Re: URGENT:FOR Routing experts:Plz help!!! [7:18370]
Look at the routing table for the next IGRP router to see the effects of your redistribution. The OSPF summary routes won't be shown on ISDN2 - you'll have to look at the the next downstream IGRP router to see them, because the redistribution effect happens not at the ASBR, but outside the OSPF domain. You aren't seeing the effects of IGRP redistribution at this point either, because those routes would show up as O E2 routes in the routing table. Look on your next downstream OSPF router for those external routes to appear. - Original Message - From: Cisco Lover To: Sent: Monday, September 03, 2001 10:46 PM Subject: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi guys. facing some strange IGRPOSPF redistribution problem. Router ISDN2 is ASBR ,running IGRP with FR and running ospf with rest of network. Now problem is that I am able to redistribute IGRP into OSPF and can see the IGRP routes as OSPF external in ospf domain but not able to get redistributed OSPF routes into IGRP. Offcourse, No static/default routes are allowed so I have summarize ospf routes into C class,(Same as IGRP major interface)using summary address command .But still not able to get these routes redistributed. When I tried by using Static routes pointing to null 0,IT WORKED The problem I observed is that although I have put SUMMARY ADDRESS commands for network 152.1.1.0 152.1.2.0 ,which are required to redistribute into IGRP,I CANT see them as summary routes in ISDN2 router wHY?? Any one can help Please.All config attached Thanks a lot!!! !ISDN2 ! interface Loopback0 ip address 152.1.12.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0/0 ip address 152.1.0.1 255.255.255.0 no ip directed-broadcast no cdp enable ! interface Serial0/0 no ip address no ip directed-broadcast no ip mroute-cache shutdown no fair-queue no cdp enable ! interface BRI0/0 ip address 152.1.1.18 255.255.255.252 no ip directed-broadcast encapsulation ppp ip ospf demand-circuit dialer idle-timeout 1000 dialer map ip 152.1.1.17 name ISDN1 broadcast 2465640 dialer-group 1 isdn switch-type basic-net3 no cdp enable ppp chap hostname cisco ppp chap password 7 02050D480809 ! interface Ethernet0/1 bandwidth ip address 152.1.11.1 255.255.255.0 no ip directed-broadcast no keepalive no fair-queue no cdp enable ! interface Serial1/0 bandwidth 172 backup delay 5 20 backup interface BRI0/0 ip address 152.1.10.2 255.255.255.128 no ip directed-broadcast no fair-queue clockrate 64000 no cdp enable ! interface Serial1/1 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 100 interface Serial1/4 300 ! interface Serial1/2 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/3 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 201 interface Serial1/4 301 ! interface Serial1/4 no ip address no ip directed-broadcast encapsulation frame-relay frame-relay intf-type dce frame-relay route 300 interface Serial1/1 100 frame-relay route 301 interface Serial1/3 201 ! interface Serial1/5 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/6 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/7 no ip address no ip directed-broadcast shutdown no cdp enable ! router ospf 64 area 0 authentication message-digest area 1 virtual-link 152.1.2.5 area 2 nssa default-information-originate summary-address 152.1.2.0 255.255.255.0 summary-address 152.12.0.0 255.252.0.0 summary-address 152.1.1.0 255.255.255.0 redistribute igrp 64 subnets route-map Hi passive-interface Ethernet0/0 network 152.1.1.18 0.0.0.0 area 2 network 152.1.10.2 0.0.0.0 area 1 network 152.1.11.1 0.0.0.0 area 2 default-information originate always ! router igrp 64 redistribute ospf 64 route-map CCIE passive-interface Ethernet0/1 passive-interface Serial1/0 network 152.1.0.0 default-metric 1 100 255 1 1500 distribute-list 1 in Ethernet0/0 ! ip classless no ip http server ! access-list 1 permit 152.12.0.0 access-list 1 permit 152.13.0.0 access-list 1 permit 152.14.0.0 access-list 1 permit 152.15.0.0 access-list 10 permit 152.1.1.0 access-list 10 permit 152.1.2.0 access-list 20 permit 152.12.0.0 access-list 20 permit 152.13.0.0 access-list 20 permit 152.14.0.0 access-list 20 permit 152.15.0.0 dialer-list 1 protocol ip permit no cdp run route-map HI permit 10 ! route-map CCIE permit 10 match ip address 10 ! route-map Hi permit 10 match ip address 20 ! ! banner motd ^CHi how r u^C ! line con 0 exec-timeout 0 0 password cisco transport input none line aux 0 line vty 0 4 login ! ISDN2#sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX -
RE: one day lab will send ccie to the hell [7:18373]
Care to elucidate? Please include reality in your story as much as possible. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 1:56 AM To: [EMAIL PROTECTED] Subject: one day lab will send ccie to the hell [7:18373] ccie will be useless, take juniper cert. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18376t=18373 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: one day lab will send ccie to the hell [7:18373]
This statement seems useless to me. Jan tu tu wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... ccie will be useless, take juniper cert. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18378t=18373 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: URGENT:FOR Routing experts:Plz help!!! [7:18370]
I have checked on the neighbouring routers as well but cant see these summary addresses any where else. What I beleive is that I should be able to see these summary address in local routing table,before I can see them any where else. Like u can see the summary address of IGRP routes ,coming from FR router and redistributiig to OSPF domain after redistribution. From: EA Louie To: Cisco Lover , Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Date: Mon, 3 Sep 2001 23:21:58 -0700 Look at the routing table for the next IGRP router to see the effects of your redistribution. The OSPF summary routes won't be shown on ISDN2 - you'll have to look at the the next downstream IGRP router to see them, because the redistribution effect happens not at the ASBR, but outside the OSPF domain. You aren't seeing the effects of IGRP redistribution at this point either, because those routes would show up as O E2 routes in the routing table. Look on your next downstream OSPF router for those external routes to appear. - Original Message - From: Cisco Lover To: Sent: Monday, September 03, 2001 10:46 PM Subject: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi guys. facing some strange IGRPOSPF redistribution problem. Router ISDN2 is ASBR ,running IGRP with FR and running ospf with rest of network. Now problem is that I am able to redistribute IGRP into OSPF and can see the IGRP routes as OSPF external in ospf domain but not able to get redistributed OSPF routes into IGRP. Offcourse, No static/default routes are allowed so I have summarize ospf routes into C class,(Same as IGRP major interface)using summary address command .But still not able to get these routes redistributed. When I tried by using Static routes pointing to null 0,IT WORKED The problem I observed is that although I have put SUMMARY ADDRESS commands for network 152.1.1.0 152.1.2.0 ,which are required to redistribute into IGRP,I CANT see them as summary routes in ISDN2 router wHY?? Any one can help Please.All config attached Thanks a lot!!! !ISDN2 ! interface Loopback0 ip address 152.1.12.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0/0 ip address 152.1.0.1 255.255.255.0 no ip directed-broadcast no cdp enable ! interface Serial0/0 no ip address no ip directed-broadcast no ip mroute-cache shutdown no fair-queue no cdp enable ! interface BRI0/0 ip address 152.1.1.18 255.255.255.252 no ip directed-broadcast encapsulation ppp ip ospf demand-circuit dialer idle-timeout 1000 dialer map ip 152.1.1.17 name ISDN1 broadcast 2465640 dialer-group 1 isdn switch-type basic-net3 no cdp enable ppp chap hostname cisco ppp chap password 7 02050D480809 ! interface Ethernet0/1 bandwidth ip address 152.1.11.1 255.255.255.0 no ip directed-broadcast no keepalive no fair-queue no cdp enable ! interface Serial1/0 bandwidth 172 backup delay 5 20 backup interface BRI0/0 ip address 152.1.10.2 255.255.255.128 no ip directed-broadcast no fair-queue clockrate 64000 no cdp enable ! interface Serial1/1 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 100 interface Serial1/4 300 ! interface Serial1/2 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/3 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 201 interface Serial1/4 301 ! interface Serial1/4 no ip address no ip directed-broadcast encapsulation frame-relay frame-relay intf-type dce frame-relay route 300 interface Serial1/1 100 frame-relay route 301 interface Serial1/3 201 ! interface Serial1/5 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/6 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/7 no ip address no ip directed-broadcast shutdown no cdp enable ! router ospf 64 area 0 authentication message-digest area 1 virtual-link 152.1.2.5 area 2 nssa default-information-originate summary-address 152.1.2.0 255.255.255.0 summary-address 152.12.0.0 255.252.0.0 summary-address 152.1.1.0 255.255.255.0 redistribute igrp 64 subnets route-map Hi passive-interface Ethernet0/0 network 152.1.1.18 0.0.0.0 area 2 network 152.1.10.2 0.0.0.0 area 1 network 152.1.11.1 0.0.0.0 area 2 default-information originate always ! router igrp 64 redistribute ospf 64 route-map CCIE passive-interface Ethernet0/1 passive-interface Serial1/0 network 152.1.0.0 default-metric 1 100 255 1 1500 distribute-list 1 in Ethernet0/0 ! ip classless no ip http server ! access-list 1 permit 152.12.0.0 access-list 1 permit 152.13.0.0 access-list 1 permit 152.14.0.0
Re: URGENT:FOR Routing experts:Plz help!!! [7:18370]
Hi, Thanks for the reply!!! U correct...But this is what MY problem. Iam not able to see any ospf routes after redistribution in the next IGRP router i.e FR and hence not able to access OSPF network from IGRP AS. On the other hand I am able to see IGRP redistributed routes into OSPF domain but not able to ping them. As I am able to get results when I used Static routes as ASBR, hence I suspect there is something wrong with SUMMARY ADDRESSES ,may be.. Plz comment...Any one Thanks From: EA Louie To: Cisco Lover , Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Date: Mon, 3 Sep 2001 23:21:58 -0700 Look at the routing table for the next IGRP router to see the effects of your redistribution. The OSPF summary routes won't be shown on ISDN2 - you'll have to look at the the next downstream IGRP router to see them, because the redistribution effect happens not at the ASBR, but outside the OSPF domain. You aren't seeing the effects of IGRP redistribution at this point either, because those routes would show up as O E2 routes in the routing table. Look on your next downstream OSPF router for those external routes to appear. - Original Message - From: Cisco Lover To: Sent: Monday, September 03, 2001 10:46 PM Subject: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi guys. facing some strange IGRPOSPF redistribution problem. Router ISDN2 is ASBR ,running IGRP with FR and running ospf with rest of network. Now problem is that I am able to redistribute IGRP into OSPF and can see the IGRP routes as OSPF external in ospf domain but not able to get redistributed OSPF routes into IGRP. Offcourse, No static/default routes are allowed so I have summarize ospf routes into C class,(Same as IGRP major interface)using summary address command .But still not able to get these routes redistributed. When I tried by using Static routes pointing to null 0,IT WORKED The problem I observed is that although I have put SUMMARY ADDRESS commands for network 152.1.1.0 152.1.2.0 ,which are required to redistribute into IGRP,I CANT see them as summary routes in ISDN2 router wHY?? Any one can help Please.All config attached Thanks a lot!!! !ISDN2 ! interface Loopback0 ip address 152.1.12.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0/0 ip address 152.1.0.1 255.255.255.0 no ip directed-broadcast no cdp enable ! interface Serial0/0 no ip address no ip directed-broadcast no ip mroute-cache shutdown no fair-queue no cdp enable ! interface BRI0/0 ip address 152.1.1.18 255.255.255.252 no ip directed-broadcast encapsulation ppp ip ospf demand-circuit dialer idle-timeout 1000 dialer map ip 152.1.1.17 name ISDN1 broadcast 2465640 dialer-group 1 isdn switch-type basic-net3 no cdp enable ppp chap hostname cisco ppp chap password 7 02050D480809 ! interface Ethernet0/1 bandwidth ip address 152.1.11.1 255.255.255.0 no ip directed-broadcast no keepalive no fair-queue no cdp enable ! interface Serial1/0 bandwidth 172 backup delay 5 20 backup interface BRI0/0 ip address 152.1.10.2 255.255.255.128 no ip directed-broadcast no fair-queue clockrate 64000 no cdp enable ! interface Serial1/1 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 100 interface Serial1/4 300 ! interface Serial1/2 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/3 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 201 interface Serial1/4 301 ! interface Serial1/4 no ip address no ip directed-broadcast encapsulation frame-relay frame-relay intf-type dce frame-relay route 300 interface Serial1/1 100 frame-relay route 301 interface Serial1/3 201 ! interface Serial1/5 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/6 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/7 no ip address no ip directed-broadcast shutdown no cdp enable ! router ospf 64 area 0 authentication message-digest area 1 virtual-link 152.1.2.5 area 2 nssa default-information-originate summary-address 152.1.2.0 255.255.255.0 summary-address 152.12.0.0 255.252.0.0 summary-address 152.1.1.0 255.255.255.0 redistribute igrp 64 subnets route-map Hi passive-interface Ethernet0/0 network 152.1.1.18 0.0.0.0 area 2 network 152.1.10.2 0.0.0.0 area 1 network 152.1.11.1 0.0.0.0 area 2 default-information originate always ! router igrp 64 redistribute ospf 64 route-map CCIE passive-interface Ethernet0/1 passive-interface Serial1/0 network 152.1.0.0 default-metric 1 100 255 1 1500 distribute-list 1 in Ethernet0/0 ! ip classless
log configurations changed, by console [7:18380]
Hi all. I want to capture only those configurations changed, either by telnet or console. How to log these msg? Pls help. Alvin CCNA __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18380t=18380 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: URGENT:FOR Routing experts:Plz help!!! [7:18370]
debug ip igrp event and debug ip igrp transaction on ISDN2. If you don't see igrp on ISDN2 advertising the summarized routes, then try removing your route-map in the redistribute ospf statement and see if you aren't creating a 'too restrictive' match class - Original Message - From: Cisco Lover To: ; Sent: Monday, September 03, 2001 11:39 PM Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi, Thanks for the reply!!! U correct...But this is what MY problem. Iam not able to see any ospf routes after redistribution in the next IGRP router i.e FR and hence not able to access OSPF network from IGRP AS. On the other hand I am able to see IGRP redistributed routes into OSPF domain but not able to ping them. As I am able to get results when I used Static routes as ASBR, hence I suspect there is something wrong with SUMMARY ADDRESSES ,may be.. Plz comment...Any one Thanks From: EA Louie To: Cisco Lover , Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Date: Mon, 3 Sep 2001 23:21:58 -0700 Look at the routing table for the next IGRP router to see the effects of your redistribution. The OSPF summary routes won't be shown on ISDN2 - you'll have to look at the the next downstream IGRP router to see them, because the redistribution effect happens not at the ASBR, but outside the OSPF domain. You aren't seeing the effects of IGRP redistribution at this point either, because those routes would show up as O E2 routes in the routing table. Look on your next downstream OSPF router for those external routes to appear. - Original Message - From: Cisco Lover To: Sent: Monday, September 03, 2001 10:46 PM Subject: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi guys. facing some strange IGRPOSPF redistribution problem. Router ISDN2 is ASBR ,running IGRP with FR and running ospf with rest of network. Now problem is that I am able to redistribute IGRP into OSPF and can see the IGRP routes as OSPF external in ospf domain but not able to get redistributed OSPF routes into IGRP. Offcourse, No static/default routes are allowed so I have summarize ospf routes into C class,(Same as IGRP major interface)using summary address command .But still not able to get these routes redistributed. When I tried by using Static routes pointing to null 0,IT WORKED The problem I observed is that although I have put SUMMARY ADDRESS commands for network 152.1.1.0 152.1.2.0 ,which are required to redistribute into IGRP,I CANT see them as summary routes in ISDN2 router wHY?? Any one can help Please.All config attached Thanks a lot!!! !ISDN2 ! interface Loopback0 ip address 152.1.12.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0/0 ip address 152.1.0.1 255.255.255.0 no ip directed-broadcast no cdp enable ! interface Serial0/0 no ip address no ip directed-broadcast no ip mroute-cache shutdown no fair-queue no cdp enable ! interface BRI0/0 ip address 152.1.1.18 255.255.255.252 no ip directed-broadcast encapsulation ppp ip ospf demand-circuit dialer idle-timeout 1000 dialer map ip 152.1.1.17 name ISDN1 broadcast 2465640 dialer-group 1 isdn switch-type basic-net3 no cdp enable ppp chap hostname cisco ppp chap password 7 02050D480809 ! interface Ethernet0/1 bandwidth ip address 152.1.11.1 255.255.255.0 no ip directed-broadcast no keepalive no fair-queue no cdp enable ! interface Serial1/0 bandwidth 172 backup delay 5 20 backup interface BRI0/0 ip address 152.1.10.2 255.255.255.128 no ip directed-broadcast no fair-queue clockrate 64000 no cdp enable ! interface Serial1/1 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 100 interface Serial1/4 300 ! interface Serial1/2 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/3 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 201 interface Serial1/4 301 ! interface Serial1/4 no ip address no ip directed-broadcast encapsulation frame-relay frame-relay intf-type dce frame-relay route 300 interface Serial1/1 100 frame-relay route 301 interface Serial1/3 201 ! interface Serial1/5 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/6 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/7 no ip address no ip directed-broadcast shutdown no cdp enable ! router ospf 64 area 0 authentication message-digest area 1 virtual-link 152.1.2.5 area 2 nssa default-information-originate
BGP -Regular expression filter question [7:18382]
Hi, I have the following testing bgp configuration and try to use route-map with regular expression to filter AS300 out but not successful. Pls advise what will be correct regular expression if I would like to block only AS300(172.3.0.0) to R1. R1(AS100)--R2(AS200)---R3(AS300)---R4(AS400) Below is the R1 configuration and show ip bgp Current configuration : 986 bytes ! version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname r1 ! enable secret 5 $1$Jkuc$VkhuVvbEL1129unNyEzaZ1 ! ! ! ! ! ip subnet-zero no ip domain-lookup ! ! ! ! interface Loopback0 ip address 172.1.1.1 255.255.255.0 ! interface Loopback1 ip address 172.1.2.1 255.255.255.0 ! interface Ethernet0/0 no ip address shutdown ! interface Serial0/0 ip address 10.1.1.1 255.255.255.0 no ip mroute-cache no fair-queue ! router bgp 100 bgp log-neighbor-changes network 172.1.2.0 mask 255.255.255.0 timers bgp 10 10 neighbor 172.2.1.1 remote-as 200 neighbor 172.2.1.1 ebgp-multihop 255 neighbor 172.2.1.1 update-source Loopback0 neighbor 172.2.1.1 route-map doit in ! ip classless ip route 0.0.0.0 0.0.0.0 10.1.1.2 no ip http server ip as-path access-list 1 permit ^200 ip as-path access-list 1 permit ^400 ! route-map doit permit 10 match as-path 1 ! ! line con 0 line aux 0 line vty 0 4 password cisco login ! end r1#show ip bgp BGP table version is 5, local router ID is 172.1.2.1 Status codes: s suppressed, d damped, h history, * valid, best, i - internal Origin codes: i - IGP, e - EGP, ? - incomplete Network Next HopMetric LocPrf Weight Path * 172.1.2.0/24 0.0.0.0 0 32768 i * 172.2.2.0/24 172.2.1.1 0 0 200 i * 172.3.2.0/24 172.2.1.1 0 200 300 i * 172.4.2.0/24 172.2.1.1 0 200 300 400 i r1# Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18382t=18382 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: URGENT:FOR Routing experts:Plz help!!! [7:18370]
Even after completly removing route-map from redistribute ospf statment,Im not able to see any External(OSPF) routes going into IGRP? U can see in the debug output that no ospf redistributed packet is going into igrp network.. Thanks for help.!!! IGRP: received update from 152.1.0.2 on Ethernet0/0 05:26:48: network 152.12.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.13.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.14.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.15.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.17.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.16.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.20.0.0, metric 1600 (neighbor 501) 05:26:48: IGRP: Update contains 0 interior, 7 system, and 0 exterior routes. 05:26:48: IGRP: Total routes in update: 7 05:26:52: IGRP: sending update to 255.255.255.255 via Ethernet0/0 (152.1.0.1) 05:26:52: subnet 152.1.11.0, metric=9100 05:26:52: subnet 152.1.12.0, metric=501 05:26:52: IGRP: Update contains 2 interior, 0 system, and 0 exterior routes. 05:26:52: IGRP: Total routes in update: 2 05:26:52: IGRP: sending update to 255.255.255.255 via Loopback0 (152.1.12.1) 05:26:52: subnet 152.1.11.0, metric=9100 05:26:52: subnet 152.1.0.0, metric=1100 05:26:52: network 152.12.0.0, metric=1600 05:26:52: network 152.13.0.0, metric=1600 05:26:52: network 152.14.0.0, metric=1600 05:26:52: network 152.15.0.0, metric=1600 05:26:52: IGRP: Update contains 2 interior, 4 system, and 0 exterior routes. 05:26:52: IGRP: Total routes in update: 6 ISDN2# conf t From: EA Louie To: Cisco Lover , Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Date: Tue, 4 Sep 2001 00:46:26 -0700 debug ip igrp event and debug ip igrp transaction on ISDN2. If you don't see igrp on ISDN2 advertising the summarized routes, then try removing your route-map in the redistribute ospf statement and see if you aren't creating a 'too restrictive' match class - Original Message - From: Cisco Lover To: ; Sent: Monday, September 03, 2001 11:39 PM Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi, Thanks for the reply!!! U correct...But this is what MY problem. Iam not able to see any ospf routes after redistribution in the next IGRP router i.e FR and hence not able to access OSPF network from IGRP AS. On the other hand I am able to see IGRP redistributed routes into OSPF domain but not able to ping them. As I am able to get results when I used Static routes as ASBR, hence I suspect there is something wrong with SUMMARY ADDRESSES ,may be.. Plz comment...Any one Thanks From: EA Louie To: Cisco Lover , Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Date: Mon, 3 Sep 2001 23:21:58 -0700 Look at the routing table for the next IGRP router to see the effects of your redistribution. The OSPF summary routes won't be shown on ISDN2 - you'll have to look at the the next downstream IGRP router to see them, because the redistribution effect happens not at the ASBR, but outside the OSPF domain. You aren't seeing the effects of IGRP redistribution at this point either, because those routes would show up as O E2 routes in the routing table. Look on your next downstream OSPF router for those external routes to appear. - Original Message - From: Cisco Lover To: Sent: Monday, September 03, 2001 10:46 PM Subject: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi guys. facing some strange IGRPOSPF redistribution problem. Router ISDN2 is ASBR ,running IGRP with FR and running ospf with rest of network. Now problem is that I am able to redistribute IGRP into OSPF and can see the IGRP routes as OSPF external in ospf domain but not able to get redistributed OSPF routes into IGRP. Offcourse, No static/default routes are allowed so I have summarize ospf routes into C class,(Same as IGRP major interface)using summary address command .But still not able to get these routes redistributed. When I tried by using Static routes pointing to null 0,IT WORKED The problem I observed is that although I have put SUMMARY ADDRESS commands for network 152.1.1.0 152.1.2.0 ,which are required to redistribute into IGRP,I CANT see them as summary routes in ISDN2 router wHY?? Any one can help Please.All config attached Thanks a lot!!! !ISDN2 ! interface Loopback0 ip address 152.1.12.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0/0 ip address 152.1.0.1 255.255.255.0 no ip directed-broadcast no cdp enable ! interface Serial0/0 no ip address no ip directed-broadcast no ip mroute-cache shutdown no fair-queue no cdp enable ! interface
Re: one day lab will send ccie to the hell [7:18373]
Me no like CCIE. CCIE bad. Fire, Goood... tu tu wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... ccie will be useless, take juniper cert. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18385t=18373 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Hi FR champions :) [7:18387]
Hi guys.. Some strange Question. I have my FR switch setup as Full Mesh(Lab setup).So there must be some unused DLCIS on the spoke side which I can see by command as shown below. Is their any way If I can get rid of these Unused DLCIS completly ,by doing any thing on routers(Not on FR switch).What I meant is that rightnow I can see them as Unused (DLCI 110)when i put sh frame pvc command. But WHAT IF I Just want to see the status of those DLCIS which are in use???Any way?any trick??? Thanks. ISDN1#sh frame-relay pvc PVC Statistics for interface Serial0/0 (Frame Relay DTE) Active Inactive Deleted Static Local 1000 Switched 0000 Unused 1000 DLCI = 100, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial0/0.2 input pkts 622 output pkts 1134 in bytes 48784 out bytes 85644 dropped pkts 1 in FECN pkts 0 in BECN pkts 0 out FECN pkts 0 out BECN pkts 0 in DE pkts 0 out DE pkts 0 out bcast pkts 1069 out bcast bytes 7 pvc create time 01:27:00, last time pvc status changed 01:03:51 DLCI = 110, DLCI USAGE = UNUSED, PVC STATUS = ACTIVE, INTERFACE = Serial0/0 input pkts 0 output pkts 0in bytes 0 out bytes 0 dropped pkts 0 in FECN pkts 0 in BECN pkts 0 out FECN pkts 0 out BECN pkts 0 in DE pkts 0 out DE pkts 0 out bcast pkts 0 out bcast bytes 0Num Pkts Switched 0 pvc create time 00:02:14, last time pvc status changed 00:01:24 _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18387t=18387 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Quick MSAU question [7:18388]
Hi all, On Token ring, is it 12 or 33 MSAU per ring how many nodes? Many thanks suleman Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18388t=18388 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: BGP -Regular expression filter question [7:18382]
Add the following command to your config: ip as-path access-list 1 deny _300$ CM -Original Message- From: [EMAIL PROTECTED] on behalf of Tey Haw Ching Sent: 04 September 2001 08:09 To: [EMAIL PROTECTED] Subject:BGP -Regular expression filter question [7:18382] Hi, I have the following testing bgp configuration and try to use route-map with regular expression to filter AS300 out but not successful. Pls advise what will be correct regular expression if I would like to block only AS300(172.3.0.0) to R1. R1(AS100)--R2(AS200)---R3(AS300)---R4(AS400) Below is the R1 configuration and show ip bgp Current configuration : 986 bytes ! version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname r1 ! enable secret 5 $1$Jkuc$VkhuVvbEL1129unNyEzaZ1 ! ! ! ! ! ip subnet-zero no ip domain-lookup ! ! ! ! interface Loopback0 ip address 172.1.1.1 255.255.255.0 ! interface Loopback1 ip address 172.1.2.1 255.255.255.0 ! interface Ethernet0/0 no ip address shutdown ! interface Serial0/0 ip address 10.1.1.1 255.255.255.0 no ip mroute-cache no fair-queue ! router bgp 100 bgp log-neighbor-changes network 172.1.2.0 mask 255.255.255.0 timers bgp 10 10 neighbor 172.2.1.1 remote-as 200 neighbor 172.2.1.1 ebgp-multihop 255 neighbor 172.2.1.1 update-source Loopback0 neighbor 172.2.1.1 route-map doit in ! ip classless ip route 0.0.0.0 0.0.0.0 10.1.1.2 no ip http server ip as-path access-list 1 permit ^200 ip as-path access-list 1 permit ^400 ! route-map doit permit 10 match as-path 1 ! ! line con 0 line aux 0 line vty 0 4 password cisco login ! end r1#show ip bgp BGP table version is 5, local router ID is 172.1.2.1 Status codes: s suppressed, d damped, h history, * valid, best, i - internal Origin codes: i - IGP, e - EGP, ? - incomplete Network Next HopMetric LocPrf Weight Path * 172.1.2.0/24 0.0.0.0 0 32768 i * 172.2.2.0/24 172.2.1.1 0 0 200 i * 172.3.2.0/24 172.2.1.1 0 200 300 i * 172.4.2.0/24 172.2.1.1 0 200 300 400 i r1# Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18389t=18382 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
clearing atm sub-interface counters [7:18386]
Greetings all, I am tring to clear the counters on an ATM sub interface on a 7200. However it will not allow me to enter the command, it will allow me to clear the counters on the primary interface but this does not clear the counters on the sub-interfaces. Has anyone seen this is the past? many thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18386t=18386 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: URGENT:FOR Routing experts:Plz help!!! [7:18370]
I don't know why it isn't working, because it looks right - write your configs and do a clear ip route * and check the debugs again. If that doesn't work, try reloading the routers -e- - Original Message - From: Cisco Lover To: ; Sent: Tuesday, September 04, 2001 1:24 AM Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Even after completly removing route-map from redistribute ospf statment,Im not able to see any External(OSPF) routes going into IGRP? U can see in the debug output that no ospf redistributed packet is going into igrp network.. Thanks for help.!!! IGRP: received update from 152.1.0.2 on Ethernet0/0 05:26:48: network 152.12.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.13.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.14.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.15.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.17.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.16.0.0, metric 1600 (neighbor 501) 05:26:48: network 152.20.0.0, metric 1600 (neighbor 501) 05:26:48: IGRP: Update contains 0 interior, 7 system, and 0 exterior routes. 05:26:48: IGRP: Total routes in update: 7 05:26:52: IGRP: sending update to 255.255.255.255 via Ethernet0/0 (152.1.0.1) 05:26:52: subnet 152.1.11.0, metric=9100 05:26:52: subnet 152.1.12.0, metric=501 05:26:52: IGRP: Update contains 2 interior, 0 system, and 0 exterior routes. 05:26:52: IGRP: Total routes in update: 2 05:26:52: IGRP: sending update to 255.255.255.255 via Loopback0 (152.1.12.1) 05:26:52: subnet 152.1.11.0, metric=9100 05:26:52: subnet 152.1.0.0, metric=1100 05:26:52: network 152.12.0.0, metric=1600 05:26:52: network 152.13.0.0, metric=1600 05:26:52: network 152.14.0.0, metric=1600 05:26:52: network 152.15.0.0, metric=1600 05:26:52: IGRP: Update contains 2 interior, 4 system, and 0 exterior routes. 05:26:52: IGRP: Total routes in update: 6 ISDN2# conf t From: EA Louie To: Cisco Lover , Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Date: Tue, 4 Sep 2001 00:46:26 -0700 debug ip igrp event and debug ip igrp transaction on ISDN2. If you don't see igrp on ISDN2 advertising the summarized routes, then try removing your route-map in the redistribute ospf statement and see if you aren't creating a 'too restrictive' match class - Original Message - From: Cisco Lover To: ; Sent: Monday, September 03, 2001 11:39 PM Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi, Thanks for the reply!!! U correct...But this is what MY problem. Iam not able to see any ospf routes after redistribution in the next IGRP router i.e FR and hence not able to access OSPF network from IGRP AS. On the other hand I am able to see IGRP redistributed routes into OSPF domain but not able to ping them. As I am able to get results when I used Static routes as ASBR, hence I suspect there is something wrong with SUMMARY ADDRESSES ,may be.. Plz comment...Any one Thanks From: EA Louie To: Cisco Lover , Subject: Re: URGENT:FOR Routing experts:Plz help!!! [7:18370] Date: Mon, 3 Sep 2001 23:21:58 -0700 Look at the routing table for the next IGRP router to see the effects of your redistribution. The OSPF summary routes won't be shown on ISDN2 - you'll have to look at the the next downstream IGRP router to see them, because the redistribution effect happens not at the ASBR, but outside the OSPF domain. You aren't seeing the effects of IGRP redistribution at this point either, because those routes would show up as O E2 routes in the routing table. Look on your next downstream OSPF router for those external routes to appear. - Original Message - From: Cisco Lover To: Sent: Monday, September 03, 2001 10:46 PM Subject: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi guys. facing some strange IGRPOSPF redistribution problem. Router ISDN2 is ASBR ,running IGRP with FR and running ospf with rest of network. Now problem is that I am able to redistribute IGRP into OSPF and can see the IGRP routes as OSPF external in ospf domain but not able to get redistributed OSPF routes into IGRP. Offcourse, No static/default routes are allowed so I have summarize ospf routes into C class,(Same as IGRP major interface)using summary address command .But still not able to get these routes redistributed. When I tried by using Static routes pointing to null 0,IT WORKED The problem I observed is that although I have put SUMMARY ADDRESS commands for network 152.1.1.0 152.1.2.0 ,which are required to redistribute into IGRP,I CANT see them as summary routes in ISDN2 router wHY?? Any one can help
RE: Hi FR champions :) [7:18387]
try turning off inverse arp, then reloading your router. You will have to specify the dlci used. -Original Message- From: Cisco Lover [mailto:[EMAIL PROTECTED]] Sent: 04 September 2001 10:03 To: [EMAIL PROTECTED] Subject: Hi FR champions :) [7:18387] Hi guys.. Some strange Question. I have my FR switch setup as Full Mesh(Lab setup).So there must be some unused DLCIS on the spoke side which I can see by command as shown below. Is their any way If I can get rid of these Unused DLCIS completly ,by doing any thing on routers(Not on FR switch).What I meant is that rightnow I can see them as Unused (DLCI 110)when i put sh frame pvc command. But WHAT IF I Just want to see the status of those DLCIS which are in use???Any way?any trick??? Thanks. ISDN1#sh frame-relay pvc PVC Statistics for interface Serial0/0 (Frame Relay DTE) Active Inactive Deleted Static Local 1000 Switched 0000 Unused 1000 DLCI = 100, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial0/0.2 input pkts 622 output pkts 1134 in bytes 48784 out bytes 85644 dropped pkts 1 in FECN pkts 0 in BECN pkts 0 out FECN pkts 0 out BECN pkts 0 in DE pkts 0 out DE pkts 0 out bcast pkts 1069 out bcast bytes 7 pvc create time 01:27:00, last time pvc status changed 01:03:51 DLCI = 110, DLCI USAGE = UNUSED, PVC STATUS = ACTIVE, INTERFACE = Serial0/0 input pkts 0 output pkts 0in bytes 0 out bytes 0 dropped pkts 0 in FECN pkts 0 in BECN pkts 0 out FECN pkts 0 out BECN pkts 0 in DE pkts 0 out DE pkts 0 out bcast pkts 0 out bcast bytes 0Num Pkts Switched 0 pvc create time 00:02:14, last time pvc status changed 00:01:24 _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18391t=18387 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Another CCNP is born [7:18392]
Well after 4 months of hard work and late nights I am finally a CCNP. I just passed the CIT exam with a score of 965. The exam was not very difficult. If you studied hard for the other exams this one will be a breeze. Only new stuff that wasn't in the other 3 exams is some apple and IPX stuff. the rest was in the other exams. If you study the Cisco press Cisco CCNP Support Exam Certification Guide you will be 100 OK. I didn't get anything in the exam that wasn't covered in this book. The book is very accurate and to the point. Probably the best CCNP study guide out there. The order I did the exams in is as follows Switching 945 Routing 954 BCRAN 954 CIT 965 After switching and routing the other 2 are rather easy. Just study the Cisco press guides and use the cram sessions from brainbuzz. The boson exams are pretty good, especially for switching and CIT. also the edge tests that come with the Sybex books are a big help. Sybex study guide has a lot of information and will also be sufficient to pass the exams. But you don't need both Cisco and sybex, only one will do and if I had to choose I would choose the Cisco press books Now on to CCIE Written. I will apreciate any CCIE help you may have [demime removed a uuencoded section named smile.gif which was 11 lines] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18392t=18392 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: one day lab will send ccie to the hell [7:18373]
Hi Guys and Girls, Can we please keep cisco groupstudy to issues about cisco. As far as I am concerned, we joined the group to be pro-active and to be helped by others or help others with cisco issues.Its a good discussion group, lets keep it that way. Rob -Original Message- From: Patrick [SMTP:[EMAIL PROTECTED]] Sent: 04 September 2001 09:49 To: [EMAIL PROTECTED] Subject: Re: one day lab will send ccie to the hell [7:18373] Me no like CCIE. CCIE bad. Fire, Goood... tu tu wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... ccie will be useless, take juniper cert. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18393t=18373 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
isl encapsulation over fastethernet sub interface [7:18394]
hi all can anybody help me. i have a catalyst 5505 connected to a 2610 fastethernet interface. vlans are configured in the catalyst and are trunked to the fa interface. in the fa interface subinterfaces encapsulation for vlans are created in the router. but still router does not connect to the switch and carrying the vlan traffic. when i debug vlan packet on router it gives vLAN: Received ISL encapsulated UNKNOWN packet bearing colour ID 5 on interface FastEthernet1/0.5 which is not configured to route or bridge this packet type can anybody help me regards jagan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18394t=18394 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: isl encapsulation over fastethernet sub interface [7:18395]
Interface FastEthernet1/0.5 ip address x.x.x.x encapsulation isl VLANID Stephane LITKOWSKI a icrit dans le message news: [EMAIL PROTECTED] Hi On the subinterface, you have to configure : Interface FastEthernet1/0.5 ip address encapsulation isl Regards, -- Stephane LITKOWSKI Student in a french computer science school EPITA Telecom Network specialization CISCO Certified Network Associate EMail : [EMAIL PROTECTED] Jagan Krishnaraj a icrit dans le message news: [EMAIL PROTECTED] hi all can anybody help me. i have a catalyst 5505 connected to a 2610 fastethernet interface. vlans are configured in the catalyst and are trunked to the fa interface. in the fa interface subinterfaces encapsulation for vlans are created in the router. but still router does not connect to the switch and carrying the vlan traffic. when i debug vlan packet on router it gives vLAN: Received ISL encapsulated UNKNOWN packet bearing colour ID 5 on interface FastEthernet1/0.5 which is not configured to route or bridge this packet type can anybody help me regards jagan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18396t=18395 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: isl encapsulation over fastethernet sub interface [7:18395]
Hi On the subinterface, you have to configure : Interface FastEthernet1/0.5 ip address encapsulation isl Regards, -- Stephane LITKOWSKI Student in a french computer science school EPITA Telecom Network specialization CISCO Certified Network Associate EMail : [EMAIL PROTECTED] Jagan Krishnaraj a icrit dans le message news: [EMAIL PROTECTED] hi all can anybody help me. i have a catalyst 5505 connected to a 2610 fastethernet interface. vlans are configured in the catalyst and are trunked to the fa interface. in the fa interface subinterfaces encapsulation for vlans are created in the router. but still router does not connect to the switch and carrying the vlan traffic. when i debug vlan packet on router it gives vLAN: Received ISL encapsulated UNKNOWN packet bearing colour ID 5 on interface FastEthernet1/0.5 which is not configured to route or bridge this packet type can anybody help me regards jagan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18395t=18395 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CONF REG AND BOOT SYSTEM [7:18397]
If I have: 1)conf register set to 0x1... (from ROM) 2) boot system falsh: image.bin to the next reload what happens? It will boot from ROM or FLASH? Who wins, config register or the first command line? Thank you Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18397t=18397 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CONF REG AND BOOT SYSTEM [7:18397]
The config register is the parameter that decide of boot. The config register must specify if startup config has to be read or not (command : boot system) Stephane TP a icrit dans le message news: [EMAIL PROTECTED] If I have: 1)conf register set to 0x1... (from ROM) 2) boot system falsh: image.bin to the next reload what happens? It will boot from ROM or FLASH? Who wins, config register or the first command line? Thank you Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18398t=18397 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CONF REG AND BOOT SYSTEM [7:18397]
At the boot, the router first check the conf reg so it'll boot from ROM. If the conf reg specifies boot from flash then it'll look up for a boot system command to find the correct IOS name to lod. Hope it helps At 07:37 AM 9/4/2001 -0400, TP wrote: If I have: 1)conf register set to 0x1... (from ROM) 2) boot system falsh: image.bin to the next reload what happens? It will boot from ROM or FLASH? Who wins, config register or the first command line? Thank you Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18399t=18397 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: bundling [7:18365]
Wouldn't you use PPP Multilink to bundle multiple ISDN channels? Seems to work for us =) Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18400t=18365 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: isl encapsulation over fastethernet sub interface [7:18401]
You need a 100 MB port to perform trunking. I've never heard of a 2610 with a 100 MB ethernet. My experience has been they are 10MB ethernet and you cannot trunk with them... Dennis Jagan Krishnaraj wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... hi all can anybody help me. i have a catalyst 5505 connected to a 2610 fastethernet interface. vlans are configured in the catalyst and are trunked to the fa interface. in the fa interface subinterfaces encapsulation for vlans are created in the router. but still router does not connect to the switch and carrying the vlan traffic. when i debug vlan packet on router it gives vLAN: Received ISL encapsulated UNKNOWN packet bearing colour ID 5 on interface FastEthernet1/0.5 which is not configured to route or bridge this packet type can anybody help me regards jagan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18401t=18401 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: one day lab will send ccie to the hell [7:18373]
Please don't feed the troll tu tu wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... ccie will be useless, take juniper cert. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18402t=18373 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ccie lab question? [7:18403]
question for all folks. i want to take the ccie lab test before the implement the one day lab. however what would be my deadline. this is of course take it either at california or the other site, just take it before the one day lab kicks in. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18403t=18403 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: what is needed for an ISDN LAB ?? [7:18141]
We currently use the adtran atlas 550, and if you check www.adtran.com/simulation you can get more info -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Thomas N. Sent: Friday, August 31, 2001 9:24 PM To: [EMAIL PROTECTED] Subject: Re: what is needed for an ISDN LAB ?? [7:18141] I heard that if one has an Adtran 800, he/she can use it as the ISDN switch... Jaspreet Bhatia wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Guys, I am trying to setup an ISDN lab and do not have access to an ISDN switch . What I do have is two BRI lines each with a SPID . Will that be sufficient or so I need anything else ? Thanks Jaspreet Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18405t=18141 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
NM-2FE2W [7:18404]
Hi, does anyone know for sure if the NM-2FE2W 10/100 FastEthernet Module is in fact compatible with a 2600 series router? I've been told yes and no and I've only used it in a 3600. Thanks for your help! -R This electronic mail transmission contains confidential information intended only for the person(s) named. Any use, distribution, copying, or disclosure by any other person is strictly prohibited. If you received this transmission in error, please notify the sender by replying to e-mail and destroy message. Opinions, conclusions, and other information in this message that do not relate to the official business of MARAKON ASSOCIATES shall be understood to be neither given nor endorsed by the company. When addressed to MARAKON clients, any information contained in this e-mailis subject to the terms and conditions in the governing client contract. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18404t=18404 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: isl encapsulation over fastethernet sub interface [7:18401]
Try doing a show port capabilities and it will tell you if it can trunk or not. Also make sure your IOS is able to support trunking. -Original Message- From: Dennis H [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 7:52 AM To: [EMAIL PROTECTED] Subject: Re: isl encapsulation over fastethernet sub interface [7:18401] You need a 100 MB port to perform trunking. I've never heard of a 2610 with a 100 MB ethernet. My experience has been they are 10MB ethernet and you cannot trunk with them... Dennis Jagan Krishnaraj wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... hi all can anybody help me. i have a catalyst 5505 connected to a 2610 fastethernet interface. vlans are configured in the catalyst and are trunked to the fa interface. in the fa interface subinterfaces encapsulation for vlans are created in the router. but still router does not connect to the switch and carrying the vlan traffic. when i debug vlan packet on router it gives vLAN: Received ISL encapsulated UNKNOWN packet bearing colour ID 5 on interface FastEthernet1/0.5 which is not configured to route or bridge this packet type can anybody help me regards jagan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18407t=18401 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: one day lab will send ccie to the hell [7:18373]
Billy goat, billy goat, get off my root bridge... -Original Message- From: Dennis H [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 8:54 AM To: [EMAIL PROTECTED] Subject: Re: one day lab will send ccie to the hell [7:18373] Please don't feed the troll tu tu wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... ccie will be useless, take juniper cert. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18406t=18373 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
The REAL Future - WAS: one day lab will send ccie to the hell [7:18408]
Try THIS one on for size! www.cie.com official lab equipment list at http://www.cavebear.com/cavebear/catalog.html how can ANY vendor related cert even BEGIN to compare? Chuck CIE # 4 million and 7 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, September 03, 2001 10:56 PM To: [EMAIL PROTECTED] Subject: one day lab will send ccie to the hell [7:18373] ccie will be useless, take juniper cert. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18408t=18408 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: NM-2FE2W [7:18404]
Here is a link to the datasheet for that module (from Cisco's Modularity Cafe). It says this module is not supported in the 2600 series, sorry. Look at the table about half-way down the page. http://www.cisco.com/warp/public/cc/pd/rt/2600/prodlit/2636m_ds.htm Will Rizzo, Damian wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, does anyone know for sure if the NM-2FE2W 10/100 FastEthernet Module is in fact compatible with a 2600 series router? I've been told yes and no and I've only used it in a 3600. Thanks for your help! -R This electronic mail transmission contains confidential information intended only for the person(s) named. Any use, distribution, copying, or disclosure by any other person is strictly prohibited. If you received this transmission in error, please notify the sender by replying to e-mail and destroy message. Opinions, conclusions, and other information in this message that do not relate to the official business of MARAKON ASSOCIATES shall be understood to be neither given nor endorsed by the company. When addressed to MARAKON clients, any information contained in this e-mailis subject to the terms and conditions in the governing client contract. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18410t=18404 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Part Number [7:18352]
Thanks. -Original Message- From: Circusnuts [mailto:[EMAIL PROTECTED]] Sent: Monday, September 03, 2001 10:39 PM To: Christopher Supino; [EMAIL PROTECTED] Subject: Re: Part Number [7:18352] The big question is will the below links make it through the mail server :o) Here's the 2500 providing clock (DCE) http://pacificcable.com/Picture_Page.asp?DataName=CAB-5060X-10 Here's the 50 pin providing clock (DTE) http://pacificcable.com/Picture_Page.asp?DataName=CAB-6050X-10 or http://cgi.ebay.com/aw-cgi/eBayISAPI.dll?ViewItemitem=1270229319 So- the respective stock #'s are 5060X 6050X. All the best !!! Phil - Original Message - From: Christopher Supino To: Sent: Monday, September 03, 2001 10:27 PM Subject: Part Number [7:18352] Anyone know the part number for a 50 pin serial to 60 pin serial X-over cable? (Cisco 4000 to Cisco 2500) Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Erick B. Sent: Monday, September 03, 2001 9:40 PM To: kenairs; [EMAIL PROTECTED] Subject: Re: OSPF message You'll see this w/12.1T and above if you're redistributing a connected network into OSPF that is already natively part of OSPF. With 12.1 mainline and below IOS will redistribute the network into OSPF externally even though it is already part of OSPF. I posted a summary of my findings on this a few days ago. There may be other reasons why it occurs as well but I can't think of any at moment. --- kenairs wrote: Hi , I was doing some debug on OSPF and came across this below. OSPF: Start redist-scanning 01:33:18: OSPF: Scan for both redistribution and translation 01:33:18: OSPF: max-aged external LSA for summary 170.150.23.0 255.255.255.0 01:33:18: OSPF: End scanning, Elapsed time 8ms Any one can explain this ? Tks __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com **Please read:http://www.groupstudy.com/list/posting.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18383t=18352 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ccie lab question? [7:18403]
It is going to be very hard to get a date before the switch, you will have to probably go to another country. My thinking is wait for the one-day that way if you go down you will at least know the layout and format. If you take the two-day and go down the next time you go back you will see a new format because it will be the one-day format. Don - Original Message - From: george gittins To: Sent: Tuesday, September 04, 2001 6:05 AM Subject: ccie lab question? [7:18403] question for all folks. i want to take the ccie lab test before the implement the one day lab. however what would be my deadline. this is of course take it either at california or the other site, just take it before the one day lab kicks in. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18409t=18403 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Can you pass CCNP w/o having Cisco gears? [7:18124]
Wow Tony, I am impressed! Can I send my husband over to be trained by you? ;-) Heather -Original Message- From: Tony Medeiros [SMTP:[EMAIL PROTECTED]] Sent: Sunday, September 02, 2001 4:59 PM To: [EMAIL PROTECTED] Subject: Re: Can you pass CCNP w/o having Cisco gears? [7:18124] After 9 years of marrige, I can say I am fully certified at the MPDL. Tony M CCIE #6172, MPDL+RP (Male Puts Down Lid + Replaces [toliet paper] Roll) - Original Message - From: Leigh Anne Chisholm To: Sent: Sunday, September 02, 2001 2:31 PM Subject: RE: Can you pass CCNP w/o having Cisco gears? [7:18124] Sorry Christopher, but the CFTA certification isn't worth anything anymore. It's been eclipsed by MPDL. If you've got that, you're a highly sought after commodity. Your value skyrockets! What's MPDL you ask? Why, Male Puts Down Lid of course! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Christopher Supino Sent: Sunday, September 02, 2001 3:06 PM To: [EMAIL PROTECTED] Subject: RE: Can you pass CCNP w/o having Cisco gears? [7:18124] Nice Chuck. Don't forget to add CFTA(Certified Flush Toilet Administrator), and MCBD(Miller Certified Beer Drinker). :) Chris -Original Message- From: Chuck Larrieu [mailto:[EMAIL PROTECTED]] Sent: Sunday, September 02, 2001 3:22 PM To: Christopher Supino; [EMAIL PROTECTED] Subject: RE: Can you pass CCNP w/o having Cisco gears? [7:18124] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Christopher Supino Sent: Sunday, September 02, 2001 12:18 PM To: [EMAIL PROTECTED] Subject: RE: Can you pass CCNP w/o having Cisco gears? [7:18124] When did CCIE Written become a certification? I take serious issue with engineers who do this. It only adds to the cheapening of the cert. Pass your lab, get your number, call yourself a CCIE. Til then, you are a CCNP, CCDP. My two cents. CL: about the same time the CCNP 2.0 became a certification. Some people will do anything to make themselves look better Chuck primary school diploma, high school diploma, Universal Life Church minister Costco GoldStar Member, United Mileage Plus member, Calif. State AAA member should I join the NRA and look tough too? ;- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of ahmed adil Sent: Sunday, September 02, 2001 1:00 PM To: [EMAIL PROTECTED] Subject: Re: Can you pass CCNP w/o having Cisco gears? [7:18124] Just cant do it without a router Ahmed CCIE Written CCNP CCDP MCSE Dan Faulk wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Having recently just passed CCNP this year I will say you must have a Router. The reason is that the prescribed rituals must be performed in front of the Router. Without a Router the powerful spirit of routing, BGPOSPF, wont bless your efforts and even if you do pass all knowledge will be removed from you within 2 months. Some have said scrificing your most valuable possesion before the router helps. I give it my time which seemed to work well. Others have given the Router spirit money, bought it accessories, even food but so far time works best. Hope this helps and smile cause TGIF!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of D Rick Sent: Friday, August 31, 2001 11:57 AM To: [EMAIL PROTECTED] Subject: Can you pass CCNP w/o having Cisco gears? [7:18107] Can you pass CCNP w/o having Cisco gears? I'm doing practice test from Boson and doing the Sybex study guide? Is that sufficient? Do I need to be in front of a router? Thanks in advance, Rick D Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18411t=18124 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: The REAL Future - WAS: one day lab will send ccie to the [7:18412]
This is hysterical. -- James Haynes Network Architect Cendant IT A+,MCSE,CCNA,CCDA,CCNP,CCDP, CQS-SNA/IPSS Chuck Larrieu wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Try THIS one on for size! www.cie.com official lab equipment list at http://www.cavebear.com/cavebear/catalog.html how can ANY vendor related cert even BEGIN to compare? Chuck CIE # 4 million and 7 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, September 03, 2001 10:56 PM To: [EMAIL PROTECTED] Subject: one day lab will send ccie to the hell [7:18373] ccie will be useless, take juniper cert. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18412t=18412 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Certs... (was Can you pass CCNP w/o having Cisco gears? [7:18414]
Hi Guys Gals, Sorry I missed out on the fun. I was away for the Holiday weekend. But I am surprised you guys missed one of the best ones. Heather Buri CCNA, CCNP (3/4) -Original Message- From: Leigh Anne Chisholm [SMTP:[EMAIL PROTECTED]] Sent: Sunday, September 02, 2001 3:32 PM To: [EMAIL PROTECTED] Subject: RE: Can you pass CCNP w/o having Cisco gears? [7:18124] Yes Chuck, some people WILL do anything to make themselves look better - like signing their name indicating that they're CCIE # when they've let their certification lapse. Hey, I'm guilty of wanting to make myself look better to employers too. I've been tempted to send my resume using Leigh A. Chisholm and see if those employers that didn't request an interview with me now want to interview me. But that's another topic altogether... -- Leigh A. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Chuck Larrieu Sent: Sunday, September 02, 2001 1:39 PM To: [EMAIL PROTECTED] Subject: RE: Can you pass CCNP w/o having Cisco gears? [7:18124] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Christopher Supino Sent: Sunday, September 02, 2001 12:18 PM To: [EMAIL PROTECTED] Subject: RE: Can you pass CCNP w/o having Cisco gears? [7:18124] When did CCIE Written become a certification? I take serious issue with engineers who do this. It only adds to the cheapening of the cert. Pass your lab, get your number, call yourself a CCIE. Til then, you are a CCNP, CCDP. My two cents. CL: about the same time the CCNP 2.0 became a certification. Some people will do anything to make themselves look better Chuck primary school diploma, high school diploma, Universal Life Church minister Costco GoldStar Member, United Mileage Plus member, Calif. State AAA member should I join the NRA and look tough too? ;- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of ahmed adil Sent: Sunday, September 02, 2001 1:00 PM To: [EMAIL PROTECTED] Subject: Re: Can you pass CCNP w/o having Cisco gears? [7:18124] Just cant do it without a router Ahmed CCIE Written CCNP CCDP MCSE Dan Faulk wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Having recently just passed CCNP this year I will say you must have a Router. The reason is that the prescribed rituals must be performed in front of the Router. Without a Router the powerful spirit of routing, BGPOSPF, wont bless your efforts and even if you do pass all knowledge will be removed from you within 2 months. Some have said scrificing your most valuable possesion before the router helps. I give it my time which seemed to work well. Others have given the Router spirit money, bought it accessories, even food but so far time works best. Hope this helps and smile cause TGIF!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of D Rick Sent: Friday, August 31, 2001 11:57 AM To: [EMAIL PROTECTED] Subject: Can you pass CCNP w/o having Cisco gears? [7:18107] Can you pass CCNP w/o having Cisco gears? I'm doing practice test from Boson and doing the Sybex study guide? Is that sufficient? Do I need to be in front of a router? Thanks in advance, Rick D Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18414t=18414 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: URGENT:FOR Routing experts:Plz help!!! [7:18370]
Once again, this behaviour is NOT strange IGRP is behaving EXACTLY the way it is supposed to behave. Re-think your summary address statements AND your route maps, or rather the access-lists your route maps use. HTH Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cisco Lover Sent: Monday, September 03, 2001 10:46 PM To: [EMAIL PROTECTED] Subject: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi guys. facing some strange IGRPOSPF redistribution problem. Router ISDN2 is ASBR ,running IGRP with FR and running ospf with rest of network. Now problem is that I am able to redistribute IGRP into OSPF and can see the IGRP routes as OSPF external in ospf domain but not able to get redistributed OSPF routes into IGRP. Offcourse, No static/default routes are allowed so I have summarize ospf routes into C class,(Same as IGRP major interface)using summary address command .But still not able to get these routes redistributed. When I tried by using Static routes pointing to null 0,IT WORKED The problem I observed is that although I have put SUMMARY ADDRESS commands for network 152.1.1.0 152.1.2.0 ,which are required to redistribute into IGRP,I CANT see them as summary routes in ISDN2 router wHY?? Any one can help Please.All config attached Thanks a lot!!! !ISDN2 ! interface Loopback0 ip address 152.1.12.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0/0 ip address 152.1.0.1 255.255.255.0 no ip directed-broadcast no cdp enable ! interface Serial0/0 no ip address no ip directed-broadcast no ip mroute-cache shutdown no fair-queue no cdp enable ! interface BRI0/0 ip address 152.1.1.18 255.255.255.252 no ip directed-broadcast encapsulation ppp ip ospf demand-circuit dialer idle-timeout 1000 dialer map ip 152.1.1.17 name ISDN1 broadcast 2465640 dialer-group 1 isdn switch-type basic-net3 no cdp enable ppp chap hostname cisco ppp chap password 7 02050D480809 ! interface Ethernet0/1 bandwidth ip address 152.1.11.1 255.255.255.0 no ip directed-broadcast no keepalive no fair-queue no cdp enable ! interface Serial1/0 bandwidth 172 backup delay 5 20 backup interface BRI0/0 ip address 152.1.10.2 255.255.255.128 no ip directed-broadcast no fair-queue clockrate 64000 no cdp enable ! interface Serial1/1 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 100 interface Serial1/4 300 ! interface Serial1/2 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/3 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 201 interface Serial1/4 301 ! interface Serial1/4 no ip address no ip directed-broadcast encapsulation frame-relay frame-relay intf-type dce frame-relay route 300 interface Serial1/1 100 frame-relay route 301 interface Serial1/3 201 ! interface Serial1/5 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/6 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/7 no ip address no ip directed-broadcast shutdown no cdp enable ! router ospf 64 area 0 authentication message-digest area 1 virtual-link 152.1.2.5 area 2 nssa default-information-originate summary-address 152.1.2.0 255.255.255.0 summary-address 152.12.0.0 255.252.0.0 summary-address 152.1.1.0 255.255.255.0 redistribute igrp 64 subnets route-map Hi passive-interface Ethernet0/0 network 152.1.1.18 0.0.0.0 area 2 network 152.1.10.2 0.0.0.0 area 1 network 152.1.11.1 0.0.0.0 area 2 default-information originate always ! router igrp 64 redistribute ospf 64 route-map CCIE passive-interface Ethernet0/1 passive-interface Serial1/0 network 152.1.0.0 default-metric 1 100 255 1 1500 distribute-list 1 in Ethernet0/0 ! ip classless no ip http server ! access-list 1 permit 152.12.0.0 access-list 1 permit 152.13.0.0 access-list 1 permit 152.14.0.0 access-list 1 permit 152.15.0.0 access-list 10 permit 152.1.1.0 access-list 10 permit 152.1.2.0 access-list 20 permit 152.12.0.0 access-list 20 permit 152.13.0.0 access-list 20 permit 152.14.0.0 access-list 20 permit 152.15.0.0 dialer-list 1 protocol ip permit no cdp run route-map HI permit 10 ! route-map CCIE permit 10 match ip address 10 ! route-map Hi permit 10 match ip address 20 ! ! banner motd ^CHi how r u^C ! line con 0 exec-timeout 0 0 password cisco transport input none line aux 0 line vty 0 4 login ! ISDN2#sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not
Re: pix outbound vs acl [7:18101]
LOL I see what you mean... when all else fails... and remember asking for directions is permitted only when no women are around to witness it ;-) Allen May wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... ROFL...yes...wellI didn't have an answer so I had to admit all else failed. I almost felt I lost my manlihood. I had the sudden urge to ask directions on the way home. Maybe it's all the rain we're getting that's depressing me to the point of RTFMing ;) - Original Message - From: Dennis H To: Sent: Friday, August 31, 2001 12:33 PM Subject: Re: pix outbound vs acl [7:18101] What?!? Are you suggesting there is useful information and maybe even the answer to the question.. in the manual??? Allen May wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Well in the 5.1 PIX users manual it has a note in the section on outbound saying it's been superceded with the access-list command. It's in the command reference section. It says the recommend migrating outbound command statements to access-list command statements to maintain future compatibility. Sounds like a hint of possibly removing it just like they keep hinting they're going to do with conduit commands. Allen - Original Message - From: BOURNE, KENNETH To: Sent: Friday, August 31, 2001 10:47 AM Subject: pix outbound vs acl [7:18101] Is there nay benefit to using ACL over outbound? Both accomplish the same end result for me . |Ken Bourne,CCNA|Network Specialist| |702-657-3432(direct)|702-524 1193(mobile)||[EMAIL PROTECTED]| Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18415t=18101 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Radius assins IP address [7:18416]
Dear All, How can I configur the As5300 to let the Radius server assigns IP address to the dail up users? Regards Do You Yahoo!? Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk or your free @yahoo.ie address at http://mail.yahoo.ie Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18416t=18416 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: URGENT:FOR Routing experts:Plz help!!! [7:18370]
redistribution you gotta love it. You are obviously redistributing a network which resides in igrp into ospf which in turn is redistributing back to igrp which then redistributes it back into ospf yada yada yada. As chuck states check the networks which you want to redistribute and make sure that this is indeed the only ones that area being redistributed. -Original Message- From: Chuck Larrieu [mailto:[EMAIL PROTECTED]] Sent: 04 September 2001 15:06 To: [EMAIL PROTECTED] Subject: RE: URGENT:FOR Routing experts:Plz help!!! [7:18370] Once again, this behaviour is NOT strange IGRP is behaving EXACTLY the way it is supposed to behave. Re-think your summary address statements AND your route maps, or rather the access-lists your route maps use. HTH Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cisco Lover Sent: Monday, September 03, 2001 10:46 PM To: [EMAIL PROTECTED] Subject: URGENT:FOR Routing experts:Plz help!!! [7:18370] Hi guys. facing some strange IGRPOSPF redistribution problem. Router ISDN2 is ASBR ,running IGRP with FR and running ospf with rest of network. Now problem is that I am able to redistribute IGRP into OSPF and can see the IGRP routes as OSPF external in ospf domain but not able to get redistributed OSPF routes into IGRP. Offcourse, No static/default routes are allowed so I have summarize ospf routes into C class,(Same as IGRP major interface)using summary address command .But still not able to get these routes redistributed. When I tried by using Static routes pointing to null 0,IT WORKED The problem I observed is that although I have put SUMMARY ADDRESS commands for network 152.1.1.0 152.1.2.0 ,which are required to redistribute into IGRP,I CANT see them as summary routes in ISDN2 router wHY?? Any one can help Please.All config attached Thanks a lot!!! !ISDN2 ! interface Loopback0 ip address 152.1.12.1 255.255.255.0 no ip directed-broadcast ! interface Ethernet0/0 ip address 152.1.0.1 255.255.255.0 no ip directed-broadcast no cdp enable ! interface Serial0/0 no ip address no ip directed-broadcast no ip mroute-cache shutdown no fair-queue no cdp enable ! interface BRI0/0 ip address 152.1.1.18 255.255.255.252 no ip directed-broadcast encapsulation ppp ip ospf demand-circuit dialer idle-timeout 1000 dialer map ip 152.1.1.17 name ISDN1 broadcast 2465640 dialer-group 1 isdn switch-type basic-net3 no cdp enable ppp chap hostname cisco ppp chap password 7 02050D480809 ! interface Ethernet0/1 bandwidth ip address 152.1.11.1 255.255.255.0 no ip directed-broadcast no keepalive no fair-queue no cdp enable ! interface Serial1/0 bandwidth 172 backup delay 5 20 backup interface BRI0/0 ip address 152.1.10.2 255.255.255.128 no ip directed-broadcast no fair-queue clockrate 64000 no cdp enable ! interface Serial1/1 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 100 interface Serial1/4 300 ! interface Serial1/2 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/3 no ip address no ip directed-broadcast encapsulation frame-relay clockrate 64000 frame-relay intf-type dce frame-relay route 201 interface Serial1/4 301 ! interface Serial1/4 no ip address no ip directed-broadcast encapsulation frame-relay frame-relay intf-type dce frame-relay route 300 interface Serial1/1 100 frame-relay route 301 interface Serial1/3 201 ! interface Serial1/5 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/6 no ip address no ip directed-broadcast shutdown no cdp enable ! interface Serial1/7 no ip address no ip directed-broadcast shutdown no cdp enable ! router ospf 64 area 0 authentication message-digest area 1 virtual-link 152.1.2.5 area 2 nssa default-information-originate summary-address 152.1.2.0 255.255.255.0 summary-address 152.12.0.0 255.252.0.0 summary-address 152.1.1.0 255.255.255.0 redistribute igrp 64 subnets route-map Hi passive-interface Ethernet0/0 network 152.1.1.18 0.0.0.0 area 2 network 152.1.10.2 0.0.0.0 area 1 network 152.1.11.1 0.0.0.0 area 2 default-information originate always ! router igrp 64 redistribute ospf 64 route-map CCIE passive-interface Ethernet0/1 passive-interface Serial1/0 network 152.1.0.0 default-metric 1 100 255 1 1500 distribute-list 1 in Ethernet0/0 ! ip classless no ip http server ! access-list 1 permit 152.12.0.0 access-list 1 permit 152.13.0.0 access-list 1 permit 152.14.0.0 access-list 1 permit 152.15.0.0 access-list 10 permit 152.1.1.0 access-list 10 permit 152.1.2.0 access-list 20 permit 152.12.0.0 access-list 20 permit 152.13.0.0 access-list 20 permit 152.14.0.0 access-list 20 permit 152.15.0.0 dialer-list 1 protocol ip permit no cdp run route-map HI permit 10 ! route-map CCIE permit 10 match ip address 10 ! route-map Hi permit 10 match ip address 20 ! ! banner motd ^CHi how r u^C ! line con 0 exec-timeout 0 0 password cisco transport input
Interesting NAT/PAT scenario [7:18418]
Here's a puzzler for you: Their 192.168.10.0/24 Network | Their Default gateway | Their VPN 3030 Concentrator running PAT w/ external interface 2.2.2.2 (Reference Point A) | Another default gateway leading to... | The Internet | My gateway router | My VPN box | My internal router possibly running NAT (Reference Point B) | My 172.16.0.0/14 network The VPN boxes are up and running and have a tunnel established. Okay, so at Ref. Point A, we're running PAT on the VPN box to hide the 192.168.10/24 network. Fine and dandy. For some reason, management has said that all source addresses coming into my network must be 172-based addresses rather than the 2.2.2.2 address. So they want to know if at Ref. Point B if I can run another NAT session which translates the 2.2.2.2:Port addresses into 172.16.0.0/14 addresses. I would think this wouldn't be possible, because I know of no NAT command which allows you to specify the outside local addresses as being PATted addresses. Is there such a command? Thanks. BJ P.S. Someday, their 192.168.10/24 network will be renumbered. This is just an interim configuration. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18418t=18418 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: 01-00-0c-ee-ee-ee [7:18362]
Let's just say that the journey to find that info led me in quite a few directions. Good thing that Mon was a holiday as I was up to 4 AM Sun night pursuing various thoughts. (After doing an all nighter Fri-Sat playing with switch configs.) Glad that this is a fun field. -Original Message- From: Chuck Larrieu [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 12:33 AM To: [EMAIL PROTECTED] Subject: RE: 01-00-0c-ee-ee-ee [7:18362] hhhmmm. I'm certainly beginning to understand why a switch with only 48 ports needs to track 2000 MAC's ;- thanks very much for this. I gather you too found no information whatsoever on CCO, other than the outputs from various show cam commands reproduced in various documents. I believe Leigh Anne and I have both learned quite a bit this weekend. Which in turn means quite a few folks on this list may benefit down the line. Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Daniel Cotts Sent: Monday, September 03, 2001 8:12 PM To: [EMAIL PROTECTED] Subject: 01-00-0c-ee-ee-ee [7:18362] I finally got smart and went to the Open Forum on CCO (login required) 01-00-0c-ee-ee-ee is a Cisco proprietary protocol called SYNC. It's sent by the root bridge on VLAN1 every two minutes and helps maintain an accurate SPT topology. In use since 2.1(6). SNAP fromat with hex value 2006 as the SNAP type. Contains four bytes of data (00 01 D4 C0) with 34 bytes of padding. I've found this address in the show CAM system on CatOS boxes. Not on 2924M-XL show mac self. Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18419t=18362 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
cisco internetwork design manual [7:18420]
Dear ALL, I test with boson and always encounter questions reference to so called Cisco Internetwork Design Manual, I have the CID book but it seems the reference is anothers. Anyone knows what it is? TIA Fanglo Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18420t=18420 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Multilink PPP [7:17367]
I have found another configuration for configuring two serial ports for multilink i think this configuration will work, just want an opinion from you guys. ip subnet-zero multilink virtual-template 1 ! interface Virtual-Template1 ip 192.168.0.1 255.255.255.252 ppp authentication chap ppp multilink ! interface Serial0 no ip address encapsulation ppp no fair-queue ppp multilink pulse-time 3 ! interface Serial1 no ip address encapsulation ppp no fair-queue ppp multilink pulse-time 3 ! interface Ethernet0 ip address 10.17.2.254 255.255.255.0 ! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18421t=17367 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Terminal Server/Digiboard [7:18422]
Good morning group. After many attempts (and subsequent failures) at trying to configure my xyplex terminal server, I've put it aside and looked at other alternatives. I didn't want to spend the $800 or so on a 2509-2511 or $350 on a cisco 500. I was wondering if anyone had ever used a digiboard to add 4 more com ports to a pc. I was looking at using such a beast in my home CCIE lab and thought you good folks might know of some caveats to doing so. Thanks for your time. Tim Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18422t=18422 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: URGENT:FOR Routing experts:Plz help!!! [7:18370]
Yes, you do have to love redistribution... I see a lot has been fired around on this question already, so if the following has already been tried, my apologies. It seems to me that the redistribution could be tweaked in the following ways: 1) When redistributing OSPF routes, ALWAYS add the subnets keyword, or else redistribution will only pick up the major network and not subnets of it. 2) OSPF summary-addresses only work WITHIN OSPF. This is NOT like the BGP aggregate-address command which allows you to summarize outbound to another AS. Summary-address only sends summaries to other interior OSPF neighbors. In other words, if you want to redistribute summaries into IGRP, you have to have the summary generated somewhere else and sent to OSPF neighbor ISDN2. Hope this gets things back on track. And if all else fails, track down a copy of Jeff Doyle's Routing TCP/IP vol 1. It covers all this type of stuff in exquisit and easily-digestible detail. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18423t=18370 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Which IOS's support DSL? [7:18034]
Use Cisco web site for info like this. Feel the Force. c2600-is56i-mz.121-5.YB2 This works Rob Thank you, Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+ Technical Mercenary Valor Telecom -Original Message- From: Matthew Wilkinson [mailto:[EMAIL PROTECTED]] Sent: Monday, September 03, 2001 10:08 PM To: [EMAIL PROTECTED] Subject: Re: Which IOS's support DSL? [7:18034] I have a 2600 witha DSL WIC and none of the newer IOS's I have install recognise the card. This is simply pluggd directly into the phone system, it is used in a home. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18424t=18034 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
2620 + NM-4T= WAS RE: Regarding cisco routers [7:18368]
I don't believe that the NM-4T= four port serial module will work in any 2600 series router. Folks here on the list have mentioned using two WIC-2T= with 2600s. Keep in mind that those modules require the SmartSerial cables. -Original Message- From: Ahmed Mamoor Amimi [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 12:47 AM To: [EMAIL PROTECTED] Subject: Re: Regarding cisco routers [7:18368] 2509 was of worth for the old CCIE lab where u need it but now this router is been replaced with a KNOB SWITCH to get in to each router ... like the printer switch box used to swtich printer b/w PC. and for the CCNA/CCNP u really dont need to have it.. this router is good but also expensive... why waste money on that u dont want in the lab, the only benefit left with this router is eight ASYNC ports used for DDR and stuff... but this u can do it from every router that have an AUX port as AUX is an ASYNC port too. I think u should have a router with have atleast 4 serial ports so u can make that router a frame-relay switch. and in my opinoin u should buy a 2620 with 4 port serial module... by this u can have that router act as a frame-relay switch as it will have 4 serial and also can be used for inter-vlan routing b/w ur switches That will be a complete lab for CCIE level except token-ring switching and ATM. enjoy -Mamoor CCNP/CNE/MCT/MCSE/A+/NETWORK+/CCIE(writen) wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I am considering purchasing a 2509 router because I need to telnet into my other four without beating up on my PC serial ports. I currently own 4 routers TWO 2501, ONE 2503, One 2514, also an isdn 804, catalyst 5000 and 1900EN switch. I was told the 2509 would be a perfect addition since I would be able to log in utiilizing one console port on my PC to eight on the 2509 router. Are there any other good uses of the 2509 other then consoling in...for instancedo I need to have it for my CCNA or CCNP?? also should I drop any of the other routers or do you think I should keep them...again these routers are for studying only. P.s. I forgot to mention I also have a isdn simulator...sorry for boasting..but I do need expert advice here and don't want to burn money on things I don't need. thank you Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18425t=18368 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BCRAN and cisco 700 configuration [7:18427]
Hi all Do you know if in the BCRAM program there is still the CIsco 700 configuation? Or has it been removed? I really HATE that box... :-) thanks _ Davide Ferrari | | .|||.|||. cisco Systems New Service Provider Systems Engineer tel +39- 039-6295.387 fax +39- 039-6295.299 [EMAIL PROTECTED] One vision, One destiny, One team J.C. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18427t=18427 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VoIP [7:18426]
Does anyone know around how many hours it takes to tie in Voice over IP (VoIP) on a 2600 series router over Frame Relay? Less than 50 users and 10 simultaneous lines connecting with a PBX? I bidded this out and received one bid and do not want to pay for excess hours. I appreciate your constructive responses and knowledge. Julius __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18426t=18426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: DSL / Cisco Switches [7:18267]
Thanks for the feedback! I think it helps the advice-giver as much as the person in need of advice to see the outcome. Jonathan Pierre-Alex wrote: Thanks Jonathan, the problem is solved. See below. Just a remark on one of your point: The successful ping-by-name does not prove you are pinging through the switch to the DSL modem to the Internet because the name could be resolved by name-cache or hosts file or even a DNS server on one of the other PCs plugged into your switch. 1) I checked for presence of a host file 2) I cleaned up the client cache (ipconfig /flushdns) 3) I made sure that all servers where pointing to DNS servers OUTSIDE of my LAN When pinging any of my servers from the Internet (using a dial-up account) I would get a response of 3000 ms or greater. So this gave me a hint that it was a peformance or packet loss of some sort. So I switched to a multiport repeater (hub) to rule out the possibility of a malfunction of the 2 switches. The rest of the troubleshooting is shown below: - Thanks to everyone for the suggestions. The mystery is solved. Here are my troubleshooting steps: 1) I got a 10 BaseT hub and I plugged the cable modem and all the computers in there. 2) I was not able to ping the default gateway. But I was able to ping any computers from any other computers. 3) I examined hub; one of the ports, port 3, was showing unusual Link activity. (The hub has 5 ports) I plugged in a network monitor and found out that the PC on port 3 was sending 45 broadcast/seconds! 4) I examined the capture and found that the broadcasts were arp requests to the default gateway 5) I then examined the arp cache of the PC and found the following: 63.162.86.1 00-00-00-00-00-00 invalid 6) I deleted the entry and created a static (permanent) arp entry for the default gateway 7) I did another network capture: this time the PC was sending TCP traffic out to random sites on the internet at a rate of 5,569 bytes per seconds 8) I went to Microsoft Website and searched their latest security bulletin looking for symptoms of virus infection 9)I did not have the symptoms of increased CPU activity but when I did a scan on my PC I found the file root.exe under d:\inetpub\wwwroot\ (This file belongs to the Code Red Virus) 10) I cleaned up and patched up the PC; everyone was then able to ping the default gateway. - What I learned: If I had moved to network capture analysis earlier in the process I could have saved myself a lot of work!!! What I still need to understand: how did the broadcast of the infected machine prevent other machines to ping the default gateway on the switch ? (please note that all the machines -- even the infected machine-- were able to ping each other while on the switch) -Original Message- From: Jonathan Hays [mailto:[EMAIL PROTECTED]] Sent: Monday, September 03, 2001 10:39 AM To: Pierre-Alex Subject: Re: DSL / Cisco Switches [7:18267] Pierre-Alex, Let's dig into the details of your problem. If you can plug your PC into the DSL modem's Ethernet port with a crossover cable and operate successfully you know that the PC and the DSL modem are not the problem. You also know that both the DSL's and the PC's ports are MDI ports. Why? Normally you use a straight-through cable from the PC NIC MDI port to a switch or hub's MDI-X port.. A crossover cable is used to connect MDI to MDI ports (2 PCs) or to connect MDI-X to MDI-X ports (2 switches). Next you say you connected your PC (and other PCs) into a switch with a straight-through cable and then you connected the switch to the DSL modem with another straight-through cable. Now you can ping by name but the ping times out. Are you getting a link light on the switch port connected to each PC and to the DSL modem? This is not a good troubleshooting technique at this point. The successful ping-by-name does not prove you are pinging through the switch to the DSL modem to the Internet because the name could be resolved by name-cache or hosts file or even a DNS server on one of the other PCs plugged into your switch. A better troubleshooting technique would be to stick with IP addresses. It would be best to ping to the IP address of the router on the other end of the DSL connect at the ISP. (Some other Internet address would work, providing the ISP hasn't blocked ICMP echo and echo-reply (ping) to the Internet.) Use traceroute or tracert (depending on the PC's OS) and you will see where the connection quits. Try isolating the problem to a box before you get too deep into your troubleshooting. Replace the switch with a simple hub and see if the hub works. If so, someone may have configured some VLANs on the switch. Take a look at the switch configuration. Or you may have a bad port on the switch. Or the UPLINK
RE: how to build a pix firewall out of a PC box. [7:18335]
I would also be interested. Who was the original poster of this message? -Patrick Raul F. Fernandez 09/03/01 06:52PM Mike, I am most definitely interested. PLease e-mail me the process if possible for building a PIX firewall. Thank you in advance, Raul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of mike johnson Sent: Monday, September 03, 2001 4:59 PM To: [EMAIL PROTECTED] Subject: how to build a pix firewall out of a PC box. [7:18335] Hi Everyone, For those who are interested in learning Cisco PIX but do NOT want to spend a lot of money on buying an expensive PIX Firewall, I think I can help you. I have instructions on how to build a PIX firewall by using a PC. In case you didn't know, PIX firewall is essentially a PC with multiple interfaces. I've successfully built several PIX firewall using my old PCs (i.e. pentium 200 MHz processor). Actually, the PIX1 series (obsolete I know) is a PC with Intel EtherExpress Interface cards. However, you must have an account with CCO in order the software and download the software. The rest of the instructions on how to build a PIX firewall using PC is very simple. Anyone interested in learning it, let me know. Mike __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18430t=18335 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: cisco internetwork design manual [7:18420]
Here's the Web version. In the past it was available as a hard copy manual. Internetwork Design Guide http://www.cisco.com/univercd/cc/td/doc/cisintwk/idg4/index.htm Also see Internetwork Troubleshooting Guide http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/index.htm The links are on the Top page of the Documentation section. -Original Message- From: Fanglo [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 9:51 AM To: [EMAIL PROTECTED] Subject: cisco internetwork design manual [7:18420] Dear ALL, I test with boson and always encounter questions reference to so called Cisco Internetwork Design Manual, I have the CID book but it seems the reference is anothers. Anyone knows what it is? TIA Fanglo Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18429t=18420 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
# of CCIEs by Company [7:18432]
Is there a place I can find out # of CCIEs by company? J. Li __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18432t=18432 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
can not download ios from console [7:18434]
xmodem What? xmodem -y What? xmodem c2500-js-l.121-10.bin What? xmodem c2500-js-l.121-10 What? xmodem -y c2500-js-mz_120-14 What? xmodem -y c2500-js-mz_120-14 What? Wha What? 2500series, why? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18434t=18434 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Please Advice:Trunking problem [7:18170]
I looked at all the suggestions, but the common practice I followed is while setting up a new GE or FE trunk for ISL/dot1q, you have to manually clear the vlans from the trunk and add manually the one you want to select or the same range, after that you should not have that error message, the command(s): clear trunk 3/1 2-29,32-1005 set trunk 3/1 on dot1q 1,30-31,1025-4094 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18433t=18170 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Hi FR champions :) [7:18387]
Reboot the router Rob H. NP, DP, blah,blah,blah. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18435t=18387 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Used Cisco equipment question [7:18436]
Hi, I'm thinking about purchasing (2) used 6509s. Would I be able to add these units to my existing cisco support contract or would I need to take the third party route? Thanks In Advance, Dave Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18436t=18436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VoIP [7:18426]
Julius here's a link to a site with an Erlang calculator and some other calc's, I've never used it myself but it's a common method for drawing up requirements for your comms www.erlang.com/calculator cheers Pat Julius Bingham wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Does anyone know around how many hours it takes to tie in Voice over IP (VoIP) on a 2600 series router over Frame Relay? Less than 50 users and 10 simultaneous lines connecting with a PBX? I bidded this out and received one bid and do not want to pay for excess hours. I appreciate your constructive responses and knowledge. Julius __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18438t=18426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Another CCNP is born [7:18392]
Congrad to you!!!Phantom wrote: Well after 4 months of hard work and late nights I am finally a CCNP. I just passed the CIT exam with a score of 965. The exam was not very difficult. If you studied hard for the other exams this one will be a breeze. Only new stuff that wasn't in the other 3 exams is some apple and IPX stuff. the rest was in the other exams. If you study the Cisco press Cisco CCNP Support Exam Certification Guide you will be 100 OK. I didn't get anything in the exam that wasn't covered in this book. The book is very accurate and to the point. Probably the best CCNP study guide out there. The order I did the exams in is as follows Switching 945 Routing 954 BCRAN 954 CIT 965 After switching and routing the other 2 are rather easy. Just study the Cisco press guides and use the cram sessions from brainbuzz. The boson exams are pretty good, especially for switching and CIT. also the edge tests that come with the Sybex books are a big help. Sybex study guide has a lot of information and will also be sufficient to pass the exams. But you don't need both Cisco and sybex, only one will do and if I had to choose I would choose the Cisco press books Now on to CCIE Written. I will apreciate any CCIE help you may have [demime removed a uuencoded section named smile.gif which was 11 lines] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18437t=18392 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how to build a pix firewall out of a PC box. [7:18335]
I would be interested in building a PIX firewall. Vini -Original Message- From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 11:44 AM To: [EMAIL PROTECTED] Subject: RE: how to build a pix firewall out of a PC box. [7:18335] I would also be interested. Who was the original poster of this message? -Patrick Raul F. Fernandez 09/03/01 06:52PM Mike, I am most definitely interested. PLease e-mail me the process if possible for building a PIX firewall. Thank you in advance, Raul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of mike johnson Sent: Monday, September 03, 2001 4:59 PM To: [EMAIL PROTECTED] Subject: how to build a pix firewall out of a PC box. [7:18335] Hi Everyone, For those who are interested in learning Cisco PIX but do NOT want to spend a lot of money on buying an expensive PIX Firewall, I think I can help you. I have instructions on how to build a PIX firewall by using a PC. In case you didn't know, PIX firewall is essentially a PC with multiple interfaces. I've successfully built several PIX firewall using my old PCs (i.e. pentium 200 MHz processor). Actually, the PIX1 series (obsolete I know) is a PC with Intel EtherExpress Interface cards. However, you must have an account with CCO in order the software and download the software. The rest of the instructions on how to build a PIX firewall using PC is very simple. Anyone interested in learning it, let me know. Mike __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18440t=18335 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: can not download ios from console [7:18434]
The 2500 series does not have xmodem capability. You need to boot to the config helper image stored on boot roms and issue the usual tftp commands from there. HTH, John xie rootstock 9/4/01 9:55:36 AM xmodem What? xmodem -y What? xmodem c2500-js-l.121-10.bin What? xmodem c2500-js-l.121-10 What? xmodem -y c2500-js-mz_120-14 What? xmodem -y c2500-js-mz_120-14 What? Wha What? 2500series, why? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18441t=18434 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Vlans and trunking [7:18442]
I'm familiar with the concept off using vlan trunks to send vlan information to a connected switch, however I've been working on a new site and have discovered that they use a different approach. I was surprised to find that they just plug in the port off one switch straight into the next switch with a crossover and off they go. This works but could someone point out the pitfalls off such an approach cheers Pat Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18442t=18442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Terminal Server/Digiboard [7:18422]
I and my team tried Xyplex Digiboard as alternatives for some very expensive pieces of kit from Compaq Cisco in the mobil;e telecoms arena for IVR, TAPI or other voice to data applications. After a lot of painful experiences with both our conclusion was to order a skip for the kit. Its all about time money spend the money on good kit and just accept that the service you get is tolerable. Cheap alternatives waste more time effort in trying to get them to work and then as with both the above you find they do not quiote do what you were told they would do and the reseller and manufactuirer just don't give a stuff about you. Its a case of false economy. Ouellette, Tim wrote: Good morning group. After many attempts (and subsequent failures) at trying to configure my xyplex terminal server, I've put it aside and looked at other alternatives. I didn't want to spend the $800 or so on a 2509-2511 or $350 on a cisco 500. I was wondering if anyone had ever used a digiboard to add 4 more com ports to a pc. I was looking at using such a beast in my home CCIE lab and thought you good folks might know of some caveats to doing so. Thanks for your time. Tim Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18443t=18422 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: URGENT:FOR Routing experts:Plz help!!! [7:18370]
- Original Message - From: Wes To: Sent: Tuesday, September 04, 2001 8:00 AM Subject: RE: URGENT:FOR Routing experts:Plz help!!! [7:18370] Yes, you do have to love redistribution... I see a lot has been fired around on this question already, so if the following has already been tried, my apologies. It seems to me that the redistribution could be tweaked in the following ways: 1) When redistributing OSPF routes, ALWAYS add the subnets keyword, or else redistribution will only pick up the major network and not subnets of it. Restate - When redistributing other routes into OSPF 2) OSPF summary-addresses only work WITHIN OSPF. This is NOT like the BGP aggregate-address command which allows you to summarize outbound to another AS. Summary-address only sends summaries to other interior OSPF neighbors. In other words, if you want to redistribute summaries into IGRP, you have to have the summary generated somewhere else and sent to OSPF neighbor ISDN2. Hope this gets things back on track. And if all else fails, track down a copy of Jeff Doyle's Routing TCP/IP vol 1. It covers all this type of stuff in exquisit and easily-digestible detail. _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18445t=18370 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Terminal Server/Digiboard [7:18422]
Forgot to add that support for Xyplex Digiboards is absolutely rubbish. 4 to 5 days even witha support contract for kit replacement, no software support at all you get the picture. Oh and just in case you were wandering I do not have any allegiance to network kit manufacturers. Ouellette, Tim wrote: Good morning group. After many attempts (and subsequent failures) at trying to configure my xyplex terminal server, I've put it aside and looked at other alternatives. I didn't want to spend the $800 or so on a 2509-2511 or $350 on a cisco 500. I was wondering if anyone had ever used a digiboard to add 4 more com ports to a pc. I was looking at using such a beast in my home CCIE lab and thought you good folks might know of some caveats to doing so. Thanks for your time. Tim Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18446t=18422 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Internet usage tool for home pc. [7:18439]
Hi all, Just wanted to know, if there are any tool that I can use for monitoring the Internet bandwidth while the connection is there. The option I have is ATT Cablemodem and I need to know how much is the bandwidth at any given time. Thanks rajesh [GroupStudy.com removed an attachment of type text/x-vcard which had a name of pikumar.vcf] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18439t=18439 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Used Cisco equipment question [7:18436]
Never had a problem adding kit from whatever source to my support contracts, usually takes one of the following: a. phone Cisco account manager b. email Cisco account manager c. Go on to cco enter existing support contract and update it. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18447t=18436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: can not download ios from console [7:18434]
Maybe I am missing something here but what piece of kit, some by the way do not have xmodem capabilities Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18448t=18434 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
How to upgrade ios on 2502 [7:18449]
Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18449t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
H323/VoIP info [7:18451]
For those of you with an interest in VoIP and H323, the PIX 525 with version 5.3(2) does work with static NAT (and no NAT). cheers Pat Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18451t=18451 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
U Inteface [7:18452]
If my ISDN BRI has a U Interface built in, can I just plug my ISDN circuit in and start using it or do I have to get a NT1 adapter. _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18452t=18452 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to upgrade ios on 2502 [7:18449]
Have you consider using the serial port ? ;-) ietobe wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18453t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Weird 3920 Catalyst Switch [7:18454]
I'm using a Catalyst 3920 and some of my Routers has error message %TR-3-OPENFAIL: Unit 0, open failed: lobe media test, function failure The same routers tests fine on a MAU, and the same cables and switch test fine on another router... This particular routers just doesn't work with the 3920... Anybody encounter this before ? Is this a IOS issue... shouldn't be since I got the 12.05T on both routers... the one that failed is a 2612 and 2515 and the one working fine are 2513 and 2504. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18454t=18454 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to upgrade ios on 2502 [7:18449]
How to do it? Tks ietobe CCNP CCDP Jason wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Have you consider using the serial port ? ;-) ietobe wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18455t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VoIP [7:18426]
depends on whos doing it. I can do that in like, a day or two. for most that could be a week long project. i speak from experience. -Peter -Original Message- From: Julius Bingham [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 11:26 AM To: [EMAIL PROTECTED] Subject: VoIP [7:18426] Does anyone know around how many hours it takes to tie in Voice over IP (VoIP) on a 2600 series router over Frame Relay? Less than 50 users and 10 simultaneous lines connecting with a PBX? I bidded this out and received one bid and do not want to pay for excess hours. I appreciate your constructive responses and knowledge. Julius __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18456t=18426 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: H323/VoIP info [7:18451]
-Original Message- From: Peter Slow Sent: Tuesday, September 04, 2001 1:46 PM To: 'Patrick Donlon' Subject: RE: H323/VoIP info [7:18451] but what about the RTP streams? the pix has always been able to do h323 filtering / fixup protocol for the h323 stuff. i've never gotten voip to work thru a PIX with out leaving an enormous hole for a static NAT translation or for UDP port mapping w/tcp 17191720 -Peter -Original Message- From: Patrick Donlon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 1:28 PM To: [EMAIL PROTECTED] Subject: H323/VoIP info [7:18451] For those of you with an interest in VoIP and H323, the PIX 525 with version 5.3(2) does work with static NAT (and no NAT). cheers Pat Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18458t=18451 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: How to upgrade ios on 2502 [7:18449]
load (tiny/featureless) ios via tftp, so u can erase flash, or, set the thing on fire. -Original Message- From: ietobe [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 1:07 PM To: [EMAIL PROTECTED] Subject: How to upgrade ios on 2502 [7:18449] Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18459t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: U Inteface [7:18452]
NT1 is necessary only if you have an S/T interface. U interface has a built-in NT1. You're good to go. -Original Message- From: Tom Richs [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 12:34 PM To: [EMAIL PROTECTED] Subject: U Inteface [7:18452] If my ISDN BRI has a U Interface built in, can I just plug my ISDN circuit in and start using it or do I have to get a NT1 adapter. _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18460t=18452 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to upgrade ios on 2502 [7:18449]
I think the original responder assumed that you had a second router that you could use. Theoretically, the only way to upgrade a single router like this would be by removing the existing flash memory SIMM and replacing it with another flash memory SIMM that had the IOS version you need. Perhaps a friend may help? At the least, you'll need a second router (and connect them back-to-back with the serial ports) or a token ring hub / token ring NIC in your workstation. Paul Lalonde ietobe wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... How to do it? Tks ietobe CCNP CCDP Jason wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Have you consider using the serial port ? ;-) ietobe wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18457t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
AS5300 [7:18461]
Does anyone know why on my AS5300 I have to reset the AS5300 maybe every 4-6 weeks for it to be able to dialout. After the reset it will work fine until noone can dialout at which time I just need to cycle to get it to work. It's as if there's some sort of timer. _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18461t=18461 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
FECN/BECN below a CIR [7:18444]
Does anyone know if a Frame Relay provider will send FECN/BECN messages even if the CIR is not oversubscribed? Is looking at the FECN/BECN traffic a good determination of CIR oversubscription? Paul Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18444t=18444 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Vlans and trunking [7:18442]
Yes with this approach they are running everything on the default vlan, and things will get messy later on. For small networks you can get away with this, but you lose all the advantages of carving up your broadcast domains with VLANs. Kell -Original Message- From: Patrick Donlon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 9:34 AM To: [EMAIL PROTECTED] Subject: Vlans and trunking [7:18442] I'm familiar with the concept off using vlan trunks to send vlan information to a connected switch, however I've been working on a new site and have discovered that they use a different approach. I was surprised to find that they just plug in the port off one switch straight into the next switch with a crossover and off they go. This works but could someone point out the pitfalls off such an approach cheers Pat Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18450t=18442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how to build a pix firewall out of a PC box. [7:18335]
I as well! -Original Message- From: VNithianandam [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 12:23 PM To: [EMAIL PROTECTED] Subject: RE: how to build a pix firewall out of a PC box. [7:18335] I would be interested in building a PIX firewall. Vini -Original Message- From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 11:44 AM To: [EMAIL PROTECTED] Subject: RE: how to build a pix firewall out of a PC box. [7:18335] I would also be interested. Who was the original poster of this message? -Patrick Raul F. Fernandez 09/03/01 06:52PM Mike, I am most definitely interested. PLease e-mail me the process if possible for building a PIX firewall. Thank you in advance, Raul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of mike johnson Sent: Monday, September 03, 2001 4:59 PM To: [EMAIL PROTECTED] Subject: how to build a pix firewall out of a PC box. [7:18335] Hi Everyone, For those who are interested in learning Cisco PIX but do NOT want to spend a lot of money on buying an expensive PIX Firewall, I think I can help you. I have instructions on how to build a PIX firewall by using a PC. In case you didn't know, PIX firewall is essentially a PC with multiple interfaces. I've successfully built several PIX firewall using my old PCs (i.e. pentium 200 MHz processor). Actually, the PIX1 series (obsolete I know) is a PC with Intel EtherExpress Interface cards. However, you must have an account with CCO in order the software and download the software. The rest of the instructions on how to build a PIX firewall using PC is very simple. Anyone interested in learning it, let me know. Mike __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com This electronic mail transmission contains confidential information intended only for the person(s) named. Any use, distribution, copying, or disclosure by any other person is strictly prohibited. If you received this transmission in error, please notify the sender by replying to e-mail and destroy message. Opinions, conclusions, and other information in this message that do not relate to the official business of MARAKON ASSOCIATES shall be understood to be neither given nor endorsed by the company. When addressed to MARAKON clients, any information contained in this e-mailis subject to the terms and conditions in the governing client contract. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18463t=18335 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to upgrade ios on 2502 [7:18449]
I've already replied once and it appears my advice was not taken. :-) Let me be more specific! The 2500 series has a bootable image stored on boot ROMs. Let the router boot normally. If there is no image present it should boot to the config helper image stored on the boot ROMs. From there, using standard IOS commands, specify your default gateway and copy the image to flash using tftp. If you have a tftp server running on a laptop or PC, connect the router to the PC with a crossover cable and get the image from there. As long as you have network connectivity, just define your default gateway and copy the image as usual. If you continue to have problems, please let me know and I'd be glad to help. HTH, John Paul Lalonde 9/4/01 11:58:56 AM I think the original responder assumed that you had a second router that you could use. Theoretically, the only way to upgrade a single router like this would be by removing the existing flash memory SIMM and replacing it with another flash memory SIMM that had the IOS version you need. Perhaps a friend may help? At the least, you'll need a second router (and connect them back-to-back with the serial ports) or a token ring hub / token ring NIC in your workstation. Paul Lalonde ietobe wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... How to do it? Tks ietobe CCNP CCDP Jason wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Have you consider using the serial port ? ;-) ietobe wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18462t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Regarding cisco routers [7:18368]
I was going to get a 2509, but opted for the older 500-CS series Com Server. I have the 516, which has 16 Console ports and operates almost identically to the 2509 Term Server. IMHO, unless you want extra Serial ports for your lab, the 500 is the less expensive alternative. **Incidentally, I won't give specific numbers, but I paid less than half of what a used 2509 would cost on ebay. HTH, Rob H. NP, DP, blah,blah,blah.. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18431t=18368 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Addendum/correction RE: How to upgrade ios on 2502 [7:18449]
Okay, in another response I suggested connecting a crossover cable to a PC and using tftp to get the image. well, I re-read the original post and realized he has a T/R port. Whoops. Sorry, just ignore me today! I need more coffee, as usual. Thanks, John Peter Slow 9/4/01 12:00:27 PM load (tiny/featureless) ios via tftp, so u can erase flash, or, set the thing on fire. -Original Message- From: ietobe [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 04, 2001 1:07 PM To: [EMAIL PROTECTED] Subject: How to upgrade ios on 2502 [7:18449] Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18464t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IP unnumbered [7:18250]
Hi Instead of using a numbered link you can use ip unnumbered to connect sites. Example: Router A: interface fastethernet 0 ip address 10.100.2.1 255.255.255.0 interface serial 0 ip unnumbered fasthethernet 0 Router B: interface fastethernet 0 ip address 10.100.31 255.255.255.0 interface serial 0 ip unnumbered fasthethernet 0 now instead of assigning a ip address to each serial port you can use the ip unnumbered command Brett Hairbottle Network Administrator CCNA - Original Message - From: sami natour To: Sent: Sunday, September 02, 2001 10:33 PM Subject: IP unnumbered [7:18250] Hello everybody, I know how to cinfigure IP unumbered but I do not know any practical scenario that I make use of this feature.Any body has specific scanrios where I can use ip unnumbered . Regards , sami __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18465t=18250 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Token Ring Frame size [7:18466]
I need to change frame size on of my Token Ring subnets. If I change the Token Ring frame size on the router and it will be different (larger) than the frame size that is configured on a work station how is it going to affect the work station? And if I change the frame size on the workstation first would that crash the router? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18466t=18466 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to upgrade ios on 2502 [7:18449]
I seem to remember a similiar situation and what we did was connect another 2500 to the 2502 via the serial port, set the 2500 up as a tftp server and downloaded the IOS to the 2502. Good luck Dave ietobe wrote: Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18467t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Vlans and trunking [7:18442]
Kell is right about things being a mess later on. The default vlan is VLAN 1, which carries the protocol control traffic for a switched network. Things like STP BPDU's, DTP (ISL and dot1q), VTP, PAgP, etc... In addition, if the management interfaces are set to VLAN 1 (the default), then administrative traffic like SNMP and telnet will use it too. Keep in mind that VLAN 1 goes to ALL switches regardless of trunking and VLAN paring settings. You coiuld set up trunking so that every vlan EXCEPT VLAN 1 gets trunked and you'll still get VLAN 1 trunked. Nature of the beast. You can pare it out in the config, but the switch will still do it behind your back. Because of this,its a good idea not to have users on VLAN 1 in any network. As an example, if there's a broadcast storm it can take down the network by preventing the protocol traffic from reaching its destination before the timeouts or you could be locked out of the network unless you use a console port. Overall, its a little better than a hub network due to the differences in collision domain structure, but you still have the issue with the broadcast domain. I found that it tends to be a royal pain in the neck when theres a problem. Even if all you do is set it up so that everyone is on the same vlan, as long as its something besides VLAN 1 your network will be a little more manageable. HTH, Karen *** REPLY SEPARATOR *** On 9/4/2001 at 12:33 PM Patrick Donlon wrote: I'm familiar with the concept off using vlan trunks to send vlan information to a connected switch, however I've been working on a new site and have discovered that they use a different approach. I was surprised to find that they just plug in the port off one switch straight into the next switch with a crossover and off they go. This works but could someone point out the pitfalls off such an approach cheers Pat Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18469t=18442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: U Inteface [7:18452]
The U interface contains a built in NT1 and if you have an S interface an external NT-1 would be needed. Dave Tom Richs wrote: If my ISDN BRI has a U Interface built in, can I just plug my ISDN circuit in and start using it or do I have to get a NT1 adapter. _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18468t=18452 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: FECN/BECN below a CIR [7:18444]
If you're getting FECN/BECN traffic then its experiencing congestion. Congestion on the FR network prior to CIR being met is indeed a good sign of oversubscription. If its only occasional then it may simply have been a spike on the switch. However, if you're getting it fairly regularly, then you need to talk to your provider. There's NO reason to set FECN/BECN when there isn't congestion. Ask them how they determine subscription load. Some providers (such as Sprint last I heard) use the CIR to determine load on a switch, not the actual traffic. If they have alot of customers with 0 CIR then the switch can easily get oversubscribed to the point that the provider can no longer meet the CIR of their customers. HTH, Karen *** REPLY SEPARATOR *** On 9/4/2001 at 2:19 PM Paul Borghese wrote: Does anyone know if a Frame Relay provider will send FECN/BECN messages even if the CIR is not oversubscribed? Is looking at the FECN/BECN traffic a good determination of CIR oversubscription? Paul Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18470t=18444 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PIX - NAT 0 problems this weekend [7:18471]
Last week I talked with some TAC engineers about running NAT 0 on a PIX. This weekend I upgraded a customers site by placing Web servers in a DMZ. For various reasons, I did not want to privately address the web servers and use static translations. Some TAC engineers said there are ongoing discussions about whether to use NAT 0 or Static translations to the real addresses. During our cutover I learned what they were talking about...; This involved a PIX 515 running 5.3(1). 10:15pm - nat (DMZ) 0 0 0. I threw in the command, moved to my PC on the outside segment, typed in http://X.X.X.10. Viola!! Up came my web page. Done, I'm ready to head for the hotel!!! But first, the client ordered take out (Free Dinner!!) and it was time to eat. Had some pretty good Vietnamese food while discussing how smooth everything went... 10:45pm - After dinner. From my PC I try to hit the web page. DDOOOHH!!! No web page!!! Try some pings (Access-list allowed ping for the time-being), nothing. A show xlate reveals there is no xlating going on :~ Piece of #$@. Can I get some water, dinner was hot!! 11:15pm - Using my keen sense of recall, I try the TAC suggestion of static (DMZ,outside) X.X.X.0 X.X.X.0 255.255.255.128. From outside try the web page, viola!!! works. 11:45pm - Start packing the bag, ask the customer to try. DDOOO!!! No web page. Walk from customer desk to Computer room, shut door, let explicatives fly (for 5 minutes) 12:01am - Its tomorrow gggrrr!! Call TAC, ticktickticktick. 12:50am - Finally hear from TAC. 3 day weekend, everyone is doing upgrades tonight. Oohhh the glamourous life of a consultant!!! TAC says config is right, do some dinking around, it works!!! 1:45am - Pack the bags, ask the customer to try..(you guessed it) DDD!!! stopped working!!!@#$@@#! Enough of this @#$%. http://www.cisco.com/kobayashi/sw-center/sw-ciscosecure.shtml 2:00am - Start upgrading..Since the customer has so wisely chosen the failover bundle we get to upgrade 2X. 2:30am - PIX's are rebooted after upgrade, test the web pages. Excellent! Pack the bags, ask customer to test...Everything works..Time to go home.. Moral of the story. NAT when you can, but if you can't, static (DMZ,outside) X.X.X.0 X.X.X.0 255.255.255.128 is better than nat (DMZ) 0 0 0 and PIX code 6.0(1) is much better than 5.3(1) ps. TAC support was excellent. I don't intend for this to be derogatory against TAC. ^-^-^-^-^-^-^-^-^-^-^ Bill Carter CCIE 5022 ^-^-^-^-^-^-^-^-^-^-^ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18471t=18471 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Token Ring Frame size [7:18466]
At 02:40 PM 9/4/01, khramov wrote: I need to change frame size on of my Token Ring subnets. If I change the Token Ring frame size on the router and it will be different (larger) than the frame size that is configured on a work station how is it going to affect the work station? And if I change the frame size on the workstation first would that crash the router? Thanks It shouldn't be a serious problem either way you do it. Users may have to re-establish connections, however. Are the routers truly routers or are they source-routing bridges? With source-route bridging, each bridge checks the largest frame field and decrements it if the bridge is configured for something smaller than is in the frame. This happens during route discovery and session establishment. Changing one of the bridges after sessions are established could cause problems. If the routers are truly routers and are routing IP, there's a similar situation. IP hosts can use IP maximum transmission unit (MTU) discovery to determine the largest possible frame size to use. This happens during session establishment. Changing the MTU on one of the routers after sessions are established could cause problems. But routers shouldn't crash and there shouldn't be any other dire consequences. Also, it sounds like you are increasing MTU which is less worrisome than decreasing MTU. Do you do any translational bridging between Ethernet and Token Ring segments? Translational bridging can be difficult to get working, especially if you use Token Ring frame sizes that are larger than Ethernet allows (1500 bytes). If you use routing instead of bridging, there will be fewer problems. If your routers are now going to need to fragment and reassemble IP packets, in order to go between Token Ring which supports larger frames and Ethernet which supports 1500 byte frames, keep in mind that the routers will be slower. This is additional work that they don't normally have to do. I think it forces them to use process switching instead of the faster switching methods. Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18472t=18466 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCNP Study Material [7:18473]
Hi, I'm going to start work on the CCNP cert soon as was wondering if anyone has an recommendations for study material. Is the Sybex CCNP complete virtual trainer any good (http://www.compman.co.uk/cgi-win/browse.exe?ref=462301 source=057)? Which are best, sybex or cisco press? I used the cisco press book for the CCNA and was pretty impressed. I also have 2501, 2516, 803 routers, are these enough to pass? Thanks Stu Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18473t=18473 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP Study Material [7:18473]
Well, I do not have exp with the virtual trainer, but I have seen both Sybex and Cisco Press books. Cisco Press is by far the better book with more in depth info. Problem might be that it is not as easy to read as sybex. Sybex is easy to read but is not a complete prep for the exams, at least in my opinion. Sybex is almost like the exam cram book. My suggestion is if you can get both, use the cisco press as the major learning tool and then use the sybex as a review book 1 week before the exam. Paul Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18474t=18473 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
