LAN(ADSL) to LAN(ADSL) VPN Router Config [7:47085]
Hi all, I have been trying to search CCO and the archives( think the links are down at the moment) for a IpSec VPN LAN (1720 with ADSL) to LAN (1720 with ADSL) router configuration using Pre-share keys. Can someone post or point where I can find this specfic configuration. I have not configured a ADSL interface and would like to understand this better. K Reynolds _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47085t=47085 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Lab comming Frakin' out here [7:47055]
I know the feelling ... You said: But what is really scaring me is the Old Stuff like Bridging, Token, IPX. Then why not postpon your lab and take the lab after November. Apparently they are removing ipx and token ring? Pierre-Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47086t=47055 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: losing connectivity [7:47063]
Reasoning for the hub protocol analyzer... didn't work very good in a switched environment. -Original Message- From: Brunner Joseph [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 20, 2002 10:51 AM To: [EMAIL PROTECTED] Subject: RE: losing connectivity [7:47063] why dont you just replace the hub with a switch that does span (i.e. the very stable and affordable 3500XL) see http://www.cisco.com/warp/public/473/41.html#xl I have one on my desk for testing, im sure you can acquire one on www.lanstreet.com or ebay.com for a reasonable price. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47084t=47063 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Lab comming Frakin' out here [7:47055]
I Know the feeling... The only way I tried to get around this was to make a very honest list of what terrified me and then learn that stuff. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47087t=47055 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: BPX [7:47008]
not -Original Message- From: Lupi, Guy Sent: Thursday, June 20, 2002 12:27 PM To: [EMAIL PROTECTED] Subject: RE: BPX [7:47008] It looks like they do: http://www.800teachme.com/cgi-bin/teachme/viewcourse.cgi?LIS1000D92AZ Has anyone ever gone to one of their classes? If so, are they worth the money? *-Original Message- *From: craig mcguinness [mailto:[EMAIL PROTECTED]] *Sent: Thursday, June 20, 2002 11:38 AM *To: [EMAIL PROTECTED] *Subject: RE: BPX [7:47008] * * *BPX is not an ATM protocol, it is an ATM Switch. It is part of Cisco's *former Stratacom line of Carrier ATM switches. I believe *Telecordia may still offer classes on the BPX, IGX and MGX. * * * Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47090t=47008 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VLANs and SNMP [7:47091]
Hi, I have one query regarding VLAN representation in SNMP. I had to find if VLANs are configured in a cisco box.And I can only do it thru SNMP means. I looked at the Bridge MIB extensions and it says that ifType value for a VLAN interface should be propVirtual(53) Now I looked at the interface table of Catalyst 6000 series (MSFC Software (C6MSFC-JSV-M), Version 12.1(8a)). It has bunch of VLAN interfaces with ifType as ethernetcsmaCd. Well this seems to be true for any MSFC card. So where is the catch... I mean what i should understand by this and what else I can look at to find if VLANs are present. Thanks, Ashish Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47091t=47091 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco E1 card... [7:47093]
Hi, I want to know whether Cisco E1 card is compatiable with Nortel Meridian Options 11c. If anybody worked on these two please throgh some light on the integration part of these. Thanks. __ Do You Yahoo!? Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47093t=47093 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: losing connectivity [7:47063]
works great with a switch that does span port. [EMAIL PROTECTED] 06/20/02 12:50PM Reasoning for the hub protocol analyzer... didn't work very good in a switched environment. -Original Message- From: Brunner Joseph [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 20, 2002 10:51 AM To: [EMAIL PROTECTED] Subject: RE: losing connectivity [7:47063] why dont you just replace the hub with a switch that does span (i.e. the very stable and affordable 3500XL) see http://www.cisco.com/warp/public/473/41.html#xl I have one on my desk for testing, im sure you can acquire one on www.lanstreet.com or ebay.com for a reasonable price. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47092t=47063 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: EIGRP Neighbor issue [7:47030]
On p2p frame-relay interfaces, you have to set an interface DLCI. That should resolve your neighbor problem. HTH __ Thomas Crowe Senior Systems Engineer / Senior Architect EMC Proven Master Architect CTS Professional Services - Atlanta __ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 20, 2002 12:09 PM To: [EMAIL PROTECTED] Subject: Re: EIGRP Neighbor issue [7:47030] My understanding of P2P Frame-Relay is that you do NOT need map statements. Unless I'm following an olders IOS behavior as outlined in Caslow, please correct me if I'm wrong. - Original Message - From: Kelly Cobean To: Sent: Wednesday, June 19, 2002 11:27 PM Subject: FW: EIGRP Neighbor issue [7:47030] Hey all, I'm probably missing some fairly simple concept here, but for some reason, I cannot get two routers to establish a neighborship over a frame-relay link without manually specifying each as the other's neighbor in the eigrp configuration on each router. Both routers have frame-relay map statements that include the broadcast keyword. The spoke router has another router connected to it via Ethernet. It dynamically discovers this other router and establishes adjacency without manual configuration. Here's the basics of the config: Hub# int s0.300 multipoint ip address 192.168.1.1 255.255.255.0 frame-relay map ip 192.168.1.3 301 broadcast frame-relay map ip 192.168.1.2 302 broadcast router eigrp 100 no auto-summary network 192.168.1.0 __ Spoke# int s0.103 point-to-point ip address 192.168.1.3 255.255.255.0 frame-relay map ip 192.168.1.1 103 broadcast router eigrp 100 no auto-summary network 192.168.1.0 __ Unless I add the line neighbor 192.168.1.3 and neighbor 192.168.1.1 to each router respectively, the adjacency fails. My impression of the broadcast keyword in the frame-relay map statement was that it would cause the interface to pass broad/multicasts. So what am I missing? There is nothing in my BSCN book about this (unless I'm blind) and I've had a hard time finding anything on Cisco's site about it. Any input is greatly appreciated. Thanks. Kelly [GroupStudy.com removed an attachment of type text/x-vcard which had a name of Thomas Crowe.vcf] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47094t=47030 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: EIGRP Neighbor issue [7:47030]
See what happens when you try to type your configs from memory. You're absolutely right, Chuck, I posted an incorrect config. On the PTP interface the map statement is really a frame-relay interface dlci 103 statement. Still, the proble persists. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47095t=47030 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
FW: authentication and router [7:46932]
At the password prompt, if you enter your configured enable password you get access? Sounds like it's working as you have it configured, how did you want it to work? Philip -Original Message- From: GEORGE [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 18, 2002 5:37 PM To: [EMAIL PROTECTED] Subject: authentication and router [7:46932] I just configured my router to authenticate with cisco secure every works ok, except if I try to Console I get a password promt, and I stop cisco secure I get a password promt Now I tried to enter my enable password and wont work Am I missing something here aaa new-model aaa authentication login default group tacacs+ enable aaa authentication login local local aaa authentication login no_tacacs enable aaa authentication ppp default if-needed group tacacs+ aaa authorization exec default group tacacs+ local aaa authorization network default group tacacs+ aaa accounting exec default start-stop group tacacs+ aaa accounting network default start-stop group tacacs+ line con0 line authentication no_tacacs Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47096t=46932 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OT - Mega, Kilo - kibi, Mebi [7:46940]
HAHAHA, I likes. Kibis and mibis, kibis and mibis, I've got to get me more kibis and mibis. -Original Message- From: John Neiberger [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 19, 2002 3:49 PM To: [EMAIL PROTECTED] Subject: Re: OT - Mega, Kilo - kibi, Mebi [7:46940] I'm wondering if these didn't catch on because they sound so silly. Have you actually ever said kibibytes or mebibytes out loud?? :-) That reminds of the dog food commercial from a few years ago: Kibbles and bits, kibbles and bits... Dr Rita Puzmanova 6/19/02 2:05:55 PM To eliminate such problems in understanding what metric prefixes are actually meant, a long time ago IEC agreed on a standard for different prefixes for binary, such as kibi (1024), Mebi (1024*1024) etc. See the following interesting links: http://physics.nist.gov/cuu/Units/binary.html http://whatis.techtarget.com/definition/0,,sid9_gci825099,00.html IMHO while _kbps_ is correct, _Kbps_ is not: in case of _kilo_ prefix you can easily distinguish between kilo=k (lowercase) =1000 (related to anything but binary) and kilo=K (uppercase)=1024 (related to binary prefix, such as KB=1024 bytes). Rita [EMAIL PROTECTED] wrote: This is not specifically related to Cisco, but is a networking question. I was having a mild argument yesterday with a PC/server type guy who was very irate at an ISP for using gigabyte to mean 1000 Megabytes instead of 1024 Megabytes. He appeared to think that throughout the IT industry, K always means 2 ^ 10, M always means 2 ^ 20, etc etc. I pointed out that this is not always the case (64kbps = 64000 bps, for example), and haven't yet had a reply (I actually agree with him that the ISP is using the wrong definition, but I can see why they are). However, it got me curious. After a quick squizz through various sources, I couldn't find any that define the prefixes for networking usage. www.whatis.com has an interesting page on the prefixes, which basically backs up what I thought - roughly, storage (memory sizes etc) usually uses prefixes calculated in powers of two, while data transfer usually uses prefixes calculated in powers of ten. But is this codified anywhere? For example, do the ethernet standards define 10 Mbps, or 1 Gbps (Yes, I know about the IEEE site, but the standards don't seem to be currently downloadable)? JMcL Important: This e-mail is intended for the use of the addressee and may contain information that is confidential, commercially valuable or subject to legal or parliamentary privilege. If you are not the intended recipient you are notified that any review, re-transmission, disclosure, use or dissemination of this communication is strictly prohibited by several Commonwealth Acts of Parliament. If you have received this communication in error please notify the sender immediately and delete all copies of this transmission together with any attachments. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47015t=46940 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: losing connectivity [7:47063]
Anything strange on the counters when you do a sh int e x/x or sh controllers e x/x? Anything on the logs? I'm thinking an intermittently jabbering NIC or faulty wiring from the local PCs to the hub. I seem to remember router interfaces shutting down during excessive collisions but can't find a reference. Your logs would show if such a thing occurred. Do you have to reboot the local PCs when you reset the hub? Any correlation between network traffic / backups and outages? If you have a Cisco Service Contract, call the TAC. From a sh diag have them look to see if any particular hardware version of your card has problems. (I did with older PA-8E) As others have pointed out a switch that collects per port stats would be useful here. No need to keep it in place once the problem is found. Have you done any research on the Checkpoint to see if it has any know problems? Please post your solution to the group. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 20, 2002 9:54 AM To: [EMAIL PROTECTED] Subject: losing connectivity [7:47063] Scenario... We have a 3640 connected to one T1. That then feeds a hub with two to three boxes hanging off it; then connects to a Checkpoint FW. The problem, seems that the hub gets hosed up (technical term) and needs to be reset this has been happening on and off for about 3 -4 months. When we lose connectivity, from the outside, I can ping the Ethernet port on the router, but I can't ping the box hanging off the hub. All users on the inside cannot access anything outside the network. We've tried three different hubs. Using a 2-Eth/2-WAN (NM-2E2W), I switched to the second Ethernet port and it seemed to solve the problem (for a short time) but it's back again. Any help/insight is greatly appreciated this is driving me crazy. Misc Box (IDS) | | Cisco3640 -- Cisco Hub -- CheckPoint FW Thanx, mike jablonski ~~~ Michael Jablonski ABN AMRO Asset Management Holdings, Inc. 161 North Clark St. 9th Flr Chicago, IL 60601-2468 PH: 312.884.2996 FAX: 312.278.5550 ~~~ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47097t=47063 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Emergency problem with async interface configuration [7:47098]
I would like to assign IP address to the ppp clients based on their ppp usernames . So that I can trace who-has-done-what on my dialup clients based on their IP addresses . As far as I know , peer default ip address doesn't have such an option . I know how to do this on other RAS platform , Is there a way I can do this on a cisco router ? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47098t=47098 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Book: CCIE Troubleshooting IP Routing Protocols [7:47099]
Troubleshooting IP Routing Protocols (CCIE Professional Development Series) by Shamim, Aziz, Liu, and Martey. Does anyone have any feedback about this book? Is it good??? Thanks for any help!!! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47099t=47099 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Password Recovery for CE-507-CDN [7:47100]
Does anybody have any idea how to break a password on a CE-507-CDN content engine? I found instructions on CCO for recovering a lost password on a content cngine http://www.cisco.com/univercd/cc/td/doc/product/webscale/webcache/ce30/sconf3xx/chap2.htm but step two says: At the following prompt, press Return: Cisco CE boot:hit RETURN to set boot flags:0009 That line never appears during the bootup of my content engine. Any ideas? Thanks in advance, Kevin Love [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47100t=47100 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
serial interface down/down or up/down [7:47101]
Hi Group Study, While writing some questions for a practice test, I found myself questioning what I thought was the right answer. Here's the scenario: A Cisco router serial interface is correctly connected with a good V.35 cable to the data port on the DSU side of a CSU/DSU. The CSU/DSU has been misconfigured for the framing method (SF instead of ESF). The framing doesn't match what the provider is using. (The question refers to a CSU/DSU that is external to the router, not one that is built into the router.) Will the Cisco router serial interface be down/down or up/down? And, would the answer be any different if the question has to do with misconfiguring the encoding (AMI versus B8ZS)? If you have real-world experience with this, that would help. I have read the Cisco documentation and the troubleshooting charts, etc. Thanks Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47101t=47101 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Lab coming Frakin' out here [7:47055]
Do not take it so soon if this is where you are. You can still cancel. If you have not paid yet, don't. If you have, then switch to a MUCH later date. You need to get deep into this stuff. You will have questions once you have delved into the practice labs, and you will need to go back and do more and more reading. More practice. More reading. More practice. More reading. Unless you have money to burn. I am taking the Lab Exam for the first time next month, and I am only now feeling like I might have a decent chance of passing, after three more weeks of hard work. I passed the written last August, and have moved my date back more than once. If you had already paid and it was less than a month away, then my advice would be different. Tim O'Brien wrote in message news:[EMAIL PROTECTED]... If you are just now starting with hands on practice.. well, you are in big trouble... I would say that the average CCIE probably spends roughly 300 to 400 hours of hands on with routers and switched dedicated to studying for CCIE type scenarios, with many more hours of on the job experience. July 24th.. looks like about 33 days left to study, give or take a few. AT 10 straight hours a day you might have a chance, if your brain does not turn to mush first. :) Tim CCIE 9015 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 20, 2002 9:54 AM To: [EMAIL PROTECTED] Subject: Lab comming Frakin' out here [7:47055] Ok I know I sound stupid, but im freakin' out here. I am takin' the lab on July 24th in SJ and im panicing. How do I know if im ready??? Please say somthing to make me feel better. I have already read the Solie Practical Lab book (Just starting to hammer the practice labs at the end of the book) and just completed the Doyle book. Who here took the lab and read the practical studies book by solie? Do you think the labs in that book helps or is it just crap? What other advice can some Vets offer for someone in my state? Im dyin' here and I will not push the panic button as they are in the mix of changin' the exam again. Thanks Karim [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47102t=47055 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Troubleshooting IP Routing Protocols [7:47099]
As skeptical as I am about the expanding universe of titles with CCIE in them, to judge from Amazon, this one actually looks like it might be pretty good. IMHO, after reading and experimenting with the Parkhurst BGP book, I have to say that I wish there were more of these kinds of study materials, and fewer of the Doyle wannabe's doing all these me-too books covering the same material in the same way with the same mistakes in them. OR, you could just spend a lot of time reviewing the Cisco TAC pages, if you have the time. There is a rumor going around that quite a bit of the material that finds its way into CCIE Lab scenarios is provided by senior TAC engineers. T B wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Troubleshooting IP Routing Protocols (CCIE Professional Development Series) by Shamim, Aziz, Liu, and Martey. Does anyone have any feedback about this book? Is it good??? Thanks for any help!!! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47103t=47099 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VLANs and SNMP [7:47104]
Hi, I have one query regarding VLAN representation in SNMP. I had to find if VLANs are configured in a cisco box.And I can only do it thru SNMP means. I looked at the Bridge MIB extensions and it says that ifType value for a VLAN interface should be propVirtual(53) Now I looked at the interface table of Catalyst 6000 series (MSFC Software (C6MSFC-JSV-M), Version 12.1(8a)). It has bunch of VLAN interfaces with ifType as ethernetcsmaCd. Well this seems to be true for any MSFC card. So where is the catch... I mean what i should understand by this and what else I can look at to find if VLANs are present. Thanks, Ashish Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47104t=47104 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Troubleshooting IP Routing Protocols [7:47099]
It seems to be a bit weak in policy routing and route maps, with discussion centered around using these tools with BGP, but no where else. Guessing, this book is not intended to be a comprehensive guide to configuring routing protocols, but perhaps more geared towards spotting the issues as someone once liked to say. Tom T B wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Troubleshooting IP Routing Protocols (CCIE Professional Development Series) by Shamim, Aziz, Liu, and Martey. Does anyone have any feedback about this book? Is it good??? Thanks for any help!!! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47105t=47099 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Troubleshooting IP Routing Protocols [7:47099]
Honestly, I buy almost every Cisco Press book out there just to have it, and I actually looked at the book yesterday. After a cursory glance through its contents, I decided as a CCIE, or close to CCIE, the knowledge should already be in your head. I didn't think the book was very valuable, and if you need a book like that to figure out what's wrong, you have other sources to look for answers. It just wasn't worth it in my opinion. -- RFC 1149 Compliant. T B wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Troubleshooting IP Routing Protocols (CCIE Professional Development Series) by Shamim, Aziz, Liu, and Martey. Does anyone have any feedback about this book? Is it good??? Thanks for any help!!! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47106t=47099 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: serial interface down/down or up/down [7:47101]
Hi Priscilla, I have actually had this scenario (multiple times), but due to the Telco's misconfiguration. Specifically we were expecting b8zs/esf. Unfortunately I can't confirm which was configured incorrectly, but I can confirm that going through all of the different combinations available at the router you will get all combinations on the serial interface (up/up, down/up and down/down). I can also confirm, you will not establish connectivity, regardless. I believe either b8zs/esf or sf/ami are the only valid combinations. At least that is all I've ever worked with. Hope this helps, -TV Priscilla Oppenheimer wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Group Study, While writing some questions for a practice test, I found myself questioning what I thought was the right answer. Here's the scenario: A Cisco router serial interface is correctly connected with a good V.35 cable to the data port on the DSU side of a CSU/DSU. The CSU/DSU has been misconfigured for the framing method (SF instead of ESF). The framing doesn't match what the provider is using. (The question refers to a CSU/DSU that is external to the router, not one that is built into the router.) Will the Cisco router serial interface be down/down or up/down? And, would the answer be any different if the question has to do with misconfiguring the encoding (AMI versus B8ZS)? If you have real-world experience with this, that would help. I have read the Cisco documentation and the troubleshooting charts, etc. Thanks Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47107t=47101 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: LAN(ADSL) to LAN(ADSL) VPN Router Config [7:47085]
Here is a in production example of a 2610 one static Internet IP using a split-tunnel to a dynamic IP 1720 with basically the same config; except the ip on the dialer is ip address negotiated. -TV hostname 2610 ! ! ! clock timezone EST -5 clock summer-time EST recurring ip subnet-zero no ip source-route no ip rcmd domain-lookup ! ! ! no ip bootp server ip ssh time-out 120 ip ssh authentication-retries 3 vpdn enable ! vpdn-group pppoe request-dialin protocol pppoe ! ! crypto isakmp policy 1 hash md5 authentication pre-share crypto isakmp key whatever address 0.0.0.0 0.0.0.0 ! ! crypto ipsec transform-set dynamictunnel esp-des esp-md5-hmac crypto mib ipsec flowmib history tunnel size 200 crypto mib ipsec flowmib history failure size 200 ! crypto dynamic-map br1map 10 set transform-set dynamictunnel match address 125 ! ! crypto map maptrans 10 ipsec-isakmp dynamic br1map ! ! interface ATM0/0 description dsl interface no ip address atm vc-per-vp 256 no atm ilmi-keepalive atm voice aal2 aggregate-svc upspeed-number 0 bundle-enable dsl operating-mode auto no fair-queue hold-queue 224 in ! interface ATM0/0.1 point-to-point pvc 0/35 pppoe-client dial-pool-number 1 ! ! interface Ethernet0/0 description inside Main Network ip address 192.168.28.1 255.255.255.0 no ip redirects ip nat inside half-duplex no cdp enable ! interface Dialer0 description Internet IP via pppoe and dsl ip address Inetaddress 255.255.255.0 ip access-group 180 in ip mtu 1492 ip nat outside encapsulation ppp dialer pool 1 no cdp enable ppp authentication pap callin ppp chap password 7 blahblah ppp pap sent-username blah password 7 blalalla crypto map maptrans ! ip nat inside source route-map nonat interface Dialer0 overload ip nat inside source static tcp 192.168.28.250 25 Inetaddress 25 extendable ip classless ip route 0.0.0.0 0.0.0.0 Dialer0 no ip http server ip pim bidir-enable ! access-list 125 permit ip 192.168.28.0 0.0.0.255 192.168.30.0 0.0.0.255 access-list 130 deny ip 192.168.28.0 0.0.0.255 192.168.30.0 0.0.0.255 access-list 130 permit ip 192.168.28.0 0.0.0.255 any access-list 180 permit ip 192.168.30.0 0.0.1.255 any log access-list 180 deny ip 192.168.0.0 0.0.255.255 any log access-list 180 deny ip 172.16.0.0 0.15.255.255 any log access-list 180 deny ip 10.0.0.0 0.255.255.255 any log access-list 180 deny ip 127.0.0.0 0.255.255.255 any log access-list 180 deny ip 255.0.0.0 0.255.255.255 any log access-list 180 deny ip 224.0.0.0 7.255.255.255 any log access-list 180 deny tcp any any eq ident log access-list 180 deny tcp any any eq 135 log access-list 180 deny tcp any any eq 137 log access-list 180 deny tcp any any eq 138 log access-list 180 deny tcp any any eq 139 log access-list 180 deny udp any any eq 135 log access-list 180 deny udp any any eq netbios-ns log access-list 180 deny udp any any eq netbios-dgm log access-list 180 deny udp any any eq netbios-ss log access-list 180 deny tcp any any eq 161 log access-list 180 deny udp any any eq snmp log access-list 180 deny tcp any any eq 162 log access-list 180 deny udp any any eq snmptrap log access-list 180 permit udp host 128.118.25.3 eq ntp any log access-list 180 deny udp any any eq ntp log access-list 180 permit ip any any log no cdp run ! route-map nonat permit 10 match ip address 130 ! KM Reynolds wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi all, I have been trying to search CCO and the archives( think the links are down at the moment) for a IpSec VPN LAN (1720 with ADSL) to LAN (1720 with ADSL) router configuration using Pre-share keys. Can someone post or point where I can find this specfic configuration. I have not configured a ADSL interface and would like to understand this better. K Reynolds _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47108t=47085 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VLANs and SNMP [7:47104]
Are you mixing apples and oranges here? On one hand you mention determining if VLANs are configured in cisco box. But it would appear that you are looking at trying to determine if there are VLANs existing on the Switch. On the other hand, it would appear that you are querying the MSFC, and that will instead give you what you are seeing, the VLAN routing interfaces. So, what are you trying to determine, what VLANs exist on the switch, or what VLAN routing interfaces exist on the router? They are not the same thing here. To be honest I don't have the answer, just trying to help clarify what it is you are looking to find out. Good Luck! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47109t=47104 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: serial interface down/down or up/down [7:47101]
I can't say I've ever seen a down/up condition. Up/Down perhaps. I'm sure there are exceptions, but it's my belief that the router doesn't care about encoding, but rather a layer-1 connection to the dce/dte device. If the router can 'talk' to the device on the other end of the cable, you should get an up/x condition, where x would depend on the csu/dsu condition of the line. I don't have a csu handy, otherwise I'd check that right now. I can do that tomorrow morning (10:30 pm est here), but you may have an answer prior to that... Hi Priscilla, I have actually had this scenario (multiple times), but due to the Telco's misconfiguration. Specifically we were expecting b8zs/esf. Unfortunately I can't confirm which was configured incorrectly, but I can confirm that going through all of the different combinations available at the router you will get all combinations on the serial interface (up/up, down/up and down/down). I can also confirm, you will not establish connectivity, regardless. I believe either b8zs/esf or sf/ami are the only valid combinations. At least that is all I've ever worked with. Hope this helps, -TV Priscilla Oppenheimer wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Group Study, While writing some questions for a practice test, I found myself questioning what I thought was the right answer. Here's the scenario: A Cisco router serial interface is correctly connected with a good V.35 cable to the data port on the DSU side of a CSU/DSU. The CSU/DSU has been misconfigured for the framing method (SF instead of ESF). The framing doesn't match what the provider is using. (The question refers to a CSU/DSU that is external to the router, not one that is built into the router.) Will the Cisco router serial interface be down/down or up/down? And, would the answer be any different if the question has to do with misconfiguring the encoding (AMI versus B8ZS)? If you have real-world experience with this, that would help. I have read the Cisco documentation and the troubleshooting charts, etc. Thanks Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47110t=47101 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: serial interface down/down or up/down [7:47101]
According to CCIE exam materials, the *only* time the serial will show down/down is when there is NO serial cable or a bad serial cable connected. So even if you have a misconfigured framing method, you should at least see up/down. Mike W. Bob Timmons wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I can't say I've ever seen a down/up condition. Up/Down perhaps. I'm sure there are exceptions, but it's my belief that the router doesn't care about encoding, but rather a layer-1 connection to the dce/dte device. If the router can 'talk' to the device on the other end of the cable, you should get an up/x condition, where x would depend on the csu/dsu condition of the line. I don't have a csu handy, otherwise I'd check that right now. I can do that tomorrow morning (10:30 pm est here), but you may have an answer prior to that... Hi Priscilla, I have actually had this scenario (multiple times), but due to the Telco's misconfiguration. Specifically we were expecting b8zs/esf. Unfortunately I can't confirm which was configured incorrectly, but I can confirm that going through all of the different combinations available at the router you will get all combinations on the serial interface (up/up, down/up and down/down). I can also confirm, you will not establish connectivity, regardless. I believe either b8zs/esf or sf/ami are the only valid combinations. At least that is all I've ever worked with. Hope this helps, -TV Priscilla Oppenheimer wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Group Study, While writing some questions for a practice test, I found myself questioning what I thought was the right answer. Here's the scenario: A Cisco router serial interface is correctly connected with a good V.35 cable to the data port on the DSU side of a CSU/DSU. The CSU/DSU has been misconfigured for the framing method (SF instead of ESF). The framing doesn't match what the provider is using. (The question refers to a CSU/DSU that is external to the router, not one that is built into the router.) Will the Cisco router serial interface be down/down or up/down? And, would the answer be any different if the question has to do with misconfiguring the encoding (AMI versus B8ZS)? If you have real-world experience with this, that would help. I have read the Cisco documentation and the troubleshooting charts, etc. Thanks Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47111t=47101 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
FW: EIGRP Neighbor issue [7:47112]
Ok, problem solved...And there is a very important lesson to learn here that I will get to in a minute... The eigrp neighbor problem was due to the fact that on the hub, I defined the neighbors in the eigrp process, where on the spokes I did not. I was able to pinpoint this as the problem by doing debug eigrp packet and debug eigrp neighbor. The error messages indicated that the hub was receiving multicast hellos, where the spokes were receiving unicast hellos. Both ends were discarding the hello's because they were in a format not compatible with what they were configured to use. Once I wiped all of the neighbor definitions altogether, the neighborships formed instantly. Man, I could kick myself! I did, however go back in my books and look for something that says you can't do this, and didn't find anything, so I don't feel quite so stupid. Ok, now for the very important lesson to learn from all this: This list is an awesome pool of knowledge to draw from, but is of absolutely no use to you if you feed it inaccurate information, just as I did with the configs that I provided from memory (what was my name again, I forget). I failed to include the neighbor configuration (along with providing incorrect map statements where interface-dlci statements were actually used), and thus eliminated any chance of any of the experts on the list helping me figure this out in less than the 2 hours I wasted on it. So.If you are going to post information...ESPECIALLY router configsmake sure you give people a chance by providing them with the WHOLE story, unlike me. Big thanks to Chuck, cebuano, and the others who attempted to help me. Kelly Cobean -Original Message- From: Kelly Cobean [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 19, 2002 10:43 PM To: cisco Subject: FW: EIGRP Neighbor issue Hey all, I'm probably missing some fairly simple concept here, but for some reason, I cannot get two routers to establish a neighborship over a frame-relay link without manually specifying each as the other's neighbor in the eigrp configuration on each router. Both routers have frame-relay map statements that include the broadcast keyword. The spoke router has another router connected to it via Ethernet. It dynamically discovers this other router and establishes adjacency without manual configuration. Here's the basics of the config: Hub# int s0.300 multipoint ip address 192.168.1.1 255.255.255.0 frame-relay map ip 192.168.1.3 301 broadcast frame-relay map ip 192.168.1.2 302 broadcast router eigrp 100 no auto-summary network 192.168.1.0 __ Spoke# int s0.103 point-to-point ip address 192.168.1.3 255.255.255.0 frame-relay map ip 192.168.1.1 103 broadcast router eigrp 100 no auto-summary network 192.168.1.0 __ Unless I add the line neighbor 192.168.1.3 and neighbor 192.168.1.1 to each router respectively, the adjacency fails. My impression of the broadcast keyword in the frame-relay map statement was that it would cause the interface to pass broad/multicasts. So what am I missing? There is nothing in my BSCN book about this (unless I'm blind) and I've had a hard time finding anything on Cisco's site about it. Any input is greatly appreciated. Thanks. Kelly Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47112t=47112 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: serial interface down/down or up/down [7:47101]
At 11:11 PM -0400 6/20/02, Bob Timmons wrote: I can't say I've ever seen a down/up condition. Up/Down perhaps. I'm sure there are exceptions, but it's my belief that the router doesn't care about encoding, but rather a layer-1 connection to the dce/dte device. If the router can 'talk' to the device on the other end of the cable, you should get an up/x condition, where x would depend on the csu/dsu condition of the line. This is an interesting discussion. I think of encoding and framing as both being different sublayers of layer 1. I don't have a csu handy, otherwise I'd check that right now. I can do that tomorrow morning (10:30 pm est here), but you may have an answer prior to that... Hi Priscilla, I have actually had this scenario (multiple times), but due to the Telco's misconfiguration. Specifically we were expecting b8zs/esf. Unfortunately I can't confirm which was configured incorrectly, but I can confirm that going through all of the different combinations available at the router you will get all combinations on the serial interface (up/up, down/up and down/down). I can also confirm, you will not establish connectivity, regardless. I believe either b8zs/esf or sf/ami are the only valid combinations. At least that is all I've ever worked with. Hope this helps, -TV Priscilla Oppenheimer wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Group Study, While writing some questions for a practice test, I found myself questioning what I thought was the right answer. Here's the scenario: A Cisco router serial interface is correctly connected with a good V.35 cable to the data port on the DSU side of a CSU/DSU. The CSU/DSU has been misconfigured for the framing method (SF instead of ESF). The framing doesn't match what the provider is using. (The question refers to a CSU/DSU that is external to the router, not one that is built into the router.) Will the Cisco router serial interface be down/down or up/down? And, would the answer be any different if the question has to do with misconfiguring the encoding (AMI versus B8ZS)? If you have real-world experience with this, that would help. I have read the Cisco documentation and the troubleshooting charts, etc. Thanks Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47113t=47101 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: EIGRP Neighbor issue [7:47030]
Kelly Cobean wrote: See what happens when you try to type your configs from memory. You're absolutely right, Chuck, I posted an incorrect config. On the PTP interface the map statement is really a frame-relay interface dlci 103 statement. Still, the proble persists. Kelly, I just labbed this up just to make certain I wasn't insane here also, and I used exactly what you have in your original post, except for the point-to-point having the 'interface-dlci' command instead of the 'map' command, and it works fine for me. I then went ahead and added a few more routes (via loopbacks) to make certain they not only formed the neighborship, but also propagated routes properly. Still working fine. Are you sure that what you typed in is really what you have and you didn't get one of those mappings or something else wrong? Good Luck! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47114t=47030 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: FW: EIGRP Neighbor issue [7:47112]
It's actually still a benefit to you though. When you have an issue like that, and go through 'everything' and then finally figure it out, it sticks with you much better than someone simply handing you the answer on a platter. Good Luck! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47115t=47112 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
integrating CM 3.0 with microsoft netmeeting [7:47116]
Any clues on how to configure Netmeeting as a h.323 client with the CM 3.0. the online cisco documentation isn't conclusive. I need to know how will the netmeeting register with the CM on startup. Regards, Pankaj K Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com Buy Music, Video, CD-ROM, Audio-Books and Music Accessories from http://www.planetm.co.in Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47116t=47116 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP Prefix List Question [7:47117]
Could someone explain to me what the ge and le options are used for in a prefix list statement? Example: ip prefix-list MYLIST permit 11.11.11.0/24 ge le Thanks! Dain Deutschman CNA, MCP, CCNA Data Communications Manager New Star Sales and Service, Inc. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47117t=47117 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Used DSLAM [7:47046]
Check it out with my friend Frank Kim from Comegetus Corp. He has a lot of equipments on hand. Email: [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47118t=47046 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: serial interface down/down or up/down [7:47101]
This isn't quite true. For example, a DCE router interface will be down/down if DTR is not raised by the DTE device. I see this quite often at work and faulty cabling is generally not the culprit. It's almost always bad hardware in the DTE. John Michael L. Williams wrote: According to CCIE exam materials, the *only* time the serial will show down/down is when there is NO serial cable or a bad serial cable connected. So even if you have a misconfigured framing method, you should at least see up/down. Mike W. Bob Timmons wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I can't say I've ever seen a down/up condition. Up/Down perhaps. I'm sure there are exceptions, but it's my belief that the router doesn't care about encoding, but rather a layer-1 connection to the dce/dte device. If the router can 'talk' to the device on the other end of the cable, you should get an up/x condition, where x would depend on the csu/dsu condition of the line. I don't have a csu handy, otherwise I'd check that right now. I can do that tomorrow morning (10:30 pm est here), but you may have an answer prior to that... Hi Priscilla, I have actually had this scenario (multiple times), but due to the Telco's misconfiguration. Specifically we were expecting b8zs/esf. Unfortunately I can't confirm which was configured incorrectly, but I can confirm that going through all of the different combinations available at the router you will get all combinations on the serial interface (up/up, down/up and down/down). I can also confirm, you will not establish connectivity, regardless. I believe either b8zs/esf or sf/ami are the only valid combinations. At least that is all I've ever worked with. Hope this helps, -TV Priscilla Oppenheimer wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Group Study, While writing some questions for a practice test, I found myself questioning what I thought was the right answer. Here's the scenario: A Cisco router serial interface is correctly connected with a good V.35 cable to the data port on the DSU side of a CSU/DSU. The CSU/DSU has been misconfigured for the framing method (SF instead of ESF). The framing doesn't match what the provider is using. (The question refers to a CSU/DSU that is external to the router, not one that is built into the router.) Will the Cisco router serial interface be down/down or up/down? And, would the answer be any different if the question has to do with misconfiguring the encoding (AMI versus B8ZS)? If you have real-world experience with this, that would help. I have read the Cisco documentation and the troubleshooting charts, etc. Thanks Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47119t=47101 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]