MPLS on 2500 - the final chapter [7:56375]

2002-10-27 Thread Dennis Laganiere
This weekend I've had a chance to spend some more time with the
experimental
IOS version that supports MPLS for 2500's, and have been sucessful loading it
on five routers.  I've done quite a few MPLS configurations from various
books, and it seems to work great.  I haven't seen any flacky behavior from
the routers at all.  I updated the instructions on www.laganiere.net to
include a text capture of the process of loading it, and a basic
configuration. I hope some people find it useful...

Thanks...

--- Dennis




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56375t=56375
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Tag-switching and MPLS interface commands [7:56376]

2002-10-27 Thread Dennis Laganiere
Thank you to all the people who responded to my query; I appreciate the
help.

--- Dennis

- Original Message -
From: 
To: Dennis Laganiere 
Sent: Saturday, October 26, 2002 7:33 PM
Subject: Re: Tag-switching and MPLS interface commands


 no difference, they are functionally equivalent. tag-
 switching ip command is used as a cisco proprietary
 protocol available in IOS 11.1 as well as 12.0 and all
 subsequent releases. mpls ip is IETF standard
 available in 12.2T release.

 Bal--
  Does anybody know the differences between the the interface commands
  tag-switching ip and mpls ip (or better yet, have a good URL for
it)?  On
  both my 2610 and 2500's, when I enter the mpls ip command, the
  tag-switching ip command appears in my configuration.
 
  I've been through both of my MPLS books and haven't seen how they
differ...
 
  Thanks...
 
  --- Dennis




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56376t=56376
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Tag-switching and MPLS interface commands [7:56368]

2002-10-27 Thread YASSER ALY
1- Pre-standard implementation of  MPLS on IOS platforms was called tag
switching. All configuration, debugging, and monitoring commands used to
configure MPLS on IOS therefore used the tag-switching keyword

 

 2-  tag-switching ip  appears in the configuration even when you type
 mpls ip . This is for

backward compatability with older IOS versions incase you needed to
downgrade the version for any reason.

 

3- tag-switching default is TDP, while MPLS is LDP ( you can change this
if u want ).

 

4- tag-switching is Cisco propriarity while MPLS is the IETF standard.

Other than that commands can be used interchangable.

 

Regards,

Yasser

From: Dennis Laganiere  Does anybody know the differences between
the the interface commands tag-switching ip and mpls ip (or better
yet, have a good URL for it)? On both my 2610 and 2500's, when I enter
the mpls ip command, the tag-switching ip command appears in my
configuration.  I've been through both of my MPLS books and haven't
seen how they differ...  Thanks...  --- Dennis Message
Posted at: http://www.groupstudy.com/form/read.php?f=7i=56368t=56368
-- FAQ, list archives,
and subscription info: http://www.groupstudy.com/list/cisco.html Report
misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Protect your PC - Click here for McAfee.com VirusScan Online




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56377t=56368
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



O.T: CCIE Lab Partner - England. [7:56378]

2002-10-27 Thread Pierre-Alex Guanel
Anyone studying for their CCIE LAB in the Manchester / Liverpool area?

I have gears  books. Let's talk offline: [EMAIL PROTECTED]

Thanks,

Pierre-Alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56378t=56378
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: trying a third time [7:56293]

2002-10-27 Thread B.J. Wilson
 CCNP-to-be

Makes me think of Free to Be CCNP...

There's a land that I see,
Where the packets flow free...

;-)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56379t=56293
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CSS11000 (Arrowpoint) [7:56380]

2002-10-27 Thread Munzir Khan
Dear gurus, 

Can anybody tell me how to securely implement SNMP on CSS11000 (formerly
known as Arrowpoint), I want to allow only one IP address to receive SNMP
information, please help if you can.

like what you do in Router with access-list

Thanks


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56380t=56380
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Dreadful writing on CCNP support exam. [7:56237]

2002-10-27 Thread Joshua Barnes
I thought the routing exam was the worst offender for ambiguity.
CIT a close second.

-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody;groupstudy.com] 
Sent: Saturday, October 26, 2002 2:55 PM
To: [EMAIL PROTECTED]
Subject: RE: Dreadful writing on CCNP support exam. [7:56237]

I couldn't agree with you more, I failed by six points (guess I need
more
quality studying time). Some questions had me asking what are they
asking
here the meaning of life.

Not that I'm sour grapes but yes the wording is very vague at best.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56381t=56237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ack attack or config prob? [7:56341]

2002-10-27 Thread gogarty
Hi Garrett,

There are two DOS attacks that I know of that use ACKS called stream.c and
raped.c, the stream.c sends ACK packets to the target with random sequence
numbers and source IP's.  The raped.c sends ACKs with spoofed source IP's
but I believe the sequence numbers are the same.

C
- Original Message -
From: Garrett Allen 
To: 
Sent: Sunday, October 27, 2002 3:14 AM
Subject: Re: ack attack or config prob? [7:56341]


 the filter doesn't like special characters.  sorry.  here is another try
 without the less than symbol:

 priscilla,

 the bursts were less than 2mins each in duration as i recall.  they
occurred
 sporatically through the day.  i have traces and i'll look for more
precise
 timeframes later tonite.  within each burst the packets were from the same
 ip address.  there were at least 2 unique non-contiguous ip addresses
 involved and 1 repeated a burst at least once that we tracked (i.e. at
least
 2 bursts of 100k packets).

 the trace reveals acks and fin acks; no syn or syn ack's noted (my
reference
 to syn acks in the prior email was the only reference i could find on the
ms
 site that discussed their retry implementation, which could cause this if
it
 was unlimited).  firewalls are in place which is why i was going down the
 path of a misconfiguration on our servers.  in theory the firewall vendor
 states that the firewall is doing a stateful inspection and we did see
some
 evidence of packets being dropped at the firewall - but not all.  if the
 session was not previously opened the firewall should drop the ack and fin
 ack's as they are not a valid start of session transmission.  each burst
 contained the same sequence and ack numbers.

 i wondered at first if it was our servers that was initiating this
behavior
 pattern.  we did reboot the servers.  urban legend has it (i.e. my
neighbor
 has a friend whose wife's cousin said ...) that unexpected terminations of
 outlook web access can cause this kind of behavior to occur, but it is
just
 legend.  an examination of the trace doesn't point in that direction but i
 need to spend more time reviewing them.  and the problem reoccurred after
 the reboots.

 like i said i think it is an interesting issue because there are so many
 possibilities and it forces one to think about all the many things that
can
 go wrong.

 thanks for your insights and thoughtful questions.

 - Original Message -
 From: Garrett Allen
 To:
 Sent: Saturday, October 26, 2002 9:59 PM
 Subject: Re: ack attack or config prob? [7:56341]


  priscilla,
 
  the bursts were
  To:
  Sent: Saturday, October 26, 2002 7:40 PM
  Subject: RE: ack attack or config prob? [7:56341]
 
 
   It sounds like you were under attack, though it's hard to say for
sure.
 I
   doubt that it's a misconfig on your end, though. It could be a
misconfig
  at
   the other server, but probably not. I don't think you can set the
  parameters
   that badly!? :-)
  
   It sounds like a DoS attack because of the volume of 100,000 packets.
  What's
   the timeframe, though? You said burst so I assume pretty quick.
  
   Did the problem happen just once or has it reoccured?
  
   What do any relevant logs show? Do you have a firewall or Intrusion
   Detection System that logs info? How about the server itself? Does it
 show
   anything in its log?
  
   Were all the packets to the server?
  
   Were they ACKs or SYN ACKs? You mentioned both.
  
   Were they in response to something your server sent?
  
   Were they always the same ACK number?
  
   What were the port numbers? You mentioned e-mail, so were the packets
to
   port 25 for SMTP? SMTP implementations used to have many security
flaws.
   Hopefully those would be fixed in a modern OS, but you never know.
  
   Usually, DoS attacks are SYNs, but there are probably ones that use
ACKs
  or
   SYN ACKs too. A search on Google might reveal more info.
  
   Anyway, I think you did the right thing by getting the ISP security
 folks
   involved. Keep us posted, unless they recommend that you keep it
quiet.
  
   ___
  
   Priscilla Oppenheimer
   www.troubleshootingnetworks.com
   www.priscilla.com
  
   Garrett Allen wrote:
   
heys,
   
ran into something interesting today.  not sure if it is a dos
attack or if it
indicates an ip stack misconfig. here is the symptom:
   
periodically through the day today we received 100,000 packet
bursts on a t-1
circuit.  this is a name-brand provider.  when the burst occurs
it is from the
same ip address.  on some bursts the packets are all acks.  on
others they are
all fin acks.  they are directed at our email servers.  when
they occur the
packets in a burst are all sourced from the same ip address.
in the one case
where we resolved the ip address back it was another orgs email
server.  based
on the router interface stats the traffic is coming from the
outside and is
not an internal broadcast 

Re: Dreadful writing on CCNP support exam. [7:56237]

2002-10-27 Thread Steve Ringley
When you have to make simple facts difficult, ambiguity is the best way!  I
took my CCNP exams just before the switch, and the only way I could see to
make them more difficult would be to make the questions more ambiguous.

Joshua Barnes  wrote in message
news:200210271331.NAA16123;groupstudy.com...
I thought the routing exam was the worst offender for ambiguity.
CIT a close second.

-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody;groupstudy.com]
Sent: Saturday, October 26, 2002 2:55 PM
To: [EMAIL PROTECTED]
Subject: RE: Dreadful writing on CCNP support exam. [7:56237]

I couldn't agree with you more, I failed by six points (guess I need
more
quality studying time). Some questions had me asking what are they
asking
here the meaning of life.

Not that I'm sour grapes but yes the wording is very vague at best.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56383t=56237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Dreadful writing on CCNP support exam. [7:56237]

2002-10-27 Thread Howard C. Berkowitz
At 1:31 PM + 10/27/02, Joshua Barnes wrote:
I thought the routing exam was the worst offender for ambiguity.
CIT a close second.


The ultimate ambiguity would be if you couldn't decide which of the 
two was worse.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56384t=56237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How to measure the amount of traffic on a router? [7:56385]

2002-10-27 Thread Vitaliy Vishnevskiy
Folks,
I am looking for some kind of inexpensive software package that could be
programmed to graph the traffic volume going through a router.  Thanks
 
--
Vitaliy Vishnevskiy
System Engineer, CCDP, CCNP, Cisco Security Specialist 1, MCSE
ShoreGroup, Inc
460 West 35th Street
New York, NY  10001 
Phone: (212) 736-2915
Mobile: (917) 816-0753
Fax: (425) 955-1485
E-mail: [EMAIL PROTECTED]
  

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of Vitaliy Vishnevskiy ([EMAIL PROTECTED]).vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56385t=56385
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PCMCIA Flash [7:53866]

2002-10-27 Thread Gaz
In article , [EMAIL PROTECTED] 
says...
 Hello,
 
 W2K and XP recognize CISCO flash cards without any problems, what do you
 need - drivers, which you can download from internet. As soon as drivers
 will be installed you can start to use your flash card as a removable HD.
 
 Regards
 Igor
 
 Steven Greeno  wrote in message
 news:200209222114.VAA12315;groupstudy.com...
  Is there any way to copy images to the PC-Card based Flash using a
laptop,
  either with a special card reader or using software and the PC-Card slot
 on
  a laptop?  I am just curious if I could copy IOS images for distribution
 to
  the Flash card using my laptop then take card to the devices and load IOS
  version.  (In situations where TFTP isn't feasible or the best option.)
 
  Thanks.
  steven
Are you saying that there is some PC software which will put them in the 
right format for Cisco.
I'm sceptical, but would be good.


Gaz




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56386t=53866
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to measure the amount of traffic on a router? [7:56385]

2002-10-27 Thread Elijah Savage III
Look into MRTG/SNMP

-Original Message-
From: Vitaliy Vishnevskiy [mailto:vitaliy;shoregroup.com] 
Sent: Sunday, October 27, 2002 3:44 PM
To: [EMAIL PROTECTED]
Subject: How to measure the amount of traffic on a router? [7:56385]


Folks,
I am looking for some kind of inexpensive software package that could be
programmed to graph the traffic volume going through a router.  Thanks
 
--
Vitaliy Vishnevskiy
System Engineer, CCDP, CCNP, Cisco Security Specialist 1, MCSE
ShoreGroup, Inc 460 West 35th Street New York, NY  10001 
Phone: (212) 736-2915
Mobile: (917) 816-0753
Fax: (425) 955-1485
E-mail: [EMAIL PROTECTED]
  

[GroupStudy.com removed an attachment of type text/x-vcard which had a
name of Vitaliy Vishnevskiy ([EMAIL PROTECTED]).vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56387t=56385
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pix non-Rfc networks. [7:56347]

2002-10-27 Thread Robert
To answer the question asked by Gaz, the router will always send the packet
to the route with the most specific mask specified.  So, in your example, it
will go to the default gateway because the route you added has the most
specific mask possible (/32).

Gaz  wrote in message
news:200210262249.WAA18680;groupstudy.com...
 In article ,
 [EMAIL PROTECTED] says...
  Hello,
 
  I was just reading this document,from the following link
  http://www.cisco.com/warp/customer/110/8.html I have attached the Pdf
file
  of the same for your convinence :-).
 
 
  now coming to my doubt.
 
  If i have a network say like 192.5.2.0/24 inside the pix (connecting to
  internet) Does it mean that all the sites with 192.5.2.0/24 would not be
  accessible to the inside network ??
 
  thanks and regards,
  Murali
 

 Yes, but it's not limited to the Pix.

 If your internal network is using one subnet, your devices will never be
 able to get to devices on the Internet using addresses from the same
 subnet.

 When your machine looks at the destination address, it thinks it is on
 its local network (layer 2) and will not even bother going to the
 default gateway for it.

 I've done the same thing by 'fat fingering' the mask to encapsulate more
 than the intended addresses (255.255.0.0 instead of 255.255.255.0 for
 instance). If the destination address would normally fall outside your
 subnet, but you stuffed up the mask and now it is included, your machine
 doesn't bother going to the default gateway to find it.

 Can I chip in with a question for everyone now?

 If you apply more specific routes to all devices for an address which
 should appear on your local subnet, will it then try the routed path to
 the device.

 eg Machine addressed 100.100.100.100 255.255.255.0
 route add 100.100.100.10 mask 255.255.255.255 [default gateway]

 Not that you'd want to do it, but just wondering.


 Cheers,

 Gaz




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56388t=56347
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Thanks God... [7:56389]

2002-10-27 Thread Juan Blanco
Team,
This morning I was able to pass the DQoS test, wow...what a rideThe test
is very hard if you don't have
the Course Book and the reason is because all the information need for the
test is very well put and organized by the course. All the information
required for the test is on Cisco's web but is very hard to find it, the
test follow the blueprint by the book. I want to give my special thanks to
Chuck Larrieu (The Long and Winding Road) for his support. I really
recommend this test for those who are in the process of taking the lab. The
following link will take you where you can
find all the information need for this test except the Course Book (fully
recommended). Well now to get back to the books for the CVOICE (another
animal) test.

A good starting point for the QoS on CCO is the following:
DQoS 9E0-601
Cisco AVVID QoS Guide
http://www.cisco.com/univercd/cc/td/doc/product/voice/ip_tele/avvidqos/index
.htm
Cisco IOS QoS Solutions Guide 12.2
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos
_c/
http://www.cisco.com/warp/public/788/voice-qos/voip-ov-fr-qos.html ...
http://www.cisco.com/univercd/cc/td/doc/cisintwk/intsolns/qossol/qosvoip.htm
http://www.cisco.com/warp/customer/788/voip/delay-details.html.

Juan Blanco

The greatest glory in living lies not in never falling,
 but in rising every time we fall .
 -- Nelson Mandela





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56389t=56389
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pix non-Rfc networks. [7:56347]

2002-10-27 Thread gogarty
I don't think he is talking specifically about routers but about PC's on the
LAN behind the PIX.  I'm fairly positive a PC will do a logical AND of the
destination IP, come up with a network address, compare that against it's
own network address, deduce that the IP must be local and send a layer two
broadcast for the MAC associated with the IP -- therefore said host will not
need to consult a routing table...

source NAT on incoming addresses, use an ALIAS type function (I believe
version 6.2 code supports destination NAT) to assign the web servers ect on
the outside network (with same IP range as inside) another address range as
they come in...

C
- Original Message -
From: Robert 
To: 
Sent: Sunday, October 27, 2002 9:33 PM
Subject: Re: Pix  non-Rfc networks. [7:56347]


 To answer the question asked by Gaz, the router will always send the
packet
 to the route with the most specific mask specified.  So, in your example,
it
 will go to the default gateway because the route you added has the most
 specific mask possible (/32).

 Gaz  wrote in message
 news:200210262249.WAA18680;groupstudy.com...
  In article ,
  [EMAIL PROTECTED] says...
   Hello,
  
   I was just reading this document,from the following link
   http://www.cisco.com/warp/customer/110/8.html I have attached the Pdf
 file
   of the same for your convinence :-).
  
  
   now coming to my doubt.
  
   If i have a network say like 192.5.2.0/24 inside the pix (connecting
to
   internet) Does it mean that all the sites with 192.5.2.0/24 would not
be
   accessible to the inside network ??
  
   thanks and regards,
   Murali
  
 
  Yes, but it's not limited to the Pix.
 
  If your internal network is using one subnet, your devices will never be
  able to get to devices on the Internet using addresses from the same
  subnet.
 
  When your machine looks at the destination address, it thinks it is on
  its local network (layer 2) and will not even bother going to the
  default gateway for it.
 
  I've done the same thing by 'fat fingering' the mask to encapsulate more
  than the intended addresses (255.255.0.0 instead of 255.255.255.0 for
  instance). If the destination address would normally fall outside your
  subnet, but you stuffed up the mask and now it is included, your machine
  doesn't bother going to the default gateway to find it.
 
  Can I chip in with a question for everyone now?
 
  If you apply more specific routes to all devices for an address which
  should appear on your local subnet, will it then try the routed path to
  the device.
 
  eg Machine addressed 100.100.100.100 255.255.255.0
  route add 100.100.100.10 mask 255.255.255.255 [default gateway]
 
  Not that you'd want to do it, but just wondering.
 
 
  Cheers,
 
  Gaz




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56390t=56347
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Dreadful writing on CCNP support exam. [7:56237]

2002-10-27 Thread Roberts, Larry
Are you sure you haven't taken any of the Cisco Exams ? You almost nailed it
exactly.
I passed all the exams with room to spare so Im not bitter, but I found
myself trying to figure out which answer was less wrong than the
others

:)

Thanks

Larry
 

-Original Message-
From: Howard C. Berkowitz [mailto:hcb;gettcomm.com] 
Sent: Sunday, October 27, 2002 12:37 PM
To: [EMAIL PROTECTED]
Subject: RE: Dreadful writing on CCNP support exam. [7:56237]


At 1:31 PM + 10/27/02, Joshua Barnes wrote:
I thought the routing exam was the worst offender for ambiguity. 
CIT a close second.


The ultimate ambiguity would be if you couldn't decide which of the 
two was worse.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56391t=56237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Thanks God... [7:56389]

2002-10-27 Thread Raul F. Fernandez
Bien hecho Juan :)

Raul

-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody;groupstudy.com]On Behalf Of
Juan Blanco
Sent: Sunday, October 27, 2002 7:13 PM
To: [EMAIL PROTECTED]
Subject: Thanks God... [7:56389]


Team,
This morning I was able to pass the DQoS test, wow...what a rideThe test
is very hard if you don't have
the Course Book and the reason is because all the information need for the
test is very well put and organized by the course. All the information
required for the test is on Cisco's web but is very hard to find it, the
test follow the blueprint by the book. I want to give my special thanks to
Chuck Larrieu (The Long and Winding Road) for his support. I really
recommend this test for those who are in the process of taking the lab. The
following link will take you where you can
find all the information need for this test except the Course Book (fully
recommended). Well now to get back to the books for the CVOICE (another
animal) test.

A good starting point for the QoS on CCO is the following:
DQoS 9E0-601
Cisco AVVID QoS Guide
http://www.cisco.com/univercd/cc/td/doc/product/voice/ip_tele/avvidqos/index
.htm
Cisco IOS QoS Solutions Guide 12.2
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos
_c/
http://www.cisco.com/warp/public/788/voice-qos/voip-ov-fr-qos.html ...
http://www.cisco.com/univercd/cc/td/doc/cisintwk/intsolns/qossol/qosvoip.htm
http://www.cisco.com/warp/customer/788/voip/delay-details.html.

Juan Blanco

The greatest glory in living lies not in never falling,
 but in rising every time we fall .
 -- Nelson Mandela





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56392t=56389
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Multiple IP addresses [7:56393]

2002-10-27 Thread Azhar Teza
In Windows 2000/NT, it allows to assign multiple  IP addresses to a single
NIC Card.  Whether you can assign multiple ip addresses from the same subnet
orfrom  the  different Subnets.  My question is what is the advantage of
assigning (2) IP addresses to the same NIC card.  If we do that with (2)NIC
cards, then it is understandable that you are making your Server
Multihomed/Router, but what is the advantage of assigning (2) ip addresses
to the same card besides in Web Servers to run multiple websites through
Server. I know somebody is doing that to connect (2) subnets to Cisco
routers.  The guy has assignedan ip address 192.168.10.10/24 to a W2K's NIC
Card, and in the same NIC card he has assigned a logical IPaddress
192.168.40.5/24.

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56393t=56393
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Multiple IP addresses [7:56393]

2002-10-27 Thread Vitaliy Vishnevskiy
Same thing as secondary ip address on a router.  Let's say you have 2 ip
subnets within the same LAN.  All you are doing is creating an IP
presence on an IP subnet. You could also be migrating to a new IP
scheme, you may want the same server to host multiple applications and
you may want to filter certain traffic by destination IP address on the
upstream firewall.  The possibilities are really endless.

-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody;groupstudy.com] On Behalf Of
Azhar Teza
Sent: Sunday, October 27, 2002 10:11 PM
To: [EMAIL PROTECTED]
Subject: Multiple IP addresses [7:56393]

In Windows 2000/NT, it allows to assign multiple  IP addresses to a
single
NIC Card.  Whether you can assign multiple ip addresses from the same
subnet
orfrom  the  different Subnets.  My question is what is the advantage of
assigning (2) IP addresses to the same NIC card.  If we do that with
(2)NIC
cards, then it is understandable that you are making your Server
Multihomed/Router, but what is the advantage of assigning (2) ip
addresses
to the same card besides in Web Servers to run multiple websites through
Server. I know somebody is doing that to connect (2) subnets to Cisco
routers.  The guy has assignedan ip address 192.168.10.10/24 to a W2K's
NIC
Card, and in the same NIC card he has assigned a logical IPaddress
192.168.40.5/24.

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56394t=56393
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How many VPN connections supported? [7:56395]

2002-10-27 Thread Dain Deutschman
Hi group,

Could someone point me to a resource that gives statistics on how many VPN
connections are supported by some of the access routers? ( such as 800,
1600, 1700, 2600 series)

Thanks!

Dain




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56395t=56395
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF point-to-multipoint 32 mask [7:56136]

2002-10-27 Thread Jenny McLeod
The Long and Winding Road wrote:
[snipped]
  area 0 range 172.16.1.0 255.255.255.0 area not working on ABR
 either
 
 
 CL:  well, area 0 range is an illegal command. you may be able
 to enter it,
 but it does nothing. the area range command is design to
 summarize non
 backbone routes into the backbone. if you think aout it, there
 is probably
 not a real good reaso for backbone routes to be summarized
 
 
JMcL: Since when??
I use the area 0 range blah blah command (without the area at the end, if
that was supposed to be part of the command above), and it certainly doesn't
do nothing.  As far as I've seen, it works in exactly the same way as area
anything else range blah blah.
Why not summarise backbone routes for the same reasons as summarising
non-backbone routes - reduce routing tables, database sizes, route change
propagations etc?

JMcL



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56396t=56136
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Dreadful writing on CCNP support exam. [7:56237]

2002-10-27 Thread Jenny McLeod
I haven't taken any Cisco exams lately so can't comment on the wording, but
to be honest trying to figure out which answer is less wrong sounds like a
lot of my day to day work...

JMcL

Roberts, Larry wrote:
 
 Are you sure you haven't taken any of the Cisco Exams ? You
 almost nailed it
 exactly.
 I passed all the exams with room to spare so Im not bitter, but
 I found
 myself trying to figure out which answer was less wrong than
 the
 others
 
 :)
 
 Thanks
 
 Larry
  
 
 -Original Message-
 From: Howard C. Berkowitz [mailto:hcb;gettcomm.com] 
 Sent: Sunday, October 27, 2002 12:37 PM
 To: [EMAIL PROTECTED]
 Subject: RE: Dreadful writing on CCNP support exam. [7:56237]
 
 
 At 1:31 PM + 10/27/02, Joshua Barnes wrote:
 I thought the routing exam was the worst offender for
 ambiguity.
 CIT a close second.
 
 
 The ultimate ambiguity would be if you couldn't decide which of
 the
 two was worse.
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56397t=56237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: run VoIP on a frame network at BIR instead of [7:55833]

2002-10-27 Thread Jenny McLeod
John,
Yes, and No.  We still run IPX over our network (don't ask).

JMcL
John Brandis wrote:
 
 Hi Jenny,
 
 Is your carrier Telstra ?
 
 Do you use Telstra TPIPS for your cloud/next hop router ?
 
 John
 Sydney, Australia
 
 -Original Message-
 From: Jenny McLeod [mailto:nobody;groupstudy.com] 
 Sent: Wednesday, October 23, 2002 9:17 AM
 To: [EMAIL PROTECTED]
 Subject: Re: run VoIP on a frame network at BIR instead of
 [7:55833]
 
 
 Depends on the frame switch, I think.
 I asked our telco about this as well (quite a while ago), and
 they said that
 on entry to the cloud, they automatically reset any DE bits
 set. So either
 way, your scheme isn't likely to work, but how much of a
 negative effect it
 has will depend on whether your telco drops entering DE packets
 or just
 resets the DE bits.
 
 JMcL
 Steven A. Ridder wrote:
  
  This was Cisco's old theory.  In theory, it would work, but
 in
  reality, if the frame switch saw a packet come into it's
 ingress
  interface with the
  packet already marked DE, it will drop it because it was
  unexpected.
  
  I asked the telco's your question last year and that's the
 answer they
  gave me.  Cisco seems to have abandoned that theory a while
 ago,
  which is
  probably why you haven't seen it written anywhere.
  
  
  dj  wrote in message
 news:200210171534.PAA26762;groupstudy.com...
   Running a VoIP application over a frame-relay network with
  256k CIR and
   512k BIR.  From the LLQ docs I reviewed, to guarantee good
  voice
   quality, traffic shaping all frame traffic to CIR is
  recommended along
   with LLQ of voice packets.
  
   Would like to take advantage of BIR bandwidth and still
  guarantee voice
   packets are not dropped by the frame relay switch network
 when
   congestion occurs.  Here are my thoughts:
  
   What if the router were to pre-mark all data packets as
  Discard
   Eligible (DE) on the outbound serial interface connected to
  the frame
   network.  Voice packets would NOT be marked DE.  Then run up
  to BIR
   rates with LLQ prioritization for voice. Would the carrier
  frame network
   switches drop only the pre-marked DE data packets (by the
  router) when
   congestion occurred and NOT drop any voice packets?  I
  haven't found any
   Cisco links that addressed QOS in this fashion.  Any links
 on
  this topic
   would be greatly appreciated.
  
   The objective is to squeeze more bandwidth (BIR vs CIR) out
  of your
   frame relay network without dropping any voice packets. Why
  would this
   not work and what are the caveats?
  
   regards,
   dj
 **
 
 visit http://www.solution6.com
 
 UK Customers - http://www.solution6.co.uk
 
 *
 This email message (and attachments) may contain information
 that is confidential to Solution 6. If you are not the intended
 recipient you cannot use, distribute or copy the message or
 attachments.  In such a case, please notify the sender by
 return email immediately and erase all copies of the message
 and attachments.  Opinions, conclusions and other information
 in this message and attachments that do not relate to the
 official business of Solution 6 are neither given nor endorsed
 by it.
 *
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56398t=55833
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Dreadful writing on CCNP support exam. [7:56237]

2002-10-27 Thread John Brandis
Trying to work out what answer/statement is least wrong, is what I do all
day whilst listening to my tech support staff. Its amazing but you get what
you pay for.

Jb


-Original Message-
From: Jenny McLeod [mailto:nobody;groupstudy.com] 
Sent: Monday, October 28, 2002 3:42 PM
To: [EMAIL PROTECTED]
Subject: RE: Dreadful writing on CCNP support exam. [7:56237]


I haven't taken any Cisco exams lately so can't comment on the wording, but
to be honest trying to figure out which answer is less wrong sounds like a
lot of my day to day work...

JMcL

Roberts, Larry wrote:
 
 Are you sure you haven't taken any of the Cisco Exams ? You almost 
 nailed it exactly.
 I passed all the exams with room to spare so Im not bitter, but
 I found
 myself trying to figure out which answer was less wrong than
 the
 others
 
 :)
 
 Thanks
 
 Larry
  
 
 -Original Message-
 From: Howard C. Berkowitz [mailto:hcb;gettcomm.com]
 Sent: Sunday, October 27, 2002 12:37 PM
 To: [EMAIL PROTECTED]
 Subject: RE: Dreadful writing on CCNP support exam. [7:56237]
 
 
 At 1:31 PM + 10/27/02, Joshua Barnes wrote:
 I thought the routing exam was the worst offender for
 ambiguity.
 CIT a close second.
 
 
 The ultimate ambiguity would be if you couldn't decide which of the
 two was worse.
**

visit http://www.solution6.com

UK Customers - http://www.solution6.co.uk

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.
*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56399t=56237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Thanks God... [7:56389]

2002-10-27 Thread Dennis Laganiere
Excellent work... Congratulations!!!

--- Dennis
- Original Message -
From: Juan Blanco 
To: 
Sent: Sunday, October 27, 2002 4:12 PM
Subject: Thanks God... [7:56389]


 Team,
 This morning I was able to pass the DQoS test, wow...what a rideThe
test
 is very hard if you don't have
 the Course Book and the reason is because all the information need for the
 test is very well put and organized by the course. All the information
 required for the test is on Cisco's web but is very hard to find it, the
 test follow the blueprint by the book. I want to give my special thanks to
 Chuck Larrieu (The Long and Winding Road) for his support. I really
 recommend this test for those who are in the process of taking the lab.
The
 following link will take you where you can
 find all the information need for this test except the Course Book (fully
 recommended). Well now to get back to the books for the CVOICE (another
 animal) test.

 A good starting point for the QoS on CCO is the following:
 DQoS 9E0-601
 Cisco AVVID QoS Guide

http://www.cisco.com/univercd/cc/td/doc/product/voice/ip_tele/avvidqos/index
 .htm
 Cisco IOS QoS Solutions Guide 12.2

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos
 _c/
 http://www.cisco.com/warp/public/788/voice-qos/voip-ov-fr-qos.html ...

http://www.cisco.com/univercd/cc/td/doc/cisintwk/intsolns/qossol/qosvoip.htm
 http://www.cisco.com/warp/customer/788/voip/delay-details.html.

 Juan Blanco
 
 The greatest glory in living lies not in never falling,
  but in rising every time we fall .
  -- Nelson Mandela
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56400t=56389
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]