pre and post compression image sizes disagree [7:52774]

2002-09-06 Thread Christian Hougaard

Hi

I have the following problem with my 3640 (16 MB flash and 128 MB RAM).  I
have tried several IOS's and also different IOS's from a flash card located
in slot0 - same result.

program load complete, entry point: 0x80008000, size: 0x38f410
Self decompressing the image :



### [OK]

Error : pre and post compression image sizes disagree

*** System received a Software forced crash ***
signal= 0x17, code= 0x8, context= 0x0
PC = 0x80008094, Cause = 0x20, Status Reg = 0x3041f003

When loading a new IOS image onto the flash RAM I do it like this:

rommon 3  xmodem -c c3640-i-mz.120-10.bin
Do not start the sending program yet...
 File size   Checksum   File name
  13635240 bytes (0xd00ea8)   0x5210c3640-jk8o3s-mz.122-7c.bin

WARNING: All existing data in flash will be lost!
Invoke this application only for disaster recovery.
Do you wish to continue? y/n  [n]:  y
Ready to receive file c3640-i-mz.120-10.bin ...
Erasing flash at 0x30fc
program flash location 0x3038
Download Complete!

Thanks

Christian Hougaard




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52774t=52774
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Setting up Lab [7:52708]

2002-09-06 Thread Koh Jeff

thanks guys..great help!!!:)


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52775t=52708
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Review of network design, any takers ? [7:52776]

2002-09-06 Thread John Brandis

Hi, 
Any one keen to look over a network that I am building ? Would really
appreciate it if one or many of my peers had 5 minutes to make comments on
my network design (requires visio)

John
Sydney, Australia


**

visit http://www.solution6.com

UK Customers - http://www.solution6.co.uk

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.
*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52776t=52776
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: network design question [7:52762]

2002-09-06 Thread Tunji Suleiman

Hi Jeff Duchin, pls what's IDF?

Regards


From: Jeff D 
Reply-To: Jeff D 
To: [EMAIL PROTECTED]
Subject: Re: network design question [7:52762]
Date: Fri, 6 Sep 2002 01:11:16 GMT

How many users per IDF?

Jeff

John Brandis  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hi All,
 
  Like my previous emails, had a network designed for some 460 ports.
Hoever,
  like yesterday, I have been told now to cater for some 650 ports, and to
  plan for VOIP in a few months time.
 
  My topology looked like
 
  [Core Switch - Cisco Catalyst 4006]
  / \ /
  \
 /  \/
  \
/   \   /
  \
  [Cat2950][Cat2950]
  [Cat2950][cat2950] and would extend out another level
 
  That kind of worked for 460 ports:
 
  Would this design work:
 
  [---Core Switch -
  Cisco Catalyst 4006-] Floor Closet-Level 
3
  (core room)
  / \ /
  \
/  \/
  \
  /  \   /
  \
[Cat2950]--[Cat2950]---[Cat2950]
  [Cat2950]---[Cat2950]---[Cat2950]---[Cat2950]
 
  Floor Closet-Level 1
  Floor Closet-Level 2
 
  All links back to the core, are fibre connecting to a GBIC on the core
4006.
  The link between each cat 2950, is also fibre connecting to a GBIC port.
  Would this design work as my core-distribution model, or would it be
better
  just to have the just 2 switchs at my dist layer ?
 
  Thanks for your time.
 
  John
  Sydney Australia
 
 
  **
 
  visit http://www.solution6.com
 
  UK Customers - http://www.solution6.co.uk
 
  *
  This email message (and attachments) may contain information that is
  confidential to Solution 6. If you are not the intended recipient you
cannot
  use, distribute or copy the message or attachments.  In such a case,
please
  notify the sender by return email immediately and erase all copies of 
the
  message and attachments.  Opinions, conclusions and other information in
  this message and attachments that do not relate to the official business
of
  Solution 6 are neither given nor endorsed by it.
  *
_
Chat with friends online, try MSN Messenger: http://messenger.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52777t=52762
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Review of network design, any takers ? [7:52776]

2002-09-06 Thread Tunji Suleiman

I can take the time out to look into ur design. I got Visio Technical.

Regards.

Tunji


From: John Brandis 
Reply-To: John Brandis 
To: [EMAIL PROTECTED]
Subject: Review of network design, any takers ? [7:52776]
Date: Fri, 6 Sep 2002 08:22:36 GMT

Hi,
Any one keen to look over a network that I am building ? Would really
appreciate it if one or many of my peers had 5 minutes to make comments on
my network design (requires visio)

John
Sydney, Australia


**

visit http://www.solution6.com

UK Customers - http://www.solution6.co.uk

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you 
cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.
*
_
Send and receive Hotmail on your mobile device: http://mobile.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52779t=52776
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



cisco 1601's [7:52780]

2002-09-06 Thread MENON ARUN

Hi Friends,
My CCNA is over, and Iam preparing for CCNP now. Iam interested buy 2 1601
router's with transceivers, console cables, back to back cables I cannot
afford anything grand than this right now. (my dream is a couple of 3600's).
Iam located in India.
Thanks in advance.
Arun Menon


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52780t=52780
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF Stub area [7:52781]

2002-09-06 Thread Lee Messenger

Hi,

I have a network (Area 3) that has 2 connections to my OSPF area 0.  One via
2mb ATM the other via VPN. I would like to configure this as a stub area,
however, with multiple exit points, will my traffic go via the ATM or VPN or
both.  I would prefer the route via ATM, and only use VPN if ATM goes down. 
What do I need to do to achive this ?

Regards

LM


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52781t=52781
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco 4000 Flash upgrade [7:52782]

2002-09-06 Thread Thomas Muller

Hi,

I've got a Cisco 4000 (the original 4000) that I would like to upgrade the
Flash memory.

It's got a daughter card, with 8 x chips soldered on it (2Mb in total) with
another 8 x sockets (that are open) to expand it to 4Mb in total.

The question is where can I source the 8 x chips to make it 4Mb Flash.

Does anyone have the original Cisco part number for this upgrade? (sure,
they won't sell it anymore)

Has anyone done this before ?

Thanks, Thomas

[EMAIL PROTECTED]
 

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52782t=52782
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Internet control [7:52663]

2002-09-06 Thread Lee Messenger

Hi,

We use Superscout by Surfcontrol, quite cheap, easy to configure, plus good
reporting tools.  Worth a look

HTH

LM


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52783t=52663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF Stub area [7:52781]

2002-09-06 Thread Casey, Paul (6822)

Use the area 3 default  command on the abr router you want the traffic to go
over, this will get injected into the stub area  

Both Abr's will inject 0.0.0.0 in to the stub, buf you can influence using
this command.. Which will be the prefered route out, + u could also use the
summary command on the other router for certain traffic to go through this
one 


Kind regards.
Paul.




--
Sent from my BlackBerry Wireless Handheld


-Original Message-
From: Lee Messenger 
To: [EMAIL PROTECTED] 
Sent: Fri Sep 06 12:00:36 2002
Subject: OSPF Stub area [7:52781]

Hi,

I have a network (Area 3) that has 2 connections to my OSPF area 0.  One via
2mb ATM the other via VPN. I would like to configure this as a stub area,
however, with multiple exit points, will my traffic go via the ATM or VPN or
both.  I would prefer the route via ATM, and only use VPN if ATM goes down. 
What do I need to do to achive this ?

Regards

LM


This E-mail is from O2. The E-mail and any files
transmitted with it are confidential and may also be privileged and intended
solely for the use of the individual or entity to whom they are addressed.
Any unauthorised direct or indirect dissemination, distribution or copying
of this message and any attachments is strictly prohibited. If you have
received the E-mail in error please notify [EMAIL PROTECTED] or 
  telephone ++ 353 1 6095000.

*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52784t=52781
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE CD Questions [7:52786]

2002-09-06 Thread [EMAIL PROTECTED]

Hi All,

Has someone used the CD Study Questions 2002 CD-ROM for the Cisco. CCIE
Written Exam, from CertificationZone ?

Thanks in Advanced for any feedback,

Alaerte




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52786t=52786
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Networking Positions [7:52768]

2002-09-06 Thread Johnny Routin

From what I've seen and from networkers I speak to all over the US, England
and Australia, it's really suckin no matter where you are.  That said, there
is jobs out there... just the competition is very very tough.

JR

--
Johnny Routin




Nathan Nakao  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 All,

   I live in San Diego and have recently gotten laid off of a startup
 company called Wingcast You may have heard of it.  Anyways, I was
 wondering how the job market is for Network Engineers in your area.  I
 have a CCNP and the well is dry here.  Just curious how the other areas
 are.

 Much Mahalo,

 Nate




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52787t=52768
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Anyone written the new CCIE exam? [7:52788]

2002-09-06 Thread Jaco Muller - MWeb

Wrote is yesterday and it was an absolute horror!

 
Give your child an unfair advantage with M-Web Learning.  To join, call 08600
32 000 or go to http://join.mweb.co.za

M-Web  JUST LIKE THAT




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52788t=52788
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



static route [7:52789]

2002-09-06 Thread Neal, Tim

Hi,

We are trying to add a static route on a Cat3550 switch so everything sent
to address 192.168.1.7 ip address is re-routed to 192.168.41.254. What's the
best method ?

thx
Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52789t=52789
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF Stub area [7:52781]

2002-09-06 Thread Lee Messenger

Paul,

Thanks for the reply,

I think you may have misunderstood my network topology.  Illustrated below

Area0RouterAArea3RouterB
Both the ATM link and VPN begin and end at the above routers(via different
interfaces)

Therefore if Area 3 is a stub (or totally stubby), router B will have 2
0.0.0.0 routes to the networks in Area 0.  My question is, which interface
will traffic from router B go over when going to destinations in Area0.

I believe it will prefer the ATM over the tunnel interface because Tunnel
interfaces have a higher cost.  Although I'm a bit unsure

Hope this makes things clearer

LM


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52790t=52781
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: OSPF default-information original always [7:52721]

2002-09-06 Thread Magondo, Michael

Gil

The command default-information originate always metric  will
allow you to specify a different metric on each redistributing ASBR.
This will then give you control over the default gateway selected and
advertised.

Hope that helps

Mike


-Original Message-
From: Gil Shulman [mailto:[EMAIL PROTECTED]] 
Sent: 05 September 2002 02:13 PM
To: [EMAIL PROTECTED]
Subject: OSPF default-information original always [7:52721]

Hi all,

I have been wondering whether someone can help me understand, how to
control
which default-gateway will the OSPF mechanism will advertise first, in a
scenario which I have four.

Thank you in advance for any help,
Gil

**
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system
manager
or  the
sender immediately and do not disclose the contents to any one or make
copies.

** eSafe scanned this email for viruses, vandals and malicious content
**

**




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52791t=52721
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: serial interface down/down or up/down [7:47101]

2002-09-06 Thread Michael Williams

This just happened to me today. We had a point to point T1 circuit go down,
and all I could see on the one end was:

DCD=down  DSR=up  DTR=up  RTS=up  CTS=up

So, even though our CSU/DSU was powered up and connected to the routers
serial interface with a good cable, we showed DCD down because the telco
circuit was down.

Mike W. 

Priscilla Oppenheimer wrote:
 Here's the conclusion, since a few people have wondered about
 it. By the
 way, the question had to do with an external CSU/DSU.
 
 According to Cisco documentation, a down/down serial interface
 means the
 router interface cannot determine that CD has been asserted. As
 mentioned
 earlier, a CSU/DSU acts more like a DSU than a CSU and presents
 a
 synchronous signal to the router. The CSU/DSU must assert Data
 Carrier
 Detect (DCD or CD), Data Set Ready (DSR), and Clear to Send
 (CTS). The
 router, which is playing the DTE role, must assert Data
 Terminal Ready
 (DTR) and Request to Send (RTS). For all these control leads to
 be
 asserted, and for the router to recognize that they are
 asserted, the
 router and CSU/DSU hardware must be operational, and the
 cabling must be
 properly constructed.
 
 However, even if all hardware checks out, there are still cases
 when the
 interface may be down/down or flapping between up/up, up/down,
 and
 down/down. For example, some CSU/DSUs won't assert CD if the
 link to the
 carrier is having problems. In these cases, check the CSU/DSU 
 configuration. Make sure the right clocking, framing, and
 encoding are
 configured. If they are correctly configured, then call the
 service
 provider and work with the provider to isolate the problem.
 
 Priscilla




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52792t=47101
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF Stub area [7:52781]

2002-09-06 Thread Albert Lu

Might also want to consider changing the cost at the ABR using 'ip ospf
cost'.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Casey, Paul (6822)
Sent: Friday, September 06, 2002 10:03 PM
To: [EMAIL PROTECTED]
Subject: Re: OSPF Stub area [7:52781]


Use the area 3 default  command on the abr router you want the traffic to go
over, this will get injected into the stub area

Both Abr's will inject 0.0.0.0 in to the stub, buf you can influence using
this command.. Which will be the prefered route out, + u could also use the
summary command on the other router for certain traffic to go through this
one


Kind regards.
Paul.




--
Sent from my BlackBerry Wireless Handheld


-Original Message-
From: Lee Messenger
To: [EMAIL PROTECTED]
Sent: Fri Sep 06 12:00:36 2002
Subject: OSPF Stub area [7:52781]

Hi,

I have a network (Area 3) that has 2 connections to my OSPF area 0.  One via
2mb ATM the other via VPN. I would like to configure this as a stub area,
however, with multiple exit points, will my traffic go via the ATM or VPN or
both.  I would prefer the route via ATM, and only use VPN if ATM goes down.
What do I need to do to achive this ?

Regards

LM



This E-mail is from O2. The E-mail and any files
transmitted with it are confidential and may also be privileged and intended
solely for the use of the individual or entity to whom they are addressed.
Any unauthorised direct or indirect dissemination, distribution or copying
of this message and any attachments is strictly prohibited. If you have
received the E-mail in error please notify [EMAIL PROTECTED] or
  telephone ++ 353 1 6095000.


*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52793t=52781
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Review of network design, any takers ? [7:52776]

2002-09-06 Thread Rob Wright

I'd also be willing.

Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52794t=52776
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FXS and Key System connection [7:52795]

2002-09-06 Thread Tom Scott

Peter Walker : [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], TISCA wrote:

 Nope, I think you got that the wrong way round.
 
 FXO looks like an analog phone.  
 FXS is the interface you plug a phone into.


Peter (and others using keyswitch ITS routers),

Just to make sure I'm using the right terminology, are you referring
to ITS (IOS Telephony Service) when you mention the keyswitch?

Next question, assuming that we're talking about the ITS keyswitch
functionality in router images like the 2600/3600 routers (for example
the is image c2600-is-mz.122-11.T.bin): We want to get some analog
phones working in the ITS exercise set up at the local Cisco Academy.
Budget is limited (that's an understatement). Does Cisco make an
affordable (say, less than $100 or $200) module for our 2621 that we
can plug analog phones into, and will those analog phones communicate
with a couple of IP phones (7960, 40, 10) that will be connected
to a switch that's plugged into the 2621?

-- TIA, TT

P.S. How are preparations for the CIPT going? Do you have a CallManager
to practice with? I think that's key to the exam, actually configuring
the CCM software and using it with SoftPhone and 79XX IP phones.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52795t=52795
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



If you are looking forward to VoIP... [7:52762]

2002-09-06 Thread Chris Charlebois

If you are looking at Cisco IP phones, I would recommend replacing all the
Cat2950's with Cat3524-PWR.  It's cheaper and easier to manage the phones
when they get power from the switch, than buying and maintaining a power
brick for each phone.  This, of course, assumes enterprise-wide deployment
of IP phones.  If only a handful are getting them, the bricks may be a
viable solution.

BTW, IDF = Intermediate Distribution Frame.  As opposed to the Main
Distribution Frame.  Typically, a multi-story building will have 1 MDF,
usually in the basement, and 1 IDF on each floor.  The MDF will have
punchdowns going to each IDF, allowed easy patching between floors.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52796t=52762
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VOIP and subnets [7:52688]

2002-09-06 Thread Chris Charlebois

The difference is this:  Voice over IP means just that, voice packetized to
run over IP.  This could be an IP phone, or an analog phone connected to an
FXS port on a router, or even two voice gateways that provide toll bypass
between 2 geographically seperate traditional PBX's.  THe only defining
characteristic is that, at some point, the voice is split up, put in IP
packets and transported over an IP network.

Now, IP Telephony is VoIP, but it means more than just that.  Kinda like
every square is a rectangle, but not all rectangles are squares.  IP
Telephony means that at least one end of the conversation is terminated on
an IP device, such as an IP phone.  This implies that the various features
common to modern phones are provided by the IP system, like hold, transfer,
park, call forward, etc.  VoIP does not define these services.

Hope this helps.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52797t=52688
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF Stub area [7:52781]

2002-09-06 Thread Peter van Oene

Your stub router will take the shortest path to the destinations in area 
0.  In this case, it will sum the cost from the ABR to the destination 
(assuming area 0 destination) with the cost of itself to the ABR(s) and 
take the lower cost of the candidate paths.  In your case, simply increase 
the metric on the link toward the vpn and you should see the proper 
primary/secondary paths.

Pete


At 11:00 AM 9/6/2002 +, Lee Messenger wrote:
Hi,

I have a network (Area 3) that has 2 connections to my OSPF area 0.  One via
2mb ATM the other via VPN. I would like to configure this as a stub area,
however, with multiple exit points, will my traffic go via the ATM or VPN or
both.  I would prefer the route via ATM, and only use VPN if ATM goes down.
What do I need to do to achive this ?

Regards

LM




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52799t=52781
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: about 100 fiber and 1000 fiber ??? [7:52766]

2002-09-06 Thread Chris Best

If you have a 4603 with GBIC's in the 4003, it will not communicate to a
2950C.  1000Base fiber does not talk to 100Base fiber.  The only way that
the 4003 will talk to a 2950C is if you put a 100BaseFX link in the 4003, or
you use a crossover copper cable for the connection to a 10/100 copper port.

Chris Best

- Original Message -
From: www pearl 
To: 
Sent: Thursday, September 05, 2002 7:29 PM
Subject: about 100 fiber and 1000 fiber ??? [7:52766]


 In  cat4003,using model 4306 ,can talking with 2950c ??
 How can I do ?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52798t=52766
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: serial interface down/down or up/down [7:47101]

2002-09-06 Thread Mark W. Odette II

What model/mfg. is the CSU/DSU??  Just curious, that's all. :)

Have a great Weekend to all!

Mark

-Original Message-
From: Michael Williams [mailto:[EMAIL PROTECTED]] 
Sent: Friday, September 06, 2002 8:28 AM
To: [EMAIL PROTECTED]
Subject: Re: serial interface down/down or up/down [7:47101]

This just happened to me today. We had a point to point T1 circuit go
down,
and all I could see on the one end was:

DCD=down  DSR=up  DTR=up  RTS=up  CTS=up

So, even though our CSU/DSU was powered up and connected to the routers
serial interface with a good cable, we showed DCD down because the telco
circuit was down.

Mike W. 

Priscilla Oppenheimer wrote:
 Here's the conclusion, since a few people have wondered about
 it. By the
 way, the question had to do with an external CSU/DSU.
 
 According to Cisco documentation, a down/down serial interface
 means the
 router interface cannot determine that CD has been asserted. As
 mentioned
 earlier, a CSU/DSU acts more like a DSU than a CSU and presents
 a
 synchronous signal to the router. The CSU/DSU must assert Data
 Carrier
 Detect (DCD or CD), Data Set Ready (DSR), and Clear to Send
 (CTS). The
 router, which is playing the DTE role, must assert Data
 Terminal Ready
 (DTR) and Request to Send (RTS). For all these control leads to
 be
 asserted, and for the router to recognize that they are
 asserted, the
 router and CSU/DSU hardware must be operational, and the
 cabling must be
 properly constructed.
 
 However, even if all hardware checks out, there are still cases
 when the
 interface may be down/down or flapping between up/up, up/down,
 and
 down/down. For example, some CSU/DSUs won't assert CD if the
 link to the
 carrier is having problems. In these cases, check the CSU/DSU 
 configuration. Make sure the right clocking, framing, and
 encoding are
 configured. If they are correctly configured, then call the
 service
 provider and work with the provider to isolate the problem.
 
 Priscilla




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52800t=47101
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: static route [7:52789]

2002-09-06 Thread Mark W. Odette II

Just off the cuff, I would think that Route-Map config added to the 3550
would do the trick.

I'm sure Chuck will answer you more precisely. :)

Mark

-Original Message-
From: Neal, Tim [mailto:[EMAIL PROTECTED]] 
Sent: Friday, September 06, 2002 8:09 AM
To: [EMAIL PROTECTED]
Subject: static route [7:52789]

Hi,

We are trying to add a static route on a Cat3550 switch so everything
sent
to address 192.168.1.7 ip address is re-routed to 192.168.41.254. What's
the
best method ?

thx
Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52801t=52789
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Voice Certification [7:52734]

2002-09-06 Thread Chris Charlebois

I would say go CVoice, CIPT, DQoS.  Save the QoS test for last because it is
a mother of a test.  CVoice was harder than I thought it was going to be,
but I thought it was going to be very easy.  All in all, it's not a real
tough test.  The CIPT seemed to be more product knowlegde than technical
knowledge.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52803t=52734
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FXS and Key System connection [7:52795]

2002-09-06 Thread MADMAN

You might want to rephrase that to the only way to get analog VOICE
lines...

  Dave

Chris Charlebois wrote:
 
 In a word, no.  The only way to get analog lines into a 26xx series router
 (or 36xx for that matter) is with a NM-1V (or -2V) and an FXO (or FXS) VIC.
 The NM-1V alone is running between $300 and $500 on E-bay.  The FXO/S will
 probably be another couple hundred at least.
 
 But, yes, it seems that ITS will allow you to route IP phone calls to and
 from analog lines with the proper hardware.  I haven't worked with ITS,
much
 but the description seems to indicate that.  However, I don't know if ITS
 will really help you.  ITS is a nickle answer to the $64,000 question, and
 it will not help in passing the CIPT exam.
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52804t=52795
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco courseware [7:52805]

2002-09-06 Thread Davis, Scott [ISE/RAC]

Does anyone know if there is a way to purchase Cisco courseware (like the
DQoS courseware) outside of taking the course?

TIA
Scott




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52805t=52805
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN over Sattalite [7:52742]

2002-09-06 Thread Jason Weden

I have heard of sattelite providers messing with tcp parameters such as
window size to optimize the tcp transfer over such low-latency connections:

http://www.networkmagazine.com/article/NMG20020104S0001/2
http://www.sohosatellite.co.uk/h_technical_perf.htm


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52806t=52742
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Help....with 3550 [7:52807]

2002-09-06 Thread Juan Blanco

Team,
I just got a 3550 switch(current smi image), I am trying to put the new emi
image but I am getting the following error...What I am doing wrong

Switch#$downnload-sw tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
examining image...
Loading c3550-i5q3l2-mz.121-11.EA1.bin .from 192.149.64.17 (via Vlan1): !
%Tar checksum error in tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
%Error opening flash:update/info (No such file or directory)
ERROR: Image is not a valid IOS image archive.
Switch#


Thanks

JB




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52807t=52807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Help....with 3550 [7:52807]

2002-09-06 Thread MADMAN

Since your simply downloading the .bin file why don't you simply do a
copy tftp flash?

  Dave

Juan Blanco wrote:
 
 Team,
 I just got a 3550 switch(current smi image), I am trying to put the new emi
 image but I am getting the following error...What I am doing wrong
 
 Switch#$downnload-sw tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
 examining image...
 Loading c3550-i5q3l2-mz.121-11.EA1.bin .from 192.149.64.17 (via Vlan1): !
 %Tar checksum error in tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
 %Error opening flash:update/info (No such file or directory)
 ERROR: Image is not a valid IOS image archive.
 Switch#
 
 Thanks
 
 JB
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52809t=52807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Help....with 3550 [7:52807]

2002-09-06 Thread Richard Tufaro

need to do an: archive command..


Switch#archive download-sw
tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.BIN!!  Juan Blanco 
09/06 1:01 PM 
Team,
I just got a 3550 switch(current smi image), I am trying to put the new emi
image but I am getting the following error...What I am doing wrong

Switch#$downnload-sw tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
examining image...
Loading c3550-i5q3l2-mz.121-11.EA1.bin .from 192.149.64.17 (via Vlan1): !
%Tar checksum error in tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
%Error opening flash:update/info (No such file or directory)
ERROR: Image is not a valid IOS image archive.
Switch#


Thanks

JB




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52810t=52807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Help....with 3550 [7:52807]

2002-09-06 Thread Nathan Nakao

How did you download the .bin file?  It may be a bad download.

You got a checksum error.  Could be a tftp server problem.  What tftp
server are you using?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Juan Blanco
Sent: Friday, September 06, 2002 10:01 AM
To: [EMAIL PROTECTED]
Subject: Helpwith 3550 [7:52807]


Team,
I just got a 3550 switch(current smi image), I am trying to put the new
emi image but I am getting the following error...What I am doing
wrong

Switch#$downnload-sw tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
examining image...
Loading c3550-i5q3l2-mz.121-11.EA1.bin .from 192.149.64.17 (via Vlan1):
! %Tar checksum error in
tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
%Error opening flash:update/info (No such file or directory)
ERROR: Image is not a valid IOS image archive.
Switch#


Thanks

JB




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52811t=52807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCDP pointers [7:52812]

2002-09-06 Thread Arun DK

Hi,



passed all four for CCNP, in past 4 weeks, I must thank this groups, and
some of the discussios, and helpful information...



with a weeks rest, like to go in for CCDP, I already have the exam
certification guide , from Cisco Press, does any body have pointers in Cisco
web site...for the study material...(Searching on dialup)



I would also like to get some feedback, on the CCIP trach, specially on the
Multicast, which are the good books to buy ???





Thanks

[GroupStudy.com removed an attachment of type image/gif]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52812t=52812
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE R/S Questions and Answers [7:52813]

2002-09-06 Thread [EMAIL PROTECTED]

Hello,

Does someone know where I could download CCIE questions with answers that
covers the Routing and Switching Exam ?

Thanks in Advanced,

Alaerte




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52813t=52813
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Help....with 3550 [7:52807]

2002-09-06 Thread Richard Tufaro

hmm. last post got cutoff. Download the .tar file if you plan to use the
HTML interface and do a:

archive download-sw tftp://10.1.1.1/image.tar

check out the options after download-sw. 3550 come with 16megs flash, so
you can do a /leave-sw and keep the old image for failover.

 MADMAN  09/06 1:41 PM 
Since your simply downloading the .bin file why don't you simply do a
copy tftp flash?

  Dave

Juan Blanco wrote:
 
 Team,
 I just got a 3550 switch(current smi image), I am trying to put the new emi
 image but I am getting the following error...What I am doing wrong
 
 Switch#$downnload-sw tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
 examining image...
 Loading c3550-i5q3l2-mz.121-11.EA1.bin .from 192.149.64.17 (via Vlan1): !
 %Tar checksum error in tftp://192.149.64.17/c3550-i5q3l2-mz.121-11.EA1.bin
 %Error opening flash:update/info (No such file or directory)
 ERROR: Image is not a valid IOS image archive.
 Switch#
 
 Thanks
 
 JB
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52814t=52807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Prompt in flash playing after deletion [7:52816]

2002-09-06 Thread Tunji Suleiman

All,

I loaded TCL application and audio prompt files to flash to avert problems 
with TFTP. Everything worked fine, no issues. I customized  welcome prompt 
to client's need to replace Cisco welcome prompt in flash. No issues. I 
issued delete flash:en_welcome.au. Got prompt to confirm, entered yes. All 
seemed well. I confirmed with below commands and outputs.

GW-3660#show flash
.
112   6600 en_twenty.au
113   4072 en_two.au
114   26016en_welcome.au [deleted]
115   16552en_wrong_lang_sel.au
116   5140 en_you_have.au
117   5844 en_zero.au
118   44040en_zero_bal.au
..

GW-3660#dir flash:
.
  112  -rw-6600   Sep 05 2002 10:33:10  en_twenty.au
  113  -rw-4072   Sep 05 2002 10:40:57  en_two.au
  115  -rw-   16552   Sep 05 2002 10:42:14  en_wrong_lang_sel.au
  116  -rw-5140   Sep 05 2002 10:42:54  en_you_have.au
  117  -rw-5844   Sep 05 2002 10:43:19  en_zero.au
  118  -rw-   44040   Sep 05 2002 10:43:50  en_zero_bal.au
.

GW-3660#show file info flash:en_welcome.au
%Error opening flash:en_welcome.au (No such file or directory)

GW-3660#show file info flash:en_two.au
flash:en_two.au:
  type is ebcdic text

Notice file index 114 for en_welcome.au missing from dir flash: output.

I dialed into the gateway and suprisingly heard the prompt: welcome to cisco 
prepaid calling card demo

Now a document on CCO classifies the gateway, a 3660 as Class B file system 
which needs to be completely erased once b4 using the squeeze command to 
permanently erase a deleted file.

Somebody pls tell me,
1. Should a file in flash, marked deleted still be available for use by the 
router or calling applications?
2. Without completely erasing flash, can I load my modified welcome file 
without any conflict with the deleted file?

TIA

Tunji






_
Join the worlds largest e-mail service with MSN Hotmail. 
http://www.hotmail.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52816t=52816
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



3550 EMI - What's New [7:52815]

2002-09-06 Thread Eric Rogers

Well I took a peek over at Cisco today for the 3550 Documentation and there
it is 12.1(11)EA1. Looks like there are 18 NEW IOS features for this
release. Some of the more relevant for the lab I see such as: Support for
Cisco IP phone, BGP, more QoS, Multi-VPN's. The more I read about this
little box the more I like. This thing is a power house of features.


New Software Features
Cisco IOS Release 12.1(11)EA1 contains these new features or enhancements:

1.Simple Network Management Protocol Version 3 (SNMPv3) to increase network
security by authenticating and encrypting packets

2.Basic routing functionality, including static unicast routing and the
Routing Information Protocol (RIP), in the SMI

3.Trusted boundary to detect the presence of a Cisco IP phone, to trust the
Class of Service (CoS) value received, and to ensure port security

4.Per-port per-VLAN ingress quality of service (QoS) policing for
classification of traffic on a physical interface or on a per-port per-VLAN
basis

5.Remote SPAN (RSPAN) for traffic monitoring on any port or VLAN

6.Support for the Unidirectional Link Detection (UDLD) aggressive mode

7.Support for dynamic-secure addresses that you can save in the
configuration file

8.CMS support for these features:

9.Switch Configuration Save and Restore-save a switch configuration to a
TFTP server and later restore the configuration file to one or more switches

10.CMS preferences-save the CMS preferences to your PC instead of saving the
preferences to Flash memory on the switch

11.Menu bar options-access the new alarm notification, event notification,
restore configuration, and user and password features

12.CISCO-ENTITY-MIB support for the Catalyst 3550 in compliance with
RFC-2737

13.The CISCO-PORT-QOS-MIB to enable SNMP queries of QoS statistics to use
for billing purposes

14.Encrypted Secure Shell (SSH) connections for multiple CLI-based sessions
over the network (requires the crypto image file; see Table 5)

15.Routing support for the Border Gateway Protocol (BGP-4) (EMI only)

16.Support for multiple virtual private networks (VPNs) with overlapping IP
addresses in service provider networks by using multiple VPN
routing/forwarding (multi-VRF) instances in customer edge (CE) devices with
the multi-VRF CE feature (EMI only)

17.Web Cache Communication Protocol (WCCP) to redirect traffic to local
cache engines, enable content requests to be fulfilled locally, and to
localize web-traffic patterns in the network (EMI only)

18.The CISCO-L2L3-INTERFACE-MIB to enable the Cisco Campus Manager software
to properly represent the switch on its topology map and to identify ports
as routed or switched (EMI only)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52815t=52815
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: audio file in flash prompts after deleting [7:52817]

2002-09-06 Thread Tunji Suleiman

I forgot to add that upon trying to copy the modified en_welcome.au file, I 
got the following:

GW-3660#copy tftp://217.197.175.4/promtps/en_welcome.au flash
Destination filename [en_welcome.au]?
Accessing tftp://mind/edgepromtps/en_welcome.au...
%Error opening tftp://217.146.175.4/promtps/en_welcome.au (No such file or 
directory)

I have the prompts folder in the tftp-root and the modified en_welcome.au in 
it.

Is this in some way connected with the deleted file in flash? I really do 
not want to have to wipe the entire flash if I can avoid it.

TIA



_
MSN Photos is the easiest way to share and print your photos: 
http://photos.msn.com/support/worldwide.aspx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52817t=52817
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Tunneling [7:52818]

2002-09-06 Thread Casey, Paul (6822)

Can someone help me please, I am trying to link 2 private networks over a
public network. Using tunneling no ipsec

This is in a lab of course..

Can some write some simple configs on how to do this.
I can't get it to work, nor am I am 100 percent sure how to do it.

Its a total IP network and I want to use GRE.. 

Any help appreciated

Kind regards
Paul.

--
Sent from my BlackBerry Wireless Handheld




This E-mail is from O2. The E-mail and any files
transmitted with it are confidential and may also be privileged and intended
solely for the use of the individual or entity to whom they are addressed.
Any unauthorised direct or indirect dissemination, distribution or copying
of this message and any attachments is strictly prohibited. If you have
received the E-mail in error please notify [EMAIL PROTECTED] or 
  telephone ++ 353 1 6095000.

*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52818t=52818
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Home lab (Cisco Routers + switches )available for renting ---- [7:52819]

2002-09-06 Thread [EMAIL PROTECTED]

Hi all,
I am putting my  cisco  home lab online just rise some fund for my second
attempt.
It consists of
 1x  Cisco 3620
 1x  Cisco 2621
 1x  Cisco 2520 ? ( configured as frame-relay switch)
 1x  Cisco 2514
 5 x Cisco 2501
 1 x Catalyst 4003

The rent on this will be $20 per day.  I want to make it cheap so that
anyone can afford it.  It does not have everything a ccie needs but you can
achieve a lot with these routers.  My suggestion is to use this lab to
learn + test and practice the all the stuff you can do with it eg IGP, BGP,
NAT, IPSEC, routing, IPX etc.  Then book a more expensive lab where you can
use to  practice/test  more advance stuff such as ISDN, ATM and voice.
This lab will provide a good hands on practice for those who are pursuing
CCNX track.

Please note that this is my home lab and I also use it for my ccie
practice. Let me know if you are interest, and I can give you details on
how to reach the routers.  Please send you request to [EMAIL PROTECTED]
email account.  The lab will be available from 16th of September so you can
request you dates after this time.

Thank you and Good luck to you all with your ccie studies.

Thanks
Hemant




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52819t=52819
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



1601 R AUI Ethernet ports ... [7:52820]

2002-09-06 Thread Paul

Hi  Quick question to you all 

I have a 1601, with 1 serial interface, 1 ethernet interface, 1 console
port, 1 AUI interface. I also have a transceiver. Is there anyway that I can
create a secone 'ethernet interface' by utilising either the AUI or the
console port 

I have looked on the cisco website and also books that I have ... But I
cannot find any documentation anywhere  If I can't use the AUI port as
another ethernet port .. then what is the purpose of this interface 

Regards

Paul ...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52820t=52820
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 1601 R AUI Ethernet ports ... [7:52820]

2002-09-06 Thread M.C. van den Bovenkamp

Paul wrote:

 Is there anyway that I can
 create a secone 'ethernet interface' by utilising either the AUI or the
 console port 

No.

 I have looked on the cisco website and also books that I have ... But I
 cannot find any documentation anywhere  If I can't use the AUI port as
 another ethernet port .. then what is the purpose of this interface 

To connect a transceiver to. 10BASE-2, 10BASE-FL, whatever.

Regards,

Marco.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52821t=52820
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Tunneling [7:52818]

2002-09-06 Thread MADMAN

There are oddles of examples on CCO.  The gist of a tunnel is your
tunnel interface ip, tunnel source and tunnel destination where the
source of A is the destination of B and vis-versa.

 Dave

Casey, Paul (6822) wrote:
 
 Can someone help me please, I am trying to link 2 private networks over a
 public network. Using tunneling no ipsec
 
 This is in a lab of course..
 
 Can some write some simple configs on how to do this.
 I can't get it to work, nor am I am 100 percent sure how to do it.
 
 Its a total IP network and I want to use GRE..
 
 Any help appreciated
 
 Kind regards
 Paul.
 
 --
 Sent from my BlackBerry Wireless Handheld
 


 
 This E-mail is from O2. The E-mail and any files
 transmitted with it are confidential and may also be privileged and
intended
 solely for the use of the individual or entity to whom they are addressed.
 Any unauthorised direct or indirect dissemination, distribution or copying
 of this message and any attachments is strictly prohibited. If you have
 received the E-mail in error please notify [EMAIL PROTECTED] or
   telephone ++ 353 1 6095000.
 

*
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52822t=52818
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Swith Memory upgrade.. [7:52733]

2002-09-06 Thread Ernesto Diaz

Hola Carlos,

Mi inquietud es saber si es posible actualizar la SDram de un Switch para
llevarlo de 4-MB a 8-MB?

Saludos,

Ernesto J. Diaz L.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, September 05, 2002 9:39 PM
To: [EMAIL PROTECTED]
Subject: Re: Swith Memory upgrade.. [7:52733]

Hola Ernesto

dime que version tiene en este momento y cual necesita yo te la puedo 
ayudar a conseguir


Carlos Rojas_Morales

Ernesto Diaz wrote:
 Is possible to upgrade a 4-MB Catalyst 2900-XL Switch  to 8-MB?
 
  
 
 Regards,
 
  
 
 Ernesto J. Diaz L.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52823t=52733
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 1601 R AUI Ethernet ports ... [7:52820]

2002-09-06 Thread Neal Rauhauser

Its there to allow you to feed the unit with fiber, or to place it on
an old thicknet run, or some other location where you had a 25xx /w
transceiver.

  If you want dual ethernet you buy a 1605, if you just need two
ethernet ports you can place two 1601s back to back with a crossover
cable and get the job done. If you're not worried about speed you can
use a rollover RJ45 and connect AUX ports and run PPP ... but there are
no aux on 16xx.



Paul wrote:
 
 Hi  Quick question to you all 
 
 I have a 1601, with 1 serial interface, 1 ethernet interface, 1 console
 port, 1 AUI interface. I also have a transceiver. Is there anyway that I
can
 create a secone 'ethernet interface' by utilising either the AUI or the
 console port 
 
 I have looked on the cisco website and also books that I have ... But I
 cannot find any documentation anywhere  If I can't use the AUI port as
 another ethernet port .. then what is the purpose of this interface 
 
 Regards
 
 Paul ...
-- 
Neal Rauhauser CCNP, CCDP   voice: 402-301-9555
mailto:[EMAIL PROTECTED] fcc  : k0bsd
I've seen the angels wearing their disguise,
ordinary people leading ordinary lives - Tracy Chapman




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52824t=52820
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How to manage the pix 501 remotely via telnet or pdm [7:52825]

2002-09-06 Thread mindiani mindiani

Hi  I just installed two PIX 501 with vpn tunnel over the internet for my
client and I would like to allow telnet and pdm from one site to the
other. The tunnels are up and I able to send traffic in both directions
but I cannot telnet into the remote Pix from my PC.I tried the following
command: telnet 172.16.1.2  255.255.255.255 outside  This command would
not allow my PC (IP address172.16.1.2) to telnet to the remote site but I
am able to telnet to my servers behind the PIX. i have the same problem
with PDM. 



Join the worlds largest e-mail service with MSN Hotmail. Click Here




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52825t=52825
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to manage the pix 501 remotely via telnet or pdm [7:52826]

2002-09-06 Thread Dain Deutschman

do you have the conduit configured to allow icmp? I think the PIX blocks
icmp unless you specifically open a conduit for it.
Dain
mindiani mindiani  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi  I just installed two PIX 501 with vpn tunnel over the internet for my
 client and I would like to allow telnet and pdm from one site to the
 other. The tunnels are up and I able to send traffic in both directions
 but I cannot telnet into the remote Pix from my PC.I tried the following
 command: telnet 172.16.1.2  255.255.255.255 outside  This command would
 not allow my PC (IP address172.16.1.2) to telnet to the remote site but I
 am able to telnet to my servers behind the PIX. i have the same problem
 with PDM.

 

 Join the worlds largest e-mail service with MSN Hotmail. Click Here




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52826t=52826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Tunneling [7:52818]

2002-09-06 Thread Robert Thompson

Try this

Router A


interface lo0
 ip address 202.202.202.1 255.255.255.0


Interface Ethernet 0
 ip address 159.114.10.1 255.255.255.0
 ip policy route-map GRE-VPN


access-list 101 permit ip 192.168.0.0 0.0.0.255 192.168.0.0 0.0.0.255 

int tunnel0
 ip address 192.168.10.1 255.255.255.0 -- private address
 tunnel source loopback0
 tunnel destination 202.202.202.2  what ever the pingable  address
is

route-map GRE-VPN permit 10
 match ip address 101
 set interface tunnel0


Router B

interface lo0
 ip address 202.202.202.1 255.255.255.0


Interface Ethernet 0
 ip address 147.184.10.1 255.255.255.0
 ip policy route-map GRE-VPN


access-list 101 permit ip 192.168.0.0 0.0.0.255 192.168.0.0 0.0.0.255 

int tunnel0
 ip address 192.168.10.1 255.255.255.0
 tunnel source loopback0
 tunnel destination 202.202.202.2

route-map GRE-VPN permit 10
 match ip address 101
 set interface tunnel0



The key is to make sure your tunnel destination is in your routers routing
table or you have a route pointing to it


Regards

Rob



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52828t=52818
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



test [7:52827]

2002-09-06 Thread J barrera

this is a test

JB


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52827t=52827
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: FW: OSPF default-information original always [7:52721]

2002-09-06 Thread Robert Thompson

Hi,

If you use default-information originate always then add the metric-type at
the end.  Your E2 default routes by default have a cost of 1 to the ASBR. E1
routes will have cost of all paths to reach the ASBR. That way, you can
choose. Also, try and implement them with a route map so you can manage them
better


HTH

Rob


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52829t=52721
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNP [7:52830]

2002-09-06 Thread Edgar A. Howard

Friends,

I passed the CCNP - Routing Exam today.  It took two 
months of study for this first of four.  I will work on Switching 
next.  Should I expect the three remaining to take as much 
time as the Routing?  I have equal experience with each 
area, very little.  There does not appear to be any jobs 
anyway, so I'm in no great hurry. 

Any suggestions where I might get any kind of 
experience/practice??  I would work for free to get it. 

-edgar
P.S.  I can work for free because I am independently wealthy. 



. . . there was given to me a thorn in the flesh, 
the messager of Satan to buffet me, 
lest I should be exalted above measure.
- 2 Corinthians 12:7




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52830t=52830
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to manage the pix 501 remotely via telnet or pdm [7:52831]

2002-09-06 Thread Mark W. Odette II

HUH!?!?! What does ICMP have to do with Telnet or the PDM??

Mindiani- To answer your question, yes there is an alleged way of doing
what you're wanting to do.  I have not done it myself yet, but there is
an example on CCO of how to do such a configuration.

Pad Pad Pad  http://www.cisco.com/warp/public/110/pdm_vpntun.html

For Telnet, as far as I know, there isn't a way to telnet to the PIX
from the outside- it's considered a security risk by the firewall group
at Cisco, so they don't allow for it.

If you want to telnet to the PIX, create a rule on the PIX that allows
your specific Internet Host to connect to a telnet device such as a
Switch or a Unix box (or even the Telnet Server on Win2K if I dare
suggest it), and then hit the PIX from that telnet host.  Be sure and
configure the PIX with the telnet 'inside-host-ip' 255.255.255.255
inside command.

Good luck, and let us know how you do!

Mark

-Original Message-
From: Dain Deutschman [mailto:[EMAIL PROTECTED]] 
Sent: Friday, September 06, 2002 4:28 PM
To: [EMAIL PROTECTED]
Subject: Re: How to manage the pix 501 remotely via telnet or pdm
[7:52826]

do you have the conduit configured to allow icmp? I think the PIX blocks
icmp unless you specifically open a conduit for it.
Dain
mindiani mindiani  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi  I just installed two PIX 501 with vpn tunnel over the internet for
my
 client and I would like to allow telnet and pdm from one site to the
 other. The tunnels are up and I able to send traffic in both
directions
 but I cannot telnet into the remote Pix from my PC.I tried the
following
 command: telnet 172.16.1.2  255.255.255.255 outside  This command
would
 not allow my PC (IP address172.16.1.2) to telnet to the remote site
but I
 am able to telnet to my servers behind the PIX. i have the same
problem
 with PDM.




 Join the worlds largest e-mail service with MSN Hotmail. Click Here




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52831t=52831
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Swith Memory upgrade.. [7:52733]

2002-09-06 Thread David j

Ernesto, Carlos, if you write in Spanish most of people here will not
understand you and they won't be able to help you

Ernesto Diaz wrote:
 
 Hola Carlos,
 
 Mi inquietud es saber si es posible actualizar la SDram de un
 Switch para
 llevarlo de 4-MB a 8-MB?
 
 Saludos,
 
 Ernesto J. Diaz L.
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
 Sent: Thursday, September 05, 2002 9:39 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Swith Memory upgrade.. [7:52733]
 
 Hola Ernesto
 
 dime que version tiene en este momento y cual necesita yo te la
 puedo
 ayudar a conseguir
 
 
 Carlos Rojas_Morales
 
 Ernesto Diaz wrote:
  Is possible to upgrade a 4-MB Catalyst 2900-XL Switch  to
 8-MB?
  
   
  
  Regards,
  
   
  
  Ernesto J. Diaz L.
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52832t=52733
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to manage the pix 501 remotely via telnet or pdm [7:52833]

2002-09-06 Thread Happy Clam

You could always configure SSH instead of telnet.  PIX boxes accept SSH
connections coming from the outside interface.  

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Mark W. Odette II
Sent: Friday, September 06, 2002 6:25 PM
To: [EMAIL PROTECTED]
Subject: RE: How to manage the pix 501 remotely via telnet or pdm
[7:52831]


HUH!?!?! What does ICMP have to do with Telnet or the PDM??

Mindiani- To answer your question, yes there is an alleged way of doing
what you're wanting to do.  I have not done it myself yet, but there is
an example on CCO of how to do such a configuration.

Pad Pad Pad  http://www.cisco.com/warp/public/110/pdm_vpntun.html

For Telnet, as far as I know, there isn't a way to telnet to the PIX
from the outside- it's considered a security risk by the firewall group
at Cisco, so they don't allow for it.

If you want to telnet to the PIX, create a rule on the PIX that allows
your specific Internet Host to connect to a telnet device such as a
Switch or a Unix box (or even the Telnet Server on Win2K if I dare
suggest it), and then hit the PIX from that telnet host.  Be sure and
configure the PIX with the telnet 'inside-host-ip' 255.255.255.255
inside command.

Good luck, and let us know how you do!

Mark

-Original Message-
From: Dain Deutschman [mailto:[EMAIL PROTECTED]] 
Sent: Friday, September 06, 2002 4:28 PM
To: [EMAIL PROTECTED]
Subject: Re: How to manage the pix 501 remotely via telnet or pdm
[7:52826]

do you have the conduit configured to allow icmp? I think the PIX blocks
icmp unless you specifically open a conduit for it. Dain mindiani
mindiani  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi  I just installed two PIX 501 with vpn tunnel over the internet for
my
 client and I would like to allow telnet and pdm from one site to the 
 other. The tunnels are up and I able to send traffic in both
directions
 but I cannot telnet into the remote Pix from my PC.I tried the
following
 command: telnet 172.16.1.2  255.255.255.255 outside  This command
would
 not allow my PC (IP address172.16.1.2) to telnet to the remote site
but I
 am able to telnet to my servers behind the PIX. i have the same
problem
 with PDM.




 Join the worlds largest e-mail service with MSN Hotmail. Click Here




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52833t=52833
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to manage the pix 501 remotely via telnet or pdm [7:52834]

2002-09-06 Thread Juan Blanco

Mark,
Connecting to the firewall from the outside was not allow in the old
versions, SSH will be the
correct solution...

Juan Blanco

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Mark W. Odette II
Sent: Friday, September 06, 2002 6:25 PM
To: [EMAIL PROTECTED]
Subject: RE: How to manage the pix 501 remotely via telnet or pdm
[7:52831]


HUH!?!?! What does ICMP have to do with Telnet or the PDM??

Mindiani- To answer your question, yes there is an alleged way of doing
what you're wanting to do.  I have not done it myself yet, but there is
an example on CCO of how to do such a configuration.

Pad Pad Pad  http://www.cisco.com/warp/public/110/pdm_vpntun.html

For Telnet, as far as I know, there isn't a way to telnet to the PIX
from the outside- it's considered a security risk by the firewall group
at Cisco, so they don't allow for it.

If you want to telnet to the PIX, create a rule on the PIX that allows
your specific Internet Host to connect to a telnet device such as a
Switch or a Unix box (or even the Telnet Server on Win2K if I dare
suggest it), and then hit the PIX from that telnet host.  Be sure and
configure the PIX with the telnet 'inside-host-ip' 255.255.255.255
inside command.

Good luck, and let us know how you do!

Mark

-Original Message-
From: Dain Deutschman [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 06, 2002 4:28 PM
To: [EMAIL PROTECTED]
Subject: Re: How to manage the pix 501 remotely via telnet or pdm
[7:52826]

do you have the conduit configured to allow icmp? I think the PIX blocks
icmp unless you specifically open a conduit for it.
Dain
mindiani mindiani  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi  I just installed two PIX 501 with vpn tunnel over the internet for
my
 client and I would like to allow telnet and pdm from one site to the
 other. The tunnels are up and I able to send traffic in both
directions
 but I cannot telnet into the remote Pix from my PC.I tried the
following
 command: telnet 172.16.1.2  255.255.255.255 outside  This command
would
 not allow my PC (IP address172.16.1.2) to telnet to the remote site
but I
 am able to telnet to my servers behind the PIX. i have the same
problem
 with PDM.




 Join the worlds largest e-mail service with MSN Hotmail. Click Here




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52834t=52834
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE R/S Questions and Answers [7:52813]

2002-09-06 Thread Wow

try this link--has the most information available in one place

www.cisco.com/ccie


 wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hello,

 Does someone know where I could download CCIE questions with answers that
 covers the Routing and Switching Exam ?

 Thanks in Advanced,

 Alaerte




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52836t=52813
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



? about floating Static route [7:52837]

2002-09-06 Thread Johnzaggat

Is there ever a need to have a single floating static default route. Does it
really matter if it's floating or not because since it's the only static
route it will always be used. I am talking in context to using it with Bri
as backup to the main link. One of the colleagues at work was insisting on
use floating static route for the Bri backup and I really couldn't make any
sense of it. Can some one clear this up for me.
Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52837t=52837
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ? about floating Static route [7:52837]

2002-09-06 Thread David j

Maybe you are thinking that a static route is always prefered to a dynamic
one because it has lower AD, that isn't true, routers check first the
longest match, and then AD. Anyway, you always could define a static route
with an AD higher than any routing protocol..
Regarding backups check this link:
http://www.cisco.com/warp/public/123/backup-main.html
Johnzaggat wrote:
 
 Is there ever a need to have a single floating static default
 route. Does it
 really matter if it's floating or not because since it's the
 only static
 route it will always be used. I am talking in context to using
 it with Bri
 as backup to the main link. One of the colleagues at work was
 insisting on
 use floating static route for the Bri backup and I really
 couldn't make any
 sense of it. Can some one clear this up for me.
 Thanks
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52839t=52837
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ? about floating Static route [7:52837]

2002-09-06 Thread Erick B.

If it's the only route to that destination, then it
doesn't really matter what the admin distance (or
cost) is for the route. 

Perhaps, he was saying this because you may have a
dynamic routing protocol (RIP, EIGRP, OSPF, etc) that
advertises a default route that uses another next-hop.
In this case, a static route using BRI with default
cost would cause all traffic destined to the default
route to use the BRI, no matter if primary line was
up. Or perhaps, just as a safety net in case one is
used in future. 

Erick

--- Johnzaggat  wrote:
 Is there ever a need to have a single floating
 static default route. Does it
 really matter if it's floating or not because since
 it's the only static
 route it will always be used. I am talking in
 context to using it with Bri
 as backup to the main link. One of the colleagues at
 work was insisting on
 use floating static route for the Bri backup and I
 really couldn't make any
 sense of it. Can some one clear this up for me.
 Thanks


__
Do You Yahoo!?
Yahoo! Finance - Get real-time stock quotes
http://finance.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52840t=52837
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Connection a zebra box to Juniper [7:52841]

2002-09-06 Thread thinkworker

I am connection a zebra colne (with X.35 cable connecting to a
Alcatel-Newbridge
2603 DTU) to Alcatel-Newbridge 3600 bandwidth manager DNIC card, the
other end is a Juniper box with E1 interface connecting to 3600 E1
interface. It is like this:

l---lv.35   l-l  l--l   ll  
lzebra  l---l2603 l--DNICl3600 box  lE1---E1lJuniper l
lboxl   lDTU  l  facel  l   ll
l---l   l-l  l--l   ll

I make a connection from the DNIC to one E1 timeslot(64K), then make
configuration on Juniper's interface for connection.Framing from Juniper
E1 to 3600 E1 is G703-nocrc4. I can see the connection is UP.

On the zebra box, I set the encapsulation to HDLC-cisco, the same as
Juniper encapsulation, but the link is never up!

I check the Juniper link status and found it is down (Level 2) while if
I made a loop from 3600 timeslot to both sides (I mean to zebra box and
Juniper box) I can see on both sides link is up (In Juniper I had to add
a no-keepalive configuration). And as I release the loop,again failed.

I check the zebra box with show interface command, found CTS is always
down, so I made a configuration on 3600 to stop the end-to-end
signaling and set it to always on, but the connection on Juniper side
is always fail.

Is there anything I can do to make the two router boxes connected? 

By the way, is there anyway I can use to check if there is anything
wrong with the layer 2 connection?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52841t=52841
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to manage the pix 501 remotely via telnet or pdm [7:52843]

2002-09-06 Thread Mark W. Odette II

Is this something new to v.6.2??

If so, then that's wonderful!  If I had of known that, I would have
suggested it first ;-)

Thanks for the info!

Mark

-Original Message-
From: Juan Blanco [mailto:[EMAIL PROTECTED]] 
Sent: Friday, September 06, 2002 7:23 PM
To: Mark W. Odette II; [EMAIL PROTECTED]
Subject: RE: How to manage the pix 501 remotely via telnet or pdm
[7:52831]

Mark,
Connecting to the firewall from the outside was not allow in the old
versions, SSH will be the
correct solution...

Juan Blanco

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Mark W. Odette II
Sent: Friday, September 06, 2002 6:25 PM
To: [EMAIL PROTECTED]
Subject: RE: How to manage the pix 501 remotely via telnet or pdm
[7:52831]


HUH!?!?! What does ICMP have to do with Telnet or the PDM??

Mindiani- To answer your question, yes there is an alleged way of doing
what you're wanting to do.  I have not done it myself yet, but there is
an example on CCO of how to do such a configuration.

Pad Pad Pad  http://www.cisco.com/warp/public/110/pdm_vpntun.html

For Telnet, as far as I know, there isn't a way to telnet to the PIX
from the outside- it's considered a security risk by the firewall group
at Cisco, so they don't allow for it.

If you want to telnet to the PIX, create a rule on the PIX that allows
your specific Internet Host to connect to a telnet device such as a
Switch or a Unix box (or even the Telnet Server on Win2K if I dare
suggest it), and then hit the PIX from that telnet host.  Be sure and
configure the PIX with the telnet 'inside-host-ip' 255.255.255.255
inside command.

Good luck, and let us know how you do!

Mark

-Original Message-
From: Dain Deutschman [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 06, 2002 4:28 PM
To: [EMAIL PROTECTED]
Subject: Re: How to manage the pix 501 remotely via telnet or pdm
[7:52826]

do you have the conduit configured to allow icmp? I think the PIX blocks
icmp unless you specifically open a conduit for it.
Dain
mindiani mindiani  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi  I just installed two PIX 501 with vpn tunnel over the internet for
my
 client and I would like to allow telnet and pdm from one site to the
 other. The tunnels are up and I able to send traffic in both
directions
 but I cannot telnet into the remote Pix from my PC.I tried the
following
 command: telnet 172.16.1.2  255.255.255.255 outside  This command
would
 not allow my PC (IP address172.16.1.2) to telnet to the remote site
but I
 am able to telnet to my servers behind the PIX. i have the same
problem
 with PDM.




 Join the worlds largest e-mail service with MSN Hotmail. Click Here




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52843t=52843
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ? about floating Static route [7:52837]

2002-09-06 Thread Johnzaggat

Thanks, I think what you said makes a lot of sense. I guess it doesn't hurt
to put admin distance on the default route just in case if another default
route is advertised via a dynamic routing protocol. I got it now. Thanks
again.
Erick B.  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 If it's the only route to that destination, then it
 doesn't really matter what the admin distance (or
 cost) is for the route.

 Perhaps, he was saying this because you may have a
 dynamic routing protocol (RIP, EIGRP, OSPF, etc) that
 advertises a default route that uses another next-hop.
 In this case, a static route using BRI with default
 cost would cause all traffic destined to the default
 route to use the BRI, no matter if primary line was
 up. Or perhaps, just as a safety net in case one is
 used in future.

 Erick

 --- Johnzaggat  wrote:
  Is there ever a need to have a single floating
  static default route. Does it
  really matter if it's floating or not because since
  it's the only static
  route it will always be used. I am talking in
  context to using it with Bri
  as backup to the main link. One of the colleagues at
  work was insisting on
  use floating static route for the Bri backup and I
  really couldn't make any
  sense of it. Can some one clear this up for me.
  Thanks


 __
 Do You Yahoo!?
 Yahoo! Finance - Get real-time stock quotes
 http://finance.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52842t=52837
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ? about floating Static route [7:52837]

2002-09-06 Thread Vicuna, Mark

There are also a number of value added functions in IOS you could
probably use instead of using a floating static route.  Since you have a
backup isdn.. you might want to try dialer-watch.. although depending on
what ios version you use there have been a few problems with this
command.  But read up about it anyway..


hth,
mark.

 -Original Message-
 From: Johnzaggat [mailto:[EMAIL PROTECTED]]
 Sent: Saturday, 7 September 2002 14:49
 To: [EMAIL PROTECTED]
 Subject: Re: ? about floating Static route [7:52837]
 
 
 Thanks, I think what you said makes a lot of sense. I guess 
 it doesn't hurt
 to put admin distance on the default route just in case if 
 another default
 route is advertised via a dynamic routing protocol. I got it 
 now. Thanks
 again.
 Erick B.  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  If it's the only route to that destination, then it
  doesn't really matter what the admin distance (or
  cost) is for the route.
 
  Perhaps, he was saying this because you may have a
  dynamic routing protocol (RIP, EIGRP, OSPF, etc) that
  advertises a default route that uses another next-hop.
  In this case, a static route using BRI with default
  cost would cause all traffic destined to the default
  route to use the BRI, no matter if primary line was
  up. Or perhaps, just as a safety net in case one is
  used in future.
 
  Erick
 
  --- Johnzaggat  wrote:
   Is there ever a need to have a single floating
   static default route. Does it
   really matter if it's floating or not because since
   it's the only static
   route it will always be used. I am talking in
   context to using it with Bri
   as backup to the main link. One of the colleagues at
   work was insisting on
   use floating static route for the Bri backup and I
   really couldn't make any
   sense of it. Can some one clear this up for me.
   Thanks
 
 
  __
  Do You Yahoo!?
  Yahoo! Finance - Get real-time stock quotes
  http://finance.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52844t=52837
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]