BCMSN [7:72144]

2003-07-10 Thread FUNG LEE
Dear all,
I am new. My CCNA will expire in August.
I will take the BCMSN beta test in 20 Jul.  Would you please give me the
advice and if possible, any sample questions to my email address :
[EMAIL PROTECTED]

thanks in advance


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72144&t=72144
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Need simple network management tool [7:72132]

2003-07-10 Thread Sales
Many tools out there that are free.  One that will even graph the
results is MRTG.

Ian

www.ccie4u.com
Rack Rentals and Lab Scenarios starting at $20


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Mossburg, Geoff (MAN-Corporate)
Sent: Thursday, July 10, 2003 7:32 PM
To: [EMAIL PROTECTED]
Subject: Need simple network management tool [7:72132]

Does anyone know of a freeware or shareware tool that will take a list
of IP
addresses (like all of my router's loopback addresses) and will ping
each
address once every x seconds/minutes? This sounds simple enough to make
with
just scripting, but I unfortunately don't know scripting... Please help!
Thanks!
Geoff Mossburg




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72141&t=72132
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: CCNP and CCNA recertification [7:72138]

2003-07-10 Thread Kevin Wigle
There is no recert for CCNA - that would make your CCNA inactive and
therefore yes you will have to do the CCNA again.

Kevin Wigle

- Original Message -
From: "grant franklin" 
To: 
Sent: Thursday, July 10, 2003 8:47 PM
Subject: CCNP and CCNA recertification [7:72138]


> Hi,all
>
> I got CCNA certification 4 years ago and not take recertification exam
yet.
> If I pass all the four CCNP exams, do I need to recertificate my CCNA in
> order to get the CCNP certification?
>
> Thanks in advance!
>
> Grant




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72142&t=72138
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Prefix-list help [7:72090]

2003-07-10 Thread Raj Singh
LOL,

thanks

I got this like 10 mins before I got your email.

I went of a search spree, and found the answer.

Here is what I found, its all binary.

This will permit the default route
ip prefix-list test seq 5 permit 0.0.0.0/0

This will look at the  first bit of the first octet and will match
the netmask to 8 bit
ip prefix-list test seq 5 permit 0.0.0.0/1 ge 8 le 8

This will look at the first 2 bits of the first octet 1000 and match the
netmask to 16 bit
ip prefix-list test seq 5 permit 128.0.0.0/2 ge 16 le 16

This will look at the first 3 bits of the first octet 1100 and match the
netmask to 24 bit
ip prefix-list test seq 5 permit 192.0.0.0/3 ge 24 le 24


Thank you very much for all your help. Really appreciate it

Raj Singh


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72140&t=72090
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Prefix-list help [7:72090]

2003-07-10 Thread Zsombor Papp
Hi,

I would suggest the following:

ip prefix-list test seq 5 permit 0.0.0.0/0
ip prefix-list test seq 10 permit 0.0.0.0/1 ge 8 le 8
ip prefix-list test seq 15 permit 128.0.0.0/2 ge 16 le 16
ip prefix-list test seq 20 permit 192.0.0.0/3 ge 24 le 24

Your solution wouldn't filter out those subnets and aggregates whose 
netmask falls on a classful boundary. And of course the sequence numbers 
must be different for each entry. :)

Thanks,

Zsombor

At 07:14 AM 7/10/2003 +, Raj Singh wrote:
>Classless domain -R1--classful domain
>
>R1 is the border router between the classless and classful routing domain.
>R1 maintains a BGP peering session with the classless routing domain, and
>runs a classful IGP with the classful routing domain.  The classless routing
>domain is originating a default route to R1 via BGP, and advertising
>prefixes which are subnetted, aggregated, and classful. Since the classful
>routing domain does not support the advertisement of subnets or aggregates,
>there is no reason for R1 to accept any of these prefixes in from the
>classless domain.  Configure an access-list or prefix-list on R1 that will
>only allow classful networks and a default route in from the classless
>routing domain.  This access-list or prefix-list should not contain more
>than four entries.
>
>I think this will work but not sure. Can anyone tell me if this is right?
>ip prefix-list test seq 5 permit 0.0.0.0/0
>ip prefix-list test seq 5 permit 0.0.0.0/0 ge 8 le 8
>ip prefix-list test seq 5 permit 0.0.0.0/0 ge 16 le 16
>ip prefix-list test seq 5 permit 0.0.0.0/0 ge 24 le 24
>
>Any help is duly appreciated in advance.
>
>Thanks
>Raj




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72139&t=72090
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


CCNP and CCNA recertification [7:72138]

2003-07-10 Thread grant franklin
Hi,all

I got CCNA certification 4 years ago and not take recertification exam yet.
If I pass all the four CCNP exams, do I need to recertificate my CCNA in
order to get the CCNP certification?

Thanks in advance!

Grant


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72138&t=72138
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Desperate help with 3030 Concentrators!!!!!!!!!!!! [7:72131]

2003-07-10 Thread Joseph Brunner
I made the same mistake.. are you running late model code ?

they have option to run 3 kinds of lan2lan tunnels, originate only, answer
only, and Bi-directional.

Do you have any lan2lan tunnels config'd ?

First thing DISABLE vrrp 

Configuration > System > Ip routing > redundancy 
on both.

If you're just running client connections you don't need vrrp.

instead use 

Configuration | System | Load Balancing

this is VCA.

to get everything stable again, you may need to totally blow away
the config file..

Administration | File Management

once all files there are deleted (even .bak ones) just hit the
power switch.. reconfigure from scratch (remember you need
a straight 1-8, 1-8 db9 female to db9 female cable
to console back in.

You can also drop in a config from a before this snafu backup.

let me know.. I have pretty fixed alot of major mishaps with these..



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72137&t=72131
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: an ISIS question.... [7:72081]

2003-07-10 Thread wj chou
"In this case, you L1 areas will not usually be the same and the L1 
adjacency between the two "core" routers will not form. If the area is the 
same, the L2 adjacency is superfluous. Many large networks are single 
area, or single level (ie L1 everyone in one area, or L2 everywhere where 
area isn't very relevant.)"

Can you explain a bit more about this? "you L1 areas will not usually be the
same an the L1 adjacency between the two "core" routers will not form"? I am
new to ISIS...

Thanks!

Ellie



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72136&t=72081
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


ACS 3.1 authenticating to ODBC conenction [7:72133]

2003-07-10 Thread Doug Korell
Anyone doing this to authenticate users? I'm following the CHAP example in
the user guide and can't create the stored procedure. I'll provide more
details is someone is able to help.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72133&t=72133
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: ISDN ... connectivity [7:72051]

2003-07-10 Thread Jay Mathias
Although I have never tried this, due to not having the hardware, I have
been told something like this is possible:

ROUTERA-S/T---xover---ROUTER-S---xover---S/T-ROUTERB

ROUTERs A and B ISDN BRI S/T interface
ROUTER-S (acting as the switch) NM-2V and VIC-2BRI-S/T-TE or NT

I may even have a config that shows the setup. If interested get back to me
offline and I'll see if I can find it.

- Original Message - 
From: "Bob by The Bay" 
To: 
Sent: Thursday, July 10, 2003 12:51 AM
Subject: Re: ISDN ... connectivity [7:72051]


> not possible with ISDN
>
> ""H T""  wrote in message
> news:[EMAIL PROTECTED]
> > Hi,
> > Can we connect 2 ISDN ports back to back for test ? (with out ISDN
> > simulation device)
> > Is there any kind cable to do this job?
> >
> >
> >
> > cheers
> > Heiman.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72135&t=72051
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: OSPF max Router-LSA links [7:72024]

2003-07-10 Thread Priscilla Oppenheimer
Howard C. Berkowitz wrote:
> 
> At 5:48 AM -0700 7/10/03, Zsombor Papp wrote:
> >I guess our views on OSPF are slightly different.
> >
> >I will now release the stage to the next "how to increase the
> value
> >of the CCIE certification" thread... :)
> >
> >Thanks,
> >
> >Zsombor
> 
> Zsombor, I appreciate the discussion. I've been running at low
> speed
> due to a leg infection, but will talk to some developers and
> reread
> both 2328 and some of the OSPF working group archives. Will get
> back
> when I have useful information.
> 
> ANYTHING but another one of THOSE threads...

I learned a lot from the discussion. I'm still pondering the relationship
between Type 1 and Type 2 LSAs and their tree topologies. And I'm pondering
whether OSPF LSAs really need to be idempotent. I've always wanted to use
that word in a sentence. :-)

I hope your leg gets better and that the cats aren't sitting on it! :-)

Priscilla


> maybe a discussion
> on
> what happens to bits routed to the null interface?  Is there a
> true
> astronomical black hole into which they are dumped? 
> Alternatively,
> might there be a bit dump somewhere in Northern New Jersey,
> which
> someday may explode?
> 
> >
> >At 03:13 AM 7/10/2003 +, Howard C. Berkowitz wrote:
> >>At 5:40 PM -0700 7/9/03, Zsombor Papp wrote:
> >>>At 11:07 PM 7/9/2003 +, Howard C. Berkowitz wrote:
> At 12:43 PM + 7/9/03, Zsombor Papp wrote:
> >The original question (as I understood) was about a single
> LSA that is
> >larger than 1500 bytes (think Type 1 LSA for a router with
> 200
> >>interfaces).
> >I can't see how such an LSA could be divided into multiple
> OSPF messages
> >>so
> >the only logical (implementation independent) solution
> seems to be to
> >fragment the packet at the IP layer. Am I missing
> something?
> 
> I missed the point that the LSA was for the same router.
> Without
> testing it, however, I don't immediately see why it
> wouldn't work to
> have multiple LSAs for the same router,
> >>>
> >>>I am not sure what you mean by "multiple LSAs for the same
> router",
> >>>but if you mean "multiple type 1 LSAs originated by the same
> >>>router", then my answer is "because it is impossible to
> distinguish
> >>>them". If I am mistaken here, then I would like to
> understand how
> >>>such LSAs can be distinguished.
> >>
> >>The relationship between type 1 and type 2 is essential in
> developing
> >>the SPF algorithm.  If you think of the LSDB entries for
> both, they
> >>are trees.  The type 1 bas the router ID as root and the
> attached
> >>interface IDs/prefixes as leaves.  The type 2 has an interface
> >>ID/prefix as root and routers connected to that prefix as
> leaves.
> >>
> >>>
>    as long as no prefixes were
> duplicated. Certainly, you send out a new type 2 when an
> additional
> prefix activates
> >>>
> >>>What is "prefix" in this context? Type 2 LSAs describe the
> routers
> >>>attached to a network. Are you saying that if an additional
> router
> >>>comes up on that network, then the DR should send only an
> >>>"incremental" Type 2 LSA, containing a single entry,
> describing the
> >>>new router that just came up? Which bit in the OSPF packet
> will let
> >>>the receiver router know that this is an "incremental" LSA,
> not a
> >>>replacement (because all the other routers died and a new
> one just
> >>>came up)?
> >>
> >>The receiving router knows the sending router is still up, at
> least
> >>through the hello mechanism. One of the fundamental points of
> using
> >>hellos is so you know if the originating router has gone
> down.  Since
> >>you know from context it's still up, you don't need an
> incremental
> >>flag -- you know the update is supplemental information.
> >>
> >>Remember also that you can withdraw routes without killing
> the whole
> >>LSDB entry.
> >>
> >>>
>    -- I don't immediately see why you couldn't send out
> a new type 1 with the additional new prefix. Neither are in
> an
> existing LSDB, so they shouldn't purge anything.
> >>>
> >>>How do you mean "neither are in an existing LSDB"? If an
> OSPF router
> >>>receives two Type 1 LSAs, both originated by the same
> router, how
> >>>will it differentiate between the two so that it can install
> both of
> >>>them into the LSDB? IMHO the receiver will try to guess
> which one of
> >>>the two is newer and install only the newer one. In fact it
> is not
> >>>even correct to think about these two LSAs as "two LSAs";
> they are
> >>>two instances of the same LSA.
> >>
> >>Think not of the transmitted LSAs but its entries. You can
> have
> >>updates on existing information, or changes to the basic
> topology
> >>conveyed (such as a new interface coming up). That doesn't
> need a new
> >>LSA.
> >>
> >>Look at it this way:  LSUpdates are encodings of information
> for
> >>transmission.  The decision to install information in the
> LSDB is
> >>done after the packet is parsed into its components.
> >>
> >>>
> 

Desperate help with 3030 Concentrators!!!!!!!!!!!!!!!!! [7:72131]

2003-07-10 Thread Elijah Savage
I have a set of 3030's in vrrp mode and all of a sudden these boxes have
started to reboot themselves. I have a TAC case open and we have flashed
the concentrators to 3 different versions but no difference still the
rebooting. Both boxes have been rma'd and the new boxes still continue
to do this. Cisco tells me they know it is a bug and they are working on
it but this has been going on for 2 weeks now kicking clients off 3 to 4
times a day. Has anyone out there successfully run vrrp stable and if so
please what version of code are you using.

Any replies at all will be welcome.

Thank you for reading the post.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72131&t=72131
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Need simple network management tool [7:72132]

2003-07-10 Thread Mossburg, Geoff (MAN-Corporate)
Does anyone know of a freeware or shareware tool that will take a list of IP
addresses (like all of my router's loopback addresses) and will ping each
address once every x seconds/minutes? This sounds simple enough to make with
just scripting, but I unfortunately don't know scripting... Please help!
Thanks!
Geoff Mossburg




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72132&t=72132
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: OSPF max Router-LSA links [7:72024]

2003-07-10 Thread Zsombor Papp
At 07:41 PM 7/10/2003 +, Howard C. Berkowitz wrote:
>At 5:48 AM -0700 7/10/03, Zsombor Papp wrote:
> >I guess our views on OSPF are slightly different.
> >
> >I will now release the stage to the next "how to increase the value
> >of the CCIE certification" thread... :)
> >
> >Thanks,
> >
> >Zsombor
>
>Zsombor, I appreciate the discussion. I've been running at low speed
>due to a leg infection, but will talk to some developers and reread
>both 2328 and some of the OSPF working group archives. Will get back
>when I have useful information.

Sounds good.

Thanks,

Zsombor


>ANYTHING but another one of THOSE threads...maybe a discussion on
>what happens to bits routed to the null interface?  Is there a true
>astronomical black hole into which they are dumped?  Alternatively,
>might there be a bit dump somewhere in Northern New Jersey, which
>someday may explode?
>
> >
> >At 03:13 AM 7/10/2003 +, Howard C. Berkowitz wrote:
> >>At 5:40 PM -0700 7/9/03, Zsombor Papp wrote:
> >>>At 11:07 PM 7/9/2003 +, Howard C. Berkowitz wrote:
> At 12:43 PM + 7/9/03, Zsombor Papp wrote:
> >The original question (as I understood) was about a single LSA that is
> >larger than 1500 bytes (think Type 1 LSA for a router with 200
> >>interfaces).
> >I can't see how such an LSA could be divided into multiple OSPF
messages
> >>so
> >the only logical (implementation independent) solution seems to be to
> >fragment the packet at the IP layer. Am I missing something?
> 
> I missed the point that the LSA was for the same router. Without
> testing it, however, I don't immediately see why it wouldn't work to
> have multiple LSAs for the same router,
> >>>
> >>>I am not sure what you mean by "multiple LSAs for the same router",
> >>>but if you mean "multiple type 1 LSAs originated by the same
> >>>router", then my answer is "because it is impossible to distinguish
> >>>them". If I am mistaken here, then I would like to understand how
> >>>such LSAs can be distinguished.
> >>
> >>The relationship between type 1 and type 2 is essential in developing
> >>the SPF algorithm.  If you think of the LSDB entries for both, they
> >>are trees.  The type 1 bas the router ID as root and the attached
> >>interface IDs/prefixes as leaves.  The type 2 has an interface
> >>ID/prefix as root and routers connected to that prefix as leaves.
> >>
> >>>
>    as long as no prefixes were
> duplicated. Certainly, you send out a new type 2 when an additional
> prefix activates
> >>>
> >>>What is "prefix" in this context? Type 2 LSAs describe the routers
> >>>attached to a network. Are you saying that if an additional router
> >>>comes up on that network, then the DR should send only an
> >>>"incremental" Type 2 LSA, containing a single entry, describing the
> >>>new router that just came up? Which bit in the OSPF packet will let
> >>>the receiver router know that this is an "incremental" LSA, not a
> >>>replacement (because all the other routers died and a new one just
> >>>came up)?
> >>
> >>The receiving router knows the sending router is still up, at least
> >>through the hello mechanism. One of the fundamental points of using
> >>hellos is so you know if the originating router has gone down.  Since
> >>you know from context it's still up, you don't need an incremental
> >>flag -- you know the update is supplemental information.
> >>
> >>Remember also that you can withdraw routes without killing the whole
> >>LSDB entry.
> >>
> >>>
>    -- I don't immediately see why you couldn't send out
> a new type 1 with the additional new prefix. Neither are in an
> existing LSDB, so they shouldn't purge anything.
> >>>
> >>>How do you mean "neither are in an existing LSDB"? If an OSPF router
> >>>receives two Type 1 LSAs, both originated by the same router, how
> >>>will it differentiate between the two so that it can install both of
> >>>them into the LSDB? IMHO the receiver will try to guess which one of
> >>>the two is newer and install only the newer one. In fact it is not
> >>>even correct to think about these two LSAs as "two LSAs"; they are
> >>>two instances of the same LSA.
> >>
> >>Think not of the transmitted LSAs but its entries. You can have
> >>updates on existing information, or changes to the basic topology
> >>conveyed (such as a new interface coming up). That doesn't need a new
> >>LSA.
> >>
> >>Look at it this way:  LSUpdates are encodings of information for
> >>transmission.  The decision to install information in the LSDB is
> >>done after the packet is parsed into its components.
> >>
> >>>
> Another argument about fragmentation hasn't been discussed. Consider
> Hello packets. IIRC, about 47 router entries can fit into an OSPF
> hello packet with a 1500 byte MTU.  Consider the timing complexities
> of waiting to defragment before you can tell if another router is
> alive.  Even scarier is if the load were heavy enough (unlikely, but
> possible) that yo

RE: CCNP ReCert Questions [7:72071]

2003-07-10 Thread John Cianfarani
I really do hate thinking I will lose it, but with any good luck it
should only be expired for a few weeks.  I plan to write the 4 exams
within about a 4-5 week timeframe. 
I don't really have enough time to do it for the 21st, unless all I do
is braindump it, but would prefer to go over all the material to
remember what I forgot and go over whatever is new, instead.  I figure
this way I'll end up writing BSCI which help in going for any of the
CCIP's.  I would have preferred just to write the Composite exam then I
could renew CCNP and CCDP at the same time. But such is life with Cisco
Certs.

Thanks for the IS-IS document.
John

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 10, 2003 3:22 PM
To: [EMAIL PROTECTED]
Subject: RE: CCNP ReCert Questions [7:72071]

John Cianfarani wrote:
> 
> Well I decided I wouldn't push it in such a short timeframe
> with the one
> exam. With work and whatever else probably won't have enough
> time to
> study fully for it.  So I will write either all 4 again, or
> cit/bcran
> and then the new Composite once it's out.


You shouldn't lose your CCNP, albeit temporarily (hopefully). Think how
hard
you worked to get it. How will you feel when you can no longer say you
have
it? I think you should try the recert exam.

I'm sorry if I scared you by saying it is hard. It is hard, but study
the
IS-IS supplement from Cisco Press and some material on multilayer
switching
and eat a lot of blueberries. At least give it a try.

Here's a link on multilayer switching:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/
switch_c/xcprt5/xcdmsov.htm

Do you know about the free PDF document that Cisco Press put out on
IS-IS
for BSCI candidates? When Cisco added IS-IS, Cisco Press didn't have a
book
out yet that covered it (from a BSCI viewpoint anyway), so they put out
a
PDF. Here's a link:

http://www.ciscopress.com/content/images/1578702283/downloads/BSCNSupple
ment.pdf?session_id={D6502E20-0A8E-4868-8FE7-5A1A54F64857}

Good luck whichever way you go, but I definitely recommend not lettting
your
CCNP disappear, even temporarily.

Priscilla

> 
> Anyone know if the Composite will count towards things like
> CCIP?  If it
> doesn't I'd just take the 4 exam route.
> 
> Thanks
> John
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, July 09, 2003 7:22 PM
> To: [EMAIL PROTECTED]
> Subject: Re: CCNP ReCert Questions [7:72071]
> 
> Amazing wrote:
> > 
> > I just did the CCNP recet test two weeks ago and passed with
> > not too much
> > studying -- used boson test to see my weak areas and just
> > brushed up on
> > those areas -- hint -- you can use the same study materials
> you
> > used three
> > years ago -- nothing has changed.
> 
> I wouldn't recommend just using the same material as 3 years
> ago. There
> are
> some new topics, like IS-IS for Routing and multilayer
> switching for
> Switching. Support and Remote Access seemed to be pretty
> similar, but
> those
> other two were pretty different from 3 years ago, at least in
> my test. I
> found it to be a two-Tums-package test for sure, depsite a good
> score in
> the
> end.
> 
> > 
> > as to the answer to your questions, my experience has been
> that
> > you should
> > go directly to cisco with these questions so you have a
> 
> I defintely agree there. Go to Cisco. Even if we give you an
> answer, the
> Authoritative Bit will not be set. :-) That won't stop me
> though from
> adding
> a few more comments below
> 
> > documented answer
> > when they change their mind later on ;-)
> > 
> > d
> > 
> > 
> > ""John Cianfarani""  wrote in message
> > news:[EMAIL PROTECTED]
> > > I have to recert my CCNP by the 21st of this month.  (yeah I
> > know I left
> > > it late, but I was busy upgrading my CSS1 to CCSP).
> > >
> > > I notice they have a new test coming out ( 642-891 ) Called
> > Composite
> > > which is based on BSCI and BCMSN, which will also let you
> > recert your
> > > CCNP and CCDP with at the same time.  Now that test doesn't
> > come out
> > > until Aug 7th.  Anyone know if there is still a Beta of this
> > exam
> > > available to write?  
> 
> I don't think they ever did a beta for that new composite exam
> that
> suddenly
> popped up? Maybe it will still come out?
> 
> >Or if Writing BSCI / BCMSN is equivalent?
> 
> I doubt you can just write BSCI and BCMSN to get recertified.
> 
> > >
> > > Also anyone know a way extended you recert date maybe by
> > writing a
> > > current CCNP exam or something or am I just gonna have to
> > buckle down
> > > and write the 640-851 CCNP Recert exam?
> 
> Just do it. It's not that painful. :-) And I think it's your
> only
> option.
> Ask Cisco and check your tracking info to be sure. Good luck!
> 
> Priscilla
> 
> 
> > >
> > > Thanks!
> > > John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72128&t=72071

Re: Microsoft IAS with Cisco Radius [7:72125]

2003-07-10 Thread Zsombor Papp
Don't know about *Microsoft* Radius server, but configuring Radius 
authentication on a router is pretty simple. Here is the config guide:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_c/fsecsp/scfrad.htm

Thanks,

Zsombor

At 07:53 PM 7/10/2003 +, kwindancer wrote:
>Hello All:
>
>I would like to use Microsoft IAS Radius server to do AAA
>for login access to Cisco routers. I have a Windows 2000
>Active Directory environment.
>
>Is it possible to use the Active Directory user database to authenticate
>user name and password for technicians logging into the routers? Right now
>I am having to enter the usernames and passwords on the router local
>database.
>Any URLs on how to do this?
>
>If not, what about Cisco ACS or FreeRadius?
>
>Thanks.
>
>Ken
>
>
>
>
>
>___
>Join Excite! - http://www.excite.com
>The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72129&t=72125
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Microsoft IAS with Cisco Radius [7:72125]

2003-07-10 Thread Doug Korell
Forgot about the user part. In IAS, Setup a remote access policy by domain
groups. Create a domain group, throw the users in it that have access to the
router and allow it in the policy.

When the user logs into the router, it will go to IAS, go down the list of
Remote Access Policies, and allow that user rights based on the first match.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72127&t=72125
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Microsoft IAS with Cisco Radius [7:72125]

2003-07-10 Thread Doug Korell
You should be able to since it's a standard RADIUS server. I've been using
IAS for Cisco VPN authentication for about 6 months now. I am now
implementing ACS though and what an advantage it has over IAS. If someone so
much as farts on the network, I know about it.

In IAS just setup each device that needs to authenticate in the client
section and make sure the key is the same on the router. For router
configuration, there are many exaples on Cisco's website for RADIUS.

ACS can be pretty overwhelming at first but once you learn it, it is awesome.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72126&t=72125
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Microsoft IAS with Cisco Radius [7:72125]

2003-07-10 Thread kwindancer
Hello All:

I would like to use Microsoft IAS Radius server to do AAA
for login access to Cisco routers. I have a Windows 2000 
Active Directory environment.

Is it possible to use the Active Directory user database to authenticate
user name and password for technicians logging into the routers? Right now
I am having to enter the usernames and passwords on the router local
database.
Any URLs on how to do this?

If not, what about Cisco ACS or FreeRadius?

Thanks.

Ken





___
Join Excite! - http://www.excite.com
The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72125&t=72125
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Bootcamp in UK [7:72115]

2003-07-10 Thread Jatinder Singh
Please if any body has the phone no or mail id of Martin Shortland Kinetic
Education who is the trainer here in UK


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72115&t=72115
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: CCNP ReCert Questions [7:72071]

2003-07-10 Thread Priscilla Oppenheimer
John Cianfarani wrote:
> 
> Well I decided I wouldn't push it in such a short timeframe
> with the one
> exam. With work and whatever else probably won't have enough
> time to
> study fully for it.  So I will write either all 4 again, or
> cit/bcran
> and then the new Composite once it's out.


You shouldn't lose your CCNP, albeit temporarily (hopefully). Think how hard
you worked to get it. How will you feel when you can no longer say you have
it? I think you should try the recert exam.

I'm sorry if I scared you by saying it is hard. It is hard, but study the
IS-IS supplement from Cisco Press and some material on multilayer switching
and eat a lot of blueberries. At least give it a try.

Here's a link on multilayer switching:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/switch_c/xcprt5/xcdmsov.htm

Do you know about the free PDF document that Cisco Press put out on IS-IS
for BSCI candidates? When Cisco added IS-IS, Cisco Press didn't have a book
out yet that covered it (from a BSCI viewpoint anyway), so they put out a
PDF. Here's a link:

http://www.ciscopress.com/content/images/1578702283/downloads/BSCNSupplement.pdf?session_id={D6502E20-0A8E-4868-8FE7-5A1A54F64857}

Good luck whichever way you go, but I definitely recommend not lettting your
CCNP disappear, even temporarily.

Priscilla

> 
> Anyone know if the Composite will count towards things like
> CCIP?  If it
> doesn't I'd just take the 4 exam route.
> 
> Thanks
> John
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, July 09, 2003 7:22 PM
> To: [EMAIL PROTECTED]
> Subject: Re: CCNP ReCert Questions [7:72071]
> 
> Amazing wrote:
> > 
> > I just did the CCNP recet test two weeks ago and passed with
> > not too much
> > studying -- used boson test to see my weak areas and just
> > brushed up on
> > those areas -- hint -- you can use the same study materials
> you
> > used three
> > years ago -- nothing has changed.
> 
> I wouldn't recommend just using the same material as 3 years
> ago. There
> are
> some new topics, like IS-IS for Routing and multilayer
> switching for
> Switching. Support and Remote Access seemed to be pretty
> similar, but
> those
> other two were pretty different from 3 years ago, at least in
> my test. I
> found it to be a two-Tums-package test for sure, depsite a good
> score in
> the
> end.
> 
> > 
> > as to the answer to your questions, my experience has been
> that
> > you should
> > go directly to cisco with these questions so you have a
> 
> I defintely agree there. Go to Cisco. Even if we give you an
> answer, the
> Authoritative Bit will not be set. :-) That won't stop me
> though from
> adding
> a few more comments below
> 
> > documented answer
> > when they change their mind later on ;-)
> > 
> > d
> > 
> > 
> > ""John Cianfarani""  wrote in message
> > news:[EMAIL PROTECTED]
> > > I have to recert my CCNP by the 21st of this month.  (yeah I
> > know I left
> > > it late, but I was busy upgrading my CSS1 to CCSP).
> > >
> > > I notice they have a new test coming out ( 642-891 ) Called
> > Composite
> > > which is based on BSCI and BCMSN, which will also let you
> > recert your
> > > CCNP and CCDP with at the same time.  Now that test doesn't
> > come out
> > > until Aug 7th.  Anyone know if there is still a Beta of this
> > exam
> > > available to write?  
> 
> I don't think they ever did a beta for that new composite exam
> that
> suddenly
> popped up? Maybe it will still come out?
> 
> >Or if Writing BSCI / BCMSN is equivalent?
> 
> I doubt you can just write BSCI and BCMSN to get recertified.
> 
> > >
> > > Also anyone know a way extended you recert date maybe by
> > writing a
> > > current CCNP exam or something or am I just gonna have to
> > buckle down
> > > and write the 640-851 CCNP Recert exam?
> 
> Just do it. It's not that painful. :-) And I think it's your
> only
> option.
> Ask Cisco and check your tracking info to be sure. Good luck!
> 
> Priscilla
> 
> 
> > >
> > > Thanks!
> > > John
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72123&t=72071
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: OSPF max Router-LSA links [7:72024]

2003-07-10 Thread Howard C. Berkowitz
At 5:48 AM -0700 7/10/03, Zsombor Papp wrote:
>I guess our views on OSPF are slightly different.
>
>I will now release the stage to the next "how to increase the value 
>of the CCIE certification" thread... :)
>
>Thanks,
>
>Zsombor

Zsombor, I appreciate the discussion. I've been running at low speed 
due to a leg infection, but will talk to some developers and reread 
both 2328 and some of the OSPF working group archives. Will get back 
when I have useful information.

ANYTHING but another one of THOSE threads...maybe a discussion on 
what happens to bits routed to the null interface?  Is there a true 
astronomical black hole into which they are dumped?  Alternatively, 
might there be a bit dump somewhere in Northern New Jersey, which 
someday may explode?

>
>At 03:13 AM 7/10/2003 +, Howard C. Berkowitz wrote:
>>At 5:40 PM -0700 7/9/03, Zsombor Papp wrote:
>>>At 11:07 PM 7/9/2003 +, Howard C. Berkowitz wrote:
At 12:43 PM + 7/9/03, Zsombor Papp wrote:
>The original question (as I understood) was about a single LSA that is
>larger than 1500 bytes (think Type 1 LSA for a router with 200
>>interfaces).
>I can't see how such an LSA could be divided into multiple OSPF messages
>>so
>the only logical (implementation independent) solution seems to be to
>fragment the packet at the IP layer. Am I missing something?

I missed the point that the LSA was for the same router. Without
testing it, however, I don't immediately see why it wouldn't work to
have multiple LSAs for the same router,
>>>
>>>I am not sure what you mean by "multiple LSAs for the same router",
>>>but if you mean "multiple type 1 LSAs originated by the same
>>>router", then my answer is "because it is impossible to distinguish
>>>them". If I am mistaken here, then I would like to understand how
>>>such LSAs can be distinguished.
>>
>>The relationship between type 1 and type 2 is essential in developing
>>the SPF algorithm.  If you think of the LSDB entries for both, they
>>are trees.  The type 1 bas the router ID as root and the attached
>>interface IDs/prefixes as leaves.  The type 2 has an interface
>>ID/prefix as root and routers connected to that prefix as leaves.
>>
>>>
   as long as no prefixes were
duplicated. Certainly, you send out a new type 2 when an additional
prefix activates
>>>
>>>What is "prefix" in this context? Type 2 LSAs describe the routers
>>>attached to a network. Are you saying that if an additional router
>>>comes up on that network, then the DR should send only an
>>>"incremental" Type 2 LSA, containing a single entry, describing the
>>>new router that just came up? Which bit in the OSPF packet will let
>>>the receiver router know that this is an "incremental" LSA, not a
>>>replacement (because all the other routers died and a new one just
>>>came up)?
>>
>>The receiving router knows the sending router is still up, at least
>>through the hello mechanism. One of the fundamental points of using
>>hellos is so you know if the originating router has gone down.  Since
>>you know from context it's still up, you don't need an incremental
>>flag -- you know the update is supplemental information.
>>
>>Remember also that you can withdraw routes without killing the whole
>>LSDB entry.
>>
>>>
   -- I don't immediately see why you couldn't send out
a new type 1 with the additional new prefix. Neither are in an
existing LSDB, so they shouldn't purge anything.
>>>
>>>How do you mean "neither are in an existing LSDB"? If an OSPF router
>>>receives two Type 1 LSAs, both originated by the same router, how
>>>will it differentiate between the two so that it can install both of
>>>them into the LSDB? IMHO the receiver will try to guess which one of
>>>the two is newer and install only the newer one. In fact it is not
>>>even correct to think about these two LSAs as "two LSAs"; they are
>>>two instances of the same LSA.
>>
>>Think not of the transmitted LSAs but its entries. You can have
>>updates on existing information, or changes to the basic topology
>>conveyed (such as a new interface coming up). That doesn't need a new
>>LSA.
>>
>>Look at it this way:  LSUpdates are encodings of information for
>>transmission.  The decision to install information in the LSDB is
>>done after the packet is parsed into its components.
>>
>>>
Another argument about fragmentation hasn't been discussed. Consider
Hello packets. IIRC, about 47 router entries can fit into an OSPF
hello packet with a 1500 byte MTU.  Consider the timing complexities
of waiting to defragment before you can tell if another router is
alive.  Even scarier is if the load were heavy enough (unlikely, but
possible) that you might hit the next hello update interval before
you had finished sending (or at least processing) all the segments.
>>>
>>>I think I am missing the point here. Yes, fragmentation is not good,
>>>but there are circumstances when you have to live with it.
>>>
>>>Than

Re: an ISIS question.... [7:72081]

2003-07-10 Thread Peter van Oene
At 08:36 AM 7/10/2003 -0700, Zsombor Papp wrote:
>Hi,
>
>the L1/L2 behavior can be configured on a per interface basis. The 
>question why you would want an interface to be both L1 and L2, and 
>especially why you would want a router to form both L1 and L2 adjacency 
>with one of its neighbors, is a good one.

In general, I don't think you would want this. I can attest to have never 
intentionally  designing a network of that nature.  Unless you wish to 
connect L1 domains to a backbone, or are in the process of a migration from 
one topology to another, minimizing adjacency state and its related 
overhead is a good thing.

>One (exotic) example would be if an L1L2 router has L1, L2, and L1L2 
>neighbors as well on the same interface like, this:
>
>|--L2
>|
>|--L1L2
>|
>|--L1L2
>|
>|--L1
>
>In this case the L1L2 routers' interface must be configured for both L1 
>and L2 if we want the L1 router to be able to "get out". Consequently, the 
>two L1L2 routers will form both L1 and L2 adjacency with each other, but 
>this is more a coincidence than a requirement, IMHO.

I would agree.  There is no benefit to this as I see it.

>A more realistic scenario would be like this:
>
>L1--|
> |--L1L2(A)--L2
> |
> |--L1L2(B)--L2
>L1--|

In this case, you L1 areas will not usually be the same and the L1 
adjacency between the two "core" routers will not form.  If the area is the 
same, the L2 adjacency is superfluous.   Many large networks are single 
area, or single level (ie L1 everyone in one area, or L2 everywhere where 
area isn't very relevant.)

Pete



>I am not sure however if there is any advantage of having A and B form 
>both L1 and L2 adjacencies with each other. It appears to me that L1 would 
>be just fine. I, too, would be happy to hear some comments on this.
>
>Thanks,
>
>Zsombor
>
>At 02:40 PM 7/10/2003 +, Peter van Oene wrote:
>>At 03:40 AM 7/10/2003 +, wj chou wrote:
>> >Hi..
>> >
>> >a basic ISIS question...
>> >
>> >I know that by default, an IS is L1-L2, so it can form a L1L2 adjacency 
>> with
>> >its neighbors. But what's the benefit of it? and under what kind of
>> >situation in real world people want to configure it this way?
>>
>>L1L2 routers are required to interconnect L1 areas via an L2 backbone.  An
>>L1L2 router acts much like an OSPF ABR.
>>
>> >thanks!
>> >
>> >Ellie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72118&t=72081
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: interface and line to default [7:72095]

2003-07-10 Thread AK
these links would be helpfull to u:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800ca774.html

http://www.cisco.com/en/US/tech/tk713/tk507/technologies_tech_note09186a0080094862.shtml

http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080087ae8.html

as for ur first question about the lines, i'm not sure i got what u mean


""H T""  a icrit dans le message de
news:[EMAIL PROTECTED]
> Hi all,
>
> To bring back the physical interface to it is default we use " default
> interface type number " global config mode
>
> The question is how we bring back the default sting for the
>
> Router#sho line
> yp Tx/RxA Modem  Roty AccO AccI   Uses   Noise  Overruns   Int
> *0 CTY  --  ---  0   0
> 0   -
> 65 AUX   9600/9600  --  ---  0   0
> 0   -
> *   66 VTY  --  ---  1   0
> 0   -
> *   67 VTY  --  ---  1   0
> 0   -
>  68 VTY  --  ---  0   0
> 0   -
> 69 VTY  --  ---  0   0
> 0   -
> 70 VTY  --  ---  0   0
> 0   -
>
>
>
> How to make use of the following virtual interfaces?
>   Virtual-Access
>   Virtual-FrameRelay
>   Virtual-Template
>   Virtual-TokenRing
>
>
>
>
> Good luck :)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72117&t=72095
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Redistributing default route from BGP into OSPF [7:72058]

2003-07-10 Thread Zsombor Papp
At 04:40 PM 7/9/2003 +, Joseph Brunner wrote:
>This horse has been beat dead far too many times. The default
>route must come from EBGP

>so the tag field is populated with meaningful data (last i recall)

Isn't it because of the admin distance?

Thanks,

Zsombor


>I my lab I just know it never works from IBGP>REDIS OSPF
>
>Must be EBGP>OSPF>




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72116&t=72058
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Another CCNP Re-Cert Question [7:72105]

2003-07-10 Thread Reza
The day your CCNP expires is your deadline (for you July 20th)

HTH


""simon watson""  wrote in message
news:[EMAIL PROTECTED]
> Hi All
>
> My CCNP expires on the 20th July.Are there deadlines set to re-certify in
a
> certain time frame that if you do not you have to take the whole 4 exams
> again.
>
> Also are there any good books to brush up on things that were not in the
CCNP
> three years ago ??
>
> Thanks
>
>
> Simon.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72111&t=72105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: an ISIS question.... [7:72081]

2003-07-10 Thread Peter van Oene
At 03:40 AM 7/10/2003 +, wj chou wrote:
>Hi..
>
>a basic ISIS question...
>
>I know that by default, an IS is L1-L2, so it can form a L1L2 adjacency with
>its neighbors. But what's the benefit of it? and under what kind of
>situation in real world people want to configure it this way?

L1L2 routers are required to interconnect L1 areas via an L2 backbone.  An 
L1L2 router acts much like an OSPF ABR.

>thanks!
>
>Ellie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72110&t=72081
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Help !!! [7:72096]

2003-07-10 Thread Michael F.
HI,

I found the following Answer somewhere on the CISCO TAC :

 If you issue the autoselect ppp line configuration command, you must first
issue the async mode interactive asynchronous interface configuration
command. The async mode interactive command enables the interface to select
a protocol type dynamically. If you do not enter the async mode interactive
command before you issue the autoselect ppp command, the following warning
message appears: "%Autoselect w/o the interface command 'Async mode
interactive' is useless."

I hope that helps.

Michael



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72101&t=72096
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Tips on 6509 Cat-OS Upgrades [7:72073]

2003-07-10 Thread alaerte Vidali
Following is a summary that I wrote for my use, based on the Cisco
instructions. At the time I had a limitation with the size of the flash; I
could not save the new IOS on my 20 Mbytes flash, so I used a small version,
based on a sugestion from a colleage in this group.

I ended up discovering that you can save the final version on the bootflash,
get your switch working, format the bootflash and copy the final version
again. The problem here is that if anything goes wrong on the format
process, you will not have a version to boot.

Hope be useful. 

Good Luck !


On slot0: there is the CATOS image and the small IOS image

GIG_SPO> (enable) dir slot0:
May 22 2003 16:54:38 cat6000-sup2.6-3-4a.bin
May 22 2003 17:02:08 c6sup22-dsv-mz.121-5c.EX.bin

1. Change the configuration register setting so that the switch does not
boot the CatOS image and goes to ROMMON

SP> (enable) set boot config-register 0x0


2. Reset the switch

SP> (enable) reset

the switch goes to SP ROMMON: 


3. Issue the set command at the SP ROMMON prompt to check the environment
variables. You will notice that the switch is currently set to boot into the
CatOS image:

rommon 1 > set


4. Remove the slot0:switch.cfg from the environment settings.

rommon 2 > CONFIG_FILE=


5. Save the environment variable

rommon 3 > sync


6. Issue the dir command to look at the different devices you have available
from which to boot the Integrated Cisco IOS (Native Mode) image

rommon 4 > dir slot0: 


7. Since you have changed the environment variables in Step 14, you have to
issue the reset command before you can boot the switch

rommon 6 > reset 


8. Issue the boot command to start the bootup sequence: 
rommon 1 > boot slot0:c6sup22-dsv-mz.121-5c.EX.bin

Note: If your switch does not take the above command, try issuing the boot
sup-bootflash: command instead

!---You will be at the router prompt and the conversion is complete.
!---System is up and running with the Integrated Cisco IOS (Native Mode)
image.
 Router> 


The error messages displayed are annoying;  to get them to stop popping up,
issue the no service config

9. Format the sup-bootflash: (Supervisor boot Flash)

Router#format sup-bootflash:


10. Copy the Integrated Cisco IOS (Native Mode) image from TFTP server to
the Supervisor bootflash

configure the router so it can use tftp
conf t
 int vlan 11
  ip ad 10.6.9.1 255.255.248.0
  
ping 10.6.13.133  (will be on old port 5/47)

Router#  copy tftp sup-bootflash:
(here is a difference from the steps on the Cisco page; there is the command
copy from slot0 to sup-bootflash)

the file is   c6sup22-jo3sv-mz.121-13.E6.bin


if “copy tftp sup-bootflash:” do not work here,  copy the small version from
slot0 to bootflash

   copy slot0:c6sup22-dsv-mz.121-5c.EX.bin sup-bootflash: 


11. Issue the following set of commands to set and verify the environment
variable:.

Router#show bootvar 

!---Boot variable is set to load the MSFC2 image. 

Router(config)#  boot system sup-bootflash:c6sup22-jo3sv-mz.121-13.E6.bin 


(or boot system sup-bootflash:c6sup22-dsv-mz.121-5c.EX.bin depending ot the
step before)

Note: When running Integrated Cisco IOS (Native Mode) on the Catalyst 6000
platform, the copy running-config startup-config command will not save the
environment variables. As a result, the system may not load the correct
image at the next reload. Use the write memory command.

Router# write mem 


12. Check the SP boot register

Router# remote command switch show bootvar

Router(config)#config-register 0x2102

Router#write memory 

Router#remote command show bootvar


13. The final step is to reload the switch:

Router#reload


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72099&t=72073
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Visio Stencils [7:72054]

2003-07-10 Thread Robert Edmonds
I have the old file with the 3508 series if you need it.  Just let me know
where to e-mail it.

Robert

""Elijah Savage""  wrote in message
news:[EMAIL PROTECTED]
> Does anyone have visio stencils for Cisco 3500 series switches like the
> 3508's and 3548's, I use to have them but had to reinstall and now that I
> have done that Cisco has seemed to remove these products from their site.
> Here is where all the other stencils are and there is a 3500 series
> stencil but it only has 3550's in the zip file.
>
> http://www.cisco.com/en/US/customer/products/prod_visio_icon_list.html
>
> Any help in locating these would be appreciated.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72106&t=72054
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Help !!! [7:72096]

2003-07-10 Thread George Murage
The cmd "autoselect ppp" instructs the interface to only start the ppp
protocol if it detects incoming PPP packets. So the calling device must
initiate the PPP negotiation.

However, for this to work on the router, the async. interface must be set to
allow the incoming connection to chose the type of session it wants to
start. This is done using the "async mode interactive" cmd. This is useful
where your asynch. interface is used to connect different types of incoming
sessions such as PPP, SLIP, ARAP etc
 
The default is "async mode dedicated" where the async. interface is set to
start one type of network session such as PPP for all incoming calls.

HTH
George Murage

P.S This is a pretty loose explanation but you can get the details from
Cisco documentation CD - or from somebody on this list who has used the cmds
recently :-) 

-Original Message-
From: H T [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 10, 2003 2:11 PM
To: [EMAIL PROTECTED]
Subject: Help !!! [7:72096]

what does it mean?
and
Why I am getting this message?

TestR(config-line)#autoselect ppp
%Autoselect w/o the interface command 'Async mode interactive' is useless


Cheers




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72100&t=72096
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Another CCNP Re-Cert Question [7:72105]

2003-07-10 Thread simon watson
Hi All

My CCNP expires on the 20th July.Are there deadlines set to re-certify in a
certain time frame that if you do not you have to take the whole 4 exams
again.

Also are there any good books to brush up on things that were not in the CCNP
three years ago ??

Thanks


Simon.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72105&t=72105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: does anyone know the pinout on a t1 cable bet/ a [7:72069]

2003-07-10 Thread Bruce Enders
I'm thinking that even mentioning a straight through cable when
connecting two T1 interfaces together is a good way to confuse the person
asking the question. A T1 crossover is always used to directly connect
two interfaces. The pin-outs are correct for the Xover.

Bob by The Bay wrote:

  I'm thinking for straight through you meant to say:
  
  Straight through T1 you will need 11, 22, 44 and 55
  
   wrote in message  news:[EMAIL PROTECTED]  ...

For a standard T1:

Cross-over you will need 14 and 25
Straight through T1 you will need 11, 22, 33 and 44

Thanks,

Mario Puras
SoluNet Technical Support
Mailto: [EMAIL PROTECTED]Direct: (321) 309-1410
888.449.5766 (USA) / 888.SOLUNET (Canada)

  -Original Message-
  From:   [EMAIL PROTECTED]  [ 
mailto:[EMAIL PROTECTED]  ]
  Sent: Wednesday, July 09, 2003 3:16 PM
  To:   [EMAIL PROTECTED]  Subject: does anyone know the
pinout on a t1 cable bet/ a [7:72069]

  3660 & an ls1010...the interfaces on both are t1
  
  thx in advance
  Report misconduct
  and Nondisclosure violations to  
[EMAIL PROTECTED]
-- 
Bruce Enders
Chesapeake Netcraftsmen, LLC   Cell 443-994-0678
1290 Bay Dale Drive #312   HO 410-280-6927
Arnold, MD 21012   efax 443-331-0651




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72103&t=72069
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Help !!! [7:72096]

2003-07-10 Thread AK
the line must be n interective mode if u want the user to select the proto
or the AS to autosence the proto used based on there flags.
u just need to put the line in interactive mode b4 the autoselect command,
that's it, cause in dedicated mode the line is simply bound to the proto
defined.



""H T""  a icrit dans le message de
news:[EMAIL PROTECTED]
> what does it mean?
> and
> Why I am getting this message?
>
> TestR(config-line)#autoselect ppp
> %Autoselect w/o the interface command 'Async mode interactive' is useless
>
>
> Cheers




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72102&t=72096
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Question of EIGRP Calculation [7:72091]

2003-07-10 Thread hebn9999
hi,
  unlike ospf, eigrp process doesn't know the toppology of the whole
network.
   from R1's perspective,there is only one path to reach 192.168.1.0 with
nexthop is R2's s0.
   the successor is actually the nexthop instead of route.

  hebn


- Original Message -
From:"dovelet" 
To:[EMAIL PROTECTED]
Subject:Question of EIGRP Calculation [7:72091]
Date:Thu, 10 Jul 2003 15:30:30 +0800
 >Hi all,
 >
 >I have a question about EIGRP calculation and hope someone can help me.
The
 >network diagram is as follow:
 >
 >[R2]-(s0)---(s0)-[R1]
 >(e0)
 >
 >(e0)(e0)
 >[R3][R4]
 >(s0)(s0)
 >||
 >||
 >||
 >(s0)(s0)
 >[R5][R6]
 >(e0)(e0)
 >- (192.168.1.0)
 >
 >In this network, all routers are running eigrp. The eigrp parameters are
as
 >follow:
 >R1 (s0):delay:20,000us; bandwidth:1,536kbit
 >R2 (e0):delay:1,000us; bandwidth:10,000kbit
 >R3 (s0):delay:35,000us; bandwidth:2,048kbit
 >R4 (s0):delay:20,000us; bandwidth: 1,536kbit
 >R5 (e0):delay:1,000us; bandwidth:10,000kbit
 >R6 (e0):delay:1,000us; bandwidth:10,000kbit
 >
 >From R1 to the network 192.168.1.0, it should have 2 paths:
 >
 >Path1:
 >R1->R2->R3->R5
 >Total delay: 57,000 (20,000+1,000+35,000+1,000)
 >Min. Bandwidth: 1536kbit
 >EIGRP Metric: 3,125,760
 >Advertised Distance: 2,196,992
 >
 >Path2:
 >R1->R2->R4->R6
 >Total delay: 420,000 (20,000+1,000+20,000+1,000)
 >Min. Bandwidth: 1536kbit
 >EIGRP Metric: 2,741,760
 >Advertised Distance: 2,229,760
 >
 >As the metrics of Path2 is smallest, I think it should go through Path2
 >(R1->R2->R4->R6). However, I found that the router choice Path1
 >(R1->R2->R3->R5).
 >
 >It make sense! Because if a packet is in R2 and it wants to go to
192.168.1.x
 >network, it should not go through R2->R4->R6 (metric: 2,229760), it should
go
 >through R2->R3->R5 (mtrics:2,196,992).
 >
 >My question is: from the books, it mentioned that the smallest EIGRP
metric
 >will becomes the FD and the route should be the Successor. In this
example,
 >the result is not true. Please help to correct me.
 >
 >Regards,
 >Dovelet
__

===




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72098&t=72091
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re[2]: CCNP ReCert Questions [7:72071]

2003-07-10 Thread Karen E Young
If you check Cisco's website, you'll see that the old Foundation exam and
both the CCNP recert and the CCDP recert all go offline on September 7th.
The new test (642-891) will replace them and comes online on August 7th.

The current CCNP and CCDP recerts will no longer be offered after September
7th. Just the Composite.

Here's the notice:
http://www.cisco.com/en/US/learning/learning_certification_program_updates.html

Karen


*** REPLY SEPARATOR  ***

On 7/9/2003 at 11:22 PM Priscilla Oppenheimer wrote:

>Amazing wrote:
>> 
>> I just did the CCNP recet test two weeks ago and passed with
>> not too much
>> studying -- used boson test to see my weak areas and just
>> brushed up on
>> those areas -- hint -- you can use the same study materials you
>> used three
>> years ago -- nothing has changed.
>
>I wouldn't recommend just using the same material as 3 years ago. There are
>some new topics, like IS-IS for Routing and multilayer switching for
>Switching. Support and Remote Access seemed to be pretty similar, but those
>other two were pretty different from 3 years ago, at least in my test. I
>found it to be a two-Tums-package test for sure, depsite a good score in
>the
>end.
>
>> 
>> as to the answer to your questions, my experience has been that
>> you should
>> go directly to cisco with these questions so you have a
>
>I defintely agree there. Go to Cisco. Even if we give you an answer, the
>Authoritative Bit will not be set. :-) That won't stop me though from
>adding
>a few more comments below
>
>> documented answer
>> when they change their mind later on ;-)
>> 
>> d
>> 
>> 
>> ""John Cianfarani""  wrote in message
>> news:[EMAIL PROTECTED]
>> > I have to recert my CCNP by the 21st of this month.  (yeah I
>> know I left
>> > it late, but I was busy upgrading my CSS1 to CCSP).
>> >
>> > I notice they have a new test coming out ( 642-891 ) Called
>> Composite
>> > which is based on BSCI and BCMSN, which will also let you
>> recert your
>> > CCNP and CCDP with at the same time.  Now that test doesn't
>> come out
>> > until Aug 7th.  Anyone know if there is still a Beta of this
>> exam
>> > available to write?  
>
>I don't think they ever did a beta for that new composite exam that
>suddenly
>popped up? Maybe it will still come out?
>
>>Or if Writing BSCI / BCMSN is equivalent?
>
>I doubt you can just write BSCI and BCMSN to get recertified.
>
>> >
>> > Also anyone know a way extended you recert date maybe by
>> writing a
>> > current CCNP exam or something or am I just gonna have to
>> buckle down
>> > and write the 640-851 CCNP Recert exam?
>
>Just do it. It's not that painful. :-) And I think it's your only option.
>Ask Cisco and check your tracking info to be sure. Good luck!
>
>Priscilla
>
>
>> >
>> > Thanks!
>> > John
A rose by any other name is Cisco specific terminology...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72097&t=72071
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Help !!! [7:72096]

2003-07-10 Thread H T
what does it mean?
and
Why I am getting this message?

TestR(config-line)#autoselect ppp
%Autoselect w/o the interface command 'Async mode interactive' is useless


Cheers




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72096&t=72096
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


interface and line to default [7:72095]

2003-07-10 Thread H T
Hi all,

To bring back the physical interface to it is default we use " default
interface type number " global config mode

The question is how we bring back the default sting for the

Router#sho line
yp Tx/RxA Modem  Roty AccO AccI   Uses   Noise  Overruns   Int
*0 CTY  --  ---  0   0
0   -
65 AUX   9600/9600  --  ---  0   0
0   -
*   66 VTY  --  ---  1   0
0   -
*   67 VTY  --  ---  1   0
0   -
 68 VTY  --  ---  0   0
0   -
69 VTY  --  ---  0   0
0   -
70 VTY  --  ---  0   0
0   -



How to make use of the following virtual interfaces?
  Virtual-Access
  Virtual-FrameRelay
  Virtual-Template
  Virtual-TokenRing




Good luck :)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72095&t=72095
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: what is the command for this in PIX? [7:72083]

2003-07-10 Thread Richard Campbell
sorry..  I need to ask some more questions

>Write net x.x.x.x" to save the config to a tftp server
It save the startup config or running config? My startup and running config 
are different.  What I need is to save the running config..

>"Configure net" to get the file from the tftp server
get the config file from tftp and save as running config or startup-config?

>Configure mem will combine the running and the saved in flash.
what I want is to overwrite the running-config with the saved config without 
rebooting PIX, will this achieve what i want??


>From: "Jim Devane" To: "'Richard Campbell'" 
>Subject: RE: what is the command for this in PIX? [7:72083]
>Date: Wed, 9 Jul 2003 23:39:16 -0700
>
>
>Hmm, the "old" way is:
>
>"Write net x.x.x.x" to save the config to a tftp server
>"Configure net" to get the file from the tftp server
>
>Write mem will save the current running to flash
>Configure mem will combine the running and the saved in flash.
>
>I am not sure the PIX supported FTP. Ifit did I would be interested to
>know how to do it as well...but I am fairly certain it doesn't.
>
>HTH,
>Jim
>
>-Original Message-
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
>Richard Campbell
>Sent: Wednesday, July 09, 2003 9:42 PM
>To: [EMAIL PROTECTED]
>Subject: what is the command for this in PIX? [7:72083]
>
>Hey.. what command in PIX to do the following
>
>1) copy the current config (not the startup config) to Tftp server ?
>2) overwrite the current config from the start up config ? (without
>rebooting PIX)
>3) copy the config stored in Ftp server to the PIX current config ?
>4) copy the config stored in Ftp server to the PIX start-up config ?
>
>Thanks a lot
>
>_
>The new MSN 8: smart spam protection and 2 months FREE*
>http://join.msn.com/?page=features/junkmail
_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72094&t=72083
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


GRE Tunnel & EIGRP [7:72093]

2003-07-10 Thread Tim Champion
I am planning on using a GRE tunnel across a MPLS VPN in order to create an
EIGRP neighbour relationship across the cloud. The VPN link will be running
at 8Mbps. The routers terminating the tunnel will be a 3640 and RSM. Does
anyone know if this will adversely impact the processors and/or throughput
of the link.


Many thanks


Tim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72093&t=72093
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Redistributing default route from BGP into OSPF [7:72058]

2003-07-10 Thread Curious
Maybe I am wrong, but if I want a router speaking ospf to generate a default
router I must configure "default-information originate" under ospf. With
this command when the router speaking OSPF has a default route in its
routing table it will adevertise a ospf default route. For example, if I
have a static default route in my router and I redistribute static routes in
ospf, it will not advertise a default route, I have to configure a
"default-information originate" or a "default-information originate
allways", the first only generates a ospf default route If the router has a
default route learned by another routing protocol, and de second generates a
default route allways.
Joseph are you sure that if the router learns a default route from e-BGP and
you redistribute bgp in ospf it will work? Don't you need a
default-originate command?

Every day I learn a new thing!





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72089&t=72058
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Question of EIGRP Calculation [7:72091]

2003-07-10 Thread dovelet
Hi all,

I have a question about EIGRP calculation and hope someone can help me. The
network diagram is as follow:

[R2]-(s0)---(s0)-[R1]
(e0)

(e0)(e0)
[R3][R4]
(s0)(s0)
||
||
||
(s0)(s0)
[R5][R6]
(e0)(e0)
- (192.168.1.0)

In this network, all routers are running eigrp. The eigrp parameters are as
follow:
R1 (s0):delay:20,000us; bandwidth:1,536kbit
R2 (e0):delay:1,000us; bandwidth:10,000kbit
R3 (s0):delay:35,000us; bandwidth:2,048kbit
R4 (s0):delay:20,000us; bandwidth: 1,536kbit
R5 (e0):delay:1,000us; bandwidth:10,000kbit
R6 (e0):delay:1,000us; bandwidth:10,000kbit

>From R1 to the network 192.168.1.0, it should have 2 paths:

Path1:
R1->R2->R3->R5
Total delay: 57,000 (20,000+1,000+35,000+1,000)
Min. Bandwidth: 1536kbit
EIGRP Metric: 3,125,760
Advertised Distance: 2,196,992

Path2:
R1->R2->R4->R6
Total delay: 420,000 (20,000+1,000+20,000+1,000)
Min. Bandwidth: 1536kbit
EIGRP Metric: 2,741,760
Advertised Distance: 2,229,760

As the metrics of Path2 is smallest, I think it should go through Path2
(R1->R2->R4->R6). However, I found that the router choice Path1
(R1->R2->R3->R5).

It make sense! Because if a packet is in R2 and it wants to go to 192.168.1.x
network, it should not go through R2->R4->R6 (metric: 2,229760), it should go
through R2->R3->R5 (mtrics:2,196,992).

My question is: from the books, it mentioned that the smallest EIGRP metric
will becomes the FD and the route should be the Successor. In this example,
the result is not true. Please help to correct me.

Regards,
Dovelet




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72091&t=72091
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Prefix-list help [7:72090]

2003-07-10 Thread Raj Singh
Classless domain -R1--classful domain

R1 is the border router between the classless and classful routing domain. 
R1 maintains a BGP peering session with the classless routing domain, and
runs a classful IGP with the classful routing domain.  The classless routing
domain is originating a default route to R1 via BGP, and advertising
prefixes which are subnetted, aggregated, and classful. Since the classful
routing domain does not support the advertisement of subnets or aggregates,
there is no reason for R1 to accept any of these prefixes in from the
classless domain.  Configure an access-list or prefix-list on R1 that will
only allow classful networks and a default route in from the classless
routing domain.  This access-list or prefix-list should not contain more
than four entries.

I think this will work but not sure. Can anyone tell me if this is right?
ip prefix-list test seq 5 permit 0.0.0.0/0
ip prefix-list test seq 5 permit 0.0.0.0/0 ge 8 le 8
ip prefix-list test seq 5 permit 0.0.0.0/0 ge 16 le 16
ip prefix-list test seq 5 permit 0.0.0.0/0 ge 24 le 24

Any help is duly appreciated in advance.

Thanks
Raj
 



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72090&t=72090
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: what is the command for this in PIX? [7:72083]

2003-07-10 Thread Richard Campbell
sorry..  it is tftp not FTP..  I typed wrongly


>From: "Jim Devane" 
>To: "'Richard Campbell'" 
>Subject: RE: what is the command for this in PIX? [7:72083]
>Date: Wed, 9 Jul 2003 23:39:16 -0700
>
>
>Hmm, the "old" way is:
>
>"Write net x.x.x.x" to save the config to a tftp server
>"Configure net" to get the file from the tftp server
>
>Write mem will save the current running to flash
>Configure mem will combine the running and the saved in flash.
>
>I am not sure the PIX supported FTP. Ifit did I would be interested to
>know how to do it as well...but I am fairly certain it doesn't.
>
>HTH,
>Jim
>
>-Original Message-
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
>Richard Campbell
>Sent: Wednesday, July 09, 2003 9:42 PM
>To: [EMAIL PROTECTED]
>Subject: what is the command for this in PIX? [7:72083]
>
>Hey.. what command in PIX to do the following
>
>1) copy the current config (not the startup config) to Tftp server ?
>2) overwrite the current config from the start up config ? (without
>rebooting PIX)
>3) copy the config stored in Ftp server to the PIX current config ?
>4) copy the config stored in Ftp server to the PIX start-up config ?
>
>Thanks a lot
>
>_
>The new MSN 8: smart spam protection and 2 months FREE*
>http://join.msn.com/?page=features/junkmail
_
The new MSN 8: advanced junk mail protection and 2 months FREE* 
http://join.msn.com/?page=features/junkmail




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72092&t=72083
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Checkpoint to Pix conversion tools [7:72088]

2003-07-10 Thread John Brandis
Hi,
 
Any one ever came across tools to do this, apart from the ones on offer by
SolSoft. Any open source out there yet ?
 
What's every one up to? I am here in Sydney looking at Disaster Recovery
situations, and moving to a PIX environment. Not much new happening, got
less Cisco based work to do, and more Sys Admin work, mostly Solaris which
is quite interesting all the same. One thing that I wish to implement, is
traffic shaping. Has any one got an idea if Selective Packet Discard, is
turned on by default on various IOS versions 12.2(2). I have had 2 instances
this month of a site going down due to a flood of traffic going through its
tiny 256k link into the main site.
 
Would also, love to traffic shape those annoying people that I work with
down to a crawl on the network (local lan). Has any one done this before.
 
Thanks for your time. What are you people doing, anything new and exciting ?
 
John
Sydney Australia 


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.
www.solution6.com
**




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72088&t=72088
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]