Re: OT:Microsoft Groupstudy??/support [7:28514]
msnews.microsoft.com -- Navin Parwal [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Guys, > > Aneone knows if there is any studygroup or newsgroup for microsoft > related helps. > > Thanks > > Tom > > _ > Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28517&t=28514 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Subnetting [7:27808]
hi if you are ready to also help me with your pay packet, then contact me and I will be more than pleased to help you sort this out. - Original Message - From: Andy Hutchinson To: Sent: Friday, November 30, 2001 6:37 AM Subject: Subnetting [7:27808] > Can anyone help ! > I have been assigned by our Head Office a Class B address > (Let's say 172.133.205.0) with a subnet mask of 255.255.255.0 > which gives me 254 hosts available. > However i have to split this between 3 locations > like so : > > Loc A : Minimum Addresses Required 160 (HQ) > Loc B : Minumum Addresses Required 16 > Loc C : Minumum Addresses Required 48 > > Loc B & C will each have a router that connects to a router at Loc A. > > Any ideas on how this can done ? > > Thanks > > Andy Hutchinson _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28516&t=27808 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OT:Microsoft Groupstudy??/support [7:28514]
Guys, Aneone knows if there is any studygroup or newsgroup for microsoft related helps. Thanks Tom _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28514&t=28514 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX On A PC? [7:28342]
Thanks John, this makes the light a little brighter. I just need practice anyway, so this will do and the price aint bad... Looks like its time to browse over to e-bay... Cheers! John Kaberna wrote: >For the cost of buying a new low-end PC you can get a 501. So, unless you >need multiple interfaces its not really worth it. Plus, the 501 can run 6.x >code and you can't with a 2MB flash card. Unless you've got a spare PC with >the required parts lying around your best bet is to probably spend $500 >bucks on a 501. If you do plan on building your own, there's not much more >to it than building a skeleton PC. That's why there isn't much more info >about how to do it. If you know about basic PC hardware then you can figure >it out. > >John Kaberna >CCIE #7146 >www.netcginc.com >(415) 750-3800 > > >""Gaz"" wrote in message >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > >>Has anyone got more details on this please. >>I've seen various posts but never any details. Usually they die off at the >>expense of a flash card. >>I've got a 520 being flash upgraded from 2Mb to 16Mb, so I wouldn't mind >>having a play with the old 2Mb card if it's a go'er. >> >>Cheers, >> >>Gaz >> >>""George Murphy CCNP, CCDP"" wrote in message >>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... >> >>>Thanks Geoff. I appreciate the reply. I would have never found that. >>> >>>Geoff Zinderdine wrote: >>> ""Murphy, George"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... >Howdy Folks, I have seen some posts before about running PIX on a PC a >"FrankenPIX" so to speak. Anyone have any references on how to do > >this?. > >>I >> >have a clone box to use but need to know how to steps >Thanks for any help.. > Hansang Bae posted this on the lab mailing list a while back, I will >save > him the cut and paste: Here are the components that make up: Cisco LocalDirector 430/416 Cisco Pix Firewall 520 MOTHERBOARD: Intel Motherboard SE440BX-2 $ 100 NETWORK INTERFACE: Intel Pro100/B 10/100 NIC PRO100/B$ 40 - OR - Osicom 4 Ethernet Port PCI OLN-2404TX $ 900 ISA FLASH CARD: 16MB ISA Flash Card (PEP) CISCO - $ 700 - OR - 4MB ISA Flash Card (??)?? $ --? hsb Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28513&t=28342 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: 6500 IP routing, IPX bridging and routing. [7:28488]
The only way I could see this being done with Hybrid code would be to make 9 VLANs: 8 with 1 IP subnet and 1 IPX network, and 1 with 12 IP subnets and 1 IPX network. This doesn't take into account security/political issues arising from combining the IP networks into one broadcast domain. Incidentally, why can't you break the large IPX network up into multiple networks and have all of the VLANs follow the same 1 IP-1 IPX model? Regards, Andrew ""Gaz"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all, > > I made a right pigs ear of a config today. Managed to get it working > eventually, but I have a feeling I made a mountain out of a mole hill. > > The requirement was a 6500 with MSFC, with around 20 connections to switches > such as 3548's, each having a subnet with a 24 bit mask, (so 20 ports, 20 > subnets). 8 of these ports had an IPX network each. The other 12 ports were > on the same IPX network (12 ports, 12 subnets, one IPX network). > > The initial idea was to use Integrated Routing and Bridging. This led me to > creating BVI's which were routing IP, but bridging IPX. When I tried to add > VLAN's to the bridge-group the response was something like 'Cannot create > bridge group with VLAN without including a WAN interface' Apologies for the > vagueness, but in terms of the day, that seems about 4 years ago. > > No matter what I tried with BVI's, I couldn't get the thing to bridge and > route IPX. > > Someone, who I have now shot :-) suggested trying it with Integrated IOS, so > I printed off the 26 pages of instructions to upgrade to Integrated IOS and > tried that (eventually - I tried answering the phone constantly throughout > the upgrade and lost it a few times - Thank God for PCMCIA cards). > > With the Integrated IOS, I created BVI's wit IPX addresses, and put the > relevant ethernet interfaces into the bridge group, and it worked straight > away. > > > I can't help get the feeling there's an easier way. > > Any clues? > > > Thanks. > > Gaz Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28512&t=28488 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco Press IDS Book - Recommendation [7:28450]
Yes Navin I know what an NFR is. :) But, most people do not work for resellers. That's why I didn't mention it. But, I wouldn't pay even 2k for something I can build for a lot less. The only reason to pay for one is so you can get the CD's with 2.5 and 3.0 on them. Unfortunately they cannot be downloaded. John Kaberna CCIE #7146 www.netcginc.com (415) 750-3800 ""NKP"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi John , > IDS sensor is available in NFR (Not for resell) to partners and > resellers of Cisco for USD 2000 less the standard discounts. > This book is excellent for anyone who is preparing for CSIDS. > > > Navin Parwal > > / > ""John Kaberna"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > I read it and thought it was very good. There are only about 350 pages of > > real material that you need to read. The other 550 pages is mostly fluff. > > If you read and understand most of what is in the book the test is pretty > > easy. But, I would suggest at least having a router that is capable of > > doing some IDS functions and you should definitely load CSPM on to a NT > 4.0 > > box. You can probably still pass without doing that, but you will find it > a > > LOT easier if you have the CSPM application available while reading the > > book. It would be bonus if you had an IDS sensor as well. But, getting > one > > is not cheap unless you know how to build one. > > > > John Kaberna > > CCIE #7146 > > www.netcginc.com > > (415) 750-3800 > > > > > > wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Did anyone read this book? I want to learn an prepar for the IDS exam. > > > > > > Cisco Secure Intrusion Detection System, by Earl Carter, Rick > > > Stiffler. > > > Cisco Press; ISBN: 158705034X > > > > > > > > > Thanks, > > > > > > Hugo Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28511&t=28450 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Does session layer protocol use IP address ? [7:28378]
The Netacad course material now lists NFS as an Application Layer protocol. Prof. Tom Lisa, CCAI Community College of Southern Nevada Cisco Regional Networking Academy Priscilla Oppenheimer wrote: > NFS is not a session-layer protocol. Cisco said it was in some early > courseware and the mistake has lived on. The mistake is still in some CCNA > and Cisco Networking Academy materials, I think, but it's wrong. > > NFS is clearly an application-layer protocol. It uses XDR at the > presentation layer. It runs above RPC which is a session-layer protocol. > RPC runs above UDP, which runs above IP. Here was a perfect chance to show > an actual 7-layer protocol stack and Cisco blew it! ;-) > > NetBIOS is a session-layer protocol, as I said in the message. Did you read > it? > > SQL does application-layer stuff, like reading from databases. In an Oracle > environment, it uses the Transparent Network Substrate (TNS) which has > session-layer-like behavior. TNS can run above a variety of protocol > stacks, including TCP/IP, IPX, etc. Cisco texts ignore TNS. I think they > call SQL a session-layer protocol. > > Priscilla > > At 06:15 PM 12/7/01, anil wrote: > > >The session layer is an elusive beast that is not implemented much > >Wait a sec, I thought SQL, NFS and netbios were session layer protocols? > >Someone please correct me. > >-Anil > > > > > >-Original Message- > >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > >Priscilla Oppenheimer > >Sent: Friday, December 07, 2001 9:55 PM > >To: [EMAIL PROTECTED] > >Subject: Re: Does session layer protocol use IP address ? [7:28378] > > > > > >At 02:59 AM 12/7/01, mlh wrote: > > >Hi, there, > > > > > >I read Todd Lammle's CCNA2.0 study guide and found this sentence: > "Remember > > >that none of the upper > > >layers know anything about networking or network addresses." I am > wondering > > >if the session layer doesn't > > >use network address, how can it establish a dialogue with other session > > >layer in other host? > > > >I would probably disagree with Todd's statement, although it's taken out of > >context and you haven't given us enough information to say that the > >statement is definitely "wrong." > > > >However, try to picture the numerous OSI pictures you have seen. Most of > >them show horizontal lines between a layer on one host talking to the same > >layer on another host. So the session layer talks to the session layer on > >the other host. That's probably what Todd was getting at. > > > >However, the pictures also show vertical lines. A layer calls on a layer > >below to provide services. Each layer offers services to layers above it. > > > >The session layer is an elusive beast that is not implemented much. But one > >example might help. NetBIOS is a session layer. On a Windows client, when > >you access a Server Message Block (SMB) server, NetBIOS has the job of > >setting up a session with the server. Before it can do that, however, it > >must find the address of the server. If it's a modern Windows network, then > >SMB and NetBIOS are probably running above TCP/IP and UDP/IP. So NetBIOS > >sends a DNS or WINS query to find the IP address of the named server. It > >then sets up a NetBIOS session with the server. Actually, first, the client > >sets up a TCP connection. TCP has port numbers. The client sends to the > >well-known TCP port for NetBIOS session (139) and use an ephemeral port on > >its side. These port numbers could be considered "addresses" at the > >transport layer. > > > >Anyway, back to the question. The statement is at best over-simplified. I > >recommend you get yourself a sniffer and watch what really happens between > >layers. (Ethereal is free by the way.) > > > >Priscilla > > > > > > > > >Thank you for your time. > > > > > >mlh > > > > > >Priscilla Oppenheimer > >http://www.priscilla.com > > > Priscilla Oppenheimer > http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28510&t=28378 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Need BCRAN latest Dumps! [7:28236]
I knew we were going to get in trouble with this thread! One of these days I going to have to learn to listen to my better judgement. Oh, what the hell, I'm too old to start using better judgement this late in life. Besides, if I had when I was young I would have missed a whole lot of fun. Prof. Tom Lisa, CCAI Community College of Southern Nevada Cisco Regional Networking Academy Priscilla Oppenheimer wrote: > What would a girl be doing at a college? Must be a child genius. Asking her > to do something other than go to the library or study would be illegal. ;-) > The correct word for a female human above the age of 18 is WOMAN and don't > forget that. > > Priscilla > > At 02:46 PM 12/7/01, Tom Lisa wrote: > >That's what we get for teaching Cisco. Btw, when I first saw this the punch > >line was "Would you study?" > > > >Prof. Tom Lisa, CCAI > >Community College of Southern Nevada > >Cisco Regional Networking Academy > > > >"Logan, Harold" wrote: > > > > > For some reason that hasn't happened to me yet. I must be teaching the > > > wrong classes ;) > > > > > > > -Original Message- > > > > From: anil [mailto:[EMAIL PROTECTED]] > > > > Sent: Thursday, December 06, 2001 8:34 PM > > > > To: [EMAIL PROTECTED] > > > > Subject: RE: Need BCRAN latest Dumps! [7:28236] > > > > > > > > > > > > There was a girl who walked into the > > > > professor's office 1 day before the finals. > > > > "Professor, I'll do anything, just ANYthing you want if I > > > > could just pass > > > > that exam of yours tomorrow" she said in her sweetest voice. > > > > "Anything?" asked the professor.. > > > > "Sure, I'll do JUST ANY thing, " she said putting his hand on > > > > her thigh. > > > > > > > > "Well that's wonderful" he replied... > > > > "You have a lot of work to catch up on and only 24 hours left > > > > to do it, why > > > > don't you run to the library before it closes" > > > > > > > > -Anil > > > > > > > > > > > Priscilla Oppenheimer > http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28509&t=28236 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CIT-Support 2.0 Exam [7:28508]
Hi, I will be taking my Support2.0 exam next friday. This is my last one for CCNP. Please send me your valuable inputs. thnx cs _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28508&t=28508 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Lab Attempt #2 - no go :-< [7:28142]
Chuck, I am sorry to hear that someone as dedicated to having a thorough understanding of the technology and software necessary to become a CCIE has not made the mark this time - I'm sure that as many say the third time is a charm. However, as I mentioned in a previous post I have grave concerns about accomplishing the more difficult tasks of a previous two day event and having them compressed into the new one day format. At least for us old timers and senior citizens. As I recall you mentioned "time management" a definite issue with the previous test and did you think that this is even a greater concern for the new format. You mentioned "fat fingering" some input, and this would indicate that speed typing and the use of alias command definitions will definitely be required. I don't believe that they allow you to print out your configurations with a provided printer either -- this probably means a lot time consuming hand drafts to keep track of IP address assignments etc. I have scheduled my Lab for the end of May 2002 (first attempt) and hope to have a better estimate of what the new format represents by then - I would like to think that by diligent home lab study, formal "hands-on" training and reading the mail I can prepare for the event. As I mentioned in a previous post, I am most likely one of the oldest CCIE candidates around having just passed my 60th birthday. I would prefer to have some time during the LAB test to verify IOS command syntax by using the CD and CCO references available. But I would almost garner that little on no time will be available for research when encountering some unexpected configuration scenario. One question would be: did you feel even greater pressure to perform under the new one day time constraints? Will be reading the mail and wish you the best in your next attempt; however, as someone mentioned take a short break, rest -- even though training and certification is like a long HI climb on a ladder each rung is not meant to rest upon but to reach a higher level. You are almost there and I am still at the bottom looking up. Regards; Ray CCDP, CCNP and CCIE candidate. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28507&t=28142 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCNP 640-503 Practice Test exam [7:28506]
Hi Group, I've used the (Certification Zone) practice routing test for the 640-503 exam is this exam a true measure of the real exam if not does anyone have anyone have any other suggestions for practice exams to use. Thanks.. Charles... _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28506&t=28506 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Windows Syslog servers [7:28407]
I use netal and it works awesome. It has a alot of extra features. Scott -Original Message- From: Ed Horley [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 6:15 PM To: [EMAIL PROTECTED] Subject: Re: Windows Syslog servers [7:28407] I have used Kiwi with no issues but you can try: http://www.netal.com/ or http://www.tntsoftware.com/ Better yet, use a Linux or Solaris box and run MySQL. ""Richard Tufaro"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Would anyone have a recommendation for a Windows Syslog server, that logs to > a ODBC data source. Anything except for Kiwi, tried it and its buggy as all > hell. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28505&t=28407 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco Press IDS Book - Recommendation [7:28450]
Hi John , IDS sensor is available in NFR (Not for resell) to partners and resellers of Cisco for USD 2000 less the standard discounts. This book is excellent for anyone who is preparing for CSIDS. Navin Parwal / ""John Kaberna"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I read it and thought it was very good. There are only about 350 pages of > real material that you need to read. The other 550 pages is mostly fluff. > If you read and understand most of what is in the book the test is pretty > easy. But, I would suggest at least having a router that is capable of > doing some IDS functions and you should definitely load CSPM on to a NT 4.0 > box. You can probably still pass without doing that, but you will find it a > LOT easier if you have the CSPM application available while reading the > book. It would be bonus if you had an IDS sensor as well. But, getting one > is not cheap unless you know how to build one. > > John Kaberna > CCIE #7146 > www.netcginc.com > (415) 750-3800 > > > wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Did anyone read this book? I want to learn an prepar for the IDS exam. > > > > Cisco Secure Intrusion Detection System, by Earl Carter, Rick > > Stiffler. > > Cisco Press; ISBN: 158705034X > > > > > > Thanks, > > > > Hugo Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28504&t=28450 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Does session layer protocol use IP address ? [7:28378]
That's 40% right. SQL, NFS, and XWindows are application-layer protocols. RPC and NetBIOS are session-layer protocols. We often have discussions about which books are best. Todd Lammle books can teach you basic router configuration. They are often wrong where protocol behavior is concerned. A better reference for learning about OSI is the OSI paper by Howard Berkowitz at http://www.certificationzone.com. Priscilla At 11:32 PM 12/7/01, anil wrote: > >The session layer is an elusive beast that is not implemented much >Yes, I checked it out.. >Session layer protocols include: >SQL, NFS, RPC, NetBios, Xwindows are examples of session layer protocols. >Page 9 of CCNA 2nd Edition study guide Todd Lammle > >-Anil > > > > >-Original Message- >From: anil [mailto:[EMAIL PROTECTED]] >Sent: Friday, December 07, 2001 11:17 PM >To: Priscilla Oppenheimer; [EMAIL PROTECTED] >Subject: RE: Does session layer protocol use IP address ? [7:28378] > > > >The session layer is an elusive beast that is not implemented much >Wait a sec, I thought SQL, NFS and netbios were session layer protocols? >Someone please correct me. >-Anil > > >-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of >Priscilla Oppenheimer >Sent: Friday, December 07, 2001 9:55 PM >To: [EMAIL PROTECTED] >Subject: Re: Does session layer protocol use IP address ? [7:28378] > > >At 02:59 AM 12/7/01, mlh wrote: > >Hi, there, > > > >I read Todd Lammle's CCNA2.0 study guide and found this sentence: "Remember > >that none of the upper > >layers know anything about networking or network addresses." I am wondering > >if the session layer doesn't > >use network address, how can it establish a dialogue with other session > >layer in other host? > >I would probably disagree with Todd's statement, although it's taken out of >context and you haven't given us enough information to say that the >statement is definitely "wrong." > >However, try to picture the numerous OSI pictures you have seen. Most of >them show horizontal lines between a layer on one host talking to the same >layer on another host. So the session layer talks to the session layer on >the other host. That's probably what Todd was getting at. > >However, the pictures also show vertical lines. A layer calls on a layer >below to provide services. Each layer offers services to layers above it. > >The session layer is an elusive beast that is not implemented much. But one >example might help. NetBIOS is a session layer. On a Windows client, when >you access a Server Message Block (SMB) server, NetBIOS has the job of >setting up a session with the server. Before it can do that, however, it >must find the address of the server. If it's a modern Windows network, then >SMB and NetBIOS are probably running above TCP/IP and UDP/IP. So NetBIOS >sends a DNS or WINS query to find the IP address of the named server. It >then sets up a NetBIOS session with the server. Actually, first, the client >sets up a TCP connection. TCP has port numbers. The client sends to the >well-known TCP port for NetBIOS session (139) and use an ephemeral port on >its side. These port numbers could be considered "addresses" at the >transport layer. > >Anyway, back to the question. The statement is at best over-simplified. I >recommend you get yourself a sniffer and watch what really happens between >layers. (Ethereal is free by the way.) > >Priscilla > > > > >Thank you for your time. > > > >mlh > > >Priscilla Oppenheimer >http://www.priscilla.com Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28503&t=28378 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: What is ICMP redirect cache ? [7:28455]
Maybe the router isn't doing routing and just has a default gateway?? Let's see, I'm looking into my crystal ball. I can almost make out the router's config and the problem you're trying to solve.. Trying to decipher what "can cannot connect" means Nope. It's too faint Sorry, magic failed again to help. ;-) Priscilla > >>> "SUranjith Ariyapperuma" 12/7/01 4:28:42 >PM >>> >Hi John, >Thanks for the reply. Yes I am quite certain. This is what I was >wondering >about too. I can connect (Telnet,Ping) to the other routers, yet cannot >see >the routing table with "sh ip route". >Suranjith Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28502&t=28455 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Does session layer protocol use IP address ? [7:28378]
NFS is not a session-layer protocol. Cisco said it was in some early courseware and the mistake has lived on. The mistake is still in some CCNA and Cisco Networking Academy materials, I think, but it's wrong. NFS is clearly an application-layer protocol. It uses XDR at the presentation layer. It runs above RPC which is a session-layer protocol. RPC runs above UDP, which runs above IP. Here was a perfect chance to show an actual 7-layer protocol stack and Cisco blew it! ;-) NetBIOS is a session-layer protocol, as I said in the message. Did you read it? SQL does application-layer stuff, like reading from databases. In an Oracle environment, it uses the Transparent Network Substrate (TNS) which has session-layer-like behavior. TNS can run above a variety of protocol stacks, including TCP/IP, IPX, etc. Cisco texts ignore TNS. I think they call SQL a session-layer protocol. Priscilla At 06:15 PM 12/7/01, anil wrote: > >The session layer is an elusive beast that is not implemented much >Wait a sec, I thought SQL, NFS and netbios were session layer protocols? >Someone please correct me. >-Anil > > >-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of >Priscilla Oppenheimer >Sent: Friday, December 07, 2001 9:55 PM >To: [EMAIL PROTECTED] >Subject: Re: Does session layer protocol use IP address ? [7:28378] > > >At 02:59 AM 12/7/01, mlh wrote: > >Hi, there, > > > >I read Todd Lammle's CCNA2.0 study guide and found this sentence: "Remember > >that none of the upper > >layers know anything about networking or network addresses." I am wondering > >if the session layer doesn't > >use network address, how can it establish a dialogue with other session > >layer in other host? > >I would probably disagree with Todd's statement, although it's taken out of >context and you haven't given us enough information to say that the >statement is definitely "wrong." > >However, try to picture the numerous OSI pictures you have seen. Most of >them show horizontal lines between a layer on one host talking to the same >layer on another host. So the session layer talks to the session layer on >the other host. That's probably what Todd was getting at. > >However, the pictures also show vertical lines. A layer calls on a layer >below to provide services. Each layer offers services to layers above it. > >The session layer is an elusive beast that is not implemented much. But one >example might help. NetBIOS is a session layer. On a Windows client, when >you access a Server Message Block (SMB) server, NetBIOS has the job of >setting up a session with the server. Before it can do that, however, it >must find the address of the server. If it's a modern Windows network, then >SMB and NetBIOS are probably running above TCP/IP and UDP/IP. So NetBIOS >sends a DNS or WINS query to find the IP address of the named server. It >then sets up a NetBIOS session with the server. Actually, first, the client >sets up a TCP connection. TCP has port numbers. The client sends to the >well-known TCP port for NetBIOS session (139) and use an ephemeral port on >its side. These port numbers could be considered "addresses" at the >transport layer. > >Anyway, back to the question. The statement is at best over-simplified. I >recommend you get yourself a sniffer and watch what really happens between >layers. (Ethereal is free by the way.) > >Priscilla > > > > >Thank you for your time. > > > >mlh > > >Priscilla Oppenheimer >http://www.priscilla.com Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28501&t=28378 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Redistribution Question [7:28374]
I never indicated that you didn't have a default-metric statment on the ASBR (Router C for IGRP process)! My first thought was maybe you mistakenly crossed the cables btw routers A & B, based on the configs you posted and the diagram you wrote out! Second: Your routing table entries for routers A, B, and C match what I have on my pod! But You're definitely missing the 192.168.1.x network in RouterD's routing table and that's the reason you can't ping from D to B. Which would point to something wrong at the ASBR (RouterC)! Here's what RouterD's routing table should look like! RouterD#sh ip route Gateway of last resort is not set I10.0.0.0/8 [100/8576] via 192.168.2.49, 00:00:56, Serial0 I192.168.1.0/24 [100/10476] via 192.168.2.49, 00:00:56, Serial0 192.168.2.0/28 is subnetted, 1 subnets C 192.168.2.48 is directly connected, Serial0 BTW: What's the static route on RouterC for? I've had total reachability success both with and without the static route on RouterC and to be honest, in my limited experience I've only seen static routes to Null0 used to "fool" a BGP process or to setup a route to a blackhole of sorts to drop packets. I'm sure their may be other reasons and uses available, and ifso someone here will clue me in! Stefan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Hunt Lee Sent: Friday, December 07, 2001 8:09 PM To: [EMAIL PROTECTED] Subject: Re: Redistribution Question [7:28374] And from Router D, I can ping back to A, but not to B: RouterD#ping 10.1.1.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.1.100, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 84/86/88 ms RouterD#ping 192.168.1.17 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.17, timeout is 2 seconds: . Success rate is 0 percent (0/5) RouterD# ""Hunt Lee"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I already had the default-metric statment on the ASBR (Router C for IGRP > process), I tried to add this to Router D (IGRP process), with no help. > These are the routing table outputs and trace routes outputs from the > routers: > > Any ideas?? > > Thanks. > Hunt > > > RouterA#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default > > Gateway of last resort is not set > > 10.0.0.0 255.255.255.0 is subnetted, 1 subnets > C 10.1.1.0 is directly connected, Serial1 > 192.168.1.0 255.255.255.240 is subnetted, 1 subnets > O IA192.168.1.16 [110/128] via 10.1.1.1, 00:07:03, Serial1 > 192.168.2.0 255.255.255.240 is subnetted, 1 subnets > O E2192.168.2.48 [110/20] via 10.1.1.1, 00:07:03, Serial1 > RouterA# > > > RouterB#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default > > Gateway of last resort is not set > > 10.0.0.0 255.255.255.0 is subnetted, 1 subnets > C 10.1.1.0 is directly connected, Serial1 > 192.168.1.0 255.255.255.240 is subnetted, 1 subnets > C 192.168.1.16 is directly connected, Serial0 > 192.168.2.0 255.255.255.240 is subnetted, 1 subnets > O E2192.168.2.48 [110/20] via 192.168.1.18, 00:07:45, Serial0 > RouterB# > > > RouterC#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default >U - per-user static route, o - ODR > > Gateway of last resort is not set > > 10.0.0.0/24 is subnetted, 1 subnets > O IA10.1.1.0 [110/128] via 192.168.1.17, 00:09:58, Serial0 > 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks > S 192.168.1.0/24 is directly connected, Null0 > C 192.168.1.16/28 is directly connected, Serial0 > 192.168.2.0/28 is subnetted, 1 subnets > C 192.168.2.48 is directly connected, Serial1 > RouterC# > > RouterD#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS int
RE: CCIE Books [7:28383]
If your goal is to prepare for CCIE Qualification (written) my recommendation is : 1. Internetworking Tech. Overview (CCO) 2. Caslow (good for lab + written) 3. Jeff Doyle (Volume I) 4. Try either Halabi for BGP or CCO Get a few Boson's (try no. 3, it has about 400 Q's). and you should be fine. btw, I am assuming you are already a ccnp or atleast closer. hth Nick Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28498&t=28383 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: What is ICMP redirect cache ? [7:28455]
Dear John & routerkid Thank you very much for the info. I will try the commands and now I understand what is going on . Suranjith Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28499&t=28455 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Windows Syslog servers [7:28407]
I have used Kiwi with no issues but you can try: http://www.netal.com/ or http://www.tntsoftware.com/ Better yet, use a Linux or Solaris box and run MySQL. ""Richard Tufaro"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Would anyone have a recommendation for a Windows Syslog server, that logs to > a ODBC data source. Anything except for Kiwi, tried it and its buggy as all > hell. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28497&t=28407 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCDA Practice Test [7:28496]
Does anyone know which of the Boson Test to purchase for the CCDA Test? There are five different test that you can purchase. Thank you! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28496&t=28496 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Redistribution Question [7:28374]
And from Router D, I can ping back to A, but not to B: RouterD#ping 10.1.1.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.1.100, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 84/86/88 ms RouterD#ping 192.168.1.17 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.17, timeout is 2 seconds: . Success rate is 0 percent (0/5) RouterD# ""Hunt Lee"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I already had the default-metric statment on the ASBR (Router C for IGRP > process), I tried to add this to Router D (IGRP process), with no help. > These are the routing table outputs and trace routes outputs from the > routers: > > Any ideas?? > > Thanks. > Hunt > > > RouterA#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default > > Gateway of last resort is not set > > 10.0.0.0 255.255.255.0 is subnetted, 1 subnets > C 10.1.1.0 is directly connected, Serial1 > 192.168.1.0 255.255.255.240 is subnetted, 1 subnets > O IA192.168.1.16 [110/128] via 10.1.1.1, 00:07:03, Serial1 > 192.168.2.0 255.255.255.240 is subnetted, 1 subnets > O E2192.168.2.48 [110/20] via 10.1.1.1, 00:07:03, Serial1 > RouterA# > > > RouterB#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default > > Gateway of last resort is not set > > 10.0.0.0 255.255.255.0 is subnetted, 1 subnets > C 10.1.1.0 is directly connected, Serial1 > 192.168.1.0 255.255.255.240 is subnetted, 1 subnets > C 192.168.1.16 is directly connected, Serial0 > 192.168.2.0 255.255.255.240 is subnetted, 1 subnets > O E2192.168.2.48 [110/20] via 192.168.1.18, 00:07:45, Serial0 > RouterB# > > > RouterC#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default >U - per-user static route, o - ODR > > Gateway of last resort is not set > > 10.0.0.0/24 is subnetted, 1 subnets > O IA10.1.1.0 [110/128] via 192.168.1.17, 00:09:58, Serial0 > 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks > S 192.168.1.0/24 is directly connected, Null0 > C 192.168.1.16/28 is directly connected, Serial0 > 192.168.2.0/28 is subnetted, 1 subnets > C 192.168.2.48 is directly connected, Serial1 > RouterC# > > RouterD#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter > area >* - candidate default, U - per-user static route, o - ODR >P - periodic downloaded static route > > Gateway of last resort is not set > > I10.0.0.0/8 [100/8576] via 192.168.2.49, 00:00:58, Serial0 > 192.168.2.0/28 is subnetted, 1 subnets > C 192.168.2.48 is directly connected, Serial0 > RouterD# > > > And when I ping from Router A to D, it works.. but it doesn't work from B to > D (& vice versa) > > RouterA#ping 192.168.2.50 > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 192.168.2.50, timeout is 2 seconds: > ! > Success rate is 100 percent (5/5), round-trip min/avg/max = 84/86/88 ms > RouterA# > > RouterB#ping 192.168.2.50 > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 192.168.2.50, timeout is 2 seconds: > . > Success rate is 0 percent (0/5) > RouterB# > > > And here's what I got from OSPF topology table: > > RouterA#show ip ospf database > >OSPF Router with ID (10.1.1.100) (Process ID 100) > > > Router Link States (Area 1) > > Link ID ADV Router AgeSeq# Checksum Link count > 10.1.1.100 10.1.1.100 8780x8004 0x4E42 > 192.168.1.17192.168.1.178220x800F 0xEE46 2 > > Summary Net Link States (Area 1) > > Link ID ADV Router AgeSeq# Checksum > 192.168.1.16192.168.1.178120x8001 0xBC79 > > Summary ASB Link States (Area 1) > > Link
Re: Redistribution Question [7:28374]
I already had the default-metric statment on the ASBR (Router C for IGRP process), I tried to add this to Router D (IGRP process), with no help. These are the routing table outputs and trace routes outputs from the routers: Any ideas?? Thanks. Hunt RouterA#show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default Gateway of last resort is not set 10.0.0.0 255.255.255.0 is subnetted, 1 subnets C 10.1.1.0 is directly connected, Serial1 192.168.1.0 255.255.255.240 is subnetted, 1 subnets O IA192.168.1.16 [110/128] via 10.1.1.1, 00:07:03, Serial1 192.168.2.0 255.255.255.240 is subnetted, 1 subnets O E2192.168.2.48 [110/20] via 10.1.1.1, 00:07:03, Serial1 RouterA# RouterB#show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default Gateway of last resort is not set 10.0.0.0 255.255.255.0 is subnetted, 1 subnets C 10.1.1.0 is directly connected, Serial1 192.168.1.0 255.255.255.240 is subnetted, 1 subnets C 192.168.1.16 is directly connected, Serial0 192.168.2.0 255.255.255.240 is subnetted, 1 subnets O E2192.168.2.48 [110/20] via 192.168.1.18, 00:07:45, Serial0 RouterB# RouterC#show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default U - per-user static route, o - ODR Gateway of last resort is not set 10.0.0.0/24 is subnetted, 1 subnets O IA10.1.1.0 [110/128] via 192.168.1.17, 00:09:58, Serial0 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks S 192.168.1.0/24 is directly connected, Null0 C 192.168.1.16/28 is directly connected, Serial0 192.168.2.0/28 is subnetted, 1 subnets C 192.168.2.48 is directly connected, Serial1 RouterC# RouterD#show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set I10.0.0.0/8 [100/8576] via 192.168.2.49, 00:00:58, Serial0 192.168.2.0/28 is subnetted, 1 subnets C 192.168.2.48 is directly connected, Serial0 RouterD# And when I ping from Router A to D, it works.. but it doesn't work from B to D (& vice versa) RouterA#ping 192.168.2.50 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.2.50, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 84/86/88 ms RouterA# RouterB#ping 192.168.2.50 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.2.50, timeout is 2 seconds: . Success rate is 0 percent (0/5) RouterB# And here's what I got from OSPF topology table: RouterA#show ip ospf database OSPF Router with ID (10.1.1.100) (Process ID 100) Router Link States (Area 1) Link ID ADV Router AgeSeq# Checksum Link count 10.1.1.100 10.1.1.100 8780x8004 0x4E42 192.168.1.17192.168.1.178220x800F 0xEE46 2 Summary Net Link States (Area 1) Link ID ADV Router AgeSeq# Checksum 192.168.1.16192.168.1.178120x8001 0xBC79 Summary ASB Link States (Area 1) Link ID ADV Router AgeSeq# Checksum 192.168.2.49192.168.1.178020x8001 0xB251 AS External Link States Link ID ADV Router AgeSeq# Checksum Tag 192.168.2.48192.168.1.491190 0x8002 0xA7CF 0 192.168.2.48192.168.2.498290x8001 0xA2D4 0 RouterA# RouterB#show ip ospf database OSPF Router with ID (192.168.1.17) (Process ID 100) Router Link States (Area 0) Link ID ADV Router AgeSeq# Checksum Link count 192.168.1.17192.168.1.178620x8015 0x41F3 2 192.168.1.49192.168.1.492020 0x8004 0x49BA 2 192.168.2.49192.168.2.498640x8002
Re: PIX On A PC? [7:28342]
Fair one. I've got no real need for a Frankenpix. I have got a Pix-4-FE if it'll take that and no end of PC bits hanging around, so it could give me a 6 interface pix for free. As much as anything it is out of interest. Gaz ""John Kaberna"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > For the cost of buying a new low-end PC you can get a 501. So, unless you > need multiple interfaces its not really worth it. Plus, the 501 can run 6.x > code and you can't with a 2MB flash card. Unless you've got a spare PC with > the required parts lying around your best bet is to probably spend $500 > bucks on a 501. If you do plan on building your own, there's not much more > to it than building a skeleton PC. That's why there isn't much more info > about how to do it. If you know about basic PC hardware then you can figure > it out. > > John Kaberna > CCIE #7146 > www.netcginc.com > (415) 750-3800 > > > ""Gaz"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Has anyone got more details on this please. > > I've seen various posts but never any details. Usually they die off at the > > expense of a flash card. > > I've got a 520 being flash upgraded from 2Mb to 16Mb, so I wouldn't mind > > having a play with the old 2Mb card if it's a go'er. > > > > Cheers, > > > > Gaz > > > > ""George Murphy CCNP, CCDP"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Thanks Geoff. I appreciate the reply. I would have never found that. > > > > > > Geoff Zinderdine wrote: > > > > > > >""Murphy, George"" wrote in message > > > >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > > > >>Howdy Folks, I have seen some posts before about running PIX on a PC a > > > >>"FrankenPIX" so to speak. Anyone have any references on how to do > this?. > > I > > > >>have a clone box to use but need to know how to steps > > > >>Thanks for any help.. > > > >> > > > > > > > >Hansang Bae posted this on the lab mailing list a while back, I will > save > > > >him the cut and paste: > > > > > > > >Here are the components that make up: > > > > > > > > Cisco LocalDirector 430/416 > > > > Cisco Pix Firewall 520 > > > > > > > > MOTHERBOARD: > > > > Intel Motherboard SE440BX-2 $ 100 > > > > > > > > NETWORK INTERFACE: > > > > Intel Pro100/B 10/100 NIC PRO100/B$ 40 > > > > - OR - > > > > Osicom 4 Ethernet Port PCI OLN-2404TX $ 900 > > > > > > > > ISA FLASH CARD: > > > > 16MB ISA Flash Card (PEP) CISCO - $ 700 > > > > - OR - > > > > 4MB ISA Flash Card (??)?? $ --? > > > > > > > >hsb Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28493&t=28342 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: 4500m boot issue [7:28442]
Physical Had this same problem. Both banks have to have memory in them and it has to be the same size. Shared Memory The slot under the card must have parity. These things fixed my problem; it turned out I had a bad stick of memory. In the physical slot. Brad Moss, CCNA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Eric Rogers Sent: Friday, December 07, 2001 1:07 PM To: [EMAIL PROTECTED] Subject: 4500m boot issue [7:28442] Searched high and low on Cisco. Has anyone here seen this and know what would cause it on a 4500. Have tried pulling all modules even RAM and flash and it still occurs. Thanks for any help... System Bootstrap, Version 5.2(7b) [mkamson 7b], RELEASE SOFTWARE (fc1) Copyright (c) 1995 by cisco Systems, Inc. Bad RAM at location 0xA004: wrote 0xA004, read 0x2004 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28492&t=28442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: What is ICMP redirect cache ? [7:28455]
What model of router and IOS version are you using? I would think that an IOS version that had major problems with "show ip route" would probably get yanked from the shelves pretty quickly! :-) Try typing "show ip redirects" and see if that is the same output you get when you type "show ip route". >>> "SUranjith Ariyapperuma" 12/7/01 4:28:42 PM >>> Hi John, Thanks for the reply. Yes I am quite certain. This is what I was wondering about too. I can connect (Telnet,Ping) to the other routers, yet cannot see the routing table with "sh ip route". Suranjith Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28491&t=28455 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Does session layer protocol use IP address ? [7:28378]
>The session layer is an elusive beast that is not implemented much Yes, I checked it out.. Session layer protocols include: SQL, NFS, RPC, NetBios, Xwindows are examples of session layer protocols. Page 9 of CCNA 2nd Edition study guide Todd Lammle -Anil -Original Message- From: anil [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 11:17 PM To: Priscilla Oppenheimer; [EMAIL PROTECTED] Subject: RE: Does session layer protocol use IP address ? [7:28378] >The session layer is an elusive beast that is not implemented much Wait a sec, I thought SQL, NFS and netbios were session layer protocols? Someone please correct me. -Anil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Priscilla Oppenheimer Sent: Friday, December 07, 2001 9:55 PM To: [EMAIL PROTECTED] Subject: Re: Does session layer protocol use IP address ? [7:28378] At 02:59 AM 12/7/01, mlh wrote: >Hi, there, > >I read Todd Lammle's CCNA2.0 study guide and found this sentence: "Remember >that none of the upper >layers know anything about networking or network addresses." I am wondering >if the session layer doesn't >use network address, how can it establish a dialogue with other session >layer in other host? I would probably disagree with Todd's statement, although it's taken out of context and you haven't given us enough information to say that the statement is definitely "wrong." However, try to picture the numerous OSI pictures you have seen. Most of them show horizontal lines between a layer on one host talking to the same layer on another host. So the session layer talks to the session layer on the other host. That's probably what Todd was getting at. However, the pictures also show vertical lines. A layer calls on a layer below to provide services. Each layer offers services to layers above it. The session layer is an elusive beast that is not implemented much. But one example might help. NetBIOS is a session layer. On a Windows client, when you access a Server Message Block (SMB) server, NetBIOS has the job of setting up a session with the server. Before it can do that, however, it must find the address of the server. If it's a modern Windows network, then SMB and NetBIOS are probably running above TCP/IP and UDP/IP. So NetBIOS sends a DNS or WINS query to find the IP address of the named server. It then sets up a NetBIOS session with the server. Actually, first, the client sets up a TCP connection. TCP has port numbers. The client sends to the well-known TCP port for NetBIOS session (139) and use an ephemeral port on its side. These port numbers could be considered "addresses" at the transport layer. Anyway, back to the question. The statement is at best over-simplified. I recommend you get yourself a sniffer and watch what really happens between layers. (Ethereal is free by the way.) Priscilla >Thank you for your time. > >mlh Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28490&t=28378 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: What is ICMP redirect cache ? [7:28455]
Hi John, Thanks for the reply. Yes I am quite certain. This is what I was wondering about too. I can connect (Telnet,Ping) to the other routers, yet cannot see the routing table with "sh ip route". Suranjith Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28489&t=28455 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
6500 IP routing, IPX bridging and routing. [7:28488]
Hi all, I made a right pigs ear of a config today. Managed to get it working eventually, but I have a feeling I made a mountain out of a mole hill. The requirement was a 6500 with MSFC, with around 20 connections to switches such as 3548's, each having a subnet with a 24 bit mask, (so 20 ports, 20 subnets). 8 of these ports had an IPX network each. The other 12 ports were on the same IPX network (12 ports, 12 subnets, one IPX network). The initial idea was to use Integrated Routing and Bridging. This led me to creating BVI's which were routing IP, but bridging IPX. When I tried to add VLAN's to the bridge-group the response was something like 'Cannot create bridge group with VLAN without including a WAN interface' Apologies for the vagueness, but in terms of the day, that seems about 4 years ago. No matter what I tried with BVI's, I couldn't get the thing to bridge and route IPX. Someone, who I have now shot :-) suggested trying it with Integrated IOS, so I printed off the 26 pages of instructions to upgrade to Integrated IOS and tried that (eventually - I tried answering the phone constantly throughout the upgrade and lost it a few times - Thank God for PCMCIA cards). With the Integrated IOS, I created BVI's wit IPX addresses, and put the relevant ethernet interfaces into the bridge group, and it worked straight away. I can't help get the feeling there's an easier way. Any clues? Thanks. Gaz Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28488&t=28488 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Does session layer protocol use IP address ? [7:28378]
>The session layer is an elusive beast that is not implemented much Wait a sec, I thought SQL, NFS and netbios were session layer protocols? Someone please correct me. -Anil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Priscilla Oppenheimer Sent: Friday, December 07, 2001 9:55 PM To: [EMAIL PROTECTED] Subject: Re: Does session layer protocol use IP address ? [7:28378] At 02:59 AM 12/7/01, mlh wrote: >Hi, there, > >I read Todd Lammle's CCNA2.0 study guide and found this sentence: "Remember >that none of the upper >layers know anything about networking or network addresses." I am wondering >if the session layer doesn't >use network address, how can it establish a dialogue with other session >layer in other host? I would probably disagree with Todd's statement, although it's taken out of context and you haven't given us enough information to say that the statement is definitely "wrong." However, try to picture the numerous OSI pictures you have seen. Most of them show horizontal lines between a layer on one host talking to the same layer on another host. So the session layer talks to the session layer on the other host. That's probably what Todd was getting at. However, the pictures also show vertical lines. A layer calls on a layer below to provide services. Each layer offers services to layers above it. The session layer is an elusive beast that is not implemented much. But one example might help. NetBIOS is a session layer. On a Windows client, when you access a Server Message Block (SMB) server, NetBIOS has the job of setting up a session with the server. Before it can do that, however, it must find the address of the server. If it's a modern Windows network, then SMB and NetBIOS are probably running above TCP/IP and UDP/IP. So NetBIOS sends a DNS or WINS query to find the IP address of the named server. It then sets up a NetBIOS session with the server. Actually, first, the client sets up a TCP connection. TCP has port numbers. The client sends to the well-known TCP port for NetBIOS session (139) and use an ephemeral port on its side. These port numbers could be considered "addresses" at the transport layer. Anyway, back to the question. The statement is at best over-simplified. I recommend you get yourself a sniffer and watch what really happens between layers. (Ethereal is free by the way.) Priscilla >Thank you for your time. > >mlh Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28487&t=28378 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Desperately SeekingIOS 12.2(4)T [7:28486]
Desperately seeking this IOS (or any other newer IOS for 2610 that supports WIC-1ADSL) to enable my new WIC-1ADSL for my 2610. Please help, I will return the favor. [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28486&t=28486 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX On A PC? [7:28342]
For the cost of buying a new low-end PC you can get a 501. So, unless you need multiple interfaces its not really worth it. Plus, the 501 can run 6.x code and you can't with a 2MB flash card. Unless you've got a spare PC with the required parts lying around your best bet is to probably spend $500 bucks on a 501. If you do plan on building your own, there's not much more to it than building a skeleton PC. That's why there isn't much more info about how to do it. If you know about basic PC hardware then you can figure it out. John Kaberna CCIE #7146 www.netcginc.com (415) 750-3800 ""Gaz"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Has anyone got more details on this please. > I've seen various posts but never any details. Usually they die off at the > expense of a flash card. > I've got a 520 being flash upgraded from 2Mb to 16Mb, so I wouldn't mind > having a play with the old 2Mb card if it's a go'er. > > Cheers, > > Gaz > > ""George Murphy CCNP, CCDP"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Thanks Geoff. I appreciate the reply. I would have never found that. > > > > Geoff Zinderdine wrote: > > > > >""Murphy, George"" wrote in message > > >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > >>Howdy Folks, I have seen some posts before about running PIX on a PC a > > >>"FrankenPIX" so to speak. Anyone have any references on how to do this?. > I > > >>have a clone box to use but need to know how to steps > > >>Thanks for any help.. > > >> > > > > > >Hansang Bae posted this on the lab mailing list a while back, I will save > > >him the cut and paste: > > > > > >Here are the components that make up: > > > > > > Cisco LocalDirector 430/416 > > > Cisco Pix Firewall 520 > > > > > > MOTHERBOARD: > > > Intel Motherboard SE440BX-2 $ 100 > > > > > > NETWORK INTERFACE: > > > Intel Pro100/B 10/100 NIC PRO100/B$ 40 > > > - OR - > > > Osicom 4 Ethernet Port PCI OLN-2404TX $ 900 > > > > > > ISA FLASH CARD: > > > 16MB ISA Flash Card (PEP) CISCO - $ 700 > > > - OR - > > > 4MB ISA Flash Card (??)?? $ --? > > > > > >hsb Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28485&t=28342 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Serial links [7:28270]
Absolutely correct! At least in the case of radio. Quite a protocol to indicate that one is done speaking and the other is now free to speak. > -Original Message- > From: Gaz [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 07, 2001 4:16 PM > To: [EMAIL PROTECTED] > Subject: Re: Serial links [7:28270] > > > But with voice it would be OK as long as only one person > spoke at once :-) > > > Gaz > > P.S. J for Joke. > > > ""Daniel Cotts"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > 1.544 each way. Do some research on T-1. Hint - it > originally was designed > > for voice. 24 channels of 64 kbs (1536) each plus framing. > I think that > the > > Larscom CSU/DSU manuals have a good tutorial. > > > > > -Original Message- > > > From: Michael Williams [mailto:[EMAIL PROTECTED]] > > > > > Subject: Re: Serial links [7:28270] > > > > > Having said that, what are your thoughts on my question about > > > a point to > > > point T1 link at 1.544 Mbps? Is that 768Kbps each way or > > > 1.544each way? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28484&t=28270 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Preparing for MCNS [7:28480]
Zeke, I have been using Boson test #1 & 2 which got high remarks from the newsgroup at http://groups.yahoo.com/group/cisco_security They are great for learning and driving home the basics and concepts. I believe they are helping me greatly. I also used the same authors test for CID and it was top notch as a resource. Hope this helps... ""Zeke Gibson"" wrote in message news:... > Hello All, > > First off let me thank everyone who participates on this list, very helpful > folks ;) > > Now down to business, I am getting close to taking the MCNS exam, and so far > I have only used the Cisco Press book Managing Cisco Network Security, I > read it through 3 times and feel I have a good grasp on the material. I also > have read over numerous white papers and documents from CCO which I thought > would be helpful to me. I have the Cisco exam blueprint and have tried my > best to map my efforts to the blueprint. I am also planning on purchasing > the Boson MCNS practice exam, and have checked the resources available at > www.cramsession.com, mostly the posts related to the exam and the "Exam > Cram" document. Any other helpful books, sites, software that may be useful? > > Also, without breaking NDA of course, anyone know if there is any overlap > between MCNS and and PIX exam? Thanks in advance for any advice, > > -Zeke Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28483&t=28480 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco Press IDS Book - Recommendation [7:28450]
I read it and thought it was very good. There are only about 350 pages of real material that you need to read. The other 550 pages is mostly fluff. If you read and understand most of what is in the book the test is pretty easy. But, I would suggest at least having a router that is capable of doing some IDS functions and you should definitely load CSPM on to a NT 4.0 box. You can probably still pass without doing that, but you will find it a LOT easier if you have the CSPM application available while reading the book. It would be bonus if you had an IDS sensor as well. But, getting one is not cheap unless you know how to build one. John Kaberna CCIE #7146 www.netcginc.com (415) 750-3800 wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Did anyone read this book? I want to learn an prepar for the IDS exam. > > Cisco Secure Intrusion Detection System, by Earl Carter, Rick > Stiffler. > Cisco Press; ISBN: 158705034X > > > Thanks, > > Hugo Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28482&t=28450 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Need BCRAN latest Dumps! [7:28236]
Mr. Chuck!!! As for ur information! i have already did all the practicals of BCRAN in Lab & also read the book thoroughly & have all the concepts clear!! i can clear BCRAN paper easily without dumps! but i always try to be extremely careful about every thing in life specially my studies! so i dont want to take a 1% of risk in giving BCRAN ! so u dont have to worry about dumps! i will get it anywhere! & i will be more confident & more valued than u in the market!! Dont worry! The world is full of competition! & time & tide waits for none! take care my friend! SAJ --- "Logan, Harold" wrote: > For some reason that hasn't happened to me yet. I > must be teaching the > wrong classes ;) > > > > > -Original Message- > > From: anil [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, December 06, 2001 8:34 PM > > To: [EMAIL PROTECTED] > > Subject: RE: Need BCRAN latest Dumps! [7:28236] > > > > > > There was a girl who walked into the > > professor's office 1 day before the finals. > > "Professor, I'll do anything, just ANYthing you > want if I > > could just pass > > that exam of yours tomorrow" she said in her > sweetest voice. > > "Anything?" asked the professor.. > > "Sure, I'll do JUST ANY thing, " she said putting > his hand on > > her thigh. > > > > "Well that's wonderful" he replied... > > "You have a lot of work to catch up on and only 24 > hours left > > to do it, why > > don't you run to the library before it closes" > > > > -Anil > > > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of > > Mcfadden, Chuck > > Sent: Thursday, December 06, 2001 10:52 PM > > To: [EMAIL PROTECTED] > > Subject: RE: Need BCRAN latest Dumps! [7:28236] > > > > > > We not prone to liking dumps around here. You > see, there's this thing > > called a confidentiality agreement. You know, > that pesky > > thing that keeps > > us who have work our tails off to earn a > certification or two > > by reading > > books, doing installations, asking questions, and > buying labs > > for our homes. > > You know, those of us who care more about the > technology than > > the piece of > > paper on the wall. > > > > My feeling is, "to each his own." If you want to > cheat to gain your > > certification, fine. However, don't fault me when > our > > certification levels > > are equal and we are vying for the same customer > or job. I > > can assure you, > > it may take me longer to get my certifications > than you, but > > when we come > > face to face with the same customer or job...stand > aside, > > it's all mine. So > > you go ahead and cheat then wonder why you can't > rate amongst > > your peers. > > > > I seem to remember Microsoft had this problem with > the MCSE NT4.0 > > certification. After a while everyone had their > MCSE. Maybe > > 15% of the > > MCSE were worth a salt because everyone cheated. > Let's not > > let this guy > > decline our value in the market. I may seem a bit > extreme, > > but we need to > > ban all of these cheater sites. They destroy > everything we > > value with the > > certification. Even if you only use them to brush > up before > > the test. If > > you can't pass the test do more, do cheat!! > > ccie1ab > > > > -Original Message- > > From: SA J [mailto:[EMAIL PROTECTED]] > > Sent: Wednesday, December 05, 2001 8:08 PM > > To: [EMAIL PROTECTED] > > Subject: Need BCRAN latest Dumps! [7:28236] > > > > > > Hi All, > > This is my first email on groupstudy mailing list! > i > > will be giving BCRAN this weekend! i have read the > > book of BCRAN - Cisco Press! also did some > practice of > > BOSON! now i need some latest Dumps of BCRAN, if > > available anywhere pls. do let me know! > > B'Rgds, > > SAJ > > > > __ > > Do You Yahoo!? > > Send your FREE holiday greetings online! > > http://greetings.yahoo.com [EMAIL PROTECTED] __ Do You Yahoo!? Send your FREE holiday greetings online! http://greetings.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28481&t=28236 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Preparing for MCNS [7:28480]
Hello All, First off let me thank everyone who participates on this list, very helpful folks ;) Now down to business, I am getting close to taking the MCNS exam, and so far I have only used the Cisco Press book Managing Cisco Network Security, I read it through 3 times and feel I have a good grasp on the material. I also have read over numerous white papers and documents from CCO which I thought would be helpful to me. I have the Cisco exam blueprint and have tried my best to map my efforts to the blueprint. I am also planning on purchasing the Boson MCNS practice exam, and have checked the resources available at www.cramsession.com, mostly the posts related to the exam and the "Exam Cram" document. Any other helpful books, sites, software that may be useful? Also, without breaking NDA of course, anyone know if there is any overlap between MCNS and and PIX exam? Thanks in advance for any advice, -Zeke Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28480&t=28480 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: upgrading the pix [7:28454]
You got a point Dave... I can find these: http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/ Must be a special bootleg version with an xmas screensaver... Ole ~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~ http://www.RouterChief.com ~~~ NEED A JOB ??? http://www.oledrews.com/job ~~~ -Original Message- From: MADMAN [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 4:02 PM To: [EMAIL PROTECTED] Subject: Re: upgrading the pix [7:28454] 5.5?? Dave george gittins wrote: > > m currently running ios 5.5 on my pix 520, i want to upgrade to ios 6.0 are > their any special instruction? -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28479&t=28454 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Serial links [7:28270]
Good point. I was thinking the 1970s might be too late, even if the 1940s was too early. ;-) The 4-wire to 2-wire connection is important to know about because it represents an impedance mismatch and may cause echo. It's called the hybrid. The change from 2 wire to 4 wire lets the network apply amplification in just one direction, from what I understand. For the various Cisco classes that cover voice, you need to know about the hybrid. I mostly work above the physical layer, as you can probably tell. ;-) But even a minimal understanding of the physical layer is helpful for understanding full duplex, half duplex, etc. Priscilla At 05:01 PM 12/7/01, Daniel Cotts wrote: >I started working on T-1s in 1969. Actually four wire circuits go way back >to analog trunk lines. An amplifier works in one direction only. Two wire >circuits went through a two wire to four wire coil at each end.(can't >remember the terminology). The circuit was four wire for the long haul. Each >transmit was amplified. N carrier circuits again used four wire. The >channels were seperated by frequency. L carrier used coax. Can't remember if >one or two cables as I didn't work on it. > > -Original Message- > > From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] >m > > Subject: Re: Serial links [7:28270] >Each side has its own dedicated transmit pair. Big deal. That's been the >case on WANs since like the 1940s or something. Well, maybe the 1970s. Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28477&t=28270 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: inverse-arp enabled? [7:28460]
Is this problem on a router acting as a frame relay switch by any chance?? A switch shouldn't care about mapping network-layer addresses to DLCIs since it works at the data-link layer. Just a thought.. Priscilla >Danny Cox wrote: > > > > My understanding is that frame relay inverse arp is enabled by default. > > We have > > a lab built up from 2500s in the main and one 2600, all running 12.1 > > > > We're finding that each time we restart the router we've to set > > > > frame-relay inverse-arp ip 201 > > > > etc on some of the interfaces .. I forget whether these are DTE/DCE - it > > seems to be > > specifically one. Can anyone point me to a URL which explains how I can > > fix this > > so it survives a reload? > > > > many thanks > > > > Danny Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28478&t=28460 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX On A PC? [7:28342]
Has anyone got more details on this please. I've seen various posts but never any details. Usually they die off at the expense of a flash card. I've got a 520 being flash upgraded from 2Mb to 16Mb, so I wouldn't mind having a play with the old 2Mb card if it's a go'er. Cheers, Gaz ""George Murphy CCNP, CCDP"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Thanks Geoff. I appreciate the reply. I would have never found that. > > Geoff Zinderdine wrote: > > >""Murphy, George"" wrote in message > >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > >>Howdy Folks, I have seen some posts before about running PIX on a PC a > >>"FrankenPIX" so to speak. Anyone have any references on how to do this?. I > >>have a clone box to use but need to know how to steps > >>Thanks for any help.. > >> > > > >Hansang Bae posted this on the lab mailing list a while back, I will save > >him the cut and paste: > > > >Here are the components that make up: > > > > Cisco LocalDirector 430/416 > > Cisco Pix Firewall 520 > > > > MOTHERBOARD: > > Intel Motherboard SE440BX-2 $ 100 > > > > NETWORK INTERFACE: > > Intel Pro100/B 10/100 NIC PRO100/B$ 40 > > - OR - > > Osicom 4 Ethernet Port PCI OLN-2404TX $ 900 > > > > ISA FLASH CARD: > > 16MB ISA Flash Card (PEP) CISCO - $ 700 > > - OR - > > 4MB ISA Flash Card (??)?? $ --? > > > >hsb Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28476&t=28342 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: diffie-hellman clarification [7:28438]
You're both right--there are two types of man-in-the-middle attacks that can occur--one is with the initial connection. DH does not provide identity validation--therefore, you might think your setting up a connection to your remote site when it is really a man-in-the-middle that you're setting it up with. To solve this, you can use a Certificate Authority to validate the remote's identity. The second problem is when the connection is set up to the "real" destination, but there is still a "man-in-the-middle" peeking at all of your traffic. Through the DH key exchange, even though the man-in-the-middle sees the public keys that are shared, it doesn't see the private keys, nor the new "secret" key derived from the remote's public and your private. Hope this helps Happy holidays! -- __ Richard Deal email: [EMAIL PROTECTED] web: http://pages.prodigy.net/richard.deal * Just finished a CCNA ebook available at Boson (www.boson.com): + "CCNA Secrets Revealed!" * CCNP test author for QuizWare (www.quizware.com) + CCNA #1 and #2 -- 550 questions each! + CCNP Routing #1 -- 500 questions + CCNP Switching #1 -- 500 questions + CCNP Remote Access #1 -- 500 questions + CCNP Support #1 -- 500 questions + CSS1 MCNS #1 and #2 -- 500+ questions each! * Author of the following Coriolis books: + "CCNP Switching Exam Cram" + "CCNP Remote Access Exam Prep" + "CCNP Cisco Lan Switch Configuration Exam Cram" __ wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Ray, > > I have worked with diffie-hellman quite a bit. You have the correct gist of > it. The key to the answer is the word anonymous in the cisco excerpt. The > initial diffie-hellman public key exchange is subject to man-in-the-middle > attacts, if you run this key exchange anonymously. On the other hand if you > do a manual verification of the intitial key exchange, by having the > recieving end visually check the public key against what the sender is > sending, then its secure and subsequent key exchanges will be secure. > > > > -Original Message- > From: Ray Brehm [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 07, 2001 1:50 PM > To: [EMAIL PROTECTED] > Subject: diffie-hellman clarification [7:28438] > > > I need a security wizard here... > > This question is from certification zone: > > Diffie-Hellman exchange prevents what type of attack on secure > communications? > > A. > > Denial of service > > B. > > Session key cryptanalysis > > C. > > Replay > > D. > > Man-in-the-middle > > Your Answer: D > > Correct Choice: d > > Answer Explanation > > Diffie-Hellman is used in the secure exchange of information from which > session keys are generated for communications between legitimate users A > and B. It prevents man-in-the-middle attacks, in which an intruder M > lies to B, saying it is A, and lies to A, saying it is B. If A and B > accept M's statement, A and B will both send to M, and M can read or > change the information flow. > > > This excerpt is from Cisco's website and the Internet Protocol Journal > 6/98: > > * Anonymous Diffie-Hellman: The base Diffie-Hellman algorithm is > used, with no authentication. That is, each side sends its public > Diffie-Hellman parameters to the other, with no authentication. > This approach is vulnerable to man-in-the-middle attacks, in which > the attacker conducts anonymous Diffie-Hellman exchanges with both > parties. > > > I understand the way Diffie-Hellman works and exchanges public keys > using a mathematical formula and is vulnerable to man-in-the-middle > during the original D-H exchange. I also understand how further key > exchange for data encryption works after D-H is computed. What I'm > getting at here is what's the Cisco answer? D-H is vulnerable to > man-in-the-middle during the original exchange but protects the exchange > of the real key used for data encryption if it is executed successfully. > The answer to this question could quite possibly be B since once D-H is > completed successfully it protects the session key. Again, can someone > clarify what the Cisco answer would be? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28475&t=28438 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Serial links [7:28270]
Terminology - Hybrid. (maybe) Reminds me of the days when I used to understand things, or at least my memory's bad enough to have blurred the truth :-) Gaz ""Daniel Cotts"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I started working on T-1s in 1969. Actually four wire circuits go way back > to analog trunk lines. An amplifier works in one direction only. Two wire > circuits went through a two wire to four wire coil at each end.(can't > remember the terminology). The circuit was four wire for the long haul. Each > transmit was amplified. N carrier circuits again used four wire. The > channels were seperated by frequency. L carrier used coax. Can't remember if > one or two cables as I didn't work on it. > > -Original Message- > > From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] > m > > Subject: Re: Serial links [7:28270] > Each side has its own dedicated transmit pair. Big deal. That's been the > case on WANs since like the 1940s or something. Well, maybe the 1970s. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28474&t=28270 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Does session layer protocol use IP address ? [7:28378]
At 02:59 AM 12/7/01, mlh wrote: >Hi, there, > >I read Todd Lammle's CCNA2.0 study guide and found this sentence: "Remember >that none of the upper >layers know anything about networking or network addresses." I am wondering >if the session layer doesn't >use network address, how can it establish a dialogue with other session >layer in other host? According to some experts, the address is the message. See this RFC: http://www.wildpackets.com/elements/rfcs/RFC1776.TXT Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28473&t=28378 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX 506 and 515 price difference ? [7:28462]
Look here John, http://www.cisco.com/univercd/cc/td/doc/pcat/fw.htm#spec Hth, Ole ~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~ http://www.RouterChief.com ~~~ NEED A JOB ??? http://www.oledrews.com/job ~~~ -Original Message- From: John Green [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 3:44 PM To: [EMAIL PROTECTED] Subject: PIX 506 and 515 price difference ? [7:28462] i am sure we have lots of people here would know about this first hand. there is almost a difference of more than 5000 bucks between these two models. what is the difference between these two models to make such a big difference. do they run different ios versions. do they have different processor chips ? is the difference in their modular structures ? any other info, please let me know thanks [EMAIL PROTECTED] __ Do You Yahoo!? Send your FREE holiday greetings online! http://greetings.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28472&t=28462 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Serial links [7:28270]
But with voice it would be OK as long as only one person spoke at once :-) Gaz P.S. J for Joke. ""Daniel Cotts"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > 1.544 each way. Do some research on T-1. Hint - it originally was designed > for voice. 24 channels of 64 kbs (1536) each plus framing. I think that the > Larscom CSU/DSU manuals have a good tutorial. > > > -Original Message- > > From: Michael Williams [mailto:[EMAIL PROTECTED]] > > > Subject: Re: Serial links [7:28270] > > > Having said that, what are your thoughts on my question about > > a point to > > point T1 link at 1.544 Mbps? Is that 768Kbps each way or > > 1.544each way? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28471&t=28270 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: inverse-arp enabled? [7:28460]
If this is a real network, not a lab toy, don't use inverse arp, just because you can doesn't mean you should. IMHO set up p-t-p subinterfaces and define your dlci Dave Danny Cox wrote: > > My understanding is that frame relay inverse arp is enabled by default. > We have > a lab built up from 2500s in the main and one 2600, all running 12.1 > > We're finding that each time we restart the router we've to set > > frame-relay inverse-arp ip 201 > > etc on some of the interfaces .. I forget whether these are DTE/DCE - it > seems to be > specifically one. Can anyone point me to a URL which explains how I can > fix this > so it survives a reload? > > many thanks > > Danny -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28469&t=28460 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Frame relay switching [7:28470]
Folks, In my Lab, I have been struggling with no progress to configure my IOS based switch to generate FECN/BECNs so that I may see evidence of my routers reacting to ECNs. Has anybody got an example or reference to a complete scenario illustrating working configs of the switch and client routers? Also has anyone had sucess with implementing the "frame-relay congestion management" feature? Thanks in advance Thanks in advance Tom Gardiner Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28470&t=28470 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: upgrading the pix [7:28454]
5.5?? Dave george gittins wrote: > > m currently running ios 5.5 on my pix 520, i want to upgrade to ios 6.0 are > their any special instruction? -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28468&t=28454 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Serial links [7:28270]
I started working on T-1s in 1969. Actually four wire circuits go way back to analog trunk lines. An amplifier works in one direction only. Two wire circuits went through a two wire to four wire coil at each end.(can't remember the terminology). The circuit was four wire for the long haul. Each transmit was amplified. N carrier circuits again used four wire. The channels were seperated by frequency. L carrier used coax. Can't remember if one or two cables as I didn't work on it. > -Original Message- > From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] m > Subject: Re: Serial links [7:28270] Each side has its own dedicated transmit pair. Big deal. That's been the case on WANs since like the 1940s or something. Well, maybe the 1970s. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28467&t=28270 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Lab Date swaps [7:28466]
Hi, I have my CCIE R/S lab scheduled for JAN 29, 02 in RTP, NC, but would like to swap with someone for a date in March or early April. If you would like to give up your March/April date please let me know. Thanks. Arup. __ Do You Yahoo!? Send your FREE holiday greetings online! http://greetings.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28466&t=28466 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Need BCRAN latest Dumps! [7:28236]
What would a girl be doing at a college? Must be a child genius. Asking her to do something other than go to the library or study would be illegal. ;-) The correct word for a female human above the age of 18 is WOMAN and don't forget that. Priscilla At 02:46 PM 12/7/01, Tom Lisa wrote: >That's what we get for teaching Cisco. Btw, when I first saw this the punch >line was "Would you study?" > >Prof. Tom Lisa, CCAI >Community College of Southern Nevada >Cisco Regional Networking Academy > >"Logan, Harold" wrote: > > > For some reason that hasn't happened to me yet. I must be teaching the > > wrong classes ;) > > > > > -Original Message- > > > From: anil [mailto:[EMAIL PROTECTED]] > > > Sent: Thursday, December 06, 2001 8:34 PM > > > To: [EMAIL PROTECTED] > > > Subject: RE: Need BCRAN latest Dumps! [7:28236] > > > > > > > > > There was a girl who walked into the > > > professor's office 1 day before the finals. > > > "Professor, I'll do anything, just ANYthing you want if I > > > could just pass > > > that exam of yours tomorrow" she said in her sweetest voice. > > > "Anything?" asked the professor.. > > > "Sure, I'll do JUST ANY thing, " she said putting his hand on > > > her thigh. > > > > > > "Well that's wonderful" he replied... > > > "You have a lot of work to catch up on and only 24 hours left > > > to do it, why > > > don't you run to the library before it closes" > > > > > > -Anil > > > > > Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28464&t=28236 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Does session layer protocol use IP address ? [7:28378]
At 02:59 AM 12/7/01, mlh wrote: >Hi, there, > >I read Todd Lammle's CCNA2.0 study guide and found this sentence: "Remember >that none of the upper >layers know anything about networking or network addresses." I am wondering >if the session layer doesn't >use network address, how can it establish a dialogue with other session >layer in other host? I would probably disagree with Todd's statement, although it's taken out of context and you haven't given us enough information to say that the statement is definitely "wrong." However, try to picture the numerous OSI pictures you have seen. Most of them show horizontal lines between a layer on one host talking to the same layer on another host. So the session layer talks to the session layer on the other host. That's probably what Todd was getting at. However, the pictures also show vertical lines. A layer calls on a layer below to provide services. Each layer offers services to layers above it. The session layer is an elusive beast that is not implemented much. But one example might help. NetBIOS is a session layer. On a Windows client, when you access a Server Message Block (SMB) server, NetBIOS has the job of setting up a session with the server. Before it can do that, however, it must find the address of the server. If it's a modern Windows network, then SMB and NetBIOS are probably running above TCP/IP and UDP/IP. So NetBIOS sends a DNS or WINS query to find the IP address of the named server. It then sets up a NetBIOS session with the server. Actually, first, the client sets up a TCP connection. TCP has port numbers. The client sends to the well-known TCP port for NetBIOS session (139) and use an ephemeral port on its side. These port numbers could be considered "addresses" at the transport layer. Anyway, back to the question. The statement is at best over-simplified. I recommend you get yourself a sniffer and watch what really happens between layers. (Ethereal is free by the way.) Priscilla >Thank you for your time. > >mlh Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28465&t=28378 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ACL Gurus [7:27361]
Try enabling the interface configuration command "ip accounting access-violations". This will log source/destination pairs which fail the access-list on the interface. ""Scott Nawalaniec"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi Anil, > > To the best of my knowledge and without looking it up at www.cisco.com, I > think if you put log on the end an access-list statement it will send the > log to the syslog server. I don't know if that is true in all cases. I like > to keep my routers streamed lined.ie unnecessary services and buffers > turned off=) > > OUTPUT from show log: > Admin_3662#sh log > Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) > Console logging: level debugging, 723 messages logged > Monitor logging: level debugging, 0 messages logged > Buffer logging: disabled > Trap logging: level debugging, 727 message lines logged > Logging to X.X.X.X, 727 message lines logged > > HTH, > > Scott > > -Original Message- > From: anil [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 07, 2001 12:58 PM > To: Scott Nawalaniec > Subject: RE: ACL Gurus [7:27361] > > > Scott, If I add an access list with [log] at the end, can I expect to see > the log by typing: > "show log" > At the moment I see nothing. > I am trying to catch snmp traffic, using snmpwalk. > port 161, 162. > > If I do "debug snmp packets" then I can see some logs. > Many thanks > -Anil > > > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Scott Nawalaniec > Sent: Tuesday, November 27, 2001 5:41 PM > To: [EMAIL PROTECTED] > Subject: RE: ACL Gurus [7:27361] > > > Thanx for the info and the verification. > > Scott > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] > Sent: Monday, November 26, 2001 7:25 PM > To: [EMAIL PROTECTED] > Subject: RE: ACL Gurus [7:27361] > > > "My understanding is ICMP is not a subset of IP or anything with IP > protocol. > ICMP and IP both work at the network layer and are separate protocols." > Bzzt. You are the weakest link. Goodbye ;-) > > ICMP is IP protocol 1 (TCP is 6, UDP is 17). ICMP stands for Internet > Control Message Protocol, which is a bit of a hint that it might be related > to IP (although hardly strong evidence). According to TCP/IP Illustrated > (Stevens); "ICMP is often considered part of the IP layer", so you're > correct there, but "ICMP messages are transmitted within IP datagrams", so > your "permit ip any any" will permit ICMP. > And anyway, I use "permit ip any any" to define interesting traffic on some > dialup links, and I can bring up the links with a well-directed ping. So I > know IP includes ICMP ;-) > > JMcL > - Forwarded by Jenny Mcleod/NSO/CSDA on 27/11/2001 02:09 pm - > > > > "Scott > Nawalaniec" To: > [EMAIL PROTECTED] > Subject: RE: ACL Gurus > [7:27361] > Sent > by: > > nobody@groups > > tudy.com > > > > > > 27/11/2001 > 11:29 > am > > Please > respond > to > > "Scott > > Nawalaniec" > > > > > > > > > Hello, > > Good call on the "access-list 101 permit icmp x.x.54.0 0.0.1.255 any echo > (equivalent to your > two lines)" > > My understanding is ICMP is not a subset of IP or anything with IP > protocol. > ICMP and IP both work at the network layer and are separate protocols. So > you would not need the "access-list 102 deny icmp any any (may as well > block all other icmp)" or "access-list 102 deny icmp any any (may as well > block all other icmp)" because the implicit deny at the end should take > care > of dropping the unwanted protocols. Please correct me if I am wrong. > > What about udp and tcp protocols? The implicit deny would drop all > protocols > at the end. > > Scott > > -Original Message- > From: Gaz [mailto:[EMAIL PROTECTED]] > Sent: Monday, November 26, 2001 3:56 PM > To: [EMAIL PROTECTED] > Subject: Re: ACL Gurus [7:27361] > > > My view/guestimation only here, so anyone is welcome to pick holes in it: > > I would apply 101 (the outgoing access list to the ethernet port). May as > well drop the rubbish before the router processes it. > I would also make it: > > access-list 101 permit icmp x.x.54.0 0.0.1.255 any echo (equivalent to > your > two lines) > access-list 101 deny icmp any any (denies all other icmp, otherwise your > next line allowed everything including icmp) > access-list 101 permit ip any any > > I would apply 102 as you have on the serial interface, with slight change. > > access-list 102 permit icmp any any echo-reply (presumably as you allowed > echo outgoing, you want the replies) > access-list 102 deny icmp any any (may as well block all other icmp) > access-list 102 permit ip any any > > Of course this is just fictional to control icmp only. > I've changed it about 4 times, so I've no doubt it could take some more > changes. >
PIX 506 and 515 price difference ? [7:28462]
i am sure we have lots of people here would know about this first hand. there is almost a difference of more than 5000 bucks between these two models. what is the difference between these two models to make such a big difference. do they run different ios versions. do they have different processor chips ? is the difference in their modular structures ? any other info, please let me know thanks [EMAIL PROTECTED] __ Do You Yahoo!? Send your FREE holiday greetings online! http://greetings.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28462&t=28462 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: What is ICMP redirect cache ? [7:28455]
Are you absolutely certain you typed "show ip route"? The output you are describing is from "show ip redirects". John >>> "SUranjith Ariyapperuma" 12/7/01 2:07:14 PM >>> Dear Friends When configuring a Cisco 2600 when I issued "sh ip route" I was given an empty routing table and "ICMP redirect cache is empty". What is ICMP redirect cache where can I read about it ? I would be thankful if some one can point me in the right direction. Thank you Suranjith Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28461&t=28455 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
inverse-arp enabled? [7:28460]
My understanding is that frame relay inverse arp is enabled by default. We have a lab built up from 2500s in the main and one 2600, all running 12.1 We're finding that each time we restart the router we've to set frame-relay inverse-arp ip 201 etc on some of the interfaces .. I forget whether these are DTE/DCE - it seems to be specifically one. Can anyone point me to a URL which explains how I can fix this so it survives a reload? many thanks Danny Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28460&t=28460 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: upgrading the pix [7:28454]
Yes, Burn a CD with the IOS on, and put that and the PIX in a long red sock, and hang it on your fireplace and wait until Christmas. If you do not want to wait that long, you should be able to find the necessary information here: ( - WATCH FOR WORD WRAP - ) http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/config/upgr ade.htm The sock solution is not documented, so I am not sure if it actually works :-) Have a great weekend. Hth, Ole ~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~ http://www.RouterChief.com ~~~ NEED A JOB ??? http://www.oledrews.com/job ~~~ -Original Message- From: george gittins [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 2:43 PM To: [EMAIL PROTECTED] Subject: upgrading the pix [7:28454] m currently running ios 5.5 on my pix 520, i want to upgrade to ios 6.0 are their any special instruction? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28459&t=28454 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Serial links [7:28270]
At 10:54 AM 12/7/01, Michael Williams wrote: >Richard, > >Here's the damnest thing tho. I've asked many networking professionals, >including two CCIEs (not candidates), and no could seem to know 100% about >whether serial links were half or full duplex. Sad, eh? It's not sad. Most serial, WAN technologies have been full duplex for so long that the question just doesn't come up. Each side has a dedicated transmit circuit (pair of wires), separate from the receive circuit. On a T1 link, to use your example, each side can transmit 1.544 Mbps. The two sides can do this simultaneously. Old style WAN links used a single cable, like the string between two cans in the game we played as kids. They were half duplex and required a station to send a Go Ahead message to tell the other side it was its turn. You sill see remnants of this in protocols used today. Telnet has a Go Ahead message for example. (It's not used anymore, though.) The LAN people stole the "full duplex" term to refer to Ethernet switched, point-to-point links, which are no longer really CSMA/CD. They aren't multiple access (MA) and since there's no chance of someone else using your transmit circuit, there's no need to do CS either. Each side has its own dedicated transmit pair. Big deal. That's been the case on WANs since like the 1940s or something. Well, maybe the 1970s. Old-style Ethernet used coax cable. There wasn't a separate transmit and receive pair. All devices shared the cable. Think about what a coax cable looks like: single, center copper core, surrounded by cladding. Bits sent by one station radiate outwards to all other stations who have no choice but to receive them. This isn't really "half duplex" and nobody called it "half duplex" until the time when the Ethernet people borrowed the term "full duplex" to refer to the point-to-point link between a device and its switch port. That's my take, anyway! Priscilla > I'm tempted to >setup a test with 2 PCs and 2 routers with a low bandwidth connection >(128Kbps or so) and try to jam traffic through both ways and monitor the >speeds and see what I get. But I've got that nagging in the back of my mind >that you're correct and serial links are indeed full duplex. > >Having said that, what are your thoughts on my question about a point to >point T1 link at 1.544 Mbps? Is that 768Kbps each way or 1.544each way? > >Mike W. > >richard beddow wrote: > > > > Mike, > > > > I have three final comments then I think enough has been said. > > > > 1. Ethernet has always been a half duplex standard until recent > > times, FDX operation is always quoted therefore to make the > > distinction from the default. > > > > 2. Serial lines, however, since the late seventies-early > > eighties have been by default a full duplex offering. > > Therefore FDX is assumed unless otherwise stated. > > > > 3. My comments were not ment to offend but supposed to be > > funny. Humour on a forum such as this is often missread and I > > should have learnt my leason along time ago but I just can't > > help it. > > > > Charles do you have your answer??? > > > > > > RB Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28458&t=28270 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ACL Gurus [7:27361]
Hi Anil, To the best of my knowledge and without looking it up at www.cisco.com, I think if you put log on the end an access-list statement it will send the log to the syslog server. I don't know if that is true in all cases. I like to keep my routers streamed lined.ie unnecessary services and buffers turned off=) OUTPUT from show log: Admin_3662#sh log Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: level debugging, 723 messages logged Monitor logging: level debugging, 0 messages logged Buffer logging: disabled Trap logging: level debugging, 727 message lines logged Logging to X.X.X.X, 727 message lines logged HTH, Scott -Original Message- From: anil [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 12:58 PM To: Scott Nawalaniec Subject: RE: ACL Gurus [7:27361] Scott, If I add an access list with [log] at the end, can I expect to see the log by typing: "show log" At the moment I see nothing. I am trying to catch snmp traffic, using snmpwalk. port 161, 162. If I do "debug snmp packets" then I can see some logs. Many thanks -Anil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott Nawalaniec Sent: Tuesday, November 27, 2001 5:41 PM To: [EMAIL PROTECTED] Subject: RE: ACL Gurus [7:27361] Thanx for the info and the verification. Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, November 26, 2001 7:25 PM To: [EMAIL PROTECTED] Subject: RE: ACL Gurus [7:27361] "My understanding is ICMP is not a subset of IP or anything with IP protocol. ICMP and IP both work at the network layer and are separate protocols." Bzzt. You are the weakest link. Goodbye ;-) ICMP is IP protocol 1 (TCP is 6, UDP is 17). ICMP stands for Internet Control Message Protocol, which is a bit of a hint that it might be related to IP (although hardly strong evidence). According to TCP/IP Illustrated (Stevens); "ICMP is often considered part of the IP layer", so you're correct there, but "ICMP messages are transmitted within IP datagrams", so your "permit ip any any" will permit ICMP. And anyway, I use "permit ip any any" to define interesting traffic on some dialup links, and I can bring up the links with a well-directed ping. So I know IP includes ICMP ;-) JMcL - Forwarded by Jenny Mcleod/NSO/CSDA on 27/11/2001 02:09 pm - "Scott Nawalaniec" To: [EMAIL PROTECTED] Subject: RE: ACL Gurus [7:27361] Sent by: nobody@groups tudy.com 27/11/2001 11:29 am Please respond to "Scott Nawalaniec" Hello, Good call on the "access-list 101 permit icmp x.x.54.0 0.0.1.255 any echo (equivalent to your two lines)" My understanding is ICMP is not a subset of IP or anything with IP protocol. ICMP and IP both work at the network layer and are separate protocols. So you would not need the "access-list 102 deny icmp any any (may as well block all other icmp)" or "access-list 102 deny icmp any any (may as well block all other icmp)" because the implicit deny at the end should take care of dropping the unwanted protocols. Please correct me if I am wrong. What about udp and tcp protocols? The implicit deny would drop all protocols at the end. Scott -Original Message- From: Gaz [mailto:[EMAIL PROTECTED]] Sent: Monday, November 26, 2001 3:56 PM To: [EMAIL PROTECTED] Subject: Re: ACL Gurus [7:27361] My view/guestimation only here, so anyone is welcome to pick holes in it: I would apply 101 (the outgoing access list to the ethernet port). May as well drop the rubbish before the router processes it. I would also make it: access-list 101 permit icmp x.x.54.0 0.0.1.255 any echo (equivalent to your two lines) access-list 101 deny icmp any any (denies all other icmp, otherwise your next line allowed everything including icmp) access-list 101 permit ip any any I would apply 102 as you have on the serial interface, with slight change. access-list 102 permit icmp any any echo-reply (presumably as you allowed echo outgoing, you want the replies) access-list 102 deny icmp any any (may as well block all other icmp) access-list 102 permit ip any any Of course this is just fictional to control icmp only. I've changed it about 4 times, so I've no doubt it could take some more changes. Regards, Gaz ""Matthew Tayler"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Ok I am a little confused here, but > > 1. What does access-list 101 actually deny ? > 2. If you permit all ip are you not also allowing all tcp & udp ? > > Matt T > Jeff wrote: > > > > Looking to block icmp-echo on my external router... just want > > to doublecheck > > that I'm putting these on the right interfaces. Please, > > suggestions welcome! > > > > Cheers, > > Jeff > > access-list 101 permit icmp x.x.54.0 0.0.0.255 any echo
Re: # of VLANs [7:28425]
John Neiberger wrote: > > In older IOS versions you had a limited number of Interface Descriptor > Blocks, or IDBs. On our 7513 using an RSP4 I believe the limit was 300 > or so, which is pretty easy to run up against if you try. :-) > > In newer IOS releases--I think after 12.0--the limit was raised to over > 1000, if I remember right. Regardless, it's more than we'll ever use > here. Here is how you can find the IDB answer: C7507MIX#sh idb Maximum number of IDBs 2048 25 SW IDBs allocated (2432 bytes each) 17 HW IDBs allocated (4216 bytes each) HWIDB#1 1 ATM0/1/0 (HW IFINDEX, HW ATM) HWIDB#2 2 ATM1/0/0 (HW IFINDEX, HW ATM) HWIDB#3 3 Ethernet4/0/0 (HW IFINDEX, Ether) HWIDB#4 4 Ethernet4/0/1 (HW IFINDEX, Ether) HWIDB#5 5 Ethernet4/0/2 (HW IFINDEX, Ether) HWIDB#6 6 Ethernet4/0/3 (HW IFINDEX, Ether) HWIDB#7 7 Ethernet4/0/4 (HW IFINDEX, Ether) HWIDB#8 8 Ethernet4/0/5 (HW IFINDEX, Ether) HWIDB#9 9 Ethernet4/0/6 (HW IFINDEX, Ether) HWIDB#10 10 Ethernet4/0/7 (HW IFINDEX, Ether) HWIDB#11 11 Serial4/1/0 (HW IFINDEX, Serial) HWIDB#12 12 Serial4/1/1 (HW IFINDEX, Serial) HWIDB#13 13 Serial4/1/2 (HW IFINDEX, Serial) HWIDB#14 14 Serial4/1/3 (HW IFINDEX, Serial) HWIDB#15 15 Loopback0 (HW IFINDEX) HWIDB#16 16 Loopback10 (HW IFINDEX) HWIDB#17 17 Loopback100 (HW IFINDEX) > > HTH, > John > > >>> "Maccubbin, Duncan" 12/7/01 12:32:24 > PM >>> > I have to disagree here. We had a fairly loaded 7200 fail due to having > too > many sub-interfaces. I dug around on Cisco's site and found a document > that > broke down the amount of memory each sub-interface used. (no, I can't > find > it now) We actually got quite a few more than they had it rated for > but > there are memory concerns all the same. If your 2600 doesn't have a lot > of > memory it will be limited. How many sub-interfaces you talking about? > How > much memory does the box have? You may want to consult Cisco if you > are > going over 50 or so. Just my $0.02. > > Duncan > > -Original Message- > From: MADMAN [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 07, 2001 2:00 PM > To: [EMAIL PROTECTED] > Subject: Re: # of VLANs [7:28425] > > I take part of that back, there is an IDB limit but I'm sure your not > looking at serveral hundred subinterfaces are you?!? > > dave > > NetEng wrote: > > > > How many sub-interfaces can I create for VLAN routing on a router, > lets > say > > a 2600 series? I can't find anything at cisco. > -- > David Madland > Sr. Network Engineer > CCIE# 2016 > Qwest Communications Int. Inc. > [EMAIL PROTECTED] > 612-664-3367 > > "Emotion should reflect reason not guide it" -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28456&t=28425 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
What is ICMP redirect cache ? [7:28455]
Dear Friends When configuring a Cisco 2600 when I issued "sh ip route" I was given an empty routing table and "ICMP redirect cache is empty". What is ICMP redirect cache where can I read about it ? I would be thankful if some one can point me in the right direction. Thank you Suranjith Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28455&t=28455 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
upgrading the pix [7:28454]
m currently running ios 5.5 on my pix 520, i want to upgrade to ios 6.0 are their any special instruction? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28454&t=28454 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: # of VLANs [7:28425]
There are many variables to the number of interfaces you can configure on a given platform. We have 7200 routers serving as DSL terminations points with several hundred subinterface that work just fine. You do bring up a good point about the memory though. Dave > I have to disagree here. We had a fairly loaded 7200 fail due to having too > many sub-interfaces. I dug around on Cisco's site and found a document that > broke down the amount of memory each sub-interface used. (no, I can't find > it now) We actually got quite a few more than they had it rated for but > there are memory concerns all the same. If your 2600 doesn't have a lot of > memory it will be limited. How many sub-interfaces you talking about? How > much memory does the box have? You may want to consult Cisco if you are > going over 50 or so. Just my $0.02. > > Duncan > > -Original Message- > From: MADMAN [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 07, 2001 2:00 PM > To: [EMAIL PROTECTED] > Subject: Re: # of VLANs [7:28425] > > I take part of that back, there is an IDB limit but I'm sure your not > looking at serveral hundred subinterfaces are you?!? > > dave > > NetEng wrote: > > > > How many sub-interfaces can I create for VLAN routing on a router, lets > say > > a 2600 series? I can't find anything at cisco. > -- > David Madland > Sr. Network Engineer > CCIE# 2016 > Qwest Communications Int. Inc. > [EMAIL PROTECTED] > 612-664-3367 > > "Emotion should reflect reason not guide it" -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28453&t=28425 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: diffie-hellman clarification [7:28438]
Ray, I have worked with diffie-hellman quite a bit. You have the correct gist of it. The key to the answer is the word anonymous in the cisco excerpt. The initial diffie-hellman public key exchange is subject to man-in-the-middle attacts, if you run this key exchange anonymously. On the other hand if you do a manual verification of the intitial key exchange, by having the recieving end visually check the public key against what the sender is sending, then its secure and subsequent key exchanges will be secure. -Original Message- From: Ray Brehm [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 1:50 PM To: [EMAIL PROTECTED] Subject: diffie-hellman clarification [7:28438] I need a security wizard here... This question is from certification zone: Diffie-Hellman exchange prevents what type of attack on secure communications? A. Denial of service B. Session key cryptanalysis C. Replay D. Man-in-the-middle Your Answer: D Correct Choice: d Answer Explanation Diffie-Hellman is used in the secure exchange of information from which session keys are generated for communications between legitimate users A and B. It prevents man-in-the-middle attacks, in which an intruder M lies to B, saying it is A, and lies to A, saying it is B. If A and B accept M's statement, A and B will both send to M, and M can read or change the information flow. This excerpt is from Cisco's website and the Internet Protocol Journal 6/98: * Anonymous Diffie-Hellman: The base Diffie-Hellman algorithm is used, with no authentication. That is, each side sends its public Diffie-Hellman parameters to the other, with no authentication. This approach is vulnerable to man-in-the-middle attacks, in which the attacker conducts anonymous Diffie-Hellman exchanges with both parties. I understand the way Diffie-Hellman works and exchanges public keys using a mathematical formula and is vulnerable to man-in-the-middle during the original D-H exchange. I also understand how further key exchange for data encryption works after D-H is computed. What I'm getting at here is what's the Cisco answer? D-H is vulnerable to man-in-the-middle during the original exchange but protects the exchange of the real key used for data encryption if it is executed successfully. The answer to this question could quite possibly be B since once D-H is completed successfully it protects the session key. Again, can someone clarify what the Cisco answer would be? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28452&t=28438 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: # of VLANs [7:28425]
In older IOS versions you had a limited number of Interface Descriptor Blocks, or IDBs. On our 7513 using an RSP4 I believe the limit was 300 or so, which is pretty easy to run up against if you try. :-) In newer IOS releases--I think after 12.0--the limit was raised to over 1000, if I remember right. Regardless, it's more than we'll ever use here. HTH, John >>> "Maccubbin, Duncan" 12/7/01 12:32:24 PM >>> I have to disagree here. We had a fairly loaded 7200 fail due to having too many sub-interfaces. I dug around on Cisco's site and found a document that broke down the amount of memory each sub-interface used. (no, I can't find it now) We actually got quite a few more than they had it rated for but there are memory concerns all the same. If your 2600 doesn't have a lot of memory it will be limited. How many sub-interfaces you talking about? How much memory does the box have? You may want to consult Cisco if you are going over 50 or so. Just my $0.02. Duncan -Original Message- From: MADMAN [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 2:00 PM To: [EMAIL PROTECTED] Subject: Re: # of VLANs [7:28425] I take part of that back, there is an IDB limit but I'm sure your not looking at serveral hundred subinterfaces are you?!? dave NetEng wrote: > > How many sub-interfaces can I create for VLAN routing on a router, lets say > a 2600 series? I can't find anything at cisco. -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28451&t=28425 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco Press IDS Book - Recommendation [7:28450]
Did anyone read this book? I want to learn an prepar for the IDS exam. Cisco Secure Intrusion Detection System, by Earl Carter, Rick Stiffler. Cisco Press; ISBN: 158705034X Thanks, Hugo Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28450&t=28450 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Need BCRAN latest Dumps! [7:28236]
That's what we get for teaching Cisco. Btw, when I first saw this the punch line was "Would you study?" Prof. Tom Lisa, CCAI Community College of Southern Nevada Cisco Regional Networking Academy "Logan, Harold" wrote: > For some reason that hasn't happened to me yet. I must be teaching the > wrong classes ;) > > > -Original Message- > > From: anil [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, December 06, 2001 8:34 PM > > To: [EMAIL PROTECTED] > > Subject: RE: Need BCRAN latest Dumps! [7:28236] > > > > > > There was a girl who walked into the > > professor's office 1 day before the finals. > > "Professor, I'll do anything, just ANYthing you want if I > > could just pass > > that exam of yours tomorrow" she said in her sweetest voice. > > "Anything?" asked the professor.. > > "Sure, I'll do JUST ANY thing, " she said putting his hand on > > her thigh. > > > > "Well that's wonderful" he replied... > > "You have a lot of work to catch up on and only 24 hours left > > to do it, why > > don't you run to the library before it closes" > > > > -Anil > > > > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > > Mcfadden, Chuck > > Sent: Thursday, December 06, 2001 10:52 PM > > To: [EMAIL PROTECTED] > > Subject: RE: Need BCRAN latest Dumps! [7:28236] > > > > > > We not prone to liking dumps around here. You see, there's this thing > > called a confidentiality agreement. You know, that pesky > > thing that keeps > > us who have work our tails off to earn a certification or two > > by reading > > books, doing installations, asking questions, and buying labs > > for our homes. > > You know, those of us who care more about the technology than > > the piece of > > paper on the wall. > > > > My feeling is, "to each his own." If you want to cheat to gain your > > certification, fine. However, don't fault me when our > > certification levels > > are equal and we are vying for the same customer or job. I > > can assure you, > > it may take me longer to get my certifications than you, but > > when we come > > face to face with the same customer or job...stand aside, > > it's all mine. So > > you go ahead and cheat then wonder why you can't rate amongst > > your peers. > > > > I seem to remember Microsoft had this problem with the MCSE NT4.0 > > certification. After a while everyone had their MCSE. Maybe > > 15% of the > > MCSE were worth a salt because everyone cheated. Let's not > > let this guy > > decline our value in the market. I may seem a bit extreme, > > but we need to > > ban all of these cheater sites. They destroy everything we > > value with the > > certification. Even if you only use them to brush up before > > the test. If > > you can't pass the test do more, do cheat!! > > ccie1ab > > > > -Original Message- > > From: SA J [mailto:[EMAIL PROTECTED]] > > Sent: Wednesday, December 05, 2001 8:08 PM > > To: [EMAIL PROTECTED] > > Subject: Need BCRAN latest Dumps! [7:28236] > > > > > > Hi All, > > This is my first email on groupstudy mailing list! i > > will be giving BCRAN this weekend! i have read the > > book of BCRAN - Cisco Press! also did some practice of > > BOSON! now i need some latest Dumps of BCRAN, if > > available anywhere pls. do let me know! > > B'Rgds, > > SAJ > > > > __ > > Do You Yahoo!? > > Send your FREE holiday greetings online! > > http://greetings.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28449&t=28236 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Muliple command alias? [7:28413]
Found it! menu command menu-exit Michael Williams wrote: > > Heh. I used this info and created a test menu in a test > router. it's great except I can't find out how to make a > menu option that EXITS the menu =) > > Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28448&t=28413 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: # of VLANs [7:28425]
I have to disagree here. We had a fairly loaded 7200 fail due to having too many sub-interfaces. I dug around on Cisco's site and found a document that broke down the amount of memory each sub-interface used. (no, I can't find it now) We actually got quite a few more than they had it rated for but there are memory concerns all the same. If your 2600 doesn't have a lot of memory it will be limited. How many sub-interfaces you talking about? How much memory does the box have? You may want to consult Cisco if you are going over 50 or so. Just my $0.02. Duncan -Original Message- From: MADMAN [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 2:00 PM To: [EMAIL PROTECTED] Subject: Re: # of VLANs [7:28425] I take part of that back, there is an IDB limit but I'm sure your not looking at serveral hundred subinterfaces are you?!? dave NetEng wrote: > > How many sub-interfaces can I create for VLAN routing on a router, lets say > a 2600 series? I can't find anything at cisco. -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28447&t=28425 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Muliple command alias? [7:28413]
Heh. I used this info and created a test menu in a test router. it's great except I can't find out how to make a menu option that EXITS the menu =) Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28446&t=28413 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
FW: Lightstream 100 Password Recovery [7:15937]
Default password is c -Original Message- From: news.groupstudy.com [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 15, 2001 9:06 PM To: [EMAIL PROTECTED] Subject: Re: Lightstream 100 Password Recovery [7:15937] Just for the record (and the archives), the solution for this is to call Cisco. The solution involves a hidden command, and a special convoluted password to get into said mode. After getting into that mode, another hidden command will remove the password, allowing you to reboot the machine and get prompted for a password after it boots. I was not able to find this issue before, and I understand why now. Because of the way the lightstream 100 operates, I asked if this method could be posted, to help others with this situation, and the rep asked me not to, that they should call the TAC for assistance. So, this posting is just for future reference for anyone searching for the same problem. -chris Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28445&t=15937 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Muliple command alias? [7:28413]
Thanks! I searched through the archives with a variety of search words, but never found this message. I guess I need to sharpen my searching skills. =) Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28444&t=28413 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT-How to find port on switch if you have MAC [7:28429]
show cam Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28443&t=28429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
4500m boot issue [7:28442]
Searched high and low on Cisco. Has anyone here seen this and know what would cause it on a 4500. Have tried pulling all modules even RAM and flash and it still occurs. Thanks for any help... System Bootstrap, Version 5.2(7b) [mkamson 7b], RELEASE SOFTWARE (fc1) Copyright (c) 1995 by cisco Systems, Inc. Bad RAM at location 0xA004: wrote 0xA004, read 0x2004 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28442&t=28442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: recomendations on cat 5 type for data center, requested. [7:28441]
great info on the cam table commands! question: I would like to hear from the list members so inclined to read and respond to this meager cabling question. With a new data center in mind, (probably gig Ethernet over all 4 pairs of copper) is there a call to use cat 5 Shielded cable due to the surrounding equipment, interference, etc... This seems odd to me, I am thinking just go with Unshielded Twisted Pair on the Cat 5 runs from say the servers to the switch, and anywhere not utilizing fiber. Anyone have any experience with shielded TP for cat 5? Is this a real solution, and is it necessary? Thanks in advance, the list is always entertaining~! Jason exert from cisco.com Shielded twisted-pair cable is the most commonly used cable in Token-Ring environments. The media interface connectors (MICs) and baluns---used to connect shielded twisted-pair and unshielded twisted-pair cabling---create a loopback when they are disconnected; the loopback might cause anomalies with the switch. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28441&t=28441 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: # of VLANs [7:28425]
I take part of that back, there is an IDB limit but I'm sure your not looking at serveral hundred subinterfaces are you?!? dave NetEng wrote: > > How many sub-interfaces can I create for VLAN routing on a router, lets say > a 2600 series? I can't find anything at cisco. -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28440&t=28425 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: # of VLANs [7:28425]
Until you run out of NVRAM or you peg your CPU IOW there is no hard limit Dave NetEng wrote: > > How many sub-interfaces can I create for VLAN routing on a router, lets say > a 2600 series? I can't find anything at cisco. -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28439&t=28425 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
diffie-hellman clarification [7:28438]
I need a security wizard here... This question is from certification zone: Diffie-Hellman exchange prevents what type of attack on secure communications? A. Denial of service B. Session key cryptanalysis C. Replay D. Man-in-the-middle Your Answer: D Correct Choice: d Answer Explanation Diffie-Hellman is used in the secure exchange of information from which session keys are generated for communications between legitimate users A and B. It prevents man-in-the-middle attacks, in which an intruder M lies to B, saying it is A, and lies to A, saying it is B. If A and B accept M's statement, A and B will both send to M, and M can read or change the information flow. This excerpt is from Cisco's website and the Internet Protocol Journal 6/98: * Anonymous Diffie-Hellman: The base Diffie-Hellman algorithm is used, with no authentication. That is, each side sends its public Diffie-Hellman parameters to the other, with no authentication. This approach is vulnerable to man-in-the-middle attacks, in which the attacker conducts anonymous Diffie-Hellman exchanges with both parties. I understand the way Diffie-Hellman works and exchanges public keys using a mathematical formula and is vulnerable to man-in-the-middle during the original D-H exchange. I also understand how further key exchange for data encryption works after D-H is computed. What I'm getting at here is what's the Cisco answer? D-H is vulnerable to man-in-the-middle during the original exchange but protects the exchange of the real key used for data encryption if it is executed successfully. The answer to this question could quite possibly be B since once D-H is completed successfully it protects the session key. Again, can someone clarify what the Cisco answer would be? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28438&t=28438 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Password Recovery LS100 [7:28437]
Anyone know of the link or have this on an old documentation CD ??? The CCO seems to exclude this device when it comes to breaking and entering :o) Thanks Phil Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28437&t=28437 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
LS100 Garble [7:28436]
Anyone know how to get rid of this trailing curser garble ??? sswd=c>enable Input Password: sswd=c>Phil ***Command name is illegal. sswd=c>set passworkdd ***Command name is illegal. sswd=c>set password ***Command name is illegal. Thanks Phil Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28436&t=28436 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT-How to find port on switch if you have MAC [7:28429]
show cam [mac-address] Here's a link for future reference http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_5_4/cmd_ref/ sh_a_c.htm#xtocid231346 watch the "nasty' word wrap! Stefan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Don Oxman Sent: Friday, December 07, 2001 12:42 PM To: [EMAIL PROTECTED] Subject: OT-How to find port on switch if you have MAC [7:28429] Sorry for the off-topic post, but... If I have the MAC address of a device and I want to know which port on a Cat 5505 it's plugged into, how I can I find that out? I assume it's a command on the switch, but what is it? Thanks, --Don _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28435&t=28429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT-How to find port on switch if you have MAC [7:28429]
Do a search on Cisco.com for "show CAM", and see what it gets you... then read thoroughly through it. You'll go home saying you learned something new today- I promise. :) Mark Odette II StellarConnection Services CCNA, 3/4 CCNP, etc., etc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Don Oxman Sent: Friday, December 07, 2001 11:42 AM To: [EMAIL PROTECTED] Subject: OT-How to find port on switch if you have MAC [7:28429] Sorry for the off-topic post, but... If I have the MAC address of a device and I want to know which port on a Cat 5505 it's plugged into, how I can I find that out? I assume it's a command on the switch, but what is it? Thanks, --Don _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28434&t=28429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT-How to find port on switch if you have MAC [7:28429]
Sh cam (and mac address in AA-BB-CC-DD-EE-FF) format Or Sh cam dynamic Will give you the whole list. Ed (NP, DP) -Original Message- From: Don Oxman [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 12:42 PM To: [EMAIL PROTECTED] Subject: OT-How to find port on switch if you have MAC [7:28429] Sorry for the off-topic post, but... If I have the MAC address of a device and I want to know which port on a Cat 5505 it's plugged into, how I can I find that out? I assume it's a command on the switch, but what is it? Thanks, --Don _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp * DISCLAIMER: The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained therein by any other person is not authorized. If you are not the intended recipient please notify us immediately by returning the e-mail to the originator. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28433&t=28429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT-How to find port on switch if you have MAC [7:28429]
sh mac | inc \.\. where \.\. is the mac address sh mac does a complete listing of all the mac addresses it is aware of. At 09:42 AM 12/7/2001, Don Oxman wrote: >Sorry for the off-topic post, but... > >If I have the MAC address of a device and I want to know which port on a Cat >5505 it's plugged into, how I can I find that out? I assume it's a command >on the switch, but what is it? > >Thanks, > >--Don > >_ >Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp -- Nick alias life='cat /dev/urandom | grep 'born' | sed s/'born'/'die'/g > /dev/null' Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28432&t=28429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT-How to find port on switch if you have MAC [7:28429]
Don Oxman wrote: > > Sorry for the off-topic post, but... > > If I have the MAC address of a device and I want to know which port on a Cat > 5505 it's plugged into, how I can I find that out? I assume it's a command > on the switch, but what is it? > > Thanks, > > --Don > > _ > Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp show cam dynamic Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28431&t=28429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
load balance 2 isp's-cisco [7:28430]
a question: we have 2 sdsl connections (1.5 and 1 mbps) from 2 different isp providers. right now, we use one as a back up and connect it manually if need be. we will be using a cisco 2621 router with 3 ethernet ports, one for each of the dsl routers and one to the firewall. what would be the best routing protocol to load balance between the two ethernet connections running to the dsl routers? igrp since the two connectons are of different bandwith? an points towards the right direction will be helpful. thank pete Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28430&t=28430 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OT-How to find port on switch if you have MAC [7:28429]
Sorry for the off-topic post, but... If I have the MAC address of a device and I want to know which port on a Cat 5505 it's plugged into, how I can I find that out? I assume it's a command on the switch, but what is it? Thanks, --Don _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28429&t=28429 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Redistribution Question [7:28374]
Well since I need the redistribution practice, figured I'd plug your config into my pod and see if I could figure out what gives! First thing I noticed...and it may just be a typo or dyslexia (it's an affliction I experience often (smile))if you didn't cut and paste your configs. >From your post... A is connected to B with 10.1.1.100 / 24 - Serial 0 B is connected to A with 10.1.1.1 / 24 - Serial 0 B is connected to C with 192.168.1.17 /28 - Serial 1 doesn't coincide with your posted configs hostname RouterA ! interface Serial1 ip address 10.1.1.100 255.255.255.0 clockrate 64000 hostname RouterB ! interface Serial0 ip address 192.168.1.17 255.255.255.240 no fair-queue ! interface Serial1 ip address 10.1.1.1 255.255.255.0 Second...Here's my plugged in config and all devices have connectivity to all other devices as expected. Caveat: only the necessary portions of the config are listed for brevity and I changed some DTE/DCE interfaces and increased the clockrate (personal preferrence)! hostname RouterA ! interface Serial0 ip address 10.1.1.100 255.255.255.0 no fair-queue ! router ospf 100 network 10.1.1.100 0.0.0.0 area 1 ! end ! hostname RouterB ! interface Serial0 ip address 10.1.1.1 255.255.255.0 no fair-queue clockrate 400 ! interface Serial1 ip address 192.168.1.17 255.255.255.240 ! router ospf 100 network 192.168.1.17 0.0.0.0 area 0 network 10.1.1.1 0.0.0.0 area 1 ! end ! hostname RouterC ! interface Serial0 ip address 192.168.1.18 255.255.255.240 no fair-queue clockrate 400 ! interface Serial1 ip address 192.168.2.49 255.255.255.240 clockrate 400 ! router ospf 100 redistribute igrp 200 metric-type 1 subnets network 192.168.1.18 0.0.0.0 area 0 default-metric 10 ! router igrp 200 redistribute ospf 100 network 192.168.2.0 default-metric 1 100 255 1 1500 ! ip route 192.168.1.0 255.255.255.0 Null0 ! end ! hostname RouterD ! interface Serial0 ip address 192.168.2.50 255.255.255.240 no fair-queue ! router igrp 200 network 192.168.2.0 ! end HTH Stefan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Hunt Lee Sent: Friday, December 07, 2001 2:35 AM To: [EMAIL PROTECTED] Subject: Redistribution Question [7:28374] I need some help on a Redistribution question: I have setup 4 routers: Router A - Router B - Router C - Router D A, B & C are running OSPF, and C & D are running IGRP - I'm trying to redistribute between OSPF & IGRP routes: A is connected to B with 10.1.1.100 / 24 - Serial 0 B is connected to A with 10.1.1.1 / 24 - Serial 0 B is connected to C with 192.168.1.17 /28 - Serial 1 C is connected to B with 192.168.1.18 / 28 - Serial 0 C is connected to D with 192.168.2.49 / 28 - Serial 1 D is connected to C with 192.168.2.50 / 28 - Serial 0 However, I could only ping from D to A (& vice versa), but I couldn't ping from B to D, or D to B N.B: D to C (and vice versa) is fine as they are directly connected Any help will be greatly appreciated. Thanks in advance, Hunt Lee Below are the configs for the routers: Router A version 11.0 service udp-small-servers service tcp-small-servers ! hostname RouterA ! ! no ip domain-lookup ! interface Ethernet0 no ip address shutdown ! interface Serial0 no ip address no fair-queue clockrate 64000 ! interface Serial1 ip address 10.1.1.100 255.255.255.0 clockrate 64000 ! router ospf 100 network 10.1.1.100 0.0.0.0 area 1 ! ip host RouterB 10.1.1.1 ip host RouterC 192.168.1.18 ip host RouterD 192.168.2.50 ! line con 0 line aux 0 transport input all line vty 0 4 login ! end Router B version 11.0 service udp-small-servers service tcp-small-servers ! hostname RouterB ! no ip domain-lookup ! interface Ethernet0 no ip address shutdown ! interface Serial0 ip address 192.168.1.17 255.255.255.240 no fair-queue ! interface Serial1 ip address 10.1.1.1 255.255.255.0 ! router ospf 100 network 192.168.1.17 0.0.0.0 area 0 network 10.1.1.1 0.0.0.0 area 1 ! ip host RouterA 10.1.1.100 ip host RouterC 192.168.1.18 ip host RouterD 192.168.2.50 ! line con 0 line aux 0 transport input all line vty 0 4 login ! end Router C version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname RouterC ! ! ip subnet-zero no ip domain-lookup ip host RouterA 10.1.1.100 ip host RouterB 192.168.1.17 ip host RouterD 192.168.2.50 ! interface Ethernet0 no ip address no ip directed-broadcast shutdown ! interface Serial0 ip address 192.168.1.18 255.255.255.240 no ip directed-broadcast no ip mroute-cache no fair-queue clockrate 64000 ! interface Serial1 ip address 192.168.2.49 255.255.255.240 no ip directed-broadcast clockrate 64000 ! interface BRI0 no ip address no ip directed-broadcast shutdown ! router ospf 100 redistribute igrp 200 metric-type 1 subnets network 192.168.1.18 0.0.0.0 area 0 default-metric
Re: contractor rate [7:28260]
I would also add that don't believe everything you read. I saw some CCNA/CCNP's with only a few years experience saying they bill $150-200 an hour. Sure that might have been true a year or two ago (although that's a ridiculous rate to pay for a mid level engineer) and probably for very short term contracts (like a couple of hours). I highly doubt any of them were paid that much for a contract of any length. With the number of unemployed and somewhat desperate people out there I would say $90-120 an hour for a W2 is excellent in the Bay Area. I think you will find there are a lot of guys with comparable experience that are willing to work for less. A Unix buddy of mine was charging $130-150 an hour last year and this year I've seen him work for as low as $42 an hour! If you have a stable job for something reasonably close to that I wouldn't be too anxious to make a move. Its not unusual to start a new contract and have it terminated a month later. John Kaberna CCIE #7146 www.netcginc.com (415) 750-3800 ""nrf"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > In answer to your direct question, yes that rate is low historically for > someone with 10 years experience (which in my opinion, vastly outweighs the > worth of the CCIE) in the Bay. But then of course these are unusual > times. > > > And yes, in general, as a contractor you cannot expect to be working 40 > consistent hours per week for 50 weeks. In fact, working 75% of the time is > considered to be exceptional. And in this kind of economy, who knows? > > > > ""Q Y"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hi, folks, > > > > > > Just want to have a general feeling about the CCIE contractor rate in > Bay > > > area. It is a W2 position, so no accountant, lawyer overhead. Is $90 to > > 120 > > > low? It is a 1 year contract. I have 10 year experience and have a job > > now. > > > After browsing this list, i saw so many people talking about $150 and > > above. > > > Based on my calculation, $100 and 40 hr a week is about $200k. That's > > aweful > > > lots of money. Any suggestion? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28427&t=28260 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: AS5200 Memory [7:28366]
/ It seems that this same subject on the RAM pricing has come up before. I seem to recall that someone had checked the speed and pin-out and found that commerically available RAM works just as well. \ Original message >Date: Fri, 7 Dec 2001 10:28:39 -0500 >From: "Daniel Cotts" >Subject: RE: AS5200 Memory [7:28366] >To: [EMAIL PROTECTED] > >I bought some used Flash for 2500s. It had a sticker on it that indicated >that it had come from a 5200. >Yes, Cisco's overpriced DRAM is my pet peeve. Pricing must come from the >Sales Droid Dept. > >> -Original Message- >> From: Circusnuts [mailto:[EMAIL PROTECTED]] >> Sent: Thursday, December 06, 2001 11:18 PM >> To: [EMAIL PROTECTED] >> Subject: AS5200 Memory [7:28366] >> >> >> Has anyone uncovered the speed and pin of the RAM and FLASH >> for this router >> ??? We purchased one for the lab @ work and it was delivered >> with no memory. >> Cisco wants $800 reseller cost for a stick of RAM. >> >> Thanks >> Phil [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28426&t=28366 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
# of VLANs [7:28425]
How many sub-interfaces can I create for VLAN routing on a router, lets say a 2600 series? I can't find anything at cisco. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28425&t=28425 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT - How to get MAC address of remote device when I have [7:28424]
If you have network management software running somewhere, it's likely that you could get that information from there. Alternately, if you have SNMP running on the device in question, you could do an snmpget or snmpwalk from another SNMP-enabled station and get that information. HTH, John >>> "Provost, Robert" 12/7/01 9:27:48 AM >>> Unfortunatly the remote router is a 3Com. -Original Message- From: Logan, Harold [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 11:27 AM To: Provost, Robert; [EMAIL PROTECTED] Subject: RE: OT - How to get MAC address of remote device when I have the IP [7:28408] You'll need access to the router that's local to the remote host. View that router's ARP cache (show ip arp, etc.) and you should be able to find it. hth, Hal Logan Network Specialist / Adjunct Faculty Computing and Engineering Technology Manatee Community College > -Original Message- > From: Provost, Robert [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 07, 2001 10:46 AM > To: [EMAIL PROTECTED] > Subject: OT - How to get MAC address of remote device when I > have the IP > [7:28408] > > > Sorry for the off topic post. > > Does anyone know how I can determine the MAC address of a > remote device when > I do have the IP? I ping it but my arp cache only shows the local > addresses. > > Any help would be appreciated. > > Thanks. > > Robert Provost > Data Communications Engineer > Genesis Health Ventures > Phone: 610-925-1147 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28424&t=28424 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Serial links [7:28270]
1.544 each way. Do some research on T-1. Hint - it originally was designed for voice. 24 channels of 64 kbs (1536) each plus framing. I think that the Larscom CSU/DSU manuals have a good tutorial. > -Original Message- > From: Michael Williams [mailto:[EMAIL PROTECTED]] > Subject: Re: Serial links [7:28270] > Having said that, what are your thoughts on my question about > a point to > point T1 link at 1.544 Mbps? Is that 768Kbps each way or > 1.544each way? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28423&t=28270 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Hot swappable question [7:28412]
Yes Dave Raul De La Garza III wrote: > > To anyone who can answer, > > I know that the Catalyst 6509 switch 10/100 modules are hot swappable, but, > what about the IDS module? Is the IDS module hot swappable? > > Raul De La Garza III > > "Rome has spoken; the cause is finished." -St. Augustine (354-430) -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28422&t=28412 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IPsec [7:28421]
My setup... The s0 of my router is connect to private network and e0 is connected to internet.Default route is next hop on the internet(ip route 0.0.0.0 0.0.0.0 210.23.4.5). I am planning to implement VPN between my network and other network.I have configured IKE and Ipsec my access_list for VPN would be access_list 101 permit ip 192.16.0.0 0.0.255.255 172.16.3.0 0.0.255.255. My question 1)Since my default route is to 210.23.4.5,how does my router establish the VPN when it sees the packet from 192.16.0.0 2)Would appreciate if anyone could explain step by step how VPN connection is made? Cheers __ Do You Yahoo!? Send your FREE holiday greetings online! http://greetings.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28421&t=28421 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT - How to get MAC address of remote device when I have [7:28420]
-- Forwarded by Kevin Cullimore/FIRNY/NorthAmerica/MCKINSEY on 12/07/2001 11:34 AM --- To: "Provost, Robert" cc: From: Kevin Cullimore/FIRNY/NorthAmerica/MCKINSEY Date: 12/07/2001 11:31:07 AM Subject: (Document link: Kevin Cullimore) Re: OT - How to get MAC address of remote device when I have the IP [7:28408] if you have snmp read access, querying relevant instances of 1.3.6.1.2.1.2.2.1.6 generally does the trick. "Provost, Robert" @groupstudy.com on 12/07/2001 10:46:26 AM Please respond to "Provost, Robert" Sent by: [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc:(bcc: Kevin Cullimore) Subject: OT - How to get MAC address of remote device when I have the IP [7:28408] Sorry for the off topic post. Does anyone know how I can determine the MAC address of a remote device when I do have the IP? I ping it but my arp cache only shows the local addresses. Any help would be appreciated. Thanks. Robert Provost Data Communications Engineer Genesis Health Ventures Phone: 610-925-1147 This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28420&t=28420 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Muliple command alias? [7:28413]
Robert McCallum posted how to do this a while ago. Here is that post in its entirety: Earlier in the month I posted a question on how you could have multiple commands coming from one menu item i.e. user presses key 1 and it shuts down an interface. I have eventually came up with a solution which is posted below. Just in case anyone out there has to do the same. have a menu which calls a file from the flash and copies it into your running config menu EMOS text 1 SHUTDOWN LUCY menu EMOS command 1 copy slot0:shut91 runn menu EMOS text 2 SHUTDOWN ANDERSON menu EMOS command 2 copy slot0:shut92 runn menu EMOS text 3 SHUTDOWN CUMMING menu EMOS command 3 copy slot0:shut93 runn menu EMOS text 4 SHUTDOWN DAVIDSON menu EMOS command 4 copy slot0:shut94 runn blah blah blah the flash looks like 2 -rw-10467208 Jan 05 2001 05:12:37 c7200-js-mz.121-4.bin 15 -rw- 28 May 22 2001 11:01:33 open91 17 -rw- 28 May 22 2001 11:01:42 open92 18 -rw- 28 May 22 2001 11:01:47 open93 19 -rw- 28 May 22 2001 11:01:56 open94 20 -rw- 28 May 22 2001 11:02:01 open95 21 -rw- 28 May 22 2001 11:02:06 open96 22 -rw- 25 May 22 2001 11:02:12 shut91 23 -rw- 25 May 22 2001 11:02:17 shut92 24 -rw- 25 May 22 2001 11:02:21 shut93 25 -rw- 25 May 22 2001 11:02:26 shut94 26 -rw- 25 May 22 2001 11:02:30 shut95 27 -rw- 25 May 22 2001 11:02:34 shut96 the file called shut91 looks like more flash:shut91 int fast0/0.91 shut end note the file has to end with "end" otherwise you will have unexpected end of file in your logs every time the command is issued. I used this menu as a means for users in a 24 hour by 7 support team who know very little about Cisco equipment to allow them to shut or open interfaces depending on what is needed. I had to do this as we have backup servers in a different location which surprise surprise require the same IP address as its primary server. HTH anyone in the near future. Robert McCallum >>> "Michael Williams" 12/7/01 8:58:41 AM >>> Hello all Is it possible to create an alias that performs multiple commands? I've tried all sorts of things between commands like ; and ! and the alias executes the first command but that's it.. Thanks! Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28419&t=28413 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Serial links [7:28270]
I hope your joking. To go thru all that in order to find documnted information. T1's are nothing new nor is full duplex synchronous communications. BTW it's 1.5 in each direction so i spose that makes a T1 a 3M link ;) Dave Michael Williams wrote: > > Richard, > > Sorry for the misread of your humor. You're correct, sometimes text doesn't > convey your true spirit. Oh well not a thang =) > > Here's the damnest thing tho. I've asked many networking professionals, > including two CCIEs (not candidates), and no could seem to know 100% about > whether serial links were half or full duplex. Sad, eh? I'm tempted to > setup a test with 2 PCs and 2 routers with a low bandwidth connection > (128Kbps or so) and try to jam traffic through both ways and monitor the > speeds and see what I get. But I've got that nagging in the back of my mind > that you're correct and serial links are indeed full duplex. > > Having said that, what are your thoughts on my question about a point to > point T1 link at 1.544 Mbps? Is that 768Kbps each way or 1.544each way? > > Mike W. > > richard beddow wrote: > > > > Mike, > > > > I have three final comments then I think enough has been said. > > > > 1. Ethernet has always been a half duplex standard until recent > > times, FDX operation is always quoted therefore to make the > > distinction from the default. > > > > 2. Serial lines, however, since the late seventies-early > > eighties have been by default a full duplex offering. > > Therefore FDX is assumed unless otherwise stated. > > > > 3. My comments were not ment to offend but supposed to be > > funny. Humour on a forum such as this is often missread and I > > should have learnt my leason along time ago but I just can't > > help it. > > > > Charles do you have your answer??? > > > > > > RB -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28418&t=28270 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT - How to get MAC address of remote device when I have [7:28417]
Unfortunatly the remote router is a 3Com. -Original Message- From: Logan, Harold [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 11:27 AM To: Provost, Robert; [EMAIL PROTECTED] Subject: RE: OT - How to get MAC address of remote device when I have the IP [7:28408] You'll need access to the router that's local to the remote host. View that router's ARP cache (show ip arp, etc.) and you should be able to find it. hth, Hal Logan Network Specialist / Adjunct Faculty Computing and Engineering Technology Manatee Community College > -Original Message- > From: Provost, Robert [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 07, 2001 10:46 AM > To: [EMAIL PROTECTED] > Subject: OT - How to get MAC address of remote device when I > have the IP > [7:28408] > > > Sorry for the off topic post. > > Does anyone know how I can determine the MAC address of a > remote device when > I do have the IP? I ping it but my arp cache only shows the local > addresses. > > Any help would be appreciated. > > Thanks. > > Robert Provost > Data Communications Engineer > Genesis Health Ventures > Phone: 610-925-1147 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28417&t=28417 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
