VPN over a 128k leased line - Performance issue [7:21645]
Hi all, Has one of you already experienced performance issue on a VPN, details below: We have a VPN over a 128k leased line terminated by 2 Cisco 2600. Connectivity is ok, but we have a lot of delay over the vpn. When I do a traceroute across the provider to a device on the other side, everything is ok, but when I do it across the VPN, we have a lot of delay (up to 2000ms). I checked the config and everything seems to be ok. Is that a router, config or protocol issue ? Thanks a lot in advance for your tips. chris Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21645&t=21645 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: EIGRP problem [7:21510]
Hi there You can also try "sh ip eigrp events", this is a hidden command. Dump the output to a text file. Next you will need to use the output interpreter at CCO https://www.cisco.com/support/OutputInterpreter/parser.html (you will need a CCO login for this) and it will decode the events for you. I find this better than doing a debug cause there are 500 lines of very useful events that the router stores for you. You can run a script or carry out this command manually at the time that you think that EIGRP is going to recalculate. Most of the output from the command is easy to read so if you don't have a CCO login you should be able to figure it out. Good luck Shailen CCIE candidate, CCNP, MCP, A+ wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > In a message dated 9/30/01 6:34:30 PM Central Daylight Time, > [EMAIL PROTECTED] writes: > > In a message dated 09/30/2001 12:49:50 PM Central Daylight Time, > > [EMAIL PROTECTED] writes: > > > > Date: 09/30/2001 12:49:50 PM Central Daylight Time > > From: [EMAIL PROTECTED] (Jim Bond) > > Sender:[EMAIL PROTECTED] > > Reply-to: [EMAIL PROTECTED] (Jim Bond) > > To:[EMAIL PROTECTED] > > > > Hello, > > > > We have about 20 core routers running EIGRP. For some > > reason, EIGRP recaculated ALL routes every 10-15 > > hours. This seems odd because I think EIGRP will only > > caculate effected routes, right? I turned on "debug ip > > eigrp notification" on some routers but didn't find > > anything wrong. How do I find the problem? > > > > Thanks in advance. > > > > Jim > > > > Jim, > > Try: show ip eigrp database all > > to see if you have Stuck-In-Active routes. > > HTH, > > Rob H.NP, DP, blah,blah,blah Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21646&t=21510 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Help with huge amount of Input/Frame and some CRC errors [7:21647]
Hi All, I have a 2MB leased line (UK Megastream) line between two sites. One site has a 3640, the other a 2621. The line is presented as G703 both ends. I have PDA DC2020 G703 to X21 converters at both ends. so connection is: SITE A Cisco 3640 (WIC-1T) PDA DC2020 X21 to G703 Converter Megastream box (CSU/DSU) Carriers network Megastream Box (CSU/DSU) PDA DC2020 X21 to G703 Converter Cisco 2621 (WIC-1T) When I do local and remote loopback tests, using extended pings, there are no errors. This is true from both ends. As soon as I take the line off loopback, the activity light on the 2621 goes crazy, and I get about 500 input errors per second on one end, and about 300 or so per second on the other end. Keepalives are incrementing, I have tried invert txclock, although probably didn't need to. Here is a sh int from each end, ip addresses changed: 2621 end: >sh int s0/0 Serial0/0 is up, line protocol is up Hardware is PowerQUICC Serial Description: Internet address is 10.10.10.2/30 MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, reliability 157/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input 00:00:08, output 00:00:00, output hang never Last clearing of "show interface" counters 17:21:37 Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 7055 packets input, 433584 bytes, 0 no buffer Received 7055 broadcasts, 0 runts, 0 giants, 0 throttles 30613034 input errors, 4438685 CRC, 26174345 frame, 0 overrun, 0 ignored, 4 abort 8850 packets output, 838333 bytes, 0 underruns 0 output errors, 0 collisions, 3 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up 3640 end: >sh int s0/0 Serial0/0 is up, line protocol is up Hardware is QUICC Serial Description: Internet address is 10.10.10.1/30 MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, rely 161/255, load 1/255 Encapsulation HDLC, loopback not set, keepalive set (10 sec) Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters 17:22:15 Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 1 packets/sec 5 minute output rate 0 bits/sec, 1 packets/sec 8485 packets input, 778380 bytes, 0 no buffer Received 7961 broadcasts, 0 runts, 0 giants, 0 throttles 18292244 input errors, 5169 CRC, 18287064 frame, 0 overrun, 0 ignored, 11 a bort 7324 packets output, 462192 bytes, 0 underruns 0 output errors, 0 collisions, 10 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Carrier (NTL) say that line is fine. Remote loopback test sort of point to this as being true (to my limited knowledge). Any assistance greatly appreciated. Cheers, Symon Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21647&t=21647 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
test [7:21648]
test Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21648&t=21648 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help with huge amount of Input/Frame and some CRC errors [7:21649]
in your config what is your LMI.(autosence) have you set the encapsulation command on the int`s see this link http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/wan_c/wcdfrely.htm#xtocid221854 input errors usually mean that there is some kind of encap error...(int doesn`t understand the packet/frame it`s recieving) CU steve >From: "Symon Thurlow" >Reply-To: "Symon Thurlow" >To: [EMAIL PROTECTED] >Subject: Help with huge amount of Input/Frame and some CRC errors [7:21647] >Date: Tue, 2 Oct 2001 04:47:46 -0400 > >Hi All, > >I have a 2MB leased line (UK Megastream) line between two sites. > >One site has a 3640, the other a 2621. > >The line is presented as G703 both ends. > >I have PDA DC2020 G703 to X21 converters at both ends. > >so connection is: > >SITE A >Cisco 3640 (WIC-1T) >PDA DC2020 X21 to G703 Converter >Megastream box (CSU/DSU) >Carriers network >Megastream Box (CSU/DSU) >PDA DC2020 X21 to G703 Converter >Cisco 2621 (WIC-1T) > >When I do local and remote loopback tests, using extended pings, there >are no errors. This is true from both ends. > >As soon as I take the line off loopback, the activity light on the >2621 goes crazy, and I get about 500 input errors per second on one >end, and about 300 or so per second on the other end. > >Keepalives are incrementing, I have tried invert txclock, although >probably didn't need to. > >Here is a sh int from each end, ip addresses changed: > >2621 end: > > >sh int s0/0 >Serial0/0 is up, line protocol is up > Hardware is PowerQUICC Serial > Description: > Internet address is 10.10.10.2/30 > MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, > reliability 157/255, txload 1/255, rxload 1/255 > Encapsulation HDLC, loopback not set > Keepalive set (10 sec) > Last input 00:00:08, output 00:00:00, output hang never > Last clearing of "show interface" counters 17:21:37 > Queueing strategy: fifo > Output queue 0/40, 0 drops; input queue 0/75, 0 drops > 5 minute input rate 0 bits/sec, 0 packets/sec > 5 minute output rate 0 bits/sec, 0 packets/sec > 7055 packets input, 433584 bytes, 0 no buffer > Received 7055 broadcasts, 0 runts, 0 giants, 0 throttles > 30613034 input errors, 4438685 CRC, 26174345 frame, 0 overrun, 0 >ignored, 4 > abort > 8850 packets output, 838333 bytes, 0 underruns > 0 output errors, 0 collisions, 3 interface resets > 0 output buffer failures, 0 output buffers swapped out > 0 carrier transitions > DCD=up DSR=up DTR=up RTS=up CTS=up > >3640 end: > > >sh int s0/0 >Serial0/0 is up, line protocol is up > Hardware is QUICC Serial > Description: > Internet address is 10.10.10.1/30 > MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, rely 161/255, load >1/255 > Encapsulation HDLC, loopback not set, keepalive set (10 sec) > Last input 00:00:00, output 00:00:00, output hang never > Last clearing of "show interface" counters 17:22:15 > Queueing strategy: fifo > Output queue 0/40, 0 drops; input queue 0/75, 0 drops > 5 minute input rate 0 bits/sec, 1 packets/sec > 5 minute output rate 0 bits/sec, 1 packets/sec > 8485 packets input, 778380 bytes, 0 no buffer > Received 7961 broadcasts, 0 runts, 0 giants, 0 throttles > 18292244 input errors, 5169 CRC, 18287064 frame, 0 overrun, 0 >ignored, 11 a >bort > 7324 packets output, 462192 bytes, 0 underruns > 0 output errors, 0 collisions, 10 interface resets > 0 output buffer failures, 0 output buffers swapped out > 0 carrier transitions > DCD=up DSR=up DTR=up RTS=up CTS=up > >Carrier (NTL) say that line is fine. Remote loopback test sort of >point to this as being true (to my limited knowledge). > >Any assistance greatly appreciated. > >Cheers, > >Symon _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21649&t=21649 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
translation/transparent bridging between tokenring and ethernet [7:21651]
Greetings What I am trying to achive, transparent bridging/translation bridging between token ring and ethernet. I have one host on the To0/0: 10.10.10.1 netmask 255.255.255.0 and another one on the ethernet segment: 10.10.10.2 netmask 255.255.255.0 The config below does not work, and ideas? no ip routing ! interface Ethernet0/0 no ip address bridge-group 1 ! interface TokenRing0/0 no ip address ring-speed 16 bridge-group 1 ! bridge 1 protocol ieee --erlend Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21651&t=21651 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help me to configure async callback in 2511 router [7:21652]
]f you are really sure about the client side configuration then the problem is your IOS. I had a similar problem like yours while I was at customer site and fixed it with upgrading the IOS to 12.09. The previous IOS was 11.x version and It has the commands to apply callback too but they didn't work. Best regards, Cisco Breaker ""manhho nguyen"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I want to configure asyn callback in router 2511. > the configuration is below, but when receive callback number from client, > the router cannot initiate callback function. > > > version 12.0 > service password-encryption > ! > hostname Router > ! > boot system flash > enable secret 5 $1$XpI9$5zIQu14lpRMz53STOwOH > y1 > ! > username back callback-dialstring "" callback-line 1 password ok > ip subnet-zero > ip domain-name hnpt.com > ip name-server 10.10.24.4 > chat-script resetModem "" "atz" OK "at&s0=1" OK > chat-script startModem "" "atz" OK "at&s0=1" OK > chat-script callback ABORT ERROR ABORT BUSY "" "AT" OK "ATDT \T" TIMEOUT 45 > CONNECT \c > chat-script offhook "" "ATH1" OK \c > ! > interface Ethernet0 > ip address 10.10.24.1 255.255.254.0 > no ip directed-broadcast > no ip route-cache > ! > interface Async1 > ip unnumbered Ethernet0 > no ip directed-broadcast > ip mtu 512 > encapsulation ppp > no ip route-cache > ip tcp header-compression passive > no ip mroute-cache > async default routing > async mode dedicated > peer default ip address pool local-pool > ppp callback accept > ppp authentication pap callin > ! > ip local pool local-pool 10.10.24.238 10.10.24.254 > ip default-gateway 10.10.24.2 > no ip classless > ! > line con 0 > transport input none > line 1 > session-timeout 5 > autoselect during-login > script startup startModem > script modem-off-hook offhook > script callback callback > login local > modem answer-timeout 3 > modem autoconfigure type usr_sportster > modem InOut > transport input all > autohangup > callback forced-wait 10 > speed 115200 > flowcontrol hardware > ! > > I debug some output: > > General OS: > Modem control/process activation debugging is on > PPP: > PPP authentication debugging is on > PPP protocol negotiation debugging is on > Chat Scripts: > Chat scripts activity debugging is on > Callback: > Callback activity debugging is on > > and the result is: > > 1d22h: TTY1: DSR came up > 1d22h: TTY1: destroy timer type 1 > 1d22h: TTY1: destroy timer type 0 > 1d22h: TTY1: create timer type 2, 300 seconds > 1d22h: tty1: Modem: IDLE->READY > 1d22h: As1 LCP: I CONFREQ [Closed] id 0 len 23 > 1d22h: As1 LCP: ACCM 0x (0x0206) > 1d22h: As1 LCP: MagicNumber 0x2477 (0x05062477) > 1d22h: As1 LCP: PFC (0x0702) > 1d22h: As1 LCP: ACFC (0x0802) > 1d22h: As1 LCP: Callback 6 (0x0D0306) > 1d22h: As1 LCP: Lower layer not up, Fast Starting > 1d22h: As1 PPP: Treating connection as a dedicated line > 1d22h: As1 PPP: Phase is ESTABLISHING, Active Open > 1d22h: As1 LCP: O CONFREQ [Closed] id 44 len 24 > 1d22h: As1 LCP: ACCM 0x000A (0x0206000A) > 1d22h: As1 LCP: AuthProto PAP (0x0304C023) > 1d22h: As1 LCP: MagicNumber 0x1A7AD1B6 (0x05061A7AD1B6) > 1d22h: As1 LCP: PFC (0x0702) > 1d22h: As1 LCP: ACFC (0x0802) > 1d22h: As1 LCP: O CONFACK [REQsent] id 0 len 23 > 1d22h: As1 LCP: ACCM 0x (0x0206) > 1d22h: As1 LCP: MagicNumber 0x2477 (0x05062477) > 1d22h: As1 LCP: PFC (0x0702) > 1d22h: As1 LCP: ACFC (0x0802) > 1d22h: As1 LCP: Callback 6 (0x0D0306) > *Mar 2 22:35:00: %LINK-3-UPDOWN: Interface Async1, changed state to up > 1d22h: As1 LCP: I CONFACK [ACKsent] id 44 len 24 > 1d22h: As1 LCP: ACCM 0x000A (0x0206000A) > 1d22h: As1 LCP: AuthProto PAP (0x0304C023) > 1d22h: As1 LCP: MagicNumber 0x1A7AD1B6 (0x05061A7AD1B6) > 1d22h: As1 LCP: PFC (0x0702) > 1d22h: As1 LCP: ACFC (0x0802) > 1d22h: As1 LCP: State is Open > 1d22h: As1 PPP: Phase is AUTHENTICATING, by this end > 1d22h: As1 LCP: I IDENTIFY [Open] id 1 len 18 magic 0x2477 MSRASV4.00 > 1d22h: As1 LCP: I IDENTIFY [Open] id 2 len 20 magic 0x2477 MSRAS-1-KING > 1d22h: As1 PAP: I AUTH-REQ id 22 len 22 from "callback" > 1d22h: As1 PAP: Authenticating peer callback > 1d22h: As1 PAP: O AUTH-ACK id 22 len 5 > 1d22h: As1 MCB: User callback Callback Number - Client ANY > 1d22h: Async1 PPP: O MCB Request(1) id 208 len 9 > 1d22h: Async1 MCB: O 1 D0 0 9 2 5 0 1 0 > 1d22h: As1 MCB: O Request Id 208 Callback Type Client-Num delay 0 > 1d22h: As1 PPP: Phase is CBCP > *Mar 2 22:35:01: %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, > change > d state to up > 1d22h: As1 MCB: Timeout in state WAIT_RESPONSE > 1d22h: Async1 PPP: O MCB Request(1) id 209 len 9 > 1d22h: Async1 MCB: O 1 D1 0 9 2 5 0 1 0 > 1d22h: As1 MCB: O Request Id 209 Callback Type Client-Num delay 0 > 1d22h: TTY16: autoconfigure probe started > 1d22h: As1 MCB: Timeout in state WAIT_RESPONSE > 1d22h: Async1 PPP: O MCB Request(1) id 210 len 9 > 1d22h: Async1 MCB: O 1 D2 0 9 2 5 0 1 0 > 1d22h: As1 MCB: O Request Id 210 Callback
Has Anyone Passed the One Day Yet ? [7:21653]
It's October 2nd. There should be at least one posting today from a new CCIE, who took the one-day lab. Don't be shy, let us know who you are! I'm sure your mail server will fall over later today with congratulation messages, (& requests to break the NDA). Nick _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21653&t=21653 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CSS1 - Books available (my findings, what are yours...) [7:21654]
Hi Drews Check out this one: http://www.ciscopress.com/book.cfm?series=1&book=196 Shahid Shafi --- John Kaberna wrote: > I am considering writing a book for the CSS1. Since > I've already written > the CCIE Security book a lot of the information will > be repeated. But, I > don't really want to compete with CP for the long > term. However, as you > stated they are still a ways from having all 4 books > done. If I had enough > interest I would probably put one out so that people > don't have to wait > several months. > > John Kaberna > CCIE #7146 > NETCG Inc. > Cisco Premier Partner > www.netcginc.com > (415) 750-3800 > > __ > CCIE Security Training > www.netcginc.com/training.htm > > > ""Ole Drews Jensen"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > After finishing my CCNP, I am now looking towards > CSS1, but I cannot find > > many books out there. > > > > The only ones I have found that are made for the > exams are all from Cisco > > Press, and only one of them are out. Two others > are on the way, and the > last > > one is not even on the drawing board yet. > > > > I have gathered my discoveries so far on > http://www.oledrews.com/css1 - so > > if you know of a book that I have not listed, > please let me know. Also, > this > > list can be used by others going for the CSS1 to > get a selection of books > > available. > > > > Another thing, all the exams except for MCNS has > the exam number 9E0-57x - > > but the MCNS has 640-442. Could that mean that it > is about to expire, but > > that Cisco has yet not notified about it? > > > > Thanks for any comments to this, > > > > Ole > > > > > > Ole Drews Jensen > > Systems Network Manager > > CCNP, MCSE, MCP+I > > RWR Enterprises, Inc. > > [EMAIL PROTECTED] > > http://www.RouterChief.com > > > > NEED A JOB ??? > > http://www.oledrews.com/job > > [EMAIL PROTECTED] = Shahid Muhammad Shafi Network Engineer Level(3) Communications MCSE+I/MCSE(Win2K),CNA,CCNP,CCDP Please help feed hungry people worldwide http://www.hungersite.com/ A small thing each of us can do to help others less fortunate than ourselves __ Do You Yahoo!? Listen to your Yahoo! Mail messages from any phone. http://phone.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21654&t=21654 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: translation/transparent bridging between tokenring and [7:21655]
We had a similar issue when we tried here. There is a command that does bitswopping. I can't remember the command but it is in global config : something like "bridge 1 bitswap." HTH Andrew -Original Message- From: Erlend Ringstad [mailto:[EMAIL PROTECTED]] Sent: 02 October 2001 12:12 PM To: [EMAIL PROTECTED] Subject: translation/transparent bridging between tokenring and ethernet [7:21651] Greetings What I am trying to achive, transparent bridging/translation bridging between token ring and ethernet. I have one host on the To0/0: 10.10.10.1 netmask 255.255.255.0 and another one on the ethernet segment: 10.10.10.2 netmask 255.255.255.0 The config below does not work, and ideas? no ip routing ! interface Ethernet0/0 no ip address bridge-group 1 ! interface TokenRing0/0 no ip address ring-speed 16 bridge-group 1 ! bridge 1 protocol ieee --erlend Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21655&t=21655 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
custom Queue Confusion [7:21656]
Hi guys, Just a little confusion regarding CQ. As far as I know when we are going to implement custome queueing for different protocols,we are suppose to consider frame size for every protocol and than find the accurate bandwidth each queu should have?? On the other hand, I saw in many test labs that they just consider the bandwidth of interface and divide this among the traffic as per given percentage? Now I get confuse??Wht the way we suppose to use in exam? Are we suppose to remember max frame sizes for diff protocols and use them in lab to calculate actual amount allocated to each queue. Thanks for the help A Cisco lover _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21656&t=21656 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help with huge amount of Input/Frame and some CRC errors [7:21657]
symon... sorryi am asleep i don`t like the amount of interface resets you are getting... can you clear counters and watch the amount you are gettingon both sides.. int resets cum from the line bieng dropped (g703/line) i have smds/leased lines and you should not get ANY int resets on a good line. the last time i had this problem it was the BT CSU/DSU that was at fault that FUNNY you know ...al the BT CSU/DSU (for there 2 meg leased) have an X21 port built in you could also try swapping the ints (S0-S1)on both sides to see if that makes a difference... Is this a new install?? it IS possible that the G703 converter is stuffedwe use BlackBox ones...and they SHOULD work straight out of the box... HTH steve >From: Symon Thurlow >To: [EMAIL PROTECTED] >Subject: Re: Help with huge amount of Input/Frame and some CRC errors >[7:21647] >Date: Tue, 02 Oct 2001 23:05:07 +1130 > >It is a straight leased line, not Frame > >Cheers, > >Symon > >--- > > in your config > > > > what is your LMI.(autosence) > > > > have you set the encapsulation command on the int`s > > > > see this link > > > > >http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgc >r/wan_c/wcdfrely.htm#xtocid221854 > > > > > > > > input errors usually mean that there is some kind of encap >error...(int > > doesn`t understand the packet/frame it`s recieving) > > > > CU > > > > steve > > >From: "Symon Thurlow" > > >Reply-To: "Symon Thurlow" > > >To: [EMAIL PROTECTED] > > >Subject: Help with huge amount of Input/Frame and some CRC errors >[7:21647] > > >Date: Tue, 2 Oct 2001 04:47:46 -0400 > > > > > >Hi All, > > > > > >I have a 2MB leased line (UK Megastream) line between two sites. > > > > > >One site has a 3640, the other a 2621. > > > > > >The line is presented as G703 both ends. > > > > > >I have PDA DC2020 G703 to X21 converters at both ends. > > > > > >so connection is: > > > > > >SITE A > > >Cisco 3640 (WIC-1T) > > >PDA DC2020 X21 to G703 Converter > > >Megastream box (CSU/DSU) > > >Carriers network > > >Megastream Box (CSU/DSU) > > >PDA DC2020 X21 to G703 Converter > > >Cisco 2621 (WIC-1T) > > > > > >When I do local and remote loopback tests, using extended pings, >there > > >are no errors. This is true from both ends. > > > > > >As soon as I take the line off loopback, the activity light on the > > >2621 goes crazy, and I get about 500 input errors per second on one > > >end, and about 300 or so per second on the other end. > > > > > >Keepalives are incrementing, I have tried invert txclock, although > > >probably didn't need to. > > > > > >Here is a sh int from each end, ip addresses changed: > > > > > >2621 end: > > > > > > >sh int s0/0 > > >Serial0/0 is up, line protocol is up > > > Hardware is PowerQUICC Serial > > > Description: > > > Internet address is 10.10.10.2/30 > > > MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, > > > reliability 157/255, txload 1/255, rxload 1/255 > > > Encapsulation HDLC, loopback not set > > > Keepalive set (10 sec) > > > Last input 00:00:08, output 00:00:00, output hang never > > > Last clearing of "show interface" counters 17:21:37 > > > Queueing strategy: fifo > > > Output queue 0/40, 0 drops; input queue 0/75, 0 drops > > > 5 minute input rate 0 bits/sec, 0 packets/sec > > > 5 minute output rate 0 bits/sec, 0 packets/sec > > > 7055 packets input, 433584 bytes, 0 no buffer > > > Received 7055 broadcasts, 0 runts, 0 giants, 0 throttles > > > 30613034 input errors, 4438685 CRC, 26174345 frame, 0 >overrun, 0 > > >ignored, 4 > > > abort > > > 8850 packets output, 838333 bytes, 0 underruns > > > 0 output errors, 0 collisions, 3 interface resets > > > 0 output buffer failures, 0 output buffers swapped out > > > 0 carrier transitions > > > DCD=up DSR=up DTR=up RTS=up CTS=up > > > > > >3640 end: > > > > > > >sh int s0/0 > > >Serial0/0 is up, line protocol is up > > > Hardware is QUICC Serial > > > Description: > > > Internet address is 10.10.10.1/30 > > > MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, rely 161/255, load > > >1/255 > > > Encapsulation HDLC, loopback not set, keepalive set (10 sec) > > > Last input 00:00:00, output 00:00:00, output hang never > > > Last clearing of "show interface" counters 17:22:15 > > > Queueing strategy: fifo > > > Output queue 0/40, 0 drops; input queue 0/75, 0 drops > > > 5 minute input rate 0 bits/sec, 1 packets/sec > > > 5 minute output rate 0 bits/sec, 1 packets/sec > > > 8485 packets input, 778380 bytes, 0 no buffer > > > Received 7961 broadcasts, 0 runts, 0 giants, 0 throttles > > > 18292244 input errors, 5169 CRC, 18287064 frame, 0 overrun, 0 > > >ignored, 11 a > > >bort > > > 7324 packets output, 462192 bytes, 0 underruns > > > 0 output errors, 0 collisions, 10 interface resets > > > 0 output buffer failures, 0 output
Doyle on OSPF - Virtual Links [7:21658]
Hi. On Routing TCP/IP's page 555 there is an output of "show ip ospf virtual-link" That has these two info: 1. DoNotAge LSA not allowed 2. Adjacency State FULL (Hello suppressed) Can someone please explain why these show up in the virtual link info? I must have missed the significance somehere in my studies because I can't explain these to myself. Thank you. Elmer Deloso Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21658&t=21658 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Doyle on OSPF DR failure-election [7:21659]
Hello again. On page 419 of Doyle's book, it explains that "if the DR fails, a new DR must be elected,new adjacencies must be established, and all Routers on the network must synchronizewhile all this is happening, The network is UNAVAILABLE for transit packets." My question is: What about EXISTING sessions between DROTHERs, will these get Interrupted when the DR fails? Or is this in reference to packets using the Area where the failed DR is as a TRANSIT area? Wouldn't individual routers still maintain a CACHED copy of which way To route remaining packets (e.g. to complete an FTP download?) Elmer Deloso Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21659&t=21659 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Dial up and Leased Lines Solution [7:21660]
Hello everyone I have an issue finding the correct Cisco equipment solution for the following requirements: 1. Support for up to 1500 Dial Up Users 2. Support for up to 500 Leased Lines. Can anyone suggest a Cisco solution please? I have looked at the AS5xxx but was not able to conclude that the above are supported and on what modules. Thank you very much for your time in advance. Regards Ash __ Do You Yahoo!? Listen to your Yahoo! Mail messages from any phone. http://phone.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21660&t=21660 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PPP Multilink studies - interesting results [7:21623]
Chuck, Round times will be roughly the same regardless of whether there's 1 T1 or 8 T1's in the multilink bundle. There is a limit to the speed bits will move in copper. However, the more T1's you have in the bundle, the more bits you can send at the same time. I'd suggest you retry your test using the "ttcp" command, which tests TCP throughput rather than latency. Throughput and latency are two decidedly different beasts. I've extensively tested Multilink PPP in the lab (since cisco broke CEF per-packet load-sharing on OC48 Line cards), and I can verify that Multilink PPP does increase throughput. I might be able to dig out some of my data, if you're interested. Regards, --phil On Mon, Oct 01, 2001 at 11:33:39PM -0400, Chuck Larrieu wrote: A couple of weeks ago there were a couple of discussions on this board about using multiple T1's to improve data throughput. If memory serves, there were two possible ways to do this: 1) per packet load sharing and 2) PPP multilink for no particular reason I decided to do a little study on PPP multilink. Well, OK, I do have two particular reasons - an upcoming Lab and a customer who is asking about this. So, I build a scenario as follows: serial0 token ring R6R5---R4 || serial1 to test throughput, I used extended ping, with multiple pings and various size payloads, from a loopback on R4 to a loopback on R6. the routing protocol was EIGRP, done to assure per packet routing between R6 and R5 as a control. My results were interesting, to say the least. unexpected, but so consistent that there is no question, in my mind, anyway, about some of the assumptions many of us make about various load sharing and multiplexing options. a summary of the results are using the Cisco router reporting of min/avg/max round trip times - the middle number is the one to watch. packet size PPP multilinksingle serial link configured as PPP multilink 100024/24/13220/20/104 150028/29/52 24/27/112 500 16/19/64 12/13/104 64 12/14/60 4/7/104 note that in every case, the single link, configured for PPP multilink, is SIGNIFICANTLY faster than the dual link. Interesting. So I constructed some further experiments, using extended ping, multiple packets of variable size - range 64 to 1500: PPP multilinkper packet load share single T1 8/17/136 4/17/136 4/17/144 these figures are from over 15,000 pings per scenario, so it is not a case of random chance here. there is no difference whatsoever between the results of a single serial link, per packet load sharing over two serial links, and PPP multilink. what is most surprising is that a single serial connection proves JUST AS FAST as a dual serial connection. Now what I conclude from this is an opinion that multiple T1's DO NOT really do much for you in terms of more bandwidth. At least for the kinds of data flows I am able to generate in the lab. Furthermore, PPP multilink is actually harmful to throughput. So I gotta ask - is load sharing really adding anything to the mix? Really? In real world scenarios and data flows, where is it that you are gaining anything? Lastly, I set up a final scenario in which I sent 5000 byte packets. this means fragmentation and reassembly would occur, because the MTU on all wan interfaces is 1500 bytes. Here are the results when pinging 5000 times using a 5000 byte payload: single serial link: 64/66/168 per packet load share: 64/64/168 ppp multilink: 48/52/172 note here that the load sharing scenario is slightly faster than the single serial link, and that the ppp multilink is FAR AND AWAY faster that the other two. I suspect the reason for this is efficiencies gained under the multilink scenario when fragmenting and reassembling the oversized payloads In any case, I hope this presentation will lead to some good discussion of bandwidth and results. would it be fair to suggest that peoples' efforts to solve what they perceive as bandwidth issues by implementing multiple WAN links is really a study in fruitless activity? Maybe I should have set up some IPX scenarios? Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21661&t=21623 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: AGS+ IOS 11 bridging [7:21515]
None, just a, possibly poor, example of what could be a hardware limitation. Dave Chuck Larrieu wrote: > > OK. I'll bite. What is the relationship between ISL and CRB? > > Chuck > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > MADMAN > Sent: Monday, October 01, 2001 8:02 AM > To: [EMAIL PROTECTED] > Subject: Re: AGS+ IOS 11 bridging [7:21515] > > Boy, haven't worked on an AGS in 6 years!!! If CRB is simply a > software issue than it probably would work but my guess is that there > may well be hardware limitions on the AGS, like the inability to do ISL > encapsulation on a CAT4000. > > Dave > > Dan Faulk wrote: > > > > Anyone out there done much with bridging serial ports on the AGS? > > The Cisco documentation says different things on the subject one source > says > > concurrent bridging wont work on this box others make little distinction. > I > > wish to bridge on the 8 serial ports and route on the 12 Ethernet ports. > > Encap on the serials is not important although I will be passing IP. Cant > > just try and see on this one as it will determine which cables I purchase > > for my lab and money is tight. > > > > TIA > > Dan > -- > David Madland > Sr. Network Engineer > CCIE# 2016 > Qwest Communications Int. Inc. > [EMAIL PROTECTED] > 612-664-3367 > > "Emotion should reflect reason not guide it" -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21662&t=21515 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Doyle on OSPF DR failure-election [7:21659]
When the DR fails, the BDR takes over as soon as it ages out the its dead timer for the DR. The BDR already has adjacencies with all other routers on the segment and has been keeping tabs on the DR such that it can take over rather gracefully. A BDR election is then subsequently held to backfill the BDR position. No adjacencies should be torn down during this process, though new ones may be created between the set of non DR/BDR routers and the new BDR. Hope that helps. Pete *** REPLY SEPARATOR *** On 10/2/2001 at 8:10 AM Elmer Deloso wrote: >Hello again. >On page 419 of Doyle's book, it explains that "if the DR fails, a new >DR must be elected,new adjacencies must be established, and all >Routers on the network must synchronizewhile all this is happening, >The network is UNAVAILABLE for transit packets." >My question is: >What about EXISTING sessions between DROTHERs, will these get >Interrupted when the DR fails? Or is this in reference to packets using the >Area where the failed DR is as a TRANSIT area? >Wouldn't individual routers still maintain a CACHED copy of which way >To route remaining packets (e.g. to complete an FTP download?) > >Elmer Deloso Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21663&t=21659 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Dial up and Leased Lines Solution [7:21660]
500 leased linesHellthat`s a lot of leased lines i don`t know of any single cisco device with 500 serial interfacess.. ( and yes i am aware of ways round that ...bit i am going on what he has said in his post) so the question begs "as howard" what problem are you trying to solve ? >From: "ashraf awadalla" >Reply-To: "ashraf awadalla" >To: [EMAIL PROTECTED] >Subject: Dial up and Leased Lines Solution [7:21660] >Date: Tue, 2 Oct 2001 08:55:51 -0400 > >Hello everyone >I have an issue finding the correct Cisco equipment >solution for the following requirements: > >1. Support for up to 1500 Dial Up Users >2. Support for up to 500 Leased Lines. > >Can anyone suggest a Cisco solution please? I have >looked at the AS5xxx but was not able to conclude that >the above are supported and on what modules. >Thank you very much for your time in advance. >Regards >Ash > >__ >Do You Yahoo!? >Listen to your Yahoo! Mail messages from any phone. >http://phone.yahoo.com _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21664&t=21660 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: [Doyle on OSPF - Virtual Links [7:21658]
This is referring to the fact that the virtual-link is being treated as a Demand Circuit. I don't believe that Doyle spoke much about this in his book, but I could be wrong. A Demand Circuit is used for low-bandwidth links such as ISDN to limit the uptime required for the link, this is done in two ways, first Hellos are suppressed between the two endpoints, and second LSAs are not sent when they expire, instead they are marked as DoNotAge LSAs which act just like they sound, they don't age. These two features are independent of each other, so for instance you could have a demand circuit that is suppressing Hellos, but isn't sending DoNotAge LSAs (so the LSAs will still need to be refreshed) or you could theoretically have a demand circuit that isn't suppressing Hellos, but is sending DoNotAge LSAs. In your situation, the link is suppressing Hellos as it states, but is not sending DoNotAge LSAs. This indicates that somewhere in your OSPF domain there is a router that doesn't support these LSAs, so the router is not allowed to generate them. It is a requirement for a router that supports virtual-links to always try to make it a demand circuit, so Cisco routers will always attempt to suppress Hellos over virtual links. For more info you could check out: http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipr_c/ipcprt2/1cfospf.htm#xtocid2773922 For even better, go to the source: http://www.ietf.org/rfc/rfc1793.txt "Elmer Deloso" wrote: > Hi. > On Routing TCP/IP's page 555 there is an output of "show ip ospf > virtual-link" > That has these two info: > 1.DoNotAge LSA not allowed > 2.Adjacency State FULL (Hello suppressed) > Can someone please explain why these show up in the virtual link info? > I must have missed the significance somehere in my studies because > I can't explain these to myself. > Thank you. > > Elmer Deloso -- [EMAIL PROTECTED] OSPF Practice Exam www.boson.com\tests\Advanced.htm Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21665&t=21658 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Exams sequence [7:21628]
There is absolutely no requirement to pass in any order. Most people will tell you to take troubleshooting last, and I would agree. The reason is that the experience with routers and switches that you should gain in pursuing the other tests should serve you well in troubleshooting. Do NOT try to pass the CCNP tests using books alone. While it is possible for some people to do it, it is not a very good way to learn this material. It's like learning surgery without ever even touching a cadaver. I think taking switching first is a fine idea, and a friend of mine has done just that. Spend a lot of time studying for Routing, for it is very intellectually challenging material and is the most important material you will study, in my opinion. I did not spend enough time on it, and now I am having to work harder as I study for the Lab. Thomas Larus, CCNP, MCSE ""Piatnitchi Cristian"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi to the group > > I would ask you to help me to find out if > I must pass the CCNP exams in a specific sequence > I mean let's say: 640-503,640-504,640-505,640-506. > I woullike to start with Switching exam (640-504). > Is it possible ? > > Thanks in advance > Cristian Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21666&t=21628 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PPP Multilink studies - interesting results [7:21623]
This is just a pre-morning-coffee thought. I'm thinking that multiple links only help if you're actually needing the extra bandwidth. If you're not generating more than 1.544 Mbps of traffic, I would expect the round-trip times to be at least fairly similar regardless of which configuration you use. I'm guessing that if you were somehow able to generate a lot more traffic across those links that you'd see more of a benefit from the second link. I think a good test would be if you could generate around 2Mbps or more of traffic. I wish I had some testing software that would generate traffic in a controlled manner. It would be interesting to test this out and see what happens. Okay, back to my first cup of coffee. :-) Regards, John >>> "Chuck Larrieu" 10/1/01 9:33:39 PM >>> A couple of weeks ago there were a couple of discussions on this board about using multiple T1's to improve data throughput. If memory serves, there were two possible ways to do this: 1) per packet load sharing and 2) PPP multilink for no particular reason I decided to do a little study on PPP multilink. Well, OK, I do have two particular reasons - an upcoming Lab and a customer who is asking about this. So, I build a scenario as follows: serial0 token ring R6R5---R4 || serial1 to test throughput, I used extended ping, with multiple pings and various size payloads, from a loopback on R4 to a loopback on R6. the routing protocol was EIGRP, done to assure per packet routing between R6 and R5 as a control. My results were interesting, to say the least. unexpected, but so consistent that there is no question, in my mind, anyway, about some of the assumptions many of us make about various load sharing and multiplexing options. a summary of the results are using the Cisco router reporting of min/avg/max round trip times - the middle number is the one to watch. packet size PPP multilinksingle serial link configured as PPP multilink 1000 24/24/13220/20/104 1500 28/29/52 24/27/112 500 16/19/64 12/13/104 6412/14/60 4/7/104 note that in every case, the single link, configured for PPP multilink, is SIGNIFICANTLY faster than the dual link. Interesting. So I constructed some further experiments, using extended ping, multiple packets of variable size - range 64 to 1500: PPP multilinkper packet load share single T1 8/17/136 4/17/136 4/17/144 these figures are from over 15,000 pings per scenario, so it is not a case of random chance here. there is no difference whatsoever between the results of a single serial link, per packet load sharing over two serial links, and PPP multilink. what is most surprising is that a single serial connection proves JUST AS FAST as a dual serial connection. Now what I conclude from this is an opinion that multiple T1's DO NOT really do much for you in terms of more bandwidth. At least for the kinds of data flows I am able to generate in the lab. Furthermore, PPP multilink is actually harmful to throughput. So I gotta ask - is load sharing really adding anything to the mix? Really? In real world scenarios and data flows, where is it that you are gaining anything? Lastly, I set up a final scenario in which I sent 5000 byte packets. this means fragmentation and reassembly would occur, because the MTU on all wan interfaces is 1500 bytes. Here are the results when pinging 5000 times using a 5000 byte payload: single serial link: 64/66/168 per packet load share: 64/64/168 ppp multilink: 48/52/172 note here that the load sharing scenario is slightly faster than the single serial link, and that the ppp multilink is FAR AND AWAY faster that the other two. I suspect the reason for this is efficiencies gained under the multilink scenario when fragmenting and reassembling the oversized payloads In any case, I hope this presentation will lead to some good discussion of bandwidth and results. would it be fair to suggest that peoples' efforts to solve what they perceive as bandwidth issues by implementing multiple WAN links is really a study in fruitless activity? Maybe I should have set up some IPX scenarios? Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21667&t=21623 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: [Doyle on OSPF DR failure-election [7:21659]
Well first off, there are no existing sessions between DROthers. Remember that DROther routers only become adjacent to the DR and the BDR, they remain in 2way state with each other. There will be an existing session with the DROthers and the BDR which will result in a fast promotion of the BDR to DR in the event that the current DR fails. When the DR fails it will be removed from the neighbor list of all the routers attached to that network, they will also remove their link to the Network LSA that existed for this network. So temporarily, until the new DR is promoted and the link is advertised in their Router LSAs, the network would be unavailable. "Elmer Deloso" wrote: > Hello again. > On page 419 of Doyle's book, it explains that "if the DR fails, a new > DR must be elected,new adjacencies must be established, and all > Routers on the network must synchronizewhile all this is happening, > The network is UNAVAILABLE for transit packets." > My question is: > What about EXISTING sessions between DROTHERs, will these get > Interrupted when the DR fails? Or is this in reference to packets using the > Area where the failed DR is as a TRANSIT area? > Wouldn't individual routers still maintain a CACHED copy of which way > To route remaining packets (e.g. to complete an FTP download?) > > Elmer Deloso > -- [EMAIL PROTECTED] OSPF Practice Exam www.boson.com\tests\Advanced.htm Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21668&t=21659 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PPP Multilink studies - interesting results [7:21623]
Chuck, My first thought is that the router your using doesn't have the horsepower to make it a "fair" test. If it's a 2500 series, I have been told, but not verified, that it's CPU cannot even fill 2 T1's worth of traffic. Also, if your running the tests from the router itself, packets generated by the router are given low CPU thread priority, so this may have affected the test as well. If you can, I would recommend testing traffic through the router from each end and see what those results give. I can simulate the same but not till this weekend, I would have to physically reconfigure my lab at home to get 2 serials in parallel. Regards, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Chuck Larrieu Sent: Monday, October 01, 2001 8:34 PM To: [EMAIL PROTECTED] Subject: PPP Multilink studies - interesting results [7:21623] A couple of weeks ago there were a couple of discussions on this board about using multiple T1's to improve data throughput. If memory serves, there were two possible ways to do this: 1) per packet load sharing and 2) PPP multilink for no particular reason I decided to do a little study on PPP multilink. Well, OK, I do have two particular reasons - an upcoming Lab and a customer who is asking about this. So, I build a scenario as follows: serial0 token ring R6R5---R4 || serial1 to test throughput, I used extended ping, with multiple pings and various size payloads, from a loopback on R4 to a loopback on R6. the routing protocol was EIGRP, done to assure per packet routing between R6 and R5 as a control. My results were interesting, to say the least. unexpected, but so consistent that there is no question, in my mind, anyway, about some of the assumptions many of us make about various load sharing and multiplexing options. a summary of the results are using the Cisco router reporting of min/avg/max round trip times - the middle number is the one to watch. packet size PPP multilinksingle serial link configured as PPP multilink 1000 24/24/13220/20/104 1500 28/29/52 24/27/112 500 16/19/64 12/13/104 6412/14/60 4/7/104 note that in every case, the single link, configured for PPP multilink, is SIGNIFICANTLY faster than the dual link. Interesting. So I constructed some further experiments, using extended ping, multiple packets of variable size - range 64 to 1500: PPP multilinkper packet load share single T1 8/17/136 4/17/136 4/17/144 these figures are from over 15,000 pings per scenario, so it is not a case of random chance here. there is no difference whatsoever between the results of a single serial link, per packet load sharing over two serial links, and PPP multilink. what is most surprising is that a single serial connection proves JUST AS FAST as a dual serial connection. Now what I conclude from this is an opinion that multiple T1's DO NOT really do much for you in terms of more bandwidth. At least for the kinds of data flows I am able to generate in the lab. Furthermore, PPP multilink is actually harmful to throughput. So I gotta ask - is load sharing really adding anything to the mix? Really? In real world scenarios and data flows, where is it that you are gaining anything? Lastly, I set up a final scenario in which I sent 5000 byte packets. this means fragmentation and reassembly would occur, because the MTU on all wan interfaces is 1500 bytes. Here are the results when pinging 5000 times using a 5000 byte payload: single serial link: 64/66/168 per packet load share: 64/64/168 ppp multilink: 48/52/172 note here that the load sharing scenario is slightly faster than the single serial link, and that the ppp multilink is FAR AND AWAY faster that the other two. I suspect the reason for this is efficiencies gained under the multilink scenario when fragmenting and reassembling the oversized payloads In any case, I hope this presentation will lead to some good discussion of bandwidth and results. would it be fair to suggest that peoples' efforts to solve what they perceive as bandwidth issues by implementing multiple WAN links is really a study in fruitless activity? Maybe I should have set up some IPX scenarios? Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21669&t=21623 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: [OSPF equivalent command [7:21644]
I'm not sure about this, but I think your best bet might be to use either the command 'show ip route ospf' or 'show ip ospf database... router/network/network summary' (whatever LSA type you are expecting to receive this network from). I don't know a command that allows you to limit the output to a single network though, sorry. "Choy, Wai Yew" wrote: > Hi Cisco Guru, > Is there any equivalent command in OSPF for this "show ip eigrp topo > 10.10.0.0 255.255.0.0"? > I want to know is my OSPF network learning the correct route from my primary > link.. > Regards > CiscoNewBie Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21670&t=21644 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PPP Multilink studies - interesting results [7:21623]
Yes you verified what I have harped a few times, the added complexity of multilinking not to mention the several bugs I have encountered, is why I say just use CEF and load share per packet/destination. Also multilinking nor CEF give your greater speed but you do have more bandwidth. If you have a 2 lane verses a 4 lane highway the additional 2 lanes won't enable you to go any faster but you can get twice as many cars to their destination. So yes two T1's will give you twice the thruput in x time but the links are still 1.5M no matter how you slice it. Dave Chuck Larrieu wrote: > > A couple of weeks ago there were a couple of discussions on this board about > using multiple T1's to improve data throughput. If memory serves, there were > two possible ways to do this: 1) per packet load sharing and 2) PPP > multilink > > for no particular reason I decided to do a little study on PPP multilink. > Well, OK, I do have two particular reasons - an upcoming Lab and a customer > who is asking about this. > > So, I build a scenario as follows: > >serial0 token ring > R6R5---R4 > || > serial1 > > to test throughput, I used extended ping, with multiple pings and various > size payloads, from a loopback on R4 to a loopback on R6. > > the routing protocol was EIGRP, done to assure per packet routing between R6 > and R5 as a control. > > My results were interesting, to say the least. unexpected, but so consistent > that there is no question, in my mind, anyway, about some of the assumptions > many of us make about various load sharing and multiplexing options. > > a summary of the results are using the Cisco router reporting of > min/avg/max round trip times - the middle number is the one to watch. > > packet size PPP multilinksingle serial link configured as PPP > multilink > > 1000 24/24/13220/20/104 > > 1500 28/29/52 24/27/112 > > 500 16/19/64 12/13/104 > > 6412/14/60 4/7/104 > > note that in every case, the single link, configured for PPP multilink, is > SIGNIFICANTLY faster than the dual link. > > Interesting. So I constructed some further experiments, using extended ping, > multiple packets of variable size - range 64 to 1500: > > PPP multilinkper packet load share single T1 > >8/17/136 4/17/136 4/17/144 > > these figures are from over 15,000 pings per scenario, so it is not a case > of random chance here. there is no difference whatsoever between the results > of a single serial link, per packet load sharing over two serial links, and > PPP multilink. what is most surprising is that a single serial connection > proves JUST AS FAST as a dual serial connection. > > Now what I conclude from this is an opinion that multiple T1's DO NOT really > do much for you in terms of more bandwidth. At least for the kinds of data > flows I am able to generate in the lab. Furthermore, PPP multilink is > actually harmful to throughput. So I gotta ask - is load sharing really > adding anything to the mix? Really? In real world scenarios and data flows, > where is it that you are gaining anything? > > Lastly, I set up a final scenario in which I sent 5000 byte packets. this > means fragmentation and reassembly would occur, because the MTU on all wan > interfaces is 1500 bytes. Here are the results when pinging 5000 times using > a 5000 byte payload: > > single serial link: 64/66/168 > > per packet load share: 64/64/168 > > ppp multilink: 48/52/172 > > note here that the load sharing scenario is slightly faster than the single > serial link, and that the ppp multilink is FAR AND AWAY faster that the > other two. I suspect the reason for this is efficiencies gained under the > multilink scenario when fragmenting and reassembling the oversized payloads > > In any case, I hope this presentation will lead to some good discussion of > bandwidth and results. would it be fair to suggest that peoples' efforts to > solve what they perceive as bandwidth issues by implementing multiple WAN > links is really a study in fruitless activity? > > Maybe I should have set up some IPX scenarios? > > Chuck -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21671&t=21623 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: translation/transparent bridging between tokenring and [7:21672]
See translational bridging, use DLSW, it's easier. I used to have a great URL but in the 1000th amelioration of CCO my URL nolonger works. Dave Andrew Larkins wrote: > > We had a similar issue when we tried here. There is a command that does > bitswopping. I can't remember the command but it is in global config : > something like "bridge 1 bitswap." > > HTH > > Andrew > > -Original Message- > From: Erlend Ringstad [mailto:[EMAIL PROTECTED]] > Sent: 02 October 2001 12:12 PM > To: [EMAIL PROTECTED] > Subject: translation/transparent bridging between tokenring and ethernet > [7:21651] > > Greetings > > What I am trying to achive, transparent bridging/translation > bridging between token ring and ethernet. > > I have one host on the To0/0: > 10.10.10.1 netmask 255.255.255.0 > and another one on the ethernet segment: > 10.10.10.2 netmask 255.255.255.0 > > The config below does not work, and ideas? > > no ip routing > ! > interface Ethernet0/0 > no ip address > bridge-group 1 > ! > interface TokenRing0/0 > no ip address > ring-speed 16 > bridge-group 1 > ! > bridge 1 protocol ieee > > --erlend -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21672&t=21672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: translation/transparent bridging between tokenring [7:21651]
Erland, Try using: r2(config)#source-bridge transparent ? Source-route ring group attached to the transparent bridge To translate between Transparent and Source route bridging Get the PDF doc from cco for more help http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fibm_r1/br1fpt1/br1fsrb.htm Hope this helps. Cheers Richard Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21673&t=21651 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Doyle on OSPF DR failure-election [7:21659]
Right. But all I wanted to confirm is that the book implies that ALL traffic is suspended until the OSPF network is converged? Elmer -Original Message- From: Peter Van Oene [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 10:09 AM To: [EMAIL PROTECTED] Subject: Re: Doyle on OSPF DR failure-election [7:21659] When the DR fails, the BDR takes over as soon as it ages out the its dead timer for the DR. The BDR already has adjacencies with all other routers on the segment and has been keeping tabs on the DR such that it can take over rather gracefully. A BDR election is then subsequently held to backfill the BDR position. No adjacencies should be torn down during this process, though new ones may be created between the set of non DR/BDR routers and the new BDR. Hope that helps. Pete *** REPLY SEPARATOR *** On 10/2/2001 at 8:10 AM Elmer Deloso wrote: >Hello again. >On page 419 of Doyle's book, it explains that "if the DR fails, a new >DR must be elected,new adjacencies must be established, and all >Routers on the network must synchronizewhile all this is happening, >The network is UNAVAILABLE for transit packets." >My question is: >What about EXISTING sessions between DROTHERs, will these get >Interrupted when the DR fails? Or is this in reference to packets using the >Area where the failed DR is as a TRANSIT area? >Wouldn't individual routers still maintain a CACHED copy of which way >To route remaining packets (e.g. to complete an FTP download?) > >Elmer Deloso Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21674&t=21659 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Way OT: Interesting Date today [7:21675]
10-02-2001... It's a palindrome! When was the last date where this occurred? Here at work we think it was 08-31-1380. When will the next one be? :-) Sorry for the OT post, I just thought this was amusing. Back to the morning coffee John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21675&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
I would suspect that the last time this occurred was earlier this year. February 10th, 2001 (DD-MM-YY). I know, smart*.. -- Leigh Anne > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > John Neiberger > Sent: Tuesday, October 02, 2001 9:04 AM > To: [EMAIL PROTECTED] > Subject: Way OT: Interesting Date today [7:21675] > > > 10-02-2001... It's a palindrome! When was the last date where this > occurred? Here at work we think it was 08-31-1380. When will the next > one be? :-) Sorry for the OT post, I just thought this was amusing. > > Back to the morning coffee > > John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21676&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
09-31-1390 to up you one month ;-) on my second cup... ;-) -Original Message- From: John Neiberger [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 8:04 AM To: [EMAIL PROTECTED] Subject: Way OT: Interesting Date today [7:21675] 10-02-2001... It's a palindrome! When was the last date where this occurred? Here at work we think it was 08-31-1380. When will the next one be? :-) Sorry for the OT post, I just thought this was amusing. Back to the morning coffee John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21677&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
Yes, you are a smart***.However, it's true that if we pick a different format, an entirely new set of possibilities arise. For instance, today is also palindromic if you write it 10-2-01. >>> "Leigh Anne Chisholm" 10/2/01 9:05:40 AM >>> I would suspect that the last time this occurred was earlier this year. February 10th, 2001 (DD-MM-YY). I know, smart*.. -- Leigh Anne > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > John Neiberger > Sent: Tuesday, October 02, 2001 9:04 AM > To: [EMAIL PROTECTED] > Subject: Way OT: Interesting Date today [7:21675] > > > 10-02-2001... It's a palindrome! When was the last date where this > occurred? Here at work we think it was 08-31-1380. When will the next > one be? :-) Sorry for the OT post, I just thought this was amusing. > > Back to the morning coffee > > John [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21678&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
John, When you said It's a palindrone! are you refering at the following: A Palindrome is a word spelled the same backwards and forwards If not please can you give more details for those who do not know what are you refering toand why it is so importantand how did you find out about those date Thanks, JB -Original Message- From: John Neiberger To: [EMAIL PROTECTED] Sent: 10/2/2001 10:03 AM Subject: Way OT: Interesting Date today [7:21675] 10-02-2001... It's a palindrome! When was the last date where this occurred? Here at work we think it was 08-31-1380. When will the next one be? :-) Sorry for the OT post, I just thought this was amusing. Back to the morning coffee John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21679&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
Doh!!! 09 doesn't have 31 too much coffee ;-) -Original Message- From: COULOMBE, TROY Sent: Tuesday, October 02, 2001 8:13 AM To: Cisco Study Group (E-mail) Subject: RE: Way OT: Interesting Date today [7:21675] 09-31-1390 to up you one month ;-) on my second cup... ;-) -Original Message- From: John Neiberger [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 8:04 AM To: [EMAIL PROTECTED] Subject: Way OT: Interesting Date today [7:21675] 10-02-2001... It's a palindrome! When was the last date where this occurred? Here at work we think it was 08-31-1380. When will the next one be? :-) Sorry for the OT post, I just thought this was amusing. Back to the morning coffee John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21680&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ISDN Problems - Teltone information required [7:21681]
Is there anyone out there using a Teltone Demonstrator that could give me some assistance offline? I can't seem to get my ISDN to work. -- Leigh Anne Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21681&t=21681 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
Yes, a palindrome is a word that is spelled the same backward and forward. In this case, the numbers are palindromic because--using the MMDD format-- 10-02-2001 is the same when read either direction. Using MM-D-YY, today is 10-2-01, which is also palindromic. There is no importance whatsoever, it's just a numeric oddity depending on which date format you use. A coworker mentioned it this morning and we've just been discussing it. It's completely useless information, but interesting nonetheless. However, it's *really* off-topic so I suppose I should get back on-topic. John >>> Juan Blanco 10/2/01 9:15:13 AM >>> John, When you said It's a palindrone! are you refering at the following: A Palindrome is a word spelled the same backwards and forwards If not please can you give more details for those who do not know what are you refering toand why it is so importantand how did you find out about those date Thanks, JB -Original Message- From: John Neiberger To: [EMAIL PROTECTED] Sent: 10/2/2001 10:03 AM Subject: Way OT: Interesting Date today [7:21675] 10-02-2001... It's a palindrome! When was the last date where this occurred? Here at work we think it was 08-31-1380. When will the next one be? :-) Sorry for the OT post, I just thought this was amusing. Back to the morning coffee John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21682&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: [Re: [Doyle on OSPF - Virtual Links [7:21658]
Sorry, I meant to say that it is a requirement for a router that supports demand circuits to always attempt to make virtual- links act as demand circuits. > It is a > requirement for a router that supports virtual-links to always try to make it > a demand circuit, so Cisco routers will always attempt to suppress Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21684&t=21658 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
John, You have wy too much time on your hands. ;-) Heather > -Original Message- > From: John Neiberger [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, October 02, 2001 10:04 AM > To: [EMAIL PROTECTED] > Subject: Way OT: Interesting Date today [7:21675] > > 10-02-2001... It's a palindrome! When was the last date where this > occurred? Here at work we think it was 08-31-1380. When will the next > one be? :-) Sorry for the OT post, I just thought this was amusing. > > Back to the morning coffee > > John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21683&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
We thought the same thing until someone pointed out that there is no Sep. 31st. :-) >>> "COULOMBE, TROY" 10/2/01 9:29:49 AM >>> 09-31-1390 to up you one month ;-) on my second cup... ;-) -Original Message- From: John Neiberger [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 8:04 AM To: [EMAIL PROTECTED] Subject: Way OT: Interesting Date today [7:21675] 10-02-2001... It's a palindrome! When was the last date where this occurred? Here at work we think it was 08-31-1380. When will the next one be? :-) Sorry for the OT post, I just thought this was amusing. Back to the morning coffee John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21685&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IRB or RBE on Catalyst 6500 [7:21686]
Hi Is it possible to configure Integrated Routing and Bridging or Routed Bridge Encapsulation on a Cisco Catalyst 6500 with a MSFC2? Regards and Thanks in advance Geoffrey Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21686&t=21686 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TCP & H.225 [7:21519]
According to the well-known port list http://www.iana.org/assignments/port-numbers it is: h323hostcall 1720/TCP h323hostcall h323hostcall 1720/up h323hostcall Heather > -Original Message- > From: Matthew Webster [SMTP:[EMAIL PROTECTED]] > Sent: Sunday, September 30, 2001 5:37 PM > To: [EMAIL PROTECTED] > Subject: TCP & H.225 [7:21519] > > Hi all, > > I am a recent CCNA graduate, and am about to tackle the challenges of the > CCNP Routing 2.0 exam. Look forward to asking/providing help where > possible! > > Anyway, I have a question - does anyone know the ITU spec, or RFC that > deals > with TCP ports for H.225 RAS messages. I know that port 1719 is used for > ARQ's and ARC's, but am not sure what port 1720 is used for...here is part > of the Etherpeek trace: > > TCP - Transport Control Protocol > Source Port: 64642 > Destination Port: 1720 RAS Transport Layer Service Access Point > > can anyone help? > > cheers, > Matthew. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21687&t=21519 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Is the CCIE really worth it??? [7:3485]
Yeah an MCSE on every corner and 1000 Windows boxes in the building behind. I was talking to some buddies in the last big market I worked in (I live in a poh-dunk town now) and people with current Microsoft skills are very much in demand. The infrastructure guys are hurting, remember when the market went down it was the infrastructure, Internet, and Provider companies that nose-dived, the mom-an-pops with 200-500Workstations, 10 servers, a couple switches, an access router and a real non-internet related business are still going strong. They need user connectivity, (not MPLS, OC-12 or the like) they need database access, email, and system management product specialists. I think we all got caught in the Microsoft is OK but the really cool stuff is Cisco, but then we found out that buying pickles and everything else on the net wasn't flying. Yo I heard Novell is doing some really cool stuff. Reminds me of a movie where the handsome Earl Flynn was made to walk the plank by the ugly green-toothed pirates. MCSE + I - till they rip the 4.0 out of my hand. CNE 4.11 - already stripped CCN/DP - current CCIE 6/8/02 - first attempt Don - Original Message - From: ; To: ; ; Sent: Monday, October 01, 2001 8:45 PM Subject: Fwd: Is the CCIE really worth it??? [7:3485] > On a whim I took the CCIE written this past Saturday. Didn't pass but I do > believe the exam is far to easy. YES, to easy!! I came up a couple answers > short but really put no effort into preparing for the exam!! > When I lost my job last year due to downsizing I weighed my options; MCSE or > CCIE...finished CCNP on April 30th so I guess that tells you my choice... > HOWEVER, after getting the CCNP I began doing some job hunting, EVERY > potential employer wanted MCSE/MCP and didn't care one way or the other > about > Cisco certs. I'm 48 yrs. old and really didn't care much about the MCSE > because of the perceptions you stated (an MCSE on every corner), however I > read several Microsoft books this summer (NT, W2K Pro, Exchange 5.5 & 2000) > but haven't attempted any exams. > Anyway back to CCIE, aside from the CCNP studies, which I finished in the > spring, I read mostly from the Cisco CD (Internetworking Technology > Overview, > Case Studies, Design etc) and Lou's Token Ring paper (Thank You Dennis for > the TR quizzes) but DID NOT read any of the popular books i.e. Halibi, > Caslow, Doyle endorsed here. I didn't read them for a reason and that was > to > see if I could pass WITHOUT their input and if I hadn't scr*&^ewed up a > couple security questions I would have passed AND THEN I would really have > been PISSEDhaving a qualification to THE LAB and basically only > theoretical knowledge base. I chose the CCIE route BECAUSE it was supposed > to be the crown jewel of networking!!! > > my .02 worth > > Rick > > In a message dated 10/1/01 12:50:00 PM Eastern Daylight Time, > [EMAIL PROTECTED] writes: > > > > I agree with what you are saying, however there is a difference between > > having to work hard for something, and having it so that there are only > 6000 > > of them in the world... > > The MCSE has lost respect within the IT industry, however if you want a > > serious admin job, it is the most sought after certification. The CCIE > will > > always be a well respected certification. The fact that so few people have > > it is in some ways harmful because human resources departments and managers > > outside the tech industry haven't always heard of it. I have seen people > > get interviews for high level network engineering positions that were CCNAs > > before CCIEs got the interview. This is because HR has heard of the CCNA > > and doesn't know what a CCIE is... > > I'm not saying they should water down the test, nor do I believe they are > > doing so. However, I do believe that more is better to a certain degree. > > 6000 to 7000 CCIEs in the world is silly. There can very easily be 10 > times > > that and the demand for certified, well trained engineers will still be > > there ;-) Just my opinion. > >Regards, > > > > > > -Original Message- > > From: Logan, Harold [mailto:[EMAIL PROTECTED]] > > Sent: Monday, October 01, 2001 12:27 PM > > To: [EMAIL PROTECTED] > > Subject: RE: Is the CCIE really worth it??? [3:3485] > > > > > > I disagree. I'm working towards the CCIE, and I want it to be hard. I > > want to have to work for it. The last CCNP exam I took was the > > Support/Troubleshooting exam, and I wanted my money back. The couple of > > hours I put into studying for it were nothing but wasted time. > > > > In any line of work, supply and demand rule the market. The more IE's > > there are out there, the less they'll be making. Not only that, but we > > lowly CCNP's and CCDP's can probably expect even less. You point out > > that there are way more doctors, lawyers, etc... well, there's more of a > > demand for doctors and lawyers. It's a simple comparison: ask yourself > > how many people in a
Re: Way OT: Interesting Date today [7:21675]
how bout yesterday 10-1-01 Dave Leigh Anne Chisholm wrote: > > I would suspect that the last time this occurred was earlier this year. > February 10th, 2001 (DD-MM-YY). > > I know, smart*.. > > -- Leigh Anne > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > > John Neiberger > > Sent: Tuesday, October 02, 2001 9:04 AM > > To: [EMAIL PROTECTED] > > Subject: Way OT: Interesting Date today [7:21675] > > > > > > 10-02-2001... It's a palindrome! When was the last date where this > > occurred? Here at work we think it was 08-31-1380. When will the next > > one be? :-) Sorry for the OT post, I just thought this was amusing. > > > > Back to the morning coffee > > > > John -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21689&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Local Director Question [7:21589]
Based on my experience, a typical LD (Local Director) topology is: Internet -- Firewall -- Switch (any VLAN) -- -- Local Director (VIP) -- Hub/switch -- servers VIP = virtual IP for all servers Virtually no configurations are needed on the hub/switch except port speed/duplex. The hub basically just is bridging all the traffic between LD and servers. J. Li --- "[EMAIL PROTECTED]" wrote: > A typical physical topology for a Local Director is > as follow: > > Clients->Hub or Switch(Vlan1)->LocalDirector->Hub or > Switch(Vlan2)->Real > Servers > > However, instead of using two Physically separate > switches for the distinct > VLANs, what if I patch the LocalDirector into ports > 5/1 and 5/2 on my > Cat5500 switch, with port 5/1 being on VLAN1 and 5/2 > being on VLAN2? This > seems like virtually an identical topology as the > example shown above > however there is one problem that I am predicting: > > Of course, all inbound AND outbound traffic directed > to the Virtual IP of > the LocalDirector MUST flow through it. > > The problem is that I have an RSM router on my > CAT5500 switch and since I > have established two interfaces on it: interface > VLAN1 and VLAN2, what > would keep the traffic originating from my Real > Servers and destined back > to the clients from bypassing the VLAN2 switch port > which is the > LocalDirector and instead get routed straight across > to VLAN1 where the > traffic will go out directly back to the originating > client? > > John Squeo > Technical Specialist > Papa John's Corporation > (502) 261-4035 [EMAIL PROTECTED] __ Do You Yahoo!? Listen to your Yahoo! Mail messages from any phone. http://phone.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21691&t=21589 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Local Director Question [7:21589]
Based on my experience, a typical LD (Local Director) topology is: Internet -- Firewall -- Switch (any VLAN) -- -- Local Director (VIP) -- Hub/switch -- servers VIP = virtual IP for all servers Virtually no configurations are needed on the hub/switch except port speed/duplex. The hub basically just is bridging all the traffic between LD and servers. J. Li --- "[EMAIL PROTECTED]" wrote: > A typical physical topology for a Local Director is > as follow: > > Clients->Hub or Switch(Vlan1)->LocalDirector->Hub or > Switch(Vlan2)->Real > Servers > > However, instead of using two Physically separate > switches for the distinct > VLANs, what if I patch the LocalDirector into ports > 5/1 and 5/2 on my > Cat5500 switch, with port 5/1 being on VLAN1 and 5/2 > being on VLAN2? This > seems like virtually an identical topology as the > example shown above > however there is one problem that I am predicting: > > Of course, all inbound AND outbound traffic directed > to the Virtual IP of > the LocalDirector MUST flow through it. > > The problem is that I have an RSM router on my > CAT5500 switch and since I > have established two interfaces on it: interface > VLAN1 and VLAN2, what > would keep the traffic originating from my Real > Servers and destined back > to the clients from bypassing the VLAN2 switch port > which is the > LocalDirector and instead get routed straight across > to VLAN1 where the > traffic will go out directly back to the originating > client? > > John Squeo > Technical Specialist > Papa John's Corporation > (502) 261-4035 [EMAIL PROTECTED] __ Do You Yahoo!? Listen to your Yahoo! Mail messages from any phone. http://phone.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21690&t=21589 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Way OT: Interesting Date today [7:21675]
I can answer the last question, Look at a calendar ;) Juan Blanco wrote: > > John, > When you said It's a palindrone! are you refering at the following: > A Palindrome is a word spelled the same backwards and forwards > If not please can you give more details for those who do not know what are > you refering toand why it is so importantand how did you find out > about those date > > Thanks, > > JB > > -Original Message- > From: John Neiberger > To: [EMAIL PROTECTED] > Sent: 10/2/2001 10:03 AM > Subject: Way OT: Interesting Date today [7:21675] > > 10-02-2001... It's a palindrome! When was the last date where this > occurred? Here at work we think it was 08-31-1380. When will the next > one be? :-) Sorry for the OT post, I just thought this was amusing. > > Back to the morning coffee > > John -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21692&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
I'm a CCNP today. [7:21693]
Hello All, Today is a good day. Just passed Support with 85%. I didn't find this test "easy" by any stretch of the imagination. I am now a CCNP. Thanks to all for any direct or indirect help in passing these tests. Now on to the D's...then the I's. Have a good one, Tim Booth Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21693&t=21693 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISDN Problems - Teltone information required [7:21681]
Pesky SPIDS... Troubleshooting error messages is so much easier once you're logged into CCO. Everything's functional now. Thanks to all that offered to help. -- Leigh Anne > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Leigh Anne Chisholm > Sent: Tuesday, October 02, 2001 9:40 AM > To: [EMAIL PROTECTED] > Subject: ISDN Problems - Teltone information required [7:21681] > > > Is there anyone out there using a Teltone Demonstrator that could give me > some assistance offline? I can't seem to get my ISDN to work. > > > -- Leigh Anne Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21694&t=21681 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Way OT: Interesting Date today [7:21675]
Still OT Next ones: 01-02-2010 11-02-2011 02-02-2020 12-02-2021 03-02-2030 04-02-2040 05-02-2050 06-02-2060 07-02-2070 08-02-2080 09-02-2090 10-12-2101 Sorry, couldn't help it. I love useless information. - Jeremy Felt - Original Message - From: "John Neiberger" To: Sent: Tuesday, October 02, 2001 10:03 AM Subject: Way OT: Interesting Date today [7:21675] > 10-02-2001... It's a palindrome! When was the last date where this > occurred? Here at work we think it was 08-31-1380. When will the next > one be? :-) Sorry for the OT post, I just thought this was amusing. > > Back to the morning coffee > > John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21695&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Doyle on OSPF DR failure-election [7:21659]
>Right. >But all I wanted to confirm is that the book implies that >ALL traffic is suspended until the OSPF network is converged? > >Elmer Not necessarily. In general, routing will continue even with a route failure longer than will bridging. OSPF has to send a new route to the RIB, which then has to make its way to the FIB. Incidentally, there are drafts underway in the IETF to continue "optimistic" forwarding even after a complete shutdown and restart of routing protocols. > >-Original Message- >From: Peter Van Oene [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, October 02, 2001 10:09 AM >To: [EMAIL PROTECTED] >Subject: Re: Doyle on OSPF DR failure-election [7:21659] > >When the DR fails, the BDR takes over as soon as it ages out the its dead >timer for the DR. The BDR already has adjacencies with all other routers on >the segment and has been keeping tabs on the DR such that it can take over >rather gracefully. A BDR election is then subsequently held to backfill the >BDR position. No adjacencies should be torn down during this process, >though new ones may be created between the set of non DR/BDR routers and the >new BDR. > >Hope that helps. > >Pete > > >*** REPLY SEPARATOR *** > >On 10/2/2001 at 8:10 AM Elmer Deloso wrote: > >>Hello again. >>On page 419 of Doyle's book, it explains that "if the DR fails, a new >>DR must be elected,new adjacencies must be established, and all >>Routers on the network must synchronizewhile all this is happening, >>The network is UNAVAILABLE for transit packets." >>My question is: >>What about EXISTING sessions between DROTHERs, will these get >>Interrupted when the DR fails? Or is this in reference to packets using the >>Area where the failed DR is as a TRANSIT area? >>Wouldn't individual routers still maintain a CACHED copy of which way >>To route remaining packets (e.g. to complete an FTP download?) >> >>Elmer Deloso Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21696&t=21659 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help with huge amount of Input/Frame and some CRC errors [7:21698]
Hi Stephen, There are almost no resets all day, only 1 per router. > that FUNNY you know ...al the BT CSU/DSU (for there 2 meg leased) have an > X21 port built in The ones we have are only BNC, we have fibre coming in. > > you could also try swapping the ints (S0-S1)on both sides to see if that > makes a difference... Yeah, they are both wic-1t's, I could try the NM slots, but thats about it. Yeah, it's a new install. > it IS possible that the G703 converter is stuffedwe use BlackBox > ones...and they SHOULD work straight out of the box... Yes, that is what I was thinking, but the loopback tests are fine!? Symon > > > > HTH > > steve > >From: Symon Thurlow > >To: [EMAIL PROTECTED] > >Subject: Re: Help with huge amount of Input/Frame and some CRC errors > >[7:21647] > >Date: Tue, 02 Oct 2001 23:05:07 +1130 > > > >It is a straight leased line, not Frame > > > >Cheers, > > > >Symon > > > >--- > > > in your config > > > > > > what is your LMI.(autosence) > > > > > > have you set the encapsulation command on the int`s > > > > > > see this link > > > > > > > >http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cg c > >r/wan_c/wcdfrely.htm#xtocid221854 > > > > > > > > > > > > input errors usually mean that there is some kind of encap > >error...(int > > > doesn`t understand the packet/frame it`s recieving) > > > > > > CU > > > > > > steve > > > >From: "Symon Thurlow" > > > >Reply-To: "Symon Thurlow" > > > >To: [EMAIL PROTECTED] > > > >Subject: Help with huge amount of Input/Frame and some CRC errors > >[7:21647] > > > >Date: Tue, 2 Oct 2001 04:47:46 -0400 > > > > > > > >Hi All, > > > > > > > >I have a 2MB leased line (UK Megastream) line between two sites. > > > > > > > >One site has a 3640, the other a 2621. > > > > > > > >The line is presented as G703 both ends. > > > > > > > >I have PDA DC2020 G703 to X21 converters at both ends. > > > > > > > >so connection is: > > > > > > > >SITE A > > > >Cisco 3640 (WIC-1T) > > > >PDA DC2020 X21 to G703 Converter > > > >Megastream box (CSU/DSU) > > > >Carriers network > > > >Megastream Box (CSU/DSU) > > > >PDA DC2020 X21 to G703 Converter > > > >Cisco 2621 (WIC-1T) > > > > > > > >When I do local and remote loopback tests, using extended pings, > >there > > > >are no errors. This is true from both ends. > > > > > > > >As soon as I take the line off loopback, the activity light on the > > > >2621 goes crazy, and I get about 500 input errors per second on one > > > >end, and about 300 or so per second on the other end. > > > > > > > >Keepalives are incrementing, I have tried invert txclock, although > > > >probably didn't need to. > > > > > > > >Here is a sh int from each end, ip addresses changed: > > > > > > > >2621 end: > > > > > > > > >sh int s0/0 > > > >Serial0/0 is up, line protocol is up > > > > Hardware is PowerQUICC Serial > > > > Description: > > > > Internet address is 10.10.10.2/30 > > > > MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, > > > > reliability 157/255, txload 1/255, rxload 1/255 > > > > Encapsulation HDLC, loopback not set > > > > Keepalive set (10 sec) > > > > Last input 00:00:08, output 00:00:00, output hang never > > > > Last clearing of "show interface" counters 17:21:37 > > > > Queueing strategy: fifo > > > > Output queue 0/40, 0 drops; input queue 0/75, 0 drops > > > > 5 minute input rate 0 bits/sec, 0 packets/sec > > > > 5 minute output rate 0 bits/sec, 0 packets/sec > > > > 7055 packets input, 433584 bytes, 0 no buffer > > > > Received 7055 broadcasts, 0 runts, 0 giants, 0 throttles > > > > 30613034 input errors, 4438685 CRC, 26174345 frame, 0 > >overrun, 0 > > > >ignored, 4 > > > > abort > > > > 8850 packets output, 838333 bytes, 0 underruns > > > > 0 output errors, 0 collisions, 3 interface resets > > > > 0 output buffer failures, 0 output buffers swapped out > > > > 0 carrier transitions > > > > DCD=up DSR=up DTR=up RTS=up CTS=up > > > > > > > >3640 end: > > > > > > > > >sh int s0/0 > > > >Serial0/0 is up, line protocol is up > > > > Hardware is QUICC Serial > > > > Description: > > > > Internet address is 10.10.10.1/30 > > > > MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, rely 161/255, load > > > >1/255 > > > > Encapsulation HDLC, loopback not set, keepalive set (10 sec) > > > > Last input 00:00:00, output 00:00:00, output hang never > > > > Last clearing of "show interface" counters 17:22:15 > > > > Queueing strategy: fifo > > > > Output queue 0/40, 0 drops; input queue 0/75, 0 drops > > > > 5 minute input rate 0 bits/sec, 1 packets/sec > > > > 5 minute output rate 0 bits/sec, 1 packets/sec > > > > 8485 packets input, 778380 bytes, 0 no buffer > > > > Received 7961 broadcasts, 0 runts, 0 giants, 0 throttles > > > > 18292244 input errors, 5169 CRC, 18287064 frame, 0 overrun, 0 > > > >ignored, 11 a > > > >bort > > > >
Re: PPP Multilink studies - interesting results [7:21623]
What was the inter-packet gap between pings? Were they pushing right up against each other, with some wanting to go out while others were still being output? What other traffic was the router trying to pump out, if any? I'm thinking you would need to have packets queued up waiting to go out to see the benefits. Priscilla At 11:33 PM 10/1/01, Chuck Larrieu wrote: >A couple of weeks ago there were a couple of discussions on this board about >using multiple T1's to improve data throughput. If memory serves, there were >two possible ways to do this: 1) per packet load sharing and 2) PPP >multilink > >for no particular reason I decided to do a little study on PPP multilink. >Well, OK, I do have two particular reasons - an upcoming Lab and a customer >who is asking about this. > >So, I build a scenario as follows: > >serial0 token ring >R6R5---R4 > || > serial1 > >to test throughput, I used extended ping, with multiple pings and various >size payloads, from a loopback on R4 to a loopback on R6. > >the routing protocol was EIGRP, done to assure per packet routing between R6 >and R5 as a control. > >My results were interesting, to say the least. unexpected, but so consistent >that there is no question, in my mind, anyway, about some of the assumptions >many of us make about various load sharing and multiplexing options. > >a summary of the results are using the Cisco router reporting of >min/avg/max round trip times - the middle number is the one to watch. > >packet size PPP multilinksingle serial link configured as PPP >multilink > >1000 24/24/13220/20/104 > >1500 28/29/52 24/27/112 > >500 16/19/64 12/13/104 > >6412/14/60 4/7/104 > >note that in every case, the single link, configured for PPP multilink, is >SIGNIFICANTLY faster than the dual link. > >Interesting. So I constructed some further experiments, using extended ping, >multiple packets of variable size - range 64 to 1500: > > PPP multilinkper packet load share single T1 > >8/17/136 4/17/136 4/17/144 > >these figures are from over 15,000 pings per scenario, so it is not a case >of random chance here. there is no difference whatsoever between the results >of a single serial link, per packet load sharing over two serial links, and >PPP multilink. what is most surprising is that a single serial connection >proves JUST AS FAST as a dual serial connection. > >Now what I conclude from this is an opinion that multiple T1's DO NOT really >do much for you in terms of more bandwidth. At least for the kinds of data >flows I am able to generate in the lab. Furthermore, PPP multilink is >actually harmful to throughput. So I gotta ask - is load sharing really >adding anything to the mix? Really? In real world scenarios and data flows, >where is it that you are gaining anything? > >Lastly, I set up a final scenario in which I sent 5000 byte packets. this >means fragmentation and reassembly would occur, because the MTU on all wan >interfaces is 1500 bytes. Here are the results when pinging 5000 times using >a 5000 byte payload: > >single serial link: 64/66/168 > >per packet load share: 64/64/168 > >ppp multilink: 48/52/172 > >note here that the load sharing scenario is slightly faster than the single >serial link, and that the ppp multilink is FAR AND AWAY faster that the >other two. I suspect the reason for this is efficiencies gained under the >multilink scenario when fragmenting and reassembling the oversized payloads > >In any case, I hope this presentation will lead to some good discussion of >bandwidth and results. would it be fair to suggest that peoples' efforts to >solve what they perceive as bandwidth issues by implementing multiple WAN >links is really a study in fruitless activity? > >Maybe I should have set up some IPX scenarios? > >Chuck Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21697&t=21623 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: Interesting Date today [7:21675]
Here on the West coast we could all think pleasant Base-3 thoughts at: 10:02:20:01 AM on 10/02/2001! (Or we could do it this evening and catch the East Coast people too! ;-) Priscilla At 11:42 AM 10/2/01, John Neiberger wrote: >Yes, a palindrome is a word that is spelled the same backward and >forward. In this case, the numbers are palindromic because--using the >MMDD format-- 10-02-2001 is the same when read either direction. >Using MM-D-YY, today is 10-2-01, which is also palindromic. > >There is no importance whatsoever, it's just a numeric oddity depending >on which date format you use. A coworker mentioned it this morning and >we've just been discussing it. It's completely useless information, but >interesting nonetheless. > >However, it's *really* off-topic so I suppose I should get back >on-topic. > >John > > >>> Juan Blanco 10/2/01 9:15:13 AM >>> > John, >When you said It's a palindrone! are you refering at the following: >A Palindrome is a word spelled the same backwards and forwards >If not please can you give more details for those who do not know what >are >you refering toand why it is so importantand how did you find >out >about those date > >Thanks, > >JB > >-Original Message- >From: John Neiberger >To: [EMAIL PROTECTED] >Sent: 10/2/2001 10:03 AM >Subject: Way OT: Interesting Date today [7:21675] > >10-02-2001... It's a palindrome! When was the last date where >this >occurred? Here at work we think it was 08-31-1380. When will the >next >one be? :-) Sorry for the OT post, I just thought this was amusing. > >Back to the morning coffee > >John Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21699&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Exams sequence [7:21628]
DITTO.. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21700&t=21628 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP implementation project - help needed !!!!! [7:21702]
Hello, My boss ask me to conduct a BGP implementation for our site (Internet ecommerce platform with 2 ISP). I'm relatively new on that topic, so could you please help me to : 1 - construct my project plan and 2 - to made a draft of the technical implementation (I've got a lab). Experiences and god links are welcome. regards, steve. __ Do You Yahoo!? Listen to your Yahoo! Mail messages from any phone. http://phone.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21702&t=21702 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Subject: PPP Multilink studies - interesting results [7:21701]
I cannot say with 100% certainty, but you may get more useful test data by running TTCP, as opposed to pings or extended pings. This will also more closely mirror the intended test environment where the expectation will be high for TCP based traffic. Do you have a copy of the configs for posting? v/r, Paul Werner > A couple of weeks ago there were a couple of discussions on this board > about > using multiple T1's to improve data throughput. If memory serves, there > were > two possible ways to do this: 1) per packet load sharing and 2) PPP > multilink > > for no particular reason I decided to do a little study on PPP > multilink. > Well, OK, I do have two particular reasons - an upcoming Lab and a > customer > who is asking about this. > > So, I build a scenario as follows: > >serial0 token ring > R6R5---R4 > || > serial1 > > to test throughput, I used extended ping, with multiple pings and > various > size payloads, from a loopback on R4 to a loopback on R6. > > the routing protocol was EIGRP, done to assure per packet routing > between R6 > and R5 as a control. > > My results were interesting, to say the least. unexpected, but so > consistent > that there is no question, in my mind, anyway, about some of the > assumptions > many of us make about various load sharing and multiplexing options. > > a summary of the results are using the Cisco router reporting of > min/avg/max round trip times - the middle number is the one to watch. > > packet size PPP multilinksingle serial link configured as PPP > multilink > > 100024/24/13220/20/104 > > 150028/29/52 24/27/112 > > 500 16/19/64 12/13/104 > > 64 12/14/60 4/7/104 > > note that in every case, the single link, configured for PPP multilink, > is > SIGNIFICANTLY faster than the dual link. > > Interesting. So I constructed some further experiments, using extended > ping, > multiple packets of variable size - range 64 to 1500: > > PPP multilinkper packet load share single T1 > > 8/17/136 4/17/136 4/17/144 > > these figures are from over 15,000 pings per scenario, so it is not a > case > of random chance here. there is no difference whatsoever between the > results > of a single serial link, per packet load sharing over two serial links, > and > PPP multilink. what is most surprising is that a single serial > connection > proves JUST AS FAST as a dual serial connection. > > Now what I conclude from this is an opinion that multiple T1's DO NOT > really > do much for you in terms of more bandwidth. At least for the kinds of > data > flows I am able to generate in the lab. Furthermore, PPP multilink is > actually harmful to throughput. So I gotta ask - is load sharing really > adding anything to the mix? Really? In real world scenarios and data > flows, > where is it that you are gaining anything? > > Lastly, I set up a final scenario in which I sent 5000 byte packets. > this > means fragmentation and reassembly would occur, because the MTU on all > wan > interfaces is 1500 bytes. Here are the results when pinging 5000 times > using > a 5000 byte payload: > > single serial link: 64/66/168 > > per packet load share: 64/64/168 > > ppp multilink: 48/52/172 > > note here that the load sharing scenario is slightly faster than the > single > serial link, and that the ppp multilink is FAR AND AWAY faster that the > other two. I suspect the reason for this is efficiencies gained under > the > multilink scenario when fragmenting and reassembling the oversized > payloads > > In any case, I hope this presentation will lead to some good discussion > of > bandwidth and results. would it be fair to suggest that peoples' efforts > to > solve what they perceive as bandwidth issues by implementing multiple > WAN > links is really a study in fruitless activity? > > Maybe I should have set up some IPX scenarios? Get your own "800" number Voicemail, fax, email, and a lot more http://www.ureach.com/reg/tag Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21701&t=21701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Way OT: Interesting Date today [7:21675]
HEY jUAN I think that tin-foil is really receiving something. - Original Message - From: "Juan Blanco" To: Sent: Tuesday, October 02, 2001 8:31 AM Subject: RE: Way OT: Interesting Date today [7:21675] > John, > When you said It's a palindrone! are you refering at the following: > A Palindrome is a word spelled the same backwards and forwards > If not please can you give more details for those who do not know what are > you refering toand why it is so importantand how did you find out > about those date > > Thanks, > > JB > > -Original Message- > From: John Neiberger > To: [EMAIL PROTECTED] > Sent: 10/2/2001 10:03 AM > Subject: Way OT: Interesting Date today [7:21675] > > 10-02-2001... It's a palindrome! When was the last date where this > occurred? Here at work we think it was 08-31-1380. When will the next > one be? :-) Sorry for the OT post, I just thought this was amusing. > > Back to the morning coffee > > John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21703&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PPP Multilink studies - interesting results [7:21623]
Hmm.. If this were the case, though, wouldn't I expect to only see 64Kbps of bandwidth for a single user session on a 128K multilinked ISDN call? Seems to me if the link were loaded up properly, you'd see the combined aggregate. Paul Lalonde ""MADMAN"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Yes you verified what I have harped a few times, the added complexity > of multilinking not to mention the several bugs I have encountered, is > why I say just use CEF and load share per packet/destination. Also > multilinking nor CEF give your greater speed but you do have more > bandwidth. If you have a 2 lane verses a 4 lane highway the additional > 2 lanes won't enable you to go any faster but you can get twice as many > cars to their destination. > > So yes two T1's will give you twice the thruput in x time but the > links are still 1.5M no matter how you slice it. > > Dave > > Chuck Larrieu wrote: > > > > A couple of weeks ago there were a couple of discussions on this board > about > > using multiple T1's to improve data throughput. If memory serves, there > were > > two possible ways to do this: 1) per packet load sharing and 2) PPP > > multilink > > > > for no particular reason I decided to do a little study on PPP multilink. > > Well, OK, I do have two particular reasons - an upcoming Lab and a customer > > who is asking about this. > > > > So, I build a scenario as follows: > > > >serial0 token ring > > R6R5---R4 > > || > > serial1 > > > > to test throughput, I used extended ping, with multiple pings and various > > size payloads, from a loopback on R4 to a loopback on R6. > > > > the routing protocol was EIGRP, done to assure per packet routing between > R6 > > and R5 as a control. > > > > My results were interesting, to say the least. unexpected, but so > consistent > > that there is no question, in my mind, anyway, about some of the > assumptions > > many of us make about various load sharing and multiplexing options. > > > > a summary of the results are using the Cisco router reporting of > > min/avg/max round trip times - the middle number is the one to watch. > > > > packet size PPP multilinksingle serial link configured as PPP > > multilink > > > > 1000 24/24/13220/20/104 > > > > 1500 28/29/52 24/27/112 > > > > 500 16/19/64 12/13/104 > > > > 6412/14/60 4/7/104 > > > > note that in every case, the single link, configured for PPP multilink, is > > SIGNIFICANTLY faster than the dual link. > > > > Interesting. So I constructed some further experiments, using extended > ping, > > multiple packets of variable size - range 64 to 1500: > > > > PPP multilinkper packet load share single T1 > > > >8/17/136 4/17/136 4/17/144 > > > > these figures are from over 15,000 pings per scenario, so it is not a case > > of random chance here. there is no difference whatsoever between the > results > > of a single serial link, per packet load sharing over two serial links, and > > PPP multilink. what is most surprising is that a single serial connection > > proves JUST AS FAST as a dual serial connection. > > > > Now what I conclude from this is an opinion that multiple T1's DO NOT > really > > do much for you in terms of more bandwidth. At least for the kinds of data > > flows I am able to generate in the lab. Furthermore, PPP multilink is > > actually harmful to throughput. So I gotta ask - is load sharing really > > adding anything to the mix? Really? In real world scenarios and data flows, > > where is it that you are gaining anything? > > > > Lastly, I set up a final scenario in which I sent 5000 byte packets. this > > means fragmentation and reassembly would occur, because the MTU on all wan > > interfaces is 1500 bytes. Here are the results when pinging 5000 times > using > > a 5000 byte payload: > > > > single serial link: 64/66/168 > > > > per packet load share: 64/64/168 > > > > ppp multilink: 48/52/172 > > > > note here that the load sharing scenario is slightly faster than the single > > serial link, and that the ppp multilink is FAR AND AWAY faster that the > > other two. I suspect the reason for this is efficiencies gained under the > > multilink scenario when fragmenting and reassembling the oversized payloads > > > > In any case, I hope this presentation will lead to some good discussion of > > bandwidth and results. would it be fair to suggest that peoples' efforts to > > solve what they perceive as bandwidth issues by implementing multiple WAN > > links is really a study in fruitless activity? > > > > Maybe I should have set up some IPX scenarios? > > > > Chuck > -- > David Madland > Sr. Network Engineer > CCIE# 2016 > Qwest Communications Int. Inc. > [EMAIL PROTECTED] > 612-664-3367 > > "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/f
RE: Way OT: Interesting Date today [7:21675]
Juan, A palindrome is a letter-number pair that is the same forwards as it is backwards. This concept often appears when doing cannonical to non-cannonical conversions from Ethernet to Token Ring. HTH, Rob H. NP, DP, blah,blah,blah. Subj: RE: Way OT: Interesting Date today [7:21675] Date: Tue, 2 Oct 2001 11:33:11 AM Eastern Daylight Time From: "Juan Blanco" To: [EMAIL PROTECTED] John, When you said It's a palindrone! are you refering at the following: A Palindrome is a word spelled the same backwards and forwards If not please can you give more details for those who do not know what are you refering toand why it is so importantand how did you find out about those date Thanks, JB -Original Message- From: John Neiberger To: [EMAIL PROTECTED] Sent: 10/2/2001 10:03 AM Subject: Way OT: Interesting Date today [7:21675] 10-02-2001... It's a palindrome! When was the last date where this occurred? Here at work we think it was 08-31-1380. When will the next one be? :-) Sorry for the OT post, I just thought this was amusing. Back to the morning coffee John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21705&t=21675 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PPP Multilink studies - interesting results [7:21623]
Yes I said you would see the combined aggregate, you can send twice as much data but your not aggregating the speed, i.e. 2 T1's are two 1.5M links, even when bundled they do not have a clock of 3M but the bandwidth of 3M. That may seem obvious but I have had calls from those that did the "math" wondering why the thruput did not equal 3M at 3Mbps when multilinking two T1s for example. Dave Paul Lalonde wrote: > > Hmm.. If this were the case, though, wouldn't I expect to only see 64Kbps of > bandwidth for a single user session on a 128K multilinked ISDN call? > > Seems to me if the link were loaded up properly, you'd see the combined > aggregate. > > Paul Lalonde > > ""MADMAN"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Yes you verified what I have harped a few times, the added complexity > > of multilinking not to mention the several bugs I have encountered, is > > why I say just use CEF and load share per packet/destination. Also > > multilinking nor CEF give your greater speed but you do have more > > bandwidth. If you have a 2 lane verses a 4 lane highway the additional > > 2 lanes won't enable you to go any faster but you can get twice as many > > cars to their destination. > > > > So yes two T1's will give you twice the thruput in x time but the > > links are still 1.5M no matter how you slice it. > > > > Dave > > > > Chuck Larrieu wrote: > > > > > > A couple of weeks ago there were a couple of discussions on this board > > about > > > using multiple T1's to improve data throughput. If memory serves, there > > were > > > two possible ways to do this: 1) per packet load sharing and 2) PPP > > > multilink > > > > > > for no particular reason I decided to do a little study on PPP > multilink. > > > Well, OK, I do have two particular reasons - an upcoming Lab and a > customer > > > who is asking about this. > > > > > > So, I build a scenario as follows: > > > > > >serial0 token ring > > > R6R5---R4 > > > || > > > serial1 > > > > > > to test throughput, I used extended ping, with multiple pings and > various > > > size payloads, from a loopback on R4 to a loopback on R6. > > > > > > the routing protocol was EIGRP, done to assure per packet routing > between > > R6 > > > and R5 as a control. > > > > > > My results were interesting, to say the least. unexpected, but so > > consistent > > > that there is no question, in my mind, anyway, about some of the > > assumptions > > > many of us make about various load sharing and multiplexing options. > > > > > > a summary of the results are using the Cisco router reporting of > > > min/avg/max round trip times - the middle number is the one to watch. > > > > > > packet size PPP multilinksingle serial link configured as PPP > > > multilink > > > > > > 1000 24/24/13220/20/104 > > > > > > 1500 28/29/52 24/27/112 > > > > > > 500 16/19/64 12/13/104 > > > > > > 6412/14/60 4/7/104 > > > > > > note that in every case, the single link, configured for PPP multilink, > is > > > SIGNIFICANTLY faster than the dual link. > > > > > > Interesting. So I constructed some further experiments, using extended > > ping, > > > multiple packets of variable size - range 64 to 1500: > > > > > > PPP multilinkper packet load share single T1 > > > > > >8/17/136 4/17/136 4/17/144 > > > > > > these figures are from over 15,000 pings per scenario, so it is not a > case > > > of random chance here. there is no difference whatsoever between the > > results > > > of a single serial link, per packet load sharing over two serial links, > and > > > PPP multilink. what is most surprising is that a single serial > connection > > > proves JUST AS FAST as a dual serial connection. > > > > > > Now what I conclude from this is an opinion that multiple T1's DO NOT > > really > > > do much for you in terms of more bandwidth. At least for the kinds of > data > > > flows I am able to generate in the lab. Furthermore, PPP multilink is > > > actually harmful to throughput. So I gotta ask - is load sharing really > > > adding anything to the mix? Really? In real world scenarios and data > flows, > > > where is it that you are gaining anything? > > > > > > Lastly, I set up a final scenario in which I sent 5000 byte packets. > this > > > means fragmentation and reassembly would occur, because the MTU on all > wan > > > interfaces is 1500 bytes. Here are the results when pinging 5000 times > > using > > > a 5000 byte payload: > > > > > > single serial link: 64/66/168 > > > > > > per packet load share: 64/64/168 > > > > > > ppp multilink: 48/52/172 > > > > > > note here that the load sharing scenario is slightly faster than the > single > > > serial link, and that the ppp multilink is FAR AND AWAY faster that the > > > other two. I suspect the reason for this is efficiencies gained under
RE: [Doyle on OSPF - Virtual Links [7:21658]
Thanks for the reply and the CCO link. I do remember now reading up On this feature, now all I need to do is set this up at home using An ISDN simulator to see exactly what OSPF-related packets go through. Elmer -Original Message- From: Curtis Call [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 10:36 AM To: [EMAIL PROTECTED] Subject: Re: [Doyle on OSPF - Virtual Links [7:21658] This is referring to the fact that the virtual-link is being treated as a Demand Circuit. I don't believe that Doyle spoke much about this in his book, but I could be wrong. A Demand Circuit is used for low-bandwidth links such as ISDN to limit the uptime required for the link, this is done in two ways, first Hellos are suppressed between the two endpoints, and second LSAs are not sent when they expire, instead they are marked as DoNotAge LSAs which act just like they sound, they don't age. These two features are independent of each other, so for instance you could have a demand circuit that is suppressing Hellos, but isn't sending DoNotAge LSAs (so the LSAs will still need to be refreshed) or you could theoretically have a demand circuit that isn't suppressing Hellos, but is sending DoNotAge LSAs. In your situation, the link is suppressing Hellos as it states, but is not sending DoNotAge LSAs. This indicates that somewhere in your OSPF domain there is a router that doesn't support these LSAs, so the router is not allowed to generate them. It is a requirement for a router that supports virtual-links to always try to make it a demand circuit, so Cisco routers will always attempt to suppress Hellos over virtual links. For more info you could check out: http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipr _c/ipcprt2/1cfospf.htm#xtocid2773922 For even better, go to the source: http://www.ietf.org/rfc/rfc1793.txt "Elmer Deloso" wrote: > Hi. > On Routing TCP/IP's page 555 there is an output of "show ip ospf > virtual-link" > That has these two info: > 1.DoNotAge LSA not allowed > 2.Adjacency State FULL (Hello suppressed) > Can someone please explain why these show up in the virtual link info? > I must have missed the significance somehere in my studies because > I can't explain these to myself. > Thank you. > > Elmer Deloso -- [EMAIL PROTECTED] OSPF Practice Exam www.boson.com\tests\Advanced.htm Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21706&t=21658 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Question about 640-505 exam [7:21708]
Team, My question is the following, Do you have to type the commands asked in question or you will have the option of selecting the command from a list of posibles commands like in the routing test... Thanks, JB Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21708&t=21708 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BGP implementation project - help needed !!!!! [7:21702]
Sorry there are only Demi-Gods here. If you want links to the real gods try [EMAIL PROTECTED] My deepest heartfelt apology to the rest who suffer-through these, but this is a classic one for [EMAIL PROTECTED] I know we are all gonna learn some real world BGP multihoming here, so let's proceed. Don - Original Message - From: "mailsecurite" To: Sent: Tuesday, October 02, 2001 10:26 AM Subject: BGP implementation project - help needed ! [7:21702] > Hello, > > My boss ask me to conduct a BGP implementation for our > site (Internet ecommerce platform with 2 ISP). > > I'm relatively new on that topic, so could you please > help me to : > > 1 - construct my project plan and > 2 - to made a draft of the technical implementation > (I've got a lab). > > Experiences and god links are welcome. > > regards, > steve. > > __ > Do You Yahoo!? > Listen to your Yahoo! Mail messages from any phone. > http://phone.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21709&t=21702 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Power Strip [7:21710]
Guys, I have been trying to get two 19" horizontal power strips to mount on my rack, but have only been to locate places that sell the ones with surge protectors, and those are just rediculously priced. Does anyone have the link to anywhere that has reasonably priced rack mountable power strip? Please say. Ray _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21710&t=21710 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Power Strip [7:21710]
try www.milestek.com they have some for under $100 dave h -Original Message- From: Ray Smith [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 2:58 PM To: [EMAIL PROTECTED] Subject: Power Strip [7:21710] Guys, I have been trying to get two 19" horizontal power strips to mount on my rack, but have only been to locate places that sell the ones with surge protectors, and those are just rediculously priced. Does anyone have the link to anywhere that has reasonably priced rack mountable power strip? Please say. Ray _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21711&t=21710 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Power Strip [7:21710]
Black Box Code: PS189A $69.95 Works great! -Original Message- From: Ray Smith [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 11:58 AM To: [EMAIL PROTECTED] Subject: Power Strip [7:21710] Guys, I have been trying to get two 19" horizontal power strips to mount on my rack, but have only been to locate places that sell the ones with surge protectors, and those are just rediculously priced. Does anyone have the link to anywhere that has reasonably priced rack mountable power strip? Please say. Ray _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21712&t=21710 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Longish - info on hybrid VS. native on Cat6k [7:21713]
There was a discussion not long ago about the differences between native and hybrid modes on a Cat6k. The following passages are from a white paper I found on CCO, posted 9/5/2001. The interesting part is where it mentions the IOS must reset all linecards in the chassis for a successful failover from a failed sup. engine. A strong case, I think, to run CatOS on the switch... BTW - Passed the written Saturday. I used the same books everybody else did, so nothing new I can add about my "experience". ;-} Q. Which network-level resiliency options does the Catalyst 6000 family support? A. For network-level resilience, Catalyst 6000 family switches also support automatic recovery from failure using spanning tree per VLAN, and support load sharing for faster link convergence using Cisco Fast EtherChannel or Gigabit EtherChannel technologies. Load balancing with even higher availability can also be accommodated using Cisco multimodule channeling, where ports from different line cards can be aggregated into higher-bandwidth links. Catalyst 6000 family switches are also capable of load balancing across Layer 3 paths. For maximum availability, the Catalyst 6000 family switches support Hot Standby Router Protocol (HSRP), providing fast cutover to a backup system in the event of a catastrophic failure. HSRP is available between a pair of MSFC engines in the same chassis (Catalyst OS), between two MSFC engines in different chassis, and between an MSFC and an external router. (Caveats in Cisco IOS software for the Catalyst 6000 family of switches are listed later in the document.) It is important to note that the Catalyst OS and Cisco IOS software for the Catalyst 6000 family of switches images differ with respect to their high-availability mechanisms. The Cisco IOS software for the Catalyst 6000 family of switches supports high-availability functionality via a model akin to that of the Catalyst 7500 series routers enhanced high system availability (EHSA). Meaning that for a supervisor recovery, the standby supervisor must first reset all line cards; in this case, a recovery will take from 30 to 60+ seconds (configuration dependent). In addition, because of the EHSA model being employed, the MSFCs are not configured independently of one another when in a redundant configuration, meaning that currently redundant MSFCs in a system running Cisco IOS software for the Catalyst 6000 family of switches cannot employ HSRP between the MSFCs. The primary MSFC, however, can run HSRP with an external router, and the standby MSFC will become primary in the event of a failure (please refer to previous statement with respect to supervisor recovery). -- Rik Guyler Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21713&t=21713 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Power Strip [7:21710]
Go to http://www.provantage.com and search for TRPM002 That's a rack mounted power strip with 12 outlets - 6 in front and 6 in the back. They are only $34.33 each. Hth, Ole ~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~ http://www.RouterChief.com ~~~ NEED A JOB ??? http://www.oledrews.com/job ~~~ -Original Message- From: Ray Smith [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 1:58 PM To: [EMAIL PROTECTED] Subject: Power Strip [7:21710] Guys, I have been trying to get two 19" horizontal power strips to mount on my rack, but have only been to locate places that sell the ones with surge protectors, and those are just rediculously priced. Does anyone have the link to anywhere that has reasonably priced rack mountable power strip? Please say. Ray _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21714&t=21710 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Emphasis on token ring switching on CCIE Lab [7:21715]
Obviously, I don't want to get into NDA issues here, but I see that Cisco has the 3900 token ring switch on the CCIE lab exam "equipment list". Is token ring switching considered an emphatic "hands on" topic for CCIE lab preparation? Anyone know how important this particular technology is in the bigger scheme of things? Paul Lalonde Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21715&t=21715 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Sniffing Packet From the router. [7:21111]
The only other way that I know of to avoid crashing the router, and getting a useful "sniff" of the WAN traffic, is to use a V.35 protocol analyzer, such as the HP Internet Advisor. This is a pricey unit, but if you do this stuff regularly (as my coworkers and I do), it is the easiest, and most presentable way to do this. Note: There is a short disruption of service while inserting and removing the V.35 Y-cable used to do this. Internet Advisor generates some very management-friendly reports, used to present findings to people of a slightly more non-technical background. It also has many VERY powerful features (think: SnifferPro-like GUI). I am sure there are other very similiar products out in the field, I am only explaining what I have used. At the present time, this is only the HP Internet Advisor. Regards, Trevor J Corness, CCNA CCDA JNCIS NNCSS MCSE Radian Communication Services Corporation http://www.radiancorp.com On September 26, 2001 07:20 am, MADMAN wrote: > You can easily hedge your bets against crashing the router by using an > extended access-list with ip packet debuging. > > Dave > > Dennis wrote: > > debug ip packet... use with extreme care, you could crash the router if > > you have lots of traffic... > > > > ""Ken"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > Hi, > > > > > > Does anyone know how I can sniff packet from a router. Or can the > > > router redirect the packet to another Ethernet interface. Like Span > > > port on the switch. I need to capture the packet that is going across > > > the WAN > > > > interface. > > > > > Thanks. > > > > > > Ken Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21716&t=2 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Question about 640-505 exam [7:21708]
Juan, You will be given a list of commands but then you will have to type in the commands. Hope this helps! -Junovtv Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21717&t=21708 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VPN [7:21120]
Several points to make on this. 1) How are you using 192.168.x.x/28 on your Serial0/0 on your external interface (should this not be your only valid IP?, and why a /28 on a Serial unless you are using Frame). I am now assuming to change this to something such like: interface Serial 0/0 ip address live/30 2) If you are using NAT on the Router, then you may not VPN to the PIX, making the Router the only possible VPN End-point. Obtain VPN license for your router platform, or plan to redesign slightly. 3) If you ARE using 192.168.x.x/28 on your Serial, even your router is not accessible from the public internet, making it entirely impossible for you to VPN. 4) You will have problems passing VPN traffic through the PIX, without completely opening it up anyways. May I suggest a possible redesign of the network? -- I never totally understood the use of what I like to call "Double-NAT", especially when only a wire exists between 2 devices. This adds processing and memory overhead onto the router that is not neccessary, especially in today's world. May I suggest using LIVE IP's up to the PIX box... or better yet, obtaining a WAN interface identical to your S0/0 on the router, and placing it directly in the PIX... this will free up the router for lab uses . You then simply NAT once on the PIX, and to add VPN, you can simply load in the VPN module into the PIXOS. Solution 2: Use Live IP's on the segment between the router and PIX, add a switch or better yet, a hub between the two, and add a VPN Appliance, such as a Nortel Networks Contivity, or if you like to stay an "All Cisco" shop, a VPN Concentrator 3002. This will accomplish many things: VPN troubleshooting will not cause downtime on the PIX Router processing/memory demands lowered, it is merely routing now Throuphput increased due to packets only going through 1 translation VPN is direct into internal network VPN is the only task for the box chosen Currently where I work, we have traditionally been using a Nortel Contivity 1500 as a hub of 18 branch-office VPNs using smaller Contivity units for Branch-to-Branch, and also as the single corporate VPN endpoint for user-to-HQ tunnels. In the 3 years it was in service, it was downed twice, once for a move, and once due to replacing the UPS with an APC 16KVa. Both times were of no fault of the equipment. Recently, we have replaced everything with Cisco product (6509, 7200VXR, VPN3002, 2xPIX, 3600, 2600). Catalyst reboots are about every 2 weeks, 7200 came with a faulty Sup blade, VPN 3000 has been rebooted twice in the last month because of hickups so it will not allow any more connections.. so far no problems with the x600 routers, or the PIX firewalls, that were not programming errors. All in less than 2 months. It will be happy-days to see it all go away in 2 years when the lease expires. I will just be happy when they finally unplug the Contivity 1500 in 2 weeks, and give it to us for our lab LAN. Note: With the arrival of all the Cisco gear, I was released from my responsibilities to help maintain the network, and now only run a lab network based on the old equipment (HP & Nortel L2 switches, Nortel Passport L3 switches, Cisco 1600, 2500, 2600 routers, Compaq ML350 servers running Unix, Win2k, and soon WinXP). I wish you luck in finding the solution that works for you. Do not fear approaching management saying that a slight redesign is required to offer the VPN solution. The money they will save by employees working from home, and the increased productivity from those same employees, will more than pay for any new equipment, or time required to add the technology in a very short period of time. -- Regards, Trevor J Corness, CCNA CCDA JNCIS NNCSS MCSE MCP+I Systems Engineer, Data Services Radian Communication Services Corporation http://www.radiancorp.com On September 26, 2001 03:26 am, Ramesh c wrote: > Hey Guys, > > My setup as follows > > Internet -- Router PIX -- Internal network > > We are using a 192.168.x.x network and using NAT to change to valid ip > address.So when I need to setup VPN should I use the 192.168.x.x or the > Valid Ip address? > > My internet router config > > interface FastEthernet0/0 > ip address 192.168.y.x 255.255.255.252 > ip nat inside > > interface Serial0/0 > ip address 192.168.x.x 255.255.255.240 > > More which is advisable.. > 1)VPN to router or VPN to PIX ? > > Pls explain in detail... > > > > Make a difference, help support the relief efforts in the U.S. > http://clubs.lycos.com/live/events/september11.asp > Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21718&t=21120 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Exams sequence [7:21628]
word up. ""Thomas Larus"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > There is absolutely no requirement to pass in any order. Most people will > tell you to take troubleshooting last, and I would agree. The reason is > that the experience with routers and switches that you should gain in > pursuing the other tests should serve you well in troubleshooting. Do NOT > try to pass the CCNP tests using books alone. While it is possible for some > people to do it, it is not a very good way to learn this material. It's > like learning surgery without ever even touching a cadaver. > > I think taking switching first is a fine idea, and a friend of mine has done > just that. > > Spend a lot of time studying for Routing, for it is very intellectually > challenging material and is the most important material you will study, in > my opinion. I did not spend enough time on it, and now I am having to work > harder as I study for the Lab. > > Thomas Larus, CCNP, MCSE > ""Piatnitchi Cristian"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi to the group > > > > I would ask you to help me to find out if > > I must pass the CCNP exams in a specific sequence > > I mean let's say: 640-503,640-504,640-505,640-506. > > I woullike to start with Switching exam (640-504). > > Is it possible ? > > > > Thanks in advance > > Cristian Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21719&t=21628 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Using Aux port as console connection [7:21720]
Hi Group Is it possible to use the aux port as an alternative to the console port? I mean can I connect my pc serial port to the aux port instead of the console? If that is possible do I have to use a roll-over cable? Thanks Lw Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21720&t=21720 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE Written: autocommand [7:21721]
Dear Professionals, I have tried to configure my router with autocommand as shown below. When I telnet to the router it prompt me for a password, when I enter the password the telnet connection will disconnect immediately. Have I done any mistake? What is the purpose of this command? Thanks r1-2516(config)#line vty 0 4 r1-2516(config-line)#autocommand show running-config r1-2516(config-line)# Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21721&t=21721 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Sniffing Packet From the router. [7:21111]
Hey learn something new every day on this list, good info. Could the Y-cable be left in circuit on critical links, with proper precautions of course, yeah I know simpleton question but you never know. I always leave one port open on all my switches just for the sniffer, has made life so much easier and safer too, nice to know the same idea could be used on the WAN also. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Trevor J Corness Sent: Tuesday, October 02, 2001 3:14 PM To: [EMAIL PROTECTED] Subject: Re: Sniffing Packet From the router. [7:2] The only other way that I know of to avoid crashing the router, and getting a useful "sniff" of the WAN traffic, is to use a V.35 protocol analyzer, such as the HP Internet Advisor. This is a pricey unit, but if you do this stuff regularly (as my coworkers and I do), it is the easiest, and most presentable way to do this. Note: There is a short disruption of service while inserting and removing the V.35 Y-cable used to do this. Internet Advisor generates some very management-friendly reports, used to present findings to people of a slightly more non-technical background. It also has many VERY powerful features (think: SnifferPro-like GUI). I am sure there are other very similiar products out in the field, I am only explaining what I have used. At the present time, this is only the HP Internet Advisor. Regards, Trevor J Corness, CCNA CCDA JNCIS NNCSS MCSE Radian Communication Services Corporation http://www.radiancorp.com On September 26, 2001 07:20 am, MADMAN wrote: > You can easily hedge your bets against crashing the router by using an > extended access-list with ip packet debuging. > > Dave > > Dennis wrote: > > debug ip packet... use with extreme care, you could crash the router if > > you have lots of traffic... > > > > ""Ken"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > Hi, > > > > > > Does anyone know how I can sniff packet from a router. Or can the > > > router redirect the packet to another Ethernet interface. Like Span > > > port on the switch. I need to capture the packet that is going across > > > the WAN > > > > interface. > > > > > Thanks. > > > > > > Ken Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21722&t=2 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Written: autocommand [7:21721]
autocommand option no-hangup Will fix your problem. Not all ios's have this option. ""Lists Wizard"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Dear Professionals, > > I have tried to configure my router with autocommand as shown below. When I > telnet to the router it prompt me for a password, when I enter the password > the telnet connection will disconnect immediately. Have I done any mistake? > What is the purpose of this command? > > Thanks > > > r1-2516(config)#line vty 0 4 > r1-2516(config-line)#autocommand show running-config > r1-2516(config-line)# Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21723&t=21721 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Fw: Sniffing Packet From the router. [7:21111]
I must concur with this gentleman's approach to sniffing WAN traffic. At my previous position I used the HP Internet Advisor product regularly and was very impressed with its abilities. However, the HP Internet Adivsor is costly, at about the price of a small car, one can experience network sniffing nirvana. One other option to try would be to have your service provider place their own sniffer on the line. Speaking on behalf of ours, MCI, they were able to help us with a traffic shaping dilemma by placing an HP Internet Advisor-like sniffer on the local loop. For this, of course, they require permission from your company's IT management as this does pose some security questions. My 2 cents duly deposited, Raul De La Garza III, CCDP NNCSS MCSE CNE > Original Message - > From: "Trevor J Corness" > To: > Sent: Tuesday, October 02, 2001 3:14 PM > Subject: Re: Sniffing Packet From the router. [7:2] > > > > The only other way that I know of to avoid crashing the router, and > getting > > a > > useful "sniff" of the WAN traffic, is to use a V.35 protocol analyzer, > such > > as the HP Internet Advisor. This is a pricey unit, but if you do this > stuff > > regularly (as my coworkers and I do), it is the easiest, and most > > presentable > > way to do this. Note: There is a short disruption of service while > > inserting > > and removing the V.35 Y-cable used to do this. > > > > Internet Advisor generates some very management-friendly reports, used to > > present findings to people of a slightly more non-technical background. > It > > also has many VERY powerful features (think: SnifferPro-like GUI). > > > > I am sure there are other very similiar products out in the field, I am > only > > explaining what I have used. At the present time, this is only the HP > > Internet Advisor. > > > > Regards, > > Trevor J Corness, CCNA CCDA JNCIS NNCSS MCSE > > Radian Communication Services Corporation > > http://www.radiancorp.com > > > > > > On September 26, 2001 07:20 am, MADMAN wrote: > > > You can easily hedge your bets against crashing the router by using an > > > extended access-list with ip packet debuging. > > > > > > Dave > > > > > > Dennis wrote: > > > > debug ip packet... use with extreme care, you could crash the router > if > > > > you have lots of traffic... > > > > > > > > ""Ken"" wrote in message > > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > > > > > Hi, > > > > > > > > > > Does anyone know how I can sniff packet from a router. Or can the > > > > > router redirect the packet to another Ethernet interface. Like Span > > > > > port on the switch. I need to capture the packet that is going > across > > > > > the WAN > > > > > > > > interface. > > > > > > > > > Thanks. > > > > > > > > > > Ken Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21724&t=2 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Is the CCIE really worth it??? [7:3485]
By the same token, you could say that the Juniper JNCIE is completely worthless compared to the MCSE, cuz like you said there are a hell of a lot more Windows boxes to babysit than Juniper routers. Yet, the average JNCIE takes in well over $225,000 per annum, which is rather higher than the average MCSE, I would say (sure, some super-MCSE's make more, but I'm talking averages here). The reason behind this is clear to me - while there is clearly less demand for Juniper-trained people, this is easily compensated for by the ridiculously low supply of JNCIE's (17 at last count, 2 or 3 new ones minted every month). Or, yet another analogy. There is massive demand for low-skilled labor in the country, more than for CCIE's, more than for MCSE's, more than for anything.Flipping burgers, mopping floors, stocking shelves, bussing tables, picking fruit, that kind of thing. Every company could use an extra pair of hands. Sure, you can say that more companies have PC's to take care of, but not routers. But at the same time, even more companies don't have PC's to take care of, but have unskilled labor to do (i.e. restaurants, department stores, farms, supermarkets, etc.) So from the really high demand for this manual labor, can you assume that on average these jobs pay well (or at least higher than minimum wage)? No, of course not, and that's because of the massive amount of supply of unskilled labor out there, which keeps wages low.Almost anybody can mop a floor or bus a table. So the high demand is swamped by the gigantic supply of available manpower. The point is that you cannot look at the demand side alone, you must factor in the supply side as well. Now, there's no doubt, the market has crashed more for the CCIE than the MCSE. But even after the crash what I see is that CCIE's still pull in more than MCSE's do, and with much less competition (i.e. when my buddies apply for a Microsoft-admin job, there are 40-50 other dudes competing with them for the same job, but when I apply for a CCIE-type job, there are maybe only 2-3 candidates, and sometimes none) . This is a natural consequence that it is much harder to find a Cisco guy than a Microsoft guy, and this still compensates for the fewer Cisco jobs that are around. Now you might say that the demand for Cisco will continue to fall, and ultimately the CCIE will not mean much. Sure, that's absolutely possible. But then, you might also say that things might happen in the Microsoft world to make MCSE's less valuable. For example, Novell might make a comeback with Netware6 and eat into the market share of NT/2000. Microsoft might run into more trouble with the Justice Department, and this might hamstring them because they will be more worried about fighting in court than in developing their products, and competitors might use this valuable time to produce a viable competitive product (i.e. Linux with a version of Samba that is fully compatible with W2Kserver, including AD). The point is that nobody really knows what the future will bring, so it is difficult to make judgements based on what is going to happen in the future. We only know what is happening now, and right now, CCIE-level jobs still pay better than MCSE-level jobs, although admittedly the gap is not as wide as before. But the fact that the gap exists at all is prima-facie evidence that the low supply of CCIE's is compensating for the lower demand for them. ""Donald B Johnson jr"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Yeah an MCSE on every corner and 1000 Windows boxes in the building behind. > I was talking to some buddies in the last big market I worked in (I live in > a poh-dunk town now) and people with current Microsoft skills are very much > in demand. > The infrastructure guys are hurting, remember when the market went down it > was the infrastructure, Internet, and Provider companies that nose-dived, > the mom-an-pops with 200-500Workstations, 10 servers, a couple switches, an > access router and a real non-internet related business are still going > strong. They need user connectivity, (not MPLS, OC-12 or the like) they need > database access, email, and system management product specialists. I think > we all got caught in the Microsoft is OK but the really cool stuff is Cisco, > but then we found out that buying pickles and everything else on the net > wasn't flying. Yo I heard Novell is doing some really cool stuff. Reminds me > of a movie where the handsome Earl Flynn was made to walk the plank by the > ugly green-toothed pirates. > MCSE + I - till they rip the 4.0 out of my hand. > CNE 4.11 - already stripped > CCN/DP - current > CCIE 6/8/02 - first attempt > Don > > > - Original Message - > From: ; > To: ; ; > Sent: Monday, October 01, 2001 8:45 PM > Subject: Fwd: Is the CCIE really worth it??? [7:3485] > > > > On a whim I took the CCIE written this past Saturday. Didn't pass but I > do > > believe the exam is f
Re: Help with huge amount of Input/Frame and some CRC errors [7:21725]
10/2/2001 4:10pm Tuesday ""Stephen Skinner"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > symon... > > sorryi am asleep > > > i don`t like the amount of interface resets you are getting... > > > can you clear counters and watch the amount you are gettingon both > sides.. > > int resets cum from the line bieng dropped (g703/line) > > i have smds/leased lines and you should not get ANY int resets on a good > line. > > the last time i had this problem it was the BT CSU/DSU that was at fault > > that FUNNY you know ...al the BT CSU/DSU (for there 2 meg leased) have an > X21 port built in > > you could also try swapping the ints (S0-S1)on both sides to see if that > makes a difference... > > Is this a new install?? > > it IS possible that the G703 converter is stuffedwe use BlackBox > ones...and they SHOULD work straight out of the box... > > > > HTH > > steve > >From: Symon Thurlow > >To: [EMAIL PROTECTED] > >Subject: Re: Help with huge amount of Input/Frame and some CRC errors > >[7:21647] > >Date: Tue, 02 Oct 2001 23:05:07 +1130 > > > >It is a straight leased line, not Frame > > > >Cheers, > > > >Symon > > > >--- > > > in your config > > > > > > what is your LMI.(autosence) > > > > > > have you set the encapsulation command on the int`s > > > > > > see this link > > > > > > > >http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgc > >r/wan_c/wcdfrely.htm#xtocid221854 > > > > > > > > > > > > input errors usually mean that there is some kind of encap > >error...(int > > > doesn`t understand the packet/frame it`s recieving) > > > > > > CU > > > > > > steve > > > >From: "Symon Thurlow" > > > >Reply-To: "Symon Thurlow" > > > >To: [EMAIL PROTECTED] > > > >Subject: Help with huge amount of Input/Frame and some CRC errors > >[7:21647] > > > >Date: Tue, 2 Oct 2001 04:47:46 -0400 > > > > > > > >Hi All, > > > > > > > >I have a 2MB leased line (UK Megastream) line between two sites. > > > > > > > >One site has a 3640, the other a 2621. > > > > > > > >The line is presented as G703 both ends. > > > > > > > >I have PDA DC2020 G703 to X21 converters at both ends. > > > > > > > >so connection is: > > > > > > > >SITE A > > > >Cisco 3640 (WIC-1T) > > > >PDA DC2020 X21 to G703 Converter > > > >Megastream box (CSU/DSU) > > > >Carriers network > > > >Megastream Box (CSU/DSU) > > > >PDA DC2020 X21 to G703 Converter > > > >Cisco 2621 (WIC-1T) > > > > > > > >When I do local and remote loopback tests, using extended pings, > >there > > > >are no errors. This is true from both ends. > > > > > > > >As soon as I take the line off loopback, the activity light on the > > > >2621 goes crazy, and I get about 500 input errors per second on one > > > >end, and about 300 or so per second on the other end. > > > > > > > >Keepalives are incrementing, I have tried invert txclock, although > > > >probably didn't need to. > > > > > > > >Here is a sh int from each end, ip addresses changed: > > > > > > > >2621 end: > > > > > > > > >sh int s0/0 > > > >Serial0/0 is up, line protocol is up > > > > Hardware is PowerQUICC Serial > > > > Description: > > > > Internet address is 10.10.10.2/30 > > > > MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, > > > > reliability 157/255, txload 1/255, rxload 1/255 > > > > Encapsulation HDLC, loopback not set > > > > Keepalive set (10 sec) > > > > Last input 00:00:08, output 00:00:00, output hang never > > > > Last clearing of "show interface" counters 17:21:37 > > > > Queueing strategy: fifo > > > > Output queue 0/40, 0 drops; input queue 0/75, 0 drops > > > > 5 minute input rate 0 bits/sec, 0 packets/sec > > > > 5 minute output rate 0 bits/sec, 0 packets/sec > > > > 7055 packets input, 433584 bytes, 0 no buffer > > > > Received 7055 broadcasts, 0 runts, 0 giants, 0 throttles > > > > 30613034 input errors, 4438685 CRC, 26174345 frame, 0 > >overrun, 0 > > > >ignored, 4 > > > > abort > > > > 8850 packets output, 838333 bytes, 0 underruns > > > > 0 output errors, 0 collisions, 3 interface resets > > > > 0 output buffer failures, 0 output buffers swapped out > > > > 0 carrier transitions > > > > DCD=up DSR=up DTR=up RTS=up CTS=up > > > > > > > >3640 end: > > > > > > > > >sh int s0/0 > > > >Serial0/0 is up, line protocol is up > > > > Hardware is QUICC Serial > > > > Description: > > > > Internet address is 10.10.10.1/30 > > > > MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, rely 161/255, load > > > >1/255 > > > > Encapsulation HDLC, loopback not set, keepalive set (10 sec) > > > > Last input 00:00:00, output 00:00:00, output hang never > > > > Last clearing of "show interface" counters 17:22:15 > > > > Queueing strategy: fifo > > > > Output queue 0/40, 0 drops; input queue 0/75, 0 drops > > > > 5 minute input rate 0 bits/sec, 1 packets/sec > > > > 5 minute output rate 0 bits/sec, 1 packets/
CCIE Written: access lists [7:21726]
Dear Professional, I encountered this question while studying. It goes like this: Which command would display interfaces with applied access lists? A- show access-lists B- show ip access lists C- show ip access-lists D- show access lists The correct answer is supposed to be A. I tried this on my router but it does not show to which interfaces the access list is applied. What you thinks? Thanks Lw Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21726&t=21726 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Sniffing Packet From the router. [7:21111]
Yep, this is what we do...in fact, we have all the Y-cables cabled to a v.35 patch panel, which comes from my days in telecom...it's neater that way than having Y-cables dangling all over the place... You then patch from the "monitor" port of the particular WAN link to the WAN sniffer (also attached to the patch panel) with a simple patch cable--not Cat-5, but we called them K & M patch cables (for _K_notched & _M_odular)... Beware however, the patch panel will cost you a pretty penny (+-3500.00) But for the enterprise, it works well.. Don't have a part number from anywhere, but we buy ADC ones... TroyC -Original Message- From: Dan Faulk [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 1:53 PM To: [EMAIL PROTECTED] Subject: RE: Sniffing Packet From the router. [7:2] Hey learn something new every day on this list, good info. Could the Y-cable be left in circuit on critical links, with proper precautions of course, yeah I know simpleton question but you never know. I always leave one port open on all my switches just for the sniffer, has made life so much easier and safer too, nice to know the same idea could be used on the WAN also. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Trevor J Corness Sent: Tuesday, October 02, 2001 3:14 PM To: [EMAIL PROTECTED] Subject: Re: Sniffing Packet From the router. [7:2] The only other way that I know of to avoid crashing the router, and getting a useful "sniff" of the WAN traffic, is to use a V.35 protocol analyzer, such as the HP Internet Advisor. This is a pricey unit, but if you do this stuff regularly (as my coworkers and I do), it is the easiest, and most presentable way to do this. Note: There is a short disruption of service while inserting and removing the V.35 Y-cable used to do this. Internet Advisor generates some very management-friendly reports, used to present findings to people of a slightly more non-technical background. It also has many VERY powerful features (think: SnifferPro-like GUI). I am sure there are other very similiar products out in the field, I am only explaining what I have used. At the present time, this is only the HP Internet Advisor. Regards, Trevor J Corness, CCNA CCDA JNCIS NNCSS MCSE Radian Communication Services Corporation http://www.radiancorp.com On September 26, 2001 07:20 am, MADMAN wrote: > You can easily hedge your bets against crashing the router by using an > extended access-list with ip packet debuging. > > Dave > > Dennis wrote: > > debug ip packet... use with extreme care, you could crash the router if > > you have lots of traffic... > > > > ""Ken"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > Hi, > > > > > > Does anyone know how I can sniff packet from a router. Or can the > > > router redirect the packet to another Ethernet interface. Like Span > > > port on the switch. I need to capture the packet that is going across > > > the WAN > > > > interface. > > > > > Thanks. > > > > > > Ken Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21728&t=2 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Sniffing Packet From the router. [7:21111]
I take that back... I did find it... PMS-16-V35FF http://www.ibuyer.net/prod.html?id=447152 and to stay on topic...we use NAI DSSPro WAN sniffers...which work great... TroyC -Original Message- From: COULOMBE, TROY Sent: Tuesday, October 02, 2001 2:12 PM To: 'Dan Faulk'; [EMAIL PROTECTED] Subject: RE: Sniffing Packet From the router. [7:2] Yep, this is what we do...in fact, we have all the Y-cables cabled to a v.35 patch panel, which comes from my days in telecom...it's neater that way than having Y-cables dangling all over the place... You then patch from the "monitor" port of the particular WAN link to the WAN sniffer (also attached to the patch panel) with a simple patch cable--not Cat-5, but we called them K & M patch cables (for _K_notched & _M_odular)... Beware however, the patch panel will cost you a pretty penny (+-3500.00) But for the enterprise, it works well.. Don't have a part number from anywhere, but we buy ADC ones... TroyC -Original Message- From: Dan Faulk [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 1:53 PM To: [EMAIL PROTECTED] Subject: RE: Sniffing Packet From the router. [7:2] Hey learn something new every day on this list, good info. Could the Y-cable be left in circuit on critical links, with proper precautions of course, yeah I know simpleton question but you never know. I always leave one port open on all my switches just for the sniffer, has made life so much easier and safer too, nice to know the same idea could be used on the WAN also. Dan Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21730&t=2 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE Written in Routing & Switching [7:21729]
Dear Friends, After a long study period now I have done my CCIE Written with 96%. which is the highest marks in pakistan. (but i m not sure) where can i confirm that this is the highest marks in the world, Asia pacific region or pakistan. Can i do contact with the Prometric or Cisco. Can any one do help me in it. I have used, 1. CCIE Professional Development, Routing TCP/IP Vol I & II (Doyle, Cisco Press) ( good in routing) 2.Internet Routing Architectures, (for BGP but u do not need it if you read Routing TCP/IP Vol II ) 3.Cisco Internetwork Design 4.Interconnections: Bridges & Routers 5.ACRC 6.ICRC 7.BCRAN 8.BCMSN 9.CIT 10. CCDA Course manual 11.Cisco web site 12. www.sitamoht.com (useful) 13. Cramsession notes (useful) 14.Token Ring paper (very Useful for bridging & RIF calculation) 15.Boson (For good Practice) 16.All in one CCIE study guide 17. Managing Cisco Network Security (Security Issues) If you want any other information please feel free to contact me. Kindest Regards Muhammad Zahid Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21729&t=21729 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE Written: autocommand [7:21721]
wouldn't you need to be in enable mode to see that? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Lists Wizard Sent: Tuesday, October 02, 2001 3:51 PM To: [EMAIL PROTECTED] Subject: CCIE Written: autocommand [7:21721] Dear Professionals, I have tried to configure my router with autocommand as shown below. When I telnet to the router it prompt me for a password, when I enter the password the telnet connection will disconnect immediately. Have I done any mistake? What is the purpose of this command? Thanks r1-2516(config)#line vty 0 4 r1-2516(config-line)#autocommand show running-config r1-2516(config-line)# Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21731&t=21721 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Written: access lists [7:21726]
You're right. I'm guessing it's another case of a poorly-worded question. The only ways I know of to show an interface and its access-list is to "show ip int" or whatever, or "show ipx int e0" or whatever protocol you're using. The other is to "show run". > Dear Professional, > > I encountered this question while studying. It goes like this: > > Which command would display interfaces with applied access lists? > > A- show access-lists > B- show ip access lists > C- show ip access-lists > D- show access lists > > The correct answer is supposed to be A. I tried this on my router but it > does not show to which interfaces the access list is applied. What you > thinks? > > > Thanks > > Lw Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21732&t=21726 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Emphasis on token ring switching on CCIE Lab [7:21715]
The 3900 is on the list, expect to configure it. As far as "an emphatic hands-on topic" I believe there is a tutorial on the documentation CD. I assume the tutorial covers "basic" configuration, so I would be prepared to do a "basic" config from memory. As far as any "empathic" topics... I think you could get away without knowing it intimately... just as you could on virtually any other topic (except for IP, Frame and the core protocols). It is all on the CD. The question is how many topics do you have to lack knowledge on before you run out of time. As you review your exam folder, you will be saying to yourself... "I know how to do that and that... I'll have to look this up to be certian... they want me to do what? How!?!"Knowing it well just means that you will be able to nail it when you get to the exam. And the fewer time you say "I know" in the exam... the chances of visiting the lab again will go up. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21733&t=21715 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Which books should I use ? [7:21735]
Hi All, I would like an advise from people studying for CCNP on which book I should use to prepare for the exams. Which is better? CCNP Study Guide from Sybex or CCNP Library from Cisco Press? Thanks in advance Luiz Olivieri CCNA Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21735&t=21735 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco NP-1FE and MC3810 $500/ea [7:20574]
I totally agree !! I quit using Paypal because they screw me up in my last auction just because I access my account from another country and they totally freeze my account and asked me records from my banks transaction , etc before they would unfreeze the account... I refuse to do so and I still have about $500/= inside... Complaints to the BBB and DA office doesn't do anything as they cliams that my account is suspicious because I access it outside of USA... I guess they win the Dumb and Dumber and Dumbest award.. ""Leigh Anne Chisholm"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Neal, perhaps PayPal is the cause of your problems. If you're selling to > international bidders that haven't yet signed up for PayPal, it's almost > impossible for the buyer to be able to send any reasonable amount of money > within a short time period. > > PayPal verifies international bidders by charging $1 to their credit card. > If the card information is good, the $1 charge appears on individual's > credit statement. The verification system requires the ID number associated > with PayPal's name that appears on the statement. Once the verification > number has been entered, the $1 charge is reversed and the credit limit is > lifted. > > I signed up August 25th. PayPal's charge missed the cutoff on my last > credit card statement, so I've got to wait for my next statement. PayPal > has indicated if you contact your credit card company to get the > information, PayPal will turf your account. > > I've recently won an auction and I need to pay for my equipment. I've > contacted them about manually verifying my account but that takes up to 10 > business days. They know my credit card is good because I've had an > unverified US account for over a year linked to my Aunt's address that I've > charged several hundred dollars to over several transactions but because the > US account is not linked to a US bank account, I don't have much of a limit > left (a few hundred dollars). PayPal simply isn't worth the hassle and most > sellers aren't interested in waiting four... five... six weeks for payment. > I've even tried calling PayPal's long distance number (no, not even a 1-800 > number) so that I can speak with someone to get this resolved, but their > system keeps disconnecting me when I'm waiting for customer service. This > has happened repeatedly. As an aside, PayPal doesn't advertise anywhere on > their site a telephone number to contact customer service. To me, PayPal > wins the "anti-customer service of the year awared". > > If you're not signed up for BillPoint, I'd recommend you do so. You can > send or receive money as soon as you create an account--no bank account > information required, no credit card verification process that takes weeks > and weeks. Granted you do have a limit for receiving money (I think it's > $500 for auction, $250 for simple transfer) but BillPoint lets you send > multiple transactions so you can receive the full amount. You might have > better luck if you go that route. And oh yes--BillPoint is just as friendly > to international customers as American customers. > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > > Neal Rauhauser > > Sent: Thursday, September 20, 2001 5:32 PM > > To: [EMAIL PROTECTED] > > Subject: Cisco NP-1FE and MC3810 $500/ea [7:20574] > > > > > > I apologize for the commercial spam :-( > > > > > > I've got an NP-1FE and an MC3810 /w 32d/8f - I don't need 'em, > > they've been hanging around for months, and my last three ebay bidders > > have not paid. > > > > > > My busy schedule and ebay frustration is your gain - I think $500 is > > under market for either piece. Both are known working, 90 day guarantee, > > etc, etc. > > > > > > If you want it the deal is paypal $500 + shipping and it'll go out > > right away. > > > > > > There is some other misc junk down here but I don't think group > > studiers would want it - a new AS5300 dual DC power supply, two > > AS53-VOXD-12, a SM25-BRI-U, a MC3810 T1/E1 card, a lot of cosmetic > > spares for 7505/7507 chassis, etc. If any of this sounds interesting > > drop me a note ... be sure to use mailto:[EMAIL PROTECTED] - send > > it to this account and you're entering mailing list purgatory :-) > > > > > > -- > > Neal Rauhauser CCNP, CCDP voice: 402-391-3930 > > http://AmericanRelay.comfax : 402-951-6390 > > mailto:[EMAIL PROTECTED] fcc : k0bsd Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21633&t=20574 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Emphasis on token ring switching on CCIE Lab [7:21715]
know how to configure vlans on that bad boy, which requires creating a TrBRF first, and then creating TrCRFs, and then assigning ports to the TrCRFs There are a few good sims out there, and someone has their 3900 on the net and allows 60 minute sessions on it with a little configuration scenario - those sessions are sold on eBay. -e- May the route be with you Switch if you must, route if you can ;-) http://members.home.net/airwrck - Original Message - From: "Paul Lalonde" To: Sent: Tuesday, October 02, 2001 1:02 PM Subject: Emphasis on token ring switching on CCIE Lab [7:21715] > Obviously, I don't want to get into NDA issues here, but I see that Cisco > has the 3900 token ring switch on the CCIE lab exam "equipment list". > > Is token ring switching considered an emphatic "hands on" topic for CCIE lab > preparation? Anyone know how important this particular technology is in the > bigger scheme of things? > > Paul Lalonde _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21734&t=21715 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Get paid cash every time you receive email! [7:21541]
Thats It!!!, I headed to the bookstore now to grab up the GPRE (Get Paid Read Email certification libriary! .. and all this time Ive been busting my fanny gaining routing and switching knowledge.. Chuck Larrieu wrote: > considering I average 250 mails a day, from the various lists to which I > subscribe, I may never have to work again! ;-> > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > caifeng tang > Sent: Sunday, September 30, 2001 9:41 PM > To: [EMAIL PROTECTED] > Subject: Get paid cash every time you receive email! [7:21541] > > Get paid cash every time you receive email! > Sign up FREE at: > http://www.MintMail.com/?m=1149612 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21629&t=21541 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Unable to subscribe [7:21637]
Hi all, Do you guys know how do I subscribe to this mailing list? The authentication mail that I send out always bounce backHas this list been stop?... Thanx. CiscoNewbie Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21637&t=21637 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Token Ring Module Problem for Catalyst 5000 [7:21610]
The WS-X5030 Token Ring Module requires a Supervisor II to function. A SUP I provides similar results to what you state the Cat keeps saying the module is resetting or faulty. If you do a sho modules, or a show version, I believe the software/firmware versions will report 0.0. Ed Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21736&t=21610 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Written: autocommand [7:21721]
Yo that has been happening to me for about six years, thanks for the fix Mike. - Original Message - From: "Michael Snyder" To: Sent: Tuesday, October 02, 2001 2:01 PM Subject: Re: CCIE Written: autocommand [7:21721] > autocommand option no-hangup > > Will fix your problem. Not all ios's have this option. > > > ""Lists Wizard"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Dear Professionals, > > > > I have tried to configure my router with autocommand as shown below. When > I > > telnet to the router it prompt me for a password, when I enter the > password > > the telnet connection will disconnect immediately. Have I done any > mistake? > > What is the purpose of this command? > > > > Thanks > > > > > > r1-2516(config)#line vty 0 4 > > r1-2516(config-line)#autocommand show running-config > > r1-2516(config-line)# Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21737&t=21721 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ISDN Calls from Pots? [7:21738]
Hi Guys!! I have a topology with a 2620 router with 8 BRI S/T ports that will receive dial backup calls from remote locations using ISDN. The problem is that we don4t have ISDN service available on all of these locations. So my question is: is it possible to terminate a call originated from a POTS line on the ISDN BRI ports of the router?? I tried to call one of these ports from a POTS line and received the messages below from the ISDN debug. The router did not answer the calls. Some of the messages say that it4s not an ISDN end-to-end call, which is obvious. Is there anyway of making it work?? *Mar 8 00:49:26.014: Progress Ind i = 0x8A81 - Call not end-to-end ISDN, may have in-band info *Mar 8 00:49:26.018: Calling Party Number i = 0x0083, '07191338625', Plan:Unknown, Type:Unknown *Mar 8 00:49:26.026: ISDN BR1/3: Event: Received a call with a bad bearercap from 07191388225 on B1 *Mar 8 00:49:29.498: %ISDN-6-LAYER2DOWN: Layer 2 for Interface BR1/3, TEI 68 changed to down Thanks in advance!! Ednilson Rosa Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21738&t=21738 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Preliminary impressions - NLI CCIE Lab Study Guide [7:21739]
not the labs themselves, but the study prep booklet for which NLI charges 150 bucks. these are preliminary impressions, based upon referring to the guide while working on various study scenarios of my own. so far, the guide strikes me as somewhat shallow. very little detail. a couple of superficial tips. I have not looked at the ATM or the OSPF sections yet. These cover quite a few pages, and may offer more detail. there are two sections - one for note, the other containing configuration examples. both sections suffer from the same shortcoming. in particular: NTP - virtually nothing in the way of detail or explanation. nothing regarding authentication, for example. no detail on the difference between NTP peers and NTP client / servers, and more importantly, why you would use one or the other. Filtering - nothing direct. have to find information indirectly, under things like route-maps and prefix lists. distribute-lists are not covered at all. route-maps - again, pretty basic redistribution - this is a major Cisco core topic, yet this guide offers very few real tips. tunnels - very rudimentary. Otherwise, in general, I have not found much in the way of clarification of complex points. My impression is that a lot of these notes are *'s that the author wrote in his personal study book as he was going along. I am doing something similar as I go through things. in reviewing, I find that my own written word does not cover anywhere near what I have discovered as I work. I tend to * the gotcha's, which in turn trigger associations with the things I have learned. I suspect this guide is more a compilation of these kind of sentences. When I get into DLSw, SRTB, multicasting, and traffic shaping, I'll check how this guide stacks up. Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21739&t=21739 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OT: Let there be peace on earth [7:21740]
Let there be peace on earth The President has asked that we unite for a common cause. Since the hard line Islamic Terrorists can not stand nudity, and consider it a sin to see a naked woman that is not their wife: Tomorrow night at 6:00 PM EDT, all women should run out of their house naked to help weed out the terrorists. The United States appreciates your efforts, and applauds you. Be sure to spread the word, and?. God bless America! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21740&t=21740 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: BGP implementation project - help needed !!!!! [7:21702]
not meant to be disrespectful, but perhaps you and your boss should get together, recognize you don't have the expertise in house, and hire a consultant to 1) do the project plan and implementation and 2) in the course of the project train you and thus improve your skill level and your value to the company. Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of mailsecurite Sent: Tuesday, October 02, 2001 10:26 AM To: [EMAIL PROTECTED] Subject: BGP implementation project - help needed ! [7:21702] Hello, My boss ask me to conduct a BGP implementation for our site (Internet ecommerce platform with 2 ISP). I'm relatively new on that topic, so could you please help me to : 1 - construct my project plan and 2 - to made a draft of the technical implementation (I've got a lab). Experiences and god links are welcome. regards, steve. __ Do You Yahoo!? Listen to your Yahoo! Mail messages from any phone. http://phone.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21741&t=21702 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Slighty OT: ATM Network modules for 2600/3600 [7:21742]
I apologize for this but I'm having a tough time getting good information. We're considering migrating from our frame relay network to ATM. We were planning on doing some other upgrades anyway that include adding 2620 routers at our branches. Our provider says that they offer ATM in 3 Meg increments but it comes in on DS3 facilities. Do any of you know what network module I'd need for this? The 2600 has the NM-1ATM-25 available that sounds close, but it's for ADSL and we aren't doing that. Will it still work? Or, do I need a 3600 series router with a HSSI interface? Or, alternately, should I just get that lobotomy I've been considering?? Thanks! John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21742&t=21742 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]