from:". ."

My certificate says the passing score was 776 and I sneaked in with 815. How
Cisco come up with the numbers is a subject all of its own.

Cheers,
Steve Wilson CCNP CCDA
Network Engineer

-Original Message-
From: Caxton The [mailto:[EMAIL PROTECTED] 
Sent: 03 September 2003 03:18
To: [EMAIL PROTECTED]
Subject: 640-604 Passing Score? [7:74698]

Does anybody know the passing score for the 640-604 switching exam?
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74768t=74698
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

6509 Power Supply Swap -- No Swap? [7:74695]

2003-09-04 Thread COULOMBE, TROY

Has anyone successfully HOT-SWAP-upgraded power supplies on a 6509s.

In other words:::

Pwr-A is 1300 watts Pwr-B is 1300 watts

Pull out Pwr-A; 

XXX Pwr-B is 1300 watts

replace it w/ a 2500 watt pwr supply; so you now have:::

Pwr-A is 2500 watts Pwr-B is 1300 watts

Now pull out Pwr-B; 

Pwr-A is 2500 watts XXX

replace it w/ a 2500 watt pwr supply; so you now have:::


Pwr-A is 2500 watts Pwr-B is 2500 watts


And all without any downtime

Thanks
TroyC
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74767t=74695
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: DSL over Dry Copper [7:74117]

2003-09-04 Thread Dain Deutschman

Thanks everyone for the great comments and replies. This was all very
helpfull.

Dain
Brad Dodds  wrote in message
news:[EMAIL PROTECTED]
 Where I work, we have 5 dry pair circuits to customers (out of 1300).
 We provide the signaling on the lines with sets of Campus brand pair gain
 units at the sites and 14 card chassis style pair gain unit at our POP.
 They are much less expensive ($18 per month vs. $100 for business class
DSL)
 but I can say the savings of $80 dollars or so a month is NOT WORTH IT for
 an organization that needs 24 X 7 availability of the circuit.
 The telco only garuntees that the wire won't have any opens or shorts,
they
 make no promise of the medium having low noise ratio on the line.
 These legacy circuits have been very much a problem when it rains, gets
hot
 or anytime the weather changes, but our customers are spoiled by the
 inexpensive price and won't upgrade to another, more reliable delivery.
 The telco seems very aware of the low/no profit margin on these circuits
and
 are generally not very motivated to spend much time on them when there is
a
 problem.
 I strongly discourage service providers from deploying this type of
 technology, however, we are getting ready to test a newer type of magic
 box (called Storm Port by vendor-I think) which is supposedly able to
 deliver 6Meg across dry pair at much greater distances.  We are very
 skeptical of the vendors claims, but one of our customers which the vendor
 pitched wants to try it.
 I will report back to the group on how it works out.

 Chuck Whose Road is Ever Shorter  wrote in
 message news:[EMAIL PROTECTED]
  Priscilla Oppenheimer  wrote in message
  news:[EMAIL PROTECTED]
   Uh, what is dry copper? Is it analogous to dark fiber?
 
 
  as a matter of fact, yes.
 
  copper from your friendly telco with no dial tone. a local loop with no
  signaling equipoment attached. alarm companies use it extensively, place
  their own signal on it, and thwart the burglars
 
  I have heard tell of folks using dry pair to create private point to
point
  DSL. I don't personally know anyone who has done so.
 
  HTH
 
  
   Thanks
  
   Priscilla
  
   Chuck Whose Road is Ever Shorte wrote:
   
Dain Deutschman  wrote in message
news:[EMAIL PROTECTED]
 Hi All,

 Does anyone know if Cisco makes a product similar to the
Pairgain Campus
HRS
 or Celsian G250 LAN Extenders? I want to create a dsl
connection over dry
 copper between two sites. Cisco reseller helpline was mildly
helpfull.
What
 are some of you using for this type of situation?
   
   
I have heard it said that all you need to do is connect a
couple of 827's
and you are done. I don't know the specifics.. :-
   
http://www.pbs.org/cringely/pulpit/pulpit20010823.html
   
http://www.isp-planet.com/technology/homebrew_dsl.html
   
one place I saw said to check out what alarm companies order -
they use dry
copper.
   
or you can use the Long Reach ethernet product from Cisco at
each end. I'm
sure there are competitors.
   
   

 Thanks,

 --
 Dain Deutschman
 ccnp, css-1, cnss infosec, mcp, cna
 Data Communications Manager
 New Star Sales and Service, Inc.
 **Please support GroupStudy by purchasing from the GroupStudy
Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
   **Please support GroupStudy by purchasing from the GroupStudy Store:
   http://shop.groupstudy.com
   FAQ, list archives, and subscription info:
  http://www.groupstudy.com/list/cisco.html
  **Please support GroupStudy by purchasing from the GroupStudy Store:
  http://shop.groupstudy.com
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74765t=74117
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: ospf type 5 lsas [7:74699]

2003-09-04 Thread Thomas Salmen

someone requested the configs; i'm sorry, i'm not sure who.

and the links are numbered, btw.


7500:

interface atm 0/1/0.101
 ip address 192.168.10.1 255.255.255.252
 
!

!
router ospf 120
 network 192.168.10.0 0.0.0.3 area 0
 network 10.64.0.0 0.0.0.255 area 14
 
!



2500:

interface ethernet 0
 ip address 172.16.10.5 255.255.255.252
!
interface serial 0/0.101 point-to-point
 ip address 192.168.10.2 255.255.255.252
 
!

!
router ospf 120
 network 192.168.10.0 0.0.0.3 area 0
 network 172.16.10.4 0.0.0.3 area 15
 area 15 nssa no-summary
!

the only other router in area 15 is at 172.16.10.6, and is configured as an
nssa asbr.

the 7500 has all the type 5 lsas in its database, but none entered in its
route table.

eg:

7500#show ip ospf database external  200.88.200.220

OSPF Router with ID (200.55.10.244) (Process ID 20)

Type-5 AS External Link States

  LS age: 2576
  Options: (No TOS-capability, DC)
  LS Type: AS External Link
  Link State ID: 200.88.200.220 (External Network Number )
  Advertising Router: 200.27.100.154
  LS Seq Number: 8008
  Checksum: 0x1A8B
  Length: 36
  Network Mask: /32
Metric Type: 2 (Larger than any link state path)
TOS: 0
Metric: 2
Forward Address: 0.0.0.0
External Route Tag: 3221225472

7500#show ip route | include 200.88.200.220

7500#




thomas



- Original Message -
From: Thomas Salmen
To: [EMAIL PROTECTED]
Sent: Tuesday, September 02, 2003 3:43 PM
Subject: ospf type 5 lsas


i have a problem with ospf that someone may be able to help with.

i have a 2500 connected to a 7500 via a frame (2500 end) to atm (7500 end)
link. the 2500 is an abr for area 15 (serial area 0, ethernet area 15); the
7500 is an abr for area 14 (atm area 0, other interfaces area 14).

area 15 is configured as an nssa, as it is attached to another router which
is
redistributing static routes. area 14 is a standard ospf area, not stub or
nssa.

the 2500 (abr) is recieving type 7 lsas and converting them to type 5 and
flooding them into area 0, no problems. the 7500 has them in its lsa
database.
the problem is that none of the type 5 lsas are being entered in the 7500s
route table.

i have run through everything i can think of, and i'm a bit stuck. the
forwarding address of each lsa is 0.0.0.0. the network type is correct (ptp).
the 7500 can reach the abr and the asbr. subnet masks are all correct. i'm
not
sure what to look for next...

anyone?

thomas
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74766t=74699
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: PIX PDM [7:74758]

2003-09-04 Thread Jason Viera

Our security group is recommending not to use PDM to
configure our Pix firewalls.  They did not give any
reason for their recommendation.  Does anyone know why
PDM should not be used?

From what I understand there are a few commands that can't be used from
the PDM (they require the use of the CLI), also using a web-based
configuration tool seems to undermine the very premise of network security,
if you think about it how many companies use the other web-based software
(for configuration) that Cisco has made available. Also , if you look at the
software that Cisco has produced in the past it hasn't been very reliable
(due to the fact that it is freely available and gives no ROI) an example
would be their TFTP server software or the Cisco Configmaker. From what I
understand the PDM was made available to compete with the other vendors web
based configuration software, obviously there is a demand from the customers
for such software(So it could be possible that Cisco is actually making am
attempt on this one), but whether or not PDM is just a marketing tool or a
viable configuration solution I don't know. What is the reason that you are
considering using the PDM software in the first place???
HTH,  Jason

Gary Leong  wrote in message
news:[EMAIL PROTECTED]
 Our security group is recommending not to use PDM to
 configure our Pix firewalls.  They did not give any
 reason for their recommendation.  Does anyone know why
 PDM should not be used?

 __
 Do you Yahoo!?
 Yahoo! SiteBuilder - Free, easy-to-use web site design software
 http://sitebuilder.yahoo.com
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74769t=74758
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Ip snooping in cisco routers [7:74708]

2003-09-04 Thread ramesh_cisco

friends ,


 


Any one can give me clue on how to configure ip snooping in cisco routers???


 


thanks


ramesh 


 
Get Your Private, Free E-mail from Indiatimes at  http://email.indiatimes.com
Buy The Best In BOOKS at http://www.bestsellers.indiatimes.com
Bid for Air Tickets on Air Sahara Flights at Prices Lower Than Before. Just
log on to http://airsahara.indiatimes.com and Bid Now !
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74774t=74708
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Ip snooping in cisco routers [7:74708]

2003-09-04 Thread ramesh_cisco

friends ,


 


Any one can give me clue on how to configure ip snooping in cisco routers???


 


thanks


ramesh 


 
Get Your Private, Free E-mail from Indiatimes at  http://email.indiatimes.com
Buy The Best In BOOKS at http://www.bestsellers.indiatimes.com
Bid for Air Tickets on Air Sahara Flights at Prices Lower Than Before. Just
log on to http://airsahara.indiatimes.com and Bid Now !
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74770t=74708
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Cisco ATM module [7:74707]

Hi,

Were interested in buying some used Cisco equipment.

Specifically we are interested in ATM modules for the Cisco 4500/4700 router.
Either the NP-1A-MM (multi mode) or NP-1A-SM (single mode) modules.

Please let us know if you have anything available.

Thanks

[EMAIL PROTECTED]


Neu: Stundenlang gratis telefonieren! sunrise schenkt Ihnen jeden Monat
60 Minuten.
http://internet.sunrise.ch/de/wireline/wir_plus.asp
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74772t=74707
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Cisco ATM module [7:74707]

Hi,

Were interested in buying some used Cisco equipment.

Specifically we are interested in ATM modules for the Cisco 4500/4700 router.
Either the NP-1A-MM (multi mode) or NP-1A-SM (single mode) modules.

Please let us know if you have anything available.

Thanks

[EMAIL PROTECTED]


Neu: Stundenlang gratis telefonieren! sunrise schenkt Ihnen jeden Monat
60 Minuten.
http://internet.sunrise.ch/de/wireline/wir_plus.asp
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74773t=74707
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: Re: Ip snooping in cisco routers [7:74708]

2003-09-04 Thread ramesh_cisco

thanks for all for your inputs


ramesh

dre wrote:



Reimer, Fred wrote in message ...
gt; E gads! All hacks because even at this time Cisco can't manage to write
the
gt; little code necessary to create a buffer in memory where packets can be
gt; stored, and then transferred via TFTP. With today's routers that have
more
gt; than enough processing power and memory, there's just no excuse, IMO.

I, personally, prefer ERSPAN to most other methods. Being able to
have an encapsulated stream of capture data available from any available
IP routed path (could be the whole Internet), and able to export to your
personal workstation, e.g., running tcpdump or Ethereal, is definitely the
proper way to be sniffing.

OTOH, Junipers should be able to do what you are talking about in some
(but not all) cases. Depends on how much traffic you are talking about.

The RSPAN+VACL method described on CCO is just as valid as
anything else, but requires Cisco Catalyst switches with some type of
Layer-3 functionality (e.g. Cat3550, some Cat6k, some Cat4k, others).
In the case of a 6500 it requires a PFC card, of which all Sup2 and Sup720
modules include. Sup1/Sup1a needs PFC to do RSPAN.

-dre
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html

Get Your Private, Free E-mail from Indiatimes at  http://email.indiatimes.com
Buy The Best In BOOKS at http://www.bestsellers.indiatimes.com
Bid for Air Tickets on Air Sahara Flights at Prices Lower Than Before. Just
log on to http://airsahara.indiatimes.com and Bid Now !




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74775t=74708
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: 6509 Power Supply Swap -- No Swap? [7:74695]

No, what was your experience???  I expect from your question that you had
issues...


Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: COULOMBE, TROY [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 02, 2003 8:57 PM
To: [EMAIL PROTECTED]
Subject: 6509 Power Supply Swap -- No Swap? [7:74695]

Has anyone successfully HOT-SWAP-upgraded power supplies on a 6509s.

In other words:::

Pwr-A is 1300 watts Pwr-B is 1300 watts

Pull out Pwr-A; 

XXX Pwr-B is 1300 watts

replace it w/ a 2500 watt pwr supply; so you now have:::

Pwr-A is 2500 watts Pwr-B is 1300 watts

Now pull out Pwr-B; 

Pwr-A is 2500 watts XXX

replace it w/ a 2500 watt pwr supply; so you now have:::


Pwr-A is 2500 watts Pwr-B is 2500 watts


And all without any downtime

Thanks
TroyC
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74771t=74695
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

OT: Cable Lengths [7:74776]

I have a question regarding the max length for a 100BaseT cable. Granted I
haven't done a wealth of research on this so feel free to point me to
google if the answer is mind numbingly simple, which it probably is

I have always understood the 100M limitation on 10BaseT ethernet cable to
be attributable to the time it would take a collision signal - assuming you
are running at half duplex - to be returned in time to prevent the next
packet from being sent. In other words any longer than 100M and the sending
station would not get the message in time that there had been a collision
and thus continue sending packets instead of backing off. I have heard
attenuation mentioned, but not as the real reason for the distance limit.

My question is given that many stations are running 100 full duplex these
days - thus removing the collision concerns - does this effectively change
the maximum distance for cable runs? Or is attenuation truly a factor in
anything over 100M?

In general I am referring to standard Cat5 cabling

Just curious...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74776t=74776
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: NM-8AM synch. support [7:74648]

2003-09-04 Thread WilliamR

No.

William

 wrote in message
news:[EMAIL PROTECTED]
 Hi,
 Does NM-8AM or WIC-1AM modules support sync. Connection?
 Thanks
 regards
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74777t=74648
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: PIX- DMZ [7:74422]

2003-09-04 Thread zak spaniol

Yes, I would like syntax.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74778t=74422
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: Cable Lengths [7:74776]

2003-09-04 Thread Dom

The following link may help a little

http://www.sysdom.org/html/ethernet_faq.htm

Best regards,

Dom Stocqueler
SysDom Technologies
Visit our website - www.sysdom.org


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: 04 September 2003 11:37
To: [EMAIL PROTECTED]
Subject: OT: Cable Lengths [7:74776]


I have a question regarding the max length for a 100BaseT cable. Granted
I haven't done a wealth of research on this so feel free to point me to
google if the answer is mind numbingly simple, which it probably is

I have always understood the 100M limitation on 10BaseT ethernet cable
to be attributable to the time it would take a collision signal -
assuming you are running at half duplex - to be returned in time to
prevent the next packet from being sent. In other words any longer than
100M and the sending station would not get the message in time that
there had been a collision and thus continue sending packets instead of
backing off. I have heard attenuation mentioned, but not as the real
reason for the distance limit.

My question is given that many stations are running 100 full duplex
these days - thus removing the collision concerns - does this
effectively change the maximum distance for cable runs? Or is
attenuation truly a factor in anything over 100M?

In general I am referring to standard Cat5 cabling

Just curious...
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74779t=74776
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: Cable Lengths [7:74776]

2003-09-04 Thread Nakul Malik

looking at it practically, you can run cable at 150 m and still make it
work. but the question is, will it meet the reference crieteria. there are a
lot of things to be looked at here of which an important factor is
attentuation.
-Nakul

[EMAIL PROTECTED]  wrote in
message news:[EMAIL PROTECTED]
 I have a question regarding the max length for a 100BaseT cable. Granted I
 haven't done a wealth of research on this so feel free to point me to
 google if the answer is mind numbingly simple, which it probably is

 I have always understood the 100M limitation on 10BaseT ethernet cable to
 be attributable to the time it would take a collision signal - assuming
you
 are running at half duplex - to be returned in time to prevent the next
 packet from being sent. In other words any longer than 100M and the
sending
 station would not get the message in time that there had been a collision
 and thus continue sending packets instead of backing off. I have heard
 attenuation mentioned, but not as the real reason for the distance
limit.

 My question is given that many stations are running 100 full duplex these
 days - thus removing the collision concerns - does this effectively change
 the maximum distance for cable runs? Or is attenuation truly a factor in
 anything over 100M?

 In general I am referring to standard Cat5 cabling

 Just curious...
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74780t=74776
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

3640 Router [7:74783]

2003-09-04 Thread Cappuccio Victor

Hello people

I what to know if a Cisco 3640 Router can support a E3 connection ??

Regards
Victor.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74783t=74783
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

NAT and DNS [7:74781]

2003-09-04 Thread alaerte Vidali

Should a static NAT translate embeded IP inside a DNS answer (not zone
transfer)?

Host(eth0)R1 (serial0)R4(eth0)(eth0)R2(eth1)---DNS server

R4
Int ser 0
 Ip ad 172.1.14.2 255.255.255.0
 Ip nat outside
!
int eth0
 ip ad 172.2.24.2 255.255.255.0
 ip nat inside

I found an answer on Cisco pages saying yes, but Sniffer showed that it is
not happening.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74781t=74781
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: End to End / Local VLAN's [7:74593]

2003-09-04 Thread Cappuccio Victor

Bani, Lookin at the Book i found this
There is a difference of what you say ??

Regards
Victor. 

106 Chapter 4: VLANs and Trunking
End-to-End VLANs
End-to-end VLANs, also called campus-wide VLANs, span the entire switch
fabric of a network. They are positioned to support maximum flexibility and
mobility of end devices. Users are assigned to VLANs regardless of physical
location. As a user moves around the campus, that users VLAN membership
stays the same. This means that each VLAN must be made available at the
access layer in every switch block.
End-to-end VLANs should group users according to common requirements. All
users in a VLAN should have roughly the same traffic flow patterns,
following the 80/20 rule. Recall that this rule estimates that 80 percent of
user traffic stays within the local workgroup, while 20 percent is destined
for a remote resource in the campus network. Although only 20 percent of the
traffic in a VLAN is expected to cross the network core, end-to-end VLANs
make it possible
for all traffic within a single VLAN to cross the core. Because all VLANs
must be available at each access layer switch, VLAN trunking must be used to
carry all VLANs between the access and distribution layer switches.
(Trunking is discussed in later sections of this chapter.)
Local VLANs
Because most enterprise networks have moved toward the 20/80 rule (where
server and intranet/Internet resources are centralized), end-to-end VLANs
have become cumbersome and difficult to maintain. The 20/80 rule is
reversedonly 20 percent of traffic is local, while 80
percent is destined to a remote resource across the core layer. End users
require access to central resources outside their VLAN. Users must cross
into the network core more frequently. In this type of network, VLANs are
designed to contain user communities based on geographic boundaries, with
little regard to the amount of traffic leaving the VLAN. Local or geographic
VLANs range in size from a single switch in a wiring closet to an entire
building. Arranging VLANs in this fashion enables the Layer 3 function in
the campus network to intelligently handle the inter-VLAN traffic loads.
This scenario provides maximum availability by using multiple paths to
destinations, maximum scalability by keeping the VLAN within a switch block,
and maximum manageability.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74782t=74593
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: RE: Slow Browsing via 500 Pix firewall [7:74583]

2003-09-04 Thread Wilmes, Rusty

this may be silly but did you do a sho debug to see if any debugs were
running?  I had accidentally left a debug crypto ipsec running after trouble
shooting a vpn. that drastically slowed down everything.


-Original Message-
From: Mark
To: [EMAIL PROTECTED]
Sent: 9/3/2003 8:46 PM
Subject: Re: RE: Slow Browsing via 500 Pix firewall [7:74583]

Is the problem related to a slow initial connection to a Web Server? If
so
then it could be an IDENT protocol problem (TCP port 113 connection
coming
back to you from the server). Try putting service resetoutside on the
PIX
and see if the problem still persists.

Mark
CCIE RS, Security
Lab Technician
GigaVelocity.com

- Original Message -
From: Jurkouich, Brett, CNTR, DCAA 
Reply-To: Jurkouich, Brett, CNTR, DCAA 
To: [EMAIL PROTECTED]
Subject: RE: Slow Browsing via 500 Pix firewall [7:74583]
Date: Tue, 2 Sep 2003 18:20:06 GMT

Try turning off the port 80 inspecting with the no fixup protocol http
80 command

-Original Message-
From: Faisal [mailto:[EMAIL PROTECTED]
Sent: Monday, September 01, 2003 1:38 AM
To: [EMAIL PROTECTED]
Subject: Slow Browsing via 500 Pix firewall [7:74583]


Hi All,
I am having problem of slow or interminnent browsing through pix
firewall. If I bypass the traffic speeds are fine. But if all that
traffic is going via firewall then it becomes extremely slow. Please
anybody can help me how to sort this out.

Regards
Faisal
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74784t=74583
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Calls made by DNS [7:74785]

2003-09-04 Thread Wayne Brewster

Hello group,

I have an 802 ISDN router connected to the internet. The firewall is a
PIX506. I want to stop DNS queries from the Win200 Servers from bring up
the channels after work hours or any other technique that will eliminate
DNS calls but still maintain the proper functionality of the network. I
am trying to reduce the cost of the ISDN monthly billing. Please give me
your input.

Wayne




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74785t=74785
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: NM-1CT1 or WIC-1DSU-T1 [7:74741]

2003-09-04 Thread MADMAN

NM-1CT1 terminates a PRI and obviously a channelized T1.

  Dave

neil K wrote:

Can somebody explain when I can use WIC-1DSU-T1 over NM-1CT1 or what exactly
are the difference except that WIC-1DSU-T1 has a built-in DSU/CSU where as
NM-1CT1 is a T1 Module.

Thanks in advance.

neil
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html

  


-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

Emotion should reflect reason not guide it




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74787t=74741
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: 3640 Router [7:74783]

2003-09-04 Thread M.C. van den Bovenkamp

Cappuccio Victor wrote:

 I what to know if a Cisco 3640 Router can support a E3 connection ??

'Support' as in 'connect to': Yes. There are E3 ATM and HSSI NMs for it.

'Support' as in 'run at line speed': Doubtful. A 3640 will do something 
like 60Kps flat out. Which is enough to fill an E3 at average packet 
sizes, but you don't have much oomph left.

Regards,

Marco.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74786t=74783
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

??? Layer 2 routing ??? [7:74788]

2003-09-04 Thread Steven Aiello

Ok all I have a question on this subject.  I know routing takes place at 
the network layer, and switching takes place at the data link layer 
because it works based on physical addresses.  So how do we get route 
switching?  I've just started my CCNP and we were learning about 
different cache methods to speed up performance, is this how route 
switching is done, is the routing calculation be performed on a per 
packet basis?  I was reading that by default, Cisco routers only perform 
a routing calculation on the first packet for a destination network and 
then on less the no route-cache option is set all the rest of the 
packets are really only switched to the correct interface.  Am I 
missing something?  I would invision that a router would by default 
perform a lookup for each connection sequence.  does layer 3 routing not 
do a look up for each sequence of packet?  Does is look at an address 
and use an old pre say route that was cached in memory?  If some one 
can give a good explanation I would greatly appreciate it.

Thanks,
Steve




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74788t=74788
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: ping cisco@groupstudy.com [7:74702]

Wow!  Given your CCIE number you must be using a REALLY old router for that
ping.  Most newer models send five echo requests, not three.  Either that or
some packets got lost somewhere...

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Brian McGahan [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 03, 2003 10:39 PM
To: [EMAIL PROTECTED]
Subject: ping [EMAIL PROTECTED] [7:74702]

!!!

Brian McGahan, CCIE #8593
[EMAIL PROTECTED] 

Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-334-8987
Direct: 708-362-1418 (Outside the US and Canada)
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74789t=74702
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: NM-1CT1 or WIC-1DSU-T1 [7:74741]

Along similar lines - can you directly interconnect two WIC-1DSU-T1
interfaces via serial cable?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
neal rauhauser
Sent: Wednesday, September 03, 2003 6:55 PM
To: [EMAIL PROTECTED]
Subject: Re: NM-1CT1 or WIC-1DSU-T1 [7:74741]

The WIC-1DSU-T1 is a service module - it always appear as serial0/0 or
whatever, and if you do anything with timeslots you are just adjusting
the number used for this one serial interface.

  The NM-1CT1 is a channelized T1 interface. You must configure one or
more channels in a channel group, then they get assigned to a virtual
serial interface.

  In the bad old days before frame relay people used to get 56k leased
lines for remote offices and aggregate them all by having a channelized
T1 delivered with each DS0 being a separate circuit to a remote.

  One additional use for the channelized interfaces that I am aware of
is attachment to digital modem modules like the NM-xxDM. There may be
others, but that is the one that comes to mind first.

  If you don't know why you might want an NM-1CT1, you need a
WIC-1DSU-T1 :-)

neil K wrote:

 Can somebody explain when I can use WIC-1DSU-T1 over NM-1CT1 or what
exactly
 are the difference except that WIC-1DSU-T1 has a built-in DSU/CSU
where as
 NM-1CT1 is a T1 Module.

 Thanks in advance.

 neil
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html

-- 
mailto:[EMAIL PROTECTED]
phone:402-301-9555
After all that I've been through, you're the only one who matters,
you never left me in the dark here on my own - Widespread Panic
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html

Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74756t=74741
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: Wicked screensaver [7:74792]

Please see the attached file for details.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74792t=74792
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: OT Gibberish in email [7:74740]

Must not be listening to Doug on the nmsusers.org site lists.  He plans on
using Bayesian filters on network management events to predict causal
effects of network issues.  Considering that AOL must have boat loads of
events, from syslogs, to SNMP traps, to events generated by network
management systems, it may help break down the deluge into a manageable
amount.  Bayesian filters have been around for a while, and are used in
bunches of different applications.  It's just recently over the last few
years that they have been applied to SPAM identification.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 03, 2003 5:36 PM
To: [EMAIL PROTECTED]
Subject: RE: OT Gibberish in email [7:74740]

Reimer, Fred wrote:
 
 It is an attempt by the SPAMers to avoid SPAM software that
 takes a hash of
 the SPAM and blocks SPAM on machines based on these hash
 values.  There are
 some anti-SPAM solutions out there that basically relies on
 the users to
 mark email as SPAM.  When they do, the client machines send the
 hash of the
 SPAM up to the service provider, which shares these hashes with
 all other
 subscribers.  So, if the same exact SPAM is sent to another
 user it would
 automatically get blocked.  These random characters change the
 hash value,
 and hence this method of blocking SPAM is ineffective.
 
 Use a Bayesian filter program for your SPAM.  I have 3755
 emails in my Junk
 Mail folder now, and I empty it out last on July 18th.  Check
 out
 www.Junk-Out.com.
 
 Fred Reimer - CCNA

Someone should develop a SPAM filter that looks for certain types of
randomness within a message. This would be difficult, but certainly not
impossible. You'd have to be pretty creative about it but it ought to be
possible to devise an algorithm that could detect that sort of random
line--often found in the subject line--and flag it as SPAM.

I haven't heard of a Bayesian filter before. I'm going to go find out more
about that right now.

John
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74753t=74740
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Electrical Loads - WAS RE: 6509 Power Supply Swap -- No Swap? [7:74791]

2003-09-04 Thread Daniel Cotts

Check out the National Electrical Code Handbook from the National Fire
Protection Agency. The handbook has some explanations - making it a little
more readable than the code alone. IIRC the handbook is about $75.

The big issue with a computing environment is the sizing of the neutral
conductor. In normal installations the neutral current to ground should be
less than that on any of the hot legs. Ideally it should be close to zero.
As such the neutral conductor is often sized smaller than the hot legs. The
switching power supplies of computer gear change all that. Due to harmonics
the current on the neutral can be 150% of that on the hot legs. In a
computing environment the neutral should be oversized and particular
attention should be made that it has a low resistance path to ground. My
source for this is documentation from Chloride UPSs and field measurements.
The above is true for the US. If you live elsewhere YMMV. 

 -Original Message-
 From: Chuck Whose Road is Ever Shorter 

 what amperage were your circuits? were the two power supplies 
 plugged into
 different circuits?
 
 a 2500 watt PS requires a 20 amp circuit, while the 1300 can run on a
 standard 15 amp circuit. If you were to plug your 2500 watt 
 supply into the
 same 15 amp circuit as your 1300, I can see problems developing.
 
 Can you tell I've been reading up on electricity in response 
 to a customer
 who apparently doesn't trust his electricians?
 
 in any case I would bet there is some connection with the 
 reload and the
 numbers and draws of your line cards as well.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74791t=74791
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: OT Gibberish in email [7:74740]

2003-09-04 Thread Wilmes, Rusty

I've been trying to scrounge up the time to build one of these...

http://lawmonkey.org/anti-spam.html

combination of bayesian and razor on openbsd acting as an MTA.

About 1/2 our staff installed freeware screensaver (read: gator) on their
computers and our spam has gone through the roof.



-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 03, 2003 2:36 PM
To: [EMAIL PROTECTED]
Subject: RE: OT Gibberish in email [7:74740]


Reimer, Fred wrote:
 
 It is an attempt by the SPAMers to avoid SPAM software that
 takes a hash of
 the SPAM and blocks SPAM on machines based on these hash
 values.  There are
 some anti-SPAM solutions out there that basically relies on
 the users to
 mark email as SPAM.  When they do, the client machines send the
 hash of the
 SPAM up to the service provider, which shares these hashes with
 all other
 subscribers.  So, if the same exact SPAM is sent to another
 user it would
 automatically get blocked.  These random characters change the
 hash value,
 and hence this method of blocking SPAM is ineffective.
 
 Use a Bayesian filter program for your SPAM.  I have 3755
 emails in my Junk
 Mail folder now, and I empty it out last on July 18th.  Check
 out
 www.Junk-Out.com.
 
 Fred Reimer - CCNA

Someone should develop a SPAM filter that looks for certain types of
randomness within a message. This would be difficult, but certainly not
impossible. You'd have to be pretty creative about it but it ought to be
possible to devise an algorithm that could detect that sort of random
line--often found in the subject line--and flag it as SPAM.

I haven't heard of a Bayesian filter before. I'm going to go find out more
about that right now.

John
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74752t=74740
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: Calls made by DNS [7:74785]

A dial-list can specify an extended access list, why don't you just create
one with time ranges.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Wayne Brewster [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 04, 2003 9:56 AM
To: [EMAIL PROTECTED]
Subject: Calls made by DNS [7:74785]

Hello group,

I have an 802 ISDN router connected to the internet. The firewall is a
PIX506. I want to stop DNS queries from the Win200 Servers from bring up
the channels after work hours or any other technique that will eliminate
DNS calls but still maintain the proper functionality of the network. I
am trying to reduce the cost of the ISDN monthly billing. Please give me
your input.

Wayne
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74793t=74785
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: 3640 Router [7:74783]

The 3640 can in theory but cannot really support a DS3 circuit at full
speed..hence the 3745s will quickly take over the market for 3640s..

-Original Message-
From: Cappuccio Victor [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 04, 2003 8:46 AM
To: [EMAIL PROTECTED]
Subject: 3640 Router [7:74783]

Hello people

I what to know if a Cisco 3640 Router can support a E3 connection ??

Regards
Victor.
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html

For more information about Barclays Capital, please
visit our web site at http://www.barcap.com.

Internet communications are not secure and therefore the Barclays 
Group does not accept legal responsibility for the contents of this 
message.  Although the Barclays Group operates anti-virus programmes, 
it does not accept responsibility for any damage whatsoever that is 
caused by viruses being passed.  Any views or opinions presented are 
solely those of the author and do not necessarily represent those of the 
Barclays Group.  Replies to this email may be monitored by the Barclays 
Group for operational or business reasons.

Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74790t=74783
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

??? Cisco Express Forwarding ??? [7:74794]

2003-09-04 Thread Steven Aiello

Another question,

  in CEF is the whole routing table held in a cache?  If so what is the 
diffrence between this and the routing table held in RAM?  Is the cache 
faster than the regular RAM in the router?

Thanks,
Steve




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74794t=74794
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: Calls made by DNS [7:74785]

2003-09-04 Thread Daniel Cotts

Sounds like a timed access-list would help. Watch the wrap:
pad
pad
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/ip_c
/ipcprt1/1cdip.htm#1001432

 -Original Message-
 From: Wayne Brewster [mailto:[EMAIL PROTECTED]
 Sent: Thursday, September 04, 2003 8:56 AM
 To: [EMAIL PROTECTED]
 Subject: Calls made by DNS [7:74785]

 Hello group,

 I have an 802 ISDN router connected to the internet. The firewall is a
 PIX506. I want to stop DNS queries from the Win200 Servers 
 from bring up
 the channels after work hours or any other technique that 
 will eliminate
 DNS calls but still maintain the proper functionality of the 
 network. I
 am trying to reduce the cost of the ISDN monthly billing. 
 Please give me
 your input.

 Wayne
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info: 
 http://www.groupstudy.com/list/cisco.html

Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74795t=74785
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: ??? Layer 2 routing ??? [7:74788]

I'm sure this HAS to be somewhere on Cisco's web site, but a brief general
explanation is this:  Cisco, and most other vendor's hardware now-adays, has
ASIC chips that inspect ingress traffic coming into the switch.  It also has
a shared memory buffer that it stores cached route-switch information.  This
information generally contains all of the information necessary, in the
proper format, that the ASIC needs to re-write the packet on the outbound
interface (which is usually part of the cached information).  If a new flow
is being established, there obviously won't be any information in the cache
on how to re-write that packet in hardware (ASIC).  So, the switch has to
send the packet to the routing engine to have it layer-3 routed.  The
router makes the usual routing decisions, and stores the information
necessary for the ASIC to handle future packets between this
source-destination pair in the shared memory cache.  Any future packets are
handled in hardware by the ASIC, and don't need to go back to the route
engine.

The specific architecture obviously depends on what specific hardware you
are talking about.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Steven Aiello [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 04, 2003 10:05 AM
To: [EMAIL PROTECTED]
Subject: ??? Layer 2 routing ??? [7:74788]

Ok all I have a question on this subject.  I know routing takes place at 
the network layer, and switching takes place at the data link layer 
because it works based on physical addresses.  So how do we get route 
switching?  I've just started my CCNP and we were learning about 
different cache methods to speed up performance, is this how route 
switching is done, is the routing calculation be performed on a per 
packet basis?  I was reading that by default, Cisco routers only perform 
a routing calculation on the first packet for a destination network and 
then on less the no route-cache option is set all the rest of the 
packets are really only switched to the correct interface.  Am I 
missing something?  I would invision that a router would by default 
perform a lookup for each connection sequence.  does layer 3 routing not 
do a look up for each sequence of packet?  Does is look at an address 
and use an old pre say route that was cached in memory?  If some one 
can give a good explanation I would greatly appreciate it.

Thanks,
Steve
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74797t=74788
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

3640 Router E3 support (maybe) [7:74800]

2003-09-04 Thread neal rauhauser

You can install an NM-HSSI and an external E3 CSU/DSU or use an
internal NM-1TE3 to terminate a clear channel link.

  Cisco also built an NM-1A-E3 ATM card as well. In the US the DS3
counterpart to this card was typically used for DSL providers, while the
clear channel card or HSSI + external CSU/DSU was used for internet
connectivity.

 
  So the machine can physically terminate the link and it can stand a
full circuit worth of traffic, but if you're considering running BGP *BE
CAREFUL*.


  A little while ago I was working on a 128 meg Cisco 7206 connected to
Sprint via a DS3. IOS grabbed 16 meg for packet buffer in the presence
of the high speed interface and the 122k BGP routes from Sprint were too
much for the remaining memory. A Cisco 2650 with 128 meg can still take
full routes from Sprint because it has much less buffer space allocated,
but in general I'm treating 128 meg boxes as ticking bombs if they're
connected to Tier 1 providers - its just a matter of time - maybe this
time next year - before they just stop working due to memory issues.




Cappuccio Victor wrote:
 
 Hello people
 
 I what to know if a Cisco 3640 Router can support a E3 connection ??
 
 Regards
 Victor.
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html

-- 
mailto:[EMAIL PROTECTED]
phone:402-301-9555
After all that I've been through, you're the only one who matters,
you never left me in the dark here on my own - Widespread Panic




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74800t=74800
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: OT: Cable Lengths [7:74776]

2003-09-04 Thread neal rauhauser

I've seen situations where the legal length has been nearly doubled
on full duplex connections without much apparent trouble. I don't know
if I'd trust a Windoze box in this kind of configuration, but routers,
unix hosts, etc, don't seem to mind too much.


[EMAIL PROTECTED] wrote:
 
 I have a question regarding the max length for a 100BaseT cable. Granted I
 haven't done a wealth of research on this so feel free to point me to
 google if the answer is mind numbingly simple, which it probably is
 
 I have always understood the 100M limitation on 10BaseT ethernet cable to
 be attributable to the time it would take a collision signal - assuming you
 are running at half duplex - to be returned in time to prevent the next
 packet from being sent. In other words any longer than 100M and the sending
 station would not get the message in time that there had been a collision
 and thus continue sending packets instead of backing off. I have heard
 attenuation mentioned, but not as the real reason for the distance limit.
 
 My question is given that many stations are running 100 full duplex these
 days - thus removing the collision concerns - does this effectively change
 the maximum distance for cable runs? Or is attenuation truly a factor in
 anything over 100M?
 
 In general I am referring to standard Cat5 cabling
 
 Just curious...
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html

-- 
mailto:[EMAIL PROTECTED]
phone:402-301-9555
After all that I've been through, you're the only one who matters,
you never left me in the dark here on my own - Widespread Panic




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74799t=74776
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

What am I missing? HELP [7:74803]

2003-09-04 Thread Hyman, Craig

All-

I have a CBOS IOS on a CISCO Router ( 600 series).  I am trying to make this
router a filter router. When I implement the rules below, nothing comes
across. I have checked the documentation, but still can't find the solution.
Does anybody have any ideas?

Your help is well appreciated..




set filter 0 on allow incoming eth0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol tcp

set filter 1 on allow incoming eth0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol udp

set filter 2 on allow incoming eth0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol
icmp

set filter 3 on allow outgoing all 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol tcp

set filter 4 on allow outgoing all 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol icmp

set filter 5 on allow outgoing all 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 
protocol udp

set filter 6 on allow incoming wan0-0 192.18.42.16 255.255.255.0 0.0.0.0 
0.0.0.0
protocol tcp srcport 1024-65535 destport 23

set filter 7 on allow incoming wan0-0 192.18.42.16 255.255.255.0 0.0.0.0
0.0.0.0 protocol tcp srcport 1024-65535 destport 20

set filter 8 on allow incoming wan0-0 192.18.42.16 255.255.255.0 0.0.0.0
0.0.0.0 protocol icmp

set filter 9 on allow incoming wan0-0 192.18.42.17 255.255.255.0 0.0.0.0
0.0.0.0 protocol tcp srcport 1024-65535 destport 23

set filter 10 on allow incoming wan0-0 192.18.42.17 255.255.255.0 0.0.0.0
0.0.0.0 protocol tcp srcport 1024-65535 destport 20

set filter 11 on allow incoming wan0-0 192.18.42.17 255.255.255.0 0.0.0.0
0.0.0.0 protocol icmp




SRS Level 2
SRS Implementation Team 
Cell phone# 720-840-4887
SUN PH# 303-272-2661
Virtual Office# 303-604-0037
[EMAIL PROTECTED]
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74803t=74803
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: Calls made by DNS [7:74785]

The simplest method is to buy a plug in timer switch from radio shack and
connect the router through this to the power socket on the wall. Otherwise
you could use a time-based access control list to assist in defining the
interesting traffic that causes the ISDN calls to be made. Check out the
Cisco.com web page for the commands and the IOS revision needed.

Cheers,
Steve Wilson CCNP CCDA
Network Engineer

-Original Message-
From: Wayne Brewster [mailto:[EMAIL PROTECTED] 
Sent: 04 September 2003 14:56
To: [EMAIL PROTECTED]
Subject: Calls made by DNS [7:74785]

Hello group,

I have an 802 ISDN router connected to the internet. The firewall is a
PIX506. I want to stop DNS queries from the Win200 Servers from bring up
the channels after work hours or any other technique that will eliminate
DNS calls but still maintain the proper functionality of the network. I
am trying to reduce the cost of the ISDN monthly billing. Please give me
your input.

Wayne
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74798t=74785
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

IOS BUG??? [7:74804]

2003-09-04 Thread Jens Petter Eikeland

Hi group ,

I have been working on a backup solution with isdn and the primary is a
frame link
I am running on an  2500 with 12.1(18) and a 2500 with 12.(18)

Thi is my net.

R6-R1==R5--R4R2-

R6r4

 is frame-relay net

== is isdn link

Area 0 is R6 to R1,
Area 1 is from r6down to r4
Area 2 is from R4 and to R2

My primary virtual link is from R6 to R4
My backup primary is from R1 to R4

What happens her is that the backup virtual link wont come up over the isdn
link.
I have tested this both with and without demand circuit, dialer watch and
without any of them.

My config is correct and my authentication is correct. I have also tested
this without authentication.

The strange thing is that this has happen to me on two different rack. I
have had several people go
Over this, but they cant find any thing wrong

Is there anywon hwo knows if there is an bug in this software with regards
to this.??

JP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74804t=74804
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: ??? Cisco Express Forwarding ??? [7:74794]

2003-09-04 Thread Marko Milivojevic

   in CEF is the whole routing table held in a cache?  If so what is the
 diffrence between this and the routing table held in RAM?  Is the cache
 faster than the regular RAM in the router?

There are few excellent documents about this on our favourite website.

Watch for wrap.

[Cisco IOS Switching Paths]
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fswtch_c/swprt1/


[How to Choose the Best Router Switching Path for Your Network]
http://www.cisco.com/en/US/tech/tk827/tk831/technologies_white_paper09186a00800a62d9.shtml


Marko.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74805t=74794
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: ping cisco@groupstudy.com [7:74702]

Fred,

Yeah, I'm still using IOS 3.11, IOS for workgroups.  I refuse to
upgrade.

Brian McGahan, CCIE #8593
[EMAIL PROTECTED] 

Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-334-8987
Direct: 708-362-1418 (Outside the US and Canada)


-Original Message-
From: Reimer, Fred [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 04, 2003 9:26 AM
To: Brian McGahan; [EMAIL PROTECTED]
Subject: RE: ping [EMAIL PROTECTED] [7:74702]

Wow!  Given your CCIE number you must be using a REALLY old router for
that
ping.  Most newer models send five echo requests, not three.  Either
that or
some packets got lost somewhere...

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information
which
may be legally privileged. It is intended only for the named
recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy,
print
or rely on this email, and should immediately delete it from your
computer.


-Original Message-
From: Brian McGahan [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 03, 2003 10:39 PM
To: [EMAIL PROTECTED]
Subject: ping [EMAIL PROTECTED] [7:74702]

!!!

Brian McGahan, CCIE #8593
[EMAIL PROTECTED] 

Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-334-8987
Direct: 708-362-1418 (Outside the US and Canada)
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74810t=74702
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: ??? Layer 2 routing ??? [7:74788]

Steve,

What you are referring to is called Multi-Layered Switching
(MLS).  MLS uses a unicast and multicast cache to keep state information
on flows passing through the layer 3 switch.

The following demonstrates layer 2 and layer 3 lookup end to end.  Take
the following situation:

HostA---Router1---HostB

HostA and HostB are on separate layer 3 segments.  HostA
attempts to send a packet to HostB.  

HostA looks in its local ARP cache to see if there is already a
layer 3 to layer 2 mapping for HostB's IP address.  If there is not,
HostA does a logical AND with the destination IP address and the local
subnet mask.  If the result shows that HostB is on HostA's local
network, HostA ARPs for HostB.  Since in this case they are not on the
same subnet, HostA must now resolve the layer 2 address of its default
gateway.  

HostA now checks its ARP cache for the layer 2 address of
Router1.  If the mapping is already in the cache, HostA does not ARP for
Router1, if the mapping is not already in the cache, HostA ARPs for
Router1.  After the layer 2 address of the gateway is returned, HostA
encapsulates a packet with the destination layer 3 address of HostB, and
the destination layer 2 address of Router1.

Router1 now receives the packet from HostA destined to HostB.
Router1 does a layer 3 routing lookup for HostB's IP address.  Router1
sees that HostB is directly connected.  Router1 rewrites the layer 2
header of the packet, putting its own layer 2 address as the source, and
HostB's layer 2 address as the destination.  Router1 sends the packet,
and it is received by HostB.

The above process repeats on a per packet basis.  MLS is meant
to optimize the layer 3 routing lookup phase done on Router1.

When a packet comes to the MSFC (layer 3 engine), the MLS cache
is checked to see if there is a flow for this packet already cached.  If
the flow does not previously exist, a routing lookup is done, the layer
2 header is rewritten, a new entry in the MLS cache is created, and the
packet is switched.  If there is a preexisting entry in the MLS cache,
the layer 2 header is immediately rewritten without having to do a
routing lookup.  

The optimization is that the routing lookup is skipped if it was
already previously performed, hence Multi-Layered Switching.


HTH,

Brian McGahan, CCIE #8593
[EMAIL PROTECTED] 

Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-334-8987
Direct: 708-362-1418 (Outside the US and Canada)


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Steven Aiello
Sent: Thursday, September 04, 2003 9:05 AM
To: [EMAIL PROTECTED]
Subject: ??? Layer 2 routing ??? [7:74788]

Ok all I have a question on this subject.  I know routing takes place at

the network layer, and switching takes place at the data link layer 
because it works based on physical addresses.  So how do we get route 
switching?  I've just started my CCNP and we were learning about 
different cache methods to speed up performance, is this how route 
switching is done, is the routing calculation be performed on a per 
packet basis?  I was reading that by default, Cisco routers only perform

a routing calculation on the first packet for a destination network and 
then on less the no route-cache option is set all the rest of the 
packets are really only switched to the correct interface.  Am I 
missing something?  I would invision that a router would by default 
perform a lookup for each connection sequence.  does layer 3 routing not

do a look up for each sequence of packet?  Does is look at an address 
and use an old pre say route that was cached in memory?  If some one 
can give a good explanation I would greatly appreciate it.

Thanks,
Steve
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74809t=74788
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Network Benchmarking/Performance Analysis [7:74808]

2003-09-04 Thread Lupi, Guy

I would like recommendations on distributed network benchmarking and
performance analysis systems.  I would like to place sensors/collectors at
various points on the network to collect data on and give detailed reports
on items like, but not limited to:

Packet loss
Latency
Jitter
Throughput

If someone could recommend some companies I would appreciate it.

Guy H. Lupi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74808t=74808
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: ??? Cisco Express Forwarding ??? [7:74794]

Steve,

There are a few reasons why a lookup through the CEF table is
faster than a lookup in the IP routing table.

A lookup in the IP routing table is done top down until a match
is found, much like how an access-list is processed.  The problem,
however, is that the IP table is not in any specific order, therefore,
the worst case lookup for a route is directly proportional to how many
prefixes exist in the IP routing table.  

The CEF table, on the other hand, takes a maximum of four
lookups before a match is found.  CEF uses four data structures, each
with 256 children, with each child having 256 children, etc.  This gives
us a maximum entry size of 2^32 (all IP address space).  These
structures are divided as follows:

Root
-0.0.0.0
-1.0.0.0
-2.0.0.0
..
-255.0.0.0

Suppose we're doing a lookup on the prefix 1.2.3.4.  First we
find the 1st child under the root (1.0.0.0)

Root
-1.0.0.0
--1.0.0.0
--1.1.0.0
--1.2.0.0
--...
--1.255.0.0

Under the child 1.0.0.0, we now find the 2nd child (1.2.0.0).
Next, we find the 3rd child under 1.2.0.0 (1.2.3.0), and finally the
fourth child under 1.2.3.0, (1.2.3.4).  Our final lookup is now as
follows:

Root
-1.0.0.0
--1.2.0.0
---1.2.3.0
1.2.3.4

As you can see, no matter which prefix we are doing a lookup on,
we have to do a maximum of 4 lookups in order to find it, unlike the
normal IP routing table, where our worst case lookup time is
proportional to the amount of prefixes in the table.

The next reason that CEF is faster than a normal lookup is the
adjacency table.  Every time a lookup is done in the IP routing table,
an addition lookup (recursive lookup) must be done to find the outgoing
interface for the next hop IP address.  In the case of CEF, this lookup
is already done for you in the adjacency table.  The adjacency table
provides us with the outgoing interface, and the destination layer 2
address that must be encapsulated in order to send the packet out said
interface.

Lastly, the main advantage of CEF is that the above mentioned
lookups are done *before* any traffic is sent.  In the case of the other
caching mechanisms, a cached entry is not created until the first packet
in the flow is fast-switched.  This follows the paradigm of route once,
switch many.  CEF on the other hand is just switch many, since the
routing lookup is already performed.


HTH,

Brian McGahan, CCIE #8593
[EMAIL PROTECTED] 

Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-334-8987
Direct: 708-362-1418 (Outside the US and Canada)


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Steven Aiello
Sent: Thursday, September 04, 2003 10:06 AM
To: [EMAIL PROTECTED]
Subject: ??? Cisco Express Forwarding ??? [7:74794]

Another question,

  in CEF is the whole routing table held in a cache?  If so what is the 
diffrence between this and the routing table held in RAM?  Is the cache 
faster than the regular RAM in the router?

Thanks,
Steve
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74811t=74794
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: OT Gibberish in email [7:74740]

2003-09-04 Thread Brian

There's a compelling argument for scheduled virus and spyware
scans/updates..


Brian

The path to a desireable destination
is often more difficult than the path to stay where you are.

On Thu, 4 Sep 2003, Wilmes, Rusty wrote:

 I've been trying to scrounge up the time to build one of these...

 http://lawmonkey.org/anti-spam.html

 combination of bayesian and razor on openbsd acting as an MTA.

 About 1/2 our staff installed freeware screensaver (read: gator) on their
 computers and our spam has gone through the roof.



 -Original Message-
 From: John Neiberger [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, September 03, 2003 2:36 PM
 To: [EMAIL PROTECTED]
 Subject: RE: OT Gibberish in email [7:74740]


 Reimer, Fred wrote:
 
  It is an attempt by the SPAMers to avoid SPAM software that
  takes a hash of
  the SPAM and blocks SPAM on machines based on these hash
  values.  There are
  some anti-SPAM solutions out there that basically relies on
  the users to
  mark email as SPAM.  When they do, the client machines send the
  hash of the
  SPAM up to the service provider, which shares these hashes with
  all other
  subscribers.  So, if the same exact SPAM is sent to another
  user it would
  automatically get blocked.  These random characters change the
  hash value,
  and hence this method of blocking SPAM is ineffective.
 
  Use a Bayesian filter program for your SPAM.  I have 3755
  emails in my Junk
  Mail folder now, and I empty it out last on July 18th.  Check
  out
  www.Junk-Out.com.
 
  Fred Reimer - CCNA

 Someone should develop a SPAM filter that looks for certain types of
 randomness within a message. This would be difficult, but certainly not
 impossible. You'd have to be pretty creative about it but it ought to be
 possible to devise an algorithm that could detect that sort of random
 line--often found in the subject line--and flag it as SPAM.

 I haven't heard of a Bayesian filter before. I'm going to go find out more
 about that right now.

 John
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74807t=74740
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

2600 3600 3700 series routers [7:74812]

2003-09-04 Thread Dave Williams

Group,

 

I'm currently studying for the CCIE lab exam. My lab consists of 2500 -
2600 series routers. My question is if there is a difference in IOS
features between the 3600s and the 3700s. I'm trying to decide if I need
some rack time playing around with the 3700s or if the 2600s and 3600s
will do everything the 3700s will do.

 

 

Thanks,

dave




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74812t=74812
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Re: IOS BUG??? [7:74804]

2003-09-04 Thread William Lijewski

Can you post your configurations for this?  What area is R5 in?  Why are you
skipping over R5 as the end of the virtual-link?

-- 
Bill Lijewski
CCIE #8642


Jens Petter Eikeland  wrote in message
news:[EMAIL PROTECTED]
 Hi group ,

 I have been working on a backup solution with isdn and the primary is a
 frame link
 I am running on an  2500 with 12.1(18) and a 2500 with 12.(18)

 Thi is my net.

 R6-R1==R5--R4R2-

 R6r4

  is frame-relay net

 == is isdn link

 Area 0 is R6 to R1,
 Area 1 is from r6down to r4
 Area 2 is from R4 and to R2

 My primary virtual link is from R6 to R4
 My backup primary is from R1 to R4

 What happens her is that the backup virtual link wont come up over the
isdn
 link.
 I have tested this both with and without demand circuit, dialer watch and
 without any of them.

 My config is correct and my authentication is correct. I have also tested
 this without authentication.

 The strange thing is that this has happen to me on two different rack. I
 have had several people go
 Over this, but they cant find any thing wrong

 Is there anywon hwo knows if there is an bug in this software with regards
 to this.??

 JP
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74814t=74804
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

Router Simulator [7:74816]

With some prodding by Doug Stevenson, and probably in the wrong direction,
I'm working on a router simulator in my spare time.  It's written in Perl
using POE.  So far you can add interfaces, assign addresses, enable RIP, add
networks to RIP, connect interfaces together.  The RIP process (POE
session) will automatically determine what interfaces are active depending
on the list of networks, and send out RIP updates (version 1 or version 2)
on a regular basis (including the Cisco 0-15% jitter in the update process).
I don't have the part that actually transfers the RIP packet to the other
connected router, accepts the packet, or updates a routing table (there is
none yet).

 

If anyone's interested just send me an email.  I hope to get the basic RIP
functionality done first, then branch off into other routing protocols.
Since it will only be simulating routing protocols and not actually handing
user traffic in real-time, I figure it could be 10's of times slower than
the real IOS implementation and still be able to handle a significant
number of virtual routers.  The ultimate goal would be to be able to parse
actual IOS configuration files and program the virtual routers
automagically.  The only thing the user would need to do is connect
interfaces together.

 

Fred Reimer - CCNA

Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050

NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74816t=74816
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: Network Benchmarking/Performance Analysis [7:74808]

How about Cisco Systems?  Just use their SAA.

Fred Reimer - CCNA


Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338
Phone: 404-847-5177  Cell: 770-490-3071  Pager: 888-260-2050


NOTICE; This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing or transmission error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy, print
or rely on this email, and should immediately delete it from your computer.


-Original Message-
From: Lupi, Guy [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 04, 2003 1:17 PM
To: [EMAIL PROTECTED]
Subject: Network Benchmarking/Performance Analysis [7:74808]

I would like recommendations on distributed network benchmarking and
performance analysis systems.  I would like to place sensors/collectors at
various points on the network to collect data on and give detailed reports
on items like, but not limited to:

Packet loss
Latency
Jitter
Throughput

If someone could recommend some companies I would appreciate it.

Guy H. Lupi
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74817t=74808
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: ??? Layer 2 routing ??? [7:74788]

Steven,

as Fred and Brian alluded to, some of the Cisco routers use hardware
acceleration to speed up the packet switching. I suspect however that your
question was a more generic one, so I would suggest that you check this out:

http://www.cisco.com/en/US/tech/tk827/tk831/technologies_white_paper09186a00800a62d9.shtml

I will also note that understanding the place of MLS might be a bit
difficult without knowning the (rather horrifying :) details of the Catalyst
architecture and its development history. It might help maintain your mental
balance if you first gain a good understanding of how a router is supposed
to work, and only then take a look at what the Catalyst is doing. :)))

Thanks,

Zsombor

Steven Aiello wrote:

Ok all I have a question on this subject. I know routing takes
place at
the network layer, and switching takes place at the data link
layer
because it works based on physical addresses. So how do we get
route
switching? I've just started my CCNP and we were learning
about
different cache methods to speed up performance, is this how
route
switching is done, is the routing calculation be performed on a
per
packet basis? I was reading that by default, Cisco routers
only perform
a routing calculation on the first packet for a destination
network and
then on less the no route-cache option is set all the rest of
the
packets are really only switched to the correct interface.
Am I
missing something? I would invision that a router would by
default
perform a lookup for each connection sequence. does layer 3
routing not
do a look up for each sequence of packet? Does is look at an
address
and use an old pre say route that was cached in memory? If
some one
can give a good explanation I would greatly appreciate it.

Thanks,
Steve

Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74819t=74788
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: ??? Cisco Express Forwarding ??? [7:74794]

Just for the sake of clarity: cache in this context doesn't refer to a
faster-than-usual memory. The route cache is in the exact same RAM as the
routing table. For more details, see the documents Marko mentioned.

Thanks,

Zsombor

Steven Aiello wrote:
 
 Another question,
 
   in CEF is the whole routing table held in a cache?  If so
 what is the
 diffrence between this and the routing table held in RAM?  Is
 the cache
 faster than the regular RAM in the router?
 
 Thanks,
 Steve
 
 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74821t=74794
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: OT: Cable Lengths [7:74776]

The diameter of a 10Mbps Ethernet collision domain is much bigger than 100m
(you can calculate it from the smallest allowed frame size, the transmission
speed, and the signal propagation speed), so that limit is most definitely
not based on collisions.

Thanks,

Zsombor

[EMAIL PROTECTED] wrote:
 
 I have a question regarding the max length for a 100BaseT
 cable. Granted I
 haven't done a wealth of research on this so feel free to point
 me to
 google if the answer is mind numbingly simple, which it
 probably is
 
 I have always understood the 100M limitation on 10BaseT
 ethernet cable to
 be attributable to the time it would take a collision signal -
 assuming you
 are running at half duplex - to be returned in time to prevent
 the next
 packet from being sent. In other words any longer than 100M and
 the sending
 station would not get the message in time that there had been a
 collision
 and thus continue sending packets instead of backing off. I
 have heard
 attenuation mentioned, but not as the real reason for the
 distance limit.
 
 My question is given that many stations are running 100 full
 duplex these
 days - thus removing the collision concerns - does this
 effectively change
 the maximum distance for cable runs? Or is attenuation truly a
 factor in
 anything over 100M?
 
 In general I am referring to standard Cat5 cabling
 
 Just curious...
 
 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74833t=74776
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: 2600 3600 3700 series routers [7:74812]

Dave,

The quick answer, no, you will not need the 37xx series to
prepare for the CCIE RS exam.

The long answer, to see what features are unique to an image,
platform, or release, use the feature navigator located at
http://www.cisco.com/go/fn

Here's the output of a 3640 running 12.2(15)T7 (latest 12.2T
train) vs a 3725 running 12.2(15)T7, both feature sets are Enterprise
Plus.  The features unique to the 3725 are as follows:

Auditing Raw Buffers on a Channel Associated Signaling Interface 
BGP Increased Support of Numbered as-path Access Lists 
Cisco Discovery Protocol (CDP) over ATM 
CNS Flow-Through Provisioning 
Contact Closure Network Module 
DHCP Accounting 
DHCP Server - On Demand Address Pool Manager 
DHCP Server - Option to Ignore all BOOTP Requests 
DTMF Relay for SIP Calls Using Named Telephone Events (NTE) 
Enhanced Debug Capabilities for Cisco Voice Gateways 
Enhanced G.168 Echo Cancellation 
Enhanced Packet Marking 
Frame Relay PVC Bundles with IP QoS Support 
Frame Relay PVC Bundles with MPLS QoS Support 
G.SHDSL Symmetric DSL Support 
Gateway Support for Advanced Busy Out for Gatekeeper Registration 
Globalized Cadence and Tone for Cisco IOS Gateways 
H.323v4 - Enhanced Call Usage Reporting 
IPv6 Provider Edge Router over MPLS 
L2TP Redirect 
MGCP support for CallManager (IP-PBX) 
MPLS LDP - MIB Notifications 
MPLS VPN - MIB Notifications 
MS-CHAP Version 2 
Multicast-VPN: Multicast Support for MPLS VPN 
MultiNode Load Balancing (MNLB) Forwarding Agent 
NAT Integration with MPLS VPNs 
QSIG Backhaul (TCP based) for Cisco IOS Gateways 
RADIUS EAP Support 
Session Limit Per VRF 
SIP Gateway Support of 'tel' URL 
SIP Gateway Support of RSVP 
SIP Transfer Using the Refer Method and Call Forwarding 
SLB (Server Load Balancing) 
SLB: Alternate IP Addresses 
SLB: Automatic Server Failure Detection 
SLB: Automatic Unfail 
SLB: Bind ID Support 
SLB: Client-Assigned Load Balancing 
SLB: Delayed Removal of TCP Connection Context 
SLB: Dynamic Feedback Protocol (DFP) 
SLB: Maximum Connections 
SLB: Port-Bound Servers 
SLB: Server NAT 
SLB: Slow Start 
SLB: Stateless Backup 
SLB: Sticky Connections 
SLB: SynGuard 
SLB: TCP Session Reassignment 
SLB: Weighted Least Connections 
SLB: Weighted Round Robin 
SRST: Survivable Remote Site Telephony Version 1.0 
Subscriber Service Switch 
VoiceXML For Cisco IOS 
VoiceXML Transfer Enhancements 
VoiceXML Voice Store and Forward 
VoIP Trunk Group Label Routing Enhancement 
VPDN Default Group Template 
VPDN Multihop by DNIS 
 AAA Resource Accounting 
AAA-PPP-VPDN Non-Blocking 
Accounting of VPDN Disconnect Cause 
ACL Default Direction 
Clear Channel T3/E3 with Integrated CSU/DSU 
Connect-Info RADIUS Attribute 77 
Distributed Director - Multiple DNS record 
Distributed Director - Multiple port test 
Distributed Director - Syslog Info 
Distributed Management Event MIB Persistence 
DNS Server Support for NS Records 
Enhanced Test Command 
Fast Fragmentation (Fast-Switched Fragmented IP Packets) 
Fax Relay Packet Loss Concealment 
Frame Relay 64-bit Counters 
FUNI Support for Routers 
HSRP support for MPLS VPNs 
ICMP ECHO-based RTT probing by DRP agents 
Interactive Voice Response (IVR) Version 2.0 
IP Precedence Accounting 
IP to ATM CoS, per-VC WFQ and CBWFQ 
ISDN Advice of Charge (AOC) 
LANE dCEF 
LANE Optimum Switching 
MGCP 1.0 Including NCS 1.0 and TGCP 1.0 Profiles 
MGCP Based Fax (T.38) and DTMF Relay 
MGCP VoIP Call Admission Control 
MGCP VoIP Signaling 
Modem over BRI 
MPLS over ATM: Virtual Circuit (VC) Merge 
MPLS Scalability Enhancements for LSC and ATM LSR 
MPLS Traffic Engineering (TE) - Automatic bandwidth adjustment for TE
tunnels 
MPLS Traffic Engineering (TE) - OSPF Support 
MPLS VPN - OSPF PE-CE Support 
Multilink PPP Enable/Disable via Radius for Preauthentication User 
Multiprotocol over ATM (MPOA) 
Multiprotocol over ATM for Token Ring (MPOA) 
Offload Server Accounting Enhancement 
PPP over ATM (IETF-Compliant) 
PPPoA/PPPoE autosense for ATM PVCs 
PPPoE over Gigabit Ethernet interface 
PPPoE Session limit 
Preauthentication with ISDN PRI and Channel-Associated Signalling
Enhancements 
RADIUS Attribute 66 (Tunnel-Client-Endpoint) Enhancements 
RADIUS Attribute Value Screening 
RADIUS Progress Codes 
RADIUS Tunnel Attribute Extensions 
Redundant Link Manager (RLM) 
Remote Source-Route Bridging (RSRB) 
Resource Pool Management with Direct Remote Services 
RFC 1483 for Token Ring Networks 
RSVP - ATM Quality of Service (QoS) Interworking 
Service Assurance Agent (SAA) Distribution of Data 
Service Assurance Agent (SAA) History Statistics 
Service Assurance Agent (SAA) ICMP Echo Operation 
Service Assurance Agent (SAA) ICMP Path Echo Operation 
Service Assurance Agent (SAA) Reaction Threshold 
Service Assurance Agent (SAA) Scheduling Operation 
Service Assurance Agent (SAA) SNA LU2 Echo 
Service Assurance Agent (SAA) TCP Connect Operation 
Service Assurance Agent (SAA) UDP Echo Operation 
Stream Control Transmission

Off topic. Non Jet direct printers [7:74831]

2003-09-04 Thread David Vital

I'm trying to come up with a solution for centrally manageing and
configuring non jet direct printers.  Example would be lexmark or canon.  I
havn't been able to find a product that will let me consolidate their
administration on one box. I'm not so much worried about managing print jobs
as their network setup and config.

Thanks, 

David


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74831t=74831
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: OT Gibberish in email [7:74740]

2003-09-04 Thread Wilmes, Rusty

compelling indeed!  I wish someone would make an enterprise level spyware
remover (or integrate one into virus scanning).  The best one I've seen is
spybot but it's not exactly something I'd rollout in a business environment
(of course, it might be easier to manage that than to manage gator on every
9x client.

-Original Message-
From: Brian [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 04, 2003 10:55 AM
To: [EMAIL PROTECTED]
Subject: RE: OT Gibberish in email [7:74740]

There's a compelling argument for scheduled virus and spyware
scans/updates..

Brian

The path to a desireable destination
is often more difficult than the path to stay where you are.

On Thu, 4 Sep 2003, Wilmes, Rusty wrote:

 I've been trying to scrounge up the time to build one of these...

 http://lawmonkey.org/anti-spam.html

 combination of bayesian and razor on openbsd acting as an MTA.

 About 1/2 our staff installed freeware screensaver (read: gator) on their
 computers and our spam has gone through the roof.

 -Original Message-
 From: John Neiberger [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, September 03, 2003 2:36 PM
 To: [EMAIL PROTECTED]
 Subject: RE: OT Gibberish in email [7:74740]

 Reimer, Fred wrote:

  It is an attempt by the SPAMers to avoid SPAM software that
  takes a hash of
  the SPAM and blocks SPAM on machines based on these hash
  values.  There are
  some anti-SPAM solutions out there that basically relies on
  the users to
  mark email as SPAM.  When they do, the client machines send the
  hash of the
  SPAM up to the service provider, which shares these hashes with
  all other
  subscribers.  So, if the same exact SPAM is sent to another
  user it would
  automatically get blocked.  These random characters change the
  hash value,
  and hence this method of blocking SPAM is ineffective.

  Use a Bayesian filter program for your SPAM.  I have 3755
  emails in my Junk
  Mail folder now, and I empty it out last on July 18th.  Check
  out
  www.Junk-Out.com.

  Fred Reimer - CCNA

 Someone should develop a SPAM filter that looks for certain types of
 randomness within a message. This would be difficult, but certainly not
 impossible. You'd have to be pretty creative about it but it ought to be
 possible to devise an algorithm that could detect that sort of random
 line--often found in the subject line--and flag it as SPAM.

 I haven't heard of a Bayesian filter before. I'm going to go find out more
 about that right now.

 John
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 **Please support GroupStudy by purchasing from the GroupStudy Store:
 http://shop.groupstudy.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html

Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74822t=74740
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: OT: Cable Lengths [7:74776]

2003-09-04 Thread Dom

I've seen situations where the legal length has been nearly doubled on
full duplex connections without much apparent 
trouble. I don't know if I'd trust a Windoze box in this kind of
configuration, but routers, unix hosts, etc, don't seem 
to mind too much.

What is the difference between a Windoze box with a PCI card in it, a
Solaris Box with the same PCI card in it or even a router with the same
card in it? It all goes up the stack and if the drivers are OK it all
works fine.


Best regards,

Dom Stocqueler
SysDom Technologies
Visit our website - www.sysdom.org




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74832t=74776
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

backup interface [7:74836]

2003-09-04 Thread kaiser anwar

Hi,
   I am having issue with backup interface with isdn. I can ping
   my directly connected bri interface. but as soos as I hit my
   serial backup interface bri 0/0. Bri goes down. i do show isdn
   staus it says layer one deactived. this what it shows for sh ip int
   
Interface  IP-Address  OK? Method Status   
Protocol
Ethernet0/0unassigned  YES NVRAM  up   
up
Ethernet0/0.4  130.4.34.3  YES NVRAM  up   
up
Ethernet0/0.6  130.4.36.3  YES NVRAM  up   
up
BRI0/0 130.4.113.3 YES NVRAM  standby mode 
down
Serial0/0  130.4.100.3 YES NVRAM  up   
up
BRI0/0:1   unassigned  YES unset  administratively down
down
BRI0/0:2   unassigned  YES unset  administratively down
down
Virtual-Access1unassigned  YES TFTP   down 
down
Loopback0  130.4.3.3   YES manual up   
up

Thanks in advance for eveyone's help.

Sincerely,
Kaiser A 



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74836t=74836
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

RE: IS-IS [7:74508]