RE: What is meant in the Cat5k by interface sc0 [7:48375]

2002-07-09 Thread [EMAIL PROTECTED]

sc0 refers to the inband interface of a switch...


-Original Message-
From: John Brandis [mailto:[EMAIL PROTECTED]] 
Sent: 09 July 2002 07:35 
To: [EMAIL PROTECTED]
Subject: What is meant in the Cat5k by interface sc0 [7:48375]


**

visit http://www.solution6.com
visit http://www.eccountancy.com - everything for accountants.

UK Customers - http://www.solution6.co.uk

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.
*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48378t=48375
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: What is meant in the Cat5k by interface sc0 [7:48375]

2002-07-09 Thread Carl Timm

SC0 is the management interface of the switch. It will participate on
whatever VLAN you assign to it. Make sure, however, you add a default route.
If you do not add the default route, no other devices, except the ones on
the same subnet, will be able to reach it, that is as long as you don't put
in static routes.

Carl Timm, CCIE# 7149


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48381t=48375
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Class C summarization question [7:48367]

2002-07-09 Thread Carl Timm

For a Cisco test the actuall answer would be 14. Unfortunately, for us, they
don't take subnet zero into consideration for tests. So, if you have that
question on the test answer 14, for the real-world it's 16. In other words,
the answer to the BSCN question is wrong.

Carl


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48379t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MAC address in router ARP table [7:48377]

2002-07-09 Thread Carl Timm

Are you practicing in the lab? If so, just reboot the router. If not, let me
know.

Carl


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48380t=48377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: What is meant in the Cat5k by interface sc0 [7:48375]

2002-07-09 Thread Deepak Achar

hi
ref this site. it might be helpful to u in knowing the sc0 interface.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_6_3/config/supcfg.htm#32032

regards
deepak n achar
wipro technologies
bangalore


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48383t=48375
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: What is meant in the Cat5k by interface sc0 [7:48375]

2002-07-09 Thread Larry Letterman

either system console 0 or Switch console 0 interface.
I am sure the experts here will be quick to slap me around
if thats not the correct answer...

Larry Letterman
Cisco Systems
[EMAIL PROTECTED] 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
John Brandis
Sent: Monday, July 08, 2002 10:35 PM
To: [EMAIL PROTECTED]
Subject: What is meant in the Cat5k by interface sc0 [7:48375]


**

visit http://www.solution6.com
visit http://www.eccountancy.com - everything for accountants.

UK Customers - http://www.solution6.co.uk

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.
*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48384t=48375
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Remote Access 640-605 [7:48310]

2002-07-09 Thread Carl Timm

It does.

Carl Timm, CCIE# 7149


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48386t=48310
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



AW: Mac Layer access list [7:48324]

2002-07-09 Thread Stuart Laubstein

Well I have never tried it but could one not just use an extended ACL 1100
to 1199? What is the 1100 to 1199 if not for the MAC? Or does this only work
on switches? Here is one link from Cisco

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_5_5/cmd_refr/
setsn_su.htm#xtocid168376

This is for a switch but I am also interested in the answer. I would not
mind being able to use a MAC access list on a cable modem we have to prevent
people other than required from dialing in. Please let me know if you find
the answer and I will keep looking.

thanks

stuart


-Urspr|ngliche Nachricht-
Von: Dennis Laganiere [mailto:[EMAIL PROTECTED]]
Gesendet am: Monday, July 08, 2002 8:04 PM
An: [EMAIL PROTECTED]
Betreff: Mac Layer access list [7:48324]

I looked through the CCO, the groupstudy archive and my stack of cisco press
books, but I can't find any information about setting up an ACL for MAC
addresses.  Has anybody done it before?

Here's what I'm trying to do: I've got a wireless access point that lets
just anybody join.  I want to put a router upstream to block all but a
limited number of pre-defined MAC addresses.  Any thoughts?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48387t=48324
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MAC address in router ARP table [7:48377]

2002-07-09 Thread LIM Chin Chye

Is rebooting the only solution? I am thinking of any other possible
method...  

-Original Message-
From: Carl Timm
To: [EMAIL PROTECTED]
Sent: 09/07/2002 2:13 PM
Subject: RE: MAC address in router ARP table [7:48377]

Are you practicing in the lab? If so, just reboot the router. If not,
let me
know.

Carl




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48388t=48377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Kris Keen

I say 8. 2 to the power of 4


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48389t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Certificationzone [7:48390]

2002-07-09 Thread richard dumoulin

Anyone knows what happens with them ? They no longer send their weekly
e-mails nor do they reply to e-mails sent to them. Also their forum is closed.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48390t=48390
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Bob Timmons

Firstly, 2 to the power of 4 is 16 (2x2x2x2).

Secondly, regarding Carl's post, would the answer be 14?  I'm not sure the
subnet-zero comes into play with CIDR.  I was under the impression it was
only relevant to subnetting as opposed to summarizing.  Does anyone know for
sure?

 I say 8. 2 to the power of 4




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48393t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MAC address in router ARP table [7:48377]

2002-07-09 Thread Bob Timmons

clear arp-cache

 Is rebooting the only solution? I am thinking of any other possible
 method...

 -Original Message-
 From: Carl Timm
 To: [EMAIL PROTECTED]
 Sent: 09/07/2002 2:13 PM
 Subject: RE: MAC address in router ARP table [7:48377]

 Are you practicing in the lab? If so, just reboot the router. If not,
 let me
 know.

 Carl




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48394t=48377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Multicasting Examples [7:48395]

2002-07-09 Thread Robert Massiache

Hi

I want to work on IP Multicast in my home lab...
Any idea on examples..to workout.

Thanks and Regards
Rob

_
Chat with friends online, try MSN Messenger: http://messenger.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48395t=48395
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Michael L. Williams

Bob Timmons  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Secondly, regarding Carl's post, would the answer be 14?  I'm not sure the
 subnet-zero comes into play with CIDR.  I was under the impression it was
 only relevant to subnetting as opposed to summarizing.  Does anyone know
for
 sure?

I agree.  A /20 can summarize 16 - /24 networks.  AFAIK this is separate
from zero-subnets and subnetting.

Mike W.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48396t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



interface traffic showing unreasonable statistics [7:48397]

2002-07-09 Thread uday

Hi all,
I am using a cisco router with a frac-E1 link terminated on it (256kbps). I
am
running some Ipsec tunnels
across this link. Sometimes i have found that i/p o/p rate shows more then
256kbps using the show interface ser command.

i have seen it upto 32 bps?

Plz can somebody explain this?
thanks /regards,

Uday




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48397t=48397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Dain Deutschman

One of the choices in the question was 16but 14 was not a choice. Could
it be that since 14 was not a choice that 8 was the closest thing since 16
is possibly wrong because of the 0 subnet? This seems a little off the wall
to me butsometimes those cisco questions are off the wall. Dain.

Bob Timmons  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Firstly, 2 to the power of 4 is 16 (2x2x2x2).

 Secondly, regarding Carl's post, would the answer be 14?  I'm not sure the
 subnet-zero comes into play with CIDR.  I was under the impression it was
 only relevant to subnetting as opposed to summarizing.  Does anyone know
for
 sure?

  I say 8. 2 to the power of 4




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48398t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MAC address in router ARP table [7:48377]

2002-07-09 Thread cebuano

Lim,
Two things regarding your post.
1. You can clear a single ARP CACHE entry using SNMP. Check this link...
http://www.cisco.com/warp/public/477/SNMP/clear_arp.shtml

2. Clearing the ARP-CACHE or REBOOTING the router will NOT allow you to 
duplicate a used STATICALLY assigned IP address. I don't know the rest
of
your network topology, so I'm assuming the IP you want to use for
another host is statically assigned to another host. Yes you'll have to
hunt this host down wherever it is and change its IP or release its
DHCP-assigned IP.

HTH,
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Bob Timmons
Sent: Tuesday, July 09, 2002 7:30 AM
To: [EMAIL PROTECTED]
Subject: Re: MAC address in router ARP table [7:48377]

clear arp-cache

 Is rebooting the only solution? I am thinking of any other possible
 method...

 -Original Message-
 From: Carl Timm
 To: [EMAIL PROTECTED]
 Sent: 09/07/2002 2:13 PM
 Subject: RE: MAC address in router ARP table [7:48377]

 Are you practicing in the lab? If so, just reboot the router. If not,
 let me
 know.

 Carl




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48399t=48377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MAC address in router ARP table [7:48377]

2002-07-09 Thread Michael Williams

Shot in the dark here. =)

How about clear ip nat trans?  Could you use that to clear the errant NAT
entry to free up that IP address?

Mike W.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48401t=48377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Class C summarization question [7:48367]

2002-07-09 Thread Tim O'Brien

Bob,

I would have to agree. With CIDR, in most cases you will get 16 usable
subnets and 2 unusable addresses (the network and the broadcast).

ex. 192.168.96.0 255.255.240.0

192.168.96.1 -- 192.168.111.254 all usable
192.168.96.0 network
192.168.111.255 broadcast

I could see the question possibly not wanting the zero subnet if you used
the following:

192.168.0.0 -- 192.168.15.255
where the 192.168.0.X network might be classified as unusable.

This would give you 15 usable subnets...

Tim
CCIE 9015


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Bob Timmons
Sent: Tuesday, July 09, 2002 7:28 AM
To: [EMAIL PROTECTED]
Subject: Re: Class C summarization question [7:48367]


Firstly, 2 to the power of 4 is 16 (2x2x2x2).

Secondly, regarding Carl's post, would the answer be 14?  I'm not sure the
subnet-zero comes into play with CIDR.  I was under the impression it was
only relevant to subnetting as opposed to summarizing.  Does anyone know for
sure?

 I say 8. 2 to the power of 4




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48403t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Bob Timmons

If the choices are either 8 or 16, I'd definitely go with 16.

192.168.0.0/20 would be (for example):

192.168.0.1 to 192.168.15.254

Which is 16 total subnets.

 One of the choices in the question was 16but 14 was not a choice.
Could
 it be that since 14 was not a choice that 8 was the closest thing since 16
 is possibly wrong because of the 0 subnet? This seems a little off the
wall
 to me butsometimes those cisco questions are off the wall. Dain.

 Bob Timmons  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Firstly, 2 to the power of 4 is 16 (2x2x2x2).
 
  Secondly, regarding Carl's post, would the answer be 14?  I'm not sure
the
  subnet-zero comes into play with CIDR.  I was under the impression it
was
  only relevant to subnetting as opposed to summarizing.  Does anyone know
 for
  sure?
 
   I say 8. 2 to the power of 4




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48404t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Carl Timm

I was thinking of subnetting and not summarization, it was a little late.
16, not 14, is correct.

Carl


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48405t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Michael Williams

Dain Deutschman wrote:
 One of the choices in the question was 16but 14 was not a
 choice. Could
 it be that since 14 was not a choice that 8 was the closest
 thing since 16
 is possibly wrong because of the 0 subnet? This seems a little
 off the wall
 to me butsometimes those cisco questions are off the wall.
 Dain.

But couldn't you use that same logic and say 16 was the closest since 8 is
wrong and 14 wasn't an answer?  I still say 16 is the answer.

Mike W.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48406t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: HP Procurve, Cisco Routers [7:48408]

2002-07-09 Thread Richard Tufaro

Hey all. Know that this is off topic but I wanted to throw it out there to
see if anyone has had any feedback. Has anyone experienced any issues with
HP ProCurve 4000M switches, running into a Cisco router (1720..etc.)? Any
caveats? Im having a problem with one of our remote facilities and
performance issues on the LAN. It appears to be related to the switches. But
they are coming back through a 256K frame back to HQ. The thing is, from HQ
to them fine, from them to HQ slow. REALLY SLOW. The frame is NOT utilized
at all. Danka.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48408t=48408
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: HP Procurve, Cisco Routers [7:48408]

2002-07-09 Thread Daniel Cotts

a) At HQ does your Frame connection aggregate PVCs from several spokes such
that the total CIR of all the spokes greatly exceeds the capacity of the
port?
b) Have you checked the interface statictics for the router's connection to
the switch?
c) What about test transfers from PC to PC at the remote site OK/Not OK ?

 -Original Message-
 From: Richard Tufaro [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 09, 2002 9:39 AM
 To: [EMAIL PROTECTED]
 Subject: OT: HP Procurve, Cisco Routers [7:48408]
 
 
 Hey all. Know that this is off topic but I wanted to throw it 
 out there to
 see if anyone has had any feedback. Has anyone experienced 
 any issues with
 HP ProCurve 4000M switches, running into a Cisco router 
 (1720..etc.)? Any
 caveats? Im having a problem with one of our remote facilities and
 performance issues on the LAN. It appears to be related to 
 the switches. But
 they are coming back through a 256K frame back to HQ. The 
 thing is, from HQ
 to them fine, from them to HQ slow. REALLY SLOW. The frame is 
 NOT utilized
 at all. Danka.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48410t=48408
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: HP Procurve, Cisco Routers [7:48408]

2002-07-09 Thread sam sneed

Did you check duplex settings and interface errors on the switch? Run mrtg
against it and see the bandwidth coming through the ports. I had the same HP
switches at my last jobs without any real performance issues.

Richard Tufaro  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hey all. Know that this is off topic but I wanted to throw it out there to
 see if anyone has had any feedback. Has anyone experienced any issues with
 HP ProCurve 4000M switches, running into a Cisco router (1720..etc.)? Any
 caveats? Im having a problem with one of our remote facilities and
 performance issues on the LAN. It appears to be related to the switches.
But
 they are coming back through a 256K frame back to HQ. The thing is, from
HQ
 to them fine, from them to HQ slow. REALLY SLOW. The frame is NOT utilized
 at all. Danka.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48411t=48408
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RE: HP Procurve, Cisco Routers [7:48408]

2002-07-09 Thread Richard Tufaro

a) Yes. have 6 256K (128K) Frac's coming into a Subrate DS3 (6mb) with a 3mb
Cir. Traffic on the DS3 is not pegged, neither is traffic on that particular
link (using mrtg)
b) Yes. Saw about 13 CRC errors on the FastEthernet port of the remote
router. Cleared countersthey are not growing (fast).
c) have not tried test tranfers..have user reports that 5250 traffic is
painting the screen.

 Daniel Cotts  07/09 11:27 AM 
a) At HQ does your Frame connection aggregate PVCs from several spokes such
that the total CIR of all the spokes greatly exceeds the capacity of the
port?
b) Have you checked the interface statictics for the router's connection to
the switch?
c) What about test transfers from PC to PC at the remote site OK/Not OK ?

 -Original Message-
 From: Richard Tufaro [mailto:[EMAIL PROTECTED]] 
 Sent: Tuesday, July 09, 2002 9:39 AM
 To: [EMAIL PROTECTED] 
 Subject: OT: HP Procurve, Cisco Routers [7:48408]
 
 
 Hey all. Know that this is off topic but I wanted to throw it 
 out there to
 see if anyone has had any feedback. Has anyone experienced 
 any issues with
 HP ProCurve 4000M switches, running into a Cisco router 
 (1720..etc.)? Any
 caveats? Im having a problem with one of our remote facilities and
 performance issues on the LAN. It appears to be related to 
 the switches. But
 they are coming back through a 256K frame back to HQ. The 
 thing is, from HQ
 to them fine, from them to HQ slow. REALLY SLOW. The frame is 
 NOT utilized
 at all. Danka.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48412t=48408
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Chuck

ah come on, guys, now you're all trying to outsmart yourselves.

nothing in the RFC's regarding CIDR / summarization mentions a subnet zero
why should it? that would defeat the purpose of CIDR/summarization.


Dain Deutschman  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 One of the choices in the question was 16but 14 was not a choice.
Could
 it be that since 14 was not a choice that 8 was the closest thing since 16
 is possibly wrong because of the 0 subnet? This seems a little off the
wall
 to me butsometimes those cisco questions are off the wall. Dain.

 Bob Timmons  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Firstly, 2 to the power of 4 is 16 (2x2x2x2).
 
  Secondly, regarding Carl's post, would the answer be 14?  I'm not sure
the
  subnet-zero comes into play with CIDR.  I was under the impression it
was
  only relevant to subnetting as opposed to summarizing.  Does anyone know
 for
  sure?
 
   I say 8. 2 to the power of 4




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48413t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Class C summarization question [7:48367]

2002-07-09 Thread Brad Nixon

Dain,

Just out of curiosity, who was the author of the test question? When I was
studying for my CCNP I ran into several poorly written questions and others,
like this one, that were just plain wrong.

Also, are the people that think that 2 to the power of 4 equals 8 the same
people that write to this list asking what they should study since they
failed the CCNA on the first and second attempts?

--
Brad A. Nixon
CCNP, CCDA, MCP, CCSA
Nothing is fool proof to a sufficiently talented fool.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48414t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: HP Procurve, Cisco Routers [7:48408]

2002-07-09 Thread Brad Nixon

I have never used HP switches, but I have run into problems with other
vendors and Cisco router Ethernet ports. You may have to hard code the speed
and duplex settings on both boxes. Auto-negotiate does not always work in a
cross-vendor environment.

--
Brad A. Nixon
CCNP, CCDA, MCP, CCSA
Nothing is fool proof to a sufficiently talented fool.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48415t=48408
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: interface traffic showing unreasonable statistics [7:48397]

2002-07-09 Thread Priscilla Oppenheimer

uday wrote:
 
 Hi all,
 I am using a cisco router with a frac-E1 link terminated on it
 (256kbps). I am
 running some Ipsec tunnels
 across this link. Sometimes i have found that i/p o/p rate
 shows more then
 256kbps using the show interface ser command.

Do you mean that the combined input/output rate exceeds 256 kbps? That could
be normal. It's full duplex. The capacity is available in both directions on
point-to-point WAN circuits.

Priscilla

 
 i have seen it upto 32 bps?
 
 Plz can somebody explain this?
 thanks /regards,
 
 Uday
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48416t=48397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: h225 IE data [7:48352]

2002-07-09 Thread Chris Charlebois

Well, we haven't talked to Cisco about this.  Somehow, and we aren't sure
how, someone got the password to a Unity mailbox that was never assigned to
a person (for administrative use only) and should have been locked.  Once
they had this, they could simply dial into any voice mailbox, opt out to the
main menu, login as the comprimised mailbox, and then transfer themselves
out to whereever they wanted to call.

We have stopped this by A)locking and changing the entension of the
comprimised mailbox, B)forcing password changes on all mailboxes, C)
implementing the class of service feature so that Unity will not allow
tranfers to international numbers and D)creating and assigned a calling
search space to the VM route points so they cannot call out internationally
(redundant, I know, but the Unity system was comprimised).  We also changed
all admin passwords.

The troubling thing is we don't know how the password was leaked in the
first place.  There is no sign of a dictionary attack in Unity.  It is
possible that this was internal, but we don't know.  We are still looking
and if we find a smoking gun, I'll let you know.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48418t=48352
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: how good the LAB Center in Brussels [7:48113]

2002-07-09 Thread Khan Faisal

Yes, it is true that equipment is all the same however,
I remember one collegue of mine who wrote the exam in Brazil for hist first
attempt but failed.  It was slow, very slow Telnet connection as well as
Room was very hot.

so I am wondering if any one who went there recently, is the situation still
the same or not.

Waitin time for North America is too long up to 8 months.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48419t=48113
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Placement of IDS [7:48420]

2002-07-09 Thread sam sneed

I was contemplating on where I should put my IDS. I have a simple network
with only one Internet connection to my ISP. It is firewalled with an
internal network that does not allow any incoming connections via firewall
and a DMZ which has web, DNS, and email server. My question is should I put
the IDS behind or in front of my firewall? What are most of you doing?
I realize if it is behinf the FW I will not be able to detect a lot of
possible security breaches, such as users trying to rsh or telnet into my
servers since this is blocked by FW. Should I care that people are trying to
get in or attack if the firewall is already blocking it?
The IDS could easily handle the traffic since its only at the 1MB-2MB range.

sam sneed




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48420t=48420
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cut-through vs Store Forward [7:48316]

2002-07-09 Thread Alejandro Acosta Alamo

Hello again,
  Priscilla, you have said that an ethernet frame must be at least 64 bytes,
right?. I have just placed an sniffer on my LAN and I found over 3000 out of
15.000 packets. Does this mean that 20% of those packets are illegal?

Thanks

Alejandro Acosta

- Original Message -
From: Priscilla Oppenheimer 
To: 
Sent: Monday, July 08, 2002 1:08 PM
Subject: RE: Cut-through vs Store  Forward [7:48316]


 Alejandro Acosta Alamo wrote:
 
  Hello,
I understand the differences between Cut-through and Store 
  Forward. My
  question is: How do you decide with method to use?, in whch
  situation have
  you change the switching method?.
 
  Thanks
 
  Alejandro Acosta
 
 
 A lot of switches support only one method, so you don't have a choice. If
 you do have a choice, the decision is based on the number of errors on
your
 network. Cut-through doesn't do any error checking and in fact forwards
 frames that have a bad CRC or are too short. Ethernet says that frames
must
 be at least 64 bytes. Anything less is considered a fragment and is
illegal.
 Cut-through forwards fragments that have an entire destination address
that
 can be looked up to get a port number.

 If your switch connects many shared networks, then CRC errors and
fragments
 due to collisions are normal. But why waste bandwidth forwarding these to
 other ports on the LAN? In this case, you might want to go with
 store-and-forward which does not forward errored frames or fragments.

 If your switch connects single devices all using full-duplex, then it's
 unlikely that you are experiencing many CRC or fragments. So, cut-through
 makes the most sense.


 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48421t=48316
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



DQOS test [7:48363]

2002-07-09 Thread Johnzaggat

Has any one taken DQOS Exam #9E0-601. Any suggestions for material used.
Have used any of the Boson tests to gauge your prepardness. I'll appreciate
any pointers.
Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48363t=48363
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: is quot;ppp auth chap callinquot; configured [7:48319]

2002-07-09 Thread Carl Timm

What's your question?

Carl Timm, CCIE# 7149


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48385t=48319
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Idle mode only for X.25 PVC or SVC? [7:48427]

2002-07-09 Thread Lh Ma

as we know, PLP operates in 5 modes: call setup, data transfer, idle, call 
clearing, and restart. also we know SVC will be torn down where DTEs have no 
more data to transfer. so I think for SVC, there is no idle mode. but on 
cisco webpage 
http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/x25.htm, it's said 
idle mode is only for PVCs. Could anyone clear it out?
Thank you in advance.



_
Chat with friends online, try MSN Messenger: http://messenger.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48427t=48427
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Certificationzone [7:48390]

2002-07-09 Thread Tom Lisa

I'm still getting them.  Got one today.  Are you a paid subscriber? 
Perhaps they stopped sending to non-subscribers.

HTH,
Prof. Tom Lisa, CCAI
Community College of Southern Nevada
Cisco ATC/Regional Networking Academy

richard dumoulin wrote:

  Anyone knows what happens with them ? They no longer send their
  weekly
  e-mails nor do they reply to e-mails sent to them. Also their forum
  is closed.
  [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48423t=48390
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Mac Layer access list - solved [7:48433]

2002-07-09 Thread Dennis Laganiere

Thank you all for your helpful suggestions.  Below is the configuration that
did what I wanted:  to block all but a select list of MAC addresses from
accessing my network through a wireless access point.  The configuration
below allows me to add MAC addresses as my users buy NICs.  Keep in mind
this is a temporary solution until I buy a Cisco Aironet 1200, which people
have told me has some of this functionality built in.

Thanks...

--- Dennis

R2#sh run
Building configuration...
Current configuration : 830 bytes
!
version 12.1
hostname R2
no logging console
enable password cisco
!
ip subnet-zero
no ip domain-lookup
!
bridge irb
!
interface Ethernet0
 no ip address
 bridge-group 1
 bridge-group 1 input-address-list 705
!
interface Ethernet1
 no ip address
 bridge-group 1
!
ip classless
ip http server
!
access-list 705 permit ..abaa   ..
access-list 705 permit 0050..7a4c   ..
!
bridge 1 protocol ieee
alias exec co config t
alias exec i show ip route
!



-Original Message-
From: Dennis Laganiere [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 08, 2002 11:05 AM
To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
Subject: Mac Layer access list

I looked through the CCO, the groupstudy archive and my stack of cisco press
books, but I can't find any information about setting up an ACL for MAC
addresses.  Has anybody done it before?

Here's what I'm trying to do: I've got a wireless access point that lets
just anybody join.  I want to put a router upstream to block all but a
limited number of pre-defined MAC addresses.  Any thoughts?
_
Commercial lab list: http://www.groupstudy.com/list/commercial.html
Please discuss commercial lab solutions on this list.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48433t=48433
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MC3810 voice config [7:48261]

2002-07-09 Thread Kris Keen

So nowone knows?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48439t=48261
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



vpngroup default-domain [7:48441]

2002-07-09 Thread [EMAIL PROTECTED]

is there a way to set a vpngroup to multiple domains rather than the default
one?

I have a W2K vpn client setup to one domain, but there are a couple servers
that are members of another domain that I'd like to surf  can I add the
second domain, or will I have to edit the host file for each server?

thanx,
mike jablonski



~~~
Michael Jablonski
ABN AMRO Asset Management Holdings, Inc.
161 North Clark St.
9th Flr
Chicago, IL  60601-2468
PH: 312.884.2996 
FAX: 312.278.5550
~~~




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48441t=48441
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: confusion on ppp auth chap callin/ppp auth pap [7:48325]

2002-07-09 Thread richard dumoulin

With the callin option, only the one who is calling needs to authenticate
himsel.
Without it, you have to configure chap usernames and password at both ends.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48392t=48325
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: confusion on ppp auth chap callin/ppp auth pap [7:48325]

2002-07-09 Thread Carl Timm

My brain must have been fried last night. I just noticed that I answered the
question about callback, not callin authentication. Sorry if this caused any
confusion. I'm giving up answering questions at 2:30 in the morning.

The actuall answer to the callin question is as follows:

Callin is configured on the receiving device. Typically you will find this
used in ISDN backup scenarios. There's a hub device that remote devices
connect into for ISDN backup. Callin would be used on the hub device to
authenticate icoming calls from the remote devices. By using callin,
authentication only occurs on the hub device and not on the remote devices.
I hope this helps.

Carl


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48440t=48325
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: confusion on ppp auth chap callin/ppp auth pap [7:48325]

2002-07-09 Thread richard dumoulin

When you are using the callin option, only the one who calls needs to
authenticate himsefl.
You know, when you do not conigure this option, you have to configure chap
username and password for both ends.

Regards.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48391t=48325
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: confusion on ppp auth chap callin/ppp auth pap [7:48325]

2002-07-09 Thread Carl Timm

When using PPP callin, it occurs on the receiving device. Conceptually think
of it this way, the calling device places a call, the receiving device
receives the call, the calling device calls the initiating device back. Hope
this helps.

Carl Timm, CCIE# 7149


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48382t=48325
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Placement of IDS [7:48420]

2002-07-09 Thread Ken Diliberto

My preference is to keep IDS on the inside of the firewall.  The stuff
blocked by the firewall will be in the firewall logs (well, maybe).  IDS
can be very annoying, so much that you ignore it.

I'd say that's my $0.02, but after taxes, it's not even worth that. 
:-)

 sam sneed  07/09/02 11:20AM 
I was contemplating on where I should put my IDS. I have a simple
network
with only one Internet connection to my ISP. It is firewalled with an
internal network that does not allow any incoming connections via
firewall
and a DMZ which has web, DNS, and email server. My question is should I
put
the IDS behind or in front of my firewall? What are most of you doing?
I realize if it is behinf the FW I will not be able to detect a lot of
possible security breaches, such as users trying to rsh or telnet into
my
servers since this is blocked by FW. Should I care that people are
trying to
get in or attack if the firewall is already blocking it?
The IDS could easily handle the traffic since its only at the 1MB-2MB
range.

sam sneed




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48442t=48420
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Multicasting Examples [7:48395]

2002-07-09 Thread Leiva, Angel E

Rob,

If you have CCO login access, you can use this URL to get some sample
scenarios.
http://www.cisco.com/warp/public/105/48.html

Let me know if can't access it.

Hth,

Angel

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Robert Massiache
Sent: Tuesday, July 09, 2002 7:14 AM
To: [EMAIL PROTECTED]
Subject: Multicasting Examples [7:48395]


Hi

I want to work on IP Multicast in my home lab...
Any idea on examples..to workout.

Thanks and Regards
Rob

_
Chat with friends online, try MSN Messenger: http://messenger.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48422t=48395
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Certificationzone [7:48390] (resend 2) [7:48443]

2002-07-09 Thread Howard C. Berkowitz

At 11:12 AM + 7/9/02, richard dumoulin wrote:
Anyone knows what happens with them ? They no longer send their weekly
e-mails nor do they reply to e-mails sent to them. Also their forum is
closed.


I'm puzzled. First, we are still actively here. Just for quality 
control, I am designated as a regular customer on the weekly list, 
and I received the weekly update today. Last night, I received some 
customer questions, and there are a bunch of tutorials in process.

I'll copy this to the tech support people. Since the Groupstudy 
message doesn't show your direct email, please send me a direct 
address and I'll try to find out what the problem is. Did you ever 
get any email bounces? There has been an intermittent mail server 
bug, that only seems to happen on weekends, that bounces a large 
message, unless you first send a short message to feed That Which 
Eats Email and then resend.
-- 
What Problem are you trying to solve?
***send Cisco questions to the list, so all can benefit -- not 
directly to me***

Howard C. Berkowitz  [EMAIL PROTECTED]
Chief Technology Officer, GettLab/Gett Communications http://www.gettlabs.com
Technical Director, CertificationZone.com http://www.certificationzone.com
retired Certified Cisco Systems Instructor (CID) #93005




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48443t=48443
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Passive FTP [7:48357]

2002-07-09 Thread Priscilla Oppenheimer

Simer Mayo wrote:
 
 The users are on the inside interface behind the PIX firewall
 and are trying
 to make an pftp connection to the outside world. They are being
 authenticated
 from the outside server but then the section hangs trying to do
 a list
 command. The fixup protocol port 21 is enable on PIX and there
 is no explicit
 outbound restriction from the inside interface. The outside
 server is using
 port range 4-40020 for passive FTP. I tried enabling this
 range on the
 fixup protocol too but it didn't work.
 
 Please advice
 
 Thanks much
 
 SM
 
 
FTP is notorious for causing problems on networks with firewalls. I have
actually run into cases where it simply would not work due to unconfigurable
applications and a combination of network and personal firewalls.

FTP is also problematic on networks with NAT because the IP address appears
in the PORT command (when active is used) and in the server's reply to the
client's PASV command (when passive is used).

So, I wrote a white paper on FTP (finally, I've been meaning to do this for
a while.) It is available from this page:

http://www.troubleshootingnetworks.com/resources.html

Hope it helps! 

Priscilla

P.S. By the way, as the paper mentions, if your use for FTP is limited to
updating Web pages, there is an alternative: a new protocol called Web-based
Distributed Authoring and Versioning (WebDAV). WebDAV is a set of extensions
to the Hypertext Transfer Protocol (HTTP) to allow users to collaboratively
edit and manage files on remote Web servers. See RFC 2518 for more
information.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48444t=48357
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: interface traffic showing unreasonable statistics [7:48397]

2002-07-09 Thread [EMAIL PROTECTED]

Priscilla's answer is very true, but I have seen interfaces reporting 
one-way traffic greater than they should be able to transmit - for 
example, an ISDN B-channel reporting an output rate of 66 kbps.  Not a 
pretty sight.

While I didn't check it in detail, my assumption was that it was reporting 
the load the router was attempting to shove over the link - I don't think 
all that traffic was making it to the other end :-(

JMcL
- Forwarded by Jenny Mcleod/NSO/CSDA on 10/07/2002 08:38 am -


Priscilla Oppenheimer 
Sent by: [EMAIL PROTECTED]
10/07/2002 02:31 am
Please respond to Priscilla Oppenheimer

 
To: [EMAIL PROTECTED]
cc: 
Subject:RE: interface traffic showing unreasonable
statistics [7:48397]


uday wrote:
 
 Hi all,
 I am using a cisco router with a frac-E1 link terminated on it
 (256kbps). I am
 running some Ipsec tunnels
 across this link. Sometimes i have found that i/p o/p rate
 shows more then
 256kbps using the show interface ser command.

Do you mean that the combined input/output rate exceeds 256 kbps? That 
could
be normal. It's full duplex. The capacity is available in both directions 
on
point-to-point WAN circuits.

Priscilla

 
 i have seen it upto 32 bps?
 
 Plz can somebody explain this?
 thanks /regards,
 
 Uday
Important:  This e-mail is intended for the use of the addressee and may
contain information that is confidential, commercially valuable or subject
to legal or parliamentary privilege.  If you are not the intended recipient
you are notified that any review, re-transmission, disclosure, use or
dissemination of this communication is strictly prohibited by several
Commonwealth Acts of Parliament.  If you have received this communication in
error please notify the sender immediately and delete all copies of this
transmission together with any attachments.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48445t=48397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: HP Procurve, Cisco Routers [7:48408]

2002-07-09 Thread John Neiberger

I'd check for a full-duplex setting on switchports connected to
half-duplex devices.  This would allow better performance going to the
users than coming from the users.  However, it still wouldn't be great.

John

 Richard Tufaro  7/9/02 8:38:57 AM 
Hey all. Know that this is off topic but I wanted to throw it out there
to
see if anyone has had any feedback. Has anyone experienced any issues
with
HP ProCurve 4000M switches, running into a Cisco router (1720..etc.)?
Any
caveats? Im having a problem with one of our remote facilities and
performance issues on the LAN. It appears to be related to the
switches. But
they are coming back through a 256K frame back to HQ. The thing is,
from HQ
to them fine, from them to HQ slow. REALLY SLOW. The frame is NOT
utilized
at all. Danka.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48409t=48408
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Certificationzone [7:48390]

2002-07-09 Thread Howard C. Berkowitz

At 11:12 AM + 7/9/02, richard dumoulin wrote:
Anyone knows what happens with them ? They no longer send their weekly
e-mails nor do they reply to e-mails sent to them. Also their forum is
closed.


I'm puzzled. First, we are still actively here. Just for quality 
control, I am on the subscriber list, and I've been receiving the 
weekly updates on schedule. Last night, I received some subscriber 
questions, and there are a bunch of tutorials in process.

I'll copy this to the tech support people. Since the Groupstudy 
message doesn't show your direct email, please send me a direct 
address and I'll try to find out what the problem is. Did you ever 
get any email bounces? There has been an intermittent mail server 
bug, that only seems to happen on weekends, that bounces a large 
message, unless you first send a short message to feed That Which 
Eats Email and then resend.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48400t=48390
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Placement of IDS [7:48420]

2002-07-09 Thread Jim Brown

Most security breaches are by employees.

With that out of the way, I would place the IDS engine in front of the
firewall to catch attacks against devices in the DMZ. In a small trusting
environment, your employees are probably not your biggest threat.


-Original Message-
From: sam sneed [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 09, 2002 12:20 PM
To: [EMAIL PROTECTED]
Subject: Placement of IDS [7:48420]


I was contemplating on where I should put my IDS. I have a simple network
with only one Internet connection to my ISP. It is firewalled with an
internal network that does not allow any incoming connections via firewall
and a DMZ which has web, DNS, and email server. My question is should I put
the IDS behind or in front of my firewall? What are most of you doing?
I realize if it is behinf the FW I will not be able to detect a lot of
possible security breaches, such as users trying to rsh or telnet into my
servers since this is blocked by FW. Should I care that people are trying to
get in or attack if the firewall is already blocking it?
The IDS could easily handle the traffic since its only at the 1MB-2MB range.

sam sneed




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48432t=48420
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: interface traffic showing unreasonable statist [7:48397]

2002-07-09 Thread Priscilla Oppenheimer

[EMAIL PROTECTED] wrote:
 
 Priscilla's answer is very true, but I have seen interfaces
 reporting
 one-way traffic greater than they should be able to transmit -
 for
 example, an ISDN B-channel reporting an output rate of 66
 kbps.  Not a
 pretty sight.
 
 While I didn't check it in detail, my assumption was that it
 was reporting
 the load the router was attempting to shove over the link - I
 don't think
 all that traffic was making it to the other end :-(

Were there also output drops? It seems like there would have to be. 

Another thought is that it's just an average. There could be rounding
errors. Yeah, that's it, rounding errors. ;-)

Also, I've always wondered about CIRs and fractional interfaces. The router
doesn't know that it's not supposed to send above its interface type,
without some advanced configuration, does it?

Priscilla

 
 JMcL
 - Forwarded by Jenny Mcleod/NSO/CSDA on 10/07/2002 08:38 am
 -
 
 
 Priscilla Oppenheimer 
 Sent by: [EMAIL PROTECTED]
 10/07/2002 02:31 am
 Please respond to Priscilla Oppenheimer
 
  
 To: [EMAIL PROTECTED]
 cc: 
 Subject:RE: interface traffic showing
 unreasonable statistics [7:48397]
 
 
 uday wrote:
  
  Hi all,
  I am using a cisco router with a frac-E1 link terminated on it
  (256kbps). I am
  running some Ipsec tunnels
  across this link. Sometimes i have found that i/p o/p rate
  shows more then
  256kbps using the show interface ser command.
 
 Do you mean that the combined input/output rate exceeds 256
 kbps? That
 could
 be normal. It's full duplex. The capacity is available in both
 directions
 on
 point-to-point WAN circuits.
 
 Priscilla
 
  
  i have seen it upto 32 bps?
  
  Plz can somebody explain this?
  thanks /regards,
  
  Uday
 Important:  This e-mail is intended for the use of the
 addressee and may contain information that is confidential,
 commercially valuable or subject to legal or parliamentary
 privilege.  If you are not the intended recipient you are
 notified that any review, re-transmission, disclosure, use or
 dissemination of this communication is strictly prohibited by
 several Commonwealth Acts of Parliament.  If you have received
 this communication in error please notify the sender
 immediately and delete all copies of this transmission together
 with any attachments.
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48447t=48397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: how good the LAB Center in Brussels [7:48113]

2002-07-09 Thread YASSER ALY

I heard from a friend of mine who tried to make his lab in South Africa
that it was a bad decision to make it there as - according to his words -
the Lab equipment itself is not located in South Africa and that people
who are taking exams there are using a leased or ISDN connection to
Brussles where the equipment is located, imagine this if for any reason
you needed to run a debug. If this is true - and would like to hear from
you guys specially people who passed there labs in South Africa whether
this is true or not  - I believe that Brasil would be the same like South
Africa and to get good environment for the exam it would be either
Brussles or USA.

I guess it would be best to contact Cisco themselves and verify this
information for a better decision.



Yes, it is true that equipment is all the same however, I remember one
collegue of mine who wrote the exam in Brazil for hist first attempt but
failed. It was slow, very slow Telnet connection as well as Room was
very hot.  so I am wondering if any one who went there recently, is the
situation still the same or not.  Waitin time for North America is too
misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Send and receive Hotmail on your mobile device: Click Here




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48428t=48113
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Mac Layer access list - solved [7:48433]

2002-07-09 Thread Priscilla Oppenheimer

Thanks for sending the problem resolution. I really like it when people
follow up with the answer! It enhances the learning experience.

Priscilla

Dennis Laganiere wrote:
 
 Thank you all for your helpful suggestions.  Below is the
 configuration that
 did what I wanted:  to block all but a select list of MAC
 addresses from
 accessing my network through a wireless access point.  The
 configuration
 below allows me to add MAC addresses as my users buy NICs. 
 Keep in mind
 this is a temporary solution until I buy a Cisco Aironet 1200,
 which people
 have told me has some of this functionality built in.
 
 Thanks...
 
 --- Dennis
 
 R2#sh run
 Building configuration...
 Current configuration : 830 bytes
 !
 version 12.1
 hostname R2
 no logging console
 enable password cisco
 !
 ip subnet-zero
 no ip domain-lookup
 !
 bridge irb
 !
 interface Ethernet0
  no ip address
  bridge-group 1
  bridge-group 1 input-address-list 705
 !
 interface Ethernet1
  no ip address
  bridge-group 1
 !
 ip classless
 ip http server
 !
 access-list 705 permit ..abaa   ..
 access-list 705 permit 0050..7a4c   ..
 !
 bridge 1 protocol ieee
 alias exec co config t
 alias exec i show ip route
 !
 
 
 
 -Original Message-
 From: Dennis Laganiere [mailto:[EMAIL PROTECTED]]
 Sent: Monday, July 08, 2002 11:05 AM
 To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
 Subject: Mac Layer access list
 
 I looked through the CCO, the groupstudy archive and my stack
 of cisco press
 books, but I can't find any information about setting up an ACL
 for MAC
 addresses.  Has anybody done it before?
 
 Here's what I'm trying to do: I've got a wireless access point
 that lets
 just anybody join.  I want to put a router upstream to block
 all but a
 limited number of pre-defined MAC addresses.  Any thoughts?
 _
 Commercial lab list:
 http://www.groupstudy.com/list/commercial.html
 Please discuss commercial lab solutions on this list.
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48449t=48433
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Begging for help at Telus [7:48429]

2002-07-09 Thread Leigh Anne Chisholm

For the past 5 days, I've been on the phone for at least two and a half hours
trying to get something relatively simple done at Telus.  I've spoken with
several helpdesk techs, three senior helpdesk techs, have been told numerous
times that this is being escalated to the appropriate department for
resolution, but somehow I keep getting the senior techs phoning me back
instead.  I'm hoping someone here would be able to contact the appropriate
people on my behalf to get this accomplished.

What I want is simple.  Telus is sending out a DHCP offer message using its
domain name (ab.hsia.telus.net).  I'm using a domain name - I have domain
name
privileges as part of my internet account, and want it sent out instead. 
It's
creating problems because my machine believes it's name is something other
than what it should be.

I could edit the dhcp script that runs on my Red Hat box, but I'm not a
programmer and I'd probably create more problems than what it is I'm trying
to
solve--and it's always been my philosophy that things should be fixed
properly
rather than bandaged and forgotten about--which inevitably always seems to
come back and bite you in the butt once you've forgotten about the fix you
had
to implement.  Is Telus' DHCP server so complex that this can't be done?

Is there anyone out there able to help?

Thanks in advance...


   -- Leigh Anne

PS.  Please keep all replies to this message off the group - and reply
directly to myself only.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48429t=48429
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Next Step [7:48450]

2002-07-09 Thread Kohli, Jaspreet

Hi Everybody 

I have just cleared my CCNP . With not too much hands on experience and
equipment to work with . I am wondering what to peruse next . The ultimate
goal is towards CCIE however I believe that It would be fair to attempt
after a couple of years experience to be a true expert . Meanwhile I am
wondering which certification to peruse next which helps me move towards my
goal as well as makes me broad base in knowledge . Thoughts in my head have
been -

1. Security specialisation

2. Voice specialisation 

3. CCDA

Any other ideas would be greatly appreciated .

Thanks as always 


Jaspreet
 _
 
Consultant

Andrew NZ Inc
Box 50 691, Porirua
Wellington 6230, New Zealand
Phone   +64 4 238 0723
Fax +64 4 238 0701
e-mail  [EMAIL PROTECTED]


WARNING:  The contents of this e-mail and any attached files may contain
information that is legally privileged and/or confidential to the named
recipient.  This information is not to be used by any other person and/or
organisation.  The views expressed in this document do not necessarily
reflect those of Andrew NZ Inc   If you have received this e-mail and any
attached files in error please notify the sender by reply e-mail and destroy
your copy of this message.  Thank you.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48450t=48450
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: interface traffic showing unreasonable statistics [7:48397]

2002-07-09 Thread YASSER ALY

If it is the summ of the average input  the average output this will be
ok as already mentioned here that the link is full duplex, so expect to
get max 256 in  256 out at the same time if you have such traffic.

 However, if you just mean that the 32 was the traffic of either the
input or the output only then there is something wrong here. If this is
the case then most probable that your ISP is letting you burst over the
contracted 256K - lucky you :) - either intentionally or by mistake.

If the line speed is higher than the 256K and again the provider is not
rate-limiting the traffic from his side, then you will be able to go as
far as the line speed can support.

Give us some feedback on the line speed, the type of the circuit (
Frame-Relay, leased-line),

 whether this is the only circuit terminated on that interface or there
are many others.

 

  Hi all,

  I am using a cisco router with a frac-E1 link terminated on it  
(256kbps). I am   running some Ipsec tunnels   across this link.
Sometimes i have found that i/p o/p rate   shows more then   256kbps
using the show interface ser command.  Do you mean that the combined
input/output rate exceeds 256 kbps? That could be normal. It's full
duplex. The capacity is available in both directions on point-to-point
WAN circuits.  Priscilla  i have seen it upto 32 bps?  
  Plz can somebody explain this?   thanks /regards, Uday  
misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Chat with friends online, try MSN Messenger: Click Here




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48425t=48397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Certificationzone [7:48390]

2002-07-09 Thread Mike Cinquanti

CertificationZone.com is alive and well Richard! We are currently 
working on a new third version of the ZONE's website which is why we 
have not yet reactivated the product support forum section of our 
site. But our site continues to expand in content each and every 
month. Our subscribers recently received access to the fiftieth ZONE 
Study Guide in our on-line collection and on August 1, we're adding 
an absolutely excellent WAN Troubleshooting Study Guide written by 
one of my networking heroes, Priscilla Oppenheimer.

We continue to distribute our highly popular ZONE Challenge Question 
mailings, every week. We've added to them a networking term of the 
week. We've got a bunch of new lab scenarios we're about to add to 
our most popular Study Guides. We're introducing a new RS Lab Exam 
Workbook August 15th and we're expecting to announce the date of the 
ZONE's first Distance Learning Bootcamp in the near future.

I'm not sure why you stopped receiving our weekly Challenge Question 
e-mailings but please send me your e-mail address so I can make sure 
we find out why. As for everyone else at Group Study, please be 
assured that the ZONE is very alive and very well and most grateful 
for the support we receive from this truly outstanding forum. If any 
of you have also unexpectedly stopped receiving the ZONE's weekly 
Challenge Question e-mailings, send us an e-mail or give us a call.

Anyone knows what happens with them ? They no longer send their weekly
e-mails nor do they reply to e-mails sent to them. Also their forum is
closed.
-- 
--
Mike Cinquanti
President
Genium Publishing Corporation
[EMAIL PROTECTED]
518-842-4111
http://www.genium.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48407t=48390
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: New 2600 and %Error opening tftp [7:48265]

2002-07-09 Thread Phil Lorenz

No service config did the trick.

I had entered that command when this all started, but apparently adding
it a second time and rebooting did the trick.

Garble free @ the console :o)

Thanks Everyone
Phil

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, July 07, 2002 5:59 PM
To: [EMAIL PROTECTED]
Subject: RE: New 2600 and %Error opening tftp [7:48265]

Phil Lorenz wrote:
 
 %Error opening tftp://255.255.255.255/msb3100_v1_silver_c01
 (Timed out)
 
 %Error opening tftp://255.255.255.255/msb3100_v1_silver_c01
 (Timed out)
 
 %Error opening tftp://172.30.100.34/network-confg (Timed out)
 
  
 
 Any idea where this crap-ola is coming from or what it is ???
 
  
 
 I just pasted a config into a new 2611 and this appears @ the
 console
 every few minutes.
 
  
 
 I disabled service config (2611# no service config) but that
 did not
 change things.

Did you try 2611(config)# no service-config. In other words, make sure
you're in config mode when you enter the command.

That may be obvious, but sometimes we miss the obvious. ;-) The router
decides that it should try to go to a TFTP server after it SLARPs from
another router. This is very common in labs, for example. If your 2611
was
connected via a serial cross-over cable to another router that was
already
configured, your router can SLARP. From then on it decides to try TFTP.
It's
can be very annoying.

Priscilla Oppenheimer
http://www.priscilla.com
 
  
 
 The running config does not contain any TFTP commands.
 
  
 
 Any ideas ???
 
  
 
 Thanks In Advance 
 
 Phil




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48451t=48265
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cut-through vs Store Forward [7:48316]

2002-07-09 Thread Peter van Oene

You found 3000 of what?

At 06:21 PM 7/9/2002 +, Alejandro Acosta Alamo wrote:
Hello again,
   Priscilla, you have said that an ethernet frame must be at least 64
bytes,
right?. I have just placed an sniffer on my LAN and I found over 3000 out of
15.000 packets. Does this mean that 20% of those packets are illegal?

Thanks

Alejandro Acosta

- Original Message -
From: Priscilla Oppenheimer
To:
Sent: Monday, July 08, 2002 1:08 PM
Subject: RE: Cut-through vs Store  Forward [7:48316]


  Alejandro Acosta Alamo wrote:
  
   Hello,
 I understand the differences between Cut-through and Store 
   Forward. My
   question is: How do you decide with method to use?, in whch
   situation have
   you change the switching method?.
  
   Thanks
  
   Alejandro Acosta
  
  
  A lot of switches support only one method, so you don't have a choice. If
  you do have a choice, the decision is based on the number of errors on
your
  network. Cut-through doesn't do any error checking and in fact forwards
  frames that have a bad CRC or are too short. Ethernet says that frames
must
  be at least 64 bytes. Anything less is considered a fragment and is
illegal.
  Cut-through forwards fragments that have an entire destination address
that
  can be looked up to get a port number.
 
  If your switch connects many shared networks, then CRC errors and
fragments
  due to collisions are normal. But why waste bandwidth forwarding these to
  other ports on the LAN? In this case, you might want to go with
  store-and-forward which does not forward errored frames or fragments.
 
  If your switch connects single devices all using full-duplex, then it's
  unlikely that you are experiencing many CRC or fragments. So, cut-through
  makes the most sense.
 
 
  Priscilla Oppenheimer
  http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48431t=48316
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cut-through vs Store Forward [7:48316]

2002-07-09 Thread Larry Letterman

you found 3000 out of 15000 that were what ?
less than 64 bytes ?


Larry Letterman
Cisco Systems
[EMAIL PROTECTED] 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Alejandro Acosta Alamo
Sent: Tuesday, July 09, 2002 11:22 AM
To: [EMAIL PROTECTED]
Subject: Re: Cut-through vs Store  Forward [7:48316]


Hello again,
  Priscilla, you have said that an ethernet frame must be at least 64 bytes,
right?. I have just placed an sniffer on my LAN and I found over 3000 out of
15.000 packets. Does this mean that 20% of those packets are illegal?

Thanks

Alejandro Acosta

- Original Message -
From: Priscilla Oppenheimer
To:
Sent: Monday, July 08, 2002 1:08 PM
Subject: RE: Cut-through vs Store  Forward [7:48316]


 Alejandro Acosta Alamo wrote:
 
  Hello,
I understand the differences between Cut-through and Store 
  Forward. My
  question is: How do you decide with method to use?, in whch
  situation have
  you change the switching method?.
 
  Thanks
 
  Alejandro Acosta
 
 
 A lot of switches support only one method, so you don't have a choice. If
 you do have a choice, the decision is based on the number of errors on
your
 network. Cut-through doesn't do any error checking and in fact forwards
 frames that have a bad CRC or are too short. Ethernet says that frames
must
 be at least 64 bytes. Anything less is considered a fragment and is
illegal.
 Cut-through forwards fragments that have an entire destination address
that
 can be looked up to get a port number.

 If your switch connects many shared networks, then CRC errors and
fragments
 due to collisions are normal. But why waste bandwidth forwarding these to
 other ports on the LAN? In this case, you might want to go with
 store-and-forward which does not forward errored frames or fragments.

 If your switch connects single devices all using full-duplex, then it's
 unlikely that you are experiencing many CRC or fragments. So, cut-through
 makes the most sense.


 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48424t=48316
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cut-through vs Store Forward [7:48316]

2002-07-09 Thread Alejandro Acosta Alamo

.I found over 3000 out of 15.000 packets that were less than 64 bytes
longer..

- Original Message -
From: Alejandro Acosta Alamo 
To: Priscilla Oppenheimer ; 
Sent: Tuesday, July 09, 2002 2:10 PM
Subject: Re: Cut-through vs Store  Forward [7:48316]


 Hello again,
   Priscilla, you have said that an ethernet frame must be at least 64
bytes,
 right?. I have just placed an sniffer on my LAN and I found over 3000 out
of
 15.000 packets. Does this mean that 20% of those packets are illegal?

 Thanks

 Alejandro Acosta

 - Original Message -
 From: Priscilla Oppenheimer 
 To: 
 Sent: Monday, July 08, 2002 1:08 PM
 Subject: RE: Cut-through vs Store  Forward [7:48316]


  Alejandro Acosta Alamo wrote:
  
   Hello,
 I understand the differences between Cut-through and Store 
   Forward. My
   question is: How do you decide with method to use?, in whch
   situation have
   you change the switching method?.
  
   Thanks
  
   Alejandro Acosta
  
  
  A lot of switches support only one method, so you don't have a choice.
If
  you do have a choice, the decision is based on the number of errors on
 your
  network. Cut-through doesn't do any error checking and in fact forwards
  frames that have a bad CRC or are too short. Ethernet says that frames
 must
  be at least 64 bytes. Anything less is considered a fragment and is
 illegal.
  Cut-through forwards fragments that have an entire destination address
 that
  can be looked up to get a port number.
 
  If your switch connects many shared networks, then CRC errors and
 fragments
  due to collisions are normal. But why waste bandwidth forwarding these
to
  other ports on the LAN? In this case, you might want to go with
  store-and-forward which does not forward errored frames or fragments.
 
  If your switch connects single devices all using full-duplex, then it's
  unlikely that you are experiencing many CRC or fragments. So,
cut-through
  makes the most sense.
 
 
  Priscilla Oppenheimer
  http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48430t=48316
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Certificationzone [7:48390]

2002-07-09 Thread Leigh Anne Chisholm

I still get their weekly emails and I received my last email (non-automatic)
from them last Wednesday.  As for their forums being closed, there's a
message
on that page indicating that section is currently undergoing redesign
(CertificationZone is currently in the process of redesigning this portion
of
our Website) and that all registered members will be notified when the
redesign is complete.

If you were a paying subscriber, you may have been removed from their weekly
mailouts (this happened to me a long long time ago).  I'm not sure if the
free
memberships have an expiration, but that might be why you're not receiving
their weekly email anymore.  Anyway, here's last week's email (the next one
is
due today).  I can forward to you all missed weekly emails if you'd like.

So no, nothing's up with Certificationzone.  It's business-as-usual there.


  -- Leigh Anne



-Original Message-
From: Customer Service [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 02, 2002 10:19 AM
To: [EMAIL PROTECTED]
Subject: ZONE Introduces 1-Month Subscription


Here are this week's Challenge Questions and the Networking Term of
the Week from CertificationZone.com, plus:


1) Get RIP-ed at the ZONE
2) IP Routing is Fundamental for CCNA(tm) exam
3) New 1-month Subscription is Available
4) This Week's Networking Term of the Week
5) This Week's CCNA Challenge Question
6) This Week's CCNP(tm) Challenge Question
7) This Week's CCIE(tm) Challenge Question


1) July is the Time for CCIE and CCNP Candidates to Get RIP-ed at the
ZONE
==
Distance vector routing and interior routing protocol problems are
encountered frequently by networking professionals both in the real
world and on the CCIE Qualification, CCIE Lab, and the CCNP Routing
Exams. A strong understanding of the key technical concepts of RIP will
help you solve these problems. Rita Puzmanova, an internationally
recognized RIP expert and author, has prepared an outstanding Tutorial
explaining RIP in concise, easy-to-understand language. Her Tutorial
is featured in the CCIE/CCNP-level Study Guide for July, which debuted
at the ZONE yesterday.

Along with her Tutorial, Puzmanova has crafted 25 challenging
questions to help users assess their readiness to answer the types of
RIP problems they can expect to encounter on Cisco's exams. John
Neiberger has put together a six-step, five-router Lab Scenario that
requires users to apply their RIP knowledge and experience to a
real-world networking application.

If you're an active ZONE Subscriber, you now have access to all three
components of the RIP Study Guide. If you're a ZONE Member, you'll be
able to assess your knowledge of RIP with 25 of Puzmanova's Study
Questions during the month of July.

To access the RIP Study Guide, visit:
http://www.certificationzone.com/studyguides/?Issue=54


2) IP Routing Tutorial Available to ZONE Members in July
==
You cannot pass the CCNA exam unless you understand IP Routing and
no one explains the key concepts of IP Routing like the ZONE's
Technical Director, Howard Berkowitz. In July, ZONE Members have free
access to Howard's excellent IP Routing Tutorial. Don't let this
opportunity pass you by. You'll find it at:
http://www.certificationzone.com/studyguides/?Issue=9


3) New 1-Month ZONE Subscription Available
==
In celebration of Independence Day, the ZONE is pleased to announce
that a special one-month ZONE subscription is available during the
month of July at a cost of just $39.95.

So, if you're a Member of the ZONE who's been hesitant to become a
ZONE Subscriber because of the length of time or amount of money
involved with one of our longer term subscription options, here's your
chance to experience open and unrestricted access to every ZONE
Tutorial, Study Question, Lab Scenario, and Practice Exam offered at
our website, for the next thirty days.

Order your one-month subscription at:
http://www.certificationzone.com/promos/20020701_1/



4) ZONE's New Term of the Week
==

Periodic vs. Triggered Updates
--

One of the jobs of Routing protocols is to distribute the route
information among all the routers that need it. This is done by
sending out routing table updates.

Periodic updates contain the entire routing table and are sent at
pre-specified intervals.

Triggered updates are sent after a topology change occurs, e.g., an
interface goes up or down; a route becomes unreachable or reachable;
or a new route is added. They contain only information on modified
routes. To avoid floods of triggered updates in case of flapping
interface(s), distance vector routing protocols' implementations limit
their frequency (after 1 to 5 s following the last triggered update).


Find out 

Re: CCIE Lab Preparation Workbook [7:24920]

2002-07-09 Thread Joselito Nunez

I bought 02 books of ccbootcamp and the information isnot good..

J



Jason wrote:

 Brad Ellis  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Jason,
 
  Hi!  thanks for the information.  what technical topics did we miss in
our
  lab scenerios?  also, here is the general list of equipment you can use
to
  do our labs:

 I guess somehow this pass through my newsgroup reader without me noticing
 it.
 If I were to tell you what topic you missed, then obviously I'll be
breaking
 the NDA.

  That's pretty much the list of gear that you need.  When you say
 different
  equipment are you referring to the different cabling you need to do?
 There
  is a standard cabling methodology that we use on our racks so we do not
 have
  to re-cable the hardware.  If you would like to know what that is, you
can
  check out our website.  As far as presentation goes, we have them on
 single
  sheets of paper so it makes it easier for you to do your labs.  We could
  bind them together, but then it would make it much harder.  Besides, do
 you
  really care if it looks pretty or not?  The focus of our labs are to help
  you pass your CCIE, plain and simple.  We go right for the throat, and
 don't
  mess around!  :)  Our scenarios our completely focused on the high-level
  engineer and expect the individual to really know there stuff.  I
 thought
  I knew everything before I bought the bootcamp labs (and before I even
 knew
  of ccbootcamp).  After I went through lab8, I realized how little I
 actually
  knew, and got my butt in gear for my studying.

 Anyway, I also have a standard cabling that works fine for me . I actually
 spent time going through the lab scenerios trying to figure out if my eqpt
 would works for the scenerio and how to optimize the eqpts placements , and
 that waste lots of time because it has to be repeated for every lab
 scenerio, I'm however glad that you are working on updating the scenerios.

  We are in the process of going through ALL of the labs, removing the
 errors,
  removing the old technologies, making the configs standardized for our
 racks
  (frame-relay interfaces, router #s, etc), and including pre-config files
  (for IP addresses, etc, like the new 1-day lab).

 It's not so much the binding as the quality of the presentation, I could
 scan a page and let everybody take a look at what I mean, part of the edge
 of the page is missing, etc..However, I don't see the point to that
This
 info is just meant to help people decided ... The other problem is that the
 labs was standardise on your eqpt, i.e. if you have AGS, you assume
 everybody has AGS, etc... so it's difficult to find the exact number of
 interfaces, etc as what you have in the scenerios..

  I would have replied personally, but you didnt include your email
address.
  Sorry for the long winded response.  Thanks for your input!

 No problem.

 
  thanks,
  -Brad Ellis
  CCIE#5796 (RS / Security)
  Network Learning Inc
  [EMAIL PROTECTED]
  used Cisco gear:  www.optsys.net
  CCIE Labs, racks, and classes:  www.ccbootcamp.com
  Jason  wrote in message
  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   I'm completely unbiased since I've bought both IPExperts and CCBootCamp
  (and
   Solutionlab too). The fact that I got solutionlab and IPExpert too does
  say
   something, CCBootCamp labs are not for everybody and doesn't covers
   everything.
  
   Having gone through both, I would say that CCBootCamp has been the
  defactor
   standard for CCIE preparation for a long time , but mistakes starts
  creeping
   in somewhere in Lab 16 onward although Lab 19 and Lab 20 improved
since.
  
   Quick Comparision
  
   First Look : The first feeling is sort of disappointment, since it's a
  stack
   of papers, with no proper binding and even some info missing from the
  pages
   due to bad photocopying. If I would give CCBootCamp a 5/10 for this,
 then
  I
   must give IPExperts 9/10 for this. Workbook is properly binded and all
   printing done on glossy high quality papers . Diagrams are all in
Colors
  and
   definitely not using your inkjet printer.
  
   Lab scenerios : CCBootCamp has more diverse labs , but is more
 distracting
   due to the different eqpt requirements in each lab scenerios. IPExperts
   builds on individual topics, making it easier to focus and also the
  standard
   lab setup makes it easier to setup the lab and focus on configurations.
 IP
   Experts breaks their lab into 19 topics and then 5 full scenerios.
   CCBootCamp scenerios is more tricky in certain ways.
  
   Recommendation : CCBootCamp for more experienced engineers and
IPExperts
  for
   those who wants to focus on individual topics. If you are not sure , I
   suggest going for IPExperts first although I would give both 8/10 for
 the
   lab scenerios  .
  
   Value for money : CCBootCamp is more expensive (about 50% more) , but
 has
   been around longer and has a proven ability to provides updates
although
   somewhat 

Re: Cut-through vs Store Forward [7:48316]

2002-07-09 Thread Priscilla Oppenheimer

Alejandro Acosta Alamo wrote:
 
 .I found over 3000 out of 15.000 packets that were less
 than 64 bytes
 longer..

First, I would check how your protocol analyzer counts. An application can
send a packet that is less than 64 bytes. The Ethernet driver must pad the
frame out to 64 bytes. It's possible your analyzer doesn't count the padding
and is giving you a length that just counts the actual data.

If that's not the explanation, then you have an unhealthy network. The
recipient of an Ethernet frame that is less than 64 bytes will just drop the
frame. Why waste bandwidth on this junk?

On a shared network, frames that are less than 64 bytes (fragments or runts)
can occur due to collisions. Some collisions are normal on a shared network.
But 20% is too high. Runts result when a station starts sending, gets
through the preamble and into the actual frame, but not past 64 bytes, and
notices that another station is sending. The transmitters send a short jam,
and then stop sending. They backoff and wait a random amount of time before
retransmitting. The result is that they transmitted runts (frames less than
64 bytes).

On a point-to-point network (supposedly not shared), runts result from a
duplex mismatch. One side thinks the link is full duplex and sends whenever
it wants. The other side is set for half duplex and thinks that receiving
while it's sending is a collision, stops sending, backsoff, and leaves
behind a runt.

Priscilla

 
 - Original Message -
 From: Alejandro Acosta Alamo 
 To: Priscilla Oppenheimer ;
 
 Sent: Tuesday, July 09, 2002 2:10 PM
 Subject: Re: Cut-through vs Store  Forward [7:48316]
 
 
  Hello again,
Priscilla, you have said that an ethernet frame must be at
 least 64
 bytes,
  right?. I have just placed an sniffer on my LAN and I found
 over 3000 out
 of
  15.000 packets. Does this mean that 20% of those packets are
 illegal?
 
  Thanks
 
  Alejandro Acosta
 
  - Original Message -
  From: Priscilla Oppenheimer 
  To: 
  Sent: Monday, July 08, 2002 1:08 PM
  Subject: RE: Cut-through vs Store  Forward [7:48316]
 
 
   Alejandro Acosta Alamo wrote:
   
Hello,
  I understand the differences between Cut-through and
 Store 
Forward. My
question is: How do you decide with method to use?, in
 whch
situation have
you change the switching method?.
   
Thanks
   
Alejandro Acosta
   
   
   A lot of switches support only one method, so you don't
 have a choice.
 If
   you do have a choice, the decision is based on the number
 of errors on
  your
   network. Cut-through doesn't do any error checking and in
 fact forwards
   frames that have a bad CRC or are too short. Ethernet says
 that frames
  must
   be at least 64 bytes. Anything less is considered a
 fragment and is
  illegal.
   Cut-through forwards fragments that have an entire
 destination address
  that
   can be looked up to get a port number.
  
   If your switch connects many shared networks, then CRC
 errors and
  fragments
   due to collisions are normal. But why waste bandwidth
 forwarding these
 to
   other ports on the LAN? In this case, you might want to go
 with
   store-and-forward which does not forward errored frames or
 fragments.
  
   If your switch connects single devices all using
 full-duplex, then it's
   unlikely that you are experiencing many CRC or fragments.
 So,
 cut-through
   makes the most sense.
  
  
   Priscilla Oppenheimer
   http://www.priscilla.com
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48448t=48316
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Certificationzone [7:48390]

2002-07-09 Thread Mark Odette II

I'm a subscriber, but not a paid subscriber, and I got another e-mail
today... I believe I get them regularly.

Mark

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Tom Lisa
Sent: Tuesday, July 09, 2002 3:57 PM
To: [EMAIL PROTECTED]
Subject: Re: Certificationzone [7:48390]

I'm still getting them.  Got one today.  Are you a paid subscriber? 
Perhaps they stopped sending to non-subscribers.

HTH,
Prof. Tom Lisa, CCAI
Community College of Southern Nevada
Cisco ATC/Regional Networking Academy

richard dumoulin wrote:

  Anyone knows what happens with them ? They no longer send their
  weekly
  e-mails nor do they reply to e-mails sent to them. Also their forum
  is closed.
  [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48446t=48390
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Certificationzone [7:48390]

2002-07-09 Thread Howard C. Berkowitz

CertificationZone.com is alive and well Richard! We are currently
working on a new third version of the ZONE's website which is why we
have not yet reactivated the product support forum section of our
site. But our site continues to expand in content each and every
month. Our subscribers recently received access to the fiftieth ZONE
Study Guide in our on-line collection and on August 1, we're adding
an absolutely excellent WAN Troubleshooting Study Guide written by
one of my networking heroes, Priscilla Oppenheimer.

We continue to distribute our highly popular ZONE Challenge Question
mailings, every week. We've added to them a networking term of the
week. We've got a bunch of new lab scenarios we're about to add to
our most popular Study Guides. We're introducing a new RS Lab Exam
Workbook August 15th and we're expecting to announce the date of the
ZONE's first Distance Learning Bootcamp in the near future.

I'm not sure why you stopped receiving our weekly Challenge Question
e-mailings but please send me your e-mail address so I can make sure
we find out why. As for everyone else at Group Study, please be
assured that the ZONE is very alive and very well and most grateful
for the support we receive from this truly outstanding forum. If any
of you have also unexpectedly stopped receiving the ZONE's weekly
Challenge Question e-mailings, send us an e-mail or give us a call.

Anyone knows what happens with them ? They no longer send their weekly
e-mails nor do they reply to e-mails sent to them. Also their forum is
closed.
-- 
--
Mike Cinquanti
President
Genium Publishing Corporation
[EMAIL PROTECTED]
518-842-4111
http://www.genium.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48452t=48390
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: confusion on ppp auth chap callin/ppp auth pap [7:48325]

2002-07-09 Thread Ouellette, Tim

I prefer to use the terms calling and called.  Such that your statement
would be.

the calling device places a call to the called device, the called device
receives the call, the called device calls the call initiating (calling)
device back.

Maybe that will help?



-Original Message-
From: Carl Timm [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 09, 2002 10:54 AM
To: [EMAIL PROTECTED]
Subject: RE: confusion on ppp auth chap callin/ppp auth pap [7:48325]


When using PPP callin, it occurs on the receiving device. Conceptually think
of it this way, the calling device places a call, the receiving device
receives the call, the calling device calls the initiating device back. Hope
this helps.

Carl Timm, CCIE# 7149




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48453t=48325
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: interface traffic showing unreasonable statist [7:48397]

2002-07-09 Thread [EMAIL PROTECTED]

Answers in-line.
JMcL
- Forwarded by Jenny Mcleod/NSO/CSDA on 10/07/2002 11:29 am -


Priscilla Oppenheimer 
Sent by: [EMAIL PROTECTED]
10/07/2002 09:09 am
Please respond to Priscilla Oppenheimer

 
To: [EMAIL PROTECTED]
cc: 
Subject:RE: interface traffic showing unreasonable statist
[7:48397]


[EMAIL PROTECTED] wrote:
 
 Priscilla's answer is very true, but I have seen interfaces
 reporting
 one-way traffic greater than they should be able to transmit -
 for
 example, an ISDN B-channel reporting an output rate of 66
 kbps.  Not a
 pretty sight.
 
 While I didn't check it in detail, my assumption was that it
 was reporting
 the load the router was attempting to shove over the link - I
 don't think
 all that traffic was making it to the other end :-(

Were there also output drops? It seems like there would have to be. 

JMcL: I think there were.  I was concentrating on dragging another few 
channels up by their scruffs at the time, so I wasn't too fussed about 
whether there were drops - I knew the users at the other end of the 
channels were getting lousy responses, so what's a few drops here and 
there ;-)

Another thought is that it's just an average. There could be rounding
errors. Yeah, that's it, rounding errors. ;-)

JMcL: I think this can also be a factor sometimes - rounding errors or 
perhaps timing (calculation) issues.  It might explain my 66 kbps over a 
B-channel, but I'm not sure it can be used to fully explain 320 Kbps over 
a 256 Kbps link.
 
Also, I've always wondered about CIRs and fractional interfaces. The 
router
doesn't know that it's not supposed to send above its interface type,
without some advanced configuration, does it?

JMcL: Welcome to my friend, frame relay traffic shaping :-)  We have 
basically a hub and spoke network, so yes, without traffic shaping the hub 
will quite happily try to stuff 1 Mbps down a PVC that only has a 256 kbps 
access at the other end.  This does not do good things for performance. 
FRTS prevents this, and keeps hub and spoke networks (and users) much 
happier.
 
Priscilla

 
 JMcL
 - Forwarded by Jenny Mcleod/NSO/CSDA on 10/07/2002 08:38 am
 -
 
 
 Priscilla Oppenheimer 
 Sent by: [EMAIL PROTECTED]
 10/07/2002 02:31 am
 Please respond to Priscilla Oppenheimer
 
 
 To: [EMAIL PROTECTED]
 cc: 
 Subject:RE: interface traffic showing
 unreasonable statistics [7:48397]
 
 
 uday wrote:
  
  Hi all,
  I am using a cisco router with a frac-E1 link terminated on it
  (256kbps). I am
  running some Ipsec tunnels
  across this link. Sometimes i have found that i/p o/p rate
  shows more then
  256kbps using the show interface ser command.
 
 Do you mean that the combined input/output rate exceeds 256
 kbps? That
 could
 be normal. It's full duplex. The capacity is available in both
 directions
 on
 point-to-point WAN circuits.
 
 Priscilla
 
  
  i have seen it upto 32 bps?
  
  Plz can somebody explain this?
  thanks /regards,
  
  Uday
 Important:  This e-mail is intended for the use of the
 addressee and may contain information that is confidential,
 commercially valuable or subject to legal or parliamentary
 privilege.  If you are not the intended recipient you are
 notified that any review, re-transmission, disclosure, use or
 dissemination of this communication is strictly prohibited by
 several Commonwealth Acts of Parliament.  If you have received
 this communication in error please notify the sender
 immediately and delete all copies of this transmission together
 with any attachments.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48454t=48397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Idle mode only for X.25 PVC or SVC? [7:48427]

2002-07-09 Thread Priscilla Oppenheimer

Lh Ma wrote:
 
 as we know, PLP operates in 5 modes: call setup, data transfer,
 idle, call
 clearing, and restart. also we know SVC will be torn down where
 DTEs have no
 more data to transfer. so I think for SVC, there is no idle
 mode. but on
 cisco webpage 
 http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/x25.htm, it's
said
 idle mode is only for PVCs.

Actually it says idle mode is only used for SVCs, which I'm sure is what you
meant to say and that's what's confusing you.

I'm no X.25 expert, but idle mode probably occurs when there's no data and
the devices are just sitting there sending Receiver Ready packets to each
other.

Closing the connection doesn't happen automatically. It requires one side to
send a Clear Request message. The provider can also clear a call.

Howard would know more. Have you read his X.25 paper at CertificationZone?
It's great.

Priscilla

 Could anyone clear it out?
 Thank you in advance.
 
 
 
 _
 Chat with friends online, try MSN Messenger:
 http://messenger.msn.com
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48455t=48427
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RSVP [7:48456]

2002-07-09 Thread Luciano Borges Moraes

Hi There.

I've read the doc from
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt5/qcfrsvfr.htm#xtocid20

that try to explain how to configura RSVP on Frame-Relay multipoint
sub-interfaces.

My first question is, based on the example provided by that doc, what is
the calculation that has to be made to get the correct values for ip
rsvp bandwidht command on hub and spokes routers?

The second question is about FRTS. I usually calculate the values for
FRTS like the following:
CIR=whole interface BW
minCIR=CIR provided by ISP/TELCO/etc
BC=minCIR/8
BE=EIR/8
EIR=(CIR-minCIR)
TC=1/8s

On the example provided by
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt5/qcfrsvfr.htm#xtocid20,
these values are calculated in a different manner.
look the note bellow:
Note   When FRTS is enabled, the Frame Relay Committed Burst (Bc) value
(in bits) should be configured to a maximum of 1/100th of the CIR value
(in bits per second). This configuration ensures that the FRTS token
bucket interval (Bc/CIR) does not exceed 10 Ms, and that voice packets
are serviced promptly.

Is that info correct?

Luciano.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48456t=48456
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



TPIPS [7:48457]

2002-07-09 Thread John Brandis

Any one been playing with TPIPS ?


**

visit http://www.solution6.com
visit http://www.eccountancy.com - everything for accountants.

UK Customers - http://www.solution6.co.uk

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.
*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48457t=48457
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VPN Question [7:48459]

2002-07-09 Thread Naomi James

I have a 3015 concentrator.  I am supposed to be able to use my cable modem
at home to connect to the Internet and then use my vpn client to connect to
my local network on my campus.  I can connect with my vpn client, but I can
not map any drives on my local network on my campus.  I have tried LMHosts
files, changing the MTU to 1200, and both my  DNS and WINS show when I type
winipcfg.  Any help would be appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48459t=48459
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Class C summarization question [7:48367]

2002-07-09 Thread Andy Hoang

Ok I guess I deserved that.  I was thinking of the 4th bit has a value of 8
in my head and forgot to add the values of the rest of the bits.

-Original Message-
From: Michael L. Williams [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 08, 2002 10:01 PM
To: Andy Hoang; [EMAIL PROTECTED]
Subject: Re: Class C summarization question [7:48367]


Wow.  According to my binary math, 4 bits = 16 combinations.

1 bit = 2 combinations (2^1 = 2)
2 bits = 4 combinations (2^2 = 4)
3 bits = 8 combinations (2^3 = 8)
4 bits = 16 combinations (2^4 = 16)

Now. when converting from binary to decimal, the 4th bit (from the
right) has a (decimal) value of 8 (2^[4-1]), but of course when you add the
values of the bits from 4 down, you get 8+4+2+1 = 15 (thus giving 16
combinations, 0 through 15)

(Too all that have read my posts in the past, now you know why I bitch up a
storm when I hear someone encourage someone else to memorize subnetting
charts and bitswapping charts instead of taking an hour and learning how
binary actually works... geez)

Mike W.

- Original Message -
From: Andy Hoang 
To: Michael L. Williams ; 
Sent: Monday, July 08, 2002 10:51 PM
Subject: RE: Class C summarization question [7:48367]


 I would say 8 is correct.  4 bits make 8 combinations.

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 Michael L. Williams
 Sent: Monday, July 08, 2002 8:15 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Class C summarization question [7:48367]


 I would say 16 as well.

 Mike W.


 Dain Deutschman  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  I'm confused about a practice question for BSCN that I came across:
 
  Your routing tables are getting very large and you need to configure
route
  summarization. How many class C internet addresses can you summarize
with
 a
  /20 CIDR block?
 
  Answer: 8
 
  Would it not be 16? Where am I going wrong?
 
  --
  Dain Deutschman
  CNA, MCP, CCNA
  Data Communications Manager
  New Star Sales and Service, Inc.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48458t=48367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Idle mode only for X.25 PVC or SVC? [7:48427]

2002-07-09 Thread mlh

Priscilla,

Thank you for your reply. Yes, you're right. I really meant SVCs rather than
PVCs.

mlh

- Original Message -
From: Priscilla Oppenheimer 
To: 
Sent: Tuesday, July 09, 2002 10:07 PM
Subject: RE: Idle mode only for X.25 PVC or SVC? [7:48427]


 Lh Ma wrote:
 
  as we know, PLP operates in 5 modes: call setup, data transfer,
  idle, call
  clearing, and restart. also we know SVC will be torn down where
  DTEs have no
  more data to transfer. so I think for SVC, there is no idle
  mode. but on
  cisco webpage
  http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/x25.htm, it's
 said
  idle mode is only for PVCs.

 Actually it says idle mode is only used for SVCs, which I'm sure is what
you
 meant to say and that's what's confusing you.

 I'm no X.25 expert, but idle mode probably occurs when there's no data and
 the devices are just sitting there sending Receiver Ready packets to each
 other.

 Closing the connection doesn't happen automatically. It requires one side
to
 send a Clear Request message. The provider can also clear a call.

 Howard would know more. Have you read his X.25 paper at CertificationZone?
 It's great.

 Priscilla

  Could anyone clear it out?
  Thank you in advance.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48460t=48427
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VPN Question [7:48459]

2002-07-09 Thread supernet

Uncheck Allow IPSec through NAT mode
Make sure client for Microsoft client is checked

Yoshi

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Naomi James
Sent: Tuesday, July 09, 2002 8:43 PM
To: [EMAIL PROTECTED]
Subject: VPN Question [7:48459]

I have a 3015 concentrator.  I am supposed to be able to use my cable
modem
at home to connect to the Internet and then use my vpn client to connect
to
my local network on my campus.  I can connect with my vpn client, but I
can
not map any drives on my local network on my campus.  I have tried
LMHosts
files, changing the MTU to 1200, and both my  DNS and WINS show when I
type
winipcfg.  Any help would be appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48461t=48459
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RSVP [7:48456]

2002-07-09 Thread Darren Ward

Yes, 10ms is the target for sample interval for assessing voip and
real-time traffic.

No the RSVP value is independant of the FRTS values but YOU want to make
sure you have a match so you don't reserve more than you can provide or
under reserve for your requirements ;)

The golden formulae for FRTS is Tc=Bc/CIR
this gives 10msec = 8000 / 80 for the CCO example

That gives time interval only, you then specify Be for that time interval
as well as the mincir you would adaptive shape down to.

RSVP is based on reserving a 'guaranteed' amount of bandwidth and in the
example an RSVP statement exists for each subinterface which the sum
appears on the physical interface.

You might also want to specify RSVP priority queue for voice.

Darren Ward
(PGradCS, CCIE #8245, CCNP, CCDP, MCP)


On Wed, 10 Jul 2002, Luciano Borges Moraes wrote:

 Hi There.

 I've read the doc from

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt5/qcfrsvfr.htm#xtocid20

 that try to explain how to configura RSVP on Frame-Relay multipoint
 sub-interfaces.

 My first question is, based on the example provided by that doc, what is
 the calculation that has to be made to get the correct values for ip
 rsvp bandwidht command on hub and spokes routers?

 The second question is about FRTS. I usually calculate the values for
 FRTS like the following:
 CIR=whole interface BW
 minCIR=CIR provided by ISP/TELCO/etc
 BC=minCIR/8
 BE=EIR/8
 EIR=(CIR-minCIR)
 TC=1/8s

 On the example provided by

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt5/qcfrsvfr.htm#xtocid20,
 these values are calculated in a different manner.
 look the note bellow:
 Note   When FRTS is enabled, the Frame Relay Committed Burst (Bc) value
 (in bits) should be configured to a maximum of 1/100th of the CIR value
 (in bits per second). This configuration ensures that the FRTS token
 bucket interval (Bc/CIR) does not exceed 10 Ms, and that voice packets
 are serviced promptly.

 Is that info correct?

 Luciano.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48462t=48456
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF problem [7:48463]

2002-07-09 Thread John Brandis

I have the following error whilst playing with OSPF

12:52:40: %OSPF-4-ERRRCV: Received invalid packet: mismatch area ID, from
backbone area must be virtual-link but not found from 10.1.4.20, Ethernet0

I have 2 routers, Router A and Router B, back to back. Able to get the 2
connected, however when I 
(Router A)
router ospf 20
network 10.1.10.0 0.0.0.0 area 20

(RouterB)
router ospf 20
network 192.168.1.0 0.0.0.0 area 20

Should I define different areas ?

Thanks for your time

John


**

visit http://www.solution6.com
visit http://www.eccountancy.com - everything for accountants.

UK Customers - http://www.solution6.co.uk

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.
*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48463t=48463
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Groupstudy News Down?!?!? [7:48464]

2002-07-09 Thread Michael Williams

I haven't been able to reach Groupstudy through my Outlook Express (NNTP)
for quite a while now. but can reach through the web..

Is there some issue Paul?

Mike W.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48464t=48464
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF problem [7:48463]

2002-07-09 Thread Michael Williams

Lemme take a stab at this one.  I don't run OSPF where I work, but I'd
like to keep my chops up to date =)

In OSPF, you need to have an Area 0.  If there are 2 routers only in your
network, and only one area, it needs to be Area 0.  If there is only 1 Area
in your network, there is no need for it to be anything other than Area 0. 
Since every Area must touch Area 0, it seems to me there is something in the
IOS that looks for at least one interface to be in Area 0 or at least in a
virtual link to Area 0.

Change your areas on your routers to Area 0 and see if you have the same
problem

(OSPF gurus, please correct me as, again, I'm just taking a stab and would
like to keep my OSPF up to date)

(Now that I'm thinking about it, you could have a router that is totally
within a certain Area that's not an ASBR or ABR, so not it's possible to
there could be an interfaces not in Area 0... so at this point, my whole
post is moot. too many rum and cokes =)  OSPF gurus, please advise =)

Thanks!
Mike W.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48465t=48463
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



TPIPS [7:48457]

2002-07-09 Thread [EMAIL PROTECTED]

As in Telstra Private IP Service?
Personally, no (sorry if that's not very helpful).  But if that is what 
you're talking about, I expect most people on the list won't have heard of 
it, let alone played with it ;-)

Something I'll have to check out in the future, though, so if you're using 
it or if you use it in the future, I'd be interested in getting your 
opinions.

If that's not what you're talking about, what are you talking about?

JMcL
- Forwarded by Jenny Mcleod/NSO/CSDA on 10/07/2002 02:32 pm -


John Brandis 
Sent by: [EMAIL PROTECTED]
10/07/2002 01:23 pm
Please respond to John Brandis

 
To: [EMAIL PROTECTED]
cc: 
Subject:TPIPS [7:48457]


Any one been playing with TPIPS ?


**

visit http://www.solution6.com
visit http://www.eccountancy.com - everything for accountants.

UK Customers - http://www.solution6.co.uk

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you 
cannot
use, distribute or copy the message or attachments.  In such a case, 
please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business 
of
Solution 6 are neither given nor endorsed by it.
*
Important:  This e-mail is intended for the use of the addressee and may
contain information that is confidential, commercially valuable or subject
to legal or parliamentary privilege.  If you are not the intended recipient
you are notified that any review, re-transmission, disclosure, use or
dissemination of this communication is strictly prohibited by several
Commonwealth Acts of Parliament.  If you have received this communication in
error please notify the sender immediately and delete all copies of this
transmission together with any attachments.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48466t=48457
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Opinions on 4000 -vs- 6500 [7:48467]

2002-07-09 Thread Michael Williams

We are going to setup some closets in hospitals for radiology to transfer
large images across.  They want gig to the desktop  If we have 20-30
computers/printers connected with Cat5E gig to a 4000 will that be too
much?  I'm thinking it won't overwhelm the backplane unless all devices are
cranking gig at once (which I've yet to hear of a PC or printer that can
actually handle Gig .)

What would be the best recommendation for Sups?  Sup1, 2 or 3?  We don't
need L3 at that level as each 4000 would uplink (via Gig) to a 6500 for
L3.

We could do 6506 in the closet for the Cat5 gig modules are expensive and
only have 16 ports per blade where the 4000 modules have 48 ports of
10/100/1000 for the Cat5 and are cheaper

Thanks for any input

Mike W.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48467t=48467
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF problem [7:48463]

2002-07-09 Thread Kris Keen

Its seeing the router as no direct link to the backbone (area 0) and such is
assuming you have a virtual link configured. Change your areas to 0 and see
what happens.

Area 0, fundamental to OSPF.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48468t=48463
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: TPIPS [7:48457]

2002-07-09 Thread Kris Keen

TCPIPS is Telstras private ip network yes, and it sucks :)

Thats all I have to say!

Cheers
Kris


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48469t=48457
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF problem [7:48463]

2002-07-09 Thread Charles D Hammonds

It is always best practice to use area 0 if it is the only area. If you have
more than one area configured either one of them *must* be area 0 or there
must be a virtual link to area 0. See the following for your particular
error:

http://www.cisco.com/warp/public/104/19.html#1

Google is your friend ;)

Charles

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Michael Williams
Sent: Tuesday, July 09, 2002 9:37 PM
To: [EMAIL PROTECTED]
Subject: RE: OSPF problem [7:48463]


Lemme take a stab at this one.  I don't run OSPF where I work, but I'd
like to keep my chops up to date =)

In OSPF, you need to have an Area 0.  If there are 2 routers only in your
network, and only one area, it needs to be Area 0.  If there is only 1 Area
in your network, there is no need for it to be anything other than Area 0.
Since every Area must touch Area 0, it seems to me there is something in the
IOS that looks for at least one interface to be in Area 0 or at least in a
virtual link to Area 0.

Change your areas on your routers to Area 0 and see if you have the same
problem

(OSPF gurus, please correct me as, again, I'm just taking a stab and would
like to keep my OSPF up to date)

(Now that I'm thinking about it, you could have a router that is totally
within a certain Area that's not an ASBR or ABR, so not it's possible to
there could be an interfaces not in Area 0... so at this point, my whole
post is moot. too many rum and cokes =)  OSPF gurus, please advise =)

Thanks!
Mike W.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48471t=48463
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Salary structure for CCNPs In Japan?? [7:48472]

2002-07-09 Thread IT Guy

Hi Guys,

Just curious how is  current  Japan  market for we guys,..CCNPs..CCIE 
qualified or watever..

I am seriously thinking about moving to japan and need some comments on the 
current situation and salaray structure there.

Take Care,

TOM



_
Send and receive Hotmail on your mobile device: http://mobile.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48472t=48472
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF problem [7:48463]

2002-07-09 Thread [EMAIL PROTECTED]

I *think* (she says, being too busy/lazy to look up the RFC) that if there 
is only a single area in an OSPF AS, it does not have to be area 0.  As 
soon as you bung in a second area, though, you need to have one of them as 
area 0 or the two areas won't be able to talk to each other.

What network is joining Router A and Router B?  Going back to the original 
email...
I have 2 routers, Router A and Router B, back to back. Able to get the 2
connected, however when I 
(Router A)
router ospf 20
network 10.1.10.0 0.0.0.0 area 20

(RouterB)
router ospf 20
network 192.168.1.0 0.0.0.0 area 20

Is the connection between A and B 10.1.10.0, or 192.168.1.0, or something 
different?   Might be nice to include the connecting network in the OSPF 
process.

Also, your network statements look a bit dodgy.  If your networks are /24, 
try network 10.1.10.0 0.0.0.255 area 20 and likewise for Router B. 
Currently you are adding the interface with address 10.1.10.0/32 to the 
OSPF process, which is presumably not what the address of the interface 
actually is.  I'm surprised it's giving you any errors, because I'm 
surprised it's doing anything.

JMcL
- Forwarded by Jenny Mcleod/NSO/CSDA on 10/07/2002 03:51 pm -


Michael Williams 
Sent by: [EMAIL PROTECTED]
10/07/2002 02:36 pm
Please respond to Michael Williams

 
To: [EMAIL PROTECTED]
cc: 
Subject:RE: OSPF problem [7:48463]
Is this part of a business decision process?: 


Lemme take a stab at this one.  I don't run OSPF where I work, but I'd
like to keep my chops up to date =)

In OSPF, you need to have an Area 0.  If there are 2 routers only in your
network, and only one area, it needs to be Area 0.  If there is only 1 
Area
in your network, there is no need for it to be anything other than Area 0. 

Since every Area must touch Area 0, it seems to me there is something in 
the
IOS that looks for at least one interface to be in Area 0 or at least in a
virtual link to Area 0.

Change your areas on your routers to Area 0 and see if you have the same
problem

(OSPF gurus, please correct me as, again, I'm just taking a stab and would
like to keep my OSPF up to date)

(Now that I'm thinking about it, you could have a router that is totally
within a certain Area that's not an ASBR or ABR, so not it's possible to
there could be an interfaces not in Area 0... so at this point, my whole
post is moot. too many rum and cokes =)  OSPF gurus, please advise =)

Thanks!
Mike W.
Important:  This e-mail is intended for the use of the addressee and may
contain information that is confidential, commercially valuable or subject
to legal or parliamentary privilege.  If you are not the intended recipient
you are notified that any review, re-transmission, disclosure, use or
dissemination of this communication is strictly prohibited by several
Commonwealth Acts of Parliament.  If you have received this communication in
error please notify the sender immediately and delete all copies of this
transmission together with any attachments.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48473t=48463
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]