off-topic posts - WAS - RE: What tools can tell u r using [7:66661]
Paul, How many more of these off-topic threads are you going to allow? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of LaWanda Daivs Sent: Tuesday, April 01, 2003 8:38 PM To: [EMAIL PROTECTED] Subject: Re: What tools can tell u r using lease line or ISDN? [7:66561] Take a look at this web site and let me know what you think. http://www.imagine2020.com/761368002. --- Link Teo wrote: I am using leased line to connect my remote offices to HQ. All the leased line are backup by ISDN. Is there any tools which can inform me via email or other means about whether I am using leased line now or ISDN backup? In other words, any tools which can inform me when the primary line is down and the ISDN kick in? Thanks a lot. [EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more http://platinum.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=1t=1 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco 2511 Hardware Issue [7:66662]
Has anyone experienced, or heard of, the following problem: I recently bought a 2nd hand 2511 but only async interfaces 9-16 work. 1-8 receive data but do not transmit. Could it possibly be due to one of the numerous jumper settings? many thanks in advance. Tim Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=2t=2 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: a question about ospf virtual-link auth [7:66648]
OOPS, I forgot to add on Router 2: ! router ospf 100 area 0 authentication message-digest. :)) Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=4t=66648 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: a question about ospf virtual-link auth [7:66648]
Hi, Yes. If Area 0 is MD5 then virtual link must be MD5 also. Example: ROUTER 1 ! int loopback0 ip address 150.150.1.1 255.255.255.0 ip ospf network point-to-point ! router ospf 100 network 150.150.1.0 0.0.0.255 area 0 network 150.150.10.0 0.0.0.255 area 0 network 150.150.20.0 0.0.0.255 area 1 area 0 authentication message-digest area 1 virtual-link 150.150.2.2 message-digest-key 1 md5 cisco ! int s0 ip address 150.150.10.1 255.255.255.0 ip ospf message-digest-key 1 md5 cisco ! int s1 ip address 150.150.20.1 255.255.255.0 ! ROUTER 2 ! int loopback0 ip address 150.150.2.2 255.255.255.0 ip ospf network point-to-point ! router ospf 100 network 150.150.2.0 0.0.0.255 area 1 network 150.150.20.0 0.0.0.255 area 1 network 150.150.30.0 0.0.0.255 area 2 area 1 virtual-link 150.150.1.1 message-digest-key 1 md5 cisco ! int s0 ip address 150.150.20.2 255.255.255.0 ! int s1 ip address 150.150.30.1 255.255.255.0 ! Router 3 ! int loopback0 ip address 150.150.3.3 255.255.255.0 ip ospf network point-to-point ! router ospf 100 network 150.150.3.0 0.0.0.255 area 2 network 150.150.30.0 0.0.0.255 area 2 ! int s0 ip address 150.150.30.2 255.255.255.0 ! Best of luck. Danny Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=3t=66648 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
so how does IGRP unequal load-balancing work anyway? [7:66665]
It occurs to me that I do not understand how IGRP unequal load balancing works. Yes, I understand what the commands are, and I am well aware of the intricacies involved in fast-switching and CEF. So please don't respond by telling me to configure 'variance' or stuff like that. I already know all that. What I don't understand is this. A fundamental part of EIGRP unequal load balancing is the concept of the feasible successor, where routes of unequal metric to a particular destination will be considered only if the corresponding neighbor is a feasible successor for the destination in question. This is in order to prevent the problem of packets being sent to to a router that is actually further away from the destination than the sending router is to that destination. Yet, I am aware of no such safeguards in IGRP. IGRP has no such concept of a topology table with neighbor's advertised distances and whatnot. Therefore it seems that packets could easily be forwarded away from the destination. Furthermore, it would seem to me that packets could actually bounce back and forth between 2 routers for awhile. Please say it ain't so. Yet I am unaware of any construct within IGRP that would prevent it from being so. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=5t=5 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Need a Management Software [7:66666]
Hello Group One of my customers need a Management software. The management software should mail / page / sms network admin of CISCO switch port status UP / Down and switch down status. Can any body advise me a good cheap commercial SNMP management software with these features. Thanks You in advance Regards jagan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=6t=6 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: so how does IGRP unequal load-balancing work anyway? [7:66667]
I can't remember the exact terminology but an IGRP router is aware of a neighbors metric to a destination as well as its own metric to the same destination. The router will only consider routes to be valid if the upstream router's metric to the destination is lower than its own metric to the same destination. This prevents the problems you mentioned below. You may want to get a second opinion on this! Tim nwo wrote in message news:[EMAIL PROTECTED] It occurs to me that I do not understand how IGRP unequal load balancing works. Yes, I understand what the commands are, and I am well aware of the intricacies involved in fast-switching and CEF. So please don't respond by telling me to configure 'variance' or stuff like that. I already know all that. What I don't understand is this. A fundamental part of EIGRP unequal load balancing is the concept of the feasible successor, where routes of unequal metric to a particular destination will be considered only if the corresponding neighbor is a feasible successor for the destination in question. This is in order to prevent the problem of packets being sent to to a router that is actually further away from the destination than the sending router is to that destination. Yet, I am aware of no such safeguards in IGRP. IGRP has no such concept of a topology table with neighbor's advertised distances and whatnot. Therefore it seems that packets could easily be forwarded away from the destination. Furthermore, it would seem to me that packets could actually bounce back and forth between 2 routers for awhile. Please say it ain't so. Yet I am unaware of any construct within IGRP that would prevent it from being so. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=7t=7 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Errata of TCP/IP Volume I by Jeff [7:66668]
Could Someone provide the Errata of TCP/IP Volume I by Jeff ? I have seen it before in this BBS , but now I can not find it . Thanks!!! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=8t=8 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE Vs. Linux engineer (not Ph.d) [7:66669]
Hopefully I'm not going to stir another whirpool here. Today I was surfing job sites and found out that where there are less than dozen jobs available for CCIE in Silicon valley, there are more than 80 jobs available for Linux engineers. Their initial salaries seem to be better than CCIE nowaday. We all understand that we take great pride in achieving CCIE. It is not only the hardest network certifications to get, but also financial rewards used to be excellent, too. No matter how much efforts we put in these CCIE certifications, our fates are still being subject to the cruel law of supply and demand especially in this time of war. Linux is not easy. There are many commands to remember. But it doesn't require to invest thousands of dollars in routers and switches for training. However their demands are higher than ever. On the other hand, the supply for the CCIEs seems to surpass today's demand and for some serious time to come. Some might say, you study CCIE because you love the networking. Alright, but if the future salaries for CCIEs are going to be somewhere near MCSE level, would you put such an effort to get CCIE certs and still pursuing the career of Cisco? Where are we heading? Someone please enlighten us. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=9t=9 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Data Compression [7:66670]
Hi all I had implemented compression on my routers. avg raio of transmission and receive is less than one in receiving. Can I enable compression in one direction. i.e I want to enable compression in tranmit direction only. Regards, K.Srinivas Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66670t=66670 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
Hello folks, I have question for you, we want to do dynamic NAT with a pool of 128 public ip addresses (we haven't got more public IP addresses :( ). Now, when the router does 128 translation no one can access internet... We would like to do PAT when NAT public addresses are exhausted.. is it possible? Can we do a mix of PAT and NAT configuration? Any ideas? Any configs? Thanks to all of you clever man and ladyies!!! ___ Yahoo! Messenger - Nueva versisn GRATIS Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66672t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: RS CCIE Written Question [7:66619]
Yes! it does have a lot of redistribution questions on EIGRP and IPX with complicated scenarios. I didn't have any on AppleTalk. Tim Champion wrote in message news:[EMAIL PROTECTED] Does the RS written exam include any questions on EIGRP being used for IPX or Appletalk? Many thanks Tim Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66673t=66619 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISDN Question [7:66610]
maybe with debug isdn q921 or debug isdn events regards martin Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66671t=66610 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Errata of TCP/IP Volume I by Jeff [7:66668]
Go here: http://www.ciscopress.com/catalog/product.asp?product_id={37DFB87F-2989-45A6 -8D01-0521D33054E7} Click on Errata about halfway down the page. HTH, BJ Original Message: - From: galvin lu [EMAIL PROTECTED] Date: Wed, 2 Apr 2003 09:47:31 GMT To: [EMAIL PROTECTED] Subject: Errata of TCP/IP Volume I by Jeff [7:8] Could Someone provide the Errata of TCP/IP Volume I by Jeff ? I have seen it before in this BBS , but now I can not find it . Thanks!!! mail2web - Check your email from the web at http://mail2web.com/ . Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66677t=8 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
Of course you can, but why not doing just PAT ? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66674t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: access-list logging rate-limited [7:66520]
Can't think of a reason why you would use the three lines. As far as I know (unless there are any little tricks or gotchas) this does make the first two redundant. Gareth Charlie Wehner wrote in message news:[EMAIL PROTECTED] Two quick questions: I've configured an access-list to only permit certain tcp and udp ports above 1024. At the end of the access-list I have the following commands: access-list 101 deny tcp any any log access-list 101 deny udp any any log access-list 101 deny ip any any log Question 1: Do I even need the deny tcp and deny udp statements since I also have a deny ip statement? Question 2: When I perform a port scan through the router it logs some of the events but it seems to miss the majority of them giving me the following error message: %SEC-6-IPACCESSLOGRL. access-list logging rate-limited or missed 142 packets Is access-list logging rate-limited by default? Is there anyway for me to ensure everything gets logged? I'm not sure if I understand? Thanks, Charlie Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66675t=66520 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Is this addressing permissible ? [7:66676]
SEE BELOW. I have a router with a loopback address This address is being used by Serial0/0.1 and Serial0/0.3. Is this a legal use of loopback addressing - or would it lead to ip duplicate conflicts within routing processes. (The ARP table shows no entries when these i/faces are pinged). Is this addressing 'valid' ? ..Sh ip int brie... Serial0/0 unassigned YES unset upup Serial0/0.1 146.135.171.209 YES unset upup Serial0/0.2 10.220.38.30YES NVRAM upup Serial0/0.3 146.135.171.209 YES unset upup .sh run.. interface Loopback1 ip address 146.135.171.209 255.255.255.255 no ip directed-broadcast ! interface Ethernet0/0 ip address 10.31.0.1 255.255.252.0 no ip directed-broadcast ipx encapsulation SAP ipx network 1031 ! interface Serial0/0 no ip address no ip directed-broadcast encapsulation frame-relay no ip mroute-cache random-detect frame-relay lmi-type ansi ! interface Serial0/0.1 point-to-point ip unnumbered Loopback1 no ip directed-broadcast frame-relay interface-dlci 445 ! interface Serial0/0.2 point-to-point ip address 10.220.38.30 255.255.255.252 no ip directed-broadcast ipx network 19468416 frame-relay interface-dlci 150 ! interface Serial0/0.3 point-to-point description 8K Management PVC to Docklands bandwidth 8 ip unnumbered Loopback1 no ip directed-broadcast frame-relay interface-dlci 446 ! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66676t=66676 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
Yes it can be done, you just need to redefine you pool, for 1-1 nat, use all but 1 of your available IP's, then do another nat with overload on the last ip address. =?iso-8859-1?q?ciscoGo2002?= wrote: Hello folks, I have question for you, we want to do dynamic NAT with a pool of 128 public ip addresses (we haven't got more public IP addresses :( ). Now, when the router does 128 translation no one can access internet... We would like to do PAT when NAT public addresses are exhausted.. is it possible? Can we do a mix of PAT and NAT configuration? Any ideas? Any configs? Thanks to all of you clever man and ladyies!!! ___ Yahoo! Messenger - Nueva versisn GRATIS Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66679t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
The combination of both can be done without any issues. I would keep 1 IP from the assigned range for the PAT address and have the others as 1 - 1 translations. Andrew CCNP, CCDP, CSS1 -Original Message- From: ciscoGo2002 [mailto:[EMAIL PROTECTED] Sent: 02 April 2003 12:58 To: [EMAIL PROTECTED] Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672] Hello folks, I have question for you, we want to do dynamic NAT with a pool of 128 public ip addresses (we haven't got more public IP addresses :( ). Now, when the router does 128 translation no one can access internet... We would like to do PAT when NAT public addresses are exhausted.. is it possible? Can we do a mix of PAT and NAT configuration? Any ideas? Any configs? Thanks to all of you clever man and ladyies!!! ___ Yahoo! Messenger - Nueva versisn GRATIS Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66678t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: A career in MPLS..... [7:66609]
At 03:27 AM 4/2/2003 +, Priscilla Oppenheimer wrote: I wonder if Cisco's MPLS class is just dated. It takes a long time to develop and roll out a new class, especially if there's also a Cisco Press book, exam, instructor materials, course binder, instructor training, beta testing, etc. More than likely, Cisco chose to teach what a broad range of their gear could do. L2vpn doesn't fit this category, though I would expect that they have better luck with RSVP. In the early days of MPLS, was there more emphasis on LDP than on RSVP-TE? I find the two technologies not competitive actually. I am just now building a network that runs LDP on a large number of devices for ease of provisioning, yet rides a TE core that is signalled by RSVP-TE. To me, these are two tools. However, I agree with nrf that glossing over RSVP will leave a bit of a hole in one's knowledge. I again expect that Cisco may have had wider platform support for LDP than they did for RSVP, but I'd have to check that out as I know they were an early supporter of RSVP, but may not have offered it beyond their 7500/12000 product lines. Were MPLS L3 VPNs around before L2 VPNs? RFC2547bis, or BGP/MPLS VPNs, was the first widely inter operable vpn technology that used MPLS in the forwarding plane. It is thus also the most mature of the many variants and again more widely support across the product line. L2vpn (ptp) is still pretty fresh, particularly in the Cisco camp. Very few platforms have a wide range of support for the many encapsulations defined by the various martini specs. (Luca Martini from L3 has taken the lead on the many L2 over MPLS encap standards as well as defined a signalling mechanism via LDP) I expect the standard course gear doesn't have enough support for these technologies to make labs feasible. I should note that the L2vpn (if you want to call it that and most marketing types do) I've been discussing (though briefly) are the point to point type (Virtual Private Wire Services -VPWS). Think frame relay with ethernet in the last mile and 802.1q tags for DLCIs. There are also a set of standards dealing with point to multipoint delivery, usually known as Virtual Private Lan Services that are attracting a bunch of a attention. These specs made the provider network look like a single broadcast domain. I'm not convinced that is a good thing (don't know many providers using LANE for what its worth), but it certainly seems exciting to marketing and IETF types. Anyway, I suppose my overall point is that I fully agree with nrf, that to the curricula is not entirely representative of the more interesting bits of MPLS, however I expect the underlying reason is lack of platform/sw support to enable effective classroom lecture on the subjects. Pete Maybe it's just a matter of course development latency. Thanks for your insights. Priscilla nrf wrote: Henry D. wrote in message news:[EMAIL PROTECTED] I don't mean to start any type of argument here, especially with someone who obviously has more experience than I do. Yes, you've been contributing to this study group many times. But also many times your contributions are rather rethorical than practical and at the same time you seem to draw attention to what your opinion is rather than to give an educated and objective view backed by any type of real life examples. First of all, given the subject matter (MPLS), it is most difficult to be giving out real-life examples. The fact is, MPLS is at this time not widely implemented, so therefore few examples abound. Second of all, it is essentially impossible for anybody to make a posting that is not necessarily colored with an opinion, particularly when they are discussing a subjective question. Questions like whether they should study MPLS or what they should do with their future are necessarily going to draw a wide range of opinions. If everybody is supposed to dogmatically answer 'yes' or 'no', then what's the point of even asking the question in the first place? The point is that subjective questions must necessarily elicit subjective answers. People are not robots. Everybody has to call it like they see it. You ask a subjective question, and people should be able to chime in with whatever they think. It's all about freedom of speech. Third of all, Cisconuts and I have taken the discussion offline, and while I don't want to speak for him, I would venture to say that he is quite happy with my responses. So if he's cool, then what exactly is your beef? Fourth of all, I resent the implication that my views are not educated. Be careful when you go around saying stuff like that. I seem to recall a story a few years ago how one particular guy harangued another guy about BGP, essentially saying that he knew nothing about how BGP really worked - only to find out
RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
Yes, this is a typical setup. Search cisco.com and you will find a sample config. Symon -Original Message- From: ciscoGo2002 [mailto:[EMAIL PROTECTED] Sent: 02 April 2003 11:58 To: [EMAIL PROTECTED] Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672] Hello folks, I have question for you, we want to do dynamic NAT with a pool of 128 public ip addresses (we haven't got more public IP addresses :( ). Now, when the router does 128 translation no one can access internet... We would like to do PAT when NAT public addresses are exhausted.. is it possible? Can we do a mix of PAT and NAT configuration? Any ideas? Any configs? Thanks to all of you clever man and ladyies!!! ___ Yahoo! Messenger - Nueva versisn GRATIS Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es = This email has been content filtered and subject to spam filtering. If you consider this email is unsolicited please forward the email to [EMAIL PROTECTED] and request that the sender's domain be blocked from sending any further emails. = = Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66680t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: A career in MPLS..... [7:66609]
Thank you so much for your enlightening reply!! And thank God I moved away from Novell to MS to Citrix and finally Cisco and now onto MPLS...And thank God it is a very specialized and small market right now that is looking for MPLS experienceAll the more better to develop skills in MPLS as every Tom, Dick and Harry is either just routing or switching ;- ) Looks like MPLS is the way to go!!! Come'on Sprint.Let's get on with the Show :-) From: Reply-To: To: [EMAIL PROTECTED] Subject: Re: A career in MPLS. [7:66609] Date: Wed, 2 Apr 2003 04:47:44 GMT Ah - MPLS. Yes there are several large carriers with MPLS deployed or in the process of deploying it (equant, global crossing...). Some on their core and some on their layer 2 networks such as ATM (ATT for example). Others backed away from it but are now looking at it since it's a huge marketing beast that can't be ignored (Sprint for example). Aside from ISP's some large enterprises are using it for things like MPLS enabled VPN's. As to the market for someone that knows MPLS - what I have seen is it's a very specialized and small market right now that is looking for MPLS experience. Mostly due to it still being relatively new in deployments and being relatively small in the number of deployments. I do believe however after saying that - that it never hurts to have a wide background of skills. Imagine if you specialized in Novell and never moved into other areas for example. Novell is a great product but the market for Novell pro's dried up a lot from the good ole days. You would be much less marketable if you didn't also know other things such as Microsoft or Routing or ... I could go into my opinions of the pros and cons of MPLS and where I think it fits - but that's another boring story for later :) www.ccie4u.comOn 1 Apr 2003 at 15:47, nrf wrote:Cisco Nuts wrote in message news:[EMAIL PROTECTED]Hello group, How does one feel about a career in MPLS...I mean doing MPLSas part of your core job day in and out.Is it worth it? Since ournetwork does not use MPLS (maybe never will) inspite of being one of the Big Four Tier 1 SP's Let me guess. Do you work for Sprint? are there other SP's that use MPLS in theirbackbone?? Yeah, there are some. I have just given myself a month or so break from my CCIE LabPrep.(yeah!yeah! most would consider me stupid on this) to study MPLSfor the CCIP and am thinking if I should pursue this subject just like Idid for BGP.know it inside out cold.and maybe consider a newcareer/job in MPLS (obviously along with BGP, MBGP, MCast etc...) Doesanyone know of how MPLS is viewed out there? I mean, in terms ofimplementation, popularity and last but not the least , $$$ ??? ;-Whichof the Big SP's or Enterprise networks have implemented MPLS? Has it been worth the advantages that MPLS proposes??Thank you.Sincerely,CN The way I see it is this. MPLS is potentially powerful technology for it can be used as a lingua-franca among a carrier's network and transport layer and also as a way to impose circuit-switching discipline upon IP and therefore offer circuit-switching services with a pure IP network. But MPLS is by no means a slam-dunk. Certain carriers, most notably Sprint, have elected not to go down the MPLS path because they believe the technology is immature (and they are correct) and also because they believe that they can garner the benefits of MPLS by other means (also correct). The point is that while MPLS offers great potential, it also presents problems, so implementing it is not a no-brainer. And furthermore, I don't particularly like the way that Cisco is pushing MPLS, particularly in its cert program. In my opinion, I think Cisco's cert programs emphasize the least useful parts of MPLS while neglecting the more useful parts. For example, I don't understand why Cisco pushes LDP the way it does, for LDP merely builds LSP's that correspond to the route table, but what's so useful about having LDP's that look like the route table? It is far more useful to build LSP's that differ from the route table, but the methods of doing that are not really covered very much (if at all) in the Cisco curricula. Also, I don't understand why Cisco places such an emphasis on L3VPN's, as if L3VPNs were the only important service that MPLS enables. L3VPN's are only one of the new services that you can enable, and in my opinion, one of the less important ones. Far more important are the L2VPN capabilities and the ability to unify IP, ATM, and optical into a single management plane. The point I'm making is that if you merely study MPLS according to the Cisco curricula, you really haven't learned much about it that's actually useful. Add photos to your messages with MSN 8. Get 2 months FREE*.
Re: A career in MPLS..... [7:66609]
Oh! Boy!! What have I got myself into??? Sorry guys, I had NO intention at all to start any kind of flame which I have literally despised in the past I have been frequenting this groupstudy since 1998 and have learn a LOT!! And really advanced my career and ;- Thank you for people like nrf who have always been there to answer and advise young newbies like us in this field Thank you nrf... So guys, let's refrain from turning this discussion into a 'flame' and get on with our quest for greater knowledge and skills!! Just wish that old-timers like Pamela and Laura were still around with us in this group!! Thank God for Priscilla, she is still there with us along with Howard and Chuck !! Thank you all. Sorry for anything that I might have invoked!! PEACE From: nrf Reply-To: nrf To: [EMAIL PROTECTED] Subject: Re: A career in MPLS. [7:66609] Date: Tue, 1 Apr 2003 21:38:58 GMT Henry D. wrote in message news:[EMAIL PROTECTED] Let me say up front, I don't have much experience in MPLS, I have only played with it in the lab and not all that extensively either. But CN is simply trying to get an idea of what to expect to go that road. I believe that was precisely what I answered.Is nrf saying not to advance in this field by studying Cisco's way of emphasising MPLS ? What I said is that if you want to advance in that field, you will need substantially more than what Cisco wants you to know about it. Read my post again. You know, we all have our doubts, he's brave enough to come to this group and ask questions. As far as L3VPN's, why not concentrate on that at least to start with. I never said not to learn L3VPN's. Read my post again. What I said is that study of L3VPN's shouldn't be emphasized to the degree that Cisco seems to emphasize it. It's still one reason to do the MPLS thing. By just doing that he'll need to touch on many aspects of MPLS anyway. He will still use either LDP or RSVP, he still will use the LSP establishment, he might as well learn the TE options available for establishment of those LSP's. He'll need to learn how to use the LSP's for pushing traffic over them. He'll learn what and how the labels get pushed/popped. Then why not study it that way. He's not advancing his MPLS skills, he might not have any yet. He's simply trying to see if he will be able to utilize any of the skills he will have to learn to make it worth it his while. No doubt all learning is good. Again, read my post again. I never said that he shouldn't learn it. What I said is that he shouldn't necessarily learn it the Cisco way. Well, maybe someone else with more experience in MPLS arena and someone more objective can give a better insight as to whether there is a demand for these skills. Are you implying that I'm not objective - that I have some kind of agenda? nrf wrote in message news:[EMAIL PROTECTED]Cisco Nuts wrote in messagenews:[EMAIL PROTECTED] Hello group, How does one feel about a career in MPLS...I mean doing MPLS as part of your core job day in and out.Is it worth it? Since our network does not use MPLS (maybe never will) inspite of being one of the Big Four Tier 1 SP's Let me guess. Do you work for Sprint? are there other SP's that use MPLS in their backbone?? Yeah, there are some. I have just given myself a month or so break from my CCIE Lab Prep.(yeah!yeah! most would consider me stupid on this) to study MPLS for the CCIP and am thinking if I should pursue this subject just like I did for BGP.know it inside out cold.and maybe consider a new career/job in MPLS (obviously along with BGP, MBGP, MCast etc...) Does anyone know of how MPLS is viewed out there? I mean, in terms of implementation, popularity and last but not the least , $$$ ??? ;-Which of the Big SP's or Enterprise networks have implemented MPLS? Has it been worth the advantages that MPLS proposes??Thank you.Sincerely,CN The way I see it is this. MPLS is potentially powerful technology for itcan be used as a lingua-franca among a carrier's network and transport layerand also as a way to impose circuit-switching discipline upon IP and therefore offer circuit-switching services with a pure IP network. But MPLS is by no means a slam-dunk. Certain carriers, most notably Sprint, have elected not to go down the MPLS path because they believe thetechnology is immature (and they are correct) and also because they believethat they can garner the benefits of MPLS by other means (also correct).The point is that while MPLS offers great potential, it also presentsproblems, so implementing it is not a no-brainer. And furthermore, I don't particularly like the way that Cisco is pushingMPLS, particularly in its cert program. In my opinion, I think Cisco's
RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
Yes you can just take your nat statement (ip nat inside source list 1...) and add the word overload on the end of the command. You will use a 1:1 NAT for the first set of users. Once your IP's are used up you will use PAT. It is important to note that some issues arise with PAT versus NAT like IPSEC or DLSW. just an fyi. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66685t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: A career in MPLS..... [7:66609]
FWIW I have seen quite a few Cisco jobs recently on jobserve looking for people with MPLS skills specifically. -Original Message- From: nrf [mailto:[EMAIL PROTECTED] Sent: 02 April 2003 02:52 To: [EMAIL PROTECTED] Subject: Re: A career in MPLS. [7:66609] Henry D. wrote in message news:[EMAIL PROTECTED] I don't mean to start any type of argument here, especially with someone who obviously has more experience than I do. Yes, you've been contributing to this study group many times. But also many times your contributions are rather rethorical than practical and at the same time you seem to draw attention to what your opinion is rather than to give an educated and objective view backed by any type of real life examples. First of all, given the subject matter (MPLS), it is most difficult to be giving out real-life examples. The fact is, MPLS is at this time not widely implemented, so therefore few examples abound. Second of all, it is essentially impossible for anybody to make a posting that is not necessarily colored with an opinion, particularly when they are discussing a subjective question. Questions like whether they should study MPLS or what they should do with their future are necessarily going to draw a wide range of opinions. If everybody is supposed to dogmatically answer 'yes' or 'no', then what's the point of even asking the question in the first place? The point is that subjective questions must necessarily elicit subjective answers. People are not robots. Everybody has to call it like they see it. You ask a subjective question, and people should be able to chime in with whatever they think. It's all about freedom of speech. Third of all, Cisconuts and I have taken the discussion offline, and while I don't want to speak for him, I would venture to say that he is quite happy with my responses. So if he's cool, then what exactly is your beef? Fourth of all, I resent the implication that my views are not educated. Be careful when you go around saying stuff like that. I seem to recall a story a few years ago how one particular guy harangued another guy about BGP, essentially saying that he knew nothing about how BGP really worked - only to find out later that the second guy was none other than a certain Tony Li, the father of BGP. Now, don't get me wrong, I'm not saying that I'm Li or anywhere close to him. What I'm saying is that you should watch your fire. So yes, I'm saying that some times you don't quite stick to the subject at hand. I don't see how your view on Cisco's curriculum in re to MPLS can be taken seriously without you putting actual examples of how you came to that conclusion. Ok, fine, then let's review the CCIP curricula vis-a-vis MPLS, and in particular, let's review what exactly they teach. I know for a fact that they teach primarily LDP and gloss over RSVP-TE. Do you think this is wise? There is no evidence in the industry of a consensus that LDP will automatically win out over RSVP-TE. If you have such evidence, I would like to see it. I doubt that LDP will ever win out simply because you can't do TE with LDP unless you go with CR-LDP which Cisco does not have any plans to support at this time. TE is one of the more important features available within MPLS. The point I'm making is that neglecting RSVP-TE within an MPLS exam seems rather dubious. Second, the last 2-3 modules of that class deal specifically with l3vpn's, with nary a mention of any l2vpn technology whatsoever. Again, why such an emphasis on L3 but no discussion of L2? Much of the most exciting work in MPLSCON is about l2vpn's. Don't get me wrong, L3 is good to know, but a good MPLS class would also get into a discussion of l2. The point I'm making is this. If all you do is follow the official Cisco MPLS class, you will get a warped view of how real-world MPLS is. LDP is not the ultimate no-brainer signalling path for constructing LSP's and MPLS can do far more than just L3VPN's. I'm not telling you not to follow Cisco's curricula. What I'm saying is that you should supplement it with other readings and experience. Even if the knowledge required for achieving Cisco's recognition in re to MPLS was not as advanced as one would hope, shouldn't we look at positives of the whole process ? Again, it's not a matter of being advanced as it has to do with emphasis. I think that the coursework emphasizes some of the not-so-important things and does not discuss some of the more important things. Also, I don't think it's my job to 'play nice'. If things are not good, then I think people should say that they're not good. Why engage in diplomatic euphemisms? Does it really do anybody any good to dress things up so that they look better than they really are? I'm not running a marketing campaign. There are still things to be learnt, and emphasising them rather than the weaknesses would be a better idea. You won't become an expert just by passing
RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
Thanks Symon, We really want to know more about the way the overload works... Maybe we were not so exactly as we wanted... We want to know how can we use PAT when any others publics ips are exhausted after using NAT? For example, if we configure this: ip nat inside source list pool overload How does it work?? The router uses NAT with every public IP in the pool and when the pool is exhausted the router begins doing PATH with first IP address of the pool,and so on..?? Can you please respond to this question??? (be more specific, thx) Thanks people... --- Symon Thurlow escribis: Yes, this is a typical setup. Search cisco.com and you will find a sample config. Symon -Original Message- From: ciscoGo2002 [mailto:[EMAIL PROTECTED] Sent: 02 April 2003 11:58 To: [EMAIL PROTECTED] Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672] Hello folks, I have question for you, we want to do dynamic NAT with a pool of 128 public ip addresses (we haven't got more public IP addresses :( ). Now, when the router does 128 translation no one can access internet... We would like to do PAT when NAT public addresses are exhausted.. is it possible? Can we do a mix of PAT and NAT configuration? Any ideas? Any configs? Thanks to all of you clever man and ladyies!!! ___ Yahoo! Messenger - Nueva versisn GRATIS Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es [EMAIL PROTECTED] = This email has been content filtered and subject to spam filtering. If you consider this email is unsolicited please forward the email to [EMAIL PROTECTED] and request that the sender's domain be blocked from sending any further emails. = = ___ Yahoo! Messenger - Nueva versisn GRATIS Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66686t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]
Just study both and go easy on the incitement of textual riots. At 10:15 AM 4/2/2003 +, you wrote: Hopefully I'm not going to stir another whirpool here. Today I was surfing job sites and found out that where there are less than dozen jobs available for CCIE in Silicon valley, there are more than 80 jobs available for Linux engineers. Their initial salaries seem to be better than CCIE nowaday. We all understand that we take great pride in achieving CCIE. It is not only the hardest network certifications to get, but also financial rewards used to be excellent, too. No matter how much efforts we put in these CCIE certifications, our fates are still being subject to the cruel law of supply and demand especially in this time of war. Linux is not easy. There are many commands to remember. But it doesn't require to invest thousands of dollars in routers and switches for training. However their demands are higher than ever. On the other hand, the supply for the CCIEs seems to surpass today's demand and for some serious time to come. Some might say, you study CCIE because you love the networking. Alright, but if the future salaries for CCIEs are going to be somewhere near MCSE level, would you put such an effort to get CCIE certs and still pursuing the career of Cisco? Where are we heading? Someone please enlighten us. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66688t=9 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Congratulations!! [7:66644]
Priscilla, Congratulations Again! You deserve it! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66690t=66644 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Need a Management Software [7:66666]
Jagan, a software called 'whatsupgold' will do just fine. it costs about $700. this includes 1 yr support and subscription which is optional. http://www.whatsupgold.co.uk/ Tunde - Original Message - From: Jagan Krishnaraj To: Sent: Wednesday, April 02, 2003 10:10 AM Subject: Need a Management Software [7:6] Hello Group One of my customers need a Management software. The management software should mail / page / sms network admin of CISCO switch port status UP / Down and switch down status. Can any body advise me a good cheap commercial SNMP management software with these features. Thanks You in advance Regards jagan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66691t=6 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TCP Algorithm - Slow Start - Congestion Avoida [7:66605]
Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66689t=66605 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
I knew this was possible on the pix, but have never configured it on an IOS router. It would be really appreciated if someone wouldn't mind posting a sample config as I cannot locate one on cisco's site or the netpro forum specific to IOS routers with both NAT and PAT configured like outlined in this post. Thanks. Yes you can just take your nat statement (ip nat inside source list 1...) and add the word overload on the end of the command. You will use a 1:1 NAT for the first set of users. Once your IP's are used up you will use PAT. It is important to note that some issues arise with PAT versus NAT like IPSEC or DLSW. just an fyi. -- Composed with Newz Crawler 1.3 http://www.newzcrawler.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66694t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PAT AFTER NAT (More detailed) [7:66692]
Thank you Troy, but I am afraid this is not enough. Let's see an example: Public Pool: X.X.X.0 --- X.X.X.128 (128 addresses) Private addresses: 10.10.10.X (256 addresses) NAT CONFIG: access-list 1 X.X.X.0 0.0.0.255 ip nat pool kk X.Y.Z.0 X.Y.Z.128 netmask 255.0.0.0 ip nat inside source list 1 pool kk overlad How will this work?? A friend of mine told me that the router will start doing NAT (one private address to one public address) until the public pool is finished. After that the router will start doing PAT. What do you think?? I am very curious about this and I don't have a router to test it... (Richard, I don't like PAT because some applications works bad with it, and because a lot of places in internet block more than one access with the same IP.) I want to thank all people who is answering me... Por favor, responda a Troy Leliard Enviado por:[EMAIL PROTECTED] Destinatarios: [EMAIL PROTECTED] CC: Asunto: RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672] Yes it can be done, you just need to redefine you pool, for 1-1 nat, use all but 1 of your available IP's, then do another nat with overload on the last ip address. =?iso-8859-1?q?ciscoGo2002?= wrote: Hello folks, I have question for you, we want to do dynamic NAT with a pool of 128 public ip addresses (we haven't got more public IP addresses :( ). Now, when the router does 128 translation no one can access internet... We would like to do PAT when NAT public addresses are exhausted.. is it possible? Can we do a mix of PAT and NAT configuration? Any ideas? Any configs? Thanks to all of you clever man and ladyies!!! ___ Yahoo! Messenger - Nueva versisn GRATIS Super Webcam, voz, caritas animadas, y mas... http://messenger.yahoo.es Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66692t=66692 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE written exam passed! [7:66364]
Can you tell us the minimum passing score for the CCIE wrtiiren test? I realized Cisco has changed the written to a 2hr/100 Qs format starting 3/28. Thanks, Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66693t=66364 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]
You have to think about what you want to do, and about the long term. While the rest of the economy experienced a mild and short recession-- so mild that it is debatable whether it technically should have counted as a recession, the telecommunications sector experienced something much more serious. If I use the word depression, someone will say that is not accurate, as you can't have a depression in one industry, or some such technicality. This condition will not last forever. No one is throwing away their computer and giving up internet access. We are moving toward more and more high speed internet access and wireless access, which means more business and more support work. Cisco has just bought Linksys, a consumer networking equip company, which suggests that Cisco may soon move heavily into the mass market arena. As lower-cost Cisco consumer and SOHO devices proliferate, perhaps the trend will be for there to be a growing number of Cisco-related jobs, but at lower pay than we saw in the tech boom. I think the long-term future for people near the top of the Cisco knowledgebase pyramid is very good. Someone will have to teach all these lower-level support folks, and write books on how to use such and such Cisco consumer router or switch or firewall, in addition to doing all the corporate network design/install/troubleshooting work done now. Linux is very difficult to learn really well. True, CCIE lab equipment is expensive, but I think it may take less time for some people to become a CCIE than to get the kind of facility with Linux that the Linux-guru jobs require. Okay, maybe this is going to be true for only a very few people, but it might have been true for me. I mean, the UNIX command line syntax (-this, /that) often bears no relation to anything that can be used a mnemonic, while Cisco IOS is very much like plain English. I know I made a conscious decision to put away my various Unix platforms (FREEBSD, Red Hat Linux, Solaris) and concentrate on CCIE. Anyway, I love the Cisco material I am immersed in now. You will need to decide for yourself what you want to do, but if you decide based on the relative salaries offered right now, you could make the wrong decision. Tom Larus, CCIE #10,014 Mic shoeps wrote in message news:[EMAIL PROTECTED] Hopefully I'm not going to stir another whirpool here. Today I was surfing job sites and found out that where there are less than dozen jobs available for CCIE in Silicon valley, there are more than 80 jobs available for Linux engineers. Their initial salaries seem to be better than CCIE nowaday. We all understand that we take great pride in achieving CCIE. It is not only the hardest network certifications to get, but also financial rewards used to be excellent, too. No matter how much efforts we put in these CCIE certifications, our fates are still being subject to the cruel law of supply and demand especially in this time of war. Linux is not easy. There are many commands to remember. But it doesn't require to invest thousands of dollars in routers and switches for training. However their demands are higher than ever. On the other hand, the supply for the CCIEs seems to surpass today's demand and for some serious time to come. Some might say, you study CCIE because you love the networking. Alright, but if the future salaries for CCIEs are going to be somewhere near MCSE level, would you put such an effort to get CCIE certs and still pursuing the career of Cisco? Where are we heading? Someone please enlighten us. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66695t=9 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RV: Need a Management Software [7:66666]
Hello, There is the freeware package KiwiSyslog that is fairly impressive for something that costs nothing. http://www.kiwisyslog.com/products.htm It will send a daily logfile also but if you want to be emailed about traps etc, ya need the Registered Version (about $50). I also use Cattools from the same company, which saves me that annoying task of backing up all of our router and switch configs, by doing it at the click of a button. It is also freeware - tho you pay 50 bucks if you want the advanced version (backs up more than 2 devices automatically without any manual intervention). Rgds - Original Message - From: Jagan Krishnaraj To: Sent: Wednesday, April 02, 2003 10:10 AM Subject: Need a Management Software [7:6] Hello Group One of my customers need a Management software. The management software should mail / page / sms network admin of CISCO switch port status UP / Down and switch down status. Can any body advise me a good cheap commercial SNMP management software with these features. Thanks You in advance Regards jagan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66697t=6 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]
IMHO if you are studying to get CCIE for money you are doing if for the wrong reasons. Doing a job you enjoy will give you more satisfation than doing a job because the money is good. Thats my $0.02 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66696t=9 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: A career in MPLS..... [7:66609]
Cisco developers have, and continue to make, major contributions into what I hesitate to call MPLS. Some context may help here. First, one has to understand that protocol families like MPLS do not cleanly fit into the traditional model, and you can't force-fit them. When I say traditional model, however, I'm restricting that to the seven-story apartment house of ISO 7498. MPLS fits better with the revisions in the ISO document Internal Organization of the Network Layer. Even beyond that, however, the IETF struggled with how to handle these and related protocols, and eventually set up the sub-IP directorate -- intelligent transmission systems below IP but far more complex than traditional data links. This isn't restricted to MPLS, but also covers IP over optical, IP over cable, generic switch management protocol, and daughter-of-MPLS, Generalized MPLS (GMPLS). Cisco educational materials have long overemphasized the forwarding part of MPLS and sort of assumed here a miracle happens regarding path setup. I remember trying to teach a beta class on MPLS on the ex-Stratacom 8850, turning off the projector, turning to the class of Cisco SE's, and going to the whiteboard to spend 45 minutes introducing how MPLS actually worked. In particular, the roles of MPLS signaling protocols such as basic LDP, RSVP-TE, and extended LDP were skimmed over, and the dependence of these protocols on conventional IP routing was minimized. Little attention also was given to the extremely rich traffic management and high availability features of MPLS, which I consider the main motivation for using it -- not forwarding performance improvements, which, at best, are minimal. Truly understanding the direction of these technologies works much better when you understand the generalization of GMPLS and see how it gives a common way of dealing with traditional technologies. Up to now, MPLS was packet/frame oriented. The GMPS extensions, however, allow you to use a largely common control framework for: packets/frames wavelengths (lambdas) in pure optical networking timeslots in TDM networking port identifiers when working with DACS and the like. I can't necessarily recommend any pure MPLS books, because I go directly to the IETF documents when I need to check something -- and am on the developer mailing lists. There is a significant amount about ISP applications of MPLS, however, in my book, _Building Service Provider Networks_ (Wiley, 2002, ISBN 0-471-09922-8), for which our own Annlee Hines was my peer reviewer, and Scott Bradner and Lyman Chapin were advisors. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66698t=66609 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VLAN loop problem [7:66656]
No, we don't have portfast bpdu-guard enabled. What does it do? Thanks Larry! Thomas Larry Letterman wrote in message news:[EMAIL PROTECTED] port mac address security might work, altho its a lot of admin overhead..are you running portfast bpdu-guard on the access ports? Larry Letterman Network Engineer Cisco Systems - Original Message - From: Thomas N. To: [EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 8:14 PM Subject: VLAN loop problem [7:66656] Hi All, I got a problem in the production campus LAN here between VLANs. Please help me out! Below is the scenario: We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets. Routing is enable/allowed between the two subnets using MSFC of the 6500. Each subnet has a DHCP server to assign IP address to devices on its subnet. Spanning-tree is enable; however, portfast is turned on on all non-trunking/uplink ports. Recently, devices on VLAN 10 got assigned an IP address of 10.20.x.x , which is from the DHCP on the other scope and also from 10.10.x.x scope, and vice versa. It seems that we a loop somewhere between the 2 subnets but we don't know where. I noticed lots of end users have a little unmanged hub/switch hang off the network jacks in their cubicals and potentially cause loop. Is there any way that we can block the loop on the Cisco switches without visiting cubicals taking those little umanaged hubs/switches? Thanks! Thomas Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66699t=66656 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]
I would alter this sentiment slightly: if you're doing it *just* for money... Honestly - would anyone do this stuff on a completely voluntary basis? I didn't think so. ;-) BJ Original Message: - From: Brian [EMAIL PROTECTED] Date: Wed, 2 Apr 2003 15:19:14 GMT To: [EMAIL PROTECTED] Subject: Re: CCIE Vs. Linux engineer (not Ph.d) [7:9] IMHO if you are studying to get CCIE for money you are doing if for the wrong reasons. Doing a job you enjoy will give you more satisfation than doing a job because the money is good. Thats my $0.02 mail2web - Check your email from the web at http://mail2web.com/ . Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66700t=9 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Microsoft IAS and VPN 3000/Client Authentication [7:66703]
Hello All: I'm looking into using Microsoft IAS and Windows NT4 PDC to authenticate VPN client users who are accessinga VPN 3000 concentrator. I want home VPN client users to utilize the NT4 PDC for their login authentication. The VPN 3000 concentrator is located on the outside interface of the PIX while the NT 4 PDC is located on the inside. My questions are: a) Should I combine the PDC and IAS into one server? My preference is to use separate servers, and would this scenario works? b) What ports should I open to allow Radius and NT authentication from the outside to the inside? Thanks. Ken ___ Join Excite! - http://www.excite.com The most personalized portal on the Web! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66703t=66703 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Pxe over cisco 6509 ports [7:66702]
I am wondering what i may be missing. Probably something really simple, (i hope). We are using PXe to communicate with pc's from the altiris server ( remote control, helpdesk, and inventory control system). We are able to get a pxe client to boot if a hub is plugged into the switch and the pc to the hub.. If we directly connect the pc to the switch port, then we cannot get pxe to boot. The 6509 has portfast enabled, and also the pxe server and client are in same vlan for troubleshooting purposes. Even though portfast is enabled, is pxe reply possibly too quick for the pxe client computer to recieve during port startup? Any suggestions or ideas on cisco config to add or check?? TIA Jordan Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66702t=66702 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: NT domain access after connecting through VPN [7:66618]
Thanks for your input. I'm looking around at other vendors to see what they offer with this. One thing I don't like with the PIX vpn is the lack of logging capabilites. I want to know when someone logged in, when the logged out, where they went, etc. I'm looking at the concentrators but don't remember seeing this. As far as I can see, AAA can do some of this but you have to use http, ftp, or telnet. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66705t=66618 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Taking Support Exam this Friday...Need some pointers [7:66704]
Hi All, Planning to take the support exam (my last one in line for CCNP), this Firday. What is the passing score ? How many quesions ? Pls send me good pointers and also the pitfalls I need to look for, if any. Thanks Sudarshan __ Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more http://tax.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66704t=66704 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
New CCIE revised exam preparation [7:66706]
Hi there, Currently I'm studing for the new revised 100 question CCIE RS written exam. Currently I use the book CCIE Routing and Switching exam cert guide bt A. Bruno. I think this book is fine for CCNP, but not for a CCIE written test. I would like to buy other material, what are your suggestions? With kind regard, Jorg. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66706t=66706 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: New CCIE revised exam preparation [7:66706]
Jorg, go to Denis Laganiere link and read it. He has a wealth of information. http://home.attbi.com/~blaga/Written.htm rbx10Jörg Buesink wrote: Hi there, Currently I'm studing for the new revised 100 question CCIE RS written exam. Currently I use the book CCIE Routing and Switching exam cert guide bt A. Bruno. I think this book is fine for CCNP, but not for a CCIE written test. I would like to buy other material, what are your suggestions? With kind regard, Jorg. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66707t=66706 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: New CCIE revised exam preparation [7:66706]
so it went from 150 questions/3 hrs to 100 questions/2 hours on march 28th? the cisco page does indicate the reduction from 3 to 2 hrs but no mention of the # of questions -Original Message- From: Jvrg Buesink [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 02, 2003 10:06 AM To: [EMAIL PROTECTED] Subject: New CCIE revised exam preparation [7:66706] Hi there, Currently I'm studing for the new revised 100 question CCIE RS written exam. Currently I use the book CCIE Routing and Switching exam cert guide bt A. Bruno. I think this book is fine for CCNP, but not for a CCIE written test. I would like to buy other material, what are your suggestions? With kind regard, Jorg. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66709t=66706 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Microsoft IAS and VPN 3000/Client Authentication [7:66703]
Though I haven't done it myself, you should be able to keep the IAS box (Windows 2000 Member Server) and the NT4PDC Box separate. You're authentication AND access can be defined by the IAS box. You would only need to allow RADIUS Ports... 1645 RADIUS Authentication 1646 RADIUS Accounting OR 1812 RADIUS server 1813 RADIUS accounting ..on the PIX between the concentrator and the IAS box. It would be more advisable to put the VPN Concentrator on the DMZ port of the PIX if you have it; this is left to interpretation and opinion. NOTE: I have no experience with the Concentrators, so, your mileage may vary. -Mark -Original Message- From: kwindancer [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 02, 2003 11:27 AM To: [EMAIL PROTECTED] Subject: Microsoft IAS and VPN 3000/Client Authentication [7:66703] Hello All: I'm looking into using Microsoft IAS and Windows NT4 PDC to authenticate VPN client users who are accessinga VPN 3000 concentrator. I want home VPN client users to utilize the NT4 PDC for their login authentication. The VPN 3000 concentrator is located on the outside interface of the PIX while the NT 4 PDC is located on the inside. My questions are: a) Should I combine the PDC and IAS into one server? My preference is to use separate servers, and would this scenario works? b) What ports should I open to allow Radius and NT authentication from the outside to the inside? Thanks. Ken ___ Join Excite! - http://www.excite.com The most personalized portal on the Web! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66710t=66703 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
I've found that you cannot do this, at least not when you do nat to a pool of addresses. You have to do static nat, then overload the rest. I tried adding overload to the end of my existing nat statment with the pool, it started PATing the addresses from the beginning. Instead of using the 1:1 from the pool, then pating anything beyond that. Lee Carter wrote in message news:[EMAIL PROTECTED] Yes you can just take your nat statement (ip nat inside source list 1...) and add the word overload on the end of the command. You will use a 1:1 NAT for the first set of users. Once your IP's are used up you will use PAT. It is important to note that some issues arise with PAT versus NAT like IPSEC or DLSW. just an fyi. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66708t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VLAN loop problem [7:66656]
What does portfast bpdu-guard do? Does it prevent interfaces with portfast enabled from causing the loop in my scenario? Larry Letterman wrote in message news:[EMAIL PROTECTED] port mac address security might work, altho its a lot of admin overhead..are you running portfast bpdu-guard on the access ports? Larry Letterman Network Engineer Cisco Systems - Original Message - From: Thomas N. To: [EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 8:14 PM Subject: VLAN loop problem [7:66656] Hi All, I got a problem in the production campus LAN here between VLANs. Please help me out! Below is the scenario: We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets. Routing is enable/allowed between the two subnets using MSFC of the 6500. Each subnet has a DHCP server to assign IP address to devices on its subnet. Spanning-tree is enable; however, portfast is turned on on all non-trunking/uplink ports. Recently, devices on VLAN 10 got assigned an IP address of 10.20.x.x , which is from the DHCP on the other scope and also from 10.10.x.x scope, and vice versa. It seems that we a loop somewhere between the 2 subnets but we don't know where. I noticed lots of end users have a little unmanged hub/switch hang off the network jacks in their cubicals and potentially cause loop. Is there any way that we can block the loop on the Cisco switches without visiting cubicals taking those little umanaged hubs/switches? Thanks! Thomas Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66711t=66656 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]
This is what I have run into in the past and I was almost certain that it was not possible. I set it up in the lab here with various configs and had the same result. As far as I was told in the last routing update I attended at our local cisco office, the SE's there confirmed that the PIX can be defined with a NAT Pool of addresses and then have the same pool statement entered only this time specifying the same address (ie. PAT) as an overload. They confirmed that the IOS router code does not function like this and that you would have to statically NAT those addresses that you wanted 1:1 on and then have a blanket PAT (overload) statement in to cover the rest. In the case of the original question with wanting to NAT 128 clients 1:1 and then have PAT for the rest, this would require a lot of configuration and to guarantee that 1:1 would occur (or to at least keep track of it) you would require static IPs on the clients wishing to 1:1 NAT. Hope I'm not flying way offline here but I believe this is the only way possible with an IOS router. Cheers I've found that you cannot do this, at least not when you do nat to a pool of addresses. You have to do static nat, then overload the rest. I tried adding overload to the end of my existing nat statment with the pool, it started PATing the addresses from the beginning. Instead of using the 1:1 from the pool, then pating anything beyond that. Lee Carter wrote in message news:[EMAIL PROTECTED] Yes you can just take your nat statement (ip nat inside source list 1...) and add the word overload on the end of the command. You will use a 1:1 NAT for the first set of users. Once your IP's are used up you will use PAT. It is important to note that some issues arise with PAT versus NAT like IPSEC or DLSW. just an fyi. -- Composed with Newz Crawler 1.3 http://www.newzcrawler.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66712t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE Vs. Linux engineer (not Ph.d) [7:66669]
Thank you all folks. I don't know much about Linux. But I would like to use the analogy that Cisco engineers are like traffic officers in major intersections in a city and Linux (Lexus), Microsoft (Mercedes), Solaris (Saab), Visual+ (Volvo) engineers are like thousands of drivers passing through these intersections. As the traffic gets heavy, those intersections will get bog down and another intersections will be build to accomodate the throughput of the traffics. But the Lexus, Mercedes, Saab and Volvo engineers will build more bigger, faster and powerful sofisticated cars to get the most out of the infrastructures and elicit more customers to learn how to drive their cars. But the trouble is that the city is not expanding or get connected with another cities (hats off to the mayor Bush). Seems to me that there will be plenty of fuel and asphalt to build the road and power the cars. But the land is limited and more cars will be build to meet the insatiable consumer appetite. But soon the automations will catch up with the demand and the traffic officers will standing in his post like the Maytag technician. Worst of all, more traffic officers will become increasingly territorial to new and old alike. They will use the terms like 'ph'd' and 'lab rat' to boost their egos and deter others who are trying to enter into their realm. Yes, I love the challenge and that's what I'm doing right now. But I'll seriously reconsider if my presence becomes a threat to another traffic officer's pizza and the only choice I'll be left with is a big mac. Looks like Linux (open system for free) provide you that unhostile pizzaria and more. Your friendly insignt is appreciated. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66713t=9 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VLAN loop problem [7:66656]
Yes, it prevents loops in spanning tree on layer 2 switches from causing a loop by disabling the port on a cisco switch... Larry Letterman Network Engineer Cisco Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Thomas N. Sent: Wednesday, April 02, 2003 12:18 PM To: [EMAIL PROTECTED] Subject: Re: VLAN loop problem [7:66656] What does portfast bpdu-guard do? Does it prevent interfaces with portfast enabled from causing the loop in my scenario? Larry Letterman wrote in message news:[EMAIL PROTECTED] port mac address security might work, altho its a lot of admin overhead..are you running portfast bpdu-guard on the access ports? Larry Letterman Network Engineer Cisco Systems - Original Message - From: Thomas N. To: [EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 8:14 PM Subject: VLAN loop problem [7:66656] Hi All, I got a problem in the production campus LAN here between VLANs. Please help me out! Below is the scenario: We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets. Routing is enable/allowed between the two subnets using MSFC of the 6500. Each subnet has a DHCP server to assign IP address to devices on its subnet. Spanning-tree is enable; however, portfast is turned on on all non-trunking/uplink ports. Recently, devices on VLAN 10 got assigned an IP address of 10.20.x.x , which is from the DHCP on the other scope and also from 10.10.x.x scope, and vice versa. It seems that we a loop somewhere between the 2 subnets but we don't know where. I noticed lots of end users have a little unmanged hub/switch hang off the network jacks in their cubicals and potentially cause loop. Is there any way that we can block the loop on the Cisco switches without visiting cubicals taking those little umanaged hubs/switches? Thanks! Thomas Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66714t=66656 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Question about the Revised RS CCIE Written Exam [7:66715]
Dear All, Could someone please confirm about the number of questions in the new RS written exam after March 28 2003 as it is not mentioned on CCIE information page. Thanks in advance. Regards, Zahid Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66715t=66715 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Taking Support Exam this Friday...Need some pointe [7:66704]
Sudarshan, hope this help: Exam Number: 640-606 Associated Certifications: CCNP Duration: 75 min (50-60 questions) Make sure you use the Exam Cram for support. I took the exam long ago so I dont' remember passing score. You might want to check this link for further info. http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_exams/640-606.html Good luck -rbx10 CCIE-n-training Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66716t=66704 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: so how does IGRP unequal load-balancing work anywa [7:66665]
nwo wrote: It occurs to me that I do not understand how IGRP unequal load balancing works. Yes, I understand what the commands are, and I am well aware of the intricacies involved in fast-switching and CEF. So please don't respond by telling me to configure 'variance' or stuff like that. I already know all that. What I don't understand is this. A fundamental part of EIGRP unequal load balancing is the concept of the feasible successor, where routes of unequal metric to a particular destination will be considered only if the corresponding neighbor is a feasible successor for the destination in question. This is in order to prevent the problem of packets being sent to to a router that is actually further away from the destination than the sending router is to that destination. Yet, I am aware of no such safeguards in IGRP. IGRP has no such concept of I don't think such a safeguard is necessary. A router running even a simple distance-vector protocol like IGRP knows the metric of its neighbors because the neighbors report it in update packets. The router can add routes to the routing table based on this information alone and knowledge of the variance and maximum-paths values. It would be a broken protocol indeed if it added routes that included a next-hop neighbor that was farther away. The business of feasible successors, unique to EIGRP, helps maintain the routing table when changes happen, such as when a directly connected link fails or when update or queries arrive. I don't know if it's used for load balancing though. It wouldn't need to be. If you have a URL that explains what feasible successor has to do with load balancing, please send it. Thanks. But I would probably still say that it's not necessary for load balancing to work. a topology table with neighbor's advertised distances and whatnot. Therefore it seems that packets could easily be forwarded away from the destination. Not if the distance-vector protocol is working correctly. Furthermore, it would seem to me that packets could actually bounce back and forth between 2 routers for awhile. Once again, not if the distance-vector protocol is working correctly, unless I'm missing something. Priscilla Please say it ain't so. Yet I am unaware of any construct within IGRP that would prevent it from being so. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66717t=5 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Question about the Revised RS CCIE Written Exam [7:66715]
A ccie at Boson told me it was 120. -Karsten On Wednesday 02 April 2003 02:07 pm, Zahid Hassan wrote: Dear All, Could someone please confirm about the number of questions in the new RS written exam after March 28 2003 as it is not mentioned on CCIE information page. Thanks in advance. Regards, Zahid Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66719t=66715 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco 2511 Hardware Issue [7:66662]
I'm assuming your configuration is fine, but what do the controllers show and are the interfaces showing any errors? scott Tim Champion wrote in message news:[EMAIL PROTECTED] Has anyone experienced, or heard of, the following problem: I recently bought a 2nd hand 2511 but only async interfaces 9-16 work. 1-8 receive data but do not transmit. Could it possibly be due to one of the numerous jumper settings? many thanks in advance. Tim Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66721t=2 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
hacking challenge [7:66720]
this is a general question for the security specialists. Im trying to convince a client that they need a firewall so hypothetically, if you had telnet via the internet open to a router (with an access list that allowed smtp and telnet) (assuming you didn't know the telnet password or the enable password)that had a bunch of nt servers on another interface, how long would it take a determined hacker a) cause some kind of network downtime and b) to map a network drive to a share on a file server over the internet. Thanks, Rusty -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 02, 2003 1:44 PM To: [EMAIL PROTECTED] Subject: RE: VLAN loop problem [7:66656] Yes, it prevents loops in spanning tree on layer 2 switches from causing a loop by disabling the port on a cisco switch... Larry Letterman Network Engineer Cisco Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Thomas N. Sent: Wednesday, April 02, 2003 12:18 PM To: [EMAIL PROTECTED] Subject: Re: VLAN loop problem [7:66656] What does portfast bpdu-guard do? Does it prevent interfaces with portfast enabled from causing the loop in my scenario? Larry Letterman wrote in message news:[EMAIL PROTECTED] port mac address security might work, altho its a lot of admin overhead..are you running portfast bpdu-guard on the access ports? Larry Letterman Network Engineer Cisco Systems - Original Message - From: Thomas N. To: [EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 8:14 PM Subject: VLAN loop problem [7:66656] Hi All, I got a problem in the production campus LAN here between VLANs. Please help me out! Below is the scenario: We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets. Routing is enable/allowed between the two subnets using MSFC of the 6500. Each subnet has a DHCP server to assign IP address to devices on its subnet. Spanning-tree is enable; however, portfast is turned on on all non-trunking/uplink ports. Recently, devices on VLAN 10 got assigned an IP address of 10.20.x.x , which is from the DHCP on the other scope and also from 10.10.x.x scope, and vice versa. It seems that we a loop somewhere between the 2 subnets but we don't know where. I noticed lots of end users have a little unmanged hub/switch hang off the network jacks in their cubicals and potentially cause loop. Is there any way that we can block the loop on the Cisco switches without visiting cubicals taking those little umanaged hubs/switches? Thanks! Thomas Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66720t=66720 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router-to-external MODEM connection [7:66585]
yes daniel cotts was right, the 1601 serial interface is a asyc/sync one and since you have one you're in luck! the only thing you're missing though is a cable that is db60 to rs-232. you can get these straight from a cisco reseller or off of ebay (though its hard to find these on ebay unless you look). the configuration of a modem is an entire chapter of most books, so it depends on what you're looking to do with the modem. dial in, dial out, access the network behind the router or access the router itself? you can find configuration example in many books and also try searching cisco.com for 'modem router configuration' hope this helps, scott Diego Martmnez Boqui wrote in message news:[EMAIL PROTECTED] Hi Scott, yes my router is a 1601 which has an integrated wic (async/sync serial interface (db60). Ok, so you confirm to me that this connection is possible, the thing is that I need some kind of instructions to do the connection. Do you know how to do this or can you point me to some url where I can find step-by-step instructions to configure this. Thanks a lot for your time and help. - Original Message - From: Scott Roberts Date: Tue, 1 Apr 2003 19:51:34 GMT To: [EMAIL PROTECTED] Subject: Re: Router-to-external MODEM connection [7:66585] you'll need a WIC with a async/syn serial port, I know they're available for the 1700's, but I'm not sure if the same wic will work in a 1600. then you can specify the interface as async and connect up the modem with a db60-rs232 cable. scott Diego Martmnez Boqui wrote in message news:[EMAIL PROTECTED] Hello Steve, yes, I can do this using the aux port but my 1600 router does not have an aux port, I need to do this using my serial sync/async interface, I just don`t know how and have not found a document about this type of connection. Thanks for your help anyway Peace - Original Message - From: Steve Date: Tue, 1 Apr 2003 03:21:41 GMT To: [EMAIL PROTECTED] Subject: Re: Router-to-external MODEM connection [7:66585] this can be done look for cisco doc to connect external modem to aux port -- Regards, Steve Diego Martmnez Boqui wrote in message news:[EMAIL PROTECTED] Hello Group. Is it possible to connect an external modem to a Cisco 1600 series router? And if it is, then how is it done? Can I connect using the serial interface? Any link with step by step instructions? Thank you all! -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup Diego Martmnez Boqui -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup Diego Martmnez Boqui -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66718t=66585 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: off-topic posts - WAS - RE: What tools can tell u r using [7:66723]
something tells me you never fully considered the merits of that website. take another hard look at it and then questions its relevance to cisco. ;) scott cebuano wrote in message news:[EMAIL PROTECTED] Paul, How many more of these off-topic threads are you going to allow? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of LaWanda Daivs Sent: Tuesday, April 01, 2003 8:38 PM To: [EMAIL PROTECTED] Subject: Re: What tools can tell u r using lease line or ISDN? [7:66561] Take a look at this web site and let me know what you think. http://www.imagine2020.com/761368002. --- Link Teo wrote: I am using leased line to connect my remote offices to HQ. All the leased line are backup by ISDN. Is there any tools which can inform me via email or other means about whether I am using leased line now or ISDN backup? In other words, any tools which can inform me when the primary line is down and the ISDN kick in? Thanks a lot. [EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more http://platinum.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66723t=66723 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: so how does IGRP unequal load-balancing work anyway? [7:66722]
considering hold-down times and split horison, why do you think that packets would bounces in a loop under normal conditions? I think under normal conditions if a route is considered valid enough to be included in a routing table, its not going to be a loop. I think EIGRP only looked for alternate successors when the feasible successor was a really bad cost, was because of an optimization standpoint and not a loop issue. I agree that there can be some issues with classful protocols and routing, but I think the issue of load balancing legitimately discovered routes isn't worrisome. you'll pretty much have an eye on your network and know if something isn't right, but it seems like you're worried that if you setup a network and leave it for a few years unattended there might be problems, well what network won't under those circumstances? scott nwo wrote in message news:[EMAIL PROTECTED] It occurs to me that I do not understand how IGRP unequal load balancing works. Yes, I understand what the commands are, and I am well aware of the intricacies involved in fast-switching and CEF. So please don't respond by telling me to configure 'variance' or stuff like that. I already know all that. What I don't understand is this. A fundamental part of EIGRP unequal load balancing is the concept of the feasible successor, where routes of unequal metric to a particular destination will be considered only if the corresponding neighbor is a feasible successor for the destination in question. This is in order to prevent the problem of packets being sent to to a router that is actually further away from the destination than the sending router is to that destination. Yet, I am aware of no such safeguards in IGRP. IGRP has no such concept of a topology table with neighbor's advertised distances and whatnot. Therefore it seems that packets could easily be forwarded away from the destination. Furthermore, it would seem to me that packets could actually bounce back and forth between 2 routers for awhile. Please say it ain't so. Yet I am unaware of any construct within IGRP that would prevent it from being so. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66722t=66722 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Question about the Revised RS CCIE Written Exam [7:66715]
do you know what the pass mark is? -Original Message- From: Karsten [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 02, 2003 3:43 PM To: [EMAIL PROTECTED] Subject: Re: Question about the Revised RS CCIE Written Exam [7:66715] A ccie at Boson told me it was 120. -Karsten On Wednesday 02 April 2003 02:07 pm, Zahid Hassan wrote: Dear All, Could someone please confirm about the number of questions in the new RS written exam after March 28 2003 as it is not mentioned on CCIE information page. Thanks in advance. Regards, Zahid Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66725t=66715 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VLAN loop problem [7:66656]
I'll check it out tomorrow. Thanks much Larry! Thomas Larry Letterman wrote in message news:[EMAIL PROTECTED] Yes, it prevents loops in spanning tree on layer 2 switches from causing a loop by disabling the port on a cisco switch... Larry Letterman Network Engineer Cisco Systems -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Thomas N. Sent: Wednesday, April 02, 2003 12:18 PM To: [EMAIL PROTECTED] Subject: Re: VLAN loop problem [7:66656] What does portfast bpdu-guard do? Does it prevent interfaces with portfast enabled from causing the loop in my scenario? Larry Letterman wrote in message news:[EMAIL PROTECTED] port mac address security might work, altho its a lot of admin overhead..are you running portfast bpdu-guard on the access ports? Larry Letterman Network Engineer Cisco Systems - Original Message - From: Thomas N. To: [EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 8:14 PM Subject: VLAN loop problem [7:66656] Hi All, I got a problem in the production campus LAN here between VLANs. Please help me out! Below is the scenario: We have VLAN 10 (10.10.x.x) and VLAN 20 (10.20.x.x) subnets. Routing is enable/allowed between the two subnets using MSFC of the 6500. Each subnet has a DHCP server to assign IP address to devices on its subnet. Spanning-tree is enable; however, portfast is turned on on all non-trunking/uplink ports. Recently, devices on VLAN 10 got assigned an IP address of 10.20.x.x , which is from the DHCP on the other scope and also from 10.10.x.x scope, and vice versa. It seems that we a loop somewhere between the 2 subnets but we don't know where. I noticed lots of end users have a little unmanged hub/switch hang off the network jacks in their cubicals and potentially cause loop. Is there any way that we can block the loop on the Cisco switches without visiting cubicals taking those little umanaged hubs/switches? Thanks! Thomas Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66724t=66656 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: off-topic posts - WAS - RE: What tools can tell u r using [7:66726]
Scott, This forum has been created for the purpose of study, NOT MARKETING. Unless the owner and moderators of this server has changed this POLICY. If so, then I'll go ahead and post my own MARKETING messages as well. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Roberts Sent: Wednesday, April 02, 2003 7:35 PM To: [EMAIL PROTECTED] Subject: Re: off-topic posts - WAS - RE: What tools can tell u r using [7:66723] something tells me you never fully considered the merits of that website. take another hard look at it and then questions its relevance to cisco. ;) scott cebuano wrote in message news:[EMAIL PROTECTED] Paul, How many more of these off-topic threads are you going to allow? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of LaWanda Daivs Sent: Tuesday, April 01, 2003 8:38 PM To: [EMAIL PROTECTED] Subject: Re: What tools can tell u r using lease line or ISDN? [7:66561] Take a look at this web site and let me know what you think. http://www.imagine2020.com/761368002. --- Link Teo wrote: I am using leased line to connect my remote offices to HQ. All the leased line are backup by ISDN. Is there any tools which can inform me via email or other means about whether I am using leased line now or ISDN backup? In other words, any tools which can inform me when the primary line is down and the ISDN kick in? Thanks a lot. [EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more http://platinum.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66726t=66726 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: A career in MPLS..... [7:66609]
Cisco Nuts wrote in message news:[EMAIL PROTECTED] Thank you so much for your enlightening reply!! And thank God I moved away from Novell to MS to Citrix and finally Cisco and now onto MPLS...And thank God it is a very specialized and small market right now that is looking for MPLS experienceAll the more better to develop skills in MPLS as every Tom, Dick and Harry is either just routing or switching ;- ) Looks like MPLS is the way to go!!! Come'on Sprint.Let's get on with the Show :-) Well, actually, I would temper my enthusiasm. Like you said, MPLS is indeed a very small and specialized market, meaning there really aren't many jobs because there are so few implementations. True, you might reply that there are also few people who know MPLS. But almost all those MPLS are within the large carriers where if you want to be the MPLS engineer, you can't just know MPLS, you have to REALLY REALLY REALLY know it, with verifiable experience and/or published papers to boot. Carriers aren't going to snap you up just because you may have read a book or took a 1-week class. . From: Reply-To: To: [EMAIL PROTECTED] Subject: Re: A career in MPLS. [7:66609] Date: Wed, 2 Apr 2003 04:47:44 GMT Ah - MPLS. Yes there are several large carriers with MPLS deployed or in the process of deploying it (equant, global crossing...). Some on their core and some on their layer 2 networks such as ATM (ATT for example). Others backed away from it but are now looking at it since it's a huge marketing beast that can't be ignored (Sprint for example). Aside from ISP's some large enterprises are using it for things like MPLS enabled VPN's. As to the market for someone that knows MPLS - what I have seen is it's a very specialized and small market right now that is looking for MPLS experience. Mostly due to it still being relatively new in deployments and being relatively small in the number of deployments. I do believe however after saying that - that it never hurts to have a wide background of skills. Imagine if you specialized in Novell and never moved into other areas for example. Novell is a great product but the market for Novell pro's dried up a lot from the good ole days. You would be much less marketable if you didn't also know other things such as Microsoft or Routing or ... I could go into my opinions of the pros and cons of MPLS and where I think it fits - but that's another boring story for later :) www.ccie4u.comOn 1 Apr 2003 at 15:47, nrf wrote:Cisco Nuts wrote in message news:[EMAIL PROTECTED]Hello group, How does one feel about a career in MPLS...I mean doing MPLSas part of your core job day in and out.Is it worth it? Since ournetwork does not use MPLS (maybe never will) inspite of being one of the Big Four Tier 1 SP's Let me guess. Do you work for Sprint? are there other SP's that use MPLS in theirbackbone?? Yeah, there are some. I have just given myself a month or so break from my CCIE LabPrep.(yeah!yeah! most would consider me stupid on this) to study MPLSfor the CCIP and am thinking if I should pursue this subject just like Idid for BGP.know it inside out cold.and maybe consider a newcareer/job in MPLS (obviously along with BGP, MBGP, MCast etc...) Doesanyone know of how MPLS is viewed out there? I mean, in terms ofimplementation, popularity and last but not the least , $$$ ??? ;-Whichof the Big SP's or Enterprise networks have implemented MPLS? Has it been worth the advantages that MPLS proposes??Thank you.Sincerely,CN The way I see it is this. MPLS is potentially powerful technology for it can be used as a lingua-franca among a carrier's network and transport layer and also as a way to impose circuit-switching discipline upon IP and therefore offer circuit-switching services with a pure IP network. But MPLS is by no means a slam-dunk. Certain carriers, most notably Sprint, have elected not to go down the MPLS path because they believe the technology is immature (and they are correct) and also because they believe that they can garner the benefits of MPLS by other means (also correct). The point is that while MPLS offers great potential, it also presents problems, so implementing it is not a no-brainer. And furthermore, I don't particularly like the way that Cisco is pushing MPLS, particularly in its cert program. In my opinion, I think Cisco's cert programs emphasize the least useful parts of MPLS while neglecting the more useful parts. For example, I don't understand why Cisco pushes LDP the way it does, for LDP merely builds LSP's that correspond to the route table, but what's so useful about having LDP's that look like the route table? It is far more useful to build LSP's that differ from the route table, but the methods of doing that are not really covered very much (if at all) in
Re: so how does IGRP unequal load-balancing work anywa [7:66727]
OK, consider this scenario. You have a large network of IGRP routers. You have routers A and B who each have a metric of, say, 10 to a given destination (I am going to use simple values for the metrics of IGRP to make things easy). Routers A and B are also directly connected, and the link between them has a metric of 1. Router A sends an update to B that the destination has a metric of 10, and router B adds the value of the link to arrive at a total metric of 11. Therefore, router B has 2 ways to get to the destination, the first would be through the normal way (through the path that has a metric of 10) and the other through router A (which has a metric of 11). Vice versa is also true with respect to router A. When you configure variance of larger than 1, then both paths will be entered into the route table. If this is the case, then you can see that some packets can bounce around. For example, router A may, through unequal load-balancing, send some of the dest packets to B, and then B will, again through unequal balancing, send some of those packets back to A, etc. Yes, the number of packets sent the 'wrong way' decreases exponentially but the point is that there is still some bouncing around. The only way I can see that this would not happen is if a router would compare the metric of a received route (before the cost of the link is added) to the metric that the router is currently holding for that route, and if it is equal to or greater than that value, the route is rejected unconditionally for unequal balancing. This would be something similar to what the whole EIGRP successor algorithm accomplishes. Does anybody know for a fact whether this is in the IGRP algorithm? Priscilla Oppenheimer wrote in message news:[EMAIL PROTECTED] nwo wrote: It occurs to me that I do not understand how IGRP unequal load balancing works. Yes, I understand what the commands are, and I am well aware of the intricacies involved in fast-switching and CEF. So please don't respond by telling me to configure 'variance' or stuff like that. I already know all that. What I don't understand is this. A fundamental part of EIGRP unequal load balancing is the concept of the feasible successor, where routes of unequal metric to a particular destination will be considered only if the corresponding neighbor is a feasible successor for the destination in question. This is in order to prevent the problem of packets being sent to to a router that is actually further away from the destination than the sending router is to that destination. Yet, I am aware of no such safeguards in IGRP. IGRP has no such concept of I don't think such a safeguard is necessary. A router running even a simple distance-vector protocol like IGRP knows the metric of its neighbors because the neighbors report it in update packets. The router can add routes to the routing table based on this information alone and knowledge of the variance and maximum-paths values. It would be a broken protocol indeed if it added routes that included a next-hop neighbor that was farther away. The business of feasible successors, unique to EIGRP, helps maintain the routing table when changes happen, such as when a directly connected link fails or when update or queries arrive. I don't know if it's used for load balancing though. It wouldn't need to be. If you have a URL that explains what feasible successor has to do with load balancing, please send it. Thanks. But I would probably still say that it's not necessary for load balancing to work. a topology table with neighbor's advertised distances and whatnot. Therefore it seems that packets could easily be forwarded away from the destination. Not if the distance-vector protocol is working correctly. Furthermore, it would seem to me that packets could actually bounce back and forth between 2 routers for awhile. Once again, not if the distance-vector protocol is working correctly, unless I'm missing something. Priscilla Please say it ain't so. Yet I am unaware of any construct within IGRP that would prevent it from being so. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66727t=66727 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: New CCNP Exam, pls clarify [7:66599]
Thank you folks, I appreciate your comments, and Priscilla, I have the same thought as yours that Cisco will not be so selfish not to appreciate the exams we took hardly. I will try to contact Cisco guy around here, meanwhile I hope that there will be some Cisco guy out there confirming about this confusion and let all the community here know for sure. Hi, Uday, any comment , thx cheers Hin Priscilla Oppenheimer wrote in message news:[EMAIL PROTECTED] hinwoto wrote: Hi all, I just went for BCRAN training and I got information from the instructor that there will be new CCNP version exam. It will be launched about June / July this year. According to him, if u wanna take the old CCNP exam , please quickly have all the 4 exams passed before the new one launched, since the old exam wont be valid, I don't think that's how it works. Cisco wouldn't be THAT mean. I would question your instructor on this. Was the training with a certified Cisco Learning Partner? They would be more knowledgeable. Or try to talk to Cisco directly. Does anyone remember how it worked when they replaced Routing with BSCI? If you were already in the process of getting your CCNP, couldn't you use a pass on Routing to finish, even though that exam had been replaced? Priscilla let say we have passed 3 exams, and unfortunately before we take the last one, the new CCNP version has been launched all the 3 exams are invalid .. by then.. I've been trying to search such information on www.cisco.com but I am still unable to get the straight info. Please, show the light, if you guys know for sure. It will be very helpfull for my consideration about taking the exams Thanks and cheers Hin Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66728t=66599 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VLAN Trunk Question and spanning tree [7:66730]
hi All, Please tell me if I am wrong and best practices A trunk link, by default, is a member of all VLANS Would it be best practice, to place your trunk ports in a particualr VLAN, then define what you want pruned/not pruned ? Reason I ask is that I am getting the hostflapping error every now and then, which first made me believe I had a developer plugging in hubs around the place. However, now I think its a question of my design/config. Here is an example of the error on my cat-4006 gig ports which trunk to my floor switchs. Host 00:06:29:F9:75:A2 in vlan 23 is flapping between port Gi2/12 and port Gi2/11 NOTE: 2/12 go's to sw2 and 2/11 go's to sw1, which are connected to one another as you can see below I checked it out, there are no hubs any where that could do this, and I have spanning tree in place to stop the redundant links on my floor switch;s coming back into the core. Here is the config of my trunk ports on the floor switch SW1 interface GigabitEthernet0/1 description link to core switchport mode trunk no ip address ! interface GigabitEthernet0/2 description link to sw2 floor switch switchport mode trunk no ip address SW2 interface GigabitEthernet0/1 description link to core switchport mode trunk no ip address ! interface GigabitEthernet0/2 description link to sw1 floor switch switchport mode trunk no ip address If any one can suggest anything, I would appreciate it (I am interested in the use of the bpdu-port guard, would this help here ?) Thanks John Sydney Australia ** This email message (and attachments) may contain information that is confidential to Solution 6. If you are not the intended recipient you cannot use, distribute or copy the message or attachments. In such a case, please notify the sender by return email immediately and erase all copies of the message and attachments. Opinions, conclusions and other information in this message and attachments that do not relate to the official business of Solution 6 are neither given nor endorsed by it. * Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66730t=66730 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]
Mic shoeps wrote in message news:[EMAIL PROTECTED] Thank you all folks. I don't know much about Linux. But I would like to use the analogy that Cisco engineers are like traffic officers in major intersections in a city and Linux (Lexus), Microsoft (Mercedes), Solaris (Saab), Visual+ (Volvo) engineers are like thousands of drivers passing through these intersections. As the traffic gets heavy, those intersections will get bog down and another intersections will be build to accomodate the throughput of the traffics. But the Lexus, Mercedes, Saab and Volvo engineers will build more bigger, faster and powerful sofisticated cars to get the most out of the infrastructures and elicit more customers to learn how to drive their cars. Actually, to extend your analogy, I think the real problem is that there the world built WAY too many roads than needed. This is why there is such talk of a telco capacity glut. While Internet traffic was doubling every year, providers were building out as if traffic was doubling every 100 days. Couple that with the fact that carriers have essentially almost to a man have not figured out how to make money off the Internet. For example, consider the following quotes: ...we have the spectacle of three once powerful, next gen carriers in total collapse: UUNet as part of the WorldCom debacle, PSINet and Genuity. Makes no mistake: these bankruptcies are not the result of an economic downturn or solely due to corruption and fraud. Rather, as we have said before many times in many of our publications: the underlying carrier business models are fundamentally flawed...we are led to a conclusion that at this time there is no sound business model for the carrier side of the Internet. The carrier industry has come to an absolute dead-end under the current set of business models, http://www.proberesearch.com/alerts/2002/ipproblems.htm ...Where one of the alternative networks (again, the Internet) isn't profitable in the present, it undermines the whole premise of convergence. Why would the market move to select a network choice that doesn't make money even for the core services it's intended to provide? http://www.networkmagazine.com/article/NMG20020930S0011/3 But the trouble is that the city is not expanding or get connected with another cities (hats off to the mayor Bush). Without getting political, I think this is more the fault of a certain Mr. bin Laden. Seems to me that there will be plenty of fuel and asphalt to build the road and power the cars. But the land is limited and more cars will be build to meet the insatiable consumer appetite. But soon the automations will catch up with the demand and the traffic officers will standing in his post like the Maytag technician. True indeed, networks and network engineering will become ordinary. Worst of all, more traffic officers will become increasingly territorial to new and old alike. They will use the terms like 'ph'd' and 'lab rat' to boost their egos and deter others who are trying to enter into their realm. Uh, here we must part company. I think you grant far too much power to some of us 'traffic officers'. The fact is if certain designations are considered good or bad, it is not because the old-timers say so, but because the free market says so. Holders of PhD's tend to make more money and suffer from less unemployment than nonholders of PhD's (all other things being equal) not because companies enjoy paying those PhD guys more (oh please please, take our money because we want to make less profit), but because on average those PhD holders tend to be scarcer and more productive. By the same token, 'lab-rat' CCIE's (and by that I mean people who have little to no experience as compared to the average CCIE) tend to be paid less and tend to suffer from more unemployment not because companies 'enjoy' screwing them but because it is widely acknowledged that those with less experience tend to be less productive than those with more experience. Simple as that. Therefore, as far as the term 'lab-rat' is concerned, the only thing that the older traffic officers did was give the phenomenom a name - basically those guys who had little or no experience working in actual production environments but somehow got their CCIE anyway were termed 'lab-rats'. But that's just a name. To quote Shakespeare: What's in a name? You can change the term from 'lab-rats' to 'lab-teddy bears' or whatever you want to call it. At the end of the day, it doesn't change a thing. The fact remains that, regardless of certification or lack thereof, those with less or no experience will on average have fewer/worse job prospects than those with more experience, and that's not because the old-timers are saying so but because the free market for labor says so. It's really as simple and as complicated as that. Yes, I love the challenge and that's what I'm doing right now. But I'll seriously reconsider if my presence becomes a threat to
Re: CCIE Vs. Linux engineer (not Ph.d) [7:66669]
Linux is very difficult to learn really well. True, CCIE lab equipment is expensive, but I think it may take less time for some people to become a CCIE than to get the kind of facility with Linux that the Linux-guru jobs require. I think a far bigger problem with choosing Linux as a financially stable career is something you just hit on the head right there - barriers to entry. Financially speaking, there are none. Anybody can just piece together a couple of old PC's and fire up Linux and start learning. And right now, there are literally tens of thousands of high school and college kids playing with Linux - and, I don't want to sound morbid, but they're going to be your job competition in a few years. Do you really have much to work with if you know Linux, but so does every college student graduating with a CS degree in the future (and they will)? Not to mention all those people in countries like China, India, and Russia who are short on cash but long on brains and tenacity? That therefore means that if you want to remain employable in the Linux space, you will always need to stay ahead of the Jones's, and the Jones's in this case are obsessed high-school nerds who think it's actually fun to code for 100 hours a week. Hey, if you have the brains and the tenacity to keep pace, then more power to you. Or, if you happen to like Linux (I gotta admit, it is pretty cool), then by all means. But if you're seeing Linux just as an opportunity to make money, then unless you possess Herculean fortitude, I think you'll be disappointed. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=66732t=9 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]