RE: Passed CCIE Written, life is good [7:26584]

2001-11-18 Thread Kenneth Yeung

Would like to make some comments:
I am CCNP. I tried to review all the CCNP books, token ring paper, cross
reference to TCP/IP Jeff's book and Carlow's book.  But i got 65 point
(failed) in the first try.  I did Boston Test #1,2 and 3.  I re-took the
exam in two weeks time.  I got 88!  Mostly because of the test.  Without it,
i m sure i can't pass the test.  The questions are a bit "in-different".  It
seems any one choice can be the answer.
P.S : I hv no relation with Boston.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26670&t=26584
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off Topic - Baystack 350T [7:26431]

2001-11-18 Thread Robert Hanley

Nurul;
I've verified the process you been given, and it appears to be correct.
Keep in mind this is only going to reset the box to a null password for the
Manager account.
You still need to log in as Manager (Capital M) after the reboot.

For more info go to the support site and search under documentation for an
ARN Manual
http://www.nortelnetworks.com/servsup


"Nuurul Basar Mohd Baki" wrote in message
...
>Hai,
>
>I have a similar problem with Bay Advance Remote Node (ARN). I need to do a
>password recovery on it
>This is the suggestion given by Nortel tech support
>> ARN password removal
>> Fact: ARN
>> Symptom: If a customer has forgotten his Manager password for the ARN
>> Fix: Do the following steps:
>>
>> 1.Power Cycle the ARN
>>
>> 2.When the ARN starts cycling through Power on Diags, type Cntl-C
followed
>> by a carriage return.
>>This will put you in diagnostics mode and you will see the following
>> prompt: diag_1>>
>>
>> 3. At the prompt, type in the following command exactly as is:
>>
>>  d/l/n:5 41 0
>> This sequence will blank out the Manager password in NVRAM
>>
>> 4.Type boot or power cycle the ARN
>>
>I have try it but it wont works, I got 18 ARN to do password recovery
>
>Any help is appriactet
>
>
>Nuurul Basar Bin Mohd Baki
>Senior Customer Engineer
>Technical Support Department
>Solsis (M) Sdn Bhd
>Suite 5.02 Wisma Academy
>No 4A Jalan 19/1
>46300 Petaling Jaya
>Tel   603-79577300
>Fax   603-79562324
>
>
>> --
>> From: VoIP Guy[SMTP:[EMAIL PROTECTED]]
>> Reply To: VoIP Guy
>> Sent: Friday, November 16, 2001 7:56 PM
>> To: [EMAIL PROTECTED]
>> Subject: Re: Off Topic - Baystack 350T [7:26431]
>>
>> Use Xon/Xoff
>> 8,n,1
>>
>> The just hit enter, or ctr;+R.
>>
>>
>> ""Carroll Kong""  wrote in message
>> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> > At 09:47 PM 11/15/01 -0500, Mark Rose wrote:
>> > >I was given a Baystack 350t and I'm trying to get into it to set up
the
>> > >configuration. I am using the default settings (9600,8,1,no,1,none). I
>> am
>> > >entering ctrl+C as per documentation. I get no response. I could use
>> > >suggestions from anyone who has used this switch.
>> > >
>> > >TIA
>> > >Mark
>> > Try ctrl-d, enter, etc.  If it does not work, it might just be a bad
>> > one.  I did an audit with a pile of these darn bay stacks, and some of
>> them
>> > would just REFUSE to work.  Of course, since we audited so many of
them,
>> > 80% of them were consoleable, the others failed.  Ah well.
>> >
>> >
>> >
>> > -Carroll Kong




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26669&t=26431
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Memory [7:26659]

2001-11-18 Thread Jonathan Hays

Tim Booth wrote:

> Is the ROM in say, a 2501, actually EEPROM? Cisco doesn't differenciate
> between the two really. In the case that it is EEPROM, is it possible to
> re-write/erase it from within the IOS? I couldn't find any pertinant info
on
> the Cisco site about this..
>

Tim,
They are PROMs, as you can see on the following link (watch the wrap).
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_fix/cis2500/2509/acsvrug/maint.htm#xtocid128534




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26668&t=26659
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How can this be possible? Pinging the outside int [7:26667]

2001-11-18 Thread Jonathan Hays

Anh Lam wrote:

> Hi Everyone,
>
> I am always under the impression that one can NOT ping the outside
interface
> of a Cisco PIX firewall unless the command is used:
>
> conduit permit icmp any any
> conduit permit ip any any
>
> Well, I have a Cisco pix Firewall 515-UR model (96MB RAM/16MB Flash).
> This PIX firewall is running code version 6.0(1) with pdm version 1.11.
> Guess what, I can ping the outside interface just fine without the two
> commands mentioned above.
>
> Am I missing something?  Below is the config:

Anh,
The "conduit icmp" affects pinging *through* the firewall. You need to
disable interface
pinging. See (watch the wrap):
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/config/config.htm#xtocid366534




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26667&t=26667
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: The Scoop on PIX? [7:26607]

2001-11-18 Thread Jonathan Hays

"Howard C. Berkowitz" wrote:

> Space is at a premium in, for example, colocation facilities. The
> incremental cost of going from a half rack to a full rack, or going
> beyond one rack, can be quite significant.

I'll quibble a bit. Having worked several years at a Sun/Cisco reseller
during the
height of the dot.com era, I would have instantly agreed with this statement
until
recently. But I wonder if it's still true. One colo engineer has told me
that with many
colocators teetering on the brink of bankrupty that rack space is much
cheaper these
days and highly negotiable.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2&t=26607
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: What a Ride......Finally CCNP [7:26604]

2001-11-18 Thread Baker, Jason

incorrect

you can do CID exam before CCDA exam, however the DP will be
unrecognised
untill you sit and pass the CCDA




> -Original Message-
> From: fahim [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, 19 November 2001 2:54 pm
> To:   [EMAIL PROTECTED]
> Subject:  Re: What a Ride..Finally CCNP [7:26604]
> 
> Hi
> You need to have a CCDA before you go for CID.
> 
> Fahim
> CCNA CCDA
> "Juan Blanco"  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Team,
> > This morning I was able to pass the CIT(what a testhard)and become
> CCNP.
> > First I would like thank GOD, San Lazaro, my Family and all the members
> of
> > the Cisco Group Study  that have contributed to helping me pass my CCNP
> > Exams. Now I will take a week off(in order to spend some time with the
> > family).  I will be working on the CCDP before going for the written.
> > Questions:
> >
> > 1 - Should I take the CID and then the CCDA
> > 2 - What is the best book available (a book where I could learn not only
> > passing the test)
> >
> > Thanks
> > God Bless all.
> >
> > It feels good.
> >
> >
> > Juan Blanco




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26665&t=26604
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What a Ride......Finally CCNP [7:26604]

2001-11-18 Thread fahim

Hi
You need to have a CCDA before you go for CID.

Fahim
CCNA CCDA
"Juan Blanco"  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Team,
> This morning I was able to pass the CIT(what a testhard)and become
CCNP.
> First I would like thank GOD, San Lazaro, my Family and all the members of
> the Cisco Group Study  that have contributed to helping me pass my CCNP
> Exams. Now I will take a week off(in order to spend some time with the
> family).  I will be working on the CCDP before going for the written.
> Questions:
>
> 1 - Should I take the CID and then the CCDA
> 2 - What is the best book available (a book where I could learn not only
> passing the test)
>
> Thanks
> God Bless all.
>
> It feels good.
>
>
> Juan Blanco




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26664&t=26604
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NSA Cisco Router Security Guides [7:26655]

2001-11-18 Thread Wojtek Zlobicki

It appears the link was censored :P

http://nsa2.www.conxion.com/cisco/download.htm

> I saw this on another NG.  fyi
>
> thanks,
> -Brad Ellis
> CCIE#5796 (R&S / Security)
> Network Learning Inc
> [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26662&t=26655
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: boot failure [7:26656]

2001-11-18 Thread Kevin Wigle

Got a call just last week for a 2503.

I actually installed this router some 6 years ago.  Since then it has been
re-located a few times.

When I got to the router the support people there said that it had been
moved about in the rack recently.  Currently it was near the bottom of the
rack.  I was also told that it had been "flakey" for the last month or so.

Plugged in the laptop no response.  Since the circuit was down - cold booted
the router and got the same type of message you reported.

Took the router out of the rack - I was going to open it and check the
memory.  I was going to pop them and plug them back in no matter if they
were in study or not.

Well, when I got the router open I was met which such an accumulation of
dust, dirt and lint - the server room guy said "no way you cleaning that in
here!" and he took it outside in the hall and blew it out with some air.

When he brought it back I still reseated the memory and then turned it on
while still on the bench.  Seemed to work fine.  Put it back in the rack,
plugged in the ISDN and away she went.  Hasn't been down since - no
"flakiness" reported so far.

Kevin Wigle


- Original Message -
From: "Luke Sheppard" 
To: 
Sent: Sunday, 18 November, 2001 19:03
Subject: boot failure [7:26656]


> anyone know what to do about this?
>
> System Bootstrap, Version 4.14(9.1), SOFTWARE
> Copyright (c) 1986-1994 by cisco Systems
>
> Bad memory - wrote zero, read 0x8000 at location 0x0010
>
> that's all I get when I power on my 2501.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26661&t=26656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Off Topic - Baystack 350T [7:26431]

2001-11-18 Thread Nuurul Basar Mohd Baki

Hai,

I have a similar problem with Bay Advance Remote Node (ARN). I need to do a
password recovery on it
This is the suggestion given by Nortel tech support
> ARN password removal
> Fact: ARN
> Symptom: If a customer has forgotten his Manager password for the ARN
> Fix: Do the following steps:
> 
> 1.Power Cycle the ARN
> 
> 2.When the ARN starts cycling through Power on Diags, type Cntl-C followed
> by a carriage return. 
>This will put you in diagnostics mode and you will see the following
> prompt: diag_1>>
> 
> 3. At the prompt, type in the following command exactly as is:
> 
>  d/l/n:5 41 0
> This sequence will blank out the Manager password in NVRAM
> 
> 4.Type boot or power cycle the ARN
> 
I have try it but it wont works, I got 18 ARN to do password recovery

Any help is appriactet


Nuurul Basar Bin Mohd Baki
Senior Customer Engineer
Technical Support Department
Solsis (M) Sdn Bhd
Suite 5.02 Wisma Academy
No 4A Jalan 19/1 
46300 Petaling Jaya
Tel   603-79577300
Fax   603-79562324


> --
> From: VoIP Guy[SMTP:[EMAIL PROTECTED]]
> Reply To: VoIP Guy
> Sent: Friday, November 16, 2001 7:56 PM
> To:   [EMAIL PROTECTED]
> Subject:  Re: Off Topic - Baystack 350T [7:26431]
> 
> Use Xon/Xoff
> 8,n,1
> 
> The just hit enter, or ctr;+R.
> 
> 
> ""Carroll Kong""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > At 09:47 PM 11/15/01 -0500, Mark Rose wrote:
> > >I was given a Baystack 350t and I'm trying to get into it to set up the
> > >configuration. I am using the default settings (9600,8,1,no,1,none). I
> am
> > >entering ctrl+C as per documentation. I get no response. I could use
> > >suggestions from anyone who has used this switch.
> > >
> > >TIA
> > >Mark
> > Try ctrl-d, enter, etc.  If it does not work, it might just be a bad
> > one.  I did an audit with a pile of these darn bay stacks, and some of
> them
> > would just REFUSE to work.  Of course, since we audited so many of them,
> > 80% of them were consoleable, the others failed.  Ah well.
> >
> >
> >
> > -Carroll Kong




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26660&t=26431
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Memory [7:26659]

2001-11-18 Thread Tim Booth

Is the ROM in say, a 2501, actually EEPROM? Cisco doesn't differenciate
between the two really. In the case that it is EEPROM, is it possible to
re-write/erase it from within the IOS? I couldn't find any pertinant info on
the Cisco site about this..

Kind Regards,
Tim Booth
MCDBA, CCNP, CCDP
-
Those who would give up essential liberty to purchase a little temporary
safety deserve neither liberty nor safety.
Benjamin Franklin, 1759




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26659&t=26659
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: boot failure [7:26656]

2001-11-18 Thread Baker, Jason

well seeing what you cut and pasted below,
i think changing memory would be a good start don't you ?


> -Original Message-
> From: Luke Sheppard [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, 19 November 2001 11:03 am
> To:   [EMAIL PROTECTED]
> Subject:  boot failure [7:26656]
> 
> anyone know what to do about this?
> 
> System Bootstrap, Version 4.14(9.1), SOFTWARE
> Copyright (c) 1986-1994 by cisco Systems
> 
> Bad memory - wrote zero, read 0x8000 at location 0x0010
> 
> that's all I get when I power on my 2501.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26658&t=26656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CIT&ROUTING EXAM: # of Questions and [7:25716]

2001-11-18 Thread Sureshhomepage .com

Hi Shawn,
The info I gave was the current one. I just checked with the local sylvan 
admin and he confirmed me very strongly.

All the CCNP exam time, passing score and the no. of questions have been 
increased since 1st week of October '01, he said. CIT2.0 has got 76 
questions for 90 minutes.

I agree if you know the contents well you will be left with lots of time at 
the exam.

thanks
Suresh MCSE+I,CNE,CCSA,CLS,SCSA,CCSA,MCNS,CCNP,CCIE(Written)
http://www.sureshhomepage.com



>From: "Kaminski, Shawn G" 
>Reply-To: "Kaminski, Shawn G" 
>To: [EMAIL PROTECTED]
>Subject: RE: CIT & ROUTING EXAM: # of Questions and [7:25716]
>Date: Mon, 12 Nov 2001 15:11:58 -0500
>
>I don't believe this is correct. On the BSCN Routing 2.0 exam, there is not
>a set number of questions. You will receive between 60 and 70 questions and
>be allotted 60 to 75 minutes to complete it, depending how many questions
>you receive. The BSCN exam I took had 61 questions, 60 minutes to complete
>the exam, and a 690 to pass.
>
>My CIT 2.0 exam consisted of 61 questions with 75 minutes to complete the
>exam. The passing score was 692.
>
>I don't know how closely Cisco is following the "set number of questions"
>routine for their exams anymore. I really don't see why it matters anyway.
>If you know the material, you will pass. Cisco isn't out to try to screw
>anyone by giving an unfair combination of "number of questions" and "the
>time allotted" to complete them. If you know the material, you'll have
>plenty of time to complete and pass the exams.
>
>-Original Message-
>From: Sureshhomepage .com [mailto:[EMAIL PROTECTED]]
>Sent: Monday, November 12, 2001 11:48 AM
>To: [EMAIL PROTECTED]
>Subject: RE: CIT & ROUTING EXAM: # of Questions and Tim [7:25716]
>
>
>The no. questions in the Routing2.0 exam is 69(was 64) and the passing 
>score
>
>is 690. Time limit is 105minutes. CIT2.0 has got 76 questions for 90
>minutes.
>
>thanks
>Suresh CNE,MCSE+I,CLS,CCSA,SCSA,CCNA,CCNP
>http://www.sureshhomepage.com
>
>
>
>
> >From: "juno vtv"
> >Reply-To: "juno vtv"
> >To: [EMAIL PROTECTED]
> >Subject: RE: ROUTING EXAM: # of Questions and Time [7:25716]
> >Date: Thu, 8 Nov 2001 17:40:17 -0500
> >
> >I was also surprised that RAS had that many questions too.  I remember
> >the number of questions in the routing exam fell in the range of 62-66.
> >Good luck!
> >
> >
> >-junovtv
>_
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26635&t=25716
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: boot failure [7:26656]

2001-11-18 Thread Brad Ellis

Luke,

Open your router, make sure your memory did not get knocked out of the slot.
Pull the module out, and put it back in.  If it still doesnt work, get new
memory.  If that doesnt work, get smartnet!

thanks,
-Brad Ellis
CCIE#5796 (R&S / Security)
Network Learning Inc
[EMAIL PROTECTED]
used Cisco gear:  www.optsys.net
CCIE Labs, racks, and classes:  http://www.ccbootcamp.com/quicklinks.html
""Luke Sheppard""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> anyone know what to do about this?
>
> System Bootstrap, Version 4.14(9.1), SOFTWARE
> Copyright (c) 1986-1994 by cisco Systems
>
> Bad memory - wrote zero, read 0x8000 at location 0x0010
>
> that's all I get when I power on my 2501.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26657&t=26656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Is the NLI CCIE Lab package worth $650? [7:26653]

2001-11-18 Thread Gardner, Brent

I am in the process of studying for my lab and I was wondering if the
Network Learning Inc. (http://www.ccbootcamp.com) CCIE Lab Package was worth
the $650 price tag. In my opinion, $650 can buy a lot of other preparatory
material.  However, if it is essential, I will gladly pony up the money.
Any feedback from recent CCIEs who used the materials would be much
appreciated.

Also, for those of you who are also studying like crazy, I'm sure you're
book purchases have gotten out of hand.  Here are a couple of sites I
recommend for buying discounted books where you can usually get 30-40% off
of retail prices:

www.pricescan.com   This will compare a number of different book
suppliers.

www.bookpool.comIn my experience, these guys have the cheapest Cisco
books

www.walmart.com Yes, surprisingly enough, Wal-Mart is a great resource for
cheap books

www.bamm.comBooksamillion offers some great deals.  It is usually worth
it to buy their $5 discount membership fee.

You really only need to check Pricescan and Wal-Mart because Pricescan
covers both Bookpool and BAMM.

Thanks,

Brent Gardner




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26653&t=26653
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How can this be possible? Pinging the outside int [7:26617]

2001-11-18 Thread Anh Lam

Hi Everyone,

I am always under the impression that one can NOT ping the outside interface 
of a Cisco PIX firewall unless the command is used:

conduit permit icmp any any
conduit permit ip any any

Well, I have a Cisco pix Firewall 515-UR model (96MB RAM/16MB Flash).
This PIX firewall is running code version 6.0(1) with pdm version 1.11.
Guess what, I can ping the outside interface just fine without the two 
commands mentioned above.

Am I missing something?  Below is the config:



pixfirewall# wr t
Building configuration...
: Saved
:
PIX Version 6.0(1)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 intf2 security10
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
hostname pixfirewall
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 1720
fixup protocol rsh 514
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
names
pager lines 24
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto shutdown
mtu outside 1500
mtu inside 1500
mtu intf2 1500
ip address outside 172.16.1.73 255.255.255.0
ip address inside 192.168.1.73 255.255.255.0
ip address intf2 127.0.0.1 255.255.255.255
ip audit info action alarm
ip audit attack action alarm
no failover
failover timeout 0:00:00
failover poll 15
failover ip address outside 0.0.0.0
failover ip address inside 0.0.0.0
failover ip address intf2 0.0.0.0
pdm history enable
arp timeout 14400
static (inside,outside) 172.16.1.71 192.168.1.71 netmask 255.255.255.255 0 0
route outside 0.0.0.0 0.0.0.0 172.16.1.254 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 
0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
no sysopt route dnat
telnet timeout 5
ssh timeout 5
terminal width 80
: end

pixfirewall(config)# sh ver

Cisco Secure PIX Firewall Version 6.0(1)
PIX Device Manager Version 1.1(1)

Compiled on Thu 17-May-01 20:05 by morlee

pixfirewall up 12 hours 18 mins

Hardware:   PIX-515, 96 MB RAM, CPU Pentium 200 MHz
Flash i28F640J5 @ 0x300, 16MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB

0: ethernet0: address is 0050.54ff.7a24, irq 10
1: ethernet1: address is 0050.54ff.7a25, irq 7
2: ethernet2: address is 00aa.00bc.ba87, irq 11

Licensed Features:
Failover:   Enabled
VPN-DES:Enabled
VPN-3DES:   Disabled
Maximum Interfaces: 6
Cut-through Proxy:  Enabled
Guards: Enabled
Websense:   Enabled
Throughput: Unlimited
ISAKMP peers:   Unlimited

[alam@linux-ccie]$ ping 172.16.1.73
PING 172.16.1.73 (172.16.1.73) from 172.16.1.253 : 56(84) bytes of data.
Warning: time of day goes back, taking countermeasures.
64 bytes from 172.16.1.73: icmp_seq=0 ttl=255 time=962 usec
64 bytes from 172.16.1.73: icmp_seq=1 ttl=255 time=297 usec
64 bytes from 172.16.1.73: icmp_seq=2 ttl=255 time=288 usec

--- 172.16.1.73 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/mdev = 0.288/0.515/0.962/0.316 ms
[alam@linux-ccie]$

_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26617&t=26617
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



boot failure [7:26656]

2001-11-18 Thread Luke Sheppard

anyone know what to do about this?

System Bootstrap, Version 4.14(9.1), SOFTWARE
Copyright (c) 1986-1994 by cisco Systems

Bad memory - wrote zero, read 0x8000 at location 0x0010

that's all I get when I power on my 2501.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26656&t=26656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NSA Cisco Router Security Guides [7:26655]

2001-11-18 Thread Brad Ellis

I saw this on another NG.  fyi

thanks,
-Brad Ellis
CCIE#5796 (R&S / Security)
Network Learning Inc
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26655&t=26655
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: HSRP on Cisco with 2 Ehternet to ISP [7:26528]

2001-11-18 Thread Kevin Wigle

I did a similar config at a previous contract and I can't seem to find my
notes.

But yes, HRSP was still used for the "physical" breakdown and I used policy
routing and route maps with BGP to move the dynamic routing.

I originally wanted to use OSPF but the trick was trying to find a way to
change routing with the ethernet port still showing "up".

After moving to BGP and using route maps and policy routing, I was able to
get BGP to stop announcing out the bad route.
Sorry I don't any example code.. guess I should have saved it for my
personal use (I was kinda happy with myself at the time as it had took a
good week to figure it out - I wasn't a BGP expert)

As I said before, floating statics also work.

Kevin Wigle

- Original Message -
From: "kim" 
To: "Kevin Wigle" ; 
Sent: Saturday, 17 November, 2001 21:10
Subject: Re: HSRP on Cisco with 2 Ehternet to ISP [7:26528]


> Thank you for response,
>
> The problem seems when a link is down (not PPP, but
> EthernetFasE0/1 -local ->ISP -Catalyst-  > ISP-router ATM-PVC) ,local
router
> will not see at the connection is down and continue announes its LAN out.
> So is BGP and HSRP will help for redundant solution ?
>
> Regards
>
>
>
> > I've been there a few times.
> >
> > The issue is that ethernet does not depend on keep alives from the
distant
> > end like a wan link.  Ethernet sends itself keepalives.
> >
> > So  probably a net diagram would be like:
> >
> > local router > ISP switch on site --> ISP network >
> destination
> > ..
> >
> > Unless the local ISP switch goes down the local router will see a link
and
> > it will never "go down" if anything past the local switch is dead.
> >
> > But HSRP is still useful to watch if the physical interface dies (track
> the
> > interface) but to guard against an upstream failure I have used floating
> > statics to switch routes. Of course this is a manual config and if
> addresses
> > change you have to change the config.
> >
> > Getting fancier involved using BGP and route maps - which made it
dynamic.
> >
> > Kevin Wigle
> >
> >
> > - Original Message -
> > From: "Brown, Ricky"
> > To:
> > Sent: Friday, 16 November, 2001 15:40
> > Subject: RE: HSRP on Cisco with 2 Ehternet to ISP [7:26528]
> >
> >
> > > Try using the track interface command on each router.
> > >
> > > -Original Message-
> > > From: kim [mailto:[EMAIL PROTECTED]]
> > > Sent: Friday, November 16, 2001 2:56 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: HSRP on Cisco with 2 Ehternet to ISP [7:26528]
> > >
> > >
> > > It is routing problem when  configure 2 routers 2621( 2Ethernet)have
the
> > > same
> > > LAN ?
> > >
> > >  router A :fastE0/0  is LAN  fastE0/1 (10Mbs)Link to ISP router 1
> > >  router B FastE0/0 ls LAN   fastE0/1  (10Mbs) link to ISP router 2
> > >
> > > router A is active
> > > router B is backup
> > > When one of LINK (muliti access connection )is going down, will router
> > > update
> > > at connection breakdown ?
> > >
> > >
> > >
> > > Regards
> > >
> > > Kim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26654&t=26528
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fw: Salary Expectations/CCNP's!!!!!!!!! [7:25805]

2001-11-18 Thread Jim McDowell

I have never personally seen anyone in this discussion group ask "how to
turn a router on".  Perhaps you have and, in that case I might agree with
you.  However, what is easy for you may not be so easy for someone else.

I think this thread was started by someone asking a simple question about
salaries.  The subject was stated plainly in the subject line, so anyone who
sorts by subject just simply doesn't have to read it.

If you feel as though the subject doesn't belong on the group then why not
just ignore the thread vice sending a scathing, derogatory reply that has
the sole purpose of making you feel good?  As far as the group being a free
consulting service, every group member is a volunteer.






>No one needs a suit of armor to join a discussion.  They just need to join
>it intelligently.  That's why it's recommended in the faq to lurk for
awhile
>when you're a newbie before jumping in.
>
>If someone posts a questions saying... hey... I searched on Cisco and here
>and there and I just don't get this... help me understand... no one
anywhere
>would bash them for trying and not understanding.  Now if someone posts a
>question such as how do I recover a password on a 2500, it's obvious they
>made no effort as this can be found on Cisco's site in less time than it
t>ook to ask the question.  But perhaps this is the type of "intelligent"
>discussion you are referring to and would like to see more of in this
group.
>Well I would argue that by promoting that you are devaluing this group,
it's
>users, and the truely "intelligent" discussions that go on here.  That's
>just what we all need is to sort through 30 messages a day of how do I turn
>on my router, what is this ethernet thingy on my rooter, what does ram
stand
>for?
>
>Too many people treat this group as the free consulting group and the first
>place to look for answers and I do not think that should be encouraged.
>One's own research should be the first place and the knowledgeable people
of
>this group (which I do NOT claim to be one) should asked when that fails.
>
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26652&t=25805
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



transcender CCNP [7:26651]

2001-11-18 Thread Ahmed

heloo all ,
any body has a transcender for
1-  640-505 Remote Access
or
2- Cisco Internetwork Troubleshooting Support (CIT)
we can trade .i have trancender  for 640-503 Routing , 640-504 Switching
,Router sim and switch sim and MCSE 2000 .

Regards




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26651&t=26651
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: The Scoop on PIX? [7:26607]

2001-11-18 Thread Howard C. Berkowitz

>"nrf"  wrote
>
>But in general, it is true that over time, more and more features will be
>incorporated by Cisco into IOS, such that it may not prove necessary to buy
>those ancillary appliances that Cisco sells and just get a pumped up IOS
>router that does everything.   It may not do things as well as that
>dedicated appliance, but it may be good enough for many customers.

One consideration in this, especially for providers, is the footprint 
taken by dedicated appliances.

>For
>example, right now you can get an IOS with that contain some (not all) IDS
>features, which might make an IDS sensor unnecessary if you don't need a
>complete IDS solution.  You can get IOS with SLB, which might make a
>LocalDirector or even a CSS 11000 unnecessary.

I seem to remember seeing a press release saying that the SLB blade 
for the 6500 cost more than three times the price it would take to 
use three 11000's--but Cisco felt customers were willing to pay that 
penalty for physical size reduction (i.e., eliminating the need for 
separate 11000's.).

Space is at a premium in, for example, colocation facilities. The 
incremental cost of going from a half rack to a full rack, or going 
beyond one rack, can be quite significant.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26649&t=26607
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: new book [7:26648]

2001-11-18 Thread Howard C. Berkowitz

>Howard,
>
>Congrats on the new book.  The title sounds like an interesting read, who
>is publishing it?
>
>Brian


Wiley--same as my previous one, WAN Survival Book -- the two are 
really mirror images on different sides of the SLA. WAN survival is 
about how to pick alternative WAN strategies for the enterprise, 
while the new one is how the service provider delivers them.

I was surprised the other day to receive a package of books in 
Chinese, which I eventually figured out was a translation of my 
Designing Routing and Switching, published by a Macmillan affiliate 
in Beijing.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26648&t=26648
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



new book [7:26647]

2001-11-18 Thread Brian

Howard,

Congrats on the new book.  The title sounds like an interesting read, who
is publishing it?

Brian


On Sun, 18 Nov 2001, Howard C. Berkowitz wrote:

> "Dennis"  pretty well expressed my position on
> answering questions.  The questions I'm most likely to answer on the
> group are ones that deal with interpretation of protocol or design
> nuances -- frankly, when there may or may not be an exact answer even
> among experts.  Another kind that I'll tend to comment on are things
> where there are subtle things (especially the interaction of some
> subtle things) like the current thread on OSPF load balancing.
>
> When the question, in my opinion, can fairly easily be answered with
> a search on CCO or in the Groupstudy archives, I may or may not
> comment. I'm most likely to  comment, in a non-confrontational way,
> that I've already answered this question in the archives.
>
> There are a couple of categories where I'm quite unlikely to answer,
> but I do sometimes grit my teeth not to say something sarcastic. One
> is where the question starts out "my customer wants...", which is
> often just the sort of thing that consultants are paid for.  Even
> worse are some of the discussions where the customer wants
> multihoming, complex BGP (_not_ the same thing), etc., where someone
> who doesn't have experience can disrupt significant parts of the
> Internet.
>
> Long ago and far away, the University of Maryland had a locally
> developed programming language called RALPH (Re-entrant Algorithmic
> Language Processor H*--a footnote explained the H was there to be
> cute).  In the RALPH documentation, there was a single-paragraph
> description of a particular feature, which included the warning "if
> you don't understand, from this paragraph alone, why using this
> feature is dangerous, don't use it. Get expert help."  Same sort of
> thing. I may give a couple of paragraphs about how, in the real
> world, you deal with some global routing issue, but if the questioner
> doesn't get it from those answers, there's too much background needed
> to solve it quickly.
>
> Don't get me wrong -- I am quite willing to _ask_ questions in the
> appropriate forum, and also have my quality checked by others. But
> I've paid my dues and shown the attitude that I can ask Sue Hares,
> Yakov Rekhter, or Tony Li a BGP question, Dave Katz or Tony an ISIS
> question, John Moy an OSPF question, etc.  But it took me years to
> get to a point where I "earned my bones" and could do that.  I have a
> moral obligation to answer technical questions on RFCs and Internet
> Drafts I've written or coauthored -- they are called Requests for
> Comments for (an admittedly historic) reason!
>
> I've just finished a book "Building Service Provider Networks," which
> deals with the design of networks using BGP, MPLS, L2TP, etc., rather
> than how to configure them (it should be out early next year).
> Annlee Hines was my principal reviewer, and believe me, I listened
> carefully when she said something wasn't clear. But I didn't ask her
> to do my work for me.
>
> Howard
>
>
> >No one needs a suit of armor to join a discussion.  They just need to join
> >it intelligently.  That's why it's recommended in the faq to lurk for
awhile
> >when you're a newbie before jumping in.
> >
> >If someone posts a questions saying... hey... I searched on Cisco and here
> >and there and I just don't get this... help me understand... no one
anywhere
> >would bash them for trying and not understanding.  Now if someone posts a
> >question such as how do I recover a password on a 2500, it's obvious they
> >made no effort as this can be found on Cisco's site in less time than it
> >took to ask the question.  But perhaps this is the type of "intelligent"
> >discussion you are referring to and would like to see more of in this
group.
> >Well I would argue that by promoting that you are devaluing this group,
it's
> >users, and the truely "intelligent" discussions that go on here.  That's
> >just what we all need is to sort through 30 messages a day of how do I
turn
> >on my router, what is this ethernet thingy on my rooter, what does ram
stand
> >for?
> >
> >Too many people treat this group as the free consulting group and the
first
> >place to look for answers and I do not think that should be encouraged.
> >One's own research should be the first place and the knowledgeable people
of
> >this group (which I do NOT claim to be one) should asked when that fails.
> >
> >--
> >
> >-=Repy to group only... no personal=-
> >
> >""Jim McDowell""  wrote in message
> >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> >>  You have my vote on that.  I think there would be many more thoughtful
> >>  discussions if most average folks didn't feel like they need to put on
a
> >>  suit of armor just to join the discussion.  But alas...it seems to be
> that
> >>  way in every discussion group.
> >>
> >>
> >>
> >>  >Carrol,. I agree with you that some would learn slower or not at all,
> but

Interesting PIX / HTTP problem [7:26646]

2001-11-18 Thread Tim Bowyer

The internal users from my company are accessing a web site from our secured
backbone going through PIX and Raptor. There are 2 servers with different
public IP address .
The two servers are identical according to the server admin and application
folks.
One of them is accessible from our backbone but the other one does not
respond
and we get http 500 error.
These servers are accessible once we dial any ISP and not go through PIX etc.
Users in our internal backbone are not having problems accessing any publuc
web sites.
So the problem seems to be at this server end ?
 This Server does something not allowed through the PIX. It probably breaches
security ??
I get proper response once I telnet on port 80 from our  Gateway router
connected to Internet. When I do telnet from Internal router just behind PIX
it gives me error.

Any suggestions ???




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26646&t=26646
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT: Thoughts from CCIE#8387 (longish) [7:26577]

2001-11-18 Thread juno vtv

Bravo Nigel!

Thank you very much for that beautiful insight!  It's always great to hear
someone achieving their dreams.

-junovtv


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26645&t=26577
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 802.2 Frames [7:25925]

2001-11-18 Thread Jonathan Hays

Priscilla Oppenheimer wrote:

> Here's a copy of the message I sent to CertificationZone over two weeks ago
> about the ARP errors. I thought they would fix them.
>
> An ARP frame does not have an IP header. Figure 2 should show a real ARP
> frame. Note that the destination is six sets of FFs (not the four in the
> figure) and that there's no IP layer.
>
> Ethernet Header
>Destination:  FF:FF:FF:FF:FF:FF  Ethernet Broadcast
>Source:   00:00:0C:05:3E:80
>Protocol Type:0x0806
> ARP - Address Resolution Protocol
>Hardware: 1  Ethernet (10Mb)
>Protocol: 0x0800  IP
>Hardware Address Length:  6
>Protocol Address Length:  4
>Operation:1 ARP Request
>Sender Hardware Address:  00:00:0C:05:3E:80
>Sender Internet Address:  172.16.10.1
>Target Hardware Address:  00:00:00:00:00:00
>Target Internet Address:  172.16.10.10
>
> Figure 3 needs to be fixed also. A reply doesn't have an IP header either.
> Does this matter? Yes. If you set a filter to capture just IP packets with
> a protocol analyzer or debugged just IP packets on a router, for example,
> you would miss all the ARPs since they aren't IP packets. Plus we expect
> accuracy from CertificationZone! ;-)
>
> Priscilla
>
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com
Interesting...
Thanks!!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26644&t=25925
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Clockrate vs Bandwidth [7:26640]

2001-11-18 Thread Stefan Dozier

>Hi All,

>As I know that when you connect two routers with back-to-back cable and one
>of
>the routers has to set the clockrate to be the DCE end.

>Basically, the clockrate is limit the "speed" of the serial link. And the
>bandwidth is only for the routing.

>But someone told me that the bandwidth can also limit the speed of the
serial
>link. Is it true? And under what situation?

>Thanks.

>Francis

That "someone" was misinformed! This is straight from CCO, and I'll
post the actual link, so you can see for yourself.

The bandwidth command sets an informational parameter only; you cannot
adjust the actual bandwidth of an interface with this command.

Here's the linkwatch the word wrap!

http://www.ieng.com/univercd/cc/td/doc/product/software/ios120/12cgcr/inter_
r/iraccess.htm#xtocid1599394


HTH

Stefan#




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26643&t=26640
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Salary Expectations/CCNP's!!!!!!!!! [7:25805]

2001-11-18 Thread Howard C. Berkowitz

"Dennis"  pretty well expressed my position on 
answering questions.  The questions I'm most likely to answer on the 
group are ones that deal with interpretation of protocol or design 
nuances -- frankly, when there may or may not be an exact answer even 
among experts.  Another kind that I'll tend to comment on are things 
where there are subtle things (especially the interaction of some 
subtle things) like the current thread on OSPF load balancing.

When the question, in my opinion, can fairly easily be answered with 
a search on CCO or in the Groupstudy archives, I may or may not 
comment. I'm most likely to  comment, in a non-confrontational way, 
that I've already answered this question in the archives.

There are a couple of categories where I'm quite unlikely to answer, 
but I do sometimes grit my teeth not to say something sarcastic. One 
is where the question starts out "my customer wants...", which is 
often just the sort of thing that consultants are paid for.  Even 
worse are some of the discussions where the customer wants 
multihoming, complex BGP (_not_ the same thing), etc., where someone 
who doesn't have experience can disrupt significant parts of the 
Internet.

Long ago and far away, the University of Maryland had a locally 
developed programming language called RALPH (Re-entrant Algorithmic 
Language Processor H*--a footnote explained the H was there to be 
cute).  In the RALPH documentation, there was a single-paragraph 
description of a particular feature, which included the warning "if 
you don't understand, from this paragraph alone, why using this 
feature is dangerous, don't use it. Get expert help."  Same sort of 
thing. I may give a couple of paragraphs about how, in the real 
world, you deal with some global routing issue, but if the questioner 
doesn't get it from those answers, there's too much background needed 
to solve it quickly.

Don't get me wrong -- I am quite willing to _ask_ questions in the 
appropriate forum, and also have my quality checked by others. But 
I've paid my dues and shown the attitude that I can ask Sue Hares, 
Yakov Rekhter, or Tony Li a BGP question, Dave Katz or Tony an ISIS 
question, John Moy an OSPF question, etc.  But it took me years to 
get to a point where I "earned my bones" and could do that.  I have a 
moral obligation to answer technical questions on RFCs and Internet 
Drafts I've written or coauthored -- they are called Requests for 
Comments for (an admittedly historic) reason!

I've just finished a book "Building Service Provider Networks," which 
deals with the design of networks using BGP, MPLS, L2TP, etc., rather 
than how to configure them (it should be out early next year). 
Annlee Hines was my principal reviewer, and believe me, I listened 
carefully when she said something wasn't clear. But I didn't ask her 
to do my work for me.

Howard


>No one needs a suit of armor to join a discussion.  They just need to join
>it intelligently.  That's why it's recommended in the faq to lurk for awhile
>when you're a newbie before jumping in.
>
>If someone posts a questions saying... hey... I searched on Cisco and here
>and there and I just don't get this... help me understand... no one anywhere
>would bash them for trying and not understanding.  Now if someone posts a
>question such as how do I recover a password on a 2500, it's obvious they
>made no effort as this can be found on Cisco's site in less time than it
>took to ask the question.  But perhaps this is the type of "intelligent"
>discussion you are referring to and would like to see more of in this group.
>Well I would argue that by promoting that you are devaluing this group, it's
>users, and the truely "intelligent" discussions that go on here.  That's
>just what we all need is to sort through 30 messages a day of how do I turn
>on my router, what is this ethernet thingy on my rooter, what does ram stand
>for?
>
>Too many people treat this group as the free consulting group and the first
>place to look for answers and I do not think that should be encouraged.
>One's own research should be the first place and the knowledgeable people of
>this group (which I do NOT claim to be one) should asked when that fails.
>
>--
>
>-=Repy to group only... no personal=-
>
>""Jim McDowell""  wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>>  You have my vote on that.  I think there would be many more thoughtful
>>  discussions if most average folks didn't feel like they need to put on a
>>  suit of armor just to join the discussion.  But alas...it seems to be
that
>>  way in every discussion group.
>>
>>
>>
>>  >Carrol,. I agree with you that some would learn slower or not at all,
but
>I
>>  >think you are incorrect on your devaluation of respect. It's easy to say
>>  >that medicine tastes bad but is necessary. But I propose to the group
>that
>>  >the damage is more than the help. There are many lurkers that would
>surely
>>  >participate more and in turn learn more through 

Re: The Scoop on PIX? [7:26607]

2001-11-18 Thread trammer

I guess just to look at it from a high level or simple view is to evaluate
your network and business needs when it comes to the firewall topic and
evaluate the importance of the firewall in both your network needs and as a
business need.

If you feel that the firewall aspect of your network does not require the
horsepower, functionality, failover, expansion, etc. of a dedicated purpose
box such as the PIX, then a regular router (2600, 3600, etc.) running the
IOS firewall code may be the correct step.

It comes down to the importance and priority level, of firewall security in
your network and business.  Unless it makes business sense to go with an IOS
firewall device, I've always taken a religion type approach in that Cisco
makes specific function devices that were designed to serve specific
functions in the network very effectively, so to use a box that has that
function as an "add-on, available feature" may or may not be what you want.

Ultimately you may refer to the term "you get what you pay for".


My two cents worth.


Cheers



""Carroll Kong""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> At 06:08 PM 11/17/01 -0500, Andrew Michael wrote:
> >Hi all.
> >
> >   What are some of the reasons why a person would choose a PIX solution
> >rather than a good router with the the right IOS for security?
>
> The Pix is a stateful firewall, Cisco routers (as far as I know,
typically)
> are not.  Generally higher performance, short of using CEF and other
> possibly buggy speed optimizations.
>
> >   From what I've read on Cisco's site, there does not seem to be the
huge
> >gap between using a router as a firewall solution vs. using a PIX, as
some
> >people make it sound.
>
> Cisco calls is the Adaptive Security Algorithm or something.  Basically,
it
> has a stateful firewall mechanism.
>
> >   One last thing...for the life of me, I can't find what "PIX" stands
for!
> >Any help appreciated!  Thanks in advance.
>
> I believe Private Internet Exchange.
> -Carroll Kong




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26641&t=26607
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Clockrate vs Bandwidth [7:26640]

2001-11-18 Thread kwock99

Hi All,

As I know that when you connect two routers with back-to-back cable and one
of
the routers has to set the clockrate to be the DCE end.

Basically, the clockrate is limit the "speed" of the serial link. And the
bandwidth is only for the routing.

But someone told me that the bandwidth can also limit the speed of the serial
link. Is it true? And under what situation?

Thanks.

Francis




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26640&t=26640
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Boson Tests border on Unethical [7:26639]

2001-11-18 Thread Gardner, Brent

I too recently passed my written CCIE.  I would go so far to say that the
Boson tests push the limits in terms of ethical test preparation.  I would
say there were approximately five questions on the practice exams that were
right out of the Cisco test.  Most of these questions were worded almost
exactly the same as they were in the CCIE written and the material they
touched on was pretty esoteric.

Brent Gardner




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26639&t=26639
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN problem [7:26625]

2001-11-18 Thread the other jason

Zapeta -

Suggest you use "debug ppp" (particularly, "debug ppp authentication") 
to determine what is going on. My ignorant hunch would be an 
authentication problem (the callback connection is established, then 
dropped). In particular, don't you need the command "authentication 
chap" on R9?

Jason

zapeta zape wrote:

> Hello Guys,
> I am having problem with with ISDN confideration. Can any help?
> I have 1 ISDn connection between r8 and r9 and I want r8 to initiate a
call
> and get authenticated by r9
> Here is the configuration
> 
> 
> R8
> username cisco5 password 0 cisco
> username r9 password 0 cisco
> !
> interface BRI0/0
> ip address 150.10.65.1 255.255.255.252
> no ip directed-broadcast
> encapsulation ppp
> ip ospf network non-broadcast
> ip ospf demand-circuit
> ip ospf database-filter all out
> dialer callback-secure
> dialer enable-timeout 9
> dialer map ip 150.10.65.2 name r9 class dial1 broadcast 7704324217
> dialer load-threshold 128 outbound
> dialer-group 1
> isdn switch-type basic-ni
> isdn spid1 77043242400101
> ppp callback request
> ppp authentication chap
> ppp multilink
> !
> map-class dialer dial1
> dialer callback-server username
> !
> 
> access-list 101 deny   ospf any any
> access-list 101 permit ip any any
> dialer-list 1 protocol ip list 101
> 
> 
> ==
> r9
> 
> username cisco5 password 0 cisco
> !
> 
> interface BRI0/0
> ip address 150.10.65.2 255.255.255.252
> encapsulation ppp
> ip ospf network non-broadcast
> ip ospf demand-circuit
> ip ospf database-filter all out
> dialer callback-secure
> dialer map ip 150.10.65.1 name cisco5 class dial1 broadcast 7704324240
> dialer load-threshold 1 either
> dialer-group 1
> isdn switch-type basic-ni
> isdn spid1 77043242170101
> cdapi buffers regular 0
> cdapi buffers raw 0
> cdapi buffers large 0
> ppp callback accept
> ppp chap hostname cisco5
> ppp multilink
> !
> map-class dialer dial1
> dialer callback-server username
> !
> access-list 101 deny   ospf any any
> access-list 101 permit ip any any
> dialer-list 1 protocol ip list 101
> 
> 
> 
> When I tried to ping the dialer map this is what I am getting:
> 
> Mar  2 04:38:24: %LINK-3-UPDOWN: Interface BRI0/0:2, changed state to up
> *Mar  2 04:38:24: %ISDN-6-CONNECT: Interface BRI0/0:2 is now connected to 
> 7704324240
> *Mar  2 04:38:24: %LINK-3-UPDOWN: Interface BRI0/0:2, changed state to down
> *Mar  2 04:38:24: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to up
> *Mar  2 04:38:24: %ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 
> 7704324217
> *Mar  2 04:38:24: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to down
> *Mar  2 04:38:26: %LINK-3-UPDOWN: Interface BRI0/0:2, changed state to up
> *Mar  2 04:38:26: %ISDN-6-CONNECT: Interface BRI0/0:2 is now connected to 
> 7704324240



-- 
Jason

Boson BCMSN1 BSCN2 BSCI2 practice tests
E-Quizware CCIE practice test




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26638&t=26625
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VoIP questions? Get "Integrating Voice and Data Networks" [7:26637]

2001-11-18 Thread Neal Rauhauser

Any question you may have about Cisco VoIP is answer in the Cisco
Press book:

Integrating Voice and Data Networks
ISBN1-57870-196-1



Farhang Sharifi wrote:
> 
> Dear all,
> Does anybody have info on VoIP using Cisco platform?
> I have the following question:
> I am using an AS5300 system for VoIP termination for the traffic that is
> comming from a carrier, Now I want to add a new carrier so that both can
> send traffic simultaniously. I dont know how I sould set up the Cisco and
if
> I need additional software or hardware.
> 
> Any idea welcome.
> 
> Thank you and best regards
> Farhang Sharifi
-- 
Neal Rauhauser CCNP, CCDP   voice: 402-391-3930
http://AmericanRelay.comfax  : 402-951-6390
mailto:[EMAIL PROTECTED]  fcc  : k0bsd




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26637&t=26637
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Salary Expectations/CCNP's!!!!!!!!! [7:25805]

2001-11-18 Thread Dennis

No one needs a suit of armor to join a discussion.  They just need to join
it intelligently.  That's why it's recommended in the faq to lurk for awhile
when you're a newbie before jumping in.

If someone posts a questions saying... hey... I searched on Cisco and here
and there and I just don't get this... help me understand... no one anywhere
would bash them for trying and not understanding.  Now if someone posts a
question such as how do I recover a password on a 2500, it's obvious they
made no effort as this can be found on Cisco's site in less time than it
took to ask the question.  But perhaps this is the type of "intelligent"
discussion you are referring to and would like to see more of in this group.
Well I would argue that by promoting that you are devaluing this group, it's
users, and the truely "intelligent" discussions that go on here.  That's
just what we all need is to sort through 30 messages a day of how do I turn
on my router, what is this ethernet thingy on my rooter, what does ram stand
for?

Too many people treat this group as the free consulting group and the first
place to look for answers and I do not think that should be encouraged.
One's own research should be the first place and the knowledgeable people of
this group (which I do NOT claim to be one) should asked when that fails.

--

-=Repy to group only... no personal=-

""Jim McDowell""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> You have my vote on that.  I think there would be many more thoughtful
> discussions if most average folks didn't feel like they need to put on a
> suit of armor just to join the discussion.  But alas...it seems to be that
> way in every discussion group.
>
>
>
> >Carrol,. I agree with you that some would learn slower or not at all, but
I
> >think you are incorrect on your devaluation of respect. It's easy to say
> >that medicine tastes bad but is necessary. But I propose to the group
that
> >the damage is more than the help. There are many lurkers that would
surely
> >participate more and in turn learn more through being active rather than
> >just lurking if indeed they could trust that they would not be humiliated
> if
> >one of their questions was not up to par. So, although a demeaning
message
> >may be given to one of the few deserving participants, it will cause many
> >participants not to grow as fast as they would if they were actively
> >conversing.
> >I really don't think you're argument holds water because of that. Besides
> >the same finite resource you refer to are wasted with the rant as with
the
> >question. If the resources are the reason for the rant, then the rant is
> >self defeating.
> >
> >Larry Puckette
> >Network Analyst CCNA,MCP,LANCP
> >Temple Inland
> >[EMAIL PROTECTED]
> >512/434-1838




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26636&t=25805
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Passed CCIE Written, life is good [7:26584]

2001-11-18 Thread Henk Wolf

Tnx for the feedback.
Did you do CCNP / CCDP as well?
If so how do these exams compare to the Written CCIE?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26634&t=26584
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VoIP Using Cisco [7:26632]

2001-11-18 Thread Farhang Sharifi

Dear all,
Does anybody have info on VoIP using Cisco platform?
I have the following question:
I am using an AS5300 system for VoIP termination for the traffic that is
comming from a carrier, Now I want to add a new carrier so that both can
send traffic simultaniously. I dont know how I sould set up the Cisco and if
I need additional software or hardware.

Any idea welcome.

Thank you and best regards
Farhang Sharifi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26632&t=26632
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



reverse telnet [7:26631]

2001-11-18 Thread Henk Wolf

Exactly what is reverse telnet and how does this relate
to TCP portnumbers?

>From what I know, 
normally a server, e.g. a router, is running a Telnet deamon.
This deamon is waiting for incoming connections on its serverport 23.
So I guess, after the init, a client sends a packet Dest Port = 23,
then the server responds with Source Port 23, Dest Port = something
above the 1023 range and we have Telnet.

I red that with reserve telnet, port 2000 + tty number is used.

So how must I figure this:
 does the client send to packet to the Telnet deamon on the router on Dest
port 2003? or how does this work and why is it called reverse?

With regards,
  Henk




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26631&t=26631
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCDP Certification [7:26608]

2001-11-18 Thread [EMAIL PROTECTED]

CCDP exam (640-025) not 640-509. 640-509 for Foundation exam.

Regards
Jaka

- Original Message -
From: "Tim Booth" 
To: 
Sent: Sunday, November 18, 2001 7:20 AM
Subject: Re: CCDP Certification [7:26608]


> > Today I finished taking my last test for the CCNP certification. I took
> the
> > 640.503, 640.504, 640.505 and the 640.506 According to CISCO
Certification
> > web page the requirement to become CCDP you will need the 503, 504, 505
> and
> > 509 My question is the only test that I need to take to become CCDP is
the
> > CID(640.509)
>
> You need to be a CCDA before you can become a DP...
>
> Kind Regards,
> Tim Booth
> MCDBA, CCNP, CCDP
> -
> Those who would give up essential liberty to purchase a little temporary
> safety deserve neither liberty nor safety.
> Benjamin Franklin, 1759




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26630&t=26608
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNA 1.0 and CCNP 2.0 [7:26606]

2001-11-18 Thread Engelhard M. Labiro

> I have a question here, I got my CCNA 1.0 before and I completed the
> CCNP 2.0 today. Do I need to re-exam CCNA 2.0??
> 

FYI, you can monitor your cert. progress and the expiration
date for each certification you earned through
http://www.galton.com/~cisco.

HTH




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26629&t=26606
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



SpectraLink Wireless IP Phones. [7:26628]

2001-11-18 Thread Quek, Steven

Hi there,

Currently I am working on a deal on Cisco Wireless with SpectraLink IP
Phones.
Personally I had never touch on these before, anyone out there care to
give
some comment and share with me your experience with these
implementation.

Your information is greatly appreciated.

Thank you & have a nice day.

With regards
Steven Quek




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26628&t=26628
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]