RE: OSPF vs EIGRP [7:41613]
If I am not wrong this problem also occurs for BGP peers with unmatched MTU sizes which causes BGP to flap when they exchange routing tables , especially if one neighbour is configured with full-routes regards, suaveguru --- Priscilla Oppenheimer wrote: > The problem happens when the routers try to exchange > database description > packets. One side can send packets that are too > large for the other side to > receive. Then the routers never achieve adjacency. > It's an infamous > problem. I was glad that Kevin brought it up. I was > thinking we should have > mentioned it in that other thread about OSPF Hellos > (although this problem > happens after the initial hellos). > > More here: > > http://www.cisco.com/warp/public/104/12.html > > Priscilla > > At 11:33 AM 4/17/02, Kane, Christopher A. wrote: > > > The most frequently mismatched parameters > relevant for OSPF > > > configuration > > > seem to be dead intervals & mtu sizes. > > > >OSPF doesn't care about MTU size. > > > Priscilla Oppenheimer > http://www.priscilla.com [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://taxes.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41804&t=41613 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF and MTU, spawned from the OSPF vs. EIGRP thread [7:41803]
One of the relatively few nice things about working with data communications these days is that people like John Moy design non-policy based routing protocols, and he's fairly conscientious about leaving clues regarding the motivations underpinning the design decisions. In the case of OSPF, I note thematic commonalities between the intent to reserve the right to manufacture as large a packet as the medium will allow according to clues such as the mtu, and the assertion that running the protocol directly over ip is preferable to relying on udp partially because of the extra 8 bytes which are eligible to carry ospf data (section 3.2 of the book IIRC, and possibly in versions of the RFC as well). Maybe some routing anthropologist might be able to make something of that. In the interests of fairness, ospf might be said to not "care about" mtu, but in cases involving a large enough mtu disparity, it might be said not to "care to" form an adjacency either (this is particularly problematic given what organizations are willing to pay people who troubleshoot such issues, since ip connectivity & certain other routing protocols might very well be functional under these conditions). One way to characterize "weird interaction" might be as "indeterminism." After expending much effort to establish whether or not the difference in mtu calculation between the east coast router vendor and the west coast router vendor was 4 or 6 bytes, trying to remember which direction the difference ran, and trying to identify which part of the packet/frame/grouping-of-bits the one vendor was ignoring (as packet capturing products are sometimes said to do), scenarios would emerge whereby routers running identical operating systems over similarly provisioned lines of pupportedly identical capacity would require different offsets as revealed by means of debug messages/pcap traces/log entries. I lost the patience to even guess at what structural differences might account for the offset required to make a frame relay cross-vendor adjacency form. - Original Message - From: "Howard C. Berkowitz" To: Sent: Wednesday, April 17, 2002 8:32 PM Subject: Re: OSPF and MTU, spawned from the OSPF vs. EIGRP thread [7:41788] > At 3:43 PM -0400 4/17/02, Kane, Christopher A. wrote: > >In an attempt to find out why MTU is examined (more precisely, why it's > >examined in the Database Description packets instead of the Hello packets) > >one of my co-workers found this passage in IETF meeting minutes: > > > >"Editor's note: These minutes have not been edited. > > > >The OSPF Working Group met on Wednesday, December 11th from 1300-2500 at > >the San Jose IETF. Minutes of the meeting follow: > > > >The second problem, reported by Dan Senie of Proteon, concerns MTU > >mismatches between OSPF neighbors. This can cause flooding between > >the two neighbors to fail, with large Link State Updates being > >continually retransmitted. To fix this, we will report interface MTU > >in Database Description packets. A router will discard received > >Database Description packet which advertise an MTU that is larger > >than the router can receive. In this way, adjacencies will not form > >between routers having MTU mismatches. Tony Li expressed a desire > >for a more general purpose mechanism. There was also a question > >whether the same thing will have to be done for OSPF for IPv6 (we > >think so)." > > > > > >Very informative. Thank goodness for meeting minutes. Here's the link if > >anyone is as hung up on this as I seem to be. :) > > > >http://www.ietf.org/ietf/ospf/ospf-minutes-96dec.txt > > H...I _think_ I was at that meeting...or at least one in SJ about > that time. > > In a broader sense, I've run into other operational issues involving > the MTU. There's been a weird interaction between Cisco and Bay RS > OSPF, where Bay thinks Cisco's 1500 MTU is 1472. Don't know if it > ever was fixed. Incidentally, Passport OSPF is a different > implementation than Bay RS. > > While, in principle, OSPF supports fragmentation, it's one of those > things that I avoid like the plague. It tends to exercise parts of > the code that were rarely tested. When I was at Nortel, a sales type > came running in announcing that some competitor could do, IIRC, 47 > neighbors per hello. He wanted us to say we could do more, just > because bigger numbers are better in sales. The sanity of having 47 > neighbors on an interface was not considered. > > Anyway, I did a back-of-the-envelope calculation, and this number > (might have been 46 or 48) was the maximum number of neighbors that > could fit into a 1500 byte Hello packet. Good, practical restriction, > that never should be approached in practice. > > -- > "What Problem are you trying to solve?" > ***send Cisco questions to the list, so all can benefit -- not > directly to me*** > > Howard C. Berkowitz [EMAIL PROTECTED] > Chief Technol
Re: CCIE R&S Beta [7:41793]
I dont like the idea of having to learn MPLS and all the other stuff, im just going to accelrate my study for the current written Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41801&t=41793 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Helpppppp [7:41796]
If you have the snmp read-write community, you could retrieve your configuration without problem (I've done it once), see: http://www.tek-tips.com/gfaqs.cfm/lev2/8/lev3/58/spid/557/sfid/1160 and I think that if you have a tftp server in the same LAN is possible to upload a new configuration to the router but I haven't tried it, see: http://www.goonda.org/lists/pen-test/2001-01/msg00186.html Juan Blanco wrote: > > Team, > I have a 2500 route which I don't seem to be able to connect to > the console > port, and one serial interface has an ip, which I can ping to > and I can > telnet to it but I don't seem to be able to have the correct > password. What > else I can do here to get into this baby. > > Thanks, > > JB > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41800&t=41796 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Helpppppp [7:41796]
Is it possible that someone put the no-exec line on the console port
or your speed isn't set to 9600. Are you using hyperterm or teraterm
or equivalent?
If this isn't a production box, why not practice your password
recovery skills and set a new vty password and then check the console
settings?
Tim
On 17 Apr 2002 23:04:32 -0400, [EMAIL PROTECTED] ("Juan Blanco")
wrote:
>Team,
>I have a 2500 route which I don't seem to be able to connect to the console
>port, and one serial interface has an ip, which I can ping to and I can
>telnet to it but I don't seem to be able to have the correct password. What
>else I can do here to get into this baby.
>
>Thanks,
>
>JB
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41799&t=41796
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Helpppppp [7:41796]
Is it possible the console isn't set to 9600? --- Dennis - Original Message - From: "Juan Blanco" To: Sent: Wednesday, April 17, 2002 8:04 PM Subject: Helpp [7:41796] > Team, > I have a 2500 route which I don't seem to be able to connect to the console > port, and one serial interface has an ip, which I can ping to and I can > telnet to it but I don't seem to be able to have the correct password. What > else I can do here to get into this baby. > > Thanks, > > JB Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41798&t=41796 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE R&S Beta [7:41793]
Steve, It may be that you waste 3 hours and $50 bucks. Pat ""Steve Watson"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I had planned on taking this test before years end. Now that they are > offering the BETA I figure it's a good time to take it at a good price. > I really don't think I am ready but who knows (haven't failed a cert > test yet, fingers crossed, knocking on wood, rubbing the red headed > boy!!) > > > > What I would like to ask is, does anyone know of ANY drawbacks to taking > the test (knowing that you will probably fail)? > > > > I just want to get exposed to the new test with a good possibility of > passing. > > > > Thanks for any input. > > > > Steve Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41797&t=41793 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Helpppppp [7:41796]
Team, I have a 2500 route which I don't seem to be able to connect to the console port, and one serial interface has an ip, which I can ping to and I can telnet to it but I don't seem to be able to have the correct password. What else I can do here to get into this baby. Thanks, JB Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41796&t=41796 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CS-516 Terminal Server Issues [7:41760]
I think I made a mistake in my last post. Anyways, here's my config
of my cs-516.
ccie-lab#sh conf
Using 650 out of 32512 bytes
!
version 9.21
no service pad
service password-encryption
!
hostname ccie-lab
!
clock timezone EST -5
enable password 7 051F0F02
!
no ip domain-lookup
ip tcp synwait-time 5
!
interface Ethernet0
ip address 192.168.1.254 255.255.255.0
no lat enabled
no mop enabled
!
ip host R1 2001 192.168.1.254
ip host R2 2002 192.168.1.254
ip host R3 2003 192.168.1.254
ip host R4 2004 192.168.1.254
ip host R5 2005 192.168.1.254
ip host R6 2006 192.168.1.254
ip host R7 2007 192.168.1.254
ip host R8 2008 192.168.1.254
ip host R9 2009 192.168.1.254
ip host R10 2010 192.168.254
logging buffered
!
line con 0
no exec
exec-timeout 0 0
line 1 16
no exec
transport input telnet
stopbits 1
line vty 0 4
exec-timeout 0 0
password 7
login
!
end
ccie-lab#
On 17 Apr 2002 14:20:12 -0400, [EMAIL PROTECTED] ("Tim Lovelace")
wrote:
>I finally have gotten back around to getting my CS-516 back up and
>working, and I am having a problem..
>
>To actually connect to a console takes somewhere in the area of 5
>minutes, I hope that is not normal. Also, many times I get "Connection
>refused by remote host" although I could connect 20 minutes before and I
>can still consol in with my laptop fine. Below is a sh ver and wr term.
>If anyone has any advice, please let me know. Thanks for the help.
>
>Tim
>
>CS#sh ver
>CS Software (CS500-KR), Version 9.21(3), RELEASE SOFTWARE (fc1)
>Copyright (c) 1986-1994 by cisco Systems, Inc.
>Compiled Tue 03-May-94 16:25 by jyang
>
>ROM: System Bootstrap, Version 4.7(3), RELEASE SOFTWARE
>
>CS uptime is 1 hour, 55 minutes
>System restarted by reload
>System image file is unknown, booted via tty1
>
>Cisco-CS500 (68331) processor with 10240K bytes of memory.
>SuperLAT software (copyright 1990 by Meridian Technology Corp).
>1 Ethernet/IEEE 802.3 interface.
>16 terminal lines.
>32K bytes of non-volatile configuration memory.
>Configuration register is 0x101
>
>CS#wr term
>##
>Current configuration:
>!
>version 9.21
>no service pad
>!
>hostname CS
>!
>enable password XX
>!
>ip routing
>no ip domain-lookup
>!
>interface Loopback0
>ip address 10.10.10.10 255.255.255.0
>!
>interface Ethernet0
>ip address XXX.XXX.XXX.XXX 255.255.255.0
>!
>ip host R9 2009 10.10.10.10
>ip host R7 2007 10.10.10.10
>ip host R8 2008 10.10.10.10
>ip host R1 2001 10.10.10.10
>ip host R2 2002 10.10.10.10
>ip host R3 2003 10.10.10.10
>ip host R4 2004 10.10.10.10
>ip host R5 2005 10.10.10.10
>ip host R6 2006 10.10.10.10
>ip host R10 2010 10.10.10.10
>ip host R11 2011 10.10.10.10
>ip host R12 2012 10.10.10.10
>ip host R13 2013 10.10.10.10
>ip host R14 2014 10.10.10.10
>ip host R15 2015 10.10.10.10
>ip host R16 2016 10.10.10.10
>ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.XXX
>!
>line con 0
>line 1 16
>transport input telnet
>line vty 0 4
>password
>login
>!
>end
>
>CS#
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41795&t=41760
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CS-516 Terminal Server Issues [7:41760]
You may want to try exec-timeout 0 0 under line con0
and no exec under line 1 16.
If you console into the 516-CS, it will take 5-10
minutes. It is normal according to Cisco. It take
about 30 sec if you telnet into it instead of using
the console.
Han.
--- "[EMAIL PROTECTED] (Timothy Ouellette)"
wrote:
> You may want to try the no-exec under your line con
> 0
>
> Maybe there's a bunch of noise of the line from the
> other boxes trying
> to establish a connection.
>
> Just a thought.
>
> Tim
>
>
> On 17 Apr 2002 14:20:12 -0400,
> [EMAIL PROTECTED] ("Tim Lovelace")
> wrote:
>
> >I finally have gotten back around to getting my
> CS-516 back up and
> >working, and I am having a problem..
> >
> >To actually connect to a console takes somewhere in
> the area of 5
> >minutes, I hope that is not normal. Also, many
> times I get "Connection
> >refused by remote host" although I could connect 20
> minutes before and I
> >can still consol in with my laptop fine. Below is a
> sh ver and wr term.
> >If anyone has any advice, please let me know.
> Thanks for the help.
> >
> >Tim
> >
> >CS#sh ver
> >CS Software (CS500-KR), Version 9.21(3), RELEASE
> SOFTWARE (fc1)
> >Copyright (c) 1986-1994 by cisco Systems, Inc.
> >Compiled Tue 03-May-94 16:25 by jyang
> >
> >ROM: System Bootstrap, Version 4.7(3), RELEASE
> SOFTWARE
> >
> >CS uptime is 1 hour, 55 minutes
> >System restarted by reload
> >System image file is unknown, booted via tty1
> >
> >Cisco-CS500 (68331) processor with 10240K bytes of
> memory.
> >SuperLAT software (copyright 1990 by Meridian
> Technology Corp).
> >1 Ethernet/IEEE 802.3 interface.
> >16 terminal lines.
> >32K bytes of non-volatile configuration memory.
> >Configuration register is 0x101
> >
> >CS#wr term
> >##
> >Current configuration:
> >!
> >version 9.21
> >no service pad
> >!
> >hostname CS
> >!
> >enable password XX
> >!
> >ip routing
> >no ip domain-lookup
> >!
> >interface Loopback0
> >ip address 10.10.10.10 255.255.255.0
> >!
> >interface Ethernet0
> >ip address XXX.XXX.XXX.XXX 255.255.255.0
> >!
> >ip host R9 2009 10.10.10.10
> >ip host R7 2007 10.10.10.10
> >ip host R8 2008 10.10.10.10
> >ip host R1 2001 10.10.10.10
> >ip host R2 2002 10.10.10.10
> >ip host R3 2003 10.10.10.10
> >ip host R4 2004 10.10.10.10
> >ip host R5 2005 10.10.10.10
> >ip host R6 2006 10.10.10.10
> >ip host R10 2010 10.10.10.10
> >ip host R11 2011 10.10.10.10
> >ip host R12 2012 10.10.10.10
> >ip host R13 2013 10.10.10.10
> >ip host R14 2014 10.10.10.10
> >ip host R15 2015 10.10.10.10
> >ip host R16 2016 10.10.10.10
> >ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.XXX
> >!
> >line con 0
> >line 1 16
> >transport input telnet
> >line vty 0 4
> >password
> >login
> >!
> >end
> >
> >CS#
[EMAIL PROTECTED]
__
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41794&t=41760
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE R&S Beta [7:41793]
I had planned on taking this test before years end. Now that they are offering the BETA I figure it's a good time to take it at a good price. I really don't think I am ready but who knows (haven't failed a cert test yet, fingers crossed, knocking on wood, rubbing the red headed boy!!) What I would like to ask is, does anyone know of ANY drawbacks to taking the test (knowing that you will probably fail)? I just want to get exposed to the new test with a good possibility of passing. Thanks for any input. Steve Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41793&t=41793 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Xyplex Terminal Server [7:41792]
If you are in need of software for this piece of equipment, drop me an email. Steve Watson [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41792&t=41792 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CEF pitfalls [7:41568]
I am not sure I can point you to a comprehensive list, but I did find that searching through the Cisco IOS web pages can provide a good bit of detail on supported/unsupported functions with regards to CEF (and many other things). You might want to try to use the Cisco Bug toolkit and search on CEF. I did run into an interesting issue with CEF not working on a 2621 while doing inter-vlan routing. It was addressed in the IOC code update. Hope this helps. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41791&t=41568 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ccie 351-001 [7:41655]
I just checked the Cisco Website and it makes no mention of getting credit for the CCIE Communication and Services Lab Requirement by passing the beta CCIE written. In fact, what it does say, and I quote: If candidates pass the beta version, full credit will be given toward the written exam requirement for the CCIE Routing and Switching lab exam. Let's try and not misstate info which can only mislead the group. Misstating and misleading is usually relegated to politicians on Capitol Hill!! Greg Macaulay Oldest CCNP/CCDP on Earth Lifetime AARP member Retired Attorney/Law Professor -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 10:38 AM To: [EMAIL PROTECTED] Subject: Re: ccie 351-001 [7:41655] on the cisco site it states that if you pass the beta R&S written you get credit for the CCIE Communication and Services Lab Requirement, which makes no sense except they don't want you taking the cheap written for the most popular CCIE. --T Wallace Lee wrote: > > I have go through the announcement from Cisco Web. I wonder if > I can use this writen > test 351-001 to apply the LAB Test which is still 350-001. > Anyone have info about this ? > > rgds > > > khalid ameen wrote: > > > is there any news about the beta CCIE new exam 351-001 > > ? > > any news, > > > > __ > > Do You Yahoo!? > > Yahoo! Tax Center - online filing with TurboTax > > http://taxes.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41790&t=41655 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF and MTU, spawned from the OSPF vs. EIGRP thread [7:41788]
At 3:43 PM -0400 4/17/02, Kane, Christopher A. wrote: >In an attempt to find out why MTU is examined (more precisely, why it's >examined in the Database Description packets instead of the Hello packets) >one of my co-workers found this passage in IETF meeting minutes: > >"Editor's note: These minutes have not been edited. > >The OSPF Working Group met on Wednesday, December 11th from 1300-2500 at >the San Jose IETF. Minutes of the meeting follow: > >The second problem, reported by Dan Senie of Proteon, concerns MTU >mismatches between OSPF neighbors. This can cause flooding between >the two neighbors to fail, with large Link State Updates being >continually retransmitted. To fix this, we will report interface MTU >in Database Description packets. A router will discard received >Database Description packet which advertise an MTU that is larger >than the router can receive. In this way, adjacencies will not form >between routers having MTU mismatches. Tony Li expressed a desire >for a more general purpose mechanism. There was also a question >whether the same thing will have to be done for OSPF for IPv6 (we >think so)." > > >Very informative. Thank goodness for meeting minutes. Here's the link if >anyone is as hung up on this as I seem to be. :) > >http://www.ietf.org/ietf/ospf/ospf-minutes-96dec.txt H...I _think_ I was at that meeting...or at least one in SJ about that time. In a broader sense, I've run into other operational issues involving the MTU. There's been a weird interaction between Cisco and Bay RS OSPF, where Bay thinks Cisco's 1500 MTU is 1472. Don't know if it ever was fixed. Incidentally, Passport OSPF is a different implementation than Bay RS. While, in principle, OSPF supports fragmentation, it's one of those things that I avoid like the plague. It tends to exercise parts of the code that were rarely tested. When I was at Nortel, a sales type came running in announcing that some competitor could do, IIRC, 47 neighbors per hello. He wanted us to say we could do more, just because bigger numbers are better in sales. The sanity of having 47 neighbors on an interface was not considered. Anyway, I did a back-of-the-envelope calculation, and this number (might have been 46 or 48) was the maximum number of neighbors that could fit into a 1500 byte Hello packet. Good, practical restriction, that never should be approached in practice. -- "What Problem are you trying to solve?" ***send Cisco questions to the list, so all can benefit -- not directly to me*** Howard C. Berkowitz [EMAIL PROTECTED] Chief Technology Officer, GettLab/Gett Communications http://www.gettlabs.com Technical Director, CertificationZone.com http://www.certificationzone.com "retired" Certified Cisco Systems Instructor (CID) #93005 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41788&t=41788 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Basic PIX clarification ... [7:41779]
There are also methods such as outbound lists: outbound list_ID permit | deny ip_address [netmask[java | port[-port]]] [protocol] They tie into access lists via the list_ID parameter. Many other sorts of content filtering methods. Hope this helps. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41789&t=41779 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CS-516 Terminal Server Issues [7:41760]
You may want to try the no-exec under your line con 0
Maybe there's a bunch of noise of the line from the other boxes trying
to establish a connection.
Just a thought.
Tim
On 17 Apr 2002 14:20:12 -0400, [EMAIL PROTECTED] ("Tim Lovelace")
wrote:
>I finally have gotten back around to getting my CS-516 back up and
>working, and I am having a problem..
>
>To actually connect to a console takes somewhere in the area of 5
>minutes, I hope that is not normal. Also, many times I get "Connection
>refused by remote host" although I could connect 20 minutes before and I
>can still consol in with my laptop fine. Below is a sh ver and wr term.
>If anyone has any advice, please let me know. Thanks for the help.
>
>Tim
>
>CS#sh ver
>CS Software (CS500-KR), Version 9.21(3), RELEASE SOFTWARE (fc1)
>Copyright (c) 1986-1994 by cisco Systems, Inc.
>Compiled Tue 03-May-94 16:25 by jyang
>
>ROM: System Bootstrap, Version 4.7(3), RELEASE SOFTWARE
>
>CS uptime is 1 hour, 55 minutes
>System restarted by reload
>System image file is unknown, booted via tty1
>
>Cisco-CS500 (68331) processor with 10240K bytes of memory.
>SuperLAT software (copyright 1990 by Meridian Technology Corp).
>1 Ethernet/IEEE 802.3 interface.
>16 terminal lines.
>32K bytes of non-volatile configuration memory.
>Configuration register is 0x101
>
>CS#wr term
>##
>Current configuration:
>!
>version 9.21
>no service pad
>!
>hostname CS
>!
>enable password XX
>!
>ip routing
>no ip domain-lookup
>!
>interface Loopback0
>ip address 10.10.10.10 255.255.255.0
>!
>interface Ethernet0
>ip address XXX.XXX.XXX.XXX 255.255.255.0
>!
>ip host R9 2009 10.10.10.10
>ip host R7 2007 10.10.10.10
>ip host R8 2008 10.10.10.10
>ip host R1 2001 10.10.10.10
>ip host R2 2002 10.10.10.10
>ip host R3 2003 10.10.10.10
>ip host R4 2004 10.10.10.10
>ip host R5 2005 10.10.10.10
>ip host R6 2006 10.10.10.10
>ip host R10 2010 10.10.10.10
>ip host R11 2011 10.10.10.10
>ip host R12 2012 10.10.10.10
>ip host R13 2013 10.10.10.10
>ip host R14 2014 10.10.10.10
>ip host R15 2015 10.10.10.10
>ip host R16 2016 10.10.10.10
>ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.XXX
>!
>line con 0
>line 1 16
>transport input telnet
>line vty 0 4
>password
>login
>!
>end
>
>CS#
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41787&t=41760
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: WIC-1ADSL, Qwest DSL [7:41713]
Mark, I should have started with the config on http://www.cisco.com/warp/public/794/wicadsl_rfc_irb_nat_1.html After a lot of trial and error (and trying to not take my web site offline to much in the process), I managed to get a working configuration. Here is my configuration, minus a few unrelated lines, in case it helps somebody else. The config below bridges ATM0/0 and fa0/0 (my DMZ) then my private network is behind fa0/1. Now back to resetting all of my security back up... ! bridge irb ! interface ATM0/0 no ip address no atm ilmi-keepalive no cdp enable pvc 0/32 encapsulation aal5snap ! bundle-enable dsl operating-mode auto bridge-group 1 hold-queue 224 in ! interface FastEthernet0/0 no ip address no cdp enable bridge-group 1 interface FastEthernet0/1 description Connected to private network ip address 192.168.1.1 255.255.255.0 ip nat inside ! interface BVI1 ip address ###.###.###.### 255.255.255.248 ip access-group 100 in ip nat outside ! ! ip nat inside source list 1 interface BVI1 overload ! bridge 1 protocol ieee bridge 1 route ip Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41786&t=41713 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: WIC-1ADSL, Qwest DSL [7:41713]
Do you actually see any ILMI messaging across the DSL link? I would be very surprised to learn that any of the DSL providers are bothering with ILMI on DSL. It is sometime difficult to get them to enable ILMI on their real ATM links Chuck ""Mark Odette II"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Matt- Why don't you use the config example from this: > Configuring a Cisco 1700/2600/3600 ADSL WIC With IRB and > NAT Using RFC1483 Bridging > http://www.cisco.com/warp/public/794/wicadsl_rfc_irb_nat_1.html > > This is what I just used to set up an ADSL WIC on a 1720, and it pretty much > took right off. > > bridge irb > ! > ! > interface ATM0 > no ip address > atm ilmi-keepalive > pvc 0/16 ilmi > ! > pvc 0/35 > encapsulation aal5snap > ! > dsl operating-mode auto > no fair-queue > bridge-group 1 > hold-queue 224 in > ! > interface FastEthernet0 > description connected to Private LAN Block > ip address 192.168.10.1 255.255.255.0 > ip directed-broadcast > ip nat inside > no ip mroute-cache > no keepalive > speed auto > full-duplex > ! > interface BVI1 > ip address x.x.x.x 255.255.255.248 > ip nat outside > ! > ip nat inside source list 122 interface BVI1 overload > > ip route 0.0.0.0 0.0.0.0 bvi1 > > > and the best part is, you can use that second ethernet interface as a > DMZ! > > Just my .0010 though. > > -Mark > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > ipguru1 > Sent: Wednesday, April 17, 2002 10:43 AM > To: [EMAIL PROTECTED] > Subject: Re: WIC-1ADSL, Qwest DSL [7:41713] > > > I know this doesn't help, but I have covad dsl and have been trying to use a > 1750 on the > other end of my speedstream to do ios firewall... I can't get that to work > either. When > I do a debug all,... and after I dig through all the other crap... I keep > getting an > encapsulation mismatch and a no keepalive warning. > > Sure it doens't help, but doesnt it make you feel better you aren't alone? > > bk > > Matt Fisher wrote: > > > Anybody out there setup a WIC-1ADSL with Qwest DSL in Bridging mode. > > > > I've got a Cisco 2621 and want to bridge the ADSL connection with fa0/0 > (and > > NAT fa0/1). I'm able to get the ATM session up, but can't get IP traffic > to > > flow. > > > > Of the configs at: > > http://www.cisco.com/warp/public/794/ > > the one at: > > http://www.cisco.com/warp/public/794/wicadsl_rfc_6400irb.html > > looks like it is close to what I want, but the config as listed doesn't > > work. (Can't put the same IP address on two different interfaces.) > > > > Any thoughts... > > > > Matt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41785&t=41713 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: WIC-1ADSL, Qwest DSL [7:41713]
Matt- Why don't you use the config example from this: Configuring a Cisco 1700/2600/3600 ADSL WIC With IRB and NAT Using RFC1483 Bridging http://www.cisco.com/warp/public/794/wicadsl_rfc_irb_nat_1.html This is what I just used to set up an ADSL WIC on a 1720, and it pretty much took right off. bridge irb ! ! interface ATM0 no ip address atm ilmi-keepalive pvc 0/16 ilmi ! pvc 0/35 encapsulation aal5snap ! dsl operating-mode auto no fair-queue bridge-group 1 hold-queue 224 in ! interface FastEthernet0 description connected to Private LAN Block ip address 192.168.10.1 255.255.255.0 ip directed-broadcast ip nat inside no ip mroute-cache no keepalive speed auto full-duplex ! interface BVI1 ip address x.x.x.x 255.255.255.248 ip nat outside ! ip nat inside source list 122 interface BVI1 overload ip route 0.0.0.0 0.0.0.0 bvi1 and the best part is, you can use that second ethernet interface as a DMZ! Just my .0010 though. -Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of ipguru1 Sent: Wednesday, April 17, 2002 10:43 AM To: [EMAIL PROTECTED] Subject: Re: WIC-1ADSL, Qwest DSL [7:41713] I know this doesn't help, but I have covad dsl and have been trying to use a 1750 on the other end of my speedstream to do ios firewall... I can't get that to work either. When I do a debug all,... and after I dig through all the other crap... I keep getting an encapsulation mismatch and a no keepalive warning. Sure it doens't help, but doesnt it make you feel better you aren't alone? bk Matt Fisher wrote: > Anybody out there setup a WIC-1ADSL with Qwest DSL in Bridging mode. > > I've got a Cisco 2621 and want to bridge the ADSL connection with fa0/0 (and > NAT fa0/1). I'm able to get the ATM session up, but can't get IP traffic to > flow. > > Of the configs at: > http://www.cisco.com/warp/public/794/ > the one at: > http://www.cisco.com/warp/public/794/wicadsl_rfc_6400irb.html > looks like it is close to what I want, but the config as listed doesn't > work. (Can't put the same IP address on two different interfaces.) > > Any thoughts... > > Matt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41784&t=41713 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PPP MULTILINK LOAD THRIESHOLD [7:41783]
What is the difference between PPP MULTILINK LOAD THRIESHOLD and DILAERR LOAD-THRESHOLD ??? Anthony Pace Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41783&t=41783 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Basic PIX clarification ... [7:41779]
Higher security to Lower Security (inside to outside) connections are controlled by NAT and GLOBAL commands. Lower to Higher Security (outside to inside) connections are controlled by access-lists (or conduits) and static mapping. - Original Message - From: "Paul" To: Sent: Wednesday, April 17, 2002 2:59 PM Subject: Basic PIX clarification ... [7:41779] > Are the following statements correct ??? > Connections on the Pix are defined as either from lower to higher > security level or higher to lower security level. > > Higher to Lower security connections are controlled by the access-list > command. > > Lower to Higher security connections are controlled by nat and global > commands. > > Any help on clearing this will help me enormously ... > Many thanks in advance ... > Paul .. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41782&t=41779 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Ethereal Sniffer [7:41777]
us this command in the filter field (ip.addr eq XXX.XXX.XXX.XXX and ip.addr eq XXX.XXX.XXX.XXX) Replace the XXXs with the destination and source IP address. This will filter all the other traffic besides the two stations. HTH, Scott -Original Message- From: group study [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 2:45 PM To: [EMAIL PROTECTED] Subject: Ethereal Sniffer [7:41777] Hi , Anybody know how to do a IP filtering with Ethereal Sniffer.I just basically want to monitor the traffic only between two stations. Also, did any body has the luck with Coloring in Ethereal sniffer.Mine is not working. Jay _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41781&t=41777 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Some questions about IGRP [7:41763]
At 03:27 PM 4/17/02, Stephane LITKOWSKI wrote: >Hi all, > >I have some questions about IGRP : > >- In an update, IGRP distinguish Subnets, AS Networks and outside-AS >networks, when I take some traces, I can see that there's the number of each >category and then all routing entries but I don't understand how IGRP know >if the routing entry is Subnet, AS or outside AS. Distinguishing AS routes >(major net) or subnets is not important (applying interface mask and >comparing major networks can do distinction), but how IGRP knows if the >routing entry is candidate default ? An IGRP update message has three portions: interior, system (meaning "this autonomous system" but not interior), and exterior. (Sniffer uses slightly different terminology.) The interior section is for routes to subnets for the network on which the broadcast is being sent. Major networks (i.e. non-subnets) are put into the system portion of the update message unless they are exterior. A network will be flagged as exterior if it was learned from another router and the information arrived in the exterior portion of the update message. Exterior routes are also "candidate defaults." They are routes that go to or through routers that are considered to be appropriate as defaults, to be used when there is no explicit route to a destination. Cisco's implementation chooses a default route by picking the exterior route with the smallest metric. >- I can see in traces that IP addresses are coded with just 3 bytes, so I >think I cannot use subnets > 24 bits ... isn't it ? Not necessarily. Class C subnets could be greater than 24. With interior routes, a router can assume that the first octet is the same as the first octet of the sending and receiving interfaces, so it can be left out. Remember that IGRP is classful, so there's no way the prefix boundary could be over to the left past the 8-bit boundary, so IGRP leaves out the first 8 bits in interior (subnet) routes. Check your traces again. I think you'll see that it's the first octet (not the last) that is left out on interior routes. On system and exterior, which deal with major network numbers, the router can leave out the last octet. >- I can see different routing entry types, for example (traces done with NAI >Sniffer Pro) : > >ROUTING ENTRY #1 > IP Address = [172.16.1.0] > ... > >ROUTING ENTRY #2 > IP Address = [10.0.0.XX] >... > >what does the XX mean ??? I can see in hexa dump that's 00 Which kind was this? System or exterior I would guess. Perhaps the XX just means anything (wildcard). It's probably not actually in the hex dump, since IGRP just uses 24 bits as you mentioned. Check for 0A 00 00, which would be 10.0.0. >- What is the utility of the hopcount ? preventing from loop like in RIP ? Yes, it prevents loops. I think if the router sees the hop count increasing, it puts the route in holddown. >(so is the hop count incremented hop by hop ?) Yes. >- I saw that Cisco implement trigger updates in IGRP, but on a Cisco 1603R >with IOS 12.0(4)T, it don't seem to be implemented, when there's a change in >topology, there's no trigger update. Does anyone experienced this problem ? There should be a triggered update. It will list the unreachable network with the largest possible delay. Could you check again? Perhaps in some topologies, there would be no need to send a triggered update, but that would be strange. I think you maybe just didn't recognize it as being a triggered update. >- Does IGRP use a database like RIP ? or not ? It probably uses something like a database. For some reason, there aren't very good show commands for igrp though. Of course there's show ip route and show ip route igrp, but I don't know of others. By the way, when trying to figure out IGRP, I go to this old paper here: http://www.cisco.com/warp/public/103/5.html Hope that helps. Priscilla >Can I see the database like >"show ip rip database" ? > > >thanks a lot. > > >Stephane Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41780&t=41763 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Basic PIX clarification ... [7:41779]
Are the following statements correct ??? Connections on the Pix are defined as either from lower to higher security level or higher to lower security level. Higher to Lower security connections are controlled by the access-list command. Lower to Higher security connections are controlled by nat and global commands. Any help on clearing this will help me enormously ... Many thanks in advance ... Paul .. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41779&t=41779 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Starnge beahviour in Win2k [7:41778]
Hi, Iam getting a strange behavior in my Windows 2k machine.The machine is configured for 192.168.1.72 with mask of 255.255.255.0 and Default gateway of 192.168.1.254. I loaded ethereal sniffer on this machine and this machine is pinging other machine 192.168.1.225 on the network which is connected to a 3com switch. When I look at the sniffer ouput, I can see that the windows 2K machine,192.168.1.72 is continually sending a broadcast to 192.168.1.1 I don't know from where this address is coming?As far as I know there is no device in my network with an IP address 192.168.1.1 I appreciate some help. Jay _ Send and receive Hotmail on your mobile device: http://mobile.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41778&t=41778 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Ethereal Sniffer [7:41777]
Hi , Anybody know how to do a IP filtering with Ethereal Sniffer.I just basically want to monitor the traffic only between two stations. Also, did any body has the luck with Coloring in Ethereal sniffer.Mine is not working. Jay _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41777&t=41777 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE BETA [7:41769]
I am scheduled to take it on 4/29, I was told when registering it is 150 questions long with a 3 hour time limit. Comparing the new objectives to the old ones, it looks as though they have taken out DECnet and Appletalk while lightening up on Token Ring as well as a few other subjects. However, they look to have added IPv6, wireless, and more emphasis on switching, multicast, and QoS. I am planning on hitting the usual books as well as scouring the links they provided (among others) for information. I would imagine those links were put on that page for a reason, if you know what I mean. I'm very curious to see how much more difficult they have made the new exam. I haven't taken the old one, so I can't speak from experience, but I have had a few people tell me that it was much easier than it should have been. I would imagine that this one is going to be pretty tough. -Original Message- From: Clark Jason [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 3:59 PM To: [EMAIL PROTECTED] Subject:CCIE BETA [7:41769] Afternoon all, Is there anyone out there that is planning on taking the CCIE BETA exam? If so, what are some of the resources that you guys will be using to prepare? I know the typical.CaslowRIF's.Halabi, but what are some of the other things to look out for? Any info is appreciated Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41776&t=41769 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OSPF vs EIGRP [7:41613]
The problem happens when the routers try to exchange database description packets. One side can send packets that are too large for the other side to receive. Then the routers never achieve adjacency. It's an infamous problem. I was glad that Kevin brought it up. I was thinking we should have mentioned it in that other thread about OSPF Hellos (although this problem happens after the initial hellos). More here: http://www.cisco.com/warp/public/104/12.html Priscilla At 11:33 AM 4/17/02, Kane, Christopher A. wrote: > > The most frequently mismatched parameters relevant for OSPF > > configuration > > seem to be dead intervals & mtu sizes. > >OSPF doesn't care about MTU size. Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41775&t=41613 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE BETA [7:41769]
When I took the CCIE Security Beta we didn't know our PASS/FAIL status until 6-8 weeks later. ""Clark Jason"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I heard that. Im pretty much going to tackle it with the same assumption. > Still I would like to be relatively prepared for it. I also notice that you > get the results like 6-8 weeks later. Does that mean that you dont receive a > "PASS/FAIL" screen at the end of the exam? Hmmmkinda tough when you > think about itI mean, not knowing how well you did Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41774&t=41769 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ccie 351-001 [7:41655]
Sorry i think that was a typo.CCO's website does indeed say that the 351-001 counts for the R&S qualification exam. Here's the Link: http://www.cisco.com/warp/public/625/ccie/ccie_program/whatsnew.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41773&t=41655 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE BETA [7:41769]
I heard that. Im pretty much going to tackle it with the same assumption. Still I would like to be relatively prepared for it. I also notice that you get the results like 6-8 weeks later. Does that mean that you dont receive a "PASS/FAIL" screen at the end of the exam? Hmmmkinda tough when you think about itI mean, not knowing how well you did Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41772&t=41769 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE BETA [7:41769]
I'm using (as you stated) "the usual" Caslow, Doyle, Halabi. On the webpage with the blueprint, there are a tone of URLs they provide, so I'm going to scrounge through those too (and of course use the free token ring white paper that everyone raves about). Other than that, I've got Cisco's books on QoS, MPLS, Multicast, SNA, Network Design, etc. and some other miscellaneous books on ATM, SNA, SONET, etc to complement the array of CCNP books And how is it humanly possible to cover all of that in just over 2 weeks?!?!?!?!? I seriously don't intend to pass because of the serious time crunch, but for $50 it'll give me a good idea of what the CCIE exam is looking for.. oh well. Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41771&t=41769 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Frame-Relay Map [7:41709]
oh, ok I was operating on what he said without the book in front of me... Duh! --T Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41770&t=41709 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE BETA [7:41769]
Afternoon all, Is there anyone out there that is planning on taking the CCIE BETA exam? If so, what are some of the resources that you guys will be using to prepare? I know the typical.CaslowRIF's.Halabi, but what are some of the other things to look out for? Any info is appreciated Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41769&t=41769 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
TechSkills Exam [7:41768]
Hello i'm current study for CIT (640-506) and i would like your opinion about Techskills Exam... Someome have used before this kind of exams? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41768&t=41768 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF vs EIGRP [7:41613]
You got here just before I did. I was just about to say that RFC 2328 overrides 2178. ""Kane, Christopher A."" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > The most frequently mismatched parameters relevant for OSPF > > > > configuration > > > > seem to be dead intervals & mtu sizes. > > > > > > OSPF doesn't care about MTU size. > > > > Uh, excuse me? Go read RFC 2178 (OSPF v2), section G.9: > > > > "When two neighboring routers have a different interface MTU for their > > common network segment, serious problems can ensue: large packets are > > prevented from being successfully transferred from one router > > to the other, > > impairing OSPF's flooding algorithm and possibly creating > > "black holes" for > > user data traffic. > > > > This memo [RFC2178] provides a fix for the interface MTU > > mismatch problem by > > advertising the interface MTU in Database Description > > packets. When a router > > receives a Database description packet advertising an MTU > > larger than the > > router can receive, the router drops the Database Description > > packet. This > > prevents an adjacency from forming, telling OSPF flooding and > > user data > > traffic to avoid the connection between the two routers. For more > > information, see Sections 10.6, 10.8, and A.3.3. > > > > Wow. The learning continues. I have never actually run into this problem. I > have checked the RFC. That's RFC 2328 by the way, it obsoletes RFC 2178. > > Indeed, its during the Database Describtion Packet exchange that the MTU > size is checked. The Database Description Packet format includes an > "Interface MTU" field. But, why wait until the DDP phase of the > neighbor/adjacency development? Why wouldn't this thing be a 'must match' > situation and be included in the Hello packet? I just config'd it in my lab > on a Point-to-Point and the neighbor state makes it to EXSTART and then > stops. The router with the smaller MTU size reports the following in it's > debug: > > Nbr x.x.x.x has larger interface MTU > > Only the router with the smaller MTU is upset by this. The router with the > interface that has the larger MTU makes no mention of any problems. > > Quick search on CCO shows that Cisco has a work around for this: > http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipr > rp_r/1rfospf.htm#xtocid24 > > Again, learn something new everyday. Since MTU is never mentioned in the > Hello packet, I thought it didn't matter. > > Sorry about posting inaccurate information. I appreciate the feedback > pointing out my error. > > -chris Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41767&t=41613 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OSPF and MTU, spawned from the OSPF vs. EIGRP thread [7:41766]
In an attempt to find out why MTU is examined (more precisely, why it's examined in the Database Description packets instead of the Hello packets) one of my co-workers found this passage in IETF meeting minutes: "Editor's note: These minutes have not been edited. The OSPF Working Group met on Wednesday, December 11th from 1300-2500 at the San Jose IETF. Minutes of the meeting follow: The second problem, reported by Dan Senie of Proteon, concerns MTU mismatches between OSPF neighbors. This can cause flooding between the two neighbors to fail, with large Link State Updates being continually retransmitted. To fix this, we will report interface MTU in Database Description packets. A router will discard received Database Description packet which advertise an MTU that is larger than the router can receive. In this way, adjacencies will not form between routers having MTU mismatches. Tony Li expressed a desire for a more general purpose mechanism. There was also a question whether the same thing will have to be done for OSPF for IPv6 (we think so)." Very informative. Thank goodness for meeting minutes. Here's the link if anyone is as hung up on this as I seem to be. :) http://www.ietf.org/ietf/ospf/ospf-minutes-96dec.txt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41766&t=41766 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Passing CIT score [7:41472]
692 was the pass for me, I passed it last monday with 896 ""Kris Keen"" a icrit dans le message news: [EMAIL PROTECTED] > William, > > 690 was the pass, I passed this exam last friday with 885 > > Cheers > Kris Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41765&t=41472 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Info needed for finding C&S Topics [7:41764]
Hello, I am trying to find out some inforfmation a bout the structure of CCIE C&S. Is it possible to let me know about the following? 1. C&S written exam-Is there any exam for Voice currently? If there is no voice what is the options? 2. Can you please suggest some CISCO Press books for C&S exam.s Thanks shree __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://taxes.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41764&t=41764 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Some questions about IGRP [7:41763]
Hi all, I have some questions about IGRP : - In an update, IGRP distinguish Subnets, AS Networks and outside-AS networks, when I take some traces, I can see that there's the number of each category and then all routing entries but I don't understand how IGRP know if the routing entry is Subnet, AS or outside AS. Distinguishing AS routes (major net) or subnets is not important (applying interface mask and comparing major networks can do distinction), but how IGRP knows if the routing entry is candidate default ? - I can see in traces that IP addresses are coded with just 3 bytes, so I think I cannot use subnets > 24 bits ... isn't it ? - I can see different routing entry types, for example (traces done with NAI Sniffer Pro) : ROUTING ENTRY #1 IP Address = [172.16.1.0] ... ROUTING ENTRY #2 IP Address = [10.0.0.XX] ... what does the XX mean ??? I can see in hexa dump that's 00 - What is the utility of the hopcount ? preventing from loop like in RIP ? (so is the hop count incremented hop by hop ?) - I saw that Cisco implement trigger updates in IGRP, but on a Cisco 1603R with IOS 12.0(4)T, it don't seem to be implemented, when there's a change in topology, there's no trigger update. Does anyone experienced this problem ? - Does IGRP use a database like RIP ? or not ? Can I see the database like "show ip rip database" ? thanks a lot. Stephane Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41763&t=41763 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: 2900 series switch password [7:41680]
Change the password within the first few seconds of the switch booting and getting into enable mode. When it asks for the old password, hit ENTER. ""Magichut"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Thank you, > I can get to the enable mode, however when I run the set enablepass, it > requests the old password. hence this command is useless... > Any other ideas? > Thanks again, > > ""Patrick Bass"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > use the 'set password' command to change the login password of the cli. > > use the 'set enablepass' command to change the password for the privileged > > level of the cli. > > > > > > ""Magichut"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hello, > > > > > > I have the silliest question. It should be simple, but it's not > > turning > > > out that way. I have a Cisco ws-c2900 series switch with a sup. eng. on > > it. > > > It has a console port, 2 mdi ports and a reset button (no Mode button). > I > > > am merely trying to reset the password. the company that owns the > switch > > > lost their IT guy and need to reset the vlans. I can get to enable mode > > by > > > cycling the switch and initially logging in within seconds of boot up. > > but > > > cannot reset the password. I can change the vlans, reset gateways, and > > > everything but reset the password. any help would be appreciated here. > > > > > > Thanks, > > > Magichut Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41762&t=41680 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ip/tv [7:41758]
George, I'll get the info for you from my IPTV studio manager. He runs several hundred iPTV servers for the main campus. As soon as I hear from him I'll forward it along... Larry Letterman Cisco Systems [EMAIL PROTECTED] - Original Message - From: "george gittins" To: Sent: Wednesday, April 17, 2002 11:01 AM Subject: ip/tv [7:41758] > I work for a school district and the person who had my position was working > in setting up ip/tv .However when i got aboard the capture card is missing i > only posses the software. my question is , and for larry letterman , can i > buy a regular video capture card so i can install ip/tv.will this work? > > George Gittins > Internet Systems Manager > Weslaco, Tx 78599 > Phone (956)9696557 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41761&t=41758 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OSPF vs EIGRP [7:41613]
> > > The most frequently mismatched parameters relevant for OSPF > > > configuration > > > seem to be dead intervals & mtu sizes. > > > > OSPF doesn't care about MTU size. > > Uh, excuse me? Go read RFC 2178 (OSPF v2), section G.9: > > "When two neighboring routers have a different interface MTU for their > common network segment, serious problems can ensue: large packets are > prevented from being successfully transferred from one router > to the other, > impairing OSPF's flooding algorithm and possibly creating > "black holes" for > user data traffic. > > This memo [RFC2178] provides a fix for the interface MTU > mismatch problem by > advertising the interface MTU in Database Description > packets. When a router > receives a Database description packet advertising an MTU > larger than the > router can receive, the router drops the Database Description > packet. This > prevents an adjacency from forming, telling OSPF flooding and > user data > traffic to avoid the connection between the two routers. For more > information, see Sections 10.6, 10.8, and A.3.3. > Wow. The learning continues. I have never actually run into this problem. I have checked the RFC. That's RFC 2328 by the way, it obsoletes RFC 2178. Indeed, its during the Database Describtion Packet exchange that the MTU size is checked. The Database Description Packet format includes an "Interface MTU" field. But, why wait until the DDP phase of the neighbor/adjacency development? Why wouldn't this thing be a 'must match' situation and be included in the Hello packet? I just config'd it in my lab on a Point-to-Point and the neighbor state makes it to EXSTART and then stops. The router with the smaller MTU size reports the following in it's debug: Nbr x.x.x.x has larger interface MTU Only the router with the smaller MTU is upset by this. The router with the interface that has the larger MTU makes no mention of any problems. Quick search on CCO shows that Cisco has a work around for this: http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipr rp_r/1rfospf.htm#xtocid24 Again, learn something new everyday. Since MTU is never mentioned in the Hello packet, I thought it didn't matter. Sorry about posting inaccurate information. I appreciate the feedback pointing out my error. -chris Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41759&t=41613 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CS-516 Terminal Server Issues [7:41760]
I finally have gotten back around to getting my CS-516 back up and working, and I am having a problem.. To actually connect to a console takes somewhere in the area of 5 minutes, I hope that is not normal. Also, many times I get "Connection refused by remote host" although I could connect 20 minutes before and I can still consol in with my laptop fine. Below is a sh ver and wr term. If anyone has any advice, please let me know. Thanks for the help. Tim CS#sh ver CS Software (CS500-KR), Version 9.21(3), RELEASE SOFTWARE (fc1) Copyright (c) 1986-1994 by cisco Systems, Inc. Compiled Tue 03-May-94 16:25 by jyang ROM: System Bootstrap, Version 4.7(3), RELEASE SOFTWARE CS uptime is 1 hour, 55 minutes System restarted by reload System image file is unknown, booted via tty1 Cisco-CS500 (68331) processor with 10240K bytes of memory. SuperLAT software (copyright 1990 by Meridian Technology Corp). 1 Ethernet/IEEE 802.3 interface. 16 terminal lines. 32K bytes of non-volatile configuration memory. Configuration register is 0x101 CS#wr term ## Current configuration: ! version 9.21 no service pad ! hostname CS ! enable password XX ! ip routing no ip domain-lookup ! interface Loopback0 ip address 10.10.10.10 255.255.255.0 ! interface Ethernet0 ip address XXX.XXX.XXX.XXX 255.255.255.0 ! ip host R9 2009 10.10.10.10 ip host R7 2007 10.10.10.10 ip host R8 2008 10.10.10.10 ip host R1 2001 10.10.10.10 ip host R2 2002 10.10.10.10 ip host R3 2003 10.10.10.10 ip host R4 2004 10.10.10.10 ip host R5 2005 10.10.10.10 ip host R6 2006 10.10.10.10 ip host R10 2010 10.10.10.10 ip host R11 2011 10.10.10.10 ip host R12 2012 10.10.10.10 ip host R13 2013 10.10.10.10 ip host R14 2014 10.10.10.10 ip host R15 2015 10.10.10.10 ip host R16 2016 10.10.10.10 ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.XXX ! line con 0 line 1 16 transport input telnet line vty 0 4 password login ! end CS# Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41760&t=41760 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ip/tv [7:41758]
I work for a school district and the person who had my position was working in setting up ip/tv .However when i got aboard the capture card is missing i only posses the software. my question is , and for larry letterman , can i buy a regular video capture card so i can install ip/tv.will this work? George Gittins Internet Systems Manager Weslaco, Tx 78599 Phone (956)9696557 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41758&t=41758 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCNP -50o series test [7:41757]
Presently CCNP- 503 , 504 ,505 and 506 is only a written exam, but in near future it is going to changeto 600 series . So with this new pattern the exam will be written and Lab test or only the written exam. -Ravi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41757&t=41757 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF vs EIGRP [7:41613]
""Kane, Christopher A."" wrote in message news:[EMAIL PROTECTED]... > > The most frequently mismatched parameters relevant for OSPF > > configuration > > seem to be dead intervals & mtu sizes. > > OSPF doesn't care about MTU size. Uh, excuse me? Go read RFC 2178 (OSPF v2), section G.9: "When two neighboring routers have a different interface MTU for their common network segment, serious problems can ensue: large packets are prevented from being successfully transferred from one router to the other, impairing OSPF's flooding algorithm and possibly creating "black holes" for user data traffic. This memo [RFC2178] provides a fix for the interface MTU mismatch problem by advertising the interface MTU in Database Description packets. When a router receives a Database description packet advertising an MTU larger than the router can receive, the router drops the Database Description packet. This prevents an adjacency from forming, telling OSPF flooding and user data traffic to avoid the connection between the two routers. For more information, see Sections 10.6, 10.8, and A.3.3. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41756&t=41613 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
WANTED!!!! Cisco CallManager Starter Kit [7:41755]
Guys, I have had to revise my earlier request owing to a slight change in my requirement. The Cisco callmanager starter kit will suffice what I will like to achieve in a home lab. So, if anyone has any to sell, by all means reply directly to me. Cheers - George. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41755&t=41755 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: toughest CCNP exam? [7:41694]
What makes the BSCN more difficult is the fact that you have to know EIGRP, OSPF, and BGP equally well. You never know what you'll get on the exam. For example, my exam contained practically all OSPF. So, what usually happens to somebody is that they'll study BGP and OSPF to death and then their exam is all EIGRP! To sum it up, there's a lot to know for the BSCN exam. Shawn K. -Original Message- From: Sean Wolfe [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 11:28 AM To: [EMAIL PROTECTED] Subject: RE: toughest CCNP exam? [7:41694] Actually, that's great news. . . so CCDA/DP is a good prep for CCIE-W. . . sounds good as that's my plan. Good to hear that CCDP is tough! Although I don't do much with L2 or campus stuff in my current job, I'm very interested in the BCMSN curriculum. Looks like very interesting technology and I want to learn more about ATM. What makes the BSCN more difficult? All the BGP stuff? Thanks.Kaminski, Shawn G wrote: > > In my opinion, BSCN is the toughest and BCMSN is the easiest. > > Also in my opinion, the CCDP is very difficult. It is similar in > difficulty to the CCIE Written. > > Shawn K. > > > -Original Message- > > From: Sean Wolfe [SMTP:[EMAIL PROTECTED]] > > Sent: Tuesday, April 16, 2002 10:23 PM > > To: [EMAIL PROTECTED] > > Subject:toughest CCNP exam? [7:41694] > > > > What are people's opinions on the toughest CCNP test? I'm > almost two > > along, > > set for BCMSN and CIT next. How does CCDP compare? > > > > Obviously depends on one's area of experience. . . still, I'd > be > > interested > > to know your opinions. > > > > Cheers, -Sean. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41754&t=41694 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF vs EIGRP [7:41613]
oh yeah, it does, you can bet it does :) Try to set up a OSPF adjacency between 2 neighbors that have different MTU's in their interfaces and you will see it :) I went through a problem with that once, both routers had ATM int, but they had different MTU's (due some problems with the Passport ATM Net that we had). They would not form an adjacency, and the error message was about the DDP packets, which could not be exchanged once that the MTU didn't match. Persio - Original Message - From: "Kane, Christopher A." To: Sent: Wednesday, April 17, 2002 12:33 PM Subject: RE: OSPF vs EIGRP [7:41613] > > The most frequently mismatched parameters relevant for OSPF > > configuration > > seem to be dead intervals & mtu sizes. > > OSPF doesn't care about MTU size. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41753&t=41613 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ACL - Let's put some numbers on... [7:41738]
Thanks Sean :-) Ole ~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~ http://www.RouterChief.com ~ Need a Job? http://www.OleDrews.com/job ~ -Original Message- From: Sean Wolfe [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 9:47 AM To: [EMAIL PROTECTED] Subject: RE: ACL - Let's put some numbers on... [7:41738] Although I have nothing intelligent to say about your actual question, I just wanted to compliment you on your cool routerchief.com website. 8^) Everybody go check it out! -Sean. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41752&t=41738 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: toughest CCNP exam? [7:41694]
The bscn is difficult for some because it requires a good knowledge of all 4 routing protocols as well as the router commands and ACL knowledge Larry Letterman Cisco Systems [EMAIL PROTECTED] - Original Message - From: "Sean Wolfe" To: Sent: Wednesday, April 17, 2002 8:28 AM Subject: RE: toughest CCNP exam? [7:41694] > Actually, that's great news. . . so CCDA/DP is a good prep for CCIE-W. . . > sounds good as that's my plan. Good to hear that CCDP is tough! > > Although I don't do much with L2 or campus stuff in my current job, I'm very > interested in the BCMSN curriculum. Looks like very interesting technology > and I want to learn more about ATM. > > What makes the BSCN more difficult? All the BGP stuff? > > > Thanks.Kaminski, Shawn G wrote: > > > > In my opinion, BSCN is the toughest and BCMSN is the easiest. > > > > Also in my opinion, the CCDP is very difficult. It is similar > > in difficulty > > to the CCIE Written. > > > > Shawn K. > > > > > -Original Message- > > > From: Sean Wolfe [SMTP:[EMAIL PROTECTED]] > > > Sent: Tuesday, April 16, 2002 10:23 PM > > > To: [EMAIL PROTECTED] > > > Subject: toughest CCNP exam? [7:41694] > > > > > > What are people's opinions on the toughest CCNP test? I'm > > almost two > > > along, > > > set for BCMSN and CIT next. How does CCDP compare? > > > > > > Obviously depends on one's area of experience. . . still, I'd > > be > > > interested > > > to know your opinions. > > > > > > Cheers, -Sean. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41751&t=41694 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
