\31 Mak could it be used on leased lines(serial) [7:62853]

2003-02-11 Thread Monu Sekhon
Hi Harold/all,

In your description u mentioned that u can use /31 mask also,

Your comments:
"Since the point-to-point link is likely to have a /30 (or /31 if they're
running 12.2) mask on it"


questions is
-

-will the connection work , till now i only know that 30 is the max mask
used on serial lines .how will we use this 31 mask
- Does this applies only in ios version 12.2 or later as mentioned.
- Do people use these 31 mask 
- Can anybody provide me any inf & link

Thanx in Advance
(Please refer the description below in thread he mentioned that.)



Over a leased line I can't see the harm in leaving it running. If someone
manages to get into your router, there's very little target enumeration they
can do with CDP that can't be done by other means. Since the point-to-point
link is likely to have a /30 (or /31 if they're running 12.2) mask on it,
it's not going to be a stretch to figure out the other router's IP.

While disabling CDP is certainly a sound practice on LAN interfaces, we also
disable it on our switched WAN connections on general principles. That isn't
a magic bullet by any means though, disabling CDP is security through
obscurity more than anything else. If you're concerned about unauthorized
access to your routers, then you should consider running access classes on
your vty lines and AAA so you can audit access to the routers, if you aren't
already.



> -Original Message- 
> From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] 
> Sent: Tuesday, February 11, 2003 1:12 PM 
> To: [EMAIL PROTECTED] 
> Subject: Re: Why disable cdp for back-to-back serial connec [7:62798] 
> 
> 
> Lawrence Law wrote: 
> > 
> > Dear Priscilla, 
> > 
> > Thank you for your clear explaination. 
> > 
> > May be it is better to disable cdp for low speed link, and 
> > security issue. 
> 
> CDP uses very little bandwidth, so unless it's a really 
> low-speed link, I 
> wouldn't turn it off for that reason. Regarding security, if 
> it's a private 
> point-to-point HDLC link, then security probably isn't too 
> much of an issue. 
> It would be hard for a hacker to see the packets. 
> 
> On the other hand, if the hacker somehow got into a router 
> that was running 
> CDP on any of its interfaces, then the hacker could learn 
> about one or more 
> additional routers, and that's not good. You want to limit 
> how much a hacker 
> can learn. 
> 
> It's sort of a close call since CDP is so helpful for troubleshooting, 
> though. How about the rest of you out there? Do you disable 
> CDP like some 
> security documents say to do? 
> 
> If often occurs to me these days that we spent the '80s and 
> '90s developing 
> all sorts of cool protocols to share info of all sorts, and 
> were spending 
> the '00s disabling most of them for security reasons. It's a 
> crazy world we 
> live in. 
> 
> Priscilla 
> 
> 
> > 
> > Regards, 
> > Lawrence 
> > 
> > 
> > 
> > ""Priscilla Oppenheimer"" wrote in 
> > message 
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... 
> > > Cisco Discovery Protocol (CDP) is a managment protocol that 
> > allows routers 
> > > and switches to tell each other about their IOS version, 
> > hardware 
> > platform, 
> > > and basic config info. Some security experts say to disable 
> > it because it 
> > > tells too much. 
> > > 
> > > It has nothing to do with bringing the serial interface 
> > up/up. You could 
> > use 
> > > it or you could not. The two routers on the HDLC link don't 
> > have to agree. 
> > > One could send CDP while the other doesn't and the link 
> > should still come 
> > > up/up, assuming everything is OK at the physical and 
> > data-link layers. 
> > > 
> > > It's too bad they used "no cdp enable" in that simple example 
> > with no 
> > > explanation. I don't think it's the default? So someone had 
> > to type it in, 
> > > so they should have explained it. 
> > > 
> > > Priscilla 
> > > 
> > > 
> > > Lawrence Law wrote: 
> > > > 
> > > > Dear all, 
> > > > 
> > > > 
> > > > From cisco configuration example 
> > > > 
> > > > 
> > > 
> > 
> http://www.cisco.com/en/US/tech/tk713/tk317/technologies_confi 
guration_examp 
> > > le09186a00800944ff.shtml 
> > > 
> > > I'm wondering that the line "no cdp enable" is required 
> for 
> > > both router 
> > > in order to make a serial connection up for back-to-back 
> > > connection. 
> > > 
> > > Regards, 
> > > Lawrence 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62853&t=62853
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



tftp question [7:62852]

2003-02-11 Thread supernet
I was told that it's possible to telnet to a router under user mode, and
then copy its running configuration. Is it possible?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62852&t=62852
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IOS for Home Lab [7:62830]

2003-02-11 Thread Mark W. Odette II
... it's been posted before that 12.1(5)T is supposed to be running on
the Routers in the CCIE Lab.  I have not attended the LAB, so I can't
say for sure.  I think it may even be listed on the Cisco Website for
the CCIE Track.

My advice- if you can afford it (and memory is really cheap), I would
max out the RAM and FLASH on all of your routers.  You might spend a
total of 300.00 USD on this, but it will be worth it.

-Original Message-
From: Azhar Teza [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 11, 2003 4:29 PM
To: [EMAIL PROTECTED]
Subject: IOS for Home Lab [7:62830]

I purchased some Cisco 4500/3810/2600 routers to setup the home lab.
They
all have old IOS and with only  4MB of flash for 4500s, but 3810s and
2600s
have 8MB of flash. I like to upgrade to atleast version 12.  Can you
guys
recommend what IOS will be best for the real CCIE Lab? By the way,  does
any
of you know which IOS version is used in real CCIE Labs? Regards, Teza

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62850&t=62830
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: explain these ACLs [7:62843]

2003-02-11 Thread The Long and Winding Road
comments  in line below


""Karagozian Sarkis""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Can someone explain what these ACLs do ???
> When applied to an interface (in)
>
> Interace e0
> !
> !
>   ip access-group 194 in


you sure about this one? see below.


> no ip redirects
> no ip unreachables
> no ip proxy-arp
> ip route-cache same-interface
> !
>access-list 194 deny   ip any any

this denies IP into the router from stations connected via E0. hope this is
an IPX segment :->

>access-list 195 deny   udp any gt 1024 any eq 1434
>access-list 195 permit ip any any

denies udp inquiries to any address with a destination port of 1434 - this
is the port that slammer slammed.


>access-list 196 deny   udp any gt 1024 any eq 1434
>access-list 196 permit ip any any


same as for 195

>
> These were applied since the SQL Worm attack...


195 and 196 where applied where exactly? all interfaces, one would think.


>
> Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62848&t=62843
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



AES! [7:62847]

2003-02-11 Thread Richard Tufaro
Anyone deployed AES in a large scale VPN rollout? If so, had any issues,
caveat's? Wondering if I should stick with 3des, or step it up a notch
and go with AES. All routers are deployed with code that supports it:
12.2(13)t1. Just wondering if its ready for prime time yet.

--Rich




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62847&t=62847
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT: New Instructor Experiences [7:62826]

2003-02-11 Thread John Jones
Hey, for those of us who teach technology for a living, as myself, we all
have those moments. What I find is that things don't go well when I get a
big head thinking that I've done this before and don't need to prepare as
much. It's as if I get humbled and have to work my way back up again to get
"in the groove". I have also discovered that the less you mention your
credentials and the more you teach what you know with a sincere concern for
the students' understanding, the more respect you receive and your message
gets across effectively. Show your students that you care that they learn
the material and want them to succeed. Then they will have a sincere
interest in learning. Since I have taken this approach, I haven't had one
student fall asleep yet!

Just my .02 for experience in front of countless tech classes...

Acer


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62846&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: New Instructor Experiences [7:62826]

2003-02-11 Thread Howard C. Berkowitz
>I don't know about you, but public speaking is one of the hardest skills
>I've had to learn.
>
>I've noticed that there are lots of 'fear-enhancing' factors that can
>become involved; they can vary from person to person - some speakers
>completely lose it when handling a difficult audience-member, or trying
>out new material, or typing/demoing while speaking.  For myself, it
>seems having a video-camera in the room will completely trip me up.  I
>can't tell you the number of times I've presented material well (good
>survey results and everything), only to #@%$& it up completely when
>having to record it for a Video-on-demand session.  Urg.  Makes me wish
>that they'd just use a handheld camera and not tell me it's in the room.
>:-(
>
I hear you, Frank.  One of the few really useful academic things for 
me was taking a dramatics minor in high school. It's not all gloom -- 
there are groups such as Toastmasters, which often have reasonably 
accessible breakfast or lunch meetings, that help a lot.

Two things tend to be a problem for me when teaching. I'm deaf in one 
ear, so my physical position vis-a-vis the students is important, as 
well as the amount of machine noise in the room.  Second, I often 
supplement the course materials, to the point that my time management 
may suffer.

I also try to do the course as stand-up comedy, which doesn't appeal 
to everyone.  Mind you, there was only one time I awakened someone, 
because he was snoring so badly that nobody could hear. He had me 
worried, as his sleep apnea was VERY obvious.

Interesting side effect, I've noticed, of certification.  Before 
there was any large push to certification, people really wanted the 
extra material. Increasingly, when I was teaching on a regular basis, 
students would complain, sometimes to my bosses, that I dared give 
them information that didn't strictly pertain to certifications -- 
such as the major changes in access list processing between IOS 10.2 
and 10.3.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62845&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco CWDM Experiences [7:62841]

2003-02-11 Thread Mike Bernico
Which solution are you looking at in particular?  Passive filters and
the ONS15454?  I don't think I'd call that CWDM really.  Something else
new?  

I'm mostly just curious.  I only have experience with the 15808 and the
metro 1500, but I'll help if I can.

The best bit of advice I could give is... optical is a whole different
world.  It's also very cool.  If you get heavily in to it you will have
to develop an entire new skill set.  Be warned :)


Mike


-Original Message-
From: Henry D. [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 11, 2003 7:21 PM
To: [EMAIL PROTECTED]
Subject: Cisco CWDM Experiences [7:62841]

Hi everyone,

I'm looking at some of the CWDM docs and this solution seems
to be a really good (read easy) way to increase the bandwidth between
sites with existing SMF. I don't have any DWDM experience, but looking
at this solution it would seem you don't need to do much in order
to achieve pretty substantial bandwidth increase.

Does anyone have any experience with this technology ?
Pretty much just looking to see how well this stuff really works
in the field. It doesn't seem like you can do much to monitor/manage
this solution which kind of makes me skeptical.

Any inputs welcomed !




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62844&t=62841
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



explain these ACLs [7:62843]

2003-02-11 Thread Karagozian Sarkis
Can someone explain what these ACLs do ???
When applied to an interface (in)

Interace e0
!
!
  ip access-group 194 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache same-interface
!
   access-list 194 deny   ip any any
   access-list 195 deny   udp any gt 1024 any eq 1434
   access-list 195 permit ip any any
   access-list 196 deny   udp any gt 1024 any eq 1434
   access-list 196 permit ip any any

These were applied since the SQL Worm attack...

Thanks 



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62843&t=62843
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: New Instructor Experiences [7:62826]

2003-02-11 Thread John Neiberger
""Tom Lisa""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> John,
>
> A good classroom experience begins with three things: preparation,
> preparation, preparation!  This is not to say that you didn't prepare,
> but each class requires additional preparation even if taught before.
> Another issue that arises is that every class has its own synergy.  The
> concepts that were readily assimilated by one group become more difficult
> to unravel than a Gordian Knot by the next.
>
> You may have been lulled into a false sense of security by the first
> couple of groups and then got blind-sided by the last.  I suspect that
> you felt your "explainer" was broken because you were only prepared to
> explain things in one way and ran into a group that needed it in another
> format.  Individuals have different learning modes (preferences).  A
> diagnostic instrument called VARK (Visual, Aural, Read/Write,
> Kinesthetic), developed by Neil Fleming, Lincoln University, Canterbury,
> New Zealand, shows how learning preferences affect the teaching process.
> If you prefer to learn in one mode, you tend to teach in that mode.
> However, if it doesn't match the preferred mode of the majority of your
> class, then you will have "one of those days."
>

Even though I think my biggest problem today was severe sleep deficit, you
may be onto something.  Each of these classes is a mixed bag of people:
technical and non-technical, mainframe vs. non-mainframe programmers,
support staff vs. design-oriented staff, technical middle management along
with non-technical upper management... you name it, they're throwing it all
at me and they're mixing up each group.  That makes it very difficult for
me; if I go too technical I'll completely lose the non-technical people, and
vice versa.  The nice thing is that this is only supposed to be an intro
level class.

Heck, it's barely a class.  I'm trying to cram an intro to TCP/IP and
general networking into three hours.  :-)  Generally, it's worked well
except for today.  I only have four more classes to go, spread out over the
next two months.  I'm definitely going to prepare differently from now on.
You are correct that my success last week made me prepare less this week.  I
should have prepared exactly the same, but I didn't and it showed.  I'm also
going to change some of my materials.  Yes, I created the materials from
scratch, which is an interesting ordeal in itself.  People who've never
written material for a class or written a lab scenario from scratch really
ought to try it sometime!  ;-)

Thanks to all for your comments and empathy,
John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62842&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco CWDM Experiences [7:62841]

2003-02-11 Thread Henry D.
Hi everyone,

I'm looking at some of the CWDM docs and this solution seems
to be a really good (read easy) way to increase the bandwidth between
sites with existing SMF. I don't have any DWDM experience, but looking
at this solution it would seem you don't need to do much in order
to achieve pretty substantial bandwidth increase.

Does anyone have any experience with this technology ?
Pretty much just looking to see how well this stuff really works
in the field. It doesn't seem like you can do much to monitor/manage
this solution which kind of makes me skeptical.

Any inputs welcomed !




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62841&t=62841
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: newbie: removing an ip route to loopback [7:62811]

2003-02-11 Thread Ladrach, Daniel E.
This is the address of the loopback.

conf t
int loopback 0
no ip address 10.0.0.X 255.255.255.0




Daniel Ladrach
CCNP, CCNA
WorldCom



-Original Message-
From: J. Johnson [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 11, 2003 12:23 PM
To: [EMAIL PROTECTED]
Subject: newbie: removing an ip route to loopback [7:62811]


Please pardon my newbieness ...

I have a router with this in the routing table:

Router#show ip route
 
 10.0.0.0/24 is subnetted, 1 subnets
 C   10.0.0.0 is directly connected, Loopback0
 
Router#

I would like to remove it.  However, the following (and several variations) 
doesn't do the trick:

Router(config)#no ip route 10.0.0.0 255.255.255.0 Loopback 0
%No matching route to delete
Router(config)# 

This command with other addresses works the way I would expect it to work. 
E.g. I can do "ip route 10.0.0.3 255.255.255.255 Loopback 0" and the route 
appears, and then "no ip route 10.0.0.3 255.255.255.255 Loopback 0" and the 
route is gone.  Presumably the difference is that the 10.0.0.0 address is a 
network address.  Is there a way to remove it?

This router is a 3620 shared by several people in a lab environment.  I 
don't know how this route got into the table.

James




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62840&t=62811
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE Study group in Chicago? [7:62777]

2003-02-11 Thread [EMAIL PROTECTED]
I hear ya on that one...  I'm just trying to find the time to hook up my
lab; so I can study for the CCNP.

-Original Message-
From: Fernandez, Tim [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 10, 2003 5:55 PM
To: [EMAIL PROTECTED]
Subject: RE: CCIE Study group in Chicago? [7:62777]


Hey, what about a CCNP Study Group in Chicago?

Timothy B. Fernandez
Network Technician
Technical Operations New York 2
Thomson Financial




-Original Message-
From: Chris Theiss [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 10, 2003 5:09 PM
To: [EMAIL PROTECTED]
Subject: Re: CCIE Study group in Chicago? [7:62777]


I'd be interested in joining one, or forming a new one.

Nguyen, David wrote:
> Any CCIE study groups here in the Chicago area?
> 
> Regards,
> 
> David
-- 
Chris Theiss
IPG WAN Group
[EMAIL PROTECTED]
(312) 425-6624




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62839&t=62777
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: New Instructor Experiences [7:62826]

2003-02-11 Thread Kaminski, Shawn G
John,

You may want to drown your disappointment in something a little stronger
than coffee. :-)

I volunteered to teach a small computer class at my daughter's school a
while back and I definitely had those days. It usually happened when there
were pressing issues at the office and I was anxious to finish the class so
I could start to resolve the issues. However, after a while I learned to
concentrate more on the class than the office!

In my opinion, it's just one of those things that happen occasionally.

Shawn K.

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 11, 2003 5:12 PM
To: [EMAIL PROTECTED]
Subject: OT: New Instructor Experiences [7:62826]

I just feel the need to rant/vent for a bit and I knew there were a
bunch of you who might be able to relate to this.  I've started teaching
a short, one-session general networking class for some of the people
here at the bank.  The first session, which was really just a runthrough
with a handful of students, went fairly well.  In fact, it went so well
that they increased the number of overall attendees to about 60 or so.

Last week I had another session that went exceptionally well, except
for a couple of students who really didn't want to be there.  I couldn't
have asked for it to go better, and my boss heard lots of good things
about it.  One person even said I should be a professor!  :-)  Now, that
brings us to today

Today I had an afternoon class, and in my opinion it sucked rotten
eggs.  I feel embarrassed to have been involved with it.I can't
think of too many ways in which it could have gone worse.  I rambled, I
flew through 2.5 hours of material in about an hour, I lost my place a
lot.  I'm not certain that I ever formed a train of thought longer than
a couple of cars, and I think even those trains were without engine and
caboose.

Have any of you other instructors had days like that?  As I even
mentioned in class, I felt like my 'explainer' was broken today, and it
certainly was.  I'm hoping that I could get some sympathy from other
instructors with similar experiences.  

Okay, I'm going to go drown my disappointment in some coffee!

John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62838&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: New Instructor Experiences [7:62826]

2003-02-11 Thread Tom Lisa
John,

A good classroom experience begins with three things: preparation,
preparation, preparation!  This is not to say that you didn't prepare,
but each class requires additional preparation even if taught before. 
Another issue that arises is that every class has its own synergy.  The
concepts that were readily assimilated by one group become more difficult
to unravel than a Gordian Knot by the next.

You may have been lulled into a false sense of security by the first
couple of groups and then got blind-sided by the last.  I suspect that
you felt your "explainer" was broken because you were only prepared to
explain things in one way and ran into a group that needed it in another
format.  Individuals have different learning modes (preferences).  A
diagnostic instrument called VARK (Visual, Aural, Read/Write,
Kinesthetic), developed by Neil Fleming, Lincoln University, Canterbury,
New Zealand, shows how learning preferences affect the teaching process. 
If you prefer to learn in one mode, you tend to teach in that mode. 
However, if it doesn't match the preferred mode of the majority of your
class, then you will have "one of those days."

If you're interested in learning more about it, you can go to the
National Learning & Teaching Forum at www.ntlf.com.  Click on the search
link and enter the search term VARK.  Teachers must always be prepared to
be multi-modal and have more than one way of explaining difficult
concepts (and sometimes even the simple ones).  I'm still searching for
the "One All-Inclusive" way of teaching sub-netting to products of our
marginally effective K-12 schools systems.  Basic math appears to be a
foreign concept to many of my students.

BTW, I still have days when I think my "explainer" is broke.  This
teaching gig is harder than it looks! :)

HTH,
Prof. Tom Lisa, CCAI
Community College of Southern Nevada
Cisco ATC/Regional Networking Academy
"Cunctando restituit rem"
 

John Neiberger wrote:

  I just feel the need to rant/vent for a bit and I knew there were a
  bunch of you who might be able to relate to this.  I've started
  teaching
  a short, one-session general networking class for some of the people
  here at the bank.  The first session, which was really just a
  runthrough
  with a handful of students, went fairly well.  In fact, it went so
  well
  that they increased the number of overall attendees to about 60 or
  so.

  Last week I had another session that went exceptionally well, except
  for a couple of students who really didn't want to be there.  I
  couldn't
  have asked for it to go better, and my boss heard lots of good things
  about it.  One person even said I should be a professor!  :-)  Now,
  that
  brings us to today

  Today I had an afternoon class, and in my opinion it sucked rotten
  eggs.  I feel embarrassed to have been involved with it.I can't
  think of too many ways in which it could have gone worse.  I rambled,
  I
  flew through 2.5 hours of material in about an hour, I lost my place
  a
  lot.  I'm not certain that I ever formed a train of thought longer
  than
  a couple of cars, and I think even those trains were without engine
  and
  caboose.

  Have any of you other instructors had days like that?  As I even
  mentioned in class, I felt like my 'explainer' was broken today, and
  it
  certainly was.  I'm hoping that I could get some sympathy from other
  instructors with similar experiences.

  Okay, I'm going to go drown my disappointment in some coffee!

  John
  [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62837&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: New Instructor Experiences [7:62826]

2003-02-11 Thread Logan, Harold
Hey man it happens. Some days it's like you've got a tap running into the
hoover dam, and it's your job to make sure everyone gets an 8 oz. glass of
water. Other days you've got that tap up and running, and the students want
to know about the Gulf of Mexico. My advice would be, if you have another
session with these same people, and if the next session is relevant to your
recent one that didn't go so hot, start off asking a couple questions of the
group that relate to the last session. There are many topics in networking
that just don't sink in after only one exposure, and there's nothing wrong
with somebody not picking everything up the first time.

Hell, you can even make fun of yourself if you're comfortable doing it. On
more than a couple occasions when I've covered ISDN and interesting traffic,
I've had to stop and say "Hey, who's the idiot that taught you guys access
lists???" The other thing I do to gauge how much is getting absorbed is
constantly encourage students to ask questions. They'll tell you what they
don't get, but they do so by asking questions.

By the way, if you find that you enjoy teaching, you might want to see if
there's a college in the area that participates in the Cisco Networking
Academy Program. Most community colleges love getting adjunct instructors
who have current industry experience.

Good luck,

Hal Logan CCAI -Original Message-
> From: John Neiberger [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 11, 2003 5:12 PM
> To: [EMAIL PROTECTED]
> Subject: OT: New Instructor Experiences [7:62826]
> 
> 
> I just feel the need to rant/vent for a bit and I knew there were a
> bunch of you who might be able to relate to this.  I've 
> started teaching
> a short, one-session general networking class for some of the people
> here at the bank.  The first session, which was really just a 
> runthrough
> with a handful of students, went fairly well.  In fact, it 
> went so well
> that they increased the number of overall attendees to about 60 or so.
> 
> Last week I had another session that went exceptionally well, except
> for a couple of students who really didn't want to be there.  
> I couldn't
> have asked for it to go better, and my boss heard lots of good things
> about it.  One person even said I should be a professor!  :-) 
>  Now, that
> brings us to today
> 
> Today I had an afternoon class, and in my opinion it sucked rotten
> eggs.  I feel embarrassed to have been involved with it.I can't
> think of too many ways in which it could have gone worse.  I 
> rambled, I
> flew through 2.5 hours of material in about an hour, I lost my place a
> lot.  I'm not certain that I ever formed a train of thought 
> longer than
> a couple of cars, and I think even those trains were without 
> engine and
> caboose.
> 
> Have any of you other instructors had days like that?  As I even
> mentioned in class, I felt like my 'explainer' was broken 
> today, and it
> certainly was.  I'm hoping that I could get some sympathy from other
> instructors with similar experiences.  
> 
> Okay, I'm going to go drown my disappointment in some coffee!
> 
> John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62836&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: New Instructor Experiences [7:62826]

2003-02-11 Thread John Neiberger
One thing that I've discovered is *very* distracting is if I see anyone
who looks bored, sleepy, irritated, whatever.  That will make me lose my
train of thought because I started to be concerned about *why* they
appear to be tired, bored, or whatever.  I then start to be even more
self-conscious, which causes me to talk fast and get even more
flustered.

Lots of fun!  :-)

John

>>> "Frank Jimenez"  2/11/03 4:27:08 PM >>>
I don't know about you, but public speaking is one of the hardest
skills
I've had to learn.

I've noticed that there are lots of 'fear-enhancing' factors that can
become involved; they can vary from person to person - some speakers
completely lose it when handling a difficult audience-member, or
trying
out new material, or typing/demoing while speaking.  For myself, it
seems having a video-camera in the room will completely trip me up.  I
can't tell you the number of times I've presented material well (good
survey results and everything), only to #@%$& it up completely when
having to record it for a Video-on-demand session.  Urg.  Makes me
wish
that they'd just use a handheld camera and not tell me it's in the
room.
:-(

Frank Jimenez, CCIE #5738
Systems Engineer
Cisco Systems, Inc.
[EMAIL PROTECTED] 




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf
Of
John Neiberger
Sent: Tuesday, February 11, 2003 4:12 PM
To: [EMAIL PROTECTED] 
Subject: OT: New Instructor Experiences [7:62826]


I just feel the need to rant/vent for a bit and I knew there were a
bunch of you who might be able to relate to this.  I've started
teaching
a short, one-session general networking class for some of the people
here at the bank.  The first session, which was really just a
runthrough
with a handful of students, went fairly well.  In fact, it went so
well
that they increased the number of overall attendees to about 60 or so.

Last week I had another session that went exceptionally well, except
for
a couple of students who really didn't want to be there.  I couldn't
have asked for it to go better, and my boss heard lots of good things
about it.  One person even said I should be a professor!  :-)  Now,
that
brings us to today

Today I had an afternoon class, and in my opinion it sucked rotten
eggs.  I feel embarrassed to have been involved with it.I can't
think of too many ways in which it could have gone worse.  I rambled,
I
flew through 2.5 hours of material in about an hour, I lost my place a
lot.  I'm not certain that I ever formed a train of thought longer
than
a couple of cars, and I think even those trains were without engine
and
caboose.

Have any of you other instructors had days like that?  As I even
mentioned in class, I felt like my 'explainer' was broken today, and
it
certainly was.  I'm hoping that I could get some sympathy from other
instructors with similar experiences.

Okay, I'm going to go drown my disappointment in some coffee!

John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62835&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: New Instructor Experiences [7:62826]

2003-02-11 Thread Frank Jimenez
I don't know about you, but public speaking is one of the hardest skills
I've had to learn.

I've noticed that there are lots of 'fear-enhancing' factors that can
become involved; they can vary from person to person - some speakers
completely lose it when handling a difficult audience-member, or trying
out new material, or typing/demoing while speaking.  For myself, it
seems having a video-camera in the room will completely trip me up.  I
can't tell you the number of times I've presented material well (good
survey results and everything), only to #@%$& it up completely when
having to record it for a Video-on-demand session.  Urg.  Makes me wish
that they'd just use a handheld camera and not tell me it's in the room.
:-(

Frank Jimenez, CCIE #5738
Systems Engineer
Cisco Systems, Inc.
[EMAIL PROTECTED]




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
John Neiberger
Sent: Tuesday, February 11, 2003 4:12 PM
To: [EMAIL PROTECTED]
Subject: OT: New Instructor Experiences [7:62826]


I just feel the need to rant/vent for a bit and I knew there were a
bunch of you who might be able to relate to this.  I've started teaching
a short, one-session general networking class for some of the people
here at the bank.  The first session, which was really just a runthrough
with a handful of students, went fairly well.  In fact, it went so well
that they increased the number of overall attendees to about 60 or so.

Last week I had another session that went exceptionally well, except for
a couple of students who really didn't want to be there.  I couldn't
have asked for it to go better, and my boss heard lots of good things
about it.  One person even said I should be a professor!  :-)  Now, that
brings us to today

Today I had an afternoon class, and in my opinion it sucked rotten
eggs.  I feel embarrassed to have been involved with it.I can't
think of too many ways in which it could have gone worse.  I rambled, I
flew through 2.5 hours of material in about an hour, I lost my place a
lot.  I'm not certain that I ever formed a train of thought longer than
a couple of cars, and I think even those trains were without engine and
caboose.

Have any of you other instructors had days like that?  As I even
mentioned in class, I felt like my 'explainer' was broken today, and it
certainly was.  I'm hoping that I could get some sympathy from other
instructors with similar experiences.

Okay, I'm going to go drown my disappointment in some coffee!

John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62834&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Checkpoint NG trial licence needed [7:62823]

2003-02-11 Thread Symon Thurlow
Chris, just call a checkpoint supplier and tell them you want to
evaluate it. You should get a CD pack with a license key. You can get a
30 day license key from that.

Symon

-Original Message-
From: Chris [mailto:[EMAIL PROTECTED]] 
Sent: 11 February 2003 21:04
To: [EMAIL PROTECTED]
Subject: OT: Checkpoint NG trial licence needed [7:62823]


Hi all

I know it's OT but I hope some of you have a clue for this. Where from I
can get a trial license for Checkpoint NG ? I already asked this
question on their news site but now answer (it was the second posting).
I don't understand how can u get certified unless you take the training.

Thank you in advance
Chris
=

 This email has been content filtered and
 subject to spam filtering. If you consider
 this email is unsolicited please forward
 the email to [EMAIL PROTECTED] and
 request that the sender's domain be
 blocked from sending any further emails.

=




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62833&t=62823
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: New Instructor Experiences [7:62826]

2003-02-11 Thread John Neiberger
>John,
>
>Sounds like you had what I call a "Floating Talking Head" experience. 
It's
>happened to me before.
>
>Basically, you are in the middle of teaching, presenting, or briefing,
and
>you experience a trippy sensation of almost being outside yourself. 
As you
>talk, your self awareness gets distorted, and you become very aware
that you
>are forming sounds with your mouth.  You are like "whoa!  I am talking
about
>stuff!"  to people!  Whoa!  This of causes messes up whatever it was
you
>were trying to say, or you speed up, or get goofy.
>

This is *exactly* what it was like!  It was frustrating, but I can only
blame myself.  I haven't been getting much sleep lately and I think
that's why I was zoning out.  Heck, I'm so sleep right now that's it's
hard to focus on writing this email.  Imagine trying to teach a class in
this condition!

Well, I'm certainly glad there are others who can relate, just as I
suspected.

Time for some more coffee before I nod off here at my desk.

Thanks!
John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62832&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CS11152 port channel? [7:62831]

2003-02-11 Thread Sam Sneed
I want to connect a cs11152 to a cisco switch. I want to have over 100MB
over the link. Is there anyway to do the equivalent of prot channeling on 2
links?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62831&t=62831
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IOS for Home Lab [7:62830]

2003-02-11 Thread Azhar Teza
I purchased some Cisco 4500/3810/2600 routers to setup the home lab.  They
all have old IOS and with only  4MB of flash for 4500s, but 3810s and 2600s
have 8MB of flash. I like to upgrade to atleast version 12.  Can you guys
recommend what IOS will be best for the real CCIE Lab? By the way,  does any
of you know which IOS version is used in real CCIE Labs? Regards, Teza

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62830&t=62830
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: New Instructor Experiences [7:62826]

2003-02-11 Thread Charles Riley
John,

Sounds like you had what I call a "Floating Talking Head" experience.  It's
happened to me before.

Basically, you are in the middle of teaching, presenting, or briefing, and
you experience a trippy sensation of almost being outside yourself.  As you
talk, your self awareness gets distorted, and you become very aware that you
are forming sounds with your mouth.  You are like "whoa!  I am talking about
stuff!"  to people!  Whoa!  This of causes messes up whatever it was you
were trying to say, or you speed up, or get goofy.

There is no cure, though some professors try leather elbow patches and a
pipe.  Best just get some cookies and coffee and chalk it up.   Tomorrow, if
I were you, I'd review what you were covering when you experienced FTH just
to ensure that your students are on the same sheet of music.

HTH,

Charles






""John Neiberger""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I just feel the need to rant/vent for a bit and I knew there were a
> bunch of you who might be able to relate to this.  I've started teaching
> a short, one-session general networking class for some of the people
> here at the bank.  The first session, which was really just a runthrough
> with a handful of students, went fairly well.  In fact, it went so well
> that they increased the number of overall attendees to about 60 or so.
>
> Last week I had another session that went exceptionally well, except
> for a couple of students who really didn't want to be there.  I couldn't
> have asked for it to go better, and my boss heard lots of good things
> about it.  One person even said I should be a professor!  :-)  Now, that
> brings us to today
>
> Today I had an afternoon class, and in my opinion it sucked rotten
> eggs.  I feel embarrassed to have been involved with it.I can't
> think of too many ways in which it could have gone worse.  I rambled, I
> flew through 2.5 hours of material in about an hour, I lost my place a
> lot.  I'm not certain that I ever formed a train of thought longer than
> a couple of cars, and I think even those trains were without engine and
> caboose.
>
> Have any of you other instructors had days like that?  As I even
> mentioned in class, I felt like my 'explainer' was broken today, and it
> certainly was.  I'm hoping that I could get some sympathy from other
> instructors with similar experiences.
>
> Okay, I'm going to go drown my disappointment in some coffee!
>
> John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62829&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Checkpoint NG trial licence needed [7:62823]

2003-02-11 Thread Jim Brown
Unless you have a relationship with a reseller they will charge you $100
for an evaluation license and media.

I have a few extra licenses. I would be willing to give you one. The
evaluation licenses are only good for 30 days. If this works for you,
drop me a line.

-Original Message-
From: Chris [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 11, 2003 2:04 PM
To: [EMAIL PROTECTED]
Subject: OT: Checkpoint NG trial licence needed [7:62823]


Hi all

I know it's OT but I hope some of you have a clue for this. Where from I
can get a trial license for Checkpoint NG ? I already asked this
question on their news site but now answer (it was the second posting).
I don't understand how can u get certified unless you take the training.

Thank you in advance
Chris




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62828&t=62823
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Checkpoint NG trial licence needed [7:62823]

2003-02-11 Thread Charles Riley
Chris,

Got this off of www.firewall-1.org,  not exactly what you are looking for
but at least you can play with the GUI until CP comes through

You need an eval licence to have a fully functional product for 30 days. But
if what you want is to see the GUI interface (not functionall at all), you
can download the GUI, install it on a Windows Machine, and set the server as
"*local". The SMART Dashboard (formerly known as Policy Editor) will open
with a demo configuration.


HTH,

Charles



""Chris""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi all
>
> I know it's OT but I hope some of you have a clue for this. Where from I
> can get a trial license for Checkpoint NG ? I already asked this
> question on their news site but now answer (it was the second posting).
> I don't understand how can u get certified unless you take the training.
>
> Thank you in advance
> Chris




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62827&t=62823
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE Lab - I have seen he future and it is.... [7:62776]

2003-02-11 Thread Logan, Harold
I think your problem with the dipping dots analogy is that dipping dots have
to be served from the bottom up; there's no such thing as Top-Down Dipping
Dot Design.

Hal

> -Original Message-
> From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 11, 2003 2:39 PM
> To: [EMAIL PROTECTED]
> Subject: Re: CCIE Lab - I have seen he future and it is [7:62776]
> 
> 
> Glad you're not depressed and are continuing your quest. You 
> should consider
> being a writer. Your writing is really good, although the 
> dipping dots ice
> cream analogy is just not working for me. I just can't 
> imagine freeze-dried
> ice cream for one thing. Does it use dotted-decimal notation? ;-)
> 
> Priscilla
> 
> Charles Riley wrote:
> > 
> > Thanks to all who wrote in.  My Kafkaseque post yesterday
> > apparently touched
> > a chord (or nerve) with several folks.  I was hoping to start
> > an OT
> > discussion on those Dippin' Dots ice cream, and draw analogies
> > to
> > networking.  Heck, I would even settle for Howard asking a
> > variation of his
> > favorite question:  "what is the ice cream you are trying to
> > eat?"
> > 
> > In all seriousness, I haven't abandoned all hope yet, it has
> > just lessened
> > in importance and intensity for me. In response to CN's
> > question,  I have
> > attempted the lab at least once, Brussels, way back when the
> > lab was a two
> > day lab, and the numbers were still quad digits.Without
> > violating the NDA,
> > let's just say that  I will never forgive ISDN for what it did
> > to me.
> > 
> > As far as my motives for CCIE chasing, the main reason I am
> > persisting is
> > that not only have I invested time, money, and freeze dried ice
> > cream, but
> > the CCIE quest motivates me to study topics that I don't
> > necessarily deal
> > with on a daily basis, and to practice exotic configurations
> > with those that
> > I do.  OSPF through a GRE tunnel over an ISDN DBU to the
> > Dippin' Dots
> > website, anyone?
> > 
> > Thanks,
> > 
> > Charles
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > ""Cisco Nuts""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Hello Charles,
> > >
> > > With due respect I ask, why did you abandon your quest for
> > the CCIE? I am
> > > curious as to how many times you actually hit the Lab?
> > >
> > > Sincerely,
> > >
> > > CN
> > >
> > > >From: "Charles Riley" >Reply-To: "Charles Riley" >To:
> > > [EMAIL PROTECTED] >Subject: Re: CCIE Lab - I have seen he
> > future and
> > > it is [7:62776] >Date: Mon, 10 Feb 2003 22:19:54 GMT >
> > >Chuck, >
> > > >Your post reminds me of those weird little ice cream stands
> > that I
> > > sometimes >see at the mall and various carnivals. It's called
> > something
> > > like "Dipping >Dots - The Ice Cream of the Future". The
> > initial human
> > > instinct is much >like the Cro-Magnon humanoids encountering
> > the monolith
> > > at the beginning of >2001: A Space Odyssey (sp): jump up and
> > down with
> > > excitement until you >realize it's just freeze dried ice
> > cream. >
> > > >Rounding out that analogy, the CCIE of the future will
> > probably be
> > > reduced >to being the CCNP of today. Regardless, I have spent
> > too much
> > > time and >money to abandon the quest for CCIE now, but
> > frankly, if I
> > > hadn't invested >as much as I have, I would most likely
> > abandon the quest
> > > in favor of >broadening into other areas. I really don't see
> > much market
> > > value for the >CCIE anymore, especially with Cisco hellbent
> > on making it
> > > a meatgrinding >cash cow. Your java console and "one way only
> > to
> > > configure" experience kind >of bears this out. > >Sorry for
> > the
> > > depressing post, just wanted to share. > >Charles > > > > >
> > >""The Long
> > > and Winding Road"" wrote in >message
> > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Been
> > spending this
> > > weekend on what was once the Cisco Advanced SE Training > > (
> > ASET ) set
> > > of labs. These are available for those whose Cisco account
> > >team > >
> > > approves - there are a few conditions which can be found in
> > the wee
> > > places > > of certification training. > > > > The program is
> > run by Lab
> > > Gear ( the only link I have is www.labgear.net, > > but > >
> > this is a
> > > login page ) There are a number of labs of CCIE level, look,
> > and > >
> > > feel. > > > > Supposed to be real equipment, but the access
> > is via java
> > > script windows, > > not terminal emulation. This makes for
> > some
> > > interesting situations. The > > windows show or provide
> > output only when
> > > they are active. So if you had >two > > router sessions open,
> > and you
> > > made changes on one router that would >generate > > systems
> > messages of
> > > one sort or another you would not see those messages >on > >
> > the other.
> > > also, I have yet to find a way to generate output from
> > >debugging > >
> > > commands. Things like term mon and l

OT: New Instructor Experiences [7:62826]

2003-02-11 Thread John Neiberger
I just feel the need to rant/vent for a bit and I knew there were a
bunch of you who might be able to relate to this.  I've started teaching
a short, one-session general networking class for some of the people
here at the bank.  The first session, which was really just a runthrough
with a handful of students, went fairly well.  In fact, it went so well
that they increased the number of overall attendees to about 60 or so.

Last week I had another session that went exceptionally well, except
for a couple of students who really didn't want to be there.  I couldn't
have asked for it to go better, and my boss heard lots of good things
about it.  One person even said I should be a professor!  :-)  Now, that
brings us to today

Today I had an afternoon class, and in my opinion it sucked rotten
eggs.  I feel embarrassed to have been involved with it.I can't
think of too many ways in which it could have gone worse.  I rambled, I
flew through 2.5 hours of material in about an hour, I lost my place a
lot.  I'm not certain that I ever formed a train of thought longer than
a couple of cars, and I think even those trains were without engine and
caboose.

Have any of you other instructors had days like that?  As I even
mentioned in class, I felt like my 'explainer' was broken today, and it
certainly was.  I'm hoping that I could get some sympathy from other
instructors with similar experiences.  

Okay, I'm going to go drown my disappointment in some coffee!

John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62826&t=62826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Why disable cdp for back-to-back serial connec [7:62798]

2003-02-11 Thread Logan, Harold
Over a leased line I can't see the harm in leaving it running. If someone
manages to get into your router, there's very little target enumeration they
can do with CDP that can't be done by other means. Since the point-to-point
link is likely to have a /30 (or /31 if they're running 12.2) mask on it,
it's not going to be a stretch to figure out the other router's IP.

While disabling CDP is certainly a sound practice on LAN interfaces, we also
disable it on our switched WAN connections on general principles. That isn't
a magic bullet by any means though, disabling CDP is security through
obscurity more than anything else. If you're concerned about unauthorized
access to your routers, then you should consider running access classes on
your vty lines and AAA so you can audit access to the routers, if you aren't
already.



> -Original Message-
> From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 11, 2003 1:12 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Why disable cdp for back-to-back serial connec [7:62798]
> 
> 
> Lawrence Law wrote:
> > 
> > Dear Priscilla,
> > 
> > Thank you for your clear explaination.
> > 
> > May be it is better to disable cdp for low speed link, and
> > security issue.
> 
> CDP uses very little bandwidth, so unless it's a really 
> low-speed link, I
> wouldn't turn it off for that reason. Regarding security, if 
> it's a private
> point-to-point HDLC link, then security probably isn't too 
> much of an issue.
> It would be hard for a hacker to see the packets.
> 
> On the other hand, if the hacker somehow got into a router 
> that was running
> CDP on any of its interfaces, then the hacker could learn 
> about one or more
> additional routers, and that's not good. You want to limit 
> how much a hacker
> can learn.
> 
> It's sort of a close call since CDP is so helpful for troubleshooting,
> though. How about the rest of you out there? Do you disable 
> CDP like some
> security documents say to do?
> 
> If often occurs to me these days that we spent the '80s and 
> '90s developing
> all sorts of cool protocols to share info of all sorts, and 
> were spending
> the '00s disabling most of them for security reasons. It's a 
> crazy world we
> live in.
> 
> Priscilla
> 
> 
> > 
> > Regards,
> > Lawrence
> > 
> > 
> > 
> > ""Priscilla Oppenheimer""  wrote in
> > message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Cisco Discovery Protocol (CDP) is a managment protocol that
> > allows routers
> > > and switches to tell each other about their IOS version,
> > hardware
> > platform,
> > > and basic config info. Some security experts say to disable
> > it because it
> > > tells too much.
> > >
> > > It has nothing to do with bringing the serial interface
> > up/up. You could
> > use
> > > it or you could not. The two routers on the HDLC link don't
> > have to agree.
> > > One could send CDP while the other doesn't and the link
> > should still come
> > > up/up, assuming everything is OK at the physical and
> > data-link layers.
> > >
> > > It's too bad they used "no cdp enable" in that simple example
> > with no
> > > explanation. I don't think it's the default? So someone had
> > to type it in,
> > > so they should have explained it.
> > >
> > > Priscilla
> > >
> > >
> > > Lawrence Law wrote:
> > > >
> > > > Dear all,
> > > >
> > > >
> > > > From cisco configuration example
> > > >
> > > >
> > >
> >
> http://www.cisco.com/en/US/tech/tk713/tk317/technologies_confi
guration_examp
> > > le09186a00800944ff.shtml
> > >
> > > I'm wondering that the line "no cdp enable" is required
> for
> > > both router
> > > in order to make a serial connection up for back-to-back
> > > connection.
> > >
> > > Regards,
> > > Lawrence




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62825&t=62798
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Checkpoint NG trial licence needed [7:62823]

2003-02-11 Thread Chris
Hi all

I know it's OT but I hope some of you have a clue for this. Where from I
can get a trial license for Checkpoint NG ? I already asked this
question on their news site but now answer (it was the second posting).
I don't understand how can u get certified unless you take the training.

Thank you in advance
Chris




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62823&t=62823
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



==>>Multilink with ppp [7:62822]

2003-02-11 Thread Joupin
Hi

What would be happen if i run a Multilink ppp over two unequal serial link
between two routers ?

1. It won`t come up
2. It will come up but with the amount of lower link cross two

www.joupin.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62822&t=62822
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE Lab - I have seen he future and it is.... [7:62776]

2003-02-11 Thread Logan, Harold
I disagree, it sounds to me like Chuck is pursuing the IE for the right
reasons. If his goal was to learn enough to pass the lab, and he has learned
most of what he set out to learn, I can't really fault him for being
discouraged. It's very frustrating having spent months or even years
learning how to do 4-way IGP redistribution with no routing loops and all
those other difficult but possible scenarios we subject ourself to, only to
fail the lab because in a low-time high-stress environment you couldn't
think of which OSPF over frame config would meet the bassackwards
requirements on the lab.

It's Cisco's program, and they can do whatever they want with it. But my
learning curve has drastically changed since I started studying for the lab,
and there are other pursuits that I'd like to go after once I'm done with
the lab. Really my primary motivation at this point is that I'm not a
quitter, and I want to finish what I started. I'm not pursuing the IE so I
can get a better job or so I can get promoted at my current one. I teach
CCNA and CCNP classes, and when I pass the lab I'll still be teaching CCNA
and CCNP classes. Having studied for the lab helps me do a much better job
as an instructor, but having a number behind my name won't make a lick of
difference to anyone but me.

> -Original Message-
> From: Amazing [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 10, 2003 11:13 PM
> To: [EMAIL PROTECTED]
> Subject: Re: CCIE Lab - I have seen he future and it is [7:62776]
> 
> 
> actually, i think you have it backwardsthe CCNP of 
> tomorrow will be the
> CCIE of todayCCC tests are getting harder...the bar is 
> being raised
> 
> if what you state is truly the way you truly feel, then you 
> were in pursuit
> of the CCIE for the wrong reason in the first place.
> 
> sorry you're so depressed.
> 
> 
> ""Charles Riley""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Chuck,
> >
> > Your post reminds me of those weird little ice cream stands that I
> sometimes
> > see at the mall and various carnivals.  It's called something like
> "Dipping
> > Dots - The Ice Cream of the Future".  The initial human 
> instinct is much
> > like the Cro-Magnon humanoids encountering the monolith  at 
> the beginning
> of
> > 2001: A Space Odyssey (sp):  jump up and down with 
> excitement until you
> > realize it's just freeze dried ice cream.
> >
> > Rounding out that analogy, the CCIE of the future will 
> probably be reduced
> > to being the CCNP of today.  Regardless, I have spent too 
> much time and
> > money to abandon the quest for CCIE now, but frankly, if I 
> hadn't invested
> > as much as I have, I would most likely abandon the quest in favor of
> > broadening into other areas.  I really don't see much 
> market value for the
> > CCIE anymore, especially with Cisco hellbent on making it a 
> meatgrinding
> > cash cow. Your java console and "one way only to configure" 
> experience
> kind
> > of bears this out.
> >
> > Sorry for the depressing post, just wanted to share.
> >
> > Charles
> >
> >
> >
> >
> >
> > ""The Long and Winding Road""  wrote in
> > message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Been spending this weekend on what was once the Cisco Advanced SE
> Training
> > > ( ASET ) set of labs. These are available for those whose 
> Cisco account
> > team
> > > approves - there are a few conditions which can be found 
> in the wee
> places
> > > of certification training.
> > >
> > > The program is run by Lab Gear ( the only link I have is
> www.labgear.net,
> > > but
> > > this is a login page ) There are a number of labs of CCIE 
> level, look,
> and
> > > feel.
> > >
> > > Supposed to be real equipment, but the access is via java script
> windows,
> > > not terminal emulation. This makes for some interesting 
> situations. The
> > > windows show or provide output only when they are active. 
> So if you had
> > two
> > > router sessions open, and you made changes on one router 
> that would
> > generate
> > > systems messages of one sort or another you would not see 
> those messages
> > on
> > > the other. also, I have yet to find a way to generate output from
> > debugging
> > > commands. Things like term mon and logging of one kind or 
> another have
> not
> > > been successful. so no debug ip routing and debug ip ospf adj.
> > >
> > > As with the real lab, there are a series of tasks to be completed.
> Grading
> > > is done via a script.  This is the point of most 
> interest. Actually, I
> > > suspect a lot of the current CCIE Lab grading is done 
> using scripting
> > tools.
> > > I believe the proctors still physically examine equipment 
> configurations
> > for
> > > some things, but I could be wrong.
> > >
> > > It is of interest because to judge from the script 
> outputs I am seeing,
> > > there appears to be an assumption that there is one and 
> only one way to
> do
> > > things. I'm not sure this is always true. I am not sure that this
>

RE: Monitoring Memory Utilization(%) on a router. [7:62800]

2003-02-11 Thread Priscilla Oppenheimer
[EMAIL PROTECTED] wrote:
> 
> Hi,
> 
> 1) i do a "show memory" on a cisco 26xx router. It shows me the
> Total
> Processor Memory and Total IO memory.
> When i add up these 2 values, why is it not equal to total
> amount of DRAM in
> your router (as shown by sh ver)???

Total is the total amount of memory in bytes available for the processor
after the Cisco IOS software is loaded. It will be less than the DRAM
assuming you have a router that loads IOS into memory.

I can't answer your MIBs question. Anyone else?

Priscilla


> 
> 2)Assuming the "sh memory" output does not give us the correct
> picture about
> memory utilization, which MIBs and objects should we monitor to
> get the
> memory utilization( as a %)of the router?
> Or can we atleast get the "free memory" , "used memory" or
> "total memory"
> via SNMP and using MIB expressions, we can compute the Memory
> utilization as
> a %??What are the MIBs and objects to get this info?
> 
> Cheers
> Simon
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62818&t=62800
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE Lab - I have seen he future and it is.... [7:62776]

2003-02-11 Thread Priscilla Oppenheimer
Glad you're not depressed and are continuing your quest. You should consider
being a writer. Your writing is really good, although the dipping dots ice
cream analogy is just not working for me. I just can't imagine freeze-dried
ice cream for one thing. Does it use dotted-decimal notation? ;-)

Priscilla

Charles Riley wrote:
> 
> Thanks to all who wrote in.  My Kafkaseque post yesterday
> apparently touched
> a chord (or nerve) with several folks.  I was hoping to start
> an OT
> discussion on those Dippin' Dots ice cream, and draw analogies
> to
> networking.  Heck, I would even settle for Howard asking a
> variation of his
> favorite question:  "what is the ice cream you are trying to
> eat?"
> 
> In all seriousness, I haven't abandoned all hope yet, it has
> just lessened
> in importance and intensity for me. In response to CN's
> question,  I have
> attempted the lab at least once, Brussels, way back when the
> lab was a two
> day lab, and the numbers were still quad digits.Without
> violating the NDA,
> let's just say that  I will never forgive ISDN for what it did
> to me.
> 
> As far as my motives for CCIE chasing, the main reason I am
> persisting is
> that not only have I invested time, money, and freeze dried ice
> cream, but
> the CCIE quest motivates me to study topics that I don't
> necessarily deal
> with on a daily basis, and to practice exotic configurations
> with those that
> I do.  OSPF through a GRE tunnel over an ISDN DBU to the
> Dippin' Dots
> website, anyone?
> 
> Thanks,
> 
> Charles
> 
> 
> 
> 
> 
> 
> 
> ""Cisco Nuts""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hello Charles,
> >
> > With due respect I ask, why did you abandon your quest for
> the CCIE? I am
> > curious as to how many times you actually hit the Lab?
> >
> > Sincerely,
> >
> > CN
> >
> > >From: "Charles Riley" >Reply-To: "Charles Riley" >To:
> > [EMAIL PROTECTED] >Subject: Re: CCIE Lab - I have seen he
> future and
> > it is [7:62776] >Date: Mon, 10 Feb 2003 22:19:54 GMT >
> >Chuck, >
> > >Your post reminds me of those weird little ice cream stands
> that I
> > sometimes >see at the mall and various carnivals. It's called
> something
> > like "Dipping >Dots - The Ice Cream of the Future". The
> initial human
> > instinct is much >like the Cro-Magnon humanoids encountering
> the monolith
> > at the beginning of >2001: A Space Odyssey (sp): jump up and
> down with
> > excitement until you >realize it's just freeze dried ice
> cream. >
> > >Rounding out that analogy, the CCIE of the future will
> probably be
> > reduced >to being the CCNP of today. Regardless, I have spent
> too much
> > time and >money to abandon the quest for CCIE now, but
> frankly, if I
> > hadn't invested >as much as I have, I would most likely
> abandon the quest
> > in favor of >broadening into other areas. I really don't see
> much market
> > value for the >CCIE anymore, especially with Cisco hellbent
> on making it
> > a meatgrinding >cash cow. Your java console and "one way only
> to
> > configure" experience kind >of bears this out. > >Sorry for
> the
> > depressing post, just wanted to share. > >Charles > > > > >
> >""The Long
> > and Winding Road"" wrote in >message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Been
> spending this
> > weekend on what was once the Cisco Advanced SE Training > > (
> ASET ) set
> > of labs. These are available for those whose Cisco account
> >team > >
> > approves - there are a few conditions which can be found in
> the wee
> > places > > of certification training. > > > > The program is
> run by Lab
> > Gear ( the only link I have is www.labgear.net, > > but > >
> this is a
> > login page ) There are a number of labs of CCIE level, look,
> and > >
> > feel. > > > > Supposed to be real equipment, but the access
> is via java
> > script windows, > > not terminal emulation. This makes for
> some
> > interesting situations. The > > windows show or provide
> output only when
> > they are active. So if you had >two > > router sessions open,
> and you
> > made changes on one router that would >generate > > systems
> messages of
> > one sort or another you would not see those messages >on > >
> the other.
> > also, I have yet to find a way to generate output from
> >debugging > >
> > commands. Things like term mon and logging of one kind or
> another have
> > not > > been successful. so no debug ip routing and debug ip
> ospf adj. >
> > > > > As with the real lab, there are a series of tasks to be
> completed.
> > Grading > > is done via a script. This is the point of most
> interest.
> > Actually, I > > suspect a lot of the current CCIE Lab grading
> is done
> > using scripting >tools. > > I believe the proctors still
> physically
> > examine equipment configurations >for > > some things, but I
> could be
> > wrong. > > > > It is of interest because to judge from the
> script outputs
> > I am seeing, > > there appears to be an assumption that there
> is one and
> > only one w

Re: Monitoring Memory Utilization(%) on a router. [7:62800]

2003-02-11 Thread [EMAIL PROTECTED]
Could you send us the result of the `show memory` and `show version`.
Maybe it helps the discussion.





"[EMAIL PROTECTED]" @groupstudy.com em 11/02/2003
12:42:37

Favor responder a "[EMAIL PROTECTED]" 

Enviado Por:  [EMAIL PROTECTED]


Para:  [EMAIL PROTECTED]
cc:

Assunto:Monitoring Memory Utilization(%) on a router. [7:62800]


Hi,

1) i do a "show memory" on a cisco 26xx router. It shows me the Total
Processor Memory and Total IO memory.
When i add up these 2 values, why is it not equal to total amount of DRAM
in
your router (as shown by sh ver)???

2)Assuming the "sh memory" output does not give us the correct picture
about
memory utilization, which MIBs and objects should we monitor to get the
memory utilization( as a %)of the router?
Or can we atleast get the "free memory" , "used memory" or "total memory"
via SNMP and using MIB expressions, we can compute the Memory utilization
as
a %??What are the MIBs and objects to get this info?

Cheers
Simon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62814&t=62800
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BGP exam study recommendations [7:62784]

2003-02-11 Thread Howard C. Berkowitz
At 4:11 AM + 2/11/03, Peter van Oene wrote:
>At 11:40 PM 2/10/2003 +, Peter Walker wrote:
>>Folks
>>
>>I am wondering if anyone has any recommendations for BGP study. I am
>>booked in for the BGP beta exam on Friday and still dont feel
>>comfortable with my level of BGP knowledge.  I have read the following
>>over the last few months
>>
>>  Halabi - Internet Routing Architectures.
>>  Doyle Vol 2 (BGP sections)
>>  John Stewart III (BGP4 book)
>>  William Parkhurst (The RFC stuff at the back
>>  and some of the command reference)
>>
>>I am going to go back and reread some of Halabi, all of the Parkhurst
>>command reference chapters and probably some of the RFCs.

As to the RFCs -- navigate to the IDR Working Group at www.ietf.org, 
and look at some of the newer documents on BGP.  In particular, 
download the most recent draft of the BGP specification (think it's 
18, but might not be).  That draft is much closer to industry 
implementation than RFC 1771.

>  >
>>Does anyone have any additional 'must-read' references that I should
>>look at before Friday? I realise that I have all the basic info that I
>>need and, to be honest, feel that I could pass the test already. However
>>I am one of those people that want to understand things at the
>>gut/instinct level and I really dont feel that I am at that point yet.
>
>If you read all this stuff and still don't understand BGP the way you would
>like to, more books likely aren't what you need.  I would focus more on
>hands on work.  Many folks learn better by doing than reading (me for one
>:).  If you are a Certificationzone subscriber, Howard Berkowitz has a
>three tutorial set on BGP that come with some labs to help illustrate
>points which might help.  But I'm sure just working through some configs on
>a lab while following along with your reading material might be the best
bet.
>

BGP didn't truly make sense to me until I studied routing policy.  A 
good starting site for lots of tutorials is www.radb.org.  The RFC 
"Using RPSL in Practice" and the various RPSL tutorials are good 
starts to understand what you are trying to accomplish with your 
policy.

There's some freeware such as RtConfig on the site, which will 
translate some routing policy into Cisco config language.  It may not 
support some of the newer features, and you may not have time to set 
it up by Friday.

My Certzone tutorial, of course, is strictly Cisco oriented.  I've 
also written two books, WAN Survival Guide and Building Service 
Provider Networks, that focus on "what problem are you trying to 
solve", respectively, from the enterprise and carrier perspective. 
The latter goes more deeply into BGP case studies, but does not have 
specific Cisco commands.

>
>
>>Any other suggestions?
>>
>>Peter Walker
>>  CISSP, CSS1, CC[NID]P, etc




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62813&t=62784
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Port Authority [7:62820]

2003-02-11 Thread Steve Smith
Has anyone used commdevises.com  Port Authority for remote console mgt?
Has anyone used anything like it that works as good or better, Any input
would be helpful.

Thanks,

Steve




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62820&t=62820
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cat IOS recommendation [7:62819]

2003-02-11 Thread Richard Tufaro
Can anyone recommend a stable native IOS with IPX support for a Cat 6000
running an MFSC 2 / Sup2?

--Rich




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62819&t=62819
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Why disable cdp for back-to-back serial connec [7:62798]

2003-02-11 Thread Priscilla Oppenheimer
Lawrence Law wrote:
> 
> Dear Priscilla,
> 
> Thank you for your clear explaination.
> 
> May be it is better to disable cdp for low speed link, and
> security issue.

CDP uses very little bandwidth, so unless it's a really low-speed link, I
wouldn't turn it off for that reason. Regarding security, if it's a private
point-to-point HDLC link, then security probably isn't too much of an issue.
It would be hard for a hacker to see the packets.

On the other hand, if the hacker somehow got into a router that was running
CDP on any of its interfaces, then the hacker could learn about one or more
additional routers, and that's not good. You want to limit how much a hacker
can learn.

It's sort of a close call since CDP is so helpful for troubleshooting,
though. How about the rest of you out there? Do you disable CDP like some
security documents say to do?

If often occurs to me these days that we spent the '80s and '90s developing
all sorts of cool protocols to share info of all sorts, and were spending
the '00s disabling most of them for security reasons. It's a crazy world we
live in.

Priscilla


> 
> Regards,
> Lawrence
> 
> 
> 
> ""Priscilla Oppenheimer""  wrote in
> message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Cisco Discovery Protocol (CDP) is a managment protocol that
> allows routers
> > and switches to tell each other about their IOS version,
> hardware
> platform,
> > and basic config info. Some security experts say to disable
> it because it
> > tells too much.
> >
> > It has nothing to do with bringing the serial interface
> up/up. You could
> use
> > it or you could not. The two routers on the HDLC link don't
> have to agree.
> > One could send CDP while the other doesn't and the link
> should still come
> > up/up, assuming everything is OK at the physical and
> data-link layers.
> >
> > It's too bad they used "no cdp enable" in that simple example
> with no
> > explanation. I don't think it's the default? So someone had
> to type it in,
> > so they should have explained it.
> >
> > Priscilla
> >
> >
> > Lawrence Law wrote:
> > >
> > > Dear all,
> > >
> > >
> > > From cisco configuration example
> > >
> > >
> >
>
http://www.cisco.com/en/US/tech/tk713/tk317/technologies_configuration_examp
> > > le09186a00800944ff.shtml
> > >
> > > I'm wondering that the line "no cdp enable" is required
> for
> > > both router
> > > in order to make a serial connection up for back-to-back
> > > connection.
> > >
> > > Regards,
> > > Lawrence
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62817&t=62798
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Simple Ip issue (need help) [7:62728]

2003-02-11 Thread Monu Sekhon
Thanx all for giving information
But I would like to clarify that I was pinging remote side and I was able
too and i checked debugs also on both side.
IP Packets are going successfully through the link.
But why IOS doesnoyt give error , dont know the reason for that.
anyway thanx I think nothing more input anybody can give so closing this
issue.If still anbody wants to share some idea can do so .
Thanx once again.
 Peter van Oene wrote:
> 
> At 01:20 AM 2/11/2003 +, Priscilla Oppenheimer wrote:
> >No problem with the splitting of hairs. :-)
> >
> >I have been wondering why Cisco lets you do what the original
> poster is
> >doing, which most of us misunderstood. He is using the same IP
> address on 2
> >serial interfaces on the SAME router.
> 
> Sonet APS comes to mind?  I usually use a /29 with 4 addresses,
> but you
> could use the same address.
> 
> >If you try to use the same IP address on two Ethernet
> interfaces, you just
> >get an error when you try to configure the second Ethernet
> interface.
> 
> I can't think of a practical use for this myself.
> 
> >With two serial interfaces, you don't get an error. Is this
> just an
> >oversight? There are many such oversights in Cisco IOS. :-) Or
> maybe there
> >is a real reason to do it.
> 
> The more I think about it (over the last two paragraphs of your
> msg) the
> more APS seems the likely candidate. If you couldn't, this
> would be
> restrictive in some cases.  Of course I'm thinking APS capable
> interfaces.
> 
> >I said in my original message that there's no ARP on serial
> interfaces so
> >the router can't easily figure out if anyone else is using its
> address like
> >it does on Ethernet. On Ethernet the router can send an ARP to
> see if
> >someone else replies. But that's someone else on the LAN
> connected to the
> >interface, not another interface on the same router.
> >
> >So, if it gives you an error on Ethernet when you use an
> address you have
> >already used on another Ethernet interface, why doesn't it
> give you an error
> >for serial interfaces? Maybe there's an actual technical
> reason, although
> >probably it's just an oversight.
> >
> >By the way, it lets you configure an Ethernet interface to use
> an address
> >already in use on a serial interface, but if you try to do it
> in the other
> >order then you get an error. That's probably just another
> oversight.
> 
> Would agree here.  Might be something to do with internal
> mechanisms to map
> macs to IPs.  Ie, if an interface is added, check the mac/ip
> binding list
> for duplicates and error if there is one.  Such a mechanism
> wouldn't be
> relevant in SONET and for the APS reasoning, it may be expected
> that some
> interfaces share the same address.
> 
> >Cisco has always given you enough rope to hang yourself.
> Decent error
> >messages have never been any more important than ease-of-use.
> :-)
> >
> >Priscilla
> >
> >Peter van Oene wrote:
> > >
> > > At 06:18 PM 2/10/2003 +, Priscilla Oppenheimer wrote:
> > > >You can't have duplicate IP addresses anywhere. They have
> to
> > > be unique. The
> > > >only exceptions would be if you were doing some sort of
> NAT or
> > > tunneling or
> > > >something and the duplicates were hidden from each other.
> > > >
> > > >You don't get an error when you try to configure it because
> > > it's a lot
> > > >harder for IOS to detect this on a serial interface than
> on an
> > > Ethernet
> > > >interface. On Ethernet, a Cisco router ARPs for the address
> > > you give it. If
> > > >it receives a reply, then it gives you an error and won't
> let
> > > you use the
> > > >address. There's no ARP in serial land.
> > > >
> > > >You think you're pinging successfully, but how do you know
> who
> > > is really
> > > >replying?
> > > >
> > > >Even if you could assign duplicate IP addresses, you
> > > shouldn't. You would
> > > >wreak havoc with all sorts of things. There's no reason to
> do
> > > it either. If
> > > >you're concerned with running out of addresses, just use
> > > private address.
> > > >The 10.0.0.0 network has 16 million possibilities.
> > >
> > > For what it's worth, duplicating the same IP across a set of
> > > DNS servers in
> > > the same AS can provide an interesting spin on resiliency. 
> So
> > > long as you
> > > configure unique IP's for normal communication.  This sort
> of
> > > thing works
> > > good for protocols that are stateless (UDP DNS)
> > >
> > > Anycast-RP in PIM networks also uses the same IP on multiple
> > > boxes :-)
> > >
> > > >Someone had to get blunt here! :-)
> > >
> > > Someone had to split some hair !
> > >
> > >
> > >
> > > >___
> > > >
> > > >Priscilla Oppenheimer
> > > >www.troubleshootingnetworks.com
> > > >www.priscilla.com
> > > >
> > > >
> > > >
> > > >
> > > >Ladrach, Daniel E. wrote:
> > > > >
> > > > > If you ping you are probably pinging the Local IP.Try
> debug
> > > ip
> > > > > icmp to
> > > > > verify what you are pinging.
> > > > >
> > > > > Daniel

RE: newbie: removing an ip route to loopback [7:62811]

2003-02-11 Thread Casey, Paul (6822)
Type no interface loopback0 

The network is a virtual interface on the router, 
If you scroll through the running config you will see 

Int loopback0
Ip address 10.x.x.x x.x.x.x

MAKE SURE no one needs this before delete it, 
Otherwise fire ahead, this will reemove it,

Matbe go and research its usage before you delete it to be sure.

Its showing up because its directly attached to the router, , 
Look at the C beside it, that means directly connected.

Kind regards.


-Original Message-
From: J. Johnson [mailto:[EMAIL PROTECTED]] 
Sent: 11 February 2003 17:23
To: [EMAIL PROTECTED]
Subject: newbie: removing an ip route to loopback [7:62811]


Please pardon my newbieness ...

I have a router with this in the routing table:

Router#show ip route
 
 10.0.0.0/24 is subnetted, 1 subnets
 C   10.0.0.0 is directly connected, Loopback0
 
Router#

I would like to remove it.  However, the following (and several variations) 
doesn't do the trick:

Router(config)#no ip route 10.0.0.0 255.255.255.0 Loopback 0 %No matching
route to delete Router(config)# 

This command with other addresses works the way I would expect it to work. 
E.g. I can do "ip route 10.0.0.3 255.255.255.255 Loopback 0" and the route 
appears, and then "no ip route 10.0.0.3 255.255.255.255 Loopback 0" and the 
route is gone.  Presumably the difference is that the 10.0.0.0 address is a 
network address.  Is there a way to remove it?

This router is a 3620 shared by several people in a lab environment.  I 
don't know how this route got into the table.

James


This E-mail is from O2. The E-mail and any files
transmitted with it are confidential and may also be privileged and intended
solely for the use of the individual or entity to whom they are addressed.
Any unauthorised direct or indirect dissemination, distribution or copying
of this message and any attachments is strictly prohibited. If you have
received the E-mail in error please notify [EMAIL PROTECTED] or 
  telephone ++ 353 1 6095000.

*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62812&t=62811
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE Lab - I have seen he future and it is.... [7:62776]

2003-02-11 Thread Charles Riley
Thanks to all who wrote in.  My Kafkaseque post yesterday apparently touched
a chord (or nerve) with several folks.  I was hoping to start an OT
discussion on those Dippin' Dots ice cream, and draw analogies to
networking.  Heck, I would even settle for Howard asking a variation of his
favorite question:  "what is the ice cream you are trying to eat?"

In all seriousness, I haven't abandoned all hope yet, it has just lessened
in importance and intensity for me. In response to CN's question,  I have
attempted the lab at least once, Brussels, way back when the lab was a two
day lab, and the numbers were still quad digits.Without violating the NDA,
let's just say that  I will never forgive ISDN for what it did to me.

As far as my motives for CCIE chasing, the main reason I am persisting is
that not only have I invested time, money, and freeze dried ice cream, but
the CCIE quest motivates me to study topics that I don't necessarily deal
with on a daily basis, and to practice exotic configurations with those that
I do.  OSPF through a GRE tunnel over an ISDN DBU to the Dippin' Dots
website, anyone?

Thanks,

Charles







""Cisco Nuts""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello Charles,
>
> With due respect I ask, why did you abandon your quest for the CCIE? I am
> curious as to how many times you actually hit the Lab?
>
> Sincerely,
>
> CN
>
> >From: "Charles Riley" >Reply-To: "Charles Riley" >To:
> [EMAIL PROTECTED] >Subject: Re: CCIE Lab - I have seen he future and
> it is [7:62776] >Date: Mon, 10 Feb 2003 22:19:54 GMT > >Chuck, >
> >Your post reminds me of those weird little ice cream stands that I
> sometimes >see at the mall and various carnivals. It's called something
> like "Dipping >Dots - The Ice Cream of the Future". The initial human
> instinct is much >like the Cro-Magnon humanoids encountering the monolith
> at the beginning of >2001: A Space Odyssey (sp): jump up and down with
> excitement until you >realize it's just freeze dried ice cream. >
> >Rounding out that analogy, the CCIE of the future will probably be
> reduced >to being the CCNP of today. Regardless, I have spent too much
> time and >money to abandon the quest for CCIE now, but frankly, if I
> hadn't invested >as much as I have, I would most likely abandon the quest
> in favor of >broadening into other areas. I really don't see much market
> value for the >CCIE anymore, especially with Cisco hellbent on making it
> a meatgrinding >cash cow. Your java console and "one way only to
> configure" experience kind >of bears this out. > >Sorry for the
> depressing post, just wanted to share. > >Charles > > > > > >""The Long
> and Winding Road"" wrote in >message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Been spending this
> weekend on what was once the Cisco Advanced SE Training > > ( ASET ) set
> of labs. These are available for those whose Cisco account >team > >
> approves - there are a few conditions which can be found in the wee
> places > > of certification training. > > > > The program is run by Lab
> Gear ( the only link I have is www.labgear.net, > > but > > this is a
> login page ) There are a number of labs of CCIE level, look, and > >
> feel. > > > > Supposed to be real equipment, but the access is via java
> script windows, > > not terminal emulation. This makes for some
> interesting situations. The > > windows show or provide output only when
> they are active. So if you had >two > > router sessions open, and you
> made changes on one router that would >generate > > systems messages of
> one sort or another you would not see those messages >on > > the other.
> also, I have yet to find a way to generate output from >debugging > >
> commands. Things like term mon and logging of one kind or another have
> not > > been successful. so no debug ip routing and debug ip ospf adj. >
> > > > As with the real lab, there are a series of tasks to be completed.
> Grading > > is done via a script. This is the point of most interest.
> Actually, I > > suspect a lot of the current CCIE Lab grading is done
> using scripting >tools. > > I believe the proctors still physically
> examine equipment configurations >for > > some things, but I could be
> wrong. > > > > It is of interest because to judge from the script outputs
> I am seeing, > > there appears to be an assumption that there is one and
> only one way to do > > things. I'm not sure this is always true. I am not
> sure that this results >in > > an entirely accurate grade. > > > > But
> more importantly, given my experience with the java consoles and the > >
> manner in which these labs must be done, I am not sure I like where this
> >is > > headed. Something Brian Dennis and Brad Ellis and some other
> people >started > > talking about back when the CCIE Lab went from two
> days to one - something > > about the longer term goal being to do the
> test remotely, and having >people > > show up at Sylvan or some other
> testing center and log in remo

newbie: removing an ip route to loopback [7:62811]

2003-02-11 Thread J. Johnson
Please pardon my newbieness ...

I have a router with this in the routing table:

Router#show ip route
 
 10.0.0.0/24 is subnetted, 1 subnets
 C   10.0.0.0 is directly connected, Loopback0
 
Router#

I would like to remove it.  However, the following (and several variations) 
doesn't do the trick:

Router(config)#no ip route 10.0.0.0 255.255.255.0 Loopback 0
%No matching route to delete
Router(config)# 

This command with other addresses works the way I would expect it to work. 
E.g. I can do "ip route 10.0.0.3 255.255.255.255 Loopback 0" and the route 
appears, and then "no ip route 10.0.0.3 255.255.255.255 Loopback 0" and the 
route is gone.  Presumably the difference is that the 10.0.0.0 address is a 
network address.  Is there a way to remove it?

This router is a 3620 shared by several people in a lab environment.  I 
don't know how this route got into the table.

James




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62811&t=62811
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: changing cat6000 from VTP Server to transparent mode [7:62810]

2003-02-11 Thread [EMAIL PROTECTED]
I do remember I had some problem related to it;  change from server to
transparent lost connectivity. It is a bad idea play with that during
production time .

What performance issue is that with Server mode?





"kuma kk" @groupstudy.com em 11/02/2003 05:38:29

Favor responder a "kuma kk" 

Enviado Por:  [EMAIL PROTECTED]


Para:  [EMAIL PROTECTED]
cc:

Assunto:changing cat6000 from VTP Server to transparent mode [7:62802]


Hi Everybody,

I have three cat6000 switch configured in vtp in server mode in a
production
environment. Now I am going to make all of them in transparent
mode(including the switch have RSM)as there is some performance issue due
to
broadcast in server mode.

I heard that while doing so, all the vlan information will be lost in the
switches. Please share with us if any of have already tried this and came
across any issues.

Thanks in Advance
kum








_
The new MSN 8: advanced junk mail protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62810&t=62810
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: E3 bandwidth issue. [7:62740]

2003-02-11 Thread Juntao
u can use MQC to that and more.

 a icrit dans le message de news:
[EMAIL PROTECTED]
> Look at CAR
>
>
>
>
>
> "Router Kid" @groupstudy.com em 10/02/2003 08:22:44
>
> Favor responder a "Router Kid"
>
> Enviado Por:  [EMAIL PROTECTED]
>
>
> Para:  [EMAIL PROTECTED]
> cc:
>
> Assunto:E3 bandwidth issue. [7:62740]
>
>
> If a client were to take an E3 (T3) would they be able to cap/restrict the
> bandwidth at lets say 20Mbps? could something be done to the router to
> allow
> this?
>
>
> Best Regards.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62809&t=62740
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE Study groups in Jersey City? [7:62807]

2003-02-11 Thread Maximus
Any CCIE study groups in the Jersey City area?

-Max


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62807&t=62807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: bsci passed [7:62805]

2003-02-11 Thread Mark Smith
Congratulations, Alejandro. 

That was a tough test for me too. I passed mine yesterday morning. I'm not
exactly bragging about the score but I passed. Got a lot more on IS-IS than
I expected - about 20% or more of my test. Had only read about it. My home
lab routers aren't beefy enough to set it up and play with it and I've never
used it in the real world. Guess I read enough about it though.

On to switching.

 
Mark



Quoting Alejandro Quemada :

> Hi
> it4s mi first post
> I have just passes bsci test this morning. it was a
> bit hard but passing
> score 700
> [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62806&t=62805
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Monitoring Memory Utilization(%) on a router. [7:62800]

2003-02-11 Thread [EMAIL PROTECTED]
Hi,

1) i do a "show memory" on a cisco 26xx router. It shows me the Total
Processor Memory and Total IO memory.
When i add up these 2 values, why is it not equal to total amount of DRAM in
your router (as shown by sh ver)???

2)Assuming the "sh memory" output does not give us the correct picture about
memory utilization, which MIBs and objects should we monitor to get the
memory utilization( as a %)of the router?
Or can we atleast get the "free memory" , "used memory" or "total memory"
via SNMP and using MIB expressions, we can compute the Memory utilization as
a %??What are the MIBs and objects to get this info?

Cheers
Simon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62800&t=62800
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE Lab - I have seen he future and it is.... [7:62776]

2003-02-11 Thread Cisco Nuts
Hello Charles,

With due respect I ask, why did you abandon your quest for the CCIE? I am
curious as to how many times you actually hit the Lab?

Sincerely,

CN

>From: "Charles Riley" >Reply-To: "Charles Riley" >To:
[EMAIL PROTECTED] >Subject: Re: CCIE Lab - I have seen he future and
it is [7:62776] >Date: Mon, 10 Feb 2003 22:19:54 GMT > >Chuck, >
>Your post reminds me of those weird little ice cream stands that I
sometimes >see at the mall and various carnivals. It's called something
like "Dipping >Dots - The Ice Cream of the Future". The initial human
instinct is much >like the Cro-Magnon humanoids encountering the monolith
at the beginning of >2001: A Space Odyssey (sp): jump up and down with
excitement until you >realize it's just freeze dried ice cream. >
>Rounding out that analogy, the CCIE of the future will probably be
reduced >to being the CCNP of today. Regardless, I have spent too much
time and >money to abandon the quest for CCIE now, but frankly, if I
hadn't invested >as much as I have, I would most likely abandon the quest
in favor of >broadening into other areas. I really don't see much market
value for the >CCIE anymore, especially with Cisco hellbent on making it
a meatgrinding >cash cow. Your java console and "one way only to
configure" experience kind >of bears this out. > >Sorry for the
depressing post, just wanted to share. > >Charles > > > > > >""The Long
and Winding Road"" wrote in >message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Been spending this
weekend on what was once the Cisco Advanced SE Training > > ( ASET ) set
of labs. These are available for those whose Cisco account >team > >
approves - there are a few conditions which can be found in the wee
places > > of certification training. > > > > The program is run by Lab
Gear ( the only link I have is www.labgear.net, > > but > > this is a
login page ) There are a number of labs of CCIE level, look, and > >
feel. > > > > Supposed to be real equipment, but the access is via java
script windows, > > not terminal emulation. This makes for some
interesting situations. The > > windows show or provide output only when
they are active. So if you had >two > > router sessions open, and you
made changes on one router that would >generate > > systems messages of
one sort or another you would not see those messages >on > > the other.
also, I have yet to find a way to generate output from >debugging > >
commands. Things like term mon and logging of one kind or another have
not > > been successful. so no debug ip routing and debug ip ospf adj. >
> > > As with the real lab, there are a series of tasks to be completed.
Grading > > is done via a script. This is the point of most interest.
Actually, I > > suspect a lot of the current CCIE Lab grading is done
using scripting >tools. > > I believe the proctors still physically
examine equipment configurations >for > > some things, but I could be
wrong. > > > > It is of interest because to judge from the script outputs
I am seeing, > > there appears to be an assumption that there is one and
only one way to do > > things. I'm not sure this is always true. I am not
sure that this results >in > > an entirely accurate grade. > > > > But
more importantly, given my experience with the java consoles and the > >
manner in which these labs must be done, I am not sure I like where this
>is > > headed. Something Brian Dennis and Brad Ellis and some other
people >started > > talking about back when the CCIE Lab went from two
days to one - something > > about the longer term goal being to do the
test remotely, and having >people > > show up at Sylvan or some other
testing center and log in remotely. > > > > If the Lab Gear approach is
any indication, this is not ready for real >live > > testing. I
experienced far too many problems with terminal ( javascript ) > >
sessions disconnecting mysteriously. With 8 open windows, it sometimes
got > > to be very hard to find the session ( router ) I was looking for.
Cut and > > paste is a real pain. You have to open a "scratchpad" window,
which is > > associated with the javascript console window. cutting and
pasting is done > > to this wind. there are scratchpad windows associated
with each java wind, > > so if you had a scratchpad open for every router
session, that makes for a > > LOT of junk to fight your way through
looking for what you want. then >there > > is the problem of actually
moving what you want to copy and paste. >highlight > > and control c
control v or alt e paste don't work. you have to click on > > buttons on
the java consoles to copy to and from routers. > > > > beyond that, there
is the problems of whether or not the "script" answer >is > > the right
answer. For example, in one lab, a particular instruction >requires > >
that the rip routers on a particular segment have to use the neighbor > >
statement to see eachother ( and prevent other routers on that segment
>from > > joining into the RIP domain ) well, the problem is, one of
those r

bsci passed [7:62805]

2003-02-11 Thread Alejandro Quemada
Hi
it4s mi first post
I have just passes bsci test this morning. it was a bit hard but passing
score 700




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62805&t=62805
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



just testing [7:62804]

2003-02-11 Thread Alejandro Quemada
""kuma kk""  escribis en el mensaje
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi Everybody,
>
> I have three cat6000 switch configured in vtp in server mode in a
production
> environment. Now I am going to make all of them in transparent
> mode(including the switch have RSM)as there is some performance issue due
to
> broadcast in server mode.
>
> I heard that while doing so, all the vlan information will be lost in the
> switches. Please share with us if any of have already tried this and came
> across any issues.
>
> Thanks in Advance
> kum
>
>
>
>
>
>
>
>
> _
> The new MSN 8: advanced junk mail protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62804&t=62804
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



changing cat6000 from VTP Server to transparent mode [7:62802]

2003-02-11 Thread kuma kk
Hi Everybody,

I have three cat6000 switch configured in vtp in server mode in a production 
environment. Now I am going to make all of them in transparent 
mode(including the switch have RSM)as there is some performance issue due to 
broadcast in server mode.

I heard that while doing so, all the vlan information will be lost in the 
switches. Please share with us if any of have already tried this and came 
across any issues.

Thanks in Advance
kum








_
The new MSN 8: advanced junk mail protection and 2 months FREE* 
http://join.msn.com/?page=features/junkmail




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62802&t=62802
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]