Re: odd & even # IPs on an ACL [7:56551]

2002-10-31 Thread Tim Metz
that joke deserves it's own thread ;-)

Tim

""Jennifer Mellone""  wrote in message
news:200210310718.HAA06644@;groupstudy.com...
> Cute!
>
> So I'm thinking that tomorrow (Halloween) I'll put on a subnet mask.
> It will be 255.255.0.0, and the two 0's will have little holes in the
middle
> for my eyes ;-)
>
> - Jennifer Mellone




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56578&t=56551
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP Switching [7:56559]

2002-10-31 Thread Symon Thurlow
I can't speak from a great deal of experience here, but set based
switches seem easier to configure, because you can change settings for
multiple ports with one command.

For example, on a CAT5K, to change duplex speed to full on a whole
module (12 port 10bFL) I type

Set port duplex 3/1-12 full

And it sets it on all 12 interfaces. Doing this in an IOS based switch
would require the use of notepad and cut and paste :)

It would be a shame if Cisco did migrate away from the set based
language.

What do others think?

-Original Message-
From: John Brandis [mailto:john.brandis@;solution6.com] 
Sent: 30 October 2002 23:44
To: [EMAIL PROTECTED]
Subject: CCNP Switching [7:56559]


Hi all,
 
in relation to the commecnts on the test, I have not seen a set based
switch for almost a year now, however I look at some of my SYNGRESS CCNP
Switching book, which makes a funny comment on how "ALL" core switchs
are set based. I would like to see the tests coming up in the future, as
I feel (and this is up for debate) that a certain degree of emphasys
must be placed upon IOS based commands at the core, as thats what I
expect to see on these platforms in the future.
 
What you think ?


**

visit http://www.solution6.com

UK Customers - http://www.solution6.co.uk

*

The Solution 6 Group is on the move. As of Monday 25 November, our
Sydney HQ will be located at

Level 14, 383 Kent Street, Sydney NSW 2002

General Phone:(02) 9278 0666
General Fax: (02) 9278 0555

*
This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you
cannot use, distribute or copy the message or attachments.  In such a
case, please notify the sender by return email immediately and erase all
copies of the message and attachments.  Opinions, conclusions and other
information in this message and attachments that do not relate to the
official business of Solution 6 are neither given nor endorsed by it.
*
=

 This email has been content filtered and
 subject to spam filtering. If you consider
 this email is unsolicited please forward
 the email to [EMAIL PROTECTED] and
 request that the sender's domain be
 blocked from sending any further emails.

=




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56579&t=56559
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fwd: RE: Yahoo messanger traffic can be seen/blocked? [7:56571]

2002-10-31 Thread Mr piyush shah
Mr. Paul
Thanks for answer.In connection with this there is one
more querry which I would like to get clarify on..
Is there any software download using which I can see
whether who is chatting ? Can you pls let me know the
ulitity which does this ?
Thank again
Piyush
Note: forwarded message attached. 


Missed your favourite TV serial last night? Try the new, Yahoo! TV.
   visit http://in.tv.yahoo.com
X-Apparently-To: [EMAIL PROTECTED] via web8007.mail.in.yahoo.com;
  31 Oct 2002 11:15:39 +0500 (IST)
X-Track: 1: 100
Return-Path: 
Received: from 195.202.64.34  (EHLO mx1.uunet.co.ke) (195.202.64.34) by
  mta102.in.mail.yahoo.com with SMTP; 31 Oct 2002 11:15:38 +0500 (IST)
Received: from [195.202.93.185] (helo=mserverlab) by mx1.uunet.co.ke
  with smtp (Exim 3.36 #1) id 18785h-000Elz-00; Thu, 31 Oct 2002
  08:42:01 +0300
From: "Paul Msava" 
To: "Mr piyush shah" , 
Subject: RE: Yahoo messanger traffic can be seen/blocked? [7:56571]
Date: Thu, 31 Oct 2002 08:46:11 +0300
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
In-Reply-To: 
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
Content-Length: 632

block socks port 1080



-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody@;groupstudy.com]On Behalf Of
Mr piyush shah
Sent: Thursday, October 31, 2002 6:58 AM
To: [EMAIL PROTECTED]
Subject: Re: Yahoo messanger traffic can be seen/blocked? [7:56571]


Hi all
I am network administrator and in our network there
are people who use Yahoo messangers.I have few
querries pertaining to this as under.
1. Is there any tool by which I can see whether who is
chating ?
2. Can I see the content of his chating using that
tool ?
3. If I want to block this  yahoo messanger in my
firewall (I use checkpoint 2000 ) what is the step to
be taken ?


Thanks in advance


Missed your favourite TV serial last night? Try the new, Yahoo! TV.
   visit http://in.tv.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56580&t=56571
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Another Internet Draft of Interest [7:56560]

2002-10-31 Thread Nigel Taylor
Howard,
  It would seem that there's something wrong with the links in
that I'm unable to access either of the drafts you noted.  It's also quite
possible that I simply didn't click on the link hard enough :-)  Oh, I
know...much like a recent Cox communications commercial,  maybe I simply
reached the end of the Internet. :->

thanks
Nigel

- Original Message -
From: "Howard C. Berkowitz" 
To: 
Sent: Thursday, October 31, 2002 1:14 AM
Subject: Re: Another Internet Draft of Interest [7:56560]


> "Nigel Taylor" All,
> >  I just got through some of the presentations linked from the recent
> >nanog
> >meeting.  The draft in question was presented by Henk Uijterwaal titled
> "New
> >Services  from RIPE NCC.
> >
> >There is also this link on the nanog list to his latest draft.
> >
> >http://www.ripe.net/home/henk/draft-ietf-ippm-owmetric-as-01.txt
> >
> >I was just thinking about some of our current tools like ping, hping, and
> >traceroute which measures round trip delay vs one-way delay.  RFC 2679
> >discusses numerous reasons for calculating  one-way delay, however would
> >tools
> >like ping and traceroute with the existence of ping6 and traceroute6 be
> >rfc2679 compliant.  I've not done any research at this point but, would
> >operational tools in everyday use benefit from this new active
measurement?
> >
> >Here's a pretty good link that explains the concept for the "normal"
folks
> >like myself.
>
> There are several problems with using timestamped measurement in the
> router itself.  Some of these may be reduced with IPv6, but, for
> others, external passive hardware or special router hardware seems
> necessary.  See our BGP convergence drafts,
> http://www.ietf.org/internet-drafts/draft-ietf-bgpconv-03.txt and
> http://www.ietf.org/internet-drafts/draft-ietf-bgpbas-00.txt
>
> First, routers may not give sufficient precision in measurement,
> because they rate-limit ICMP to protect against ICMP floods, or
> simply don't prioritize it highly.  I mention IPv6 because
> authenticated source addresses may be used without fear of denial of
> service.
>
> Second, the router may or may not have the capacity to capture and
> store a statistically valid amount of data. NetFlow data export, for
> example, summarizes to a degree. If you could shoot debug to syslog,
> you'd have a much better chance as long as the router could keep up
> with it, using something like a SPAN port.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56581&t=56560
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: RE: Yahoo messanger traffic can be seen/blocked? [7:56571]

2002-10-31 Thread [EMAIL PROTECTED]
Well, once you create the filter, you can look at your access logs to see
what has been 'denied'  you would see the source address and using good ol
troubleshooting tools, etc you could find out which computer/user is using
it!

Just one way in which to skin this particular cat!

Another option, is don't give users administrator rights to their machines.
Removing this right, stops them from installing the clients, be it MSN,
Yahoo, etc? Obviously only works if you your are running WinNT, 2K or XP

Manish



-Original Message-
From: Mr piyush shah [mailto:parag_ch2000@;yahoo.co.in] 
Sent: 31 October 2002 11:17 
To: [EMAIL PROTECTED]
Subject: Fwd: RE: Yahoo messanger traffic can be seen/blocked? [7:56571]


Mr. Paul
Thanks for answer.In connection with this there is one
more querry which I would like to get clarify on..
Is there any software download using which I can see
whether who is chatting ? Can you pls let me know the
ulitity which does this ?
Thank again
Piyush
Note: forwarded message attached. 


Missed your favourite TV serial last night? Try the new, Yahoo! TV.
   visit http://in.tv.yahoo.com
X-Apparently-To: [EMAIL PROTECTED] via web8007.mail.in.yahoo.com;
  31 Oct 2002 11:15:39 +0500 (IST)
X-Track: 1: 100
Return-Path: 
Received: from 195.202.64.34  (EHLO mx1.uunet.co.ke) (195.202.64.34) by
  mta102.in.mail.yahoo.com with SMTP; 31 Oct 2002 11:15:38 +0500 (IST)
Received: from [195.202.93.185] (helo=mserverlab) by mx1.uunet.co.ke
  with smtp (Exim 3.36 #1) id 18785h-000Elz-00; Thu, 31 Oct 2002
  08:42:01 +0300
From: "Paul Msava" 
To: "Mr piyush shah" , 
Subject: RE: Yahoo messanger traffic can be seen/blocked? [7:56571]
Date: Thu, 31 Oct 2002 08:46:11 +0300
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
In-Reply-To: 
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
Content-Length: 632

block socks port 1080



-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody@;groupstudy.com]On Behalf Of Mr
piyush shah
Sent: Thursday, October 31, 2002 6:58 AM
To: [EMAIL PROTECTED]
Subject: Re: Yahoo messanger traffic can be seen/blocked? [7:56571]


Hi all
I am network administrator and in our network there
are people who use Yahoo messangers.I have few
querries pertaining to this as under.
1. Is there any tool by which I can see whether who is
chating ?
2. Can I see the content of his chating using that
tool ?
3. If I want to block this  yahoo messanger in my
firewall (I use checkpoint 2000 ) what is the step to
be taken ?


Thanks in advance


Missed your favourite TV serial last night? Try the new, Yahoo! TV.
   visit http://in.tv.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56582&t=56571
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2610 801.Q Trunks [7:54481]

2002-10-31 Thread Darren Ward
Only ISL is unsupported, for that you require a fast ether interface.

Darren

Firesox wrote:

>I thought 802.1Q trunking is only supported on FastEthernet interfaces, not
>Ehternet interfaces.
>I was able to create 802.1Q trunks on 2610 router with ethernet interface.
>Does someone  know exactlly what version of IOS support 802.1Q trunks on
>2610 routers?
>
>Thanks
-- 
Darren Ward
(PGradCS, CCIE#8245, CCDP, SCSA, MCP)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56583&t=54481
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Access list on dialer interface [7:56584]

2002-10-31 Thread Duncan
Hi all

I am having a strange problem with an access-list on a dialer interface.
Although the access list is applied to the interface it does not seem to be
denying the packets. specified. Is there something odd about access-lists on
dialers that I have missed? Below us the config in question:

interface Dialer2
 description X
 ip address 10.252.248.1 255.255.255.252
 ip access-group 101 in
 no ip directed-broadcast
 encapsulation ppp
 dialer in-band
 dialer idle-timeout 900
 dialer map ip 10.252.248.2 name XXX
 dialer load-threshold 20 either
 dialer-group 1
 no peer default ip address
 no cdp enable
 ppp authentication ms-chap chap
!
!
access-list 101 permit tcp any host 10.7.1.1 eq telnet
access-list 101 deny   ip any any log

Any ideas?

Duncan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56584&t=56584
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Access list on dialer interface [7:56584]

2002-10-31 Thread Patrick Donlon
Could be the direction of the traffic, your acl is applied to incoming
traffic only, try outgoing instead

cheers

Pat

""Duncan""  wrote in message
news:20021033.LAA31424@;groupstudy.com...
> Hi all
>
> I am having a strange problem with an access-list on a dialer
interface.
> Although the access list is applied to the interface it does not seem to
be
> denying the packets. specified. Is there something odd about access-lists
on
> dialers that I have missed? Below us the config in question:
>
> interface Dialer2
>  description X
>  ip address 10.252.248.1 255.255.255.252
>  ip access-group 101 in
>  no ip directed-broadcast
>  encapsulation ppp
>  dialer in-band
>  dialer idle-timeout 900
>  dialer map ip 10.252.248.2 name XXX
>  dialer load-threshold 20 either
>  dialer-group 1
>  no peer default ip address
>  no cdp enable
>  ppp authentication ms-chap chap
> !
> !
> access-list 101 permit tcp any host 10.7.1.1 eq telnet
> access-list 101 deny   ip any any log
>
> Any ideas?
>
> Duncan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56585&t=56584
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP Switching [7:56559]

2002-10-31 Thread Aaron Ajello
I hear cisco is doing away with set based.  Apparently the ccie lab includes
two 3550's which are IOS based.  Whoever told me this said cisco bought the
set based system and created IOS themselves, so the plan is to do away with
set based and go completely with their own stuff.
All that may be wrong, just what I heard.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56586&t=56559
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP Switching [7:56559]

2002-10-31 Thread \"\"B.J. Wilson\"\"
> I hear cisco is doing away with set based. 
> Apparently the ccie lab includes
> two 3550's which are IOS based.  Whoever told
> me this said cisco bought the
> set based system and created IOS themselves, so
> the plan is to do away with
> set based and go completely with their own
> stuff.
> All that may be wrong, just what I heard.

This is correct.  Remember that the Catalyst switch line was originally made
by Kalpana (and Grand Junction sort of), which developed the set-based
commands independently of any Cisco involvement.  Cisco wisely realizes that
having a "unified front" makes their products more attractive to us lowly
engineers, and IMO the unification is a long time coming! ;-)

BJ




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56587&t=56559
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RIP neighboure command question [7:56588]

2002-10-31 Thread pauldongso
Hi All,

Am doing the written study.
In Jeff routing tcp/ip book, under RIP configruation exercise session, 
there is a question:

 -  RTC  -RTD -
(192.168.2.1/24)   (192.168.3.1/24)  (192.168.3.2/24) (192.168.4.1/24)

The question is to only use unicast between RTC and RTD
The answer is:

RTC:
network 192.168.2.0
neighour 192.168.3.2

RTD:
network 192.168.4.0
neighour 192.168.3.1

My question is isn't network statement "network 192.168.3.0" required on 
both routers to enable rip? I haven't had a lab to test this yet.

Can someone please give me a correct answer?

Thanks

Paul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56588&t=56588
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RIP neighboure command question [7:56588]

2002-10-31 Thread \"\"B.J. Wilson\"\"
> My question is isn't network statement "network
> 192.168.3.0" required on 
> both routers to enable rip? 

There seems to be an odd discrepancy between the configurations for RTC and
RTD in part 2 of the solution.

RTC:
router rip
 network 192.168.2.0  wrote:

> Hi All,
> 
> Am doing the written study.
> In Jeff routing tcp/ip book, under RIP
> configruation exercise session, 
> there is a question:
> 
>  -  RTC 
> -RTD -
> (192.168.2.1/24)   (192.168.3.1/24) 
> (192.168.3.2/24) (192.168.4.1/24)
> 
> The question is to only use unicast between RTC
> and RTD
> The answer is:
> 
> RTC:
> network 192.168.2.0
> neighour 192.168.3.2
> 
> RTD:
> network 192.168.4.0
> neighour 192.168.3.1
> 
> My question is isn't network statement "network
> 192.168.3.0" required on 
> both routers to enable rip? I haven't had a lab
> to test this yet.
> 
> Can someone please give me a correct answer?
> 
> Thanks
> 
> Paul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56589&t=56588
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Access list on dialer interface [7:56584]

2002-10-31 Thread Duncan
Pat

I have discovered the reason, a little more complex that I first
imagined. Isn't it always.

The router was configured with Legacy DDR which meant that inbound calls
where only using the first dialer. I changed it to use 'dialer pool-member
x' on the PRI interface with 'dialer pool' in the dialers. There where a few
little changes but this fixed the problem as the call was now coming into
the correct interface (dialer2) and thus assigning the access list.

Thanks for your help.

Duncan


""Patrick Donlon""  wrote in message
news:200210311232.MAA07738@;groupstudy.com...
> Could be the direction of the traffic, your acl is applied to incoming
> traffic only, try outgoing instead
>
> cheers
>
> Pat
>
> ""Duncan""  wrote in message
> news:20021033.LAA31424@;groupstudy.com...
> > Hi all
> >
> > I am having a strange problem with an access-list on a dialer
> interface.
> > Although the access list is applied to the interface it does not seem to
> be
> > denying the packets. specified. Is there something odd about
access-lists
> on
> > dialers that I have missed? Below us the config in question:
> >
> > interface Dialer2
> >  description X
> >  ip address 10.252.248.1 255.255.255.252
> >  ip access-group 101 in
> >  no ip directed-broadcast
> >  encapsulation ppp
> >  dialer in-band
> >  dialer idle-timeout 900
> >  dialer map ip 10.252.248.2 name XXX
> >  dialer load-threshold 20 either
> >  dialer-group 1
> >  no peer default ip address
> >  no cdp enable
> >  ppp authentication ms-chap chap
> > !
> > !
> > access-list 101 permit tcp any host 10.7.1.1 eq telnet
> > access-list 101 deny   ip any any log
> >
> > Any ideas?
> >
> > Duncan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56590&t=56584
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How to make sure that the CE590 are working properly?? [7:56591]

2002-10-31 Thread Magdy H. Ibrahim
Hi all,

I just installed my first CE590 and configured it and connected it to my
system...
Actually I do not feel a major different changes when I start using it...
My question is:
- How to make sure that my CE do caching and provide me a good service
better than before?
- And how to test it to feel it caches the requested which my users asked
for

I just want to know how to feel better using Content Engine pluged to my
System..

Please advise me

Regards,,

magdy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56591&t=56591
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: odd & even # IPs on an ACL [7:56551]

2002-10-31 Thread The Long and Winding Road
""Jennifer Mellone""  wrote in message
news:200210310718.HAA06644@;groupstudy.com...
> Cute!
>
> So I'm thinking that tomorrow (Halloween) I'll put on a subnet mask.
> It will be 255.255.0.0, and the two 0's will have little holes in the
middle
> for my eyes ;-)


too bad they no longer allow "whacky" subnet maskts

255.0.0.255

the "255"s could flap back over your ears.


>
> - Jennifer Mellone




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56592&t=56551
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FXO vs other Analog Voice Card [7:56536]

2002-10-31 Thread Patrick Donlon
Paul
you can use a prefix command and say prefix 333 when you've matched on that.
There is a forward-digits command also but you'll have to do a search to see
exactly how it works as I've not used

cheers

Pat


""Paul Oh""  wrote in message
news:200210301728.RAB17727@;groupstudy.com...
> Hello All,
>
> When FXO receives a phone call, it strips out corresponding called-number
> that matches destination pattern settings.. For instance,
>
> If call string that matches 333 , it will strip 333 and pass on last
> four digit. IF there is next hop voip router only sees last four digit.
> (Isn't that correct?.
>
> Now, how can we make that happen for E&M card? (VIC-2E&M)?  "digit-strip"
is
> enabled by default, but next router only sees 333- instead of .
>
> Help me out. Thank you.
>
> -Paul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56593&t=56536
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP Switching [7:56559]

2002-10-31 Thread Vance Krier
Actually, there's a range command that allows you to modify multiple ports
at a time.  At least on the Native IOS on the 6500 and 4000s.  But I agree
with you, I still like the CatOS better.

Vance



""Symon Thurlow""  wrote in message
news:200210310859.IAA15587@;groupstudy.com...
> I can't speak from a great deal of experience here, but set based
> switches seem easier to configure, because you can change settings for
> multiple ports with one command.
>
> For example, on a CAT5K, to change duplex speed to full on a whole
> module (12 port 10bFL) I type
>
> Set port duplex 3/1-12 full
>
> And it sets it on all 12 interfaces. Doing this in an IOS based switch
> would require the use of notepad and cut and paste :)
>
> It would be a shame if Cisco did migrate away from the set based
> language.
>
> What do others think?
>
> -Original Message-
> From: John Brandis [mailto:john.brandis@;solution6.com]
> Sent: 30 October 2002 23:44
> To: [EMAIL PROTECTED]
> Subject: CCNP Switching [7:56559]
>
>
> Hi all,
>
> in relation to the commecnts on the test, I have not seen a set based
> switch for almost a year now, however I look at some of my SYNGRESS CCNP
> Switching book, which makes a funny comment on how "ALL" core switchs
> are set based. I would like to see the tests coming up in the future, as
> I feel (and this is up for debate) that a certain degree of emphasys
> must be placed upon IOS based commands at the core, as thats what I
> expect to see on these platforms in the future.
>
> What you think ?
>
>
> **
>
> visit http://www.solution6.com
>
> UK Customers - http://www.solution6.co.uk
>
> *
>
> The Solution 6 Group is on the move. As of Monday 25 November, our
> Sydney HQ will be located at
>
> Level 14, 383 Kent Street, Sydney NSW 2002
>
> General Phone:(02) 9278 0666
> General Fax: (02) 9278 0555
>
> *
> This email message (and attachments) may contain information that is
> confidential to Solution 6. If you are not the intended recipient you
> cannot use, distribute or copy the message or attachments.  In such a
> case, please notify the sender by return email immediately and erase all
> copies of the message and attachments.  Opinions, conclusions and other
> information in this message and attachments that do not relate to the
> official business of Solution 6 are neither given nor endorsed by it.
> *
> =
>
>  This email has been content filtered and
>  subject to spam filtering. If you consider
>  this email is unsolicited please forward
>  the email to [EMAIL PROTECTED] and
>  request that the sender's domain be
>  blocked from sending any further emails.
>
> =




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56594&t=56559
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Another Internet Draft of Interest [7:56560]

2002-10-31 Thread Howard C. Berkowitz
At 10:22 AM + 10/31/02, Nigel Taylor wrote:
>Howard,
>   It would seem that there's something wrong with the links in
>that I'm unable to access either of the drafts you noted.  It's also quite
>possible that I simply didn't click on the link hard enough :-)  Oh, I
>know...much like a recent Cox communications commercial,  maybe I simply
>reached the end of the Internet. :->
>
>thanks
>Nigel


http://www.ietf.org/internet-drafts/draft-ietf-bmwg-conterm-03.txt

There is something wrong with the second one. I'll have to check on Monday.

>
>- Original Message -
>From: "Howard C. Berkowitz"
>To:
>Sent: Thursday, October 31, 2002 1:14 AM
>Subject: Re: Another Internet Draft of Interest [7:56560]
>
>
>>  "Nigel Taylor" All,
>>  >  I just got through some of the presentations linked from the
recent
>>  >nanog
>>  >meeting.  The draft in question was presented by Henk Uijterwaal titled
>>  "New
>>  >Services  from RIPE NCC.
>>  >
>>  >There is also this link on the nanog list to his latest draft.
>>  >
>>  >http://www.ripe.net/home/henk/draft-ietf-ippm-owmetric-as-01.txt
>>  >
>>  >I was just thinking about some of our current tools like ping, hping,
and
>>  >traceroute which measures round trip delay vs one-way delay.  RFC 2679
>>  >discusses numerous reasons for calculating  one-way delay, however would
>>  >tools
>>  >like ping and traceroute with the existence of ping6 and traceroute6 be
>>  >rfc2679 compliant.  I've not done any research at this point but, would
>>  >operational tools in everyday use benefit from this new active
>measurement?
>>  >
>>  >Here's a pretty good link that explains the concept for the "normal"
>folks
>>  >like myself.
>>
>>  There are several problems with using timestamped measurement in the
>>  router itself.  Some of these may be reduced with IPv6, but, for
>>  others, external passive hardware or special router hardware seems
>>  necessary.  See our BGP convergence drafts,
>>  http://www.ietf.org/internet-drafts/draft-ietf-bgpconv-03.txt and
>>  http://www.ietf.org/internet-drafts/draft-ietf-bgpbas-00.txt
>>
>>  First, routers may not give sufficient precision in measurement,
>>  because they rate-limit ICMP to protect against ICMP floods, or
>>  simply don't prioritize it highly.  I mention IPv6 because
>>  authenticated source addresses may be used without fear of denial of
>>  service.
>>
>>  Second, the router may or may not have the capacity to capture and
>>  store a statistically valid amount of data. NetFlow data export, for
>>  example, summarizes to a degree. If you could shoot debug to syslog,
>>  you'd have a much better chance as long as the router could keep up
>>  with it, using something like a SPAN port.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56595&t=56560
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Firewall Reporting [7:56596]

2002-10-31 Thread Lupi, Guy
I am looking for a firewall reporting package that can handle a large number
of units for under 200 dollars per firewall per year, the reports will be
generated from a standard syslog output from the firewalls.  I really just
need basic reporting functionality, like bandwith usage by IP address,
bandwidth usage totals, and website hits.  Does anyone know of a product
other than WebTrends, they are really expensive.

Guy H. Lupi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56596&t=56596
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Firewall Reporting [7:56596]

2002-10-31 Thread Duncan
Guy

I use a perl script that is well designed and free. It was originally
designed for FW1 but I think that there is a Pix converter. Find it at
http://www.ginini.com/software/fwlogsum/

Duncan

""Lupi, Guy""  wrote in message
news:200210311450.OAA32379@;groupstudy.com...
> I am looking for a firewall reporting package that can handle a large
number
> of units for under 200 dollars per firewall per year, the reports will be
> generated from a standard syslog output from the firewalls.  I really just
> need basic reporting functionality, like bandwith usage by IP address,
> bandwidth usage totals, and website hits.  Does anyone know of a product
> other than WebTrends, they are really expensive.
>
> Guy H. Lupi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56597&t=56596
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Expensive [7:56598]

2002-10-31 Thread Lesly Verdier
Hi all,

I just passed the CCNA-exam. I had to pay 170 Euro (in the 
Netherlands) which is approximately $170. Is the price for
this exam also so expensive in the US?

Just curious.

Lesly Verdier




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56598&t=56598
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPX bridge on 6509?? [7:56533]

2002-10-31 Thread Jason Owens
First, thanks for both of your responses. Ive tried to answer some of the
questions in line.


> > Couldn't you bridge IPX traffic between these VLANs? To do
> this you
> wouldn't
> > put any ipx network numbers on the subinterfaces, but you
> would put the
> ones
> > that have IPX devices in the same bridge group.
> 
> CL: that's exactly right. works for all bridged protocols.

If I make the SVIs bridged interfaces, am I not now bridging IP as well? Can
you separate the protocols that you wish to bridge from the ones you wish to
route?.


(Are VLANs
> > new to this network? Was it all one big broadcast domain
Ø   before??)


Yes, VLANs are new to this network and it is essentially just one big
broadcast domain.

This is the interface that I am going to move from the 7206 to the 6509. 

interface FastEthernet6/0
 ip address 192.168.49.61 255.255.255.252 secondary
 ip address 192.168.79.1 255.255.255.0 secondary
 ip address 192.168.80.1 255.255.255.0 secondary
 ip address 192.168.250.1 255.255.255.0 secondary
 ip address 192.168.38.1 255.255.255.0 secondary
 ip address 10.24.75.33 255.255.255.248 secondary
 ip address 172.22.8.1 255.255.248.0
 no ip directed-broadcast
 full-duplex
 ipx encapsulation SAP
 ipx network FFA0001

The 7206 currently has a bunch of 2924's with servers (and the local LAN)
hung off of it. I have a new 6509 w/ redundant sup2/msfc2/pfc2 running
native 12.1(11b)E7 that will have four 4006's connected to it. All of the
servers will be moved onto the 4006's and I wanted to now perform the
routing between these networks on the 6509.

Again, I wish to break out all of the IP networks into separate VLANs.
Unfortunately a few of these ranges have servers that are using IPX as well.
I need to bridge the FFA0001 network between some of these VLANs until I can
get all of the clients to use IP. I was just trying to avoid having to
bridge the IP as well, because at that point I effectively have the same
network I started with. Hopefully, this made more sense.

Thanks.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56599&t=56533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Challenge question...layer 2 and 3 frame analysis [7:56600]

2002-10-31 Thread Cable Guy
involved. No trick static entries on any device in the network.

Scenario:
1. A PC host receives an ethernet II arp frame. Layer 3 drops it.
2. A PC host receives a tcp frame. Layer 3 drops it.

Questions:
Which of the above is possible/not possible? If so, describe the frame and
the network layout for your scenario? If not, provide reasoning.

#1 is not so difficult, it is meant to start your thinking for #2.

Cable Guy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56600&t=56600
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Works 2000 problem [7:56601]

2002-10-31 Thread Tim Champion
I have a problem with Cisco Works 2000 whereby the ANI server has the busy
flag set. This is effecting many of the services. I have tried all of the
suggestions on CCO but it has made no difference. Has anyone else seen this
before?

Cheers

Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56601&t=56601
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Managed Security Services [7:56602]

2002-10-31 Thread Cisco Breaker
Hi all,

Are there anybody working at an ISP and deployed Managed Security Services ?
Which product did you use, for IDS, Firewall and VPN?
As I saw only Cisco supports both of them. Any suggestions that might help
will be appreciated.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56602&t=56602
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FXO vs other Analog Voice Card [7:56536]

2002-10-31 Thread Bruce Enders
I knew this question was going to lead to trouble!
Okay, here goes.
First thing, if the incoming call digit string will be matched to the
destination-pattern of a VoX dial-peer, there is no prefix or forward
command available. In a VoX dial-peer you are mapping a telephone address
(the destination-pattern) to a Network address (session target with Layer
2 or Layer 3 address). This is your voice routing table! This is the
logical routing plan you created when you designed this voice network.
This is a static routing table you created. Why would you map an address
one way, then try to modify  it before you sent it to the ultimate
destination?  Dial plans are simply static routing tables. There is no
EIGRP for voice networks, yet.
Digit stripping  happens ONLY on POTS dial-peers. Digits described
explicitly (333 in 333) are consumed during the digit analysis. The
prefix command can be used to replace the consumed digits, or the forward
digits command can direct that X number of digits are to be preserved and
sent across the POTS line once it is active.
The E&M should do what you want if you want to only send 4 digits to the
other end.
The VoIP dial-peer will send all digits that match the
destination-pattern statement.
This all depends on what you are trying accomplish. This isn't clear
because you are mixing FXOs and E&Ms which you can't do.
Maybe this will get you aimed in the right direction. Feel free to email
me with what you are trying to do. the configuration may be very simple.
Bruce

Paul Oh wrote:

  Hello All,
  
  When FXO receives a phone call, it strips out corresponding called-number
  that matches destination pattern settings.. For instance,
  
  If call string that matches 333 , it will strip 333 and pass on last
  four digit. IF there is next hop voip router only sees last four digit.
  (Isn't that correct?.
  
  Now, how can we make that happen for E&M card? (VIC-2E&M)?  "digit-strip"
is
  enabled by default, but next router only sees 333- instead of .
  
  Help me out. Thank you.
  
  -Paul
-- 

  Bruce Enders   Email: [EMAIL PROTECTED] 
Chesapeake NetCraftsmeno:(410)-280-6927, c:(443)-994-0678
  1290 Bay Dale Drive, Suite 312 WWW: http://www.netcraftsmen.net 
Arnold, MD 21012-2325  Cisco CCSI# 96047
 Efax 443-331-0651




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56603&t=56536
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



books for ccie written [7:56604]

2002-10-31 Thread Hemant Seth
hi all,

i have just started to prepare for CCIE written. can onyone suggest me with
few good books. Also how r u suppose to study for the written, just one book
is enough or u have to refer many books on each topic.

thanks.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56604&t=56604
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Queuing question(s) again ! [7:56519]

2002-10-31 Thread \"\"B.J. Wilson\"\"
> Just about the last phrase 'The "priority"
> command is not used with CBWFQ',
> considering that I call LLQ within CBWFQ,   is
> it correct ?

Well...you calling it "LLQ within CBWFQ" isn't Cisco canon, but your config
below is a fine LLQ configuration.

I've noticed (especially in my studies of QoS) that the only differentiator
between acronym-based technologies (like LLQ and CBWFQ) is just the addition
of one little command in an otherwise "old" config.

BJ


> 
>policy-map MyPolicy
>  class Voice
>priority 200
>  class Silver
>bandwidth 200
>  class class-default
>random-detect
>fair-queue




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56605&t=56519
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Auto-QoS [7:56606]

2002-10-31 Thread Kaminski, Shawn G
I attended a Cisco Technical Symposium yesterday and the presenter mentioned
a new feature called Auto-QoS that will be available soon. What this
basically does is allows you to set up QoS using a minimal amount of
commands. I can't find any information on this and was wonderng if anyone
knows where I can find some.

Thanks,

Shawn G. Kaminski
EDS Network Engineering - SAN




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56606&t=56606
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Challenge question...layer 2 and 3 frame analysis [7:56600]

2002-10-31 Thread Priscilla Oppenheimer
Cable Guy wrote:
> 
> Background: All devices correctly configured with static IPs.
> No multicast
> involved. No trick static entries on any device in the network.
> 
> Scenario:
> 1. A PC host receives an ethernet II arp frame. Layer 3 drops
> it.

I assume you mean the ARP process drops it. An ARP frame doesn't have a
Layer 3 header. An ARP frame doesn't get passed to IP.

Since ARP requests are sent as broadcasts, it's quite likely a PC would
receive an ARP request where the Target IP Address in the ARP data is not
associated with the PC, so the PC drops the frame. So this step is
definitely possible

> 2. A PC host receives a tcp frame. Layer 3 drops it.

Entries in the ARP cache on a Cisco router last 4 hours. So a router could
easily send a frame to a MAC address with the wrong IP address if the IP
address on the PC host had been changed.

The router wouldn't have sent an ARP request if the mapping were already in
the ARP cache though. Did you mean step 1 and step 2 to be linked? The
sender sends an ARP that is ignored and then sends a frame anyway?

Is this question a treat or a trick? :-) I'm sure you have something
trickier in mind than what I came up with, but I just can't think of
anything else. I wracked my brains thinking about IP spoofing, NAT, Proxy
ARP and can't think of anything. Of course software bugs could cause
something like this, but that's probbaly not what you had in mind either.

___

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com

> 
> Questions:
> Which of the above is possible/not possible? If so, describe
> the frame and
> the network layout for your scenario? If not, provide reasoning.
> 
> #1 is not so difficult, it is meant to start your thinking for
> #2.
> 
> Cable Guy
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56607&t=56600
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Study partner [7:56608]

2002-10-31 Thread J B
Im looking for serious study partner/s in the S/W suburbs of Chicago.
Joliet, Tinley Part, etc.

My lab date is set for April 2003 and I can contribute with the following
equipment


1 Cisco 2520
4 Cisco 2501
1 Cisco 2613
1 Cisco 2502
1 Cisco 2511
  Thanks

J barrera


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56608&t=56608
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Video Priority 2 [7:56610]

2002-10-31 Thread alaerte Vidali
Hi,

I read in Cisco pages (sorry, can´t remember the URL) to not give priority
to the video, just give it to the audio.

I think it may be because of the jitter problem with voice signal and the
possibility to give strict priority to voice without starve other traffic,
as opposite to video, that can be very high bandwidth.

But in some applications, as Windows Media Server, the audio and video are
transmitted together (at least it is what I can see with Sniffer)

I am trying to clarify this topic, so thanks in advanced for any reply.

Regards,

Alaerte


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56610&t=56610
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Study partner [7:56609]

2002-10-31 Thread J B
Im looking for serious study partner/s in the S/W suburbs of Chicago.
Joliet, Tinley Part, etc.

My lab date is set for April 2003 and I can contribute with the following
equipment


1 Cisco 2520
4 Cisco 2501
1 Cisco 2613
1 Cisco 2502
1 Cisco 2511
  Thanks

J barrera


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56609&t=56609
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Question on ATM OC-3 WAN connection and TcpWindowSize [7:56612]

2002-10-31 Thread Kim Seng
Hi all,

I have an OC-3 155Mbps UBR WAN link between two sites.
When I transfer files between these two sites using
windows explorer or ftp, I only have about 8Mbps.
Sprint told me I need to change the registry:
TcpWindowSize to get better throughput. Have anyone
experienced this before?

Thanks in advance.

Kim.

__
Do you Yahoo!?
HotJobs - Search new jobs daily now
http://hotjobs.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56612&t=56612
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Questions before tests [7:56452]

2002-10-31 Thread Symon Thurlow
I just did one, and I took note of what it said. It was something along
the lines of gathering data to make the exams better, nothing about it
being relevant to your score.

It was support And I FAILED BY ONE QUESTION!!!

There was one question that had an exhibit, and I didn't realise that in
the exhibit you were supposed to do something (it wasn't a drag and
drop). I clicked next expecting to get the answer section, but it went
to the next question!

Now I'll never know, how humiliating..

Booked for Wednesday, this time I'll spank it.

Symon

-Original Message-
From: ""B.J. Wilson"" [mailto:analogkid01@;mindspring.com] 
Sent: 29 October 2002 16:12
To: [EMAIL PROTECTED]
Subject: Re: Questions before tests [7:56452]


I always put B.S. answers anyway - just random clicks. :-)  I also note
how annoying it is to have to answer the questions *BEFORE* the test -
get to it, I say!

BJ



On Tue, 29 Oct 2002 15:59:31 GMT Robert Edmonds
 wrote:

> I've heard this same thing too.  However, I
> really don't put much weight in
> it.  Here's why.  Let's say you answer all the
> questions in a way that makes
> you seem like a beginner.  It would make sense
> that you would probably get
> easier questions.  Why would Cisco want a CCNA,
> CCNP or CCIE out there that
> could only answer the easiest questions?  They
> want their certifications to
> mean something so more people will obtain them
> so more people will be
> familiar with their products so more people
> will BUY their products.  Doing
> what you've described would seem to undermine
> their entire purpose; to sell
> more product.  Anyway, it's my very humble
> opinion that the people who
> believe that also believe that the government
> is monitoring every single
> phone call made by every American citizen (or
> insert your nationality in
> place of American).  It's just one more thing
> to be paranoid about.
> Besides, you've passed the first three, so you
> basically know what to
> expect.  Good luck.
> ""Aaron Ajello""  wrote in message 
> news:200210291447.OAA07111@;groupstudy.com...
> > I'm working on my CCNP, just have CIT to go
> and when I have taken the
> first
> > three, I just kindof flew through the
> questions before the test where
> Cisco
> > asks about your experience level, whether or
> not you can configure things
> on
> > your own or need help with a coworker, etc.
> >
> > Is it true that your answers will determine
> how the test is graded or what
> > types of questions you will get on the actual
> test?  I thought it was
> merely
> > a survey so Cisco could get an idea of what
> types of backgrounds people
> had
> > who were taking their tests.  But recently I
> read where someone says those
> > questions will actually determine how Cisco
> tests you and which questions
> > from the pool you will receive.
> >
> > This seems ridiculous to me, but I have to
> ask.
> >
> > thanks,
> > Aaron
> to [EMAIL PROTECTED]
=

 This email has been content filtered and
 subject to spam filtering. If you consider
 this email is unsolicited please forward
 the email to [EMAIL PROTECTED] and
 request that the sender's domain be
 blocked from sending any further emails.

=




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56613&t=56452
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Question on ATM OC-3 WAN connection and TcpWindowSize [7:56614]

2002-10-31 Thread R. Benjamin Kessler
You could be experiencing the "long, fat network" (LFN) problem.

How far apart are these locations? (average round-trip time with ping?)

-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody@;groupstudy.com] On Behalf Of
Kim Seng
Sent: Thursday, October 31, 2002 11:57 AM
To: [EMAIL PROTECTED]
Subject: Question on ATM OC-3 WAN connection and TcpWindowSize [7:56612]

Hi all,

I have an OC-3 155Mbps UBR WAN link between two sites.
When I transfer files between these two sites using
windows explorer or ftp, I only have about 8Mbps.
Sprint told me I need to change the registry:
TcpWindowSize to get better throughput. Have anyone
experienced this before?

Thanks in advance.

Kim.

__
Do you Yahoo!?
HotJobs - Search new jobs daily now
http://hotjobs.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56614&t=56614
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX501 to VPN concentrator through NAT [7:56615]

2002-10-31 Thread Stull, Cory
Elijah,

Thanks for your answer..  Here is also a little more info for anyone
interested that I found during my research..  


Heres why 1 to 1 static NAT should work with IPSEC VPN...

To be compliant as an IPSec VPN a product needs to support 2 things:   IKE
(Internet
Key Exchange which runs on UDP/500) and
IPSec (AH and/or ESP) which do NOT run on TCP or UDP at all.  IPSec is it's
own
protocol number, like ICMP, TCP, RIP, etc.
The reason that many to one NAT breaks most IPSec implementations is that it
changes
the TCP/UDP port numbers so that it
can map the connections to a single IP.  This breaks IKE because IKE has to
run on
UDP/500 and it can not be changed.
It also does not work for IPSec, because IPSec does not use UDP or TCP port
numbers
(although original user packets which
are TCP/UDP based are often tunneled inside of IPSec packets).

IPSec can be made to work when 1to1 NAT is used.   IKE will not be broken
because no
port mapping occurs.   IPSec can be
made to function as long as AH (which computes a checksum signature which
includes
the original IP address) is turned off.  ESP
also computes a checksum signature, but does not use the original IP as part
of it,
so therefore a NATted packet works in this
environment.

IPSec does support "TCP based" VPNs however, as tunnel-mode IPSec carries
TCP
sessions through the IPSec session.

Here is why PAT will work when using the VPN client...

Encapsulating Security Payload
Protocol 50 (Encapsulating Security Payload [ESP]) handles the
encrypted/encapsulated packets of IPSec. Most PAT devices don't work with
ESP since they have been programmed to work only with Transmission Control
Protocol (TCP), User Datagram Protocol (UDP), and Internet Control Message
Protocol (ICMP). In addition, PAT devices are unable to map multiple
security parameter indexes (SPIs). The NAT transparent mode in the VPN 3000
Client solves this problem by encapsulating ESP within UDP and sending it to
a negotiated port. The name of the attribute to activate on the VPN 3000
Concentrator is IPSec through NAT.

How Does NAT Transparent Mode Work?
Activating IPSec transparent mode on the VPN Concentrator creates
non-visible filter rules and applies them to the public filter. The
configured port number is then passed to the VPN Client transparently when
the VPN Client connects. On the inbound side, UDP inbound traffic from that
port passes directly to IPSec for processing. Traffic is decrypted and
decapsulated, and then routed normally. On the outbound side, IPSec
encrypts, encapsulates and then applies a UDP header (if so configured). The
runtime filter rules are deactivated and deleted from the appropriate filter
under three conditions: when IPSec over UDP is disabled for a group, when
the group is deleted, or when the last active IPSec over UDP SA on that port
is deleted. Keepalives are sent to prevent a NAT device from closing the
port mapping due to inactivity.

But even though the remote PIX is acting as a VPN client "easyvpn client"
it still can't use PAT because its not able to negotiate with the VPN
concentrator to encapsulate its packets in UDP and according to the TAC
engineer that I asked they have no plans of making that possible.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56615&t=56615
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fw: good tip on books [7:56611]

2002-10-31 Thread Persio Pucci
Folks,

InformIT and CiscoPress are offering several books online (full version), on
a
very cheap service. You pay a monthly/anual fee which allows you to read from
5 to 30 books at a time. The prices are very low, so you might want to try it
out!!!

And the best thing for now is that you have a 30 day free trial!!! On the
free
trial, you can get up to 10 books (depending on the titles, up to 5) for
free.
And all good stuff as Doyle's I and II, Halabi, etc etc... not only CCIE
resources but CCNP,DP,NA,DA and others... not only CiscoPress books either,
but a lot more.

go to Cisco Press site and check it out!!! http://www.ciscopress.com

Persio




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56611&t=56611
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RIP neighboure command question [7:56588]

2002-10-31 Thread The Long and Winding Road
well, I was going to do a quick and dirty lab for you, but entering the
neighbor command has been wreaking havoc on one of my routers.

in general, what I seem to have proven is that even with the neighbor
statement configured under the RIP process, RIP announcements will not go
out an interface that has not been included in the RIP process.


router 3 info
-
 Default version control: send version 2, receive version 2
  Automatic network summarization is not in effect
  Routing for Networks:
50.0.0.0
snip some
  Routing Information Sources:
Gateway Distance  Last Update
160.160.125.4120  01:27:12
  Distance: (default is 120)

router rip
 version 2
 redistribute ospf 123 metric 3
 passive-interface default
 no passive-interface TokenRing0
 network 50.0.0.0
 neighbor 160.160.125.4
 no auto-summary

note that router 3 is NOT sending advertisements out the token ring
interface, even though it is instructed that a neighbor is there.


Router_3#ir
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
   D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
   N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
   E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
   i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter
area
   * - candidate default, U - per-user static route, o - ODR
   P - periodic downloaded static route

Gateway of last resort is not set

 50.0.0.0/24 is subnetted, 1 subnets
C   50.50.1.0 is directly connected, Loopback50
 99.0.0.0/32 is subnetted, 1 subnets
C   99.99.99.1 is directly connected, Loopback1000
 160.160.0.0/16 is variably subnetted, 16 subnets, 6 masks
C   160.160.30.0/24 is directly connected, Loopback100
C   160.160.31.0/24 is directly connected, Loopback101
C   160.160.32.0/24 is directly connected, Loopback102
C   160.160.33.0/24 is directly connected, Loopback103
C   160.160.39.0/26 is directly connected, Loopback204
C   160.160.64.0/24 is directly connected, Loopback500
C   160.160.65.0/24 is directly connected, Loopback501
C   160.160.66.0/24 is directly connected, Loopback502
C   160.160.67.0/24 is directly connected, Loopback503
C   160.160.68.0/24 is directly connected, Loopback504
C   160.160.125.0/24 is directly connected, TokenRing0
C   160.160.39.160/27 is directly connected, Loopback203
C   160.160.39.240/29 is directly connected, Loopback201
C   160.160.39.252/30 is directly connected, Loopback200
C   160.160.39.208/28 is directly connected, Loopback202
C   160.160.254.0/29 is directly connected, Serial0
Router_3#

not that router 3 has no rip routes, and apparently is not accepting rip
routes across this interface because it is not in the proces.s


note that router 4 is sending rip updates across the token ring interface

00:17:13: RIP: sending v2 flash update to 224.0.0.9 via TokenRing0
(160.160.125.
4)
00:17:13: RIP: build flash update entries
00:17:13:   100.0.0.0/8 via 0.0.0.0, metric 1, tag 0

conclusion - even with the neighbor statement in place, RIP will not send
updates out the interface if that interface address is not part of the rip
process.

any takers?

Chuck

--

www.chuckslongroad.info




""pauldongso""  wrote in message
news:200210311321.NAA14582@;groupstudy.com...
> Hi All,
>
> Am doing the written study.
> In Jeff routing tcp/ip book, under RIP configruation exercise session,
> there is a question:
>
>  -  RTC  -RTD -
> (192.168.2.1/24)   (192.168.3.1/24)  (192.168.3.2/24) (192.168.4.1/24)
>
> The question is to only use unicast between RTC and RTD
> The answer is:
>
> RTC:
> network 192.168.2.0
> neighour 192.168.3.2
>
> RTD:
> network 192.168.4.0
> neighour 192.168.3.1
>
> My question is isn't network statement "network 192.168.3.0" required on
> both routers to enable rip? I haven't had a lab to test this yet.
>
> Can someone please give me a correct answer?
>
> Thanks
>
> Paul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56616&t=56588
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Question on ATM OC-3 WAN connection and TcpWindowSize [7:56617]

2002-10-31 Thread MADMAN
This is a common complaint.  Sprint is most likely correct, your
application simply can't utilize the bandwidth.  The samller your window
size the less bandwidth you will utilize.

  You can see this first hand by using ttcp between the two routers and
changing the window size on the router with the "ip tcp window-size x"
comand.

  Dave

Kim Seng wrote:
> 
> Hi all,
> 
> I have an OC-3 155Mbps UBR WAN link between two sites.
> When I transfer files between these two sites using
> windows explorer or ftp, I only have about 8Mbps.
> Sprint told me I need to change the registry:
> TcpWindowSize to get better throughput. Have anyone
> experienced this before?
> 
> Thanks in advance.
> 
> Kim.
> 
> __
> Do you Yahoo!?
> HotJobs - Search new jobs daily now
> http://hotjobs.yahoo.com/
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

"You don't make the poor richer by making the rich poorer." --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56617&t=56617
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VPN Primer on Cisco site - FYI [7:56618]

2002-10-31 Thread The Long and Winding Road
found this while stumbling around:

http://www.cisco.com/warp/public/cc/so/cuso/epso/sqfr/safev_wp.pdf

enjoy

--

www.chuckslongroad.info




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56618&t=56618
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Greg Macaulay
Hi all --

I'm suffering thru a terrible newbies type problem and cannot seem to
identify the error of my ways.  I know it's something very basic -- and it
brings back memories of high school geometry homework where I stared at
objects for hours on end trying to understand!!!

The thrust of my pitiful situation is: I cannot "ping" from hyperterminal --
altho' I can readily "ping" from a DOS prompt on the same PC.

I have the parameters set properly 8-N-1-None -- and I have tried with the
TFTP server setup on the same PC and on another in my home network (I have
10 pcs in my home network -- most old -- but they still work!).  Neither
works.

Any suggestions.  And please don't waste time flaming me -- I know I should
be able to figure this out -- but even after researching the archives and
CCO, I am no closer to a solution than I am to passing the LAB on the first
try!

So any and all helpful suggestions would be welcome.

Thanks to all -- in advance!!
Greg Macaulay
Oldest Human Being preparing for the CCIE Lab
Lifetime AARP member
Retired Attorney/Law Professor




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56619&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Question on ATM OC-3 WAN connection and TcpWin [7:56614]

2002-10-31 Thread Priscilla Oppenheimer
R. Benjamin Kessler wrote:
> 
> You could be experiencing the "long, fat network" (LFN) problem.

Could be a long, fat network problem, if this is indeed a long network (or
long-delay network). To learn more about LFNs and the TCP window scale
option for use on LFNs, see RFC 1323.

The issue is that the largest window size you can have with TCP is 65 KBytes
since the Window size field is only 2 bytes.

The window scale extension expands the definition of the TCP window to 32
bits and then uses a scale factor to carry this 32-bit value in the 16-bit
Window field of the TCP header The scale factor is carried in a new TCP
option, Window Scale. This option is sent only in a SYN segment (a segment
with the SYN bit on), hence the window scale is fixed in each direction when
a connection is opened.

Lately, I have actually seen devices using this scale extension, so I think
it is supported on modern operating systems.

It's more likely that it's not an LFN-related issue, though. It's more
likely that the TCP window size isn't set to its possible max (65 Kbytes)
even without window scaling. To start with, he should max it out to 65
Kbytes and not worry about the scaling factor, which could cause problems if
not supported on all hosts.

Benjamin and MADMAN gave good answers, but I have a few more comments below.
This is a good chance to learn about capacity versus throughput. See below

> 
> How far apart are these locations? (average round-trip time
> with ping?)
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:nobody@;groupstudy.com] On
> Behalf Of
> Kim Seng
> Sent: Thursday, October 31, 2002 11:57 AM
> To: [EMAIL PROTECTED]
> Subject: Question on ATM OC-3 WAN connection and TcpWindowSize
> [7:56612]
> 
> Hi all,
> 
> I have an OC-3 155Mbps UBR WAN link between two sites.
> When I transfer files between these two sites using
> windows explorer or ftp, I only have about 8Mbps.

You still have 155 Mbps. That's your capacity, in other words, the
capability for sending bits at a certain rate. Your output interface could
send bits that fast, if the host applications gave it bits that quickly.

Throughput is not the same thing as capacity. Capacity is the capability.
Throughput is a measurement of the actual amount of data transferred in a
certain amount of time.

Network protocols packetize data. They don't whip out bits at the rate
specified by the capacity.

The following items affect throughput:

* Packet size. Bigger packets result in higher throughput for bulk
transfers. HTTP tends to not use a full size packet. FTP usually does.

* Inter-packet gap. There's time between packets when no data is sent.

* Turn around time at the client and server to process data and send the
next request for more data. The CPU speeds of the clients and servers affect
this, as do many other factors.

* Hard disk access time. Depending on the application, no data will be sent
while the client or server read/write from the hard drive, a mechanical
device that can contribute heavily to throughput.

* The amount of memory on the clients and servers can affect throughput. At
what point does the application have to write to disk to free up RAM to
receive more data?

* Protocol behavior. Is it a request/response (ping/pong) protocol? Does it
require an ACK per packet or does it support windowing?

* Error rates. Are packets getting dropped and needing to be retransmitted?

> Sprint told me I need to change the registry:
> TcpWindowSize to get better throughput. Have anyone
> experienced this before?

That would help TCP applications. Think about how TCP works. Each side
specifies a window size. The other side can output numerous packets to fill
that window, without stopping and waiting for an ACK. When it fills the
window, it must stop and wait for an ACK. It's this stopping when your
throughput is 0 bps that causes your throughput for the entire file/data
transfer to be low.

If the host has a big window size, the other side can send and send and
send, without stopping as much.
___

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com

> 
> Thanks in advance.
> 
> Kim.
> 
> __
> Do you Yahoo!?
> HotJobs - Search new jobs daily now
> http://hotjobs.yahoo.com/
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56620&t=56614
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Queuing question(s) again ! [7:56519]

2002-10-31 Thread Priscilla Oppenheimer
I like that: "acronym-based technologies." ;-)

Priscilla

"B.J. Wilson" wrote:
> 
> > Just about the last phrase 'The "priority"
> > command is not used with CBWFQ',
> > considering that I call LLQ within CBWFQ,   is
> > it correct ?
> 
> Well...you calling it "LLQ within CBWFQ" isn't Cisco canon, but
> your config
> below is a fine LLQ configuration.
> 
> I've noticed (especially in my studies of QoS) that the only
> differentiator
> between acronym-based technologies (like LLQ and CBWFQ) is just
> the addition
> of one little command in an otherwise "old" config.
> 
> BJ
> 
> 
> > 
> >policy-map MyPolicy
> >  class Voice
> >priority 200
> >  class Silver
> >bandwidth 200
> >  class class-default
> >random-detect
> >fair-queue
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56621&t=56519
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Priscilla Oppenheimer
I wouldn't flame the oldest CCDP on the planet ;-), but, what do you mean
you can't ping from HyperTerminal? HyperTerminal just gets you serial access
to the console port.

Priscilla

Greg Macaulay wrote:
> 
> Hi all --
> 
> I'm suffering thru a terrible newbies type problem and cannot
> seem to
> identify the error of my ways.  I know it's something very
> basic -- and it
> brings back memories of high school geometry homework where I
> stared at
> objects for hours on end trying to understand!!!
> 
> The thrust of my pitiful situation is: I cannot "ping" from
> hyperterminal --
> altho' I can readily "ping" from a DOS prompt on the same PC.
> 
> I have the parameters set properly 8-N-1-None -- and I have
> tried with the
> TFTP server setup on the same PC and on another in my home
> network (I have
> 10 pcs in my home network -- most old -- but they still
> work!).  Neither
> works.
> 
> Any suggestions.  And please don't waste time flaming me -- I
> know I should
> be able to figure this out -- but even after researching the
> archives and
> CCO, I am no closer to a solution than I am to passing the LAB
> on the first
> try!
> 
> So any and all helpful suggestions would be welcome.
> 
> Thanks to all -- in advance!!
> Greg Macaulay
> Oldest Human Being preparing for the CCIE Lab
> Lifetime AARP member
> Retired Attorney/Law Professor
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56622&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Queuing question(s) again ! [7:56519]

2002-10-31 Thread John Neiberger
Wouldn't that be an ABT?  :-)

John

>>> "Priscilla Oppenheimer"  10/31/02 1:40:24 PM
>>>
I like that: "acronym-based technologies." ;-)

Priscilla

"B.J. Wilson" wrote:
> 
> > Just about the last phrase 'The "priority"
> > command is not used with CBWFQ',
> > considering that I call LLQ within CBWFQ,   is
> > it correct ?
> 
> Well...you calling it "LLQ within CBWFQ" isn't Cisco canon, but
> your config
> below is a fine LLQ configuration.
> 
> I've noticed (especially in my studies of QoS) that the only
> differentiator
> between acronym-based technologies (like LLQ and CBWFQ) is just
> the addition
> of one little command in an otherwise "old" config.
> 
> BJ
> 
> 
> > 
> >policy-map MyPolicy
> >  class Voice
> >priority 200
> >  class Silver
> >bandwidth 200
> >  class class-default
> >random-detect
> >fair-queue




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56623&t=56519
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Harold Monroe
When you ping from the DOS prompt you are pinging from your computer to the
router , when you ping in hyperterminal you are pinging from the router to
your PC (or whatever other devices you have on your network).

DOS Prompt (your PC) ---Ping--> router
Hyperterminal (router) --- Ping ---> PC

If this wasn't what you were referring to, in hyperterminal are you able to
ping the router, if not something is wrong on the router setup?

Are you able to ping the PC from hyperterminal (i.e. the router)?

Are you able to ping the router from DOS?
-Original Message-
From:   Greg Macaulay [mailto:gmac115@;cox.net]
Sent:   Thursday, October 31, 2002 12:11 PM
To: [EMAIL PROTECTED]
Subject:Problems w/Hyperterminal?? [7:56619]

Hi all --

I'm suffering thru a terrible newbies type problem and
cannot seem to
identify the error of my ways.  I know it's something very
basic -- and it
brings back memories of high school geometry homework where
I stared at
objects for hours on end trying to understand!!!

The thrust of my pitiful situation is: I cannot "ping" from
hyperterminal --
altho' I can readily "ping" from a DOS prompt on the same
PC.

I have the parameters set properly 8-N-1-None -- and I have
tried with the
TFTP server setup on the same PC and on another in my home
network (I have
10 pcs in my home network -- most old -- but they still
work!).  Neither
works.

Any suggestions.  And please don't waste time flaming me --
I know I should
be able to figure this out -- but even after researching the
archives and
CCO, I am no closer to a solution than I am to passing the
LAB on the first
try!

So any and all helpful suggestions would be welcome.

Thanks to all -- in advance!!
Greg Macaulay
Oldest Human Being preparing for the CCIE Lab
Lifetime AARP member
Retired Attorney/Law Professor
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56624&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Another Internet Draft of Interest [7:56560]

2002-10-31 Thread dre
""Howard C. Berkowitz""  wrote in message
news:200210311445.OAA31654@;groupstudy.com...
> At 10:22 AM + 10/31/02, Nigel Taylor wrote:
>
> There are several problems with using timestamped measurement in the
> router itself.  Some of these may be reduced with IPv6, but, for
> others, external passive hardware or special router hardware seems
> necessary.  See our BGP convergence drafts,

Clock synchronization and time skew are problems related to all
cross-system, cross-network measurement.  In the SNMP world, this is
generally avoided by utilizing a few different methods (usually combined):
1) External NTP or GPS time synchronization (or internal atomic clocks)
2) Polling sysUpTime or ifCounterDiscontinuityTime
3) Polling the above variables with GET-BULK's at the same time the
other variables are polled

If using external sources for time synchronization, you also have to
take into account things like jitter (which you wouldn't necessarily
have to account for in many applications like TCP/HTTP).

An extra problem with time skew is the rate at which the user-level
or kernel-level timestamps are created (e.g. when sending test packets).
The kernel-level clock granularities on PC (x86) computers cause at
least 10ms jitter, while NTP adjustment for VCO gain require 1 ms
(see RFC 1305 for more details or Google Groups below:
http://groups.google.com/groups?as_ugroup=comp.protocols.time.ntp ).

One way to overcome this problem is done with a program like
rude (http://rude.sourceforge.net/), which dispatches packets with
a pecision of 1us.  Normally, user-level timestamps are less accurate
than even kernel-level timestamps, but in this case they are not ;>

> First, routers may not give sufficient precision in measurement,
> because they rate-limit ICMP to protect against ICMP floods, or
> simply don't prioritize it highly.  I mention IPv6 because
> authenticated source addresses may be used without fear of denial of
> service.

Rate-limiting is actually default in some versions of IOS for ICMP, add
into things like SPD (selective packet discard) and the primary fact that
ICMP takes a different path in software/hardware (every hardware has
different ways of doing "life-of-a-packet")... all this makes ICMP fairly
useless as an accurate measurement.

There are also problems with ECMP and ICMP (I love how the two
terms are totally unrelated otherwise), and traceroute doesn't like ECMP
much either.

Sort of sad that after 18 years or so, VJ's tool "traceroute" is still the
only
game in town (please don't mention things like mtr or visualpulse, which
effectively are the same thing).

> Second, the router may or may not have the capacity to capture and
> store a statistically valid amount of data. NetFlow data export, for
> example, summarizes to a degree. If you could shoot debug to syslog,
> you'd have a much better chance as long as the router could keep up
> with it, using something like a SPAN port.

NetFlow, Cisco debugs (yes, if possible and generally not), packet
capture infrastructure (better to use taps than SPAN's for similar timing
reasons), and other tools are great for measurement.  It's good to have
other options.  Using optical/copper taps along with a FreeBSD box
running tcpdump (http://www.tcpdump.org/) and tcpdump contrib tools
like tcptrace (http://www.tcpdump.org/related.html) are really useful for
determining things like TCP Goodput, etc.  These can generally be more
accurate than ping/traceroute for determining performance problems, but
only if you are skilled with ARP/IP/TCP/HTTP capture output and
network/server hardware (e.g. routers, switches, NIC's, drivers) and/or
TCP/IP stacks (sendspace/recvspace, socket buffers, maxconn's, mss
max/avg/min, retransmissions, retransmission timers, SACK, window
sizes, et al).  Commercial products can sometimes be substituted (e.g.
Niksun NetVCR or Finisar/Shomiti Surveyor - which are sort of like
NAI SnifferPro, except they work).

Generally, network problems in today's network (particularly problems
with HTTP applications) generally revolve only around a few things
inside the networks (at the server or client end):
1) Server/Client NIC problems
2) TCP/IP stack problems (visible by zero window sizes / window
resets or too many retransmissions)
3) Layer 2 Spanning-Tree or HSRP/VRRP switch/router problems
4) Layer 3 BGP/OSPF/EIGRP convergence router problems
5) Layer 3 CEF or forwarding router problems
6) ACL or firewall problems (handling high pps or number of sessions)

Even more rarely, they happen outside of the network (on the Internet):
1) ISP rolling reboots during maintenance or unscheduled outage
2) ISP peering issues generally caused by congestion between two peers
3) ISP Layer 3 BGP/OSPF/ISIS/MPLS convergence router problems
4) ISP Layer 3 CEF or forwarding router problems

Sometimes they aren't network-related but instead browser (i.e.
application) or server-related:
1) Mis-configured or "bad-state" client or server (including proxies

RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Greg Macaulay
I do understand the basics -- but I'm not able to ping anything from
hyperterminal -- (1) the router, (2) the PC -- but I am able to ping the
router from DOS.

My problem arose when I was unable to "copy flash tftp" I tried by process
of elimination to id the problem -- and it seemed to be hyperterminal.

However, in the past few moments, someone else wrote to me and inquired
about my hub (10/100 or 100!) -- mine is 100 only.  Thus, the routers (at
10) would not communicate.  I'm going to try and swap out the hub and see if
this helps.  I'm not a 100% certain that this will fix the problem -- but
I'm going to try it and see. One never knows.

Be back in a few . . . .

Greg Macaulay
Oldest Human Being preparing for the CCIE Lab
Lifetime AARP member
Retired Attorney/Law Professor

> -Original Message-
> From: Harold Monroe [mailto:HMonroe@;DTCCORP.com]
> Sent: Thursday, October 31, 2002 4:07 PM
> To: 'Greg Macaulay'; [EMAIL PROTECTED]
> Subject: RE: Problems w/Hyperterminal?? [7:56619]
>
>
> When you ping from the DOS prompt you are pinging from your
> computer to the
> router , when you ping in hyperterminal you are pinging from the router to
> your PC (or whatever other devices you have on your network).
>
> DOS Prompt (your PC) ---Ping--> router
> Hyperterminal (router) --- Ping ---> PC
>
> If this wasn't what you were referring to, in hyperterminal are
> you able to
> ping the router, if not something is wrong on the router setup?
>
> Are you able to ping the PC from hyperterminal (i.e. the router)?
>
> Are you able to ping the router from DOS?
>   -Original Message-
>   From:   Greg Macaulay [mailto:gmac115@;cox.net]
>   Sent:   Thursday, October 31, 2002 12:11 PM
>   To: [EMAIL PROTECTED]
>   Subject:Problems w/Hyperterminal?? [7:56619]
>
>   Hi all --
>
>   I'm suffering thru a terrible newbies type problem and
> cannot seem to
>   identify the error of my ways.  I know it's something very
> basic -- and it
>   brings back memories of high school geometry homework where
> I stared at
>   objects for hours on end trying to understand!!!
>
>   The thrust of my pitiful situation is: I cannot "ping" from
> hyperterminal --
>   altho' I can readily "ping" from a DOS prompt on the same
> PC.
>
>   I have the parameters set properly 8-N-1-None -- and I have
> tried with the
>   TFTP server setup on the same PC and on another in my home
> network (I have
>   10 pcs in my home network -- most old -- but they still
> work!).  Neither
>   works.
>
>   Any suggestions.  And please don't waste time flaming me --
> I know I should
>   be able to figure this out -- but even after researching the
> archives and
>   CCO, I am no closer to a solution than I am to passing the
> LAB on the first
>   try!
>
>   So any and all helpful suggestions would be welcome.
>
>   Thanks to all -- in advance!!
>   Greg Macaulay
>   Oldest Human Being preparing for the CCIE Lab
>   Lifetime AARP member
>   Retired Attorney/Law Professor
> [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56626&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Question on ATM OC-3 WAN connection and TcpWindowSize [7:56627]

2002-10-31 Thread John Hutchison
I once had a similar problem. The problem ended up being that the individual
files were so small that the ftp client simply couldn't get up to speed. It
would basically start slow for each file and accelerate during the upload.
They were so small, though, that basically it keeps starting over from 0. I
discovered that by compressing files using whatever program you prefer
(winzip, winrar, tar) that making it one file allowed it to get up to full
speed utilization. Not sure if this will help.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56627&t=56627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Queuing question(s) again ! [7:56519]

2002-10-31 Thread B.J. Wilson
Shhh!  The QoS Config Guide is long enough as it is - I don't want you two
giving Cisco any ideas!

;-)


- Original Message -
From: "John Neiberger" 
To: 
Sent: Thursday, October 31, 2002 4:04 PM
Subject: Re: Queuing question(s) again ! [7:56519]


> Wouldn't that be an ABT?  :-)
>
> John
>
> >>> "Priscilla Oppenheimer"  10/31/02 1:40:24 PM
> >>>
> I like that: "acronym-based technologies." ;-)
>
> Priscilla
>
> "B.J. Wilson" wrote:
> >
> > > Just about the last phrase 'The "priority"
> > > command is not used with CBWFQ',
> > > considering that I call LLQ within CBWFQ,   is
> > > it correct ?
> >
> > Well...you calling it "LLQ within CBWFQ" isn't Cisco canon, but
> > your config
> > below is a fine LLQ configuration.
> >
> > I've noticed (especially in my studies of QoS) that the only
> > differentiator
> > between acronym-based technologies (like LLQ and CBWFQ) is just
> > the addition
> > of one little command in an otherwise "old" config.
> >
> > BJ
> >
> >
> > >
> > >policy-map MyPolicy
> > >  class Voice
> > >priority 200
> > >  class Silver
> > >bandwidth 200
> > >  class class-default
> > >random-detect
> > >fair-queue




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56628&t=56519
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread MADMAN
You can't telnet from Hyperterm??  Good! Another reason to hate it and
use teraterm:)

  Dave

Priscilla Oppenheimer wrote:
> 
> I wouldn't flame the oldest CCDP on the planet ;-), but, what do you mean
> you can't ping from HyperTerminal? HyperTerminal just gets you serial
access
> to the console port.
> 
> Priscilla
> 
> Greg Macaulay wrote:
> >
> > Hi all --
> >
> > I'm suffering thru a terrible newbies type problem and cannot
> > seem to
> > identify the error of my ways.  I know it's something very
> > basic -- and it
> > brings back memories of high school geometry homework where I
> > stared at
> > objects for hours on end trying to understand!!!
> >
> > The thrust of my pitiful situation is: I cannot "ping" from
> > hyperterminal --
> > altho' I can readily "ping" from a DOS prompt on the same PC.
> >
> > I have the parameters set properly 8-N-1-None -- and I have
> > tried with the
> > TFTP server setup on the same PC and on another in my home
> > network (I have
> > 10 pcs in my home network -- most old -- but they still
> > work!).  Neither
> > works.
> >
> > Any suggestions.  And please don't waste time flaming me -- I
> > know I should
> > be able to figure this out -- but even after researching the
> > archives and
> > CCO, I am no closer to a solution than I am to passing the LAB
> > on the first
> > try!
> >
> > So any and all helpful suggestions would be welcome.
> >
> > Thanks to all -- in advance!!
> > Greg Macaulay
> > Oldest Human Being preparing for the CCIE Lab
> > Lifetime AARP member
> > Retired Attorney/Law Professor
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

"You don't make the poor richer by making the rich poorer." --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56629&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Williams, Dave
You can use TCP/IP (Winsock) to connect to a telnet type device with
hyperterminal.  However, in order to ping, obviously, you have to be
connected to something. If you are connected to a router (or other telnet
type device), try running a traceroute to the device you're trying to ping.

Dave Williams, CCDA, CCNA, CCSA
Senior Network Engineer



-Original Message-
From: Harold Monroe [mailto:HMonroe@;DTCCORP.com]
Sent: Thursday, October 31, 2002 3:08 PM
To: [EMAIL PROTECTED]
Subject: RE: Problems w/Hyperterminal?? [7:56619]


When you ping from the DOS prompt you are pinging from your computer to the
router , when you ping in hyperterminal you are pinging from the router to
your PC (or whatever other devices you have on your network).

DOS Prompt (your PC) ---Ping--> router
Hyperterminal (router) --- Ping ---> PC

If this wasn't what you were referring to, in hyperterminal are you able to
ping the router, if not something is wrong on the router setup?

Are you able to ping the PC from hyperterminal (i.e. the router)?

Are you able to ping the router from DOS?
-Original Message-
From:   Greg Macaulay [mailto:gmac115@;cox.net]
Sent:   Thursday, October 31, 2002 12:11 PM
To: [EMAIL PROTECTED]
Subject:Problems w/Hyperterminal?? [7:56619]

Hi all --

I'm suffering thru a terrible newbies type problem and
cannot seem to
identify the error of my ways.  I know it's something very
basic -- and it
brings back memories of high school geometry homework where
I stared at
objects for hours on end trying to understand!!!

The thrust of my pitiful situation is: I cannot "ping" from
hyperterminal --
altho' I can readily "ping" from a DOS prompt on the same
PC.

I have the parameters set properly 8-N-1-None -- and I have
tried with the
TFTP server setup on the same PC and on another in my home
network (I have
10 pcs in my home network -- most old -- but they still
work!).  Neither
works.

Any suggestions.  And please don't waste time flaming me --
I know I should
be able to figure this out -- but even after researching the
archives and
CCO, I am no closer to a solution than I am to passing the
LAB on the first
try!

So any and all helpful suggestions would be welcome.

Thanks to all -- in advance!!
Greg Macaulay
Oldest Human Being preparing for the CCIE Lab
Lifetime AARP member
Retired Attorney/Law Professor
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56630&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread John Neiberger
TeraTerm rocks! It's almost as cool as SecureCRT, but SecureCRT isn't
free like TeraTerm.

>>> "MADMAN"  10/31/02 2:45:45 PM >>>
You can't telnet from Hyperterm??  Good! Another reason to hate it and
use teraterm:)

  Dave

Priscilla Oppenheimer wrote:
> 
> I wouldn't flame the oldest CCDP on the planet ;-), but, what do you
mean
> you can't ping from HyperTerminal? HyperTerminal just gets you
serial
access
> to the console port.
> 
> Priscilla
> 
> Greg Macaulay wrote:
> >
> > Hi all --
> >
> > I'm suffering thru a terrible newbies type problem and cannot
> > seem to
> > identify the error of my ways.  I know it's something very
> > basic -- and it
> > brings back memories of high school geometry homework where I
> > stared at
> > objects for hours on end trying to understand!!!
> >
> > The thrust of my pitiful situation is: I cannot "ping" from
> > hyperterminal --
> > altho' I can readily "ping" from a DOS prompt on the same PC.
> >
> > I have the parameters set properly 8-N-1-None -- and I have
> > tried with the
> > TFTP server setup on the same PC and on another in my home
> > network (I have
> > 10 pcs in my home network -- most old -- but they still
> > work!).  Neither
> > works.
> >
> > Any suggestions.  And please don't waste time flaming me -- I
> > know I should
> > be able to figure this out -- but even after researching the
> > archives and
> > CCO, I am no closer to a solution than I am to passing the LAB
> > on the first
> > try!
> >
> > So any and all helpful suggestions would be welcome.
> >
> > Thanks to all -- in advance!!
> > Greg Macaulay
> > Oldest Human Being preparing for the CCIE Lab
> > Lifetime AARP member
> > Retired Attorney/Law Professor
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

"You don't make the poor richer by making the rich poorer." --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56631&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread The Long and Winding Road
what port is your hyperterminal set up to use? surely not your ethernet
port, since one uses hyperterminal for serial communications.

if you can ping from DOS to the router, then the ethernet  segment is OK

but your hyperterminal provides you only with a session to the router or
switch.

Greg - draw us a picture - what are you connected to with your hyperterminal
session?

--

www.chuckslongroad.info




""Greg Macaulay""  wrote in message
news:200210312120.VAA22346@;groupstudy.com...
> I do understand the basics -- but I'm not able to ping anything from
> hyperterminal -- (1) the router, (2) the PC -- but I am able to ping the
> router from DOS.
>
> My problem arose when I was unable to "copy flash tftp" I tried by process
> of elimination to id the problem -- and it seemed to be hyperterminal.
>
> However, in the past few moments, someone else wrote to me and inquired
> about my hub (10/100 or 100!) -- mine is 100 only.  Thus, the routers (at
> 10) would not communicate.  I'm going to try and swap out the hub and see
if
> this helps.  I'm not a 100% certain that this will fix the problem -- but
> I'm going to try it and see. One never knows.
>
> Be back in a few . . . .
>
> Greg Macaulay
> Oldest Human Being preparing for the CCIE Lab
> Lifetime AARP member
> Retired Attorney/Law Professor
>
> > -Original Message-
> > From: Harold Monroe [mailto:HMonroe@;DTCCORP.com]
> > Sent: Thursday, October 31, 2002 4:07 PM
> > To: 'Greg Macaulay'; [EMAIL PROTECTED]
> > Subject: RE: Problems w/Hyperterminal?? [7:56619]
> >
> >
> > When you ping from the DOS prompt you are pinging from your
> > computer to the
> > router , when you ping in hyperterminal you are pinging from the router
to
> > your PC (or whatever other devices you have on your network).
> >
> > DOS Prompt (your PC) ---Ping--> router
> > Hyperterminal (router) --- Ping ---> PC
> >
> > If this wasn't what you were referring to, in hyperterminal are
> > you able to
> > ping the router, if not something is wrong on the router setup?
> >
> > Are you able to ping the PC from hyperterminal (i.e. the router)?
> >
> > Are you able to ping the router from DOS?
> > -Original Message-
> > From: Greg Macaulay [mailto:gmac115@;cox.net]
> > Sent: Thursday, October 31, 2002 12:11 PM
> > To: [EMAIL PROTECTED]
> > Subject: Problems w/Hyperterminal?? [7:56619]
> >
> > Hi all --
> >
> > I'm suffering thru a terrible newbies type problem and
> > cannot seem to
> > identify the error of my ways.  I know it's something very
> > basic -- and it
> > brings back memories of high school geometry homework where
> > I stared at
> > objects for hours on end trying to understand!!!
> >
> > The thrust of my pitiful situation is: I cannot "ping" from
> > hyperterminal --
> > altho' I can readily "ping" from a DOS prompt on the same
> > PC.
> >
> > I have the parameters set properly 8-N-1-None -- and I have
> > tried with the
> > TFTP server setup on the same PC and on another in my home
> > network (I have
> > 10 pcs in my home network -- most old -- but they still
> > work!).  Neither
> > works.
> >
> > Any suggestions.  And please don't waste time flaming me --
> > I know I should
> > be able to figure this out -- but even after researching the
> > archives and
> > CCO, I am no closer to a solution than I am to passing the
> > LAB on the first
> > try!
> >
> > So any and all helpful suggestions would be welcome.
> >
> > Thanks to all -- in advance!!
> > Greg Macaulay
> > Oldest Human Being preparing for the CCIE Lab
> > Lifetime AARP member
> > Retired Attorney/Law Professor
> > [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56633&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: GSR line card utilization guidelines [7:56521]

2002-10-31 Thread Adam Obszynski
b> I'm considering enabling some features on a E0 GSR line
b> card.  I'm going to monitor the line card CPU utilization
b> in order to track the impact the features have on the LC.

b> Does anyone have any general rules of thumb (or reference
b> document) that provides guidelines on how far, utilization
b> wise, a line card might be pushed before packet forwarding
b> performance is affected?  Said differently, what's the
b> threshold for line card utilization, that if exceeded,
b> probably means I should disable these features?


I spent 1 year fighting with Cisco Development and 12.0.*S software...
and E0 ATM cards.. after that time the 19S software start to works
correctly with most of needed features (provied in manuals even)
so first try do something in lab with some help of network analyzers..
than try enable this feature 3-4 time more than just one... and try
implement on production... and be at the front of GSR )



-- 
AWO kado




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56634&t=56521
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: books for ccie written [7:56604]

2002-10-31 Thread Jesse Loggins
Here are the books that I own and am using to prepare for the written and
lab. Along with an extensive home lab setup. After these I am pretty
posative that I will pass both on the first attempt. Nothing wrong with
posative thinking...

1. Routing TCP/IP vol 1
2. Routing TCP/IP vol 2
3. Internet Routing Architecture
4. Cisco IOS 12.0 Quality of Service
5. Developing IP Multicast Networks
6. Cisco Voice over Frame Relay, ATM, and IP
7. MPLS and VPN Architectures 
8. CCIE Routing and Switching Exam Certification GUide
9. CCIE Practical Studies
10. TCP/IP Illustrated Vol. 1
11. Cisco Certification Bridges, Routers, and Switches for CCIEs

I also posses the CCNP Certification Library which was utilized to gain my
CCNP and the CCNA book written by Lamalle which was used quite a while ago
to gain a CCNA. All of this was suplimented with day to day experience. HTH

 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56632&t=56604
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Priscilla Oppenheimer
Greg Macaulay wrote:
> 
> I do understand the basics -- but I'm not able to ping anything
> from
> hyperterminal 

Do you mean you can't ping from the router? What source address is the
router using in the ping? With extended ping you can control this.

-- (1) the router, (2) the PC -- but I am able to
> ping the
> router from DOS.

Which address on the router can you ping from the PC? Any?

What do you have the default gateway set to on the PC? Hopefully the router.

> 
> My problem arose when I was unable to "copy flash tftp" I tried
> by process
> of elimination to id the problem -- and it seemed to be
> hyperterminal.

How could HyperTermianl affect your ability to copy a file from the router
to the PC? HyperTerminal just lets you see and control what's happening on
the router. It's just a Terminal.

I guess newer versions do Telnet too, but it's still just acting like a
Terminal. (I don't use HyperTerminal anymore. I use SecureCRT. It's much
better.) You can probably leave it out of the equation though.

Priscilla

> 
> However, in the past few moments, someone else wrote to me and
> inquired
> about my hub (10/100 or 100!) -- mine is 100 only.  Thus, the
> routers (at
> 10) would not communicate.  I'm going to try and swap out the
> hub and see if
> this helps.  I'm not a 100% certain that this will fix the
> problem -- but
> I'm going to try it and see. One never knows.
> 
> Be back in a few . . . .
> 
> Greg Macaulay
> Oldest Human Being preparing for the CCIE Lab
> Lifetime AARP member
> Retired Attorney/Law Professor
> 
> > -Original Message-
> > From: Harold Monroe [mailto:HMonroe@;DTCCORP.com]
> > Sent: Thursday, October 31, 2002 4:07 PM
> > To: 'Greg Macaulay'; [EMAIL PROTECTED]
> > Subject: RE: Problems w/Hyperterminal?? [7:56619]
> >
> >
> > When you ping from the DOS prompt you are pinging from your
> > computer to the
> > router , when you ping in hyperterminal you are pinging from
> the router to
> > your PC (or whatever other devices you have on your network).
> >
> > DOS Prompt (your PC) ---Ping--> router
> > Hyperterminal (router) --- Ping ---> PC
> >
> > If this wasn't what you were referring to, in hyperterminal
> are
> > you able to
> > ping the router, if not something is wrong on the router
> setup?
> >
> > Are you able to ping the PC from hyperterminal (i.e. the
> router)?
> >
> > Are you able to ping the router from DOS?
> > -Original Message-
> > From:   Greg Macaulay [mailto:gmac115@;cox.net]
> > Sent:   Thursday, October 31, 2002 12:11 PM
> > To: [EMAIL PROTECTED]
> > Subject:Problems w/Hyperterminal?? [7:56619]
> >
> > Hi all --
> >
> > I'm suffering thru a terrible newbies type problem and
> > cannot seem to
> > identify the error of my ways.  I know it's something very
> > basic -- and it
> > brings back memories of high school geometry homework where
> > I stared at
> > objects for hours on end trying to understand!!!
> >
> > The thrust of my pitiful situation is: I cannot "ping" from
> > hyperterminal --
> > altho' I can readily "ping" from a DOS prompt on the same
> > PC.
> >
> > I have the parameters set properly 8-N-1-None -- and I have
> > tried with the
> > TFTP server setup on the same PC and on another in my home
> > network (I have
> > 10 pcs in my home network -- most old -- but they still
> > work!).  Neither
> > works.
> >
> > Any suggestions.  And please don't waste time flaming me --
> > I know I should
> > be able to figure this out -- but even after researching the
> > archives and
> > CCO, I am no closer to a solution than I am to passing the
> > LAB on the first
> > try!
> >
> > So any and all helpful suggestions would be welcome.
> >
> > Thanks to all -- in advance!!
> > Greg Macaulay
> > Oldest Human Being preparing for the CCIE Lab
> > Lifetime AARP member
> > Retired Attorney/Law Professor
> > [EMAIL PROTECTED]
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56635&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE LAB Study Partner in Houston [7:56636]

2002-10-31 Thread Joseph Chandler
Anyone currently studying for the CCIE LAB in Houston
Texas?  

If so, let's communicate to see if partnering would be 
beneficial.

Thanks,

Trevor C.



-
Do you Yahoo!?
HotJobs - Search new jobs daily now




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56636&t=56636
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Creighton Bill-BCREIGH1
When setting up a connection in Hyperterm you can select TCP/IP Winsock
along with "direct to COM X"
If you want to use Hyperterm as a telnet client (though I can't think of any
benefit over using a generic DOS prompt - I use Procomm, myself) you only
need to make sure that your connection properties have that specified. 

If you are setting your connection up as Priscilla has mentioned, where you
are emulating a terminal attached to a remote station - i.e. a device
directly attached to your serial/COM port, then as has been stated, you
would be pinging not from your local machine, but rather the ICMP echo would
originate from the directly connected device.

HTH
Bill Creighton CCNP
Senior System Engineer
Motorola
iDEN CNRC Packet Data / MPS


-Original Message-
From: The Long and Winding Road [mailto:groupstudyspamtest@;cl.cncdsl.com] 
Sent: Thursday, October 31, 2002 4:09 PM
To: [EMAIL PROTECTED]
Subject: Re: Problems w/Hyperterminal?? [7:56619]


what port is your hyperterminal set up to use? surely not your ethernet
port, since one uses hyperterminal for serial communications.

if you can ping from DOS to the router, then the ethernet  segment is OK

but your hyperterminal provides you only with a session to the router or
switch.

Greg - draw us a picture - what are you connected to with your hyperterminal
session?

--

www.chuckslongroad.info




""Greg Macaulay""  wrote in message
news:200210312120.VAA22346@;groupstudy.com...
> I do understand the basics -- but I'm not able to ping anything from 
> hyperterminal -- (1) the router, (2) the PC -- but I am able to ping 
> the router from DOS.
>
> My problem arose when I was unable to "copy flash tftp" I tried by 
> process of elimination to id the problem -- and it seemed to be 
> hyperterminal.
>
> However, in the past few moments, someone else wrote to me and 
> inquired about my hub (10/100 or 100!) -- mine is 100 only.  Thus, the 
> routers (at
> 10) would not communicate.  I'm going to try and swap out the hub and see
if
> this helps.  I'm not a 100% certain that this will fix the problem -- 
> but I'm going to try it and see. One never knows.
>
> Be back in a few . . . .
>
> Greg Macaulay
> Oldest Human Being preparing for the CCIE Lab
> Lifetime AARP member
> Retired Attorney/Law Professor
>
> > -Original Message-
> > From: Harold Monroe [mailto:HMonroe@;DTCCORP.com]
> > Sent: Thursday, October 31, 2002 4:07 PM
> > To: 'Greg Macaulay'; [EMAIL PROTECTED]
> > Subject: RE: Problems w/Hyperterminal?? [7:56619]
> >
> >
> > When you ping from the DOS prompt you are pinging from your computer 
> > to the router , when you ping in hyperterminal you are pinging from 
> > the router
to
> > your PC (or whatever other devices you have on your network).
> >
> > DOS Prompt (your PC) ---Ping--> router
> > Hyperterminal (router) --- Ping ---> PC
> >
> > If this wasn't what you were referring to, in hyperterminal are you 
> > able to ping the router, if not something is wrong on the router 
> > setup?
> >
> > Are you able to ping the PC from hyperterminal (i.e. the router)?
> >
> > Are you able to ping the router from DOS?
> > -Original Message-
> > From: Greg Macaulay [mailto:gmac115@;cox.net]
> > Sent: Thursday, October 31, 2002 12:11 PM
> > To: [EMAIL PROTECTED]
> > Subject: Problems w/Hyperterminal?? [7:56619]
> >
> > Hi all --
> >
> > I'm suffering thru a terrible newbies type problem and cannot seem 
> > to identify the error of my ways.  I know it's something very
> > basic -- and it
> > brings back memories of high school geometry homework where
> > I stared at
> > objects for hours on end trying to understand!!!
> >
> > The thrust of my pitiful situation is: I cannot "ping" from 
> > hyperterminal -- altho' I can readily "ping" from a DOS prompt on 
> > the same PC.
> >
> > I have the parameters set properly 8-N-1-None -- and I have tried 
> > with the TFTP server setup on the same PC and on another in my home
> > network (I have
> > 10 pcs in my home network -- most old -- but they still
> > work!).  Neither
> > works.
> >
> > Any suggestions.  And please don't waste time flaming me -- I know I 
> > should be able to figure this out -- but even after researching the
> > archives and
> > CCO, I am no closer to a solution than I am to passing the
> > LAB on the first
> > try!
> >
> > So any and all helpful suggestions would be welcome.
> >
> > Thanks to all -- in advance!!
> > Greg Macaulay
> > Oldest Human Being preparing for the CCIE Lab
> > Lifetime AARP member
> > Retired Attorney/Law Professor
> > [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56637&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Creighton Bill-BCREIGH1
> However, in the past few moments, someone else wrote to me and 
> inquired about my hub (10/100 or 100!) -- mine is 100 only.  Thus, the
> routers (at
> 10) would not communicate.  I'm going to try and swap out the
> hub and see if
> this helps.  I'm not a 100% certain that this will fix the
> problem -- but
> I'm going to try it and see. One never knows.

How can you ping from a DOS prompt if the destination is crossing a repeater
with a speed mismatch? A FastEthernet-only hub won't allow comms between
10Mb/s devices, so if you wouldn't have any visibility to that device,
whether from a DOS prompt, Hyperterminal, or anything...

Bill Creighton CCNP
Senior System Engineer
Motorola
iDEN CNRC Packet Data / MPS


-Original Message-
From: Greg Macaulay [mailto:gmac115@;cox.net] 
Sent: Thursday, October 31, 2002 3:20 PM
To: [EMAIL PROTECTED]
Subject: RE: Problems w/Hyperterminal?? [7:56619]


I do understand the basics -- but I'm not able to ping anything from
hyperterminal -- (1) the router, (2) the PC -- but I am able to ping the
router from DOS.

My problem arose when I was unable to "copy flash tftp" I tried by process
of elimination to id the problem -- and it seemed to be hyperterminal.

However, in the past few moments, someone else wrote to me and inquired
about my hub (10/100 or 100!) -- mine is 100 only.  Thus, the routers (at
10) would not communicate.  I'm going to try and swap out the hub and see if
this helps.  I'm not a 100% certain that this will fix the problem -- but
I'm going to try it and see. One never knows.

Be back in a few . . . .

Greg Macaulay
Oldest Human Being preparing for the CCIE Lab
Lifetime AARP member
Retired Attorney/Law Professor

> -Original Message-
> From: Harold Monroe [mailto:HMonroe@;DTCCORP.com]
> Sent: Thursday, October 31, 2002 4:07 PM
> To: 'Greg Macaulay'; [EMAIL PROTECTED]
> Subject: RE: Problems w/Hyperterminal?? [7:56619]
>
>
> When you ping from the DOS prompt you are pinging from your computer 
> to the router , when you ping in hyperterminal you are pinging from 
> the router to your PC (or whatever other devices you have on your 
> network).
>
> DOS Prompt (your PC) ---Ping--> router
> Hyperterminal (router) --- Ping ---> PC
>
> If this wasn't what you were referring to, in hyperterminal are you 
> able to ping the router, if not something is wrong on the router 
> setup?
>
> Are you able to ping the PC from hyperterminal (i.e. the router)?
>
> Are you able to ping the router from DOS?
>   -Original Message-
>   From:   Greg Macaulay [mailto:gmac115@;cox.net]
>   Sent:   Thursday, October 31, 2002 12:11 PM
>   To: [EMAIL PROTECTED]
>   Subject:Problems w/Hyperterminal?? [7:56619]
>
>   Hi all --
>
>   I'm suffering thru a terrible newbies type problem and
cannot seem 
> to
>   identify the error of my ways.  I know it's something very
basic -- 
> and it
>   brings back memories of high school geometry homework where
I stared 
> at
>   objects for hours on end trying to understand!!!
>
>   The thrust of my pitiful situation is: I cannot "ping" from 
> hyperterminal --
>   altho' I can readily "ping" from a DOS prompt on the same
PC.
>
>   I have the parameters set properly 8-N-1-None -- and I have
tried 
> with the
>   TFTP server setup on the same PC and on another in my home
network 
> (I have
>   10 pcs in my home network -- most old -- but they still
work!).  
> Neither
>   works.
>
>   Any suggestions.  And please don't waste time flaming me --
I know I 
> should
>   be able to figure this out -- but even after researching the

> archives and
>   CCO, I am no closer to a solution than I am to passing the
LAB on 
> the first
>   try!
>
>   So any and all helpful suggestions would be welcome.
>
>   Thanks to all -- in advance!!
>   Greg Macaulay
>   Oldest Human Being preparing for the CCIE Lab
>   Lifetime AARP member
>   Retired Attorney/Law Professor
> [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56638&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Routing Question. [7:56639]

2002-10-31 Thread Jose Tomás Pinal Salvador
Hello Group Study!

Currently, I have a  Cisco router 7513 speaking BGP4 routing protocol with 2 
providers. I need to route all the national traficc for provider 1 and all 
the International traficc for provider 2. How can I configure that in the 
router. Can I do that based in source and destination IP or based in the 
Autonomous System of each provider around the world?.
We are studying to buy a Net Flow for to get statics.

Thanks for your help.




_
Unlimited Internet access -- and 2 months free!  Try MSN. 
http://resourcecenter.msn.com/access/plans/2monthsfree.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56639&t=56639
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Question on ATM OC-3 WAN connection and TcpWin [7:56627]

2002-10-31 Thread Priscilla Oppenheimer
Yes, that would be the TCP Slow Start algorithm doing its job. I should add
that to my list of items that affect throughput. There's a good discussion
of it in RFC 2002, written by W. Richard Stevens, author of TCP/IP
Illustrated.

And surprisingly, I found a great page at Microsoft, of all places, on
various TCP options. See here:

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q224829&;
___

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com

John Hutchison wrote:
> 
> I once had a similar problem. The problem ended up being that
> the individual
> files were so small that the ftp client simply couldn't get up
> to speed. It
> would basically start slow for each file and accelerate during
> the upload.
> They were so small, though, that basically it keeps starting
> over from 0. I
> discovered that by compressing files using whatever program you
> prefer
> (winzip, winrar, tar) that making it one file allowed it to get
> up to full
> speed utilization. Not sure if this will help.
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56640&t=56627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Question on ATM OC-3 WAN connection and TcpWin [7:56627]

2002-10-31 Thread Priscilla Oppenheimer
Priscilla Oppenheimer wrote:
> 
> Yes, that would be the TCP Slow Start algorithm doing its job.
> I should add that to my list of items that affect throughput.
> There's a good discussion of it in RFC 2002, written by W.
> Richard Stevens, author of TCP/IP Illustrated.

That should say RFC 2001.

> 
> And surprisingly, I found a great page at Microsoft, of all
> places, on various TCP options. See here:
> 
> http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q224829&;
> ___
> 
> Priscilla Oppenheimer
> www.troubleshootingnetworks.com
> www.priscilla.com
> 
> John Hutchison wrote:
> > 
> > I once had a similar problem. The problem ended up being that
> > the individual
> > files were so small that the ftp client simply couldn't get up
> > to speed. It
> > would basically start slow for each file and accelerate during
> > the upload.
> > They were so small, though, that basically it keeps starting
> > over from 0. I
> > discovered that by compressing files using whatever program
> you
> > prefer
> > (winzip, winrar, tar) that making it one file allowed it to
> get
> > up to full
> > speed utilization. Not sure if this will help.
> > 
> > 
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56641&t=56627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Bored@Work [7:56642]

2002-10-31 Thread John Burgess
Budgets tight, no new big projects on the horizon.  Everything working
smoothly.  I should make use of the time and get a CCIE right?

My background:

20+ years in IT, mostly Unix (Sun, HP, etc), NT, various programming
languages, bla, bla.  Founded an ISP but closed it down after it sucked me
dry last year.  4 years using Cisco (36XX, 26XX, 29XX, 17XX, PIX), .
Engineering degree.  Now leading a small Infrastructure group of 12 with a
multinational corporate conglomerate.

I took a couple of practice CCIE tests I found on-line and got better than
1/2 right (do they really have multiple choice where you need to select more
than 1 answer to be right?  And those questions where non of the choices are
right?).

What study materials are recommended?  Which books and practice tests should
I get?  Seems to be a lot of stuff out there.  It can't all be good.

-John B.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56642&t=56642
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2610 801.Q Trunks [7:54481]

2002-10-31 Thread Mang Chau
Please see the link below for details
Only for the built-in 10BaseT port of 261x at IOS 12.2(2) T
Regards..mc


http://www.cisco.com/en/US/products/hw/routers/ps259/prod_bulletin09186a0080
0921e4.html
- Original Message -
From: "Darren Ward" 
To: 
Sent: Thursday, October 31, 2002 4:08 AM
Subject: Re: 2610 801.Q Trunks [7:54481]


> Only ISL is unsupported, for that you require a fast ether interface.
>
> Darren
>
> Firesox wrote:
>
> >I thought 802.1Q trunking is only supported on FastEthernet interfaces,
not
> >Ehternet interfaces.
> >I was able to create 802.1Q trunks on 2610 router with ethernet
interface.
> >Does someone  know exactlly what version of IOS support 802.1Q trunks on
> >2610 routers?
> >
> >Thanks
> --
> Darren Ward
> (PGradCS, CCIE#8245, CCDP, SCSA, MCP)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56643&t=54481
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Priscilla Oppenheimer
Creighton Bill-BCREIGH1 wrote:
> 
> When setting up a connection in Hyperterm you can select TCP/IP
> Winsock
> along with "direct to COM X"
> If you want to use Hyperterm as a telnet client (though I can't
> think of any
> benefit over using a generic DOS prompt - I use Procomm,
> myself) you only
> need to make sure that your connection properties have that
> specified.
> 
> If you are setting your connection up as Priscilla has
> mentioned, where you
> are emulating a terminal attached to a remote station - i.e. a
> device
> directly attached to your serial/COM port, then as has been
> stated, you
> would be pinging not from your local machine, but rather the
> ICMP echo would
> originate from the directly connected device.

With Telnet you're just emulating a terminal also. Either way, when you type
"ping" the ping packet originates from the device that is hosting your
terminal session.

He seemed to think HyperTerminal was causing a problem when he typed "ping"
into the HyterTerminal window. Whether you're using RS-232 or RS-422 or
Ethernet, and whether you're using HyperTerminal, a virtual terminal, VTY,
Telnet, a Teltype, or one of those old DEC VT100 terminals, the result is
the same. Each character is sent to the host operating system (IOS in this
case) and the operating system acts as if you were typing directly into it.

The ping gets executed at the host (router) when you press carriage return.
Probably a carriage return/line feed is sent to the OS. Then the ping
message is sent from the router.

Sorry but I'm irritated by all this. ;-) We got way off base by pointing out
that HyperTerminal can do Telnet too. I'd forgotten that you could do Telnet
with HyperTerminal, admittedly, but my reaction is Whoopee! What does it
have to do with the problem?

His original message talked about asynchronous serial stuff like setting the
bit rate and number of stop bits. Then he launched into a discussion of
Ethernet hubs. Hello? Did he eat too much Halloween candy? Or did I? ;-)
What does he actually have connected in his lab? How can we help without
knowing that?

_

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com

> 
> HTH
> Bill Creighton CCNP
> Senior System Engineer
> Motorola
> iDEN CNRC Packet Data / MPS
> 
> 
> -Original Message-
> From: The Long and Winding Road
> [mailto:groupstudyspamtest@;cl.cncdsl.com]
> Sent: Thursday, October 31, 2002 4:09 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Problems w/Hyperterminal?? [7:56619]
> 
> 
> what port is your hyperterminal set up to use? surely not your
> ethernet
> port, since one uses hyperterminal for serial communications.
> 
> if you can ping from DOS to the router, then the ethernet 
> segment is OK
> 
> but your hyperterminal provides you only with a session to the
> router or
> switch.
> 
> Greg - draw us a picture - what are you connected to with your
> hyperterminal
> session?
> 
> --
> 
> www.chuckslongroad.info
> 
> 
> 
> 
> ""Greg Macaulay""  wrote in message
> news:200210312120.VAA22346@;groupstudy.com...
> > I do understand the basics -- but I'm not able to ping
> anything from
> > hyperterminal -- (1) the router, (2) the PC -- but I am able
> to ping
> > the router from DOS.
> >
> > My problem arose when I was unable to "copy flash tftp" I
> tried by
> > process of elimination to id the problem -- and it seemed to
> be
> > hyperterminal.
> >
> > However, in the past few moments, someone else wrote to me
> and
> > inquired about my hub (10/100 or 100!) -- mine is 100 only. 
> Thus, the
> > routers (at
> > 10) would not communicate.  I'm going to try and swap out the
> hub and see
> if
> > this helps.  I'm not a 100% certain that this will fix the
> problem --
> > but I'm going to try it and see. One never knows.
> >
> > Be back in a few . . . .
> >
> > Greg Macaulay
> > Oldest Human Being preparing for the CCIE Lab
> > Lifetime AARP member
> > Retired Attorney/Law Professor
> >
> > > -Original Message-
> > > From: Harold Monroe [mailto:HMonroe@;DTCCORP.com]
> > > Sent: Thursday, October 31, 2002 4:07 PM
> > > To: 'Greg Macaulay'; [EMAIL PROTECTED]
> > > Subject: RE: Problems w/Hyperterminal?? [7:56619]
> > >
> > >
> > > When you ping from the DOS prompt you are pinging from your
> computer
> > > to the router , when you ping in hyperterminal you are
> pinging from
> > > the router
> to
> > > your PC (or whatever other devices you have on your
> network).
> > >
> > > DOS Prompt (your PC) ---Ping--> router
> > > Hyperterminal (router) --- Ping ---> PC
> > >
> > > If this wasn't what you were referring to, in hyperterminal
> are you
> > > able to ping the router, if not something is wrong on the
> router
> > > setup?
> > >
> > > Are you able to ping the PC from hyperterminal (i.e. the
> router)?
> > >
> > > Are you able to ping the router from DOS?
> > > -Original Message-
> > > From: Greg Macaulay [mailto:gmac115@;cox.net]
> > > Sent: Thursday, October 31, 2002 12:11 PM
>

Re: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Tom Lisa
Priscilla,

The real reason not to flame him is because he may come out of retirement
and sue all of us!  :)

Prof. Tom Lisa, CCAI
Community College of Southern Nevada
Cisco ATC/Regional Networking Academy
"Cunctando restituit rem"

Priscilla Oppenheimer wrote:

  I wouldn't flame the oldest CCDP on the planet ;-), but, what do you
  mean
  you can't ping from HyperTerminal? HyperTerminal just gets you serial
  access
  to the console port.

  Priscilla

  Greg Macaulay wrote:
  >
  > Hi all --
  >
  > I'm suffering thru a terrible newbies type problem and cannot
  > seem to
  > identify the error of my ways.  I know it's something very
  > basic -- and it
  > brings back memories of high school geometry homework where I
  > stared at
  > objects for hours on end trying to understand!!!
  >
  > The thrust of my pitiful situation is: I cannot "ping" from
  > hyperterminal --
  > altho' I can readily "ping" from a DOS prompt on the same PC.
  >
  > I have the parameters set properly 8-N-1-None -- and I have
  > tried with the
  > TFTP server setup on the same PC and on another in my home
  > network (I have
  > 10 pcs in my home network -- most old -- but they still
  > work!).  Neither
  > works.
  >
  > Any suggestions.  And please don't waste time flaming me -- I
  > know I should
  > be able to figure this out -- but even after researching the
  > archives and
  > CCO, I am no closer to a solution than I am to passing the LAB
  > on the first
  > try!
  >
  > So any and all helpful suggestions would be welcome.
  >
  > Thanks to all -- in advance!!
  > Greg Macaulay
  > Oldest Human Being preparing for the CCIE Lab
  > Lifetime AARP member
  > Retired Attorney/Law Professor
  [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56645&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



About CE1U to CE1B convert [7:56647]

2002-10-31 Thread liu Caishan
Hello GroupStudy:
   Now I have a NM-CE1U module in Cisco2621,But my ISP request me useing a
NM-CE1B module. who can help me?
   and i hear in the NM-CE1U module have a jumper to convert this.PLS tell me?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56647&t=56647
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread Priscilla Oppenheimer
Creighton Bill-BCREIGH1 wrote:

> 
> How can you ping from a DOS prompt if the destination is
> crossing a repeater
> with a speed mismatch? A FastEthernet-only hub won't allow
> comms between
> 10Mb/s devices, so if you wouldn't have any visibility to that
> device,
> whether from a DOS prompt, Hyperterminal, or anything...
> 
Good point. If a station can send a packet, such as a ping, it's unlikely
that there are any physical or data-link-layer problems. If it can't receive
a packet, it makes sense to look above those layers. There are some
unidirectional problems, but they are pretty rare. Some protocols, including
STP, deal with the infamous "one-way connectivity" problem, but I bet it
happens pretty rarely.

I had a new theory about what would cause his symptoms, or at least what I
think his symptoms are:

PC can ping router.
PC can Telnet to router?? (we're not sure if he's Telnetting or not)
Router can't ping PC.
Router can't TFTP a file to the PC.

Possible explanation: the PC is running a firewall! From my knowledge of the
default behavior of many personal firewalls, this seems rather likely.

There could be an access list on the router too that could cause this.

Gotta run. I promise no more messages on this topic! ;-)
 
___

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56648&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RIP neighboure command question [7:56588]

2002-10-31 Thread pauldongso
You lab exercise proves this. It means the solution in the book is wrong.

Thanks

Paul

The Long and Winding Road wrote:
> well, I was going to do a quick and dirty lab for you, but entering the
> neighbor command has been wreaking havoc on one of my routers.
> 
> in general, what I seem to have proven is that even with the neighbor
> statement configured under the RIP process, RIP announcements will not go
> out an interface that has not been included in the RIP process.
> 
> 
> router 3 info
> -
>  Default version control: send version 2, receive version 2
>   Automatic network summarization is not in effect
>   Routing for Networks:
> 50.0.0.0
> snip some
>   Routing Information Sources:
> Gateway Distance  Last Update
> 160.160.125.4120  01:27:12
>   Distance: (default is 120)
> 
> router rip
>  version 2
>  redistribute ospf 123 metric 3
>  passive-interface default
>  no passive-interface TokenRing0
>  network 50.0.0.0
>  neighbor 160.160.125.4
>  no auto-summary
> 
> note that router 3 is NOT sending advertisements out the token ring
> interface, even though it is instructed that a neighbor is there.
> 
> 
> Router_3#ir
> Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
>D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
>N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
>E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
>i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter
> area
>* - candidate default, U - per-user static route, o - ODR
>P - periodic downloaded static route
> 
> Gateway of last resort is not set
> 
>  50.0.0.0/24 is subnetted, 1 subnets
> C   50.50.1.0 is directly connected, Loopback50
>  99.0.0.0/32 is subnetted, 1 subnets
> C   99.99.99.1 is directly connected, Loopback1000
>  160.160.0.0/16 is variably subnetted, 16 subnets, 6 masks
> C   160.160.30.0/24 is directly connected, Loopback100
> C   160.160.31.0/24 is directly connected, Loopback101
> C   160.160.32.0/24 is directly connected, Loopback102
> C   160.160.33.0/24 is directly connected, Loopback103
> C   160.160.39.0/26 is directly connected, Loopback204
> C   160.160.64.0/24 is directly connected, Loopback500
> C   160.160.65.0/24 is directly connected, Loopback501
> C   160.160.66.0/24 is directly connected, Loopback502
> C   160.160.67.0/24 is directly connected, Loopback503
> C   160.160.68.0/24 is directly connected, Loopback504
> C   160.160.125.0/24 is directly connected, TokenRing0
> C   160.160.39.160/27 is directly connected, Loopback203
> C   160.160.39.240/29 is directly connected, Loopback201
> C   160.160.39.252/30 is directly connected, Loopback200
> C   160.160.39.208/28 is directly connected, Loopback202
> C   160.160.254.0/29 is directly connected, Serial0
> Router_3#
> 
> not that router 3 has no rip routes, and apparently is not accepting rip
> routes across this interface because it is not in the proces.s
> 
> 
> note that router 4 is sending rip updates across the token ring interface
> 
> 00:17:13: RIP: sending v2 flash update to 224.0.0.9 via TokenRing0
> (160.160.125.
> 4)
> 00:17:13: RIP: build flash update entries
> 00:17:13:   100.0.0.0/8 via 0.0.0.0, metric 1, tag 0
> 
> conclusion - even with the neighbor statement in place, RIP will not send
> updates out the interface if that interface address is not part of the rip
> process.
> 
> any takers?
> 
> Chuck
> 
> --
> 
> www.chuckslongroad.info
> 
> 
> 
> 
> ""pauldongso""  wrote in message
> news:200210311321.NAA14582@;groupstudy.com...
> 
>>Hi All,
>>
>>Am doing the written study.
>>In Jeff routing tcp/ip book, under RIP configruation exercise session,
>>there is a question:
>>
>> -  RTC  -RTD -
>>(192.168.2.1/24)   (192.168.3.1/24)  (192.168.3.2/24) (192.168.4.1/24)
>>
>>The question is to only use unicast between RTC and RTD
>>The answer is:
>>
>>RTC:
>>network 192.168.2.0
>>neighour 192.168.3.2
>>
>>RTD:
>>network 192.168.4.0
>>neighour 192.168.3.1
>>
>>My question is isn't network statement "network 192.168.3.0" required on
>>both routers to enable rip? I haven't had a lab to test this yet.
>>
>>Can someone please give me a correct answer?
>>
>>Thanks
>>
>>Paul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56649&t=56588
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco IOS 12.2.12a [7:56650]

2002-10-31 Thread Sam S.
I am putting a ccie lab together for R/S. I have a 2501,2502,2503 and 2504
router.

>From the latest 12.2.12a IOS list below what do you recommend for me to
upgrade to?

IP/IBM/SNASW
REMOTE ACCESS SERVER
IP/IPX/AT/DEC
IP/IPX/AT/DEC/FW PLUS
IP/IPX/AT/DEC PLUS
ISDN
IP
IP/FW PLUS IPSEC 56
IP PLUS IPSEC 56
IP/FW
IP PLUS
IP/H323
ENTERPRISE PLUS
SERVICE PROVIDER
SERVICE PROVIDER WITH PT/TARP

Thanks in advance. Sam




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56650&t=56650
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Clearing ARP. [7:56651]

2002-10-31 Thread Keith Woodworth
We have a Cat5500 with an odd problem. There is a customer with a Vlan
setup on 2 RSM's using HSRP. The Vlan is using a /29, with each RSM
assigned an IP from the /29, a default gateway from the /29 which leaves
3 usable IP's for the customer.

He has 2 devices plugged into 2 ethernet ports on the Cat5500, a Redback
and a 3640, each has an IP from the /29, leaving one more to use. He wants
to add a switch, so config the switch to use the last IP from the /29,
assign the port to the Vlan and the switch should be accessable.

I'm telnetted to the console of the switch and I can ping the 3640 and the
Redback ok, but not the switch. A ping to the customers switch wants to go
out an IP on an interface that does not exist and has not existed for a
looong while.

A show arp below shows two entries on the same port/vlan. 204.244.98.19
should not be there. I'd like to do a clear ARP on the console so that it
will remove the old entry but should it have not removed it by now? We
changed things over over year ago taking out the 98.19 address.

My question though lies in what affect clearing the ARP table on the
console will have on overall routing? Its just on the console of a
Catalyst 5500, not on the RSM's. 64.114.55.67 is the gateway for Vlan1
which is the management Vlan for the RSM's.

How quick does the ARP table get repopulated?

Cisco 5500> (enable) sh arp
ARP Aging time = 1200 sec
64.114.55.67  at 00-00-0c-07-ac-01 port 3/1 on
vlan 1
204.244.98.19 at 00-00-0c-07-ac-01 port 3/1 on
vlan 1

Thanks,
Keith




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56651&t=56651
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FYI: 3550 Updated to EA1(a)... [7:56652]

2002-10-31 Thread Eric R
for those of you planning to take the new test coming soon...


Resolved IOS Caveats in Release 12.1(11)EA1a
These IOS caveats were resolved in Release 12.1(11)EA1a:

CSCdy25508
Access control lists (ACLs) that are configured with the order-dependent
merge algorithm now work correctly.

CSCdy32279
When the MAC address tables becomes full under certain conditions, a switch
no longer stops forwarding traffic or populating the forwarding table.

CSCdy43265
When the spanning tree state changes from learning to forwarding or from
forwarding to blocking, a switch now sends a topology change trap.

CSCdy55350
A switch no longer reloads when the autoconfiguration file includes VLAN
configuration settings.

CSCdy58823
The UniDirectional Link Detection (UDLD) protocol no longer disables Gigabit
ports during startup when a mismatch state occurs with neighboring switches.

CSCdy70273
Classifying traffic on a per-port, per-VLAN basis by using a class map now
polices only the VLANS in the match VLAN list. Previously, all the VLANs
were policed.

CSCdy70850
If you enter the switchport port-security mac-address sticky and switchport
port-security violation shutdown interface configuration commands on an
interface, when a security violation occurs, the interface is errdisabled.

CSCdy77891
If a switch continually updates the virtual routing and forwarding (VRF)
table, the packet forwarding rate no longer decreases.

*
Open IOS Caveats

http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12111ea1/ol261202.htm#xtocid27




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56652&t=56652
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Open lab dates... [7:56653]

2002-10-31 Thread Eric R
There sure has been a boat load of seats opening up in the lab lately.
Someone know something I don't???

-Eric R.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56653&t=56653
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco IOS 12.2.12a [7:56650]

2002-10-31 Thread Mark W. Odette II
I think the version of IOS in the LAB is 12.1(5T).  Chuck could confirm
this, as well as I believe it is on the CCO site.

As for what Feature Set- Again, Chuck should have the answer... :)

Mark

-Original Message-
From: Sam S. [mailto:ao.ut@;comcast.net] 
Sent: Thursday, October 31, 2002 9:50 PM
To: [EMAIL PROTECTED]
Subject: Cisco IOS 12.2.12a [7:56650]

I am putting a ccie lab together for R/S. I have a 2501,2502,2503 and
2504
router.

>From the latest 12.2.12a IOS list below what do you recommend for me to
upgrade to?

IP/IBM/SNASW
REMOTE ACCESS SERVER
IP/IPX/AT/DEC
IP/IPX/AT/DEC/FW PLUS
IP/IPX/AT/DEC PLUS
ISDN
IP
IP/FW PLUS IPSEC 56
IP PLUS IPSEC 56
IP/FW
IP PLUS
IP/H323
ENTERPRISE PLUS
SERVICE PROVIDER
SERVICE PROVIDER WITH PT/TARP

Thanks in advance. Sam




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56654&t=56650
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 3550 Updated to EA1(a)... [7:56652]

2002-10-31 Thread The Long and Winding Road
""Eric R""  wrote in message
news:200211010406.EAA30793@;groupstudy.com...
> for those of you planning to take the new test coming soon...
>
> 
> Resolved IOS Caveats in Release 12.1(11)EA1a
> These IOS caveats were resolved in Release 12.1(11)EA1a:
>
> CSCdy25508
> Access control lists (ACLs) that are configured with the order-dependent
> merge algorithm now work correctly.
>
> CSCdy32279
> When the MAC address tables becomes full under certain conditions, a
switch
> no longer stops forwarding traffic or populating the forwarding table.
>
> CSCdy43265
> When the spanning tree state changes from learning to forwarding or from
> forwarding to blocking, a switch now sends a topology change trap.
>
> CSCdy55350
> A switch no longer reloads when the autoconfiguration file includes VLAN
> configuration settings.
>
> CSCdy58823
> The UniDirectional Link Detection (UDLD) protocol no longer disables
Gigabit
> ports during startup when a mismatch state occurs with neighboring
switches.
>
> CSCdy70273
> Classifying traffic on a per-port, per-VLAN basis by using a class map now
> polices only the VLANS in the match VLAN list. Previously, all the VLANs
> were policed.


CL: good fix. thanks for pointing it out. of course, it renders that section
of my white paper ( to be released Friday, I'm told ) obsolete

>
> CSCdy70850
> If you enter the switchport port-security mac-address sticky and
switchport
> port-security violation shutdown interface configuration commands on an
> interface, when a security violation occurs, the interface is errdisabled.
>
> CSCdy77891
> If a switch continually updates the virtual routing and forwarding (VRF)
> table, the packet forwarding rate no longer decreases.
>
> *
> Open IOS Caveats
>
>
http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12111ea1/ol261202.
htm#xtocid27




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56655&t=56652
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco IOS 12.2.12a [7:56650]

2002-10-31 Thread The Long and Winding Road
""Mark W. Odette II""  wrote in message
news:200211010440.EAA07078@;groupstudy.com...
> I think the version of IOS in the LAB is 12.1(5T).  Chuck could confirm
> this, as well as I believe it is on the CCO site.

CL: actually, I don't know, as I haven't been in the lab in a while ( but
will be soon ). Last time I was there, it was 12.0.8 or so, even though CCO
stated 12.1 ;->

CL: However, the word on the street, so to speak, is 12.1.5T No I did not
hear that from someone who recently took the lab. I heard it from someone
who posted that information here on groupstudy a month or two back.


>
> As for what Feature Set- Again, Chuck should have the answer... :)
>

CL: I don't know, but I'm gonna guess something in the enterprise line. My
reasoning? BGP, IS-IS, as well as the ordinary routing protocols, DLSw, and
lots of QoS. With the introduction of the 3550's into the Lab, I am
expecting QoS end to end and up the wazoo. ;->


> Mark
>
> -Original Message-
> From: Sam S. [mailto:ao.ut@;comcast.net]
> Sent: Thursday, October 31, 2002 9:50 PM
> To: [EMAIL PROTECTED]
> Subject: Cisco IOS 12.2.12a [7:56650]
>
> I am putting a ccie lab together for R/S. I have a 2501,2502,2503 and
> 2504
> router.
>
> From the latest 12.2.12a IOS list below what do you recommend for me to
> upgrade to?
>
> IP/IBM/SNASW
> REMOTE ACCESS SERVER
> IP/IPX/AT/DEC
> IP/IPX/AT/DEC/FW PLUS
> IP/IPX/AT/DEC PLUS
> ISDN
> IP
> IP/FW PLUS IPSEC 56
> IP PLUS IPSEC 56
> IP/FW
> IP PLUS
> IP/H323
> ENTERPRISE PLUS
> SERVICE PROVIDER
> SERVICE PROVIDER WITH PT/TARP
>
> Thanks in advance. Sam




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56656&t=56650
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Problems w/Hyperterminal?? [7:56619]

2002-10-31 Thread David j
Priscilla Oppenheimer wrote:
> Good point. If a station can send a packet, such as a ping,
> it's unlikely that there are any physical or data-link-layer
> problems. If it can't receive a packet, it makes sense to look
> above those layers. There are some unidirectional problems, but
> they are pretty rare. Some protocols, including STP, deal with
> the infamous "one-way connectivity" problem, but I bet it
> happens pretty rarely.

Not so rarely Priscilla if we talk about fiber, I have to deal with that
problem 3 or 4 times a year, unfortunately it's quite easy to damage only
partially a fiber optic cable when a hospital is repairing any wall,
disposing a room, ... (and they are always doing that sort of things!).
Believe me, the "one-way connectivity" problem is one of the worst problems
that you can have in a LAN.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56657&t=56619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Cat 6 cabling [7:56658]

2002-10-31 Thread David j
Hi,

Anybody knows a link which talks about the enhancements of Cat 6 over Cat 5
and 5e?

Thanks in advance.
David.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56658&t=56658
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: books for ccie written [7:56604]

2002-10-31 Thread Hemant Seth
hey jesse,

thanks for replying. i have another question for u. 

i am an electrical engineer and pursuing my MS in telecommunications in US.
i cleared my CCNA last year and have a working experience for little less
than a year in networking field. Now i am in double mind, whether to go for
CCNP or CCIE directly. I saw the course curriculum for both. I think i can
manage CCIE written but not sure about the lab since i have just started
with my hands on experience.
so right now i am concentrating on CCIE written. 

Now if given a choice between CCIE written and CCNP, which one do u advice
me to do. which one would help me in finding a good job according to u.

Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56659&t=56604
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: books for ccie written [7:56604]

2002-10-31 Thread Kirankumar Patel
Dear Hemant

Go for CCIE.

Kiran

>From: "Hemant Seth" 
>Reply-To: "Hemant Seth" 
>To: [EMAIL PROTECTED]
>Subject: RE: books for ccie written [7:56604]
>Date: Fri, 1 Nov 2002 05:51:39 GMT
>
>hey jesse,
>
>thanks for replying. i have another question for u.
>
>i am an electrical engineer and pursuing my MS in telecommunications in US.
>i cleared my CCNA last year and have a working experience for little less
>than a year in networking field. Now i am in double mind, whether to go for
>CCNP or CCIE directly. I saw the course curriculum for both. I think i can
>manage CCIE written but not sure about the lab since i have just started
>with my hands on experience.
>so right now i am concentrating on CCIE written.
>
>Now if given a choice between CCIE written and CCNP, which one do u advice
>me to do. which one would help me in finding a good job according to u.
>
>Thanks.
_
Unlimited Internet access -- and 2 months free!  Try MSN. 
http://resourcecenter.msn.com/access/plans/2monthsfree.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56660&t=56604
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routing Question. [7:56639]

2002-10-31 Thread Kirankumar Patel
R u planning for both uplnk and dnlnk?

Kiran


>From: "Jose Tomas Pinal Salvador" 
>Reply-To: "Jose Tomas Pinal Salvador" 
>To: [EMAIL PROTECTED]
>Subject: Routing Question. [7:56639]
>Date: Thu, 31 Oct 2002 22:59:00 GMT
>
>Hello Group Study!
>
>Currently, I have a  Cisco router 7513 speaking BGP4 routing protocol with 
>2
>providers. I need to route all the national traficc for provider 1 and all
>the International traficc for provider 2. How can I configure that in the
>router. Can I do that based in source and destination IP or based in the
>Autonomous System of each provider around the world?.
>We are studying to buy a Net Flow for to get statics.
>
>Thanks for your help.
>
>
>
>
>_
>Unlimited Internet access -- and 2 months free!  Try MSN.
>http://resourcecenter.msn.com/access/plans/2monthsfree.asp
_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56661&t=56639
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]