Re: OSPF DEMAND-CIRCUIT, not stopping the link UPDOWN [7:60719]

2003-01-10 Thread neil K.
Ya, redistribution of RIP into ospf but bri is on passive int.

neil
""Scott""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Are you doing any type of redistribution on these routers?
>
> ""neil K.""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > I have configured the peer neighbor, also checked the ospf cost which is
> > more than the Ethernet and also point to point configured on BRi.
> >
> > I checked the ospf  database but it was not showing the DNA bit was set.
> > Any suggestions.
> >
> > Thanks,
> >
> > neil
> >
> > ""Eisert, James A (Jad) %""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Have you done a "debug interesting packets" to see exactly what is
> causing
> > > your dialer to dial?
> > >
> > > James A Eisert (Jad)
> > > HP Managed Services at Agere Systems
> > > Agere Operations Center
> > > 610-712-5700
> > > [EMAIL PROTECTED]
> > >
> > >  -Original Message-
> > > From: neil K. [mailto:[EMAIL PROTECTED]]
> > > Sent: Thursday, January 09, 2003 12:25 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: OSPF DEMAND-CIRCUIT, not stopping the link UPDOWN [7:60719]
> > >
> > > Guys,
> > >
> > > The ISDN back between two of my routers keeps on dialling. I am
running
> > ospf
> > > over the ISDN which is a backup for frame relay link. I have
configured
> > the
> > > ISDN bri with ip ospf demand-circuit and still it keeps dialling.I
have
> > even
> > > used no peer-neighbor command on the interface.
> > > Please help.
> > >
> > > Thanks in Advance.
> > >
> > > neil k.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60860&t=60719
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VoIP from behind PIX [7:60859]

2003-01-10 Thread Matt Hill
Good luck..

However you will get latency and jitter issues during the time the PIXs
encrypt/decrypt the voice packets...

Matt

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf
Of
> Simer Mayo
> Sent: Friday, 10 January 2003 6:05 PM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: VoIP from behind PIX
> 
> 1. Will PIX 515 handle VoIP traffic?
> 2. Will PIX 501 handle VoIP traffic?
> 3. Can we VPN between 2 (site-to-site) and pass VoIP traffice thru the
> VPN
> 
> Thanks
> 
> Simer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60859&t=60859
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Load balancing & NAT [7:60663]

2003-01-10 Thread Marc Thach Xuan Ky
Doug,
I used the term "horrible kludge" several hours before I saw your post. 
The multiple NAT pool kludge is horrible because it is neither scalable
nor maintenance-free, nor does it include any dynamic distribution of
load across the resultant multiple (outside local) addresses in use.  It
almost removes the requirement for the load-balancing part of the
load-balancers, leaving them with server failover tasks only.  As I
stated in my post, I'd be looking for a different form of sticky (or a
different NAT device).
rgds
Marc

Doug S wrote:
> 
> I liked the comment and definitely agree that some of the authors of Cisco
> training material should be named and publicly humiliated, although the
> sheer volume of mistakes could make this a somewhat overwhelming task for
> the public doing the humiliating. Still, I want to add my opinion that
Cisco
> documentation and training material is of a lot higher quality a lot of
> what's out there, not to name names like MS Press or anything.
> 
> The reason I blindly accepted and posted that particular quote is because
it
> DOES match my personal experience, which, I admit is considerably less than
> the other posters in this thread.  The only experience I have is in a lab
on
> 2500's and 2600's running something around IOS 12.1(T).
> 
> I also want to point of that this behavior of only overloading the first
> address in the pool sounds like exactly what the original poster is
> experiencing.  The fact that Emilia's and my experience contradicts Peter's
> and TLaWR makes me think that there are differences in how this works on
> different platforms, as TJ suggests.
> 
> I'd also like to hear people's opinions on why my solution is a "horrible"
> kludge, as opposed to just a plain old vanilla kludge.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60858&t=60663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Load balancing & NAT [7:60663]

2003-01-10 Thread Howard C. Berkowitz
At 10:12 PM + 1/10/03, Doug S wrote:
>I liked the comment and definitely agree that some of the authors of Cisco
>training material should be named and publicly humiliated, although the
>sheer volume of mistakes could make this a somewhat overwhelming task for
>the public doing the humiliating. Still, I want to add my opinion that Cisco
>documentation and training material is of a lot higher quality a lot of
>what's out there, not to name names like MS Press or anything.

I'm the last person to be an apologist for some of the documentation, 
but fairness says there are a couple of things to consider.

1.  Most Cisco documentation is what might be called "performance skills"
based rather than "cognitive" or "design".  There's very little
information about alternative solutions, or other things that I
think of as network architecture.  Historically, CID (which
originally
was an internal course) was the only course that went into tradeoffs,
although there are a good many more Cisco-only courses that do.

2.  Since the market crash, there's been much less marketability for
books
that deal with design rather than cookbook or certification-cram
content. It's unfortunate -- corporate "economies" are equating
configuration skills with design skills.

3.  It's almost impossible to keep any kind of general documentation
updated on all the permutations of platforms, releases, and bugs.
Conceptually, I suppose, Cisco could develop a context-sensitive
living hyperdocument that links basic documentation, release notes
and bug reports, etc., and have a much better support product, but
that would still be support rather than tradeoff oriented.

>
>The reason I blindly accepted and posted that particular quote is because it
>DOES match my personal experience, which, I admit is considerably less than
>the other posters in this thread.  The only experience I have is in a lab on
>2500's and 2600's running something around IOS 12.1(T).

I'm sort of laughing and crying, thinking of my most dramatic 
classroom bug.  I was teaching a private ACRC class for MCI, with a 
mixture of 2500, 4000, and 4500 routers, on, IIRC, IOS 11.0 or so. I 
had just finished showing GRE for IP, and someone asked a question 
about running IPX over the same tunnel as the IP.  I _know_ this 
works.

So, I said, "no problem".  I switched a router console to the 
projector, added an IPX network to one end of the tunnel, and it went 
in just fine.  Next, I switched to the other router. No sooner had I 
finished typing IPX network , did both routers go into the most 
incredible crash mode I have ever seen. They dropped into ROMMON, and 
then kept cycling back to the start of boot, never giving me keyboard 
control.  Powering them on and off brought back sanity, but I soon 
found that this crash was reproducible on 4000's and 4500's, but not 
2500's. The TRULY weird thing is that when I left a router running 
overnight in its boot loop, it eventually stabilized and gave console 
control -- but still would crash if I configured IPX tunneling over 
GRE.

>
>I also want to point of that this behavior of only overloading the first
>address in the pool sounds like exactly what the original poster is
>experiencing.  The fact that Emilia's and my experience contradicts Peter's
>and TLaWR makes me think that there are differences in how this works on
>different platforms, as TJ suggests.

There _might_ be theoretical problems of load distribution here, 
depending on how the address cached in other machines. 
Source-destination hash is very good in most cases, but if you had 
this configuration on both ends, everything would go over the same 
link no matter how many interfaces you had. If the load balancing 
were destination-based, it could get awful.

>
>I'd also like to hear people's opinions on why my solution is a "horrible"
>kludge, as opposed to just a plain old vanilla kludge.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60857&t=60663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Multiple ABR for a particular Area? [7:60654]

2003-01-10 Thread Jean-Francois Delrieu
BTW, it works perfectly well with HSRP also: 2 routers connecting an area to
area 0.

JFD


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60856&t=60654
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Load balancing & NAT [7:60663]

2003-01-10 Thread Evans, TJ (BearingPoint)
And more importantly, from a semantics perspective - is a "horrible kludge"
a bad thing or a good thing?  Or a case of two wrongs not making a right.



... double negatives are fun.
Thanks!
TJ
[EMAIL PROTECTED]



-Original Message-
From: Doug S [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 10, 2003 5:13 PM
To: [EMAIL PROTECTED]
Subject: Re: Load balancing & NAT [7:60663]

I liked the comment and definitely agree that some of the authors of Cisco
training material should be named and publicly humiliated, although the
sheer volume of mistakes could make this a somewhat overwhelming task for
the public doing the humiliating. Still, I want to add my opinion that Cisco
documentation and training material is of a lot higher quality a lot of
what's out there, not to name names like MS Press or anything.

The reason I blindly accepted and posted that particular quote is because it
DOES match my personal experience, which, I admit is considerably less than
the other posters in this thread.  The only experience I have is in a lab on
2500's and 2600's running something around IOS 12.1(T).

I also want to point of that this behavior of only overloading the first
address in the pool sounds like exactly what the original poster is
experiencing.  The fact that Emilia's and my experience contradicts Peter's
and TLaWR makes me think that there are differences in how this works on
different platforms, as TJ suggests.

I'd also like to hear people's opinions on why my solution is a "horrible"
kludge, as opposed to just a plain old vanilla kludge.
**
The information in this email is confidential and may be legally 
privileged.  Access to this email by anyone other than the 
intended addressee is unauthorized.  If you are not the intended 
recipient of this message, any review, disclosure, copying, 
distribution, retention, or any action taken or omitted to be taken 
in reliance on it is prohibited and may be unlawful.  If you are not 
the intended recipient, please reply to or forward a copy of this 
message to the sender and delete the message, any attachments, 
and any copies thereof from your system.
**




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60855&t=60663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Advise [7:60850]

2003-01-10 Thread Howard C. Berkowitz
At 9:49 PM + 1/10/03, LOON wrote:
>I am currently preparing for the written portion of the CCIE track.
>How should I approach this?
>1.Should I just focus on the written, once that is out of the way focus on
>the lab
>or
>2.As I prepare for the written also work on lab scenarios

Definitely #2.  After all, the written is supposed to qualify you for 
the lab.  Doing both types of study will reinforce each other.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60854&t=60850
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Load balancing & NAT [7:60663]

2003-01-10 Thread Doug S
I liked the comment and definitely agree that some of the authors of Cisco
training material should be named and publicly humiliated, although the
sheer volume of mistakes could make this a somewhat overwhelming task for
the public doing the humiliating. Still, I want to add my opinion that Cisco
documentation and training material is of a lot higher quality a lot of
what's out there, not to name names like MS Press or anything.

The reason I blindly accepted and posted that particular quote is because it
DOES match my personal experience, which, I admit is considerably less than
the other posters in this thread.  The only experience I have is in a lab on
2500's and 2600's running something around IOS 12.1(T).

I also want to point of that this behavior of only overloading the first
address in the pool sounds like exactly what the original poster is
experiencing.  The fact that Emilia's and my experience contradicts Peter's
and TLaWR makes me think that there are differences in how this works on
different platforms, as TJ suggests.

I'd also like to hear people's opinions on why my solution is a "horrible"
kludge, as opposed to just a plain old vanilla kludge.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60853&t=60663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Influencing EIGRP to use GRE tunnels over Serial link [7:60852]

2003-01-10 Thread [EMAIL PROTECTED]
Added the bandwidth statement to the tunnel and to the interface. As well
added the interface 66.200.x.x to eigrp statement.  Problem is that the link
will not use the 10.x.x.x in the table.

Has anyone tried to influence EIGRP to use a tunnel 10.x.x.x instead of a
192.x.x.x frame relay link?  Any ideas how to get the routing across the
tunnel instead of the frame relay?

cheers,

Jamie

- Original Message -
From: "[EMAIL PROTECTED]" 
Date: Friday, January 10, 2003 10:58 am
Subject: Influencing EIGRP to use GRE tunnels over Serial link [7:60833]

> Hello all,
> 
> I have a question.  I have gre tunnels going through MPLS running 
> 1.544mbps,running EIGRP.  The secondary links are Frame Relay 
> links running at 256kbps
> per link.  Presently EIGRP has calculated the best link to be the 
> SprintLink as there are bandwidth statements in the frame relay 
> subinterface on
> the remote site:
> 
> Remote Site In Tampa:
> interface Serial0/0.2 point-to-point
> description "Connect to Seattle"
> bandwidth 256
> ip address 192.168.228.253 255.255.255.0
> no ip mroute-cache
> no cdp enable
> frame-relay interface-dlci 41   
> 
> interface Tunnel1
> description "Tampa Tunnel to Seattle"
> ip address 10.0.48.6 255.255.255.252
> tunnel source Serial0/1
> tunnel destination 64.200.134.18
> !   
> The Tamp Site connects with Seattle Hub with these configs:
> 
> interface Tunnel1
> description "Seattle Tunnel to Tampa"
> ip address 10.0.48.5 255.255.255.252
> tunnel source Serial2/0
> tunnel destination 64.200.118.162
> end   
> 
> interface Serial0/0.8 point-to-point
> description  "Seattle to Tampa"
> bandwidth 256
> ip address 192.168.228.254 255.255.255.0
> no ip route-cache
> no ip mroute-cache
> no cdp enable
> frame-relay interface-dlci 39  
> 
> I believe the best way to influence EIGRP would be to add a bandwidth
> statement to the tunnel or the interface to which the tunnel is 
> applied to.
> 
> One other question.  T1 1.544mbps would be 193000 in the bandwidth
> statement?.. believe so ..but having a brain fart right now.
> 
> Thank you for your help.
> 
> Cheers,
> 
> Jamie
> Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60852&t=60852
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Configuring VLAN [7:60832]

2003-01-10 Thread Larry Letterman
you are correct to assume that you have to disable
vlan 1 before before you can enable vlan 2

you are also correct that the instant that you shut the
vlan 1 down you will disconnect the connection on your telnet..

you should be able to telnet thru the network to the switch if you
have a subnet for the 10.x.x.x network config'd on the router and a port
on the switch assigned to vlan 2 connected to the 10.x.x.x subnet on
the router

Larry Letterman
Network Engineer
San Jose Transport
Cisco Systems Inc.



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Rutger Blom
> Sent: Friday, January 10, 2003 10:39 AM
> To: [EMAIL PROTECTED]
> Subject: Configuring VLAN [7:60832]
>
>
> Hello, I have a question about configuring a new VLAN. This is the
> situation:
>
> I would like to configure and activate a new management VLAN in a
> cisco 2950
> switch. The switch to be configured is only reachable via telnet.
> The switch
> has IP address 192.168.0.1/24. This address is assigned to the
> default VLAN
> 1.
>
> To configure this switch I choose to connect to a CDP neighbour
> switch with
> my console cable. This switch has IP address 192.168.0.2/24 assigned, also
> to VLAN 1. The two switches are situated in the same IP-network
> and can ping
> eachother. From the switch to which I have a serial connection I start a
> telnet session to the switch to be configured. I add the new
> management VLAN
> which will be VLAN 2 and set an IP address on VLAN2: 10.255.0.1
>
> So far so good.
> I run a "show run" and see that both VLAN 1 and VLAN 2 have an IP address,
> 192.168.0.1 and 10.255.0.1 respectively. I also notice that the newly
> configured VLAN 2 is "shutdown". Running a "no shutdown" on the VLAN 2
> interface doesn't help much. The interface stays shutdown. My
> guess is that
> VLAN 1 has to be shutdown before I can "no shutdown" VLAN 2. Shutting down
> VLAN 1 means I will lose my telnet connection to the switch and then I
> cannot get back in again via telnet.
>
> What to do in this case?
>
> Rutger




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60851&t=60832
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Advise [7:60850]

2003-01-10 Thread LOON
I am currently preparing for the written portion of the CCIE track.
How should I approach this?
1.Should I just focus on the written, once that is out of the way focus on
the lab
or
2.As I prepare for the written also work on lab scenarios




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60850&t=60850
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP classes in San Diego! [7:60786]

2003-01-10 Thread Brian
The only classes I've taken were either at Ascolta, or self study of various
ciscopress titles.  My bkgd is almost entirely isp, with very little
enterprise, so I need to get those areas up.

Brian

- Original Message -
From: "Nathan Nakao" 
To: 
Sent: Friday, January 10, 2003 9:03 AM
Subject: RE: CCNP classes in San Diego! [7:60786]


> If I plan to be here in San Diego past the 15'th I'm definitely signing
> up.  Brian,  have you taken any classes there before?  If so, how'd you
> feel about the environment?
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> Brian
> Sent: Friday, January 10, 2003 8:32 AM
> To: [EMAIL PROTECTED]
> Subject: Re: CCNP classes in San Diego! [7:60786]
>
>
> hmm, yea I do have a cco login, price for this though cheaper, is still
> outta my reach for now, but I'll keep this in mind.
>
> Bri
>
> - Original Message -
> From: "The Long and Winding Road"
> To:
> Sent: Friday, January 10, 2003 8:00 AM
> Subject: Re: CCNP classes in San Diego! [7:60786]
>
>
> > ""Brian""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > These have the usual 1500-2500 dollar cost??  I'd like to find a
> modestly
> > > priced training solution.
> >
> >
> > Brian, are you a Cisco customer, or work for one? Are you able to get
> > to
> the
> > Cisco training offerings at
> >
> > http://www.cisco.com/warp/public/10/wwtraining/celc/celclogin.html
> >
> > or
> >
> >
> http://www.cisco.com/en/US/learning/le31/le46/learning_customer_e-learni
> ng_c
> > onnection_tool_launch.html
> > watch the wrap
> >
> >
> >
> > >
> > > Brian
> > >
> > > - Original Message -
> > > From: "kris moby"
> > > To:
> > > Sent: Thursday, January 09, 2003 8:46 PM
> > > Subject: CCNP classes in San Diego! [7:60786]
> > >
> > >
> > > > Mira Costa College is offering CCNP classes at their campus in
> > Oceanside,
> > > > CA.
> > > >
> > > > Semesters 5 (Building Scalable Cisco Internetworks and Advanced
> Routing)
> > &
> > > > Semester 8 (Cisco Network Troubleshooting and Support) start Jan
> > > > 21st
> > and
> > > > they both still have seats open.
> > > >
> > > > Registration is open through next Wednesday, Jan. 15th so HURRY!
> > > >
> > > > You can apply & register for classes online, here is the link;
> > > >
> > > > [url]http://www.cccapply.com/AdmissionApp[/url]
> > > >
> > > > To sign up for classes or view the catalog;
> > > >
> > > > [url]http://surf.miracosta.edu[/url]
> > > >
> > > > I am a Student at MCC and I cannot recommend these classes highly
> > enough -
> > > > and they are only $44/semester! You can't beat that! Application
> > > > takes
> > > only
> > > > a few minutes, sign up today!
> > > >
> > > > Mira Costa College has an excellent lab for CCNA/CCNP. It clean &
> > > organized
> > > > with all the equipment you'll need.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60827&t=60786
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF DEMAND-CIRCUIT, not stopping the link UPDOWN [7:60719]

2003-01-10 Thread Scott
Are you doing any type of redistribution on these routers?

""neil K.""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I have configured the peer neighbor, also checked the ospf cost which is
> more than the Ethernet and also point to point configured on BRi.
>
> I checked the ospf  database but it was not showing the DNA bit was set.
> Any suggestions.
>
> Thanks,
>
> neil
>
> ""Eisert, James A (Jad) %""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Have you done a "debug interesting packets" to see exactly what is
causing
> > your dialer to dial?
> >
> > James A Eisert (Jad)
> > HP Managed Services at Agere Systems
> > Agere Operations Center
> > 610-712-5700
> > [EMAIL PROTECTED]
> >
> >  -Original Message-
> > From: neil K. [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, January 09, 2003 12:25 PM
> > To: [EMAIL PROTECTED]
> > Subject: OSPF DEMAND-CIRCUIT, not stopping the link UPDOWN [7:60719]
> >
> > Guys,
> >
> > The ISDN back between two of my routers keeps on dialling. I am running
> ospf
> > over the ISDN which is a backup for frame relay link. I have configured
> the
> > ISDN bri with ip ospf demand-circuit and still it keeps dialling.I have
> even
> > used no peer-neighbor command on the interface.
> > Please help.
> >
> > Thanks in Advance.
> >
> > neil k.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60849&t=60719
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Aironet 350 Access Point and US Robotics USR2216 Cards [7:60848]

2003-01-10 Thread Nathan Nakao
I'd recommend finding some firmware/drivers updates. :)  That fixes most
of the issues with old drivers for the Cisco AP 350 Wireless Cards.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Dain Deutschman
Sent: Friday, January 10, 2003 12:12 PM
To: [EMAIL PROTECTED]
Subject: Aironet 350 Access Point and US Robotics USR2216 Cards
[7:60843]


Hi,

I have an Aironet 350 AP and USR 2216 802.11b cards on the clients. The
signal remains Very Good most of the time...but then totally drops
randomly. The following is part of the log..

01:22:45 (Info): Disassociating [ ], reason "Sender is Leaving (has
left) BSS"
01:05:27 (Info): Disassociating [  ], reason "Not Associated"
01::05:26 (Info): Station [x.x.x.x],   roamed

Any ideas why?

--
Dain Deutschman
CCNA, CSS-1, MCP, CNA
Data Communications Manager




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60848&t=60848
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF DEMAND-CIRCUIT, not stopping the link UPDOWN [7:60719]

2003-01-10 Thread neil K.
I have configured the peer neighbor, also checked the ospf cost which is
more than the Ethernet and also point to point configured on BRi.

I checked the ospf  database but it was not showing the DNA bit was set.
Any suggestions.

Thanks,

neil

""Eisert, James A (Jad) %""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Have you done a "debug interesting packets" to see exactly what is causing
> your dialer to dial?
>
> James A Eisert (Jad)
> HP Managed Services at Agere Systems
> Agere Operations Center
> 610-712-5700
> [EMAIL PROTECTED]
>
>  -Original Message-
> From: neil K. [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 09, 2003 12:25 PM
> To: [EMAIL PROTECTED]
> Subject: OSPF DEMAND-CIRCUIT, not stopping the link UPDOWN [7:60719]
>
> Guys,
>
> The ISDN back between two of my routers keeps on dialling. I am running
ospf
> over the ISDN which is a backup for frame relay link. I have configured
the
> ISDN bri with ip ospf demand-circuit and still it keeps dialling.I have
even
> used no peer-neighbor command on the interface.
> Please help.
>
> Thanks in Advance.
>
> neil k.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60847&t=60719
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Subnet question [7:60711]

2003-01-10 Thread Priscilla Oppenheimer
Don't forget "the Simplicity Principle!" :-) I liked MADMAN's answer best.
He's a CCIE and it shows.

Without some idea of the fellow's topology, we can't recommend VLANs, and,
although I know VLANs are extremely popular and the obvious choice for some
situations, they add complexity that may not be necessary. And recommending
Mobile IP for something as simple as this is definitely overkill.

Priscilla

Xia Hongbing wrote:
> 
> One thing I want to mentioned is that Mobile IP can solve your
> problem. You
> can move to another place without changing your IP address, but
> still keep
> connection. However, you must configure both floor 1 and floor
> 2 router to
> support Foreign agent and home agent function. Your computer
> client also
> support mobile IP registration.
> 
> - Original Message -
> From: "Priscilla Oppenheimer" 
> To: 
> Sent: Thursday, January 09, 2003 4:58 PM
> Subject: RE: Subnet question [7:60711]
> 
> 
> > Larry Letterman wrote:
> > >
> > > thats pris's job hereif she writes enough detailed
> > > answers we dont have to buy her books...:)
> >
> > Oh no!
> >
> > By the way, the only nicknames that are supported are Cilla,
> PO, (and Cil,
> > if you are Chuck.) Nicknames that map to "sissified" have
> been deprecated.
> > The preferred name is my canonical name, Priscilla. :-)
> >
> > >
> > > Larry Letterman
> > > Network Engineer
> > > San Jose Transport
> > > Cisco Systems Inc.
> > >
> > >
> > >
> > > > -Original Message-
> > > > From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On
> > > Behalf Of
> > > > Tamhankar, Nitin
> > > > Sent: Thursday, January 09, 2003 11:18 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: RE: Subnet question [7:60711]
> > > >
> > > >
> > > > Thank you very much for taking pains to right such a
> detailed
> > > explanation.
> > > > Thank you all for your answers they were very helpful.
> > > >
> > > > Thanks
> > > > Nitin
> > > >
> > > > -Original Message-
> > > > From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
> > > > Sent: Thursday, January 09, 2003 12:36 PM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: RE: Subnet question [7:60711]
> > > >
> > > >
> > > > You may not need virtual LANs. Real LANs solve the
> problem.
> > > :-) This is a
> > > > classic case of subnetting.
> > > >
> > > > With DHCP, the client should get the right address when it
> > > > broadcasts after
> > > > it moves, so there's no issue.
> > > >
> > > > Leaving DHCP out of the picture, the need to ensure that a
> > > moved
> > > > node can't
> > > > communicate is met simply by the way IP works.
> > > >
> > > > Assume there's a client with this config:
> > > >
> > > > address = 100.10.1.100
> > > > subnet mask = 255.255.255.0
> > > > default gateway = 100.10.1.1
> > > >
> > > > Assume the client is physically sitting on the
> 100.10.2.0/24
> > > network. When
> > > > it wants to send to nodes on the 100.10.1.0 network, it
> will
> > > compare its
> > > > address with the destination address, assume it's on the
> same
> > > subnet, and
> > > > send an ARP broadcast. The ARP broadcast won't reach the
> > > > destination though,
> > > > which is on a different LAN, so it won't work.
> > > >
> > > > (Make sure the router isn't configured for Proxy ARP. But
> > > even with Proxy
> > > > ARP, communication won't work. With Proxy ARP, the router
> > > could respond on
> > > > behalf of the destination on the 100.10.1.0 network.
> However
> > > that host
> > > > wouldn't be able to respond because it would assume that
> > > 100.10.1.1 is
> > > > local.)
> > > >
> > > > Assume the client wishes to reach devices on the
> 100.10.2.0
> > > or 100.10.3.0
> > > > network. It will compare its address with the destination
> > > address
> > > > and decide
> > > > that it's not on the same subnet, so it needs to send to
> the
> > > default
> > > > gateway. It will send a broadcast for the default gateway,
> > > which
> > > > won't work
> > > > because 10.10.1.1 is on a different LAN. Once again make
> sure
> > > Proxy ARP is
> > > > disabled. I'll leave it to the reader to figure out what
> > > would happen in
> > > > this case if Proxy ARP were enabled. :-)
> > > >
> > > > The question of VLANs versus real LANs requires more info.
> > > How many router
> > > > ports to you have? Is each router port a subnet? Or do you
> > > plan to have
> > > > multiple subnets out one router port, in which case you
> need
> > > VLANs and
> > > > inter-VLAN routing on the router.
> > > >
> > > > ___
> > > >
> > > > Priscilla Oppenheimer
> > > > www.troubleshootingnetworks.com
> > > > www.priscilla.com
> > > >
> > > > Nathan Nakao wrote:
> > > > >
> > > > > I'd probably use VLAN's.
> > > > >
> > > > > Conf t
> > > > > Int vlan 101
> > > > > Int vlan 102
> > > > > Int vlan 103
> > > > >
> > > > > Then setup the DHCP to assign IP addresses accordingly.
> > > > >
> > > > > Once that is done. Set the vlans to 101 for first
> floor, 102
> > > > > for second
> > 

Re: IOS 1750 [7:60839]

2003-01-10 Thread MADMAN
Sure, where are you?  I'll have a salesdude stop by!!!

   Need maintanence too???

   Dave

Marcia Metran wrote:
> Team
> 
> I need ios of one cisco's router (model 1750) with 4 Mb (flash). Someone
can
> help me?
> 
> Thanks.
> 
> Marcia
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

"You don't make the poor richer by making the rich poorer." --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60845&t=60839
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MAC addresses on switches [7:60807]

2003-01-10 Thread Priscilla Oppenheimer
Every port on a Layer 2 switch has its own MAC address, per IEEE 802.1D.

ira wrote:
> 
> hallo,
> I have a q regarding switches.
> 
> Does any interf have a separate MAC address ?
> Is there a diff betw managed / unmanaged switches

Those are marketing terms. You have to get the tech specs to know what
"unmanaged switch" really means to the particular vendor. It might actually
mean a hub, in which case MAC addresses are irrelevanat as a hub is just a
physical-layer device.

___

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com

> regarding mac addrsses and interfaces ?
> 
> thanks
> 
> __
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> http://mailplus.yahoo.com
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60844&t=60807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Aironet 350 Access Point and US Robotics USR2216 Cards [7:60843]

2003-01-10 Thread Dain Deutschman
Hi,

I have an Aironet 350 AP and USR 2216 802.11b cards on the clients. The
signal remains Very Good most of the time...but then totally drops randomly.
The following is part of the log..

01:22:45 (Info): Disassociating [ ], reason "Sender is Leaving (has
left) BSS"
01:05:27 (Info): Disassociating [  ], reason "Not Associated"
01::05:26 (Info): Station [x.x.x.x],   roamed

Any ideas why?

--
Dain Deutschman
CCNA, CSS-1, MCP, CNA
Data Communications Manager




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60843&t=60843
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IDS [7:60769]

2003-01-10 Thread Dennis Ko
Steve
Thanks for your information.
I would love to go for the Cisco approach especially I am working on the
CCSP as well.
However, I got overruled by my boss.

Dennis

steve wrote:

> hi,
>
> it really depends on how you want to implemnet it ...
>
> the cisco stuff comes as a physicall probe device...i.e either a PCI card
> and stand-alone probe or a 6500 card...
>
> wear-as realsecure can come as a agent/software app that you can put on
> server`s ...
>
> the plus and minus point
>
> Cisco REAL
> +
> Easyier to config from box  Req`s more devices out of box
> (agent/collector/reporter/manager..these can all be on
> goes into 6509   seperate boxes)
> user int good  can run as Unix/linux/w2k
> agent or probe or standalone probe
>   lots of support
> -
> not easy to develop and expand  reqs somone with Dbase knoweledge
> database req`s work after multiple probes  agents can crash on NT
>
> HTH
>
> steve
> - Original Message -
> From: "Dennis Ko"
> To:
> Sent: Thursday, January 09, 2003 11:54 PM
> Subject: IDS [7:60769]
>
> > If you have a choice of choosing ISS Real Secure IDS or Cisco IDS, which
> > one would you pick?
> >
> > Please let me know your idea.
> >
> > Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60842&t=60769
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Configuring VLAN [7:60832]

2003-01-10 Thread Bob Sinclair
Roger,

I have a 2950G here with me.  As soon as I did a No Shut on the NEW Int
VLAN, the old Int VLAN shutdown.   So your scenario should work out ok.
Remember your switch will need a default gateway on the new network.  This
could be an issue, since the ip default-gateway command overwrites, does not
add.  But if you can telnet from a box on the same net you should be OK.

HTH,

-Bob Sinclair
CCIE #10427, MCSE
Senior Network Engineer
Networking For Future, Inc.
www.nffinc.com
- Original Message -
From: "Rutger Blom" 
To: 
Sent: Friday, January 10, 2003 1:39 PM
Subject: Configuring VLAN [7:60832]


> Hello, I have a question about configuring a new VLAN. This is the
> situation:
>
> I would like to configure and activate a new management VLAN in a cisco
2950
> switch. The switch to be configured is only reachable via telnet. The
switch
> has IP address 192.168.0.1/24. This address is assigned to the default
VLAN
> 1.
>
> To configure this switch I choose to connect to a CDP neighbour switch
with
> my console cable. This switch has IP address 192.168.0.2/24 assigned, also
> to VLAN 1. The two switches are situated in the same IP-network and can
ping
> eachother. From the switch to which I have a serial connection I start a
> telnet session to the switch to be configured. I add the new management
VLAN
> which will be VLAN 2 and set an IP address on VLAN2: 10.255.0.1
>
> So far so good.
> I run a "show run" and see that both VLAN 1 and VLAN 2 have an IP address,
> 192.168.0.1 and 10.255.0.1 respectively. I also notice that the newly
> configured VLAN 2 is "shutdown". Running a "no shutdown" on the VLAN 2
> interface doesn't help much. The interface stays shutdown. My guess is
that
> VLAN 1 has to be shutdown before I can "no shutdown" VLAN 2. Shutting down
> VLAN 1 means I will lose my telnet connection to the switch and then I
> cannot get back in again via telnet.
>
> What to do in this case?
>
> Rutger




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60841&t=60832
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RE: : Influencing EIGRP to use GRE tunnels over Serial link [7:60840]

2003-01-10 Thread [EMAIL PROTECTED]
Thank you for the response.  Another peice of the puzzle is that I believe
there are two way to influence the EIGRP Table.  I could increase the
10.x.x.x tunnel bandwidth or I could advertise the 64.200.x.x network into
the EIGRP metric. Presently the 64.200.x.x network is not advertised in the
eigrp table, only the 10.x.x.x is.  I believe this is a situation of two way
to 'skin' the cat.  Just wondering what way is preferred over the other.

To further convolude the situation I have another engineer here that believe
the delay should be manipulated instead of the bandwidth.

Any suggestions are appreciated.

Cheers,

Jamie

- Original Message -
From: "Georgescu, Aurelian" 
Date: Friday, January 10, 2003 11:21 am
Subject: RE: : Influencing EIGRP to use GRE tunnels over Serial link
[7:60834]

> You have to put a "bandwidth" statement under the tunnel 
> interfaces as well,
> with a higher value than FR.
> 
> Aurelian Georgescu
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
> Sent: Friday, January 10, 2003 2:00 PM
> To: [EMAIL PROTECTED]
> Subject: : Influencing EIGRP to use GRE tunnels over Serial link 
> [7:60834]
> Hello all,
> 
> I have a question.  I have gre tunnels going through MPLS running 
> 1.544mbps,running EIGRP.  The secondary links are Frame Relay 
> links running at 256kbps
> per link.  Presently EIGRP has calculated the best link to be the 
> SprintLink as there are bandwidth statements in the frame relay 
> subinterface on
> the remote site:
> 
> Remote Site In Tampa:
> interface Serial0/0.2 point-to-point
> description "Connect to Seattle"
> bandwidth 256
> ip address 192.168.228.253 255.255.255.0
> no ip mroute-cache
> no cdp enable
> frame-relay interface-dlci 41   
> 
> interface Tunnel1
> description "Tampa Tunnel to Seattle"
> ip address 10.0.48.6 255.255.255.252
> tunnel source Serial0/1
> tunnel destination 64.200.134.18
> !   
> The Tamp Site connects with Seattle Hub with these configs:
> 
> interface Tunnel1
> description "Seattle Tunnel to Tampa"
> ip address 10.0.48.5 255.255.255.252
> tunnel source Serial2/0
> tunnel destination 64.200.118.162
> end   
> 
> interface Serial0/0.8 point-to-point
> description  "Seattle to Tampa"
> bandwidth 256
> ip address 192.168.228.254 255.255.255.0
> no ip route-cache
> no ip mroute-cache
> no cdp enable
> frame-relay interface-dlci 39  
> 
> I believe the best way to influence EIGRP would be to add a bandwidth
> statement to the tunnel or the interface to which the tunnel is 
> applied to.
> 
> One other question.  T1 1.544mbps would be 193000 in the bandwidth
> statement?.. believe so ..but having a brain fart right now.
> 
> Thank you for your help.
> 
> Cheers,
> 
> Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60840&t=60840
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IOS 1750 [7:60839]

2003-01-10 Thread Marcia Metran
Team

I need ios of one cisco's router (model 1750) with 4 Mb (flash). Someone can
help me?

Thanks.

Marcia


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60839&t=60839
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Configuring VLAN [7:60832]

2003-01-10 Thread Scott
Put a port in VLAN2.

""Rutger Blom""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello, I have a question about configuring a new VLAN. This is the
> situation:
>
> I would like to configure and activate a new management VLAN in a cisco
2950
> switch. The switch to be configured is only reachable via telnet. The
switch
> has IP address 192.168.0.1/24. This address is assigned to the default
VLAN
> 1.
>
> To configure this switch I choose to connect to a CDP neighbour switch
with
> my console cable. This switch has IP address 192.168.0.2/24 assigned, also
> to VLAN 1. The two switches are situated in the same IP-network and can
ping
> eachother. From the switch to which I have a serial connection I start a
> telnet session to the switch to be configured. I add the new management
VLAN
> which will be VLAN 2 and set an IP address on VLAN2: 10.255.0.1
>
> So far so good.
> I run a "show run" and see that both VLAN 1 and VLAN 2 have an IP address,
> 192.168.0.1 and 10.255.0.1 respectively. I also notice that the newly
> configured VLAN 2 is "shutdown". Running a "no shutdown" on the VLAN 2
> interface doesn't help much. The interface stays shutdown. My guess is
that
> VLAN 1 has to be shutdown before I can "no shutdown" VLAN 2. Shutting down
> VLAN 1 means I will lose my telnet connection to the switch and then I
> cannot get back in again via telnet.
>
> What to do in this case?
>
> Rutger




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60838&t=60832
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: : Influencing EIGRP to use GRE tunnels over Serial link [7:60837]

2003-01-10 Thread Georgescu, Aurelian
You have to put a "bandwidth" statement under the tunnel interfaces as well,
with a higher value than FR.

Aurelian Georgescu


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 10, 2003 2:00 PM
To: [EMAIL PROTECTED]
Subject: : Influencing EIGRP to use GRE tunnels over Serial link [7:60834]

Hello all,

I have a question.  I have gre tunnels going through MPLS running 1.544mbps,
running EIGRP.  The secondary links are Frame Relay links running at 256kbps
per link.  Presently EIGRP has calculated the best link to be the Sprint
Link as there are bandwidth statements in the frame relay subinterface on
the remote site:

Remote Site In Tampa:
interface Serial0/0.2 point-to-point
description "Connect to Seattle"
bandwidth 256
ip address 192.168.228.253 255.255.255.0
no ip mroute-cache
no cdp enable
frame-relay interface-dlci 41   

interface Tunnel1
description "Tampa Tunnel to Seattle"
ip address 10.0.48.6 255.255.255.252
tunnel source Serial0/1
tunnel destination 64.200.134.18
!   
The Tamp Site connects with Seattle Hub with these configs:

interface Tunnel1
description "Seattle Tunnel to Tampa"
ip address 10.0.48.5 255.255.255.252
tunnel source Serial2/0
tunnel destination 64.200.118.162
end   

interface Serial0/0.8 point-to-point
description  "Seattle to Tampa"
bandwidth 256
ip address 192.168.228.254 255.255.255.0
no ip route-cache
no ip mroute-cache
no cdp enable
frame-relay interface-dlci 39  

I believe the best way to influence EIGRP would be to add a bandwidth
statement to the tunnel or the interface to which the tunnel is applied to.

One other question.  T1 1.544mbps would be 193000 in the bandwidth
statement?.. believe so ..but having a brain fart right now.

Thank you for your help.

Cheers,

Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60837&t=60837
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Subnet question [7:60711]

2003-01-10 Thread Ladrach, Daniel E.
I would set up VLAN's keep in mind you need to route between VLAN's. This is
done via RSM or router on a stick.

Daniel Ladrach
CCNA, CCNP
WorldCom




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60836&t=60711
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



: Influencing EIGRP to use GRE tunnels over Serial link [7:60834]

2003-01-10 Thread [EMAIL PROTECTED]
Hello all,

I have a question.  I have gre tunnels going through MPLS running 1.544mbps,
running EIGRP.  The secondary links are Frame Relay links running at 256kbps
per link.  Presently EIGRP has calculated the best link to be the Sprint
Link as there are bandwidth statements in the frame relay subinterface on
the remote site:

Remote Site In Tampa:
interface Serial0/0.2 point-to-point
description "Connect to Seattle"
bandwidth 256
ip address 192.168.228.253 255.255.255.0
no ip mroute-cache
no cdp enable
frame-relay interface-dlci 41   

interface Tunnel1
description "Tampa Tunnel to Seattle"
ip address 10.0.48.6 255.255.255.252
tunnel source Serial0/1
tunnel destination 64.200.134.18
!   
The Tamp Site connects with Seattle Hub with these configs:

interface Tunnel1
description "Seattle Tunnel to Tampa"
ip address 10.0.48.5 255.255.255.252
tunnel source Serial2/0
tunnel destination 64.200.118.162
end   

interface Serial0/0.8 point-to-point
description  "Seattle to Tampa"
bandwidth 256
ip address 192.168.228.254 255.255.255.0
no ip route-cache
no ip mroute-cache
no cdp enable
frame-relay interface-dlci 39  

I believe the best way to influence EIGRP would be to add a bandwidth
statement to the tunnel or the interface to which the tunnel is applied to.

One other question.  T1 1.544mbps would be 193000 in the bandwidth
statement?.. believe so ..but having a brain fart right now.

Thank you for your help.

Cheers,

Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60834&t=60834
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP Switching [7:60829]

2003-01-10 Thread Leigh Anne Chisholm
I found the Cisco Interactive Mentor LAN Switching simulator as entirely
sufficient preparation for CCNP studies.  It's far less expensive, and the
Cat5K is now completely irrelevant as far as the CCIE lab goes...

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
cog
Sent: Friday, January 10, 2003 11:03 AM
To: [EMAIL PROTECTED]
Subject: CCNP Switching [7:60829]


Hi Listonians,

I have a Cisco 5500 in my lab rack. I wanted to know if anyone knows EXACTLY
what Supervisor Engine I need for the CCNP switching exam?

Do I need just a sup-III (WS-X5530-E1) or a (WS-X5530-E2)?

to quote a supplier I spoke with:

"The minimum SUPIII for CCNP studies, and the older CCIE labs is
WS-X5530-E2. The E2 and higher revs have the updated NFFC card that enables
MLS configurations. The WS-X5530-E1 (the label just says WS-X5530) does NOT
support MLS.)

I also heard I need a Route Switch Module (WS-X5302) for the exam.

Can someone confirm the necessary equipment I can use to complete the CCNP /
CCIE lab rack?

Thanks,

Jerry Roy
jroy AT axcelerant.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60835&t=60829
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Influencing EIGRP to use GRE tunnels over Serial link [7:60833]

2003-01-10 Thread [EMAIL PROTECTED]
Hello all,

I have a question.  I have gre tunnels going through MPLS running 1.544mbps,
running EIGRP.  The secondary links are Frame Relay links running at 256kbps
per link.  Presently EIGRP has calculated the best link to be the Sprint
Link as there are bandwidth statements in the frame relay subinterface on
the remote site:

Remote Site In Tampa:
interface Serial0/0.2 point-to-point
 description "Connect to Seattle"
 bandwidth 256
 ip address 192.168.228.253 255.255.255.0
 no ip mroute-cache
 no cdp enable
 frame-relay interface-dlci 41   

interface Tunnel1
 description "Tampa Tunnel to Seattle"
 ip address 10.0.48.6 255.255.255.252
 tunnel source Serial0/1
 tunnel destination 64.200.134.18
!   
The Tamp Site connects with Seattle Hub with these configs:

interface Tunnel1
 description "Seattle Tunnel to Tampa"
 ip address 10.0.48.5 255.255.255.252
 tunnel source Serial2/0
 tunnel destination 64.200.118.162
end   

interface Serial0/0.8 point-to-point
 description  "Seattle to Tampa"
 bandwidth 256
 ip address 192.168.228.254 255.255.255.0
 no ip route-cache
 no ip mroute-cache
 no cdp enable
 frame-relay interface-dlci 39  

I believe the best way to influence EIGRP would be to add a bandwidth
statement to the tunnel or the interface to which the tunnel is applied to.

One other question.  T1 1.544mbps would be 193000 in the bandwidth
statement?.. believe so ..but having a brain fart right now.

Thank you for your help.

Cheers,

Jamie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60833&t=60833
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Configuring VLAN [7:60832]

2003-01-10 Thread Rutger Blom
Hello, I have a question about configuring a new VLAN. This is the
situation:

I would like to configure and activate a new management VLAN in a cisco 2950
switch. The switch to be configured is only reachable via telnet. The switch
has IP address 192.168.0.1/24. This address is assigned to the default VLAN
1.

To configure this switch I choose to connect to a CDP neighbour switch with
my console cable. This switch has IP address 192.168.0.2/24 assigned, also
to VLAN 1. The two switches are situated in the same IP-network and can ping
eachother. From the switch to which I have a serial connection I start a
telnet session to the switch to be configured. I add the new management VLAN
which will be VLAN 2 and set an IP address on VLAN2: 10.255.0.1

So far so good.
I run a "show run" and see that both VLAN 1 and VLAN 2 have an IP address,
192.168.0.1 and 10.255.0.1 respectively. I also notice that the newly
configured VLAN 2 is "shutdown". Running a "no shutdown" on the VLAN 2
interface doesn't help much. The interface stays shutdown. My guess is that
VLAN 1 has to be shutdown before I can "no shutdown" VLAN 2. Shutting down
VLAN 1 means I will lose my telnet connection to the switch and then I
cannot get back in again via telnet.

What to do in this case?

Rutger




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60832&t=60832
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Sims in CCNP [7:60826]

2003-01-10 Thread Larry Letterman
anything more than saying most commands that are covered by the 
course books can be on the test and asked is probably a violation
of the NDA we signed..

Larry Letterman
Network Engineer
San Jose Transport
Cisco Systems Inc.
 


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 10, 2003 9:30 AM
> To: [EMAIL PROTECTED]
> Subject: Sims in CCNP [7:60826]
> 
> 
> Ignoring my earlier thread. I meant to ask if anyone can give me 
> an idea as
> to what simulation questions are in the CCNP exam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60831&t=60826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNP Switching [7:60829]

2003-01-10 Thread cog
Hi Listonians,

I have a Cisco 5500 in my lab rack. I wanted to know if anyone knows EXACTLY
what Supervisor Engine I need for the CCNP switching exam?

Do I need just a sup-III (WS-X5530-E1) or a (WS-X5530-E2)?

to quote a supplier I spoke with:

"The minimum SUPIII for CCNP studies, and the older CCIE labs is
WS-X5530-E2. The E2 and higher revs have the updated NFFC card that enables
MLS configurations. The WS-X5530-E1 (the label just says WS-X5530) does NOT
support MLS.)

I also heard I need a Route Switch Module (WS-X5302) for the exam.

Can someone confirm the necessary equipment I can use to complete the CCNP /
CCIE lab rack?

Thanks,

Jerry Roy
jroy AT axcelerant.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60829&t=60829
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Configs in CCNP [7:60808]

2003-01-10 Thread Larry Letterman
the test will ask config commands to be typed in..
exactly the way the book has it, no shortcuts...

Larry Letterman
Network Engineer
San Jose Transport
Cisco Systems Inc.



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 10, 2003 5:01 AM
> To: [EMAIL PROTECTED]
> Subject: Configs in CCNP [7:60808]
>
>
> Im about to start studying for the CCNP. I just wanted to know upfront are
> there any config questions in the exams and what to expect. No doubt Ill
> have alot of other questons along the way




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60830&t=60808
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VoIP from behind PIX [7:60796]

2003-01-10 Thread William Gragido
What sorts of performance issues are you noticing on the telephony side of
the house?  You said it was acceptable so on a MOS scale, whats the voice
quality like?  Thanks.

Will

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, January 10, 2003 6:18 AM
To: [EMAIL PROTECTED]
Subject: RE: VoIP from behind PIX [7:60796]


We have several DSL sites that are composed of a PIX 501 and one or two IP
phones. Voice quality is acceptable but not great.
Scott

 --- On Fri 01/10, Simer Mayo  wrote:From: Simer Mayo [mailto:
[EMAIL PROTECTED]]To: [EMAIL PROTECTED]: Fri, 10 Jan 2003 07:35:17
GMTSubject: VoIP from behind PIX [7:60796]1. Will PIX 515 handle VoIP
traffic?2. Will PIX 501 handle VoIP traffic?3. Can we VPN between 2
(site-to-site) and pass VoIP traffice thru theVPN Thanks SimerMessage Posted
at:http://www.groupstudy.com/form/read.php?f=7&i=60796&t=60796--
FAQ, list archives, and subscription
info: http://www.groupstudy.com/list/cisco.htmlReport misconduct and
Nondisclosure violations to [EMAIL PROTECTED]

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60828&t=60796
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Sims in CCNP [7:60826]

2003-01-10 Thread Pete Nugent
Ignoring my earlier thread. I meant to ask if anyone can give me an idea as
to what simulation questions are in the CCNP exam.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60826&t=60826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Load balancing & NAT [7:60663]

2003-01-10 Thread Evans, TJ (BearingPoint)
I wonder - is this a situation where specific code level, or the family of
products in question, etc., is causing a discrepancy?

I know the PIX (currently), for example, works as TLaWR states below ... 

However, perhaps in IOS when you specify
ip nat pool overload (start) (finish) netmask (mask)
it treats it differently since you are explicitly saying to 'overload' ?


... just curious ... 
Thanks!
TJ
[EMAIL PROTECTED]



-Original Message-
From: The Long and Winding Road [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 10, 2003 11:12 AM
To: [EMAIL PROTECTED]
Subject: Re: Load balancing & NAT [7:60663]

""Doug S""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> The way PAT works when overloading multiple addresses is to overload the
> first address in the pool until ALL port numbers are used up.  I can't
point
> you to any publicly available documentation on this, but cut and pasted
from
> Network Academy curriculum:
>
> "However, on a Cisco IOS router, NAT will
>  overload the first address in the pool until
>  it's maxed out, and then move on to the
>  second address, and so on."


I don't think so. I think whoever put this into Cisco training materials
ought to be named and publicly humiliated.

I know from cold hard experience that if you have a pool with several
addresses and overload configured, each addres in the pool is translated one
to one, and then the last number is shared among all comers after that.

isn't there any real technical review of the training materials?


>
> I've seen people wanting to get around this behavior for a variety of
> reasons and I haven't seen anyone post a good reply.  I've come up with a
a
> workaround that I beleive should work for you, although you'll have to
take
> a good look at your inside local addresses and figure out how to best
define
> those in to two equal groups.  Each group could then be separately
> translated to a different address.
>
> For instance, if you are now transating 8000 inside addresses all in the
> range of 10.0.32.0/19 to one overloaded pool, you could configure it to
> translate 10.0.32.0/20 to one overloaded pool and 10.0.48.0/20 to a
separate
> overloaded pool something like
>
> #access-list 1 permit 10.0.32.0 0.0.15.255
> #access-list 2 permit 10.0.48.0 0.0.15.255
> #ip nat pool LOWER_ADDRESSES_TRANSLATE_TO 209.211.100.1 209.211.100.5 pre
24
> #ip nat pool HIGHER_ADDRESSES_TRANSLATE_TO 209.211.100.6 209.211.100.10
pre
> 24
> #ip nat inside source list 1 pool LOWER_ADDRESSES_TRANSLATE_TO overload
> #ip nat inside source list 2 pool HIGHER_ADDRESSES_TRANSLATE_TO overload
>
> Forgive me if I've screwed up the syntax somewhere, but the idea is there.
> As I said, you'll have to put some thought into what best works in your
> addressing scheme to best separate translated addresses in to two roughly
> equal groups.  You might even find it helpful to partition them in to more
> than two groups.
>
> Hope it helps.
**
The information in this email is confidential and may be legally
privileged.  Access to this email by anyone other than the
intended addressee is unauthorized.  If you are not the intended
recipient of this message, any review, disclosure, copying,
distribution, retention, or any action taken or omitted to be taken
in reliance on it is prohibited and may be unlawful.  If you are not
the intended recipient, please reply to or forward a copy of this
message to the sender and delete the message, any attachments,
and any copies thereof from your system.
**




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60825&t=60663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP classes in San Diego! [7:60786]

2003-01-10 Thread Nathan Nakao
If I plan to be here in San Diego past the 15'th I'm definitely signing
up.  Brian,  have you taken any classes there before?  If so, how'd you
feel about the environment?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Brian
Sent: Friday, January 10, 2003 8:32 AM
To: [EMAIL PROTECTED]
Subject: Re: CCNP classes in San Diego! [7:60786]


hmm, yea I do have a cco login, price for this though cheaper, is still
outta my reach for now, but I'll keep this in mind.

Bri

- Original Message -
From: "The Long and Winding Road" 
To: 
Sent: Friday, January 10, 2003 8:00 AM
Subject: Re: CCNP classes in San Diego! [7:60786]


> ""Brian""  wrote in message 
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > These have the usual 1500-2500 dollar cost??  I'd like to find a
modestly
> > priced training solution.
>
>
> Brian, are you a Cisco customer, or work for one? Are you able to get 
> to
the
> Cisco training offerings at
>
> http://www.cisco.com/warp/public/10/wwtraining/celc/celclogin.html
>
> or
>
>
http://www.cisco.com/en/US/learning/le31/le46/learning_customer_e-learni
ng_c
> onnection_tool_launch.html
> watch the wrap
>
>
>
> >
> > Brian
> >
> > - Original Message -
> > From: "kris moby"
> > To:
> > Sent: Thursday, January 09, 2003 8:46 PM
> > Subject: CCNP classes in San Diego! [7:60786]
> >
> >
> > > Mira Costa College is offering CCNP classes at their campus in
> Oceanside,
> > > CA.
> > >
> > > Semesters 5 (Building Scalable Cisco Internetworks and Advanced
Routing)
> &
> > > Semester 8 (Cisco Network Troubleshooting and Support) start Jan 
> > > 21st
> and
> > > they both still have seats open.
> > >
> > > Registration is open through next Wednesday, Jan. 15th so HURRY!
> > >
> > > You can apply & register for classes online, here is the link;
> > >
> > > [url]http://www.cccapply.com/AdmissionApp[/url]
> > >
> > > To sign up for classes or view the catalog;
> > >
> > > [url]http://surf.miracosta.edu[/url]
> > >
> > > I am a Student at MCC and I cannot recommend these classes highly
> enough -
> > > and they are only $44/semester! You can't beat that! Application 
> > > takes
> > only
> > > a few minutes, sign up today!
> > >
> > > Mira Costa College has an excellent lab for CCNA/CCNP. It clean &
> > organized
> > > with all the equipment you'll need.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60824&t=60786
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: show trunk on 2924m-XL [7:60741]

2003-01-10 Thread Maximus
2924Switch>sh int fa0/6 switchport
Name: Fa0/6
Switchport: Enabled
Administrative mode: static access
Operational Mode: static access
Administrative Trunking Encapsulation: isl
Operational Trunking Encapsulation: isl
Negotiation of Trunking: Disabled
Access Mode VLAN: 10 (VLAN0010)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: NONE
Pruning VLANs Enabled: NONE

Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none


- Original Message -
From: "Phil Wallisch" 
To: 
Sent: Thursday, January 09, 2003 3:36 PM
Subject: show trunk on 2924m-XL [7:60741]


> Does anyone know how to do the equivilant of a "show trunk" on an IOS
> based switch?  I've been having to do a "show run" to see if the port was
> trunking.
>
> 
>
> Help STOP SPAM: Try the new MSN 8 and get 2 months FREE*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60823&t=60741
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP classes in San Diego! [7:60786]

2003-01-10 Thread Brian
hmm, yea I do have a cco login, price for this though cheaper, is still
outta my reach for now, but I'll keep this in mind.

Bri

- Original Message -
From: "The Long and Winding Road" 
To: 
Sent: Friday, January 10, 2003 8:00 AM
Subject: Re: CCNP classes in San Diego! [7:60786]


> ""Brian""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > These have the usual 1500-2500 dollar cost??  I'd like to find a
modestly
> > priced training solution.
>
>
> Brian, are you a Cisco customer, or work for one? Are you able to get to
the
> Cisco training offerings at
>
> http://www.cisco.com/warp/public/10/wwtraining/celc/celclogin.html
>
> or
>
>
http://www.cisco.com/en/US/learning/le31/le46/learning_customer_e-learning_c
> onnection_tool_launch.html
> watch the wrap
>
>
>
> >
> > Brian
> >
> > - Original Message -
> > From: "kris moby"
> > To:
> > Sent: Thursday, January 09, 2003 8:46 PM
> > Subject: CCNP classes in San Diego! [7:60786]
> >
> >
> > > Mira Costa College is offering CCNP classes at their campus in
> Oceanside,
> > > CA.
> > >
> > > Semesters 5 (Building Scalable Cisco Internetworks and Advanced
Routing)
> &
> > > Semester 8 (Cisco Network Troubleshooting and Support) start Jan 21st
> and
> > > they both still have seats open.
> > >
> > > Registration is open through next Wednesday, Jan. 15th so HURRY!
> > >
> > > You can apply & register for classes online, here is the link;
> > >
> > > [url]http://www.cccapply.com/AdmissionApp[/url]
> > >
> > > To sign up for classes or view the catalog;
> > >
> > > [url]http://surf.miracosta.edu[/url]
> > >
> > > I am a Student at MCC and I cannot recommend these classes highly
> enough -
> > > and they are only $44/semester! You can't beat that! Application takes
> > only
> > > a few minutes, sign up today!
> > >
> > > Mira Costa College has an excellent lab for CCNA/CCNP. It clean &
> > organized
> > > with all the equipment you'll need.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60822&t=60786
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Subnet question [7:60711]

2003-01-10 Thread Ladrach, Daniel E.
I would set up VLAN's keep in mind you need to route between VLAN's. This is
done via RSM or router on a stick.

> -Original Message-
> From: Tamhankar, Nitin 
> [mailto:[EMAIL PROTECTED]] 
> Sent: Thursday, January 09, 2003 11:40 AM
> To: [EMAIL PROTECTED]
> Subject: Subnet question [7:60711]
> 
> 
> This might be a very elementary question for some of you guys 
> but I would appreciate the answer. 
> 
> If an office which has 3 different floors and has Cisco 
> routers and catalyst switches and windows environment. We 
> need to configure it in such a way that each floor is on its 
> own subnet for example 
> 
> floor1   100.10.1.0
> floor2   100.10.2.0
> floor3   100.10.3.0
> 
> Also if a computer which has IP address in subnet 100.10.1.0 
> is moved from floor 1 to floor 2, it should not communicate 
> with the network unless its IP address is changed to one in 
> 100.10.2.0 subnet.
> 
> How it can be accomplished?
> 
> Thank you
> Nitin
> 
> [GroupStudy.com removed an attachment of type application/ms-tnef]
> Report misconduct 
> and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60821&t=60711
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Load balancing & NAT [7:60663]

2003-01-10 Thread The Long and Winding Road
""Peter Walker""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> This does NOT match my previous experience.  My experience has been that
> IOS seems to use NAT (not overloaded) until all pool addresses are used
> then start overloading the last one.  I dont know what happens once all
> when this address gets maxed out.


when doing PAT ( NAT overload ) there is a theoretical possibility of 65000
connections ( i.e. the number of TCP ports ) obviously, this would not be
practical because of the numbers of well known ports in use.

The NAT engine would add the dimension of TCP source port to the state
table.

So if I am at address 111.111.111.111 and my source port is , the NAT
engine might translate  this to public IP 222.222.222.222 with a source port
of 

The next guy out, source address 111.111.111.112 with a source port of 
( same app ) might be translated ast public IP 222.222.222.222 with a source
port of 8881

Etc.

The destination application doesn't care what the source port is ( in
theory ) although in this particular case, I wonder if the destination host
might have a problem. I suppose a well behaved application would not, but
you never can tell.


>
> The only reason we noticed this was due to the fact that we were running
> port sentry on a number of unix hosts and noticed that periodically random
> machines were being port scanned from outside our net (something that
> should not be able to occur if PAT is being used). We finally tracked it
> down to NAT (single outside IP to single inside IP) entries appearing in
> our NAT translations tables on the router.
>
> The only solution that we (or TAC) could come up with was to reduce the
NAT
> pool to a single IP.








>
> Peter Walker
> CISSP, CCN[NID]P, CSS1, CIPPTS, etc
>
>
> --On 09 January 2003 20:15 + Doug S  wrote:
>
> > The way PAT works when overloading multiple addresses is to overload the
> > first address in the pool until ALL port numbers are used up.  I can't
> > point you to any publicly available documentation on this, but cut and
> > pasted from Network Academy curriculum:
> >
> > "However, on a Cisco IOS router, NAT will
> >  overload the first address in the pool until
> >  it's maxed out, and then move on to the
> >  second address, and so on."




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60820&t=60663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Load balancing & NAT [7:60663]

2003-01-10 Thread The Long and Winding Road
""Doug S""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> The way PAT works when overloading multiple addresses is to overload the
> first address in the pool until ALL port numbers are used up.  I can't
point
> you to any publicly available documentation on this, but cut and pasted
from
> Network Academy curriculum:
>
> "However, on a Cisco IOS router, NAT will
>  overload the first address in the pool until
>  it's maxed out, and then move on to the
>  second address, and so on."


I don't think so. I think whoever put this into Cisco training materials
ought to be named and publicly humiliated.

I know from cold hard experience that if you have a pool with several
addresses and overload configured, each addres in the pool is translated one
to one, and then the last number is shared among all comers after that.

isn't there any real technical review of the training materials?


>
> I've seen people wanting to get around this behavior for a variety of
> reasons and I haven't seen anyone post a good reply.  I've come up with a
a
> workaround that I beleive should work for you, although you'll have to
take
> a good look at your inside local addresses and figure out how to best
define
> those in to two equal groups.  Each group could then be separately
> translated to a different address.
>
> For instance, if you are now transating 8000 inside addresses all in the
> range of 10.0.32.0/19 to one overloaded pool, you could configure it to
> translate 10.0.32.0/20 to one overloaded pool and 10.0.48.0/20 to a
separate
> overloaded pool something like
>
> #access-list 1 permit 10.0.32.0 0.0.15.255
> #access-list 2 permit 10.0.48.0 0.0.15.255
> #ip nat pool LOWER_ADDRESSES_TRANSLATE_TO 209.211.100.1 209.211.100.5 pre
24
> #ip nat pool HIGHER_ADDRESSES_TRANSLATE_TO 209.211.100.6 209.211.100.10
pre
> 24
> #ip nat inside source list 1 pool LOWER_ADDRESSES_TRANSLATE_TO overload
> #ip nat inside source list 2 pool HIGHER_ADDRESSES_TRANSLATE_TO overload
>
> Forgive me if I've screwed up the syntax somewhere, but the idea is there.
> As I said, you'll have to put some thought into what best works in your
> addressing scheme to best separate translated addresses in to two roughly
> equal groups.  You might even find it helpful to partition them in to more
> than two groups.
>
> Hope it helps.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60819&t=60663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NAT [7:60784]

2003-01-10 Thread The Long and Winding Road
""Francisco Sedano/Inf-Pronet""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello!
>
> And there are some issues with several protocols, as Marc points out. In
> FTP, for example, possibly the new packet will be larger than original
one.
> (IP Addresses are codified in the data payload as text). So, it's possible
> the router has to fragment the packet. And that's not a simple header
> rewrite.


I took a quick look at RFC's 1631 and 26something last night. 1631 is poorly
written IMHO, and pretty sloppy in some of its language. Neither one talks
specifically about what is supposed to happen in terms of which specific
fields are replaced. However, both talk about issues with checksums, packet
size changes, and both specifically mention FTP PORT ( and the other
operation, which I can't recall )




>
> Francisco Sedano
> Informatica Pronet.
>
>
>
>
>
> "Marc Thach Xuan
> Ky"
>
> cc:
> Enviado por: Asunto:  Re: NAT
> [7:60784]
>
> [EMAIL PROTECTED]
>
>
> 10/01/2003
> 12:08
> Por favor, responda
> a
> "Marc Thach Xuan
> Ky"
>
>
>
>
>
>
> Dwayne,
> it's most likely that any NAT implementation would overwrite the header
> data that it wishes to change, rather than rewrites the header in its
> entirety.  Of course the end result would look the same when you view
> the packet, however you can recalculate the checksum from the old and
> new IP addresses without reading the entire packet, so that's a gain for
> not using the full header creation code.
> Note though that some protocols which don't pass well through NAT are
> handled by an ALG (Application Level Gateway), and these modules will
> rewrite the IP data.  Now if I were coding an ALG I'd certainly create
> the entire header for scratch, and I might need to do the same with the
> data.  Think of an FTP ALG for example.  Here the length of the data may
> be changed, in particular it may grow.  The buffer that is currently
> allocated for the packet may not have room to grow, so in that case,
> you'd need to copy the data into a larger buffer probably as you parse
> and alter the data.
> rgds
> Marc
>
>
> Dwayne Saunders wrote:
> >
> > Hi all,
> > Was just wondering if any one could put me on to a good link in
> > regards NAT and packet headers, simply what I am trying to find out is
> the
> > packet header total rewritten or just the ip address part of the header
> and
> > checksum, Or is a new header written to envelope the original header.
> >
> > Or does each application do it differently.
> >
> > Any help would be great.
> >
> > Regards
> >
> > D'Wayne Saunders




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60818&t=60784
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP classes in San Diego! [7:60786]

2003-01-10 Thread The Long and Winding Road
""Brian""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> These have the usual 1500-2500 dollar cost??  I'd like to find a modestly
> priced training solution.


Brian, are you a Cisco customer, or work for one? Are you able to get to the
Cisco training offerings at

http://www.cisco.com/warp/public/10/wwtraining/celc/celclogin.html

or

http://www.cisco.com/en/US/learning/le31/le46/learning_customer_e-learning_c
onnection_tool_launch.html
watch the wrap



>
> Brian
>
> - Original Message -
> From: "kris moby"
> To:
> Sent: Thursday, January 09, 2003 8:46 PM
> Subject: CCNP classes in San Diego! [7:60786]
>
>
> > Mira Costa College is offering CCNP classes at their campus in
Oceanside,
> > CA.
> >
> > Semesters 5 (Building Scalable Cisco Internetworks and Advanced Routing)
&
> > Semester 8 (Cisco Network Troubleshooting and Support) start Jan 21st
and
> > they both still have seats open.
> >
> > Registration is open through next Wednesday, Jan. 15th so HURRY!
> >
> > You can apply & register for classes online, here is the link;
> >
> > [url]http://www.cccapply.com/AdmissionApp[/url]
> >
> > To sign up for classes or view the catalog;
> >
> > [url]http://surf.miracosta.edu[/url]
> >
> > I am a Student at MCC and I cannot recommend these classes highly
enough -
> > and they are only $44/semester! You can't beat that! Application takes
> only
> > a few minutes, sign up today!
> >
> > Mira Costa College has an excellent lab for CCNA/CCNP. It clean &
> organized
> > with all the equipment you'll need.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60817&t=60786
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE Vs. BS or MS degree [7:59481]

2003-01-10 Thread Robert Raver
Get over it!! If you like Cisco enough then do it!!!  If you like
networking enough then do it! If you are after the quickest and
best solution for money, then leave!!!  People here are to pose
and solve problems, plain and simple!


- Original Message -
From: "brett spunt" 
To: 
Sent: Friday, January 10, 2003 12:25 AM
Subject: RE: CCIE Vs. BS or MS degree [7:59481]


> You miss the point. A CCIE is an education. I MAJOR EDUCATION of
> monumental proportions!!!
>
> You cant fudge your way through it. It separates the men from the boys.
> The woman from the girls. Plain and simple. Also, just for the record, I
> think some people have the assumption that being a CCNP is close to a
> CCIE. I don't think they are anywhere in the same ballpark.
> BTW, I am only a CCNP, CIPT. Working on my CCIE, and I can tell you I
> have the utmost respect for ANYONE who has passed the lab
>
> BMS
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> Ladrach, Daniel E.
> Sent: Tuesday, January 07, 2003 1:27 PM
> To: [EMAIL PROTECTED]
> Subject: Re: CCIE Vs. BS or MS degree [7:59481]
>
> I do respect every CCIE out there. I have friends working on their
> CCIE's
> and I see the hard work they are putting in. I know this is not an easy
> certification to achieve. I also think every CCIE should be proud of
> their
> accomplishments. In my opinion an MBA opens more doors. I have never
> argued
> which one is better or which is harder; however, a certification should
> never be used in place of an education. I do believe the best candidate
> is
> probably going to have both.
>
>
> Daniel Ladrach
> CCNA, CCNP
> WorldCom




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60816&t=59481
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNA/CCNP home Lab setup [7:60727]

2003-01-10 Thread Marc Thach Xuan Ky
I've found that it's useful to have a variety of kit, and as many
routers as possible.  Cisco prices on eBay have fallen through the
floor.  A 4000 series with NP-4Ts is a good frame switch. 2500 are good
workhorses, best to get one with an ISDN BRI (I didn't and regretted
it).  Once you have a couple of ethernet-based routers, don't discount
token-ring 2500s if they are cheap or any 3000 series router.  3000s are
ludicrously cheap at the moment and can run 2500 IOS 12.0 images.  Don't
buy multiple 2600s unless you're rich. Two 12-port switches allows
better practise that one 24-port.
rgds
Marc

"McManus, Robert BGI SDC" wrote:
> 
> Could someone give me advice on what I would need (models) for a home lab
> setup for my CCNA/CCNP training?  Any advice would be appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60804&t=60727
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



wannabe CCIEs in Bangalore, India [7:60790]

2003-01-10 Thread [EMAIL PROTECTED]
Are there any folks preparing for the CCIE lab, in Bangalore, INDIA???
Anybody interested in sharing/selling equipment, books,study
materialContact me off-line.

Cheers
Simon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60790&t=60790
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Configs in CCNP [7:60808]

2003-01-10 Thread Pete Nugent
Oooops I meant sim questions. Silly me of course there will config questions?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60815&t=60808
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ODR, VOIP, and EIGRP [7:60814]

2003-01-10 Thread Waters, Kristina
Hi everyone,

My question is regarding ODR vs EIGRP. I have about 16 or 17 stub routers
that connect back to my core. Some of the remote locations are configured
via frame and are (or will) be running VOIP. Another group of remote (but
not quite as remote) locations are point-to-point, most with at least 512k
of bandwidth. I have one other set of remote locations in Puerto Rico, with
a main hub connecting via frame back to corporate and the remotes connecting
to the hub via a local wireless service. The PR routers are 805's, most of
the others are 1750's or 1760's, with a 3600 at the core. 

Right now, everything is running EIGRP, except the stubs in PR which are
being upgraded so they can support EIGRP. 

Is there a better way to configure this? Should I set up all these spoke
guys as stubs? If so, I'm a little confused on the different stub options
and whether I need to configure those. I was also wondering if ODR might be
a better option in PR than EIGRP. Can anyone give me any feedback on this?
Will it integrate OK with EIGRP running on the PR hub router?

TIA,
Kris.





**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender by email, delete and destroy this message and its 
attachments.
**




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60814&t=60814
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ip multicast [7:60813]

2003-01-10 Thread ANTONIO FERNANDEZ
I need to break up this address for muticast group assignment. 239.0.0.0/8
what would be the best way to break these up for different groups.

[EMAIL PROTECTED]


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60813&t=60813
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: problems while acessing Ciscoworks 2000 [7:60285]

2003-01-10 Thread Mr piyush shah
Steve
In fact I tried reinstalling Java Plug-in and that
solved my problems.Anyway thanks for help
Regards


 --- steve  wrote: > sorry
> 
> we got a bit of topic...
> 
> all the access permissions are setup in ...
> 
> Server configuration , setup ,secuiry,modify/Delete
> Users
> 
> but even with the VERY basic permissions of helpdesk
> you should still be
> able to ruin ciscoview...
> 
> i believe there is a permissions issue on the disk
> you have installed
> ciscoworks
> 
> answer
> 
> make sure your file permission`s is
> read/write for both group and world on the
> /opt/CSCOpx directory  (also
> check permissions on Win2k)
> 
> also make sure (unix) that the owner of the
> direcotry is csuser/causers
> 
> again i don`t know which OS  tyour onbut there
> are no default user
> permissions on the web server(unix)..
> 
> HTH
> 
> steve
> 
> 
> 
> 
> - Original Message -
> From: "Mr piyush shah" 
> To: 
> Sent: Wednesday, January 08, 2003 10:12 AM
> Subject: RE: problems while acessing Ciscoworks 2000
> [7:60285]
> 
> 
> > Frank
> > In fact I tried to install it on 3-4 machines ,but
> I
> > kept on getting the same message.As told
> previously it
> > works perfectly ok on the machine on which
> CIscoworks
> > is loaded and I get the graphical presentation of
> the
> > networking device . Pls help me.
> > Regards
> >
> > Piyush
> >
> >
> >
> >  --- Frank Jimenez  wrote: > Is it
> > from just one particular workstation or any
> > > workstation?  IE and
> > > Netscape both?
> > >
> > > I've had intermittent problems accessing CW2K
> > > servers from my laptop -
> > > usually because I've done something funky with
> my
> > > Java settings or
> > > installed one to many new widgets.  I've had to
> > > reinstall IE/Netscape
> > > before I could get it to work right.
> > >
> > > Wouldn't hurt to make sure that the server is
> > > patched to current revs as
> > > well.
> > >
> > > Frank Jimenez, CCIE #738
> > > Systems Engineer
> > > Cisco Systems, Inc.
> > > [EMAIL PROTECTED]
> > >
> > > -Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]] On Behalf Of
> > > Arnold, Jamie
> > > Sent: Saturday, January 04, 2003 6:07 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: RE: problems while acessing Ciscoworks
> 2000
> > > [7:60285]
> > >
> > >
> > > What about *very* slow access to CiscoWorks? 
> We're
> > > running it from a
> > > new Dell 2550, 2 processors, 1gb or ram and the
> box
> > > does nothing but run
> > > CW. Accessing it from a workstation takes
> literally
> > > minutes to load the
> > > initial page and then another 3-4 minutes to
> load
> > > the device manager.
> > > Is this common?
> > >
> > > Thanks
> > >
> > >
> > > "Imagination is more important than knowledge"
> > >
> > > Albert Einstein
> > >
> > >
> > > -Original Message-
> > > From: Amr Essam [mailto:[EMAIL PROTECTED]]
> > > Sent: Saturday, January 04, 2003 1:07 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: RE: problems while acessing Ciscoworks
> 2000
> > > [7:60285]
> > >
> > >
> > > Piyush
> > >
> > > Check the permissions for the user you logged on
> > > with to the ciscoworks
> > > And check the java settings in the web browser
> too I
> > > have passed with
> > > this kind of problem but it was solved by this
> way
> > > as it's mainly
> > > related with the browser
> > >
> > > Amr
> > >
> > >-Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]] On Behalf Of
> > > Mr piyush shah
> > > Sent: Saturday, January 04, 2003 11:14 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: Re: problems while acessing Ciscoworks
> 2000
> > > [7:60285]
> > >
> > > Hi all
> > > I have windows2000 suite of NMS.I have installed
> CD1
> > > with version 4 .Now that I can acess the same
> > > locally
> > > ,while When I am trying to acess ciscoview
> through
> > > web
> > > using port 1741 on other pC,I am getting the
> error
> > > Please grant the permission to acess Ciscoview.I
> > > wonder whether where should I grant the
> > > permisiion.Request all to help me.
> > > Piyush
> > >
> > >
> > >
> >
>

> > > Missed your favourite TV serial last night? Try
> the
> > > new, Yahoo! TV.
> > >visit http://in.tv.yahoo.com
> > [EMAIL PROTECTED]
> >
> >
>

> > Missed your favourite TV serial last night? Try
> the new, Yahoo! TV.
> >visit http://in.tv.yahoo.com
[EMAIL PROTECTED] 


Missed your favourite TV serial last night? Try the new, Yahoo! TV.
   visit http://in.tv.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60811&t=60285
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PR

RE: VoIP from behind PIX [7:60796]

2003-01-10 Thread [EMAIL PROTECTED]
We have several DSL sites that are composed of a PIX 501 and one or two IP
phones. Voice quality is acceptable but not great.
Scott

 --- On Fri 01/10, Simer Mayo  wrote:From: Simer Mayo [mailto:
[EMAIL PROTECTED]]To: [EMAIL PROTECTED]: Fri, 10 Jan 2003 07:35:17
GMTSubject: VoIP from behind PIX [7:60796]1. Will PIX 515 handle VoIP
traffic?2. Will PIX 501 handle VoIP traffic?3. Can we VPN between 2
(site-to-site) and pass VoIP traffice thru theVPN Thanks SimerMessage Posted
at:http://www.groupstudy.com/form/read.php?f=7&i=60796&t=60796--FAQ,
 list archives, and subscription info: http://www.groupstudy.com/list/cisco.htmlReport 
misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60812&t=60796
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IDS [7:60769]

2003-01-10 Thread steve
hi,


it really depends on how you want to implemnet it ...

the cisco stuff comes as a physicall probe device...i.e either a PCI card
and stand-alone probe or a 6500 card...

wear-as realsecure can come as a agent/software app that you can put on
server`s ...

the plus and minus point

Cisco REAL
+
Easyier to config from box  Req`s more devices out of box
(agent/collector/reporter/manager..these can all be on
goes into 6509   seperate boxes)
user int good  can run as Unix/linux/w2k
agent or probe or standalone probe
  lots of support
-
not easy to develop and expand  reqs somone with Dbase knoweledge
database req`s work after multiple probes  agents can crash on NT


HTH

steve
- Original Message -
From: "Dennis Ko" 
To: 
Sent: Thursday, January 09, 2003 11:54 PM
Subject: IDS [7:60769]


> If you have a choice of choosing ISS Real Secure IDS or Cisco IDS, which
> one would you pick?
>
> Please let me know your idea.
>
> Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60810&t=60769
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Configs in CCNP [7:60808]

2003-01-10 Thread [EMAIL PROTECTED]
I've passed the BSCN exam and I assure you there will be a lot of config
questions.


Good Luck!



""Pete Nugent""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Im about to start studying for the CCNP. I just wanted to know upfront are
> there any config questions in the exams and what to expect. No doubt Ill
> have alot of other questons along the way




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60809&t=60808
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Configs in CCNP [7:60808]

2003-01-10 Thread Pete Nugent
Im about to start studying for the CCNP. I just wanted to know upfront are
there any config questions in the exams and what to expect. No doubt Ill
have alot of other questons along the way


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60808&t=60808
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Switching Exam on Monday 13/1/03 [7:60785]

2003-01-10 Thread Aaron Ajello
Spend a lot of time on MLS.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60806&t=60785
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



MAC addresses on switches [7:60807]

2003-01-10 Thread ira
hallo,
I have a q regarding switches.

Does any interf have a separate MAC address ?
Is there a diff betw managed / unmanaged switches
regarding mac addrsses and interfaces ?

thanks

__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60807&t=60807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP -> which paper to give next? [7:60736]

2003-01-10 Thread Aaron Ajello
I recommend routing before remote access.  
>From my experience, the remote access test seemed to be almost an extension
of the routing test - taking several topics and going further in depth on
them.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60805&t=60736
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NAT [7:60784]

2003-01-10 Thread Francisco Sedano/Inf-Pronet
Hello!

And there are some issues with several protocols, as Marc points out. In
FTP, for example, possibly the new packet will be larger than original one.
(IP Addresses are codified in the data payload as text). So, it's possible
the router has to fragment the packet. And that's not a simple header
rewrite.

Francisco Sedano
Informatica Pronet.




   

"Marc Thach Xuan
Ky"
  
cc:
Enviado por: Asunto:  Re: NAT
[7:60784]
   
[EMAIL PROTECTED]
   

   

10/01/2003
12:08
Por favor, responda
a
"Marc Thach Xuan
Ky"
   

   





Dwayne,
it's most likely that any NAT implementation would overwrite the header
data that it wishes to change, rather than rewrites the header in its
entirety.  Of course the end result would look the same when you view
the packet, however you can recalculate the checksum from the old and
new IP addresses without reading the entire packet, so that's a gain for
not using the full header creation code.
Note though that some protocols which don't pass well through NAT are
handled by an ALG (Application Level Gateway), and these modules will
rewrite the IP data.  Now if I were coding an ALG I'd certainly create
the entire header for scratch, and I might need to do the same with the
data.  Think of an FTP ALG for example.  Here the length of the data may
be changed, in particular it may grow.  The buffer that is currently
allocated for the packet may not have room to grow, so in that case,
you'd need to copy the data into a larger buffer probably as you parse
and alter the data.
rgds
Marc


Dwayne Saunders wrote:
>
> Hi all,
> Was just wondering if any one could put me on to a good link in
> regards NAT and packet headers, simply what I am trying to find out is
the
> packet header total rewritten or just the ip address part of the header
and
> checksum, Or is a new header written to envelope the original header.
>
> Or does each application do it differently.
>
> Any help would be great.
>
> Regards
>
> D'Wayne Saunders




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60803&t=60784
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NAT [7:60784]

2003-01-10 Thread Marc Thach Xuan Ky
Dwayne,
it's most likely that any NAT implementation would overwrite the header
data that it wishes to change, rather than rewrites the header in its
entirety.  Of course the end result would look the same when you view
the packet, however you can recalculate the checksum from the old and
new IP addresses without reading the entire packet, so that's a gain for
not using the full header creation code.
Note though that some protocols which don't pass well through NAT are
handled by an ALG (Application Level Gateway), and these modules will
rewrite the IP data.  Now if I were coding an ALG I'd certainly create
the entire header for scratch, and I might need to do the same with the
data.  Think of an FTP ALG for example.  Here the length of the data may
be changed, in particular it may grow.  The buffer that is currently
allocated for the packet may not have room to grow, so in that case,
you'd need to copy the data into a larger buffer probably as you parse
and alter the data.
rgds
Marc


Dwayne Saunders wrote:
> 
> Hi all,
> Was just wondering if any one could put me on to a good link in
> regards NAT and packet headers, simply what I am trying to find out is the
> packet header total rewritten or just the ip address part of the header and
> checksum, Or is a new header written to envelope the original header.
> 
> Or does each application do it differently.
> 
> Any help would be great.
> 
> Regards
> 
> D'Wayne Saunders




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60802&t=60784
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: problems while acessing Ciscoworks 2000 [7:60285]

2003-01-10 Thread steve
sorry

we got a bit of topic...

all the access permissions are setup in ...

Server configuration , setup ,secuiry,modify/Delete Users

but even with the VERY basic permissions of helpdesk you should still be
able to ruin ciscoview...

i believe there is a permissions issue on the disk you have installed
ciscoworks

answer

make sure your file permission`s is
read/write for both group and world on the /opt/CSCOpx directory  (also
check permissions on Win2k)

also make sure (unix) that the owner of the direcotry is csuser/causers

again i don`t know which OS  tyour onbut there are no default user
permissions on the web server(unix)..

HTH

steve




- Original Message -
From: "Mr piyush shah" 
To: 
Sent: Wednesday, January 08, 2003 10:12 AM
Subject: RE: problems while acessing Ciscoworks 2000 [7:60285]


> Frank
> In fact I tried to install it on 3-4 machines ,but I
> kept on getting the same message.As told previously it
> works perfectly ok on the machine on which CIscoworks
> is loaded and I get the graphical presentation of the
> networking device . Pls help me.
> Regards
>
> Piyush
>
>
>
>  --- Frank Jimenez  wrote: > Is it
> from just one particular workstation or any
> > workstation?  IE and
> > Netscape both?
> >
> > I've had intermittent problems accessing CW2K
> > servers from my laptop -
> > usually because I've done something funky with my
> > Java settings or
> > installed one to many new widgets.  I've had to
> > reinstall IE/Netscape
> > before I could get it to work right.
> >
> > Wouldn't hurt to make sure that the server is
> > patched to current revs as
> > well.
> >
> > Frank Jimenez, CCIE #738
> > Systems Engineer
> > Cisco Systems, Inc.
> > [EMAIL PROTECTED]
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]] On Behalf Of
> > Arnold, Jamie
> > Sent: Saturday, January 04, 2003 6:07 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: problems while acessing Ciscoworks 2000
> > [7:60285]
> >
> >
> > What about *very* slow access to CiscoWorks?  We're
> > running it from a
> > new Dell 2550, 2 processors, 1gb or ram and the box
> > does nothing but run
> > CW. Accessing it from a workstation takes literally
> > minutes to load the
> > initial page and then another 3-4 minutes to load
> > the device manager.
> > Is this common?
> >
> > Thanks
> >
> >
> > "Imagination is more important than knowledge"
> >
> > Albert Einstein
> >
> >
> > -Original Message-
> > From: Amr Essam [mailto:[EMAIL PROTECTED]]
> > Sent: Saturday, January 04, 2003 1:07 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: problems while acessing Ciscoworks 2000
> > [7:60285]
> >
> >
> > Piyush
> >
> > Check the permissions for the user you logged on
> > with to the ciscoworks
> > And check the java settings in the web browser too I
> > have passed with
> > this kind of problem but it was solved by this way
> > as it's mainly
> > related with the browser
> >
> > Amr
> >
> >-Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]] On Behalf Of
> > Mr piyush shah
> > Sent: Saturday, January 04, 2003 11:14 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: problems while acessing Ciscoworks 2000
> > [7:60285]
> >
> > Hi all
> > I have windows2000 suite of NMS.I have installed CD1
> > with version 4 .Now that I can acess the same
> > locally
> > ,while When I am trying to acess ciscoview through
> > web
> > using port 1741 on other pC,I am getting the error
> > Please grant the permission to acess Ciscoview.I
> > wonder whether where should I grant the
> > permisiion.Request all to help me.
> > Piyush
> >
> >
> >
> 
> > Missed your favourite TV serial last night? Try the
> > new, Yahoo! TV.
> >visit http://in.tv.yahoo.com
> [EMAIL PROTECTED]
>
> 
> Missed your favourite TV serial last night? Try the new, Yahoo! TV.
>visit http://in.tv.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60801&t=60285
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Load balancing & NAT [7:60663]

2003-01-10 Thread Peter Walker
This does NOT match my previous experience.  My experience has been that 
IOS seems to use NAT (not overloaded) until all pool addresses are used 
then start overloading the last one.  I dont know what happens once all 
when this address gets maxed out.

The only reason we noticed this was due to the fact that we were running 
port sentry on a number of unix hosts and noticed that periodically random 
machines were being port scanned from outside our net (something that 
should not be able to occur if PAT is being used). We finally tracked it 
down to NAT (single outside IP to single inside IP) entries appearing in 
our NAT translations tables on the router.

The only solution that we (or TAC) could come up with was to reduce the NAT 
pool to a single IP.

Peter Walker
CISSP, CCN[NID]P, CSS1, CIPPTS, etc


--On 09 January 2003 20:15 + Doug S  wrote:

> The way PAT works when overloading multiple addresses is to overload the
> first address in the pool until ALL port numbers are used up.  I can't
> point you to any publicly available documentation on this, but cut and
> pasted from Network Academy curriculum:
>
> "However, on a Cisco IOS router, NAT will
>  overload the first address in the pool until
>  it's maxed out, and then move on to the
>  second address, and so on."




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60800&t=60663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP classes in San Diego! [7:60786]

2003-01-10 Thread Brian
These have the usual 1500-2500 dollar cost??  I'd like to find a modestly
priced training solution.

Brian

- Original Message -
From: "kris moby" 
To: 
Sent: Thursday, January 09, 2003 8:46 PM
Subject: CCNP classes in San Diego! [7:60786]


> Mira Costa College is offering CCNP classes at their campus in Oceanside,
> CA.
>
> Semesters 5 (Building Scalable Cisco Internetworks and Advanced Routing) &
> Semester 8 (Cisco Network Troubleshooting and Support) start Jan 21st and
> they both still have seats open.
>
> Registration is open through next Wednesday, Jan. 15th so HURRY!
>
> You can apply & register for classes online, here is the link;
>
> [url]http://www.cccapply.com/AdmissionApp[/url]
>
> To sign up for classes or view the catalog;
>
> [url]http://surf.miracosta.edu[/url]
>
> I am a Student at MCC and I cannot recommend these classes highly enough -
> and they are only $44/semester! You can't beat that! Application takes
only
> a few minutes, sign up today!
>
> Mira Costa College has an excellent lab for CCNA/CCNP. It clean &
organized
> with all the equipment you'll need.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60799&t=60786
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: show trunk on 2924m-XL [7:60741]

2003-01-10 Thread Peri Sophos
OR , if on a gigabit port , you could use the term "show run int gigabit
0/1" this would show you the config for gigabit 0/1 only , so you don't
need to go through the entire config of a show run command :)

A show interface will show you the entire config like a show run , just
kind of in a different format , the show run interface gigabit 0/1 or
0/2 will just show the config for that interface.

For the ethernet port , show run interface fastethernet 0/1 , 0/2 etc.

Cheers

-Original Message-
From: Captain Lance [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 09, 2003 11:34 PM
To: [EMAIL PROTECTED]
Subject: Re: show trunk on 2924m-XL [7:60741]


Have you tried show interface?


""Phil Wallisch""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Does anyone know how to do the equivilant of a "show trunk" on an IOS
> based switch?  I've been having to do a "show run" to see if the port
was
> trunking.
>
>

>
> Help STOP SPAM: Try the new MSN 8 and get 2 months FREE*
NOTICE - This message contains privileged and confidential information
intended only for the use of the addressee named above.
Any review, retransmission, dissemination, copying, disclosure or other use
of, or taking of any action in reliance upon, this information by person or
entities other than the intended recipient is prohibited.
If you have received this message in error, please notify the sender by
return email and delete this message.  This message should not be copied or
used for any purpose other than intended, nor should it be disclosed to any
other person. Any views expressed in this message are those of the
individual sender, except where the sender specifically states them to be
the view of Investec Group, its subsidiaries or associates.
The Investec Group is not liable for the security of information sent by
e-mail at your request, nor for the proper and complete transmission of the
information contained in the communication nor for any delay in its
receipt.  Please note that the recipient must scan this e-mail and any
attached files for viruses and the like.
The Investec Group accepts no liability of whatever nature for any loss,
liability, damage or expense resulting directly or indirectly from the
access of any files which are attached to this message.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60798&t=60741
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Subnet question [7:60711]

2003-01-10 Thread Peri Sophos
OR , you don't have to change the IP , you can simply change the Vlan on
the port to work for the IP on the WKST. As long as you have DHCP up and
running and you have got vlans configured on your switch , you can move
a pc any where , put the port into the correct Vlan , and you will work.

I have set up a four story building with 2000 P.C's , haven't had a
day's problem :)

-Original Message-
From: MADMAN [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 09, 2003 7:25 PM
To: [EMAIL PROTECTED]
Subject: Re: Subnet question [7:60711]


don't do anything.  If you put a 10.100.1.x host on the 10.100.2.x 
network it won't work until you do change the IP.

   Dave

Tamhankar, Nitin wrote:
> This might be a very elementary question for some of you guys but I
would
> appreciate the answer. 
> 
> If an office which has 3 different floors and has Cisco routers and
catalyst
> switches and windows environment. We need to configure it in such a
way
that
> each floor is on its own subnet for example 
> 
> floor1   100.10.1.0
> floor2   100.10.2.0
> floor3   100.10.3.0
> 
> Also if a computer which has IP address in subnet 100.10.1.0 is moved
from
> floor 1 to floor 2, it should not communicate with the network unless
its
IP
> address is changed to one in 100.10.2.0 subnet.
> 
> How it can be accomplished?
> 
> Thank you
> Nitin
> 
> [GroupStudy.com removed an attachment of type application/ms-tnef]
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

"You don't make the poor richer by making the rich poorer." --Winston
Churchill
NOTICE - This message contains privileged and confidential information
intended only for the use of the addressee named above.
Any review, retransmission, dissemination, copying, disclosure or other use
of, or taking of any action in reliance upon, this information by person or
entities other than the intended recipient is prohibited.
If you have received this message in error, please notify the sender by
return email and delete this message.  This message should not be copied or
used for any purpose other than intended, nor should it be disclosed to any
other person. Any views expressed in this message are those of the
individual sender, except where the sender specifically states them to be
the view of Investec Group, its subsidiaries or associates.
The Investec Group is not liable for the security of information sent by
e-mail at your request, nor for the proper and complete transmission of the
information contained in the communication nor for any delay in its
receipt.  Please note that the recipient must scan this e-mail and any
attached files for viruses and the like.
The Investec Group accepts no liability of whatever nature for any loss,
liability, damage or expense resulting directly or indirectly from the
access of any files which are attached to this message.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60797&t=60711
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]