PIX Exam...(CSPFA) [7:61293]
Hi, I'm CCNA and now thinking for "Cisco Secure PIX Firewall Advanced". I wanted to know about the value of this exam. is this is in demand and help me to get better jobs... I'm in India and don't know whether in India this would help me to get a good opportunity.. TIA... __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61293&t=61293 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX Exam...(CSPFA) [7:61293]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I would do the MCNS first at least. Martijn - -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Namens Gunjan Mathur Verzonden: zaterdag 18 januari 2003 9:02 Aan: [EMAIL PROTECTED] Onderwerp: PIX Exam...(CSPFA) [7:61293] Hi, I'm CCNA and now thinking for "Cisco Secure PIX Firewall Advanced". I wanted to know about the value of this exam. is this is in demand and help me to get better jobs... I'm in India and don't know whether in India this would help me to get a good opportunity.. TIA... __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com Version: PGP 8.0 iQA/AwUBPikiAHdq56XWk+VyEQLNLACfQfgmvm6C//0ARCgXMid7+6JVOmgAn2xi 5xqd7+HjYLkZt7xiT0EoehHL =Am7V -END PGP SIGNATURE- Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61294&t=61293 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: URGENT: Modem Authentication Failure [7:61292]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I do not have lots of debug experience in that area, but maybe can help a little. The message Call Handle failed for Modem 5/2 Does not seem to worry, see Configuring Dialin with the NM-8AM or NM-16AM Analog Modem Module Sample Debugs Output http://www.cisco.com/warp/public/471/nm-xam_dialin.html#9 Where it is standard debug output for a succeeded call. The message Received authen response status FAIL (3) Does worry me. Triple check that nothing changed in the radius/tacacs config. Common Problems in Debugging TACACS+, PAP and CHAP http://www.cisco.com/warp/public/480/tacacs_pppdebug.html Martijn - -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Namens Hamid Ali Asgari Verzonden: zaterdag 18 januari 2003 8:34 Aan: [EMAIL PROTECTED] Onderwerp: URGENT: Modem Authentication Failure [7:61292] Hi everybody, Today I have encountered a strabge problem. I have a 3660 router with NM-16AM modules. Nothing has been changed. Suddenly we got complains from users tht they cannot connect. I have checked the AAA server. But there is nothing wrong. Here is my debug log: - --- Call Handle failed for Modem 5/2 %LINK-3-UPDOWN: Interface Async163, changed state to up TPLUS: Queuing AAA Authentication request 634 for processing TPLUS: processing authentication start request id 634 TPLUS: Authentication start packet created for 634(testuser) TPLUS: Using server XY.XY.XY.250 TPLUS(027A): connected to server XY.XY.XY.250 TPLUS: response received for AAA request 634 TPLUS: Received authen response status FAIL (3) %LINK-5-CHANGED: Interface Async163, changed state to reset %LINK-3-UPDOWN: Interface Async163, changed state to down Call Handle failed for Modem 5/2 %LINK-3-UPDOWN: Interface Async163, changed state to up TPLUS: Queuing AAA Authentication request 637 for processing TPLUS: processing authentication start request id 637 TPLUS: Authentication start packet created for 637(testuser) TPLUS: Using server XY.XY.XY.250 TPLUS(027D): connected to server XY.XY.XY.250 TPLUS: response received for AAA request 637 TPLUS: Received authen response status FAIL (3) %LINK-5-CHANGED: Interface Async163, changed state to reset - --- Any comments? I couldn't find what the FAIL(13) error code means. And also I don't know what causes "Call Handle failed for Modem 5/2". I get this for a lot of my modems on my console.Thanks in advance, Hamid Version: PGP 8.0 iQA/AwUBPikla3dq56XWk+VyEQKphACfa6B8lpmTQ3Yt6D18Vb8Kxk6aEdUAoNbu ITDsRaSUCQlsXdkQFM5zARCH =EO/E -END PGP SIGNATURE- Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61295&t=61292 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: URGENT: Modem Authentication Failure [7:61292]
The tacacs config has not been changed. Neither on the router, nor the server. Besides on the router, I don't get the Call Handle error. Any comments? Hamid > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I do not have lots of debug experience in that area, but maybe can help > a little. > > The message > > Call Handle failed for Modem 5/2 > Does not seem to worry, see > > Configuring Dialin with the NM-8AM or NM-16AM Analog Modem Module > Sample Debugs Output > http://www.cisco.com/warp/public/471/nm-xam_dialin.html#9 > Where it is standard debug output for a succeeded call. > > The message > Received authen response status FAIL (3) > > Does worry me. Triple check that nothing changed in the radius/tacacs > config. > > Common Problems in Debugging TACACS+, PAP and CHAP > http://www.cisco.com/warp/public/480/tacacs_pppdebug.html > > Martijn > > - -Oorspronkelijk bericht- > Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Namens Hamid > Ali Asgari Verzonden: zaterdag 18 januari 2003 8:34 > Aan: [EMAIL PROTECTED] > Onderwerp: URGENT: Modem Authentication Failure [7:61292] > > > Hi everybody, > > Today I have encountered a strabge problem. I have a 3660 router with > NM-16AM modules. Nothing has been changed. Suddenly we got complains > from users tht they cannot connect. I have checked the AAA server. But > there is nothing wrong. Here is my debug log: - > --- > Call Handle failed for Modem 5/2 > %LINK-3-UPDOWN: Interface Async163, changed state to up > TPLUS: Queuing AAA Authentication request 634 for processing > TPLUS: processing authentication start request id 634 > TPLUS: Authentication start packet created for 634(testuser) > TPLUS: Using server XY.XY.XY.250 > TPLUS(027A): connected to server XY.XY.XY.250 > TPLUS: response received for AAA request 634 > TPLUS: Received authen response status FAIL (3) > %LINK-5-CHANGED: Interface Async163, changed state to reset > %LINK-3-UPDOWN: Interface Async163, changed state to down > > Call Handle failed for Modem 5/2 > %LINK-3-UPDOWN: Interface Async163, changed state to up > TPLUS: Queuing AAA Authentication request 637 for processing > TPLUS: processing authentication start request id 637 > TPLUS: Authentication start packet created for 637(testuser) > TPLUS: Using server XY.XY.XY.250 > TPLUS(027D): connected to server XY.XY.XY.250 > TPLUS: response received for AAA request 637 > TPLUS: Received authen response status FAIL (3) > %LINK-5-CHANGED: Interface Async163, changed state to reset > > - --- > Any comments? > > I couldn't find what the FAIL(13) error code means. And also I don't > know what causes "Call Handle failed for Modem 5/2". I get this for a > lot of my modems on my console.Thanks in advance, Hamid > Nondisclosure violations to [EMAIL PROTECTED] > > -BEGIN PGP SIGNATURE- > Version: PGP 8.0 > > iQA/AwUBPikla3dq56XWk+VyEQKphACfa6B8lpmTQ3Yt6D18Vb8Kxk6aEdUAoNbu > ITDsRaSUCQlsXdkQFM5zARCH > =EO/E > -END PGP SIGNATURE- Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61296&t=61292 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: RX port buffers on cat4000's [7:61248]
all ports share a 16MB buffer space. (4000 docs) for ethernet interfaces, i only found a generic allocation of ether and fast ethr blades, 192KB per interface, 160 for outboud and 24 for inbound, but i found this info in the (5000 docs), they made it sound like it's generic to ethernet but i'm not sure. ""Vicuna, Mark"" a icrit dans le message de news: [EMAIL PROTECTED] > yes, alot of traffic is flowing through :-) and no wasn't related to any > kind of attack. > > The 18mpps or 48mpps is more to do with the switch fabric, not related to > the tx rx buffer(s) that are allocated per port. > > the issue was immediately resolved when i hard coded port settings. just > wanted to have an idea of the size of buffering allocated on these ports > (hardware specific of course). > > > cheers, > mark. > > -Original Message- > From: Erick B. [mailto:[EMAIL PROTECTED]] > Sent: Thursday, January 16, 2003 11:17 PM > To: Vicuna, Mark; [EMAIL PROTECTED] > Subject: Re: RX port buffers on cat4000's [7:61248] > > > > http://www.cisco.com/warp/public/473/46.html > > * In-Lost - Packets which could not be received since > the input buffers are full. Reason: Excessive input > rate of traffic. > > * Delay Exceed - This is an indication of the number > of frames discarded because of excessive delay in the > switching process. Reason/Cause: Severe problem with > the switch. Open a case with the Cisco TAC > > I'm guessing the PIX connection has lots of traffic > (probably constant). maybe some sort of attack was > going on at this time. Might be a combination of > devices attached to that blade. There is no buffer > adjustments I know of. > > Also the sup2 on 4006 does 18 Mpps , whereas a > sup3/sup4 can do 48 Mpps. > > --- "Vicuna, Mark" wrote: > > Hi All, > > > > Just wondering if anyone has figures for the size of > > rx buffers for cat 4000 > > ports? Had a issue today where a port was connected > > to a pix 535 manually > > set at half/100 (yep you read right), the switch > > port was at auto/auto. The > > rate of In-Lost (rx buffer filling up) errors was on > > average 5 per minute > > (among all the other errors of course). > > > > I have seen In-Lost and delay-exceeds rise up for > > mis-settings to servers, > > but the pix connection was showing some pretty fast > > counter stats > > > > Hard to find these small details sometimes in doco.. > > maybe anyone here from > > cisco can advise? > > > > the mod on the 4006 is a ws-x4424-gb-rj45 (hw 1.5) > > with a supII (hw 3.2, > > gsp 7.1(2.0), nmp 7.1(2)) > > > > > > Cheers, > > M > [EMAIL PROTECTED] > > > __ > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up now. > http://mailplus.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61297&t=61248 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX Exam...(CSPFA) [7:61293]
Security specialization is quite in demand lately in India as well . Navin Parwal ""Gunjan Mathur"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi, > > I'm CCNA and now thinking for "Cisco Secure PIX > Firewall Advanced". > > I wanted to know about the value of this exam. is this > is in demand and help me to get better jobs... > > I'm in India and don't know whether in India this > would help me to get a good opportunity.. > > TIA... > > > __ > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up now. > http://mailplus.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61298&t=61293 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Networking Humor [7:61299]
Just had a co-worker pass this one one to me and thought some >might find the humor in it as well... > > http://www.dude.ru/music/gigflapping.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61299&t=61299 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RSP7000 ILMI fails with SNMP-3-BADOID: /Crashes ro [7:61300]
I have gotten a little further than the last time with my ATM/SNMP-3-BADOID: error. It seems that this error is generated when ILMI attempts to start on my 7010/RSP7000 running 12.2.7 IOS equipped with a CX-AIP-SM 155 MM card (73-1188-03 rev B0). The card works properly in a 7007 w/ RP1 running 11.2.15 from ROM, and the cisco site indicates that any board later than 73-1188-02 rev. D0 will work with the RSP7000. When ILMI is enabled, it's state is listed as "Restarting" and I get the SNMP-3-BADOID: about once a second when the cable is connected to a switch. I've also tried IOS 12.1.soemthing or another to no effect. If I disable ILMI the card appears to work fine. ILMI on the 7000 works fine with this card and an older 73-1188-02 rev. C0 card. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61300&t=61300 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: The effect of NAT on an interface [7:61178]
Post mortem - the problem described below appears to lie in the nature of how changes are made and applied. I'm guessing bug. here are some relevant configs: --- interface ATM0.1 point-to-point description To Host ip address 172.31.250.22 255.255.255.252 ip nat outside ip summary-address eigrp 999 172.31.8.0 255.255.255.0 5 pvc 0/35 encapsulation aal5snap ! interface FastEthernet0 description Remote Site ip address 192.168.0.251 255.255.255.0 ip nat inside no ip mroute-cache speed auto ! ip nat pool sfcccnat 172.31.8.25 172.31.8.250 netmask 255.255.255.0 ip nat inside source route-map sfcccnat pool sfcccnat - lets's assume that the access-list is correct. it is, because it's in, running, and there are no reachbility problems. while making the changes, I pasted the new access-list into the router. I then attempted to add the route-map back into the router ( the corrected route-map that referred to the new access-list numbers ) at that point I lose connectivity. I had a co-worker on site, who removed the ip nat outside statement. Then from the central site I repeated my methodology, and had no problem. My suspicion is that the router processes get confused because of the order in which I did things. Oh, I should add that this time I also removed the statement "ip nat inside source etc" before adding in the corrected route-map. In any case, all is well, and I can finally close out this project. Hot dawg!! This one has been an albatross, having been in implementation for six months. problems with equipment, with DSL lines, and with local admins turning off routers and stashing them in back rooms, not to mention an extranet partner who came in and reconfigured the firewall and generally f** the original design that they had agreed to in the early stages, has made this one a real bear. word of advice - talk about layer 8 issues first. if layer 8 cannot be solved, layers 1-7 are irrelevant. reload in X - yep - I'll keep that one in the tool chest :-> ""Mark W. Odette II"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Chuck- > What about TFTPing your changes in a "new" startup-config file, then > reloading the router. If you are pretty certain your changes won't be > bad afterwards, I don't see where you could go wrong. If you do have a > programming issue with a route-map or acl, then you definitely are > getting to visit the client router in the morning. :) > > My mentor has taught me a command that will always save your butt. > > When making the changes in the fashion you mentioned: > 1st command to issue is "Reload in X" ; x=number of minutes specified. > > If you do this, you won't have to worry about getting locked out > over-night. > > Also, create your new ACLs on the Router BEFORE you doing anything else. > This way, you can change the command that implements the new ACL last, > and you should be able to re-connect shortly afterwards. I've had fun > with this while working on a IOS VPN solution- it was a rude awakening, > and I had to call the client office to have them bounce the router that > night. > > -Mark > -Original Message- > From: The Long and Winding Road > [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, January 15, 2003 11:22 PM > To: [EMAIL PROTECTED] > Subject: The effect of NAT on an interface [7:61178] > > it's happened twice now, and the policy routing was removed from the > interface, so I'm thinking the problem has to be the NAT configuration > > The problem: remote configuration of a router. > > Circumstances: remove poorly constructed access-lists. replace them with > better constructed access-lists that are also in conformance with a > system > wide standard numbering convention. Change the route maps to reflect > these > new access-lists. one access-list determines whether or not a host on > the > inside can obtain a NAT translation. the other control policy routing > inbound on the WAN interface. > > The process: > > 1) remove policy routing from the distant end WAN interface > > 2) delete old access-lists > > 3) delete old route-maps > > 4) paste in new access-lists > > 5) paste in the new route-maps > > at this point I lose connection with the router. > > I presume that because policy routing was disabled ( no ip policy > route-map > etc ) and the router was reloaded before step 2 was taken, that the > problem > is not with policy routing denying my own access. > > That leaves NAT. The ip nat outside configured on the WAN link of the > remote > router was in place. > > Now I'm racking my brains about this, because I have 9 other sites > identically configured, and I configured them remotely, and life was > good. > > Well, I guess I'll be visiting a client site in the morning. > sheesh!!! > > > > > -- > TANSTAAFL > "there ain't no such thing as a free lunch" Message Posted at: http://www.groupstudy.com/form/read.ph
Random observations about EIGRP networks [7:61302]
based on a recent thread regarding the 0.0.0.0 network since about 12.0 or so, when placing networks into EIGRP, one can use a wildcard mask. example: router eigrp 100 network 1.1.0.0 0.0.255.255 which places 1.1.0.0/16 into the eigrp process. I did a bit of digging around both the Doc CD and the TAC site, but surprisingly, I can find nothing in the way of documentation for this feature. following are a couple of things I did, and the results. Router 3 - interface Loopback101 ip address 7.50.1.1 255.255.255.0 ! interface Loopback102 ip address 6.50.1.1 255.255.255.0 ! interface Loopback103 ip address 5.50.1.1 255.255.255.0 ! interface Loopback104 ip address 4.50.1.1 255.255.255.0 ! interface Loopback201 ip address 168.95.1.5 255.255.255.0 ! interface Loopback202 ip address 170.177.1.5 255.255.255.0 ! interface Loopback203 ip address 171.17.47.5 255.255.255.0 ! interface Loopback204 ip address 169.30.101.5 255.255.255.0 ! interface TokenRing0 ip address 199.1.1.2 255.255.255.252 ring-speed 4 ! router eigrp 200 network 4.0.0.0 3.255.255.255 network 168.0.0.0 3.255.255.255 network 199.1.1.0 0.0.0.3 no auto-summary no eigrp log-neighbor-changes ! Router 4 routing table -- Router_4#ir ei 170.177.0.0/24 is subnetted, 1 subnets D 170.177.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 171.17.0.0/24 is subnetted, 1 subnets D 171.17.47.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 168.95.0.0/24 is subnetted, 1 subnets D 168.95.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 169.30.0.0/24 is subnetted, 1 subnets D 169.30.101.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 4.0.0.0/24 is subnetted, 1 subnets D 4.50.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 5.0.0.0/24 is subnetted, 1 subnets D 5.50.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 6.0.0.0/24 is subnetted, 1 subnets D 6.50.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 7.0.0.0/24 is subnetted, 1 subnets D 7.50.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 Router_4# I find the notation that 4.0.0.0/24 is subnetted with one subnet interesting Note also that the wildcard mask bits must be contiguous, which is one of the idiot proofing features introduced in 12.0 Takes all the fun out of wildcard masking, both for EIGRP and for OSPF. As we discussed elsewhere, the command "network 0.0.0.0" places all connected interfaces, and thus all connected networks, into the eigrp process. if automatic summarization is enabled, then routes to null0 are generated. I'm not sure there is a lot of wisdome to be found in this kind of study. The maks, and therefore the placing of interfaces rather than entire classful networks, into the routing process allows for cleaner operation. otherwise, it is something of a bother. -- TANSTAAFL "there ain't no such thing as a free lunch" Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61302&t=61302 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCNP BOOKS [7:61303]
Hi, I am prearing for the CCNP exams but i have the old books for 640-503,504,505 & 506. Will these books still suffice for the exams or should junk them and buy the books for the new 901,604,605&606? URGENT REPONSE REQUIRED PLEASE! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61303&t=61303 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OSPF & Virtual Links [7:60379]
Hi Matthew, You must always specify the transit area when configuring a virtual link. So use following command on both area border routers: area transit-area virtual-link ip-address The configs on page 310 are not correct, since the transit area in the picture seems to be area 1. Moreover "area 1 stub" should be removed from the config. Configs should be like this: Router Jack interface loopback 0 ip address 10.10.10.33 255.255.255.0 router ospf 100 network 172.16.20.128 0.0.0.7 area 0 network 172.16.20.8 0.0.0.7 area 1 area 1 virtual-link 10.10.10.30 Router Darius = interface loopback 0 ip address 10.10.10.30 255.255.255.0 router ospf 100 network 172.16.20.32 0.0.0.7 area 5 network 172.16.20.64 0.0.0.7 area 1 area 1 virtual-link 10.10.10.33 Actually I'm trying to find an errata for the CCNP Routing Exam Certification Guide. I couldn't find it on the Cisco Press web site. Does anyone have an errata for this routing certification guide? Thanks, Eric Brouwers Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61304&t=60379 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: URGENT: Modem Authentication Failure [7:61292]
HI Hamid, This seems to be a password or Username Authentication Failure) you can try to delete and re-enter the username and password for that group on the ACS/AAA server. Also is there a Firewall before accessing/Authenticating to the ACS server? This is not passing the User Authentication proccess per yr debug. Let us know yr findings Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61305&t=61292 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP BOOKS [7:61303]
Hello, Books are fine. Download the supplements for the site...even though the new books are always better! Good luck with ur cert. persuasion... Cheers, Kenan Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61306&t=61303 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP BOOKS [7:61303]
can you send me the URL where i can find the supplements. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61307&t=61303 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: URGENT: Modem Authentication Failure [7:61292]
Yes, I have guessed that. I created a local account on the router, and still I had the same problem. (Ihave configured aaa for local authentication). Do you know what error code 13 means? ( FAIL (13) ) > HI Hamid, > > This seems to be a password or Username Authentication Failure) > you can try to delete and re-enter the username and password for that > group on the ACS/AAA server. > > Also is there a Firewall before accessing/Authenticating to the ACS > server? > > This is not passing the User Authentication proccess per yr debug. Let > us know yr findings > Thanks > Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61308&t=61292 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Random observations about EIGRP networks [7:61302]
Awesome Observation, Chuck!! Keep up the good work!! >From: "The Long and Winding Road" >Reply-To: "The Long and Winding Road" >To: [EMAIL PROTECTED] >Subject: Random observations about EIGRP networks [7:61302] >Date: Sat, 18 Jan 2003 18:16:24 GMT > >based on a recent thread regarding the 0.0.0.0 network > >since about 12.0 or so, when placing networks into EIGRP, one can use a >wildcard mask. > >example: > >router eigrp 100 >network 1.1.0.0 0.0.255.255 > >which places 1.1.0.0/16 into the eigrp process. > >I did a bit of digging around both the Doc CD and the TAC site, but >surprisingly, I can find nothing in the way of documentation for this >feature. > >following are a couple of things I did, and the results. > >Router 3 >- >interface Loopback101 > ip address 7.50.1.1 255.255.255.0 >! >interface Loopback102 > ip address 6.50.1.1 255.255.255.0 >! >interface Loopback103 > ip address 5.50.1.1 255.255.255.0 >! >interface Loopback104 > ip address 4.50.1.1 255.255.255.0 >! >interface Loopback201 > ip address 168.95.1.5 255.255.255.0 >! >interface Loopback202 > ip address 170.177.1.5 255.255.255.0 >! >interface Loopback203 > ip address 171.17.47.5 255.255.255.0 >! >interface Loopback204 > ip address 169.30.101.5 255.255.255.0 >! >interface TokenRing0 > ip address 199.1.1.2 255.255.255.252 > ring-speed 4 >! >router eigrp 200 > network 4.0.0.0 3.255.255.255 > network 168.0.0.0 3.255.255.255 > network 199.1.1.0 0.0.0.3 > no auto-summary > no eigrp log-neighbor-changes >! >Router 4 routing table >-- >Router_4#ir ei > 170.177.0.0/24 is subnetted, 1 subnets >D 170.177.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 > 171.17.0.0/24 is subnetted, 1 subnets >D 171.17.47.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 > 168.95.0.0/24 is subnetted, 1 subnets >D 168.95.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 > 169.30.0.0/24 is subnetted, 1 subnets >D 169.30.101.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 > 4.0.0.0/24 is subnetted, 1 subnets >D 4.50.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 > 5.0.0.0/24 is subnetted, 1 subnets >D 5.50.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 > 6.0.0.0/24 is subnetted, 1 subnets >D 6.50.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 > 7.0.0.0/24 is subnetted, 1 subnets >D 7.50.1.0 [90/832000] via 199.1.1.2, 10:47:03, TokenRing0 >Router_4# > >I find the notation that 4.0.0.0/24 is subnetted with one subnet interesting > >Note also that the wildcard mask bits must be contiguous, which is one of >the idiot proofing features introduced in 12.0 Takes all the fun out of >wildcard masking, both for EIGRP and for OSPF. > >As we discussed elsewhere, the command "network 0.0.0.0" places all >connected interfaces, and thus all connected networks, into the eigrp >process. if automatic summarization is enabled, then routes to null0 are >generated. > >I'm not sure there is a lot of wisdome to be found in this kind of study. >The maks, and therefore the placing of interfaces rather than entire >classful networks, into the routing process allows for cleaner operation. >otherwise, it is something of a bother. >-- >TANSTAAFL misconduct and Nondisclosure violations to [EMAIL PROTECTED] The new MSN 8 is here: Try it free* for 2 months Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61309&t=61302 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ISDN - OSPF DEMAND CIRCUIT [7:61310]
When using IP OSPF DEMAND-CIRCUIT are there any restrictions with using PPP MULTLINK as well ? Noticed that when PPP MULTILINK is configured on either the BRI or the DIALER interface, when the Serial interface is shutdown between the two routers and then brought back up, the ISDN continues to dial the second router. Checking the Dialer interface using "sh ip ospf int" it shows that Hellos are suppressed. When PPP MULTILINK is NOT configured, performing the same steps, i.e. shutdown Serial, bring it back up, the ISDN will disconnect and stay disconnected. Which makes me believe it is configured corrcetly. Any thoughts appreciated. Thank you. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61310&t=61310 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: URGENT: Modem Authentication Failure [7:61292]
Wll Hamid , The Local means you must be able to use the Local Username xxx and PAssword yxyxyxyxy on the local router config. as a last resource which is the case now So u shd be able to log in to the router itself, if AAA/ACS is not available. IS this happening on all the routers/Switches or only this router ???/ Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61311&t=61292 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP BOOKS [7:61303]
Hello, You can download the supplements from the Cisco site itself. For eg, they have the supplement for BSCN book, which features IS-IS. So download it and use that. The link to the site of course is www.cisco.com and search for the missing topic. As for the exam, I would suggest to definitely print out the course outline first and make sure you have covered all the topics. If you think something is missing in the old book, just get it off the site. There is more material on the site than you would need for the paper. But it is definitely very comprehensive and handy too. Cheers, Kenan Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61312&t=61303 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Switching Exam [7:60934]
Hi there, First of all, sorry for the late reply. I have been really busy with other committments. Secondly, I was really upset to hear you couldn't clear the BCMSN exam. I just got a few tips which I used to study. Maybe they might work for you as well. 1. Underline/highlight the important points 2. Practice everything very thoroughly 3. Write on the top of your book "Everything is difficult before it is easy!" Trust me, I had a tough time myself trying to grasp the concepts. But one you get them, it is not really that though. Sometimes, you might feel that the material is not enough so refer to the Cisco site for help on things like BackboneFast etc. But overall, it is really not that tough. Go through the whole book thoroughly 2 or 3 times and underline/highlight all the major points for constant review. Also, keep a printout of the exam outline with you and mark the topics as you cover them to be sure nothing is left out. Best of luck on your next attempt. I have faith you'll clear it this time... Cheers, Kenan Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61313&t=60934 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CSS11152 VIP question [7:61229]
It basically allows the css to respond to an address even if it is not on a locally attached network. "ip oppotunistic all" Is the command you would use. I'm sure www.cisco.com can give you a better definition. Clayton "Sam Sneed"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > what does the IP opportunistic do? > ""Clayton Price"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > That is correct, your vip does not have to be a part of one of the VLAN's. > > Make sure you have ip opportunistic enabled, and that you are routing that > > VIP towards the CSS. > > > > Clayton > > > > > > ""Sam Sneed"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > quick typo correction : ip on service svc-w2.web2 should be > > > > > > > ip address 10.20.20.11 > > > > port 80 > > > > keepalive type http > > > > keepalive uri "/test.html" > > > > active > > > > > > > ""Sam Sneed"" wrote in message > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > Lets say I have the following scenario. CSS11152 with ethernet e0 IP > > > address > > > > 192.168.1.1 VLAN outside. I have 2 sets of servers addresses > > 10.10.10.0/24 > > > > on eth5 VLAN server1 and 10.20.20.20/24 on eth6 VLAN server2. I > > configure > > > > services as per below. On my content rules can a make a VIP on the > > > > 192.168.1.0 network and on another 192.168.100.0 network. Since VIP is > > > > NAT'ing I am thinking that you do not need a VIP address that has the > > same > > > > network as any VLAN's on the CSS. Is this true? > > > > > > > > content cnt-www.web1 > > > > balance aca > > > > url "/*" > > > > service svc-w1.web1 > > > > service svc-w2.web1 > > > > vip address 192.168.1.50 > > > > active > > > > > > > > content cnt-www.web1 > > > > balance aca > > > > url "/*" > > > > service svc-w1.web2 > > > > service svc-w2.web2 > > > > vip address 192.168.100.50 > > > > active > > > > > > > > service svc-w1.web1 > > > > ip address 10.10.10.10 > > > > port 80 > > > > keepalive type http > > > > keepalive uri "/test.html" > > > > active > > > > service svc-w2.web1 > > > > ip address 10.10.10.11 > > > > port 80 > > > > keepalive type http > > > > keepalive uri "/test.html" > > > > active > > > > > > > > and > > > > > > > > service svc-w1.web2 > > > > ip address 10.20.20.10 > > > > port 80 > > > > keepalive type http > > > > keepalive uri "/test.html" > > > > active > > > > service svc-w2.web2 > > > > ip address 10.10.20.11 > > > > port 80 > > > > keepalive type http > > > > keepalive uri "/test.html" > > > > active Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61314&t=61229 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCNP BOOKS [7:61303]
Go to www.ciscopress.com. Cisco Press != Cisco. Priscilla Kenan Ahmed Siddiqi wrote: > > Hello, > You can download the supplements from the Cisco site itself. > For eg, they have the supplement for BSCN book, which features > IS-IS. So download it and use that. The link to the site of > course is www.cisco.com and search for the missing topic. > As for the exam, I would suggest to definitely print out the > course outline first and make sure you have covered all the > topics. If you think something is missing in the old book, just > get it off the site. There is more material on the site than > you would need for the paper. But it is definitely very > comprehensive and handy too. > > Cheers, > > Kenan > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61315&t=61303 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Netbios on Wan [7:61249]
Don't enable ip directed broadcast. There's no need to and it's bad practice, from a security point of view. Enabling ip directed broadcast allows the router to forward directed broadcasts. For exmaple, if someone from another network pinged 10.0.0.255, a router that has an interface on 10.0.0.0/24 would forward that packet out that interface, if you enabled directed broadcasts. That's bad. This has nothing to do with a router sending a packet to a broadcast address when you configure ip helper address. Karagozian Sarkis wrote: > > Yes, According to Cisco BSCN Book (Building Scalable Cisco > Networks) > pages 88-91. > and Exam Cram book ACRC (Advanced Cisco Router Congirn) pages > 46-47. > mentions using ip helper-address to forward to a directed > broadcast address (ie. for this specific subnet 172.16.2.0 > where the servers reside) If the book really says that, I would guess that the language got the author in trouble. IP helper address isn't just generic forwarding, like a router does normally. It's telling the router to be a relay agent or gateway of sorts, which is different. With DHCP, the client sends to 255.255.255.255. The router can forward that to 172.16.2.255, for example. Note that's different from the example above of the router forwarding a packet. See the extra work it's doing here? It's acting like a gateway with an advanced atypical job that is not its normal forwarding job. > > Remember, on the Interface you also need to enable the command: > ip directed-broadcast > (which is disabled by default on rel 12.0 and later) Yes, and it's a good thing that ip directed broadcast is disabled by default and you shouldln't change it in most cases, certainly not just to get DHCP to work. HTH ___ Priscilla Oppenheimer www.troubleshootingnetworks.com www.priscilla.com > > > So here are the commands you need to add on the Remote Router > interface: > > Interface e0 > > ip helper-address 172.16.2.255 > ip helper-address 172.16.3.2 > ip directed broadcast > > So Braodcasts arriving on e0 will be forwarded to all servers > on the 172.16.2.0 subnet and to the designated server > 172.16.3.2. > > Hope this helps. > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61316&t=61249 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Traceroute troubles [7:61247]
I agree this works, but still that doesn;t answers one thingCisco and unix boxes where this * trouble is seen doesn;t use ICMP but uses UDP port for the trace output then howcome this is the fix ! Thanks -Original Message- From: William Pearch [mailto:[EMAIL PROTECTED]] Sent: Friday, January 17, 2003 1:13 AM To: [EMAIL PROTECTED] Subject: RE: Traceroute troubles [7:61247] Solved my own problem - see CSCdu43762 on the CCO. Shows up with the 7200 and an NSE-1 and (evidently though they are not listed) the 1760, 2621, 2621XM, 2611 and 1720. Solution is to turn off PXF (rate limiting of ICMP unreachables) using: no ip icmp rate unreach Lesson learned? Read everything... :) Bill -Original Message- From: William Pearch Sent: Thu 1/16/2003 8:12 PM To: William Pearch; [EMAIL PROTECTED] Cc: Subject: Traceroute troubles Why does traceroute seem to have problems with the second check of a final hop? RouterA-RouterB When trace from routerA loopback to routerB loopback, first one comes back fine, second is a * and third is fine. Seems wierd - 500 pings all go swell. Then to top it off... RouterA trace to RouterA loopback0, first one comes back fine, second is a * and third is fine. 500 pings all go swell. I've tried over ethernet, fast ethernet, serial (HDSL and frame relay). Same behavior on my 2600's and 1700's. All running 12.2.13T. I wasn't able to find anything on the CCO this evening. Thoughts? Bill Pearch, Anchorage Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61317&t=61247 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco CSS 11050 console kit [7:61318]
I have a Cisco CSS 11050 content switch that I cant get into with a standard console cable. I did a little digging on Ciscos web site and found a field notice regarding the CSS-CONSOLE-KIT. http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_field_notice09186a0080094a35.shtml Can I make a cable or do I have to purchase one form Cisco? Thanks Colin Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61318&t=61318 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Cisco CSS 11050 console kit [7:61318]
This is a special console cable I would say purchase it. Because I took one of the originals apart to try and match the pinouts but never got it to work. -Original Message- From: Colin Weiner [mailto:[EMAIL PROTECTED]] Sent: Saturday, January 18, 2003 8:44 PM To: [EMAIL PROTECTED] Subject: Cisco CSS 11050 console kit [7:61318] I have a Cisco CSS 11050 content switch that I cant get into with a standard console cable. I did a little digging on Cisco's web site and found a field notice regarding the CSS-CONSOLE-KIT. http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_field_not ice09186a0080094a35.shtml Can I make a cable or do I have to purchase one form Cisco? Thanks Colin Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61319&t=61318 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: NETBIOS on WAN [7:61237]
yes the helper-address can be a directed broadcast address. The following are forwarded by default when you add an ip helper-address: Trivial File Transfer (TFTP) (port 69) Domain Name System (port 53) Time service (port 37) NetBIOS Name Server (port 137) NetBIOS Datagram Server (port 138) Boot Protocol (BOOTP) client and server datagrams (ports 67 and 68) TACACS service (port 49) You can turn any of these off using the global configuration commands: no ip forward-protocol udp 69 no ip forward-protocol udp 53 no ip forward-protocol udp 37 no ip forward-protocol udp 137 no ip forward-protocol udp 138 no ip forward-protocol udp 49 You can forward other ports by adding the command "ip forward protocol " ""Newell Ryan D SrA 18 CS/SCBT"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > IP helper will send NETBIOS broadcast and change the packet to a unicast to > the address given. But I not > really sure it will solve your problem. I have a few questions before I try > to answer your question. > 1. Is there a DHCP server involved? > 2. Do have Domain Controllers? > 3. Do you want the browse list to contain both networks? > > Last question is for everybody. Can the helper address be a directed > broadcast vs a single IP address? > > -Original Message- > From: Amazing [mailto:[EMAIL PROTECTED]] > Sent: Friday, January 17, 2003 10:19 AM > To: [EMAIL PROTECTED] > Subject: Re: NETBIOS on WAN [7:61237] > > > ip helper address on the ethernet interface of the remote router. > > this will change the nbns broadcast to a unicast directed at the remote lan > > > ""Frederico Madeira"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hellow, > > > > how i configure an 2600 router to permit acess for network neighborhood to > > computers on the lan, in other words, how i make to see all computers of > > my WAN in network neighborhood of windows explore ? > > > > Fred Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61320&t=61237 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Cisco CSS 11050 console kit [7:61318]
Colin http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note0918 6a00800a3f28.shtml#cable http://makeashorterlink.com/?U51922423 Has the cable specifications for using a standard Cisco DB-9 with a CSS. I have about four of these cables sitting around, always have one in my bag. I made them out of red cable so they stood out. -- David C Prall [EMAIL PROTECTED] http://dcp.dcptech.com > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Colin Weiner > Sent: Saturday, January 18, 2003 8:44 PM > To: [EMAIL PROTECTED] > Subject: Cisco CSS 11050 console kit [7:61318] > > > I have a Cisco CSS 11050 content switch that I cant get into with a > standard console cable. I did a little digging on Ciscos web site and > found a field notice regarding the CSS-CONSOLE-KIT. > > > http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_fie > ld_notice09186a0080094a35.shtml > > Can I make a cable or do I have to purchase one form Cisco? > > Thanks > > Colin Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61321&t=61318 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Netbios on Wan [7:61249]
Priscilla, Thanks for clearing that, infact I was not sure about enableing Directed broadcast on a interface with IP helper-address. Thanks for the explanation. Sarkis Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61322&t=61249 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Are you guys watching the Stone Concert.....wow They never [7:61323]
Juan Blanco The greatest glory in living lies not in never falling, but in rising every time we fall ." -- Nelson Mandela Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61323&t=61323 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IOS for Cisco 3660 with IMA [7:61324]
What is a good stable code to run on a Cisco 3660 with ATM IMA card? What is a good code to do bridge/routed1483 PVCs on the same type of router? Thanks. - Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61324&t=61324 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Random observations about EIGRP networks [7:61302]
At one point I tried putting the specific interface subnets in our EIGRP process but it didn't want to cooperate. Besides, it's much easier to put a /16 in the process once on a 5500/6500 than 60+ different subnets. I guess I prefer the easy way out. :-) >>> "The Long and Winding Road" 01/18/03 10:16AM >>> based on a recent thread regarding the 0.0.0.0 network since about 12.0 or so, when placing networks into EIGRP, one can use a wildcard mask. [snip] I find the notation that 4.0.0.0/24 is subnetted with one subnet interesting Note also that the wildcard mask bits must be contiguous, which is one of the idiot proofing features introduced in 12.0 Takes all the fun out of wildcard masking, both for EIGRP and for OSPF. As we discussed elsewhere, the command "network 0.0.0.0" places all connected interfaces, and thus all connected networks, into the eigrp process. if automatic summarization is enabled, then routes to null0 are generated. I'm not sure there is a lot of wisdome to be found in this kind of study. The maks, and therefore the placing of interfaces rather than entire classful networks, into the routing process allows for cleaner operation. otherwise, it is something of a bother. [snip] BEGIN:VCARD VERSION:2.1 X-GWTYPE:USER FN:Ken Diliberto EMAIL;WORK;PREF;NGW:[EMAIL PROTECTED] N:Diliberto;Ken END:VCARD Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61325&t=61302 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Switching book [7:61326]
Can anyone recommend a good Cisco switching book that is not to basic and explains vlans in good detail with some advance examples. Thanks. - Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61326&t=61326 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Switching book [7:61326]
""Cisco Newbie"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Can anyone recommend a good Cisco switching book that is not to basic and > explains vlans in good detail with some advance examples. Thanks. > > Kennedy Clark's book Cisco LAN Switching ( Cisco Press ) is a good place to start. Depending upon what you mean by "good detail" and "advance examples" the Cisco 3550 switch documentation is pretty good, as well as various 3550 white papers and practice labs that are available from Certification Zone, IPExpert, and Netcraftsmen offer something worth spending some time with. > - > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up now Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61327&t=61326 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Switching book [7:61326]
kennedy Clark, CCIE switching book... Larry Letterman Network Engineer Cisco Systems - Original Message - From: "Cisco Newbie" To: Sent: Saturday, January 18, 2003 8:43 PM Subject: Switching book [7:61326] > Can anyone recommend a good Cisco switching book that is not to basic and > explains vlans in good detail with some advance examples. Thanks. > > > - > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up now Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61328&t=61326 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
