Trainig Courses in Dubai

2005-11-13 Thread almawred








يتشرف مركز
المورد للتدريب الإداري – دبي بتقديم خطته السنوية للبرامج التدريبية.

يمكنك الآن
الحصول على الدورات من خلال الولوج على www.almawred.net 



مركز
المورد للتدريب الإداري – دبي

هاتف:
0097142216779

فاكس:
0097142211983

[EMAIL PROTECTED]














Re: PKI [7:74482]

2003-09-11 Thread Thomas N
Thanks Annlee!


annlee  wrote in message
news:[EMAIL PROTECTED]
 This page (mind the wrap)

http://www.ealaddin.com/partners/findpartner2.asp?SolutionCategory=11Partne
rshipCategory=PartnerName=CompanyProduct=PartnerSearch.x=39PartnerSearch
.y=7
 lists a number of PKI Infrastructure partners to an etoken company. It
 might be place to start.

 Annlee

 Thomas N wrote:

  I am not sure if this question is off the topic or not but hopping
people
  can give me some suggestion.  I am working on DMVPN and it seems PKI can
 not
  be missed out of the design for security purpose.  I am wondering what
are
  good PKI vendors out there?  Is there any hardware appliance PKI vendor?
  Thanks!
  **Please support GroupStudy by purchasing from the GroupStudy Store:
  http://shop.groupstudy.com
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75222t=74482
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: How to define right cisco hardware and software (IOS) [7:75223]

2003-09-11 Thread Mark
Dynamic Configuration Tool:
http://www.cisco.com/appcontent/apollo/configureHomeGuest.html

Mark
CCIE RS, Security
Lab Technician
GigaVelocity.com

- Original Message -
From: Hinwoto 
To: 
Sent: Wednesday, September 10, 2003 9:03 PM
Subject: How to define right cisco hardware and software (IOS) [7:75220]


 dear all,

 guys,..
 Could anyone give advise about how to define the right
 - cisco hardware (module, chassis, memory, NPE etc)
 - cisco software (IOS type etc)

 thanks and looking forward to your advise guys.
 hin
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75223t=75223
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Basic IP CEF question (again) [7:75161]

2003-09-11 Thread Curious
Hi Zsombor, what do you mean?? Why the router has the broadcast IP in 
receive mode?
I would like to know more about this ;)



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75224t=75161
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


help [7:75225]

2003-09-11 Thread Paul Borghese
help




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75225t=75225
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


ciscoview-urgent [7:75227]

2003-09-11 Thread milind tare
Dear All,


  In my network MPLS VPN is there and the  cisco
devices having 7513,6509 and GSR. but in topology i am
not getting 6509 which is having OSM-4ge-wan card and
i can't detect the module in topology services. 
i have installed related pathches like CLiparaser,
catios6000, switchaddlets etc...but still getting
problem ? is coming in topology services.

please guide me urgently

Thanks  Regards,
milind

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75227t=75227
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: home lab equipment [7:75115]

2003-09-11 Thread [EMAIL PROTECTED]
I stopped buying long ago except isdn pbx, 

basics on routers at home, 

and started renting a few low budget ATM/VOICE etc. labs online.

Martijn 


-Oorspronkelijk bericht-
Van: Dave Williams [mailto:[EMAIL PROTECTED]
Verzonden: dinsdag 9 september 2003 22:31
Aan: [EMAIL PROTECTED]
Onderwerp: home lab equipment [7:75115]


Group,

 

I'm planning on purchasing my final addition to my RS home lab sometime
this month. I'm having a hard time deciding if I should add another 3550
(I have one already) or if I should pick up a Lightstream 1010 with two
4500s that have an OC3 MM interface. ATM for the 3600s is way too
expensive for me. Any suggestions would be appreciated.

 

(Sorry if this message is a dub) 

 

-dave
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75226t=75115
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Cisc SAFE Exam [7:75200]

2003-09-11 Thread [EMAIL PROTECTED]
Saw some on the group a few weeks ago.

Martijn 

-Oorspronkelijk bericht-
Van: Fred Wittenberg [mailto:[EMAIL PROTECTED]
Verzonden: woensdag 10 september 2003 20:15
Aan: [EMAIL PROTECTED]
Onderwerp: Cisc SAFE Exam [7:75200]


Hello all,

I'm planning on taking the SAFE exam to wrap up my CCSP soon...can anyone
that
has passed/taken this offer what they used as study guides??

TIA,

FW
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75228t=75200
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


New Cisco Catalyst QoS book [7:75229]

2003-09-11 Thread Muhtari Adanan
Hi,

I was wondering whether it's worth reading the new Cisco Catalyst QoS IOS
book whilst revising for the CCIE theory or even perhaps the practical exams.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75229t=75229
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Upgrading ROMMON on 2948G [7:75179]

2003-09-11 Thread [EMAIL PROTECTED]
CCO customer? login

http://ftp.cisco.com/cisco/lan/catalyst/4000/cat4000-releasenote.8-1-2.pdf 


2
Release Notes for Catalyst 4500 Series Software Release 8.x
OL-4502-02
ROMMON Requirements
If the Boot ROM (ROMMON) loaded onto your switch is version 4.5(1) or
earlier, you need to upgrade
the ROMMON to at least version 5.4(1) in order to run software release 8.1
or later.
Upgrading the ROMMON
Follow these guidelines to upgrade the ROMMON on your switch:
3
Release Notes for Catalyst 4500 Series Software Release 8.x
OL-4502-02
System Requirements
Caution To avoid actions that might make your system unbootable, read this
entire section before starting the
upgrade.
You can do this procedure entirely over a Telnet connection, but if
something fails, you will need to have
access to the console serial port. If done improperly, the system can become
unbootable. You will then
have to return it to Cisco for repair.
This section describes an upgrade to ROMMON version 6.4(1). The same
procedure applies to other
ROMMON versions, but you will have to substitute appropriate version numbers
in the upgrade image
names.
Step 1 Download the promupgrade program from Cisco.com and place it on a
TFTP server in a directory that
is accessible from the switch to be upgraded.
The promupgrade programs are available at the same location on Cisco.com
where you download
Catalyst 4500 series system images.
To upgrade to ROMMON version 6.1(4), download the
cat4000-promupgrade.6-1-4.bin file.
Step 2 In privileged mode on your switch, use the show version command to
verify the ROMMON version
loaded on the switch.
The ROMMON version number is listed as the System Bootstrap Version. For
example, in the following
output, the system is running ROMMON version 6.1(2):
Console (enable) show version
WS-C4003 Software, Version NmpSW:5.5(8)
Copyright (c) 1995-2001 by Cisco Systems, Inc.
NMP S/W compiled on May 24 2001, 21:12:09
GSP S/W compiled on May 24 2001, 18:39:50
System Bootstrap Version:6.1(2)
Hardware Version:1.0 Model:WS-C4003 Serial #:x
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: BGP Table and SNMP [7:75016]

2003-09-11 Thread [EMAIL PROTECTED]
Did you read trough the 

http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1829/products_feat
ure_guide09186a0080087c60.html
12.0
BGP Received Routes MIB

http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1839/products_feat
ure_guide09186a0080110bbc.html
12.2T
BGP 4 MIB Support for per-Peer Received Routes

Martijn

-Oorspronkelijk bericht-
Van: Alejandro Acosta [mailto:[EMAIL PROTECTED]
Verzonden: dinsdag 9 september 2003 3:50
Aan: [EMAIL PROTECTED]
Onderwerp: BGP Table and SNMP [7:75016]


Hi all,
  I wonder if any of you have succesfully retrieved the BGP table from a
Cisco router using SNMP?. I read a lot of documents and tried a lot of
MIBs/OID without any success. I used the MIB navigation tool at the Cisco
TAC but I did not find something really useful. I only could read the
peerings, uptime of the BGP session and few more thing. By the moment I
think it should be done using snmpwalk, am I right?
  FYI, I do have the full routing table in one of my routers (IOS 12.2.6)

Any help will be appreciated.

Thank

Alejandro Acosta
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75232t=75016
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: route add [7:75024]

2003-09-11 Thread [EMAIL PROTECTED]
Easy did a zillion times for the sysadmins.

IE settings hack. trough a .reg file in the login script. (per user or group
dep on your directory/kix) 

so do NOT use proxy for this and this anbd this webserver

Martijn 


-Oorspronkelijk bericht-
Van: Steiven Poh [mailto:[EMAIL PROTECTED]
Verzonden: dinsdag 9 september 2003 6:52
Aan: [EMAIL PROTECTED]
Onderwerp: route add [7:75024]


Dear All,

I have a very stupit quesrtion here. How am i by pass the proxy and route
direct to the router. Pls comment !!

Below is my diagram.

169.168.4.2/16 (my pc) - router (192.168.161.254/16)--Leased
Line 64k--router (192.167.161.254/16)Proxy
(192.167.3.34/16)---Internet router (192.167.3.35/16)


My pc route print :

Active Routes:

  Network Address Netmask  Gateway AddressInterface  Metric
  0.0.0.00.0.0.0  192.167.161.254  192.168.4.2
  1
  0.0.0.00.0.0.0  192.168.161.254  192.168.4.2
  1
  127.0.0.0  255.0.0.0127.0.0.1127.0.0.1  
1
  192.168.0.0  255.255.0.0  192.168.4.2  192.168.4.2  
1
  192.168.4.2  255.255.255.255127.0.0.1127.0.0.1  
1
  192.168.255.255   255.255.255.255  192.168.4.2  192.168.4.2 
 1
  224.0.0.0  224.0.0.0  192.168.4.2  192.168.4.2  
1
  255.255.255.255   255.255.255.255  192.168.4.2  0.0.0.0 
 1



This e-mail has been sent via JARING webmail at http://www.jaring.my
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75234t=75024
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: router CPU utilization on access lists? [7:75002]

2003-09-11 Thread [EMAIL PROTECTED]
So maybe permit and route to null0 in some cases? Then no unreachables are
generated because there is a route?

Martijn 


-Oorspronkelijk bericht-
Van: Marty Adkins [mailto:[EMAIL PROTECTED]
Verzonden: dinsdag 9 september 2003 20:29
Aan: [EMAIL PROTECTED]
Onderwerp: Re: router CPU utilization on access lists? [7:75002]


Priscilla Oppenheimer wrote:

 Yes, that's true indeed that access lists don't cause process switching
 anymore, so wouldn't show up in IP Input.
 
Two exceptions that I failed to mention are logging and the side effect
of a deny.  By default, a deny causes the generation of an ICMP admin.
prohibited unreachable sent to the source of the blcoked packet.  Since
packets cannot be created in interrupt mode, process context is required.
But these are rate limited to two/second by default as self protection.
Plus normal traffic shouldn't result in very many denies.  But you can
inhibit this entirely by configuring no ip unreachables on an interface.

If the matching ACE has the log keyword, then process context is required
to create the log message and perform normal logging.  This too is
rate-limited.

 Thanks for everyone's advice. It sounds like Marty has the right approach.
 Although access lists aren't process switched, they are generally fast
 switched unless the router supports some other feature (like silicon
 switching) or some fancy configuration like CEF or NetFlow?
 
 So, the thing to look for is a high utilization caused by interrupts (the
 number after the slash).
 
 I can't safely turn them off and test, so I think I will try to simulate
the
 network and traffic in a lab to test my theory that they are an issue.
 
 It's a 2621 router with lots of entries in the access lists that are
 applied. I think it's time to offload a lot of the policy represented by
the
 lists to a PIX firewall.
 
You can tune the lists by letting it run for a while and then noting the
match counts (show access-list).  Within each grouping of permit entries,
you
can reorder the statements to reduce the number of entries that must be
compared to reach a match.

If the ACL processing is as efficient as possible but is really impacting
CPU
utilization, then you could enable the turbo ACL feature (access-list
compiled).
Unfortunately, that's still only available on higher-end platforms, from
3700s
on up.

 Here's a good URL on troubleshooting high CPU util, by the way:
 
 http://www.cisco.com/warp/public/63/highcpu.html
 
 Thanks
 
 Priscilla
 
- Marty
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75233t=75002
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Difference between Cisco VPN and PIX Firewall [7:75235]

2003-09-11 Thread Mr piyush shah
Hello all
Can I know what is the Cisco PIX and that of a Cisco
VPN 3000 in terms of performance?
As I am planning to implement VPN with either VPN
Concentrator or PIX,however I was told that if you
implement only VPN Concentrator instead of PIX ,then
you may get VPN connectivity but you will not be able
to implement the filtering functionalities which are
required .In case of PIX I may get both VPN as well as
as filtering of unwanted traffic thereby changes of
hacking sessions are less.
Is this true.
I am confised .Kindly help me.
Also which one should consider to be the best scenario
for implementation ?
I am giving the 3 scenario below.If there is any
scenario better than this pls get me know ewith the
pros and cons of that one.Also equest you to know me
the pros and cons of this scenarios also.
aThnaks in advance.

Scenario I Scenario II   Scenario

  
 InternetInternet Internet
   |||
  
  
  
  VPN Concentrator Firewall Firewall--VPN 
   ||  |  Concntrtr   
   ||  |   |  
 LAN   VPNLAN _|
   Concentrator





Yahoo! India Matrimony: Find your partner online.
Go to http://yahoo.shaadi.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75235t=75235
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


question? [7:75237]

2003-09-11 Thread Accsystest
got your email address from the web: do you answer cisco related questions
by any chance: know any one who is willing to?
 



-
Yahoo! Search
- Looking for more? Try the new Yahoo! Search




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75237t=75237
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Ethernet bogs down help has anyone seen this problem [7:75238]

2003-09-11 Thread [EMAIL PROTECTED]
I have a customer that has a small office with a Cisco 56K Frame router.
They
are running Nat. Now when I plug in the frame side the ethernet side gets 
constant request for translation then it gets to the point where you can no 
longer even ping the ethernet side. If I remove the RG45 cable from the
frame side.
No problem the request stop and I can ping my ethernet side of the router 
fine with 10ml sec responses all day. The users office is down because he
can not
get out to the web. I've checked for viruses and everything seems fine. Does 
anyone have any ideas? This one is driving me crazy. The ISP says that my 
router is bad, but I doubt it. It started all of a sudden after working fine
for 2
years.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75238t=75238
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: help [7:75225]

2003-09-11 Thread annlee
problem?

Paul Borghese wrote:
 help
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75240t=75225
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Solutions for the Solie Labs - ?? [7:75239]

2003-09-11 Thread Cisco Nuts
Hello,Does any one if there is a way to get the solutions for the Solie
Labs from CCIE PS Vol. I?Thank you.



Use custom emotions -- try MSN Messenger 6.0!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75239t=75239
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Difference between Cisco VPN and PIX Firewall [7:75235]

2003-09-11 Thread annlee
Stnadard answer: it depends.

Followed immediately by the standard question: what problem are you 
trying to solve?

The VPN Concentrator does not firewall or filter; it is a specialized 
tunnel termination device. You may (emphasis on may) need to use it 
when you are terminating more than about 20 tunnels. That depends on 
how active the tunnels are and what else your firewall is doing -- how 
much other work must it do filtering how much other traffic?

The Concentrator does offer AES and DH Group 7 (the latter is useful 
if the other end of the tunnel is a client which can support ECC, but 
not many can).

You need a firewall between you and the Internet. Have a look at the 
SMR SAFE Blueprint, here:
http://www.cisco.com/en/US/netsol/ns110/ns170/ns171/ns128/networking_solutions_white_paper09186a008009c8a0.shtml
 


If you do decide to use a Concentrator, people may differ, but I 
recommend terminating your tunnels outside the firewall. If you don't, 
the firewall must either work at the traffic to inspect it properly 
(which in fact makes it work even harder tore-encrypt, etc. to send it 
to the Concentrator) or you poke a big hole in the firewall by 
accepting traffic that looks like it ought to be a part of the 
tunnel.  If your LAN receives public traffic (is there a public-facing 
server, any kind of mini-DMZ?), then you will want a switch to send 
tunnel traffic tothe Concentrator and all other traffic to the 
firewall. Looks sort of like this:

Concentrator
  / \
Internet---switch/\firewall---LAN

HTH

Annlee

Mr piyush shah wrote:
 Hello all
 Can I know what is the Cisco PIX and that of a Cisco
 VPN 3000 in terms of performance?
 As I am planning to implement VPN with either VPN
 Concentrator or PIX,however I was told that if you
 implement only VPN Concentrator instead of PIX ,then
 you may get VPN connectivity but you will not be able
 to implement the filtering functionalities which are
 required .In case of PIX I may get both VPN as well as
 as filtering of unwanted traffic thereby changes of
 hacking sessions are less.
 Is this true.
 I am confised .Kindly help me.
 Also which one should consider to be the best scenario
 for implementation ?
 I am giving the 3 scenario below.If there is any
 scenario better than this pls get me know ewith the
 pros and cons of that one.Also equest you to know me
 the pros and cons of this scenarios also.
 aThnaks in advance.
 
 Scenario I Scenario II   Scenario
 
   
  InternetInternet Internet
|||
   
   
   
   VPN Concentrator Firewall Firewall--VPN 
||  |  Concntrtr   
||  |   |  
  LAN   VPNLAN _|
Concentrator
 
 
 
 
 
 Yahoo! India Matrimony: Find your partner online.
 Go to http://yahoo.shaadi.com
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75241t=75235
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Solutions for the Solie Labs - ?? [7:75239]

2003-09-11 Thread Biff Terrific
If you mean the labs in the back of the book, you can download the solutions
at www.ciscopress.com. Look up the book then under More Information, click
on downloads.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75242t=75239
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Difference between Cisco VPN and PIX Firewall [7:75235]

2003-09-11 Thread Reimer, Fred
Scenario III is probably the most recommended.  It is incorrect to say that
the VPN Concentrator does not have filtering capabilities.  It generally
only allows traffic in its public interface necessary for VPN connections,
so it is not any more inherently insecure as a PIX.  It does not have all of
the capabilities of the PIX however, so if you need a true firewall I'd go
with a firewall (not necessarily a PIX, I personally think they suck, go
with a Check Point).

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Mr piyush shah [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 7:08 AM
To: [EMAIL PROTECTED]
Subject: Re: Difference between Cisco VPN and PIX Firewall [7:75235]

Hello all
Can I know what is the Cisco PIX and that of a Cisco
VPN 3000 in terms of performance?
As I am planning to implement VPN with either VPN
Concentrator or PIX,however I was told that if you
implement only VPN Concentrator instead of PIX ,then
you may get VPN connectivity but you will not be able
to implement the filtering functionalities which are
required .In case of PIX I may get both VPN as well as
as filtering of unwanted traffic thereby changes of
hacking sessions are less.
Is this true.
I am confised .Kindly help me.
Also which one should consider to be the best scenario
for implementation ?
I am giving the 3 scenario below.If there is any
scenario better than this pls get me know ewith the
pros and cons of that one.Also equest you to know me
the pros and cons of this scenarios also.
aThnaks in advance.

Scenario I Scenario II   Scenario

  
 InternetInternet Internet
   |||
  
  
  
  VPN Concentrator Firewall Firewall--VPN 
   ||  |  Concntrtr   
   ||  |   |  
 LAN   VPNLAN _|
   Concentrator





Yahoo! India Matrimony: Find your partner online.
Go to http://yahoo.shaadi.com
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75244t=75235
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: ciscoview-urgent [7:75227]

2003-09-11 Thread Reimer, Fred
If you happen to be running PIM Sparse-Dense mode with auto-RP and
duplicate loopback IP addresses then you need a special patch for
CiscoWorks in order for it to properly discover the 6509's...  This probably
effects anything that has duplicate loopback IP addresses.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: milind tare [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 4:54 AM
To: [EMAIL PROTECTED]
Subject: ciscoview-urgent [7:75227]

Dear All,


  In my network MPLS VPN is there and the  cisco
devices having 7513,6509 and GSR. but in topology i am
not getting 6509 which is having OSM-4ge-wan card and
i can't detect the module in topology services. 
i have installed related pathches like CLiparaser,
catios6000, switchaddlets etc...but still getting
problem ? is coming in topology services.

please guide me urgently

Thanks  Regards,
milind

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75243t=75227
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: DLSW+ filter [7:75192]

2003-09-11 Thread alaerte Vidali
This is from Solie's book:

The name in Netbios lists is compared with the source name field for Netbios
commands 00 and 01 an is comparted with the destination name field for
Netbios commands 08, 0A and 0E (datagram, name-query, name recognized).


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75245t=75192
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: question? [7:75237]

2003-09-11 Thread Chibwe, Oliver J, NEO
Yes I do and how can I contribute to your good cause?:)

Thank you

Ollie
ATT Common Backbone
866-397-7309 Opt 1


-Original Message-
From: Accsystest [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 11, 2003 6:33 AM
To: [EMAIL PROTECTED]
Subject: question? [7:75237]


got your email address from the web: do you answer cisco related questions
by any chance: know any one who is willing to?
 



-
Yahoo! Search
- Looking for more? Try the new Yahoo! Search
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75246t=75237
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Network Benchmarking/Performance Analysis [7:74808]

2003-09-11 Thread [EMAIL PROTECTED]
Maybe also sniffer (distributed), nice reports, ready for excel or the
beamer (CEO-ready.. ;-))

Martijn 


-Oorspronkelijk bericht-
Van: Lupi, Guy [mailto:[EMAIL PROTECTED]
Verzonden: donderdag 4 september 2003 19:17
Aan: [EMAIL PROTECTED]
Onderwerp: Network Benchmarking/Performance Analysis [7:74808]


I would like recommendations on distributed network benchmarking and
performance analysis systems.  I would like to place sensors/collectors at
various points on the network to collect data on and give detailed reports
on items like, but not limited to:

Packet loss
Latency
Jitter
Throughput

If someone could recommend some companies I would appreciate it.

Guy H. Lupi
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75248t=74808
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: help [7:75225]

2003-09-11 Thread Paul Borghese
Oops!  I am moving the mailing list users to a new server and was testing
the new server.  I inadvertently sent one of the test messages to the active
list.  At 3:00 AM when stuff is not working, yelling help does not seem
like a bad idea :-).

By the way, the move should be done by this afternoon.  Unless I get tied up
with something else, you will receive a welcome message (those that read via
e-mail) describing the new server.

Take care,

Paul 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
annlee
Sent: Thursday, September 11, 2003 8:07 AM
To: [EMAIL PROTECTED]
Subject: Re: help [7:75225]

problem?

Paul Borghese wrote:
 help
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75249t=75225
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: NAT and SAP [7:74982]

2003-09-11 Thread [EMAIL PROTECTED]
Different approach:
Howmany clients? Static Nat on the router the other way around?

Give the server a route pointer to the nat router for the client. 

You even can choose to give the client a global ip to connect to the server
with, like a mail server for example.

Martijn 


-Oorspronkelijk bericht-
Van: alaerte Vidali [mailto:[EMAIL PROTECTED]
Verzonden: maandag 8 september 2003 18:50
Aan: [EMAIL PROTECTED]
Onderwerp: NAT and SAP [7:74982]


When a SAP client tries to connect to a SAP server through a router with NAT
enabled there is a problem: the SAP server sends an IP embedded on the
payload of the packet, and the NAT router do not translate it.

Any suggestion?
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75247t=74982
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


642-811 [7:75252]

2003-09-11 Thread Cappuccio Victor
Hello people..

I have at home Cisco Press Certification Library for 640-50* Exams. I did
not present the Exam on the dates because political problems in my country.
Now Cisco has change the exam content and this book in my opinion seems not
to fit very well.

I am willing to change all this PDF with the 642-811 PDF.

If you like the idea write me a [EMAIL PROTECTED]

Regards
Victor.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75252t=75252
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: OSPF demand-circuit does not work [7:74954]

2003-09-11 Thread [EMAIL PROTECTED]
It will say multicast.

Martijn 

-Oorspronkelijk bericht-
Van: Devrim Yener KUCUK [mailto:[EMAIL PROTECTED]
Verzonden: maandag 8 september 2003 16:38
Aan: [EMAIL PROTECTED]
Onderwerp: Re: OSPF demand-circuit does not work [7:74954]


what do you see when you do sh dialer on the calling router, as a dial
reason?
or debug dialer, debug isdn q931 will be telling you

regards

De
- Original Message -
From: Lesly Verdier 
To: 
Sent: Monday, September 08, 2003 2:25 PM
Subject: OSPF demand-circuit does not work [7:74954]


 Hello All,

 I've configured ip ospf demand-circuit on an ISDN connection and this
 statement is supposed to supress the calls initiated by the Hello Packets.
 Still my router keeps on dialing.

 Does anybody know what the reason might be?

 Thanks,

 Lesly Verdier
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75250t=74954
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: ISDN Switch - Teleos [7:39556]

2003-09-11 Thread Mark Onans
Does anybody have a link to the NMC software that i have heard mentioned or
have it available thru ftp ??

Cheers Mark


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75251t=39556
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Basic IP CEF question (again) [7:75161]

2003-09-11 Thread Zsombor Papp
Broadcast means everybody receives it.

 Curious wrote:
 
 Hi Zsombor, what do you mean?? Why the router has the broadcast
 IP in
 receive mode?
 I would like to know more about this ;)
 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75253t=75161
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Ethernet bogs down help has anyone seen this probl [7:75238]

2003-09-11 Thread Priscilla Oppenheimer
[EMAIL PROTECTED] wrote:
 
 I have a customer that has a small office with a Cisco 56K
 Frame router. They
 are running Nat. Now when I plug in the frame side the ethernet
 side gets
 constant request for translation then it gets to the point
 where you can no
 longer even ping the ethernet side. If I remove the RG45 cable
 from the frame side.
 No problem the request stop and I can ping my ethernet side of
 the router
 fine with 10ml sec responses all day. The users office is down
 because he can not
 get out to the web. I've checked for viruses and everything
 seems fine. Does
 anyone have any ideas? This one is driving me crazy. The ISP
 says that my
 router is bad, but I doubt it. It started all of a sudden after
 working fine for 2
 years.

Please send us your config and the output of various show commands like show
interface, show processes cpu, etc. The show tech-support command displays
the results of many commands so is probably the best one to use. If you
think it's a NAT problem, some show commands for NAT include:

show ip nat statistics
show ip nat translations

You say the problem just started all of a sudden? The Internet has been
pretty shaky lately. You may be getting pinged constantly, for example. Are
you stopping those before you translate them? Do you have a firewall? Is the
router acting as a firewall? How is it configured? Please send us more data
to help you. Thanks.

Priscilla


 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75256t=75238
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


L2TP v3 Question [7:75255]

2003-09-11 Thread Hayes, Christopher
Trying to do a lab that connects two ethernet lans together via L2TP v3.

Cisco has diddly for config examples. Does anyone have any that work?

Here is what I have so far. (shown below)

Topology:

pc1--lan1---fa0/0-router1-fa5/0--tunnel-fa5/0-router2-fa0/0---lan2--
pc2

Configs:

*
router1
*
ip cef

int lo0
 ip addr 192.168.254.2 255.255.255.0

l2tp-class l2tp-defaults
 retransmit initial retries 30
 cookie size 8

pseudowire-class ether-pw
 encapsulation l2tpv3
 protocol none
 ip local interface Loopback0

interface FastEthernet 0/0
 xconnect 192.168.1.2 123 encapsulation l2tpv3 manual pw-class ether-pw
l2tp id 222 111  l2tp cookie local 4 54321  l2tp cookie remote 4 12345  l2tp
hello l2tp-defaults

*
router2
*
ip cef

int lo0
 ip addr 192.168.254.3 255.255.255.0

l2tp-class l2tp-defaults
 retransmit initial retries 30
 cookie size 8

pseudowire-class ether-pw
 encapsulation l2tpv3
 protocol none
 ip local interface Loopback0

interface Ethernet 2/0
 xconnect 192.168.1.1 123 encapsulation l2tpv3 manual pw-class ether-pw
l2tp id 111 222  l2tp cookie local 4 12345  l2tp cookie remote 4 54321  l2tp
hello l2tp-defaults


Thanks,

Chris




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75255t=75255
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Network Benchmarking/Performance Analysis [7:74808]

2003-09-11 Thread Reimer, Fred
VitalNet from Lucent Technologies can use Cisco SAA, so in a way it's
distributed polling.  Any (recent) IOS device would become a
sensor/collector.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 9:52 AM
To: [EMAIL PROTECTED]
Subject: RE: Network Benchmarking/Performance Analysis [7:74808]

Maybe also sniffer (distributed), nice reports, ready for excel or the
beamer (CEO-ready.. ;-))

Martijn 


-Oorspronkelijk bericht-
Van: Lupi, Guy [mailto:[EMAIL PROTECTED]
Verzonden: donderdag 4 september 2003 19:17
Aan: [EMAIL PROTECTED]
Onderwerp: Network Benchmarking/Performance Analysis [7:74808]


I would like recommendations on distributed network benchmarking and
performance analysis systems.  I would like to place sensors/collectors at
various points on the network to collect data on and give detailed reports
on items like, but not limited to:

Packet loss
Latency
Jitter
Throughput

If someone could recommend some companies I would appreciate it.

Guy H. Lupi
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75254t=74808
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


question on acl [7:75258]

2003-09-11 Thread Yong Wee
Hi,
   How do you write an ext acl to block telnet access from even addresses in
subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server 192.168.1.254?

thks,
yongwee




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75258t=75258
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


question on acl [7:75257]

2003-09-11 Thread Yong Wee
Hi,
   How do you write an ext acl to block telnet access from even addresses in
subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server 192.168.1.254?

rgds,
yongwee




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75257t=75257
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


BSCI 640-901 [7:75259]

2003-09-11 Thread Kenan Ahmed Siddiqi
Hello people,
I am sitting the exam on next Monday (22nd September). Has anyone taken the
exam recently? I just want to know what the passing score is. Thank you.

Cheers,

Kenan


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75259t=75259
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: question on acl [7:75258]

2003-09-11 Thread Salvatore De Luca
Here is an example of a named ACL to Block Specific even HOST sources to
destination port 23 to the address you specified. You can use:

  ip access-list extended BLOCK_TELNET_EVEN 
deny tcp 192.168.2.0 0.0.0.254 host 192.168.1.254 eq telnet
permit ip any any 

  
 Just practice and play with the BITS in the MASK.. You can achieve this
type of scenario in 1 statment..

-Sal

Yong Wee wrote:
 
 Hi,
How do you write an ext acl to block telnet access from even
 addresses in
 subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server
 192.168.1.254?
 
 thks,
 yongwee
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75260t=75258
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


What am I missing? HELP [7:75265]

2003-09-11 Thread Hyman, Craig
All-

I have a CBOS IOS on a CISCO Router ( 600 series).  I am trying to make this
router a filter router. When I implement the rules below, nothing comes
across. I have checked the documentation, but still can't find the solution.
Does anybody have any ideas?

Your help is well appreciated..




set filter 0 on allow incoming eth0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol tcp

set filter 1 on allow incoming eth0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol udp

set filter 2 on allow incoming eth0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol
icmp

set filter 3 on allow outgoing all 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol tcp

set filter 4 on allow outgoing all 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol icmp

set filter 5 on allow outgoing all 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol udp

set filter 6 on allow incoming wan0-0 192.18.42.16 255.255.255.0 0.0.0.0 
0.0.0.0
protocol tcp srcport 1024-65535 destport 23

set filter 7 on allow incoming wan0-0 192.18.42.16 255.255.255.0 0.0.0.0
0.0.0.0 protocol tcp srcport 1024-65535 destport 20

set filter 8 on allow incoming wan0-0 192.18.42.16 255.255.255.0 0.0.0.0
0.0.0.0 protocol icmp

set filter 9 on allow incoming wan0-0 192.18.42.17 255.255.255.0 0.0.0.0
0.0.0.0 protocol tcp srcport 1024-65535 destport 23

set filter 10 on allow incoming wan0-0 192.18.42.17 255.255.255.0 0.0.0.0
0.0.0.0 protocol tcp srcport 1024-65535 destport 20

set filter 11 on allow incoming wan0-0 192.18.42.17 255.255.255.0 0.0.0.0
0.0.0.0 protocol icmp




SRS Level 2
SRS Implementation Team 
Cell phone# 720-840-4887
SUN PH# 303-272-2661
Virtual Office# 303-604-0037
[EMAIL PROTECTED]
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75265t=75265
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Ethernet bogs down help has anyone seen this problem [7:75263]

2003-09-11 Thread Daniel Cotts
I'll bet the trouble started when the Nachi worm started spreading. It uses
pings to find hosts to infect. See the following to see what happens to NAT
when pinged from the outside.
http://www.cisco.com/warp/public/556/4.html

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 Sent: Thursday, September 11, 2003 7:01 AM
 To: [EMAIL PROTECTED]
 Subject: Ethernet bogs down help has anyone seen this problem 
 [7:75238]
 
 
 I have a customer that has a small office with a Cisco 56K 
 Frame router.
 They
 are running Nat. Now when I plug in the frame side the 
 ethernet side gets 
 constant request for translation then it gets to the point 
 where you can no 
 longer even ping the ethernet side. If I remove the RG45 
 cable from the
 frame side.
 No problem the request stop and I can ping my ethernet side 
 of the router 
 fine with 10ml sec responses all day. The users office is 
 down because he
 can not
 get out to the web. I've checked for viruses and everything 
 seems fine. Does 
 anyone have any ideas? This one is driving me crazy. The ISP 
 says that my 
 router is bad, but I doubt it. It started all of a sudden 
 after working fine
 for 2
 years.
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info: 
 http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75263t=75263
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: question on acl [7:75257]

2003-09-11 Thread Bob by The Bay
Yongwee,
!
!  Deny even numbers but permit everything else
!
access-list 101 deny tcp 192.168.2.0 0.0.0.254 host 192.168.1.254 eq telnet
access-list 101 permit any any
! implicit deny all here
!
!
or perhaps more efficiently
!
!
!  Permit odd numbers only
!
access-list 101 permit tcp 192.168.2.1 0.0.0.254 host 192.168.1.254 eq
telnet
! implicit deny all here
!
These answers are based on the fact that an even number in binary will have
a least significant digit of 0 in the octet while an odd number will have a
1.  Thus the 0.0.0.254 mask isolates the least significant digit for a match
against either a 1 or a zero.

FWIW,
Bob

Yong Wee  wrote in message
news:[EMAIL PROTECTED]
 Hi,
How do you write an ext acl to block telnet access from even addresses
in
 subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server 192.168.1.254?

 rgds,
 yongwee
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75262t=75257
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: ciscoview-urgent [7:75227]

2003-09-11 Thread Reimer, Fred
Communications problem.  I don't understand what you are asking.  Try using
more words.  Be verbose.  I may be able to understand then...

As far as I can tell:
You are not having any problems discovering the 6509.  It is in the
topology.  In your original messages, you said you were NOT getting the 6509
in the topology.  See my confusion?

Beyond that, I don't know what your problem is, so I can't suggest a
solution.

Just an off-the-wall guess, you probably need to load up the latest device
information file (Incremental Device thingy) in CiscoWorks to recognize a
particular module that may have been released recently...

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: milind tare [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 12:45 PM
To: Reimer, Fred
Cc: [EMAIL PROTECTED]
Subject: RE: ciscoview-urgent [7:75227]


hi reimer,


   Thanks for ur reply but not getting wht u want to
say. coz i told u i install , CATIOS6000 , Entity ,
Switchaddlet, CLIparser still i can't see i mean it is
coming intopology but with ? . so pls suggest me 

Thanks  Regards,
Milind Tare

--- Reimer, Fred  wrote:
 If you happen to be running PIM Sparse-Dense mode
 with auto-RP and
 duplicate loopback IP addresses then you need a
 special patch for
 CiscoWorks in order for it to properly discover the
 6509's...  This probably
 effects anything that has duplicate loopback IP
 addresses.
 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North,
 Atlanta, GA 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager:
 888-260-2050
 
 
 NOTICE; This email contains confidential or
 proprietary information which
 may be legally privileged. It is intended only for
 the named recipient(s).
 If an addressing or transmission error has
 misdirected the email, please
 notify the author by replying to this message. If
 you are not the named
 recipient, you are not authorized to use, disclose,
 distribute, copy, print
 or rely on this email, and should immediately delete
 it from your computer.
 
 
 -Original Message-
 From: milind tare [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, September 11, 2003 4:54 AM
 To: [EMAIL PROTECTED]
 Subject: ciscoview-urgent [7:75227]
 
 Dear All,
 
 
   In my network MPLS VPN is there and the  cisco
 devices having 7513,6509 and GSR. but in topology i
 am
 not getting 6509 which is having OSM-4ge-wan card
 and
 i can't detect the module in topology services. 
 i have installed related pathches like CLiparaser,
 catios6000, switchaddlets etc...but still getting
 problem ? is coming in topology services.
 
 please guide me urgently
 
 Thanks  Regards,
 milind
 
 __
 Do you Yahoo!?
 Yahoo! SiteBuilder - Free, easy-to-use web site
 design software
 http://sitebuilder.yahoo.com
 **Please support GroupStudy by purchasing from the
 GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75269t=75227
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: L2TP v3 Question [7:75255]

2003-09-11 Thread Doan Nguyen
I just had mine working.

Cola#show run
Building configuration...

Current configuration : 2615 bytes
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
no service single-slot-reload-enable
!
hostname Cola
!
redundancy
 no keepalive-enable
 mode hsa
enable secret 5 $1$4gPI$wcQKNzXJpTT3ibtsj.nLY0
!
ip subnet-zero
ip cef distributed
ip host jazz 192.168.100.53
mpls ldp logging neighbor-changes
no mpls traffic-eng auto-bw timers frequency 0
l2tp-class mc_l2tp_contr
 hello 30
 password 0 secret
 cookie size 8
!
pseudowire-class mc_l2tp_path
 encapsulation l2tpv3
 protocol l2tpv3 mc_l2tp_contr
 ip local interface Loopback3
 ip pmtu
 ip dfbit set
 ip tos reflect
!
!
!
!
interface Loopback0
 ip address 30.30.30.1 255.255.255.255
 no ip directed-broadcast
!
interface Loopback3
 ip address 192.168.100.43 255.255.255.255
 no ip directed-broadcast
!
interface Loopback4
 ip address 50.0.0.1 255.255.255.255
 no ip directed-broadcast
!
interface FastEthernet3/0/0
 no ip address
 no ip directed-broadcast
 shutdown
!
interface Ethernet3/1/0
 ip address 200.100.100.1 255.255.255.0
 no ip directed-broadcast
!
interface Ethernet3/1/1
 no ip address
 no ip directed-broadcast
 shutdown
!
interface Ethernet3/1/2
 no ip address
 no ip directed-broadcast
 shutdown
!
interface Ethernet3/1/3
 no ip address
 no ip directed-broadcast
 shutdown
!
interface Ethernet3/1/4
 no ip address
 no ip directed-broadcast
 shutdown
!
interface Ethernet3/1/5
 no ip address
 no ip directed-broadcast
 shutdown
!
interface Ethernet3/1/6
 no ip address
 no ip directed-broadcast
 shutdown
!
interface Ethernet3/1/7
 no ip address
 no ip directed-broadcast
 shutdown
!
interface FastEthernet9/0/0
 no ip address
 no ip directed-broadcast
 full-duplex
!
interface FastEthernet9/0/0.1
 encapsulation dot1Q 101
 ip address 13.0.1.1 255.255.255.252
 no ip directed-broadcast
!
interface FastEthernet9/0/1
 no ip address
 no ip directed-broadcast
 full-duplex
!
interface FastEthernet9/0/1.1
 encapsulation dot1Q 101
 no ip directed-broadcast
 no cdp enable
 xconnect 192.168.100.53 101 pw-class mc_l2tp_path
!
interface FastEthernet9/1/0
 ip address 10.1.1.1 255.255.255.0
 no ip directed-broadcast
 media-type MII
 full-duplex
!
router bgp 10
 no synchronization
 bgp log-neighbor-changes
 network 50.0.0.0
 redistribute connected
 neighbor 20.20.20.1 remote-as 10
 neighbor 20.20.20.1 update-source Loopback0
 no auto-summary
!
ip classless
ip route 10.2.2.0 255.255.255.0 10.1.1.2
ip route 20.20.20.1 255.255.255.255 13.0.1.2
ip route 192.168.100.53 255.255.255.255 10.1.1.2
!
!
!
!
alias exec ff show ip int brief
!
line con 0
line aux 0
line vty 0 4
 password cisco
 login
!
end

router2#

Building configuration...

Current configuration : 3888 bytes
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
no service single-slot-reload-enable
!
hostname blabla2
!
redundancy
 no keepalive-enable
 mode hsa
enable secret 5 $1$j7en$FoJXnn8QFW18jod4ncYzi.
!
ip subnet-zero
ip cef distributed
ip host cola 192.168.100.43
no mpls ldp logging neighbor-changes
no mpls traffic-eng auto-bw timers frequency 0
l2tp-class mc_l2tp_contr
 hello 30
 password 0 secret
 cookie size 8
!
pseudowire-class mc_l2tp_path
 encapsulation l2tpv3
 protocol l2tpv3 mc_l2tp_contr
 ip local interface Loopback3
 ip pmtu
 ip dfbit set
 ip tos reflect
!
!
!
!
interface Loopback0
 ip address 20.20.20.1 255.255.255.255
 no ip directed-broadcast
!
interface Loopback3
 ip address 192.168.100.53 255.255.255.255
 no ip directed-broadcast
!
!
interface FastEthernet5/1/0
 ip address 10.2.2.2 255.255.255.0
 no ip directed-broadcast
 no ip route-cache distributed
 full-duplex
!
interface FastEthernet8/1/0
 no ip address
 no ip directed-broadcast
 no ip route-cache
 no ip mroute-cache
 full-duplex
!
interface FastEthernet8/1/0.1
 encapsulation dot1Q 101
 ip address 13.0.1.2 255.255.255.252
 no ip directed-broadcast
 no ip route-cache
 no ip mroute-cache
!
interface FastEthernet8/1/1
 no ip address
 no ip directed-broadcast
 no ip route-cache
 no ip mroute-cache
 full-duplex
!
interface FastEthernet8/1/1.1
 encapsulation dot1Q 101
 no ip directed-broadcast
 no ip route-cache
 no ip mroute-cache
 no cdp enable
 xconnect 192.168.100.43 101 pw-class mc_l2tp_path
!

!
ip classless
ip route 10.1.1.0 255.255.255.0 10.2.2.1
ip route 192.168.100.43 255.255.255.255 10.2.2.1
!
line con 0
line aux 0
line vty 0 4
 password cisco
 login
!
end

Cisco has a messed up way of implementing the L2TPv3 tunnels like this. 
Basically you looped two FE ports together.  Pick 1 port for your layer 3
routing and the other port to cross connect your layer two tunnels.  The
vlan ID for the two FE ports must match.  The tunnels reference the loopback
of the endpoint router.  Hope this helps.

-Doan







Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75266t=75255

RE: Network Benchmarking/Performance Analysis [7:74808]

2003-09-11 Thread Loechel, Michelle
For the SAAgents embedded in the IOS, use the IPM (Internetwork Performance
Monitor) software.  It comes as part of the CiscoWorks package.  I don't
know if you can buy it as a standalone package.  It includes a plug-in to
CiscoWorks and a client to install on the pc.  It's much easier to configure
and view statistics through the GUI.

Michelle Loechel

-Original Message-
From: Reimer, Fred [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 9:11 AM
To: [EMAIL PROTECTED]
Subject: RE: Network Benchmarking/Performance Analysis [7:74808]


VitalNet from Lucent Technologies can use Cisco SAA, so in a way it's
distributed polling.  Any (recent) IOS device would become a sensor/collector.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 9:52 AM
To: [EMAIL PROTECTED]
Subject: RE: Network Benchmarking/Performance Analysis [7:74808]

Maybe also sniffer (distributed), nice reports, ready for excel or the
beamer (CEO-ready.. ;-))

Martijn 


-Oorspronkelijk bericht-
Van: Lupi, Guy [mailto:[EMAIL PROTECTED]
Verzonden: donderdag 4 september 2003 19:17
Aan: [EMAIL PROTECTED]
Onderwerp: Network Benchmarking/Performance Analysis [7:74808]


I would like recommendations on distributed network benchmarking and
performance analysis systems.  I would like to place sensors/collectors at
various points on the network to collect data on and give detailed reports
on items like, but not limited to:

Packet loss
Latency
Jitter
Throughput

If someone could recommend some companies I would appreciate it.

Guy H. Lupi
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75264t=74808
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: ciscoview-urgent [7:75227]

2003-09-11 Thread milind tare
hi reimer,


   Thanks for ur reply but not getting wht u want to
say. coz i told u i install , CATIOS6000 , Entity ,
Switchaddlet, CLIparser still i can't see i mean it is
coming intopology but with ? . so pls suggest me 

Thanks  Regards,
Milind Tare

--- Reimer, Fred  wrote:
 If you happen to be running PIM Sparse-Dense mode
 with auto-RP and
 duplicate loopback IP addresses then you need a
 special patch for
 CiscoWorks in order for it to properly discover the
 6509's...  This probably
 effects anything that has duplicate loopback IP
 addresses.
 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North,
 Atlanta, GA 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager:
 888-260-2050
 
 
 NOTICE; This email contains confidential or
 proprietary information which
 may be legally privileged. It is intended only for
 the named recipient(s).
 If an addressing or transmission error has
 misdirected the email, please
 notify the author by replying to this message. If
 you are not the named
 recipient, you are not authorized to use, disclose,
 distribute, copy, print
 or rely on this email, and should immediately delete
 it from your computer.
 
 
 -Original Message-
 From: milind tare [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, September 11, 2003 4:54 AM
 To: [EMAIL PROTECTED]
 Subject: ciscoview-urgent [7:75227]
 
 Dear All,
 
 
   In my network MPLS VPN is there and the  cisco
 devices having 7513,6509 and GSR. but in topology i
 am
 not getting 6509 which is having OSM-4ge-wan card
 and
 i can't detect the module in topology services. 
 i have installed related pathches like CLiparaser,
 catios6000, switchaddlets etc...but still getting
 problem ? is coming in topology services.
 
 please guide me urgently
 
 Thanks  Regards,
 milind
 
 __
 Do you Yahoo!?
 Yahoo! SiteBuilder - Free, easy-to-use web site
 design software
 http://sitebuilder.yahoo.com
 **Please support GroupStudy by purchasing from the
 GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75267t=75227
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: question on acl [7:75257]

2003-09-11 Thread Andrew Larkins
As multiple single entries - you can not summarize these...

A better way is to have all the specific users that must be denied to be in
a summarizable subnet

-Original Message-
From: Yong Wee [mailto:[EMAIL PROTECTED] 
Sent: 11 September 2003 17:30
To: [EMAIL PROTECTED]
Subject: question on acl [7:75257]


Hi,
   How do you write an ext acl to block telnet access from even addresses in
subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server 192.168.1.254?

rgds,
yongwee
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75268t=75257
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: {Spam?} question on acl [7:75258]

2003-09-11 Thread Robert Perez
You would have to do each host individually as:

access-list 110 deny tcp host 192.168.2.2 host 192.168.1.254 eq 23

You cannot choose only even addresses with any kind of command. Atleast not
that I am aware of.

-Original Message-
From: Yong Wee [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 11:34 AM
To: [EMAIL PROTECTED]
Subject: {Spam?} question on acl [7:75258]


Hi,
   How do you write an ext acl to block telnet access from even addresses in
subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server 192.168.1.254?

thks,
yongwee
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75270t=75258
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: ciscoview-urgent [7:75227]

2003-09-11 Thread milind tare
hi reimer,

  Thanks for ur reply, and extremely sorry for mis
communication. i will explain u my porblem.

  I install ciscoworks. I have GSR,7513,6509,3512 in
my network. but in topology view i can see
7513,3512,and GSR.

   I install CATIOS6000,Switchaddlets,Entity,
CLIparser. 

   about 6509 the box is coming in Topology but ? is
coming on that box.

Thanks  Regards,
Milind Tare
--- Reimer, Fred  wrote:
 Communications problem.  I don't understand what you
 are asking.  Try using
 more words.  Be verbose.  I may be able to
 understand then...
 
 As far as I can tell:
 You are not having any problems discovering the
 6509.  It is in the
 topology.  In your original messages, you said you
 were NOT getting the 6509
 in the topology.  See my confusion?
 
 Beyond that, I don't know what your problem is, so I
 can't suggest a
 solution.
 
 Just an off-the-wall guess, you probably need to
 load up the latest device
 information file (Incremental Device thingy) in
 CiscoWorks to recognize a
 particular module that may have been released
 recently...
 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North,
 Atlanta, GA 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager:
 888-260-2050
 
 
 NOTICE; This email contains confidential or
 proprietary information which
 may be legally privileged. It is intended only for
 the named recipient(s).
 If an addressing or transmission error has
 misdirected the email, please
 notify the author by replying to this message. If
 you are not the named
 recipient, you are not authorized to use, disclose,
 distribute, copy, print
 or rely on this email, and should immediately delete
 it from your computer.
 
 
 -Original Message-
 From: milind tare [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, September 11, 2003 12:45 PM
 To: Reimer, Fred
 Cc: [EMAIL PROTECTED]
 Subject: RE: ciscoview-urgent [7:75227]
 
 
 hi reimer,
 
 
Thanks for ur reply but not getting wht u want to
 say. coz i told u i install , CATIOS6000 , Entity ,
 Switchaddlet, CLIparser still i can't see i mean it
 is
 coming intopology but with ? . so pls suggest me 
 
 Thanks  Regards,
 Milind Tare
 
 --- Reimer, Fred  wrote:
  If you happen to be running PIM Sparse-Dense mode
  with auto-RP and
  duplicate loopback IP addresses then you need a
  special patch for
  CiscoWorks in order for it to properly discover
 the
  6509's...  This probably
  effects anything that has duplicate loopback IP
  addresses.
  
  Fred Reimer - CCNA
  
  
  Eclipsys Corporation, 200 Ashford Center North,
  Atlanta, GA 30338
  Phone: 404-847-5177  Cell: 770-490-3071  Pager:
  888-260-2050
  
  
  NOTICE; This email contains confidential or
  proprietary information which
  may be legally privileged. It is intended only for
  the named recipient(s).
  If an addressing or transmission error has
  misdirected the email, please
  notify the author by replying to this message. If
  you are not the named
  recipient, you are not authorized to use,
 disclose,
  distribute, copy, print
  or rely on this email, and should immediately
 delete
  it from your computer.
  
  
  -Original Message-
  From: milind tare [mailto:[EMAIL PROTECTED] 
  Sent: Thursday, September 11, 2003 4:54 AM
  To: [EMAIL PROTECTED]
  Subject: ciscoview-urgent [7:75227]
  
  Dear All,
  
  
In my network MPLS VPN is there and the 
 cisco
  devices having 7513,6509 and GSR. but in topology
 i
  am
  not getting 6509 which is having OSM-4ge-wan card
  and
  i can't detect the module in topology services. 
  i have installed related pathches like CLiparaser,
  catios6000, switchaddlets etc...but still getting
  problem ? is coming in topology services.
  
  please guide me urgently
  
  Thanks  Regards,
  milind
  
  __
  Do you Yahoo!?
  Yahoo! SiteBuilder - Free, easy-to-use web site
  design software
  http://sitebuilder.yahoo.com
  **Please support GroupStudy by purchasing from the
  GroupStudy Store:
  http://shop.groupstudy.com
  FAQ, list archives, and subscription info:
  http://www.groupstudy.com/list/cisco.html
 
 
 __
 Do you Yahoo!?
 Yahoo! SiteBuilder - Free, easy-to-use web site
 design software
 http://sitebuilder.yahoo.com


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75271t=75227
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Solutions for the Solie Labs - ?? [7:75239]

2003-09-11 Thread Brad Ellis
Ive got them here (along with my review of the book)


http://www.optsys.net/cciepractreview.htm


thanks,
-Brad Ellis
CCIE#5796 (RS / Security)
Network Learning Inc
[EMAIL PROTECTED]
www.ccbootcamp.com (cisco training)
Cisco Nuts  wrote in message
news:[EMAIL PROTECTED]
 Hello,Does any one if there is a way to get the solutions for the Solie
 Labs from CCIE PS Vol. I?Thank you.

 

 Use custom emotions -- try MSN Messenger 6.0!
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75261t=75239
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: NAT and SAP [7:74982]

2003-09-11 Thread Reimer, Fred
SAP, SAP, what the heck is SAP?  At first I thought it was SIP, but that
doesn't sound right.  Maybe it's referring to the COMPANY SAP?  If so, what
specific application are you talking about?

I must say SAP's website is a nightmare.  Looks like all marketing speak to
me.  Bunch of mumbo jumbo and everything is hard to find.  So much for
customer relationships!

But those are just my opinions, which do not necessarily reflect those of my
employer ;-)

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 9:52 AM
To: [EMAIL PROTECTED]
Subject: RE: NAT and SAP [7:74982]

Different approach:
Howmany clients? Static Nat on the router the other way around?

Give the server a route pointer to the nat router for the client. 

You even can choose to give the client a global ip to connect to the server
with, like a mail server for example.

Martijn 


-Oorspronkelijk bericht-
Van: alaerte Vidali [mailto:[EMAIL PROTECTED]
Verzonden: maandag 8 september 2003 18:50
Aan: [EMAIL PROTECTED]
Onderwerp: NAT and SAP [7:74982]


When a SAP client tries to connect to a SAP server through a router with NAT
enabled there is a problem: the SAP server sends an IP embedded on the
payload of the packet, and the NAT router do not translate it.

Any suggestion?
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75272t=74982
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Mailing list conversion we are moving .... [7:75275]

2003-09-11 Thread Paul Borghese
If you are subscribed to this list via e-mail, we will be transitioning to a
new server with new software.  Within the next few hours you will receive a
welcome message from the new server.Please save this e-mail as it
contains your password and subscription instructions.

If you never receive the welcome message, and you are receiving this list
via e-mail, please send me an e-mail.  If you are not receiving messages
from the new server once the transition is complete, again please report it.
In both cases, before you report it, please make sure it is not a problem on
your end (i.e. your anti-spam filters etc.).

The upgrade should take care of a number of problems including the time
required to distribute mail and various digest options.

Also, do not forget about our online meeting -- 8:00 PM at
Chat.GroupStudy.com!

Take care,

Paul Borghese




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75275t=75275
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: ciscoview-urgent [7:75227]

2003-09-11 Thread Reimer, Fred
I still don't know what you mean by ? is coming on that box  Do you mean
for the OSM module?  That's not listed in the supported devices for Campus
Manager (which I'm assuming you mean by the topology view.

You might try asking at [EMAIL PROTECTED]  They have many more
CiscoWorks people over there.  I'll cross-post...

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: milind tare [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 1:11 PM
To: Reimer, Fred
Cc: [EMAIL PROTECTED]
Subject: RE: ciscoview-urgent [7:75227]

hi reimer,

  Thanks for ur reply, and extremely sorry for mis
communication. i will explain u my porblem.

  I install ciscoworks. I have GSR,7513,6509,3512 in
my network. but in topology view i can see
7513,3512,and GSR.

   I install CATIOS6000,Switchaddlets,Entity,
CLIparser. 

   about 6509 the box is coming in Topology but ? is
coming on that box.

Thanks  Regards,
Milind Tare
--- Reimer, Fred  wrote:
 Communications problem.  I don't understand what you
 are asking.  Try using
 more words.  Be verbose.  I may be able to
 understand then...
 
 As far as I can tell:
 You are not having any problems discovering the
 6509.  It is in the
 topology.  In your original messages, you said you
 were NOT getting the 6509
 in the topology.  See my confusion?
 
 Beyond that, I don't know what your problem is, so I
 can't suggest a
 solution.
 
 Just an off-the-wall guess, you probably need to
 load up the latest device
 information file (Incremental Device thingy) in
 CiscoWorks to recognize a
 particular module that may have been released
 recently...
 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North,
 Atlanta, GA 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager:
 888-260-2050
 
 
 NOTICE; This email contains confidential or
 proprietary information which
 may be legally privileged. It is intended only for
 the named recipient(s).
 If an addressing or transmission error has
 misdirected the email, please
 notify the author by replying to this message. If
 you are not the named
 recipient, you are not authorized to use, disclose,
 distribute, copy, print
 or rely on this email, and should immediately delete
 it from your computer.
 
 
 -Original Message-
 From: milind tare [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, September 11, 2003 12:45 PM
 To: Reimer, Fred
 Cc: [EMAIL PROTECTED]
 Subject: RE: ciscoview-urgent [7:75227]
 
 
 hi reimer,
 
 
Thanks for ur reply but not getting wht u want to
 say. coz i told u i install , CATIOS6000 , Entity ,
 Switchaddlet, CLIparser still i can't see i mean it
 is
 coming intopology but with ? . so pls suggest me 
 
 Thanks  Regards,
 Milind Tare
 
 --- Reimer, Fred  wrote:
  If you happen to be running PIM Sparse-Dense mode
  with auto-RP and
  duplicate loopback IP addresses then you need a
  special patch for
  CiscoWorks in order for it to properly discover
 the
  6509's...  This probably
  effects anything that has duplicate loopback IP
  addresses.
  
  Fred Reimer - CCNA
  
  
  Eclipsys Corporation, 200 Ashford Center North,
  Atlanta, GA 30338
  Phone: 404-847-5177  Cell: 770-490-3071  Pager:
  888-260-2050
  
  
  NOTICE; This email contains confidential or
  proprietary information which
  may be legally privileged. It is intended only for
  the named recipient(s).
  If an addressing or transmission error has
  misdirected the email, please
  notify the author by replying to this message. If
  you are not the named
  recipient, you are not authorized to use,
 disclose,
  distribute, copy, print
  or rely on this email, and should immediately
 delete
  it from your computer.
  
  
  -Original Message-
  From: milind tare [mailto:[EMAIL PROTECTED] 
  Sent: Thursday, September 11, 2003 4:54 AM
  To: [EMAIL PROTECTED]
  Subject: ciscoview-urgent [7:75227]
  
  Dear All,
  
  
In my network MPLS VPN is there and the 
 cisco
  devices having 7513,6509 and GSR. but in topology
 i
  am
  not getting 6509 which is having OSM-4ge-wan card
  and
  i can't detect the module in topology services. 
  i have installed related pathches like CLiparaser,
  catios6000, switchaddlets etc...but still getting
  problem ? is coming in topology services.
  
  please guide me urgently
  
  Thanks  Regards,
  milind
  
  __
  Do you Yahoo!?
  Yahoo! SiteBuilder - Free, easy-to-use web site
  design software
  

RE: Ethernet bogs down help has anyone seen this problem [7:75277]

2003-09-11 Thread Andrew Larkins
Try an access-list that denies ICMP and then use IP accounting access-
violations to see - more than likely a virus

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 Sent: Thursday, September 11, 2003 7:01 AM
 To: [EMAIL PROTECTED]
 Subject: Ethernet bogs down help has anyone seen this problem
 [7:75238]
 
 
 I have a customer that has a small office with a Cisco 56K
 Frame router.
 They
 are running Nat. Now when I plug in the frame side the 
 ethernet side gets 
 constant request for translation then it gets to the point 
 where you can no 
 longer even ping the ethernet side. If I remove the RG45 
 cable from the
 frame side.
 No problem the request stop and I can ping my ethernet side 
 of the router 
 fine with 10ml sec responses all day. The users office is 
 down because he
 can not
 get out to the web. I've checked for viruses and everything 
 seems fine. Does 
 anyone have any ideas? This one is driving me crazy. The ISP 
 says that my 
 router is bad, but I doubt it. It started all of a sudden 
 after working fine
 for 2
 years.
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info: 
 http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75277t=75277
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Free Rack Time [7:75273]

2003-09-11 Thread Jay Greenberg
I need 10-20 people to beta test a new online cisco lab time rental
system.   Anyone who would like free lab time and can answer a couple
questions after, please respond.  

-- 
Jay Greenberg 
CCIE #11021




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75273t=75273
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: question on acl [7:75257]

2003-09-11 Thread Reimer, Fred
Er, yes you can.  Two people have already replied on how.  Use a WILDCARD
mask of 0.0.0.254.  Simple, easy, effective.  I'd hate to have to type in
128 permit statements.  Probably end up writing a Perl one-liner, but the
easier way is to use the proper WILDCARD mask.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Andrew Larkins [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 12:50 PM
To: [EMAIL PROTECTED]
Subject: RE: question on acl [7:75257]

As multiple single entries - you can not summarize these...

A better way is to have all the specific users that must be denied to be in
a summarizable subnet

-Original Message-
From: Yong Wee [mailto:[EMAIL PROTECTED] 
Sent: 11 September 2003 17:30
To: [EMAIL PROTECTED]
Subject: question on acl [7:75257]


Hi,
   How do you write an ext acl to block telnet access from even addresses in
subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server 192.168.1.254?

rgds,
yongwee
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75280t=75257
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: NAT and SAP [7:74982]

2003-09-11 Thread [EMAIL PROTECTED]
Different approach:
Howmany clients? Static Nat on the router the other way around?

Give the server a route pointer to the nat router for the client. 

You even can choose to give the client a global ip to connect to the server
with, like a mail server for example.

Martijn 


-Oorspronkelijk bericht-
Van: alaerte Vidali [mailto:[EMAIL PROTECTED]
Verzonden: maandag 8 september 2003 18:50
Aan: [EMAIL PROTECTED]
Onderwerp: NAT and SAP [7:74982]


When a SAP client tries to connect to a SAP server through a router with NAT
enabled there is a problem: the SAP server sends an IP embedded on the
payload of the packet, and the NAT router do not translate it.

Any suggestion?
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75276t=74982
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


BSCI 640-901 [7:75259]

2003-09-11 Thread Kenan Ahmed Siddiqi
Hello people,
I am sitting the exam on next Monday (22nd September). Has anyone taken the
exam recently? I just want to know what the passing score is. Thank you.

Cheers,

Kenan
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75279t=75259
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: help [7:75225]

2003-09-11 Thread Paul Borghese
Oops!  I am moving the mailing list users to a new server and was testing
the new server.  I inadvertently sent one of the test messages to the active
list.  At 3:00 AM when stuff is not working, yelling help does not seem
like a bad idea :-).

By the way, the move should be done by this afternoon.  Unless I get tied up
with something else, you will receive a welcome message (those that read via
e-mail) describing the new server.

Take care,

Paul 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
annlee
Sent: Thursday, September 11, 2003 8:07 AM
To: [EMAIL PROTECTED]
Subject: Re: help [7:75225]

problem?

Paul Borghese wrote:
 help
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75274t=75225
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: {Spam?} question on acl [7:75258]

2003-09-11 Thread Salvatore De Luca
Robert, 

  Yes.. You absolutley CAN... See previous reply...


Robert Perez wrote:
 
 You would have to do each host individually as:
 
 access-list 110 deny tcp host 192.168.2.2 host 192.168.1.254 eq
 23
 
 You cannot choose only even addresses with any kind of command.
 Atleast not
 that I am aware of.
 
 -Original Message-
 From: Yong Wee [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, September 11, 2003 11:34 AM
 To: [EMAIL PROTECTED]
 Subject: {Spam?} question on acl [7:75258]
 
 
 Hi,
How do you write an ext acl to block telnet access from even
 addresses in
 subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server
 192.168.1.254?
 
 thks,
 yongwee
 **Please support GroupStudy by purchasing from the GroupStudy
 Store:
 http://shop.groupstudy.com FAQ, list archives, and subscription
 info:
 http://www.groupstudy.com/list/cisco.html
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75283t=75258
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: [NMSU-CW2K] RE: ciscoview-urgent [7:75227]

2003-09-11 Thread Peter P. Benac
Fred,

The ? in the icon on the Topology map means it's an unknown device.
It knows it's CDP supported but it can not identify it's Cisco Device ID or
the sysObjectID.  There are a couple of reasons for this including the fact
they are in reality HP JetDirects, New HP Servers (they both support CDP )
or the device or OS version is not supported by the version CW2K he has.

Regards,
Pete

Peter P. Benac, CCNA
Emacolet Networking Services, Inc
Providing Systems and Network Consulting, Training, Web Hosting Services
Phone: 919-847-1740 or 866-701-2345
Web: http://www.emacolet.com
Need quick reliable Systems or Network Management advice visit
http://www.nmsusers.org

To have principles...
 First have courage.. With principles comes integrity!!!




 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Reimer, Fred
 Sent: Thursday, September 11, 2003 13:58
 To: milind tare
 Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Subject: [NMSU-CW2K] RE: ciscoview-urgent [7:75227]
 
 
 I still don't know what you mean by ? is coming on that box 
  Do you mean for the OSM module?  That's not listed in the 
 supported devices for Campus Manager (which I'm assuming you 
 mean by the topology view.
 
 You might try asking at [EMAIL PROTECTED]  They have 
 many more CiscoWorks people over there.  I'll cross-post...
 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050
 
 
 NOTICE; This email contains confidential or proprietary 
 information which may be legally privileged. It is intended 
 only for the named recipient(s). If an addressing or 
 transmission error has misdirected the email, please notify 
 the author by replying to this message. If you are not the 
 named recipient, you are not authorized to use, disclose, 
 distribute, copy, print or rely on this email, and should 
 immediately delete it from your computer.
 
 
 -Original Message-
 From: milind tare [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, September 11, 2003 1:11 PM
 To: Reimer, Fred
 Cc: [EMAIL PROTECTED]
 Subject: RE: ciscoview-urgent [7:75227]
 
 hi reimer,
 
   Thanks for ur reply, and extremely sorry for mis 
 communication. i will explain u my porblem.
 
   I install ciscoworks. I have GSR,7513,6509,3512 in
 my network. but in topology view i can see
 7513,3512,and GSR.
 
I install CATIOS6000,Switchaddlets,Entity,
 CLIparser. 
 
about 6509 the box is coming in Topology but ? is
 coming on that box.
 
 Thanks  Regards,
 Milind Tare
 --- Reimer, Fred  wrote:
  Communications problem.  I don't understand what you
  are asking.  Try using
  more words.  Be verbose.  I may be able to
  understand then...
  
  As far as I can tell:
  You are not having any problems discovering the
  6509.  It is in the
  topology.  In your original messages, you said you
  were NOT getting the 6509
  in the topology.  See my confusion?
  
  Beyond that, I don't know what your problem is, so I
  can't suggest a
  solution.
  
  Just an off-the-wall guess, you probably need to
  load up the latest device
  information file (Incremental Device thingy) in
  CiscoWorks to recognize a
  particular module that may have been released
  recently...
  
  Fred Reimer - CCNA
  
  
  Eclipsys Corporation, 200 Ashford Center North,
  Atlanta, GA 30338
  Phone: 404-847-5177  Cell: 770-490-3071  Pager:
  888-260-2050
  
  
  NOTICE; This email contains confidential or
  proprietary information which
  may be legally privileged. It is intended only for
  the named recipient(s).
  If an addressing or transmission error has
  misdirected the email, please
  notify the author by replying to this message. If
  you are not the named
  recipient, you are not authorized to use, disclose, 
 distribute, copy, 
  print or rely on this email, and should immediately delete
  it from your computer.
  
  
  -Original Message-
  From: milind tare [mailto:[EMAIL PROTECTED]
  Sent: Thursday, September 11, 2003 12:45 PM
  To: Reimer, Fred
  Cc: [EMAIL PROTECTED]
  Subject: RE: ciscoview-urgent [7:75227]
  
  
  hi reimer,
  
  
 Thanks for ur reply but not getting wht u want to
  say. coz i told u i install , CATIOS6000 , Entity , Switchaddlet, 
  CLIparser still i can't see i mean it is
  coming intopology but with ? . so pls suggest me 
  
  Thanks  Regards,
  Milind Tare
  
  --- Reimer, Fred  wrote:
   If you happen to be running PIM Sparse-Dense mode
   with auto-RP and
   duplicate loopback IP addresses then you need a
   special patch for
   CiscoWorks in order for it to properly discover
  the
   6509's...  This probably
   effects anything that has duplicate loopback IP addresses.
   
   Fred Reimer - CCNA
   
   
   Eclipsys Corporation, 200 Ashford Center North,
   Atlanta, GA 30338
   Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050
   
   
   NOTICE; This email contains confidential or
   proprietary 

RE: {Spam?} question on acl [7:75258]

2003-09-11 Thread Reimer, Fred
Well, we have two right answers (you can do it with a wildcard mask of
0.0.0.254) and two wrong answers (it's not possible).  I'll break the tie
and say you can do it ;-)

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Robert Perez [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 1:10 PM
To: [EMAIL PROTECTED]
Subject: RE: {Spam?} question on acl [7:75258]

You would have to do each host individually as:

access-list 110 deny tcp host 192.168.2.2 host 192.168.1.254 eq 23

You cannot choose only even addresses with any kind of command. Atleast not
that I am aware of.

-Original Message-
From: Yong Wee [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 11, 2003 11:34 AM
To: [EMAIL PROTECTED]
Subject: {Spam?} question on acl [7:75258]


Hi,
   How do you write an ext acl to block telnet access from even addresses in
subnet 192.168.2.0/24 (i.e, .2, .4, .6 etc) to server 192.168.1.254?

thks,
yongwee
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75282t=75258
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Ethernet bogs down help has anyone seen this problem [7:75285]

2003-09-11 Thread MADMAN
Do a sh ip nat trans.  Are you seeing a quadrillion icmp translations 
all sourcing a same host or few hosts?

   Dave

Andrew Larkins wrote:

 Try an access-list that denies ICMP and then use IP accounting access-
 violations to see - more than likely a virus
 
 
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 11, 2003 7:01 AM
To: [EMAIL PROTECTED]
Subject: Ethernet bogs down help has anyone seen this problem
[7:75238]


I have a customer that has a small office with a Cisco 56K
Frame router.
They
are running Nat. Now when I plug in the frame side the 
ethernet side gets 
constant request for translation then it gets to the point 
where you can no 
longer even ping the ethernet side. If I remove the RG45 
cable from the
frame side.
No problem the request stop and I can ping my ethernet side 
of the router 
fine with 10ml sec responses all day. The users office is 
down because he
can not
get out to the web. I've checked for viruses and everything 
seems fine. Does 
anyone have any ideas? This one is driving me crazy. The ISP 
says that my 
router is bad, but I doubt it. It started all of a sudden 
after working fine
for 2
years.
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: 
http://www.groupstudy.com/list/cisco.html
 
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 

-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

Emotion should reflect reason not guide it




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75285t=75285
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Free Rack Time [7:75273]

2003-09-11 Thread Chibwe, Oliver J, NEO
Counting me in and where do we go from here?


Thank you

Ollie
ATT Common Backbone
866-397-7309 Opt 1


-Original Message-
From: Jay Greenberg [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 11, 2003 12:32 PM
To: [EMAIL PROTECTED]
Subject: Free Rack Time [7:75273]


I need 10-20 people to beta test a new online cisco lab time rental
system.   Anyone who would like free lab time and can answer a couple
questions after, please respond.  

-- 
Jay Greenberg 
CCIE #11021
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75286t=75273
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: EM VoIP Problem [7:74717]

2003-09-10 Thread [EMAIL PROTECTED]
Sounds like problems initiating on the remote site or the reception of the
session onthis site.

Start debugging on remote site, pls show us the output. 

Show call/pots/dial-

Any number expansion/wildcard issues?

debug call rsvp-sync events 

Martijn 

-Oorspronkelijk bericht-
Van: lost in space [mailto:[EMAIL PROTECTED]
Verzonden: woensdag 3 september 2003 18:03
Aan: [EMAIL PROTECTED]
Onderwerp: EM VoIP Problem [7:74717]


Dear Experts,

I am having this problem with EM VoIP.  We are using an EM PABX operating
with 4 wire and using immediate signalling.  The network are connected via 2
Mbps Leased Line.  I can make voice calls from my site to remote site,
however when i asked someone from the remote site to call the other way
around he get busy tones all the time eventough the extension were actually
not bust at that time.

The strange thing is that the remote site can make voice call to my site
only to 2 extension (300 and 400),  but when they dial another extension ex:
363, or 369 they get busy tones all the time.

the dial-peer configuration on the remote router are like this

dial-peer voice 1 pots
destination-pattern +...
port 1/0/0

dial-peer voice 1 pots
destination-pattern +...
port 1/0/1

dial-peer voice 3 voip
destination-pattern +3..
session target ipv4:172.23.1.34(ip address of router's serial interface at
my site).


dial-peer voice 4 voip
destination-pattern +4..
session target ipv4:172.23.1.34 (ip address of router's serial interface at
my site).

Is it the wiring arrangement problem?
i already set up the wiring arrangement based on a reference i got from CCO.

Is it a timeouts parameter problem?

or Is it the EM PABX problem?

Like always, the PABX technician feel that he has done everything correctly.

I am also confident that i have done the configuration correctly.

Anyone has similar experience?

Any idea would be greaty appreciated.

Thanks in advance.


RD
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75160t=74717
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Basic IP CEF question (again) [7:75161]

2003-09-10 Thread Curious
The history:

Author: Zsombor Papp (---.dsl.snfc21.pacbell.net)
Date:   09-08-03 14:47

It means that's the router's own IP address. 

Thanks, 

Zsombor 

Curious wrote: 
 
 Hello dear friends, 
 I would like to know the meaning of the keyword receive that I 
 can see when I execute a show ip cef command: 
 
 For example: 
 
 show ip cef 
 Prefix Next Hop Interface 
  
  
 10.64.15.224/32 receive 
 
 What means that the next-hop is receive. 
 
 More details: 
 
 ROUTER#sh ip route 10.64.15.224 
 Routing entry for 10.64.15.224/28 
 Known via connected, distance 0, metric 0 (connected, via 
 interface) 
 Redistributing via ospf 10 
 Advertised by ospf 10 subnets 
 Routing Descriptor Blocks: 
 * directly connected, via FastEthernet4/1/0.30 
 Route metric is 0, traffic share count is 1 
 
 Any comments?? Bye and Thx 
 
 

My comments:

Hello Zsombor, I can see IP addresses that doesn't belong to the router, for
example:
Router#sh ip cef | include 10.224.0.51
10.224.0.51/32  receive

But the IP address of the router in the subnet is:

 10.224.0.49

The subnet is:

 10.224.0.48/30

So the IP address 10.224.0.51 is the broadcast address of the 
router in the network, but not the IP owned by the router.
What do you think??
Thx a lot.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75161t=75161
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: PIX PDM [7:74758]

2003-09-10 Thread Philip Suen
I have experienced by using PDM to configure VPN is unstable. Everytime I
try to modify the particular VPN connection. All of the connection will be
disconnected.

In addition, everytime if you have changed the configuration in PDM, you
must remember to save it manually, otherwise reboot will erase all of the
config.

Finally, before you make any change within PDM, you should download the
latest version configuration from PIX. Otherwise, you will erase the running
config.

Philip

Gary Leong  wrote in message
news:[EMAIL PROTECTED]
 Our security group is recommending not to use PDM to
 configure our Pix firewalls.  They did not give any
 reason for their recommendation.  Does anyone know why
 PDM should not be used?

 __
 Do you Yahoo!?
 Yahoo! SiteBuilder - Free, easy-to-use web site design software
 http://sitebuilder.yahoo.com
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75162t=74758
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Studying Switching [7:75030]

2003-09-10 Thread annlee
page 58, Interconnections, 2e

Algorhyme

I think that I shall never see
A graph more lovely than a tree.

A tree whose crucial property
Is loop-free connectivity.

A tree that must be sure to span
So packets can reach every LAN.

Firest, the root must be selected.
By ID, it is elected.

Least-cost paths from root are traced.
In the tree, these paths are placed.

A mesh is made by folks like me,
Then bridges find a spanning tree.

--Radia Perlman

Tom Lisa wrote:

 Priscilla,
 
 Didn't Radia write a poem that starts something like
 I have never seen a tree as lovely as a spanning tree?
 
 BTW, is it still possible to get a free copy of 802.1s  w.
 I looked on the IEEE site but couldn't find them.
 
 Prof. Tom Lisa, CCAI
 Community College of Southern Nevada
 Cisco ATC/Regional Networking Academy
 Cunctando restituit rem
 
 Priscilla Oppenheimer wrote:
 
   Get a copy of Cisco LAN Switching by Kennedy Clark and Kevin
   Hamilton. It's
   right up there with Doyle as one of the best networking books ever
   written.
   It makes switching fun again! ;-) It's well written, technicaly
   accurate and
   interesting, and it doesn't just throw the latest marketing trends at
   you
   with no explanation of their history, like some switching material
   does.
 
   Also, CertificationZone has some good articles and study materials
   for
   switching.
 
   By the way, switching isn't as dull as it might seem. The spanning
   tree
   algorithm can be quite interesting to study. And there are
   enhancements to
   it now like 802.1s (multiple spanning trees) and 802.1w (rapid
   spanning tree
   protocol).
 
   Good luck!
 
   Priscilla Oppenheimer
 
   Nakul Malik wrote:
   
Hi all,
I started off studying routing and found it to be a topic that
interested me
a lot. I just couldn't get enough of halabi Doyle and the rest.
I studied a
lot, practiced a lot and was thrilled when I passed the exam in
beta.
   
Next I started studying for switching. That didn't turn out as
well as I
thought it would. I couldn't just work up the same level of
interest. I have
been analyzing the reasons and have come up with the following:
1. I've never worked with switches much, so I don't know too
much about
them, as opposed to routers.
2. Study materials.
   
I've been wondering, has anyone else faced similar problems in
their quest
for CCNP.
   
Also, could someone recommend some good materials/resources for
switching
other than the official Cisco book?
   
Any/all answers would be appreciated.
Thanks.
-N
   
--
Nakul Malik
   
H-342
New Rajendra Nagar
New Delhi - 110060
   
Mobile: +91-9811424477
Ph: +91-11- 2582 3488
  +91-11- 2585 0155
Fax:: +91-11- 2575 2904
   
[EMAIL PROTECTED]
   **Please support GroupStudy by purchasing from the GroupStudy Store:
   http://shop.groupstudy.com
   FAQ, list archives, and subscription info:
   http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html


This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit
http://www.messagelabs.com





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75163t=75030
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Studying Switching [7:75030]

2003-09-10 Thread Tim Champion
All the info relating to this book is good and I'm going to buy on the back
of these reviews but... what makes people write switching related poems?
Nakul Malik  wrote in message
news:[EMAIL PROTECTED]
 Hi all,
 I started off studying routing and found it to be a topic that interested
me
 a lot. I just couldn't get enough of halabi Doyle and the rest. I studied
a
 lot, practiced a lot and was thrilled when I passed the exam in beta.

 Next I started studying for switching. That didn't turn out as well as I
 thought it would. I couldn't just work up the same level of interest. I
have
 been analyzing the reasons and have come up with the following:
 1. I've never worked with switches much, so I don't know too much about
 them, as opposed to routers.
 2. Study materials.

 I've been wondering, has anyone else faced similar problems in their quest
 for CCNP.

 Also, could someone recommend some good materials/resources for switching
 other than the official Cisco book?

 Any/all answers would be appreciated.
 Thanks.
 -N

 --
 Nakul Malik

 H-342
 New Rajendra Nagar
 New Delhi - 110060

 Mobile: +91-9811424477
 Ph: +91-11- 2582 3488
   +91-11- 2585 0155
 Fax:: +91-11- 2575 2904

 [EMAIL PROTECTED]
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75165t=75030
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
No offense, but this is CCNA material.  If you are going for your CCNP, then
you should already have your CCNA and know the answer.  But anyway...

If you need a network with 400 hosts, the smallest subnet would have a /23
mask.  So take the first part of your given network and assign it to that:

192.168.24.0/23 (192.168.24.0-192.168.25.255)

Then you need one with 200 hosts.  Well, that could fit within a /24 subnet,
so assign the next available to that:

192.168.26.0/24 (192.168.26.0-192.168.26.255)

Now you only have 192.168.27.0/24 left from the original 192.168.24.0/23
(which covered 192.168.24.0-192.168.27.255).  You need two 50's, so that
should fit within /26 subnets each.  Assign them:

192.168.27.0/26 (192.168.27.0-192.168.27.63)
192.168.27.64/26 (192.168.27.64-192.168.27.191)

Finally, you need three subnets that can have two hosts each, which would
fit within /30 subnets.  So assign:

192.168.27.192/30
192.168.27.196/30
192.168.27.200/30


Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Steven Aiello [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 8:02 AM
To: [EMAIL PROTECTED]
Subject: Please Help - CIDR - How the bits work [7:75050]

I just started my routing class for my CCNP.  We are covering CIDR.  The 
book is VEERY vague on how the bit patterns break down and are used.


This was a problem posed in one of my CCNP labs

I have network number

192.168.24.0 / 22

from this I need
networks with

400 hosts
200 hosts
50  hosts
50  hosts
2   hosts (for serial int - no ip un-numbered allowed )
2   hosts
2   hosts

Also no NATing

Thanks all I really could use the help

Steve
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html


This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit
http://www.messagelabs.com





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75164t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Stephen Skinner
BLIMEY !!!

this is getting a little heated L+G`s .

i personally believe that when i got my CCNA if i had been asked to 
configure BGP (even Basic) on an internet connecting router for a 
small-medium sized company...i would have run away screaming...

Ask yourselfs this there are three grade`s of Certifications at cisco

Associate
Profesisional
Expert

from a company manager`s point-of-view (no offence fred)

Whom would you prefer be touching your internet facing router ...

yes i am aware that to most of us they don`t mean tuppence (i.e howard/pris)
but the plan truth is people NOT in the know rely on the badges


From: Howard C. Berkowitz 
Reply-To: Howard C. Berkowitz 
To: [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]
Date: Wed, 10 Sep 2003 03:36:57 GMT

At 11:32 PM + 9/9/03, Priscilla Oppenheimer wrote:
 Dom wrote:
 
   And one last point, No LAN is an island, why two IG(P)
   protocols and no
   EG(P) protocol?
 
   A NA should at least a some understanding of how to connect to
   the
   outside world - when to use BGP and when not to.
 
 Default routing. Wouldn't we all be better off if CCNAs would stay away 
from
 BGP?? :-)
 
 Priscilla

When fingerpointing in quite a number of external connectivity
problems, I have often found de fault is due to the lack of default.
Cisco hardly helps this by discriminating against static and default
routes in the CCIE lab.
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: 
http://www.groupstudy.com/list/cisco.html

_
Tired of 56k? Get a FREE BT Broadband connection 
http://www.msn.co.uk/specials/btbroadband




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75166t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Steven Aiello
Fred,

   OSPF was just moved into the CCNA 3.0 Acad.  which is JUST being 
released now.  I wish we would have coverd that, and other things you 
mention.

Steve

Reimer, Fred wrote:

 May be I had advanced access to the new NA material then ;-)  In my view, a
 NA should be able to handle basic RIP, OSPF, EIGRP in a small to medium
 sized network.  That would certainly include CIDR.  A NP, IMO, would be for
 advanced RIP, OSPF, EIGRP, and basic BGP, like for configuring a mid-large
 sized network for connection to the Internet including minimal BGP.  IE,
 IMO, is for ISP engineers that have to deal with extensive IS-IS, BGP using
 all options, etc, and large to huge (global) networks.
 
 May be I'm just expecting too much, but if you don't understand CIDR you
 shouldn't be allowed anywhere near a router, let alone be responsible for
 configuring them.
 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050
 
 
 NOTICE; This email contains confidential or proprietary information which
 may be legally privileged. It is intended only for the named recipient(s).
 If an addressing or transmission error has misdirected the email, please
 notify the author by replying to this message. If you are not the named
 recipient, you are not authorized to use, disclose, distribute, copy, print
 or rely on this email, and should immediately delete it from your computer.
 
 
 -Original Message-
 From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED] 
 Sent: Tuesday, September 09, 2003 12:33 PM
 To: [EMAIL PROTECTED]
 Subject: RE: Please Help - CIDR - How the bits work [7:75050]
 
 Reimer, Fred wrote:
 
No offense, but this is CCNA material. 
 
 
 Do they still teach classful for CCNA, though? Perhaps the only thing
that's
 hard for him is that 192.168.24.0 has a mask of 255.255.255.0 in a classful
 system. Moving the prefix over to the left of that classful boundary isn't
 something they teach for CCNA yet. (They will soon. The new Networking
 Academy books teach it from the start now.)
 
 Priscilla
 
 
If you are going for
your CCNP, then
you should already have your CCNA and know the answer.  But
anyway...

If you need a network with 400 hosts, the smallest subnet would
have a /23
mask.  So take the first part of your given network and assign
it to that:

192.168.24.0/23 (192.168.24.0-192.168.25.255)

Then you need one with 200 hosts.  Well, that could fit within
a /24 subnet,
so assign the next available to that:

192.168.26.0/24 (192.168.26.0-192.168.26.255)

Now you only have 192.168.27.0/24 left from the original
192.168.24.0/23
(which covered 192.168.24.0-192.168.27.255).  You need two
50's, so that
should fit within /26 subnets each.  Assign them:

192.168.27.0/26 (192.168.27.0-192.168.27.63)
192.168.27.64/26 (192.168.27.64-192.168.27.191)

Finally, you need three subnets that can have two hosts each,
which would
fit within /30 subnets.  So assign:

192.168.27.192/30
192.168.27.196/30
192.168.27.200/30


Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA
30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary
information which
may be legally privileged. It is intended only for the named
recipient(s).
If an addressing or transmission error has misdirected the
email, please
notify the author by replying to this message. If you are not
the named
recipient, you are not authorized to use, disclose, distribute,
copy, print
or rely on this email, and should immediately delete it from
your computer.


-Original Message-
From: Steven Aiello [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 8:02 AM
To: [EMAIL PROTECTED]
Subject: Please Help - CIDR - How the bits work [7:75050]

I just started my routing class for my CCNP.  We are covering
CIDR.  The
book is VEERY vague on how the bit patterns break down and
are used.


This was a problem posed in one of my CCNP labs

I have network number

192.168.24.0 / 22

from this I need
networks with

400 hosts
200 hosts
50  hosts
50  hosts
2   hosts (for serial int - no ip un-numbered allowed )
2   hosts
2   hosts

Also no NATing

Thanks all I really could use the help

Steve
**Please support GroupStudy by purchasing from the GroupStudy
Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75169t=75050
--
**Please 

RE: Hyper Terminal - 2500 [7:75065]

2003-09-10 Thread Vikram JeetSingh
Or alternatively try different bit rates, some of them behave that way :)

HTH

Vikram

-Original Message-
From: Daniel Cotts [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 10, 2003 2:55 AM
To: [EMAIL PROTECTED]
Subject: RE: Hyper Terminal - 2500 [7:75065]


Verify that you don't have Scroll Lock enabled on your keyboard. 

 -Original Message-
 From: Johan Bornman [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, September 09, 2003 9:24 AM
 To: [EMAIL PROTECTED]
 Subject: Hyper Terminal - 2500 [7:75065]
 
 
 I don't get any response when configuring a 2500 series router (no key
 strokes) through Hyper Terminal, 3 2500's doing the same thing. When I
 restart the router by resetting it I can see the boot process 
 fine. Any
 ideas?
 
 Thanks in advance.
 
 
 This e-mail may contain confidential information and may be legally
 privileged and is intended only for the person to whom it is 
 addressed. If
 you are not the intended recipient, you are notified that you 
 may not use,
 distribute or copy this document in any manner whatsoever. Kindly also
 notify the sender immediately by telephone, and delete the 
 e-mail. When
 addressed to clients of the company from where this e-mail 
 originates (the
 sending company ) any opinion or advice contained in this 
 e-mail is subject
 to the terms and conditions expressed in any applicable terms 
 of business or
 client engagement letter . The sending company does not 
 accept liability for
 any damage, loss or expense arising from this e-mail and/or from the
 accessing of any files attached to this e-mail.
 
 At present, the integrity of e-mail across the Internet cannot be
 guaranteed and messages sent via this medium are potentially 
 at risk.  The
 recipient should scan any attached files for viruses.  All 
 liability arising
 as a result of the use of this medium to transmit information by or to
 e-Innovation is excluded to the extent permitted by law.
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info: 
 http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75167t=75065
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Studying Switching [7:75030]

2003-09-10 Thread Steven Aiello
No sorry I know that peom, no spanning in there at all.

LoL

Steve

Tom Lisa wrote:
 Priscilla,
 
 Didn't Radia write a poem that starts something like
 I have never seen a tree as lovely as a spanning tree?
 
 BTW, is it still possible to get a free copy of 802.1s  w.
 I looked on the IEEE site but couldn't find them.
 
 Prof. Tom Lisa, CCAI
 Community College of Southern Nevada
 Cisco ATC/Regional Networking Academy
 Cunctando restituit rem
 
 Priscilla Oppenheimer wrote:
 
   Get a copy of Cisco LAN Switching by Kennedy Clark and Kevin
   Hamilton. It's
   right up there with Doyle as one of the best networking books ever
   written.
   It makes switching fun again! ;-) It's well written, technicaly
   accurate and
   interesting, and it doesn't just throw the latest marketing trends at
   you
   with no explanation of their history, like some switching material
   does.
 
   Also, CertificationZone has some good articles and study materials
   for
   switching.
 
   By the way, switching isn't as dull as it might seem. The spanning
   tree
   algorithm can be quite interesting to study. And there are
   enhancements to
   it now like 802.1s (multiple spanning trees) and 802.1w (rapid
   spanning tree
   protocol).
 
   Good luck!
 
   Priscilla Oppenheimer
 
   Nakul Malik wrote:
   
Hi all,
I started off studying routing and found it to be a topic that
interested me
a lot. I just couldn't get enough of halabi Doyle and the rest.
I studied a
lot, practiced a lot and was thrilled when I passed the exam in
beta.
   
Next I started studying for switching. That didn't turn out as
well as I
thought it would. I couldn't just work up the same level of
interest. I have
been analyzing the reasons and have come up with the following:
1. I've never worked with switches much, so I don't know too
much about
them, as opposed to routers.
2. Study materials.
   
I've been wondering, has anyone else faced similar problems in
their quest
for CCNP.
   
Also, could someone recommend some good materials/resources for
switching
other than the official Cisco book?
   
Any/all answers would be appreciated.
Thanks.
-N
   
--
Nakul Malik
   
H-342
New Rajendra Nagar
New Delhi - 110060
   
Mobile: +91-9811424477
Ph: +91-11- 2582 3488
  +91-11- 2585 0155
Fax:: +91-11- 2575 2904
   
[EMAIL PROTECTED]
   **Please support GroupStudy by purchasing from the GroupStudy Store:
   http://shop.groupstudy.com
   FAQ, list archives, and subscription info:
   http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75168t=75030
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Kenan Ahmed Siddiqi
Hi there,
There is a great link for al this you should check out:

http://www.3com.com/other/pdfs/infra/corpinfo/en_US/501302.pdf

Cheers,

Kenan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75174t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Daniel Cotts
Here's a great resource:
pad
http://www.nanog.org/isp.html#cidr
scroll down to CIDR and download Understanding IP Addressing: Everything
You Ever Wanted to Know by Chuck Semeria

Looking at your specific problem - think in powers of two. 400 nodes is
greater than 256 but less than 512. Use /23 out of your allocation. 200 is
less than 256 so use a /24.
50 is greater than 32 and less than 64 so use a /26 for each. The serial
links each need a /30. Probably best to take the last /28 from the
allocation and break it down into four /30s. 

 -Original Message-
 From: Steven Aiello [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, September 09, 2003 7:02 AM
 To: [EMAIL PROTECTED]
 Subject: Please Help - CIDR - How the bits work [7:75050]
 
 
 I just started my routing class for my CCNP.  We are covering 
 CIDR.  The 
 book is VEERY vague on how the bit patterns break down 
 and are used.
 
 
 This was a problem posed in one of my CCNP labs
 
 I have network number
 
 192.168.24.0 / 22
 
 from this I need
 networks with
 
 400 hosts
 200 hosts
 50  hosts
 50  hosts
 2   hosts (for serial int - no ip un-numbered allowed )
 2   hosts
 2   hosts
 
 Also no NATing
 
 Thanks all I really could use the help
 
 Steve
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html


This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit
http://www.messagelabs.com





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75171t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work What I figured out [7:75173]

2003-09-10 Thread Reimer, Fred
From what you say, I think you have it, but I'm not sure.  Starting from the
bottom of a /24 subnet (Class C), you could have a /26 subnet, then two /27
subnets, then four /28 subnets, and finally another /26 subnet.  Or you
could have two /28 subnets, one /27 subnet, one /26 subnet, followed by a
/25 subnet.  The combination, and order, does not really matter, as long as
no IP addresses within the subnets overlap.

For instance, you couldn't have a /26 (64 addresses) followed by a /25 (128
addresses), followed by a /26 (64 addresses).  Why?  Because there can't be
any overlaps.  The 64 would start at .0 and go to .63.  The 128 would
start...  Where?  It can't start at .64, because that's in the middle of say
192.168.24.0/25 (which is 192.168.24.0-192.168.24.127).  It would need to
start at .0 or .128.  If it started at .128 then it would extend to .255, in
which case there wouldn't be room for the last /26 subnet.  So, you re-order
them and use either a /26, /26, and /25, or /25, /26, and /26.

Remember, the whole classful/classless thing is routing protocol specific.
It has nothing to do with how hosts view IP addresses, or make routing
decisions (meaning whether to send it to a router or if the address is
local).  The source code for a TCP/IP stack may look something like this:

# Assuming addresses/masks are 32-bit numbers, not dotted decimal
# string representations of addresses/masks.

# $ip_src is the IP address of the outgoing interface on the host
# $ip_dst is the IP address of the destination
# $ip_mask is the subnet mask on the outgoing interface
# $ip_gateway is the IP address of the default gateway

# check to see if destination address is in same subnet as our interface
if (($ip_src  $ip_mask) == ($ip_dst  $ip_mask)) {
# send directly to destination, possibly arping out first
} else {
# send to default gateway, $ip_gateway,
# possibly arping out first
}

There would obviously be more logic in there as you may have more than one
route and not a single default gateway, but the important point is that it
does not matter about the classfulness or classlessness of the subnet
mask.  The host doesn't give a hoot.  As long as the source and the
destination both agree whether they are in the same subnet or not everything
works fine.  If they don't, you may need some ancient hack like proxy ARP,
but I don't know anyone in their right mind that would recommend
purposefully MIS-configuring a network so that it is required.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Steven Aiello [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 1:21 PM
To: [EMAIL PROTECTED]
Subject: Re: Please Help - CIDR - How the bits work What I figured out
[7:75087]

I was stuck on the idea that you could ONLY re subnet a remaining piece 
of a subnetwork.  And not apply a mask to the whole span of the total 
available network.  You can (unless I'm incorrect here) you just have to 
watch out for address over lap neer your subnetwork boundries.

I think I got it.

Man I love this news group!

Steve

Priscilla Oppenheimer wrote:

 Reimer, Fred wrote:
 
No offense, but this is CCNA material. 
 
 
 Do they still teach classful for CCNA, though? Perhaps the only thing
that's
 hard for him is that 192.168.24.0 has a mask of 255.255.255.0 in a
classful
 system. Moving the prefix over to the left of that classful boundary isn't
 something they teach for CCNA yet. (They will soon. The new Networking
 Academy books teach it from the start now.)
 
 Priscilla
 
 
If you are going for
your CCNP, then
you should already have your CCNA and know the answer.  But
anyway...

If you need a network with 400 hosts, the smallest subnet would
have a /23
mask.  So take the first part of your given network and assign
it to that:

192.168.24.0/23 (192.168.24.0-192.168.25.255)

Then you need one with 200 hosts.  Well, that could fit within
a /24 subnet,
so assign the next available to that:

192.168.26.0/24 (192.168.26.0-192.168.26.255)

Now you only have 192.168.27.0/24 left from the original
192.168.24.0/23
(which covered 192.168.24.0-192.168.27.255).  You need two
50's, so that
should fit within /26 subnets each.  Assign them:

192.168.27.0/26 (192.168.27.0-192.168.27.63)
192.168.27.64/26 (192.168.27.64-192.168.27.191)

Finally, you need three subnets that can have two hosts each,
which would
fit within /30 subnets.  So assign:


Re: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread annlee
I get the same results as Marko, but this may lay it out so you (and 
others) can see the development:

IP address = 32 bits
Network portion = 22 bits
Host portion = 10 bits
Total addresses for host portion = 2^10 = 1024

Start with 192.168.24.0/22
Focus on the 3rd octet (network_host): 000110_00

400 hosts requires 9 bits (2^8 = 256, 2^9 = 512)
and you will have some left in this block
divide the /22 into two blocks of 512 addresses each:
0001100_0 (.24/23) and 000_0 (.26/23)
use .24/23 for the 400-host network

200 hosts requires 8 bits (2^7 = 128, 2^8 = 256)
and there will be some left in this block, too
divide the .26/25 into 2 blocks of 256 addresses each:
0000 (.26/24) and 0001 (.27/24)
use .26/24 for the 200-host network

50 hosts requires 6 bits (2^5 = 32, 2^6 = 64)
and you will again have some leftovers
divide the .27/24 into 4 blocks of 64 addresses each
now looking at the 4th octet:
00_00 (.0/26), 01_00 (.64/26), 10_00 (.128/26), and 
11_00 (.192/26)
use the first two for the 50-host networks

and the rest is easy

My personal rule is to always start with the biggest blocks and work 
down from there.


HTH

Annlee

Steven Aiello wrote:

 I just started my routing class for my CCNP.  We are covering CIDR.  The 
 book is VEERY vague on how the bit patterns break down and are used.
 
 
 This was a problem posed in one of my CCNP labs
 
 I have network number
 
 192.168.24.0 / 22
 
 from this I need
 networks with
 
 400 hosts
 200 hosts
 50  hosts
 50  hosts
 2   hosts (for serial int - no ip un-numbered allowed )
 2   hosts
 2   hosts
 
 Also no NATing
 
 Thanks all I really could use the help
 
 Steve
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html


This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit
http://www.messagelabs.com





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75172t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


New Voice chat system for GroupStudy.com [7:75175]

2003-09-10 Thread Paul Borghese
We have installed a new voice chat system on GroupStudy.  Go to
chat.groupstudy.com for more information.  You will be able to make private
and moderated rooms for informal lectures or discussions.

 

Take care,

 

Paul Borghese




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75175t=75175
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Good network monitor prog. ??? [7:75081]

2003-09-10 Thread Dan Metheny
I implemented a solution of What's Up Gold with MRTG
integrated into it (it gives the same feel as Cisco
Works Network Node Manager).  WUG is about $800, and
MRTG is free.  It was a solid management solution for
my former company for about 4 years.


--- Nigel Taylor  wrote:
 Steven,
   There's a great little program on
 SourceForge that's growing
 in popularity and IMHO is going to become a great
 NMS tool.   It Integrates
 Syslog, Tacacs, RRDtool (Performance Graphs), Maps,
 Traps, TFTP,
 Autodiscovery, Sound Alerts, AAA, Modular and
 Extensible.It uses a
 database backend to store all the data as well (good
 for trend analysis).
 
 
 The documentation is pretty good and if you
 have/know how unix it's pretty
 easy to get up and running.  There is also a windoze
 port for the non-*nix
 folks.
 
 http://sourceforge.net/projects/jffnms/
 
 
 HTH
 
 Nigel
 
 
 
 
 -- Original Message -
 From: John Neiberger 
 To: 
 Sent: Tuesday, September 09, 2003 1:44 PM
 Subject: Re: Good network monitor prog. ???
 [7:75081]
 
 
   Steven Aiello 9/9/03 11:18:51 AM 
  Any one know of a good network monitor prog.?  It
 doesn't have to be
  free but not to expensive.  My budget is nill. 
 Any recomendations?
  
  Thanks,
  Steve
 
  Wouldn't it _have_ to be free if your budget is
 nil?  ;-)  You might want
 to
  check out MRTG and WhatsUp Gold:
 
  http://mrtg.hdl.com/mrtg.html
 
 
 http://www.ipswitch.com/products/WhatsUp/index.html
 
  HTH,
  John
  **Please support GroupStudy by purchasing from the
 GroupStudy Store:
  http://shop.groupstudy.com
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the
 GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75178t=75081
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: One PIX, two ISP's, two statics for hosts [7:74739]

2003-09-10 Thread Michael connelly
I meant different interfaces ...


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75177t=74739
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: One PIX, two ISP's, two statics for hosts [7:74739]

2003-09-10 Thread Michael connelly
Are both ISPs on the same PIX interface? If so there will be no problem with
the multiple STATIC commands.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75176t=74739
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Upgrading ROMMON on 2948G [7:75179]

2003-09-10 Thread Bill Clements
Has anyone ever upgraded the ROMMON on a 2948G. I am finding docs on
upgrading the IOS but not the Rom Monitor. Which I need to do before I can
put on the most recent IOS.

TIA

BC


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75179t=75179
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Frame Relay Switch [7:75019]

2003-09-10 Thread Wilson Huang
Hi, guys:

Why not consider 2523 i/o 2522 ?

In the hardware spec, Cisco 2523 is the same as 2522, all the difference is
2523 is Token-Ring based,
In eBay, you could find out that R2523 is cheaper than R2522,
For the cost issues, I would suggest the 2523.

If the cost/price is not the issues, maybe you could consider 4500/4700M+
with NP-4Ts,
4500/4700 has more horsepower than 2522/2523...

Wilson




- Original Message -
From: Devraj, Prem 
To: 
Sent: Tuesday, September 09, 2003 5:49 PM
Subject: RE: Frame Relay Switch [7:75019]


 Hi Larry,

 I want to connect 8 port for a LAB Scenario which I have. I was thinking
of
 buying a 2522, I was just wondering if anyone has any better ideas then
 buying this 2522

 Thanks
 prem

 -Original Message-
 From: Larry Letterman [mailto:[EMAIL PROTECTED]
 Sent: 2003 9 9 14:27
 To: [EMAIL PROTECTED]
 Subject: RE: Frame Relay Switch [7:75019]


 You can use the routers back to back with the v.35 cables..CCO has
 A write-up on back-back frame connections..or buy an 8 port serial
 Router...


 Larry Letterman
 Cisco Systems




 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Devraj, Prem
 Sent: Monday, September 08, 2003 8:09 PM
 To: [EMAIL PROTECTED]
 Subject: Frame Relay Switch [7:75019]


 Hi All,

 I am trying to setup a Lab for my CCIE. I do not have a Frame relay
 switch. And it seems to expensive to buy one.
 Does anyone have any ideas for a cheaper version of a Frame relay
 switch.

 My requirement is atleast 8 ports. A friend of mine told me it is
 possible to use a ordinary switch (I have tones of them) and use that as
 a Tunnel for Frame relay encapsulation.

 Any ideas or suggestions will be welcomed.

 Thanks
 prem


 
 ***
 Dresdner Kleinwort Wasserstein is the marketing name used
 globally to represent the investment banking activities of
 Dresdner Bank Group. In Japan, Dresdner Kleinwort Wasserstein
 is represented by Dresdner Kleinwort Wasserstein (Japan) Limited, Tokyo
 Branch or Dresdner Bank AG, Tokyo Branch. If you have received this
 e-mail in error or wish to read our e-mail disclaimer statement and
 monitoring policy, please refer to
 http://www.drkw.com/disc/email/ or contact the sender.
 
 ***
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html



***
 Dresdner Kleinwort Wasserstein is the marketing name used
 globally to represent the investment banking activities of
 Dresdner Bank Group. In Japan, Dresdner Kleinwort Wasserstein
 is represented by Dresdner Kleinwort Wasserstein (Japan) Limited,
 Tokyo Branch or Dresdner Bank AG, Tokyo Branch.
 If you have received this e-mail in error or wish to read our e-mail
 disclaimer statement and monitoring policy, please refer to
 http://www.drkw.com/disc/email/ or contact the sender.

***
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html


This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit
http://www.messagelabs.com





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75170t=75019
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


ATM switch configuration. [7:75137]

2003-09-10 Thread Rajesh Kumar
Hi all,

Can somebody point me to the location where I can copy paste the base 
ATM switch configuration to be used in the labs like Ipexpert?  Since I 
am not as familiar as FR switch, all I need is to have very basic 
connectivity from ATM router having 1 or 2 PVCs.

Thanks,
Rajesh




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75137t=75137
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
No reason to be sorry!  I'm all for vigorous discussion ;-)

No BGP in the NA because we are talking about SMALL to medium business.
Yes, they should know about how to connect up to the Internet, using a
default route, etc.  But you are not going to find that many ISPs, if any,
that are willing to setup a BGP peer with a store-front business with a 16
address space public network (or even granted they are given a /24 public
subnet).  If you find any, let me know!

That's why I say EGP for NP.  A medium to large business certainly may need
EGP expertise.

And I suppose that's a slight difference in the way people think about the
different certification levels.  When I say RIP, IGRP, EIGRP, OSPF should be
requirements for a NA I mean the candidates should be }experts{ in those
protocols.  Not just having a passing understanding, have read about it in a
book once, or used some study guide to rote-memorize answers to common
questions.

So, on the one hand I think the standards should be tougher, requiring
expert level knowledge for the IGP's, and on the other I don't think a NA
needs to know anything about EGP's.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Dom [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 6:59 PM
To: [EMAIL PROTECTED]; 'Reimer, Fred'; [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]

And one last point, No LAN is an island, why two IG(P) protocols and no
EG(P) protocol? 

A NA should at least a some understanding of how to connect to the
outside world - when to use BGP and when not to.

Sorry Fred, not having a go at you personally, but these are points we
all need to think about.

Best regards,

Dom Stocqueler
SysDom Technologies
Visit our website - www.sysdom.org


-Original Message-
From: Dom [mailto:[EMAIL PROTECTED] 
Sent: 09 September 2003 23:37
To: 'Reimer, Fred'; '[EMAIL PROTECTED]'
Subject: RE: Please Help - CIDR - How the bits work [7:75050]


Oh, and while I'm on the subject - why EIGRP? This is a proprietary
Cisco Protocol. OK, I believe that Juniper may have implemented it, but
to the best of my knowledge no one else has.

Best regards,

Dom Stocqueler
SysDom Technologies
Visit our website - www.sysdom.org

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Reimer, Fred
Sent: 09 September 2003 22:03
To: [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]


I guess my expectation and Cisco's, or at least their current
expectations as listed on their web site, don't match then.  By my
definition a beginner should know about CIDR, EIGRP, and OSPF.  It's not
like they are inherently difficult to understand.  People tend to make
it sound like rocket science or voodoo magic.  It's just a routing
protocol folks.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information
which may be legally privileged. It is intended only for the named
recipient(s). If an addressing or transmission error has misdirected the
email, please notify the author by replying to this message. If you are
not the named recipient, you are not authorized to use, disclose,
distribute, copy, print or rely on this email, and should immediately
delete it from your computer.


-Original Message-
From: Chuck Whose Road is Ever Shorter [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 3:56 PM
To: [EMAIL PROTECTED]
Subject: Re: Please Help - CIDR - How the bits work [7:75050]

Reimer, Fred  wrote in message
news:[EMAIL PROTECTED]
 May be I had advanced access to the new NA material then ;-)  In my
 view,
a
 NA should be able to handle basic RIP, OSPF, EIGRP in a small to
 medium sized network.  That would certainly include CIDR.  A NP, IMO, 
 would be
for
 advanced RIP, OSPF, EIGRP, and basic BGP, like for configuring a
 mid-large sized network for connection to the Internet including 
 minimal BGP.  IE, IMO, is for ISP engineers that have to deal with 
 extensive IS-IS, BGP
using
 all options, etc, and large to huge (global) networks.

 May be I'm just expecting too much, but if you don't understand CIDR
 you shouldn't be allowed anywhere near a router, let alone be 
 responsible for configuring them.


with all due respect, I disagree. CCNA is 

RE: IPSEC with STATIC NAT [7:74971]

2003-09-10 Thread Reimer, Fred
Perhaps there is some confusion.  NAT Traversal is required if there is any
NAT in between the endpoints of the IPsec connection.  It has nothing to do
with NAT of devices behind a router that has IPsec configured.  Or maybe I'm
mis-interpreting.  If so, correct me!

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: bk [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 7:26 PM
To: [EMAIL PROTECTED]
Subject: Re: IPSEC with STATIC NAT [7:74971]

I just ran into this.  I have a 2610 that is terminating a tunnel 
between itself and a pix... but I also have three email servers behind 
this router that need to be statically nat'd.

Here is the config that this guy from cisco (wicked smart) helped me 
figure out:


hostname Phoenix_Colo
crypto isakmp policy 10
  hash md5
  authentication pre-share
crypto isakmp key *** address 12.x.x.132
!
crypto ipsec transform-set ch2stl esp-3des esp-md5-hmac
!
crypto map nolan 10 ipsec-isakmp
  set peer 12.x.x.132
  set transform-set ch2stl
  match address vpn_tunnel

interface Loopback0
  ip address 1.1.1.1 255.255.255.252
!
interface Ethernet0/0
  ip address 209.x.x.6 255.255.255.252
  ip nat outside
  half-duplex
  crypto map nolan
!
interface Ethernet1/0
  ip address 172.16.254.254 255.255.255.0
  ip nat inside
  ip policy route-map static_servers_bypass_NAT

!
ip nat inside source static 172.16.254.34 209.145.140.180
ip nat inside source static 172.16.254.35 209.145.140.181
ip nat inside source static 172.16.254.38 209.145.140.182
!
ip access-list extended vpn_tunnel
  permit ip 172.16.254.0 0.0.0.255 192.168.0.0 0.0.255.255
access-list 120 permit ip 172.16.254.0 0.0.0.255 192.168.0.0 0.0.255.255
!
route-map static_servers_bypass_NAT permit 10
  match ip address 120
  set ip next-hop 1.1.1.2
!

Phoenix_Colo#

Reimer, Fred wrote:
 You do need NAT traversal if you only change the IP addresses.
 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050
 
 
 NOTICE; This email contains confidential or proprietary information which
 may be legally privileged. It is intended only for the named recipient(s).
 If an addressing or transmission error has misdirected the email, please
 notify the author by replying to this message. If you are not the named
 recipient, you are not authorized to use, disclose, distribute, copy,
print
 or rely on this email, and should immediately delete it from your
computer.
 
 
 -Original Message-
 From: Raj [mailto:[EMAIL PROTECTED] 
 Sent: Monday, September 08, 2003 11:14 AM
 To: [EMAIL PROTECTED]
 Subject: IPSEC with STATIC NAT [7:74971]
 
 Hey There
 
 I am working on a solution for IPsec using vpn concentrator and VPN
hardware
 clients(PIX). The PIX outside has a public address and the only NAT taking
 place is at the edge router and the vpn concentrator sits behind this
 router. The router does a static public-to-private IP nat and i dont think
I
 would need NAT traversal since it's not changing any ports..only changing
 IP's.
 
 Please let me know if there is anything I would need to do on the edge
 router doing the static NAT. I've heard that for STATIC nat to work with
 IPSEC, you need to adhere to certain standards.
 
 Thx to everybody in advance.
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75182t=74971
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
Yes!  Even I would not feel comfortable configuring BGP in a production
environment yet, and although I don't have my CCNP yet, I did pass the
routing and switching tests.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 7:32 PM
To: [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]

Dom wrote:
 
 And one last point, No LAN is an island, why two IG(P)
 protocols and no
 EG(P) protocol? 
 
 A NA should at least a some understanding of how to connect to
 the
 outside world - when to use BGP and when not to.

Default routing. Wouldn't we all be better off if CCNAs would stay away from
BGP?? :-)

Priscilla


 
 Sorry Fred, not having a go at you personally, but these are
 points we
 all need to think about.
 
 Best regards,
 
 Dom Stocqueler
 SysDom Technologies
 Visit our website - www.sysdom.org
 
 
 -Original Message-
 From: Dom [mailto:[EMAIL PROTECTED] 
 Sent: 09 September 2003 23:37
 To: 'Reimer, Fred'; '[EMAIL PROTECTED]'
 Subject: RE: Please Help - CIDR - How the bits work [7:75050]
 
 
 Oh, and while I'm on the subject - why EIGRP? This is a
 proprietary
 Cisco Protocol. OK, I believe that Juniper may have implemented
 it, but
 to the best of my knowledge no one else has.
 
 Best regards,
 
 Dom Stocqueler
 SysDom Technologies
 Visit our website - www.sysdom.org
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
 Behalf Of
 Reimer, Fred
 Sent: 09 September 2003 22:03
 To: [EMAIL PROTECTED]
 Subject: RE: Please Help - CIDR - How the bits work [7:75050]
 
 
 I guess my expectation and Cisco's, or at least their current
 expectations as listed on their web site, don't match then.  By
 my
 definition a beginner should know about CIDR, EIGRP, and OSPF. 
 It's not
 like they are inherently difficult to understand.  People tend
 to make
 it sound like rocket science or voodoo magic.  It's just a
 routing
 protocol folks.
 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA
 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050
 
 
 NOTICE; This email contains confidential or proprietary
 information
 which may be legally privileged. It is intended only for the
 named
 recipient(s). If an addressing or transmission error has
 misdirected the
 email, please notify the author by replying to this message. If
 you are
 not the named recipient, you are not authorized to use,
 disclose,
 distribute, copy, print or rely on this email, and should
 immediately
 delete it from your computer.
 
 
 -Original Message-
 From: Chuck Whose Road is Ever Shorter
 [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, September 09, 2003 3:56 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Please Help - CIDR - How the bits work [7:75050]
 
 Reimer, Fred  wrote in message
 news:[EMAIL PROTECTED]
  May be I had advanced access to the new NA material then ;-) 
 In my
  view,
 a
  NA should be able to handle basic RIP, OSPF, EIGRP in a small
 to
  medium sized network.  That would certainly include CIDR.  A
 NP, IMO,
  would be
 for
  advanced RIP, OSPF, EIGRP, and basic BGP, like for
 configuring a
  mid-large sized network for connection to the Internet
 including
  minimal BGP.  IE, IMO, is for ISP engineers that have to deal
 with
  extensive IS-IS, BGP
 using
  all options, etc, and large to huge (global) networks.
 
  May be I'm just expecting too much, but if you don't
 understand CIDR
  you shouldn't be allowed anywhere near a router, let alone be 
  responsible for configuring them.
 
 
 with all due respect, I disagree. CCNA is promoted by Cisco as
 being
 someone capable of  designing and configuring a small network.
 
 http://www.cisco.com/en/US/learning/le3/le2/le0/le9/learning_certificati
 on_t
 ype_home.html
 
 The CCNA certification (Cisco Certified Network Associate)
 indicates a
 foundation in and apprentice knowledge of networking. CCNA
 certified
 professionals can install, configure, and operate LAN, WAN, and
 dial
 access services for small networks (100 nodes or fewer),
 including but
 not limited to use of these protocols: IP, IGRP, Serial, Frame
 Relay, IP
 RIP, VLANs, RIP, Ethernet, Access Lists.
 
 my experience has been that small nets have less if any need
 for CIDR
 knowledge or expertise.
 
 Cisco has over the past couple of years been slowly 

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
True.  The primary reasons would be that Cisco is the market leader,
especially in SMB, and 2nd would be that while proprietary, the workings of
the protocol certainly are not. It is well-documented.


Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Dom [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 6:37 PM
To: 'Reimer, Fred'; [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]

Oh, and while I'm on the subject - why EIGRP? This is a proprietary
Cisco Protocol. OK, I believe that Juniper may have implemented it, but
to the best of my knowledge no one else has.

Best regards,

Dom Stocqueler
SysDom Technologies
Visit our website - www.sysdom.org

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Reimer, Fred
Sent: 09 September 2003 22:03
To: [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]


I guess my expectation and Cisco's, or at least their current
expectations as listed on their web site, don't match then.  By my
definition a beginner should know about CIDR, EIGRP, and OSPF.  It's not
like they are inherently difficult to understand.  People tend to make
it sound like rocket science or voodoo magic.  It's just a routing
protocol folks.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information
which may be legally privileged. It is intended only for the named
recipient(s). If an addressing or transmission error has misdirected the
email, please notify the author by replying to this message. If you are
not the named recipient, you are not authorized to use, disclose,
distribute, copy, print or rely on this email, and should immediately
delete it from your computer.


-Original Message-
From: Chuck Whose Road is Ever Shorter [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 3:56 PM
To: [EMAIL PROTECTED]
Subject: Re: Please Help - CIDR - How the bits work [7:75050]

Reimer, Fred  wrote in message
news:[EMAIL PROTECTED]
 May be I had advanced access to the new NA material then ;-)  In my 
 view,
a
 NA should be able to handle basic RIP, OSPF, EIGRP in a small to 
 medium sized network.  That would certainly include CIDR.  A NP, IMO, 
 would be
for
 advanced RIP, OSPF, EIGRP, and basic BGP, like for configuring a 
 mid-large sized network for connection to the Internet including 
 minimal BGP.  IE, IMO, is for ISP engineers that have to deal with 
 extensive IS-IS, BGP
using
 all options, etc, and large to huge (global) networks.

 May be I'm just expecting too much, but if you don't understand CIDR 
 you shouldn't be allowed anywhere near a router, let alone be 
 responsible for configuring them.


with all due respect, I disagree. CCNA is promoted by Cisco as being
someone capable of  designing and configuring a small network.

http://www.cisco.com/en/US/learning/le3/le2/le0/le9/learning_certificati
on_t
ype_home.html

The CCNA certification (Cisco Certified Network Associate) indicates a
foundation in and apprentice knowledge of networking. CCNA certified
professionals can install, configure, and operate LAN, WAN, and dial
access services for small networks (100 nodes or fewer), including but
not limited to use of these protocols: IP, IGRP, Serial, Frame Relay, IP
RIP, VLANs, RIP, Ethernet, Access Lists.

my experience has been that small nets have less if any need for CIDR
knowledge or expertise.

Cisco has over the past couple of years been slowly upping the ante, and
I wish Cisco would get clear as to what skill sets are appropriate at
what certification level. Cisco tends to be all over the map on this,
and has been the netire time I have been playing at certification. But
in general, I believe the idea is that CCxA is beginner, CCxP is
intermediate, and CCIE is high level.

as with all things certification related, YMMV. I've known CCNA's who
manage large networks, and I've known CCIE's whose knowledge of certain
specific areas was less than expert. As can be expected, depending on
experience, job, place of employment, years in the field, etc.

Chuck



 Fred Reimer - CCNA


 Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


 NOTICE; This email contains 

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
Yes, but the CCIE labs are supposed to be for ISP level engineers, who
almost certainly won't be using default routes most of the time.  It should
be assumed that by the time you get to the CCIE level you have much
experience in default routing.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Howard C. Berkowitz [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 11:37 PM
To: [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]

At 11:32 PM + 9/9/03, Priscilla Oppenheimer wrote:
Dom wrote:

  And one last point, No LAN is an island, why two IG(P)
  protocols and no
  EG(P) protocol?

  A NA should at least a some understanding of how to connect to
  the
  outside world - when to use BGP and when not to.

Default routing. Wouldn't we all be better off if CCNAs would stay away
from
BGP?? :-)

Priscilla

When fingerpointing in quite a number of external connectivity 
problems, I have often found de fault is due to the lack of default. 
Cisco hardly helps this by discriminating against static and default 
routes in the CCIE lab.
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75184t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Cisco PVST plus [7:75158]

2003-09-10 Thread Reimer, Fred
That is correct.  Or at least it can only support one VLAN in common with
the Cisco gear.  It can have all the VLANs it wants as long as it does not
have dual links to the Cisco gear, creating a loop which will not be blocked
with Spanning Tree, because it doesn't support PVST+.

BTW - what are Hwa Wei switches?

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Han Chuan Alex Ang [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 10, 2003 12:20 AM
To: [EMAIL PROTECTED]
Subject: Cisco PVST plus [7:75158]

hi, I am wondering what is the implication if I have a network whereby Cisco
Per Vlan Spanning Tree is implemented with PVST plus and I plug in a
external switch such as the Hwa Wei switch that doesn't seem to support
PVST. does it mean that I could only have one vlan on the hwa wei switches
itself. thank
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75186t=75158
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
I've always liked hex myself.  A hex mask of FF.FF.F8.00 can be written as
F800 and still mean the same thing.  You obviously can't do that with
255.255.128.0 (255.255.128.0 != 2,552,551,280).  While binary works the same
way as hex in this manner, it is much to long for my tastes.  Plus, hex is
used a lot in programming languages when using values in bitmasks, so I'm
more familiar with it.  Also, there are only 5 hex numbers that you need to
memorize for masks, F 0 8 C and E.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Howard C. Berkowitz [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2003 11:32 PM
To: [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]

At 10:36 PM + 9/9/03, Dom wrote:
Fred, check out the archives for Howard's piece on the difference
between 'Rocket Science' and 'BGP' when at NASA.

Best regards,

Dom Stocqueler
SysDom Technologies
Visit our website - www.sysdom.org


Seriously, I've fought a battle for many years with Cisco Training. I 
believe the fundamental problem they _create_ is insisting on 
teaching classful and dotted decimal notation first.

When I've given private classes -- ICRC, the older RSC, etc. -- I 
always began discussing addressing in binary, got people used to the 
idea of prefix length, then introduced dotted decimal as a means of 
representation, and then introduced classful addressing as a historic 
concept.  Students were always able to go right into classless 
routing without any trouble.

There are some nice examples in RFC 1878.  RFCs 1517-1520 give the 
main background, although there are some earlier papers on 
supernetting.

With all mercenary disclaimers, I also recommend my book, _Designing 
Addressing Architectures for Routing and Switching_, and my recent 
IPv4/IPv6 tutorial on Certification Zone.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75185t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
Oh, it's just getting fun.  It's not like we are flaming anyone.  We are
just expressing our opinions! ;-)

I'd agree with you.  No BGP for NA's.  And as far as who I'd want touching
my Internet facing router, it would depend on what type of business it was.
If it was a small business, where all they need is a default router that is
propagated, I sure as heck would think that an NA would be able to handle
that.  If it was a large business with say a semi-extensive private WAN with
multiple entries into the Internet, I'd definitely prefer at least a NP.  If
it was a company with dual ISP routing that incorporated BGP, then a NP
might be able to handle it, but I would definitely prefer an IE.  For ISP's,
anyone that would even think of touching the backbone routers I would hope
would be IE level, if not certified.

It's the experience that counts to me, not necessarily the cert level.
Heck, I only have my CCNA so far, but I'd hazard to guess that I have more
practical experience than a certain double CCIE that I know.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Stephen Skinner [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 10, 2003 6:33 AM
To: [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]

BLIMEY !!!

this is getting a little heated L+G`s .

i personally believe that when i got my CCNA if i had been asked to 
configure BGP (even Basic) on an internet connecting router for a 
small-medium sized company...i would have run away screaming...

Ask yourselfs this there are three grade`s of Certifications at cisco

Associate
Profesisional
Expert

from a company manager`s point-of-view (no offence fred)

Whom would you prefer be touching your internet facing router ...

yes i am aware that to most of us they don`t mean tuppence (i.e howard/pris)
but the plan truth is people NOT in the know rely on the badges


From: Howard C. Berkowitz 
Reply-To: Howard C. Berkowitz 
To: [EMAIL PROTECTED]
Subject: RE: Please Help - CIDR - How the bits work [7:75050]
Date: Wed, 10 Sep 2003 03:36:57 GMT

At 11:32 PM + 9/9/03, Priscilla Oppenheimer wrote:
 Dom wrote:
 
   And one last point, No LAN is an island, why two IG(P)
   protocols and no
   EG(P) protocol?
 
   A NA should at least a some understanding of how to connect to
   the
   outside world - when to use BGP and when not to.
 
 Default routing. Wouldn't we all be better off if CCNAs would stay away 
from
 BGP?? :-)
 
 Priscilla

When fingerpointing in quite a number of external connectivity
problems, I have often found de fault is due to the lack of default.
Cisco hardly helps this by discriminating against static and default
routes in the CCIE lab.
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: 
http://www.groupstudy.com/list/cisco.html

_
Tired of 56k? Get a FREE BT Broadband connection 
http://www.msn.co.uk/specials/btbroadband
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75188t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Basic IP CEF question (again) [7:75161]

2003-09-10 Thread Zsombor Papp
Well, the accurate answer is that those are the packets that the router
wants to receive (as opposed to switch), but I didn't think that this would
be a lot of help. :)

You do recognize the common theme across own IP address and broadcast of
local net, don't you?

Thanks,

Zsombor

 My comments:
 
 Hello Zsombor, I can see IP addresses that doesn't belong to
 the router, for example:
 Router#sh ip cef | include 10.224.0.51
 10.224.0.51/32  receive
 
 But the IP address of the router in the subnet is:
 
  10.224.0.49
 
 The subnet is:
 
  10.224.0.48/30
 
 So the IP address 10.224.0.51 is the broadcast address of the 
 router in the network, but not the IP owned by the router.
 What do you think??
 Thx a lot.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75190t=75161
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Howard C. Berkowitz
At 11:40 AM -0400 9/10/03, Reimer, Fred wrote:
I've always liked hex myself.  A hex mask of FF.FF.F8.00 can be written as
F800 and still mean the same thing.  You obviously can't do that with
255.255.128.0 (255.255.128.0 != 2,552,551,280).  While binary works the same
way as hex in this manner, it is much to long for my tastes.  Plus, hex is
used a lot in programming languages when using values in bitmasks, so I'm
more familiar with it.  Also, there are only 5 hex numbers that you need to
memorize for masks, F 0 8 C and E.

Fred Reimer - CCNA

I can live very easily with hex or binary.  The problem is dotted decimal.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75194t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Howard C. Berkowitz
At 11:34 AM -0400 9/10/03, Reimer, Fred wrote:
Yes, but the CCIE labs are supposed to be for ISP level engineers, who
almost certainly won't be using default routes most of the time.  It should
be assumed that by the time you get to the CCIE level you have much
experience in default routing.


First, ISP level engineers are going to configure default routes for 
customers, and, indeed, there often are default routes in POPs, or in 
smaller ISPs.

Second, the combination of static default routes with multiple 
administrative distances can get quite complex.

Third, I am more bothered by the lack of static routes than defaults. 
Complex static routes, with alternatives, are common for traffic 
engineering. Blackhole static routes are extensively used.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75193t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


DLSW+ filter [7:75192]

2003-09-10 Thread Andres Botero
Hi, 
 
I need a little information for a DSLW+ configuration. I have configured two
DLSW+ peers (router A and Router B), to connect two LANs (LAN A conneted to
router A and LAN B connected to router B). The transport is TCP/IP. I need
to configure a filter in router A which will permit pass to WAN only the
packets with a particular destination NetBIOS name (a particular host in LAN
B) from hosts in LAN A.
 
I understand that I can use a netbios access-list but just to filter
particular local hosts by Netbios name, but not by destination name. I tried
to use access-expression but I think that it does not work with ethernet
interfaces.
 
Could you give me an advice?
 
Thanks in advance
 
Andris Cordoba 



-
Yahoo! Messenger
Nueva versioacute;n: Super Webcam, voz, caritas animadas, y maacute;s
#161;Gratis!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75192t=75192
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Studying Switching [7:75030]

2003-09-10 Thread Priscilla Oppenheimer
Tim Champion wrote:
 
 All the info relating to this book is good and I'm going to buy
 on the back
 of these reviews but... what makes people write switching
 related poems?

Because if we don't laugh at ourselves then we have to cry! :-) You should
have heard the explanations of a brouter back in the 80s. You think people
are confused now, but they were even more confused back then! And now we
have Layer 3 switches!

Priscilla


 Nakul Malik  wrote in message
 news:[EMAIL PROTECTED]
  Hi all,
  I started off studying routing and found it to be a topic
 that interested
 me
  a lot. I just couldn't get enough of halabi Doyle and the
 rest. I studied
 a
  lot, practiced a lot and was thrilled when I passed the exam
 in beta.
 
  Next I started studying for switching. That didn't turn out
 as well as I
  thought it would. I couldn't just work up the same level of
 interest. I
 have
  been analyzing the reasons and have come up with the
 following:
  1. I've never worked with switches much, so I don't know too
 much about
  them, as opposed to routers.
  2. Study materials.
 
  I've been wondering, has anyone else faced similar problems
 in their quest
  for CCNP.
 
  Also, could someone recommend some good materials/resources
 for switching
  other than the official Cisco book?
 
  Any/all answers would be appreciated.
  Thanks.
  -N
 
  --
  Nakul Malik
 
  H-342
  New Rajendra Nagar
  New Delhi - 110060
 
  Mobile: +91-9811424477
  Ph: +91-11- 2582 3488
+91-11- 2585 0155
  Fax:: +91-11- 2575 2904
 
  [EMAIL PROTECTED]
  **Please support GroupStudy by purchasing from the GroupStudy
 Store:
  http://shop.groupstudy.com
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75195t=75030
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Exam #642-891 BSCI/BCMSN Composite Exam [7:74915]

2003-09-10 Thread Yinka Ntia
Paul,

What would you say are the new additions in this exam compared to the
recently retired BSCI  BCMSN exams.

What are the extra topics one has to focus on?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75196t=74915
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


OT: Anyone use Solarwinds Orion? [7:75198]

2003-09-10 Thread John Neiberger
I'm curious if anyone here uses or has used the Orion network monitoring
software from Solarwinds. We currently use Network Node Manager but since we
use it primarily for fault reporting and statistics gathering I'm toying
with the idea of using a product more tailored to our needs.

If you've used it before I'm curious about how it performed, how easy was it
to understand and configure, was it reliable, etc. It looks like a pretty
nifty product from what I can tell from their online demo, but looks can be
deceiving.

Thanks,
John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75198t=75198
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Priscilla Oppenheimer
Reimer, Fred wrote:
 
 I've always liked hex myself.  A hex mask of FF.FF.F8.00 can be
 written as
 F800 and still mean the same thing.  You obviously can't do
 that with
 255.255.128.0 (255.255.128.0 != 2,552,551,280).  While binary
 works the same
 way as hex in this manner, it is much to long for my tastes. 
 Plus, hex is
 used a lot in programming languages when using values in
 bitmasks, so I'm
 more familiar with it.  Also, there are only 5 hex numbers that
 you need to
 memorize for masks, F 0 8 C and E.

And binary is going to be pretty hard to deal with when we get to 128-bit
IPv6 addresses!?

Dotted decimal notation is really an awful thing. I agree with Howard that
it confuses people and should be taught after the binary representation of
addresses (and maybe hex?) Not only does dotted decimal notation confuse
people with addresses, but it gets them thinking 8 bits at a time, when
programming languages, protocol analyzers, debuggers, etc. think 4 bits at a
time.

Priscilla

 
 Fred Reimer - CCNA
 
 
 Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA
 30338
 Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050
 
 
 NOTICE; This email contains confidential or proprietary
 information which
 may be legally privileged. It is intended only for the named
 recipient(s).
 If an addressing or transmission error has misdirected the
 email, please
 notify the author by replying to this message. If you are not
 the named
 recipient, you are not authorized to use, disclose, distribute,
 copy, print
 or rely on this email, and should immediately delete it from
 your computer.
 
 
 -Original Message-
 From: Howard C. Berkowitz [mailto:[EMAIL PROTECTED] 
 Sent: Tuesday, September 09, 2003 11:32 PM
 To: [EMAIL PROTECTED]
 Subject: RE: Please Help - CIDR - How the bits work [7:75050]
 
 At 10:36 PM + 9/9/03, Dom wrote:
 Fred, check out the archives for Howard's piece on the
 difference
 between 'Rocket Science' and 'BGP' when at NASA.
 
 Best regards,
 
 Dom Stocqueler
 SysDom Technologies
 Visit our website - www.sysdom.org
 
 
 Seriously, I've fought a battle for many years with Cisco
 Training. I
 believe the fundamental problem they _create_ is insisting on 
 teaching classful and dotted decimal notation first.
 
 When I've given private classes -- ICRC, the older RSC, etc. --
 I
 always began discussing addressing in binary, got people used
 to the
 idea of prefix length, then introduced dotted decimal as a
 means of
 representation, and then introduced classful addressing as a
 historic
 concept.  Students were always able to go right into classless 
 routing without any trouble.
 
 There are some nice examples in RFC 1878.  RFCs 1517-1520 give
 the
 main background, although there are some earlier papers on 
 supernetting.
 
 With all mercenary disclaimers, I also recommend my book,
 _Designing
 Addressing Architectures for Routing and Switching_, and my
 recent
 IPv4/IPv6 tutorial on Certification Zone.
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75199t=75050
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


  1   2   3   4   5   6   7   8   9   10   >