QOS on 2621xm [7:61353]

2003-01-20 Thread Julian P
Hi


We would like to prioritize incoming traffic on our 256k internet link to
uunet .We need to give telnet at least 64k incoming bandwidth.

Any ideas on the best way to do this ?

Thanks in advance

Julian




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61353t=61353
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



backup to line ISP [7:61355]

2003-01-20 Thread GeorgeB
Hello
I need to find a way if our frame -relay to ISP went down
auto switch to DSL for redundency.

Thank you for any thoughts,

George




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61355t=61355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP BOOKS [7:61303]

2003-01-20 Thread Nsikan Ntia
Thanks  a lot Kenan.

Really appreciate your help.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61356t=61303
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: QOS on 2621xm [7:61353]

2003-01-20 Thread Andrew Larkins
You will need to QoS on both sides of the link. Your side should be fine,
but good luck with the ISP side.
I would use the diffserve bits as well as bandwidth allocation using policy
maps.

Andrew

-Original Message-
From: Julian P [mailto:[EMAIL PROTECTED]]
Sent: 20 January 2003 10:02
To: [EMAIL PROTECTED]
Subject: QOS on 2621xm [7:61353]


Hi


We would like to prioritize incoming traffic on our 256k internet link to
uunet .We need to give telnet at least 64k incoming bandwidth.

Any ideas on the best way to do this ?

Thanks in advance

Julian




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61357t=61353
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: backup to line ISP [7:61355]

2003-01-20 Thread Brian
well a quick  dirty way is to default to the dsl router with a higher
metric..

Bri

- Original Message -
From: GeorgeB 
To: 
Sent: Monday, January 20, 2003 12:44 AM
Subject: backup to line ISP [7:61355]


 Hello
 I need to find a way if our frame -relay to ISP went down
 auto switch to DSL for redundency.

 Thank you for any thoughts,

 George




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61358t=61355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Token Ring/HSRP Question [7:61359]

2003-01-20 Thread Simon Watson
Hi Guys I'm going to a client's site that has a 2513 router with
11.3(11a) IOS (image is  c2500-ds-l_113-11a.bin). 2 things: I'm looking
to set up HSRP on the router, should I have any issues with that level of
software ?Also are there an issues I should be aware of when configuring
HSRP on token ring routers ??  Thanks in advance Simon.



Help STOP SPAM: Try the new MSN 8 and get 2 months FREE*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61359t=61359
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IP accounting question [7:61350]

2003-01-20 Thread [EMAIL PROTECTED]
hi,

1-right...
2-you can do this by writing script ...for example in a different linux 
pc (perl script or someting else..)


Richard Campbell wrote:

Hi..  For example, if I have a router with two interface, ethernet0 and 
serial0.  If I only turn on the IP accounting at serial0 not ethernet0.  It 
means I can only capture IP accounting on the traffic from
LAN-router--WAN
right?  Those traffic from WAN-router-LAN IP acccounting can't be capture 
unless I turn on IP accounting on ethernet0 right?

Question2: What command can we make the router to clear ip accounting 
automatically on per day basic.  Is there any??

Thanks


_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
Virus taramasi Vexira AV programi kullanilarak Is Net tarafindan yapilmistir.
This e-mail is checked by Is Net against all known types of viruses using
Vexira AV.
Is Net'in Bayram/Karne hediyeli kampanyasini duymus muydunuz?
http://www.isnet.net.tr/hediyesepeti/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61361t=61350
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



jeff's routing tcp/ip v1 question [7:61360]

2003-01-20 Thread galvin lu
For Jeff's routing tcp/ip V1  book, page 214 and 215 . There is a secondly
ip address , for rip version 1 because of the discontinues 10.0.0.0. So why
there is only one route to 10.33.48.0 , and two route to 192.168.83.0 in the
routing table of Ernest_T ?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61360t=61360
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ciscoworks2000 [7:61362]

2003-01-20 Thread milind tare
hi ciscobuddy's


  how r u doing all? i phasing 1 problem at the time
of CiscoWorks2000 installation..

i installed cd1 and campusmanager 3.1. install patch
for CD1. at the time of Discovery icisco devices
getting unreachable..
Trying to discover 6509 3 core switch's. 1 ore switch
is VTP Server and 2 are clients.Ciscoserver is
connected to Client Core.

Following is the conf for SNMP 

snmp-server community ro .
snmp-server trpa enable
logging on
logging  server ip address

please advise me..it's very urgent..

Thanks  Regards,
Milind

__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61362t=61362
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP BOOKS [7:61303]

2003-01-20 Thread Peri Sophos
I'd say buy new books , cause there might be one or two questions NOT in
the old books which you have not studied , and then you play the
guessing game , which is no good :)

-Original Message-
From: Nsikan Ntia [mailto:[EMAIL PROTECTED]]
Sent: Saturday, January 18, 2003 8:32 PM
To: [EMAIL PROTECTED]
Subject: CCNP BOOKS [7:61303]


Hi,
I am prearing for the CCNP exams but i have the old books for
640-503,504,505  506. Will these books still suffice for the exams or
should  junk them and buy the books for the new 901,604,605606?

URGENT REPONSE REQUIRED PLEASE!
NOTICE - This message contains privileged and confidential information
intended only for the use of the addressee named above.
Any review, retransmission, dissemination, copying, disclosure or other use
of, or taking of any action in reliance upon, this information by person or
entities other than the intended recipient is prohibited.
If you have received this message in error, please notify the sender by
return email and delete this message.  This message should not be copied or
used for any purpose other than intended, nor should it be disclosed to any
other person. Any views expressed in this message are those of the
individual sender, except where the sender specifically states them to be
the view of Investec Group, its subsidiaries or associates.
The Investec Group is not liable for the security of information sent by
e-mail at your request, nor for the proper and complete transmission of the
information contained in the communication nor for any delay in its
receipt.  Please note that the recipient must scan this e-mail and any
attached files for viruses and the like.
The Investec Group accepts no liability of whatever nature for any loss,
liability, damage or expense resulting directly or indirectly from the
access of any files which are attached to this message.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61363t=61303
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Pre-routing [7:61364]

2003-01-20 Thread Domingo Ferrero
Hi,

I have one router cisco 7200, and two conexions to the other two routers.

Conexion a: point-to-point
Conexion b: ATM

I want that one pc to the lan of  7200 route to the atm interface but the
interface point-to-point have configured eigrp.

Somebody can help me, I think that the solution is in the access-list or
prerouting, but i don't know how i can have it.

Thanks and Regards,

--
---
  Domingo Ferrero Saavedra  [EMAIL PROTECTED]
  Dept. Sistemas, IdecNet S.A.
  c/ Guzman el Bueno 125
  Madrid-Spain
  Tfn: +34 91 824 00 00
  http://www.idecnet.com
---




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61364t=61364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: QOS on 2621xm [7:61353]

2003-01-20 Thread Andrew Larkins
In QoS now, there is more than just setting the bandwidth allocated to each
class. What you need to do is combine this with  the diffserv bit. This is
basically the newer version of the TOS bit in the IP header that defines
what sort of service happens to the packet. In a nut shell, this means which
packets gets sent first in the output queue.
As telnet is very delay sensitive, you should give it a higher diffserv bit.

What you basically do is create class maps for each traffic type and apply
it to the Ethernet interface so that the router modifies the packets as it
enters the router. As the packet leaves the interface, you use normal
service policies.

Sample config below:

class-map match-all Gold
  match access-group 170
class-map match-all Bronze
  match access-group 172
class-map match-all Telnet_SSH
  match access-group 131
class-map match-all Silver
  match access-group 171
!
policy-map SET_DIFFSERV
   class Telnet_SSH
   set ip dscp cs5
policy-map 
  class Gold
   bandwidth percent (%)
  class Bronze
   bandwidth percent (%)
! 
interface FastEthernet0/0
 description Link to LAN
 ip address x.x.x.x y.y.y.y
 speed 100
 full-duplex
 service-policy input SET_DIFFSERV
!
interface Serial0/0
 bandwidth 512
 ip address a.a.a.a b.b.b.b
 service-policy output 

access-list 131 remark Prioritise Telnet and SSH
access-list 131 permit tcp any any eq telnet
access-list 131 permit tcp any any eq 22
access-list 170 remark Gold Class QoS
access-list 170 permit ip host xx host xxx
access-list 170 permit ip host xxx host xxx
access-list 170 permit tcp host  eq 443 any
access-list 170 permit tcp host  eq www any
access-list 170 permit udp any any eq domain
access-list 172 remark Bronze Class QoS
access-list 172 permit ip host  host x





 -Original Message-
 From: Julian P [mailto:[EMAIL PROTECTED]]
 Sent: 20 January 2003 10:02
 To: [EMAIL PROTECTED]
 Subject: QOS on 2621xm [7:61353]


 Hi


 We would like to prioritize incoming traffic on our 256k internet link to
 uunet .We need to give telnet at least 64k incoming bandwidth.

 Any ideas on the best way to do this ?

 Thanks in advance

 Julian




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61365t=61353
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Ping [7:61366]

2003-01-20 Thread Eduardo Perestrelo
Hi,

 All times i try to ping an interface when has changed interface status
to up (no shutdown), first packet of ping is lost don´t receive
sucessful for first packet. In all equipaments cisco found this error when
configure a new router or switch.
 Anyone people has found this error too ?!
 I don´t found any documents or faqs talking about this.

Eduardo Perestrelo
CCNA / CCAI


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61366t=61366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Ping [7:61366]

2003-01-20 Thread Aaron Ajello
I don't think it's an error.  The first packet is probably lost while the
router or switch is performing an arp request.  That takes a second or two
to come back, then the pings are successful.  If you ping again (immediately
after the first time when you loose one packet) you shouldn't see any
dropped packets, unless there's another problem.  That's because the router
or switch is holding that arp entry.  Wait a while and try again and you'll
loose the first packet again, because the arp entry has aged out.
 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61367t=61366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Ping [7:61366]

2003-01-20 Thread Captain Lance
The first PING is lost because the source system is performing an ARP
request.  The ARP information, once obtained, is cached (remembered) for a
small amount of time.  Successive Pings to the host should show all four
replies.

Hope this helps,
  Lance

Eduardo Perestrelo  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi,

  All times i try to ping an interface when has changed interface
status
 to up (no shutdown), first packet of ping is lost don4t receive
 sucessful for first packet. In all equipaments cisco found this error when
 configure a new router or switch.
  Anyone people has found this error too ?!
  I don4t found any documents or faqs talking about this.

 Eduardo Perestrelo
 CCNA / CCAI




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61368t=61366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: backup to line ISP [7:61355]

2003-01-20 Thread Captain Lance
What does the DSL line terminate into? Cisco 800 series?

Lance




GeorgeB  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hello
 I need to find a way if our frame -relay to ISP went down
 auto switch to DSL for redundency.

 Thank you for any thoughts,

 George




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61370t=61355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pre-routing [7:61364]

2003-01-20 Thread Captain Lance
This sounds like you want to use Policy-based routing.  You want all the
traffic from the PC on the ethernet interface of the 7200 to be routed out
the ATM interface?  Is this correct?

Lance

Domingo Ferrero  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi,

 I have one router cisco 7200, and two conexions to the other two routers.

 Conexion a: point-to-point
 Conexion b: ATM

 I want that one pc to the lan of  7200 route to the atm interface but the
 interface point-to-point have configured eigrp.

 Somebody can help me, I think that the solution is in the access-list or
 prerouting, but i don't know how i can have it.

 Thanks and Regards,

 --
 ---
   Domingo Ferrero Saavedra  [EMAIL PROTECTED]
   Dept. Sistemas, IdecNet S.A.
   c/ Guzman el Bueno 125
   Madrid-Spain
   Tfn: +34 91 824 00 00
   http://www.idecnet.com
 ---




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61369t=61364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Enterprise Design Probelm / Study [7:61351]

2003-01-20 Thread Captain Lance
I would say your dance card is full for the next few months.

Good Luck
  Lance

The Long and Winding Road  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Have I got a good one!

 Just got through reading an RFP for a large organization. Over 30 sites,
 12,000 ports, and 2000 phones. Complete rebuild of the network LAN and WAN
 infrastructure. Add to that throwing out all their old PBX and key systems
 and building for VoIP and video, in addition to current data traffic. New
 switches, new routers, client asking for generous redundancy. L3 switching
 up the wazoo ( that's a technical term meaning lotsa money to spend )

 The thrill of the design is something else. Customer wants a centralized
 Call Manager, but also wants certainty in case of failure at any of the
 usual places.

 This oughta keep me out of trouble for a few weeks.

 TTFN

 Chuck

 --
 TANSTAAFL
 there ain't no such thing as a free lunch




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61371t=61351
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Study group Amsterdam, The Netherlands [7:61347]

2003-01-20 Thread Captain Lance
Can I come over a study.  I would love to visit Amsterdam. :)

Lance

mjans001  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Anybody interested in forming a RS LAB study group in The Netherlands,
 Amsterdam. Have no date, aiming on summer.

 Have more hardware than they do in Brussels. ;-)

 Pls contact off-line.

 Martijn Jansen

 -BEGIN PGP SIGNATURE-
 Version: PGP 8.0

 iQA/AwUBPismhHdq56XWk+VyEQJMegCfQfezfLSjYY/AhcQmx1/Yk+IN0P4AnAl9
 K+nurBWqCHFXj7PLCodYUr/O
 =Vjed
 -END PGP SIGNATURE-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61372t=61347
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Pre-routing [7:61364]

2003-01-20 Thread Andrew Larkins
Policy based routing is the answer - use route-maps and access control
lists. That should be everything you need

Andrew

 Hi,

 I have one router cisco 7200, and two conexions to the other two routers.

 Conexion a: point-to-point
 Conexion b: ATM

 I want that one pc to the lan of  7200 route to the atm interface but the
 interface point-to-point have configured eigrp.

 Somebody can help me, I think that the solution is in the access-list or
 prerouting, but i don't know how i can have it.

 Thanks and Regards,

 --
 ---
   Domingo Ferrero Saavedra  [EMAIL PROTECTED]
   Dept. Sistemas, IdecNet S.A.
   c/ Guzman el Bueno 125
   Madrid-Spain
   Tfn: +34 91 824 00 00
   http://www.idecnet.com
 ---




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61373t=61364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Enterprise Design Probelm / Study [7:61351]

2003-01-20 Thread Andrew Larkins
Good luck!!!

The Long and Winding Road  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Have I got a good one!

 Just got through reading an RFP for a large organization. Over 30 sites,
 12,000 ports, and 2000 phones. Complete rebuild of the network LAN and WAN
 infrastructure. Add to that throwing out all their old PBX and key systems
 and building for VoIP and video, in addition to current data traffic. New
 switches, new routers, client asking for generous redundancy. L3 switching
 up the wazoo ( that's a technical term meaning lotsa money to spend )

 The thrill of the design is something else. Customer wants a centralized
 Call Manager, but also wants certainty in case of failure at any of the
 usual places.

 This oughta keep me out of trouble for a few weeks.

 TTFN

 Chuck

 --
 TANSTAAFL
 there ain't no such thing as a free lunch




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61374t=61351
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pre-routing [7:61364]

2003-01-20 Thread Domingo Ferrero
Hi,

This is correct.

You have one solution?

Thanks and regards,

--
---
  Domingo Ferrero Saavedra  [EMAIL PROTECTED]
  Dept. Sistemas, IdecNet S.A.
  c/ Guzman el Bueno 125
  Madrid-Spain
  Tfn: +34 91 824 00 00
  http://www.idecnet.com
---
Captain Lance  escribis en el mensaje
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 This sounds like you want to use Policy-based routing.  You want all the
 traffic from the PC on the ethernet interface of the 7200 to be routed out
 the ATM interface?  Is this correct?

 Lance

 Domingo Ferrero  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hi,
 
  I have one router cisco 7200, and two conexions to the other two
routers.
 
  Conexion a: point-to-point
  Conexion b: ATM
 
  I want that one pc to the lan of  7200 route to the atm interface but
the
  interface point-to-point have configured eigrp.
 
  Somebody can help me, I think that the solution is in the access-list or
  prerouting, but i don't know how i can have it.
 
  Thanks and Regards,
 
  --
  ---
Domingo Ferrero Saavedra  [EMAIL PROTECTED]
Dept. Sistemas, IdecNet S.A.
c/ Guzman el Bueno 125
Madrid-Spain
Tfn: +34 91 824 00 00
http://www.idecnet.com
  ---




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61375t=61364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Ping [7:61366]

2003-01-20 Thread Phil Lorenz
This isn't a Cisco issue, but the byproduct of a missing new entry in
the ARP table.  You may know the layer 3 address for this new interface
and the router may know how to route it (i.e. this subnet exists off of
this interface), but it does not yet have the layer 2 address needed for
final delivery.  So- your first series of Ping packets defaults to
inverse ARP, and if properly configured, the new interface is known.

All the best 
Phil  

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Eduardo Perestrelo
Sent: Monday, January 20, 2003 8:48 AM
To: [EMAIL PROTECTED]
Subject: Ping [7:61366]

Hi,

 All times i try to ping an interface when has changed interface
status
to up (no shutdown), first packet of ping is lost don4t receive
sucessful for first packet. In all equipaments cisco found this error
when
configure a new router or switch.
 Anyone people has found this error too ?!
 I don4t found any documents or faqs talking about this.

Eduardo Perestrelo
CCNA / CCAI




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61376t=61366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



config-register error [7:61377]

2003-01-20 Thread Dunne Rory
I was doing a password reset and went into rommon mode. Instead of typing
0x2142 at the rommon prompt I typed 0x4142. Now when I reload the power
cycle I can't get any prompt on the console screen. I know its not a problem
with Hyper Terminal. Has anybody got any suggestions.thanks...


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61377t=61377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Traceroute troubles [7:61247]

2003-01-20 Thread Kumar, N K. Satish, NSPM
Guys,
  Have anybody figured this out.I seem to go nowhere thinking about
this.. Your help appreciated as i am loosing sleep.

Thanks




-Original Message-
From: Kumar, N K. Satish, NSPM 
Sent: Saturday, January 18, 2003 8:36 PM
To: [EMAIL PROTECTED]
Subject: RE: Traceroute troubles [7:61247]


I agree this works, but still that doesn;t answers one thingCisco
and unix boxes where this * trouble is seen doesn;t use ICMP but uses
UDP port for the trace output

then howcome this is the fix !

Thanks







-Original Message-
From: William Pearch [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 17, 2003 1:13 AM
To: [EMAIL PROTECTED]
Subject: RE: Traceroute troubles [7:61247]


Solved my own problem - see CSCdu43762 on the CCO.  Shows up with the
7200
and an NSE-1 and (evidently though they are not listed) the 1760, 2621,
2621XM, 2611 and 1720.  Solution is to turn off PXF (rate limiting of
ICMP
unreachables) using:  no ip icmp rate unreach
 
Lesson learned?  Read everything... :)
 
Bill
 
 

-Original Message- 
From: William Pearch 
Sent: Thu 1/16/2003 8:12 PM 
To: William Pearch; [EMAIL PROTECTED] 
Cc: 
Subject: Traceroute troubles


Why does traceroute seem to have problems with the second check
of a final
hop?
 
RouterA-RouterB
 
When trace from routerA loopback to routerB loopback, first one
comes back
fine, second is a * and third is fine.  Seems wierd - 500 pings all go
swell.
Then to top it off... RouterA trace to RouterA loopback0, first
one comes
back fine, second is a * and third is fine.  500 pings all go swell.
 
I've tried over ethernet, fast ethernet, serial (HDSL and frame
relay).
 
Same behavior on my 2600's and 1700's.  All running 12.2.13T.  I
wasn't
able to find anything on the CCO this evening.
 
Thoughts?
 
Bill Pearch, Anchorage




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61378t=61247
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pre-routing [7:61364]

2003-01-20 Thread Captain Lance
Yes, the solution is policy based routing.  Its not very difficult.  You
define access-lists to identify the traffic you want to policy route.  Use
route-maps to force the traffic out the desired network/interface.  Here is
a link to Cisco's documentation: (watch the wrap)

http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_configuratio
n_guide_chapter09186a00800c60d2.html

Good luck

  Lance

Domingo Ferrero  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi,

 This is correct.

 You have one solution?

 Thanks and regards,

 --
 ---
   Domingo Ferrero Saavedra  [EMAIL PROTECTED]
   Dept. Sistemas, IdecNet S.A.
   c/ Guzman el Bueno 125
   Madrid-Spain
   Tfn: +34 91 824 00 00
   http://www.idecnet.com
 ---
 Captain Lance  escribis en el mensaje
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  This sounds like you want to use Policy-based routing.  You want all the
  traffic from the PC on the ethernet interface of the 7200 to be routed
out
  the ATM interface?  Is this correct?
 
  Lance
 
  Domingo Ferrero  wrote in message
  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   Hi,
  
   I have one router cisco 7200, and two conexions to the other two
 routers.
  
   Conexion a: point-to-point
   Conexion b: ATM
  
   I want that one pc to the lan of  7200 route to the atm interface but
 the
   interface point-to-point have configured eigrp.
  
   Somebody can help me, I think that the solution is in the access-list
or
   prerouting, but i don't know how i can have it.
  
   Thanks and Regards,
  
   --
   ---
 Domingo Ferrero Saavedra  [EMAIL PROTECTED]
 Dept. Sistemas, IdecNet S.A.
 c/ Guzman el Bueno 125
 Madrid-Spain
 Tfn: +34 91 824 00 00
 http://www.idecnet.com
   ---




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61379t=61364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: config-register error [7:61377]

2003-01-20 Thread [EMAIL PROTECTED]
hi,
probably your router default console rate is changed
you can try different hyperterminal rate different than 9600
for example 1200,2400 and the others...



Dunne Rory wrote:

I was doing a password reset and went into rommon mode. Instead of typing
0x2142 at the rommon prompt I typed 0x4142. Now when I reload the power
cycle I can't get any prompt on the console screen. I know its not a problem
with Hyper Terminal. Has anybody got any suggestions.thanks...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61380t=61377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



isdn guard-timer [7:61381]

2003-01-20 Thread Stuart Laubstein
I am configuring a cisco 801 for my lab and I have theisdn guard-timer
0 on-expiry accept   under my bri 0. I have been checking cco and they
mention how to get rid of it using the no call guard-timer command. Well
this has not worked and I cannot seem to find a no isdn guard-timer command
or anything that will do it. Can anyone suggest how  i might remove this
line-- I am running 12.0(7)XV on the 801.  I do not think the line is having
any effect on the routers operation it just bothers me that I can install
something and cannot seem to get rid of it.

thanks

stuart




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61381t=61381
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: backup to line ISP [7:61355]

2003-01-20 Thread MADMAN
If your using an 800 you can run rip and with the right uploads, 
EIGRP  or install an ADSL WIC in a real router:)

   Dave

Captain Lance wrote:
 What does the DSL line terminate into? Cisco 800 series?
 
 Lance
 
 
 
 
 GeorgeB  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 
Hello
I need to find a way if our frame -relay to ISP went down
auto switch to DSL for redundency.

Thank you for any thoughts,

George
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61382t=61355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Making data centers HIPAA compliant - what is required - [7:61383]

2003-01-20 Thread Charles Riley
Sorry for the OT post, but have searched high and low, and no definite
answer in site. Really, really apoliogize for the nontechnical nature of
this post, but I have reached a wall after searching all over for an answer.
I guess you could say that I am ill with searching...

HIPAA is an medical information protection and privacy act passed by
Congress in 1996.  The deadline for complying or gettting an extension is
this year.  You'll probably see more and more requests like mine as the year
goes by, so I figured I'd start things off.

HIPAA is currently in a state of flux as far as implementation and
enforcement is concerned, as many medical professional and organizations
rush to comply.  Which brings me to my question...

In my searches, I see several organizations trumpeting the fact their data
centers are HIPAA certified, meaning that they are cleared to process,
store, or otherwise handle medical and private info.   How is it possible to
achive this certification when there does not seem to be any standards or
processes from the U.S. government detailing what will earn the
certification?

Does having a couple of tape drives on a server behind a firewall with
restricted access qualify a data center to be HIPAA Compliant?  Is there a
checklist, policy, standard, or procedure for certification required by the
U.S. government that I missed in my searches?  If so, I would appreciate
gettting the links to such information.

TIA,

Charles




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61383t=61383
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Passed DQoS [7:59951]

2003-01-20 Thread Ricardo Pedraza
For CIPT, you coud study the Cisco IP Telephony from David Lovell published
by Cisco Press. It is mainly on Cisco Call Manager. I am studying with it.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61384t=59951
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: config-register error [7:61377]

2003-01-20 Thread s vermill
Dunne Rory wrote:
 
 I was doing a password reset and went into rommon mode. Instead
 of typing 0x2142 at the rommon prompt I typed 0x4142. Now when
 I reload the power cycle I can't get any prompt on the console
 screen. I know its not a problem with Hyper Terminal. Has
 anybody got any suggestions.thanks...

This might help:

http://www.marcuscom.com/confregdecode.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61385t=61377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: backup to line ISP [7:61355]

2003-01-20 Thread GeorgeB
backup line is cabel modem not dsl and its cisco Br80x, other router (frame
is non cisco router (Adtran)


George
GeorgeB  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hello
 I need to find a way if our frame -relay to ISP went down
 auto switch to DSL for redundency.

 Thank you for any thoughts,

 George




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61386t=61355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: backup to line ISP [7:61355]

2003-01-20 Thread Captain Lance
Adtran makes routers?


GeorgeB  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 backup line is cabel modem not dsl and its cisco Br80x, other router
(frame
 is non cisco router (Adtran)


 George
 GeorgeB  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hello
  I need to find a way if our frame -relay to ISP went down
  auto switch to DSL for redundency.
 
  Thank you for any thoughts,
 
  George




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61387t=61355
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNP passed today [7:61388]

2003-01-20 Thread [EMAIL PROTECTED]
thx guys for all the valued input!!

great help this group is!!  all keep up the great work :)





For more information about Barclays Capital, please
visit our web site at http://www.barcap.com.


Internet communications are not secure and therefore the Barclays 
Group does not accept legal responsibility for the contents of this 
message.  Although the Barclays Group operates anti-virus programmes, 
it does not accept responsibility for any damage whatsoever that is 
caused by viruses being passed.  Any views or opinions presented are 
solely those of the author and do not necessarily represent those of the 
Barclays Group.  Replies to this email may be monitored by the Barclays 
Group for operational or business reasons.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61388t=61388
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT: Making data centers HIPAA compliant - what is [7:61383]

2003-01-20 Thread Priscilla Oppenheimer
Charles Riley wrote:
 
 Sorry for the OT post, but have searched high and low, and no

No problem. I don't think it's really OT. HIPAA is going to have a big
affect on many data networks.

I'm surprised that you say there isn't information available on how to
become HIPAA compliant. There's a lot, isn't there? If companies are saying
that they are HIPAA certified, that's a bit of a misnomor. I don't think
there's any certification, but there is compliance info available.

Did you check these links:

http://www.hipaadvisory.com/

http://aspe.hhs.gov/admnsimp/

http://www.cms.hhs.gov/hipaa/

http://www.hipaa.org/

I wonder if you could hire a consultant to help you wade through all the
regulations and confusing info from the goverment. Hopefuly some consultants
will specialize in this.

Priscilla

 definite
 answer in site. Really, really apoliogize for the nontechnical
 nature of
 this post, but I have reached a wall after searching all over
 for an answer.
 I guess you could say that I am ill with searching...
 
 HIPAA is an medical information protection and privacy act
 passed by
 Congress in 1996.  The deadline for complying or gettting an
 extension is
 this year.  You'll probably see more and more requests like
 mine as the year
 goes by, so I figured I'd start things off.
 
 HIPAA is currently in a state of flux as far as implementation
 and
 enforcement is concerned, as many medical professional and
 organizations
 rush to comply.  Which brings me to my question...
 
 In my searches, I see several organizations trumpeting the fact
 their data
 centers are HIPAA certified, meaning that they are cleared to
 process,
 store, or otherwise handle medical and private info.   How is
 it possible to
 achive this certification when there does not seem to be any
 standards or
 processes from the U.S. government detailing what will earn the
 certification?
 
 Does having a couple of tape drives on a server behind a
 firewall with
 restricted access qualify a data center to be HIPAA
 Compliant?  Is there a
 checklist, policy, standard, or procedure for certification
 required by the
 U.S. government that I missed in my searches?  If so, I would
 appreciate
 gettting the links to such information.
 
 TIA,
 
 Charles
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61389t=61383
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Passed DQoS [7:59951]

2003-01-20 Thread The Long and Winding Road
Ricardo Pedraza  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 For CIPT, you coud study the Cisco IP Telephony from David Lovell
published
 by Cisco Press. It is mainly on Cisco Call Manager. I am studying with it.


you could also pray a lot that you don't get too many of the questions the
answers to which cannot be found anywhere in the known universe. there are a
LOT of people, including some of the instructors who teach the CIPT course,
who are apparently working with Cisco to either change the damn test or
change the damn training materials. Too many complaints about the fairness
of it all.

grumble grumble..




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61390t=59951
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Traceroute troubles [7:61247]

2003-01-20 Thread Priscilla Oppenheimer
Your question isn't clear. Maybe you could start over in a new thread and
explain your question clearly, if the following info doesn't help. Once a
thread gets this old, a lot of people ignore it. ;-)

However, I think I understand your confusion. You are worried because Cisco
and UNIX use a UDP message for trace route. So how could disabling the rate
limiting of ICMP fix the problem where trace route seems to fail every so
often?

Yes, they send a UDP packet, but they depend on routers returning an ICMP
Time-To-Live Exceeded message (ICMP type 11, code 0). If ICMP rate limiting
is enabled on those routers, they won't send the message very time, making
it appear as if trace route fails sometimes.

Here's how it works, from my book Troubleshooting Campus Networks, that
everyone should get, especially if you are studying for the Support test for
CCNP. It covers all topics for that test. Hey, my publisher won't do any
marketing for me. I'll have to do it myself. Hope that's OK, if I keep it to
a minimum. :-) Anyway, here's the info. (There are more details in the book.)

Trace-route displays the sequence of hops a packet traverses to get from a
source to a destination. The results provided by trace-route are a
measurement of the round-trip time to each router in the path to a
destination and also a measurement of the round-trip time to the actual
destination. The timing measurements account for processing time at the
recipients in addition to propagation delay. Trace-route can be used as a
rough estimate of delays on a network. It is most useful, however, as a
method for determining the path to a remote destination.

With UNIX and Cisco IOS operating systems, an IP trace-route packet is a
User Datagram Protocol (UDP) probe sent to a high UDP port number, usually
in the 33,000 to 43,000 range. Trace-route works by taking advantage of the
ICMP error message a router generates when a packet exceeds its time-to-live
(TTL) value. TTL is a field in the IP header of an IP packet.

Trace-route starts by sending a UDP probe packet with a TTL of 1. This
causes the first router in the path to discard the probe and send back a TTL
exceeded message. One of the first things a router does when forwarding IP
packets is decrement the TTL (which is essentially a hop count value). If
the decrement causes the TTL to reach 0, then the packet is dead (discarded)
and a TTL exceeded message is sent.

The trace-route command sends several probes, increasing the TTL by 1 after
sending three packets at each TTL value. For example, trace-route sends
three packets with TTL equal to 1, then three packets with TTL equal to 2,
then three packets with TTL equal to 3, and so on, until the destination
host is reached or a configured maximum number of tries (usually 30) is
reached.

Each router in the path decrements the TTL. The router that decrements the
TTL to 0 sends back the TTL exceeded message. The final destination host
sends back a port unreachable ICMP message, because the high UDP port number
is not a well-known port number. This process allows a user to see a message
from every router in the path to the destination, and a message from the
destination.

The trace-route facility in Microsoft operating systems sends a ping (ICMP
echo) rather than a UDP packet. The trace-route command makes use of the IP
TTL feature and router behavior with respect to TTL, but the packet is an
ICMP echo instead of a UDP probe. The only real difference is that when the
message reaches the final destination, the destination normally responds to
the ping, rather than sending a port unreachable message.

Hope that helps!?
___

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com

Kumar, N K. Satish, NSPM wrote:
 
 Guys,
   Have anybody figured this out.I seem to go nowhere
 thinking about
 this.. Your help appreciated as i am loosing sleep.
 
 Thanks
 
 
 
 
 -Original Message-
 From: Kumar, N K. Satish, NSPM 
 Sent: Saturday, January 18, 2003 8:36 PM
 To: [EMAIL PROTECTED]
 Subject: RE: Traceroute troubles [7:61247]
 
 
 I agree this works, but still that doesn;t answers one
 thingCisco
 and unix boxes where this * trouble is seen doesn;t use ICMP
 but uses
 UDP port for the trace output
 
 then howcome this is the fix !
 
 Thanks
 
 
 
 
 
 
 
 -Original Message-
 From: William Pearch [mailto:[EMAIL PROTECTED]]
 Sent: Friday, January 17, 2003 1:13 AM
 To: [EMAIL PROTECTED]
 Subject: RE: Traceroute troubles [7:61247]
 
 
 Solved my own problem - see CSCdu43762 on the CCO.  Shows up
 with the
 7200
 and an NSE-1 and (evidently though they are not listed) the
 1760, 2621,
 2621XM, 2611 and 1720.  Solution is to turn off PXF (rate
 limiting of
 ICMP
 unreachables) using:  no ip icmp rate unreach
  
 Lesson learned?  Read everything... :)
  
 Bill
  
  
 
   -Original Message- 
   From: William Pearch 
   Sent: Thu 1/16/2003 8:12 PM 
   To: William 

Cat 3550 basic config information [7:61392]

2003-01-20 Thread The Long and Winding Road
came across this one the other day. I believe it was prepared by someone
inside Cisco. I did not find any copyright notices, so I am assuming it is
ok to post here. for details as to what all these things really mean, check
out the Cisco documentation, as well as any number of other resources, free
and otherwise, that have been mentioned on this news group.

---

3550 How To Quick Reference

System Name:
cat2-3550(config)#hostname Catalyst

System Login Banner:
Cat1-3550(config)#banner login # Authorized Users Only #

Name an interface:
cat2-3550(config)#int fa0/1
cat2-3550(config-if)#description R1e0

Enable Portfast on an Interface:
cat2-3550(config-if)#spanning
cat2-3550(config-if)#spanning-tree portfast

Set Duplex on an Interface:
cat2-3550(config)#int fa0/1
cat2-3550(config-if)#duplex half

Set Port Speed on an Interface:
cat2-3550(config)#int fa0/1
cat2-3550(config-if)#speed 10

Set DNS Server:
cat2-3550(config)#ip name-server 4.1.1.1

Set VTP Domain and Name:
cat2-3550(config)#vtp domain hello
cat2-3550(config)#vtp mode transparent

Create Vlan and Name:
SW1(vlan)#vlan 10 name RED
SW1(vlan)#vlan 20 name BLUE
SW1(vlan)#exit

Set Vlan IP address and priority:
SW1#config t
SW1(config)#interface vlan 20
SW1(config)#spanning-tree vlan 20 priority 20
SW1(config-subif)#ip addr 1.1.1.1 255.255.255.0

Allow Only Specific Multiple Vlans on Trunk in One Statement:
interface FastEthernet0/24
switchport trunk encapsulation isl
switchport trunk allowed vlan 1,2,4,5,10,12-14,1002-1005
switchport mode trunk
no ip address

Show All Trunks and Information:
cat2-3550#show interface trunk

Set Switch to be Root of Vlan 66 using Root Command:
Cat1-3550(config)#spanning-tree vlan 101 root primary

Set Switch to be Root of Vlan 66 Without using Root Command:
Cat1-3550(config)#spanning-tree vlan 101 priority 0

Assign Default Gateway:
SW1(config)#ip default-gateway 1.1.1.2

Create Ether Channel Across Two Switches:
First Switch:
SW1(config)#int port-channel 1
SW1(config-if)#switchport trunk encapsulation isl
SW1(config-if)#switchport mode trunk

SW1(config)#int fa 0/23
SW1(config-if)#switchport trunk encap isl
SW1(config-if)#switchport mode trunk
SW1(config-if)#channel-group 1 mode auto

SW1(config)#int fa 0/24
SW1(config-if)#switchport trunk encap isl
SW1(config-if)#switchport mode trunk
SW1(config-if)#channel-group 1 mode auto

Second Switch:
SW2(config)#int port-channel 1
SW2(config-if)#switchport trunk encapsulation isl
SW2(config-if)#switchport mode trunk

SW2(config)#int fa 0/23
SW2(config-if)#switchport trunk encap isl
SW2(config-if)#switchport mode trunk
SW2(config-if)#channel-group 1 mode auto

SW2(config)#int fa 0/24
SW2(config-if)#switchport trunk encap isl
SW2(config-if)#switchport mode trunk
SW2(config-if)#channel-group 1 mode auto

Assign Vlan to Interface:
SW1(config)#int fastEthernet 0/2
SW1(config-if)#switchport access vlan 20
SW1(config-if)#no shutdown

SW1(config)#interface fastEthernet 0/3
SW1(config-if)#switchport access vlan 10
SW1(config-if)#no shutdown

Create Trunk on Interface:
SW1(config)#int fa 0/1
SW1(config-if)#switchport trunk encap isl
SW1(config-if)#switchport mode trunk



Assign Ether Channel to Interface:
SW1(config)#interface fa0/23
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#switchport mode trunk
SW1(config-if)#channel-group 1 mode auto (other side use desirable)

SW1(config)#interface fa0/24
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#switchport mode trunk
SW1(config-if)#channel-group 1 mode auto (other side use desirable)


SPAN on port interfaces:
SW2#config t
SW2(config)#no monitor session 1
SW2(config)#monitor session 1 source interface fa0/3
SW2(config)#monitor session 1 destination interface fa0/11
SW2(config)#end

Using SPAN on vlan interfaces:
SW2#config t
SW2(config)#no monitor session 1
SW2(config)#monitor session 1 source vlan 10
SW2(config)#monitor session 1 destination interface fa0/11 (any encap here)
SW2(config)#end
SW2#sh monitor session 1
Session 1
-
Source Ports:
RX Only:   None
TX Only:   None
Both:  Fa0/3
Source VLANs:
RX Only:   None
TX Only:   None
Both:  None
Destination Ports: Fa0/11
Encapsulation: Native
Filter VLANs:  None

Time Stamp Debug and Log Messages with Absolute Time:
service timestamps debug datetime
service timestamps log datetime

Stop DNS Lookup:
no ip domain-lookup


Allow Packets to go to a Supernet:
ip classless

Disable HTTP Server:
no ip http server



Enabling Syslog:
logging history informational   (This sets the logging level)
logging facility local6
logging source-interface Loopback0
logging 150.50.111.100

Configure SNMP and Restrict Access:
snmp-server community hello RO 12
snmp-server community hellorw RW 13
access-list 12 permit 150.50.0.0 0.0.255.255
access-list 13 permit 150.50.16.0 0.0.0.255
access-list 13 permit 150.50.111.0 0.0.0.255

Disabling TCP and UDP small server:

vlan on a 3548 catalyst [7:61393]

2003-01-20 Thread Bob Perez
Can I assign multiple ports to a vlan in one swoop rather than each one
individually?

IOS on a 3548XL




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61393t=61393
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: Making data centers HIPAA compliant - what is [7:61395]

2003-01-20 Thread Charles Riley
Priscilla,

Thank you for the reply.  I had actually already checked most of these sites
here.  There is a great focus on getting the providers into compliance, but
very little information about certifiying the networks, servers, storage
devices, and other infrastructure used to support in creation, transport,
and sharing of medical information...very very very very little.   The most
I have found is a brief paragraph about ensuring that software complies (and
no checklist for that either.)

In thinking about this, I would not only need a checklist, but applicable
clauses, sub clauses, etc. of the actual HIPAA to comply with.  In other
words, I need to go back and major in law, or do as you suggest and locate a
HIPAA tech specialist, and hope I get one that knows what they are doing.

Given all the confusion right now,  I wonder if those companies touting
their data centers as HIPAA compliant are doing the equivalent of
individuals putting CCIE Written on their resumes?

Charles


Priscilla Oppenheimer  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Charles Riley wrote:
 
  Sorry for the OT post, but have searched high and low, and no

 No problem. I don't think it's really OT. HIPAA is going to have a big
 affect on many data networks.

 I'm surprised that you say there isn't information available on how to
 become HIPAA compliant. There's a lot, isn't there? If companies are
saying
 that they are HIPAA certified, that's a bit of a misnomor. I don't think
 there's any certification, but there is compliance info available.

 Did you check these links:

 http://www.hipaadvisory.com/

 http://aspe.hhs.gov/admnsimp/

 http://www.cms.hhs.gov/hipaa/

 http://www.hipaa.org/

 I wonder if you could hire a consultant to help you wade through all the
 regulations and confusing info from the goverment. Hopefuly some
consultants
 will specialize in this.

 Priscilla

  definite
  answer in site. Really, really apoliogize for the nontechnical
  nature of
  this post, but I have reached a wall after searching all over
  for an answer.
  I guess you could say that I am ill with searching...
 
  HIPAA is an medical information protection and privacy act
  passed by
  Congress in 1996.  The deadline for complying or gettting an
  extension is
  this year.  You'll probably see more and more requests like
  mine as the year
  goes by, so I figured I'd start things off.
 
  HIPAA is currently in a state of flux as far as implementation
  and
  enforcement is concerned, as many medical professional and
  organizations
  rush to comply.  Which brings me to my question...
 
  In my searches, I see several organizations trumpeting the fact
  their data
  centers are HIPAA certified, meaning that they are cleared to
  process,
  store, or otherwise handle medical and private info.   How is
  it possible to
  achive this certification when there does not seem to be any
  standards or
  processes from the U.S. government detailing what will earn the
  certification?
 
  Does having a couple of tape drives on a server behind a
  firewall with
  restricted access qualify a data center to be HIPAA
  Compliant?  Is there a
  checklist, policy, standard, or procedure for certification
  required by the
  U.S. government that I missed in my searches?  If so, I would
  appreciate
  gettting the links to such information.
 
  TIA,
 
  Charles




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61395t=61395
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



cisco 2600 rtr [7:61394]

2003-01-20 Thread Bob Perez
I have a 2620 rtr and would like to debug the traffic of a particular ip but
the only way I know to do it is byu the following:
debug ip packet 101
where 101 is an acl that says ermit ip any any.

Is there a better way to do this so that it only logs that particular ip top
the screen rather than all the traffic?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61394t=61394
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: Making data centers HIPAA compliant - what is [7:61396]

2003-01-20 Thread Charles Riley
Thanks to Priscilla,  I think the below may be what I was looking for...more
reading before I make a final determination.

http://aspe.hhs.gov/admnsimp/nprm/seclist.htm

Thanks!

Priscilla Oppenheimer  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Charles Riley wrote:
 
  Sorry for the OT post, but have searched high and low, and no

 No problem. I don't think it's really OT. HIPAA is going to have a big
 affect on many data networks.

 I'm surprised that you say there isn't information available on how to
 become HIPAA compliant. There's a lot, isn't there? If companies are
saying
 that they are HIPAA certified, that's a bit of a misnomor. I don't think
 there's any certification, but there is compliance info available.

 Did you check these links:

 http://www.hipaadvisory.com/

 http://aspe.hhs.gov/admnsimp/

 http://www.cms.hhs.gov/hipaa/

 http://www.hipaa.org/

 I wonder if you could hire a consultant to help you wade through all the
 regulations and confusing info from the goverment. Hopefuly some
consultants
 will specialize in this.

 Priscilla

  definite
  answer in site. Really, really apoliogize for the nontechnical
  nature of
  this post, but I have reached a wall after searching all over
  for an answer.
  I guess you could say that I am ill with searching...
 
  HIPAA is an medical information protection and privacy act
  passed by
  Congress in 1996.  The deadline for complying or gettting an
  extension is
  this year.  You'll probably see more and more requests like
  mine as the year
  goes by, so I figured I'd start things off.
 
  HIPAA is currently in a state of flux as far as implementation
  and
  enforcement is concerned, as many medical professional and
  organizations
  rush to comply.  Which brings me to my question...
 
  In my searches, I see several organizations trumpeting the fact
  their data
  centers are HIPAA certified, meaning that they are cleared to
  process,
  store, or otherwise handle medical and private info.   How is
  it possible to
  achive this certification when there does not seem to be any
  standards or
  processes from the U.S. government detailing what will earn the
  certification?
 
  Does having a couple of tape drives on a server behind a
  firewall with
  restricted access qualify a data center to be HIPAA
  Compliant?  Is there a
  checklist, policy, standard, or procedure for certification
  required by the
  U.S. government that I missed in my searches?  If so, I would
  appreciate
  gettting the links to such information.
 
  TIA,
 
  Charles




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61396t=61396
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP passed today [7:61388]

2003-01-20 Thread Captain Lance
Congrats Ken!!

Lance

 wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 thx guys for all the valued input!!

 great help this group is!!  all keep up the great work :)




 
 For more information about Barclays Capital, please
 visit our web site at http://www.barcap.com.


 Internet communications are not secure and therefore the Barclays
 Group does not accept legal responsibility for the contents of this
 message.  Although the Barclays Group operates anti-virus programmes,
 it does not accept responsibility for any damage whatsoever that is
 caused by viruses being passed.  Any views or opinions presented are
 solely those of the author and do not necessarily represent those of the
 Barclays Group.  Replies to this email may be monitored by the Barclays
 Group for operational or business reasons.

 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61397t=61388
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



vlan on a 3548 catalyst [7:61398]

2003-01-20 Thread Robert Perez
Bob Perez  wrote in message news:...
 Can I assign multiple ports to a vlan in one swoop rather than each 
 one individually?
 
 IOS on a 3548XL




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61398t=61398
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: cisco 2600 rtr [7:61399]

2003-01-20 Thread Robert Perez
Bob Perez  wrote in message news:...
 I have a 2620 rtr and would like to debug the traffic of a particular 
 ip but the only way I know to do it is byu the following: debug ip 
 packet 101 where 101 is an acl that says ermit ip any any.
 
 Is there a better way to do this so that it only logs that particular 
 ip top the screen rather than all the traffic?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61399t=61399
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Token Ring/HSRP Question [7:61359]

2003-01-20 Thread Priscilla Oppenheimer
HSRP has been supported for a long time, even on Token Ring. It was
supported in 11.3, I think in all varieties, but you would have to check for
sure in the Release Notes to see if your particular image supports it, but I
bet it does.

You can find documentation for Cisco's older versions of IOS rather readily
(at least on the old site).

Start here:

http://www.cisco.com/univercd/home/home.htm

Use the pull-down menu to the right under Product Documentation to get the
docs for 11.3. The Master Index will help, as will the Release Notes.

To learn about configuring HSRP on that vintage router, go to Configuration
Guides and Command References.

Go to:

P1C: Network Protocols Configuration Guide, Part 1 

Then go to:

Configuring IP Services 

That document contains a section called Configure the Hot Standby Router
Protocol.

Don't search on HSRP because the document doesn't use the acronym! Hey, they
couldn't make it easy, could they?

HTH

___

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com


Simon Watson wrote:
 
 Hi Guys I'm going to a client's site that has a 2513 router with
 11.3(11a) IOS (image is  c2500-ds-l_113-11a.bin). 2 things: I'm
 looking
 to set up HSRP on the router, should I have any issues with
 that level of
 software ?Also are there an issues I should be aware of when
 configuring
 HSRP on token ring routers ??  Thanks in advance Simon.
 
 
 
 Help STOP SPAM: Try the new MSN 8 and get 2 months FREE*
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61400t=61359
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Enterprise Design Probelm / Study [7:61351]

2003-01-20 Thread Henry D.
Consider yourself lucky, that's a great thing you get to work on a project
of
that scale, especially if you get to be one of the major players in putting
the puzzle
together. I wish I could be part of it as well. Good luck !

The Long and Winding Road  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Have I got a good one!

 Just got through reading an RFP for a large organization. Over 30 sites,
 12,000 ports, and 2000 phones. Complete rebuild of the network LAN and WAN
 infrastructure. Add to that throwing out all their old PBX and key systems
 and building for VoIP and video, in addition to current data traffic. New
 switches, new routers, client asking for generous redundancy. L3 switching
 up the wazoo ( that's a technical term meaning lotsa money to spend )

 The thrill of the design is something else. Customer wants a centralized
 Call Manager, but also wants certainty in case of failure at any of the
 usual places.

 This oughta keep me out of trouble for a few weeks.

 TTFN

 Chuck

 --
 TANSTAAFL
 there ain't no such thing as a free lunch




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61401t=61351
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Token Ring/HSRP Question [7:61359]

2003-01-20 Thread Michael W. Oliver
On Monday 20 January 2003 03:12 pm, Priscilla Oppenheimer wrote:
 HSRP has been supported for a long time, even on Token Ring. It was
 supported in 11.3, I think in all varieties, but you would have to check
 for sure in the Release Notes to see if your particular image supports
 it, but I bet it does.

 You can find documentation for Cisco's older versions of IOS rather
 readily (at least on the old site).

 Start here:

 http://www.cisco.com/univercd/home/home.htm

 Use the pull-down menu to the right under Product Documentation to get
 the docs for 11.3. The Master Index will help, as will the Release Notes.

 To learn about configuring HSRP on that vintage router, go to
 Configuration Guides and Command References.

 Go to:

 P1C: Network Protocols Configuration Guide, Part 1

 Then go to:

 Configuring IP Services

 That document contains a section called Configure the Hot Standby Router
 Protocol.

 Don't search on HSRP because the document doesn't use the acronym! Hey,
 they couldn't make it easy, could they?

 HTH

 ___

 Priscilla Oppenheimer
 www.troubleshootingnetworks.com
 www.priscilla.com

 Simon Watson wrote:
  Hi Guys I'm going to a client's site that has a 2513 router with
  11.3(11a) IOS (image is  c2500-ds-l_113-11a.bin). 2 things: I'm
  looking
  to set up HSRP on the router, should I have any issues with
  that level of
  software ?Also are there an issues I should be aware of when
  configuring
  HSRP on token ring routers ??  Thanks in advance Simon.
 
  ---
 -
 
  Help STOP SPAM: Try the new MSN 8 and get 2 months FREE*
 Nondisclosure violations to [EMAIL PROTECTED]

http://www.cisco.com/warp/public/619/hsrpguide2.html

Pay particular attention to the number of groups that are available when 
configuring HSRP on Token Ring networks.

HTH

-- 

   Michael W. Oliver, CCNP | 
 IPv6  FreeBSD mizark | The tree of liberty must be refreshed
[EMAIL PROTECTED] |   from time to time with the blood of
http://michael.gargantuan.com/ |   patriots and tyrants.
   (via IPv4 and IPv6) | - President Thomas Jefferson
IPv6 ASPathTree, Looking Glass |





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61402t=61359
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: frame relay stumper [7:60567]

2003-01-20 Thread Bob Perez
I would do a SHOW FRAME RELAY PVC
and see if the pvc is active.  Also ensure that the IP's have the same
subnet and configure the LMI type so that it matches on both ends.  Possible
even contact you Frame provider to see what type of LMI the switch supports.



vikramjskeer  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi Geoff,


 Just a small possibility


 Double check on what circuit is termining on the physical interfaces. What
I
 mean to say is, if the two ends are not connected to the same circuit
 physically too, it might show you up/up (due to some other ends
 connectivity) but it won't be the result what you are looking for. Show
cdp
 neighbor command can help you in this i.e. if some other Cisco router is
 getting connected ypu can see that in place of desired router.


 It had happened with me, so maybe it's the cause.


 Regards,


 Vikram

 Mossburg, Geoff (MAN-Corporate) wrote:



 How's this for nutty: We have a frame-relay point-to-point circuit going
 between our Cisco 7500 core router and a 2500 remote router, and the
 subinterfaces have IP addys of .1 and .2, respectively. Both sides'
 subinterfaces are up/up, but I am not able to ping either IP address,
even
 when I am on the host router for each address! Both sides have other
working
 subinterfaces which I have tested similarly, and these use the same
physical
 circuit, so I know the circuit is good. OH... and this connection WAS
 working at some point, but I can't tell when it stopped working, due to
the
 fact that neither router recognizes that there is a problem. I tried
 bouncing both subinterfaces and reloading the 2500, but the problem
remains.
 Any advice about what I may be overlooking would be a Godsend.
 Thanks!
 GM
 Get Your Private, Free E-mail from Indiatimes at
http://email.indiatimes.com
 Buy the best in Movies at http://www.videos.indiatimes.com
 Now bid just 7 Days in Advance and get Huge Discounts on Indian Airlines
 Flights. So log on to  http://indianairlines.indiatimes.com and Bid Now !




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61403t=60567
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: vlan on a 3548 catalyst [7:61393]

2003-01-20 Thread Ken Diliberto
Only if your IOS version supports the interface range command.  I know
it's on our 2950's and 3550's.  Not sure about the 3500XL.

Ken

 Bob Perez  01/20/03 12:04PM 
Can I assign multiple ports to a vlan in one swoop rather than each
one
individually?

IOS on a 3548XL




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61404t=61393
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: Making data centers HIPAA compliant - what is [7:61407]

2003-01-20 Thread MADMAN
I work with a few hospitals and my understanding, very basic, is that 
there are a couple of HIPAA components, privacy and security.  Currently 
there are guidelines for compliance and they are working on audits but I 
think they are finding this not an easy task, judging compliance.

  my $.0002

   Dave

Charles Riley wrote:
 Priscilla,
 
 Thank you for the reply.  I had actually already checked most of these
sites
 here.  There is a great focus on getting the providers into compliance, but
 very little information about certifiying the networks, servers, storage
 devices, and other infrastructure used to support in creation, transport,
 and sharing of medical information...very very very very little.   The most
 I have found is a brief paragraph about ensuring that software complies
(and
 no checklist for that either.)
 
 In thinking about this, I would not only need a checklist, but applicable
 clauses, sub clauses, etc. of the actual HIPAA to comply with.  In other
 words, I need to go back and major in law, or do as you suggest and locate
a
 HIPAA tech specialist, and hope I get one that knows what they are doing.
 
 Given all the confusion right now,  I wonder if those companies touting
 their data centers as HIPAA compliant are doing the equivalent of
 individuals putting CCIE Written on their resumes?
 
 Charles
 
 
 Priscilla Oppenheimer  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 
Charles Riley wrote:

Sorry for the OT post, but have searched high and low, and no

No problem. I don't think it's really OT. HIPAA is going to have a big
affect on many data networks.

I'm surprised that you say there isn't information available on how to
become HIPAA compliant. There's a lot, isn't there? If companies are
 
 saying
 
that they are HIPAA certified, that's a bit of a misnomor. I don't think
there's any certification, but there is compliance info available.

Did you check these links:

http://www.hipaadvisory.com/

http://aspe.hhs.gov/admnsimp/

http://www.cms.hhs.gov/hipaa/

http://www.hipaa.org/

I wonder if you could hire a consultant to help you wade through all the
regulations and confusing info from the goverment. Hopefuly some
 
 consultants
 
will specialize in this.

Priscilla


definite
answer in site. Really, really apoliogize for the nontechnical
nature of
this post, but I have reached a wall after searching all over
for an answer.
I guess you could say that I am ill with searching...

HIPAA is an medical information protection and privacy act
passed by
Congress in 1996.  The deadline for complying or gettting an
extension is
this year.  You'll probably see more and more requests like
mine as the year
goes by, so I figured I'd start things off.

HIPAA is currently in a state of flux as far as implementation
and
enforcement is concerned, as many medical professional and
organizations
rush to comply.  Which brings me to my question...

In my searches, I see several organizations trumpeting the fact
their data
centers are HIPAA certified, meaning that they are cleared to
process,
store, or otherwise handle medical and private info.   How is
it possible to
achive this certification when there does not seem to be any
standards or
processes from the U.S. government detailing what will earn the
certification?

Does having a couple of tape drives on a server behind a
firewall with
restricted access qualify a data center to be HIPAA
Compliant?  Is there a
checklist, policy, standard, or procedure for certification
required by the
U.S. government that I missed in my searches?  If so, I would
appreciate
gettting the links to such information.

TIA,

Charles
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61407t=61407
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Enterprise Design Probelm / Study [7:61351]

2003-01-20 Thread MADMAN
Weeks, ha!!!  months or more!!

   Dave

The thrill of the design is something else. Customer wants a centralized
Call Manager, but also wants certainty in case of failure at any of the
usual places.

This oughta keep me out of trouble for a few weeks.

TTFN

Chuck

--
TANSTAAFL
there ain't no such thing as a free lunch
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61409t=61351
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: vlan on a 3548 catalyst [7:61398]

2003-01-20 Thread MADMAN
I don't have a 3548 to look at but does it supoort the interface 
range command?  if so yes you do have the one swoop capability.

   Dave

Robert Perez wrote:
 Bob Perez  wrote in message news:...
 
Can I assign multiple ports to a vlan in one swoop rather than each 
one individually?

IOS on a 3548XL
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61408t=61398
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: vlan on a 3548 catalyst [7:61398]

2003-01-20 Thread Peter Walker
Bob

I think the command you want is

int range first -last

in global config mode.

eg

  switch# config term
  switch(config)# interface range fastethernet0/1 -fastethernet0/12

(or something similar as I dont have an IOS switch to hand right now)

Then just configure the appropriate interface commands.

Regards

Peter

On Mon, 20 Jan 2003 20:09:51 GMT, Robert Perez  
wrote:

 Bob Perez  wrote in message news:...
 Can I assign multiple ports to a vlan in one swoop rather than each one 
 individually?

 IOS on a 3548XL
-- 
Peter Walker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61410t=61398
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ciscoworks2000 [7:61362]

2003-01-20 Thread Loechel, Michelle
Have you checked the following?

In Cisco Works menuscreen, did you go to 
Server Configuration - Setup - ANI Server Admin - SNMP Settings and you
will see the following screen:

Modify SNMP Settings
# Enter the community string using this syntax:
#   target:read_community::timeout:retries:::write_community
#
# You must be sure to keep the correct number of colons between entries. 
# If you add or delete colons,  the ANI Server will NOT be able to properly
read the community strings.

Example:
10.*.*.*:readcommunity::40:5:::writecommunity

The target would specify look for anything with the IP address range of
10.x.x.x

Also, make sure you go to the Server Configuration - Setup - ANI Server
Admin - Discovery Settings
Seed Device (must be ATM if you have any ATM in your network.)
Check jump router boundaries 


-Original Message-
From: milind tare [mailto:[EMAIL PROTECTED]] 
Sent: Monday, January 20, 2003 3:58 AM
To: [EMAIL PROTECTED]
Subject: ciscoworks2000 [7:61362]


hi ciscobuddy's


  how r u doing all? i phasing 1 problem at the time
of CiscoWorks2000 installation..

i installed cd1 and campusmanager 3.1. install patch
for CD1. at the time of Discovery icisco devices
getting unreachable..
Trying to discover 6509 3 core switch's. 1 ore switch
is VTP Server and 2 are clients.Ciscoserver is
connected to Client Core.

Following is the conf for SNMP 

snmp-server community ro .
snmp-server trpa enable
logging on
logging  server ip address

please advise me..it's very urgent..

Thanks  Regards,
Milind

__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61411t=61362
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX NAT bypass [7:61338]

2003-01-20 Thread mjans001
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/mr.htm#1032129

Usage Guidelines 

The nat command lets you enable or disable address translation for one or
more internal addresses. Address translation means that when a host starts
an outbound connection, the IP addresses in the internal network are
translated into global addresses. Network Address Translation (NAT) allows
your network to have any IP addressing scheme and the PIX Firewall protects
these addresses from visibility on the external network.

The nat outside option lets you enable or disable address translation for
the external addresses.

The nat if_name 0 access-list acl_name command lets you exempt traffic that
is matched by the access-list command statements from the NAT services.
Adaptive Security remains in effect with the nat 0 access-list command. The
extent to which the inside hosts are accessible from the outside depends on
the access-list command statements that permit inbound access. The if_name
is the higher security level interface name. The acl_name is the name you
use to identify the access-list command statement.

With PIX Firewall software version 5.3 and higher, there is no longer a
restriction on having the nat 0 command (Identity NAT) and the nat 0
access-list command configured at the same time. Both the nat 0 command and
the nat 0 access-list command may be configured concurrently.

The access-list option changes the behavior of the nat 0 command. (Without
the access-list option, the command is backward compatible with previous
versions.) The nat 0 command implemented the identity feature; this new
version of the command disables NAT. Specifically, the new behavior disables
proxy ARPing for the IP addresses in the nat 0 command statement.




http://www.cisco.com/warp/public/707/28.html

Define the inside group to be included for NAT:

 
nat (inside) 0 175.1.1.0 255.255.255.0  disabled nat
nat (inside) 1 10.1.6.0 255.255.255.0   enabled nat




- -Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Namens Michael
Vasilenko
Verzonden: zondag 19 januari 2003 17:21
Aan: [EMAIL PROTECTED]
Onderwerp: PIX NAT bypass [7:61338]


Hello!

I need to implement unidirectional traffic flow with NAT bypass through PIX.
Any help, links, config examples would be fine. Thanks.

- -- 
Michael Vasilenko
Version: PGP 8.0

iQA/AwUBPixvCXdq56XWk+VyEQLNdACbBN+D0sbxbYj8M3pPIWC7q09Gk40AoNnZ
CR9mRTQti3JfttFfnetjP0X7
=+Rd7
-END PGP SIGNATURE-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61412t=61338
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Loading IOS [7:61413]

2003-01-20 Thread [EMAIL PROTECTED]
I am curious to know if it is possible to load 3660 IOS code to a PCMCIA
card on a 3640 if all I am wanting to do is get the IOS on the flash card.
I am not trying to load the 3640 router with the 3660 IOS.   I am just in
need of getting this IOS for a 3660 on a flash card but I dont have a 3660
at my present location so I thought about using my 3640.
 
 
Thanks, 
 
Mario




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61413t=61413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE program [7:61405]

2003-01-20 Thread Peter Walker
John


I looked at them some time back (early last year).  I wasnt that impressed. 
 My impression was that they had  a very expensive program that you could 
get a discount on if you committed yourself to working for them for 
practically nothing for a year or two. However the thing that really 
convinced me to stay well away from them was their claim (snipped from 
their current website).

   The ictp staff members hold a substantial number of IT related 
credentials, certificates, and degrees, including:

   Cisco Certified Internetworking Engineer (CCIE) Lab  3
   
   Cisco Certified Internetworking Engineer (CCIE) Written  12
   

Any company that would make such a claim are not worth dealing with.

I also take that to mean that most of  their lab instructors are people who 
are unable to pass the lab.

Draw your own conclusions.  Maybe one of these days I will get around to 
reporting them to Cisco for clear and explicit misuse of Cisco trademarks.

Peter



On Mon, 20 Jan 2003 21:07:08 GMT, John McCartney  
wrote:

 Hi all,

 Has anyone heard of the company listed in the URL below, I got an email
 offering a chance to help out with obtaining the CCIE through their 
 program.
 I just wanted to know if its worth the time to look into it or is it a 
 scam?

 Their website is: http://www.ictp.com

 Thanks.

 John
 CCNP
-- 
Peter Walker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61414t=61405
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Traceroute troubles [7:61247]

2003-01-20 Thread Tom Lisa
Priscilla Oppenheimer wrote:



 Here's how it works, from my book Troubleshooting Campus Networks, that
 everyone should get, especially if you are studying for the Support test
for
 CCNP. It covers all topics for that test. Hey, my publisher won't do any
 marketing for me. I'll have to do it myself. Hope that's OK, if I keep it
to
 a minimum. :-) Anyway, here's the info. (There are more details in the
book.)

Hey, I'm recommending it to my students.  Does that mean I get promotional
fee? :)

Prof. Tom Lisa, CCAI
Community College of Southern Nevada
Cisco ATC/Regional Networking Academy
Cunctando restituit rem




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61415t=61247
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Loading IOS [7:61413]

2003-01-20 Thread MADMAN
No

   Dave

[EMAIL PROTECTED] wrote:
 I am curious to know if it is possible to load 3660 IOS code to a PCMCIA
 card on a 3640 if all I am wanting to do is get the IOS on the flash card.
 I am not trying to load the 3640 router with the 3660 IOS.   I am just in
 need of getting this IOS for a 3660 on a flash card but I dont have a 3660
 at my present location so I thought about using my 3640.
  
  
 Thanks, 
  
 Mario
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61416t=61413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: vlan on a 3548 catalyst [7:61398]

2003-01-20 Thread Larry Letterman
Its not available on this version of software on the 3548 I
use for my lab...
the version is listed below

Cisco Internetwork Operating System Software
IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Version
12.0(5.2)XU, MAINTENANCE INTERIM SOFTWARE

Larry Letterman
Network Engineer
Cisco Systems


- Original Message -
From: MADMAN 
To: 
Sent: Monday, January 20, 2003 1:31 PM
Subject: Re: vlan on a 3548 catalyst [7:61398]


 I don't have a 3548 to look at but does it supoort the
interface
 range command?  if so yes you do have the one swoop
capability.

Dave

 Robert Perez wrote:
  Bob Perez  wrote in message news:...
 
 Can I assign multiple ports to a vlan in one swoop
rather than each
 one individually?
 
 IOS on a 3548XL
 --
 David Madland
 CCIE# 2016
 Sr. Network Engineer
 Qwest Communications
 612-664-3367

 You don't make the poor richer by making the rich
poorer. --Winston
 Churchill
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61417t=61398
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Loading IOS [7:61413]

2003-01-20 Thread Larry Letterman
If the flash cards are compatible in each of the platforms,
you can copy it
Not all cisco platforms use the same cards

Larry Letterman
Network Engineer
Cisco Systems


- Original Message -
From: 
To: 
Sent: Monday, January 20, 2003 1:53 PM
Subject: Loading IOS [7:61413]


 I am curious to know if it is possible to load 3660 IOS
code to a PCMCIA
 card on a 3640 if all I am wanting to do is get the IOS on
the flash card.
 I am not trying to load the 3640 router with the 3660 IOS.
I am just in
 need of getting this IOS for a 3660 on a flash card but I
dont have a 3660
 at my present location so I thought about using my 3640.


 Thanks,

 Mario
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61418t=61413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Traceroute troubles [7:61247]

2003-01-20 Thread Larry Letterman
Tom,
That means you now work for Priscilla's marketing dept.
Hope she pays you well.:)

--

Larry Letterman
Network Engineer
Cisco Systems


Tom Lisa  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Priscilla Oppenheimer wrote:



  Here's how it works, from my book Troubleshooting Campus
Networks, that
  everyone should get, especially if you are studying for
the Support test
 for
  CCNP. It covers all topics for that test. Hey, my
publisher won't do any
  marketing for me. I'll have to do it myself. Hope that's
OK, if I keep it
 to
  a minimum. :-) Anyway, here's the info. (There are more
details in the
 book.)

 Hey, I'm recommending it to my students.  Does that mean I
get promotional
 fee? :)

 Prof. Tom Lisa, CCAI
 Community College of Southern Nevada
 Cisco ATC/Regional Networking Academy
 Cunctando restituit rem
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61419t=61247
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: QOS on 2621xm [7:61353]

2003-01-20 Thread mjans001
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

You may need to use Priority Queueing, and hardcode telnet High prio based
on an access-list.

Normal traffic despools after telnet queue is empty. If you are sure that
there will always be bandwitfh left for other traffic, PQ will do fine.

That is one way of using it.


During transmission, PQ gives priority queues absolute preferential
treatment over low priority queues; important traffic, given the highest
priority, always takes precedence over less important traffic. Packets are
classified based on user-specified criteria and placed into one of the four
output queues-high, medium, normal, and low-based on the assigned priority.
Packets that are not classified by priority fall into the normal queue.
Figure 7 illustrates this process.

Congestion Management Overview
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/qos_c/qcpart2/qcconman.htm


Why Use Priority Queueing?
PQ provides absolute preferential treatment to high priority traffic,
ensuring that mission-critical traffic traversing various WAN links gets
priority treatment. In addition, PQ provides a faster response time than do
other methods of queueing.

Although you can enable priority output queueing for any interface, it is
best used for low-bandwidth, congested serial interfaces.

Considerations
When choosing to use PQ, consider that because lower priority traffic is
often denied bandwidth in favor of higher priority traffic, use of PQ could,
in the worst case, result in lower priority traffic never being transmitted.
To avoid inflicting these conditions on lower priority traffic, you can use
traffic shaping or CAR to rate-limit the higher priority traffic.

PQ introduces extra overhead that is acceptable for slow interfaces, but may
not be acceptable for higher speed interfaces such as Ethernet. With PQ
enabled, the system takes longer to switch packets because the packets are
classified by the processor card.

PQ uses a static configuration and does not adapt to changing network
conditions.






Martijn

- -Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Namens Julian P
Verzonden: maandag 20 januari 2003 9:02
Aan: [EMAIL PROTECTED]
Onderwerp: QOS on 2621xm [7:61353]


Hi


We would like to prioritize incoming traffic on our 256k internet link to
uunet .We need to give telnet at least 64k incoming bandwidth.

Any ideas on the best way to do this ?

Thanks in advance

Julian
Version: PGP 8.0

iQA/AwUBPix7Bndq56XWk+VyEQJ+/ACfS2LZO44i+6Y+cRg37a/ApiovJtgAoLvz
kS6ZvDnOtSXEqAAi/6u1v+p4
=nXJB
-END PGP SIGNATURE-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61420t=61353
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Enterprise Design Probelm / Study [7:61351]

2003-01-20 Thread Priscilla Oppenheimer
Sounds terrific! It would make an excellent running case study for a network
design book. :-) Seriously, if something like that would be feasible
(politically, etc.) and you would be interested in participating in
something of this nature, contact me offline. Thanks and good luck with the
project!

Priscilla

The Long and Winding Road wrote:
 
 Have I got a good one!
 
 Just got through reading an RFP for a large organization. Over
 30 sites,
 12,000 ports, and 2000 phones. Complete rebuild of the network
 LAN and WAN
 infrastructure. Add to that throwing out all their old PBX and
 key systems
 and building for VoIP and video, in addition to current data
 traffic. New
 switches, new routers, client asking for generous redundancy.
 L3 switching
 up the wazoo ( that's a technical term meaning lotsa money to
 spend )
 
 The thrill of the design is something else. Customer wants a
 centralized
 Call Manager, but also wants certainty in case of failure at
 any of the
 usual places.
 
 This oughta keep me out of trouble for a few weeks.
 
 TTFN
 
 Chuck
 
 --
 TANSTAAFL
 there ain't no such thing as a free lunch
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61421t=61351
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Loading IOS [7:61413]

2003-01-20 Thread Edward Sohn
Dave,

I actually had a similar concern a few weeks ago.  According to this
link, it IS in fact possible for Mario to do so, because all 3600
routers appear to use filesystem class B.

http://www.cisco.com/warp/public/63/pcmciamatrix.html

Ed

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
MADMAN
Sent: Monday, January 20, 2003 2:43 PM
To: [EMAIL PROTECTED]
Subject: Re: Loading IOS [7:61413]


No

   Dave

[EMAIL PROTECTED] wrote:
 I am curious to know if it is possible to load 3660 IOS code to a 
 PCMCIA card on a 3640 if all I am wanting to do is get the IOS on the
flash card.
 I am not trying to load the 3640 router with the 3660 IOS.   I am just
in
 need of getting this IOS for a 3660 on a flash card but I dont have a 
 3660 at my present location so I thought about using my 3640.
  
  
 Thanks,
  
 Mario
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61422t=61413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Traceroute troubles [7:61247]

2003-01-20 Thread Tom Lisa
Well, considering what she's probably getting paid for writing it,
I doubt it. :(  So, Priscilla (please note I didn't use any of the
prohibited
abreviations; wouldn't want to upset the boss), based on the hours you
put in writing it, how many cents per hour are you making?

Prof. Tom Lisa, CCAI
Community College of Southern Nevada
Cisco ATC/Regional Networking Academy
Cunctando restituit rem

Larry Letterman wrote:

  Tom,
  That means you now work for Priscilla's marketing dept.
  Hope she pays you well.:)

  --

  Larry Letterman
  Network Engineer
  Cisco Systems

  Tom Lisa  wrote in
  message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   Priscilla Oppenheimer wrote:
  
  
  
Here's how it works, from my book Troubleshooting Campus
  Networks, that
everyone should get, especially if you are studying for
  the Support test
   for
CCNP. It covers all topics for that test. Hey, my
  publisher won't do any
marketing for me. I'll have to do it myself. Hope that's
  OK, if I keep it
   to
a minimum. :-) Anyway, here's the info. (There are more
  details in the
   book.)
  
   Hey, I'm recommending it to my students.  Does that mean I
  get promotional
   fee? :)
  
   Prof. Tom Lisa, CCAI
   Community College of Southern Nevada
   Cisco ATC/Regional Networking Academy
   Cunctando restituit rem
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61423t=61247
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Loading IOS [7:61413]

2003-01-20 Thread Larkin, Richard
I recall years ago that 3Com had a utility that allowed you to place the
card in your laptop, reformat the filesystem, then copy the image to it. If
there is there a similar utility for Cisco, I'd be interested to know.

Rik

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, 21 January 2003 5:54 AM
To: [EMAIL PROTECTED]
Subject: Loading IOS [7:61413]


I am curious to know if it is possible to load 3660 IOS code to a PCMCIA
card on a 3640 if all I am wanting to do is get the IOS on the flash card.
I am not trying to load the 3640 router with the 3660 IOS.   I am just in
need of getting this IOS for a 3660 on a flash card but I dont have a 3660
at my present location so I thought about using my 3640.
 
 
Thanks, 
 
Mario




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61424t=61413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: QOS on 2621xm [7:61353]

2003-01-20 Thread Larkin, Richard
What would he do if he had a FR link to a remote site and he wanted to
ensure his high priority traffic was sent without DE, whilst low priority
traffic can burst and be sent as DE - does FRTS (for Telnet only) solve this
problem (if that can be done)?

Rik

-Original Message-
From: mjans001 [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, 21 January 2003 6:54 AM
To: [EMAIL PROTECTED]
Subject: RE: QOS on 2621xm [7:61353]


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

You may need to use Priority Queueing, and hardcode telnet High prio based
on an access-list.

Normal traffic despools after telnet queue is empty. If you are sure that
there will always be bandwitfh left for other traffic, PQ will do fine.

That is one way of using it.


During transmission, PQ gives priority queues absolute preferential
treatment over low priority queues; important traffic, given the highest
priority, always takes precedence over less important traffic. Packets are
classified based on user-specified criteria and placed into one of the four
output queues-high, medium, normal, and low-based on the assigned priority.
Packets that are not classified by priority fall into the normal queue.
Figure 7 illustrates this process.

Congestion Management Overview
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/qos_c
/qcpart2/qcconman.htm


Why Use Priority Queueing?
PQ provides absolute preferential treatment to high priority traffic,
ensuring that mission-critical traffic traversing various WAN links gets
priority treatment. In addition, PQ provides a faster response time than do
other methods of queueing.

Although you can enable priority output queueing for any interface, it is
best used for low-bandwidth, congested serial interfaces.

Considerations
When choosing to use PQ, consider that because lower priority traffic is
often denied bandwidth in favor of higher priority traffic, use of PQ could,
in the worst case, result in lower priority traffic never being transmitted.
To avoid inflicting these conditions on lower priority traffic, you can use
traffic shaping or CAR to rate-limit the higher priority traffic.

PQ introduces extra overhead that is acceptable for slow interfaces, but may
not be acceptable for higher speed interfaces such as Ethernet. With PQ
enabled, the system takes longer to switch packets because the packets are
classified by the processor card.

PQ uses a static configuration and does not adapt to changing network
conditions.






Martijn

- -Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Namens Julian P
Verzonden: maandag 20 januari 2003 9:02
Aan: [EMAIL PROTECTED]
Onderwerp: QOS on 2621xm [7:61353]


Hi


We would like to prioritize incoming traffic on our 256k internet link to
uunet .We need to give telnet at least 64k incoming bandwidth.

Any ideas on the best way to do this ?

Thanks in advance

Julian
Version: PGP 8.0

iQA/AwUBPix7Bndq56XWk+VyEQJ+/ACfS2LZO44i+6Y+cRg37a/ApiovJtgAoLvz
kS6ZvDnOtSXEqAAi/6u1v+p4
=nXJB
-END PGP SIGNATURE-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61425t=61353
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Making data centers HIPAA compliant - what is required - [7:61427]

2003-01-20 Thread David C Prall
Charles,
Check out the Horses mouth:
http://www.cms.hhs.gov/hipaa/

Ciscos take on HIPAA:
http://www.cisco.com/go/hipaa

--
David C Prall [EMAIL PROTECTED] http://dcp.dcptech.com

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 Charles Riley
 Sent: Monday, January 20, 2003 12:23 PM
 To: [EMAIL PROTECTED]
 Subject: OT: Making data centers HIPAA compliant - what is required -
 [7:61383]


 Sorry for the OT post, but have searched high and low, and no definite
 answer in site. Really, really apoliogize for the nontechnical nature of
 this post, but I have reached a wall after searching all over for
 an answer.
 I guess you could say that I am ill with searching...

 HIPAA is an medical information protection and privacy act passed by
 Congress in 1996.  The deadline for complying or gettting an extension is
 this year.  You'll probably see more and more requests like mine
 as the year
 goes by, so I figured I'd start things off.

 HIPAA is currently in a state of flux as far as implementation and
 enforcement is concerned, as many medical professional and organizations
 rush to comply.  Which brings me to my question...

 In my searches, I see several organizations trumpeting the fact their data
 centers are HIPAA certified, meaning that they are cleared to process,
 store, or otherwise handle medical and private info.   How is it
 possible to
 achive this certification when there does not seem to be any standards or
 processes from the U.S. government detailing what will earn the
 certification?

 Does having a couple of tape drives on a server behind a firewall with
 restricted access qualify a data center to be HIPAA Compliant?
 Is there a
 checklist, policy, standard, or procedure for certification
 required by the
 U.S. government that I missed in my searches?  If so, I would appreciate
 gettting the links to such information.

 TIA,

 Charles




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61427t=61427
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Traceroute troubles [7:61247]

2003-01-20 Thread Priscilla Oppenheimer
Tom Lisa wrote:
 
 Well, considering what she's probably getting paid for writing
 it,
 I doubt it. :(  So, Priscilla (please note I didn't use any of
 the
 prohibited
 abreviations; wouldn't want to upset the boss), based on the
 hours you
 put in writing it, how many cents per hour are you making?

For each book sold, I can buy a latte! I worked on the book for many 
months, but I don't know the number of hours. I didn't get paid to write the
book, but I do get royalties. The publisher gets the lion's share,
unfortunately.

Thanks for keeping the thread going. That's free marketing. :-) I'd like to
see the book sell better, not because of the money, but because we (myself
and my co-author) have a lot of accumulated knowledge we would like to pass
on to the next generation of nerds.

___

Priscilla Oppenheimer
www.troubleshootingnetworks.com
www.priscilla.com

 
 Prof. Tom Lisa, CCAI
 Community College of Southern Nevada
 Cisco ATC/Regional Networking Academy
 Cunctando restituit rem
 
 Larry Letterman wrote:
 
   Tom,
   That means you now work for Priscilla's marketing dept.
   Hope she pays you well.:)
 
   --
 
   Larry Letterman
   Network Engineer
   Cisco Systems
 
   Tom Lisa  wrote in
   message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Priscilla Oppenheimer wrote:
   
   
   
 Here's how it works, from my book Troubleshooting Campus
   Networks, that
 everyone should get, especially if you are studying for
   the Support test
for
 CCNP. It covers all topics for that test. Hey, my
   publisher won't do any
 marketing for me. I'll have to do it myself. Hope that's
   OK, if I keep it
to
 a minimum. :-) Anyway, here's the info. (There are more
   details in the
book.)
   
Hey, I'm recommending it to my students.  Does that mean I
   get promotional
fee? :)
   
Prof. Tom Lisa, CCAI
Community College of Southern Nevada
Cisco ATC/Regional Networking Academy
Cunctando restituit rem
   [EMAIL PROTECTED]
   [EMAIL PROTECTED]
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61428t=61247
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: Making data centers HIPAA compliant - what is required [7:61429]

2003-01-20 Thread Howard C. Berkowitz
At 5:23 PM + 1/20/03, Charles Riley wrote:
Sorry for the OT post, but have searched high and low, and no definite
answer in site. Really, really apoliogize for the nontechnical nature of
this post, but I have reached a wall after searching all over for an answer.
I guess you could say that I am ill with searching...

HIPAA is an medical information protection and privacy act passed by
Congress in 1996.  The deadline for complying or gettting an extension is
this year.  You'll probably see more and more requests like mine as the year
goes by, so I figured I'd start things off.

HIPAA is currently in a state of flux as far as implementation and
enforcement is concerned, as many medical professional and organizations
rush to comply.  Which brings me to my question...

In my searches, I see several organizations trumpeting the fact their data
centers are HIPAA certified, meaning that they are cleared to process,
store, or otherwise handle medical and private info.

There is no such thing as HIPAA certification, and I do work 
extensively with medical systems.  The best anyone could say is 
HIPAA compliant, which has fairly established parallels in the 
telephony world, where it is possible to get NEBS certification, but 
extremely expensive and applicable only to one configuration (much as 
was NSA Orange Book certification)

Reputable vendors mean something when they say NEBS compliant, but 
there is much more track record in telephony than in medical 
informatics.

Indeed, there are additional regulations besides HIPAA that may 
become relevant, including 21CFR11 (primarily about human subject 
research), CLIA laboratory accreditation and the DEA regulations for 
electronic prescribing of controlled substances.  All of these do 
include technical, as well as procedural, requirements.  For example, 
DEA specifies the digital signature algorithms and keys, but also has 
requirements for time synchronization to be used on message 
authenticators and events logged.

How is it possible to
achive this certification when there does not seem to be any standards or
processes from the U.S. government detailing what will earn the
certification?

Again, there isn't.  If an industry group were to get together and 
try to set procedures for doing this, there is an umbrella 
administrative organization tht might help -- the National Voluntary 
Laboratory Accreditation Program (NVLAP), which has probably been 
renamed in the normal course of events.

Does having a couple of tape drives on a server behind a firewall with
restricted access qualify a data center to be HIPAA Compliant?

If that firewall is connected to the Internet, no.  There are 
specific HIPAA guidelines that would call for 128-bit DES outside the 
firewall.  At present, HIPAA does allow cleartext on dedicated or FR 
facilitie, but it appears that an encryption requirement will evolve 
because things like DEA require it.

Is there a
checklist, policy, standard, or procedure for certification required by the
U.S. government that I missed in my searches?  If so, I would appreciate
gettting the links to such information.

They exist in many places; I've got loads of things that I've 
collected for consulting clients.  You have to be selective in what 
you are looking for; I'm sure I don't have everything.  For example, 
there are checklists for design and review of human research, but I 
only scanned those, because my client was concerned with the related 
but separate problem of patient recruitment for clinical trials.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61429t=61429
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Looking for Cisco practice rack [7:61430]

2003-01-20 Thread John C
Anyone know of a good Cisco practice rack? I haven't seen one that meets my
needs for the CCIE. Thx.


-
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61430t=61430
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Traffic separate by protocol [7:61431]

2003-01-20 Thread Frederico Madeira
How i separe traffic in my 2600 router by protocol.
Ex: I have a frame-relay circuit of 64Kb cir 32Kb
and i wnat to have:
10Kb for http
10Kb for smtp/pop3
5Kb for ftp
and the remain for all others.

How i make this configuration ?? i  must to make in the concentrator
router or in all routers on my wan ??

Tanks

Fred




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61431t=61431
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Hostflapping on 4006 catalyst [7:61432]

2003-01-20 Thread John Brandis
wp378895Hi All, can some one please explain this error ?
 
%C4K_EBM-4-HOSTFLAPPING: Host 00:10:0B:10:B9:20 in vlan 200 is flapping
between port gi2 and port gi1 
wp378896Workaround: None. (CSCdy21031) 
*   wp378897When the spanning tree mode is PVST, isolated trunk ports
transmit BPDUs with the primary VLAN instead of the secondary VLAN. 
wp378898Workaround: Use the spanning-tree bpduguard enable interface command
to enable BPDU Guard to detect any BPDUs received on private VLAN trunk
ports. (CSCdx62226) 
Thanks
 
John
Sydney Australia
 


**

visit http://www.solution6.com

UK Customers - http://www.solution6.co.uk

**

The Solution 6 Head Office and NSW Branch has moved premises.
Please make sure you have updated your records with our new details.

Level 14, 383 Kent Street, Sydney NSW 2000.

General Phone: 61 2 9278 0666

General Fax: 61 2 9278 0555

**

This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.

*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61432t=61432
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Routes across ISIS areas. [7:61433]

2003-01-20 Thread Rajesh Kumar
Hi all,

I have a scenario like this :

Area 1 Area 2

R1  R2

s2/0.1 s2/0.1

Both are point to point networks.

The configuration for R1 is

int s2/0.1 point-to-point
ip router isis

router isis
net 47.0001.0002.0003.0004.00

and for R2 is

int s2/0.1 point-to-point
ip router isis

router isis
net 47.0002.0001.0003.0004.00


=

The problem is that I am not able to see R1's routes in R2.

R1 has a couple of OSPF routes coming in from other routers - but never
gets passed on to R2.

Any experts comments?


Thanks,
Rajesh




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61433t=61433
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: wannabe CCIEs in Bangalore, India [7:60790]

2003-01-20 Thread 2000 technologie
hi
pls conract me on [EMAIL PROTECTED]
iam planning to my lab exam..




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61434t=60790
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routes across ISIS areas. [7:61433]

2003-01-20 Thread John Murphy
Rajesh,

 47.0001 will not form an adjacency with 47.0002.  For them to exchange L1
 routes you need to change their ISIS Area IDs in their NET so they're in
the
 same area.  Alternatively you could insert a third router as an L2, and
leak
 your routes from the L2 into the L1s.

 You'll also need to redistribute those OSPF routes into ISIS if you want
 them announced to R2...

 HTH,

 John


 - Original Message -
 From: Rajesh Kumar 
 To: 
 Sent: Monday, January 20, 2003 10:26 PM
 Subject: Routes across ISIS areas. [7:61433]


  Hi all,
 
  I have a scenario like this :
 
  Area 1 Area 2
 
  R1  R2
 
  s2/0.1 s2/0.1
 
  Both are point to point networks.
  
  The configuration for R1 is
 
  int s2/0.1 point-to-point
  ip router isis
 
  router isis
  net 47.0001.0002.0003.0004.00
 
  and for R2 is
 
  int s2/0.1 point-to-point
  ip router isis
 
  router isis
  net 47.0002.0001.0003.0004.00
 
 
  =
 
  The problem is that I am not able to see R1's routes in R2.
 
  R1 has a couple of OSPF routes coming in from other routers - but never
  gets passed on to R2.
 
  Any experts comments?
 
 
  Thanks,
  Rajesh




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61435t=61433
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Traceroute troubles [7:61247]

2003-01-20 Thread Larry Letterman
I also recommend it to our entry level/ccdp candidates and I
believe several have went and got it. I try and promote your
work and resources when i can.

Larry Letterman
Network Engineer
Cisco Systems


- Original Message -
From: Priscilla Oppenheimer 
To: 
Sent: Monday, January 20, 2003 6:32 PM
Subject: Re: Traceroute troubles [7:61247]


 Tom Lisa wrote:
 
  Well, considering what she's probably getting paid for
writing
  it,
  I doubt it. :(  So, Priscilla (please note I didn't use
any of
  the
  prohibited
  abreviations; wouldn't want to upset the boss), based on
the
  hours you
  put in writing it, how many cents per hour are you
making?

 For each book sold, I can buy a latte! I worked on the
book for many
 months, but I don't know the number of hours. I didn't get
paid to write the
 book, but I do get royalties. The publisher gets the
lion's share,
 unfortunately.

 Thanks for keeping the thread going. That's free
marketing. :-) I'd like to
 see the book sell better, not because of the money, but
because we (myself
 and my co-author) have a lot of accumulated knowledge we
would like to pass
 on to the next generation of nerds.

 ___

 Priscilla Oppenheimer
 www.troubleshootingnetworks.com
 www.priscilla.com

 
  Prof. Tom Lisa, CCAI
  Community College of Southern Nevada
  Cisco ATC/Regional Networking Academy
  Cunctando restituit rem
 
  Larry Letterman wrote:
 
Tom,
That means you now work for Priscilla's marketing
dept.
Hope she pays you well.:)
 
--
 
Larry Letterman
Network Engineer
Cisco Systems
 
Tom Lisa  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Priscilla Oppenheimer wrote:



  Here's how it works, from my book Troubleshooting
Campus
Networks, that
  everyone should get, especially if you are
studying for
the Support test
 for
  CCNP. It covers all topics for that test. Hey, my
publisher won't do any
  marketing for me. I'll have to do it myself. Hope
that's
OK, if I keep it
 to
  a minimum. :-) Anyway, here's the info. (There are
more
details in the
 book.)

 Hey, I'm recommending it to my students.  Does that
mean I
get promotional
 fee? :)

 Prof. Tom Lisa, CCAI
 Community College of Southern Nevada
 Cisco ATC/Regional Networking Academy
 Cunctando restituit rem
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61436t=61247
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Loading IOS [7:61413]

2003-01-20 Thread Andrew Larkins
I know that there was a utility a long time ago (in a galaxy far far away!!)
for Nortel / Bay that worked great with win 95. Who still uses that :)

-Original Message-
From: Larkin, Richard [mailto:[EMAIL PROTECTED]]
Sent: 21 January 2003 02:13
To: [EMAIL PROTECTED]
Subject: RE: Loading IOS [7:61413]


I recall years ago that 3Com had a utility that allowed you to place the
card in your laptop, reformat the filesystem, then copy the image to it. If
there is there a similar utility for Cisco, I'd be interested to know.

Rik

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, 21 January 2003 5:54 AM
To: [EMAIL PROTECTED]
Subject: Loading IOS [7:61413]


I am curious to know if it is possible to load 3660 IOS code to a PCMCIA
card on a 3640 if all I am wanting to do is get the IOS on the flash card.
I am not trying to load the 3640 router with the 3660 IOS.   I am just in
need of getting this IOS for a 3660 on a flash card but I dont have a 3660
at my present location so I thought about using my 3640.
 
 
Thanks, 
 
Mario




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61437t=61413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RS LAB Study group - TURKEY [7:61438]

2003-01-20 Thread [EMAIL PROTECTED]
Hello (Merhaba)

Are the any guys in this group living around Istanbul and preparing for =
the LAB. I find it difficult to motivate myself for the LAB study and if =
you like we can form a group for working together and sharing knowledge.

Bye..

(Digerlerine ayip olmasin diye Turkce yazmadim :)

Zafer POLAT=09
Network ve Network Y=F6netimi
Ko=E7.net Haberle=FEme Teknolojileri ve =DDleti=FEim Hizmetleri A.=DE.
=C7aml=FDca =DD=FE Merkezi B3 Blok 81190
=DCsk=FCdar =DDstanbul
Tel: 00-90-216-5563275
Faks: 00-90-216-5563232
e-mail: [EMAIL PROTECTED]
http://www.koc.net

_=

Bu e-posta mesaji kisiye ozel olup, gizli bilgiler iceriyor olabilir. =
Eger bu e-posta mesaji size yanlislikla ulasmissa,  icerigini hic bir =
sekilde kullanmayiniz ve ekli dosyalari acmayiniz.=20
Bu durumda lutfen e-posta mesajini kullaniciya hemen geri gonderiniz  ve =
 tum kopyalarini mesaj kutunuzdan siliniz. Bu e-posta mesaji, hic bir =
sekilde, herhangi bir amac icin=20
cogaltilamaz, yayinlanamaz ve para karsiligi satilamaz.  Bu e-posta =
mesaji viruslere karsi anti-virus sistemleri tarafindan taranmistir. =
Ancak yollayici, bu e-posta mesajinin - vir=FCs=20
koruma sistemleri ile kontrol ediliyor olsa bile - virus icermedigini =
garanti etmez ve meydana gelebilecek zararlardan dogacak hicbir =
sorumlulugu kabul etmez.=20

This message is intended solely for the use of the individual or entity =
to whom it is addressed , and may contain confidential  information. If =
you are not the intended recipient of=20
this message or you receive this mail in error, you should refrain from =
making any use of the contents and from opening any attachment. In that =
case, please notify the sender=20
immediately and return the message to the sender, then, delete and =
destroy all copies. This e-mail message, could not be copied, published =
or sold for any reason. This e-mail=20
message has been swept by anti-virus systems for the presence of =
computer viruses. In doing so, however,  sender  cannot warrant that =
virus or other forms of data=20
corruption may not be present and do not take any responsibility in any =
occurrence.
_=





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61438t=61438
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]