off-topic posts - WAS - RE: What tools can tell u r using [7:66661]

2003-04-02 Thread cebuano
Paul,
How many more of these off-topic threads are you going to allow?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
LaWanda Daivs
Sent: Tuesday, April 01, 2003 8:38 PM
To: [EMAIL PROTECTED]
Subject: Re: What tools can tell u r using lease line or ISDN? [7:66561]

Take a look at this web site and let me know what you
think.

http://www.imagine2020.com/761368002.


--- Link Teo  wrote:
 I am using leased line to connect my remote offices
 to HQ. All the leased
 line are backup by ISDN. Is there any tools which
 can inform me via email or
 other means about whether I am using leased line now
 or ISDN backup? In
 other words, any tools which can inform me when the
 primary line is down and
 the ISDN kick in?
 
 Thanks a lot. 
[EMAIL PROTECTED]


__
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://platinum.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=1t=1
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Cisco 2511 Hardware Issue [7:66662]

2003-04-02 Thread Tim Champion
Has anyone experienced, or heard of, the following problem:

I recently bought a 2nd hand 2511 but only async interfaces 9-16 work. 1-8
receive data but do not transmit. Could it possibly be due to one of the
numerous jumper settings?

many thanks in advance.

Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=2t=2
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: a question about ospf virtual-link auth [7:66648]

2003-04-02 Thread Danny Free
OOPS,
I forgot to add on Router 2:
!
router ospf 100
area 0 authentication message-digest.

:))


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=4t=66648
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: a question about ospf virtual-link auth [7:66648]

2003-04-02 Thread Danny Free
Hi,
Yes. If Area 0 is MD5 then virtual link must be MD5 also.
Example:
ROUTER 1
!
int loopback0
ip address 150.150.1.1 255.255.255.0
ip ospf network point-to-point
!
router ospf 100
network 150.150.1.0 0.0.0.255 area 0
network 150.150.10.0 0.0.0.255 area 0
network 150.150.20.0 0.0.0.255 area 1
area 0 authentication message-digest 
area 1 virtual-link 150.150.2.2 message-digest-key 1 md5 cisco
!
int s0
ip address 150.150.10.1 255.255.255.0
ip ospf message-digest-key 1 md5 cisco
!
int s1
ip address 150.150.20.1 255.255.255.0
!
ROUTER 2
!
int loopback0
ip address 150.150.2.2 255.255.255.0
ip ospf network point-to-point
!
router ospf 100
network 150.150.2.0 0.0.0.255 area 1
network 150.150.20.0 0.0.0.255 area 1
network 150.150.30.0 0.0.0.255 area 2
area 1 virtual-link 150.150.1.1 message-digest-key 1 md5 cisco
!
int s0
ip address 150.150.20.2 255.255.255.0
!
int s1
ip address 150.150.30.1 255.255.255.0
!
Router 3
!
int loopback0
ip address 150.150.3.3 255.255.255.0
ip ospf network point-to-point
!
router ospf 100
network 150.150.3.0 0.0.0.255 area 2
network 150.150.30.0 0.0.0.255 area 2
!
int s0
ip address 150.150.30.2 255.255.255.0
!
Best of luck.
   Danny


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=3t=66648
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


so how does IGRP unequal load-balancing work anyway? [7:66665]

2003-04-02 Thread nwo
It occurs to me that I do not understand how IGRP unequal load balancing
works.

Yes, I understand what the commands are, and I am well aware of the
intricacies involved in fast-switching and CEF.  So please don't respond by
telling me to configure 'variance' or stuff like that.  I already know all
that.

What I don't understand is this.  A fundamental part of EIGRP unequal load
balancing is the concept of the feasible successor, where routes of unequal
metric to a particular destination will be considered only if the
corresponding neighbor is a feasible successor for the destination in
question.  This is in order to prevent the problem of packets being sent to
to a router that is actually further away from the destination than the
sending router is to that destination.

Yet, I am aware of no such safeguards in IGRP.  IGRP has no such concept of
a topology table with neighbor's advertised distances and whatnot.
Therefore it seems that packets could easily be forwarded away from the
destination.  Furthermore, it would seem to me that packets could actually
bounce back and forth between 2 routers for awhile.

Please say it ain't so.  Yet I am unaware of any construct within IGRP that
would prevent it from being so.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=5t=5
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Need a Management Software [7:66666]

2003-04-02 Thread Jagan Krishnaraj
Hello Group

One of my customers need a Management software.

The management software should mail / page / sms network admin of

CISCO switch port status UP / Down and switch down status.

Can  any body advise me a good cheap commercial SNMP management software
with these features.

Thanks You in advance

Regards
jagan






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6t=6
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: so how does IGRP unequal load-balancing work anyway? [7:66667]

2003-04-02 Thread Tim Champion
I can't remember the exact terminology but an IGRP router is aware of a
neighbors metric to a destination as well as its own metric to the same
destination. The router will only consider routes to be valid if the
upstream router's metric to the destination is lower than its own metric to
the same destination. This prevents the problems you mentioned below. You
may want to get a second opinion on this!

Tim

nwo  wrote in message
news:[EMAIL PROTECTED]
 It occurs to me that I do not understand how IGRP unequal load balancing
 works.

 Yes, I understand what the commands are, and I am well aware of the
 intricacies involved in fast-switching and CEF.  So please don't respond
by
 telling me to configure 'variance' or stuff like that.  I already know all
 that.

 What I don't understand is this.  A fundamental part of EIGRP unequal load
 balancing is the concept of the feasible successor, where routes of
unequal
 metric to a particular destination will be considered only if the
 corresponding neighbor is a feasible successor for the destination in
 question.  This is in order to prevent the problem of packets being sent
to
 to a router that is actually further away from the destination than the
 sending router is to that destination.

 Yet, I am aware of no such safeguards in IGRP.  IGRP has no such concept
of
 a topology table with neighbor's advertised distances and whatnot.
 Therefore it seems that packets could easily be forwarded away from the
 destination.  Furthermore, it would seem to me that packets could actually
 bounce back and forth between 2 routers for awhile.

 Please say it ain't so.  Yet I am unaware of any construct within IGRP
that
 would prevent it from being so.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=7t=7
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Errata of TCP/IP Volume I by Jeff [7:66668]

2003-04-02 Thread galvin lu
Could Someone provide the  Errata of TCP/IP Volume I by Jeff ? I have seen
it before in this BBS , but now I can not find it . Thanks!!!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8t=8
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Mic shoeps
Hopefully I'm not going to stir another whirpool here.

Today I was surfing job sites and found out that where there are less than
dozen jobs available for CCIE in Silicon valley, there are more than 80 jobs
available for Linux engineers. Their initial salaries seem to be better than
CCIE nowaday.
We all understand that we take great pride in achieving CCIE. It is not only
the hardest network certifications to get, but also financial rewards used
to be excellent, too.

No matter how much efforts we put in these CCIE certifications, our fates
are still being subject to the cruel law of supply and demand especially in
this time of war.

Linux is not easy. There are many commands to remember. But it doesn't
require to invest thousands of dollars in routers and switches for training.
However their demands are higher than ever. On the other hand, the supply
for the CCIEs seems to surpass today's demand and for some serious time to
come.

Some might say, you study CCIE because you love the networking. Alright, but
if the future salaries for CCIEs are going to be somewhere near MCSE level,
would you put such an effort to get CCIE certs and still pursuing the career
of Cisco?

Where are we heading? Someone please enlighten us.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=9t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Data Compression [7:66670]

2003-04-02 Thread srinivas kunthuri
Hi all

I had implemented compression on my routers. avg raio of transmission and
receive is less than one in receiving.

Can I enable compression in one direction. i.e I want to enable compression
in
tranmit direction only.


Regards,
K.Srinivas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66670t=66670
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread ciscoGo2002
Hello folks,
I have question for you, we want to do dynamic NAT
with a pool of 128 public ip addresses (we haven't got
more public IP addresses :(  ). Now, when the router
does 128 translation no one can access internet... We
would like to do PAT when NAT public addresses are
exhausted.. is it possible? Can we do a mix of PAT and
NAT configuration? Any ideas? Any configs?

Thanks to all of you clever man and ladyies!!!




___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas...
http://messenger.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66672t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: RS CCIE Written Question [7:66619]

2003-04-02 Thread Router Kid
Yes!
 it does have a lot of redistribution questions on EIGRP and IPX with
complicated scenarios. I didn't have any on AppleTalk.


Tim Champion  wrote in message
news:[EMAIL PROTECTED]
 Does the RS written exam include any questions on EIGRP being used for
IPX
 or Appletalk?

 Many thanks

 Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66673t=66619
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: ISDN Question [7:66610]

2003-04-02 Thread Martin J.
maybe with

debug isdn q921

or debug isdn events

regards martin


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66671t=66610
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Errata of TCP/IP Volume I by Jeff [7:66668]

2003-04-02 Thread [EMAIL PROTECTED]
Go here:

http://www.ciscopress.com/catalog/product.asp?product_id={37DFB87F-2989-45A6
-8D01-0521D33054E7}

Click on Errata about halfway down the page.

HTH,

BJ



Original Message:
-
From: galvin lu [EMAIL PROTECTED]
Date: Wed, 2 Apr 2003 09:47:31 GMT
To: [EMAIL PROTECTED]
Subject: Errata of TCP/IP Volume I by Jeff [7:8]


Could Someone provide the  Errata of TCP/IP Volume I by Jeff ? I have seen
it before in this BBS , but now I can not find it . Thanks!!!
mail2web - Check your email from the web at
http://mail2web.com/ .




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66677t=8
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread richard dumoulin
Of course you can, but why not doing just PAT ?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66674t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: access-list logging rate-limited [7:66520]

2003-04-02 Thread Bikespace
Can't think of a reason why you would use the three lines. As far as I know
(unless there are any little tricks or gotchas) this does make the first two
redundant.

Gareth


Charlie Wehner  wrote in message
news:[EMAIL PROTECTED]
 Two quick questions:

 I've configured an access-list to only permit certain tcp and udp ports
 above 1024.  At the end of the access-list I have the following commands:

 access-list 101 deny tcp any any log
 access-list 101 deny udp any any log
 access-list 101 deny ip any any log

 Question 1:  Do I even need the deny tcp and deny udp statements since
I
 also have a deny ip statement?

 Question 2:  When I perform a port scan through the router it logs some of
 the events but it seems to miss the majority of them giving me the
following
 error message:

 %SEC-6-IPACCESSLOGRL. access-list logging rate-limited or missed 142
 packets

 Is access-list logging rate-limited by default?  Is there anyway for me to
 ensure everything gets logged?  I'm not sure if I understand?

 Thanks,
 Charlie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66675t=66520
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Is this addressing permissible ? [7:66676]

2003-04-02 Thread Peter P
SEE BELOW. I have a router with a loopback address
This address is being used by Serial0/0.1 and Serial0/0.3.
Is this a legal use of loopback addressing - or would it lead to ip
duplicate conflicts within routing processes. (The ARP table shows no
entries when these i/faces are pinged).
Is this addressing 'valid' ? 

..Sh ip int brie...
Serial0/0 unassigned  YES unset  upup
Serial0/0.1   146.135.171.209 YES unset  upup
Serial0/0.2   10.220.38.30YES NVRAM  upup
Serial0/0.3   146.135.171.209 YES unset  upup

.sh run..
interface Loopback1
 ip address 146.135.171.209 255.255.255.255
 no ip directed-broadcast
!
interface Ethernet0/0
 ip address 10.31.0.1 255.255.252.0
 no ip directed-broadcast
 ipx encapsulation SAP
 ipx network 1031
!
interface Serial0/0
 no ip address
 no ip directed-broadcast
 encapsulation frame-relay
 no ip mroute-cache
 random-detect
 frame-relay lmi-type ansi
!
interface Serial0/0.1 point-to-point
 ip unnumbered Loopback1
 no ip directed-broadcast
 frame-relay interface-dlci 445
!
interface Serial0/0.2 point-to-point
 ip address 10.220.38.30 255.255.255.252
 no ip directed-broadcast
 ipx network 19468416
 frame-relay interface-dlci 150
!
interface Serial0/0.3 point-to-point
 description 8K Management PVC to Docklands
 bandwidth 8
 ip unnumbered Loopback1
 no ip directed-broadcast
 frame-relay interface-dlci 446
!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66676t=66676
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Troy Leliard
Yes it can be done, you just need to redefine you pool, for 1-1 nat, use all
but 1 of your available IP's, then do another nat with overload on the last
ip address.

=?iso-8859-1?q?ciscoGo2002?= wrote:
 
 Hello folks,
 I have question for you, we want to do dynamic NAT
 with a pool of 128 public ip addresses (we haven't got
 more public IP addresses :(  ). Now, when the router
 does 128 translation no one can access internet... We
 would like to do PAT when NAT public addresses are
 exhausted.. is it possible? Can we do a mix of PAT and
 NAT configuration? Any ideas? Any configs?
 
 Thanks to all of you clever man and ladyies!!!
 
 
 
 
 ___
 Yahoo! Messenger - Nueva versisn GRATIS
 Super Webcam, voz, caritas animadas, y mas...
 http://messenger.yahoo.es
 
 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66679t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Andrew Larkins
The combination of both can be done without any issues. I would keep 1 IP
from the assigned range for the PAT address and have the others as 1 - 1
translations.

Andrew
CCNP, CCDP, CSS1

-Original Message-
From: ciscoGo2002 [mailto:[EMAIL PROTECTED]
Sent: 02 April 2003 12:58
To: [EMAIL PROTECTED]
Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]


Hello folks,
I have question for you, we want to do dynamic NAT
with a pool of 128 public ip addresses (we haven't got
more public IP addresses :(  ). Now, when the router
does 128 translation no one can access internet... We
would like to do PAT when NAT public addresses are
exhausted.. is it possible? Can we do a mix of PAT and
NAT configuration? Any ideas? Any configs?

Thanks to all of you clever man and ladyies!!!




___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas...
http://messenger.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66678t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: A career in MPLS..... [7:66609]

2003-04-02 Thread Peter van Oene
At 03:27 AM 4/2/2003 +, Priscilla Oppenheimer wrote:
I wonder if Cisco's MPLS class is just dated. It takes a long time to
develop and roll out a new class, especially if there's also a Cisco Press
book, exam, instructor materials, course binder, instructor training, beta
testing, etc.

More than likely, Cisco chose to teach what a broad range of their gear 
could do.  L2vpn doesn't fit this category, though I would expect that they 
have better luck with RSVP.

In the early days of MPLS, was there more emphasis on LDP than on RSVP-TE?

I find the two technologies not competitive actually.  I am just now 
building a network that runs LDP on a large number of devices for ease of 
provisioning, yet rides a TE core that is signalled by RSVP-TE.  To me, 
these are two tools.  However, I agree with nrf that glossing over RSVP 
will leave a bit of a hole in one's knowledge.  I again expect that Cisco 
may have had wider platform support for LDP than they did for RSVP, but I'd 
have to check that out as I know they were an early supporter of RSVP, but 
may not have offered it beyond their 7500/12000 product lines.

Were MPLS L3 VPNs around before L2 VPNs?

RFC2547bis, or BGP/MPLS VPNs, was the first widely inter operable vpn 
technology that used MPLS in the forwarding plane.  It is thus also the 
most mature of the many variants and again more widely support across the 
product line.  L2vpn (ptp) is still pretty fresh, particularly in the Cisco 
camp.  Very few platforms have a wide range of support for the many 
encapsulations defined by the various martini specs.  (Luca Martini from L3 
has taken the lead on the many L2 over MPLS encap standards as well as 
defined a signalling mechanism via LDP)  I expect the standard course gear 
doesn't have enough support for these technologies to make labs feasible.

I should note that the L2vpn (if you want to call it that and most 
marketing types do) I've been discussing (though briefly) are the point to 
point type (Virtual Private Wire Services -VPWS).  Think frame relay with 
ethernet in the last mile and 802.1q tags for DLCIs.  There are also a set 
of standards dealing with point to multipoint delivery, usually known as 
Virtual Private Lan Services that are attracting a bunch of a 
attention.  These specs made the provider network look like a single 
broadcast domain.  I'm not convinced that is a good thing (don't know many 
providers using LANE for what its worth), but it certainly seems exciting 
to marketing and IETF types.

Anyway, I suppose my overall point is that I fully agree with nrf, that to 
the curricula is not entirely representative of the more interesting bits 
of MPLS, however I expect the underlying reason is lack of platform/sw 
support to enable effective classroom lecture on the subjects.

Pete



Maybe it's just a matter of course development latency. Thanks for your
insights.

Priscilla


nrf wrote:
 
  Henry D.  wrote in message
  news:[EMAIL PROTECTED]
   I don't mean to start any type of argument here, especially
  with someone
   who obviously has more experience than I do. Yes, you've been
   contributing to this study group many times. But also many
  times
   your contributions are rather rethorical than practical and
  at the same
   time you seem to draw attention to what your opinion is
  rather than to
   give an educated and objective view backed by any type of
  real life
   examples.
 
  First of all, given the subject matter (MPLS), it is most
  difficult to be
  giving out real-life examples.  The fact is, MPLS is at this
  time not widely
  implemented, so therefore few examples abound.
 
  Second of all, it is essentially impossible for anybody to make
  a posting
  that is not necessarily colored with an opinion, particularly
  when they are
  discussing a subjective question.  Questions like whether they
  should study
  MPLS or what they should do with their future are necessarily
  going to draw
  a wide range of opinions.  If everybody is supposed to
  dogmatically answer
  'yes' or 'no', then what's the point of even asking the
  question in the
  first place?  The point is that subjective questions must
  necessarily elicit
  subjective answers.  People are not robots.   Everybody has to
  call it like
  they see it.  You ask a subjective question, and people should
  be able to
  chime in with whatever they think.  It's all about freedom of
  speech.
 
  Third of all, Cisconuts and I have taken the discussion
  offline, and while I
  don't want to speak for him, I would venture to say that he is
  quite happy
  with my responses.  So if he's cool, then what exactly is your
  beef?
 
  Fourth of all, I resent the implication that my views are not
  educated.  Be
  careful when you go around saying stuff like that.  I seem to
  recall a story
  a  few years ago how one particular guy harangued another guy
  about BGP,
  essentially saying that he knew nothing about how BGP really
  worked - only
  to find out 

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Symon Thurlow
Yes, this is a typical setup.

Search cisco.com and you will find a sample config.

Symon

-Original Message-
From: ciscoGo2002 [mailto:[EMAIL PROTECTED] 
Sent: 02 April 2003 11:58
To: [EMAIL PROTECTED]
Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]


Hello folks,
I have question for you, we want to do dynamic NAT
with a pool of 128 public ip addresses (we haven't got
more public IP addresses :(  ). Now, when the router
does 128 translation no one can access internet... We
would like to do PAT when NAT public addresses are
exhausted.. is it possible? Can we do a mix of PAT and
NAT configuration? Any ideas? Any configs?

Thanks to all of you clever man and ladyies!!!




___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es
=

 This email has been content filtered and
 subject to spam filtering. If you consider
 this email is unsolicited please forward
 the email to [EMAIL PROTECTED] and
 request that the sender's domain be
 blocked from sending any further emails.

=



=




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66680t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: A career in MPLS..... [7:66609]

2003-04-02 Thread Cisco Nuts
Thank you so much for your enlightening reply!!

And thank God I moved away from Novell to MS to Citrix and finally Cisco
and now onto MPLS...And thank God it is a very specialized and small
market right now that is looking for MPLS experienceAll the more
better to develop skills in MPLS as every Tom, Dick and Harry is either
just  routing or switching   ;- )

Looks like MPLS is the way to go!!! Come'on Sprint.Let's get on with
the Show :-)

From:  Reply-To:  To: [EMAIL PROTECTED] Subject: Re: A
career in MPLS. [7:66609] Date: Wed, 2 Apr 2003 04:47:44 GMT  Ah -
MPLS. Yes there are several large carriers with MPLS deployed or in the
process of deploying it (equant, global crossing...). Some on their core
and some on their layer 2 networks such as ATM (ATT for example).
Others backed away from it but are now looking at it since it's a huge
marketing beast that can't be ignored (Sprint for example).  Aside
from ISP's some large enterprises are using it for things like MPLS
enabled VPN's. As to the market for someone that knows MPLS - what I
have seen is it's a very specialized and small market right now that is
looking for MPLS experience. Mostly due to it still being relatively new
in deployments and being relatively small in the number of deployments.
 I do believe however after saying that - that it never hurts to have a
wide background of skills. Imagine if you specialized in Novell and
never moved into other areas for example. Novell is a great product but
the market for Novell pro's dried up a lot from the good ole days. You
would be much less marketable if you didn't also know other things such
as Microsoft or Routing or ...  I could go into my opinions of the
pros and cons of MPLS and where I think it fits - but that's another
boring story for later :)   www.ccie4u.comOn 1 Apr 2003 at
15:47, nrf wrote:Cisco Nuts wrote in message  
news:[EMAIL PROTECTED]Hello group, How
does one feel about a career in MPLS...I mean doing MPLSas part of
your core job day in and out.Is it worth it? Since ournetwork
does not use MPLS (maybe never will) inspite of being one of the   
Big Four Tier 1 SP's Let me guess. Do you work for Sprint? 
   are there other SP's that use MPLS in theirbackbone??   
 Yeah, there are some. I have just given myself a month or so
break from my CCIE LabPrep.(yeah!yeah! most would consider me
stupid on this) to study MPLSfor the CCIP and am thinking if I
should pursue this subject just like Idid for BGP.know it
inside out cold.and maybe consider a newcareer/job in MPLS
(obviously along with BGP, MBGP, MCast etc...) Doesanyone know of
how MPLS is viewed out there? I mean, in terms ofimplementation,
popularity and last but not the least , $$$ ??? ;-Whichof the
Big SP's or Enterprise networks have implemented MPLS? Has it been   
worth the advantages that MPLS proposes??Thank you.Sincerely,CN
The way I see it is this. MPLS is potentially powerful technology for it
  can be used as a lingua-franca among a carrier's network and
transport layer   and also as a way to impose circuit-switching
discipline upon IP and   therefore offer circuit-switching services
with a pure IP network. But MPLS is by no means a slam-dunk.
Certain carriers, most notably   Sprint, have elected not to go down
the MPLS path because they believe the   technology is immature (and
they are correct) and also because they believe   that they can garner
the benefits of MPLS by other means (also correct).   The point is that
while MPLS offers great potential, it also presents   problems, so
implementing it is not a no-brainer. And furthermore, I don't
particularly like the way that Cisco is pushing   MPLS, particularly in
its cert program. In my opinion, I think Cisco's cert   programs
emphasize the least useful parts of MPLS while neglecting the more  
useful parts. For example, I don't understand why Cisco pushes LDP the
way   it does, for LDP merely builds LSP's that correspond to the route
table, but   what's so useful about having LDP's that look like the
route table? It is   far more useful to build LSP's that differ from
the route table, but the   methods of doing that are not really covered
very much (if at all) in the   Cisco curricula. Also, I don't
understand why Cisco places such an emphasis   on L3VPN's, as if
L3VPNs were the only important service that MPLS enables.   L3VPN's are
only one of the new services that you can enable, and in my   opinion,
one of the less important ones. Far more important are the L2VPN  
capabilities and the ability to unify IP, ATM, and optical into a single
  management plane. The point I'm making is that if you merely study
MPLS   according to the Cisco curricula, you really haven't learned
much about it   that's actually useful.

  Add photos to your messages with MSN 8. Get 2 months FREE*. 

Re: A career in MPLS..... [7:66609]

2003-04-02 Thread Cisco Nuts
Oh! Boy!! What have I got myself into???

Sorry guys, I had NO intention at all to start any kind of flame which I
have literally despised  in the past

I have been frequenting this groupstudy since 1998 and have learn a LOT!!

And really advanced my career and  ;-

Thank you for people like nrf who have always been there to answer and
advise young newbies like us in this field

Thank you nrf...

So guys, let's refrain from turning this discussion into a 'flame' and
get on with our quest for greater knowledge and skills!!

Just wish that old-timers like Pamela and Laura were still around with
us in this group!!

Thank God for Priscilla, she is still there with us along with Howard and
Chuck !!

Thank you all.

Sorry for anything that I might have invoked!!

   PEACE 

From: nrf Reply-To: nrf To: [EMAIL PROTECTED] Subject: Re: A
career in MPLS. [7:66609] Date: Tue, 1 Apr 2003 21:38:58 GMT 
Henry D. wrote in message
news:[EMAIL PROTECTED]   Let me say up
front, I don't have much experience in MPLS, I have   only played with
it in the lab and not all that extensively either.   But CN is simply
trying to get an idea of what to expect to go that road.  I believe
that was precisely what I answered.Is nrf saying not to advance
in this field by studying Cisco's way of   emphasising MPLS ?  What I
said is that if you want to advance in that field, you will need
substantially more than what Cisco wants you to know about it. Read my
post again.   You know, we all have our doubts, he's brave enough  
to come to this group and ask questions. As far as L3VPN's, why not  
concentrate   on that at least to start with.  I never said not to
learn L3VPN's. Read my post again. What I said is that study of L3VPN's
shouldn't be emphasized to the degree that Cisco seems to emphasize it.
   It's still one reason to do the MPLS thing.   By just   doing
that he'll need to touch on many aspects of MPLS anyway. He will still 
 use either LDP or RSVP, he still will use the LSP establishment, he
might as   well   learn the TE options available for establishment
of those LSP's. He'll need   to learn   how to use the LSP's for
pushing traffic over them. He'll learn what and how   the   labels
get pushed/popped. Then why not study it that way. He's not advancing 
 his   MPLS skills, he might not have any yet. He's simply trying to
see if he will   be able to utilize any of the skills he will have to
learn to make it worth   it his while.  No doubt all learning is
good. Again, read my post again. I never said that he shouldn't learn
it. What I said is that he shouldn't necessarily learn it the Cisco
way.  Well, maybe someone else with more experience in MPLS
arena and someone more   objective can give a better insight as to
whether there is a demand for   these skills.  Are you implying that
I'm not objective - that I have some kind of agenda? 
nrf wrote in message  
news:[EMAIL PROTECTED]Cisco Nuts
wrote in messagenews:[EMAIL PROTECTED]
Hello group, How does one feel about a career in MPLS...I mean
doing   MPLS as part of your core job day in and out.Is it
worth it? Since our network does not use MPLS (maybe never will)
inspite of being one of the Big Four Tier 1 SP's  
Let me guess. Do you work for Sprint?   are there other SP's
that use MPLS in their backbone??   Yeah, there are
some.   I have just given myself a month or so break from my
CCIE Lab Prep.(yeah!yeah! most would consider me stupid on this)
to study MPLS for the CCIP and am thinking if I should pursue
this subject just like   I did for BGP.know it inside out
cold.and maybe consider a new career/job in MPLS (obviously
along with BGP, MBGP, MCast etc...) Does anyone know of how MPLS
is viewed out there? I mean, in terms of implementation,
popularity and last but not the least , $$$ ???   ;-Which of
the Big SP's or Enterprise networks have implemented MPLS? Has it  
been worth the advantages that MPLS proposes??Thank
you.Sincerely,CN   The way I see it is this. MPLS is
potentially powerful technology for itcan be used as a
lingua-franca among a carrier's network and transport   layerand
also as a way to impose circuit-switching discipline upon IP and   
therefore offer circuit-switching services with a pure IP network.   
   But MPLS is by no means a slam-dunk. Certain carriers, most notably
   Sprint, have elected not to go down the MPLS path because they
believe thetechnology is immature (and they are correct) and also
because they   believethat they can garner the benefits of MPLS
by other means (also correct).The point is that while MPLS offers
great potential, it also presentsproblems, so implementing it is
not a no-brainer.   And furthermore, I don't particularly like
the way that Cisco is pushingMPLS, particularly in its cert
program. In my opinion, I think Cisco's  

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Lee Carter
Yes you can just take your nat statement (ip nat inside source list 1...)
and add the word overload on the end of the command.

You will use a 1:1 NAT for the first set of users. Once your IP's are used
up you will use PAT. It is important to note that some issues arise with PAT
versus NAT like IPSEC or DLSW.

just an fyi.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66685t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: A career in MPLS..... [7:66609]

2003-04-02 Thread Symon Thurlow
FWIW I have seen quite a few Cisco jobs recently on jobserve looking for
people with MPLS skills specifically.



-Original Message-
From: nrf [mailto:[EMAIL PROTECTED] 
Sent: 02 April 2003 02:52
To: [EMAIL PROTECTED]
Subject: Re: A career in MPLS. [7:66609]


Henry D.  wrote in message
news:[EMAIL PROTECTED]
 I don't mean to start any type of argument here, especially with 
 someone who obviously has more experience than I do. Yes, you've been 
 contributing to this study group many times. But also many times your 
 contributions are rather rethorical than practical and at the same 
 time you seem to draw attention to what your opinion is rather than to

 give an educated and objective view backed by any type of real life 
 examples.

First of all, given the subject matter (MPLS), it is most difficult to
be giving out real-life examples.  The fact is, MPLS is at this time not
widely implemented, so therefore few examples abound.

Second of all, it is essentially impossible for anybody to make a
posting that is not necessarily colored with an opinion, particularly
when they are discussing a subjective question.  Questions like whether
they should study MPLS or what they should do with their future are
necessarily going to draw a wide range of opinions.  If everybody is
supposed to dogmatically answer 'yes' or 'no', then what's the point of
even asking the question in the first place?  The point is that
subjective questions must necessarily elicit
subjective answers.  People are not robots.   Everybody has to call it
like
they see it.  You ask a subjective question, and people should be able
to chime in with whatever they think.  It's all about freedom of speech.

Third of all, Cisconuts and I have taken the discussion offline, and
while I don't want to speak for him, I would venture to say that he is
quite happy with my responses.  So if he's cool, then what exactly is
your beef?

Fourth of all, I resent the implication that my views are not educated.
Be careful when you go around saying stuff like that.  I seem to recall
a story a  few years ago how one particular guy harangued another guy
about BGP, essentially saying that he knew nothing about how BGP really
worked - only to find out later that the second guy was none other than
a certain Tony Li,
the father of BGP.   Now, don't get me wrong, I'm not saying that I'm Li
or
anywhere close to him.  What I'm saying is that you should watch your
fire.

So yes, I'm saying that some times you don't quite stick
 to the subject at hand. I don't see how your view on Cisco's 
curriculum  in re to MPLS can be taken seriously without you putting 
actual examples  of how you came to that conclusion.

Ok, fine, then let's review the CCIP curricula vis-a-vis MPLS, and in
particular, let's review what exactly they teach.  I know for a fact
that they teach primarily LDP and gloss over RSVP-TE.  Do you think this
is wise? There is no evidence  in the industry of a consensus that LDP
will automatically win out over RSVP-TE.  If you have such evidence, I
would like to see it.  I doubt that LDP will ever win out simply because
you can't do TE with LDP unless you go with CR-LDP which Cisco does not
have any plans to support at this time.  TE is one of the more important
features available within MPLS.  The point I'm making is that neglecting
RSVP-TE within an MPLS exam seems rather dubious.

Second,  the last 2-3 modules of that class deal specifically with
l3vpn's, with nary a mention of any l2vpn technology whatsoever.  Again,
why such an emphasis on L3 but no discussion of L2?  Much of the most
exciting work in MPLSCON is about l2vpn's.  Don't get me wrong, L3 is
good to know, but a good MPLS class would also get into a discussion of
l2.

The point I'm making is this.  If all you do is follow the official
Cisco MPLS class, you will get a warped view of how real-world MPLS is.
LDP is not the ultimate no-brainer signalling path for constructing
LSP's and MPLS can do far more than just L3VPN's.  I'm not telling you
not to follow Cisco's curricula.  What I'm saying is that you should
supplement it with other readings and experience.

Even if the knowledge required for
 achieving
 Cisco's recognition in re to MPLS was not as advanced as one would 
hope,  shouldn't we look at positives of the whole process ?

Again, it's not a matter of being advanced as it has to do with
emphasis.  I think that the coursework emphasizes some of the
not-so-important things and does not discuss some of the more important
things.

Also, I don't think it's my job to 'play nice'.  If things are not good,
then I think people should say that they're not good.  Why engage in
diplomatic euphemisms?  Does it really do anybody any good to dress
things up so that they look better than they really are?  I'm not
running a marketing campaign.

 There are still things
 to be learnt, and emphasising them rather than the weaknesses would be

 a better idea. You won't become an expert just by passing 

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread ciscoGo2002
Thanks Symon, 

We really want to know more about the way the overload
works... 
Maybe we were not so exactly as we wanted... We want
to know how can we use PAT when any others publics ips
are exhausted after using NAT?
For example, if we configure this:
ip nat inside source list  pool 
overload

How does it work?? The router uses NAT with every
public IP in the pool and when the pool is exhausted
the router begins doing PATH with first IP address of
the pool,and so on..?? Can you please respond to this
question??? (be more specific, thx)

Thanks people...








 --- Symon Thurlow  escribis: 
Yes, this is a typical setup.
 
 Search cisco.com and you will find a sample config.
 
 Symon
 
 -Original Message-
 From: ciscoGo2002 [mailto:[EMAIL PROTECTED] 
 Sent: 02 April 2003 11:58
 To: [EMAIL PROTECTED]
 Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
 
 
 Hello folks,
 I have question for you, we want to do dynamic NAT
 with a pool of 128 public ip addresses (we haven't
 got
 more public IP addresses :(  ). Now, when the router
 does 128 translation no one can access internet...
 We
 would like to do PAT when NAT public addresses are
 exhausted.. is it possible? Can we do a mix of PAT
 and
 NAT configuration? Any ideas? Any configs?
 
 Thanks to all of you clever man and ladyies!!!
 
 
 
 
 ___
 Yahoo! Messenger - Nueva versisn GRATIS
 Super Webcam, voz, caritas animadas, y mas...
 http://messenger.yahoo.es
 [EMAIL PROTECTED]
 
 =
 
  This email has been content filtered and
  subject to spam filtering. If you consider
  this email is unsolicited please forward
  the email to [EMAIL PROTECTED] and
  request that the sender's domain be
  blocked from sending any further emails.
 
 =
 
 
 
 = 

___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas...
http://messenger.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66686t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Peter van Oene
Just study both and go easy on the incitement of textual riots.

At 10:15 AM 4/2/2003 +, you wrote:
Hopefully I'm not going to stir another whirpool here.

Today I was surfing job sites and found out that where there are less than
dozen jobs available for CCIE in Silicon valley, there are more than 80 jobs
available for Linux engineers. Their initial salaries seem to be better than
CCIE nowaday.
We all understand that we take great pride in achieving CCIE. It is not only
the hardest network certifications to get, but also financial rewards used
to be excellent, too.

No matter how much efforts we put in these CCIE certifications, our fates
are still being subject to the cruel law of supply and demand especially in
this time of war.

Linux is not easy. There are many commands to remember. But it doesn't
require to invest thousands of dollars in routers and switches for training.
However their demands are higher than ever. On the other hand, the supply
for the CCIEs seems to surpass today's demand and for some serious time to
come.

Some might say, you study CCIE because you love the networking. Alright, but
if the future salaries for CCIEs are going to be somewhere near MCSE level,
would you put such an effort to get CCIE certs and still pursuing the career
of Cisco?

Where are we heading? Someone please enlighten us.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66688t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Congratulations!! [7:66644]

2003-04-02 Thread ccnp ccnp2002
Priscilla,

Congratulations Again! You deserve it!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66690t=66644
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Need a Management Software [7:66666]

2003-04-02 Thread Tunde Kalejaiye
Jagan,
a software called 'whatsupgold' will do just fine. it costs about $700. this
includes 1 yr support and subscription which is optional.
http://www.whatsupgold.co.uk/

Tunde

- Original Message -
From: Jagan Krishnaraj 
To: 
Sent: Wednesday, April 02, 2003 10:10 AM
Subject: Need a Management Software [7:6]


 Hello Group

 One of my customers need a Management software.

 The management software should mail / page / sms network admin of

 CISCO switch port status UP / Down and switch down status.

 Can  any body advise me a good cheap commercial SNMP management software
 with these features.

 Thanks You in advance

 Regards
 jagan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66691t=6
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: TCP Algorithm - Slow Start - Congestion Avoida [7:66605]

2003-04-02 Thread alaerte Vidali
Thanks


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66689t=66605
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Adam
I knew this was possible on the pix, but have never configured it on an IOS
router.  It would be really appreciated if someone wouldn't mind posting a
sample config as I cannot locate one on cisco's site or the netpro forum
specific to IOS routers with both NAT and PAT configured like outlined in
this post.
Thanks.


 Yes you can just take your nat statement (ip nat inside source list 1...)
 and add the word overload on the end of the command.
 
 You will use a 1:1 NAT for the first set of users. Once your IP's are used
 up you will use PAT. It is important to note that some issues arise with
PAT
 versus NAT like IPSEC or DLSW.
 
 just an fyi.
-- 
Composed with Newz Crawler 1.3 http://www.newzcrawler.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66694t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


PAT AFTER NAT (More detailed) [7:66692]

2003-04-02 Thread ciscoGo2002
Thank you Troy, but I am afraid this is not enough. 

Let's see an example:

 Public Pool: X.X.X.0 --- X.X.X.128 (128
addresses)
 Private addresses: 10.10.10.X  (256
addresses)

 NAT CONFIG:

  access-list 1 X.X.X.0 0.0.0.255
  ip nat pool kk X.Y.Z.0 X.Y.Z.128 netmask 255.0.0.0 
   
  ip nat inside source list 1 pool kk overlad

 
  How will this work?? 
   A friend of mine told me that the router will
start doing NAT (one private address to one public
address) until the public pool is finished. After that
the router will start doing PAT. What do you think?? I
am very curious about this and I don't have a router
to test it...

(Richard, I don't like PAT because some applications
works bad with it, and because a lot of places in
internet block more than one access with the same IP.)

I want to thank all people who is answering me...







Por favor, responda a Troy Leliard

Enviado por:[EMAIL PROTECTED]
Destinatarios:  [EMAIL PROTECTED]
CC:  
Asunto: RE: PAT AFTER NAT...IS IT POSSIBLE???
[7:66672]

Yes it can be done, you just need to redefine you
pool, for 1-1 nat, use all
but 1 of your available IP's, then do another nat with
overload on the last
ip address.

=?iso-8859-1?q?ciscoGo2002?= wrote:

 Hello folks,
 I have question for you, we want to do dynamic NAT
 with a pool of 128 public ip addresses (we haven't
got
 more public IP addresses :(  ). Now, when the router
 does 128 translation no one can access internet...
We
 would like to do PAT when NAT public addresses are
 exhausted.. is it possible? Can we do a mix of PAT
and
 NAT configuration? Any ideas? Any configs?

 Thanks to all of you clever man and ladyies!!!


___
Yahoo! Messenger - Nueva versisn GRATIS
Super Webcam, voz, caritas animadas, y mas...
http://messenger.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66692t=66692
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: CCIE written exam passed! [7:66364]

2003-04-02 Thread chan Lu
Can you tell us the minimum passing score for the CCIE wrtiiren test?
I realized Cisco has changed the written to a 2hr/100 Qs format starting
3/28.

Thanks,


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66693t=66364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Thomas Larus
You have to think about what you want to do, and about the long term.  While
the rest of the economy experienced a mild and short recession-- so mild
that it is debatable whether it technically should have counted as a
recession, the telecommunications sector experienced something much more
serious.  If I use the word depression, someone will say that is not
accurate, as you can't have a depression in one industry, or some such
technicality.  This condition will not last forever.  No one is throwing
away their computer and giving up internet access.  We are moving toward
more and more high speed internet access and wireless access, which means
more business and more support work.

 Cisco has just bought Linksys, a consumer networking equip company, which
suggests that Cisco may soon move heavily into the mass market arena.  As
lower-cost Cisco consumer and SOHO devices proliferate,  perhaps the trend
will be for there to be a growing number of Cisco-related jobs, but at lower
pay than we saw in the tech boom.   I think the long-term future for people
near the top of the Cisco knowledgebase pyramid is very good.  Someone will
have to teach all these lower-level support folks, and write books on how to
use such and such Cisco consumer router or switch or firewall, in addition
to doing all the corporate network design/install/troubleshooting work done
now.

Linux is very difficult to learn really well.  True, CCIE lab equipment is
expensive, but I think it may take less time for some people to become a
CCIE than to get the kind of facility with Linux that the Linux-guru jobs
require.  Okay, maybe this is going to be true for only a very few people,
but it might have been true for me.  I mean, the UNIX command line syntax
(-this, /that) often bears no relation to anything that can be used a
mnemonic, while Cisco IOS is very much like plain English.  I know I made a
conscious decision to put away my various Unix platforms (FREEBSD, Red Hat
Linux, Solaris) and concentrate on CCIE.

Anyway, I love the Cisco material I am immersed in now.  You will need to
decide for yourself what you want to do, but if you decide based on the
relative salaries offered right now, you could make the wrong decision.

Tom Larus, CCIE #10,014



Mic shoeps  wrote in message
news:[EMAIL PROTECTED]
 Hopefully I'm not going to stir another whirpool here.

 Today I was surfing job sites and found out that where there are less than
 dozen jobs available for CCIE in Silicon valley, there are more than 80
jobs
 available for Linux engineers. Their initial salaries seem to be better
than
 CCIE nowaday.
 We all understand that we take great pride in achieving CCIE. It is not
only
 the hardest network certifications to get, but also financial rewards used
 to be excellent, too.

 No matter how much efforts we put in these CCIE certifications, our fates
 are still being subject to the cruel law of supply and demand especially
in
 this time of war.

 Linux is not easy. There are many commands to remember. But it doesn't
 require to invest thousands of dollars in routers and switches for
training.
 However their demands are higher than ever. On the other hand, the supply
 for the CCIEs seems to surpass today's demand and for some serious time to
 come.

 Some might say, you study CCIE because you love the networking. Alright,
but
 if the future salaries for CCIEs are going to be somewhere near MCSE
level,
 would you put such an effort to get CCIE certs and still pursuing the
career
 of Cisco?

 Where are we heading? Someone please enlighten us.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66695t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RV: Need a Management Software [7:66666]

2003-04-02 Thread Phil Sosaya
Hello,

There is the freeware package KiwiSyslog that is fairly impressive for
something that costs nothing.  
http://www.kiwisyslog.com/products.htm

It will send a daily logfile also but if you want to be emailed about
traps etc, ya need the Registered Version (about $50).


I also use Cattools from the same company, which saves me that
annoying task of backing up all of our router and switch configs, by
doing it at the click of a button.  It is also freeware - tho you pay 50
bucks if you want the advanced version (backs up more than 2 devices
automatically without any manual intervention).  

Rgds
  

- Original Message -
From: Jagan Krishnaraj 
To: 
Sent: Wednesday, April 02, 2003 10:10 AM
Subject: Need a Management Software [7:6]


 Hello Group

 One of my customers need a Management software.

 The management software should mail / page / sms network admin of

 CISCO switch port status UP / Down and switch down status.

 Can  any body advise me a good cheap commercial SNMP management 
 software with these features.

 Thanks You in advance

 Regards
 jagan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66697t=6
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Brian
IMHO if you are studying to get CCIE for money you are doing if for the
wrong reasons.

Doing a job you enjoy will give you more satisfation than doing a job
because the money is good.


Thats my $0.02


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66696t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: A career in MPLS..... [7:66609]

2003-04-02 Thread Howard C. Berkowitz
Cisco developers have, and continue to make, major contributions into 
what I hesitate to call MPLS.  Some context may help here.

First, one has to understand that protocol families like MPLS do not 
cleanly fit into the traditional model, and you can't force-fit them. 
When I say traditional model, however, I'm restricting that to the 
seven-story apartment house of ISO 7498.  MPLS fits better with the 
revisions in the ISO document Internal Organization of the Network 
Layer.

Even beyond that, however, the IETF struggled with how to handle 
these and related protocols, and eventually set up the sub-IP 
directorate -- intelligent transmission systems below IP but far more 
complex than traditional data links.  This isn't restricted to MPLS, 
but also covers IP over optical, IP over cable, generic switch 
management protocol, and daughter-of-MPLS, Generalized MPLS (GMPLS).

Cisco educational materials have long overemphasized the forwarding 
part of MPLS and sort of assumed here a miracle happens regarding 
path setup.  I remember trying to teach a beta class on MPLS on the 
ex-Stratacom 8850, turning off the projector, turning to the class of 
Cisco SE's, and going to the whiteboard to spend 45 minutes 
introducing how MPLS actually worked.

In particular, the roles of MPLS signaling protocols such as basic 
LDP, RSVP-TE, and extended LDP were skimmed over, and the dependence 
of these protocols on conventional IP routing was minimized. Little 
attention also was given to the extremely rich traffic management and 
high availability features of MPLS, which I consider the main 
motivation for using it -- not forwarding performance improvements, 
which, at best, are minimal.

Truly understanding the direction of these technologies works much 
better when you understand the generalization of GMPLS and see how it 
gives a common way of dealing with traditional technologies.  Up to 
now, MPLS was packet/frame oriented.  The GMPS extensions, however, 
allow you to use a largely common control framework for:

packets/frames
wavelengths (lambdas) in pure optical networking
timeslots in TDM networking
port identifiers when working with DACS and the like.

I can't necessarily recommend any pure MPLS books, because I go 
directly to the IETF documents when I need to check something -- and 
am on the developer mailing lists.  There is a significant amount 
about ISP applications of MPLS, however, in my book, _Building 
Service Provider Networks_ (Wiley, 2002, ISBN 0-471-09922-8), for 
which our own Annlee Hines was my peer reviewer, and Scott Bradner 
and Lyman Chapin were advisors.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66698t=66609
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: VLAN loop problem [7:66656]

2003-04-02 Thread Thomas N.
No, we don't have portfast bpdu-guard enabled.  What does it do?  Thanks
Larry!

Thomas


Larry Letterman  wrote in message
news:[EMAIL PROTECTED]
 port mac address security might work, altho its a lot of admin
 overhead..are you running portfast bpdu-guard on the access ports?


 Larry Letterman
 Network Engineer
 Cisco Systems


   - Original Message -
   From: Thomas N.
   To: [EMAIL PROTECTED]
   Sent: Tuesday, April 01, 2003 8:14 PM
   Subject: VLAN loop problem [7:66656]


   Hi All,

   I got a problem in the production campus LAN here between VLANs.  Please
   help me out!  Below is the scenario:

   We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.  Routing is
   enable/allowed between the two subnets using MSFC of the 6500.  Each
subnet
   has a DHCP server to assign IP address to devices on its subnet.
   Spanning-tree is enable; however, portfast is turned on on all
   non-trunking/uplink ports.  Recently, devices on VLAN 10 got assigned an
IP
   address of 10.20.x.x , which is from the DHCP on the other scope and
also
   from 10.10.x.x scope, and vice versa.  It seems that we a loop somewhere
   between the 2 subnets but we don't know where.  I noticed lots of end
users
   have a little unmanged hub/switch hang off the network jacks in their
   cubicals and potentially cause loop.

   Is there any way that we can block the loop on the Cisco switches
without
   visiting cubicals taking those little umanaged hubs/switches?  Thanks!

   Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66699t=66656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread [EMAIL PROTECTED]
I would alter this sentiment slightly: if you're doing it *just* for
money...

Honestly - would anyone do this stuff on a completely voluntary basis?  I
didn't think so. ;-)

BJ



Original Message:
-
From: Brian [EMAIL PROTECTED]
Date: Wed, 2 Apr 2003 15:19:14 GMT
To: [EMAIL PROTECTED]
Subject: Re: CCIE Vs. Linux engineer (not Ph.d) [7:9]


IMHO if you are studying to get CCIE for money you are doing if for the
wrong reasons.

Doing a job you enjoy will give you more satisfation than doing a job
because the money is good.


Thats my $0.02
mail2web - Check your email from the web at
http://mail2web.com/ .




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66700t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Microsoft IAS and VPN 3000/Client Authentication [7:66703]

2003-04-02 Thread kwindancer
Hello All: I'm looking into using Microsoft IAS and Windows NT4 PDC  to
authenticate VPN client users who are accessinga VPN 3000 concentrator.  I
want home VPN client users to utilize the NT4 PDC for their login
authentication. The VPN 3000 concentrator is located on the outside
interface of the PIX while the NT 4 PDC is located on the inside. My
questions are: a) Should I combine the PDC and IAS into one server?  My
preference is to use separate servers, and would this scenario works? b)
What ports should I open to allow Radius and NT authentication from the
outside to the inside?   Thanks. Ken

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66703t=66703
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Pxe over cisco 6509 ports [7:66702]

2003-04-02 Thread Jordan Turek
I am wondering what i may be missing. Probably something really simple, (i
hope). We are using PXe to communicate with pc's from the altiris server (
remote control, helpdesk, and inventory control system). We are able to get
a pxe client to boot if a hub is plugged into the switch and the pc to the
hub.. If we directly connect the pc to the switch port, then we cannot get
pxe to boot. The 6509 has portfast enabled, and also the pxe server and
client are in same vlan for troubleshooting purposes. Even though portfast
is enabled, is pxe reply possibly too quick for the pxe client computer to
recieve during port startup?

Any suggestions or ideas on cisco config to add or check?? 

TIA

Jordan


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66702t=66702
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: NT domain access after connecting through VPN [7:66618]

2003-04-02 Thread Doug Korell
Thanks for your input. I'm looking around at other vendors to see what they
offer with this. One thing I don't like with the PIX vpn is the lack of
logging capabilites. I want to know when someone logged in, when the logged
out, where they went, etc. I'm looking at the concentrators but don't
remember seeing this. As far as I can see, AAA can do some of this but you
have to use http, ftp, or telnet.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66705t=66618
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Taking Support Exam this Friday...Need some pointers [7:66704]

2003-04-02 Thread Sudarshan N Chari
Hi All,

Planning to take the support exam (my last one in line for CCNP), this
Firday. What is the passing score ? How many quesions ?

Pls send me good pointers and also the pitfalls I need to look for, if
any.

Thanks
Sudarshan

__
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66704t=66704
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


New CCIE revised exam preparation [7:66706]

2003-04-02 Thread Jörg Buesink
Hi there,

Currently I'm studing for the new revised 100 question 
CCIE RS written exam. Currently I use the book

CCIE Routing and Switching exam cert guide bt A. Bruno.

I think this book is fine for CCNP, but not for a CCIE written test.
I would like to buy other material, what are your suggestions?

With kind regard,

Jorg.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66706t=66706
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: New CCIE revised exam preparation [7:66706]

2003-04-02 Thread rbx10 Defcom
Jorg,
 go to Denis Laganiere link and read it.
He has a wealth of information. 


http://home.attbi.com/~blaga/Written.htm

rbx10Jörg Buesink wrote:
 
 Hi there,
 
 Currently I'm studing for the new revised 100 question 
 CCIE RS written exam. Currently I use the book
 
 CCIE Routing and Switching exam cert guide bt A. Bruno.
 
 I think this book is fine for CCNP, but not for a CCIE written
 test.
 I would like to buy other material, what are your suggestions?
 
 With kind regard,
 
 Jorg.
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66707t=66706
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: New CCIE revised exam preparation [7:66706]

2003-04-02 Thread Mirza, Timur
so it went from 150 questions/3 hrs to 100 questions/2 hours on march 28th?
the cisco page does indicate the reduction from 3 to 2 hrs but no mention of
the # of questions

-Original Message-
From: Jvrg Buesink [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 02, 2003 10:06 AM
To: [EMAIL PROTECTED]
Subject: New CCIE revised exam preparation [7:66706]


Hi there,

Currently I'm studing for the new revised 100 question 
CCIE RS written exam. Currently I use the book

CCIE Routing and Switching exam cert guide bt A. Bruno.

I think this book is fine for CCNP, but not for a CCIE written test.
I would like to buy other material, what are your suggestions?

With kind regard,

Jorg.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66709t=66706
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Microsoft IAS and VPN 3000/Client Authentication [7:66703]

2003-04-02 Thread Mark W. Odette II
Though I haven't done it myself, you should be able to keep the IAS box
(Windows 2000 Member Server) and the NT4PDC Box separate.

You're authentication AND access can be defined by the IAS box.

You would only need to allow RADIUS Ports...

1645 RADIUS Authentication 
1646 RADIUS Accounting

OR

1812 RADIUS server 
1813 RADIUS accounting

..on the PIX between the concentrator and the IAS box.

It would be more advisable to put the VPN Concentrator on the DMZ port
of the PIX if you have it; this is left to interpretation and opinion.

NOTE: I have no experience with the Concentrators, so, your mileage may
vary.

-Mark

-Original Message-
From: kwindancer [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, April 02, 2003 11:27 AM
To: [EMAIL PROTECTED]
Subject: Microsoft IAS and VPN 3000/Client Authentication [7:66703]

Hello All: I'm looking into using Microsoft IAS and Windows NT4 PDC  to
authenticate VPN client users who are accessinga VPN 3000 concentrator.
I
want home VPN client users to utilize the NT4 PDC for their login
authentication. The VPN 3000 concentrator is located on the outside
interface of the PIX while the NT 4 PDC is located on the inside. My
questions are: a) Should I combine the PDC and IAS into one server?  My
preference is to use separate servers, and would this scenario works? b)
What ports should I open to allow Radius and NT authentication from the
outside to the inside?   Thanks. Ken

___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66710t=66703
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Ben Woltz
I've found that you cannot do this, at least not when you do nat to a pool
of addresses.  You have to do static nat, then overload the rest.  I tried
adding overload to the end of my existing nat statment with the pool, it
started PATing the addresses from the beginning.  Instead of using the 1:1
from the pool, then pating anything beyond that.

Lee Carter  wrote in message
news:[EMAIL PROTECTED]
 Yes you can just take your nat statement (ip nat inside source list 1...)
 and add the word overload on the end of the command.

 You will use a 1:1 NAT for the first set of users. Once your IP's are used
 up you will use PAT. It is important to note that some issues arise with
PAT
 versus NAT like IPSEC or DLSW.

 just an fyi.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66708t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: VLAN loop problem [7:66656]

2003-04-02 Thread Thomas N.
What does portfast bpdu-guard do?  Does it prevent interfaces with
portfast enabled from causing the loop in my scenario?


Larry Letterman  wrote in message
news:[EMAIL PROTECTED]

 port mac address security might work, altho its a lot of admin
 overhead..are you running portfast bpdu-guard on the access ports?


 Larry Letterman
 Network Engineer
 Cisco Systems


   - Original Message -
   From: Thomas N.
   To: [EMAIL PROTECTED]
   Sent: Tuesday, April 01, 2003 8:14 PM
   Subject: VLAN loop problem [7:66656]


   Hi All,

   I got a problem in the production campus LAN here between VLANs.  Please
   help me out!  Below is the scenario:

   We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.  Routing is
   enable/allowed between the two subnets using MSFC of the 6500.  Each
subnet
   has a DHCP server to assign IP address to devices on its subnet.
   Spanning-tree is enable; however, portfast is turned on on all
   non-trunking/uplink ports.  Recently, devices on VLAN 10 got assigned an
IP
   address of 10.20.x.x , which is from the DHCP on the other scope and
also
   from 10.10.x.x scope, and vice versa.  It seems that we a loop somewhere
   between the 2 subnets but we don't know where.  I noticed lots of end
users
   have a little unmanged hub/switch hang off the network jacks in their
   cubicals and potentially cause loop.

   Is there any way that we can block the loop on the Cisco switches
without
   visiting cubicals taking those little umanaged hubs/switches?  Thanks!

   Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66711t=66656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Adam
This is what I have run into in the past and I was almost certain that it
was not possible.  I set it up in the lab here with various configs and had
the same result.
As far as I was told in the last routing update I attended at our local
cisco office, the SE's there confirmed that the PIX can be defined with a
NAT Pool of addresses and then have the same pool statement entered only
this time specifying the same address (ie. PAT) as an overload.  They
confirmed that the IOS router code does not function like this and that you
would have to statically NAT those addresses that you wanted 1:1 on and then
have a blanket PAT (overload) statement in to cover the rest.
In the case of the original question with wanting to NAT 128 clients 1:1 and
then have PAT for the rest, this would require a lot of configuration and to
guarantee that 1:1 would occur (or to at least keep track of it) you would
require static IPs on the clients wishing to 1:1 NAT.
Hope I'm not flying way offline here but I believe this is the only way
possible with an IOS router.

Cheers

 I've found that you cannot do this, at least not when you do nat to a pool
 of addresses.  You have to do static nat, then overload the rest.  I tried
 adding overload to the end of my existing nat statment with the pool, it
 started PATing the addresses from the beginning.  Instead of using the 1:1
 from the pool, then pating anything beyond that.
 
 Lee Carter  wrote in message
 news:[EMAIL PROTECTED]
  Yes you can just take your nat statement (ip nat inside source list 1...)
  and add the word overload on the end of the command.
 
  You will use a 1:1 NAT for the first set of users. Once your IP's are
used
  up you will use PAT. It is important to note that some issues arise with
 PAT
  versus NAT like IPSEC or DLSW.
 
  just an fyi.
-- 
Composed with Newz Crawler 1.3 http://www.newzcrawler.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66712t=66672
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread Mic shoeps
Thank you all folks. 
I don't know much about Linux. But I would like to use the analogy that
Cisco engineers are like traffic officers in major intersections in a city
and Linux (Lexus), Microsoft (Mercedes), Solaris (Saab), Visual+ (Volvo)
engineers are like thousands of drivers passing through these intersections.
As the traffic gets heavy, those intersections will get bog down and another
intersections will be build to accomodate the throughput of the traffics.
But the Lexus, Mercedes, Saab and Volvo engineers will build more bigger,
faster and powerful sofisticated cars to get the most out of the
infrastructures and elicit more customers to learn how to drive their cars.

But the trouble is that the city is not expanding or get connected with
another cities (hats off to the mayor Bush). Seems to me that there will be
plenty of fuel and asphalt to build the road and power the cars. But the
land is limited and more cars will be build to meet the insatiable consumer
appetite. But soon the automations will catch up with the demand and the
traffic officers will standing in his post like the Maytag technician.

Worst of all, more traffic officers will become increasingly territorial to
new and old alike. They will use the terms like 'ph'd' and 'lab rat' to
boost their egos and deter others who are trying to enter into their realm.

Yes, I love the challenge and that's what I'm doing right now. But I'll
seriously reconsider if my presence becomes a threat to another traffic
officer's pizza and the only choice I'll be left with is a big mac. Looks
like Linux (open system for free) provide you that unhostile pizzaria and
more. Your friendly insignt is appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66713t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: VLAN loop problem [7:66656]

2003-04-02 Thread Larry Letterman
Yes,
it prevents loops in spanning tree on layer 2 switches from causing a loop
by disabling the port on a cisco switch...


Larry Letterman
Network Engineer
Cisco Systems





 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
 Thomas N.
 Sent: Wednesday, April 02, 2003 12:18 PM
 To: [EMAIL PROTECTED]
 Subject: Re: VLAN loop problem [7:66656]


 What does portfast bpdu-guard do?  Does it prevent interfaces with
 portfast enabled from causing the loop in my scenario?


 Larry Letterman  wrote in message
 news:[EMAIL PROTECTED]

  port mac address security might work, altho its a lot of admin
  overhead..are you running portfast bpdu-guard on the access ports?
 
 
  Larry Letterman
  Network Engineer
  Cisco Systems
 
 
- Original Message -
From: Thomas N.
To: [EMAIL PROTECTED]
Sent: Tuesday, April 01, 2003 8:14 PM
Subject: VLAN loop problem [7:66656]
 
 
Hi All,
 
I got a problem in the production campus LAN here between
 VLANs.  Please
help me out!  Below is the scenario:
 
We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.
 Routing is
enable/allowed between the two subnets using MSFC of the 6500.  Each
 subnet
has a DHCP server to assign IP address to devices on its subnet.
Spanning-tree is enable; however, portfast is turned on on all
non-trunking/uplink ports.  Recently, devices on VLAN 10 got
 assigned an
 IP
address of 10.20.x.x , which is from the DHCP on the other scope and
 also
from 10.10.x.x scope, and vice versa.  It seems that we a
 loop somewhere
between the 2 subnets but we don't know where.  I noticed lots of end
 users
have a little unmanged hub/switch hang off the network jacks in their
cubicals and potentially cause loop.
 
Is there any way that we can block the loop on the Cisco switches
 without
visiting cubicals taking those little umanaged hubs/switches?  Thanks!
 
Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66714t=66656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Question about the Revised RS CCIE Written Exam [7:66715]

2003-04-02 Thread Zahid Hassan
Dear All,

Could someone please confirm about the number of questions in the new RS
written
exam after March 28 2003 as it is not mentioned on CCIE information page.

Thanks in advance.

Regards,

Zahid




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66715t=66715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Taking Support Exam this Friday...Need some pointe [7:66704]

2003-04-02 Thread rbx10 Defcom
Sudarshan, hope this help:

Exam Number: 640-606 
Associated Certifications: CCNP 
Duration: 75 min (50-60 questions) 


Make sure you use the Exam Cram for support. I took the exam long ago so I
dont' remember passing score. You might want to check this link for further
info.


http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_exams/640-606.html

Good luck

-rbx10
CCIE-n-training




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66716t=66704
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: so how does IGRP unequal load-balancing work anywa [7:66665]

2003-04-02 Thread Priscilla Oppenheimer
nwo wrote:
 
 It occurs to me that I do not understand how IGRP unequal load
 balancing
 works.
 
 Yes, I understand what the commands are, and I am well aware of
 the
 intricacies involved in fast-switching and CEF.  So please
 don't respond by
 telling me to configure 'variance' or stuff like that.  I
 already know all
 that.
 
 What I don't understand is this.  A fundamental part of EIGRP
 unequal load
 balancing is the concept of the feasible successor, where
 routes of unequal
 metric to a particular destination will be considered only if
 the
 corresponding neighbor is a feasible successor for the
 destination in
 question.  This is in order to prevent the problem of packets
 being sent to
 to a router that is actually further away from the destination
 than the
 sending router is to that destination.
 
 Yet, I am aware of no such safeguards in IGRP.  IGRP has no
 such concept of

I don't think such a safeguard is necessary. A router running even a simple
distance-vector protocol like IGRP knows the metric of its neighbors because
the neighbors report it in update packets. The router can add routes to the
routing table based on this information alone and knowledge of the variance
and maximum-paths values. It would be a broken protocol indeed if it added
routes that included a next-hop neighbor that was farther away.

The business of feasible successors, unique to EIGRP, helps maintain the
routing table when changes happen, such as when a directly connected link
fails or when update or queries arrive. I don't know if it's used for load
balancing though. It wouldn't need to be.

If you have a URL that explains what feasible successor has to do with load
balancing, please send it. Thanks. But I would probably still say that it's
not necessary for load balancing to work.

 a topology table with neighbor's advertised distances and
 whatnot.
 Therefore it seems that packets could easily be forwarded away
 from the
 destination. 

Not if the distance-vector protocol is working correctly.

 Furthermore, it would seem to me that packets
 could actually
 bounce back and forth between 2 routers for awhile.

Once again, not if the distance-vector protocol is working correctly, unless
I'm missing something.

Priscilla


 
 Please say it ain't so.  Yet I am unaware of any construct
 within IGRP that
 would prevent it from being so.
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66717t=5
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Question about the Revised RS CCIE Written Exam [7:66715]

2003-04-02 Thread Karsten
A ccie at Boson told me it was 120.

-Karsten


On Wednesday 02 April 2003 02:07 pm, Zahid Hassan wrote:
 Dear All,

 Could someone please confirm about the number of questions in the new RS
 written
 exam after March 28 2003 as it is not mentioned on CCIE information page.

 Thanks in advance.

 Regards,

 Zahid
 Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66719t=66715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Cisco 2511 Hardware Issue [7:66662]

2003-04-02 Thread Scott Roberts
I'm assuming your configuration is fine, but what do the controllers show
and are the interfaces showing any errors?

scott

Tim Champion  wrote in message
news:[EMAIL PROTECTED]
 Has anyone experienced, or heard of, the following problem:

 I recently bought a 2nd hand 2511 but only async interfaces 9-16 work. 1-8
 receive data but do not transmit. Could it possibly be due to one of the
 numerous jumper settings?

 many thanks in advance.

 Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66721t=2
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


hacking challenge [7:66720]

2003-04-02 Thread Wilmes, Rusty
this is a general question for the security specialists.

Im trying to convince a client that they need a firewall

so hypothetically, 

if you had telnet via the internet open to a router (with an access list
that allowed smtp and telnet) (assuming you didn't know the telnet password
or the enable password)that had a bunch of nt servers on another interface,
how long would it take a determined hacker a) cause some kind of network
downtime and b) to map a network drive to a share on a file server over the
internet. 

Thanks,
Rusty

 -Original Message-
 From: Larry Letterman [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, April 02, 2003 1:44 PM
 To: [EMAIL PROTECTED]
 Subject: RE: VLAN loop problem [7:66656]
 
 
 Yes,
 it prevents loops in spanning tree on layer 2 switches from 
 causing a loop
 by disabling the port on a cisco switch...
 
 
 Larry Letterman
 Network Engineer
 Cisco Systems
 
 
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] Behalf Of
  Thomas N.
  Sent: Wednesday, April 02, 2003 12:18 PM
  To: [EMAIL PROTECTED]
  Subject: Re: VLAN loop problem [7:66656]
 
 
  What does portfast bpdu-guard do?  Does it prevent interfaces with
  portfast enabled from causing the loop in my scenario?
 
 
  Larry Letterman  wrote in message
  news:[EMAIL PROTECTED]
 
   port mac address security might work, altho its a lot of admin
   overhead..are you running portfast bpdu-guard on the access ports?
  
  
   Larry Letterman
   Network Engineer
   Cisco Systems
  
  
 - Original Message -
 From: Thomas N.
 To: [EMAIL PROTECTED]
 Sent: Tuesday, April 01, 2003 8:14 PM
 Subject: VLAN loop problem [7:66656]
  
  
 Hi All,
  
 I got a problem in the production campus LAN here between
  VLANs.  Please
 help me out!  Below is the scenario:
  
 We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.
  Routing is
 enable/allowed between the two subnets using MSFC of 
 the 6500.  Each
  subnet
 has a DHCP server to assign IP address to devices on its subnet.
 Spanning-tree is enable; however, portfast is turned on on all
 non-trunking/uplink ports.  Recently, devices on VLAN 10 got
  assigned an
  IP
 address of 10.20.x.x , which is from the DHCP on the 
 other scope and
  also
 from 10.10.x.x scope, and vice versa.  It seems that we a
  loop somewhere
 between the 2 subnets but we don't know where.  I 
 noticed lots of end
  users
 have a little unmanged hub/switch hang off the network 
 jacks in their
 cubicals and potentially cause loop.
  
 Is there any way that we can block the loop on the 
 Cisco switches
  without
 visiting cubicals taking those little umanaged 
 hubs/switches?  Thanks!
  
 Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66720t=66720
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Router-to-external MODEM connection [7:66585]

2003-04-02 Thread Scott Roberts
yes daniel cotts was right, the 1601 serial interface is a asyc/sync one and
since you have one you're in luck! the only thing you're missing though is a
cable that is db60 to rs-232. you can get these straight from a cisco
reseller or off of ebay (though its hard to find these on ebay unless you
look).

the configuration of a modem is an entire chapter of most books, so it
depends on what you're looking to do with the modem. dial in, dial out,
access the network behind the router or access the router itself? you can
find configuration example in many books and also try searching cisco.com
for 'modem router configuration'

hope this helps,
scott

Diego Martmnez Boqui  wrote in message
news:[EMAIL PROTECTED]
 Hi Scott, yes my router is a 1601 which has an integrated wic (async/sync
 serial interface (db60).

 Ok, so you confirm to me that this connection is possible, the thing is
that
 I need some kind of instructions to do the connection.  Do you know how to
 do this or can you point me to some url where I can find step-by-step
 instructions to configure this.

 Thanks a lot for your time and help.
 - Original Message -
 From: Scott Roberts
 Date: Tue, 1 Apr 2003 19:51:34 GMT
 To: [EMAIL PROTECTED]
 Subject: Re: Router-to-external MODEM connection [7:66585]

 you'll need a WIC with a async/syn serial port, I know they're available
for
 the 1700's, but I'm not sure if the same wic will work in a 1600. then you
 can specify the interface as async and connect up the modem with a
 db60-rs232 cable.

 scott

 Diego Martmnez Boqui  wrote in message
 news:[EMAIL PROTECTED]
  Hello Steve, yes, I can do this using the aux port but my 1600 router
does
  not have an aux port, I need to do this using my serial sync/async
  interface, I just don`t know how and have not found a document about
this
  type of connection.
 
  Thanks for your help anyway
 
  Peace
  - Original Message -
  From: Steve
  Date: Tue, 1 Apr 2003 03:21:41 GMT
  To: [EMAIL PROTECTED]
  Subject: Re: Router-to-external MODEM connection [7:66585]
 
  this can be done look for cisco doc to connect external modem to aux
port
 
  --
  Regards,
 
  Steve
 
 
  Diego Martmnez Boqui  wrote in message
  news:[EMAIL PROTECTED]
   Hello Group.
  
   Is it possible to connect an external modem to a Cisco 1600 series
   router?
  
   And if it is, then how is it done?
  
   Can I connect using the serial interface?
  
   Any link with step by step instructions?
  
   Thank you all!
   --
   __
   Sign-up for your own FREE Personalized E-mail at Mail.com
   http://www.mail.com/?sr=signup
  Diego Martmnez Boqui
 
  --
  __
  Sign-up for your own FREE Personalized E-mail at Mail.com
  http://www.mail.com/?sr=signup
 Diego Martmnez Boqui

 --
 __
 Sign-up for your own FREE Personalized E-mail at Mail.com
 http://www.mail.com/?sr=signup




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66718t=66585
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: off-topic posts - WAS - RE: What tools can tell u r using [7:66723]

2003-04-02 Thread Scott Roberts
something tells me you never fully considered the merits of that website.
take another hard look at it and then questions its relevance to cisco. ;)

scott

cebuano  wrote in message
news:[EMAIL PROTECTED]
 Paul,
 How many more of these off-topic threads are you going to allow?

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 LaWanda Daivs
 Sent: Tuesday, April 01, 2003 8:38 PM
 To: [EMAIL PROTECTED]
 Subject: Re: What tools can tell u r using lease line or ISDN? [7:66561]

 Take a look at this web site and let me know what you
 think.

 http://www.imagine2020.com/761368002.


 --- Link Teo  wrote:
  I am using leased line to connect my remote offices
  to HQ. All the leased
  line are backup by ISDN. Is there any tools which
  can inform me via email or
  other means about whether I am using leased line now
  or ISDN backup? In
  other words, any tools which can inform me when the
  primary line is down and
  the ISDN kick in?
 
  Thanks a lot.
 [EMAIL PROTECTED]


 __
 Do you Yahoo!?
 Yahoo! Tax Center - File online, calculators, forms, and more
 http://platinum.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66723t=66723
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: so how does IGRP unequal load-balancing work anyway? [7:66722]

2003-04-02 Thread Scott Roberts
considering hold-down times and split horison, why do you think that packets
would bounces in a loop under normal conditions? I think under normal
conditions if a route is considered valid enough to be included in a routing
table, its not going to be a loop.

I think EIGRP only looked for alternate successors when the feasible
successor was a really bad cost, was because of an optimization standpoint
and not a loop issue.

I agree that there can be some issues with classful protocols and routing,
but I think the issue of load balancing legitimately discovered routes isn't
worrisome. you'll pretty much have an eye on your network and know if
something isn't right, but it seems like you're worried that if you setup a
network and leave it for a few years unattended there might be problems,
well what network won't under those circumstances?

scott

nwo  wrote in message
news:[EMAIL PROTECTED]
 It occurs to me that I do not understand how IGRP unequal load balancing
 works.

 Yes, I understand what the commands are, and I am well aware of the
 intricacies involved in fast-switching and CEF.  So please don't respond
by
 telling me to configure 'variance' or stuff like that.  I already know all
 that.

 What I don't understand is this.  A fundamental part of EIGRP unequal load
 balancing is the concept of the feasible successor, where routes of
unequal
 metric to a particular destination will be considered only if the
 corresponding neighbor is a feasible successor for the destination in
 question.  This is in order to prevent the problem of packets being sent
to
 to a router that is actually further away from the destination than the
 sending router is to that destination.

 Yet, I am aware of no such safeguards in IGRP.  IGRP has no such concept
of
 a topology table with neighbor's advertised distances and whatnot.
 Therefore it seems that packets could easily be forwarded away from the
 destination.  Furthermore, it would seem to me that packets could actually
 bounce back and forth between 2 routers for awhile.

 Please say it ain't so.  Yet I am unaware of any construct within IGRP
that
 would prevent it from being so.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66722t=66722
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Question about the Revised RS CCIE Written Exam [7:66715]

2003-04-02 Thread Mirza, Timur
do you know what the pass mark is?

-Original Message-
From: Karsten [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 02, 2003 3:43 PM
To: [EMAIL PROTECTED]
Subject: Re: Question about the Revised RS CCIE Written Exam [7:66715]


A ccie at Boson told me it was 120.

-Karsten


On Wednesday 02 April 2003 02:07 pm, Zahid Hassan wrote:
 Dear All,

 Could someone please confirm about the number of questions in the new RS
 written
 exam after March 28 2003 as it is not mentioned on CCIE information page.

 Thanks in advance.

 Regards,

 Zahid
 Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66725t=66715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: VLAN loop problem [7:66656]

2003-04-02 Thread Thomas N.
I'll check it out tomorrow.  Thanks much Larry!

Thomas


Larry Letterman  wrote in message
news:[EMAIL PROTECTED]
 Yes,
 it prevents loops in spanning tree on layer 2 switches from causing a loop
 by disabling the port on a cisco switch...


 Larry Letterman
 Network Engineer
 Cisco Systems





  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
  Thomas N.
  Sent: Wednesday, April 02, 2003 12:18 PM
  To: [EMAIL PROTECTED]
  Subject: Re: VLAN loop problem [7:66656]
 
 
  What does portfast bpdu-guard do?  Does it prevent interfaces with
  portfast enabled from causing the loop in my scenario?
 
 
  Larry Letterman  wrote in message
  news:[EMAIL PROTECTED]
 
   port mac address security might work, altho its a lot of admin
   overhead..are you running portfast bpdu-guard on the access ports?
  
  
   Larry Letterman
   Network Engineer
   Cisco Systems
  
  
 - Original Message -
 From: Thomas N.
 To: [EMAIL PROTECTED]
 Sent: Tuesday, April 01, 2003 8:14 PM
 Subject: VLAN loop problem [7:66656]
  
  
 Hi All,
  
 I got a problem in the production campus LAN here between
  VLANs.  Please
 help me out!  Below is the scenario:
  
 We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets.
  Routing is
 enable/allowed between the two subnets using MSFC of the 6500.  Each
  subnet
 has a DHCP server to assign IP address to devices on its subnet.
 Spanning-tree is enable; however, portfast is turned on on all
 non-trunking/uplink ports.  Recently, devices on VLAN 10 got
  assigned an
  IP
 address of 10.20.x.x , which is from the DHCP on the other scope and
  also
 from 10.10.x.x scope, and vice versa.  It seems that we a
  loop somewhere
 between the 2 subnets but we don't know where.  I noticed lots of
end
  users
 have a little unmanged hub/switch hang off the network jacks in
their
 cubicals and potentially cause loop.
  
 Is there any way that we can block the loop on the Cisco switches
  without
 visiting cubicals taking those little umanaged hubs/switches?
Thanks!
  
 Thomas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66724t=66656
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: off-topic posts - WAS - RE: What tools can tell u r using [7:66726]

2003-04-02 Thread cebuano
Scott,
This forum has been created for the purpose of study, NOT MARKETING.
Unless the owner and moderators of this server has changed this POLICY.
If so, then I'll go ahead and post my own MARKETING messages as well.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Scott Roberts
Sent: Wednesday, April 02, 2003 7:35 PM
To: [EMAIL PROTECTED]
Subject: Re: off-topic posts - WAS - RE: What tools can tell u r using
[7:66723]

something tells me you never fully considered the merits of that
website.
take another hard look at it and then questions its relevance to cisco.
;)

scott

cebuano  wrote in message
news:[EMAIL PROTECTED]
 Paul,
 How many more of these off-topic threads are you going to allow?

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of
 LaWanda Daivs
 Sent: Tuesday, April 01, 2003 8:38 PM
 To: [EMAIL PROTECTED]
 Subject: Re: What tools can tell u r using lease line or ISDN?
[7:66561]

 Take a look at this web site and let me know what you
 think.

 http://www.imagine2020.com/761368002.


 --- Link Teo  wrote:
  I am using leased line to connect my remote offices
  to HQ. All the leased
  line are backup by ISDN. Is there any tools which
  can inform me via email or
  other means about whether I am using leased line now
  or ISDN backup? In
  other words, any tools which can inform me when the
  primary line is down and
  the ISDN kick in?
 
  Thanks a lot.
 [EMAIL PROTECTED]


 __
 Do you Yahoo!?
 Yahoo! Tax Center - File online, calculators, forms, and more
 http://platinum.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66726t=66726
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: A career in MPLS..... [7:66609]

2003-04-02 Thread nrf
Cisco Nuts  wrote in message
news:[EMAIL PROTECTED]
 Thank you so much for your enlightening reply!!

 And thank God I moved away from Novell to MS to Citrix and finally Cisco
 and now onto MPLS...And thank God it is a very specialized and small
 market right now that is looking for MPLS experienceAll the more
 better to develop skills in MPLS as every Tom, Dick and Harry is either
 just  routing or switching   ;- )

 Looks like MPLS is the way to go!!! Come'on Sprint.Let's get on with
 the Show :-)

Well, actually, I would temper my enthusiasm.  Like you said, MPLS is indeed
a very small and specialized market, meaning there really aren't many jobs
because there are so few implementations.  True, you might reply that there
are also few people who know MPLS.  But almost all those MPLS are within the
large carriers where if you want to be the MPLS engineer, you can't just
know MPLS, you have to REALLY REALLY REALLY know it, with verifiable
experience and/or published papers to boot.  Carriers aren't going to snap
you up just because you may have read a book or took a 1-week class.  .


 From:  Reply-To:  To: [EMAIL PROTECTED] Subject: Re: A
 career in MPLS. [7:66609] Date: Wed, 2 Apr 2003 04:47:44 GMT  Ah -
 MPLS. Yes there are several large carriers with MPLS deployed or in the
 process of deploying it (equant, global crossing...). Some on their core
 and some on their layer 2 networks such as ATM (ATT for example).
 Others backed away from it but are now looking at it since it's a huge
 marketing beast that can't be ignored (Sprint for example).  Aside
 from ISP's some large enterprises are using it for things like MPLS
 enabled VPN's. As to the market for someone that knows MPLS - what I
 have seen is it's a very specialized and small market right now that is
 looking for MPLS experience. Mostly due to it still being relatively new
 in deployments and being relatively small in the number of deployments.
  I do believe however after saying that - that it never hurts to have a
 wide background of skills. Imagine if you specialized in Novell and
 never moved into other areas for example. Novell is a great product but
 the market for Novell pro's dried up a lot from the good ole days. You
 would be much less marketable if you didn't also know other things such
 as Microsoft or Routing or ...  I could go into my opinions of the
 pros and cons of MPLS and where I think it fits - but that's another
 boring story for later :)   www.ccie4u.comOn 1 Apr 2003 at
 15:47, nrf wrote:Cisco Nuts wrote in message  
 news:[EMAIL PROTECTED]Hello group, How
 does one feel about a career in MPLS...I mean doing MPLSas part of
 your core job day in and out.Is it worth it? Since ournetwork
 does not use MPLS (maybe never will) inspite of being one of the   
 Big Four Tier 1 SP's Let me guess. Do you work for Sprint? 
are there other SP's that use MPLS in theirbackbone??   
  Yeah, there are some. I have just given myself a month or so
 break from my CCIE LabPrep.(yeah!yeah! most would consider me
 stupid on this) to study MPLSfor the CCIP and am thinking if I
 should pursue this subject just like Idid for BGP.know it
 inside out cold.and maybe consider a newcareer/job in MPLS
 (obviously along with BGP, MBGP, MCast etc...) Doesanyone know of
 how MPLS is viewed out there? I mean, in terms ofimplementation,
 popularity and last but not the least , $$$ ??? ;-Whichof the
 Big SP's or Enterprise networks have implemented MPLS? Has it been   
 worth the advantages that MPLS proposes??Thank you.Sincerely,CN
 The way I see it is this. MPLS is potentially powerful technology for it
   can be used as a lingua-franca among a carrier's network and
 transport layer   and also as a way to impose circuit-switching
 discipline upon IP and   therefore offer circuit-switching services
 with a pure IP network. But MPLS is by no means a slam-dunk.
 Certain carriers, most notably   Sprint, have elected not to go down
 the MPLS path because they believe the   technology is immature (and
 they are correct) and also because they believe   that they can garner
 the benefits of MPLS by other means (also correct).   The point is that
 while MPLS offers great potential, it also presents   problems, so
 implementing it is not a no-brainer. And furthermore, I don't
 particularly like the way that Cisco is pushing   MPLS, particularly in
 its cert program. In my opinion, I think Cisco's cert   programs
 emphasize the least useful parts of MPLS while neglecting the more  
 useful parts. For example, I don't understand why Cisco pushes LDP the
 way   it does, for LDP merely builds LSP's that correspond to the route
 table, but   what's so useful about having LDP's that look like the
 route table? It is   far more useful to build LSP's that differ from
 the route table, but the   methods of doing that are not really covered
 very much (if at all) in 

Re: so how does IGRP unequal load-balancing work anywa [7:66727]

2003-04-02 Thread nwo
OK, consider this scenario.

You have a large network of IGRP routers.  You have routers A and B who each
have a metric of, say, 10 to a given destination (I am going to use simple
values for the metrics of IGRP to make things easy).  Routers A and B are
also directly connected, and the link between them has a metric of 1.
Router A sends an update to B that the destination has a metric of 10, and
router B adds the value of the link to arrive at a total metric of 11.
Therefore, router B has 2 ways to get to the destination, the first would be
through the normal way (through the path that has a metric of 10) and the
other through router A (which has a metric of 11).  Vice versa is also true
with respect to router A.  When you configure variance of larger than 1,
then both paths will be entered into the route table.

If this is the case, then you can see that some packets can bounce around.
For example, router A may, through unequal load-balancing, send some of the
dest packets to B, and then B will, again through unequal balancing, send
some of those packets back to A, etc.  Yes, the number of packets sent the
'wrong way' decreases exponentially but the point is that there is still
some bouncing around.

The only way I can see that this would not happen is if a router would
compare the metric of a received route (before the cost of the link is
added) to the metric that the router is currently holding for that route,
and if it is equal to or greater than that value, the route is rejected
unconditionally for unequal balancing.  This would be something similar to
what the whole EIGRP successor algorithm accomplishes.  Does anybody know
for a fact whether this is in the IGRP algorithm?


Priscilla Oppenheimer  wrote in message
news:[EMAIL PROTECTED]
 nwo wrote:
 
  It occurs to me that I do not understand how IGRP unequal load
  balancing
  works.
 
  Yes, I understand what the commands are, and I am well aware of
  the
  intricacies involved in fast-switching and CEF.  So please
  don't respond by
  telling me to configure 'variance' or stuff like that.  I
  already know all
  that.
 
  What I don't understand is this.  A fundamental part of EIGRP
  unequal load
  balancing is the concept of the feasible successor, where
  routes of unequal
  metric to a particular destination will be considered only if
  the
  corresponding neighbor is a feasible successor for the
  destination in
  question.  This is in order to prevent the problem of packets
  being sent to
  to a router that is actually further away from the destination
  than the
  sending router is to that destination.
 
  Yet, I am aware of no such safeguards in IGRP.  IGRP has no
  such concept of

 I don't think such a safeguard is necessary. A router running even a
simple
 distance-vector protocol like IGRP knows the metric of its neighbors
because
 the neighbors report it in update packets. The router can add routes to
the
 routing table based on this information alone and knowledge of the
variance
 and maximum-paths values. It would be a broken protocol indeed if it added
 routes that included a next-hop neighbor that was farther away.

 The business of feasible successors, unique to EIGRP, helps maintain the
 routing table when changes happen, such as when a directly connected link
 fails or when update or queries arrive. I don't know if it's used for load
 balancing though. It wouldn't need to be.

 If you have a URL that explains what feasible successor has to do with
load
 balancing, please send it. Thanks. But I would probably still say that
it's
 not necessary for load balancing to work.

  a topology table with neighbor's advertised distances and
  whatnot.
  Therefore it seems that packets could easily be forwarded away
  from the
  destination.

 Not if the distance-vector protocol is working correctly.

  Furthermore, it would seem to me that packets
  could actually
  bounce back and forth between 2 routers for awhile.

 Once again, not if the distance-vector protocol is working correctly,
unless
 I'm missing something.

 Priscilla


 
  Please say it ain't so.  Yet I am unaware of any construct
  within IGRP that
  would prevent it from being so.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66727t=66727
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: New CCNP Exam, pls clarify [7:66599]

2003-04-02 Thread hinwoto
Thank you folks,

I appreciate your comments, and Priscilla, I have the same thought as yours
that Cisco will
not be so selfish not to appreciate the exams we took hardly.

I will try to contact Cisco guy around here, meanwhile I hope that there
will be some Cisco
guy out there confirming about this confusion and let all the community here
know for sure.

Hi, Uday, any comment , thx

cheers
Hin

Priscilla Oppenheimer  wrote in message
news:[EMAIL PROTECTED]
 hinwoto wrote:
 
  Hi all,
 
  I just went for BCRAN training and I got information from the
  instructor
  that there will be new CCNP version exam. It will be launched
  about June /
  July this year.
 
  According to him, if u wanna take the old CCNP exam ,
  please quickly have all the 4 exams passed before the new one
  launched,
  since the old exam wont be valid,

 I don't think that's how it works. Cisco wouldn't be THAT mean. I would
 question your instructor on this. Was the training with a certified Cisco
 Learning Partner? They would be more knowledgeable. Or try to talk to
Cisco
 directly.

 Does anyone remember how it worked when they replaced Routing with BSCI?
If
 you were already in the process of getting your CCNP, couldn't you use a
 pass on Routing to finish, even though that exam had been replaced?

 Priscilla


  let say we have passed 3 exams, and unfortunately before we
  take the
  last one, the new CCNP version has been launched all the 3
  exams are
  invalid .. by then..
 
  I've been trying to search such information on www.cisco.com
  but  I am still
  unable to get the straight info.
 
  Please, show the light, if you guys know for sure.
  It will be very helpfull for my consideration about taking the
  exams
 
  Thanks and cheers
  Hin




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66728t=66599
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


VLAN Trunk Question and spanning tree [7:66730]

2003-04-02 Thread John Brandis
hi All,
 
Please tell me if I am wrong and best practices
 
A trunk link, by default, is a member of all VLANS
 
Would it be best practice, to place your trunk ports in a particualr VLAN,
then define what you want pruned/not pruned ?
 
Reason I ask is that I am getting the hostflapping error every now and then,
which first made me believe I had a developer plugging in hubs around the
place. However, now I think its a question of my design/config. Here is an
example of the error on my cat-4006 gig ports which trunk to my floor
switchs.
 
Host 00:06:29:F9:75:A2 in vlan 23 is flapping between port Gi2/12 and port
Gi2/11
 
NOTE: 2/12 go's to sw2 and 2/11 go's to sw1, which are connected to one
another as you can see below
 
I checked it out, there are no hubs any where that could do this, and I have
spanning tree in place to stop the redundant links on my floor switch;s
coming back into the core. Here is the config of my trunk ports on the floor
switch
 
SW1
interface GigabitEthernet0/1
description link to core
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/2
description link to sw2 floor switch
 switchport mode trunk
 no ip address
 
SW2
interface GigabitEthernet0/1
description link to core
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/2
description link to sw1 floor switch
 switchport mode trunk
 no ip address

If any one can suggest anything, I would appreciate it 
(I am interested in the use of the bpdu-port guard, would this help here ?)
 
Thanks
John
Sydney Australia


**

This email message (and attachments) may contain information that is
confidential to Solution 6. If you are not the intended recipient you cannot
use, distribute or copy the message or attachments.  In such a case, please
notify the sender by return email immediately and erase all copies of the
message and attachments.  Opinions, conclusions and other information in
this message and attachments that do not relate to the official business of
Solution 6 are neither given nor endorsed by it.

*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66730t=66730
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread nrf
Mic shoeps  wrote in message
news:[EMAIL PROTECTED]
 Thank you all folks.
 I don't know much about Linux. But I would like to use the analogy that
 Cisco engineers are like traffic officers in major intersections in a city
 and Linux (Lexus), Microsoft (Mercedes), Solaris (Saab), Visual+ (Volvo)
 engineers are like thousands of drivers passing through these
intersections.
 As the traffic gets heavy, those intersections will get bog down and
another
 intersections will be build to accomodate the throughput of the traffics.
 But the Lexus, Mercedes, Saab and Volvo engineers will build more bigger,
 faster and powerful sofisticated cars to get the most out of the
 infrastructures and elicit more customers to learn how to drive their
cars.

Actually, to extend your analogy, I think the real problem is that there the
world built WAY too many roads than needed.  This is why there is such talk
of a telco capacity glut.  While Internet traffic was doubling every year,
providers were building out as if traffic was doubling every 100 days.
Couple that with the fact that carriers have essentially almost to a man
have not figured out how to make money off the Internet.  For example,
consider the following quotes:

...we have the spectacle of three once powerful, next gen carriers in
total collapse: UUNet as part of the WorldCom debacle, PSINet and Genuity.
Makes no mistake: these bankruptcies are not the result of an economic
downturn or solely due to corruption and fraud. Rather, as we have said
before many times in many of our publications: the underlying carrier
business models are fundamentally flawed...we are led to a conclusion that
at this time there is no sound business model for the carrier side of the
Internet. The carrier industry has come to an absolute dead-end under the
current set of business models,

http://www.proberesearch.com/alerts/2002/ipproblems.htm

...Where one of the alternative networks (again, the Internet) isn't
profitable in the present, it undermines the whole premise of convergence.
Why would the market move to select a network choice that doesn't make money
even for the core services it's intended to provide? 
http://www.networkmagazine.com/article/NMG20020930S0011/3


 But the trouble is that the city is not expanding or get connected with
 another cities (hats off to the mayor Bush).

Without getting political, I think this is more the fault of a certain Mr.
bin Laden.

Seems to me that there will be
 plenty of fuel and asphalt to build the road and power the cars. But the
 land is limited and more cars will be build to meet the insatiable
consumer
 appetite. But soon the automations will catch up with the demand and the
 traffic officers will standing in his post like the Maytag technician.

True indeed, networks and network engineering will become ordinary.

 Worst of all, more traffic officers will become increasingly territorial
to
 new and old alike. They will use the terms like 'ph'd' and 'lab rat' to
 boost their egos and deter others who are trying to enter into their
realm.

Uh, here we must part company.  I think you grant far too much power to some
of us 'traffic officers'.

The fact is if certain designations are considered good or bad, it is not
because the old-timers say so, but because the free market says so.  Holders
of PhD's tend to make more money and suffer from less unemployment than
nonholders of PhD's (all other things being equal) not because companies
enjoy paying those PhD guys more (oh please please, take our money because
we want to make less profit), but because on average those PhD holders tend
to be scarcer and more productive.   By the same token, 'lab-rat' CCIE's
(and by that I mean people who have little to no experience as compared to
the average CCIE) tend to be paid less and tend to suffer from more
unemployment not because companies 'enjoy' screwing them but because it is
widely acknowledged that those with less experience tend to be less
productive than those with more experience.  Simple as that.

Therefore, as far as the term 'lab-rat' is concerned, the only thing that
the older traffic officers did was give the phenomenom a name - basically
those guys who had little or no experience working in actual production
environments but somehow got their CCIE anyway were termed 'lab-rats'.  But
that's just a name.  To quote Shakespeare:  What's in a name?  You can
change the term from 'lab-rats' to 'lab-teddy bears' or whatever you want to
call it.  At the end of the day, it doesn't change a thing.  The fact
remains that, regardless of certification or lack thereof, those with less
or no experience will on average have fewer/worse job prospects than those
with more experience, and that's not because the old-timers are saying so
but because the free market for labor says so. It's really as simple and as
complicated as that.

 Yes, I love the challenge and that's what I'm doing right now. But I'll
 seriously reconsider if my presence becomes a threat to 

Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]

2003-04-02 Thread nrf
 Linux is very difficult to learn really well.  True, CCIE lab equipment is
 expensive, but I think it may take less time for some people to become a
 CCIE than to get the kind of facility with Linux that the Linux-guru jobs
 require.

I think a far bigger problem with choosing Linux as a financially stable
career is something you just hit on the head right there - barriers to
entry.  Financially speaking, there are none. Anybody can just piece
together a couple of old PC's and fire up Linux and start learning.  And
right now, there are literally tens of thousands of high school and college
kids playing with Linux - and, I don't want to sound morbid, but they're
going to be your job competition in a few years.  Do you really have much to
work with if you know Linux, but so does every college student graduating
with a CS degree in the future (and they will)?   Not to mention all those
people in countries like China, India, and Russia who are short on cash but
long on brains and tenacity?

That therefore means that if you want to remain employable in the Linux
space, you will always need to stay ahead of the Jones's, and the Jones's in
this case are obsessed high-school nerds who think it's actually fun to code
for 100 hours a week.  Hey, if you have the brains and the tenacity to keep
pace, then more power to you.  Or, if you happen to like Linux (I gotta
admit, it is pretty cool), then by all means.  But if you're seeing Linux
just as an opportunity to make money, then unless you possess Herculean
fortitude, I think you'll be disappointed.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66732t=9
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]