RE: Router/Bridge re-transmit frames? [7:43459]
Sure, it's retransmit if there's a collision. Cut-through switching will begin forwarding as soon as the MAC is read, but it must still keep a copy in memory in case of collision. I guess I don't know for certain, but I would assume... Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43537&t=43459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco 7400's [7:43536]
I am writing this wondering how many of you have installed the Cisco 7400's in your networks. We recently installed 2 in our network and we had nothing but hardware problems with them. One of the boxes had a bad etherent port and the other had a bad hssi card. Needless to say it was a nightmare. So now that we have the boxes installed they are re-booting from software forced crashes. We opened a case with Cisco and they acknowledged that the 7400's have hardware issues and they are sending us 2 of the newer models that resolve the initial models problems. Have any of you out there experienced the same problems as we have? And if so did the newer replacement boxes resolve the issues? Thanks for any input. Matt Street Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43536&t=43536 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Pix load balance? [7:42974]
Brian, Yes, most of them do nat. From the client WS perspective, there is only a single server IP, so it sends packets to that IP address. Once the switch gets the packet (since it is answering for that IP), it needs to forward the packet to a server. Normally, for the server to accept that packet the switch must change the dst IP to the servers real IP address and likewise alter the replies from the server so they appear to come from the virtual IP. (i.e. NAT) Note that some switches support an option called "direct sesrver return" in which the switch sets up the inital conversation, and then the server talks directly back to the client without having to go through the switch. In this case NAT is not performed between the server and the client. (I don't think this architecture is widely used though) The layer 4-7 portion is really only relevant when the switch is deciding 1) Is a service "up" on a particular server and 2) How does the switch determine to which server an individual packet needs to be forwarded (i.e. how much of the data portion of a packet has to be examined to determine what traffic stream it belongs to) HTH, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Zeitz Sent: Tuesday, May 07, 2002 9:25 AM To: [EMAIL PROTECTED] Subject: RE: Pix load balance? [7:42974] Dumb question, does any of these devices use nat? I just read that pix to DMZ interface uses dNat, not sure if that is faster. I was reading my Alteon Web Switch book last night, it says you CAN do nat, but I don't know if layer 4-7 switches actually DO nat normall. If it's a switch, it should be switching right, the translation gets done in layer 4. kinda confused. -Original Message- From: Gragido, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 12:09 PM To: Brian Zeitz; [EMAIL PROTECTED] Subject: RE: Pix load balance? [7:42974] The best way to load balance is to use an application layer (layer 4-7) switch. I am not too familiar with Cisco's offering of this technology (sadly), but have worked extensively with Foundry's ServerIrons and they are excellent devices! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Zeitz Sent: Tuesday, May 07, 2002 8:50 AM To: [EMAIL PROTECTED] Subject: RE: Pix load balance? [7:42974] Load balancing is supposed to be done on content switches according to what I am reading. I cannot be done on the firewall withing the site, nor can it be done with different ISPs. Brian Zeitz MCSE, CCNP -Original Message- From: Gaz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 6:58 AM To: [EMAIL PROTECTED] Subject: Re: Pix load balance? [7:42974] What's the reason? I'm not disputing the fact, just wondering what the limitation is. I take it that the limitation is only that it cannot do stateful failover with two active PIXes? Cheers, Gaz wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Yeah, I asked the same questions last month. They can not. If you really > need firewall and Load balancing, FW-1 is the way to go. > > Theo > CSS1, CCNP, CCSE > > > > > > > "Patrick" > Sent by: [EMAIL PROTECTED] > 05/06/2002 06:28 AM > Please respond to "Patrick" > > > To: [EMAIL PROTECTED] > cc: > Subject:Re: Pix load balance? [7:42974] > > > No. > > ""GEORGE"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Can you load balance to pix firewalls? > > Has anyone done this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43535&t=42974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Pix load balance? [7:42974]
The Cisco CSS11xxx can do NAT without degrading performance. I have had excellent experiences setting this up for clients. -Original Message- From: Brian Zeitz [mailto:[EMAIL PROTECTED]] Sent: Tue 5/7/2002 12:24 PM To: [EMAIL PROTECTED] Cc: Subject: RE: Pix load balance? [7:42974] Dumb question, does any of these devices use nat? I just read that pix to DMZ interface uses dNat, not sure if that is faster. I was reading my Alteon Web Switch book last night, it says you CAN do nat, but I don't know if layer 4-7 switches actually DO nat normall. If it's a switch, it should be switching right, the translation gets done in layer 4. kinda confused. -Original Message- From: Gragido, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 12:09 PM To: Brian Zeitz; [EMAIL PROTECTED] Subject: RE: Pix load balance? [7:42974] The best way to load balance is to use an application layer (layer 4-7) switch. I am not too familiar with Cisco's offering of this technology (sadly), but have worked extensively with Foundry's ServerIrons and they are excellent devices! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Zeitz Sent: Tuesday, May 07, 2002 8:50 AM To: [EMAIL PROTECTED] Subject: RE: Pix load balance? [7:42974] Load balancing is supposed to be done on content switches according to what I am reading. I cannot be done on the firewall withing the site, nor can it be done with different ISPs. Brian Zeitz MCSE, CCNP -Original Message- From: Gaz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 6:58 AM To: [EMAIL PROTECTED] Subject: Re: Pix load balance? [7:42974] What's the reason? I'm not disputing the fact, just wondering what the limitation is. I take it that the limitation is only that it cannot do stateful failover with two active PIXes? Cheers, Gaz wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Yeah, I asked the same questions last month. They can not. If you really > need firewall and Load balancing, FW-1 is the way to go. > > Theo > CSS1, CCNP, CCSE > > > > > > > "Patrick" > Sent by: [EMAIL PROTECTED] > 05/06/2002 06:28 AM > Please respond to "Patrick" > > > To: [EMAIL PROTECTED] > cc: > Subject:Re: Pix load balance? [7:42974] > > > No. > > ""GEORGE"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Can you load balance to pix firewalls? > > Has anyone done this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43534&t=42974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Layer 2 Test Tool [7:43484]
Best I can think of is tools to manufacture layer 2 frames. Arp poison tools are an excellent example - though perhaps not perfect because you are not running IP - regardless, an arp-poison tool will kick out frames with MAC headers you specify. Additionally, any raw-packet-write tool should allow you to manufacture appropriate frames with the necessary L2 headers. I don't think you will get an "echo" back, but if you put a sniffer on the far segment, you should be able to determine whether your manufactured frames make it to the other side. Good luck! --Wes Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43533&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Need advice : Cisco equipment for CCNP [7:43506]
Shawn, The 2926T is a good viable option as well as the 2901. Both switches run the cat5k OS. The 2926T takes special blades that do not work in a cat5k or vice-versa (believe me, I've tried). I prefer the cat2901 over any of the options because of the power consumption factor. The cat5002 and 2926T both consume more power than the 2901. Also, the 2901 is much shorter (but longer). thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] www.optsys.net (Cisco hardware) ""Kaminski, Shawn G"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Off the top of my head, I believe that all the switches you mentioned, with > the exception of the 5002, are fixed configuration switches. You should > check out the Cisco website for the main differences because they are too > numerous to list here. > > In my opinion, get the 5002 (or 5000) because it is modular, which means you > can upgrade the supervisor engine or any of the modules if you want and it > is also one of the switches used in the CCIE lab. However, it is probably > more expensive than the others. I think that the 2926T has modules but I > don't know if you can upgrade them at this time (not sure about this). I > guess it all boils down to what you can spend. > > Shawn K. > > -Original Message- > From: Sam Ho [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, May 07, 2002 10:38 AM > To: [EMAIL PROTECTED] > Subject: Need advice : Cisco equipment for CCNP [7:43506] > > > Dear all : > > I am considering to acquire a switch for studying my CCNP. Do anyone can > give me some advice on the difference of the following equipment > > Cisco 2901 > Cisco 5002 > Cisco 2926T > Cisco 2948G > > And which model is more useful for CCNP/CCIE study. > > I get the impression that all the above equipment is running Catalyst IOS. > > However, I am not sure which model can run the latest Catalyst IOS as well > as I do not know which model is most valuable in studing CCNP/CCIE . > > Please advice. > > Thanks. > > Sam Ho > CCNA Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43530&t=43506 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router/Bridge re-transmit frames? [7:43459]
At 11:45 AM 5/7/02, Kaminski, Shawn G wrote: >Apology accepted. I'm probably a bit touchy today because my transmission >went out in my vehicle. Only 34,000 miles on it. Luckily, it was still under And it doesn't do a retransmission? ;-) Sorry, couldn't resist. >warranty, but it's just another hassle I don't have time for. Good thing >Cisco builds their routers and switches better than cars and trucks these >days (although I'm sure some of you may disagree), otherwise, this whole >message board would be PO'ed all the time. :-) I resemble that remark. (That's a stupid American idiom, in case anyone doesn't know.) Your question was a good one, although the answer should be clear if you know basic Ethernet. However, I can see that it might not seem cut and dry. Here's another wrinkle! What if it's a Cisco cut-through switch? Say the switch is switching a frame from port e0 over to e1 and it encounters a collision while sending the frame out port e1. Does it retransmit? It's cut-through, remember. Does it even still have the frame to retransmit? Stay tuned for an answer. I will answer my own question if nobody else does. ;-) Priscilla >Shawn K. > >-Original Message- >From: Marko Milivojevic [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, May 07, 2002 11:36 AM >To: 'Kaminski, Shawn G'; [EMAIL PROTECTED] >Subject: RE: Router/Bridge re-transmit frames? [7:43459] > > > > Shawn, > > > You know, it really annoys me when someone makes a comment > > like this (Please > > note that this matter is covered in material needed for CCNA > > exam). I know > > this. I've been through it all and then some. Regardless of > > whether or not > > something "similar" to this is covered in the CCNA material, certain > > situations exist where things aren't "cut and dry", which is why I was > > trying to get opinions from others on this board. Did you > > read the original > > post? Why do people need to come off as being superior to > > others? Geez. > > That was NOT my intention. I am very sorry if you felt offended by >it. Applogy. > > >Marko. Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43532&t=43459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Layer 2 Test Tool [7:43484]
LLC has a test frame. But the devices might not be using LLC. If they are on Token Ring they probably are though. Priscilla At 08:40 AM 5/7/02, Seelinger Bruce wrote: >Does anyone know of a layer 2 connectivity test tool - something the >equivalent of a MAC address based "ping" tool, (yes - I know that ping uses >ICMP at layer 3, but you get the idea). Basically, have a bridged network >where we want to perform a simple test to see if certain MAC filters are >working appropriately. Need to probe a target node based on it's MAC >address and see if it responds. Searched the net pretty extensively but no >luck. Any ideas? > >Thanks in advance for the help. Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43531&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Need Some Advice [7:43476]
For something that big, you need something in the 7000+ range. A 7500 could handle it. I'm not *vary* familar with the 7x00 series routers, but I know ithey can handle that level of connection. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43529&t=43476 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Pix load balance? [7:42974]
Dumb question, does any of these devices use nat? I just read that pix to DMZ interface uses dNat, not sure if that is faster. I was reading my Alteon Web Switch book last night, it says you CAN do nat, but I don't know if layer 4-7 switches actually DO nat normall. If it's a switch, it should be switching right, the translation gets done in layer 4. kinda confused. -Original Message- From: Gragido, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 12:09 PM To: Brian Zeitz; [EMAIL PROTECTED] Subject: RE: Pix load balance? [7:42974] The best way to load balance is to use an application layer (layer 4-7) switch. I am not too familiar with Cisco's offering of this technology (sadly), but have worked extensively with Foundry's ServerIrons and they are excellent devices! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Zeitz Sent: Tuesday, May 07, 2002 8:50 AM To: [EMAIL PROTECTED] Subject: RE: Pix load balance? [7:42974] Load balancing is supposed to be done on content switches according to what I am reading. I cannot be done on the firewall withing the site, nor can it be done with different ISPs. Brian Zeitz MCSE, CCNP -Original Message- From: Gaz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 6:58 AM To: [EMAIL PROTECTED] Subject: Re: Pix load balance? [7:42974] What's the reason? I'm not disputing the fact, just wondering what the limitation is. I take it that the limitation is only that it cannot do stateful failover with two active PIXes? Cheers, Gaz wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Yeah, I asked the same questions last month. They can not. If you really > need firewall and Load balancing, FW-1 is the way to go. > > Theo > CSS1, CCNP, CCSE > > > > > > > "Patrick" > Sent by: [EMAIL PROTECTED] > 05/06/2002 06:28 AM > Please respond to "Patrick" > > > To: [EMAIL PROTECTED] > cc: > Subject:Re: Pix load balance? [7:42974] > > > No. > > ""GEORGE"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Can you load balance to pix firewalls? > > Has anyone done this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43528&t=42974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: 2600 Fast Etherenet problem [7:43518]
I don't know the situation, but I would suspect a bug of the human vareity there. Is it possible someone is tampering with your system? And the IP address, does it come from a DHCP scope on the network? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43527&t=43518 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Need advice : Cisco equipment for CCNP [7:43506]
Off the top of my head, I believe that all the switches you mentioned, with the exception of the 5002, are fixed configuration switches. You should check out the Cisco website for the main differences because they are too numerous to list here. In my opinion, get the 5002 (or 5000) because it is modular, which means you can upgrade the supervisor engine or any of the modules if you want and it is also one of the switches used in the CCIE lab. However, it is probably more expensive than the others. I think that the 2926T has modules but I don't know if you can upgrade them at this time (not sure about this). I guess it all boils down to what you can spend. Shawn K. -Original Message- From: Sam Ho [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 10:38 AM To: [EMAIL PROTECTED] Subject: Need advice : Cisco equipment for CCNP [7:43506] Dear all : I am considering to acquire a switch for studying my CCNP. Do anyone can give me some advice on the difference of the following equipment Cisco 2901 Cisco 5002 Cisco 2926T Cisco 2948G And which model is more useful for CCNP/CCIE study. I get the impression that all the above equipment is running Catalyst IOS. However, I am not sure which model can run the latest Catalyst IOS as well as I do not know which model is most valuable in studing CCNP/CCIE . Please advice. Thanks. Sam Ho CCNA Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43526&t=43506 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Pix load balance? [7:42974]
The best way to load balance is to use an application layer (layer 4-7) switch. I am not too familiar with Cisco's offering of this technology (sadly), but have worked extensively with Foundry's ServerIrons and they are excellent devices! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Zeitz Sent: Tuesday, May 07, 2002 8:50 AM To: [EMAIL PROTECTED] Subject: RE: Pix load balance? [7:42974] Load balancing is supposed to be done on content switches according to what I am reading. I cannot be done on the firewall withing the site, nor can it be done with different ISPs. Brian Zeitz MCSE, CCNP -Original Message- From: Gaz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 6:58 AM To: [EMAIL PROTECTED] Subject: Re: Pix load balance? [7:42974] What's the reason? I'm not disputing the fact, just wondering what the limitation is. I take it that the limitation is only that it cannot do stateful failover with two active PIXes? Cheers, Gaz wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Yeah, I asked the same questions last month. They can not. If you really > need firewall and Load balancing, FW-1 is the way to go. > > Theo > CSS1, CCNP, CCSE > > > > > > > "Patrick" > Sent by: [EMAIL PROTECTED] > 05/06/2002 06:28 AM > Please respond to "Patrick" > > > To: [EMAIL PROTECTED] > cc: > Subject:Re: Pix load balance? [7:42974] > > > No. > > ""GEORGE"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Can you load balance to pix firewalls? > > Has anyone done this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43525&t=42974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco Certification Digest V2 #2062 (Vacation) [7:43524]
I will be on vacation from 5-7-02 to 5-22-02. Any matter regarding network management please forward to Bob Taylor @ 213-979-0032. Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43524&t=43524 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: A net or B net [7:43480]
Aside from security concerns, the only advantage you get from spliting the network with a router, *in a switched environment*, is broadcast control. Now broadcast control is a good thing, in some cases, but if you are just running IP without any broadcast intensive applications, you shouldn't have a problem running with one logical network. Of course, if you are planning on extensive growth, or you are running other protocols, for broadcast hogs, or you want/need security between groups, or you just don't have anything else to do with that router, you can definitely keep it in place, and it won't hurt anything, or at least not much. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43523&t=43480 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE in 3-6 Months from cisco Interesting [7:43306]
The begining of wisdom is the realization that you know nothingsomeone important said that once and I believe that its meaning is as pertinent today as it was when it was originally stated. To suggest that a CCIE possess god like qualities is a disservice to the CCIE and God if one stops to think about it. CCIEs are people and are capable of major goof ups just as much as the lowliest desktop technician. We live in an imperfect world, I think that its time that we all re-evaluate our conceptual understanding of the CCIE certification and realize that its merely another step in the never ending progression of learning. :-) My 2 Cents, Will Gragido CCNP CCNA CCDA MCP and SoB ;-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of TALBOT, WILLIAM P (SWBT) Sent: Monday, May 06, 2002 5:36 PM To: [EMAIL PROTECTED] Subject: RE: CCIE in 3-6 Months from cisco Interesting [7:43306] I agree, there is a perception of CCIE's as "arrogant know-it-alls." Some of this is surely warranted, and some surely stems from envy. Which is why I can laugh at this joke you may have already heard: Q:"What's the difference between a CCIE and God?" A:"God doesn't think he is a CCIE..." Pat (Set to incur the wrath of the aforementioned God at the R&S Lab in RTP on May 18) -Original Message- From: nrf [mailto:[EMAIL PROTECTED]] Sent: Sunday, May 05, 2002 7:29 PM To: [EMAIL PROTECTED] Subject: Re: CCIE in 3-6 Months from cisco Interesting [7:43306] I also agree with you on many points. But anyway, inline > > I see your point about people not skipping the tech interview because of > CCIE. And I also agree that it's a good thing. After all, when 'lab rats' > (as you call them) are applying for jobs, it just makes sense that one would > give a tough interview to weed them out. However, one must ask themselves > "What is the purpose of the cert?" Just like a college degree in, say > Computer Science. The BS in CS doesn't guarantee an employer that the > person has experience, say, with PERL. However, the degree indicates that > this person can learn and understand the logic of programming, etc. I don't > think the purpose of the CCIE (or any Cisco cert) is to guarentee knowledge > of absolutely everything in networking. That's not possible. However, I > believe that it does indicate an advanced level of understanding of network > principles as well as knowledge of specific technologies (EIGRP, HSRP, > DLSw+, etc). So, as in your example of the person that didn't learn BGP > because it wasn't required for the cert, I have to say "So what". That > wasn't the point of the CCIE. The CCNP cert doesn't cover IS-IS, for > example, but I would hope anyone with CCNP could sit down, read about IS-IS, > know how to look up IS-IS related commands on Cisco's site, and then > implement what needs to be implemented. That's, IMHO, the purpose of > obtaining the cert. This is absolutely true, nobody can know everything, and the CCIE was never designed to do that. On the other hand, there is a major difference between somebody who admits he doesn't know the answer, but can probably look it up, and somebody who boldly states something that is flatly wrong. For example, with that guy I interviewed who claimed that CEF can only be run on a GSR, clearly this was a case where he was trying to snow me. Now I admit, I was trying to trick him (I deliberately pretended that I knew nothing about networks because I wanted to see what kinds of things he would say if he didn't think I was a networking guy myself), and boy, was he tricked. > > > It's certainly not a big joke, it's just that yes you really can pass the > > lab without experience. Granted, you need dedication and you need money > to > > buy a home lab. > > > Exactly - you need practice equipment. So you don't need a real job that > > provides hands-on equipment. You just need a lab, a lot of time, and a lot > > of money for exam attempts (or a willingness to go into debt). But a > > networking job? Not really, not to pass the lab. > > I understand your differentiation between real-world hands-on and practice > lab (lab rat) hands-on. I truly do. But, again, it's like the college > degree thing. If a company wants someone who has experience, they'll > interview and ask questions that only seasoned professionals could answer. > But, if they want someone with a certain level of knowledge, demonstrated > ability to learn new things, and the ability to find resources and answer > questions, then that could be a seasoned professional or someone that's > certified (or someone with both). On the flip side of your argument, I've > met people that are trying to get into networking from the telco side, and > could explain in great detail how a T1 works, but couldn't explain HSRP (a > very simple thing to understand and setup) to save their life. Doesn't mean > their stupid, just not exposed to it. And the cert provi
RE: Router/Bridge re-transmit frames? [7:43459]
Apology accepted. I'm probably a bit touchy today because my transmission went out in my vehicle. Only 34,000 miles on it. Luckily, it was still under warranty, but it's just another hassle I don't have time for. Good thing Cisco builds their routers and switches better than cars and trucks these days (although I'm sure some of you may disagree), otherwise, this whole message board would be PO'ed all the time. :-) Shawn K. -Original Message- From: Marko Milivojevic [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 11:36 AM To: 'Kaminski, Shawn G'; [EMAIL PROTECTED] Subject: RE: Router/Bridge re-transmit frames? [7:43459] Shawn, > You know, it really annoys me when someone makes a comment > like this (Please > note that this matter is covered in material needed for CCNA > exam). I know > this. I've been through it all and then some. Regardless of > whether or not > something "similar" to this is covered in the CCNA material, certain > situations exist where things aren't "cut and dry", which is why I was > trying to get opinions from others on this board. Did you > read the original > post? Why do people need to come off as being superior to > others? Geez. That was NOT my intention. I am very sorry if you felt offended by it. Applogy. Marko. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43520&t=43459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Phone networks [7:43498]
The frame relay line from your location connect directly to a frame relay switch, which switches frames (go figure) between connections. In practice, it's a lot like a huge VTP domain. Say you have sites A and B, with a PVC between them. You have a dedicated connection from each site to the provider (typically, two different CO owned or leased by the provider). The provider connects that link directly into a frame relay switch. The frame relay switch is programmed with the knowledge of what other frame relay switch connects to the remote side, or at least what the next hop is. This traffic is aggregated with other customers, which is why you get things like CIR and burst rates. Therefore, you do not have a dedicated line (this isn't circuit-switching, thank goodness). But the magic all happens behind the scences, so we don't have to worry about it. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43519&t=43498 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE in 3-6 Months from cisco Interesting [7:43306]
Its getting kind of hot in here.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jason Forrester Sent: Monday, May 06, 2002 4:50 PM To: [EMAIL PROTECTED] Subject: Re: CCIE in 3-6 Months from cisco Interesting [7:43306] Becareful with the "kid" comment. I passed my CCIE at 20, dang near 19. Jason CCIE 8748 "Michael L. Williams" wrote: > "nrf" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Bullshi*. There are a significant number of guys lately who've passed the > > lab who I wouldn't hesitate to call "paper" (heck, even they have honestly > > referred to themselves as paper, usually after getting a few drinks into > > them). > > Significant? Help me understand the extent to which you use that word? If > you're a proctor for CCIE labs and saw people day in and day out, then I > would take your word for it. I have yet to take the lab, but I'm trying > to understand how someone could make it through the lab and still be > considered "paper". Is the lab that big of a joke? Consider it's very > high fail rate, I can't see it being so easy that people can't pass > without understanding what they're doing? At least to the same level that > anyone else who ever passed the lab did Personally I use paper to mean > someone with a cert that doesn't have any hands-on to match it like > paper MSCE.. I worked with this kid who was 19, has his MSCE, CNE, and > Master CNE, but had zero hands on definitely paper... but we're talking > the CCIE lab here. it's simply not possible (IMHO) to pass the lab > without at least a minimum of hands-on (whether in a job or on practice > equipment) to give one the skills to pass. > > > But I do agree with the premise that the main reason for the devaluing of > > the cert is the bad economy, and the lab-rats are a lesser consideration > > (still important, but lesser). But on the other hand, I think it is the > > case that the CCIE will probably never attain the status that it once did, > > simply because the we will probably never see another huge network > buildout > > orgy like the dotcom boom again in our lifetime. So while I believe the > > networking industry will get better, people who thinks it's going to get > > back to, say, 1999, are just deluding themselves. > > Agreed I don't thik we'll see things back like there were a couple of > years ago. But I'm trying to draw a fine distinction between the devaluing > of a cert (due to shoddy cert process) -vs- the salary that one pulls in > with the cert. The CCIEs now (in general) don't make and probably in the > future won't make what CCIEs of two years ago did. Is this a devaluation of > the cert. Certainly not. That's the market that's the economy I > don't believe that has much to do with whether employers and network > professionals "value" the certification (i.e. consider someone with CCIE to > be a true expert in networking). Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43521&t=43306 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
2600 Fast Etherenet problem [7:43518]
Hi Dear Friends, I've got a 2600 router. The Fast Ethernet was configured as static IP. Sometimes, its IP changed by itself and got one from DHCP server. I changed it back and it would happen again several days later. "show start" shows that IP is static. Cisco TAC couldn't give an explanation but only recommend upgrade IOS> Anyone else has this problem? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43518&t=43518 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router/Bridge re-transmit frames? [7:43459]
Shawn, > You know, it really annoys me when someone makes a comment > like this (Please > note that this matter is covered in material needed for CCNA > exam). I know > this. I've been through it all and then some. Regardless of > whether or not > something "similar" to this is covered in the CCNA material, certain > situations exist where things aren't "cut and dry", which is why I was > trying to get opinions from others on this board. Did you > read the original > post? Why do people need to come off as being superior to > others? Geez. That was NOT my intention. I am very sorry if you felt offended by it. Applogy. Marko. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43517&t=43459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router/Bridge re-transmit frames? [7:43459]
You know, it really annoys me when someone makes a comment like this (Please note that this matter is covered in material needed for CCNA exam). I know this. I've been through it all and then some. Regardless of whether or not something "similar" to this is covered in the CCNA material, certain situations exist where things aren't "cut and dry", which is why I was trying to get opinions from others on this board. Did you read the original post? Why do people need to come off as being superior to others? Geez. Shawn K. -Original Message- From: Marko Milivojevic [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 9:27 AM To: [EMAIL PROTECTED] Subject: RE: Router/Bridge re-transmit frames? [7:43459] Let me try, > "The CCIE tests expect you to know that neither a bridge nor router > re-transmits if a frame experiences a bit error or gets lost somehow". > Could you please clarify further? Thank you! There is distinct difference between bit errors and collisions. Retransmitting in a case of bit error or data loss would be error recovery procedure, which, as such, does not exist on Ethernet layer 2. On Ethernet network, this is, usually, accomplished by upper layer protocols (TCP is one example). Listening to collisions on the other hand is defined by protocol that Ethernet is using (CSMA/CD) and is not considered to be error recovery procedure. Please note that this matter is covered in material needed for CCNA exam. Marko. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43516&t=43459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Immdeiate Assistance is Reaquired! [7:43449]
No, no no. It is being done by GroupStudy to allow posting to the message boards. Remember you can read this group via the message boards, not just via a discussion group. But because the Message boards use HTML, it is suspicious of any command in-between the Greater Then and Less Then signs. Frankly I can change it if it is a huge problem. Take care, Paul - Original Message - From: "Michael Williams" To: Sent: Tuesday, May 07, 2002 8:55 AM Subject: Re: Immdeiate Assistance is Reaquired! [7:43449] > This is strange. I go back and look at the other posts here on the web > forum and they're all okay.. the stuff between the doesn't disappear > > Must be Outlook Express or something.. Sean, which newsgroup reader were > you using to read my posts? (since things were obviously disappearing in > your reader too) > > Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43515&t=43449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Layer 2 Test Tool [7:43484]
I believe Fluke has a meter which will assist in this too. -Original Message- From: Maccubbin, Duncan [mailto:[EMAIL PROTECTED]] Sent: Tue 5/7/2002 10:02 AM To: [EMAIL PROTECTED] Cc: Subject: RE: Layer 2 Test Tool [7:43484] Not sure what equipment you are using but starting with CAT OS 6.1: Layer 2 Traceroute The Layer 2 Traceroute utility allows you to identify the physical path that a packet will take when going from a source to a destination. The Layer 2 Traceroute utility determines the path by looking at the forwarding engine tables of the switches in the path. -Original Message- From: Lowell Sharrah [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 9:39 AM To: [EMAIL PROTECTED] Subject: Re: Layer 2 Test Tool [7:43484] cisco's CDP but you must have all cisco devices for this to work. >>> "Seelinger Bruce" 05/07/02 08:40AM >>> Does anyone know of a layer 2 connectivity test tool - something the equivalent of a MAC address based "ping" tool, (yes - I know that ping uses ICMP at layer 3, but you get the idea). Basically, have a bridged network where we want to perform a simple test to see if certain MAC filters are working appropriately. Need to probe a target node based on it's MAC address and see if it responds. Searched the net pretty extensively but no luck. Any ideas? Thanks in advance for the help. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43512&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Layer 2 Test Tool [7:43484]
If you are using IBM Communication Server for NT, there is a tool like sna ping(I can't remember its name, but you can see it on the start menu), but it works only between independent LU's. Bulent -Original Message- From: Seelinger Bruce [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 4:15 PM To: [EMAIL PROTECTED] Subject: Re: Layer 2 Test Tool [7:43484] Johnny, Thanks for the reply, but I should have been clearer. The network we are testing is not running TCP/IP. It is strictly a test bed for testing filters based on layer 2 connectivity only, (the "real" network is running SNA with SR/TRB). So in this case ping does not apply. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43514&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: dialer unbindable [7:37260]
Hi , this problem i have faced very often when configuring isdn.whenever u configure more than 2 dialer interface you are not able to dial in thru isdn.but u can successfully dial out.removing and keeping only dilaer interface works perfectly.this is an ios bug and changing the ios will help.what ios u r using.12.1.1T may help resolving it. thnx pkb Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43513&t=37260 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Installing New PIX [7:43369]
The short answer is no. The PIX does not support a true http proxy, so you'll need to reconfigure your clients or continue to use a cache/proxy in addition to the PIX. For info on the PIX, the documentation is fairly good: http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/config/inde x.htm You can find this off the cisco home page by clicking 'technical documents' and then selecting 'Cisco secure pix firewall' under the drop down 'network security' tab. You should also browse through the security technical tips links to get familiar with various PIX configs: http://www.cisco.com/warp/public/707/ HTH, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jeffrey Reed Sent: Sunday, May 05, 2002 8:39 PM To: [EMAIL PROTECTED] Subject: Installing New PIX [7:43369] I have the job of installing a new PIX 525. We are replacing several Microsoft proxy servers with the single PIX. At this time we have several thousand students and staff using a proxy script. For the IE users, we can rip the script out with a registry hack, but for the Netscape users, we don t have a clean way of removing the setting. And we have a hundred or so MAC users with similar problems. One thing Im curious aboutis there any way to configure the PIX to respond to the scripts like the proxy would have responded? Im a bit short in the clue department with both the PIX and MS Proxy to even know if that was a really dumb question, so take it easy on the answer!! Are there any good places on Ciscos web site to plan for a PIX install? I was looking and couldnt find a good resource. Any suggestions would be appreciated. Jeffrey Reed Classic Networking, Inc. Cell 717-805-5536 Office 717-737-8586 FAX 717-737-0290 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43511&t=43369 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Security for router connected to Cable Service provider [7:43510]
First, take a look at the following links: http://www.cisco.com/univercd/cc/td/doc/cisintwk/ics/cs003.htm http://phrack.org/phrack/55/P55-10 Then, you might want to consider using CBAC: http://www.cisco.com/warp/public/110/32.html Finally, for performance you may want to consider using a cache such as those from network appliance or you can look at the open source squid solution: http://www.squid-cache.org HTH, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Johnzaggat Sent: Saturday, May 04, 2002 10:13 PM To: [EMAIL PROTECTED] Subject: Security for router connected to Cable Service provider [7:43322] I just wanted to know what everyone is using on there connections to outside. For now I am just using NAT on a 1605R. I am only using it to go to outside. What can I do to secure this router. All of the traffic will either be http or ftp going out. Is there any thing I can do to improve performance as well. I appreciate any suggestions. Thanks JZ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43510&t=43510 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: MCNS exam material [7:43505]
There is a CBT from Cisco for this exam. Boson also makes a test for it (please no flames) -Original Message- From: Shoaib Waqar [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 10:11 AM To: [EMAIL PROTECTED] Subject: MCNS exam material [7:43505] Hi Guys, I am planning to give my MCNS exam, I have got the Cisco Press MCNS book from Michael Wenstrom. Does anybody know some more material which will be helpful in clearing this exam? Any sort of help will be highly appreciated. Thanks Shoaib __ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43509&t=43505 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Closing Ports Part 2 [7:43145]
In general, any Application Layer Gateway (ALG) firewall, or any firewall that has a true http proxy, will only allow sessions on port 80 that are actually http. Some examples of ALG's are Gauntlet and Raptor. An example of a firewall that is not an ALG but that does support a true http proxy is FW-1. (PIX does not have a true http proxy) Unfortunately, the problem is worse than you describe. There are programs that actually use legitimate http protocol calls to tunnel other traffic, such as httptunnel. There are other programs that use ICMP echo-request and echo-reply (Loki and icmptunnel) and at least one implemenation of a tunnel using DNS request/replies: http://online.securityfocus.com/archive/1/8990 In practice, it is very difficult, though not impossible, to detect these sorts of programs with current FW and IDS systems, mostly due to the number of false pos's your likely to get and the amount of processing that has to be done on the payload in each packet. However, using a good proxy is at least a starting point and raises the bar for an attacker. Regards, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of exchange Sent: Thursday, May 02, 2002 10:34 AM To: [EMAIL PROTECTED] Subject: Closing Ports Part 2 [7:43145] I know blocking ports isn't really going to stop people who can tunnel through via http or some other open ports. Are there firewalls that will look into specific traffic streams and drop connections that are not really http sessions? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43508&t=43145 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Need advice : Cisco equipment for CCNP [7:43506]
Dear all : I am considering to acquire a switch for studying my CCNP. Do anyone can give me some advice on the difference of the following equipment Cisco 2901 Cisco 5002 Cisco 2926T Cisco 2948G And which model is more useful for CCNP/CCIE study. I get the impression that all the above equipment is running Catalyst IOS. However, I am not sure which model can run the latest Catalyst IOS as well as I do not know which model is most valuable in studing CCNP/CCIE . Please advice. Thanks. Sam Ho CCNA Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43506&t=43506 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: MBA or CCIE [7:41809]
But how about MBA and CCIE? That would be excellent mix I think. Regards Jon Gudmundsson -Original Message- From: nrf [mailto:[EMAIL PROTECTED]] Sent: 20. aprml 2002 17:18 To: [EMAIL PROTECTED] Subject: Re: MBA or CCIE [7:41809] Yes. Not as many as before, but yes. ""Tarek Sabry"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi > > Just curious, are there still employers who sponsor MBA's at this time? You > don't even have to tell me the names but just a yes or no :) > > Thanks > Tarek Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43507&t=41809 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
MCNS exam material [7:43505]
Hi Guys, I am planning to give my MCNS exam, I have got the Cisco Press MCNS book from Michael Wenstrom. Does anybody know some more material which will be helpful in clearing this exam? Any sort of help will be highly appreciated. Thanks Shoaib __ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43505&t=43505 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Layer 2 Test Tool [7:43484]
Not sure what equipment you are using but starting with CAT OS 6.1: Layer 2 Traceroute The Layer 2 Traceroute utility allows you to identify the physical path that a packet will take when going from a source to a destination. The Layer 2 Traceroute utility determines the path by looking at the forwarding engine tables of the switches in the path. -Original Message- From: Lowell Sharrah [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 9:39 AM To: [EMAIL PROTECTED] Subject: Re: Layer 2 Test Tool [7:43484] cisco's CDP but you must have all cisco devices for this to work. >>> "Seelinger Bruce" 05/07/02 08:40AM >>> Does anyone know of a layer 2 connectivity test tool - something the equivalent of a MAC address based "ping" tool, (yes - I know that ping uses ICMP at layer 3, but you get the idea). Basically, have a bridged network where we want to perform a simple test to see if certain MAC filters are working appropriately. Need to probe a target node based on it's MAC address and see if it responds. Searched the net pretty extensively but no luck. Any ideas? Thanks in advance for the help. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43504&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Rack Mounting Kit for 1600/1720??? [7:43503]
There is a new rack-mount version of the 1750: Cisco 1760 Router: Rack-Mount, High Performance Solution For Enterprise Small Branch Offices and Small and Medium Businesses (SMBs) The Cisco 1760 Modular Access Router, a four-slot, 19-inch rack mount router, offers comprehensive security, and the highest performance, flexibility and voice-port density in the Cisco 1700 series. There are two versions of the Cisco 1760. The base version, the Cisco 1760, is designed to support data networking, while providing a smooth upgrade path to data/voice integration as business needs evolve. The Cisco 1760-V supports data and voice immediately. The new Cisco 1721 Modular Access Router, a two-slot modular access router optimized for data access, offers increased performance, memory and support for IEEE 802.1Q VLAN at the same base price as the Cisco 1720. As with all Cisco 1700 Series Routers, the Cisco 1760 and 1721 supports business-class DSL, including ADSL and G.SHDSL, allowing businesses to choose a cost-effective access solution without compromising availability, QoS, security or manageability. For more information on Cisco 1700 Series Modular Access Routers, visit http://www.cisco.com/go/1700. Jeff West TeleCommunication Systems, Inc. (813) 831-6353 x118 Voice -Original Message- From: amlendu kumar [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 9:23 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Rack Mounting Kit for 1600/1720??? There certainly is a 3 u contraption to fit in 1750 . Kumar >From: "Jim Newton" >Reply-To: "Jim Newton" >To: "Ccielab" >CC: "Group Study" >Subject: Rack Mounting Kit for 1600/1720??? >Date: Mon, 6 May 2002 12:50:03 -0500 > >I have a customer that swears that he has seen a kit to rack mount a >1600/1720 router. Has anyone ever heard of this? >_ >Commercial lab list: http://www.groupstudy.com/list/commercial.html >Please discuss commercial lab solutions on this list. Regards Amlendu Kumar _ Chat with friends online, try MSN Messenger: http://messenger.msn.com _ Commercial lab list: http://www.groupstudy.com/list/commercial.html Please discuss commercial lab solutions on this list. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43503&t=43503 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Pix load balance? [7:42974]
Load balancing is supposed to be done on content switches according to what I am reading. I cannot be done on the firewall withing the site, nor can it be done with different ISPs. Brian Zeitz MCSE, CCNP -Original Message- From: Gaz [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 6:58 AM To: [EMAIL PROTECTED] Subject: Re: Pix load balance? [7:42974] What's the reason? I'm not disputing the fact, just wondering what the limitation is. I take it that the limitation is only that it cannot do stateful failover with two active PIXes? Cheers, Gaz wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Yeah, I asked the same questions last month. They can not. If you really > need firewall and Load balancing, FW-1 is the way to go. > > Theo > CSS1, CCNP, CCSE > > > > > > > "Patrick" > Sent by: [EMAIL PROTECTED] > 05/06/2002 06:28 AM > Please respond to "Patrick" > > > To: [EMAIL PROTECTED] > cc: > Subject:Re: Pix load balance? [7:42974] > > > No. > > ""GEORGE"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Can you load balance to pix firewalls? > > Has anyone done this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43501&t=42974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
passing score for BSCI [7:43500]
Hey All, Needed some info. Does any one know the passing score for BSCI. Teh Boson test simulators do not mention ne thing about it. Pankaj Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com Buy Music, Video, CD-ROM, Audio-Books and Music Accessories from http://www.planetm.co.in Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43500&t=43500 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Code upgrade switch catalyst 1200 [7:43348]
good point, if they are on different vlans, then they need to be on different ip networks. >>> "Walker, Jim" 05/07/02 08:44AM >>> Are both ports on the same vlan? -Original Message- From: Wayne Jang [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 8:24 AM To: [EMAIL PROTECTED] Subject: Re: Code upgrade switch catalyst 1200 [7:43348] what port are you plugged into on the switch? can you print in an email the "show interface" command? ""Alexandre Carvalho"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello Guys, > I have a weird problem with upgrading my switch and I was wondering if > somebody could help me out. > My laptop is in the same subnet as the switch , but I cannot ping each > other. I am running tftp server in my laptop so if I cannot ping I cannot > upgrade it. I check the port where my laptop is connected and it says OK. > Any ideas?? > > Laptop: 10.2.2.1 /16 > Switch : 10.2.2.2 /16 > > Command used in the switch : set interface sc0 10.2.2.2 255.255.0.0 > > Thanks, > > Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43499&t=43348 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Layer 2 Test Tool [7:43484]
cisco's CDP but you must have all cisco devices for this to work. >>> "Seelinger Bruce" 05/07/02 08:40AM >>> Does anyone know of a layer 2 connectivity test tool - something the equivalent of a MAC address based "ping" tool, (yes - I know that ping uses ICMP at layer 3, but you get the idea). Basically, have a bridged network where we want to perform a simple test to see if certain MAC filters are working appropriately. Need to probe a target node based on it's MAC address and see if it responds. Searched the net pretty extensively but no luck. Any ideas? Thanks in advance for the help. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43497&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Phone networks [7:43498]
Hello, My name is Jarred, and I am CCNA Certified, however I have a very very newbie question. I am currently studying for my first CCNP Routing exam, but this has been bugging me I was wondering how the phone networks propagate traffic to make several different locations (buildings, etc, each with their own routers/switches) look like/act like they are in the same network, for lack of better terms. For example, a Frame Relay network...how does the phone company forward traffic to the frame relay switches located at a centralized building (in an ideal frame relay setup)? This might be a bad example but it's been bugging me how a broadcast network would work over phone lines, unless the phone company does actually dedicate straight lines JUST for your network, essentially making it look like a local network. I don't know much about this scenario, so if someone could enlighten me so that I could better imagine how these networks could be setup. Thanks! Jarred CCNA (I feel stupid asking this) Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43498&t=43498 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Configuring Pix with EnterNet DSL [7:43302]
Yes, I still have to use the PPPoE password and username. I don't like it, but does that make it more secure? What does it use for security if you don't use PPPOE? Someone is coming in today from corporate, talking about us connecting to their VPN connection. I have no idea what system they are talking about (checkpoint, microsoft?), but it should be interesting over ADSL as well. I know ADSL does not stay up all the time. Maybe I need some keepalives to make this work. I never tried VPN over ADSL. Yea, I actually have 2 ADSL lines, both get dynamic IPs. I use dynu.com to map my IP to may domain name. works well so far. One line is right into a cheapy router, which, on the router I give it the PPPOE name and pass. I use port forwarding on the router, plus a firewall. On the other ADSL line, I have the Pix hooked up. It is not working yet cause its only 6.1(2). I am also getting another Pix 515 at another site which ill have access too. Maybe do some VPN-VPN stuff. I would think 6.2 just ads the VPDN command. I know the 515 is not considered a SOHO, but maybe that's why its not listed. I am going to try it, and find out. When I first started playing with the pix, it had the VPDN command on 6.1(2), but it only had PPTP and some other stuff, but not PPPoE. A couple of questions I wanted to throw at you. If I have 1 IP, say I use PPPOE on the outside interface, and that is my only IP. Say its 172.168.x.x. Then I use on my DMZ card 10.10.1.1, is the Pix doing nat at that point to the DMZ? Or maybe just forwarding? Is the best case scenereo for speed to use the same subnet as your router on the DMZ? Does the pix use Nat from the outside to inside? If I use a router, I would have to do Nat there, then across the pix, nat again, and on my load blancers Nat again. (this might slow stuff down) and I mean if it wasn't on the DMZ. I was also looking up the difference between having a 4 port DMZ card, vs a 1 port. I guess the benefits would be. 4-port, faster, you can make 4 subnets. You can lock down each interface, like only allow HTTP. Better security. Am I missing any? I was also reading how Nat not configured right on a firewall can change the Hash algorithms. I think eventually I will switch to a T1. We bought some load balancers, and I was surprised that they did NAT too. Coyotote Point (really FreeBSD). I think other "web switches" don't use nat, so now I am wondering if it was better to get a web switch, then this FREEBSD device that does nat. (mind you it was assigned to me, I didn't pick this platform). I went to school for Alteon Web switches a few years ago, they seemed really good. I don't know who is the best now. I am getting up to speed on all this stuff. I am doing the basic pix firewall course now, and reading the book. I also got the brand new Advanced Pix firewall course the 2nd version, just released. Brian Zeitz MCSE, CCNP -Original Message- From: Mark Odette II [mailto:[EMAIL PROTECTED]] Sent: Monday, May 06, 2002 4:59 PM To: [EMAIL PROTECTED] Subject: RE: Configuring Pix with EnterNet DSL [7:43302] Brian... I'd be interested to hear what your results are... as the documentation for 6.2 says that it only supports PPPoE/DHCP connections on the 501 and 506 models of PIX. If you get it to work on the 515, that would be good to know. Since you changed GSPs, does that mean that you don't have to worry about PPPoE, and you just simply get a Dynamic IP straight off the wire?? Only reason I ask is, I have SWB DSL, and it's the "Enhanced" service, which simply means I get 5 static IPs assigned to me. The technical difference for my CPE connecting to them, whether it be a Cisco Router or the PIX, is that I don't have to configure the User ID/Password Authentication stuff anymore which was something I had to do with the Basic Service, and it was dependent upon PPPoE. Anyway... let us know how you do! Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Zeitz Sent: Monday, May 06, 2002 11:31 AM To: [EMAIL PROTECTED] Subject: RE: Configuring Pix with EnterNet DSL [7:43302] I am going to try to hook up a Pix to an ADSL line with a dynamic IP, this should be interesting. In the past I have tried Microsoft ISA SERver 2000 Enterprise with ADSL, it had a lot of trouble binding the packet filters cause the IP was dynamic. The fix, install a Netgear router before the firewall. Also for PPPoE testing purposes, Windows XP has the PPPoE stuff built in it. All you need is a XP machine, and a DSL Modem. Use BroadBand connection when creating an internet connection. Good when the service provider INSISTs that you have 1 PC hooked up to the DSL modem. Even though you own a business account. This is the biggest scam in the book, but I don't pay the bill ;) Now, I am going to try a Pix 515U, with an ADSL dynamic IP. I am not sure what the results will be. I could buy another cheapy router, but just to learn it, and see what results I get, im
Re: Rack Mounting Kit for 1600/1720??? [7:43494]
There certainly is a 3 u contraption to fit in 1750 . Kumar >From: "Jim Newton" >Reply-To: "Jim Newton" >To: "Ccielab" >CC: "Group Study" >Subject: Rack Mounting Kit for 1600/1720??? >Date: Mon, 6 May 2002 12:50:03 -0500 > >I have a customer that swears that he has seen a kit to rack mount a >1600/1720 router. Has anyone ever heard of this? >_ >Commercial lab list: http://www.groupstudy.com/list/commercial.html >Please discuss commercial lab solutions on this list. Regards Amlendu Kumar _ Chat with friends online, try MSN Messenger: http://messenger.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43494&t=43494 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router/Bridge re-transmit frames? [7:43459]
Let me try, > "The CCIE tests expect you to know that neither a bridge nor router > re-transmits if a frame experiences a bit error or gets lost > somehow". Could > you please clarify further? Thank you! There is distinct difference between bit errors and collisions. Retransmitting in a case of bit error or data loss would be error recovery procedure, which, as such, does not exist on Ethernet layer 2. On Ethernet network, this is, usually, accomplished by upper layer protocols (TCP is one example). Listening to collisions on the other hand is defined by protocol that Ethernet is using (CSMA/CD) and is not considered to be error recovery procedure. Please note that this matter is covered in material needed for CCNA exam. Marko. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43495&t=43459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Layer 2 Test Tool [7:43484]
Johnny, Thanks for the reply, but I should have been clearer. The network we are testing is not running TCP/IP. It is strictly a test bed for testing filters based on layer 2 connectivity only, (the "real" network is running SNA with SR/TRB). So in this case ping does not apply. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43493&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Layer 2 Test Tool [7:43484]
You can still use ping for your testing. Ping verify's connectivity "up to" and "including" layer three. If you have no layer two connectivity due to an acl, you have no layer three (or higher), and no response to ping. JR -- Johnny Routin The "Routin" One ""Seelinger Bruce"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Does anyone know of a layer 2 connectivity test tool - something the > equivalent of a MAC address based "ping" tool, (yes - I know that ping uses > ICMP at layer 3, but you get the idea). Basically, have a bridged network > where we want to perform a simple test to see if certain MAC filters are > working appropriately. Need to probe a target node based on it's MAC > address and see if it responds. Searched the net pretty extensively but no > luck. Any ideas? > > Thanks in advance for the help. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43492&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router/Bridge re-transmit frames? [7:43459]
"Kaminski, Shawn G" wrote: > In your reply below, you're saying that "A half-duplex Ethernet interface > (whether on a bridge, switch, router, server, or PC) monitors for a > collision while sending. If a collision occurs, the interface (I assume > you're talking about the interface on the router/bridge) re-transmits the > frame". So this tells me that a router/bridge Ethernet interface is able to > re-transmit a frame. Correct? Then why do you state in the next paragraph > "The CCIE tests expect you to know that neither a bridge nor router > re-transmits if a frame experiences a bit error or gets lost somehow". Could > you please clarify further? Thank you! I'm sure Priscilla will clarify her comments, but I'd like to say something. You (Shawn) correctly distinguish the two issues that Priscilla introduced: * retransmission of frames that collide * retransmission of frames are corrupted CSMA/CD Ethernet interfaces are built to detect collisions. If there is a collision, the multiple senders back off, hopefully for different time periods, and retransmit the frames that collided. On the other hand, a corrupted frame is a frame that does not collide with another frame but for some reason arrrives at the receiver with one or more bit errors. Bit errors are bits that are inserted, deleted, or toggled (0 to 1, 1 to 0). The cinematic taxonomy here is: * The Good: a frame that does not collide with another frame on the transmission medium and arrives at the receiver exactly as it was sent, with no bit errors. * The Bad: a frame that does not collide with another frame but nevertheless arrives at the receiver with one or more bit errors. * The Ugly: a frame that collides with another frame. -- TT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43491&t=43459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Immdeiate Assistance is Reaquired! [7:43449]
This is strange. I go back and look at the other posts here on the web forum and they're all okay.. the stuff between the doesn't disappear Must be Outlook Express or something.. Sean, which newsgroup reader were you using to read my posts? (since things were obviously disappearing in your reader too) Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43490&t=43449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Immdeiate Assistance is Reaquired! [7:43449]
Okay... I'm going to try again.this time from the web forum The fox over lazy We'll see =) Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43489&t=43449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Immdeiate Assistance is Reaquired! [7:43449]
Get this... in both my posts (I went and checked my sent items) contained the phrase "ip of proxy" surrounded by a "less than sign" and a "greater than sign" (I type this out, because what' happening is that everything between the greater than and less than signs is being dropped from my post My original post read: (I'm going to replace the greater than and less than signs with % so it won't get filtered) Router(config)#access-list 1 permit %ip of proxy% 0.0.0.0 Router(config)#interface Fast0 Router(config-if)#ip access-group 1 in The same thing happened in that last post.. I'm going to put the sentence "The quick fox jumped over the lazy dog" with every other word in "" The fox over lazy I wonder if putting it in quotes makes a difference... "The fox over lazy " This is really weird. Mike W. "Michael L. Williams" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > "Sean Knox" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > It should be blatantly obvious (to Cisco people anyway), but make sure you > > replace the 0.0.0.0 with the address of your proxy server. :) 0.0.0.0 > > equates to "any host." > > heh I remember typing something like: > > access-list 1 permit 0.0.0.0 > > I remember doing some edit where I highlighted it.. guess I must've deleted > it. good catch Sean! > > Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43487&t=43449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Code upgrade switch catalyst 1200 [7:43348]
Are both ports on the same vlan? Also you'll need to set the sc0 to the correct vlan by: set interface sc0 And the computer need to be on the same vlan: set vlan Make sure you set the correct speed and duplex setting on the port for the computer. You should see the port for the computer as connected. Jim Walker -Original Message- From: Wayne Jang [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 8:24 AM To: [EMAIL PROTECTED] Subject: Re: Code upgrade switch catalyst 1200 [7:43348] what port are you plugged into on the switch? can you print in an email the "show interface" command? ""Alexandre Carvalho"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello Guys, > I have a weird problem with upgrading my switch and I was wondering if > somebody could help me out. > My laptop is in the same subnet as the switch , but I cannot ping each > other. I am running tftp server in my laptop so if I cannot ping I cannot > upgrade it. I check the port where my laptop is connected and it says OK. > Any ideas?? > > Laptop: 10.2.2.1 /16 > Switch : 10.2.2.2 /16 > > Command used in the switch : set interface sc0 10.2.2.2 255.255.0.0 > > Thanks, > > Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43486&t=43348 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Immdeiate Assistance is Reaquired! [7:43449]
Hey Paul... any idea why this is happening? Anything enclosed in a less than sign and a greater than sign dissapears from the post upon posting I'm using Outlook Express Version 5.00. I'll try from the web forum Mike W. "Michael L. Williams" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Get this... > > in both my posts (I went and checked my sent items) contained the phrase "ip > of proxy" surrounded by a "less than sign" and a "greater than sign" (I > type this out, because what' happening is that everything between the > greater than and less than signs is being dropped from my post > > My original post read: (I'm going to replace the greater than and less than > signs with % so it won't get filtered) > > Router(config)#access-list 1 permit %ip of proxy% 0.0.0.0 > Router(config)#interface Fast0 > Router(config-if)#ip access-group 1 in > > The same thing happened in that last post.. I'm going to put the > sentence "The quick fox jumped over the lazy dog" with every other word in > "" > > The fox over lazy > > I wonder if putting it in quotes makes a difference... > > "The fox over lazy " > > This is really weird. > > Mike W. > > > "Michael L. Williams" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > "Sean Knox" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > It should be blatantly obvious (to Cisco people anyway), but make sure > you > > > replace the 0.0.0.0 with the address of your proxy server. :) 0.0.0.0 > > > equates to "any host." > > > > heh I remember typing something like: > > > > access-list 1 permit 0.0.0.0 > > > > I remember doing some edit where I highlighted it.. guess I must've > deleted > > it. good catch Sean! > > > > Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43488&t=43449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Code upgrade switch catalyst 1200 [7:43348]
Are both ports on the same vlan? -Original Message- From: Wayne Jang [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 07, 2002 8:24 AM To: [EMAIL PROTECTED] Subject: Re: Code upgrade switch catalyst 1200 [7:43348] what port are you plugged into on the switch? can you print in an email the "show interface" command? ""Alexandre Carvalho"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello Guys, > I have a weird problem with upgrading my switch and I was wondering if > somebody could help me out. > My laptop is in the same subnet as the switch , but I cannot ping each > other. I am running tftp server in my laptop so if I cannot ping I cannot > upgrade it. I check the port where my laptop is connected and it says OK. > Any ideas?? > > Laptop: 10.2.2.1 /16 > Switch : 10.2.2.2 /16 > > Command used in the switch : set interface sc0 10.2.2.2 255.255.0.0 > > Thanks, > > Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43485&t=43348 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Layer 2 Test Tool [7:43484]
Does anyone know of a layer 2 connectivity test tool - something the equivalent of a MAC address based "ping" tool, (yes - I know that ping uses ICMP at layer 3, but you get the idea). Basically, have a bridged network where we want to perform a simple test to see if certain MAC filters are working appropriately. Need to probe a target node based on it's MAC address and see if it responds. Searched the net pretty extensively but no luck. Any ideas? Thanks in advance for the help. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43484&t=43484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router/Bridge re-transmit frames? [7:43459]
Priscilla, In your reply below, you're saying that "A half-duplex Ethernet interface (whether on a bridge, switch, router, server, or PC) monitors for a collision while sending. If a collision occurs, the interface (I assume you're talking about the interface on the router/bridge) re-transmits the frame". So this tells me that a router/bridge Ethernet interface is able to re-transmit a frame. Correct? Then why do you state in the next paragraph "The CCIE tests expect you to know that neither a bridge nor router re-transmits if a frame experiences a bit error or gets lost somehow". Could you please clarify further? Thank you! Shawn K. > -Original Message- > From: Priscilla Oppenheimer [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, May 07, 2002 12:16 AM > To: [EMAIL PROTECTED] > Subject: Re: Router/Bridge re-transmit frames? [7:43459] > > Regardless of whether a router is configured for bridging or routing, it > must send an Ethernet frame successfully, without a collision. A > half-duplex Ethernet interface (whether on a bridge, switch, router, > server, or PC) monitors for a collision while sending. If a collision > occurs, the interface retransmits the frame. This happens at the Media > Access Layer, and has to do with accessing the medium successfully and > nothing more. The station listens while sending and retransmits if a > collision occurs. That's basic CSMA/CD. Every Ethernet interface (that is > in half-duplex mode) must do CSMA/CD. > > This doesn't mean that a router or bridge retransmits in most cases. The > CCIE tests expect you to know that neither a bridge nor a router > retransmits if a frame experiences a bit error or gets lost somehow. > Retransmitting is up to the end station. A recipient bridge or router > doesn't send back any sort of message to a sending bridge or router to > report a problem. It's up to the end station to know that a packet didn't > get ACKed. A router could send an ICMP message. In general, those go back > to the end station though. An intermediate router has no way to know if a > problem occurred and retransmit. > > A few other exceptions to the rule that a router doesn't retransmit are > Binary Synchronous Communication Protocol (BISYNC) and LAPB. > > Priscilla > > At 11:27 PM 5/6/02, Kaminski, Shawn G wrote: > >I've always known routers to "route" and bridges to "learn, filter, > forward, > >and flood". A co-worker said that if a router is configured with > transparent > >bridging, it can re-transmit a frame. He said that he heard this > somewhere. > >I'm pretty sure he's wrong because this just isn't something that a > >router/bridge is meant to do. I also searched CCO but came up > empty-handed. > > > >For example, say you have two segments connected to a router; one segment > >off of e0 and one segment off of e1. If a host on the e0 segment sends a > >frame to a host on the e1 segment and a collision occurs on the e1 > segment > >before reaching the destination host, then I believe that the host on e0 > is > >responsible for re-transmitting the frame, not the router/bridge. > > > >Has anyone heard of a router configured with transparent bridging > >re-transmitting frames? I just can't see how this could happen. However, > >I've seen stranger things happen, so I just wanted to get the opinions of > >others on this group. > > > >Shawn K. > > > Priscilla Oppenheimer > http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43483&t=43459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Code upgrade switch catalyst 1200 [7:43348]
what port are you plugged into on the switch? can you print in an email the "show interface" command? ""Alexandre Carvalho"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello Guys, > I have a weird problem with upgrading my switch and I was wondering if > somebody could help me out. > My laptop is in the same subnet as the switch , but I cannot ping each > other. I am running tftp server in my laptop so if I cannot ping I cannot > upgrade it. I check the port where my laptop is connected and it says OK. > Any ideas?? > > Laptop: 10.2.2.1 /16 > Switch : 10.2.2.2 /16 > > Command used in the switch : set interface sc0 10.2.2.2 255.255.0.0 > > Thanks, > > Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43482&t=43348 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Beta 351-001 [7:43473]
Excellent comments and excellent attitude! Best wishes in your pursuits! JR -- Johnny Routin The "Routin" One ""Shahid Muhammad Shafi"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi All, > > Today I sat for the CCIE beta exam. Wh!!! what > a monster!!! Cisco finally came out with a way to > filter people in the first stage only. I found this > exam very tough and comprehensive. It can easily > distinguish a man from a kid. > > Cisco definitely assumes two things: > > 1. You know your stuff, no doubt about that, so lets > not waste time in asking those things. Why not go for > some applied stuff like scenarios, real world examples > and sometimes real problems too.Why u guys dont apply > whatever u have learnt? > > 2. You are definitely ready to take ur lab exam in a > month or so and after passing this exam u gonna book > ur flight to San Jose. > > I am CCNP,CCDP and have routing experience of around > 2 years, definitely not upto the standard of most of > you guys, but trust me, I was lost in some routing > questions also. During the exam, there was only one > thought on my mind: " Shahid, u have to go a long way, > its just a start" > > I now exactly know what I need to learn and many > thanks to Cisco as these guys put a real good effort > in writing some amazing questions for this exam. Even > if I fail this beta, I'll go for the same damn exam > again. I wannna face this challenge!! > > Now without voilating the NDA, topics are: > > IP Multicasting (heavy) > > QoS (few but good ones) > > 6500 Switching (Yes, everything u can cover about this > box. During exam I came to know what this monster can > do!! PVLANs, VACLs, RACLs, and all little details > about architecture) > > OSPF (ok) > BGP (ok~Heavy) > IS-IS (ok) > EIGRP (ok) > Mixed routing protocol scenarios (I lost all my colour > here and my big expectations from MYSELF got a big > dent here. Trust me, no exaggeration!!! > > IPX and DLSW+ > > MPLS,SIP,Basic TCP/IP, VoX, ATM, FR, x25, DDR > > RADIUS,TACACS+, IPSec and PIXes! > > And some weird stuff about Cisco hardware, flash, > codes etc. I know exactly now how to cover this stuff > and how important to know it if u wanna be a true > Cisco Engineer. > > Links provided by Cisco with the blueprint are DAMN > IMPORTANT to know. Trust me on that too and bookmark > them immediately. > > Ill take a break today and start with my MCNS which is > scheduled next week. > > If I pass, thats fine but if I fail, Ill sit for this > same exam when it'll go live. No old stuff anymore!! > > I hope people will depend on books and reading to pass > this test rather than depending on dumps and > shortcuts. If u pass this test in a proper way, trust > me u ll be happy with ur ACHIEVEMENT. > > Again kudos to Cisco for coming up with such a nice > and comprehensive exam!!! Good Job!!! and thanks to > all at Groupstudy for their help. > > Thanks, > > Shahid > > > > > > > > > > = > Shahid Muhammad Shafi > > "Every man dies; not every man really lives" > > Please help feed hungry people worldwide http://www.hungersite.com/ > A small thing each of us can do to help others less fortunate than ourselves > > __ > Do You Yahoo!? > Yahoo! Health - your guide to health and wellness > http://health.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43481&t=43473 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
A net or B net [7:43480]
I have two networks, that are conneted to Cat5 switches that are connected with one 100Mbits connection, and they are set up as difrent Vlans, then I have a router to route between them, one network has about 30 servers and somthing like 150 clients, and the other around 100 clients, now I have to change the IP networks uesd for those net´s so I was thinking if I should change them both to one B IP network, and eliminate the routing between those networks. anyone have any insights on that Best Regards, Arni V. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43480&t=43480 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Immdeiate Assistance is Reaquired! [7:43449]
"Sean Knox" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > It should be blatantly obvious (to Cisco people anyway), but make sure you > replace the 0.0.0.0 with the address of your proxy server. :) 0.0.0.0 > equates to "any host." heh I remember typing something like: access-list 1 permit 0.0.0.0 I remember doing some edit where I highlighted it.. guess I must've deleted it. good catch Sean! Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43479&t=43449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Pix load balance? [7:42974]
What's the reason? I'm not disputing the fact, just wondering what the limitation is. I take it that the limitation is only that it cannot do stateful failover with two active PIXes? Cheers, Gaz wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Yeah, I asked the same questions last month. They can not. If you really > need firewall and Load balancing, FW-1 is the way to go. > > Theo > CSS1, CCNP, CCSE > > > > > > > "Patrick" > Sent by: [EMAIL PROTECTED] > 05/06/2002 06:28 AM > Please respond to "Patrick" > > > To: [EMAIL PROTECTED] > cc: > Subject:Re: Pix load balance? [7:42974] > > > No. > > ""GEORGE"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Can you load balance to pix firewalls? > > Has anyone done this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43478&t=42974 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CIT cert exam vs. Semester 8 final [7:43477]
Has anyone taken both of these troubleshooting exams: the CIT certification exam and the Cisco Academy Semester 8 final? I'd like to know how you compare them in difficulty, scope and any other interesting features. -- Thanks, TT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43477&t=43477 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Need Some Advice [7:43476]
Hello guys I need to accommodate 21 e1 connections and 3 e3 connections to central site, somebody can tell me which cisco product should I choose at central and remote sites Thanks fa Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43476&t=43476 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Content Switching and Keepalives [7:43141]
Thanks for the info everyone, I tested it last night and it worked great, we now have load balancing and the keepalive running. Here's the config for one of the services Cheers Pat service portal2 ip address 172.16.10.12 string portal2 protocol tcp keepalive port 81 keepalive type http keepalive uri "/index.html" active sam sneed wrote: > There are 2 methods of keepalives, get and head. > > get: > CSS gets the web page, computes a hash based on the page and stores it for > reference. The next time the CSS gets the webpage it looks for 200 OK and > stauts and compares the new hash with the hash stored for reference. If they > are different the CSS marks the service as down. So you can conclude this > method only works well for static content on pages. > > Head: > CSS only issues an HTTP head on the service and looks for 200 OK status , if > it gets it service is marked up other wise its down. Less overhead than get > method and good for Dynamic content as well. > > hope that helped a bit. > > ""Patrick Donlon"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi Dave > > > > I've not had chance to test the keepalive yet but I see you mention using > > head or get > > can depend on the page type. Can you explain further or do you have any > > links? > > > > Cheers > > > > Pat > > > > David Harrison wrote: > > > > > This is correct. The domain name is not necessary. Since the CSS knows > > > the ip address of the box it's watching it doesn't have to rely on a > > > domain name to find the location of the server. > > > > > > However it is important that the css know the path to reach the > > > reference page. > > > > > > I've used the following: > > > service blah_blah > > > ip address 10.1.1.1 > > > keepalive frequency 8 > > > keepalive type http > > > keepalive uri "/.reference/arrowpoint-keepalive.html" > > > active > > > > > > I usually use the default "head" method vs the "get". Depends on whether > > > the file you are watching is static or dynamic. > > > > > > Dave > > > > > > -Original Message- > > > From: John Neiberger [mailto:[EMAIL PROTECTED]] > > > Sent: Friday, May 03, 2002 12:19 PM > > > To: [EMAIL PROTECTED] > > > Subject: Re: Content Switching and Keepalives [7:43141] > > > > > > I'm not positive about this but I don't believe you're supposed to > > > include the domain name in the URI. We simply use 'keepalive uri > > > "/index.htm"' and that works well. Give that a shot and see if it works > > > for you. > > > > > > John > > > > > > >>> "Patrick Donlon" 5/3/02 9:54:47 AM >>> > > > Hi > > > > > > I tested it and for some reason it didn't work, I configured the > > > following > > > on the > > > service: > > > > > > keepalive port 81, > > > keepalive method get, > > > keepalive type http > > > keepalive frequency 25, > > > keepalive retry 25 > > > keepalive uri "www.blahblah.com/index.html" > > > > > > I then activated the service (and re-activated it a few times just in > > > case) > > > Any thing > > > obviously wrong and what should I check in the log > > > > > > cheers > > > > > > Pat > > > > > > Patrick Donlon wrote: > > > > > > > Hi All > > > > > > > > I have two web servers which are being load balanced behind a CSS, > > > this > > > > is working fine. Currently we're using the default ICMP keepalive, > > > this > > > > is OK if the failure is at this level but when the web services > > > process > > > > is stopped by the DBA the CSS thinks it's up and running. I've seen > > > the > > > > different options, tcp, http gets, etc, and would like to know > > > anyone > > > > else's experience in what is the best balance over performance and > > > > detecting the lost of service > > > > > > > > Cheers > > > > > > > > Pat > > > > > > > > [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43475&t=43141 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: content delivery network [7:43450]
Go to cisco.com and here is the exact link for ya http://www.cisco.com/univercd/cc/td/doc/product/webscale/index.htm --- supernet wrote: > Dear Friends, > > Where can I find some white paper about content > delivery network? I'd > like to design a network with CSS and CE. > > Thanks. > Yoshi [EMAIL PROTECTED] = Shahid Muhammad Shafi "Every man dies; not every man really lives" Please help feed hungry people worldwide http://www.hungersite.com/ A small thing each of us can do to help others less fortunate than ourselves __ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43474&t=43450 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE Beta 351-001 [7:43473]
Hi All, Today I sat for the CCIE beta exam. Wh!!! what a monster!!! Cisco finally came out with a way to filter people in the first stage only. I found this exam very tough and comprehensive. It can easily distinguish a man from a kid. Cisco definitely assumes two things: 1. You know your stuff, no doubt about that, so lets not waste time in asking those things. Why not go for some applied stuff like scenarios, real world examples and sometimes real problems too.Why u guys dont apply whatever u have learnt? 2. You are definitely ready to take ur lab exam in a month or so and after passing this exam u gonna book ur flight to San Jose. I am CCNP,CCDP and have routing experience of around 2 years, definitely not upto the standard of most of you guys, but trust me, I was lost in some routing questions also. During the exam, there was only one thought on my mind: " Shahid, u have to go a long way, its just a start" I now exactly know what I need to learn and many thanks to Cisco as these guys put a real good effort in writing some amazing questions for this exam. Even if I fail this beta, I'll go for the same damn exam again. I wannna face this challenge!! Now without voilating the NDA, topics are: IP Multicasting (heavy) QoS (few but good ones) 6500 Switching (Yes, everything u can cover about this box. During exam I came to know what this monster can do!! PVLANs, VACLs, RACLs, and all little details about architecture) OSPF (ok) BGP (ok~Heavy) IS-IS (ok) EIGRP (ok) Mixed routing protocol scenarios (I lost all my colour here and my big expectations from MYSELF got a big dent here. Trust me, no exaggeration!!! IPX and DLSW+ MPLS,SIP,Basic TCP/IP, VoX, ATM, FR, x25, DDR RADIUS,TACACS+, IPSec and PIXes! And some weird stuff about Cisco hardware, flash, codes etc. I know exactly now how to cover this stuff and how important to know it if u wanna be a true Cisco Engineer. Links provided by Cisco with the blueprint are DAMN IMPORTANT to know. Trust me on that too and bookmark them immediately. Ill take a break today and start with my MCNS which is scheduled next week. If I pass, thats fine but if I fail, Ill sit for this same exam when it'll go live. No old stuff anymore!! I hope people will depend on books and reading to pass this test rather than depending on dumps and shortcuts. If u pass this test in a proper way, trust me u ll be happy with ur ACHIEVEMENT. Again kudos to Cisco for coming up with such a nice and comprehensive exam!!! Good Job!!! and thanks to all at Groupstudy for their help. Thanks, Shahid = Shahid Muhammad Shafi "Every man dies; not every man really lives" Please help feed hungry people worldwide http://www.hungersite.com/ A small thing each of us can do to help others less fortunate than ourselves __ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43473&t=43473 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
