Re: Multiple VLANs in a single switch port [7:69991]

2003-06-02 Thread koh jef
hi ppl,

is there any way/s to configure mulitple VLANs in a single switch port?

thanks!!

regards,

jef


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69991&t=69991
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Prolonged BS Vs. CCNP ? Another alternative [7:69963]

2003-06-02 Thread Howard C. Berkowitz
At 7:35 AM + 6/2/03, n rf wrote:
>Howard C. Berkowitz wrote:
>>
>
>>
>>  Another aspect that hasn't been discussed is the whole area of
>>  other
>>  skill sets, other than perhaps server skills and general
>>  management
>>  (MBA-ish). Now, I'll challenge the assumption of some people
>>  that say
>>  they don't want to be engineers and haul boxes around for their
>>  whole
>>  careers. Engineers do lots of things that don't involve hauling
>>  boxes, such as design, product management, presales, etc.
>>  Engineer
>>  != support technician.
>
>I would submit that all these alternatives are more easily achieved with a
>degree than with a cert.  Things like presales, design, product-management
>and the like all require soft-skills that are better addressed via a degree
>program but are addressed poorly, if at all, by a cert program.


I don't necessarily disagree with the above. But, the reason I 
changed the thread title slightly is that _my_ central point is that 
a work-study degree may  be the best of all worlds early in a career, 
since it allows both.

Degree programs are not necessarily the best for soft skills, or at 
least some of the technical degree programs. I remember telling a 
computer science professor in a graduate program that if I started 
programming his sloppy way, I'd get fired. If one attends the IETF, 
one will find the presentation skills often to be very deficient. The 
IETF is a very mixed bag, with dropouts and PhD's getting respect on 
their accomplishments rather than their credentials.

Realistic network design doesn't usually enter undergraduate programs 
of any sort.

Quite frankly, in later career, personal networking and one's 
experience (including things such as publications) may be more 
important than either.  Self-education, beyond the scope of the 
degree or cert, also is important. While my original academic work 
was in biochemistry, most of my medical knowledge was acquired less 
formally. I have an extremely successful friend who is a consultant 
to the brokerage industry -- his main training was as a Navy sonar 
technician, but he now has a deep understanding of financial 
operations.

>
>Therefore the central point still stands - the degree gives you greater
>overall career flexibility than a cert will.  No industry field outside the
>very narrow confines of network engineering gives much credence to the value
>of a Cisco cert, but every field values the degree.   So the real question a
>person who chooses to forgo the degree in favor of Cisco certs has to ask
>himself is whether he is absolutely sure that he wants to do Cisco
>networking for the rest of his life, or does the possibility exist that he
>might want to do something else when he gets older?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69992&t=69963
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: PIX Firewall 6.2.2 Inside network can not reac [7:69779]

2003-06-02 Thread Richard Botham
Charles/Mark,

No infinate wisdom i'm afraid - just my £0.2.

Is it because the statements below effectively do nothing due to the fact
the statement 2 undoes what statement one has just done ?
[or have i missed the point.]

1)alias (inside) SERVERA_DMZ SERVERA_OUTSIDE 255.255.255.255 
2)alias (inside) SERVERA_OUTSIDE SERVERA_DMZ 255.255.255.255 

I would have thought that you would only need the statement one - why do you
need to reverse what you did in statement one fro the hosts on the inside
net ?

regards
Richard


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69990&t=69779
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Cisco Switches with Stonebeat [7:69505]

2003-06-02 Thread Richard Botham
Bikespace,
Just spent a day testing exactly this...spooky

You're correct , Cisco's cannot put a multicast mac in its arp cache
dynamically - BUT - you CAN put STATIC ARP entries in a Cisco pointing to a
multicast mac.( Even if Layer3 is unicast)

However there are some small perfomance points here ( only small !)
Turning CEF on does have some benefits but not huge amounts.

I threw 100 * 512 byte UPD segments at the Cisco for 5 mins while using a
static multicast arp entry - It coped just fine.


HTH Rich


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69993&t=69505
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


ccnp foundation 640-841, [7:69984]

2003-06-02 Thread Hinwoto
hi guys,..

Has anybody taken this foundation exam 640-841 recently ?
Any advise.. please ..appreciate it.
Gonna give a shot ..

cheers
hin




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69984&t=69984
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


PIX to concentrator Problem ......Urgent [7:69988]

2003-06-02 Thread [EMAIL PROTECTED]
Hi All,
We are using site-site Tunnel formed between PIX firewall at one remote
location to Cisco VPN concentrator connected
at central side. On the central side their are number  of subnets that all
been added to the network list on  both PIX & VPN concentrator to enable
remote site to access all the subnets on the central site. Problem is that 
while Tunnel is  running it suddenly drops all packets for one particular
subet on the central site. I have tried all possible means of
troubleshooting & but nothing seems to work. Pls help me out with any ideas
if possible.



Thanks 
Bharat 



DISCLAIMER:
This message contains privileged and confidential information and is
intended only for the individual named.If you are not the intended recipient
you should not disseminate,distribute,store,print, copy or deliver this
message.Please notify the sender immediately by e-mail if you have received
this e-mail by mistake and delete this e-mail from your system.E-mail
transmission cannot be guaranteed to be secure or error-free as information
could be intercepted,corrupted,lost,destroyed,arrive late or incomplete or
contain viruses.The sender therefore does not accept liability for any
errors or omissions in the contents of this message which arise as a result
of e-mail transmission. If verification is required please request a
hard-copy version.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69988&t=69988
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Router simulator for CCNP? [7:69986]

2003-06-02 Thread oscar
There is a lot of router simulators but Is there any good for the ccnp?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69986&t=69986
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Multicasting Problem [7:69987]

2003-06-02 Thread [EMAIL PROTECTED]
Hi All,
We need to enable multicasting support accross our network. Their are two
technologies available to limit the multicast
packets on the switch: 1) RGMP 2)CGMP. My routers support both these
technologies. Just wanted to know from the
group if any body has used any of these & which is better of the two.
&  also let me know of any common problems in anyone of them 

Thanks in advance,
Bharat 



DISCLAIMER:
This message contains privileged and confidential information and is
intended only for the individual named.If you are not the intended recipient
you should not disseminate,distribute,store,print, copy or deliver this
message.Please notify the sender immediately by e-mail if you have received
this e-mail by mistake and delete this e-mail from your system.E-mail
transmission cannot be guaranteed to be secure or error-free as information
could be intercepted,corrupted,lost,destroyed,arrive late or incomplete or
contain viruses.The sender therefore does not accept liability for any
errors or omissions in the contents of this message which arise as a result
of e-mail transmission. If verification is required please request a
hard-copy version.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69987&t=69987
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Need help for CCNA 3.0 [7:69772]

2003-06-02 Thread Peri Sophos
Cisco Certified Network Associate Exam (CCNA 640-607)*  

 


  Exam Number: 640-607 
Associated Certifications: CCNA 
Duration: 90 minutes (55-65 questions) 
Available Languages: English, Japanese in Japan only 
Click Here to Register: Pearson VUE or Prometric 
 



*Approved for VA reimbursement.

 

Exam Description  ALERT Practice Exam Tutorial 
Exam Topics Preview Course Simulated Lab 
Recommended Training Download Free Challenge Tests 
Additional Resources Self Test Software Offer
New online practice tests from Self Test Software 


  Exam Description 
 
 The Cisco Certified Network Associate exam (CCNA) is the only exam
required to achieve a CCNA Routing and Switching certification. 

  Exam Topics 
 
 The following topics are general guidelines for the content likely to
be included on the CCNA exam. However, other related topics may also
appear on any specific delivery of the exam.


Bridging/Switching
 Distinguish between cut-through and store-and-forward LAN switching  
 Describe the operation of the Spanning Tree Protocol and its benefits 
 Verify the operation of the Spanning Tree Protocol on the switch 
 Describe the operation and benefits of VLANs 
 Configure VLANs on a switch 
 Configure VTP and trunking on switches 
 Compare and contrast switches and bridges 
 Identify anomolies in VLAN, trunking, and VTP operation 
 Configure a switch for basic operations 


OSI Reference Model & Layered Communication
 Describe data link and network addresses and identify key differences
between them 
 Identify at least three reasons why the industry uses a layered model 
 Define and explain the conversion steps of data encapsulation and
de-encapsulation 
 Describe connection-oriented network service and connectionless network
service, and identify their key differences 
 Describe the functions of each the seven layers of the OSI model and
their corresponding applications 
 Compare the OSI model with the TCP/IP stack 
 Match networking devices to their OSI layer(s) 
 Use the OSI model as a conceptual strategy to identify network problems



Routed Protocols
 Describe the different classes of IP addresses including subnetting and
private addresses 
 Configure IP addresses 
 Troubleshoot IP address schemes 
 Develop an IP addressing scheme to meet requirements 
 Identify the fundamental uses of various TCP/IP application layer
protocols 
 Convert between decimal, hexadecimal, and binary 
 Define flow control and describe the three basic methods used in
networking 
 Explain the functions of the TCP/IP network and transport layer
protocols 


Routing Protocols
 Configure a router for inter-VLAN communication 
 Verify IP routing with show and debug commands 
 Compare and contrast the key operations that distinguish
distance-vector, link-state, and hybrid protocols 
 Identify exterior and interior routing protocols 
 Configure static and default routes on a router 
 Enable RIP and IGRP on a router 
 Identify routing metrics used by IGRP and RIP 


WAN Protocols
 Explain key Frame Relay terms and features 
 Configure Frame Relay LMIs, maps, and subinterfaces 
 Identify ISDN protocols, function groups, reference points, and
channels 
 Differentiate between the following WAN services: LAPB, Frame Relay,
ISDN/LAPD, HDLC, PPP, and DDR 
 Identify PPP operations to encapsulate WAN data on Cisco routers 
 Use show commands to display network operational parameters so that
anomalies are detected 
 Configure ISDN BRI and legacy dial-on-demand routing (DDR) 
 Configure a serial connection with PPP encapsulation 


Network Management
 Monitor and verify selected access list operations on the router 
 Configure authentification types (CHAP/PAP) on PPP links 
 Manage configuration files from the privilege EXEC mode 
 Manage IOS images and device configuration files 
 Load Cisco IOS software from: Flash memory, a TFTP server, or ROM 
 Perform backup, upgrade, and loading of Cisco IOS software and
configuration files 
 Configure access lists to meet specified operational requirements 
 Use CDP to identify a network topology 
 Use ICMP to verify network connectivity and locate network problems 


LAN Technologies
 Determine the appropriate uses for full- and half-duplex Ethernet
operation. 
 Describe the causes and effects of network congestion in Ethernet
networks 
 Describe the benefits of network segmentation with various networking
devices 
 Identify the cause(s) of LAN connectivity problem 
 Describe the function, operation, and primary components on a LAN 


Cisco Basics, IOS & Network Basics
 Describe router elements (RAM, ROM, Flash, NVRAM, config register) 
 Configure router passwords, identification, and banner 
 Use the context-sensitive help facility 
 Use the command history and editing features 
 Perform the initial router configuration (including using the setup
mode). 
 Use show commands to display basic network operational parameters 
 Describe router start-up sequence 
 Establish connectivity from a host to

Re: [CISCO] RE: VLANs & AD [7:69873]

2003-06-02 Thread Patrick Aland
URT is supposed to allow mapping of vlan's to a swithcport based on
user (I've never used though).
http://www.cisco.com/en/US/products/sw/secursw/ps2136/index.html

At a recent cisco event one of the cisco se's mentioned that Cisco may
be URT with 802.1x once all the kinks are worked out so I wouldn't be 
surprised if URT goes EOS soon.

On Mon, Jun 02, 2003 at 01:15:14AM +, - jvd wrote:
> Joseph,
> 
> I may be wrong, but I think dynamic VLANS can only by assigned according to
> the MAC address (I can't believe Cisco doesn't make dynamic VLAN assignment
> also based on the IP, port, etc. !!??) In any case the feature you need to
> use is VMPS (VLAN membership policy server).
>
http://www.cisco.com/en/US/partner/products/hw/switches/ps708/products_configuration_guide_chapter09186a008007f2ec.html#12998
> 
> Please post again if you find contrary information, because I would like to
> learn more on this...
> 
> Regards,
-- 

 Patrick Aland  [EMAIL PROTECTED]
 Network Administrator  Voice: 386.822.7217
 Stetson University Fax: 386.822.7367





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69989&t=69873
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: URL for Warranty Status Check [7:69970]

2003-06-02 Thread bt
You're referring to SCC?

login with your cco id then click:
http://www.cisco.com/public/scc/

bt

""Steiven Poh-(Jaring MailBox)""  wrote in message
news:[EMAIL PROTECTED]
| Dear Team,
|
| I lost the URL for product warranty status at www.cisco.com anyone can
help?
|
| Thanks
|
| Rgds,
| Steiven
|
|
|
|
|




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69983&t=69970
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Need help for CCNA 3.0 [7:69772]

2003-06-02 Thread Guruprasad Sanjeevi
Group,
 
I am going to take ccna 3.0  as my ccna 1.0 has expired. Can anyone
please tell me the topics that I need to focus on? . I'm working on
routers for past 3 years
 
TIA
guru




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69978&t=69772
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Help with Cisco 3745 configuration [7:69765]

2003-06-02 Thread MADMAN
Need a lot more info than that, $5K might not be so bad after all, 
the phone company needs to make a living too:)

   Dave

J B wrote:
> Hi, Everyone
> I just been awarded the responsibility of installing 4 3745 Cisco routers. 
> The local phone company wanted $5500 dollars for the installation and my
> employer thinks is to much.  I was looking at the Cisco website for sample
> configurations but I couldn't find them.  I need to share the T1 channels
> link for voice and data.  I haven't done Cisco for like 2 years.  Can
> someone help me with some guidance to find some information in how to do
that.
> 
> Thanks
> JBary 
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

"Government can do something for the people only in proportion as it
can do something to the people." -- Thomas Jefferson




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69980&t=69765
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: multiple isakmp policies question [7:69977]

2003-06-02 Thread Andrew Larkins
from what I remember about this, they will try each policy until a match is
amde, otherwise the connection terminates

-Original Message-
From: Richard Campbell [mailto:[EMAIL PROTECTED]
Sent: 02 June 2003 10:30
To: [EMAIL PROTECTED]
Subject: multiple isakmp policies question [7:69977]


hey..  I have a PIX 515 and have a PIX to PIX connection to London and NY 
using pre-shared key des, hash sha and dh group 1 and I am going to let 
VPN3000 client 3.X connect to here as here and I created another isakmp 
policy 20, with hash md5, dh group 2 as shown below.  Can u take a look 
whether the config is correct?

And my question is I have 2 isakmp policies here, how does the PIX-PIX and 
VPN 3000 3.X client know which isakmp policy to take?

crypto ipsec transform-set newset esp-des
crypto dynamic-map dynmap 30 set transform-set newset
crypto map newmap 10 ipsec-isakmp
crypto map newmap 10 match address 101
crypto map newmap 10 set peer nyapix
crypto map newmap 10 set transform-set newset
crypto map newmap 20 ipsec-isakmp
crypto map newmap 20 match address 102
crypto map newmap 20 set peer ldnpix
crypto map newmap 20 set transform-set newset
crypto map newmap 30 ipsec-isakmp dynamic dynmap
crypto map newmap interface outside
isakmp enable outside
isakmp key  address ldnpix netmask 255.255.255.255
isakmp key  address nyapix netmask 255.255.255.255
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash sha
isakmp policy 10 group 1
isakmp policy 10 lifetime 86400

isakmp policy 20 authentication pre-share
isakmp policy 20 encryption des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400

vpngroup CLIENTS address-pool REMOTEIPPOOLS
vpngroup CLIENTS dns-server 192.168.1.201
vpngroup CLIENTS wins-server 192.168.1.201
vpngroup CLIENTS default-domain xyz.com
vpngroup CLIENTS idle-time 1800
vpngroup CLIENTS password 

_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69982&t=69977
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Help with Cisco 3745 configuration [7:69765]

2003-06-02 Thread John Neiberger
 J B 5/29/03 8:39:15 AM >>>
>Hi, Everyone
>I just been awarded the responsibility of installing 4 3745 Cisco routers.

>The local phone company wanted $5500 dollars for the installation and my
>employer thinks is to much.  I was looking at the Cisco website for sample
>configurations but I couldn't find them.  I need to share the T1 channels
>link for voice and data.  I haven't done Cisco for like 2 years.  Can
>someone help me with some guidance to find some information in how to do
that.
>
>Thanks
>JBary 

Are your routers handling the voice traffic or are you simply splitting this
off at the CSU/DSU so that the router only sees data traffic?

John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69981&t=69765
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Am I over my head guys? [7:69746]

2003-06-02 Thread John Neiberger
 B Rudy 5/29/03 2:41:29 AM >>>
>Hey guys, I just got an offer to become a 2nd senior network engineer for
>this company in Orange Country.  Great News i know!!
>
>Dilemma:  I am a CCNP but have no local Area Nework Experience.  Going to
be
>workin with Catalyst 6500 switches.  Also i have about 2 yrs working with
>cisco equipment, however, dont feel i am ready for a senior title and
>duties.  Also working with cisco routers.
>
>What do you guys think i should do?
>
>1.  Take the job and see how it works out?  Maybe mess up their network
and
>look real dumb and unknowledgable on some troubleshooting.  risked getting
>fired?
>2.  Let the job go, and watch a great opp float away?
>3.  Keep the existing job i have working with cisco equipment and
technology?
>
>p.s.  This job is a senior position, so meaning senior pay. very positive
>aspect, and a great company going places. over 4000 employees.
>
>Your output is greatly appreciated. Really need some advice. Thanx

Yowza!  Two-years Cisco experience, CCNP, and no real-world experience on
LANs gets you a *senior* position??

What's the name of this company?  I feel a move to Orange County coming
on...   :-)

Seriously, you must have shown the skills they were requiring of a
senior-level person in their organization, and every organization has
different guidelines.  Heck, I don't even qualify to be a senior person in
our company yet!  That's related to time in the department, though.  Still,
you seem to be a little worried that they might expect more from a senior
person than you're ready to deliver.  Take an honest assessment of your
capabilities and if you're still worried, start studying your tail off right
now.  You know we're always here to help when we can.  Show some confidence
and be willing to continually learn as much as possible as quickly as
possible; be thorough and conscientious; be trustworthy, loyal, helpful,
friendly, courteous, kind, obedient, cheerful, thrifty, brave, clean, and
reverent.  (Hopefully someone will get that joke,  )

Dive in head first and work your tail off and you should have a great chance
at succeeding.  If they've offered the job, take it and run with it.

Regards,
John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69979&t=69746
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


AUX Port dial in [7:69976]

2003-06-02 Thread Shane Stockman
I would like to configure the AUX port to allow for out of band management.I 
have a modem to connect to it.Should the router go down I could dial in from 
my PC and connect to the router to check for any problems.

Does anyone have a sample config for this or documents.

Thanks

_
Download MSN Messenger 5.0.  http://messenger.msn.co.za/ It's free!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69976&t=69976
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


multiple isakmp policies question [7:69977]

2003-06-02 Thread Richard Campbell
hey..  I have a PIX 515 and have a PIX to PIX connection to London and NY 
using pre-shared key des, hash sha and dh group 1 and I am going to let 
VPN3000 client 3.X connect to here as here and I created another isakmp 
policy 20, with hash md5, dh group 2 as shown below.  Can u take a look 
whether the config is correct?

And my question is I have 2 isakmp policies here, how does the PIX-PIX and 
VPN 3000 3.X client know which isakmp policy to take?

crypto ipsec transform-set newset esp-des
crypto dynamic-map dynmap 30 set transform-set newset
crypto map newmap 10 ipsec-isakmp
crypto map newmap 10 match address 101
crypto map newmap 10 set peer nyapix
crypto map newmap 10 set transform-set newset
crypto map newmap 20 ipsec-isakmp
crypto map newmap 20 match address 102
crypto map newmap 20 set peer ldnpix
crypto map newmap 20 set transform-set newset
crypto map newmap 30 ipsec-isakmp dynamic dynmap
crypto map newmap interface outside
isakmp enable outside
isakmp key  address ldnpix netmask 255.255.255.255
isakmp key  address nyapix netmask 255.255.255.255
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash sha
isakmp policy 10 group 1
isakmp policy 10 lifetime 86400

isakmp policy 20 authentication pre-share
isakmp policy 20 encryption des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400

vpngroup CLIENTS address-pool REMOTEIPPOOLS
vpngroup CLIENTS dns-server 192.168.1.201
vpngroup CLIENTS wins-server 192.168.1.201
vpngroup CLIENTS default-domain xyz.com
vpngroup CLIENTS idle-time 1800
vpngroup CLIENTS password 

_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69977&t=69977
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: PIX 6.3 [7:69876]

2003-06-02 Thread Troy Leliard
I've recently upgraded to 6.3 with no problems...I would echo Madman and say
not a great idaea to use conduit and ACL's ...


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69974&t=69876
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Prolonged BS Vs. CCNP ? Another alternative [7:69963]

2003-06-02 Thread n rf
Howard C. Berkowitz wrote:
> 

> 
> Another aspect that hasn't been discussed is the whole area of
> other
> skill sets, other than perhaps server skills and general
> management
> (MBA-ish). Now, I'll challenge the assumption of some people
> that say
> they don't want to be engineers and haul boxes around for their
> whole
> careers. Engineers do lots of things that don't involve hauling 
> boxes, such as design, product management, presales, etc. 
> Engineer
> != support technician.

I would submit that all these alternatives are more easily achieved with a
degree than with a cert.  Things like presales, design, product-management
and the like all require soft-skills that are better addressed via a degree
program but are addressed poorly, if at all, by a cert program.

Therefore the central point still stands - the degree gives you greater
overall career flexibility than a cert will.  No industry field outside the
very narrow confines of network engineering gives much credence to the value
of a Cisco cert, but every field values the degree.   So the real question a
person who chooses to forgo the degree in favor of Cisco certs has to ask
himself is whether he is absolutely sure that he wants to do Cisco
networking for the rest of his life, or does the possibility exist that he
might want to do something else when he gets older?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69975&t=69963
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


about BCMSN [7:69972]

2003-06-02 Thread vadivel chellappan
help me,
i am planning to write BCMSN exam this month,So i need to know the 
pass mark of the exam and can i get question model from net,if can 
give website and if anyone have question model pls sent to 
me([EMAIL PROTECTED])


pls help me

vadivel.C




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69972&t=69972
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Hello [7:69973]

2003-06-02 Thread Peri Sophos
Hi all,

Just to let you know , I took the support exam on Friday 640-606 and passed ,
which now makes me CCNP certified. It's been a long road , however nice to
get
there.Now onto getting my design behind me , then I will crack the CCIE.

Thanks everyone for all the valuable input people put into this site ,
awesome
!!


Cheers!!

NOTICE - This message contains privileged and confidential
information intended only for the use of the addressee
named above. Any review, retransmission, dissemination,
copying, disclosure or other use of, or taking of any
action in reliance upon, this information by person or
entities other than the intended recipient is prohibited.
If you have received this message in error, please notify
the sender by return email and delete this message.
This message should not be copied or used for any purpose
other than intended, nor should it be disclosed to any
other person. Any views expressed in this message are those
of the individual sender, except where the sender specifically
 states them to be the view of Investec Group, its
subsidiaries or associates. The Investec Group is not
liable for the security of information sent by e-mail at
your request, nor for the proper and complete transmission
of the information contained in the communication nor for
any delay in its receipt. Please note that the recipient
must scan this e-mail and any attached files for viruses
and the like. The Investec Group accepts no liability of
whatever nature for any loss, liability, damage or expense
resulting directly or indirectly from the access of any files
which are attached to this message.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69973&t=69973
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Problem in switching back to Primary Interface [7:69959]

2003-06-02 Thread Ravi Tyagi
here is the configuration
 
pan_2503#show run
pan_2503#show running-config
Building configuration...
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname pan_2503
!
enable secret 5 $1$Ww0Q$Bq3iGZoYdSfLrnDi0/K3y1
enable password 7 0458040B1B2440
!
username BTNL_AMB password 7 083B55560C15
username BTNL_GGN password 7 01091F1C5E07
!
class-map match-any
  match none
!
!
!
ip subnet-zero
no ip finger
no ip domain-lookup
!
isdn switch-type basic-net3
!
!
process-max-time 200
!
interface Loopback0
 ip address 10.10.19.39 255.255.255.240
 no ip directed-broadcast
!
interface Ethernet0
 ip address 172.17.10.1 255.255.255.0
 ip helper-address 172.17.2.19
 no ip directed-broadcast
 bridge-group 1
!
interface Serial0
 no ip address
 no ip directed-broadcast
 no ip mroute-cache
 shutdown
!
interface Serial1
 description # Link For Gurgaon #
 backup delay 15 30
 backup interface BRI0
 ip address 10.10.17.10 255.255.255.252
 no ip directed-broadcast
 no ip proxy-arp
 encapsulation ppp
 no ip mroute-cache
!
interface BRI0
 ip address 10.10.17.10 255.255.255.252
 no ip directed-broadcast
 encapsulation ppp
 dialer idle-timeout 2000
 dialer string 95118002256
 dialer load-threshold 1 either
 dialer-group 1
 isdn switch-type basic-net3
 ppp authentication chap
 ppp multilink
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.17.9
ip route 172.17.0.0 255.255.0.0 10.10.17.9
no ip http server
!
access-list 20 permit 10.10.17.9
access-list 20 permit 172.17.8.150
access-list 20 permit 172.17.9.21
access-list 20 permit 172.17.3.15
access-list 20 permit 172.17.10.2
access-list 20 permit 172.17.9.2
access-list 20 permit 172.17.3.120
access-list 20 permit 0.0.0.120 255.255.255.0
dialer-list 1 protocol ip permit
snmp-server engineID local 000902D058ADE871
snmp-server community private RO
bridge 1 protocol ieee
banner login ^CUNAUTHORIZED ACCESS TO THIS NETWORK DEVICE IS PROHIBITED. You
mus
t have explicit
 permission to access or configure this device. All activities performed on
this
 device may be logged.^C
!
line con 0
 transport input none
line aux 0
line vty 0 4
 privilege level 0
 password 7 1506041907222A20253A3B
 login
!
end
pan_2503#
 
Regards
Ravi Tyagi
 


- jvd  wrote:Hi,

Can you paste relevant pieces of your configuration so we can see what's
configured? My guess is that you have some keepalive problem.

Regards,
Catch all the cricket action. Download Yahoo! Score tracker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69971&t=69959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


URL for Warranty Status Check [7:69970]

2003-06-02 Thread Steiven Poh-\(Jaring MailBox\)
Dear Team,

I lost the URL for product warranty status at www.cisco.com anyone can help?

Thanks

Rgds,
Steiven




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69970&t=69970
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Redistribute OSPF to RIPv1 [7:69969]

2003-06-02 Thread Rivalino YMT.
Hi,
Here is the topology:

   --(RIPv1)--R1 ---(area 0)-- R2 ---(area 1)--- R3
R1 is ASBR, mutual redistribution RIP-OSPF
   
To redistribute OSPF to RIPv1, we have to summarize the route of OSPF into
classful network. How can we summarize area 1 network, since area 1
network do not directly connected to ASBR (R1)?

I had tried using ip summary-address rip x.x.x.x x.x.x.x, but it didn't
work. And of course we can not use command area 1 range x.x.x.x x.x.x.x,
there is no area 1 in R1.

Thanks,
Rivalino




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69969&t=69969
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: VLANs & AD [7:69873]

2003-06-02 Thread - jvd
Joseph,

I may be wrong, but I think dynamic VLANS can only by assigned according to
the MAC address (I can't believe Cisco doesn't make dynamic VLAN assignment
also based on the IP, port, etc. !!??) In any case the feature you need to
use is VMPS (VLAN membership policy server).
http://www.cisco.com/en/US/partner/products/hw/switches/ps708/products_configuration_guide_chapter09186a008007f2ec.html#12998

Please post again if you find contrary information, because I would like to
learn more on this...

Regards,



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69968&t=69873
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: cisco 805 to a microsoft WIN2000 RAS server [7:69913]

2003-06-02 Thread - jvd
Hi Johnman,

It would have been nice if you could give some more information. However,
you can look at this config and decide for yourself if you can use it.

interface dialer 1
encapsulation ppp
dialer string 3468588 
dialer-group 5 (goes with dialer-list 5 command)
dialer pool 2 (goes with dialer pool-member command)
ppp authentication chap ...
!
interface async 0 (can be line 5?)
dialer pool-member 2
modem autoconfigure discovery (here Cisco kicks the other
manufacturers' asses - just ask the Allied Telesyn dudes)
!
dialer-list 5 protocol ip permit

The authentication part is missing here. Basically you have two options to
choose from: CHAP and PAP

Hope I pointed you in some direction.

Regards,



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69967&t=69913
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: OSPF redistribution question with BGP [7:69914]

2003-06-02 Thread - jvd
Hi John,

I'm busy preparing for the CCIE written. I came across a very good example
that is related to your problem in Routing TCP/IP Vol. 2 (Doyle) p.369. What
it comes down to is that you have a merger between 2 companies that are both
using the 10.0.0.0 network on their private networks - sounds familiar? The
solution is to use NAT. It is however stated very clearly that this is an
interim solution, and the best solution is to readdress the network. You'll
see that once you implement the NAT solution it's really quite simple.

Regards,
(PS. I see that you are from Sydney. I have plans to move to Australia next
year, and was wondering if you can tell me if you like living in Sydney?)


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69966&t=69914
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Problem in switching back to Primary Interface [7:69959]

2003-06-02 Thread - jvd
Hi,

Can you paste relevant pieces of your configuration so we can see what's
configured? My guess is that you have some keepalive problem.

Regards,



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69965&t=69959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCNP recertification question [7:69943]

2003-06-02 Thread Kevin Wigle
>From CCO:

"Candidates must attempt the CCIE Lab exam within 18 months of passing the
CCIE Qualification exam. After the first lab attempt, candidates must
attempt the CCIE lab at least once every 12 months from the last lab attempt
in order for their qualification exam to remain valid. However, if a
candidate has not passed the CCIE Lab exam within three years of passing the
qualification exam, he or she must retake the CCIE qualification exam before
the candidate will be allowed to schedule the lab exam again."

I knew there was a 12 month something in there somewhere.

thanks

Kevin Wigle

- Original Message -
From: "Peter Walker" 
To: "Kevin Wigle" ; 
Sent: Sunday, June 01, 2003 3:59 AM
Subject: Re: CCNP recertification question [7:69943]


> Kevin
>
> Actually you have to attempt the lab within 18 months of completing the
> qualification exam.
>
> If you fail you mustnt leave a a gap of more than twelve months between
lab
> attempts and must pass the lab within three years of the qualification
exam
> pass.
>
> Peter
>
>
> --On 01 June 2003 02:35 + Kevin Wigle 
wrote:
>
> > no, the CCIE written does one thing and one thing only, allows you to
> > attempt the lab - and then you have to do so within one year.
> >
> > The recert extends your CCNP another 3 years.
> >
> > Kevin Wigle




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69964&t=69943
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Prolonged BS Vs. CCNP ? Another alternative [7:69963]

2003-06-02 Thread Howard C. Berkowitz
Something I haven't seen discussed in this thread, which would be 
most appropriate for people early in their careers, is an engineering 
work-study program.  In such programs, you typically take an extra 
year total, with some paid and topical jobs for 2-3 semesters and 
maybe the summers.  The work component, if properly selected, should 
give you the hands-on background for certification.

You also come out of the program with a technical BS degree. Long 
before there was certification, work-study graduates consistently get 
better starting jobs, because they have demonstrated both theoretical 
and practical skills.

Another aspect that hasn't been discussed is the whole area of other 
skill sets, other than perhaps server skills and general management 
(MBA-ish). Now, I'll challenge the assumption of some people that say 
they don't want to be engineers and haul boxes around for their whole 
careers. Engineers do lots of things that don't involve hauling 
boxes, such as design, product management, presales, etc.  Engineer 
!= support technician.

Without false modesty, I'll say I am one of the bettter R&S people 
around, with operational, product development, and research 
experience. Yet I'm probably getting more work right now because I 
have a very solid, mostly self-taught medical and emergency services 
background, which the networking complements.

Having industry-specific knowledge, whether degreed or certified, is 
a strong plus.  I notice people here who have become tired of one 
career and switch to networking, but don't necessarily take advantage 
of their knowledge and personal skills in their old industry. 
Offhand, I can think of people with legal, construction, and 
financial backgrounds. All of these have network technology 
opportunities if you make efforts to know the right people.

And that sort of personal networking is key.  In a city of any real 
size, there should be professional societies such as ACM and IEEE, 
preferably the subgroups of ACM SIGCOMM, IEEE Computer Society, and 
IEEE Communications Society.  There are online groups, such as IETF 
technology mailing lists (do lurk for a couple of months until you 
learn the culture). Recently, I've been developing some very useful 
contacts with emergency service/homeland security online lists and 
chats.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=69963&t=69963
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]