RE: Strange Problem: Everything works fine but the Router can [7:34302]

2002-02-04 Thread Andrew Larkins

use the show IP route  and there will more than likely be 2
routes out

-Original Message-
From: Brian [mailto:[EMAIL PROTECTED]]
Sent: 02 February 2002 07:21 AM
To: [EMAIL PROTECTED]
Subject: Re: Strange Problem: Everything works fine but the Router can
[7:34171]


The every other packet behavior sometimes indicates multiple static
routes, do a sh ip ro for the dest and see whats there..

On Sat, 2 Feb 2002, Hamid Ali Asgari wrote:

 Hi group,

 I have a router which is the main gateway of my network. All the
 hosts on my network can successfully ping everywhere on the internet,
 but the ROUTER itself has always a success rate at 50%. Bellow is the
 ping result:

 Router#ping
 Protocol [ip]:
 Target IP address: 193.0.0.193
 Repeat count [5]: 10
 Datagram size [100]:
 Timeout in seconds [2]:
 Extended commands [n]:
 Sweep range of sizes [n]:
 Type escape sequence to abort.
 Sending 10, 100-byte ICMP Echos to 193.0.0.193, timeout is 2 seconds:
 !.!.!.!.!.
 Success rate is 50 percent (5/10), round-trip min/avg/max =

 Same time my computer which is exactly behind the router can ping
 193.0.0.193 without any errors.


 No routing protocol is running on the router and it's using simple
 static routes and all of its interfaces have VALID IP addresses.

 Any idea what the problem is ???

 Thanks in advance,


 __
 Do You Yahoo!?
 Great stuff seeking new owners in Yahoo! Auctions!
 http://auctions.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34302t=34302
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Your Password at GroupStudy! [7:34303]

2002-02-04 Thread Indra Moodley

Any info on the CCIP Cetification

Regards,

Indra Moodley
DNS Administrator
Satellite Data Networks

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 10:59 AM
To: [EMAIL PROTECTED]
Subject: Your Password at GroupStudy!



Welcome to GroupStudy.com.  Your username and password are as follows:
Your Username: Lamagra 
Your Password: rkwfcnezvp


You may login and change your password as desired.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34303t=34303
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DHCP address with Cable on a Cisco router [7:34274]

2002-02-04 Thread ferg

I assume you are getting your IP from a computer plugged into the cable
modem and then using that address to IP your router

One thing to rememebr is this.. Most cable modems these days will rememebr
the MAC that it was attatched to.. so you will either need to set the MAC on
your router so it looks like the computer you where using...

.. or just reboot the cable modem after your router is plugged into it..
that will allow it to grab to new MAC address from the router.

You may need to do that even if you are using:

int e0
ip address dhcp



McHugh Randy  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Can anyone please tell me if they have been able to make a Cisco 2514
Router
 hold a DHCP address to an ethernet interface so I can do NAT with overload
 for me cable internet connection?  Once I get my dhcp address from my
 provider I hard code that on to eth 0 which is pluged into the cable
modem.
 on the router along with static default route with the dns info but still
 cant ping out to the internet from the router. DSL works fine but cable
does
 not.


 thanks
 Randy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34304t=34274
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IOS software enquiry [7:34305]

2002-02-04 Thread Sharon Kantan

Hi..  I have problem downloading my new CISCO IOS software for CISCO 2500  
3600 router,  I had gone to the following website, but I can't find any 
category for my type for router,  Can u please giude me

http://www.cisco.com/public/sw-center/sw-ios.shtml

Besides, I had download IOS for my 2900 catalyst switch.  But there are two 
file available c2900XL-c3h2s-mz.120-5.WC2.bin  and 
c2900XL-c3h2s-mz.120-5.WC2.tar. One is binary only and one is binary and 
HTML .  What is meant by with HTML, does it mean it come with web mode.


Sim

_
Send and receive Hotmail on your mobile device: http://mobile.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34305t=34305
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Portware 2.9.1.0 on AS5200 [7:34301]

2002-02-04 Thread Stefan Leemann

Luca,

We updated our POP with 5 AS5300 two months ago to IOS: 
c5300-is-mz_122-2_XB.bin (5300 Software (C5300-IS-M), Version 12.2(2)XB) 
and MICA Portware 2.9.1.0. Until now we don't have any issues we didn't 
have before.

Good look,
Stefan


At 02:59 04.02.2002 -0500, Luca Vanini wrote:
Hello, I would enable V.92 on an AS5200 with MICA Modems.
There is someone who applied Portware 2.9.1.0 on Cisco5200?
In this case, with which IOS version?
It's all ok after 2.9.1.0?
Luca




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34306t=34301
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIM Dense Mode or PIM Sparse Mode [7:34307]

2002-02-04 Thread Eve Mitch

Hi wondering what I should use in a envirionment where I have 2 core
switches 6513 with sup2 and msfc2 and pfc2 modules onboard.
have about 5 access switches 6513 with sup2 modules connected via trunks to
the core.
Lots of users on different VLANs behind different access switch will use the
few multicast stream there are.
how to decide which mode to use  PIM DM or PIM SM.

thanks in advance
Eve




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34307t=34307
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE R/S Lab differences [7:34308]

2002-02-04 Thread [EMAIL PROTECTED]

HI,

did anyone know if there are differences between the CCIE labs worldwide ?

Mit freundlichen Gr|_en

Udo Konstantin / koud , GS KA
NEEF LAPPCOM GmbH
Systemhaus f|r IT-Lvsungen
Windeckstrasse 8  76135 Karlsruhe
Tel: +49 721/8606-215  Mobil: +49 172/7271578   *215
Fax: +49 721/8606-264
E-Mail/Internet: [EMAIL PROTECTED]
Notes: Udo Konstantin/Infra CS @SULZERINFRA
Website: http://www.neef.de/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34308t=34308
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



prefix lists .. [7:34312]

2002-02-04 Thread dk

Can anyone help me get a handle on the ge and le options on  prefix
lists?
I find them totaly confusing.

Thanks in advance for any advice offered

David




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34312t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: prefix lists .. [7:34312]

2002-02-04 Thread Scott Riley

Do you mean gt and lt for greater than or less than specific
port numbers?

Use extended access lists with an ACL number of 100 - 199 and a specific
protocol (TCP / UDP).

Eg:

Access-list 101 deny tcp 192.168.100.0 0.0.0.255 host 192.168.200.1 gt
1024

HTH,

Scott

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
dk
Sent: 04 February 2002 12:07
To: [EMAIL PROTECTED]
Subject: prefix lists .. [7:34312]


Can anyone help me get a handle on the ge and le options on  prefix
lists? I find them totaly confusing.

Thanks in advance for any advice offered

David




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34313t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: prefix lists .. [7:34312]

2002-02-04 Thread dk

Its not related to port ranges but network prefix ranges .. (prefix lists
have replaced Distribute lists for Routing policy control )access-lists are
no longer used.

This is what is says in the book ..

the ge-value specifies the range of the prefix length to be matched for
prefixes which are more secific than the network/prefix length. The range is
assumed to be from ge-value to 32 if only the ge-value is specified

the le-value  specifies the range of the prefix length to be matched for
prefixes which are more secific than the network/prefix length.The range is
assumed to be from prefix length to le-value  if only the le attribute is
specified.

.examples
ip prefix-list test1 permit 10.10.0.0/16  le 16 or
ip prefix-list test2 permit 172.0.0.0/8   ge 18 or
ip prefix-list test3 permit 172.0.0.0/8   ge 16 le 24

I  think i've made that about as clear as mud !


- Original Message -
From: Scott Riley 
To: 
Sent: Monday, February 04, 2002 12:33 PM
Subject: RE: prefix lists .. [7:34312]


 Do you mean gt and lt for greater than or less than specific
 port numbers?

 Use extended access lists with an ACL number of 100 - 199 and a specific
 protocol (TCP / UDP).

 Eg:

 Access-list 101 deny tcp 192.168.100.0 0.0.0.255 host 192.168.200.1 gt
 1024

 HTH,

 Scott

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
 dk
 Sent: 04 February 2002 12:07
 To: [EMAIL PROTECTED]
 Subject: prefix lists .. [7:34312]


 Can anyone help me get a handle on the ge and le options on  prefix
 lists? I find them totaly confusing.

 Thanks in advance for any advice offered

 David




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34314t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: prefix lists .. [7:34312]

2002-02-04 Thread McCallum, Robert

gt = greater than so gt /23 = subnets with a mask of above /23.
lt = less than so lt /17 = subnets with a mask less than /17.

so using prefix lists can you give me an answer which would do the
following:-

1. Deny subnets of class B networks
2. Deny supernets of Class C networks
3. Deny networks starting 193.x.x.x
4. permit all else.

For the 1st one ask yourself what makes a class B network a Class B
network?  From this you will find out what your /x prefix should be.  Then
what mask = subnets of a class B network gt or lt.

and so on

-Original Message-
From: dk [mailto:[EMAIL PROTECTED]]
Sent: 04 February 2002 12:07
To: [EMAIL PROTECTED]
Subject: prefix lists .. [7:34312]


Can anyone help me get a handle on the ge and le options on  prefix
lists?
I find them totaly confusing.

Thanks in advance for any advice offered

David




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34315t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: prefix lists .. [7:34312]

2002-02-04 Thread Georg Pauwen

Hi David,

here is an example of the le and ge in prefix lists:

ip prefix-list greater seq 5 deny 201.1.5.0/24 ge 29

This will deny anything from 201.1.5.0/24 thru 201.1.5.0/29
The advantage of the ge command is that now you need only one entry to allow
or deny the entire range.

ip prefix-list less seq 10 permit 192.168.5.0/0 le 26

This will allow anything from 192.168.5.0/24 thru 192.168.5.0/26; again, it
saves a lot of entries.

Hope this helps.

Regards,

Georg



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34317t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIM Dense Mode or PIM Sparse Mode [7:34307]

2002-02-04 Thread Georg Pauwen

Hi Eve,

To me this sounds like a definite case of PIM Dense-Mode. This is what Cisco
says:

Dense mode PIM is designed for the following conditions:

Senders and receivers are in close proximity to one another.

There are few senders and many receivers.

The volume of multicast traffic is high.


Sparse-mode PIM is designed for the following conditions:

There are few receivers in a group.

Senders and receivers are separated by WAN links.


Regards,

Georg


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34318t=34307
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: prefix lists .. [7:34312]

2002-02-04 Thread Constantin Tivig

More or less like /CIDR:
Le to 30 and ge to 27 means all subnets with mask between /27 and /30
included.

Constantin Tivig


-Original Message-
From: Scott Riley [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 04, 2002 2:34 PM
To: [EMAIL PROTECTED]
Subject: RE: prefix lists .. [7:34312]

Do you mean gt and lt for greater than or less than specific
port numbers?

Use extended access lists with an ACL number of 100 - 199 and a specific
protocol (TCP / UDP).

Eg:

Access-list 101 deny tcp 192.168.100.0 0.0.0.255 host 192.168.200.1 gt
1024

HTH,

Scott

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
dk
Sent: 04 February 2002 12:07
To: [EMAIL PROTECTED]
Subject: prefix lists .. [7:34312]


Can anyone help me get a handle on the ge and le options on  prefix
lists? I find them totaly confusing.

Thanks in advance for any advice offered

David




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34320t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE starting pay [7:33899]

2002-02-04 Thread Marshal Schoener

I disagree.
There is not a Cisco test, nor any technical test for that matter that a
person can't pass with a whole lot of studying and some lab time.  

Yes the CCIE lab is extremely difficult.  But to say it's impossible to pass
without 'real world' experience is just wrong.

   Regards,

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 6:09 AM
To: [EMAIL PROTECTED]
Subject: RE: CCIE starting pay [7:33899]


Is there such 
D CCIE with no experience
I highly doubt that ladies and gents, The whole point of a CCIE Lab is to
prove the experience you have gained in the field and how you go about
building and troubleshooting a network.
Friends of mine that are good engineers with extensive experience  failed
the exam first time.
The amount of time you get in the lab exam gives you no time to refer back
to the documentation cd or to even think to hard!,  you have to know exactly
what to do and  how to do it and you have to do as  fast as  you possibly
can.
Anyone that has attempted the lab knows how draining it is both physically
and especially mentally. It is not easy!
For those of us attempting the lab and for those that have already achieved
there numbers we know we cannot do it without hands on and a good
troubleshooting base.  
Good Luck 

-Original Message-
From: Steve Smith [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 31, 2002 9:22 PM
To: [EMAIL PROTECTED]
Subject: RE: CCIE starting pay [7:33899]


Man that's an insult. A CCIE with no experience. I guess I will go back
to building race cars.

-Original Message-
From: Joe Carr [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 31, 2002 12:27 PM
To: [EMAIL PROTECTED]
Subject: CCIE starting pay [7:33899]


what would be the average starting pay for CCIE with no work experience.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34322t=33899
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IOS software enquiry [7:34305]

2002-02-04 Thread Georg Pauwen

Hi Sim,

it looks like you are not logged on as a CCO user. The link to the
downloadable software section should be

http://www.cisco.com/kobayashi/sw-center/sw-ios.shtml

after you have logged on. Which image are you looking for ?

The installable software for your 2900 switch is contained in the .bin file.
The .tar files are release notes or special instruction files provided to
instruct customers of special handling. Some notes are also provided in
.html files that are compatible for viewing with a web browser. That means
the .tar files do not contain any software that you can load to your switch.

Regards,

Georg






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34321t=34305
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RE: prefix lists .. [7:34312]

2002-02-04 Thread John Neiberger

Dave,

GE means greater than or equal to, while LE means less than 
or equal to.

So, a prefix list that has ge 25 would only match prefixes 
with masks of /25 or greater.  If you had le 24 it would 
match prefixes with masks less than or equal to 24.

John



Get your own 800 number
Voicemail, fax, email, and a lot more
http://www.ureach.com/reg/tag


 On Mon, 4 Feb 2002, McCallum, Robert (Robert.McCallum@let-
it-be-thus.com) wrote:

 gt = greater than so gt /23 = subnets with a mask of 
above /23.
 lt = less than so lt /17 = subnets with a mask less than /17.
 
 so using prefix lists can you give me an answer which would 
do the
 following:-
 
 1. Deny subnets of class B networks
 2. Deny supernets of Class C networks
 3. Deny networks starting 193.x.x.x
 4. permit all else.
 
 For the 1st one ask yourself what makes a class B network a 
Class B
 network?  From this you will find out what your /x prefix 
should be. 
 Then what mask = subnets of a class B network gt or lt.
 
 and so on
 
 -Original Message-
 From: dk [mailto:[EMAIL PROTECTED]]
 Sent: 04 February 2002 12:07
 To: [EMAIL PROTECTED]
 Subject: prefix lists .. [7:34312]
 
 
 Can anyone help me get a handle on the ge and le options 
on  prefix
 lists?
 I find them totaly confusing.
 
 Thanks in advance for any advice offered
 
 David
 

_
 CCIE Security list: 
http://www.groupstudy.com/list/security.html
 





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34323t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ISDN problems... [7:34324]

2002-02-04 Thread Stuart Laubstein

I have  a 3620 that has a problem with timing out. I have set the dialer
idle-timoue to 180 seconds--the router will keep the interface open for 180
seconds and then drop it for 9 seconds. I set it to 55 seconds and it did
the same timeout after 55 seconds--9 second drop. This only seems to happen
when the  remote router is a cisco router. I have tried debug isdn
events--but can only see the interface coming back up. Any idea on things I
can try would be much appreciated or on debug options that would narrow it
for me...

thanks



stuart




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34324t=34324
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NLSP Summarization [7:34326]

2002-02-04 Thread Richard Botham

Hi All,
I am trying to get route sumarization working with NLSP.
I have r1 that has networks as follows:

Fa0/0 ipx net aaa1
Fa0/1 ipx net aaa2

I have enabled route-aggregation under NLSP but cannot figure out the acl to
get only a summary of ' aaa ' advertised to r2 and not aaa1 and aaa2.

configs :

interface FastEthernet0/0
 no ip address
 no ip directed-broadcast
 duplex auto
 speed auto
 ipx network AAA1
 ipx nlsp r1 enable
!
interface FastEthernet0/1
 no ip address
 no ip directed-broadcast
 no keepalive
 duplex auto
 speed auto
 ipx network AAA2
 ipx nlsp r1 enable
!
ipx router nlsp r1
 area-address 0 0
 route-aggregation
!
ipx access-list summary r1sum
 deny AAA0 FFF0
 permit -1


Any ideas would be appreciated

Regards
Richard


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34326t=34326
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: wireless problem. [7:34110]

2002-02-04 Thread george gittins

yeah, I remove the wirless card on my laptop completely unsistalled the
drivers and rebooted, then i installed it again and now everything works
fine...
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
ocsiC
Sent: Sunday, February 03, 2002 7:04 PM
To: [EMAIL PROTECTED]
Subject: Re: wireless problem. [7:34110]


Have you tied the TCP/IP stack to the Wireless PCCard??

1. Check the local loop-back address: ping 127.0.0.1 if this doesn't work
then check if there is a IRQ conflict with the PC-Card drivers/hardware

2. Check the IP node address: ping x.x.x.x (where x.x.x.x is the IP address
of your node)

3. If DHCP doesn't work, check that the BOOTP (UDP on port 67) is
forwarding from the 340 access point on to the LAN
(not familiar with 340 setup, but treating it like any other network
device!)

4. Check gateway address for subnet

etc. etc.

If your using this in a production environment, then may I suggest you have
a read of the following article:
http://www.networkmagazine.com/article/NMG20011203S0008

Let's us all know how you get on...

SB :)


At 14:45 01/02/2002 -0500, george gittins wrote:
I have a aironet 340 access point which can obtain an ip address from my
dhcp. I installed the pcmcia lan wireless card on my laptop and i can surf
the net find.However i cant ping
anything neither can i acess my routers , .i cant even ping my ip
addresss, is something that im missing here?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34328t=34110
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE R/S Lab differences [7:34308]

2002-02-04 Thread David L. Blair

I am sure there are some differences.  According to Cisco there are not.  If
there are it probably is on the order of  T-1 vs. E-1.  ISDN S/T interface
vs. U interface.

My $0.02 worth
--


Through Complexity there is Simplicity,
   Through Simplicity there is Complexity

David L. Blair - CCNP, CCNA, MCSE, CBE, A+, 3Wizard



 wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 HI,

 did anyone know if there are differences between the CCIE labs worldwide ?

 Mit freundlichen Gr|_en

 Udo Konstantin / koud , GS KA
 NEEF LAPPCOM GmbH
 Systemhaus f|r IT-Lvsungen
 Windeckstrasse 8  76135 Karlsruhe
 Tel: +49 721/8606-215  Mobil: +49 172/7271578   *215
 Fax: +49 721/8606-264
 E-Mail/Internet: [EMAIL PROTECTED]
 Notes: Udo Konstantin/Infra CS @SULZERINFRA
 Website: http://www.neef.de/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34332t=34308
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VIP2 Issue [7:34330]

2002-02-04 Thread wu343

Here is the deal, I have a cat5000 with a sup III an RSM (ws-x5302) and a
VIP2
with an ATM OC3 module installed (PA-A3-OC3SMI). I cannot see the ATM OC3
from
the RSM. From the sup III I see the expansion module but after I session into
the RSM nothing on a show run or a show int. This happened after a software
upgrade on both the sup III and the RSM. The sup III was 3.2(8) and now it is
6.3(2), as for the RSM it was 12.0 but now the boot and the running IOS is
12.1(10). Can anyone help me???

Joe




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34330t=34330
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VLan Switching [7:34298]

2002-02-04 Thread Georg Pauwen

Steve,

I am not sure how much you know about VLAN configuration and inter-VLAN
communication you know. In your case, you could create a management VLAN and
a user VLAN and use the router for inter-VLAN routing. Maybe you can try
this link:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_6_2/_config/vlans.htm#24171

It gives a detailed overview of the various commands involved in VLAN
configuration.

Regards,

Georg


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34331t=34298
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Off Topic - CCIE LAB and NDA [7:34244]

2002-02-04 Thread R. Benjamin Kessler

We could debate the TR vs. Ethernet thing 'till the cows come home

Are there any new Token-Ring networks being deployed?  Probably not.

Unfortunately, there are still a TON of Token-Ring networks in use.  Lately,
I've seen these in financial settings mostly.  I know of one brokerage
company (who shall remain anonymous) that recently moved some legacy
AS/400's from one location to another and had to update a bunch of DLSw
peering statements (~200) so a customer contact database application still
worked.

The Financial industry (banks, brokerages, etc.) is notorious for using
really old technology.

Anyone ever see how ATM (Automatic Teller Machine) networks are built?
There are a lot of them still running on analog multi-drop 4.8K lines.

Some of the on-line brokerages send their orders via old bi-synch or x.25
technology rather than the various IP-based methods available (don't believe
all the commercials you see to the contrary).

What are the chances that a CCIE candidate will see Token-Ring in a
production network?  I guess it depends on the industry they work in.  Up
until a year ago CCIE candidates needed to know AppleTalk for the lab; I
would bet that the percentage of engineers who have to support
TR/DLSw/Bridging in their regular jobs is quite a bit higher than those who
support AppleTalk networks. (sorry Priscilla :)

Cisco may remove TR at some point just as they did with AT and DECNet, etc.
but for now it's on the test so buck-up and learn it :)

My $0.02

Ben


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Priscilla Oppenheimer
Sent: Sunday, February 03, 2002 8:19 PM
To: [EMAIL PROTECTED]
Subject: Re: Off Topic - CCIE LAB and NDA [7:34244]


Token Ring is still on the written because Cisco doesn't seem to have the
resources to update the test??

Is it still on the lab? (Or can't you tell me because of NDA?) ;-)

I haven't run into a Token Ring shop that wasn't planning to update to
Ethernet in a long time. But that planning to update can take years..

Priscilla

At 12:32 AM 2/3/02, Chuck Larrieu wrote:
before I shut down for the evening, a few random thoughts on the CCIE Lab
and NDA. Inspired by several posts here of late from persons asking about
topology, IOS versions, or speaking of rumors about equipment changes.

1) It is unclear what really constitutes NDA. Caslow? The ECP1 class? NLI's
practice labs? Caslow's new prep class? Cisco's own ASET lab? All of these
could be considered violations of NDA in many ways, from topic content to
lab topology. Cisco's own ASET program used real but retired CCIE labs.

2) what is it Cisco really considers CCIE level skill? In the past, things
like DecNet, Apollo, and Vines were core topics. Cisco has recently dropped
those, plus ATM LANE, presumably in response to market conditions. Which
leads one to ask - why token ring? The only real world token ring project I
have been involved with the past couple of years is ripping them out and
replacing them with ethernet. The apologia that there are still some major
token ring networks around is a bit lame. There are still some major DecNet
networks around, I'm sure. Until very recently ( and maybe they still
are ),
a major utility company out this way was still running Vines. As was the
U.S
Navy.

3) Is the CCIE a forward looking certification or not? Based on what I am
seeing in the marketplace, the advanced skill levels that one needs to meet
demand center around VPN, VoIP, wireless, security, and the underlying
infrastructure required to support these technologies. that means lots of
QoS, switching, L2-L3 interaction, ATM, giga-whatever, etc.

I would purely love to see discussed good focused discussion on core
competencies, core issues. But there is that awful specter of NDA that
hangs
over all of our heads.

In a very strange way, NDA is kinda like Santa Claus and the Easter Bunny.
We all know what's in the Lab. We all know what study materials are
designed
to model the Lab. But we don't dare speak the truth in front of the
children
( those who haven't been yet ) for fear that some higher authority will
trou
nce on us if we do.

I'm not sure if there is a real point to this message. Maybe what I want to
say to all of those who keep asking about Lab equipment, Lab topology, Lab
IOS versions, and the like, is that understanding of the core topics is the
most important thing. If you have them down cold, the equipment and the
topology will not matter.

I'd like to comment on the rumor about changes in the equipment, but that
damn NDA.


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34333t=34244
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Where to begin? ( troubleshooting frame relay ) [7:34264]

2002-02-04 Thread Hire, Ejay

This really sounds like a software problem.  Is it possible to connect the
384k computer to the t1 lan segment and see if the problem persists?

-Ejay

-Original Message-
From: beth [mailto:[EMAIL PROTECTED]]
Sent: Sunday, February 03, 2002 10:09 AM
To: [EMAIL PROTECTED]
Subject: Where to begin? ( troubleshooting frame relay ) [7:34264]


Hello All,
 I have a user with a full T1 frame relay circuit and a user with a 384k
frac
T1 circuit. The problem is the user with full T1 is trying to do a big SQL
query that seems to time out after about 6 minutes of trying but the 384k
can
run the same query in about 3 minutes. The full T1 seems responsive  and
here
is the sh int about 45 mins after router reboot. Any responses would be
greatly appreciated.

*

*
***
Serial0 is up, line protocol is up
  Hardware is PQUICC with Fractional T1 CSU/DSU
  MTU 1500 bytes, BW 1544 Kbit, DLY 2 usec,
 reliability 255/255, txload 4/255, rxload 3/255
  Encapsulation FRAME-RELAY, loopback not set
  Keepalive set (10 sec)
  LMI enq sent  321, LMI stat recvd 321, LMI upd recvd 0, DTE LMI up
  LMI enq recvd 0, LMI stat sent  0, LMI upd sent  0
  LMI DLCI 0  LMI type is ANSI Annex D  frame relay DTE
  Broadcast queue 0/64, broadcasts sent/dropped 105/0, interface broadcasts
50
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of show interface counters 00:53:44
  Input queue: 1/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue :0/40 (size/max)
  5 minute input rate 22000 bits/sec, 29 packets/sec
  5 minute output rate 29000 bits/sec, 49 packets/sec
 11131 packets input, 1847898 bytes, 0 no buffer
 Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
 16526 packets output, 1309436 bytes, 0 underruns
 0 output errors, 0 collisions, 1 interface resets
 0 output buffer failures, 0 output buffers swapped out
 1 carrier transitions
 DCD=up  DSR=up  DTR=up  RTS=up  CTS=up

 Serial0.1 is up, line protocol is up
  Hardware is PQUICC with Fractional T1 CSU/DSU
  Internet address is XXX.XX.XX.X/24
  Backup interface BRI0, failure delay 0 sec, secondary disable delay 0 sec
  MTU 1500 bytes, BW 1544 Kbit, DLY 2 usec,
 reliability 255/255, txload 4/255, rxload 3/255
  Encapsulation FRAME-RELAY

*
***




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34334t=34264
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN problems... [7:34324]

2002-02-04 Thread McCallum, Robert

If the router is not seeing interesting traffic within your idle period then
it should drop the line.  What is in your dialer-list to define what is
interesting traffic?

-Original Message-
From: Stuart Laubstein [mailto:[EMAIL PROTECTED]]
Sent: 04 February 2002 14:20
To: [EMAIL PROTECTED]
Subject: ISDN problems... [7:34324]


I have  a 3620 that has a problem with timing out. I have set the dialer
idle-timoue to 180 seconds--the router will keep the interface open for 180
seconds and then drop it for 9 seconds. I set it to 55 seconds and it did
the same timeout after 55 seconds--9 second drop. This only seems to happen
when the  remote router is a cisco router. I have tried debug isdn
events--but can only see the interface coming back up. Any idea on things I
can try would be much appreciated or on debug options that would narrow it
for me...

thanks



stuart




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34335t=34324
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Off Topic - tax deductions for studies [7:34270]

2002-02-04 Thread Hire, Ejay

The best way to do that is to call youself a sole-proprietor of a business.
Then you can also deduct travel costs, supplis, etc.  This will also allow
you to report any profits you may have made from independent consulting.  If
you are like me, you could have made several thousand dollars on consulting
and still reported a loss.

The rule is:  If you do it only to save on taxes it's tax evasion.  If you
are trying to make money, It's tax planning!

-Original Message-
From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
Sent: Sunday, February 03, 2002 1:02 PM
To: [EMAIL PROTECTED]
Subject: Off Topic - tax deductions for studies [7:34270]


As I gather together my 2001 tax year materials, I thought I'd just offer to
the group that the cost of books, classes, home lab routers, etc. MAY be tax
deductible.

there are provisions in the tax code for deducting the cost of those
training materials and classes which contribute to your ongoing ability to
perform your job.

As always, you should check with a qualified accountant to assure that you
are eligible and in compliance with the zillions of tax laws out there.

Chuck




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34336t=34270
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: NAT and dynamically attained ip [7:34213]

2002-02-04 Thread Hire, Ejay

For NAT, I don't think so (at least not on 12.0).  For PAT, Yes.  In your
nat statement,
you use the interface instead of the ip.

ip nat inside source static tcp 10.0.0.1 80 interface dialer 0 80



-Original Message-
From: Tim Booth [mailto:[EMAIL PROTECTED]]
Sent: Saturday, February 02, 2002 1:20 PM
To: [EMAIL PROTECTED]
Subject: NAT and dynamically attained ip [7:34213]


Is there any way to get NAT (not PAT) to use as an outside interface,
an Async interface that has IP ADDRESS NEGOTIATE and PPP IPCP
ACCEPT-ADDRESS on it, or is it only possible to have NAT use an outside
interface with a static IP address?

Thanks,
Tim Booth




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34337t=34213
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: prefix lists .. [7:34312]

2002-02-04 Thread dk

Thanks for you help Comrades  - i  was just being dense again




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34339t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: WAN Switching [7:34035]

2002-02-04 Thread Mike Bernico

Paul,

Sorry it took me so long to reply to this.  Let me tell you about my
experience with Stratacom.  First of all I work at a large ISP where I am
responsible for most of the network design.  Three years ago our backbone
was DS-3.  We enthusiastically installed the BPX 8620.  The future seemed
bright for the BPX in the core of a network.  I LOVE the BPX and IGX and MGX
8220 (as much as any person can really love an MGX that is) , I think they
are great, stable, and well built boxes.  We ran happily for two years and
since then we've upgraded the backbone to OC-3 and now OC-12.  We are now
outgrowing the OC-12s. As you probably know, the BPX 8620 can only support
OC-12, and even then it's port density isn't that great. So what's a cisco
atm network to do?  We're happy with the ATM, we own millions of dollars
worth of it.  It would suck to move from autoroute to pnni, but if we have
to we will, so...simple, we try the MGX 8850.  The 8850, in my opinion, is
the biggest piece of crap cisco has ever made.  I regret buying two of them.
Whoever shipped these things to customers deserves a punch in the face for
every unit they sold.  Cisco has the resources to build a ATM switch based
on IOS, or BPX SWSW, but instead they use the MGX operating system.  Then
they ship it to me like it can be put in production, but the software was so
bad it should have had a alpha release label on it.  It was rushed to
market.  It currently goes OC-48.  When we bought it we had indications from
the sales people that it would in just 3 months go faster.  That project was
cancelled.  So here we are, stuck at OC-12 with the BPX. 

So what's our next move?  Well we will probably end up running an optical
network with a lambda of POS IP traffic and a lambda of OC-48 with a sonet
mux muxing in 8620 oc-12s until we can migrate our atm services to MPLS IP.


If there are less Stratacom jobs it's probably because there are lots of
people in a similar situation to ours.  I imagine most ISPs our size and
bigger and making a migration to a DWDM/POS type of network for lots of
reasons including the one I mentioned above.  Is WAN switching dead?  No
way.  MPLS is very similar to cell switching even in it's frame mode.  Is
ATM dead.  Maybe.  If your a CCNP Wan like me, I would say its time to start
working on your CCIP MPLS and get to get involved in optical.  Everything
moves in cycles.  Until the next cycle of frame/cell (lightwave) switched
networking comes around I would say to concentrate on other areas.  I feel
your pain, I have a lot of time invested in ATM, but technology changes, an
engineer has to change with it.

Mike


 -Original Message-
 From: Paul Jin [mailto:[EMAIL PROTECTED]]
 Sent: Saturday, February 02, 2002 5:56 AM
 To: [EMAIL PROTECTED]
 Subject: RE: WAN Switching [7:34035]
 
 
 Hey Mike,
 
 What do you think about the future of the stratacoms?  My 
 friends and I have
 been discussing it back and forth.
 
 Is the demand going to be there for this product in the 
 future or what? 
 Even on the new C/S CCIE track, you only get the written portion as an
 option for WAN stuff but in the lab, no stratacoms either.
 
 What do you guys use the Stratacoms for at work?  Especially 
 if you guys are
 running this product as a normal consumer/business and not as a telco.
 
 thanks,
 Paul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34338t=34035
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



AW: ISDN problems... [7:34324]

2002-02-04 Thread Laubstein, Stuart

The dialer list command seems to be gone...I am going to add 


dialer-list 1 protocol ip permit

This should work(at least to let everything threw). Or is there another way
to do this which is more secure? I am also trying the debug command--they
will not help this problem but have shown me another problem with the serial
interfaces so thanks for that suggestion. Actually any suggestion on
dialer-lists would alsom be welcome--ie what would it be a good idea and
what kind of timeout is normal--I am using 50 seconds right now. 

stu


-Urspr|ngliche Nachricht-
Von: McCallum, Robert [mailto:[EMAIL PROTECTED]]
Gesendet am: Monday, February 04, 2002 3:53 PM
An: [EMAIL PROTECTED]
Betreff: RE: ISDN problems... [7:34324]

If the router is not seeing interesting traffic within your idle period then
it should drop the line.  What is in your dialer-list to define what is
interesting traffic?

-Original Message-
From: Stuart Laubstein [mailto:[EMAIL PROTECTED]]
Sent: 04 February 2002 14:20
To: [EMAIL PROTECTED]
Subject: ISDN problems... [7:34324]


I have  a 3620 that has a problem with timing out. I have set the dialer
idle-timoue to 180 seconds--the router will keep the interface open for 180
seconds and then drop it for 9 seconds. I set it to 55 seconds and it did
the same timeout after 55 seconds--9 second drop. This only seems to happen
when the  remote router is a cisco router. I have tried debug isdn
events--but can only see the interface coming back up. Any idea on things I
can try would be much appreciated or on debug options that would narrow it
for me...

thanks



stuart




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34341t=34324
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: prefix lists .. [7:34312]

2002-02-04 Thread John Neiberger

Actually, this is not correct.  The first prefix list below would filter
any prefix whose first three octets are 201.1.5 and has a mask greater
than or equal to 29.  It would *not* filter 201.1.5.0/24 because the
mask is too short.  To do what is suggested, it would have to be this:

ip prefix-list greater seq 5 deny 201.1.5.0/24 le 29

Maybe I'm being to nitpicky this morning.  I need some more coffee!

John

 Georg Pauwen  2/4/02 6:45:24 AM 
Hi David,

here is an example of the le and ge in prefix lists:

ip prefix-list greater seq 5 deny 201.1.5.0/24 ge 29

This will deny anything from 201.1.5.0/24 thru 201.1.5.0/29
The advantage of the ge command is that now you need only one entry to
allow
or deny the entire range.

ip prefix-list less seq 10 permit 192.168.5.0/0 le 26

This will allow anything from 192.168.5.0/24 thru 192.168.5.0/26;
again, it
saves a lot of entries.

Hope this helps.

Regards,

Georg




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34340t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off Topic - tax deductions for studies [7:34270]

2002-02-04 Thread Keith Townsend

I'm cheating to try to make money so, does that mean I'm not cheating?

Seriously, I've done the sole-proprietor thing for a few years now.  And if
you do consulting work on the side there are a ton of things you can write
off and it's perfectly legal and ethical.  You would be surprised once you
start writing stuff off how hard it is to turn a profit when filing your
taxes.

BTW.. I'm not a accountant nor do I play one on television.

KLT
Routers are what tiggers do best you know!

Hire, Ejay  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 The best way to do that is to call youself a sole-proprietor of a
business.
 Then you can also deduct travel costs, supplis, etc.  This will also allow
 you to report any profits you may have made from independent consulting.
If
 you are like me, you could have made several thousand dollars on
consulting
 and still reported a loss.

 The rule is:  If you do it only to save on taxes it's tax evasion.  If you
 are trying to make money, It's tax planning!

 -Original Message-
 From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
 Sent: Sunday, February 03, 2002 1:02 PM
 To: [EMAIL PROTECTED]
 Subject: Off Topic - tax deductions for studies [7:34270]


 As I gather together my 2001 tax year materials, I thought I'd just offer
to
 the group that the cost of books, classes, home lab routers, etc. MAY be
tax
 deductible.

 there are provisions in the tax code for deducting the cost of those
 training materials and classes which contribute to your ongoing ability to
 perform your job.

 As always, you should check with a qualified accountant to assure that you
 are eligible and in compliance with the zillions of tax laws out there.

 Chuck




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34343t=34270
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Your Password at GroupStudy! [7:34303]

2002-02-04 Thread Gaz

Send me your online banking details and I'll answer anything :-)

Do a search on Cisco. Its all there in the certification section.


Gaz



Indra Moodley  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Any info on the CCIP Cetification

 Regards,

 Indra Moodley
 DNS Administrator
 Satellite Data Networks

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: Monday, February 04, 2002 10:59 AM
 To: [EMAIL PROTECTED]
 Subject: Your Password at GroupStudy!



 Welcome to GroupStudy.com.  Your username and password are as follows:
 Your Username: Lamagra
 Your Password: rkwfcnezvp


 You may login and change your password as desired.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34342t=34303
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VIP2 Issue [7:34330]

2002-02-04 Thread Georg Pauwen

Hello Joe,

Any system that has a VIP installed must have a v image (currently av or
jv). For example:

   rsp-ajv-mz.111-472*   

   rsp-jv-mz.111-472* 

Can you check what your IOS version is exactly ?

Regards,

Georg


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34345t=34330
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLan Switching [7:34298]

2002-02-04 Thread MikeS

I have a page with 3 VLAN links from Cisco already listed.

http://www.packetattack.com/cisco_documents.html

The links are at the bottom on the left side. This should give you a good
start. I also have a tutorial but it's for the 2900 series but it might be
worth your while to bookmark it.

MikeS


--
Find me at www-dot-packetattack-dot-com

Nisus  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hello All,

 This is my first post, I hope someone is able to help me out.  I
am
 currently in the Cisco CCNA path at my local school, ( Much fun ).
However
 I have a client who needs a VLan set up in a commercial park.  The switch
in
 question is a Cisco 4000 series.  I need to separate one port (for
security,
 or so they say) away from the rest of the ports.  The switch is connected
to
 a Cisco 2610 that feeds into a T-1.  I need to maintain a connection to
the
 T-1 line for internet connectivity.

 Any one know how, or does any one know a good web site or book where I can
 teach my self?

 Thank you in advance for all your assistance,
 Steve




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34344t=34298
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE starting pay [7:33899]

2002-02-04 Thread Godswill HO

He should be getting ready for retirement so that the youngs ones should
take over.

- Original Message -
From: Jeff Buehler 
To: 
Sent: Sunday, February 03, 2002 2:22 PM
Subject: Re: CCIE starting pay [7:33899]


 Change the original posters question to include:

 How about a CCNA, CCDA, CCNP, CCDP, CCIE with 16 years of Telecom
 experience.  (DS0,DS1, DS3, OC-3 to OC-192, DWDM)  Telco switch etc.
 (test, turn-up, trouble-shooting)and only physical experience with IT?




 Guy  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Well, more power to you!!!
 
  As far as what you should expect
 
  An entry level NOC position If you go in with the attitude that you
  should be at a Senior Level because of the IE, then you will be one of
the
  ones crying about how theres no jobs available... Which ever way you go,
I
  doubt your CCIE will have any more leverage than your CCNP will...
 Something
  that might be a good move for you is a latteral move within your ISP. in
 the
  AS support or something  But it sounds like you are the person the
  average user calls when they cant get the little E thing on their
desktop
 to
  do anything If thats your position, get out and move... If you
support
  the companies about their T1, then your in a good starting place...
 
  Best of luck, everyone has to start, but Im afraid the CCIE at this
stage
  may hurt you...
 
  Heres what I mean You are qualified for entry level... Your
  Certifications say you are over qualified Your work experience says
 your
  under qualified for your certs...
 
  What does an employer do? If they have delt with a CCIE before, they
  probobly wont consider you because they dont have the confidence in you
to
  control their multi million dollar network
 
  On the otherside... Your certifications would get you overlooked for the
  positions you would excel at quickly and allow you to get the
experience,
  because they dont think you would accept any offer for a lower
position...
 
  So your resume gets dumped
 
  Some important things to consider.
 
  I would not consider your resume if it had all of that, and all within
one
  year... My first instinct would be BRAIN DUMPS... CHEET SHEETS
  TRANSCENDERS, and I would throw your resume away
 
  Now someone with CCNA, maybe CCNP, but not too much, would get my
 attention
  for a good paying entry to mid level position
 
  CCIE is upper level position Cant put you in charge of my team of
  engineers with experience levels ranging from 2-10 years when you have
  0-1 No one would folllow you. It would not be a good team
anymore
  These are things beyond the technical aspect that management must face.
 
  Just think about it.. Im not trying to keep you from succeding, just
 trying
  to keep you from hurting yourself...
 
  Its like the small company that saves up their money for a Super Bowl
 Ad...
  They get 3 million responses and their 2 man company cant handle it
 WHat
  happens to them?
 
  They run themselves out of business... too much too fast...
 
  - Original Message -
  From: John Neiberger
  To:
  Sent: Thursday, January 31, 2002 4:31 PM
  Subject: Re: CCIE starting pay [7:33899]
 
 
   To go through those certs that quickly is very impressive!  If you
pass
   the lab, I still think you will get a lot of funny looks when you say
   you have no work experience, yet you are a CCIE.  As long as you're
   prepared for that, it's up to you to sell yourself.  It will be tough
   but I think if you can show that you really know your stuff, you
should
   be able to find a pretty good job.
  
   However, I wouldn't count on a huge salary right at the begging simply
   because of the certifications.
  
   Good luck!
   John
  
Joe Carr  1/31/02 12:33:02 PM 
   I'm going for my CCIE now and I have completed the CCNA,CCDA,CCNP,CCIE
   written all within the last five months. I currently work for an ISP
in
   tech
   support (help desk) and I do not not have NOC experience. I have a
   very
   impressive lab and plan to boe done with the CCIE lab in about four
   months.
   am just wondering what I should expect out there, I just turrend 21 so
   I
   still pritty young yet but I have gotten all of these certs plus an
   MCDBA
   and A+ in less then a year.
  
   Joe Carr
   A+, MCDBA, CCNA, CCDA, CCNP
   - Original Message -
   From: John Neiberger
   To: ;
   Sent: Thursday, January 31, 2002 12:47 PM
   Subject: Re: CCIE starting pay [7:33899]
  
  
I'd be surprised if you could find a CCIE with no work experience.
   Even
if you could, they wouldn't be worth that much, IMHO.  Assuming I
   pass
in April, I'll have just over three years experience and a CCIE
certification.  What does that mean?
   
Well, it means that if I leave my current job to look for work
elsewhere, I'll be going up against CCIEs with 5-7+ years experience
plus degrees.  Someone with only 

logging the access on a router [7:34346]

2002-02-04 Thread Dion, Thierry

Hello
 
I'm trying to log access on a router (who and when) with a simple
configuration ( without tacacs+ or radius)
how i can do this ?

Kind Regards.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34346t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Multicast over Frame relay [7:34098]

2002-02-04 Thread Mahesh Manjanatha

I was searching on Cisco Web site extensively for reference to wheather we 
can do multicast if source is on one spoke and reciever on other. But could 
npt find any document. I could however find a document describing a 
situation in which source is on Hub and receivers on spokes, using ip pim 
nbma-mode.

Has any one successfully completed a ping from a spoke router to a receiver 
on the other spoke of frame. I have tried every possible way by moving RP on 
to various points but could not do it !!!


Veerender



From: McCallum, Robert 
Reply-To: McCallum, Robert 
To: [EMAIL PROTECTED]
Subject: RE: Multicast over Frame relay [7:34098]
Date: Sun, 3 Feb 2002 17:21:03 -0500

John,

I actually tried the manual RP on R5 and couldn't get it to work so went
with the R5 being the AUTo-rp and R5 being the mapping agent-still
didn;t work.  So I then went and moved the mapping agent to R6  still
didn't work.  SO, I then removed and went back to the manual RP this time
however
I put a multicast join statement on R3.

For those of you who don;t have the lab it goes like this (IP addresses are
different)


224.1.1.1 E0-R13-E1-E0-R6-s0/0(frame)-s0/0(frame)R5-s0/0.1(frame
p-p)-s0/0.1(r3)-E0 (my multicast group.ie 224.3.3.3)

R5 was configured as the manual RP so everyone knew how to get to the RP
address.

Now R3 ping 224.1.1.1 NOT A CHANCE
R5 ping 224.1.1.1 NOT A CHANCE
R6 ping 224.1.1.1 NAE problems

Now for the really odd part

R13 ping 224.3.3.3 NAE problems
R6 ping 224.3.3.3 NAE problems
R5 ping 224.3.3.3 NAE probelms


Conclusion : I hate multicasting   How can it possibly work one way but
not the other??




-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: 01 February 2002 23:47
To: [EMAIL PROTECTED]
Subject: RE: Multicast over Frame relay [7:34098]


It's funny, I had the *exact* problem with bootcamp lab 20.  I
eventually got it to work but I had all sorts of problems.  I wasn't
able to get Auto-RP to work at all, for some reason, so I had to
manually define it.  Still, I really had some issues that irritated me
but they were so intermittent I wasn't able to nail them down.

For instance, toward the beginning of my configurations I was able to
ping the multicast address from R5.  I thought that was pretty cool so I
moved on to--IIRC--R1 and R3.  I couldn't get them to work so I went
back to R5 and discovered it could no longer ping the multicast
address.

One thing I kinda remember--someone please correct me if I'm wrong--is
that you need to have a single RP for the multicast group.  When I first
started the configuration, each subnet had an RP and that didn't seem to
work.  Specifically, on the R6--R13 subnet I didn't assign an RP at all,
which caused a problem.  Then I made R13 the RP and it still didn't
work.  Then I made R5 the RP for everyone and that seemed to resolve my
issue.

I really need to get cracking on this multicast stuff, though.  I feel
like I'm just scratching the surface.

John

  McCallum, Robert  2/1/02 2:08:10 PM 
I ran into the exact sma problem whilst doing bootcamp lab 20.  I ended
up
abandoning it but I will go back to it before next Friday (my date
with
destiny).  What I should ask you to check is do a ping 224.x.x.x or
whatever
the group was, then go to the router which has the igmp join group
command
on it and do a show ip mroute.  Check to see where the router see the
RPF
for the outgoing interface of the router you are trying to ping from.
My
fuess is that it will be out of the wrong interface or something like
that.
Also please ensure that you have the broadcast keyword after any frame
maps
you have in the process.

Cheers

-Original Message-
From: Mahesh Manjanatha [mailto:[EMAIL PROTECTED]]
Sent: 01 February 2002 18:56
To: [EMAIL PROTECTED]
Subject: Multicast over Frame relay [7:34098]


I am sorry to post same question second time over here. I didnt get
any
response to my earlier posting.

I am trying to do multicast over frame relay in Hub and Spoke topology.
I
am using IP PIM SPARSE mode with IP PIM NBMA MODE.  I have Hub as as
RP.
I have made one of the spoke, member of a IGMP group. I am trying to
PING
that group address from other spoke, but I am not getting any response.
I
am able to ping that group from Hub router.

Is there any thing else I need to configure to make it work ?

Thanks

Veerender Attri









Get your FREE download of MSN Explorer at http://explorer.msn.com.
_
Send and receive Hotmail on your mobile device: http://mobile.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34285t=34098
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Additions to CCIE Ramp;amp;S lab [7:34136]

2002-02-04 Thread nrf

Aw come on, Brad.  It's not a singular switch exam.  What about the
Token-ring switch?  You know that Cisco added that thing to inject more
realism into the lab.

More seriously, I don't think you really need to have bigger, badder boxes.
Just more of them.  Honestly, there are a limited number of  things you can
do with 6 routers and 2-3 switches.  Heck, it's been a very long time since
I've worked on a production network that had that few boxes.  Granted, those
boxes on the exam are very 'busy'.  But still, if you could get a network
of, say, 20-25 boxes going, the exam would be a lot more realistic.
Probably wouldn't cost you as much as a single 6500 IDS blade either.


Brad Ellis  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 I really dont think Cisco is going to add another switch to each rack.  I
 was under the impression they were trying to keep costs down for the CCIE
 lab exam, not increase costs substantially.  Maybe Im way off base here,
can
 anyone (or any proctor) that reads this let me know if I'm off base.

 I personally think it would be GREAT to have another switch or two in the
 lab.  After all, it is a ROUTING and SWITCHING certification, not a
Routing
 and Switch (singular) certification.  :)

 Throw a couple of 12000's in there, add an IDS blade to the 6500, throw in
a
 bunch of layer 3 stuff with the 6500 and that would make for an
interesting
 lab, wouldnt it?

 thanks,
 -Brad Ellis
 CCIE#5796 (RS / Security)
 Network Learning Inc
 [EMAIL PROTECTED]
 used Cisco gear:  www.optsys.net
 CCIE Labs, racks, and classes:  http://www.ccbootcamp.com/quicklinks.html

 Scott H.  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  I have heard rumors of this, but no confirmation.  I have a week to go
and
  sure would like to know if this is something I need to worry about.
 
  Tauseef Nagi  wrote in message
  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   Cisco's europe office in Brussels, Begium.
  
   Tauseef
  
   Scott H.  wrote in message
   [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
source?
   
Tauseef Nagi  wrote in message
news:[EMAIL PROTECTED]...
 Hi all,

 Latest information coming out of Cisco regarding CCIE RS lab is
 that
Cisco
 will be adding more (complex) switching material to the lab
 scenarios.
This
 will include two switches with routing engines, trunking between
   switches,
 pvlans, multicasting on switches, etc.
 These new scenarios will began to appear in April of this year at
 the
 earliest(if not already being tested) and formalized by July of
this
   year.
 Can anyone confirm this?

 Tauseef




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34282t=34136
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: WAN Switching [7:34035]

2002-02-04 Thread nrf

Actually I believe that WAN-switching is a tremendously useful skill,
because it is difficult to commoditize the way that, say, IOS has been
commoditized.  A full discussion of this can rapidly degenerate into a bunch
of economics supply and demand curves, but basically it's very difficult for
some novice to really learn WAN-switching.  There's a large barrier to
entry.  Anybody can just pick up a couple of routers off Ebay on the cheap,
learn IOS, and then compete for a basic Cisco networking job.  Try doing
that with a couple of WAN-switches - it's basically a no-go.  This serves as
pretty good job security for the guys who know WAN-switching, as they don't
have to put up with relentless commoditization of skills that the IOS guys
do.

On the other hand, if you want to learn Wan-switching, then why Stratacom?
It is almost certainly better to learn, say, Lucent/Cascade or Nortel
Wan-switching - something that has a higher shelf life.  Anybody who's
followed Stratacom should have noted that Cisco's support of the platform
was lukewarm at best, and should therefore have seen the handwriting on the
wall.

While some of you might object to the above paragraph with a financial
argument by pointing out the strong balance sheet of Cisco vs. the horrific
ones of Lucent and Nortel, I believe that argument is neither here nor
there.  Sure, Cisco is doing well financially.  But not Cisco Stratacom,
which I'm sure is a drag on their bottom line.  Conversely, while Lucent and
Nortel are doing badly financially, their Wan-switching divisions are doing
well (in fact, I believe Wan-switches are one of the few divisions that
still generate decent profit).   Lucent and Nortel therefore have had a much
greater incentive to develop and promote their Wan-switches than Cisco has
for Stratacom.





Paul Jin  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Well, I think the earlier the stratacom experts agree, the better it is
for
 them.  That is why my friends are all studying something else.  Sure, when
 the economy clears up, there might be some jobs doing wan switching but it
 looks like most telcos over planned for both equipment and staff.  So
there
 will be enough stratacom jobs
 for a while but probably only for the people that are keeping their
 positions.

 -paul

 nrf wrote:
 
  Exactly.  You pretty much hit it right on the head - demand is
  so low that
  Cisco's decided that not only can it not support a CCIE
  program, it can't
  even support a CCNA program anymore.
 
  I don't want to be unduly harsh, as I believe all technologies
  ultimately
  have their proper place.  But let's face it.  The Stratacom
  acquisition
  basically sucked for Cisco.  Sorry to put it so bluntly, as I
  know there are
  some Stratacom experts out there who will object, but you know
  in your
  hearts that it's true.   Cisco hasn't put major development
  muscle into the
  Stratacom line ever since the last major hardware refresh, the
  MGX8850,
  which came out more than 2.5 years ago.  Rumor has it that
  Cisco would
  really like to sell Stratacom off, the problem of course being
  finding a
  buyer.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34316t=34035
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE starting pay [7:33899]

2002-02-04 Thread Brad Ellis

Marshal,

I totally agree, I dont think it's impossible for a candidate to pass
without real-world hands-on experience.  IMHO the program is actually quite
a bit harder now, than it was a couple years ago. The program DID start as a
way to test for hands-on experience, but the program has gone a different
direction in the past couple years.

There's such a wide/diverse and focused consulting/implementation field, I
think it would be extremely difficult to focus on testing hands-on.  There
would have to be 30+ different CCIE specialization programs (with a much
larger variety of hardware/software differences used for each specialization
as well).  It would be an administrative nightmare for Cisco to administer
such a program.

-Brad Ellis
CCIE#5796 (RS / Security)
Network Learning Inc
[EMAIL PROTECTED]
used Cisco gear:  www.optsys.net
CCIE Labs, racks, and classes:  http://www.ccbootcamp.com/quicklinks.html

Marshal Schoener  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 I disagree.
 There is not a Cisco test, nor any technical test for that matter that a
 person can't pass with a whole lot of studying and some lab time.

 Yes the CCIE lab is extremely difficult.  But to say it's impossible to
pass
 without 'real world' experience is just wrong.

Regards,

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: Monday, February 04, 2002 6:09 AM
 To: [EMAIL PROTECTED]
 Subject: RE: CCIE starting pay [7:33899]


 Is there such
 D CCIE with no experience
 I highly doubt that ladies and gents, The whole point of a CCIE Lab is to
 prove the experience you have gained in the field and how you go about
 building and troubleshooting a network.
 Friends of mine that are good engineers with extensive experience  failed
 the exam first time.
 The amount of time you get in the lab exam gives you no time to refer back
 to the documentation cd or to even think to hard!,  you have to know
exactly
 what to do and  how to do it and you have to do as  fast as  you possibly
 can.
 Anyone that has attempted the lab knows how draining it is both physically
 and especially mentally. It is not easy!
 For those of us attempting the lab and for those that have already
achieved
 there numbers we know we cannot do it without hands on and a good
 troubleshooting base.
 Good Luck

 -Original Message-
 From: Steve Smith [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 31, 2002 9:22 PM
 To: [EMAIL PROTECTED]
 Subject: RE: CCIE starting pay [7:33899]


 Man that's an insult. A CCIE with no experience. I guess I will go back
 to building race cars.

 -Original Message-
 From: Joe Carr [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 31, 2002 12:27 PM
 To: [EMAIL PROTECTED]
 Subject: CCIE starting pay [7:33899]


 what would be the average starting pay for CCIE with no work experience.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34325t=33899
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: WAN Switching [7:34035]

2002-02-04 Thread nrf

Well, I subscribe to the theory that companies are much more accountable for
their own performance within a market than they are for market-wide trends.
Cerent and Ciena are therefore much less serious errors than Stratacom.

What I mean by that is Cerent and Ciena (especially Cerent) were especially
well-executed, albeit very expensive, strategies in that Cisco did
successfully leverage their vaunted sales and marketing force to push those
products.  Cerent gear is a leading, if not the leading metro ADM solution
in the world, and Ciena is perhaps the strongest pure-play optical vendor of
all.  It's just that the entire optical market has collapsed.  In
retrospect, it seems obvious that the optical market would collapse based on
capacity utilization trends, so you could argue that Cisco should have
predicted this and not gotten in, or at least have not paid so much to get
in.   But I don't think you can hold Cisco totally responsible.  They did
what they intended to do in that they finally got themselves a credible
optical story.  It's just that the whole optical market went in the toilet.

Compare that to Stratacom, where Cisco achieved basically none of the goals
it set out to do.  I believe Stratacom has lost share every year since '98
or so.  The TGX platform was cancelled more than 2.5 years ago, with nothing
on the horizon to replace it, and the MGX 8850 is clearly no match for the
latest stuff from the competition.  The acquisition was poorly planned and
poorly executed.  From what I can tell, Cisco garnered basically none of the
advantages it thought it would get from the acquisition.  This is why
Stratacom was such a poor move.  Sure, not as bad as, say, Monterey (if they
weren't going to use the ONS15900, why buy it?).  But still pretty bad.




Chuck Larrieu  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 might one presume that the Cerent acquisition and the Ciena
 partnership/investment were considered the future directions in this area?

 Talk about buy high sell low.

 Chuck


 nrf  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Exactly.  You pretty much hit it right on the head - demand is so low
that
  Cisco's decided that not only can it not support a CCIE program, it
can't
  even support a CCNA program anymore.
 
  I don't want to be unduly harsh, as I believe all technologies
ultimately
  have their proper place.  But let's face it.  The Stratacom acquisition
  basically sucked for Cisco.  Sorry to put it so bluntly, as I know there
 are
  some Stratacom experts out there who will object, but you know in your
  hearts that it's true.   Cisco hasn't put major development muscle into
 the
  Stratacom line ever since the last major hardware refresh, the MGX8850,
  which came out more than 2.5 years ago.  Rumor has it that Cisco would
  really like to sell Stratacom off, the problem of course being finding a
  buyer.
 
  Paul Jin  wrote in message
  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   Also, the big question is, who is going to keep buying stratacom
 switches
  in
   the future?
  
   If Cisco thought that the demand for this product was huge, I do not
 think
   they would have cancelled the program.  I have heard some reasons why
 the
   CCIE track was cancelled was due to the fact that even people working
on
  the
   switches could not gain access to the equipment, just for the lab
 purpose.
   But why cancel the NP/NA track.
  
   Probably, people that needed these boxes already have it.  They
already
   either have more than they need for future expansion or since big
chunk
 of
   the customers were telcos, they are in bad financial shape or going
out
 of
   business.
  
   Lucky for me, I only got the the CCNA-Wan part before they cancelled
the
   program.  I have other buddies that actually work on our backbone and
 they
   went through to NP.  And then it was cancelled.  Now they are all
 studying
   routers.
  
   - Paul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34319t=34035
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Limit Internet BW [7:34201]

2002-02-04 Thread Hire, Ejay

access-list 1 permit ip.of.sit.e1 (these are the sites you are
rate-limiting.)
access-list 1 permit ip.of.sit.e2 (these are the sites you are
rate-limiting.)

interface serial x/x (the interface closest to the site you want to rate
limit)
rate-limit input access-group 1 XXX YYY ZZZ conform-action transmit
exceed-action drop
rate-limit output access-group 1 XXX YYY ZZZ conform-action transmit
exceed-action drop


XXX - Normal speed in bps (multpiples of 8)
YYY - Normal Burst speed. (supposedly the minimum is XXX/2000, but I can't
test it right now.)
ZZZ - Max Burst speed.

For more info, see this link on Cisco.
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos
_r/qrfcmd8.htm



-Original Message-
From: Fernando Shiran [mailto:[EMAIL PROTECTED]]
Sent: Saturday, February 02, 2002 10:32 AM
To: [EMAIL PROTECTED]
Subject: Limit Internet BW [7:34201]


Hello,

I do have a requirment to limit Internet Bandwidth among few sites. I do
have a T1 and want to allow site A to be access bandwidth not more than 256K
while site B can access full bandwidth without restricting.

I do have a Cisco 2620 as the Gatway router. All ideas greatly appreciated.

Regards
Shiran




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34329t=34201
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: prefix lists .. [7:34312]

2002-02-04 Thread Erhan Kurt

Think Classless..


Erhan



--- McCallum, Robert
 wrote:
 gt = greater than so gt /23 = subnets with a mask of
 above /23.
 lt = less than so lt /17 = subnets with a mask less
 than /17.
 
 so using prefix lists can you give me an answer
 which would do the following:-
 
 1. Deny subnets of class B networks
 2. Deny supernets of Class C networks
 3. Deny networks starting 193.x.x.x
 4. permit all else.
 
 For the 1st one ask yourself what makes a class B
 network a Class B network?  From this you will find
 out what your /x prefix should be.  Then what mask =
 subnets of a class B network gt or lt.
 
 and so on
 
 -Original Message-
 From: dk [mailto:[EMAIL PROTECTED]]
 Sent: 04 February 2002 12:07
 To: [EMAIL PROTECTED]
 Subject: prefix lists .. [7:34312]
 
 
 Can anyone help me get a handle on the ge and le
 options on  prefix
 lists?
 I find them totaly confusing.
 
 Thanks in advance for any advice offered
 
 David

_
 CCIE Security list:
 http://www.groupstudy.com/list/security.html

__
 To unsubscribe from the CCIELAB list, send a message
 to
 [EMAIL PROTECTED] with the body containing:
 unsubscribe ccielab


__
Do You Yahoo!?
Great stuff seeking new owners in Yahoo! Auctions! 
http://auctions.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34327t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCCNP - routing exam [7:34347]

2002-02-04 Thread Rafay Aslam

I am going to take my routing exam in soon., if some one has good
infortmation please provide me.

thanks,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34347t=34347
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cat2924 sending out broadcast message [7:34024]

2002-02-04 Thread Phil Barker

--- Priscilla Oppenheimer  wrote:
 I'm impressed. Wouldn't it be cool if that skill
 were required for CCIE? 

I only wish !!! It would make my life a lot easier.

 ;-) It's certainly more useful than being able to
 hand decode Token Ring
 RIFs?

TRing RIF decodes are another of my pet hates. These
questions only prove 2 things in my opinion. You can
convert hex to binary and you have a memory !!!

Phil.


 
 Priscilla
 
 At 07:02 AM 2/1/02, Phil Barker wrote:
 Version 4:
 HLEN = 5: Normal IP Header (5 losts of 32 bits)
 Service Type 0: Normal.
 Total Length = 328 bytes. Thus data length = 308
 bytes.
 Identification = 51514. Flags  Offset = 0.
 TTL = 255.
 Protocol 17: UDP.
 Header checksum 0xf16a.
 Source IP : 0.0.0.0
 Dest IP : 255.255.255.255 b/cast
 Src Port 68: bootp client
 Dest Port 67: bootp server
 Message Length = 308 (length - IP header)
 No Checksum:
 
 
 4500 0148 c93a  ff11 f16a  
   0044 0043 0134  0101 0600
   a3c6     
     0010 0b3c 3580 
        
 
 
 Bootp client to server.
 
 Looks like because it has no source address
 0.0.0.0,
 it is trying to find it via a bootp server. I think
 this operates like RARP except it is routable !!!
 
 Not totally sure though.
 
 Regards,
 
 Phil.
 
   --- Tay Chee Yong  wrote:  Hi
 all,
  
   Just like to enquire some issue regarding
 Catalyst
   2924
  
   I have a pretty old Catalyst 2924 (C2900XL-H-M)
   switch in my office running
   IOS Version 11.2(8)SA3, however, it seems that
 the
   switch is constantly
   sending out broadcast messages as captured by
   tcpdump.
  
   17:14:51.053952 0:10:b:3c:35:80 Broadcast ip
 342:
   0.0.0.0.bootpc 
   255.255.255.255.bootps: secs:41926 [|bootp]
   4500 0148 c93a  ff11 f16a  
     0044 0043 0134  0101 0600
     a3c6     
       0010 0b3c 3580 
          
   
  
   I did not configure any IP address on Vlan 1 on
 the
   switch, but I did
   segment the switch to contain 2 more vlans (Vlan
 2,
   3) However, I also have
   some machines residing on Vlan 1.
  
   However, the broadcast problem disappear after I
   move out the vlan1
   machines into another newly created Vlan (vlan
 4),
   after I had shutdown
   Interface Vlan 1.
  
   Can anyone care to enlighten me? Thanks.
  
   Regards,
   Cheeyong
 [EMAIL PROTECTED]
 
 __
 Do You Yahoo!?
 Everything you'll ever need on one web page
 from News and Sport to Email and Music Charts
 http://uk.my.yahoo.com
 
 
 Priscilla Oppenheimer
 http://www.priscilla.com
[EMAIL PROTECTED] 

__
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34349t=34024
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Named Method Lists aaa [7:34351]

2002-02-04 Thread Luca Vanini

Hello, I've a problem configuring Named method Lists for AAA Authorization.
I've succesfully configured two Methods: RADIUS and TACACS.
No problem with authentication and accounting, but if I input this command
for authorization:
 aaa authorization network RAD group radius
the sh running command outputs:
 aaa authorization network default group radius group radius (it is wrong,
why??)

IOS version is 12.1.6 (c5200-is-l.121-6.bin)
AS5200 with 16MB RAM and 16MB Flash

Same problem with a 2503 (IOS 12.1.6).

Can someone tell me if the upgrade to IOS 12.1.9 can be a solution?
Many thanks
Luca


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34351t=34351
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: prefix lists .. [7:34312]

2002-02-04 Thread Georg Pauwen

John,

you are absolutely right, my own interpretation of my own example was wrong.
I hope I could make the point that the ge and le refer to whatever is less,
equal or greater than the number that is configured with it. By the way,
coffee sounds good...

Regards,

Georg


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34350t=34312
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ip mroute-cache [7:34352]

2002-02-04 Thread to cisco new

i was wondering if someone can explain 'ip mroute-cache '

how does this differ from 'ip route-cache'?  does the load balancing (per
packet/per destination)stay the same with mroute-cache enabled?

thanks 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34352t=34352
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE starting pay [7:33899]

2002-02-04 Thread [EMAIL PROTECTED]

I have to jump in here.  The original post said he had an impressive lab.
If he uses the lab and works through scenarios, isn't this what the rest of
you are calling experience.  He doesn't get paid to do it, but he probably
would end up with more experience than some of the people that we all work
with collecting a pay check.

IMHO
Dean Whitley

p.s.

Joe, from the sounds of your post and initiative to achieve all those certs,
I think a company would be foolish to not hire someone like you.


-Original Message-
From: Brad Ellis [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 11:10 AM
To: [EMAIL PROTECTED]
Subject: Re: CCIE starting pay [7:33899]


Marshal,

I totally agree, I dont think it's impossible for a candidate to pass
without real-world hands-on experience.  IMHO the program is actually quite
a bit harder now, than it was a couple years ago. The program DID start as a
way to test for hands-on experience, but the program has gone a different
direction in the past couple years.

There's such a wide/diverse and focused consulting/implementation field, I
think it would be extremely difficult to focus on testing hands-on.  There
would have to be 30+ different CCIE specialization programs (with a much
larger variety of hardware/software differences used for each specialization
as well).  It would be an administrative nightmare for Cisco to administer
such a program.

-Brad Ellis
CCIE#5796 (RS / Security)
Network Learning Inc
[EMAIL PROTECTED]
used Cisco gear:  www.optsys.net
CCIE Labs, racks, and classes:  http://www.ccbootcamp.com/quicklinks.html

Marshal Schoener  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 I disagree.
 There is not a Cisco test, nor any technical test for that matter that a
 person can't pass with a whole lot of studying and some lab time.

 Yes the CCIE lab is extremely difficult.  But to say it's impossible to
pass
 without 'real world' experience is just wrong.

Regards,

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: Monday, February 04, 2002 6:09 AM
 To: [EMAIL PROTECTED]
 Subject: RE: CCIE starting pay [7:33899]


 Is there such
 D CCIE with no experience
 I highly doubt that ladies and gents, The whole point of a CCIE Lab is to
 prove the experience you have gained in the field and how you go about
 building and troubleshooting a network.
 Friends of mine that are good engineers with extensive experience  failed
 the exam first time.
 The amount of time you get in the lab exam gives you no time to refer back
 to the documentation cd or to even think to hard!,  you have to know
exactly
 what to do and  how to do it and you have to do as  fast as  you possibly
 can.
 Anyone that has attempted the lab knows how draining it is both physically
 and especially mentally. It is not easy!
 For those of us attempting the lab and for those that have already
achieved
 there numbers we know we cannot do it without hands on and a good
 troubleshooting base.
 Good Luck

 -Original Message-
 From: Steve Smith [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 31, 2002 9:22 PM
 To: [EMAIL PROTECTED]
 Subject: RE: CCIE starting pay [7:33899]


 Man that's an insult. A CCIE with no experience. I guess I will go back
 to building race cars.

 -Original Message-
 From: Joe Carr [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 31, 2002 12:27 PM
 To: [EMAIL PROTECTED]
 Subject: CCIE starting pay [7:33899]


 what would be the average starting pay for CCIE with no work experience.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34348t=33899
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: logging the access on a router [7:34346]

2002-02-04 Thread Alex Lei

Hello,

You can use access lists to log it. You can use either logging buffered
(limited in number of entries) or use a dedicated log server.

Alex


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34353t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ip mroute-cache [7:34352]

2002-02-04 Thread Vincent Miller

To configure IP multicast fast switching or multicast distributed switching
(MDS), use the ip mroute-cache command in interface configuration mode. To
disable
either of these features, use the no form of this command.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34354t=34352
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE starting pay [7:33899]

2002-02-04 Thread Eric Rivard

Lets do the math on this:
 A+ Cert= 2 tests
 MCDBA= 5 tests
 CCNA= 1 test
 CCDA= 1 test
 CCNP= 4 test
 CCIE Written= 1 test
Total in LESS than a year= 13 tests! WOW!

Yes that is impressive but I'm wondering how much can someone remember of
each test if they have taken that many in such a short period of time? If it
is possible, while being able to retain most of it, that is great! What
saddens me most is that a lot of people in the industry do stuff or try to
obtain certifications with the main goal of money. Most people I talk to say
they are going into the field because they can make more money are want to
obtain a cert for money. What happened to wanting to excel in your field
because you like what you do or because you want to be the best you can be.
Yes the field is saturated but only the people that have a love for what
they do and want to excel for personal knowledge will rise to the top.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 9:24 AM
To: [EMAIL PROTECTED]
Subject: RE: CCIE starting pay [7:33899]


I have to jump in here.  The original post said he had an impressive lab.
If he uses the lab and works through scenarios, isn't this what the rest of
you are calling experience.  He doesn't get paid to do it, but he probably
would end up with more experience than some of the people that we all work
with collecting a pay check.

IMHO
Dean Whitley

p.s.

Joe, from the sounds of your post and initiative to achieve all those certs,
I think a company would be foolish to not hire someone like you.


-Original Message-
From: Brad Ellis [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 11:10 AM
To: [EMAIL PROTECTED]
Subject: Re: CCIE starting pay [7:33899]


Marshal,

I totally agree, I dont think it's impossible for a candidate to pass
without real-world hands-on experience.  IMHO the program is actually quite
a bit harder now, than it was a couple years ago. The program DID start as a
way to test for hands-on experience, but the program has gone a different
direction in the past couple years.

There's such a wide/diverse and focused consulting/implementation field, I
think it would be extremely difficult to focus on testing hands-on.  There
would have to be 30+ different CCIE specialization programs (with a much
larger variety of hardware/software differences used for each specialization
as well).  It would be an administrative nightmare for Cisco to administer
such a program.

-Brad Ellis
CCIE#5796 (RS / Security)
Network Learning Inc
[EMAIL PROTECTED]
used Cisco gear:  www.optsys.net
CCIE Labs, racks, and classes:  http://www.ccbootcamp.com/quicklinks.html

Marshal Schoener  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 I disagree.
 There is not a Cisco test, nor any technical test for that matter that a
 person can't pass with a whole lot of studying and some lab time.

 Yes the CCIE lab is extremely difficult.  But to say it's impossible to
pass
 without 'real world' experience is just wrong.

Regards,

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: Monday, February 04, 2002 6:09 AM
 To: [EMAIL PROTECTED]
 Subject: RE: CCIE starting pay [7:33899]


 Is there such
 D CCIE with no experience
 I highly doubt that ladies and gents, The whole point of a CCIE Lab is to
 prove the experience you have gained in the field and how you go about
 building and troubleshooting a network.
 Friends of mine that are good engineers with extensive experience  failed
 the exam first time.
 The amount of time you get in the lab exam gives you no time to refer back
 to the documentation cd or to even think to hard!,  you have to know
exactly
 what to do and  how to do it and you have to do as  fast as  you possibly
 can.
 Anyone that has attempted the lab knows how draining it is both physically
 and especially mentally. It is not easy!
 For those of us attempting the lab and for those that have already
achieved
 there numbers we know we cannot do it without hands on and a good
 troubleshooting base.
 Good Luck

 -Original Message-
 From: Steve Smith [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 31, 2002 9:22 PM
 To: [EMAIL PROTECTED]
 Subject: RE: CCIE starting pay [7:33899]


 Man that's an insult. A CCIE with no experience. I guess I will go back
 to building race cars.

 -Original Message-
 From: Joe Carr [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 31, 2002 12:27 PM
 To: [EMAIL PROTECTED]
 Subject: CCIE starting pay [7:33899]


 what would be the average starting pay for CCIE with no work experience.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34355t=33899
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Long....RE: CCIE starting pay [7:33899]

2002-02-04 Thread John Neiberger

After receiving an email from Joe, I would agree that he sounds like a
very intelligent person with tremendous initiative.  I'd like to
differentiate between lab experience and OTJ experience.

Learning to configure OSPF, EIGRP, and BGP at home is one thing.  

Going to a customer site who has 200 nodes, half of which were acquired
from another company and are running OSPF while half are running EIGRP
and all areas need to be able to communicate with each other and also
have multiple redundant and area-diverse connections to different
internet providers using BGP...that is experience.  :-)  

Then, after a decision has been made to use a single IGP, make a choice
between EIGRP and OSPF, or even IS-IS.  Justify your reasoning and then
determine a migration plan that minimizes customer downtime and
guarantees that all areas have internet access at all times even if
their local provider goes down.

Help the customer to coordinate with ARIN and service providers to get
the necessary address space and an assigned autonomous system number.

When a given area has multiple connections to the same ISP, attempt to
influence routing in the ISP so that it takes the closest entrance into
your network for that user.  Attempt to influence routing within each
ISP so that you increase the chances that optimal routing will occur. 
Make certain that you only advertise the necessary prefixes while
filtering all others.  Configure routing within each area to take the
closet exit possible, within reason.

Provision and order the necessary circuits after getting quotes from
several providers.  Make a determination when and if point to point
links could/should be used and where frame relay or ATM would be most
suitable.  Make sure that you have plenty of room for growth and enough
bandwidth to support video conferencing over IP for certain sections of
this network.  Determine which type of traffic shaping, queueing, and/or
rate limiting might be necessary and where it would be most useful.

Upgrade routers and switches as necessary, making sure that you won't
run into processor limitations during high traffic loads and you have
enough WIC and NM slots available to support the connections you
require.  Make sure you select an IOS that supports those modules and
software features you'll needwhile minimizing the number of bugs
that might affect you.

Determine a backup plan for each area and include ISDN backup links,
making sure the backup links can pass both IP, IPX, and some DLSw+  but
do not pass streaming video and other non-essential traffic.  Create a
network infrastructure disaster recovery plan for each area and document
your procedures.

And that's just the tip of the iceberg, and *that's* what I mean by
experience.  Certainly, your experience doesn't need to be this
comprehensive and detailed, I'm simply exaggerating to make a point. 
There is a *huge* difference between learning to configure this stuff at
home and actually implementing it in the real world.

Granted, this would be a huge task but it's one that a CCIE along with
a group of engineers would be expected to be able to handle.  A
CCIE--even a highly intelligent and motivated one--with no experience
would have difficulty with this.

John

 [EMAIL PROTECTED]  2/4/02 10:23:37 AM 
I have to jump in here.  The original post said he had an impressive
lab.
If he uses the lab and works through scenarios, isn't this what the
rest of
you are calling experience.  He doesn't get paid to do it, but he
probably
would end up with more experience than some of the people that we all
work
with collecting a pay check.

IMHO
Dean Whitley

p.s.

Joe, from the sounds of your post and initiative to achieve all those
certs,
I think a company would be foolish to not hire someone like you.


-Original Message-
From: Brad Ellis [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 04, 2002 11:10 AM
To: [EMAIL PROTECTED] 
Subject: Re: CCIE starting pay [7:33899]


Marshal,

I totally agree, I dont think it's impossible for a candidate to pass
without real-world hands-on experience.  IMHO the program is actually
quite
a bit harder now, than it was a couple years ago. The program DID start
as a
way to test for hands-on experience, but the program has gone a
different
direction in the past couple years.

There's such a wide/diverse and focused consulting/implementation
field, I
think it would be extremely difficult to focus on testing hands-on. 
There
would have to be 30+ different CCIE specialization programs (with a
much
larger variety of hardware/software differences used for each
specialization
as well).  It would be an administrative nightmare for Cisco to
administer
such a program.

-Brad Ellis
CCIE#5796 (RS / Security)
Network Learning Inc
[EMAIL PROTECTED] 
used Cisco gear:  www.optsys.net 
CCIE Labs, racks, and classes: 
http://www.ccbootcamp.com/quicklinks.html 

Marshal Schoener  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 I disagree.
 There is not a 

Re: OSPF across PIX [7:24608]

2002-02-04 Thread Tom Martin

Pat,

Getting a PIX to pass OSPF would require one of two methods:  Routing or
NAT.  First, the PIX isn't a router, and if it were it still wouldn't work
since OSPF LSAs are sent to the non-routable 224.0.0.5/6 addresses (as
well as have a TTL of 1).  NAT is not a viable alternative as NAT will not
change the payload of OSPF packets, a requirement as networks would appear
differently on one side than on the other.

An alternative, although it probably introduces an unwanted security
problem is to allow an IP-IP or GRE tunnel through the firewall.  With
OSPF packets encapsulated inside the tunnel NAT becomes a non-issue.  Of
course, if you implement this type of solution you could encrypt data sent
through the tunnel which is better than nothing -- but I would not
implement a solution like this for long-term use.

- Tom


In article , Patrick Ramsey
 wrote:

 First thought is that this will not work.  imagine this and tell me what
 you think.
 
 In pix, your acl's are based on tcp/udp/icmp these all are
 protocols, like ospf is it's own protocol... since ospf (protocol 89) is
 separate, opening up a port dealing with tcp/udp/icmp would be
 completely useless.
 
 -Patrick
 
 pat  10/29/01 11:01PM 
 Does anybody has any ideas on how to run OSPF across firewall. What
 ports to be open  how to make router esablish nighbour relations across
 firewall.
 
 Any thought on this will be greatly appriciated.
 
 Thanks,
 patterson.
 
 __ Do You Yahoo!? Make a
 great connection at Yahoo! Personals. http://personals.yahoo.com
 misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34357t=24608
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF across PIX [7:24608]

2002-02-04 Thread Darrell Newcomb

You 'could' pass a BGP session with a route-map to set next-hop
correctly for both sides of the session.  But you still have the issue
of what routes you are advertising across any NAT.  

The challenge you have is extracting value from running some dynamic
routing over a statically configured device(PIX).  There are a few cases
where it makes sense but not many.

Darrell

Tom Martin wrote:
 
 Pat,
 
 Getting a PIX to pass OSPF would require one of two methods:  Routing or
 NAT.  First, the PIX isn't a router, and if it were it still wouldn't work
 since OSPF LSAs are sent to the non-routable 224.0.0.5/6 addresses (as
 well as have a TTL of 1).  NAT is not a viable alternative as NAT will not
 change the payload of OSPF packets, a requirement as networks would appear
 differently on one side than on the other.
 
 An alternative, although it probably introduces an unwanted security
 problem is to allow an IP-IP or GRE tunnel through the firewall.  With
 OSPF packets encapsulated inside the tunnel NAT becomes a non-issue.  Of
 course, if you implement this type of solution you could encrypt data sent
 through the tunnel which is better than nothing -- but I would not
 implement a solution like this for long-term use.
 
 - Tom
 
 In article , Patrick Ramsey
  wrote:
 
  First thought is that this will not work.  imagine this and tell me what
  you think.
 
  In pix, your acl's are based on tcp/udp/icmp these all are
  protocols, like ospf is it's own protocol... since ospf (protocol 89) is
  separate, opening up a port dealing with tcp/udp/icmp would be
  completely useless.
 
  -Patrick
 
  pat  10/29/01 11:01PM 
  Does anybody has any ideas on how to run OSPF across firewall. What
  ports to be open  how to make router esablish nighbour relations across
  firewall.
 
  Any thought on this will be greatly appriciated.
 
  Thanks,
  patterson.
 
  __ Do You Yahoo!? Make a
  great connection at Yahoo! Personals. http://personals.yahoo.com
  misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34358t=24608
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCCNP - routing exam [7:34347]

2002-02-04 Thread Charles McKnight

The Boson routing exam test # 3 
The Cisco press CCNP routing study guide 640-503.

Both can be of great help towards passing the routing exam.
Good luck


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34360t=34347
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: What is the passing score for the 640-504 exam [7:34226]

2002-02-04 Thread Charles McKnight

Thanks Jack.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34361t=34226
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: passing score for the CCNP switching exam? [7:34227]

2002-02-04 Thread Charles McKnight

Thanks DLB


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34362t=34227
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PAT'S RULE!!! (EOM)!!!!!! [7:34363]

2002-02-04 Thread Patricia Leeb-Hart

Dang it, Steven, you had me thinking that this was a message about Port
Address Translation!  :-D

Next time please spell out the team name.  Or pick another team!  The
Raiders were robbed, robbed, I say!

 Steven A. Ridder  02/03/2002 8:48:08 PM 
  PATRIOTS!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34363t=34363
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: AW: ISDN problems... [7:34324]

2002-02-04 Thread Jason Weden

Router(config)#access-list access-list-number [permit | deny] {protocol |
protocol-keyword}{source source-wildcard | any}{destination
destination-wildcard | any}[protocol-specific-options] [log]

 The more complex form of the command references an access list, allowing
finer control of the definition of interesting traffic than the dialer-list
command

 
Regards,

Jason


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34364t=34324
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIM Dense Mode or PIM Sparse Mode [7:34307]

2002-02-04 Thread Priscilla Oppenheimer

At 04:59 AM 2/4/02, Eve Mitch wrote:
Hi wondering what I should use in a envirionment where I have 2 core
switches 6513 with sup2 and msfc2 and pfc2 modules onboard.
have about 5 access switches 6513 with sup2 modules connected via trunks to
the core.
Lots of users on different VLANs behind different access switch will use the
few multicast stream there are.
how to decide which mode to use  PIM DM or PIM SM.

It sounds like dense mode would work for you. The main reason for not using 
dense mode doesn't apply in your case. Some people disapprove of dense mode 
because the multicast stream initially goes to all segments, until prune 
messages come back from PIM-enabled routers. In a network design where most 
segments (VLANs) should receive the multicast traffic anyway, this isn't an 
issue. Plus dense mode is somewhat easier to configure because it doesn't 
require a rendezvous point.

 From my Top-Down Network Design book:

With dense mode, the first packet for a group is flooded to all interfaces. 
Once this has occurred, however, routers listen to prune messages to help 
them develop a map of the network that lets them send multicast packets 
only to those networks that should receive the packets. The prune messages 
also let routers avoid loops that would cause more than one router to send 
a multicast packet to a segment.

Dense-mode PIM works best in environments with large multicast groups and a 
high likelihood that any given LAN has a group member, which limits need 
for routers to send prune messages. Because of the flooding of the first 
packet for a group, dense-mode does not make sense in environments where a 
few sparsely-located users wish to participate in a multicast application. 
In this case, sparse-mode PIM, which is described in the next section, is a 
better solution.


Sparse-mode PIM is quite different than dense-mode PIM. Rather than 
allowing traffic to be sent everywhere and then pruned back where it is not 
needed, sparse-mode PIM defines a rendezvous point. The rendezvous point 
provides a registration service for a multicast group.

Sparse-mode PIM relies on IGMP, which lets a host join a group by sending a 
membership-report message, and detach from a group by sending a leave 
message. A designated router for a network segment tracks membership-report 
and leave messages on its segment, and periodically sends join and prune 
PIM messages to the rendezvous point. The join and prune messages are 
processed by all the routers between the designated router and the 
rendezvous point. The result is a distribution tree that reaches all group 
members and is centered at the rendezvous point.

Priscilla



thanks in advance
Eve


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34366t=34307
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: logging the access on a router [7:34346]

2002-02-04 Thread Fraasch James

Syslog doesn't do user information.   You have two choices:  Make an
extended access list with the keyword log to log telnet packet access, OR
configure aaa and log the debug aaa auth output

Probably a little more than you had hoped for but should do the trick.

Dion, Thierry wrote:
 
 Hello
  
 I'm trying to log access on a router (who and when) with a
 simple
 configuration ( without tacacs+ or radius)
 how i can do this ?
 
 Kind Regards.
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34365t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF and DDR w/area authentication [7:33884]

2002-02-04 Thread Richard Newman

I'm not discounting a bug. I have submitted a question to the open forum on
cco, no responses yet. I know that my config is correct as the ospf
neighbors form soon after the isdn link is activated (ie. the keys do match
on both sides). The neighbors will stay up, however, the isdn link also
stays up. If I filter out 224.0.0.5 from being interesting, something I
assumed was done when you code ip ospf demand-circuit, once the isdn link is
down, ospf is still sending hello packets, at the dead-interval the
neighbors
die due to the dead-interval being hit. This is shown in debugs/logs
adj-change neighbor down dead interval hit. My understanding of
demand-circuit is that there is no dead interval. The hellos should be
suppressed. If you issue a show ip ospf interface dialer0, it shows that the
hellos are suppressed for 1 neighbor(s). However, if I simply use the
dialer-list 1 protocol ip permit the isdn link is brought up by the
224.0.0.5 and stays up. Very strange. I do not have access to an ISDN
simuator at my office lab. Hopefully I'll get more time at our local Cisco
office. For those with an ISDN simulator see if you can keep you link quiet
yet keep your ospf neighbors active over the circuit with area md5 auth.
turned on.

Richard


Are you using the simple password authentication or the MD5
authentication?
I realized that I assumed MD5 in my previous answer.

At 02:20 PM 2/1/02, Richard Newman wrote:
Thanks for all the replies. No clear answer yet. I do know for a fact due
to
debugs that there is a periodic key exchange sequence. The debug would show
as OSPF: Send with youngest Key 1. The traffic would come across as
224.0.0.5.

That's just a hello. With MD5, the key is used to create the message digest
added to the hello.

I agree with Peter that it might be a bug (if you're using MD5). If you're
not using MD5, this may be normal behavior? But you should use MD5. The
other method sends the password as clear text. It's useless as far as
security is concerned.

Priscilla

The only difference between the demand-circuit peers staying up
or being terminated is no authentication versus authentication. And
actually
the area number doesn't matter. Also be aware, I found this out the hard
way, that you can actually have blank spaces after your key value which
will
not be visible. This cost me hours of trouble shooting until I deleted and
readded my key statements. Ooops.

Richard


Richard Newman  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hi all.
  I was working on a lab with an ISDN link between two of my OSPF routers.
The
  link would come up if the Frame cloud went away. Normal stuff link would
be
  initiated as usual. However, since area 0 had authentication turned on
  broadcasts from 224.0.0.5 kept the isdn link up all the time. If I
filtered
  out the 224.0.0.5 from being interesting the ospf neighbors would get
  terminated at the dead interval. When I turn off authen. from area 0 all
  worked as normal.
 
  Is this a normal occurrance? When area authentication is turned on do
the
  key exchanges still happen even over a demand-circuit?
 
  Thanks...
  Richard Newman


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34367t=33884
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: logging the access on a router [7:34346]

2002-02-04 Thread Vincent Miller

Is this what you had in mind ?

! Last configuration change at 00:05:35 ECT Wed Nov 22 2000
! NVRAM config last updated at 00:05:38 ECT Wed Nov 22 2000
!
version 12.0
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xx
!
logging buffered 4096 debugging

the service timestamps will do the trick. you can create a local database of
userids/passwords that can make changes, the userid will
be included in the two lines at the top


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34370t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: multicast / CGMP towards the multicast server [7:33964]

2002-02-04 Thread Tom Martin

Michael,

CGMP does not have a concept of the multicast source (unlike the
multicast routing protocol) and therefore the fact that the source is on
the same link as the router should not change standard CGMP operation --
associating the CAM table with the various multicast groups.

- Tom

In article , Fears Michael S SSgt
50 CS/SCBBN  wrote:

 If a multicast server is connected to a Cisco Switch running CGMP, and
 several hosts are connected to the same switch, will a router turn off
 the switch ports for the users that are not requesting the multicast?
 
 So, will CGMP work back towards the multicast server?
 
 Fears
 misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34371t=33964
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PAT'S RULE!!! (EOM)!!!!!! [7:34363]

2002-02-04 Thread John Neiberger

The Raider's weren't robbed...they lost because they're evil!!   ;-)

Regards,
John from Bronco Country  (where the Broncos lost because they sucked
and I'm not afraid to admit it  )

Okay, back to something more on-topic, like my need for more coffee!

 Patricia Leeb-Hart  2/4/02 12:51:10 PM

Dang it, Steven, you had me thinking that this was a message about
Port
Address Translation!  :-D

Next time please spell out the team name.  Or pick another team!  The
Raiders were robbed, robbed, I say!

 Steven A. Ridder  02/03/2002 8:48:08 PM 
  PATRIOTS!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34372t=34363
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNP EXAM [7:34373]

2002-02-04 Thread Aslam Rafay

Guys 
I am taking CCNP cource, any one who recently passed all CCNP exams tell me
good resources i can utlitize to pass my exmas..

thanks, 

Rafay. 



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34373t=34373
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PAT'S RULE!!! (EOM)!!!!!! [7:34363]

2002-02-04 Thread Steven A. Ridder

Another person from CA, eh? The call was by the rule book, even if the rule
may have been unfair as some people have claimed.  We had that exect call go
against us in week 2 of a Jets game and we never cried.  We even lost that
game.  It's a legitimate rule.  AND, the Raiders still could have stopped us
before getting to kick the FG that put it into overtime. Then in overtime,
the Raiders still didn't stop us. So it wasn't like the refs just handed us
the game. There still were some major playing and feats that we had to make
to get us to where we got in that game.

Steve

Patricia Leeb-Hart  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Dang it, Steven, you had me thinking that this was a message about Port
 Address Translation!  :-D

 Next time please spell out the team name.  Or pick another team!  The
 Raiders were robbed, robbed, I say!

  Steven A. Ridder  02/03/2002 8:48:08 PM 
   PATRIOTS!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34374t=34363
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF Stud areas [7:34375]

2002-02-04 Thread Debbie Westall

Greetings,

I have the following scenario:

area 0 (backbone)
  |
  |
  |
area 20 (stub network) (these are RiverStone MLSs)
  |
  |
  uBR routers (static routing)

I would like to set up OSPF between the Riverstones and the Cisco uBRs. We
thought to set up the uBRs as stub networks also, but we are seeing the full
OSPF routing table on the uBRs (which are already running high utilization).
We would only like to see the default route on the uBRs. So would we need to
set these up as NSSA or Totally stubby? Or should we create a new area and
make that a stub of the existing area 20? We have experimented with
filtering and we are able to filter out everything but the default, but I
don't think we should have to do that either.

Right now our lab equipment is in the process of being moved to our new
building so I can't program this up right now to test.

Thanks for the assist!!!

Debbie Westall




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34375t=34375
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IPX Routing problem [7:34376]

2002-02-04 Thread Fraasch James

This should be a good one.  I switched out an old IBM 6611 for a Cisco 7204
this weekend.  There is a point to point T-1 from COUR002 to COUR001. 
Encapsulation is still PPP (didn't want to change too much. IBM requires PPP
encapsulation).  People from the COUR002 router are not able to access a
particular server hanging off a Token Ring port at COUR001.  I do a show ipx
servers on the COUR002 router and I see that the router is gettng the SAP
advertisement from the server hanging off the other end of the link(as long
as they are not left over from before this weekend).  But my user on the
COUR002 cannot get connected to the server like they were as of last
Friday.  Here are the configs for the involved ports:

COUR001
interface TokenRing2/0
 description 2nd floor
 ip address 172.25.30.200 255.255.255.0
 ip directed-broadcast
 ipx encapsulation SNAP
 ipx network A00B
 ring-speed 16
interface Serial3/3
 description Connection to Marina 
 mac-address 0200.1099.4182
 mtu 2044
 ip address 172.25.252.249 255.255.255.252
 ip directed-broadcast
 encapsulation ppp
 ipx network B048
 ipx update interval rip 300
 ipx update interval sap 300
 nrzi-encoding

COUR002:
interface Serial0/0
 mac-address 0200.1099.41c2
 mtu 2044
 ip address 172.25.252.250 255.255.255.252
 no ip directed-broadcast
 encapsulation ppp
 ip ospf retransmit-interval 10
 no ip mroute-cache
 no keepalive
 ipx network B048
 ipx update interval rip 300
 ipx update interval sap 300
 no fair-queue
 nrzi-encoding

We are using OSPF for routing and that seems to be fine.  My thinking is
that for some reason IPX is fouled up. I just cant figure out where or why.
Any help would be appreciated.

James


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34376t=34376
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Clarification and contrast (was Re: PAT'S RULE!!! ) [7:34377]

2002-02-04 Thread [EMAIL PROTECTED]

 Dang it, Steven, you had me thinking that this was a message
 about Port Address Translation!  :-D

Would you prefer we deal with memory faults, specifically in RAM?
 
 Next time please spell out the team name.  Or pick another
 team!  The Raiders were robbed, robbed, I say!
 
 Steven A. Ridder  02/03/2002 8:48:08 PM 
   PATRIOTS!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34377t=34377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP EXAM [7:34373]

2002-02-04 Thread Fraasch James

Good idea to stick with the most recent Cisco Press books.  Maybe other
people can say the same thing. I have studied with both Sybex and Cisco
Press books and can say that with Sybex I felt like there were some
surprises once I reached the test. With Cisco Press I don't think any topic
on the test was left out.

I swear I don't work for Cisco! I just like their books!

slam Rafay wrote:
 
 Guys 
 I am taking CCNP cource, any one who recently passed all CCNP
 exams tell me good resources i can utlitize to pass my exmas..
 
 thanks, 
 
 Rafay. 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34378t=34373
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF DR problem [7:34379]

2002-02-04 Thread Priscilla Oppenheimer

Hi Group Study,

Playing with IP OSPF priority to influence which router became the 
Designated Router (DR) caused routing problems for me in a recent bout with 
a lab exercise. Can anyone help me understand if I did something wrong?

I have 2 routers on an Ethernet LAN. Both of them also have WAN connections 
to remote sites. R1 has a Frame Relay link to the corporate cloud via its 
S0 port. S0 is configured as ip ospf network point-to-point.

R2 has an ISDN link to yet another router, R3. This link is configured as 
an OSPF point-to-point demand circuit.

R1 and R2 are connected via an Ethernet switch. My goal was to make sure R1 
became the DR on Ethernet. Both routers have loopbacks, but R2's is higher, 
so to make sure R2 did not become the DR, I configured it with:

ip ospf priority 0

R1 then did indeed become the DR on the Ethernet LAN because it was using 
the default priority 1.

Now, finally to the question.. On the other side of the ISDN and across 
the Frame Relay cloud, I couldn't see the Ethernet LAN in the routing 
table. Routers formed adjacencies correctly and could reach most networks, 
but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN formed an 
adjacency and could see the rest of the internetwork.

Could I have broken something by playing with the priority??

Thanks for your help.

Priscilla





Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34379t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP EXAM [7:34373]

2002-02-04 Thread Rafay Aslam

Thanks james, I really appreciate you advice, I currently have BSCN book
from Cisco Press, I will to buy or download the rest of Cisco books.


Fraasch James  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Good idea to stick with the most recent Cisco Press books.  Maybe other
 people can say the same thing. I have studied with both Sybex and Cisco
 Press books and can say that with Sybex I felt like there were some
 surprises once I reached the test. With Cisco Press I don't think any
topic
 on the test was left out.

 I swear I don't work for Cisco! I just like their books!

 slam Rafay wrote:
 
  Guys
  I am taking CCNP cource, any one who recently passed all CCNP
  exams tell me good resources i can utlitize to pass my exmas..
 
  thanks,
 
  Rafay.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34380t=34373
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP EXAM [7:34373]

2002-02-04 Thread Ole Drews Jensen

To pass (e)xmas, you must stand on the right side of Bering Street on
December 24, and the second midnight strikes, you must jump over to the left
side of Bering Street where it is now the 26.

(sorry couldn't help it)

Anyway, to give you a description of what I used and my recommedations,
please follow my RouterChief link below.

Hth,

Ole

~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNP, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~~~ 
 http://www.RouterChief.com
~~~
 NEED A JOB ???
 http://www.oledrews.com/job
~~~


-Original Message-
From: Aslam Rafay [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 3:07 PM
To: [EMAIL PROTECTED]
Subject: CCNP EXAM [7:34373]


Guys 
I am taking CCNP cource, any one who recently passed all CCNP exams tell me
good resources i can utlitize to pass my exmas..

thanks, 

Rafay.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34381t=34373
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: logging the access on a router [7:34346]

2002-02-04 Thread Keyur Shah

set debug for aaa and configure to log to syslog. It is not easy to parse
that log though, but can be done.

-Keyur Shah-
CCIE# 4799 (Security; Routing and Switching)
css1,scsa,scna,mct,mcse,cni,mcne
Hello Computers
Say Hello to Your Future!
http://www.hellocomputers.com
Toll-Free: 1.877.794.3556 
Now offering CCIE Security Lab Workbook and remote bootcamp,
http://www.hellocomputers.com/hellosuccess.html;

-Original Message-
From: Dion, Thierry [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 04, 2002 8:09 AM
To: [EMAIL PROTECTED]
Subject: logging the access on a router [7:34346]


Hello
 
I'm trying to log access on a router (who and when) with a simple
configuration ( without tacacs+ or radius) how i can do this ?

Kind Regards.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34369t=34346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Long....RE: CCIE starting pay [7:33899]

2002-02-04 Thread Keyur Shah

To add onto it...experience helps you support such networks and high profile
web sites and enterprise networks in real time, where downtime is counted in
minutes and sometimes in seconds. It is impossible to do clear ip bgp * and
get your bgp routes which one may do all the time while preparing in a home
lab.

In my personal opinion, today it is possible to pass ccie lab by simply
studying in home lab with all the help from books, lab workbooks, bootcamps,
home lab and group studies out there, which is very good thing. I am sure,
it was not the case in 1998 when Paul B. (taking him as a example only)
passed his test. I think cisco should remove some of the old technologies
from the lab and add some of these cool real world scenarios to a reasobale
extent that John mentioned below. May be have candidates log to syslog and
ask them that they can not type clear ip bgp more than twice in the whole
lab. That will make candidates think from real world angle. That is just an
example, many such things come to mind.

Impressive article John, you described ccie's day in real world very well.

-Keyur Shah-
CCIE# 4799 (Security; Routing and Switching)
css1,scsa,scna,mct,mcse,cni,mcne
Hello Computers
Say Hello to Your Future!
http://www.hellocomputers.com
Toll-Free: 1.877.794.3556 
Now offering CCIE Security Lab Workbook and remote bootcamp,
http://www.hellocomputers.com/hellosuccess.html;
 
-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 04, 2002 10:25 AM
To: [EMAIL PROTECTED]
Subject: LongRE: CCIE starting pay [7:33899]


After receiving an email from Joe, I would agree that he sounds like a very
intelligent person with tremendous initiative.  I'd like to differentiate
between lab experience and OTJ experience.

Learning to configure OSPF, EIGRP, and BGP at home is one thing.  

Going to a customer site who has 200 nodes, half of which were acquired from
another company and are running OSPF while half are running EIGRP and all
areas need to be able to communicate with each other and also have multiple
redundant and area-diverse connections to different internet providers using
BGP...that is experience.  :-)  

Then, after a decision has been made to use a single IGP, make a choice
between EIGRP and OSPF, or even IS-IS.  Justify your reasoning and then
determine a migration plan that minimizes customer downtime and guarantees
that all areas have internet access at all times even if their local
provider goes down.

Help the customer to coordinate with ARIN and service providers to get the
necessary address space and an assigned autonomous system number.

When a given area has multiple connections to the same ISP, attempt to
influence routing in the ISP so that it takes the closest entrance into your
network for that user.  Attempt to influence routing within each ISP so that
you increase the chances that optimal routing will occur. 
Make certain that you only advertise the necessary prefixes while filtering
all others.  Configure routing within each area to take the closet exit
possible, within reason.

Provision and order the necessary circuits after getting quotes from several
providers.  Make a determination when and if point to point links
could/should be used and where frame relay or ATM would be most suitable.
Make sure that you have plenty of room for growth and enough bandwidth to
support video conferencing over IP for certain sections of this network.
Determine which type of traffic shaping, queueing, and/or rate limiting
might be necessary and where it would be most useful.

Upgrade routers and switches as necessary, making sure that you won't run
into processor limitations during high traffic loads and you have enough WIC
and NM slots available to support the connections you require.  Make sure
you select an IOS that supports those modules and software features you'll
needwhile minimizing the number of bugs that might affect you.

Determine a backup plan for each area and include ISDN backup links, making
sure the backup links can pass both IP, IPX, and some DLSw+  but do not pass
streaming video and other non-essential traffic.  Create a network
infrastructure disaster recovery plan for each area and document your
procedures.

And that's just the tip of the iceberg, and *that's* what I mean by
experience.  Certainly, your experience doesn't need to be this
comprehensive and detailed, I'm simply exaggerating to make a point. 
There is a *huge* difference between learning to configure this stuff at
home and actually implementing it in the real world.

Granted, this would be a huge task but it's one that a CCIE along with a
group of engineers would be expected to be able to handle.  A CCIE--even a
highly intelligent and motivated one--with no experience would have
difficulty with this.

John

 [EMAIL PROTECTED]  2/4/02 10:23:37 AM 
I have to jump in here.  The original post said he had an impressive lab. If
he uses the lab and works through 

Re: Long....RE: CCIE starting pay [7:33899]

2002-02-04 Thread nrf

I think everyone is missing the point.  By far the most important reason to
get the CCIE is to get a job (honestly, why else would you do it?).  But the
stark reality is that without proper experience, you are going to find the
job market quite tough anyway, I don't care how many or what certs you got.
Granted, certs like the CCIE will help, but they won't help nearly as much
as people seem to think they will.

Let's face facts, it's not 1999 anymore.  Companies are no longer infatuated
with the 4-digit number.  You don't have stupid dotcoms throwing money
around like drunken sailors, and because of the changes in the Cisco
Partnership agreements, you don't have all these Partners running around
desperately trying to fill their CCIE quotas.  Now, every company who's
looking to hire a network engineer will inquire about your experience.
Believe me, talking about all the time you spent in a home-lab is definitely
not the answer they're looking for.

Now I know that I'm probably not going to convince anybody otherwise.  I've
ran into some of these no-experience CCIE-wannabe fanatics in real-life and
I've never been able to convince any of them to see the light.  Like Fox
Mulder, 'They want to believe'.  They just want to believe that all their
life's problems will be solved just by passing an (admittedly hard) exam.
All I have to say is - go ahead, see for yourself, learn the hard way.  Just
don't say I didn't warn you.

John Neiberger  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 After receiving an email from Joe, I would agree that he sounds like a
 very intelligent person with tremendous initiative.  I'd like to
 differentiate between lab experience and OTJ experience.

 Learning to configure OSPF, EIGRP, and BGP at home is one thing.

 Going to a customer site who has 200 nodes, half of which were acquired
 from another company and are running OSPF while half are running EIGRP
 and all areas need to be able to communicate with each other and also
 have multiple redundant and area-diverse connections to different
 internet providers using BGP...that is experience.  :-)

 Then, after a decision has been made to use a single IGP, make a choice
 between EIGRP and OSPF, or even IS-IS.  Justify your reasoning and then
 determine a migration plan that minimizes customer downtime and
 guarantees that all areas have internet access at all times even if
 their local provider goes down.

 Help the customer to coordinate with ARIN and service providers to get
 the necessary address space and an assigned autonomous system number.

 When a given area has multiple connections to the same ISP, attempt to
 influence routing in the ISP so that it takes the closest entrance into
 your network for that user.  Attempt to influence routing within each
 ISP so that you increase the chances that optimal routing will occur.
 Make certain that you only advertise the necessary prefixes while
 filtering all others.  Configure routing within each area to take the
 closet exit possible, within reason.

 Provision and order the necessary circuits after getting quotes from
 several providers.  Make a determination when and if point to point
 links could/should be used and where frame relay or ATM would be most
 suitable.  Make sure that you have plenty of room for growth and enough
 bandwidth to support video conferencing over IP for certain sections of
 this network.  Determine which type of traffic shaping, queueing, and/or
 rate limiting might be necessary and where it would be most useful.

 Upgrade routers and switches as necessary, making sure that you won't
 run into processor limitations during high traffic loads and you have
 enough WIC and NM slots available to support the connections you
 require.  Make sure you select an IOS that supports those modules and
 software features you'll needwhile minimizing the number of bugs
 that might affect you.

 Determine a backup plan for each area and include ISDN backup links,
 making sure the backup links can pass both IP, IPX, and some DLSw+  but
 do not pass streaming video and other non-essential traffic.  Create a
 network infrastructure disaster recovery plan for each area and document
 your procedures.

 And that's just the tip of the iceberg, and *that's* what I mean by
 experience.  Certainly, your experience doesn't need to be this
 comprehensive and detailed, I'm simply exaggerating to make a point.
 There is a *huge* difference between learning to configure this stuff at
 home and actually implementing it in the real world.

 Granted, this would be a huge task but it's one that a CCIE along with
 a group of engineers would be expected to be able to handle.  A
 CCIE--even a highly intelligent and motivated one--with no experience
 would have difficulty with this.

 John

  [EMAIL PROTECTED]  2/4/02 10:23:37 AM 
 I have to jump in here.  The original post said he had an impressive
 lab.
 If he uses the lab and works through scenarios, isn't this what the

Traffic type monitoring [7:34382]

2002-02-04 Thread Sam Deckert

Hello everyone,

Just wondering what you guys would use to monitor the traffic going over a
single frame PVC?

I was thinking of spanning the port on the switch, and using Sniffer with
filters.  Are there any better alternatives??

Thanks for any help!

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34382t=34382
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPX Routing problem [7:34376]

2002-02-04 Thread Priscilla Oppenheimer

Which router is the new one, COUR002 or COUR001?

What is the LAN side on COUR002? Can you send info on it too?

Priscilla

At 04:24 PM 2/4/02, Fraasch James wrote:
This should be a good one.  I switched out an old IBM 6611 for a Cisco 7204
this weekend.  There is a point to point T-1 from COUR002 to COUR001.
Encapsulation is still PPP (didn't want to change too much. IBM requires PPP
encapsulation).  People from the COUR002 router are not able to access a
particular server hanging off a Token Ring port at COUR001.  I do a show ipx
servers on the COUR002 router and I see that the router is gettng the SAP
advertisement from the server hanging off the other end of the link(as long
as they are not left over from before this weekend).  But my user on the
COUR002 cannot get connected to the server like they were as of last
Friday.  Here are the configs for the involved ports:

COUR001
interface TokenRing2/0
  description 2nd floor
  ip address 172.25.30.200 255.255.255.0
  ip directed-broadcast
  ipx encapsulation SNAP
  ipx network A00B
  ring-speed 16
interface Serial3/3
  description Connection to Marina
  mac-address 0200.1099.4182
  mtu 2044
  ip address 172.25.252.249 255.255.255.252
  ip directed-broadcast
  encapsulation ppp
  ipx network B048
  ipx update interval rip 300
  ipx update interval sap 300
  nrzi-encoding

COUR002:
interface Serial0/0
  mac-address 0200.1099.41c2
  mtu 2044
  ip address 172.25.252.250 255.255.255.252
  no ip directed-broadcast
  encapsulation ppp
  ip ospf retransmit-interval 10
  no ip mroute-cache
  no keepalive
  ipx network B048
  ipx update interval rip 300
  ipx update interval sap 300
  no fair-queue
  nrzi-encoding

We are using OSPF for routing and that seems to be fine.  My thinking is
that for some reason IPX is fouled up. I just cant figure out where or why.
Any help would be appreciated.

James


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34384t=34376
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP EXAM [7:34373]

2002-02-04 Thread Godswill HO

Buy Cisco Presss books for the series.

- Original Message -
From: Aslam Rafay 
To: 
Sent: Monday, February 04, 2002 1:06 PM
Subject: CCNP EXAM [7:34373]


 Guys
 I am taking CCNP cource, any one who recently passed all CCNP exams tell
me
 good resources i can utlitize to pass my exmas..

 thanks,

 Rafay.
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34383t=34373
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



req: twins °¦¥Í¨à ·sºÐMP3, ¦P·R±¡·í¤J¾ê¼@³õª© [7:34385]

2002-02-04 Thread Ocsic

thx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34385t=34385
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP EXAM [7:34373]

2002-02-04 Thread Ole Drews Jensen

I agree with you, but many of the CiscoPress books can be a little hard to
understand, especially if you're new to the stuff. I also agree with you
that Sybex (and other) books many times leave out stuff that you were
surposed to know, but they do explain things in a better way sometimes.

So, I will in most situations recommend reading 1 Study Guide and 1
CiscoPress Course Book.

Before buying ANY books, I ALWAYS check the reviews on amazon.

Hth,

Ole

~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNP, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~~~ 
 http://www.RouterChief.com
~~~
 NEED A JOB ???
 http://www.oledrews.com/job
~~~


-Original Message-
From: Fraasch James [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 3:28 PM
To: [EMAIL PROTECTED]
Subject: RE: CCNP EXAM [7:34373]


Good idea to stick with the most recent Cisco Press books.  Maybe other
people can say the same thing. I have studied with both Sybex and Cisco
Press books and can say that with Sybex I felt like there were some
surprises once I reached the test. With Cisco Press I don't think any topic
on the test was left out.

I swear I don't work for Cisco! I just like their books!

slam Rafay wrote:
 
 Guys 
 I am taking CCNP cource, any one who recently passed all CCNP
 exams tell me good resources i can utlitize to pass my exmas..
 
 thanks, 
 
 Rafay.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34386t=34373
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



wrong post [7:34387]

2002-02-04 Thread Ocsic

wrong post. sorry


Ocsic   thx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34387t=34387
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: twins °¦¥Í¨à ·sºÐMP3, ¦P·R±¡·í¤J¾ê¼@³õª© [7:34385]

2002-02-04 Thread Ocsic

wong post




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34388t=34385
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF DR problem [7:34379]

2002-02-04 Thread John Neiberger

Priscilla,

I can't think of anything that could have been broken by using the ip
ospf priority command.  Unless you've run into some sort of bug I'm
guessing that there must be another issue.  Were you playing around with
the loopback addresses?  Do you have any virtual links configured?   
I'm just wondering if you configured something that depended on a static
router ID and by adding or changing a loopback you've confused one or
two of the other routers.

You mentioned that the frame relay interface is configured as
point-to-point.  Is the opposite side configured the same way?  It must
be since you said the adjacencies are forming...nevermind.   Hmm...

Are the missing routes in the OSPF database, just not in the routing
table?  If so, check out this link:

http://www.cisco.com/warp/public/104/26.html

I can't think of any one thing that describes this issue but I'll keep
pondering...

John

 Priscilla Oppenheimer  2/4/02 2:30:35 PM

Hi Group Study,

Playing with IP OSPF priority to influence which router became the 
Designated Router (DR) caused routing problems for me in a recent bout
with 
a lab exercise. Can anyone help me understand if I did something
wrong?

I have 2 routers on an Ethernet LAN. Both of them also have WAN
connections 
to remote sites. R1 has a Frame Relay link to the corporate cloud via
its 
S0 port. S0 is configured as ip ospf network point-to-point.

R2 has an ISDN link to yet another router, R3. This link is configured
as 
an OSPF point-to-point demand circuit.

R1 and R2 are connected via an Ethernet switch. My goal was to make
sure R1 
became the DR on Ethernet. Both routers have loopbacks, but R2's is
higher, 
so to make sure R2 did not become the DR, I configured it with:

ip ospf priority 0

R1 then did indeed become the DR on the Ethernet LAN because it was
using 
the default priority 1.

Now, finally to the question.. On the other side of the ISDN and
across 
the Frame Relay cloud, I couldn't see the Ethernet LAN in the routing 
table. Routers formed adjacencies correctly and could reach most
networks, 
but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN formed an

adjacency and could see the rest of the internetwork.

Could I have broken something by playing with the priority??

Thanks for your help.

Priscilla





Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34389t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPX Routing problem [7:34376]

2002-02-04 Thread John Neiberger

I'm not sure how much this helps, especially since you can see the
server in the SAP table, but can you do a novell ping from COUR002 to
the server?

Are there any other users elsewhere that *are* able to access this
server?

John

 Fraasch James  2/4/02 2:24:31 PM 
This should be a good one.  I switched out an old IBM 6611 for a Cisco
7204
this weekend.  There is a point to point T-1 from COUR002 to COUR001. 
Encapsulation is still PPP (didn't want to change too much. IBM
requires PPP
encapsulation).  People from the COUR002 router are not able to access
a
particular server hanging off a Token Ring port at COUR001.  I do a
show ipx
servers on the COUR002 router and I see that the router is gettng the
SAP
advertisement from the server hanging off the other end of the link(as
long
as they are not left over from before this weekend).  But my user on
the
COUR002 cannot get connected to the server like they were as of last
Friday.  Here are the configs for the involved ports:

COUR001
interface TokenRing2/0
 description 2nd floor
 ip address 172.25.30.200 255.255.255.0
 ip directed-broadcast
 ipx encapsulation SNAP
 ipx network A00B
 ring-speed 16
interface Serial3/3
 description Connection to Marina 
 mac-address 0200.1099.4182
 mtu 2044
 ip address 172.25.252.249 255.255.255.252
 ip directed-broadcast
 encapsulation ppp
 ipx network B048
 ipx update interval rip 300
 ipx update interval sap 300
 nrzi-encoding

COUR002:
interface Serial0/0
 mac-address 0200.1099.41c2
 mtu 2044
 ip address 172.25.252.250 255.255.255.252
 no ip directed-broadcast
 encapsulation ppp
 ip ospf retransmit-interval 10
 no ip mroute-cache
 no keepalive
 ipx network B048
 ipx update interval rip 300
 ipx update interval sap 300
 no fair-queue
 nrzi-encoding

We are using OSPF for routing and that seems to be fine.  My thinking
is
that for some reason IPX is fouled up. I just cant figure out where or
why.
Any help would be appreciated.

James




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34390t=34376
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF DR problem [7:34379]

2002-02-04 Thread Campbell Jon

Have you checked your hello and dead time intervals (sho ip ospf interfaces)
to make sure they match on your participating routers??Priscilla Oppenheimer
wrote:
 
 Hi Group Study,
 
 Playing with IP OSPF priority to influence which router became
 the
 Designated Router (DR) caused routing problems for me in a
 recent bout with
 a lab exercise. Can anyone help me understand if I did
 something wrong?
 
 I have 2 routers on an Ethernet LAN. Both of them also have WAN
 connections
 to remote sites. R1 has a Frame Relay link to the corporate
 cloud via its
 S0 port. S0 is configured as ip ospf network point-to-point.
 
 R2 has an ISDN link to yet another router, R3. This link is
 configured as
 an OSPF point-to-point demand circuit.
 
 R1 and R2 are connected via an Ethernet switch. My goal was to
 make sure R1
 became the DR on Ethernet. Both routers have loopbacks, but
 R2's is higher,
 so to make sure R2 did not become the DR, I configured it with:
 
 ip ospf priority 0
 
 R1 then did indeed become the DR on the Ethernet LAN because it
 was using
 the default priority 1.
 
 Now, finally to the question.. On the other side of the
 ISDN and across
 the Frame Relay cloud, I couldn't see the Ethernet LAN in the
 routing
 table. Routers formed adjacencies correctly and could reach
 most networks,
 but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN
 formed an
 adjacency and could see the rest of the internetwork.
 
 Could I have broken something by playing with the priority??
 
 Thanks for your help.
 
 Priscilla
 
 
 
 
 
 Priscilla Oppenheimer
 http://www.priscilla.com
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34391t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PAT'S RULE!!! -- actual Cisco stuff mentioned [7:34392]

2002-02-04 Thread Patricia Leeb-Hart

Not only am I from CA, I'm from Oakland.  But I don't actually think the
game was unfair; I just like griping .  I root for any team whose town I
live in (the Warriors excepted)

Has anyone read the recent article in Network Computing mag on Windows
technology in Cisco gear? 
(http://www.networkcomputing.com/1303/1303colshipley.html).   My God,
stupidity and cupidity will never cease.  It certainly would make me want to
re-think migrating my voice system to VoIP on any platform that does this. 
I've already fired off an e-mail to the author asking about which platforms
other than Cisco are adopting this. Must research further...

And just to keep this on-topic, I'm starting my CCNP in a couple of weeks...

 Steven A. Ridder  02/04/2002 1:18:21 PM 
Another person from CA, eh? The call was by the rule book, even if the rule
may have been unfair as some people have claimed.  We had that exect call go
against us in week 2 of a Jets game and we never cried.  We even lost that
game.  It's a legitimate rule.  AND, the Raiders still could have stopped us
before getting to kick the FG that put it into overtime. Then in overtime,
the Raiders still didn't stop us. So it wasn't like the refs just handed us
the game. There still were some major playing and feats that we had to make
to get us to where we got in that game.

Steve

Patricia Leeb-Hart  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Dang it, Steven, you had me thinking that this was a message about Port
 Address Translation!  :-D

 Next time please spell out the team name.  Or pick another team!  The
 Raiders were robbed, robbed, I say!

  Steven A. Ridder  02/03/2002 8:48:08 PM 
   PATRIOTS!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34392t=34392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF DR problem [7:34379]

2002-02-04 Thread Priscilla Oppenheimer

There was a virtual link. The virtual link was from R1 over to another 
router across the Frame Relay cloud. R1 is an ABR connecting Area 0 and 
Area 1. Area 0 is the Ethernet LAN. Area 1 is the Frame Relay cloud. For 
some unknown reason, there's an Area 2 also on the other side of Area 1. 
Does that ring a bell regarding any gotchas??

Thanks

Priscilla

At 03:03 PM 2/4/02, John Neiberger wrote:
Priscilla,

I can't think of anything that could have been broken by using the ip
ospf priority command.  Unless you've run into some sort of bug I'm
guessing that there must be another issue.  Were you playing around with
the loopback addresses?  Do you have any virtual links configured?
I'm just wondering if you configured something that depended on a static
router ID and by adding or changing a loopback you've confused one or
two of the other routers.

You mentioned that the frame relay interface is configured as
point-to-point.  Is the opposite side configured the same way?  It must
be since you said the adjacencies are forming...nevermind.   Hmm...

Are the missing routes in the OSPF database, just not in the routing
table?  If so, check out this link:

http://www.cisco.com/warp/public/104/26.html

I can't think of any one thing that describes this issue but I'll keep
pondering...

John

  Priscilla Oppenheimer  2/4/02 2:30:35 PM
 
Hi Group Study,

Playing with IP OSPF priority to influence which router became the
Designated Router (DR) caused routing problems for me in a recent bout
with
a lab exercise. Can anyone help me understand if I did something
wrong?

I have 2 routers on an Ethernet LAN. Both of them also have WAN
connections
to remote sites. R1 has a Frame Relay link to the corporate cloud via
its
S0 port. S0 is configured as ip ospf network point-to-point.

R2 has an ISDN link to yet another router, R3. This link is configured
as
an OSPF point-to-point demand circuit.

R1 and R2 are connected via an Ethernet switch. My goal was to make
sure R1
became the DR on Ethernet. Both routers have loopbacks, but R2's is
higher,
so to make sure R2 did not become the DR, I configured it with:

ip ospf priority 0

R1 then did indeed become the DR on the Ethernet LAN because it was
using
the default priority 1.

Now, finally to the question.. On the other side of the ISDN and
across
the Frame Relay cloud, I couldn't see the Ethernet LAN in the routing
table. Routers formed adjacencies correctly and could reach most
networks,
but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN formed an

adjacency and could see the rest of the internetwork.

Could I have broken something by playing with the priority??

Thanks for your help.

Priscilla





Priscilla Oppenheimer
http://www.priscilla.com


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34393t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF DR problem [7:34379]

2002-02-04 Thread Kane, Christopher A.

Priscilla,

Now that you have R1 as the DR, it's his responsibility to announce that
network out to everyone else. Is R1 sending out LSAs (Network LSA, type 2)
to wherever it is that you are trying to see that network? (Is it R3's
routing table that you can't see the Ethernet segment of R1 and R2?) Does
the network show up in the OSPF database but not the routing table? Or just
the routing table?

Chris

-Original Message-
From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 4:31 PM
To: [EMAIL PROTECTED]
Subject: OSPF DR problem [7:34379]


Hi Group Study,

Playing with IP OSPF priority to influence which router became the 
Designated Router (DR) caused routing problems for me in a recent bout with 
a lab exercise. Can anyone help me understand if I did something wrong?

I have 2 routers on an Ethernet LAN. Both of them also have WAN connections 
to remote sites. R1 has a Frame Relay link to the corporate cloud via its 
S0 port. S0 is configured as ip ospf network point-to-point.

R2 has an ISDN link to yet another router, R3. This link is configured as 
an OSPF point-to-point demand circuit.

R1 and R2 are connected via an Ethernet switch. My goal was to make sure R1 
became the DR on Ethernet. Both routers have loopbacks, but R2's is higher, 
so to make sure R2 did not become the DR, I configured it with:

ip ospf priority 0

R1 then did indeed become the DR on the Ethernet LAN because it was using 
the default priority 1.

Now, finally to the question.. On the other side of the ISDN and across 
the Frame Relay cloud, I couldn't see the Ethernet LAN in the routing 
table. Routers formed adjacencies correctly and could reach most networks, 
but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN formed an 
adjacency and could see the rest of the internetwork.

Could I have broken something by playing with the priority??

Thanks for your help.

Priscilla





Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34395t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF DR problem [7:34379]

2002-02-04 Thread Walter Rogowski

Compare the OSPF hello interval on the FR interfaces with that on the
Ethernet interfaces...

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
John Neiberger
Sent: 04 February 2002 22:03
To: [EMAIL PROTECTED]
Subject: Re: OSPF DR problem [7:34379]


Priscilla,

I can't think of anything that could have been broken by using the ip
ospf priority command.  Unless you've run into some sort of bug I'm
guessing that there must be another issue.  Were you playing around with
the loopback addresses?  Do you have any virtual links configured? I'm
just wondering if you configured something that depended on a static
router ID and by adding or changing a loopback you've confused one or
two of the other routers.

You mentioned that the frame relay interface is configured as
point-to-point.  Is the opposite side configured the same way?  It must
be since you said the adjacencies are forming...nevermind.   Hmm...

Are the missing routes in the OSPF database, just not in the routing
table?  If so, check out this link:

http://www.cisco.com/warp/public/104/26.html

I can't think of any one thing that describes this issue but I'll keep
pondering...

John

 Priscilla Oppenheimer  2/4/02 2:30:35 PM

Hi Group Study,

Playing with IP OSPF priority to influence which router became the
Designated Router (DR) caused routing problems for me in a recent bout
with a lab exercise. Can anyone help me understand if I did something
wrong?

I have 2 routers on an Ethernet LAN. Both of them also have WAN
connections to remote sites. R1 has a Frame Relay link to the corporate
cloud via its S0 port. S0 is configured as ip ospf network
point-to-point.

R2 has an ISDN link to yet another router, R3. This link is configured
as an OSPF point-to-point demand circuit.

R1 and R2 are connected via an Ethernet switch. My goal was to make sure
R1 became the DR on Ethernet. Both routers have loopbacks, but R2's is
higher, so to make sure R2 did not become the DR, I configured it with:

ip ospf priority 0

R1 then did indeed become the DR on the Ethernet LAN because it was
using the default priority 1.

Now, finally to the question.. On the other side of the ISDN and
across the Frame Relay cloud, I couldn't see the Ethernet LAN in the
routing table. Routers formed adjacencies correctly and could reach most
networks, but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN
formed an

adjacency and could see the rest of the internetwork.

Could I have broken something by playing with the priority??

Thanks for your help.

Priscilla





Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34394t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF DR problem [7:34379]

2002-02-04 Thread Baker, Jason

hmmm in ospf NBMA network i thought when you specified point to point
there was no DR, BDR election.

so maybe playing with the priorities may have caused problems


 -Original Message-
 From: Kane, Christopher A. [SMTP:[EMAIL PROTECTED]]
 Sent: Tuesday, 5 February 2002 9:36 am
 To:   [EMAIL PROTECTED]
 Subject:  RE: OSPF DR problem [7:34379]
 
 Priscilla,
 
 Now that you have R1 as the DR, it's his responsibility to announce that
 network out to everyone else. Is R1 sending out LSAs (Network LSA, type 2)
 to wherever it is that you are trying to see that network? (Is it R3's
 routing table that you can't see the Ethernet segment of R1 and R2?) Does
 the network show up in the OSPF database but not the routing table? Or
 just
 the routing table?
 
 Chris
 
 -Original Message-
 From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
 Sent: Monday, February 04, 2002 4:31 PM
 To: [EMAIL PROTECTED]
 Subject: OSPF DR problem [7:34379]
 
 
 Hi Group Study,
 
 Playing with IP OSPF priority to influence which router became the 
 Designated Router (DR) caused routing problems for me in a recent bout
 with 
 a lab exercise. Can anyone help me understand if I did something wrong?
 
 I have 2 routers on an Ethernet LAN. Both of them also have WAN
 connections 
 to remote sites. R1 has a Frame Relay link to the corporate cloud via
 its 
 S0 port. S0 is configured as ip ospf network point-to-point.
 
 R2 has an ISDN link to yet another router, R3. This link is configured as 
 an OSPF point-to-point demand circuit.
 
 R1 and R2 are connected via an Ethernet switch. My goal was to make sure
 R1 
 became the DR on Ethernet. Both routers have loopbacks, but R2's is
 higher, 
 so to make sure R2 did not become the DR, I configured it with:
 
 ip ospf priority 0
 
 R1 then did indeed become the DR on the Ethernet LAN because it was using 
 the default priority 1.
 
 Now, finally to the question.. On the other side of the ISDN and
 across 
 the Frame Relay cloud, I couldn't see the Ethernet LAN in the routing 
 table. Routers formed adjacencies correctly and could reach most networks,
 
 but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN formed an 
 adjacency and could see the rest of the internetwork.
 
 Could I have broken something by playing with the priority??
 
 Thanks for your help.
 
 Priscilla
 
 
 
 
 
 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34396t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PAT'S RULE!!! -- actual Cisco stuff mentioned [7:34392]

2002-02-04 Thread Sean Knox

After reading the article, the author didn't give any evidence to support
his claim that Cisco is using Microsoft code... If he's right, I am
certainly interested to know what platforms are using MS code.

- Sean

-Original Message-
From: Patricia Leeb-Hart [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 04, 2002 2:23 PM
To: [EMAIL PROTECTED]
Subject: Re: PAT'S RULE!!! -- actual Cisco stuff mentioned [7:34392]


Not only am I from CA, I'm from Oakland.  But I don't actually think the
game was unfair; I just like griping .  I root for any team whose town I
live in (the Warriors excepted)

Has anyone read the recent article in Network Computing mag on Windows
technology in Cisco gear? 
(http://www.networkcomputing.com/1303/1303colshipley.html).   My God,
stupidity and cupidity will never cease.  It certainly would make me want to
re-think migrating my voice system to VoIP on any platform that does this. 
I've already fired off an e-mail to the author asking about which platforms
other than Cisco are adopting this. Must research further...

And just to keep this on-topic, I'm starting my CCNP in a couple of weeks...

 Steven A. Ridder  02/04/2002 1:18:21 PM 
Another person from CA, eh? The call was by the rule book, even if the rule
may have been unfair as some people have claimed.  We had that exect call go
against us in week 2 of a Jets game and we never cried.  We even lost that
game.  It's a legitimate rule.  AND, the Raiders still could have stopped us
before getting to kick the FG that put it into overtime. Then in overtime,
the Raiders still didn't stop us. So it wasn't like the refs just handed us
the game. There still were some major playing and feats that we had to make
to get us to where we got in that game.

Steve

Patricia Leeb-Hart  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Dang it, Steven, you had me thinking that this was a message about Port
 Address Translation!  :-D

 Next time please spell out the team name.  Or pick another team!  The
 Raiders were robbed, robbed, I say!

  Steven A. Ridder  02/03/2002 8:48:08 PM 
   PATRIOTS!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34397t=34392
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF DR problem [7:34379]

2002-02-04 Thread John Neiberger

Definitely!  The biggest gotcha is if the router ID changed on either
router that has virtual links configured.  The configs will have to be
changed to reflect the new router IDs or the virtual link won't work. 
If it's a virtual link problem, though, at the console (or by using term
mon) or R1 you should see some virtual-link-related errors every few
seconds.  You can also use show ip ospf virt to help troubleshoot that
particular issue.

That's my official guess.  Somewhere the VL is broken and it's probably
due to a change in router ID.  Let me know if that's not the problem and
I'll put the thinking cap back on!

John

 Priscilla Oppenheimer  2/4/02 3:30:18 PM

There was a virtual link. The virtual link was from R1 over to another

router across the Frame Relay cloud. R1 is an ABR connecting Area 0 and

Area 1. Area 0 is the Ethernet LAN. Area 1 is the Frame Relay cloud.
For 
some unknown reason, there's an Area 2 also on the other side of Area
1. 
Does that ring a bell regarding any gotchas??

Thanks

Priscilla

At 03:03 PM 2/4/02, John Neiberger wrote:
Priscilla,

I can't think of anything that could have been broken by using the ip
ospf priority command.  Unless you've run into some sort of bug I'm
guessing that there must be another issue.  Were you playing around
with
the loopback addresses?  Do you have any virtual links configured?
I'm just wondering if you configured something that depended on a
static
router ID and by adding or changing a loopback you've confused one or
two of the other routers.

You mentioned that the frame relay interface is configured as
point-to-point.  Is the opposite side configured the same way?  It
must
be since you said the adjacencies are forming...nevermind.   Hmm...

Are the missing routes in the OSPF database, just not in the routing
table?  If so, check out this link:

http://www.cisco.com/warp/public/104/26.html 

I can't think of any one thing that describes this issue but I'll
keep
pondering...

John

  Priscilla Oppenheimer  2/4/02 2:30:35 PM
 
Hi Group Study,

Playing with IP OSPF priority to influence which router became the
Designated Router (DR) caused routing problems for me in a recent
bout
with
a lab exercise. Can anyone help me understand if I did something
wrong?

I have 2 routers on an Ethernet LAN. Both of them also have WAN
connections
to remote sites. R1 has a Frame Relay link to the corporate cloud
via
its
S0 port. S0 is configured as ip ospf network point-to-point.

R2 has an ISDN link to yet another router, R3. This link is
configured
as
an OSPF point-to-point demand circuit.

R1 and R2 are connected via an Ethernet switch. My goal was to make
sure R1
became the DR on Ethernet. Both routers have loopbacks, but R2's is
higher,
so to make sure R2 did not become the DR, I configured it with:

ip ospf priority 0

R1 then did indeed become the DR on the Ethernet LAN because it was
using
the default priority 1.

Now, finally to the question.. On the other side of the ISDN and
across
the Frame Relay cloud, I couldn't see the Ethernet LAN in the routing
table. Routers formed adjacencies correctly and could reach most
networks,
but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN formed
an

adjacency and could see the rest of the internetwork.

Could I have broken something by playing with the priority??

Thanks for your help.

Priscilla





Priscilla Oppenheimer
http://www.priscilla.com 


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34398t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF DR problem [7:34379]

2002-02-04 Thread Priscilla Oppenheimer

At 05:33 PM 2/4/02, Walter Rogowski wrote:
Compare the OSPF hello interval on the FR interfaces with that on the
Ethernet interfaces...

I think they were different but that's normal, isn't it? The Hello timer 
for Ethernet is 10 seconds. For non-broadcast networks it's 30 seconds. The 
Frame Relay cloud was configured as point-to-point links.

The Ethernet routers formed an adjacency. The FR routers formed 
adjacencies. The Ethernet routers simply failed to tell the FR side about 
the Ethernet LAN!!

This was a remote lab that I only used for a few hours and now I'm not on 
it anymore. I will get back in soon and do some more research. Thanks for 
everyone's suggestions.

Priscilla



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
John Neiberger
Sent: 04 February 2002 22:03
To: [EMAIL PROTECTED]
Subject: Re: OSPF DR problem [7:34379]


Priscilla,

I can't think of anything that could have been broken by using the ip
ospf priority command.  Unless you've run into some sort of bug I'm
guessing that there must be another issue.  Were you playing around with
the loopback addresses?  Do you have any virtual links configured? I'm
just wondering if you configured something that depended on a static
router ID and by adding or changing a loopback you've confused one or
two of the other routers.

You mentioned that the frame relay interface is configured as
point-to-point.  Is the opposite side configured the same way?  It must
be since you said the adjacencies are forming...nevermind.   Hmm...

Are the missing routes in the OSPF database, just not in the routing
table?  If so, check out this link:

http://www.cisco.com/warp/public/104/26.html

I can't think of any one thing that describes this issue but I'll keep
pondering...

John

  Priscilla Oppenheimer  2/4/02 2:30:35 PM
 
Hi Group Study,

Playing with IP OSPF priority to influence which router became the
Designated Router (DR) caused routing problems for me in a recent bout
with a lab exercise. Can anyone help me understand if I did something
wrong?

I have 2 routers on an Ethernet LAN. Both of them also have WAN
connections to remote sites. R1 has a Frame Relay link to the corporate
cloud via its S0 port. S0 is configured as ip ospf network
point-to-point.

R2 has an ISDN link to yet another router, R3. This link is configured
as an OSPF point-to-point demand circuit.

R1 and R2 are connected via an Ethernet switch. My goal was to make sure
R1 became the DR on Ethernet. Both routers have loopbacks, but R2's is
higher, so to make sure R2 did not become the DR, I configured it with:

ip ospf priority 0

R1 then did indeed become the DR on the Ethernet LAN because it was
using the default priority 1.

Now, finally to the question.. On the other side of the ISDN and
across the Frame Relay cloud, I couldn't see the Ethernet LAN in the
routing table. Routers formed adjacencies correctly and could reach most
networks, but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN
formed an

adjacency and could see the rest of the internetwork.

Could I have broken something by playing with the priority??

Thanks for your help.

Priscilla





Priscilla Oppenheimer
http://www.priscilla.com


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34399t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF DR problem [7:34379]

2002-02-04 Thread Walter Rogowski

If you debug ospf adjacencies you might see complaints re mismatched
hello intervals. 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Baker, Jason
Sent: 04 February 2002 22:51
To: [EMAIL PROTECTED]
Subject: RE: OSPF DR problem [7:34379]


hmmm in ospf NBMA network i thought when you specified point to point
there was no DR, BDR election.

so maybe playing with the priorities may have caused problems


 -Original Message-
 From: Kane, Christopher A. [SMTP:[EMAIL PROTECTED]]
 Sent: Tuesday, 5 February 2002 9:36 am
 To:   [EMAIL PROTECTED]
 Subject:  RE: OSPF DR problem [7:34379]

 Priscilla,

 Now that you have R1 as the DR, it's his responsibility to announce 
 that network out to everyone else. Is R1 sending out LSAs (Network 
 LSA, type 2) to wherever it is that you are trying to see that 
 network? (Is it R3's routing table that you can't see the Ethernet 
 segment of R1 and R2?) Does the network show up in the OSPF database 
 but not the routing table? Or just the routing table?

 Chris

 -Original Message-
 From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
 Sent: Monday, February 04, 2002 4:31 PM
 To: [EMAIL PROTECTED]
 Subject: OSPF DR problem [7:34379]


 Hi Group Study,

 Playing with IP OSPF priority to influence which router became the 
 Designated Router (DR) caused routing problems for me in a recent bout

 with a lab exercise. Can anyone help me understand if I did something 
 wrong?

 I have 2 routers on an Ethernet LAN. Both of them also have WAN 
 connections to remote sites. R1 has a Frame Relay link to the 
 corporate cloud via its
 S0 port. S0 is configured as ip ospf network point-to-point.

 R2 has an ISDN link to yet another router, R3. This link is configured

 as an OSPF point-to-point demand circuit.

 R1 and R2 are connected via an Ethernet switch. My goal was to make 
 sure R1 became the DR on Ethernet. Both routers have loopbacks, but 
 R2's is higher,
 so to make sure R2 did not become the DR, I configured it with:

 ip ospf priority 0

 R1 then did indeed become the DR on the Ethernet LAN because it was 
 using the default priority 1.

 Now, finally to the question.. On the other side of the ISDN and 
 across the Frame Relay cloud, I couldn't see the Ethernet LAN in the 
 routing table. Routers formed adjacencies correctly and could reach 
 most networks,

 but not that darn Ethernet LAN. R1 and R2 on the Ethernet LAN formed 
 an adjacency and could see the rest of the internetwork.

 Could I have broken something by playing with the priority??

 Thanks for your help.

 Priscilla



 

 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34400t=34379
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Traffic type monitoring [7:34382]

2002-02-04 Thread Sam Deckert

by monitoring, i mean by protocol and possibly port..sorry, should have
been more specific.
 
Dont think MRTG will do this??
 
Thanks though!
 
Sam.
 
 -Original Message-
From: Jeroen Timmer [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, 5 February 2002 9:09 AM
To: 'Sam Deckert'
Subject: RE: Traffic type monitoring [7:34382]



You can try MRTG or the RRDtool. 

Gr8 tools for watching traffic. 


JT 


-Original Message- 
From: Sam Deckert [mailto:[EMAIL PROTECTED]
 ] 
Sent: Monday, February 04, 2002 10:42 PM 
To: [EMAIL PROTECTED] 
Subject: Traffic type monitoring [7:34382] 


Hello everyone, 

Just wondering what you guys would use to monitor the traffic going over a
single frame PVC? 

I was thinking of spanning the port on the switch, and using Sniffer with
filters.  Are there any better alternatives?? 

Thanks for any help! 

Sam. 
i=34382t=34382 
-- 
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
  
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34401t=34382
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



  1   2   >