Re: Image file is bigger than flash,How do I solve [7:31968]
boot from network tftp server
or...
upgrade to 16M flash
""qin jonson"" P4HkO{O"PBNE
:[EMAIL PROTECTED]
> the issue?
>
> Hi,everybody.
>
> Hope to seek some advise on TFTP a bigger flash to flahs.
>
> Now I have a 2611 router.I want to upload 2600-js-mz-121.6.bin
>
> to router's flash.But the file's size is 8867kbytes,and router's
>
> flash size is 8192kbyes. Who can tell me how to solve the issue
>
> except upgrate the flash ?
>
>
> Have anyone run into the problem and solve the problem,please
>
> advise me how to do? Thanks for your help.Appreciated it.
>
> regards,
>
> jonsonqin
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31968&t=31968
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ...to Desgin or ...to IE [7:31849]
I am a CCNP and I am heading toward the CCIE. I think it is good to take CCDP as a preparation for the CCIE. Instead of reading only for the CID exam I read the recommended design books for the CCIE in addition to the material for the CID. Regards Jon Gudmundsson -Original Message- From: Packet Loss [mailto:[EMAIL PROTECTED]] Sent: 14. janzar 2002 14:39 To: [EMAIL PROTECTED] Subject: ...to Desgin or ...to IE [7:31849] Morning All, Stumbled upon this NG and feel like I have found a "gold mine". Have one more test to go (640-506, support) to complete the CCNP. Struggling with... do I go Design route or CCIE route. I can see pros and cons to both directions. I am curious to what direction others in my shoes have done and what techniques they used to get there, i.e., which books for each path. Looking for any and all feedback to consider.. Thanks in advance for your time and advice. Packet-Loss Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31970&t=31849 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Acceptable light levels for fiber.... [7:31971]
Hello All, I've been searching for the acceptable amount of Db loss for multimode fiber run. I've found a variety of information on core diameter, operating wavelength and fiber installation. I've also read TIA/EIA-568-A and TSB-72, standards for Centralized Fiber Cabling Guidelines. These documents only seem to outline installation/operational, rather than functional, specifications. I've also checked out sites like cabletester.com with no success. What am I missing, my CLR illustrates a run of 100-200m. Any resources or information provided will be greatly appreciated... Thank You - Kelsey Miller, CCNP/CCDA _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31971&t=31971 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
mentor back? [7:31964]
Isn't this the group that went bankrupt and took money with them from lots of students for classes they paid for? There were lots of posts from angry students here a bit ago, I wonder if their concerns have been address since mentor is now back in business? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31972&t=31964 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Time Zone Lab Rental [7:31973]
Rent the lab on EST or GMT 1-15th 7am EST 16-31st 7am GMT We will accormodate differnt time zone lab rental (Please e-mail us for more details) Lab Rental for $65.00 at www.practicelabs.net Please take advantage of our introductory offer of buy-one 1/2 day get the second FREE. Our Rack is physically wired to accommodate most practice labs on the market. The rack consists of 12 Cisco Routers, a Frame-Relay Switch (Cisco 4500 Router), a Catalyst 3920 Token-Ring Switch, an ISDN Switch, 2 of the routers have FXS Voice cards for VOIP scenarios, and a Catalyst 2924XL switch. Good Luck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31973&t=31973 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Please READ THIS ! ! ! [7:31974]
Haye Friends, Just wanted your help in taking a right decision. I m planning to take the Routing exam (Exam no. 503) Which is the best book for study ? WHICH BOOK SHOULD I BUY ? a. BSCN by Catherine Paquet / Diane Teare b. EXam Certification Guide by Clare Gough c. Study guide by Todd Lammle, Sean & Kevin Any recommendations from your side will be of great help to me. Thank you friends Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31974&t=31974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE:Summarization (to Ben Kessler) [7:31975]
Ben, I'm afraid that when I answered your post it was already buried under tons of other post. I'm sorry, these are the consequences of living in Europe...:-> Anyway, thanks for your detailed answer, I hope to get more detailed specifications (CPU, memory,...) asap, but by now I have only said the following: I'm afraid I have no idea what happened but I'm think that it wasn't a problem with CPU unless summarization is a very intensive cpu process(I don't know if it is). We have a hub-and-spoke topology. Four 7500 (2 7513 and 2 7507) for full-meshed backbone (ATM)and over 230 sites (2500 an 2600 mainly), and we have implemented redundancy using dialers and ISDN connections (and yes, we have conected each router to two different hub routers). In one of the 7513 we have over 100 dialers and 90 serial WANs connections, I have tried the summarization again with only two routers and by now, I haven't experimented any problem. As you can guess, our network is growing more and more and I'm worried about routing tables with a lot of entries (we're using network 172.x.x.x for serial interfaces and 10.x.x.x for ethernet interfaces) I tried to summarize on networks 10.x.x.x and 172.x.x.x using the following commands ip summary-address eigrp 1 10.0.0.0 255.0.0.0 ip summary-address eigrp 1 172.0.0.0 255.0.0.0 Today, I have talked with my boss and we've decided to try the summarization again but we're going to use the 0.0.0.0 network instead the other two (I'll try to check my RSP in-depth this time) Anyway, we're not experts in Cisco so I thought that we could reduce routing tables using summary address and make easier the administration and troubleshooting (perhaps it isn't a good idea). Unfortunatly, we work in a helth-care enviroment, and we have to make sure before doing anything in backbone routers. I hope you read this post, I live in Europe and every time I have to reply a post I have hundreds before me. Anyway, I'll keep you and this wonderful group informed. David I've done it with about 100 interfaces on 7513's and didn't see this problem. It may be a limitation of the code on the box, memory (as you indicated), or something else. Have you been able to rule-out as many "something elses" as possible? What does the network topology look like? Do you have redundancy in place - e.g. spoke routers connected to two different hub routers? Are you getting a lot of SIAs? Routes flapping, etc.? How's the CPU on your RSP's looking? Free memory? Buffer misses? There's a common view that EIGRP works fine and can scale infinitely big without going through all of the steps that you'd have to go through for a large-scale OSPF installation. Obviously, this thought is very wrong. I'm guessing that you need to do manual summarization on 200 interfaces per box is because you don't have clearly-defined summarization points in the network - that's the situation I was in when I had to do it on ~100 interfaces. For good or ill, EIGRP will work with a bad network design (I'm speaking from an ideal perspective - please don't be offended, we all have to things at one time or another that are considered "bad") up until a point. Beyond that point, it gets really ugly - quickly. In the network I was working on we had 140 sites connected without problems. We started adding more offices and by the time we hit 170 the network was totally unstable. After several weeks of P1/CAP cases we met with the guys who write the code and found out what we were doing wrong - they have since published several CiscoPress books on EIGRP; none existed four years ago :) You can "band-aid" a broken network by using a lot of the EIGRP features (manual summarization, distribute-lists, etc.). In my case that's exactly what we did, unfortunately, I was not given the opportunity to correct the mistakes that required the band-aids. I have since moved on to new challenges but that network is still in the same state - four years later. Anyhow, if you can offer more specifics, I'm sure those of us on the list would be happy to comment and offer suggestions. I think that if we can solve the reason you need to manually summarize on 200 interfaces you'll be better off down the road. Ben -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Sunday, January 13, 2002 5:02 AM To: [EMAIL PROTECTED] Subject: Summarization [7:31766] Hello folks, I'm working in a EIGRP enviroment, and I have some questions for you: Has anyone tried to do a manual route sumarization per interface with more or less 200 interfaces in a 7500? I've tried but I'm having a few problems, the summary routes aren't advertised sufficiently fast to the routers in branch offices. The summary routes are sometimes marked as "possibly down" in the routers of branch offices, sometimes are up and sometimes are down. Do you know any relationship between memory or cpu (or whatever) of the 7500 and number of interfaces in
Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976]
I have a 3620 with 64 MB RAM 16 MB Flash. I installed module NM-1E2W and it works fine, but when I install the WIC-2T in either WAN slots it doesn't recognize it. The WIC-2T works on my 1720 and 2610. I've tried 2 different IOS already (IOS 12.2 Enterprise Plus IPSec 56 and 12.1 IP Plus IPSEC 56). Any input will be appreciated. Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31976&t=31976 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Image file is bigger than flash,How do I solve [7:31977]
You dont choose to boot from network tftp (which can be pain in the butt sometimes, but helpful) I have a few 8 MB Flash modules for 2600 series, let me know if you're interested. Thanks! "qin jonson" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > the issue? > > Hi,everybody. > > Hope to seek some advise on TFTP a bigger flash to flahs. > > Now I have a 2611 router.I want to upload 2600-js-mz-121.6.bin > > to router's flash.But the file's size is 8867kbytes,and router's > > flash size is 8192kbyes. Who can tell me how to solve the issue > > except upgrate the flash ? > > > Have anyone run into the problem and solve the problem,please > > advise me how to do? Thanks for your help.Appreciated it. > > regards, > > jonsonqin Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31977&t=31977 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
1605R needs to act as DHCP server. [7:31978]
Does anyone know which feature set you need to run DHCP server on 1605R? I still cannot find one that does dhcp. They don't have Enterprise IOS for 1605R. Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31978&t=31978 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: 1605R needs to act as DHCP server. [7:31978]
Hello Firesox, I would go to www.cisco.com/go/fn and use the Feature Navigator to find what you need. There are so many releases that it is hard to keep track. This tool is quite useful. Good luck. Regards, Georg Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31979&t=31978 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976]
>From Cisco's web site, it doesn't look like the WIC-2T is supported in the NM-1E2W. The doc on the WIC-2T only lists the following: NM-1FE1R2W NM-1FE2W NM-2FE2W NM-2W The same doc says that the WIC-2T isn't supported in the following: Cisco 1600 NM-1E2W NM-1E1R2W NM-2E2W Sorry. -Original Message- From: tmjf.com [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 15, 2002 4:28 AM To: [EMAIL PROTECTED] Subject: Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976] I have a 3620 with 64 MB RAM 16 MB Flash. I installed module NM-1E2W and it works fine, but when I install the WIC-2T in either WAN slots it doesn't recognize it. The WIC-2T works on my 1720 and 2610. I've tried 2 different IOS already (IOS 12.2 Enterprise Plus IPSec 56 and 12.1 IP Plus IPSEC 56). Any input will be appreciated. Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31981&t=31976 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976]
Hi, WIC-2T is supported on 3660/3640/3620 if the following modules are installed on the 3660/3640/3620: NM-1FE2W,NM-1FE1R2W,NM-2FE2W,and NM-2W WIC-2T is not supported on the following modules on 3660/3640/3620: NM-1E2W, NM-1E1R2W,and NM-2E2W Regards, Georg Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31980&t=31976 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976]
> I have a 3620 with 64 MB RAM 16 MB Flash. I installed module NM-1E2W and it > works fine, but when I install the > WIC-2T in either WAN slots it doesn't recognize it. The WIC-2T works on my > 1720 and 2610. I've tried 2 different IOS already > (IOS 12.2 Enterprise Plus IPSec 56 and 12.1 IP Plus IPSEC 56). Any input will > be appreciated. Look likes 3600 doesn`t support WIC-2T on NM-1E2W. See the following WIC-2T URL : http://www.cisco.com/warp/customer/107/wic-2t.shtml and the Hardware Compatibility Matrix: http://www.cisco.com/warp/customer/471/wics.html Mine 3640 does recognize WIC-2T on NM-2FE2W though. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31982&t=31976 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976]
You guys are great and saved me a ton of time! have a great day! "tmjf.com" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I have a 3620 with 64 MB RAM 16 MB Flash. I installed module NM-1E2W and it > works fine, but when I install the > WIC-2T in either WAN slots it doesn't recognize it. The WIC-2T works on my > 1720 and 2610. I've tried 2 different IOS already > (IOS 12.2 Enterprise Plus IPSec 56 and 12.1 IP Plus IPSEC 56). Any input will > be appreciated. > > Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31983&t=31976 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
1720 running BGP [7:31984]
Does anyone know of the IOS version for 1720 that can run BGP? I'm currently using IOS Version 12.1(3) Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31984&t=31984 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976]
According to Cisco's HW/SW compatibility matrix, you need one of the following IOS versions to support a WIC-2T on a 3620: 12.0(7)XK, 12.1(1)T, 12.1(5)YB, 12.2(1), 12.2(2)T, 12.2(2)XT Don't assume that if you try a later version of IOS that it's definitely going to support your card. Try to get one of the versions listed. Craig At 07:27 AM 1/15/2002 -0500, you wrote: >I have a 3620 with 64 MB RAM 16 MB Flash. I installed module NM-1E2W and it >works fine, but when I install the >WIC-2T in either WAN slots it doesn't recognize it. The WIC-2T works on my >1720 and 2610. I've tried 2 different IOS already >(IOS 12.2 Enterprise Plus IPSec 56 and 12.1 IP Plus IPSEC 56). Any input will >be appreciated. > >Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31985&t=31976 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Please READ THIS ! ! ! [7:31974]
I used A & B plus ExamCram, Cramsession, and Boson. -- "Through Complexity there is Simplicity, Through Simplicity there is Complexity" David L. Blair - CCNP, CCNA, MCSE, CBE, A+, 3Wizard ""Cisco Fire"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Haye Friends, > > Just wanted your help in taking a right decision. > I m planning to take the Routing exam (Exam no. 503) > > Which is the best book for study ? WHICH BOOK SHOULD I BUY ? > > a. BSCN by Catherine Paquet / Diane Teare > > b. EXam Certification Guide by Clare Gough > > c. Study guide by Todd Lammle, Sean & Kevin > > > Any recommendations from your side will be of great help to me. > > > Thank you friends Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31986&t=31974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE R/S Cat 5K question [7:31953]
Layer 2 on the Catalyst 5000, but you may have to trunk with an external router and route VLANs. Marc Russell www.ccbootcamp.com ""Firesox"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Do they have Cat5K with L3 functionality on CCIE R/S lab or it is strictly > L2? > Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31958&t=31953 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Custom Telnet Application [7:31889]
I'm more than interested. Thanks Brad. >From: "Brad Ellis" >Reply-To: "Brad Ellis" >To: [EMAIL PROTECTED] >Subject: Custom Telnet Application [7:31889] >Date: Mon, 14 Jan 2002 15:31:35 -0500 > >Would anyone be interested in using a custom telnet application that has >some built-in macros? (sh ip route, some initial setup stuff, automated >switching between devices on a comm-server, etc) > >If you're interested in something like this, please RESPOND to this message >on Groupstudy with your email address. If there's enough of a response, >I'll write the app and email it to you when it's done. > >Also, if you want to suggest some custom macro's or custom features, >include >them in your post. > >thanks, >-Brad Ellis >CCIE#5796 (R&S / Security) >Network Learning Inc >used Cisco gear: www.optsys.net >CCIE Labs, racks, and classes: http://www.ccbootcamp.com/quicklinks.html _ Chat with friends online, try MSN Messenger: http://messenger.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31962&t=31889 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
NATing through a gateway? [7:31988]
i was wondering if anyone out there could offer me some advice. i want to nat via a gateway. instead of nating, say, 66.89.59.100 to 192.168.2.100 and vice versa, is it possible to nat 66.89.59.100 to a gateway, 192.168.2.1, with the destination of 192.168.2.100? i'm trying to do something like this: global ip gateway local destination 66.89.59.100->192.168.2.1>192.168.2.100 66.89.59.101->192.168.2.1>192.168.2.101 168.103.127.10--->192.168.2.1>192.168.2.102 168.103.127.11--->192.168.2.1>192.168.2.103 any help would be appreciated. thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31988&t=31988 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: 1720 running BGP [7:31984]
You need the IP Plus image. HTH Dom Stocqueler "tmjf.com" cc: Sent by: Subject: 1720 running BGP [7:31984] nobody@groups tudy.com 15/01/2002 13:41 Please respond to "tmjf.com" Does anyone know of the IOS version for 1720 that can run BGP? I'm currently using IOS Version 12.1(3) Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31987&t=31984 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976]
You also need a nm with a fast eth interface. -Original Message- From: Craig Columbus [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 15, 2002 8:02 AM To: [EMAIL PROTECTED] Subject: Re: Help !! 3620 + NM-1E2W + WIC-2T = trouble [7:31976] According to Cisco's HW/SW compatibility matrix, you need one of the following IOS versions to support a WIC-2T on a 3620: 12.0(7)XK, 12.1(1)T, 12.1(5)YB, 12.2(1), 12.2(2)T, 12.2(2)XT Don't assume that if you try a later version of IOS that it's definitely going to support your card. Try to get one of the versions listed. Craig At 07:27 AM 1/15/2002 -0500, you wrote: >I have a 3620 with 64 MB RAM 16 MB Flash. I installed module NM-1E2W and it >works fine, but when I install the >WIC-2T in either WAN slots it doesn't recognize it. The WIC-2T works on my >1720 and 2610. I've tried 2 different IOS already >(IOS 12.2 Enterprise Plus IPSec 56 and 12.1 IP Plus IPSEC 56). Any input will >be appreciated. > >Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31989&t=31976 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Please READ THIS ! ! ! [7:31974]
I have A and B. I used A and Jeff Doyle's Volume I to pass the exam. I never opened B. Edmundo Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31990&t=31974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router Serial# [7:31959]
By default there is no way to get the actual router serial number from the command line. There are ways to display certain serial numbers associated with that device, but it is not the chassis serial number you're seeing. One solution--which doesn't help you now--is to set the snmp chassis-ID in the router when you initially configure it. From that point on you can see the serial number from the command line or via SNMP. John >>> "Washington Rico" 1/14/02 10:38:36 PM >>> I would appreciate any information you have. I need to find the serial number of some routers which are located on a remote site. I know that with a show version on Cat6000 the serial number shows up. What about with routers. Show version did not show a serial#. Is there a CLI command? Again apppreciate any info you may have. _ MSN http://photos.msn.co.jp/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31992&t=31959 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Double NAT with PIX [7:31294]
This just came up with a client that has a bunch or remote sites... all NAT and coming into the same remote box. This link helped a little. http://www.cisco.com/warp/public/707/same-ip.html hth ipguru "Ali, Abbas" wrote: > I have a 525 PIX and running normal configuration. Inside network is in > 10.0.0.0/16 segment and doing NAT with public address. Here is the > situation. I have a client where I need to have an access through my PIX > with VPN. The client is using VPN Concentrator and also has 10.0.0.0/16 for > their inside network. They sent me the VPN Client CD that I installed in my > laptop and gained access to their network through outside segment meaning I > attached my PC between my PIX's E0 and Internet router in otherwords > bypassed PIX and configured my PC with public address. > > Is it possible to connect to their network with me being attached to my > Internal network. The question is since both the networks mine and theirs > are on the same LAN Segment how is it possible? > > Thanks, Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31993&t=31294 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VLAN and IP Multicast [7:31994]
I have a 6509 with a MSFC, which it is divided into 2 VLAN, say VLAN4 and VLAN5. There is a server in VLAN4 and some clients PC in VLAN5, which the clients find the server by IP mulitcast. I have enabled IGMP in both 6509 and the route module, enabled "IP Multicast-routing" in the route module. I also enabled PIM (Dense mode) in both VLAN4 and VLAN5 interface. However, the clients still can't find the server, what am I miss? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31994&t=31994 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
multiple RADIUS servers [7:31995]
how can i configure multiple silmultaneous RADIUS servers to receive accountign packets on cisco 5400 Mohamed Saro Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31995&t=31995 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: 1720 running BGP [7:31984]
Hello, version 12.1(3) is fine, as long as you use one of the following (this is from the Cisco Feature Navigator): IP PLUS IPSEC 3DES c1700-k2sy-mz.12.1-3 (24/8) IP PLUS IPSEC 56 c1700-sy56i-mz.12.1-3 (20/8) IP PLUS c1700-sy-mz.12.1-3 (20/4) IP/FW/IDS PLUS IPSEC 3DES c1700-k2o3sy-mz.12.1-3 (32/8) IP/FW/IDS PLUS IPSEC 56 c1700-o3sy56i-mz.12.1-3 (24/8) IP/IPX/AT/IBM PLUS c1700-bnr2sy-mz.12.1-3 (32/8) IP/IPX/AT/IBM/FW/IDS PLUS IPSEC 3DES c1700-bk2no3r2sy-mz.12.1-3 (32/8) IP/IPX/AT/IBM/FW/IDS PLUS IPSEC 56 c1700-bno3r2sy56i-mz.12.1-3 (32/8) IP/IPX/AT/IBM/VO/FW/IDS PLUS IPSEC 3DES c1700-bk2no3r2sv3y-mz.12.1-3 (32/8) IP/IPX/AT/IBM/VOICE/FW/IDS PLUS IPSEC 56 c1700-bno3r2sv3y56i-mz.12.1-3 (32/8) IP/IPX/FW/IDS PLUS c1700-no3sy-mz.12.1-3 (20/8) IP/IPX/VOICE/FW/IDS PLUS c1700-no3sv3y-mz.12.1-3 (24/8) IP/VOICE PLUS IPSEC 3DES c1700-k2sv3y-mz.12.1-3 (24/8) IP/VOICE PLUS IPSEC 56 c1700-sv3y56i-mz.12.1-3 (24/8) IP/VOICE PLUS c1700-sv3y-mz.12.1-3 (24/8) IP/VOICE/FW/IDS PLUS IPSEC 3DES c1700-k2o3sv3y-mz.12.1-3 (24/8) IP/VOICE/FW/IDS PLUS IPSEC 56 c1700-o3sv3y56i-mz.12.1-3 (24/8) IP/VOICE/FW/IDS PLUS c1700-o3sv3y-mz.12.1-3 (24/8) Regards, Georg Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31996&t=31984 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Gateway of last resort [7:31997]
I was under the impressions that the gateway of last resort was a actual interface on the router. if a router had two interfaces one 10.1.1.1/16 and 10.1.2.1/16 and 10.1.2.1 was connected to a firewall that has a address of 10.1.2.2 that the gateway of last resort would be 10.1.2.1 not 10.1.2.2 and the static route thru 10.1.2.1 would be 0.0.0.0/0 [1/0] via 10.1.2.1 not 0.0.0.0/0 [1/0] via 10.1.2.2 or does this matter ? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31997&t=31997 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Encapsulation Failed [7:31916]
>Well, that does make sense, now that you mention it. (OSPF sending >multicast Hellos on a serial interface). OSPF uses Hellos as a >keepalive, >not just for establishing adjacencies. >Notice, that your reply is still hard to read because we can't tell >what >you wrote and what I wrote. But if you're reading and writing e-mail >from a >Web page, I could see how that could happen. It's not a big deal. >Thanks >for the reply. >Priscilla Priscilla, Here is how I acces this forum: http://www.groupstudy.com/form/list.php?f=7 I don't use e-mail at all because I travel too much and can't get to my account sometimes for days on end. The web interface isn't ideal, but it works. Anyway, you can see that I have to cut and paste previous text and then "comment out" the comments. Back to this guys problem James, You said that you knew the protocol must be up because another router had previously been working just fine on that line. However, PPP doesn't exist on the line or in the cloud. It must be successfully negotiated between the end points for layers 2 and 3 (LCPs and NCPs, respectively). A simple "sh ip int b" would be a good first place to start. From there you may need some more advanced debug of the ppp negotiation process (such as authentication). Scott Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32001&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Fefault route for eigrp? [7:31592]
Sure but I don't think I would go and redistribute them. You may want to consider setting up two HSRP groups. That way you could utilize both routers and have redundancy between the two default routers. A better understanding of your topology would be insightful. Dave Scott wrote: > > Is it possible to have 2 different routers in the same EIGRP AS each have a > different default route? Essentially, a router will send a packet to the > closest default route until 1 of those routes goes down, and then all will > use the workng route? > > On Friday 11 January 2002 09:54 am, MADMAN wrote: > > You don't add the "network 0.0.0.0" to make it work otherwise your > > right on though adding the default-network command will work I prefer > > redistributing the static. > > > > Dave > > > > s vermill wrote: > > > EIGRP behaves a little differently than all of the other protocols. You > > > first have to define a static 'ip route 0.0.0.0 0.0.0.0 x.x.x.x' and then > > > add a 'network 0.0.0.0' to your EIGRP config. I think you have to > > > 'redistribute static' as well. It will not propogate a default as a > > > result of the 'default-network' command. > > > > > > Regards > > -- > Scott Meyer > CCNA, CCDA, MCSE, etc. > [EMAIL PROTECTED] -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32002&t=31592 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Message from Yoda - OT [7:32003]
I sense much 11.0 in you... 11.0 leads to crashes... crashes leads to downtime... Downtime leads to suffering... 11.0 is the path to the darkside... Powerful 12.6 is... Robert Fowler Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32003&t=32003 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
What is this ?? [7:32005]
After I type debup ip icmp I've got this.Why is the source address 0.0.0.0 ? 1w0d: IP: s=0.0.0.0 (FastEthernet0/0), d=255.255.255.255, len 328, rcvd 2 Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32005&t=32005 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Gateway of last resort [7:31997]
I understand the gateway of last resort to be the destination of where the traffic should be forwarded. Hence gateway, not "local interface of last resort" :) It really dosen't matter if on a point-to-point network, because you'd forward the traffic out the interface and the other side would pick it up. I'd imagine that on a multi-access netowrk such as ethernet where you had three or more routers, if you just blasted the default traffic out the interface, no one would pick it up if it wasn't destined to them. -- RFC 1149 Compliant. FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco 7960 ip phones... [7:32006]
I have been told that the reason we are hearing echo on our phones on internal phone calls (ip phone to ip phone) is that the ip phones processor is getting overloaded. That the echo is really coming from the phone itself. I have limited knowledge on this subject so any help or suggestions on how to stop this echo echo echo echo..:-) is greatly appreciated. Paul Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32006&t=32006 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CISCO MC3810 [7:32007]
Hi Does any body lnow if CISCO mc3810 support voip using h323 protocol, if so, with wich IOS does Cisco mc3810 works with VoIP. what do i have to do to make tha a CISCO mc3810 works as a gateway in VoIP, i mean that my CISCO must be a bridge between PSTN and the IP Cloud. Regards Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32007&t=32007 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Custom Telnet Application [7:31889]
I'm interested. Thanks Mark [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ben Liang Tan Sent: Tuesday, January 15, 2002 8:18 AM To: [EMAIL PROTECTED] Subject: Re: Custom Telnet Application [7:31889] I'm more than interested. Thanks Brad. >From: "Brad Ellis" >Reply-To: "Brad Ellis" >To: [EMAIL PROTECTED] >Subject: Custom Telnet Application [7:31889] >Date: Mon, 14 Jan 2002 15:31:35 -0500 > >Would anyone be interested in using a custom telnet application that has >some built-in macros? (sh ip route, some initial setup stuff, automated >switching between devices on a comm-server, etc) > >If you're interested in something like this, please RESPOND to this message >on Groupstudy with your email address. If there's enough of a response, >I'll write the app and email it to you when it's done. > >Also, if you want to suggest some custom macro's or custom features, >include >them in your post. > >thanks, >-Brad Ellis >CCIE#5796 (R&S / Security) >Network Learning Inc >used Cisco gear: www.optsys.net >CCIE Labs, racks, and classes: http://www.ccbootcamp.com/quicklinks.html _ Chat with friends online, try MSN Messenger: http://messenger.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31991&t=31889 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: NAT Problems with 12.2(5)? RE: Gawd I hate my [7:31913]
We're on a 3660 here. >>> "R. Benjamin Kessler" 01/14/02 05:19PM >>> What platform? I was doing a bug search for 7200's and saw several NAT bugs - some of which are unresolved. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Patrick Ramsey Sent: Monday, January 14, 2002 3:24 PM To: [EMAIL PROTECTED] Subject: NAT Problems with 12.2(5)? RE: Gawd I hate my life [7:31883] Does this have anythign to do with the wrong nat pool being used for a given interface? Or the use of only one nat pool regardless fo interface? -Patrick >>> "Kaminski, Shawn G" 01/14/02 03:32PM >>> Regarding IOS's, has anyone had any problems with NAT when using 12.2(5)? Without going into details, we're having some NAT issues and it seems to have started after upgrading our routers to 12.2(5). CCO doesn't currently show any NAT problems or bugs with this version. Shawn K. -Original Message- From: Brad Ellis [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 11:29 AM To: [EMAIL PROTECTED] Subject: Re: Gawd I hate my life ;-> [7:31817] snip > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f snip dont use IOS 12.(5)T10. you folks you should be using 12.(5)T9, it has less bugs in it. thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] used Cisco gear: www.optsys.net CCIE Labs, racks, and classes: http://www.ccbootcamp.com/quicklinks.html ""Chuck Larrieu"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > OK, so I've been doing rack testing for some people who are going to > be going public Real Soon Now. > > Got some things mocked up. Some of which relate to topics discussed on this > forum yesterday and today. I need to check something and issue the > command "show ip prot" enter. > > r2#sh ip prot > % Ambiguous command: "sh ip prot" > r2# > > well, now... > > r2#show ip prot? > protocol-discovery protocols > > r2#show ip prot > > so what is "show ip protocol-discovery? > > r2#sh ip protocol-discovery ? > interface Show for a specific interface > protocol Show stats about a pariticula protocol > stats Show Stats > top-n Show Top-N protocols by bytes > | Output modifiers > > > OK. so a command I've been using since 11.2 is no longer valid. except that > it is on other routers. > > but look - still good on other routers: > > r3#sh ip prot? > protocols > > r3#sh ip prot > > > OK, check CCO, no record of any such command as show ip > protocol-discovery in any command reference I check. A search of CCO > for the phrase reveals nothing. > > now what? > > the IOS version in question is: > > r2#sh ver > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f > c2) > > sigh. have not run into this before, not in two trips through the lab, > not on any number of routers and IOS versions, both at home and in > customer installations. > > Anyone got any clue what show IP protocol-discovery does? > > sheesh.. another good shortcut down the tubes. > > Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31998&t=31913 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: NAT Problems with 12.2(5)? RE: Gawd I hate my [7:31913]
3600's, mostly 3662's -Original Message- From: R. Benjamin Kessler [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 5:19 PM To: [EMAIL PROTECTED] Subject: RE: NAT Problems with 12.2(5)? RE: Gawd I hate my [7:31913] What platform? I was doing a bug search for 7200's and saw several NAT bugs - some of which are unresolved. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Patrick Ramsey Sent: Monday, January 14, 2002 3:24 PM To: [EMAIL PROTECTED] Subject: NAT Problems with 12.2(5)? RE: Gawd I hate my life [7:31883] Does this have anythign to do with the wrong nat pool being used for a given interface? Or the use of only one nat pool regardless fo interface? -Patrick >>> "Kaminski, Shawn G" 01/14/02 03:32PM >>> Regarding IOS's, has anyone had any problems with NAT when using 12.2(5)? Without going into details, we're having some NAT issues and it seems to have started after upgrading our routers to 12.2(5). CCO doesn't currently show any NAT problems or bugs with this version. Shawn K. -Original Message- From: Brad Ellis [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 11:29 AM To: [EMAIL PROTECTED] Subject: Re: Gawd I hate my life ;-> [7:31817] snip > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f snip dont use IOS 12.(5)T10. you folks you should be using 12.(5)T9, it has less bugs in it. thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] used Cisco gear: www.optsys.net CCIE Labs, racks, and classes: http://www.ccbootcamp.com/quicklinks.html ""Chuck Larrieu"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > OK, so I've been doing rack testing for some people who are going to > be going public Real Soon Now. > > Got some things mocked up. Some of which relate to topics discussed on this > forum yesterday and today. I need to check something and issue the > command "show ip prot" enter. > > r2#sh ip prot > % Ambiguous command: "sh ip prot" > r2# > > well, now... > > r2#show ip prot? > protocol-discovery protocols > > r2#show ip prot > > so what is "show ip protocol-discovery? > > r2#sh ip protocol-discovery ? > interface Show for a specific interface > protocol Show stats about a pariticula protocol > stats Show Stats > top-n Show Top-N protocols by bytes > | Output modifiers > > > OK. so a command I've been using since 11.2 is no longer valid. except that > it is on other routers. > > but look - still good on other routers: > > r3#sh ip prot? > protocols > > r3#sh ip prot > > > OK, check CCO, no record of any such command as show ip > protocol-discovery in any command reference I check. A search of CCO > for the phrase reveals nothing. > > now what? > > the IOS version in question is: > > r2#sh ver > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f > c2) > > sigh. have not run into this before, not in two trips through the lab, > not on any number of routers and IOS versions, both at home and in > customer installations. > > Anyone got any clue what show IP protocol-discovery does? > > sheesh.. another good shortcut down the tubes. > > Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32000&t=31913 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: NAT Problems with 12.2(5)? RE: Gawd I hate my [7:31999]
We are using static NATs, no pooling. -Original Message- From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 4:24 PM To: [EMAIL PROTECTED] Subject: NAT Problems with 12.2(5)? RE: Gawd I hate my life [7:31883] Does this have anythign to do with the wrong nat pool being used for a given interface? Or the use of only one nat pool regardless fo interface? -Patrick >>> "Kaminski, Shawn G" 01/14/02 03:32PM >>> Regarding IOS's, has anyone had any problems with NAT when using 12.2(5)? Without going into details, we're having some NAT issues and it seems to have started after upgrading our routers to 12.2(5). CCO doesn't currently show any NAT problems or bugs with this version. Shawn K. -Original Message- From: Brad Ellis [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 11:29 AM To: [EMAIL PROTECTED] Subject: Re: Gawd I hate my life ;-> [7:31817] snip > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f snip dont use IOS 12.(5)T10. you folks you should be using 12.(5)T9, it has less bugs in it. thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] used Cisco gear: www.optsys.net CCIE Labs, racks, and classes: http://www.ccbootcamp.com/quicklinks.html ""Chuck Larrieu"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > OK, so I've been doing rack testing for some people who are going to > be going public Real Soon Now. > > Got some things mocked up. Some of which relate to topics discussed on this > forum yesterday and today. I need to check something and issue the > command "show ip prot" enter. > > r2#sh ip prot > % Ambiguous command: "sh ip prot" > r2# > > well, now... > > r2#show ip prot? > protocol-discovery protocols > > r2#show ip prot > > so what is "show ip protocol-discovery? > > r2#sh ip protocol-discovery ? > interface Show for a specific interface > protocol Show stats about a pariticula protocol > stats Show Stats > top-n Show Top-N protocols by bytes > | Output modifiers > > > OK. so a command I've been using since 11.2 is no longer valid. except that > it is on other routers. > > but look - still good on other routers: > > r3#sh ip prot? > protocols > > r3#sh ip prot > > > OK, check CCO, no record of any such command as show ip > protocol-discovery in any command reference I check. A search of CCO > for the phrase reveals nothing. > > now what? > > the IOS version in question is: > > r2#sh ver > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f > c2) > > sigh. have not run into this before, not in two trips through the lab, > not on any number of routers and IOS versions, both at home and in > customer installations. > > Anyone got any clue what show IP protocol-discovery does? > > sheesh.. another good shortcut down the tubes. > > Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31999&t=31999 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Encapsulation Failed [7:31916]
Priscilla, My apologies for the inaccuracy. Indeed, on a Serial link (point-to-point) the neighbor state does advance to FULL. Not stopping at 2-way as I had suggested. I config'd my lab quickly this morning for point-to-point, below are some snapshots: Neighbor ID Pri State Dead Time Address Interface 144.223.8.1 1 FULL/ -00:00:3910.0.0.37 Serial1 rtrB#debug ip ospf adj OSPF adjacency events debugging is on rtrB# 4d22h: OSPF: Rcv hello from 144.223.8.1 area 0 from Serial1 10.0.0.37 4d22h: OSPF: End of hello processing 4d22h: OSPF: Rcv hello from 144.223.8.1 area 0 from Serial1 10.0.0.37 4d22h: OSPF: End of hello processing rtrB#debug ip ospf packet 4d22h: OSPF: rcv. v:2 t:1 l:48 rid:144.223.8.1 aid:0.0.0.0 chk:50AC aut:0 auk: from Serial1 4d22h: OSPF: rcv. v:2 t:1 l:48 rid:144.223.8.1 aid:0.0.0.0 chk:50AC aut:0 auk: from Serial1 4d22h: OSPF: rcv. v:2 t:1 l:48 rid:144.223.8.1 The debug ip ospf packet is interesting. In this case, you get to see the pieces of the hello protocol broken up. v = VERSION t = TYPE (1 identifies this as an Hello packet) rid = ROUTER ID (I have a Loopback 0 and 1, 1's address is 144.223.8.1) aid = AREA ID (Area 0) chk = CHECKSUM aut = AUTHENTICATION (I don't have authentication configured so it's 0, null) auk = AUTHENTICATION KEY. Unfortunately I can't find a debug to tell that my Hellos are multicast rather than unicast. I guess I'll have to wait until Priscilla ponies up the $ for a WAN sniffer. :) Chris -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 10:44 PM To: [EMAIL PROTECTED] Subject: RE: Encapsulation Failed [7:31916] At 10:04 PM 1/14/02, Kane, Christopher A. wrote: >Yes, OSPF sends hellos on Serial interfaces. In point-to-point networks >OSPF's hello is multicast. There is no DR/BDR so it's my understanding that >it simply becomes a Master/Slave relationship. During the database description exchange state, the routers are in a master/slave relation. For the rest of the time, the adjacent neighbors are just friendly peers, wouldn't you say? >Mindful that in OSPF a Neighbor is not the same as an Adjacency. All routers >become neighbors (assuming all aspects of the Hello protocol are agreed >upon) They only become Adjacent with the respective DR and BDR of the >network in the case of a network on a broadcast medium. We're talking about non-broadcast WAN networks.. >I'm pretty sure you >only see "2-way" as a neighbor state on point-to-point links rather than I should try it, but I thought 2-way was an intermediate state, regardless of the type of network. >seeing "Full" as on a broadcast medium. > >I'd need someone else to chime in on point-to-multipoint as I haven't >configured that lately. > >Chris > >-Original Message- >From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] >Sent: Monday, January 14, 2002 8:40 PM >To: [EMAIL PROTECTED] >Subject: Re: Encapsulation Failed [7:31916] > > >At 07:57 PM 1/14/02, s vermill wrote: > >Priscilla, > > > >May I ask what led you to believe that bridging was involved as opposed to > >just assuming that the source address was the Cisco router itself? > >Good question. The IBM 6611 does bridging for one thing. The other hint was >that it was attempting to send an OSPF Hello on a serial interface. Does >OSPF do that? How does it establish adjacency to a neighbor router on a >WAN? On a point-to-point network, I figured it just knew who its neighbor >was. > >On a non-broadcast, multiple-access network, such as Frame Relay, you >normally configured the neighbor command. > >I've only seen the OSPF multicast Hellos on LANs, (but I can't afford a WAN >Sniffer anymore! ;-) > >Gurus? Help? Thanks. > >Priscilla > >P.S. Anyone seeing this may be confused because you didn't include the >original message. PLEASE, people, reply with the body of the message in the >reply. We work in connectionless, stateless mode. How do you expect anyone >to easily connect this to the discussion about a router failing to forward >a packet on a PPP link to an IBM 6611. Hello? > > > >Just as an opportunity to learn something. > > > >Regards, > > > >Scott > > >Priscilla Oppenheimer >http://www.priscilla.com Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32008&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Custom Telnet Application [7:32009]
Count me in. Thanks. Fred GET INTERNET ACCESS FROM JUNO! Juno offers FREE or PREMIUM Internet access for less! Join Juno today! For your FREE software, visit: http://dl.www.juno.com/get/web/. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32009&t=32009 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router Serial# [7:31959]
I do know of an exception when it comes to the 12000 series GSRs. You can use the: show gsr chassis-info It lists the Chassis type, Chassis Serial Number, Hardware revision and even the Backplane Serial Number. I'm not sure what other platforms support this command if any. Chris -Original Message- From: John Neiberger [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 15, 2002 10:12 AM To: [EMAIL PROTECTED] Subject: Re: Router Serial# [7:31959] By default there is no way to get the actual router serial number from the command line. There are ways to display certain serial numbers associated with that device, but it is not the chassis serial number you're seeing. One solution--which doesn't help you now--is to set the snmp chassis-ID in the router when you initially configure it. From that point on you can see the serial number from the command line or via SNMP. John >>> "Washington Rico" 1/14/02 10:38:36 PM >>> I would appreciate any information you have. I need to find the serial number of some routers which are located on a remote site. I know that with a show version on Cat6000 the serial number shows up. What about with routers. Show version did not show a serial#. Is there a CLI command? Again apppreciate any info you may have. _ MSN http://photos.msn.co.jp/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32010&t=31959 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Encapsulation Failed [7:31916]
You should be able to use the QUOTE button on the website to to quote the message. Please tell me if this is broken as I have been upgrading the internals of the website and may have missed a bug. Thanks! Paul - Original Message - From: "s vermill" To: Sent: Tuesday, January 15, 2002 10:41 AM Subject: Re: Encapsulation Failed [7:31916] > >Well, that does make sense, now that you mention it. (OSPF sending > >multicast Hellos on a serial interface). OSPF uses Hellos as a >keepalive, > >not just for establishing adjacencies. > > >Notice, that your reply is still hard to read because we can't tell >what > >you wrote and what I wrote. But if you're reading and writing e-mail >from > a > >Web page, I could see how that could happen. It's not a big deal. >Thanks > >for the reply. > > >Priscilla > > Priscilla, > > Here is how I acces this forum: > > http://www.groupstudy.com/form/list.php?f=7 > > I don't use e-mail at all because I travel too much and can't get to my > account sometimes for days on end. The web interface isn't ideal, but it > works. Anyway, you can see that I have to cut and paste previous text and > then "comment out" the comments. > > Back to this guys problem > > James, > > You said that you knew the protocol must be up because another router had > previously been working just fine on that line. However, PPP doesn't exist > on the line or in the cloud. It must be successfully negotiated between the > end points for layers 2 and 3 (LCPs and NCPs, respectively). A simple "sh > ip int b" would be a good first place to start. From there you may need > some more advanced debug of the ppp negotiation process (such as > authentication). > > Scott Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32011&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Encapsulation Failed [7:31916]
>Unfortunately I can't find a debug to tell that my Hellos are >multicast >rather than unicast. I guess I'll have to wait until Priscilla >ponies up the >$ for a WAN sniffer. :) Chris, Since you are in a lab environment, you can turn on 'debug ip packet' and see the destination address of 224.0.0.5. Of course, this doesn't tell you that what is being sent are hellos. You have to make that correlation using some of the other debugs that you mentioned. Regards, Scott Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32012&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CVPN and login scripts [7:32013]
Anyone know of a utlilty that can check against a vpn connection? I dont users that VPN in (3005) to run our corporate login script. Any ideas are appreciated. Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32013&t=32013 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Encapsulation Failed [7:31916]
First, thanks for all the information. I forgot to mention that when I did a Show ip int brief I saw up and up. Next, here is some pertinent configuration information: Interface Serial 2/5 mtu 2044 ip address 172.25.x.x 255.255.255.252 encapsulation ppp ipx network B051 ipx update interval rip 300 ipx update interval sap 300 nrzi-encoding router ospf 200 log-adjacency-changes network 172.25.0.0 0.0.255.255 area 0.0.0.0 Sh ver is as follows: Version 12.0(7)XE1 IBM 6611 cisco 7204VXR (NPE225) processor with 122880K/8192K bytes of memory. R527x CPU at 262Mhz, Implementation 40, Rev 10.0, 2048KB L2 Cache 4 slot VXR midplane, Version 2.3 This router was exchanging OSPF updates with a Cisco 1601 via a different serial interface. I was also using PPP encapsulation on both interfaces there and it worked fine. Finally, I have to say that we have this configuration in another location with five serial ports connected to various IBM routers via T-1. All of the serial ports have identical configurations as the serial port listed above. Unfortunately, we are on a live network here and I cannot plug this router back into the network to look at logs. I would have to take down a courthouse and that has to be scheduled far in advance. Plus, they would not like it if I took them down to do 'testing'! Thanks again for the information and keep it coming! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32014&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Gateway of last resort [7:31997]
David, If you point a routers GLR to its interface, the router will issue an arp request for any destination that is unknown, even devices that are not on a connected segment. (this is the same behavior that most host OSes exhibit if you point their DG to their own IP) For this to work, you must have another device on that segment setup for proxy arp to answer those arp requests issued by the router. A Cisco router can act as a proxy arp device, so can firewalls. If you simply tell the router its GLR is a certain IP address, it doesn't have to issue a lot of extraneous arp requests and will simply send all traffic directly to the IP address you specified as its GLR. Unless you have a specific reason for using proxy arp, its best practice to just tell the router specifically who its GLR is. (there are certain redundancy scenarios where the use of proxy arp might be useful) HTH, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Peck, David Sent: Tuesday, January 15, 2002 7:29 AM To: [EMAIL PROTECTED] Subject: Gateway of last resort [7:31997] I was under the impressions that the gateway of last resort was a actual interface on the router. if a router had two interfaces one 10.1.1.1/16 and 10.1.2.1/16 and 10.1.2.1 was connected to a firewall that has a address of 10.1.2.2 that the gateway of last resort would be 10.1.2.1 not 10.1.2.2 and the static route thru 10.1.2.1 would be 0.0.0.0/0 [1/0] via 10.1.2.1 not 0.0.0.0/0 [1/0] via 10.1.2.2 or does this matter ? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32016&t=31997 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco 7960 ip phones... [7:32006]
Echo on a digital phone (analog for that matter as well) is usually intentionally created, but it shouldn't be noticeable. It's called comfort noise, so that you can hear yourself talking in the earpiece. Tests have shown that people who can't hear themselves in the earpiece think it's broken. I'd say this probably isn't your problem. My first guess is the gain on the analog trunk lines are too high. -- RFC 1149 Compliant. FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Encapsulation Failed [7:31916]
Paul Borghese wrote: > > You should be able to use the QUOTE button on the website to to > quote the > message. Please tell me if this is broken as I have been > upgrading the > internals of the website and may have missed a bug. > > Thanks! > > Paul Paul, You just can't teach us newbies anything. Yes, the quote button works quite well (don't know how I didn't see it earlier) and should save us all lots of time. Thanks for what must be a lot of work to keep this thing up and running. It is a great forum! Regards, Scott Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32017&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: NAT Problems with 12.2(5)? RE: Gawd I hate my [7:31913]
We are having no problems using the following: Cisco 3620 with 12.2(5) IP only. Cisco 5000 VPN concentrator (running 6. something) Cisco VPN client 5.17 I have both static NATs and a pool enabled. Keep in mind that with NAT trans VPN stuff goes out over TCP 80 and comes back on UDP 500(OK more than just this but go with me for a minute :-). Your ACL list should be carefully checked and be sure and select the "Use NAT Transparency Mode selected on the client". What can fool ya is that when NAT Trans. is not enabled you can enter the shared secret and the RADIUS passwords but nothing comes across(data wise), even though you have "Globige". When you select NAT trans the RADIUS password will never come back if your ACL's are not setup right. Chances are that you have already been through all of this but what the heck, Good luck Rick Fulton "Patrick Ramsey" on 01/15/2002 09:06:58 AM Please respond to "Patrick Ramsey" To: [EMAIL PROTECTED] cc:(bcc: Richard Fulton/EDS/FlipChip) Subject: RE: NAT Problems with 12.2(5)? RE: Gawd I hate my [7:31913] We're on a 3660 here. >>> "R. Benjamin Kessler" 01/14/02 05:19PM >>> What platform? I was doing a bug search for 7200's and saw several NAT bugs - some of which are unresolved. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Patrick Ramsey Sent: Monday, January 14, 2002 3:24 PM To: [EMAIL PROTECTED] Subject: NAT Problems with 12.2(5)? RE: Gawd I hate my life [7:31883] Does this have anythign to do with the wrong nat pool being used for a given interface? Or the use of only one nat pool regardless fo interface? -Patrick >>> "Kaminski, Shawn G" 01/14/02 03:32PM >>> Regarding IOS's, has anyone had any problems with NAT when using 12.2(5)? Without going into details, we're having some NAT issues and it seems to have started after upgrading our routers to 12.2(5). CCO doesn't currently show any NAT problems or bugs with this version. Shawn K. -Original Message- From: Brad Ellis [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 11:29 AM To: [EMAIL PROTECTED] Subject: Re: Gawd I hate my life ;-> [7:31817] snip > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f snip dont use IOS 12.(5)T10. you folks you should be using 12.(5)T9, it has less bugs in it. thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] used Cisco gear: www.optsys.net CCIE Labs, racks, and classes: http://www.ccbootcamp.com/quicklinks.html ""Chuck Larrieu"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > OK, so I've been doing rack testing for some people who are going to > be going public Real Soon Now. > > Got some things mocked up. Some of which relate to topics discussed on this > forum yesterday and today. I need to check something and issue the > command "show ip prot" enter. > > r2#sh ip prot > % Ambiguous command: "sh ip prot" > r2# > > well, now... > > r2#show ip prot? > protocol-discovery protocols > > r2#show ip prot > > so what is "show ip protocol-discovery? > > r2#sh ip protocol-discovery ? > interface Show for a specific interface > protocol Show stats about a pariticula protocol > stats Show Stats > top-n Show Top-N protocols by bytes > | Output modifiers > > > OK. so a command I've been using since 11.2 is no longer valid. except that > it is on other routers. > > but look - still good on other routers: > > r3#sh ip prot? > protocols > > r3#sh ip prot > > > OK, check CCO, no record of any such command as show ip > protocol-discovery in any command reference I check. A search of CCO > for the phrase reveals nothing. > > now what? > > the IOS version in question is: > > r2#sh ver > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f > c2) > > sigh. have not run into this before, not in two trips through the lab, > not on any number of routers and IOS versions, both at home and in > customer installations. > > Anyone got any clue what show IP protocol-discovery does? > > sheesh.. another good shortcut down the tubes. > > Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32018&t=31913 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: mentor back? [7:31964]
Is Mentor back in business? web site is not there. The news this morning is that a company called Element K has purchased the Vlab technology, and will be marketing the labs. Point to note - in terms of Mentor, Vlabs was an asset, people who bought services were creditors. The bankruptcy court will sell assets and use the proceeds to start to pay creditors. There is a specific legally defined hierarchy as to which creditors get paid in what order. Those who were owed rack time are last on that list. Sorry, but that's the way it is. Unless the Court specifically obligated Element K to honor the open rack time, they are under no legal obligation to do so. It is possible that as a gesture of good will, Element K might offer to make good on what Mentor owed. But depending on the terms of the acquisition, they may not be legally obligated to do so. Just as a note, there are plenty of lab scenarios available, free and otherwise, and more on the way. There are also plenty of places to rent rack time, with more on the way. To be truthful, I'm not so sure that the Vlab business model is as relevant as it was a couple of years ago. Time will tell. Chuck ""marcus jensen"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Isn't this the group that went bankrupt and took money with them from lots > of students for classes they paid for? There were lots of posts from angry > students here a bit ago, I wonder if their concerns have been address since > mentor is now back in business? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32019&t=31964 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CISCO MC3810 [7:32007]
The MC3810 does support VoIP. To do so, you must have an "IP Plus" IOS image, along with the associated NetModules for connectivity to whatever you're terminating with. For your specific application, I think you might be looking for a T1-MultiFlex Trunk. Do a search on Cisco.com a.k.a. CCO and see if that is what you're looking for. Good Luck, and Have fun!! Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Christian Arguello Sent: Tuesday, January 15, 2002 10:02 AM To: [EMAIL PROTECTED] Subject: CISCO MC3810 [7:32007] Hi Does any body lnow if CISCO mc3810 support voip using h323 protocol, if so, with wich IOS does Cisco mc3810 works with VoIP. what do i have to do to make tha a CISCO mc3810 works as a gateway in VoIP, i mean that my CISCO must be a bridge between PSTN and the IP Cloud. Regards Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32020&t=32007 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Please READ THIS ! ! ! [7:31974]
""Edmundo Bodero"" wrote in message > I used A and Jeff Doyle's Volume I to pass the exam. Is Jeff Doyle's Volume I enough or do you need also the BSCN book? (except BGP of course) Regards Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32021&t=31974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Ospf router id vs loop back [7:32022]
Hi, Is there reason one would prefer loopback address for router ID when using Ospf over the router id command that can be used under "router ospf " and vice versa. Is there a need to advertise the router IDs in OSPF. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32022&t=32022 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Encapsulation Failed [7:31916]
Fraasch James wrote: > > First, thanks for all the information. I forgot to mention > that when I did a Show ip int brief I saw up and up. Next, here > is some pertinent configuration information: > > Interface Serial 2/5 >mtu 2044 >ip address 172.25.x.x 255.255.255.252 >encapsulation ppp >ipx network B051 >ipx update interval rip 300 >ipx update interval sap 300 >nrzi-encoding > > router ospf 200 >log-adjacency-changes >network 172.25.0.0 0.0.255.255 area 0.0.0.0 > > Sh ver is as follows: > > Version 12.0(7)XE1 > > IBM 6611 > > cisco 7204VXR (NPE225) processor with 122880K/8192K bytes of > memory. > R527x CPU at 262Mhz, Implementation 40, Rev 10.0, 2048KB L2 > Cache > 4 slot VXR midplane, Version 2.3 > > This router was exchanging OSPF updates with a Cisco 1601 via a > different serial interface. I was also using PPP encapsulation > on both interfaces there and it worked fine. > > Finally, I have to say that we have this configuration in > another location with five serial ports connected to various > IBM routers via T-1. All of the serial ports have identical > configurations as the serial port listed above. Unfortunately, > we are on a live network here and I cannot plug this router > back into the network to look at logs. I would have to take > down a courthouse and that has to be scheduled far in advance. > Plus, they would not like it if I took them down to do 'testing'! > > Thanks again for the information and keep it coming! > > > James, I don't know if this is acceptable advice in this forum, but I would seriously consider opening a case with the TAC. I say that because of your successful deployment of this setup elsewhere. It certainly doesn't look like anything too fancy or outlandish (although you don't see inverted NRZ everyday). Unfortunatley, I don't have any IBM routers laying around to play with. I would make this final point: MTU mismatch can and probably will cause your OSPF neighborship to fail. If you 'sh ip ospf neigh' you will see that they are stuck in exstart or exchange (when there is a mismatch - I am not presuming that you have one). Also, 'debug ip ospf adj' will tell you that MTU mismatch is the problem (if in fact it is). Best of luck and keep us posted. Scott Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32024&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCNP Switching Exam 640-504 [7:32023]
Guys, I've noticed that on the official exam blueprint there is no mention of ATM LANE. But the Cisco CCNP Switching Exam Certi?cation Guide book from Cisco Press has an entire chapter on it. I know that it's maybe better for me to learn it anyway, but maybe I can concentrate on more relevant things. Does anybody have a clue about who's right ? -- Best regards, Maurizio Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32023&t=32023 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Ospf router id vs loop back [7:32022]
interesting question. came up in a customer meeting the other day as well. IMHO, this gets down to design preference. I am of the school of thought that there needs be some way of getting to any router in a network ( design permitting, cost permitting ), and that each router in a network needs some unique and easily identified pneumonic. So IMHO, one should use loopbacks, numbered according to some rational scheme, and that those "routes" should be advertised.IMHO This should be true, no matter what routing protocol you are using. However, others will ask whether in a 5000 router domain, you want 5000 extra routes in your tables. That is a valid counterargument. Using the RID command under the OSPF process, you can set up a rational identification scheme. The RID does not necessarily have to be related to interface numbering. But then you have the issue of correlating RIDs to the addresses one actually uses to get to the router in question, making it a bit more complicated to find things when you need to. JMHO. Chuck ""john smith"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi, > Is there reason one would prefer loopback address for router ID when using > Ospf over the router id command that can be used under "router ospf " and > vice versa. Is there a need to advertise the router IDs in OSPF. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32025&t=32022 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Copying Config to router via snmp [7:32027]
Hello, Is it possible to copy a new config to a router via snmp. I configured and sent a router to the field with a mistyped secret password. The current configuration has a RW snmp community set. I currently use snmp to pull down the configurations to tftp from the routers and was hoping I could send a corrected config to the this one. Any suggestions on how this can be done would be appreciated. -- Paul B. Watson Network Engineer Inchcape Shipping Services [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32027&t=32027 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Copying Config to router via snmp [7:32027]
I believe it is. I did it once with a tool that downloaded the config as long as you had the correct RW community string, made the changes and sent it back up. -- RFC 1149 Compliant. FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
router for BGP and HSRP [7:32029]
Hello, I have a question I hope someone maybe able to help me with. I have a setup that will be in a data center. They are giving us two handoffs a primary and shadow on 2 distinct subnets. These will be ethernet connections.I would like to use 2 routers running HSRP for our servers inside our network. I also want the routers to run BGP4 for fault tolerance, they do not need to load share.The only thing I want to use BGP for is to get my default gateway. The routers will need to have 2 eth interfaces each. Does anyone know the cheapest router that could do this? Thanks alot Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32029&t=32029 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Custom Telnet Application [7:31889]
I'm interested Brad. -Original Message- From: Brad Ellis [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 3:32 PM To: [EMAIL PROTECTED] Subject: Custom Telnet Application [7:31889] Would anyone be interested in using a custom telnet application that has some built-in macros? (sh ip route, some initial setup stuff, automated switching between devices on a comm-server, etc) If you're interested in something like this, please RESPOND to this message on Groupstudy with your email address. If there's enough of a response, I'll write the app and email it to you when it's done. Also, if you want to suggest some custom macro's or custom features, include them in your post. thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc used Cisco gear: www.optsys.net CCIE Labs, racks, and classes: http://www.ccbootcamp.com/quicklinks.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32026&t=31889 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
regardin the ccnp exam [7:32030]
hey there the ATM lane is there in the exam. am gonna take up the xam on 22nd. pretty sure atm lane is there bye venu gopal.metla ccna,ccda hyd - This mail helped a tree grow. Know more at http://green.sify.com Take the shortest route to success! Click here to know how http://education.sify.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32030&t=32030 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: router for BGP and HSRP [7:32029]
By the way I see the 1605 R may be what I'm looking for ,Does anyone know if it would handle the BGP requirement below? We average 4MB/s input traffic with our current load, I wonder if this router could handle it. ""sam sneed"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello, > > I have a question I hope someone maybe able to help me with. I have a > setup that will be in a data center. They are giving us two handoffs a > primary and shadow on 2 distinct subnets. These will be ethernet > connections.I would like to use 2 routers running HSRP for our servers > inside our network. I also want the routers to run BGP4 for fault tolerance, > they do not need to load share.The only thing I want to use BGP for is to > get my default gateway. The routers will need to have 2 eth interfaces each. > Does anyone know the cheapest router that could do this? > > Thanks alot Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32031&t=32029 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Please READ THIS ! ! ! [7:31974]
I think that you need both. The Doyle's book to understand the concepts and the Cisco Press to prepare for the test. Edmundo Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32032&t=31974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP Switching Exam 640-504 [7:32023]
I took this exam back in October of 2001 and it mad very little about ATM questions at all, maybe 2 at most. HTH John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32034&t=32023 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Summarization [7:32035]
David, Another thing that I wonder about is the remote end; what do those routers look like? If you have something like this: +-Hub1---Hub3-+ | \ / | RemoteX-+ X +-RemoteY | / \ | +-Hub2---Hub4-+ You'll probably want to restrict what routes the remote routers can advertise. Given the size of your network, it would seem to me that something similar to the following would be more appropriate (disclaimer here, I know nothing of your business requirements nor am I looking at $$ as a limiting factor - which I'm certain it is). I'm making these basic assessments off the fact that your network doesn't seem to follow the standard Cisco Core-Distribution-Access model (yes, I've probably consumed too much of the Cisco Kool-Aid). +-Distr1---Hub1---Hub3---Distr3-+ | |\ /\ /\ /| | RegionA-+ | X X X | +-RegionZ | |/ \/ \/ \| | +-Distr2---Hub2---Hub4---Distr4-+ Within each region you'd have a contiguous block of addresses (both WAN and LAN segments) you then summarize from the distribution-layer routers to the hubs. The hub forward these summary routes to the other hub routers and so on until they reach the remote routers in the other regions. Again, I don't know the requirements of your network but if I were starting with a clean sheet of paper and we wanted to use RFC1918 addresses, I'd probably consider using the 172.x.x.x space. Each region could be a separate /16. If we define the core as the including all of the hub routers as well as the networks connecting them to the various distribution routers and make that the network 172.16.0.0/16 (obviously, there are multiple subnets needed, but they'd all be summarizable in this "major" net). Then assign a /16 to each region - so RegionA would be 172.17.0.0/16, RegionB would be 172.18.0.0/16, etc. Assuming that you have a data center or two, the server farms in these locations would also connect to the hub routers (ideally behind their own distribution-layer routers which summarize the address space for the server farms into the core). Generally speaking, a design like this will scale into the thousands of sites - obviously YMMV depending on your requirements. The key rule to follow here is that the core of the network is optimized to route packets. This is not the place to enforce network policy (ACLs, QOS, manual summarization, etc.). We all love the network 10.0.0.0/8; it gives us great freedom and allows networks to be built without concern for addressing efficiency. There are some downsides to this though and you've found one. You've been dealt a slightly worse hand though because you sandwich 172.x.x.x networks between 10.x.x.x. I'm going to go out on a limb (kidding) and suggest that your EIGRP configurations have "no auto-summary" configured, right? In the configuration above, you could allow EIGRP to auto-summarize - you'd actually prefer it because it would mean that you didn't need to manually summarize at all. There are some things you can do to probably make your existing hardware investment work with the current number of sites but it will require that you re-address your network to follow something similar to the design I outlined above just without the separate distribution routers. If you're growing like mad you'll want to ensure that you can get funding for the distribution layer because at some point (if not already) you'll have too many neighbors on each core router which will spark a whole new set of problems. Quickly, on the remote routers, I don't care how big or small the network is, in a (highly) redundant network I try to make sure that each router only advertises networks it's responsible for (e.g. directly connected or down-stream subnets). With EIGRP one of the easiest ways to do this is with the distribute-list command. I try to select a standard ACL number (for example # 5) across the enterprise and then on each router permit only the networks we want - in this case, the remote routers would advertise their directly-connected Ethernet network(s) and maybe a loopback. This will keep EIGRP from thinking that the remote router is a possible transit path to all other networks (especially a problem if you use sub-interfaces on the remote side). Well, I could go on and on but I've got to get back to studying. These are just some suggestions that have worked for me in the past, I'd be interested in what others on the list have experienced. Hope this helps, Ben -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 15, 2002 5:51 AM To: [EMAIL PROTECTED] Subject: RE:Summarization (to Ben Kessler) [7:31975] Ben, I'm afraid that when I answered your post it was already buried under tons of other post. I'm sorry, these are the consequences of living in Europe...:-> Anyway, thanks for your detailed answer, I hope to get more det
Re: Copying Config to router via snmp [7:32027]
Check out this link: http://www.solarwinds.net/Tools/Cisco_Networking/Config_Uploader/index.htm ""Steven A. Ridder"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I believe it is. I did it once with a tool that downloaded the config as > long as you had the correct RW community string, made the changes and sent > it back up. > > -- > RFC 1149 Compliant. > > > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32037&t=32027 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Copying Config to router via snmp [7:32027]
that's the tool! -- RFC 1149 Compliant. FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: NAT Problems with 12.2(5)? RE: Gawd I hate my [7:31999]
I can't speak for the 3600's - the latest I have running on them is 12.1(5)T8 but I only have a couple doing NAT and they're configured with static entries not multiple pools. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kaminski, Shawn G Sent: Tuesday, January 15, 2002 10:07 AM To: [EMAIL PROTECTED] Subject: RE: NAT Problems with 12.2(5)? RE: Gawd I hate my [7:31999] We are using static NATs, no pooling. -Original Message- From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 4:24 PM To: [EMAIL PROTECTED] Subject: NAT Problems with 12.2(5)? RE: Gawd I hate my life [7:31883] Does this have anythign to do with the wrong nat pool being used for a given interface? Or the use of only one nat pool regardless fo interface? -Patrick >>> "Kaminski, Shawn G" 01/14/02 03:32PM >>> Regarding IOS's, has anyone had any problems with NAT when using 12.2(5)? Without going into details, we're having some NAT issues and it seems to have started after upgrading our routers to 12.2(5). CCO doesn't currently show any NAT problems or bugs with this version. Shawn K. -Original Message- From: Brad Ellis [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 11:29 AM To: [EMAIL PROTECTED] Subject: Re: Gawd I hate my life ;-> [7:31817] snip > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f snip dont use IOS 12.(5)T10. you folks you should be using 12.(5)T9, it has less bugs in it. thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] used Cisco gear: www.optsys.net CCIE Labs, racks, and classes: http://www.ccbootcamp.com/quicklinks.html ""Chuck Larrieu"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > OK, so I've been doing rack testing for some people who are going to > be going public Real Soon Now. > > Got some things mocked up. Some of which relate to topics discussed on this > forum yesterday and today. I need to check something and issue the > command "show ip prot" enter. > > r2#sh ip prot > % Ambiguous command: "sh ip prot" > r2# > > well, now... > > r2#show ip prot? > protocol-discovery protocols > > r2#show ip prot > > so what is "show ip protocol-discovery? > > r2#sh ip protocol-discovery ? > interface Show for a specific interface > protocol Show stats about a pariticula protocol > stats Show Stats > top-n Show Top-N protocols by bytes > | Output modifiers > > > OK. so a command I've been using since 11.2 is no longer valid. except that > it is on other routers. > > but look - still good on other routers: > > r3#sh ip prot? > protocols > > r3#sh ip prot > > > OK, check CCO, no record of any such command as show ip > protocol-discovery in any command reference I check. A search of CCO > for the phrase reveals nothing. > > now what? > > the IOS version in question is: > > r2#sh ver > Cisco Internetwork Operating System Software > IOS (tm) 3600 Software (C3620-JS56I-M), Version 12.1(5)T10, RELEASE > SOFTWARE (f > c2) > > sigh. have not run into this before, not in two trips through the lab, > not on any number of routers and IOS versions, both at home and in > customer installations. > > Anyone got any clue what show IP protocol-discovery does? > > sheesh.. another good shortcut down the tubes. > > Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32036&t=31999 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CVPN and login scripts [7:32013]
When I was dealing with this situation before, if the PC was configured to be a network client of the (i.e domain login, email etc.) I would usually take care of its self. For the times that it would not, I made a special .bat file that they would click once connected to map drives using ye old trusy "net use" command. NetEng wrote: >Anyone know of a utlilty that can check against a vpn connection? I dont >users that VPN in (3005) to run our corporate login script. Any ideas are >appreciated. Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32033&t=32013 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Encapsulation Failed [7:31916]
At 11:35 AM 1/15/02, Fraasch James wrote: >First, thanks for all the information. I forgot to mention that when I did >a Show ip int brief I saw up and up. Next, here is some pertinent >configuration information: > >Interface Serial 2/5 >mtu 2044 That's kind of a strange MTU. What is the other router using? The routers exchange their MTUs in their database description packets. They have to match. I guess you can't plug this router back in for testing, you said. But check again that this router's MTU isn't different from the others that are working. Also check its partner. Maybe it's different. Check out the info here, plus there's a lot more about OSPF debugging on Cisco's Tech Notes: http://www.cisco.com/warp/public/104/12.html It's just a guess. My last guess (about bridging!) was totally false, but I think I'm closer here. ;-) Also, in doing some research I found one mention of "encapsulation failed" meaning a hardware problem!!? That could explain it too. I have seen serial interfaces go bad on Cisco routers in some pretty weird ways. Good luck. Let us know what you find out please. It will be a good learning experience. Thanks. Priscilla >ip address 172.25.x.x 255.255.255.252 >encapsulation ppp >ipx network B051 >ipx update interval rip 300 >ipx update interval sap 300 >nrzi-encoding > >router ospf 200 >log-adjacency-changes >network 172.25.0.0 0.0.255.255 area 0.0.0.0 > >Sh ver is as follows: > >Version 12.0(7)XE1 > >IBM 6611 > >cisco 7204VXR (NPE225) processor with 122880K/8192K bytes of memory. >R527x CPU at 262Mhz, Implementation 40, Rev 10.0, 2048KB L2 Cache >4 slot VXR midplane, Version 2.3 > >This router was exchanging OSPF updates with a Cisco 1601 via a different >serial interface. I was also using PPP encapsulation on both interfaces >there and it worked fine. > >Finally, I have to say that we have this configuration in another location >with five serial ports connected to various IBM routers via T-1. All of the >serial ports have identical configurations as the serial port listed above. >Unfortunately, we are on a live network here and I cannot plug this router >back into the network to look at logs. I would have to take down a >courthouse and that has to be scheduled far in advance. Plus, they would not >like it if I took them down to do 'testing'! > >Thanks again for the information and keep it coming! Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32039&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
help with CCIE written [7:32040]
High, huh hi! I must be high to be pursueing this cert. I hold a CCNP and have bin studying for 6 weeks 4 hrs a day. I have Caslows book, ExamCram and the QUE prep-kit. I also have the 2 tests that Bernard Omrami at Boson has written. I dont feel confident at all. I score 90% on the first practice test and now am working on the second. I have no mentors as most of the networking people here in the Valley dont have certs. And frankly are not very good at all. (Sorry if I have defamed you). However I would like to talk to a CCIE that has earned his cert similar to the way that I am pursuing. Thanx, Marc Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32040&t=32040 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: help with CCIE written [7:32040]
Guess you have either been meeting all the wrong people or you are in the wrong valley. Seriously, I do know quite a few CCIE there and some of them ARE great !! ""Marc Vacchino"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > High, huh hi! > > I must be high to be pursueing this cert. I hold a CCNP and have bin studying > for 6 weeks 4 hrs a day. I have Caslows book, ExamCram and the QUE prep-kit. > I > also have the 2 tests that Bernard Omrami at Boson has written. I dont feel > confident at all. I score 90% on the first practice test and now am working > on > the second. > > I have no mentors as most of the networking people here in the Valley dont > have certs. And frankly are not very good at all. (Sorry if I have defamed > you). However I would like to talk to a CCIE that has earned his cert similar > to the way that I am pursuing. > > Thanx, > > Marc Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32041&t=32040 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
To advertise OSPF RIDs or not ? [7:32042]
I am trying to understand if there would ever be a need to advertise Router IDs via OSPF. Is this something that is ever done in the real world. Thanks for your help Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32042&t=32042 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Please READ THIS ! ! ! [7:31974]
For BGP, use Cisco five part BGP Case Studies. Memorize!!! Need CCO account. -- "Through Complexity there is Simplicity, Through Simplicity there is Complexity" David L. Blair - CCNP, CCNA, MCSE, CBE, A+, 3Wizard ""David Rocher"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > ""Edmundo Bodero"" wrote in message > > I used A and Jeff Doyle's Volume I to pass the exam. > > Is Jeff Doyle's Volume I enough or do you need also the BSCN book? > (except BGP of course) > > Regards Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32043&t=31974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCNP Switching Exam 640-504 [7:32023]
I did not have any ATM related questions you might, but I doubt it. -- "Through Complexity there is Simplicity, Through Simplicity there is Complexity" David L. Blair - CCNP, CCNA, MCSE, CBE, A+, 3Wizard ""Maurizio Moroni"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Guys, > > I've noticed that on the official exam blueprint there is no mention of > ATM LANE. > But the Cisco CCNP Switching Exam Certi?cation Guide book from Cisco > Press has an entire chapter on it. > > I know that it's maybe better for me to learn it anyway, but maybe I can > concentrate on more relevant things. > > Does anybody have a clue about who's right ? > > -- > Best regards, > Maurizio Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32044&t=32023 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: help with CCIE written [7:32040]
he may have meant the San Joaquin valley, or Yosemite valley, or Rincon valley ;-> The folks I know in Madera, for example, are good folks and try hard, but often just don't have the background, theoretical or practical, to deal with some of the more complex issues that arise. Chuck ""Marc Vacchino"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > High, huh hi! > > I must be high to be pursueing this cert. I hold a CCNP and have bin studying > for 6 weeks 4 hrs a day. I have Caslows book, ExamCram and the QUE prep-kit. > I > also have the 2 tests that Bernard Omrami at Boson has written. I dont feel > confident at all. I score 90% on the first practice test and now am working > on > the second. > > I have no mentors as most of the networking people here in the Valley dont > have certs. And frankly are not very good at all. (Sorry if I have defamed > you). However I would like to talk to a CCIE that has earned his cert similar > to the way that I am pursuing. > > Thanx, > > Marc Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32045&t=32040 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Encapsulation Failed [7:31916]
I have had strange problems like this before, but nothing exactly like this. The hellos should be sent by each router as a keepalive method on point to point lines, as well as to verify area id, subnet mask on the interface, authentication, hello interval and so on, and you should see the state transition to FULL eventually. On a broadcast network you would see FULL/DR, FULL/BDR, or 2WAY/DROTHER. The full relationships are for the designated and backup designated routers, the 2WAY indicates that the other routers are there and OSPF is configured and functioning, but that there is no adjacency formed (on a broadcast network). See below: Point to Point r5#sh ip ospf neigh Neighbor ID Pri State Dead Time Address Interface 10.100.1.61 FULL/ -00:00:3310.65.1.1 Serial1 Broadcast Neighbor ID Pri State Dead Time Address Interface x.x.x.x 1 2WAY/DROTHER00:00:33x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:31x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:36x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:36x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:37x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:30x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:33x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:35x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:33x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:35x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:36x.x.x.x Ethernet0/0 x.x.x.x 1 FULL/BDR00:00:30x.x.x.x Ethernet0/0 x.x.x.x 1 2WAY/DROTHER00:00:36x.x.x.x Ethernet0/0 x.x.x.x 1 FULL/DR 00:00:39x.x.x.x Ethernet0/0 As far as your encapsulation failed problem, this usually indicates that the router knows on which interface to send the packet, but for one reason or another it cannot. On a broadcast network this would indicate an ARP problem as you stated. I have seen issues where serial and line protocol are up, but the timeslots are off by one, this causes some strange issues on some hardware. If the timeslots are off by any more than one you usually would not see the circuit up, but in some instances the line will show up up if only off by one time slot. I would also check the MTU, as another person suggested, I know from experience that mismatches cause serious problems with multicast traffic. I don't suppose you changed the MTU after you brought the line up initially? Did you try shutting it down and then bringing it back up? Can you ping the interfaces from each router? ~-Original Message- ~From: Fraasch James [mailto:[EMAIL PROTECTED]] ~Sent: Monday, January 14, 2002 5:46 PM ~To: [EMAIL PROTECTED] ~Subject: Encapsulation Failed [7:31916] ~ ~ ~I ran into a problem this weekend. I have a 7204 on one end ~and an IBM 6611 ~on the other of a point to point T-1. IBM requires PPP ~encapsulation. I ~debugged and got the following: ~ ~*Jan 12 02:57:19.231: IP: s=172.25.137.201 (local), ~d=224.0.0.5 (Serial3/7), ~len ~ 64, sending broad/multicast ~*Jan 12 02:57:19.231: Se3/7 PPP: Outbound ip packet dropped, ~line protocol ~not u ~p ~*Jan 12 02:57:19.231: IP: s=172.25.137.201 (local), ~d=224.0.0.5 (Serial3/7), ~len ~ 64, encapsulation failed ~*Jan 12 02:57:19.347: LSP-TUNNEL-TIMER: timer fired for Tunnel ~Head Checkup ~ ~I know one of those lines says that the line protocol is not up but I ~guarantee that it is. We were switching out an existing router ~that used ~that line just fine. ~ ~The Cisco Tech I talked to wanted to talk about reversing the bits and ~seeing what that does. That's crap. It looks to be just an ~ARP problem but ~I can fix it. Has anyone other there ran into this problem ~before, and if ~so, how did it get fixed? ~ ~This is my first post. Please dont leave me hanging. ~ ~ ~Report misconduct ~and Nondisclosure violations to [EMAIL PROTECTED] ~ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32046&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OT: Great Lakes Cisco Users Group - Monthly Meeting [7:32047]
For more info: www.glcug.com Topic: Switching Technologies Presented by: Steve Henry Systems Engineer - Cisco Systems Date: Wednesday January 30, 2001 Location: Compuware Cafeteria Time: 6:30 PM Attendance: Everyone is welcomed Paul M. Immo CCDP CCNP MCSE GLCUG Board Member Clover Technologies, Inc. Phone (248) 449-4797 x1599 Cell (248) 343-0440 "Out of Clutter, find Simplicity. From Discord, find harmony. In the middle of difficulty, lies opportunity." Albert Einstein Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32047&t=32047 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Ospf router id vs loop back [7:32022]
At 12:44 PM -0500 1/15/02, Chuck Larrieu wrote: >interesting question. came up in a customer meeting the other day as well. > >IMHO, this gets down to design preference. Agreed. As you suggest, there's art as well as science here. >I am of the school of thought >that there needs be some way of getting to any router in a network ( design >permitting, cost permitting ), and that each router in a network needs some >unique and easily identified pneumonic. > >So IMHO, one should use loopbacks, numbered according to some rational >scheme, and that those "routes" should be advertised.IMHO This should be >true, no matter what routing protocol you are using. > >However, others will ask whether in a 5000 router domain, you want 5000 >extra routes in your tables. That is a valid counterargument. If you have that many routers, you presumably have a hierarchical design with summarization. Using Cisco's conservative number of routers per OSPF area, allocate 128 addresses, as part of an aggregatable block, per area. This gives 39+ blocks. If one assumes stubby areas, you'd get a maximum of 128 additional routes per nonzero area, plus 40 extra routes in area 0.0.0.0. 40 areas, however, is a lot for a single OSPF domain. When I've dealt with networks of this size, I've separated them into multiple OSPF domains linked by a backbone of backbones, either BGP or statically routed. That backbone of backbones, of course, gives the potential for additional aggregation. > >Using the RID command under the OSPF process, you can set up a rational >identification scheme. The RID does not necessarily have to be related to >interface numbering. But then you have the issue of correlating RIDs to the >addresses one actually uses to get to the router in question, making it a >bit more complicated to find things when you need to. That's why I like the RID to be the "address of last resort" to reach the router. > >JMHO. > >Chuck > > > > >""john smith"" wrote in message >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... >> Hi, >> Is there reason one would prefer loopback address for router ID when using >> Ospf over the router id command that can be used under "router ospf " and >> vice versa. Is there a need to advertise the router IDs in OSPF. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32048&t=32022 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco 7960 ip phones... [7:32006]
We have had the same issue with our phone system. The problem is not your call manager or your phone system for that matter. The issue is actually with the phone system that your calling or is calling you. Digital cannot echo by nature, but analog does. What needs to be done is a noice cancellation setting placed on the device in which your PRI or POTS line is terminated. Currently Cisco does not support this function on the 6509 Voice PRI card, nor any of the voice modules for the routers or AS lines. I am currently working with the Voice team as a test bed for this problem and will report the fix here as soon as possible. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32049&t=32006 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Encapsulation Failed [7:31916]
I just remembered that I actually have an Intel router connected to a 7513 via a T1 that comes in on an MCT3 card, and the encapsulation is PPP. The mtu is 1500 bytes, as opposed to the 2044 that is configured on yours. Just wanted to let you know. ~-Original Message- ~From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] ~Sent: Tuesday, January 15, 2002 2:01 PM ~To: [EMAIL PROTECTED] ~Subject: Re: Encapsulation Failed [7:31916] ~ ~ ~At 11:35 AM 1/15/02, Fraasch James wrote: ~>First, thanks for all the information. I forgot to mention ~that when I did ~>a Show ip int brief I saw up and up. Next, here is some pertinent ~>configuration information: ~> ~>Interface Serial 2/5 ~>mtu 2044 ~ ~That's kind of a strange MTU. What is the other router using? ~The routers ~exchange their MTUs in their database description packets. They have to ~match. ~ ~I guess you can't plug this router back in for testing, you ~said. But check ~again that this router's MTU isn't different from the others that are ~working. Also check its partner. Maybe it's different. ~ ~Check out the info here, plus there's a lot more about OSPF ~debugging on ~Cisco's Tech Notes: ~ ~http://www.cisco.com/warp/public/104/12.html ~ ~It's just a guess. My last guess (about bridging!) was totally ~false, but I ~think I'm closer here. ;-) Also, in doing some research I ~found one mention ~of "encapsulation failed" meaning a hardware problem!!? That ~could explain ~it too. I have seen serial interfaces go bad on Cisco routers in some ~pretty weird ways. ~ ~Good luck. Let us know what you find out please. It will be a ~good learning ~experience. Thanks. ~ ~Priscilla ~ ~ ~ ~>ip address 172.25.x.x 255.255.255.252 ~>encapsulation ppp ~>ipx network B051 ~>ipx update interval rip 300 ~>ipx update interval sap 300 ~>nrzi-encoding ~> ~>router ospf 200 ~>log-adjacency-changes ~>network 172.25.0.0 0.0.255.255 area 0.0.0.0 ~> ~>Sh ver is as follows: ~> ~>Version 12.0(7)XE1 ~> ~>IBM 6611 ~> ~>cisco 7204VXR (NPE225) processor with 122880K/8192K bytes of memory. ~>R527x CPU at 262Mhz, Implementation 40, Rev 10.0, 2048KB L2 Cache ~>4 slot VXR midplane, Version 2.3 ~> ~>This router was exchanging OSPF updates with a Cisco 1601 via ~a different ~>serial interface. I was also using PPP encapsulation on both ~interfaces ~>there and it worked fine. ~> ~>Finally, I have to say that we have this configuration in ~another location ~>with five serial ports connected to various IBM routers via ~T-1. All of the ~>serial ports have identical configurations as the serial port ~listed above. ~>Unfortunately, we are on a live network here and I cannot ~plug this router ~>back into the network to look at logs. I would have to take down a ~>courthouse and that has to be scheduled far in advance. Plus, ~they would not ~>like it if I took them down to do 'testing'! ~> ~>Thanks again for the information and keep it coming! ~ ~ ~Priscilla Oppenheimer ~http://www.priscilla.com ~ ~ ~ ~ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32050&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VLAN and IP Multicast [7:31994]
Have you checked to make sure all of the ports that your clients and servers are setting in are in both VLANs? Have you enabled Port Fast on the client ports? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32052&t=31994 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: To advertise OSPF RIDs or not ? [7:32042]
Well, that depends. If you use a loopback as the router id, and part of that loopback subnet is used for other things also, such as NAT, then you definitely want to advertise it out, since the NAT would never work if you didn't. If not, then you don't have to. Why do you ask, is this for a particular application? ~-Original Message- ~From: cybertek [mailto:[EMAIL PROTECTED]] ~Sent: Tuesday, January 15, 2002 2:15 PM ~To: [EMAIL PROTECTED] ~Subject: To advertise OSPF RIDs or not ? [7:32042] ~ ~ ~I am trying to understand if there would ever be a need to ~advertise Router ~IDs via OSPF. Is this something that is ever done in the real world. ~Thanks for your help ~ ~ ~ ~ ~Report misconduct ~and Nondisclosure violations to [EMAIL PROTECTED] ~ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32051&t=32042 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP Switching Exam 640-504 [7:32053]
I passed 640-504 on 01-02-02. I studied deeply for ATM LAN. That was my mistake, I didnot check out with cisco.com to see: No ATM technologies in the exam. In the exam that I took, there are no ATM questions. You will be hit hard on STP, MLS, Multicast and Cisco property protocols... I am happy because for reading ATM anyway. Good luck, Tu Do Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32053&t=32053 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP Switching Exam 640-504 [7:32023]
Moroni, I studied hard on ATM LAN switching. I passed 640-504 on 01-02-02. There was no question about ATM in the exam. I checked with cisco.com and found ATM was removed. Good luck, Tu Do. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32054&t=32023 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Can you load balance with two Pix Firewalls [7:32055]
Can you load balance with two Pix Firewalls? and how do you do it? It you have one as failover I don't think this works. Or do you do the load balance on the switches/routers on the ends? __ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.yahoo.com/videomail/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32055&t=32055 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Ospf Router ID Manual Router ID? [7:32056]
It sure helps to "nail-down" the router-id when playing around with DR/BDR elections or with virtual-links (since you point to the router-id) I believe that bootcamp lab #1 has some gotchas that refer to router-id issues. Not that I spent a ton of time (grin) getting this lab to work only to find out my problem was with how the routers selected their router id's. Ever since then, I like to manual tell the box what router id to use. Did that help? btw, it saves time in pounding your head against the desk because your labs don't work. Also, is router really your last name? Tim -Original Message- From: Steve Router [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 15, 2002 3:14 PM To: [EMAIL PROTECTED] Subject: Ospf Router ID Manual Router ID? Does any one know if assigning the Router ID's in Ospf helps out in ospf or save any time...??? _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com **Note: CCIE Security list is available. For more information go to: http://www.groupstudy.com/list/security.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32056&t=32056 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
tunneling with previously undefined endpoint? [7:32057]
Help, I can't think of a way to do this . :-( We have two IPSec "appliances" at work that require known, routable addresses on their "non-secure" ethernet interfaces. We want to create a kit engineers can take home for remote IPSec access into the network from personal cable/dsl connections. Our typical home networks have a cheapo router running NAT. The router is getting a real "outside" address from a service provider via DHCP (point "C" in the drawing). On the inside, we use private addressing (point "B"). The problem is to configure an IPSec appliance with a real address but connect it via the private address LAN at home. The obvious way to do this is with a tunnel, so we've managed to scavenge a couple of old 2500s for this purpose... IPSec cheapo IPSec appliance -->2500-->router-->ISP-->Internet-->3660-->2500-->appliance A B C D Ideally, we want a tunnel from the left side of the left 2500 to either the 3660 or the right 2500 so that we can give the left IPSec appliance some of our address space. With GRE, however, you have to specify the endpoint addresses in advance, and of course we don't know what address the ISP will give one via DHCP After some reading, I _think_ PPPoE, L2F, PPTP, and L2TP won't help us much Does anyone have any ideas? Jason Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32057&t=32057 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: tunneling with previously undefined endpoint? [7:32057]
If I get this correctly you can use dynamic-map feature as seen in the example here: http://www.cisco.com/warp/customer/707/ios_804.html ""the-other-jason"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Help, I can't think of a way to do this . :-( > > We have two IPSec "appliances" at work that require known, routable > addresses on their "non-secure" ethernet interfaces. > > We want to create a kit engineers can take home for remote IPSec access > into the network from personal cable/dsl connections. Our typical home > networks have a cheapo router running NAT. The router is getting a real > "outside" address from a service provider via DHCP (point "C" in the > drawing). On the inside, we use private addressing (point "B"). > > The problem is to configure an IPSec appliance with a real address but > connect it via the private address LAN at home. The obvious way to do > this is with a tunnel, so we've managed to scavenge a couple of old > 2500s for this purpose... > > > IPSec cheapo IPSec > appliance -->2500-->router-->ISP-->Internet-->3660-->2500-->appliance > A B C D > > Ideally, we want a tunnel from the left side of the left 2500 to either > the 3660 or the right 2500 so that we can give the left IPSec > appliance some of our address space. With GRE, however, you have to > specify the endpoint addresses in advance, and of course we don't know > what address the ISP will give one via DHCP > > After some reading, I _think_ PPPoE, L2F, PPTP, and L2TP won't help us much > > Does anyone have any ideas? > > Jason Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32059&t=32057 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
EIGRP neighbor limitations [7:32058]
Does anyone know of limitation in the amount of EIGRP neighbors on a router. If there is, is this a limitation per physical interface or a limitation per router. I found a document on CCO a couple of months ago that mentioned these limits but I have now searched and searched but cannot find that document again. Appreciate any input D. Robertson Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32058&t=32058 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OT: Support for IPSec on 7513 [7:32060]
I'm confused about what is needed to run IPSec on a 7513. The Cisco IOS Security Configuration Guide mentions that an Integrated Services Adapter is needed for IPSec on a 7200 or 7500 series router. However, upon looking closer at the ISA, CCO says that this is only for the 7100 or 7200 routers. An ISA for a 7500 does not appear to be available. If it is, I'm looking in the wrong place. So, what's the scoop? If I were to simply load an IPSec image on the 7513 would it melt and die a horrible death? What is necessary to make this work? Buy a 7200? :-) Thanks, John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32060&t=32060 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CISCO MC3810 [7:32007]
Cargello, Yes! The MC3810 does support VoIP. However, you require a special feature set load that includes VoIP it is recognised by 'v5' in the feature code. eg IP Plus with voip mc3810-isv5-mz_121xxx, enterprise plus with ATM and VoIP support mc3810-a2jsv5-mz_121xxx. In order to run the VoIP enabled feature sets you require 64 Mb RAM, which may necessitate a bootrom upgrade (require 12.06rt4 bootrom code), otherwise your 64 Mb module will be seen as 16 Mb! You will also require a voice i/f module: AVM6 + APM personality modules for analogue (E&M or fxo to pabx / co switch); BVM for Basic rate ISDN; or DVM for primary rate (either T1 or E1). Peter In article , Christian Arguello writes >Hi > >Does any body lnow if CISCO mc3810 support voip using h323 protocol, if so, >with wich IOS does Cisco mc3810 works with VoIP. what do i have to do to make >tha a CISCO mc3810 works as a gateway in VoIP, i mean that my CISCO must be a >bridge between PSTN and the IP Cloud. > >Regards >html >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > -- Peter Whittle Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32061&t=32007 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Switches whitout ip [7:32062]
Hi, how can i remotely assign ip to switches? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32062&t=32062 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Switches whitout ip [7:32063]
Hi, how can i remotely assign ip to switches? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32063&t=32063 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Encapsulation Failed [7:31916]
Sent this yesterday but it doesn't seem to have come through. In response to some of the other comments on this thread, an MTU mismatch will definitely cause the OSPF neighbours to not be neighbourly :-) I have come across this when upgrading a frame relay service from standard serial (MTU 1500) to an HSSI (default MTU 4470 I think - not 1500, anyway). JMcL - Forwarded by Jenny Mcleod/NSO/CSDA on 16/01/2002 08:34 am - Jenny Mcleod 15/01/2002 03:30 pm To: [EMAIL PROTECTED] cc: Subject:RE: Encapsulation Failed [7:31916] Actually, OSPF neighbour states will become "Full" on point to point links. I don't have the time or playpen to double-check the state transitions at the moment, but a quick check shows "Full" across point to point frame relay sub-interfaces and also across leased lines. JMcL "Kane, Christopher A." Sent by: [EMAIL PROTECTED] 15/01/2002 02:04 pm Please respond to "Kane, Christopher A." To: [EMAIL PROTECTED] cc: Subject:RE: Encapsulation Failed [7:31916] Yes, OSPF sends hellos on Serial interfaces. In point-to-point networks OSPF's hello is multicast. There is no DR/BDR so it's my understanding that it simply becomes a Master/Slave relationship. Mindful that in OSPF a Neighbor is not the same as an Adjacency. All routers become neighbors (assuming all aspects of the Hello protocol are agreed upon) They only become Adjacent with the respective DR and BDR of the network in the case of a network on a broadcast medium. I'm pretty sure you only see "2-way" as a neighbor state on point-to-point links rather than seeing "Full" as on a broadcast medium. I'd need someone else to chime in on point-to-multipoint as I haven't configured that lately. Chris -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Monday, January 14, 2002 8:40 PM To: [EMAIL PROTECTED] Subject: Re: Encapsulation Failed [7:31916] At 07:57 PM 1/14/02, s vermill wrote: >Priscilla, > >May I ask what led you to believe that bridging was involved as opposed to >just assuming that the source address was the Cisco router itself? Good question. The IBM 6611 does bridging for one thing. The other hint was that it was attempting to send an OSPF Hello on a serial interface. Does OSPF do that? How does it establish adjacency to a neighbor router on a WAN? On a point-to-point network, I figured it just knew who its neighbor was. On a non-broadcast, multiple-access network, such as Frame Relay, you normally configured the neighbor command. I've only seen the OSPF multicast Hellos on LANs, (but I can't afford a WAN Sniffer anymore! ;-) Gurus? Help? Thanks. Priscilla P.S. Anyone seeing this may be confused because you didn't include the original message. PLEASE, people, reply with the body of the message in the reply. We work in connectionless, stateless mode. How do you expect anyone to easily connect this to the discussion about a router failing to forward a packet on a PPP link to an IBM 6611. Hello? >Just as an opportunity to learn something. > >Regards, > >Scott Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32064&t=31916 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Can you load balance with two Pix Firewalls [7:32055]
No, one is active the other standby Dave Marilyn Potter wrote: > > Can you load balance with two Pix Firewalls? and how > do you do it? It you have one as failover I don't > think this works. Or do you do the load balance on > the switches/routers on the ends? > > __ > Do You Yahoo!? > Send FREE video emails in Yahoo! Mail! > http://promo.yahoo.com/videomail/ -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 "Emotion should reflect reason not guide it" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32065&t=32055 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: tunneling with previously undefined endpoint? [7:32057]
Henry - Absolutely right, the "dynamic" keyword for crypto maps solves the problem, but our Cisco SE and quite a few others at work are quite sure that we can't run IPSec on a 2500. I thought the 2500s could be used just to provide cleartext encapsulation (to keep the vpn appliances happy) the link you ref. specifies the 2500 platform and the IOS feature navigator _does_ show IPSec support on a 2500 (with the right image, of course). Guess I'll have to call our SE ... thanks for the tip! Hey, if this works we can toss the IPSec appliances! Jason Henry D. wrote: > If I get this correctly you can use dynamic-map feature > as seen in the example here: > > http://www.cisco.com/warp/customer/707/ios_804.html > > ""the-other-jason"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > >>Help, I can't think of a way to do this . :-( >> >>We have two IPSec "appliances" at work that require known, routable >>addresses on their "non-secure" ethernet interfaces. >> >>We want to create a kit engineers can take home for remote IPSec access >>into the network from personal cable/dsl connections. Our typical home >>networks have a cheapo router running NAT. The router is getting a real >>"outside" address from a service provider via DHCP (point "C" in the >>drawing). On the inside, we use private addressing (point "B"). >> >>The problem is to configure an IPSec appliance with a real address but >>connect it via the private address LAN at home. The obvious way to do >>this is with a tunnel, so we've managed to scavenge a couple of old >>2500s for this purpose... >> >> >>IPSec cheapo IPSec >>appliance -->2500-->router-->ISP-->Internet-->3660-->2500-->appliance >> A B C D >> >>Ideally, we want a tunnel from the left side of the left 2500 to either >>the 3660 or the right 2500 so that we can give the left IPSec >>appliance some of our address space. With GRE, however, you have to >>specify the endpoint addresses in advance, and of course we don't know >>what address the ISP will give one via DHCP >> >>After some reading, I _think_ PPPoE, L2F, PPTP, and L2TP won't help us >> > much > >>Does anyone have any ideas? >> >>Jason Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32066&t=32057 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
