Route metrics on broadcast networks [7:3308]

2001-05-05 Thread Andy Harding

bit of a teaser I have been thinking about for a while, and haven't really
been able to get clear in my mind:

how do routing protocols calculate metrics on broadcast networks where the
metric may be different between different neighbors?

As an example, say you have a core router with a GE downlink into an ethernet
switch, and you have you distribution switches attached with FE.  Do the
distribution-level routers know to prefer the core router's uplink (all other
things being equal)? and if so, how?

many thanks

Andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3308&t=3308
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Route metrics on broadcast networks [7:3308]

2001-05-07 Thread Andy Harding

thanks for the response - I'm not sure that I explained myself clearly,
should have done a diagram

||  ether1
||
 fe||fe
   R1R2
ge||fe
||
|---|  ether2
|
|fe
  R3

in view of the above, R3 has attached FE route to each of R1 and R2 which
will each announce ether1 with equal metrics, based on the equal cost
upstream.  does R3 have any way of knowing that R1 is GE attached to ether1,
and that it (R3) should prefer the route via R1?

what I am going after is whether, when one might have different bandwidths
(10/100/1000 for ethernet), a router would be able to discern from the
ourting information, which router to prefer in the case of there being
parallel paths to a network, in the case of those routers having
different-speed attachments to an interrim, attached, broadcast network.

hope I've made sense this time ;-)

regards

Andy

- Original Message -
From: "EA Louie" 
To: "Andy Harding" ; 
Sent: Sunday, May 06, 2001 7:01 PM
Subject: Re: Route metrics on broadcast networks [7:3308]


> see these pages:
>
> http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/routing.htm
> http://www.cisco.com/warp/public/103/5.html (this one is very technical,
but
> addresses metric calculation in IGRP)
> http://www.cisco.com/cpress/cc/td/cpress/fund/iprf/ip2907.htm (general
> presentation of route metrics)
>
> - Original Message -
> From: "Andy Harding" 
> To: 
> Sent: Saturday, May 05, 2001 7:28 AM
> Subject: Route metrics on broadcast networks [7:3308]
>
>
> > bit of a teaser I have been thinking about for a while, and haven't
really
> > been able to get clear in my mind:
> >
> > how do routing protocols calculate metrics on broadcast networks where
the
> > metric may be different between different neighbors?
>
> In each routing protocol is an inherent metric value called administrative
> distance. That's the primary routing path determination for IGPs.  Other
> metrics are local and determined by the interface characteristics.
>
> Let's use the case of IGRP.  (RIP is hop-count sensitive and uses that as
> its routing metric).
>
> All the router knows is the properties of its directly connected
interfaces,
> so it uses parameters like interface bandwidth, and delay, and the its
> administrative distance to calculate the route metrics, including the ones
> it learns.  It then sends the routes it has for its directly-connected
> routes and its learned routes to another router.  That other router does
the
> same thing with the learned routes - that is, calculates learned route
> metrics based on the ingress interface bandwidth and delay parameters and
> the administrative distance of the IGRP itself.
>
> >
> > As an example, say you have a core router with a GE downlink into an
> ethernet
> > switch, and you have you distribution switches attached with FE.  Do the
> > distribution-level routers know to prefer the core router's uplink (all
> other
> > things being equal)? and if so, how?
>
> Well, directly connected routes are best, regardless of what your other
> routes may be,  so if the Distribution router and Core router are in
> parallel, the Distribution router would prefer his own route.  Otherwise,
> the routers that are FE connected will have higher metrics than the GigE
> route.  From an uplink perspective, let's say you have a distribution
router
> on the switch, and two paths out:  via GigE core router and via FastE
access
> router.  The distribution router will accept routes from both core and
> access routers.   Distribution router will see them as the same route with
> exactly the same metric unless the metrics have been artificially altered
in
> one or the other router.  Distribution router doesn't know how the core
and
> access routers are connected, and can't make a routing decision based on
> their interface bandwidths.
>
> Let's take another case, where the distribution router has two interface
> paths - one Gigabit to the core, one Fast to the access router.   Let's
also
> say that the core and access routers are parallel - that is, have the same
> destination networks in its routing table.  In the distribution routing
> table, it will have a smaller metric to the core router, and therefore
will
> prefer that path.  However, the routes from the access router will also be
> there, so if the route to the Core router is lost, the backup will be to
the
> access router.
>
> To summarize, the distribution router really has no knowledge of the
uplink
> bandwidth of it's neighbors, so it's no wonder that this has caused you
> sleepless nights.
>
> EIGRP handles metrics 

Re: Terminal Server [7:3939]

2001-05-10 Thread Andy Harding

if you really only have a switch and a router then you could get away with
the WIC-2TA/S with two CAB-SS-232-MT cables and a pair of standard console
cables.  If you just want to console from the router to the switch the use
the AUX port with a standard console cable.

mid-range would be the 4-port NM4A/S, or the 8-port NM8A/S

bit cheaper than an $2,000 (list) NM-16?

Andy

- Original Message -
From: "Kevin Wigle" 
To: 
Sent: Friday, May 11, 2001 12:44 AM
Subject: Re: Terminal Server [7:3939]


> We use this in our lab.
>
> You have a few choices depending on how many lines you want.
>
> NM-16A: Sixteen-port Asynchronous Network Module
> The 16-port asynchronous serial network module supports 16 asynchronous
> serial interfaces at speeds up to 134 kbps. The 16 ports are cabled with
two
> custom "octopus" cables, each terminating in 8 ports, each with an option
of
> physical endpoints, including RJ-45 and DB-25 connectors.
>
> NM-32A: Thirty Two-port Asynchronous Network Module
> The 32-port asynchronous serial network module supports 32 asynchronous
> serial interfaces at speeds up to 134 kbps. The 32 ports are cabled with
> four custom "octopus" cables, each terminating in 8 ports, each with an
> option of physical endpoints, including RJ-45 and DB-25 connectors.
>
> Then the cable assemblies: CAB-OCTAL-ASYNC has 8 lines
>
> The NM-16A requires 2, the NM-32A requires 4.
>
>
> Kevin Wigle
>
>
> - Original Message -
> From: learn learn
> To:
> Sent: Wednesday, May 09, 2001 10:33 PM
> Subject: Terminal Server [7:3939]
>
>
> > Hi, team,
> >
> >   Simple question for you. If I take 2600series router as termial
server,
> > which network module and which kinds of cables (which part no.) I needed
> for
> > reverse telnet into con port of the lab switch and router?
> >
> > thank you in advance,
> >
_
> > Get Your Private, Free E-mail from MSN Hotmail at
http://www.hotmail.com.
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4108&t=3939
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Terminal Server [7:3939]

2001-05-11 Thread Andy Harding

what you will have is a Smart-Serial to RS-232 cable.  The cable will have a
25-pin RS-232 connector on the end - you will need a 25-pin to RJ-45
converter (supplied with 2600 routers), and then plug into your regular
console cable.

check the following - watch for word wrap:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/cis2600/wan_m
od/conntwan.htm#xtocid27353

I'm not 100% certain which way around the DCE/DTE works in this instance -
if console ports are DCE the you need a CAB-SS-232-FC, if DTE then
CAB-SS-232-MT.  Can someone clarify this?

thanks

Andy

- Original Message -
From: "LandCai" 
To: "Andy Harding" 
Sent: Saturday, May 12, 2001 3:51 AM
Subject: Re: Terminal Server [7:3939]


> Hi, Dear Andy,
>
>   Could you let me know if this CAB-SS-232-MT is terminated into RJ45
connector? Because serveral my router and switch's con port is RJ45.I can't
find infor about this cable in cisco web site.
>
> Appreciated of your information,
>
> - Original Message -
> From: "Andy Harding" 
> To: 
> Sent: Friday, May 11, 2001 8:33 AM
> Subject: Re: Terminal Server [7:3939]
>
>
> > if you really only have a switch and a router then you could get away
with
> > the WIC-2TA/S with two CAB-SS-232-MT cables and a pair of standard
console
> > cables.  If you just want to console from the router to the switch the
use
> > the AUX port with a standard console cable.
> >
> > mid-range would be the 4-port NM4A/S, or the 8-port NM8A/S
> >
> > bit cheaper than an $2,000 (list) NM-16?
> >
> > Andy
> >
> > - Original Message -
> > From: "Kevin Wigle"
> > To:
> > Sent: Friday, May 11, 2001 12:44 AM
> > Subject: Re: Terminal Server [7:3939]
> >
> >
> > > We use this in our lab.
> > >
> > > You have a few choices depending on how many lines you want.
> > >
> > > NM-16A: Sixteen-port Asynchronous Network Module
> > > The 16-port asynchronous serial network module supports 16
asynchronous
> > > serial interfaces at speeds up to 134 kbps. The 16 ports are cabled
with
> > two
> > > custom "octopus" cables, each terminating in 8 ports, each with an
option
> > of
> > > physical endpoints, including RJ-45 and DB-25 connectors.
> > >
> > > NM-32A: Thirty Two-port Asynchronous Network Module
> > > The 32-port asynchronous serial network module supports 32
asynchronous
> > > serial interfaces at speeds up to 134 kbps. The 32 ports are cabled
with
> > > four custom "octopus" cables, each terminating in 8 ports, each with
an
> > > option of physical endpoints, including RJ-45 and DB-25 connectors.
> > >
> > > Then the cable assemblies: CAB-OCTAL-ASYNC has 8 lines
> > >
> > > The NM-16A requires 2, the NM-32A requires 4.
> > >
> > >
> > > Kevin Wigle
> > >
> > >
> > > - Original Message -
> > > From: learn learn
> > > To:
> > > Sent: Wednesday, May 09, 2001 10:33 PM
> > > Subject: Terminal Server [7:3939]
> > >
> > >
> > > > Hi, team,
> > > >
> > > >   Simple question for you. If I take 2600series router as termial
> > server,
> > > > which network module and which kinds of cables (which part no.) I
needed
> > > for
> > > > reverse telnet into con port of the lab switch and router?
> > > >
> > > > thank you in advance,
> > > >
> >
_
> > > > Get Your Private, Free E-mail from MSN Hotmail at
> > http://www.hotmail.com.
> > > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > > Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4192&t=3939
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IS-IS queries [7:6638]

2001-05-31 Thread Andy Harding

as we seem to be getting more IS-IS stuff on the list, maybe someone could
help me out here.

I am having real trouble seeing how IS-IS areas and levels fit together.  As
far as I can make out the numbering of areas is arbitary, and all L2 routers
should be in the same area, with the L1/L2 and their downstream L1 routers in
separate ares.  Is this a requirement or a recommendation - some of the
examples in Doyle's TCP/IP book seem to stray from this practise?

Obviously the adjacencies between the L1/L2 and L1 routers should be
circuit-type-l1, but should the adjacency between the L1/L2 (pseudo-ABR I
suppose) and the L2 (backbone) routers be circuit-type-l1-l2 or l2?

Finally, is it recommended to run full CLNS routing throughout, and if so
what
are the advantages?

Sorry if this sounds a bit "how does IS-IS work?", but I have been through
Jeff Doyle's and Radia Perlman's books (only real reference I can find) and
it's just not computing for me.

many thanks

Andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6638&t=6638
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NT vs UNIX [7:6844]

2001-06-01 Thread Andy Harding

PLEASE

Enough!!

set up your own mail-list if need be, but please quit with this nonsense on
this *CISCO* *NETWORKING* mail-list

Paul - any chance you can filter this thread out?

thanks

Andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6844&t=6844
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



what ASes are we? [7:7252]

2001-06-05 Thread Andy Harding

something that would facinate me would be a show of hands relating to who is
with which AS, and maybe where else they had been in their illustrious past?

personally I have been 8372/8220, and am now 2914

Andy

ps - info for identification, not representation




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7252&t=7252
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



MPLS MTU on 29XX/35XX-XL? [7:34464]

2002-02-05 Thread Andy Harding

hi all,

anyone know whether MPLS-size MTUs are supported on the 29XX/35XX-XL
switches?  and if so, from what IOS revision?

thnx

-andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34464&t=34464
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: LSA type-5 suppression across OSPF area boundaries?? [7:12890]

2001-07-18 Thread Andy Harding

**  excuse the change of address/name - have migrated between providers.
DSL now :-)

Nnanna,

thanks for the reply - I'm pretty certain that this is a solution to a
different problem.  If you look closely at the text, what is being achieved
is avoiding additional hops within an area by having non-ASBR routers
forward directly to the target router outside the AS (OSPF meaning, not
BGP), rather than add a hop and transit the ASBR itself.

cheers anyway

Andy

Nnanna Obuba wrote on July 18, 2001 at 10:54 PM:
>
> I believe you can actually suppress the external routestake a look at
> the link below. This actually shows you how to prevent accidental
supression
> of external routes, but with a little creativity, you can make it work for
> you..
>
>
> http://www.cisco.com/warp/public/104/10.html
>
>
> Nnanna
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> [EMAIL PROTECTED]
> Sent: Wednesday, July 18, 2001 3:35 PM
> To: [EMAIL PROTECTED]
> Subject: Re: LSA type-5 suppression across OSPF area boundaries??
> [7:12862]
>
>
> hi all,
>
> thanks for all the replies - gave me some stuff to chew over
>
> have been looking into this some more - it's still bugging me.
>
> my investigations revealed:
>
> * making the area stub or total-stub will not work as type-5s are not
> permitted in the area.  all routers set E=0 in the options field to denote
> stub, and won't talk to non-stub neighbors.  no fooling them apparently...
>
> * summary-address will only summarize external routes originated on that
> local router - hence cannot use to summarize for non-local type-5s
>
> I cannot believe that it is not possible to do something as simple as this
> without resorting to multiple OSPF instances and redistributing between
> them!!
>
> cheers
>
> Andy
>
> Peter Van Oene wrote on July 13, 2001 at 6:43 PM:
>
>
> > Making the area stub will explicitly deny the use of type 4/5 in the
area,
> > hence, this should not work.  Summarization at the ABR would make the
most
> > sense to me.  Odd that it doesn't seem to work.
> >
> > pete
> >
> > *** REPLY SEPARATOR  ***
> >
> > On 7/12/2001 at 6:40 PM John Neiberger wrote:
> >
> > >Could you accomplish this by making the area containing the ASBR a
> > >stubby area?  IIRC, you can put an ASBR inside a stubby area but the
> > >Type-5 LSAs will not leave the area.  I'm not sure about that, but I'd
> > >swear I read that somewhere recently.
> > >
> > >Okay, I just checked this in Giles, 2nd edition.  According to him, the
> > >above is true.  But who knows if it works in the real world.
> > >
> > >Good luck!
> > >
> > >John
> > >
> >  "[EMAIL PROTECTED]"
> > > 7/12/01 1:58:11 PM >>>
> > >hi all,
> > >
> > >have a problem that has been nagging at me for a good long time now...
> > >
> > >say you have a pair of ABRs sitting at an OSPF area boundary, and an
> > >ASBR is
> > >originating Type-5 LSAs from inside the non-backbone area.  Is there an
> > >easy
> > >way to suppress the propagation of the type-5s outside the area?  I
> > >would
> > >have a range statement on the ABRs to advertise the area aggregate, I
> > >just
> > >want to suppress the more specifics.
> > >
> > >I have tried using 'distribute-list out ' which would do it for
> > >me, but for some reason IOS won't allow this with OSPF:
> > >
> > >router(config)#router os 1
> > >router(config-router)#distribute-list 1 out FastEthernet 0/0
> > >% Interface not allowed with OUT for OSPF
> > >router(config-router)#
> > >
> > >I suppose that allowing this could potentially screw up routing if
> > >done
> > >without some care, but JunOS lets you do exactly this sort of thing -
> > >you
> > >can produce some wacky policies, but at least you have the option ;-)
> > >
> > >btw - I know I could prolly do this with multiple OSPF instances and
> > >redistribute between them, but I *really* don't want to get into this
> > >level
> > >of complexity.
> > >
> > >thanks in advance - this one has been driving me mad
> > >
> > >Andy
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12890&t=12890
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: LSA type-5 suppression across OSPF area boundaries?? [7:12905]

2001-07-18 Thread Andy Harding

** excuse the change of email and name - just changed provider

on a Juniper:

[edit protocols ospf]
root@router# show
export type-5-suppress;



area 0.0.0.10 {
area-range 172.16.0.0/16;

}

[edit policy-options]
root@router# show
policy-statement type-5-suppress {
term area-0-suppress {
from {
protocol ospf;
area 0.0.0.10;
external;
}
to {
protocol ospf;
area 0.0.0.0;
}
then reject;
}
then accept;
}

I would groom out the externals from being advertised across the area
boundary as per above, then permit anything else to be processed as normal
with an area-range statement to summarize.

I'm interested in how one might summarize at the type-7 to type-5
translation at an NSSA border.  Do you have the command(s) to hand?

thanks

Andy

Peter Van Oene wrote on July 19, 2001 at 12:56 AM:


Ok, good scenario.

Assuming your network has grown to a point where type 5's are stressing the
AS, some scaling effort must take place.  There are a number of poorly
scaling cludges to this type of scenario outside of OSPF, but I've seen NSSA
areas used here with some success.  The net result is that your individual
areas have no awareness of the more specifics in other areas which isn't bad
assuming your aggregation strategy is clean as they can simply follow the
aggregates put out by the ASBRs.  Within the area, the type 7's provide
enough info for intra area routers to make informed decisions re paths out
toward the customer networks.  Your backbone will naturally see all external
info which shouldn't be an issue as a mid size ISP should have some good
routers therein.

The key point is again that type 5's are unmodified at area borders.  They
in fact flood untouched throughout the AS.  Hence, unlike normal summarizes,
5's aren't repackaged at each ABR before they hit other areas.  For that
reason, you cannot control their flooding scope once they hit the domain
without using area modifications like stubinness.   Interestingly,  due to
type 7's needing to be converted to 5's by ABR's, they are repackaged before
entering the backbone and thus can be summarized via area-range like
commands at ABR's.  Another reason why this is a viable solution to your
situation.

I'm also curious how you can do this with a Juniper?  Can you provide a
quick outline?

Thanks

Peter


*** REPLY SEPARATOR  ***

On 7/18/2001 at 4:54 PM [EMAIL PROTECTED] wrote:

>okay, let me give you a scenario:
>
>say you have a mid-sized ISP network - a size such that it's not really
>worth going with confederations, etc.
>
>say that you have a couple of PoPs and a couple of colo/hosting centres.
>
>let's suppose that we want to run an area0 backbone between the sites, and
>have the infrastructure of each site be an OSPF area.
>
>a bunch of your customers want to multi-home within a particular location
>to
>multiple switches/routers, and since you don't really want the customer to
>participate in your IGP (auughhh) you have to statically route them, and
>redistribute the routes within the area.  summarizing lsa type-5s at each
>ASBR is out, as a customer could drop their uplink to that ASBR, without
>the
>summarizing ASBR dropping the aggregate which would kinda kill their
>traffic
>- good ol' CEF keeps a-load-balancing half the traffic to the router
>without
>a route... ;-)
>
>hence, this is why I want full specifics intra-area, and aggregate-only
>inter-area.
>
>I could do it on a Juniper dammit...
>
>take care  :-)
>
>Andy
>
>Peter Van Oene wrote on July 18, 2001 at 9:14 PM:
>
>Ahh, I did indeed mean to suggest that you filter at the ingress ASBR (the
>one that creates the type 5 in the first place)  Type 5's are unmodified
>throughout the AS and thus there is no mechanism within the protocol to
>control their flow between areas.  However, I'm confused as to why you need

>the full specifics advertised to the area and only the summary to the rest
>of the AS.  Even if you have multiple customer networks attached to the
>ASBR, you are still going to pull traffic destined toward them to the ASBR
>via the aggregate.  What are you gaining by not using the summary address
>command on the ASBR?
>
>
>*** REPLY SEPARATOR  ***
>
>On 7/18/2001 at 3:34 PM [EMAIL PROTECTED] wrote:
>
>>hi all,
>>
>>thanks for all the replies - gave me some stuff to chew over
>>
>>have been looking into this some more - it's still bugging me.
>>
>>my investigations revealed:
>>
>>* making the area stub or total-stub will not work as type-5s are not
>>permitted in the area.  all routers set E=0 in the options field to denote
>>stub, and won't talk to non-stub neighbors.  no fooling them apparently...
>>
>>* summary-address will only summarize external routes originated on that
>>local router - hence cannot use to summarize for non-local type-5s
>>
>>I cannot believe that it is not possible to do something as simple as this
>>without resortin

Re: LSA type-5 suppression across OSPF area boundaries?? [7:12929]

2001-07-19 Thread Andy Harding

Julian,

thanks for the command - what I was really looking for was the cisco
equivalent :-)

if you had read the rest of the thread (20 or so messages) you would see
that this *is* a cisco-related query.  I am looking for a way to do
something on Ciscos, and was bemoaning the fact that I could do what I
wanted easily under JunOS - Peter asked how I would do it with that OS, so I
posted the config excerpt.

thanks anyway

Andy

Julian Eccli wrote on July 19, 2001 at 7:54 AM:
> Andy,
>
> Try the following for the 7-to-5 aggregate translation which can also be
> converted to a filter by setting the "restrict" knob at the end:
>
> [edit protocols ospf area 0.0.0.10]
> nssa {
>  area-range 10.0.0.0/8;
>  }
> }
>
>
http://www.juniper.net/techpubs/software/junos42/swconfig-routing42/html/osp
f-co
> nfig6.html
>
> I am curious, why don't people take Juniper questions to the Juniper
> Groupstudy
> news group?  I know for a fact that a number of folks within Juniper lurk
on
> that newsgroup but not on the Cisco one.
>
>
> -Julian
>
>
> ""Andy Harding""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> : ** excuse the change of email and name - just changed provider
> :
> : on a Juniper:
> :
> : [edit protocols ospf]
> : root@router# show
> : export type-5-suppress;
> :
> :
> :
> : area 0.0.0.10 {
> : area-range 172.16.0.0/16;
> :
> : }
> :
> : [edit policy-options]
> : root@router# show
> : policy-statement type-5-suppress {
> : term area-0-suppress {
> : from {
> : protocol ospf;
> : area 0.0.0.10;
> : external;
> : }
> : to {
> : protocol ospf;
> : area 0.0.0.0;
> : }
> : then reject;
> : }
> : then accept;
> : }
> :
> : I would groom out the externals from being advertised across the area
> : boundary as per above, then permit anything else to be processed as
normal
> : with an area-range statement to summarize.
> :
> : I'm interested in how one might summarize at the type-7 to type-5
> : translation at an NSSA border.  Do you have the command(s) to hand?
> :
> : thanks
> :
> : Andy
> :
> : Peter Van Oene wrote on July 19, 2001 at 12:56 AM:
> :
> :
> : Ok, good scenario.
> :
> : Assuming your network has grown to a point where type 5's are stressing
the
> : AS, some scaling effort must take place.  There are a number of poorly
> : scaling cludges to this type of scenario outside of OSPF, but I've seen
> NSSA
> : areas used here with some success.  The net result is that your
individual
> : areas have no awareness of the more specifics in other areas which isn't
> bad
> : assuming your aggregation strategy is clean as they can simply follow
the
> : aggregates put out by the ASBRs.  Within the area, the type 7's provide
> : enough info for intra area routers to make informed decisions re paths
out
> : toward the customer networks.  Your backbone will naturally see all
> external
> : info which shouldn't be an issue as a mid size ISP should have some good
> : routers therein.
> :
> : The key point is again that type 5's are unmodified at area borders.
They
> : in fact flood untouched throughout the AS.  Hence, unlike normal
> summarizes,
> : 5's aren't repackaged at each ABR before they hit other areas.  For that
> : reason, you cannot control their flooding scope once they hit the domain
> : without using area modifications like stubinness.   Interestingly,  due
to
> : type 7's needing to be converted to 5's by ABR's, they are repackaged
> before
> : entering the backbone and thus can be summarized via area-range like
> : commands at ABR's.  Another reason why this is a viable solution to your
> : situation.
> :
> : I'm also curious how you can do this with a Juniper?  Can you provide a
> : quick outline?
> :
> : Thanks
> :
> : Peter
> :
> :
> : *** REPLY SEPARATOR  ***
> :
> : On 7/18/2001 at 4:54 PM [EMAIL PROTECTED] wrote:
> :
> : >okay, let me give you a scenario:
> : >
> : >say you have a mid-sized ISP network - a size such that it's not really
> : >worth going with confederations, etc.
> : >
> : >say that you have a couple of PoPs and a couple of colo/hosting
centres.
> : >
> : >let's suppose that we want to run an area0 backbone between the sites,
and
> : >have the infrastructure of each site be an OSPF area.
> : >
> : >a bunch of your customers want to multi-home within a particular
location
> : >to
> : >multiple switc

Re: Off Topic - forbidden words [7:13271]

2001-07-22 Thread Andy Harding

Boy6872 wrote on July 22, 2001 at 10:47 PM:
> Way to go, Chuck.
> Keep the wankers in check and maintain the CCIE merit and validity!
> Rob H.  CCNP, CCDP, CCIE WR
>

WR - wassat then?  WAN Routing?

if it is "Written", as I suspect since I don't see a #, then the irony is
obviously lost on you

Andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13297&t=13271
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OTish: pVLANs across non-cisco switches?? [7:14992]

2001-08-05 Thread Andy Harding

hi all,

right, bit of an odd one maybe...

i am in a situation whereby i have a a datacentre architecture with
mixed-vendor (cisco/foundry) kit.  i have multiple cisco 6509s as
distribution-layer, and a pair of foundry BigIrons as core (dual trunk
uplinks, etc.).  can i run pVLANs on the dist-layer ciscos and have them
talk to one-another via the foundrys?

i am thinking that this *should* work  foundry seem to support the
extended vlan #s - up to 4k and a bit (forget the exact #) - is there a
reason why end-hosts connecting to the ciscos *only* - not the bigirons -
might not work with pVLANs?

dot1q tagging/trunking on the uplink trunks of course - much as I love ISL
... ;-)  no vtp - ie transparent mode, local vlan databases on all switches.
i'm hoping this should make everything transparent to the foundrys
(foundries?), right??

as always, many thanks in advance

-andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14992&t=14992
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Transit traffic

2000-08-18 Thread Andy Harding

transit means where traffic from a direct BGP peer is not destined for your
AS - ie it transits your AS to go somewhere else. this is common between
service providers, but ISP customers will typically take their upstream as
transit, but the ISP not use the customer as transit

hth

Andy


- Original Message -
From: Subramanian Nallasivam <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, August 18, 2000 9:06 PM
Subject: Transit traffic


> Hi,
>
>   Could somebody there can explain me what do you mean by  transit
> traffic in the contest of BGP . What kind of information does it
> carries.
>
> TIA,
> -Subbi.
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cat 2901 for sale - UK only

2000-06-04 Thread Andy Harding




Anyone interested in a Catalyst 2901 for lab 
study?
 
"Classic" Catalyst command line as per Cat 
5000/5500, 600/6500.  Supervisor I with 2 X 100-base-T/MII, line card with 
12 X 10/100-base-T.  Supports VLANs, ISL, trunking, FEC, etc.
 
Great lab switch - sad to sell but have 6509s with 
MSFC cards at work now and a VAT bill to pay ;-)
 
Offers aroung £1000 ono
 
Andy


Re: Bridging ?

2000-06-04 Thread Andy Harding

not a real useful reply Gerwin...

certain schenarios call for this technology - mainly for legacy IBM-type
networking (in my experience) - SNA and the like.  I don't have a whole lot
of experience doing this in a LAN environment but have done a bunch of DLSw+
stuff.

Also here is DECNet, LAT, NetBIOS and the like, so there is call for this
stuff, perticularly in Banking-type places where there is a large amount of
established mini/main-frame type investment where moving away from the
bomb-proof data-processing framework is more expensive than doing a little
clever networking...

best of luck - if you learn this you'll most likely never have to use it,
but if you don't then sooner or later it's going to come along and bite you
in the arse;-)

take care

Andy

- Original Message -
From: Gerwin Boschloo <[EMAIL PROTECTED]>
To: 'Nathan Cruz' <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Sunday, June 04, 2000 10:18 PM
Subject: RE: Bridging ?


> it is very important, I see it every day!!!
>
> Gerwin
>
> -Original Message-
> From: Nathan Cruz [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, June 01, 2000 1:37 PM
> To: [EMAIL PROTECTED]
> Subject: Bridging ?
>
>
> I'm studying Bridging and I was wondering how important this technology
is.
> Not in terms of knowing it for the test but I was wondering how much it is
> used in the real world(using a router as a bridge). With dedicated
switches
> becoming inexpensive would you find this in much use anymore(other than
> maybe translational bridging)? Any enlightenment would be appreciated.
>
> Nathan
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



new version of 802.1q?

2000-06-04 Thread Andy Harding



have been having (semi) argument at work about 
dot1q versus ISL
 
my understanding is that dot 1q runs one instance 
of spanning tree per trunk, rather than per vlan as ISL does - hence if one VLAN 
is blocking then dot1q disables the entire trunk
 
A collegue of mine reckons that dot 1q now does as 
per ISL and runs STP on a per-vlan basis, but the 802.1q spec has changed 
without the # changing
 
someone help me out here...
 
thanks
 
Andy
 
 


Re: How to make redundancy using BGP?

2000-06-04 Thread Andy Harding

I work for a european ISP as a network engineer and get this kind of cr*p
all the time

If you are SERIOUS about redundancy the go get an AS# and some PI (Provider
Independant) space from ARIN, etc - multi-home with two ISPs, take a full
routing table, advertise your own routes, AS#, etc.  ie take a transit
agreement (as opposed to a peering agreement which is something else
entirely)

There is no way in the world that two providers are going to sync up private
AS #s - in fact they couldn't do it as it would mean they would both be
advertising the same address space as a part of their native AS# which you
know can't be done.

I'm a little hazy about DNS/bind but if you must have two PA (Provider
Aggregate) address spaces from two providers then I believe that you can
equally weight the two entries to resolve out alternately, although this is
potentially a nightmare from the tracerouting/symetrical routing standpoint
as DNS may well reolve ut differently each time.  (not entirely sure about
this one - quite happy to be shot down if someone can out me straight)

HTH

Andy
- Original Message -
From: Eric Lam <[EMAIL PROTECTED]>
Newsgroups: groupstudy.cisco
To: <[EMAIL PROTECTED]>
Sent: Thursday, June 01, 2000 4:09 AM
Subject: Re: How to make redundancy using BGP?


> Hi Daniel,
>
> There are two way to do it:
>
> 1. the two ISP to agree on assign you a private BGP no. (I remember it
> should be 65xxx, could someone let me know) and run BGP.  Info. as follow:
> http://www.cisco.com/warp/public/cc/cisco/mkt/ios/nat/tech/emios_wp.htm
>
> 2. using route-map to map diff. next-hop address to diff. NAT pool.  This
> should work fine except I have problem with the icmp message (can't ping
> from inside to outside).
>
> Good luck, Eric
>
> "Daniel Ji" <[EMAIL PROTECTED]> wrote in message
> 8h4ebg$549$[EMAIL PROTECTED]">news:8h4ebg$549$[EMAIL PROTECTED]...
> > The following problem has obsessed me a long time:
> >
> > Our company has two ISPs, thus we have two links to internet, and each
one
> > assign their own IP blocks to us. now we want to have redundancy so when
> one
> > link is down, we can use another link for a mission-critical server to
> > continue to run.
> >
> > my question is:
> > 1)Do we have to have our  own Internic assigned AS number so we could
run
> > BGP to "advertise" to the Internet that we have more than one route to
the
> > Internet?
> >
> > 2)Can we use an IP address assigned from our ISPs or Do we have to have
> our
> > own IP in order to meet the requirement?
> >
> > Any help greatly appretiated!
> > Thanks in advance
> > Daniel
> > CCNA
> >
> >
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > ---
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fw: whats a nibble?

2000-06-04 Thread Andy Harding

> thought that it was 2 hex characters- hence the hex reverse of each nibble
> in Ethernet to Token Ring bridging conversion
>
> failing that a sub-byte portion of a multi-byte string for manipulation of
> some kind?
>
> someone put me straight please...
>
> Andy
> - Original Message -
> From: Lawrence Dwyer <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Thursday, June 01, 2000 11:03 PM
> Subject: Re: whats a nibble?
>
>
> > small bite
> > or half a byte = 4 bits which is usually on hex #
> >
> > [EMAIL PROTECTED] wrote:
> >
> > > What exactly is nibble?
> > >
> > > ___
> > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > --
> > Lawrence Dwyer, MCSE CCNA
> > Sherikon, Inc
> > 301-619-7946
> >
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fw: OSPF vs ISIS

2000-06-04 Thread Andy Harding

> try hiring staff with IS-IS experience...;-)
> 
> - Original Message - 
> From: Kent <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Sunday, June 04, 2000 6:08 PM
> Subject: OSPF vs ISIS
> 
> 
> > It looks to me that everybody prefers OSPF in our
> > company, just wondering any reasons that we do not
> > want to use ISIS?
> > 
> > Thanks
> > 
> > Kent
> > 
> > 
> > __
> > Do You Yahoo!?
> > Yahoo! Photos -- now, 100 FREE prints!
> > http://photos.yahoo.com
> > 
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > 
> 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fw: issues with HSRP

2000-06-04 Thread Andy Harding



> Don,
>
> what Cisco are telling you is rubbish - if you have the exact same configs
> on both MSFCs then nothing will work - you can't have the same IP
addresses
> on the physical cards, same priorities, both with/without  preempt, etc...
>
> I run 6509s with MSFCs with 100+ HSRP sessions per card with no problems -
> except when the backplane of a chassis blew up on me :-(  It really
doesn't
> matter what the configs are so long as the VLAN #s and group #s match, the
> priorities are different, and the cards can see the keepalives (enable the
> appropriate vlans on the uplinks if you're running HSRP between switches).
>
> Don't know what LU6.2 is but HSRP is an IP L3 thing so I don't quite get
> where bridging fits with that - maybe DLSW+-type thing?  Failover at L2
> needs to be STP-based...
>
> If you want to nominate a particular card as primary come what may, you
need
> the preempt on the end of the priority statement, so that if the lower
prio
> card is live and the primary comes back after a failure it will take it
back
> from the secondary.
>
> Don't know of any tools for this - prefer doing it manually as the two-way
> syncing of the Sups throws me as I never know for sure which way it will
> go...
>
> let me know how you get on
>
> Andy
>
>
> - Original Message -
> From: Don Dettmore <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, June 01, 2000 2:26 PM
> Subject: issues with HSRP
>
>
> > Greetings
> >
> > I implemented HSRP on my Catalyst 6006 w/ redundant Supervisor/MSFCs.
> >  I did a failover test - and it performed well - the redundant Supe
> > failed over and everything seemed to work fine.
> >
> > However, when the promeary Supe came back online - some things did
> > not work right.  Mainly, bridging of LU6.2 traffic failed.
> >
> > I called Cisco, and they said that with HSRP, both router configs
> > must be the same (in my case, VLAN 1 was shutdown on one of the
> > routers).
> >
> > Does anyone have any insight on this?  Do the router configs have to
> > be EXACTLY the same - line by line?  Does anyone know of any tools to
> > sync the configs. (I have just started playing with resource manager
> > essentials).
> >
> > TIA
> >
> > Don Dettmore
> > Lead Network Engineer
> > Fiserv - CBS Worldwide
> > (407) 513-5236
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fw: Newbie Access-List question

2000-06-04 Thread Andy Harding




> access-list <100-199> permit tcp 
>  host  range 20 21
> access-list <100-199> permit tcp any host  eq 80
>
> you can use any extended access-list # (100-199) - extended for
> source/destination/traffic-type - permit 20 and 21 (ftp and ftp-data) for
> your address space, and permit www/http (port 80) for anyone - I assume
that
> you want others to be able to browse your web server...
>
> apply to the appropriate interface (ie your external, outward facing WAN
> port, applied inbound) - in this instance you shouldn't even need the
first
> permit as internal traffic won't traverse that interface - kill off
unwanted
> traffic at entry point to be sure
>
> remeber the implicit deny...
>
> HTH
>
> ANdy
> - Original Message -
> From: Elise J Lowenstein <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, June 01, 2000 2:50 PM
> Subject: Newbie Access-List question
>
>
> > Hi all,
> > This is my first post and I hope it is appropriate.
> >
> > I'd like to create an access list.
> > Here's the situation:
> >
> > I need to restrict FTP traffic to a web server.  We would like
> > people
> > within our domain to be able to ftp to the web server. The second half
is
> > that we do not want any ftp traffic from outside of our domain hitting
the
> > web server.
> >
> > We are running ios 11.3.
> >
> > Any suggestions?
> > Thanks,
> > Elise
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Password recovery on Cat 2924 XL ?

2000-06-04 Thread Andy Harding

search on "password recovery 2924XL"

or

http://www.cisco.com/warp/public/474/10.html

or

Catalyst 2900XL and 3500XL Password Recovery

Unplug the power cord from the back of the switch.
While holding down the "Mode" button, reconnect the power cord to the
switch. You can release the "Mode" button a second or two after the LED
above Port 1 x goes off.
Enter the flash_init command.
The baud rate of the console port has now been reset to 9600; if your
console stops working, reset its baud rate to 9600 as well.
Enter the load_helper command.
Enter the dir flash: command.
Rename the configuration file; from "config.text" to "config.old", for
example. Do this by entering the rename flash:config.text flash:config.old
command.
Boot the system with the boot command.
Enter "N" when promted to start the Setup program.
Enter "N" when asked if you want to continue with the configuration.
Enter "en" at the switch prompt.
Rename the configuration file with the rename flash:config.old
flash:config.text command.
Copy the configuration file in to memory using the copy flash:config.text
system:running-config. Press  in response to the two confirmation
prompts.
The configuration file is now loaded, and you can configure a new password
normally:

Enter the config terminal command.
Enter the enable password [new_password] command.
Write the running configuration to the configuration file using the write
mem command.

have done this and it works!!

take care

Andy
- Original Message -
From: Phil Barker <[EMAIL PROTECTED]>
To: cisco GroupStudy <[EMAIL PROTECTED]>
Sent: Sunday, June 04, 2000 11:08 PM
Subject: Password recovery on Cat 2924 XL ?


> Hi,
>   Has anyone got a cisco link for this. I've found
> various links on cisco.com when searching for
> 'password recovery' but cannot find anything explicit
> for this switch.
>
> I've tried the standard IOS technique but cannot get
> to Rom monitor mode.
>
> I managed to guess about the hard-switch on the front
> but it takes me to a mode that I don't understand.
>
> Cheers,
>
> Phil.
>
> 
> Do You Yahoo!?
> Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
> or your free @yahoo.ie address at http://mail.yahoo.ie
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: new version of 802.1q?

2000-06-05 Thread Andy Harding



spot on - draft available at:
 
ftp://p8021:[EMAIL PROTECTED]/8021/s-drafts/d4/802-1s-d4.pdf
 
don't know about spanning forest 
tho...;-)
 
cheers
 
Andy

  - Original Message - 
  From: 
  Eric 
  Fairfield 
  Newsgroups: groupstudy.cisco
  To: [EMAIL PROTECTED] 
  Sent: Monday, June 05, 2000 3:38 PM
  Subject: Re: new version of 802.1q?
  
  I believe 802.1s is the standards group working 
  on Spanning Forest (per vlan stp)
  
"Andy Harding" <[EMAIL PROTECTED]> 
wrote in message 01f801bfce8a$c41bace0$[EMAIL PROTECTED]">news:01f801bfce8a$c41bace0$[EMAIL PROTECTED]...
have been having (semi) argument at work about 
dot1q versus ISL
 
my understanding is that dot 1q runs one 
instance of spanning tree per trunk, rather than per vlan as ISL does - 
hence if one VLAN is blocking then dot1q disables the entire 
trunk
 
A collegue of mine reckons that dot 1q now does 
as per ISL and runs STP on a per-vlan basis, but the 802.1q spec has changed 
without the # changing
 
someone help me out here...
 
thanks
 
Andy
 
 


Re: BGP Routers Available

2000-06-08 Thread Andy Harding

Try any of the Looking Glasses, suggest:

http://nitrous.digex.net/

this is basically a remote shell (rsh) into an IXP/NAP Cisco router which
lets you do a little more than it seems - try doing "reg ^$" from
the BGP radio button and you'll see any routes originated from your AS, etc,
etc.

check out the source code (PERL) as well to see how it works:

http://nitrous.digex.net/source/source.html

notice that it won't let you pull an entire global routing table!

have fun

Andy
- Original Message -
From: Mundy, Nick <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, June 08, 2000 7:29 PM
Subject: BGP Routers Available


> Does anybody have a list of routers that it is possible to Telnet into and
> take a look at the configuration and routing tables?
>
>
> Nick Mundy
> Network Specialist
> NEC Business Network Solutions
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLAN Trunk traffic question

2000-06-08 Thread Andy Harding

switch=bridge (multiport in ASIC) = transparent, MAC address learning-type
thing, hence

broadcast > all switches (with that VLAN)
unicast > switch with attached MAC address

proviso:

first packet of unicast stream to unknown MAC > broadcast (to determine
attached switch)

maybe a little after the fact, but makes sense to me at least

Andy
- Original Message -
From: John Neiberger <[EMAIL PROTECTED]>
To: Fred Nielsen <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Monday, June 05, 2000 6:02 AM
Subject: Re: VLAN Trunk traffic question


> Thank you!  I've been trying to find the answer to that for a while now.
I
> don't have a way to test it on our production network or I would have
simply
> set it up and watched what happened.  My bosses get a little upset when I
> start playing with our corporate backbone switches just for the fun of it.
> :-)  silly people...  It's not like I'd hurt something...well, there was
> that one time when I made the 7513 reboot...during business
> hourstwiceoops...
>
> Thanks again!
>
> John Neiberger
>
> >  To answer your question, I believe the switch ports, whether trunked or
> not,
> >  still forward based on the table of learned MAC-addresses.
> >
> >  Meaning that a VLANx packet, assuming the destination MAC address is
> already
> >  learned, will only traverse the trunk port towards the valid
destination.
> >
> >  --
> >  Fred Nielsen [[EMAIL PROTECTED]]
> >  --
> >
> >
> >  John Neiberger <[EMAIL PROTECTED]> wrote in message
> >  24049784.959891399421.JavaMail.imail@tiptoe">news:24049784.959891399421.JavaMail.imail@tiptoe...
> >  : In this case, though, both switches B and C are in the same VLAN, but
I
> >  : wouldn't want traffic destined for C going down the trunk connected
to
> B.
> >  : This would be a waste of time and bandwidth.  I'm trying to determine
> if
> >  the
> >  : trunk will pass ALL traffic for that VLAN, or only VLAN traffic that
is
> >  : actually destined for an endhost on the opposite end of a particular
> >  trunk.
> >  : :-)  That barely makes senseheh heh.
> >  :
> >  : >  If you use ISL, it will pass traffic only if it is destined for
that
> >  : VLAN. It
> >  : >  does frame tagging.
> >  : >  It won't pass unnecessary traffic.
> >  : >
> >  : >
> >  : >
> >  : >  John Neiberger wrote:
> >  : >
> >  : >  > Ok, I'm suffering from a brain cloud at the moment.  So, willing
> to
> >  : suffer
> >  : >  > the comic flames and arrows, I ask the following question:
> >  : >  >
> >  : >  > Assume we have three switches: A, B, and C.  A has a fast
ethernet
> >  : >  > connection to B and another to C.  B and C are not directly
> >  connected.
> >  : At
> >  : >  > this point, these are not trunk lines and they are in the same
> VLAN.
> >  : That
> >  : >  > means only traffic destined for B goes down the line to B, and
> >  traffic
> >  : >  > destined for C goes to C.
> >  : >  >
> >  : >  > Now, if I were to make both of those connections trunk lines,
> either
> >  : ISL or
> >  : >  > 802.1q, would I still have only B-destined traffic going to B or
> >  would
> >  : that
> >  : >  > trunk be passing all traffic for that entire VLAN up to B even
> though
> >  : >  > C-destined traffic is a waste of bandwidth on the B trunk?
> >  : >  >
> >  : >  > Thanks for the help, as always!
> >  : >  >
> >  : >  > ___
> >  : >  > Get 100% FREE Internet Access powered by Excite
> >  : >  > Visit http://freelane.excite.com/freeisp
> >  : >  >
> >  : >  > ___
> >  : >  > UPDATED Posting Guidelines:
> http://www.groupstudy.com/list/guide.html
> >  : >  > FAQ, list archives, and subscription info:
> http://www.groupstudy.com
> >  : >  > Report misconduct and Nondisclosure violations to
> >  [EMAIL PROTECTED]
> >  : >  > ---
> >  : >
> >  : >  ___
> >  : >  UPDATED Posting Guidelines:
> http://www.groupstudy.com/list/guide.html
> >  : >  FAQ, list archives, and subscription info:
http://www.groupstudy.com
> >  : >  Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
> >  :
> >  :
> >  :
> >  :
> >  :
> >  : ___
> >  : Get 100% FREE Internet Access powered by Excite
> >  : Visit http://freelane.excite.com/freeisp
> >  :
> >  : ___
> >  : UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> >  : FAQ, list archives, and subscription info: http://www.groupstudy.com
> >  : Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
> >  : ---
> >
> >
> >  ___
> >  UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> >  FAQ, list archives, and subscription info: http://www.groupstudy.com
> >  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>
>
>
>
> ___
> Get 100% FREE Internet Access

Re: Free Poster:Security, From Lucent

2000-06-08 Thread Andy Harding

Good stuff, always concerned about the security of my posters...

Andy
- Original Message -
From: Makarand Yerawadekar <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 07, 2000 8:38 AM
Subject: Free Poster:Security, From Lucent


>
> Check the URL
>
>
http://www.lucent-networkcare.com/scripts/registration/registeruser.asp?regt
ypeid=29
>
> Please watch the wrap.
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: WS-C1912-A Question.......

2000-06-08 Thread Andy Harding

Yup - just tftp upload the sucker

no problems - the Enterprise s/w is better than that of the original
2900XL-series switches - ie supports trunking - nice little switch to
partner with your cat5-alike, play around with vlan STP priorities on the
dual 100-base uplinks, permit different vlans on the trunks, etc

Andy
- Original Message -
From: Michael W. Oliver <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, May 21, 2000 2:00 AM
Subject: WS-C1912-A Question...


> Can the WS-C1912-A switch (which is the standard switch) be upgraded to
the
> Enterprise level by just loading the Enterprise firmware via TFTP?  I have
> done this and it seems to work, but I want to know if anyone else has, and
> more specifically whether they have experienced any problems.  Thanks
much!
>
>
> Regards,
>
> Michael W. Oliver
> mailto:[EMAIL PROTECTED]
> http://michael.gargantuan.com
> Page me at mailto:[EMAIL PROTECTED]
> **
>
>
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: tftp program...

2000-06-08 Thread Andy Harding

much nicer:

ftp://ftp.3com.com/pub/utilbin/win32/3cd209.zip

include tftp client and server, ftp server and SYSLOG (so useful you would
not believe it till you try it).

sorry to stray off the Cisco line but this is so cool...

Andy
- Original Message -
From: Deepak Sharma <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; cisco <[EMAIL PROTECTED]>
Sent: Thursday, June 08, 2000 4:02 AM
Subject: tftp program...


> hi paul
>
> thanks for the last response on CCNA question i had..
>
> i have one more problem...
>
> im telnting to a router in a lab from www.r1r2.comits a pretty cool
> sitethey let u mess around with their router lab for FREE!!!
>
> so i've been using that for awhile now, doin my labs and learning
> access-lists and so on...but my problem is...im been trying to setup a
> tftp server on my computer at homeso i can tftp the config ( *.bin )
> to my computer for future refernece and stuff...plus also just to see if
> it worksi've tried ALOT of free and shareware tftp server programs,
> i've downloaded them from cnet...but they just don't work!!!..i know im
> setting them up right...host name and so on..but when i "copy runn
> tftp" and then type in my ip address, it says failed transfer...and im
> really getting frustrated!!!..and im pretty sure its the server program
> for tftp on my comp
>
> can u recommend a good tftp server prog that works.it would be a
> great help
>
> thanks Deepak
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



L3 keepalives without routing protocol?

2000-06-08 Thread Andy Harding



Hi all,
 
strange problem for y'all...
 
I have a problem whereby a down circuit does not 
necessarily "down" an interface (via ATM switch - am using OAM but not 
foolproof).  Is there some way that I can enable a L3 keepalive without 
running a global IGP (bear in mind that this is between my core routers and 
several thousand 25XX/26XX clients, and I don't want to give them a routing 
table, just a default route).
 
We run a NOCOL-type daemon that alerts me if a 
machine has been unpingable for >15 minutes, but am looking for a sure-fire 
way to have a core router send the NMS a trap when a circuit becomes unreachable 
at L3.
 
any help much appreciated as always
 
Andy


Re: Unable to load IOS to flash

2000-06-08 Thread Andy Harding

don't know for certin, but a way back I had a knackered flash and I think on
this level of router you can get around this type of thing by formatting the
flash (maybe...) or try partitioning it, then de-partitioning it.  If all
else fails then replace it - not a huge amount of money

HTH

Andy
- Original Message -
From: Travis Gamble <[EMAIL PROTECTED]>
To: GroupStudy Mailing List <[EMAIL PROTECTED]>
Sent: Monday, May 22, 2000 7:45 AM
Subject: Unable to load IOS to flash


> Hi all,
>
> I'm having a problem loading an updated version of the IOS into the flash
on
> a 7206 router.
>
> Currently, it has 128MB of RAM, a 4 port 10 BaseT card, a 1 port 100 BaseT
> card and a 1 port AUI controller.  It also has an NPE 150 installed.
>
> The original IOS that came with it (I forget the version) doesn't support
> the NPE, so we need to update it.  Currently it boots from a TFTP server
to
> keep it running, but that isn't a very good solution.  I'm not certain of
> the exact error message, but it mentioned something about a bad block in
the
> image.
>
> Does this ring a bell with anyone?
>
> Any debugging tips?
>
>
> Regards,
> Travis Gamble
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Static OSPF neighbors?

2000-06-08 Thread Andy Harding



Is there any way of specifying OSPF neighbors 
statically?  I know of the method whereby you specify neighbors on 
NBMA-multipoint-type networks, but I want to specify a list of neighbors to form 
adjacencies with and barr all others.  I have had a look and the only way I 
can find of doing this is via authentication - MD5, etc...
 
I have been told that this is possible on 3Com 
routers - ie specify a list of addresses to permit adjacency with, but can't 
find an equivalent thing within the IOS.
 
thanks as ever
 
Andy


Re: Off Topic Is Star Trek Transport UDP or TCP? WASRE: Making a switch behave like a hub

2000-06-19 Thread Andy Harding

Along the same daft lines

what are the chances of getting a groupstudy search engine based on bgp
regexps?  maybe something like:

sh groupstudy msg regexp _Howard C Berkowitz_

sh groupstudy msg regexp ^Radia Perlman$

just have to avoid discussions on private peering

must get out a little more

Andy

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NAT

2000-06-26 Thread Andy Harding




'fraid not - what I normally do for this sort of stuff is copy and paste to 
a text editor, and stick a "no" in front of each entry, then copy-paste back in 
- especially good for large access-lists (although remember to put a "no 
access-list xxx" in front of the paste back.
 
Andy
 
Mark <[EMAIL PROTECTED]> wrote 
in message 8irdj5$3mv$[EMAIL PROTECTED]">news:8irdj5$3mv$[EMAIL PROTECTED]...> 
Is there a way to remove multiple Nat entries (static) with one command?> 
> Mark> > > 
___> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html> 
FAQ, list archives, and subscription info: http://www.groupstudy.com> Report 
misconduct and Nondisclosure violations to [EMAIL PROTECTED]> 



Re: MSFC Routing

2000-06-30 Thread Andy Harding

Daryn,

you don't say which switch you can't ping from the server

do you have a vlan interface (as opposed to a vlan) defined in the 2924
switch?  by default the IOS will only create an interface for vlan 1, and
will only let you have one interface live at one time - a bit like having
the sc0 interface assigned to a particular vlan on the Cat5X00/6X00 series.

I'm assuming that you can see the vlan on the 2924 - ie it is talking vtp to
the 6500, and the vlans are being propogated (the vtp communities do match
don't they?).  do the encapsulations on the trunk match?  try turning
pruning off - keep the number of variables down until you get them talking
initiailly

Does the trunking work between the two 6500s?  Can you ping back and forth
between the two MSFCs?  is HSRP working or are the two interfaces both in
active mode because they're not talking to each other?

hth

Andy
- Original Message -
From: Bartlett, DS1 <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, June 29, 2000 11:30 PM
Subject: MSFC Routing


> I have two 6506's with MSFC PFC cards attached to the supervisors.  I have
> configured multiple VLAN's on the Switches and a corresponding Interface
on
> each MSFC.  I also have HSRP running between the two 6500's.  I have
> assigned IGRP 1 with all the correct networks listed.  I have turned on IP
> routing.  One of the VLAN's is called Server Farm, to which the obvious
> occurs, I have attached servers.  I have trunking turned on to the 2924
> switch (running Enterprise Code) from each 6500.  I have also pruned all
> VLAN's except the Server Farm VLAN from the Trunk.
>
> Problem:  I cannot ping from a switch to the server.
>
> This is a pre-production setup and though it is time critical, I am not
down
> hard because of it.  If someone has great and wonderful suggestions I
would
> greatly appreciate them.
>
> Thank You,
> Daryn P. Bartlett
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: E1 question

2000-07-11 Thread Andy Harding

bit shaky on this, but here goes...

there is a standard - G.703/704 - it's not just a cisco thing

T/S 0 is used for signalling, the remaining 31 channels (1-31) are used for
data - hence the 1,984kb/s bandwidth rather than the 2,048 you might expect.
Under a cisco E1 you would configure a virtual serial, S1/0:0 over all
timeslots like this:

controller E1 1/0
 channel-group 0 timeslots 1-31



interface Serial1/0:0
 

you can configure multiple virtual serials if you wish, for when you are
aggregating multiple sub-E1s on the hub of a hub-and-spoke for example.

Believe that T/S 16 was once used for signalling also, but can't quite
remember.

HTH

Andy

- Original Message -
From: Peter Van Gup <[EMAIL PROTECTED]>
Newsgroups: groupstudy.cisco
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 11, 2000 12:25 AM
Subject: E1 question


> Can someone tell me what is the maximum of timeslots on an E1 can be used
to
> transmit data. Does this depent on a Cisco interface or is there a
standard
> for. I also would like to no what are the difference between an
channelized
> and a unchannelized (framed /unframed) E1.
> What kind of info is transmitted over TS 0 ?
>
> Any help or good resources about an E1 are apreciated.
>
> Thanks in advance
> Michael.
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 3640 rommom> xmodem -r (download IOS...

2000-07-11 Thread Andy Harding



Peter,
 
you need the confreg to be 0x2102 - 
see:
 
http://www.cisco.com/warp/public/474/pswdrec_1600.html
 
also on the 36X0s you can do a tftpdnld and 
drap an image off a tftp server from the rommon mode (damn sight quicker than 
xmodem'ing it) - need to set up the ip details first tho
 
HTH
 
Andy

  - Original Message - 
  From: 
  Peter 
  
  To: [EMAIL PROTECTED] 
  Sent: Tuesday, July 11, 2000 5:08 
AM
  Subject: 3640 rommom> xmodem -r 
  (download IOS...
  
  
  I did 
  this a few times today. 
   
  I 
  somehow erased my flash.
  So 
  when I reload I go into Rommon>
  After 
  my new ios image is downloaded I go into setup mode and configure the router 
  the way I want it.
  I do 
  copy run star to save what I have just configured to start-up. Then I double 
  check and make sure it is there by sh 
  start.
  Then I 
  reload the router and I’m back in Rommon>. I changed the "confreg 0x2101" 
  and it does the same thing.
  It 
  says I have a bad image. (This is the second one I used, so the image is 
  probably good.)
  What 
  am I doing wrong?
   


OT: UK DSL [7:19138]

2001-09-08 Thread Andy Harding

hey,

anyone found a decent UK BT DSL solution?

what I am looking for is some kind of hardware firewall solution for the
(aaauugh!!) USB connection you get (unless you have less sense than money -
ie business enet presentation)

I have looked at the linix solution, which doesn't really do if for me
(no-one *dare* suugest m$), and am evaluating the BSD solution, which seems
to work so far

anyone who has done ths with h/w - cisco or other, I would be *very*
interested in knowing - on/off list as you feel appropriate

regards

-andy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19138&t=19138
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



anyone going to RIPE-40? [7:19139]

2001-09-08 Thread Andy Harding

seems like a good time to meet up, for those who would like, will be there,
etc.

maybe see whether we can snag a meeting roomn for an hour or so .. ? - maybe
we can grab HCB and/or other players...

any comments, ideas, etc. welcome

be nice, and maybe I can organize... ;-)

let me know

-a




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19139&t=19139
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]