'm not sure where you got the idea that one big area zero is a bad
>thing?
>
>Me, as one example.
>
>But let me make an important distinction, borrowing from George Orwell
>
> Four legs good   One big area not necessarily bad
> Two legs bad One big area zero bad
>
>If you have a moderate number of routers without any obvious 
>hierarchy, a single area can make perfectly good sense.  I do 
>recommend, however, numbering that area ANYTHING but 0.0.0.0.
>
>You don't need your first area to be 0.0.0.0.  But if later company 
>growth, mergers/acquisitions/divestitures, etc., mean that hierarchy 
>becomes appropriate, your second area MUST be 0.0.0.0, and the third, 
>etc., are nonzero.
>If you start by numbering all the routers in the One Big Area in 
>0.0.0.0, that means that you will need to renumber the network 
>statements when you grow.  Making the One Big Area 0.0.0.1 won't hurt 
>anything and will make things much more flexible with respect to 
>future requirements.
>
>Incidentally, in a multivendor conversion like this, be sure to 
>specify area numbers and router IDs explicitly and in four-octet 
>format -- in other words, area 0.0.0.1, not area 1.  Not all vendors 
>interpret area numbers in the same way -- Bay RS, in some versions, 
>would convert "area 1" to "area 1.0.0.0."  3Com's default router ID, 
>on some platforms, was derived through some strange algorithm based 
>on part of an interface MAC address.
>
>See other comments inline.
>
>>
>>In this case, I would highly recommend it.  This is a pretty small network
>>and I really don't see the benefit of adding hierarchy to it from a
>>multi-area perspective.  Keep in mind that the more you segment an OSPF
>area
>>into sub-areas, the more link state qualities you forego.  I'd go with
>your
>>boss on this one.
>>
>>Pete
>>
>>
>>*** REPLY SEPARATOR  ***
>>
>>On 8/17/2001 at 12:17 AM Bob Timmons wrote:
>>
>>>Greetings all,
>>>
>>>We're converting our 3Com router world to Cisco soon and I have a
>question
>>>regarding the OSPF design.  I'm including a link to a JPG in case anyone
>>>wants to add their 2 cents.  You can see it at:
>>>
>>>http://members.tripod.com/~bobtimmons/network-1.jpg
>>>
>>>This is a somewhat simplistic view of our network and the IP's aren't
>real,
>>>but I'm hoping it makes sense regardless.  We currently have a full T1
>to a
>>>frame cloud and our other 2 main buildings are off of that cloud as well,
>>>one is 1M, the other is the balance of the T.  Both of the remote sites
>are
>>>pointing to the 1 PVC at our main site.  My question is, would this OSPF
>>>network work?  I know the OBAZ, (One Big Area Zero - Wow! My first
>>>acronym! - Hey Howard, feel free to use that one), is frowned upon, but
>>>that's how my boss wants it, because that's how it is now.  Not good
>logic,
>>>but I have to follow orders sometimes.
>>>
>>>A note:  We have other sites off of the main site (Site 1) in another
>Frame
>>>Cloud.  It shouldn't affect what we're doing here, though.
>>>
>>>Also, I didn't include the IPX networks on the Ethernet ports.  That's
>not
>>>a
>>>real issue right now.
>>>
>>>Specifically, I'm unsure about using the Loopbacks.  We're going to use
>>>them
>>>for our DLSW (not pictured) links.  What I'm unsure about is, can I use
>>>these addresses, as given, with their masks, and distribute them via OSPF
>>>and have it work?
>
>
>Yes, you can distribute loopbacks just fine.
>
>>  >
>>>If I'm completely off here, please feel free to let me know.
>>>
>>>I'm including the proposed configs (snipped)
>>>
>>>Thanks!
>>>
>>>
>>  >Site1 -




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16390&t=16341
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



connecting cat5000 to access server [7:16392]

2001-08-17 Thread Kim Fisk

I've heard it requires a different pinout/cable than normal items, and I was
wondering if anyone could give me any ideas on what I need to do.. Do I have
to have a special cable/adapter or can I make one? I'm checking Cisco's
website, but I thought I'd ask here in case someone might be able to help me
out...

Thanks!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16392&t=16392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE Optical (350-020 ) [7:16394]

2001-08-17 Thread Armando José de Santana

Hi All,

Is there any  person in this list that knows some thing about the 
350-020 CCIE Optical  exam ?

Thanks in advance,

Armando.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16394&t=16394
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Associate and Professional Email Lists [7:16217]

2001-08-17 Thread Paul Borghese

With an open group, you are going to have your share of noise.   Everyone's
ides of noise is different.  For example, to many this very e-mail is noise
because it is not directly on subject.

But there are some things we can do to help lessen the noise.  They are on
my to-do list, just have been too busy.:

1. Comprehensive FAQ - we need a new faq that can answer the questions that
are asked over and over again.

2. Split out the professional group from the general networking group.

3. Setup a system where new users can not post directly to the group - This
is the most difficult of the three ideas and will require substantial
coding.  What I want is to have a system where when an e-mail arrives (or
from the newsfeed or website), if the poster has not been approved, it gets
bounced into the moderators queue.  If the moderator (actually we will have
many) agrees that the message is appropriate, the moderator will allow the
message to pass.  Plus if the moderator feels that the poster will continue
to send interesting and valuable e-mails, the moderator can place the user
in the "automatic approval" category so future e-mails will not need to be
approved.  The goal is to bounce new messages from first time posters, but
allow the old-timers to post without moderation.  Thus filtering the new
user asking inappropriate questions and the occasional spam.

Take care,

Paul





- Original Message -
From: "John Neiberger" 
To: 
Sent: Wednesday, August 15, 2001 6:05 PM
Subject: Re: Associate and Professional Email Lists [7:16217]


> Yes, Paul did do a good job cutting down that traffic.  I just noticed
> that in the last month or so there has been a slew of *really* basic
> questions that can be answered in the first two or three chapters of any
> decent CCNA study guide or by a 30 second search on CCO.
>
> I certainly don't mind answering these types of questions, I was just
> concerned that the purpose of the two separate lists was being
> undermined, causing a lot of unnecessary traffic.  To me it's no
> different than posting jobs on the Associate or Professional lists.  It
> may reach some of the right people, but it's not the appropriate place
> to post that type of information.
>
> >>> "Tom Lisa"  8/15/01 3:19:55 PM >>>
> Yes, John, there is an Associate list.  We have a similar problem
> there as well.  People keep insisting on asking CCNP/CCIE level
> questions on that list.
>
> However, people being the way they are, I doubt we will ever
> solve the problem completely.  But, you got to admit that Paul
> at least cut down on the volume of CCNA level traffic on this list.
>
> Prof. Tom Lisa, CCAI
> Community College of Southern Nevada
> Cisco Regional Networking Academy
>
>
>
> John Neiberger wrote:
>
>   Excuse me for this rant.  I'm not trying to be the content cop, I
>   just
>   wanted to make an observation.
>
>   Do we no longer have an Associate list as well as the Professional
>   list?  We've been getting horrendous numbers of emails lately that
>   simply do not belong on this list.  If you don't know how to connect
>   a
>   PC to a router using the console cable or how to connect two routers
>   back-to-back, it seems to me that you should ask those types of
>   questions on the CCNA-level list, not the CCNP-level list.
>
>   I'm not intending to come down too hard on people asking these
>   questions, I'm just asking that you post to the appropriate list.
>   The
>   Associate mailing list is intended for the simpler questions, while
>   the
>   Professional list is intended for those with slighly more advanced
>   questions.  I understand that we tend to grant a *lot* of leeway
> when
>   it
>   comes to subject matter, but the level of the question should still
>   be
>   appropriate to the list it's posted to.
>
>   Okay, enough ranting.  :-)  Back to our regular programming
>
>   Regards,
>   John
>   [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16393&t=16217
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: connecting cat5000 to access server [7:16392]

2001-08-17 Thread Paul C

Kim, I currently use a Cisco DB25 to RJ45 adapter labeled modem something?.
This was provided with a recent router I purchased.
""Kim Fisk""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I've heard it requires a different pinout/cable than normal items, and I
was
> wondering if anyone could give me any ideas on what I need to do.. Do I
have
> to have a special cable/adapter or can I make one? I'm checking Cisco's
> website, but I thought I'd ask here in case someone might be able to help
me
> out...
>
> Thanks!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16395&t=16392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: To CSU/DSU or not to CSU/DSU [7:16368]

2001-08-17 Thread Jim Brown

If you have the right chassis you could use an Integrated T1 MFT card, which
I believe, allows splitting of voice and data.

-Original Message-
From: dragi radovanovic [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 7:53 AM
To: [EMAIL PROTECTED]
Subject: RE: To CSU/DSU or not to CSU/DSU [7:16368]


Jim,

look at it from this perspective:
with an external CSU/DSU you will have two possible point of failure: the
CSU/DSU and the  serial interface (WIC-1T). If you go with wic-1dsu-t1, and
something happens on that link, it is easier to troubleshoot the problem on
the wic-1dsu-t1.
The problem with this card is that you can't split voice and data, not can
you play with cable lenghts.
Regards,
Dragi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16396&t=16368
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CISCO Recommended Guidelines [7:16397]

2001-08-17 Thread Fanglo

Dear Group,

I'm studying CCDA and come across many "cisco recommended guideline"
when test with Boson test. However, I cannot find out the so called
guidelines from CISCO's site. Would anyone point out some source in web?

TIA,
Fanglo




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16397&t=16397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Booting From TFTF host [7:16366]

2001-08-17 Thread [EMAIL PROTECTED]

In a message dated 8/17/01 8:35:45 AM Central Daylight Time, 
[EMAIL PROTECTED] writes:

<< Subj: Booting From TFTF host [7:16366]
 Date:  8/17/01 8:35:45 AM Central Daylight Time
 From:  [EMAIL PROTECTED] ([EMAIL PROTECTED])
 Sender:[EMAIL PROTECTED]
 Reply-to:  [EMAIL PROTECTED] ([EMAIL PROTECTED])
 To:[EMAIL PROTECTED]

The correct syntax is as follows:
boot system (file_name) (A.B.C.D...ip add of host)
HTH,
Rob H

 
 What is the correct syntax to boot a Cisco router from a TFTP host?
 
 Is it:
 
 Boot System [IP_Address_Of_Host] [Filename] or
 Boot System [Filename] [IP_Address_Of_Host] 
 
 Or am I incorrect either way?
 
 Thanks for any answers!
 
 Pinkman




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16398&t=16366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Certificationzone White Paper ? [7:16354]

2001-08-17 Thread Leigh Anne Chisholm

Unlike a store-and-forward switch, a cut-through switch will not hold onto
the frame while calculating the checksum.  The frame will pass through the
switch--bad or not.

A CRC checksum cannot be calculated on the first X-bits of the frame.  A
checksum is performed to determine if that value agrees with the value
contained in the frame received.  Since the original CRC references the
length of the frame, it would be impossible to compute a CRC checksum on a
portion of the frame to determine its validity.

Hope that helps explain things (but I think Howard and Peter did a good job
already).


  -- Leigh Anne

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Phil Barker
Sent: Friday, August 17, 2001 4:40 AM
To: [EMAIL PROTECTED]
Subject: Certificationzone White Paper ? [7:16354]


Just reading "Layer 2 Switching and Bridging" by Leigh
Anne Chisholm.

Cut-Through

"Since the port does not wait to receive the CRC at
the end 'if/of' the frame, it cannot determine the
integrity of the data received"

Happy with that.

"Cut-through switches CAN perform a CRC check as the
frame passes through the switch, keeping track of the
number of bad frames the port receives".

I'm Confused.

I'm guessing that some form of CRC checksum can be
calculated on the first X-bits of the frame before the
cut-through process is allowed rather than the entire
frame.

Any ideas ?

Phil.




Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16399&t=16354
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Help need to find a good reliable datacenter [7:16401]

2001-08-17 Thread Jonathan Chung

Hi Dennis.

Can you tell me your e-mail?  Just in case you haven't got my e-mail.

Thank you.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16401&t=16401
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: connecting cat5000 to access server [7:16392]

2001-08-17 Thread Leigh Anne Chisholm

I believe it's a straight-through serial cable.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Kim Fisk
Sent: Friday, August 17, 2001 9:38 AM
To: [EMAIL PROTECTED]
Subject: connecting cat5000 to access server [7:16392]


I've heard it requires a different pinout/cable than normal items, and I was
wondering if anyone could give me any ideas on what I need to do.. Do I have
to have a special cable/adapter or can I make one? I'm checking Cisco's
website, but I thought I'd ask here in case someone might be able to help me
out...

Thanks!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16400&t=16392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IAS [7:16402]

2001-08-17 Thread Tom Richs

Anyone configure Windows 2000 Internet Authentication Service (IAS) to work 
with a Cisco PIX for outbound Internet access authentation?  I'm having 
difficulty configuring the IAS side.  Thanks in advance

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16402&t=16402
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Routers and Radius Authentication [7:16403]

2001-08-17 Thread David A. Lauer

I'm trying to configure Cisco routers (7206,3662, 2600, etc...) to use
Radius authentication.  I'd like the authenticated user(s) to either be
dropped directly into enable mode or left only at the telnet prompt based
on their authority (defined by the Radius server).  I'm assuming this
involves two levels of AAA. Authentication and Authorization.

I have been able to configure a 3662 (Version 12.2(2)T) to allow
authentication and leave the logged on user at an enable prompt without
requiring the user to enter the 'enable' command.

What I am unable to get to work properly is the latter part of my
requirement.  i.e. those without authority to enable mode only get the
telnet prompt and view access to the router.

Any suggestions on how to allow this configuration?

Here's my configuration;
--
--

Radiator Radius is my radius server.

Cisco router:
-
aaa new-model
aaa authentication login default group radius enable
aaa authentication enable default group radius enable
aaa authorization exec default group radius local

radius-server host 200.x.x.x auth-port 1645 acct-port 1646 key 7 
radius-server retransmit 3


-- 
David A. Lauer
IFX Communications Ventures




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16403&t=16403
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



problems with uploading cisco image [7:16404]

2001-08-17 Thread Rik Thomas

Here is the error I keep getting, download seems to complete fine, I have
downloaded it three times keep getting the same error?  Any wisdom?

Verifying checksum...  invalid (expected 0xF45, computed 0xCF6D)
Flash copy took 176832 msecs
Router(boot)#reload
[confirm]y
System Bootstrap, Version 4.14(9.1), SOFTWARE
Copyright (c) 1986-1994 by cisco Systems
2500 processor with 16384 Kbytes of main memory

-- 
Rik Thomas
[EMAIL PROTECTED] http://SmartBackups.com
Is your Website Smart? Automated Website backups.  Free 30Day trial!
Ph: 302.672.7314 Fx: 302.672.7315 ICQ: 879956




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16404&t=16404
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: problems with uploading cisco image [7:16404]

2001-08-17 Thread Dennis H

Yea... the checksum is bad.  Either your having errors in transmission or
your image is bad on the media your copying from.  More likely its a bad
image as it happened three times.




""Rik Thomas""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Here is the error I keep getting, download seems to complete fine, I have
> downloaded it three times keep getting the same error?  Any wisdom?
>
> Verifying checksum...  invalid (expected 0xF45, computed 0xCF6D)
> Flash copy took 176832 msecs
> Router(boot)#reload
> [confirm]y
> System Bootstrap, Version 4.14(9.1), SOFTWARE
> Copyright (c) 1986-1994 by cisco Systems
> 2500 processor with 16384 Kbytes of main memory
>
> --
> Rik Thomas
> [EMAIL PROTECTED] http://SmartBackups.com
> Is your Website Smart? Automated Website backups.  Free 30Day trial!
> Ph: 302.672.7314 Fx: 302.672.7315 ICQ: 879956




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16405&t=16404
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



how to upgrade flash [7:16406]

2001-08-17 Thread george gittins

is their a way to upgrade flash through console?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16406&t=16406
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: problems with uploading cisco image [7:16404]

2001-08-17 Thread Daniel Cotts

I'd suggest that you call Cisco 800-553-6387 to get updated BootROMs for
your router. Don't know if that is the problem but they sure are old. 

> -Original Message-
> From: Rik Thomas [mailto:[EMAIL PROTECTED]]
> Sent: Friday, August 17, 2001 1:23 PM
> To: [EMAIL PROTECTED]
> Subject: problems with uploading cisco image [7:16404]
> 
> 
> Here is the error I keep getting, download seems to complete 
> fine, I have
> downloaded it three times keep getting the same error?  Any wisdom?
> 
> Verifying checksum...  invalid (expected 0xF45, computed 0xCF6D)
> Flash copy took 176832 msecs
> Router(boot)#reload
> [confirm]y
> System Bootstrap, Version 4.14(9.1), SOFTWARE
> Copyright (c) 1986-1994 by cisco Systems
> 2500 processor with 16384 Kbytes of main memory
> 
> -- 
> Rik Thomas
> [EMAIL PROTECTED] http://SmartBackups.com
> Is your Website Smart? Automated Website backups.  Free 30Day trial!
> Ph: 302.672.7314 Fx: 302.672.7315 ICQ: 879956
> Report misconduct 
> and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16407&t=16404
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco 3640 WIN 2000 IAS [7:16408]

2001-08-17 Thread [EMAIL PROTECTED]

I am trying to get a users dialing into a 3640 to authenticate to a Win 2000
IAS Radius Server.
 
IAS log Shows the Access-Request on the first line then Access-Reject on the
Second line
Is this Access-Reject referring to the user or the router?
The Cisco Running the Cisco debug tell me it fails local and logon fails for
the Radius "IAS"
 
I have checked the ports and password on the IAS as well as the Cisco.
WIN 2000
Clinent Client-Vender = CISCO
Remote Access Polices In the advance settings I have added the vender
specific parameters for Cisco.
Authentication I started with Chap, then went to unencrypted PAP SPAP
 
CISCO
IOS (tm) 3600 Software (C3640-I-M), Version 12.1(8), RELEASE SOFTWARE (fc1)
aaa new-model

aaa authentication login default local

aaa authentication login no_radius enable

aaa authentication ppp default if-needed group radius

aaa authorization network default group radius

aaa accounting exec start_stop start-stop group radius

aaa accounting network start_stop start-stop group radius
 
radius-server host 10.108.1.6 auth-port 1645 acct-port 1646

radius-server retransmit 3

radius-server key AnDialRtr




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16408&t=16408
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pong & Heartbeat [7:16337]

2001-08-17 Thread Priscilla Oppenheimer

Was this by any chance one of those guys (and it usually is guys, sorry) 
that puffs himself up and acts like he knows a whole bunch because he can 
spout tekkie terms? ;-)

Heartbeat was an Ethernet II technology. It wasn't available on Ethernet I, 
so there were some compatibility issues. IEEE supports it also and calls it 
SQE. When you install an external transceiver you have to configure the SQE 
test signal. It should be disabled if the transceiver is attached to a hub. 
The purpose of the signal is to test the collision detection electronics of 
the transceiver. It used to cause all sorts of troubleshooting issues and 
would be the number one thing someone who learned Ethernet 15 years ago 
would tell you to look into.

Pong was a very cool video game. Please don't knock it. ;-) Could he have 
meant ping?? Or, maybe Spong? Spong monitors system performance. I don't 
think it has anything to do with Cisco though. I guess it could monitor a 
few things on a Cisco router maybe.

Priscilla

At 11:54 PM 8/16/01, Circusnuts wrote:
>I was interviewing ASP's the other day & just before the senior guy went
into
>a shpeal about atomic aggregates, he mentioned we might want to investigate
>running "Pong" or since we were using Cisco- "Heartbeat."  I'm not sure if
>I'm
>researching the right areas, but I have found next to nothing on this stuff.
>Cisco uses the term heartbeat for polling GeoTel equipment & Pong has only
>revealed Atari's early successes with a relatively cheesy video game.
>
>Any takers...
>
>Thanks
>Phil


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16412&t=16337
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Non-deliverable mail [7:16409]

2001-08-17 Thread Super-User

 
This is an automated response from the Mailer Daemon 
 

You recently sent an item of mail to [EMAIL PROTECTED] 
 
The recipient's mailbox is currently full and your mail cannot be delivered. 

Please try sending your message later when the recipient may have emptied
their mailbox.


Regards

The Mailer Daemon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16409&t=16409
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CISCO Recommended Guidelines [7:16397]

2001-08-17 Thread Priscilla Oppenheimer

The "guidelines" are all over Cisco's Web site and documentation. They 
aren't in any specific place. The best place to start for design issues may 
be the Internetwork Design Guide here:

http://www.cisco.com/univercd/cc/td/doc/cisintwk/idg4/index.htm

Priscilla

At 12:35 PM 8/17/01, you wrote:
>Dear Group,
>
>I'm studying CCDA and come across many "cisco recommended guideline"
>when test with Boson test. However, I cannot find out the so called
>guidelines from CISCO's site. Would anyone point out some source in web?
>
>TIA,
>Fanglo


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16411&t=16397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Certificationzone White Paper ? [7:16354]

2001-08-17 Thread Priscilla Oppenheimer

Agreed and I would add a comment. A lot of people assume that cut-through 
means that the bits have whipped through and disappeared. Actually, Cisco 
switches buffer frames regardless of switching mode. This means that the 
switch can calculate the CRC, as you say, and keep track of bad CRC counts.

There's another important reason that it must buffer the frame. What if the 
output port is a shared (half-duplex) Ethernet? The router must obey 
CSMA/CD rules in that case and it may not be able to transmit the bits 
right away. The medium might be busy and the frame must be deferred. In 
that case, it's a good thing that the frame was buffered.

Priscilla

At 09:27 AM 8/17/01, Peter Van Oene wrote:
>This means that although the switch cannot prevent the forwarding of invalid
>frames since it begins forwarding prior to verifying the checksum, it can
>keep track of the number of errored frames since it does eventually verify
>the checksum.  In other words, unlike store and forward switches who verify
>the checksum before forwarding, by the time a cut-through switch realizes
>the frame is bad, the damage is done.  This is key for modes like
>adaptive/dynamic cut-through or whatever marketing calls it these days,
>where a switch can use cut-through until a specific error threshhold is
>reached and then dynamically switch to store and forward mode.  In practice
>however, the latency variance between modes is so minimal that I believe
>almost all switches use store and forward.
>
>Pete
>
>
>*** REPLY SEPARATOR  ***
>
>On 8/17/2001 at 6:39 AM Phil Barker wrote:
>
> >Just reading "Layer 2 Switching and Bridging" by Leigh
> >Anne Chisholm.
> >
> >Cut-Through
> >
> >"Since the port does not wait to receive the CRC at
> >the end 'if/of' the frame, it cannot determine the
> >integrity of the data received"
> >
> >Happy with that.
> >
> >"Cut-through switches CAN perform a CRC check as the
> >frame passes through the switch, keeping track of the
> >number of bad frames the port receives".
> >
> >I'm Confused.
> >
> >I'm guessing that some form of CRC checksum can be
> >calculated on the first X-bits of the frame before the
> >cut-through process is allowed rather than the entire
> >frame.
> >
> >Any ideas ?
> >
> >Phil.
> >
> >
> >
> >
> >Do You Yahoo!?
> >Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
> >or your free @yahoo.ie address at http://mail.yahoo.ie


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16410&t=16354
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Conditional NAT! [7:16413]

2001-08-17 Thread David M. Crosby

ip nat inside destination

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Patrick
Sent: Friday, August 17, 2001 12:10 PM
To: [EMAIL PROTECTED]
Subject: Conditional NAT!


Can you perform NAT based on a policy?

I have a need to NAT based on destination adddress.

Patrick
**Please read:http://www.groupstudy.com/list/posting.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16413&t=16413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CISCO Recommended Guidelines [7:16397]

2001-08-17 Thread Donald B Johnson jr

right before I am going to leave on a friday too.
I think the only true cisco guideline is to buy their gear exclusively. :>)
At least that is what our SE keeps telling us.

- Original Message -
From: "Fanglo" 
To: 
Sent: Friday, August 17, 2001 9:35 AM
Subject: CISCO Recommended Guidelines [7:16397]


> Dear Group,
>
> I'm studying CCDA and come across many "cisco recommended guideline"
> when test with Boson test. However, I cannot find out the so called
> guidelines from CISCO's site. Would anyone point out some source in web?
>
> TIA,
> Fanglo




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16416&t=16397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco 3640 WIN 2000 IAS [7:16408]

2001-08-17 Thread Eric Hoffman

Hi,

Access-reject means that Raidus/IAS doesn't like either the person/username
or the client that is trying to authenticate... whether it is a bad username
or the configuration for the radius client is not setup on the server
correctly.  (I have found that IAS is really picky about the ip address.)

ie) 10.09.9.3 configured as the client on the server, will give you an error
(access-reject) if the ip address of the client is 10.9.9.3.

Check your event logs on the IAS server.  This will give you a good idea of
what is not working/where to look for misconfiguration.

HTH,
Eric



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 3:27 PM
To: [EMAIL PROTECTED]
Subject: Cisco 3640 WIN 2000 IAS [7:16408]


I am trying to get a users dialing into a 3640 to authenticate to a Win 2000
IAS Radius Server.
 
IAS log Shows the Access-Request on the first line then Access-Reject on the
Second line
Is this Access-Reject referring to the user or the router?
The Cisco Running the Cisco debug tell me it fails local and logon fails for
the Radius "IAS"
 
I have checked the ports and password on the IAS as well as the Cisco.
WIN 2000
Clinent Client-Vender = CISCO
Remote Access Polices In the advance settings I have added the vender
specific parameters for Cisco.
Authentication I started with Chap, then went to unencrypted PAP SPAP
 
CISCO
IOS (tm) 3600 Software (C3640-I-M), Version 12.1(8), RELEASE SOFTWARE (fc1)
aaa new-model

aaa authentication login default local

aaa authentication login no_radius enable

aaa authentication ppp default if-needed group radius

aaa authorization network default group radius

aaa accounting exec start_stop start-stop group radius

aaa accounting network start_stop start-stop group radius
 
radius-server host 10.108.1.6 auth-port 1645 acct-port 1646

radius-server retransmit 3

radius-server key AnDialRtr




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16417&t=16408
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Non-deliverable mail [7:16415]

2001-08-17 Thread Super-User

 
This is an automated response from the Mailer Daemon 
 

You recently sent an item of mail to [EMAIL PROTECTED] 
 
The recipient's mailbox is currently full and your mail cannot be delivered. 

Please try sending your message later when the recipient may have emptied
their mailbox.


Regards

The Mailer Daemon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16415&t=16415
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NLSP SAP Filtering [7:16418]

2001-08-17 Thread news-server.woh.rr.com

I'm looking for confirmation that SAP filtering is not possible with NLSP. I
have a hub/spoke network and want to receive all SAP updates from remote
sites, but don't want to flood certain SAP's to my other locations. I have
applied output-sap-filter with no success and also ipx access-group sap out
with no success.

I found a reference on CCO's Open Forum from 1998 stating that SAP filtering
is not supported on this link-state protocol.

Can anyone confirm this for me?

Thanks.
Dave




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16418&t=16418
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cat5500 Supervisor Engine compatibility [7:16420]

2001-08-17 Thread Hans Stout

Hello colleagues,

this might be an 4open door4 question: I have two Cat5509s, and I am in the 
process of installing a redundant supervisor engine into both. The first one 
works fine, since the Supervisor engines are exactly the same, including the 
firmware version. On the other Cat5500, the newly inserted Supervisor 
doesn4t go into the 4standby4 status. The difference between the currently 
active Supervisor and the redundant one is that the firmware version on the 
redundant one is 5.x.x, while on the active one it is 4.x.x. In addition, 
the currently active one says 1000BaseLX Supervisor, while the one I 
inserted is a Supervisor III. Does anybody know if there is a compatibility 
matrix for this ?
Thanks in advance for your help.

Regards,

Hans

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16420&t=16420
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to create a bunch of loopback interfaces [7:494]

2001-08-17 Thread Howard C. Berkowitz

>Create static routes for any prefix and prefix-length you want, then use
>policy to export those prefixes into your IGP or BGP.
>
>/sfr
>
>-- Original Message --
>From: "Jeff Junos"
>Reply-To: "Jeff Junos"
>Date: Fri, 17 Aug 2001 13:12:32 -0400
>
>>Anybody knows how to create a bunch of loopback interfaces ?
>>As far as I know you can only create one and that one actually was create
>by
>>system, so when you configure IP address you can only use 32 bits rather
>>than whatever you want, any idea about create multiple networks w/
>different
>  >mask ?


I don't know if there's an upper limit other than IDB count, but 
certainly I've had loopback 0, loopback 1, etc.

But yes, as Scott says, you can create blackhole routes to export 
prefixes.  In fact, it is more common practice to have them have 
null0 as their next hop rather than loopback.

Dare I ask what problem is to be solved here?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16419&t=494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Recertification [7:16421]

2001-08-17 Thread Wagner, Ron

Folks,
I have not been watching the list lately (been too busy making sure I have a
job).  I will need to CCNP re-certification in the next 12 or so months. 
What
is the information on refresher study on the CCNP re-certification?  Do I get
all the CCNA/CCNP books and read them?  Is there a re-certification outline
that
I can go by?
Thanks
Ron




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16421&t=16421
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: connecting cat5000 to access server [7:16392]

2001-08-17 Thread Daniel Cotts

A Sup I or II blade uses a female DB-25 console port. The RJ-45 to Male
DB-25 adapter that comes with routers works fine. Just like a
4000,4500,4700,7000,7500 etc. Use the rolled Cisco console cable to connect
to a console port. Or connect directly to a RJ-45 end of an octopus cable.

A Sup III blade has an RJ-45 console port that requires a straight ethernet
patch cord - NOT the rolled Cisco console cable.
If you are using a terminal server with an octopus cable connecting to a Sup
III is a job. However,you can connect from the TS aux port to the Sup III
console with a regular ethernet whip. If you are using reverse telnet just
put the correct line number for the aux port in your hosts list.

> -Original Message-
> From: Kim Fisk [mailto:[EMAIL PROTECTED]]
> Sent: Friday, August 17, 2001 10:38 AM
> To: [EMAIL PROTECTED]
> Subject: connecting cat5000 to access server [7:16392]
> 
> 
> I've heard it requires a different pinout/cable than normal 
> items, and I was
> wondering if anyone could give me any ideas on what I need to 
> do.. Do I have
> to have a special cable/adapter or can I make one? I'm 
> checking Cisco's
> website, but I thought I'd ask here in case someone might be 
> able to help me
> out...
> 
> Thanks!
> Report misconduct 
> and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16422&t=16392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Recertification [7:16421]

2001-08-17 Thread Ole Drews Jensen

You don't need the CCNA book, but the rest would come handy should you've
forgotten the stuff.

Questions will be drawn for the BSCN, BCMSN, BCRAN & CIT tests.

See
http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_exam
s/640-519.html

(Watch for wordwrap)

Hth,

Ole

~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNA, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~~~ 
 http://www.RouterChief.com
~~~
 NEED A JOB ???
 http://www.oledrews.com/job
~~~


-Original Message-
From: Wagner, Ron [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 3:54 PM
To: [EMAIL PROTECTED]
Subject: Recertification [7:16421]


Folks,
I have not been watching the list lately (been too busy making sure I have a
job).  I will need to CCNP re-certification in the next 12 or so months. 
What
is the information on refresher study on the CCNP re-certification?  Do I
get
all the CCNA/CCNP books and read them?  Is there a re-certification outline
that
I can go by?
Thanks
Ron




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16423&t=16421
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Dial-out Software for MICA Modems [7:16424]

2001-08-17 Thread [EMAIL PROTECTED]

Cisco had dial a dial out utility that would let you set up a virtual com
port on your workstations and dial out on the MICA modems on your router. I
have been searching the Cisco web site and I've been unable to locate it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16424&t=16424
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: problems with uploading cisco image [7:16404]

2001-08-17 Thread Thomas N.

That boot ROM is too old.  It cannot recognize the 8MB flash module.  You
need at least boot ROM version 5.2 in order to read the 8MB flash module.
The latest boot ROM is 11.0(10c) I believe.  You can get these boot ROM from
Cisco.

Thomas N.


""Rik Thomas""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Here is the error I keep getting, download seems to complete fine, I have
> downloaded it three times keep getting the same error?  Any wisdom?
>
> Verifying checksum...  invalid (expected 0xF45, computed 0xCF6D)
> Flash copy took 176832 msecs
> Router(boot)#reload
> [confirm]y
> System Bootstrap, Version 4.14(9.1), SOFTWARE
> Copyright (c) 1986-1994 by cisco Systems
> 2500 processor with 16384 Kbytes of main memory
>
> --
> Rik Thomas
> [EMAIL PROTECTED] http://SmartBackups.com
> Is your Website Smart? Automated Website backups.  Free 30Day trial!
> Ph: 302.672.7314 Fx: 302.672.7315 ICQ: 879956




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16425&t=16404
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread chris klebl

Just started adding tokenring to the home lab and got a 2513 comming in the
next couple of days. What is the best way to connect from the router
tokenring port to a MAU with RJ-45. Or should I stick with an IBM MAU?

thanks for your help


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16426&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CISCO Recommended Guidelines [7:16397]

2001-08-17 Thread tim sullivan

Core layer-High speed
Distribution layer- all policies here
Access layer-pretty self explainatory


>From: "Fanglo" 
>Reply-To: "Fanglo" 
>To: [EMAIL PROTECTED]
>Subject: CISCO Recommended Guidelines [7:16397]
>Date: Fri, 17 Aug 2001 12:35:06 -0400
>
>Dear Group,
>
>I'm studying CCDA and come across many "cisco recommended guideline"
>when test with Boson test. However, I cannot find out the so called
>guidelines from CISCO's site. Would anyone point out some source in web?
>
>TIA,
>Fanglo
_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16427&t=16397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread EA Louie

If you don't stick with the IBM MAU and the Type 1 patch cable, use a token
ring media filter (DB-9 to RJ-45).  Some of them come with the cable already
connected, and some of them look like the DB-9 to RJ-45 serial converter
that you use for a console connection (with the RJ-45 jack), which you can
connect to your MAU via a Cat5 patch cable.

- Original Message -
From: chris klebl 
To: 
Sent: Friday, August 17, 2001 3:22 PM
Subject: 2513 to MAU RJ-45 connection? [7:16426]


> Just started adding tokenring to the home lab and got a 2513 comming in
the
> next couple of days. What is the best way to connect from the router
> tokenring port to a MAU with RJ-45. Or should I stick with an IBM MAU?
>
> thanks for your help
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16428&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread chris klebl

besides cabling, are there any advantages to going with an IBM vs an RJ-45
MAU?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16429&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



a little OT: appletalk [7:16430]

2001-08-17 Thread Jim Bond

Hello,

I have 2 offices connected each other with PIX running
VPN. office1 has Mac users, office2 has a w2k server.
Is there a way to have office1 Mac users access
office2 w2k server? I already enabled File Service for
Macintosh on the w2k server. 

I was told Appletalk must be enabled for Mac users to
access w2k server, so should I use Appletalk AND
TCP/IP or TCP/IP only?

Thanks in advance.

Jim

__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16430&t=16430
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Jim Bond

How to permit or deny IP protocol 50 or 51?
Access-list 100-199?

Thanks in advance.

Jim

--- Kent Hundley  wrote:
> Andy,
> 
> For future reference, when in doubt its always best
> to go to the source, i.e
> the RFC's.  You can get a complete reference of the
> RFC's at:
> 
> http://www.rfc.net
> 
> Having said this, in general for IPSec to work
> you'll need to allow ISAKMP,
> which uses UDP port 500.  This is _usually_ both the
> source and destination
> port, but not always.  Some VPN clients use a random
> UDP source port, so
> you'll have to allow for that unless you know for a
> fact that your VPN
> clients don't have this behavior.
> 
> If you use ESP only (which is common), you just need
> to also allow IP
> protocol number 50.  If you use AH, you need to also
> allow IP protocol 51.
> (_not_ TCP/UDP port numbers, IP protocol numbers)
> These will be both the
> source and destination IP protocols.
> 
> HTH,
> Kent
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> Andy
> Sent: Friday, August 17, 2001 6:39 AM
> To: [EMAIL PROTECTED]
> Subject: Access list to allow IPSEC traffic through?
> [7:16367]
> 
> 
> Hi
> 
> Does anyone know the correct requirements to allow
> IPSEC traffic through an
> access list on a perimeter router? Everything works
> OK without the access
> list in place.
> 
> I know it's something to do with allowing the
> correct port numbers/protocols
> through, etc... but can't seem to find any more
> info.
> 
> Any help greatly appreciated.
> 
> 
> Andy
[EMAIL PROTECTED]


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16431&t=16367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread EA Louie

Here are your basic tradeoffs, including cabling, which is probably the most
crucial aspect of T/R

IBM MAU
Pro: patch cables easy to find (sometimes free), works well with native
(DB-9) T/R connector
Con: cabling bulkier (STP), relays tend to stick if MAU is jarred in
transit, requires RJ-45 to IBM Data Connector adapter at the MAU side to
work with UTP cabling

RJ-45 MAU
Pro:  cabling is normal Cat5 unshielded twisted pair (UTP), works well with
PC NICs that have an RJ-45 port
Con:  need media filters to adapt DB-9 (on routers) to RJ-45

- Original Message -
From: chris klebl 
To: 
Sent: Friday, August 17, 2001 4:33 PM
Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]


> besides cabling, are there any advantages to going with an IBM vs an RJ-45
> MAU?
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16432&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: a little OT: appletalk [7:16430]

2001-08-17 Thread Charles Manafa

There is a product called Dave, that would allow you to use TCP/IP only to
talk to your NT/W2K server.

CM
- Original Message -
From: Jim Bond 
To: 
Sent: Saturday, 18 August, 2001 01:36
Subject: a little OT: appletalk [7:16430]


> Hello,
>
> I have 2 offices connected each other with PIX running
> VPN. office1 has Mac users, office2 has a w2k server.
> Is there a way to have office1 Mac users access
> office2 w2k server? I already enabled File Service for
> Macintosh on the w2k server.
>
> I was told Appletalk must be enabled for Mac users to
> access w2k server, so should I use Appletalk AND
> TCP/IP or TCP/IP only?
>
> Thanks in advance.
>
> Jim
>
> __
> Do You Yahoo!?
> Make international calls for as low as $.04/minute with Yahoo! Messenger
> http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16433&t=16430
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread chris klebl

Thanks


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16435&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Access list to allow IPSEC traffic through? [7:16367]

2001-08-17 Thread Charles Manafa

access-list 101 permit esp host x.y.z.1 host a.b.c.d
access-list 101 permit ahp host x.y.z.1 host a.b.c.d

CM
- Original Message -
From: Jim Bond 
To: 
Sent: Saturday, 18 August, 2001 01:59
Subject: RE: Access list to allow IPSEC traffic through? [7:16367]


> How to permit or deny IP protocol 50 or 51?
> Access-list 100-199?
>
> Thanks in advance.
>
> Jim
>
> --- Kent Hundley  wrote:
> > Andy,
> >
> > For future reference, when in doubt its always best
> > to go to the source, i.e
> > the RFC's.  You can get a complete reference of the
> > RFC's at:
> >
> > http://www.rfc.net
> >
> > Having said this, in general for IPSec to work
> > you'll need to allow ISAKMP,
> > which uses UDP port 500.  This is _usually_ both the
> > source and destination
> > port, but not always.  Some VPN clients use a random
> > UDP source port, so
> > you'll have to allow for that unless you know for a
> > fact that your VPN
> > clients don't have this behavior.
> >
> > If you use ESP only (which is common), you just need
> > to also allow IP
> > protocol number 50.  If you use AH, you need to also
> > allow IP protocol 51.
> > (_not_ TCP/UDP port numbers, IP protocol numbers)
> > These will be both the
> > source and destination IP protocols.
> >
> > HTH,
> > Kent
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Andy
> > Sent: Friday, August 17, 2001 6:39 AM
> > To: [EMAIL PROTECTED]
> > Subject: Access list to allow IPSEC traffic through?
> > [7:16367]
> >
> >
> > Hi
> >
> > Does anyone know the correct requirements to allow
> > IPSEC traffic through an
> > access list on a perimeter router? Everything works
> > OK without the access
> > list in place.
> >
> > I know it's something to do with allowing the
> > correct port numbers/protocols
> > through, etc... but can't seem to find any more
> > info.
> >
> > Any help greatly appreciated.
> >
> >
> > Andy
> [EMAIL PROTECTED]
>
>
> __
> Do You Yahoo!?
> Make international calls for as low as $.04/minute with Yahoo! Messenger
> http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16434&t=16367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Cisco PIX 535 Firewall is really a piece of @!#$ [7:16436]

2001-08-17 Thread mike johnson

I work for an ISP and we are a big Cisco shop.  we
deploy PIX Firewall at our facility to protect our
company and customers.  About 3 months ago, we
deployed about 30 Cisco PIX 535 series that support
Gigabit Interface because our customers demand it.  We
run PIX IOS code 5.3 on the PIX firewall.  The problem
with the PIX is that even though Cisco claims that the
throughput is between 750 to 800 Mbps, the throughput
drops to 2Mbps (YES, 2Mbps on a Gigabit interface) if
the number of concurrent connections is more than
10,000 with an error tolerance of 0.1% (the industry
standard is 0.001%).  A lot of our customers are very
angry and threaten to terminate their contracts with
us.  We later find out that another independent lab
tested the Cisco PIX-535, see
http://www.nwfusion.com/columnists/2001/0709tolly.html
for details.  Cisco said that there is a bug in the
software version 5.3 (See BUG ID CSCdt86736) and
claimed that the bug is fixed in version 6.0; however,
you wouldn't be able to find this bug in Cisco bug
watcher.  We did some preliminary testing with version
6.0 and the result is the same (i.e. the bug is still
there).  

The point of the story is "ALWAYS TAKE CISCO
RECOMMENDATION AND CLAIMS WITH A GRAIN OF SALT." 
Careful product evaluation.  Always keep your option
open with other vendors such as Checkpoint, Lucent,
Netscreen, etc...  Our stupid management listened to
Cisco rep. and overrode Engineering recommendation and
now as the company as a whole, we are paying a price.

Mike

__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16436&t=16436
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: a little OT: appletalk [7:16430]

2001-08-17 Thread Priscilla Oppenheimer

Yes, you can enable file service for Macintoshes on the W2K server. 
AppleTalk probably isn't being routed over the VPN, so you should use 
TCP/IP. In this case, you are sending Apple Filing Protocol (AFP) packets 
on top of TCP/IP instead of on top of AppleTalk. AFP is an 
application-layer protocol for sharing files.

The Mac users may have to type in a DNS name or IP address for the server 
in the Chooser, whereas they are used to seeing the AppleTalk Name Binding 
Protocol (NBP) server name just pop up. So there may be a bit of retraining.

(If W2K supports the Service Location Protocol [SLP], they could still see 
a name without having to type, but I don't know how much work it would be 
to get this to work. Probably a lot.)

Dave takes a different approach. Dave runs on the Macintoshes and lets them 
use Windows native file sharing I believe. In other words, the Macs use the 
IBM/Microsoft Server Message Block (SMB) and NetBIOS protocols. These can 
be run over TCP/IP. That could work too but it may disrupt the Mac users 
more than the other method.

Priscilla

At 08:09 PM 8/17/01, Charles Manafa wrote:
>There is a product called Dave, that would allow you to use TCP/IP only to
>talk to your NT/W2K server.
>
>CM
>- Original Message -
>From: Jim Bond
>To:
>Sent: Saturday, 18 August, 2001 01:36
>Subject: a little OT: appletalk [7:16430]
>
>
> > Hello,
> >
> > I have 2 offices connected each other with PIX running
> > VPN. office1 has Mac users, office2 has a w2k server.
> > Is there a way to have office1 Mac users access
> > office2 w2k server? I already enabled File Service for
> > Macintosh on the w2k server.
> >
> > I was told Appletalk must be enabled for Mac users to
> > access w2k server, so should I use Appletalk AND
> > TCP/IP or TCP/IP only?
> >
> > Thanks in advance.
> >
> > Jim
> >
> > __
> > Do You Yahoo!?
> > Make international calls for as low as $.04/minute with Yahoo! Messenger
> > http://phonecard.yahoo.com/


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16437&t=16430
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BGP [7:16438]

2001-08-17 Thread Tom Richs

Does anyone have a configuration where your site has two Internet 
connections (thus 2 Internet routers via separate circuits) that connect to 
the same ISP.  Furthermore you are given two class C networks to use.  I'm 
looking into a BGP configuration where I can provide redundancy via the 
circuits in the event that one fails the other one will be usable.  
Basically, I'll be passing 2 routes (for my two networks) to the ISP via BGP 
and the ISP doesn't passs anything back expect say that those two networks 
should be sent to me.  I'm looking for some sort of BGP configuration that 
someone is using.  Thanks in advance.

TR

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16438&t=16438
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Associate and Professional Email Lists [7:16217]

2001-08-17 Thread Priscilla Oppenheimer

When I go on vaction I unsubscribe and then subscribe again. Would all my 
messages go in the moderator's queue when I subscribed again? That would be 
annoying for the moderator (and for me. ;-) Other than that, I think it's a 
good idea to have messages from a new subscriber go through the moderator 
for a while. As I'm sure you have considered, it's not a very "scalable" 
idea,  though.

I hope you don't divide the group again. The general networking questions 
are helpful to those studying for CCNP and CCDP. The diversity of messages 
(except for the flames, of course) are good for learning and represent the 
real world better than if we just got questions about passing scores, etc.

Thanks again for all you do for us!

Priscilla

At 12:02 PM 8/17/01, Paul Borghese wrote:
>With an open group, you are going to have your share of noise.   Everyone's
>ides of noise is different.  For example, to many this very e-mail is noise
>because it is not directly on subject.
>
>But there are some things we can do to help lessen the noise.  They are on
>my to-do list, just have been too busy.:
>
>1. Comprehensive FAQ - we need a new faq that can answer the questions that
>are asked over and over again.
>
>2. Split out the professional group from the general networking group.
>
>3. Setup a system where new users can not post directly to the group - This
>is the most difficult of the three ideas and will require substantial
>coding.  What I want is to have a system where when an e-mail arrives (or
>from the newsfeed or website), if the poster has not been approved, it gets
>bounced into the moderators queue.  If the moderator (actually we will have
>many) agrees that the message is appropriate, the moderator will allow the
>message to pass.  Plus if the moderator feels that the poster will continue
>to send interesting and valuable e-mails, the moderator can place the user
>in the "automatic approval" category so future e-mails will not need to be
>approved.  The goal is to bounce new messages from first time posters, but
>allow the old-timers to post without moderation.  Thus filtering the new
>user asking inappropriate questions and the occasional spam.
>
>Take care,
>
>Paul
>
>
>
>
>
>- Original Message -
>From: "John Neiberger"
>To:
>Sent: Wednesday, August 15, 2001 6:05 PM
>Subject: Re: Associate and Professional Email Lists [7:16217]
>
>
> > Yes, Paul did do a good job cutting down that traffic.  I just noticed
> > that in the last month or so there has been a slew of *really* basic
> > questions that can be answered in the first two or three chapters of any
> > decent CCNA study guide or by a 30 second search on CCO.
> >
> > I certainly don't mind answering these types of questions, I was just
> > concerned that the purpose of the two separate lists was being
> > undermined, causing a lot of unnecessary traffic.  To me it's no
> > different than posting jobs on the Associate or Professional lists.  It
> > may reach some of the right people, but it's not the appropriate place
> > to post that type of information.
> >
> > >>> "Tom Lisa"  8/15/01 3:19:55 PM >>>
> > Yes, John, there is an Associate list.  We have a similar problem
> > there as well.  People keep insisting on asking CCNP/CCIE level
> > questions on that list.
> >
> > However, people being the way they are, I doubt we will ever
> > solve the problem completely.  But, you got to admit that Paul
> > at least cut down on the volume of CCNA level traffic on this list.
> >
> > Prof. Tom Lisa, CCAI
> > Community College of Southern Nevada
> > Cisco Regional Networking Academy
> >
> >
> >
> > John Neiberger wrote:
> >
> >   Excuse me for this rant.  I'm not trying to be the content cop, I
> >   just
> >   wanted to make an observation.
> >
> >   Do we no longer have an Associate list as well as the Professional
> >   list?  We've been getting horrendous numbers of emails lately that
> >   simply do not belong on this list.  If you don't know how to connect
> >   a
> >   PC to a router using the console cable or how to connect two routers
> >   back-to-back, it seems to me that you should ask those types of
> >   questions on the CCNA-level list, not the CCNP-level list.
> >
> >   I'm not intending to come down too hard on people asking these
> >   questions, I'm just asking that you post to the appropriate list.
> >   The
> >   Associate mailing list is intended for the simpler questions, while
> >   the
> >   Professional list is intended for those with slighly more advanced
> >   questions.  I understand that we tend to grant a *lot* of leeway
> > when
> >   it
> >   comes to subject matter, but the level of the question should still
> >   be
> >   appropriate to the list it's posted to.
> >
> >   Okay, enough ranting.  :-)  Back to our regular programming
> >
> >   Regards,
> >   John
> >   [EMAIL PROTECTED]


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php

Re: TIMEOUTS !! [7:16358]

2001-08-17 Thread Erick B.

Some ideas for when this happens.

Get a sniffer trace during time of problem and see
whats going on. 

Record 'show interface' stats on the interface(s)
before the problem occurs and after it occurs compare
and see what the differences are (errors,
transistions, etc).

What are the Ethernet interface(s) connected to? A
switch, etc? Maybe theres something going on with
spanning tree every few days. 

--- Vijendra Jaiswal  wrote:
> Hello Cisco Champs ,
> 
> After every fourth or fifth day my 7500 series
> router ethernet port's gives
> timeouts if i ping to it frm a PC on the same
> segment.
> This problem lasts for 2-3 mins and then it is ok.
> 1) Can anyone pls help me in finding out the cause
> of the problem .
> 2) If it is a resources(mem or CPU ) problem can
> anyone pls help me out with
> the right commands to monitor the usage of resources
> when i face the above
> problem.
> 
> Thanks in advance.
> Vijendra Jaiswal
[EMAIL PROTECTED]


__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16439&t=16358
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread Engelhard M. Labiro

Hi,
I have 4 2612 (one RJ45 Token Ring I/F), how
do I connect these routers` Token Ring I/Fs
back-to-back?
I tried using a UTP 5 straigh/cross cable but
the link is down/down state.
Searching the CCO but only come up connecting
MAU to RJ-45 as you mention below.
Any idea ?

Thanks,


- Original Message -
From: "EA Louie" 
To: 
Sent: Saturday, August 18, 2001 9:04 AM
Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]


> Here are your basic tradeoffs, including cabling, which is probably the
most
> crucial aspect of T/R
>
> IBM MAU
> Pro: patch cables easy to find (sometimes free), works well with native
> (DB-9) T/R connector
> Con: cabling bulkier (STP), relays tend to stick if MAU is jarred in
> transit, requires RJ-45 to IBM Data Connector adapter at the MAU side to
> work with UTP cabling
>
> RJ-45 MAU
> Pro:  cabling is normal Cat5 unshielded twisted pair (UTP), works well
with
> PC NICs that have an RJ-45 port
> Con:  need media filters to adapt DB-9 (on routers) to RJ-45
>
> - Original Message -
> From: chris klebl
> To:
> Sent: Friday, August 17, 2001 4:33 PM
> Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]
>
>
> > besides cabling, are there any advantages to going with an IBM vs an
RJ-45
> > MAU?
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16440&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread Chuck Larrieu

cannot go back to back with TR.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Engelhard M. Labiro
Sent: Friday, August 17, 2001 8:41 PM
To: [EMAIL PROTECTED]
Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]


Hi,
I have 4 2612 (one RJ45 Token Ring I/F), how
do I connect these routers` Token Ring I/Fs
back-to-back?
I tried using a UTP 5 straigh/cross cable but
the link is down/down state.
Searching the CCO but only come up connecting
MAU to RJ-45 as you mention below.
Any idea ?

Thanks,


- Original Message -
From: "EA Louie"
To:
Sent: Saturday, August 18, 2001 9:04 AM
Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]


> Here are your basic tradeoffs, including cabling, which is probably the
most
> crucial aspect of T/R
>
> IBM MAU
> Pro: patch cables easy to find (sometimes free), works well with native
> (DB-9) T/R connector
> Con: cabling bulkier (STP), relays tend to stick if MAU is jarred in
> transit, requires RJ-45 to IBM Data Connector adapter at the MAU side to
> work with UTP cabling
>
> RJ-45 MAU
> Pro:  cabling is normal Cat5 unshielded twisted pair (UTP), works well
with
> PC NICs that have an RJ-45 port
> Con:  need media filters to adapt DB-9 (on routers) to RJ-45
>
> - Original Message -
> From: chris klebl
> To:
> Sent: Friday, August 17, 2001 4:33 PM
> Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]
>
>
> > besides cabling, are there any advantages to going with an IBM vs an
RJ-45
> > MAU?
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16441&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread EA Louie

Check the archives at www.groupstudy.com  for token ring crossover - someone
has a way of doing that and I think they posted the solution back in March
or April of this year.

- Original Message -
From: Engelhard M. Labiro 
To: 
Sent: Friday, August 17, 2001 8:41 PM
Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]


> Hi,
> I have 4 2612 (one RJ45 Token Ring I/F), how
> do I connect these routers` Token Ring I/Fs
> back-to-back?
> I tried using a UTP 5 straigh/cross cable but
> the link is down/down state.
> Searching the CCO but only come up connecting
> MAU to RJ-45 as you mention below.
> Any idea ?
>
> Thanks,
>
>
> - Original Message -
> From: "EA Louie"
> To:
> Sent: Saturday, August 18, 2001 9:04 AM
> Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]
>
>
> > Here are your basic tradeoffs, including cabling, which is probably the
> most
> > crucial aspect of T/R
> >
> > IBM MAU
> > Pro: patch cables easy to find (sometimes free), works well with native
> > (DB-9) T/R connector
> > Con: cabling bulkier (STP), relays tend to stick if MAU is jarred in
> > transit, requires RJ-45 to IBM Data Connector adapter at the MAU side to
> > work with UTP cabling
> >
> > RJ-45 MAU
> > Pro:  cabling is normal Cat5 unshielded twisted pair (UTP), works well
> with
> > PC NICs that have an RJ-45 port
> > Con:  need media filters to adapt DB-9 (on routers) to RJ-45
> >
> > - Original Message -
> > From: chris klebl
> > To:
> > Sent: Friday, August 17, 2001 4:33 PM
> > Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]
> >
> >
> > > besides cabling, are there any advantages to going with an IBM vs an
> RJ-45
> > > MAU?
> > _
> > Do You Yahoo!?
> > Get your free @yahoo.com address at http://mail.yahoo.com
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16442&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2513 to MAU RJ-45 connection? [7:16426]

2001-08-17 Thread anyong

Hi All,

I just cut and paste the following FYI.

Actually, there is such an animal as a Token Ring crossover cable.  You are
correct that you can't use one to "back to back" Token Ring ports.  They are
used in our environment for a direct station attachment (Cisco router ports)
to Bay Networks C100 Tokenspeed switch ports.

The RJ-45 pin outs are:

1-->1
2-->2
3-->4
4-->3
5-->6
6-->5
7-->7
8-->8

Hope this help and save some time.

anyong

""EA Louie""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Check the archives at www.groupstudy.com  for token ring crossover -
someone
> has a way of doing that and I think they posted the solution back in March
> or April of this year.
>
> - Original Message -
> From: Engelhard M. Labiro
> To:
> Sent: Friday, August 17, 2001 8:41 PM
> Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]
>
>
> > Hi,
> > I have 4 2612 (one RJ45 Token Ring I/F), how
> > do I connect these routers` Token Ring I/Fs
> > back-to-back?
> > I tried using a UTP 5 straigh/cross cable but
> > the link is down/down state.
> > Searching the CCO but only come up connecting
> > MAU to RJ-45 as you mention below.
> > Any idea ?
> >
> > Thanks,
> >
> >
> > - Original Message -
> > From: "EA Louie"
> > To:
> > Sent: Saturday, August 18, 2001 9:04 AM
> > Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]
> >
> >
> > > Here are your basic tradeoffs, including cabling, which is probably
the
> > most
> > > crucial aspect of T/R
> > >
> > > IBM MAU
> > > Pro: patch cables easy to find (sometimes free), works well with
native
> > > (DB-9) T/R connector
> > > Con: cabling bulkier (STP), relays tend to stick if MAU is jarred in
> > > transit, requires RJ-45 to IBM Data Connector adapter at the MAU side
to
> > > work with UTP cabling
> > >
> > > RJ-45 MAU
> > > Pro:  cabling is normal Cat5 unshielded twisted pair (UTP), works well
> > with
> > > PC NICs that have an RJ-45 port
> > > Con:  need media filters to adapt DB-9 (on routers) to RJ-45
> > >
> > > - Original Message -
> > > From: chris klebl
> > > To:
> > > Sent: Friday, August 17, 2001 4:33 PM
> > > Subject: Re: 2513 to MAU RJ-45 connection? [7:16426]
> > >
> > >
> > > > besides cabling, are there any advantages to going with an IBM vs an
> > RJ-45
> > > > MAU?
> > > _
> > > Do You Yahoo!?
> > > Get your free @yahoo.com address at http://mail.yahoo.com
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16443&t=16426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Associate and Professional Email Lists [7:16217]

2001-08-17 Thread Bill Pearch

I searched the CCO and I can't find anything in the documentation about this
vacation thing.  What is the part number for that?  Is there a certification
associated with the configuration of a 'vacation'?  What release are we up
to?

TTFN,
Bill in Anchorage
-Original Message-
From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 17, 2001 6:40 PM
To: [EMAIL PROTECTED]
Subject: Re: Associate and Professional Email Lists [7:16217]


When I go on vaction I ...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16444&t=16217
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]