RE: Fluke one touch Network assistant and RCS SafeNet software [7:54887]

2002-10-04 Thread Blair, Philip S

If you attached the Fluke to a switched port then it will only see network
traffic destined to the device on that port and multicast/broadcast traffic.

It would seem than that your broadcast traffic is 0.8% of your available
bandwidth, 80% of your 1% utilization.  That seems reasonable, I'd look
elsewhere for the problem.

One option if your equipment supports it would be to span the vlan traffic
to a port and plug the fluke into the spanned port.  Depending on you
network design you still may only see a subset of your traffic.

Philip

-Original Message-
From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]]
Sent: Friday, October 04, 2002 6:35 AM
To: [EMAIL PROTECTED]
Subject: Fluke one touch Network assistant and RCS SafeNet software
[7:54860]


Hi...

 

Recently we found that LAN is getting slower and I used Fluke One Touch
Network Assistant to check the health of network.  And it gave me the
following.

 

Utilization 1%

Error  0 %

Collision 0%

Broadcast 80 %

IP 48%

Station >250 %

 

Do you think the fluke output indicate that our network got problem?  The
broadcast portion is quite high and I tried to find out which pc contribute
to the broadcast, it gave me 

 

PC-A 6%

PC-B 6&

PC-C 6%

PC-D 6%

PC-E 6%

PC-F 6%

PC-G 6%

PC-H 6%

PC-I 6%

 

All the PC that listed are installed with RCS software, when we uninstalled
RCS from the PC, the PC's broadcast will be gone.  Why RCS caused the
broadcast, I am not sure whether it is the cause of our network slowness or
not.  Any idea?  

 

Thanks in advanced

 

Sim

 

 

 


==
De informatie opgenomen in dit bericht kan vertrouwelijk zijn en 
is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht 
onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en 
de afzender direct te informeren door het bericht te retourneren. 
==
The information contained in this message may be confidential 
and is intended to be exclusively for the addressee. Should you 
receive this message unintentionally, please do not use the contents 
herein and notify the sender immediately by return e-mail.


==




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=54887&t=54887
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: TACACS+ [7:53721]

2002-09-20 Thread Blair, Philip S

Mike,

I guess your reading comprehension skills are on par with your tact.

The original post was in regards to SSH and TACACS, and my reply to that
post was to point out the functional difference between SSH or Telnet access
and TACACS.

The conversion between the client and router is encrypted via the SSH
session, but the TACACS server is providing AAA.  The same as it would with
a telnet session; however, the telnet session wouldn't provide encrypt
between the client and the router.

Philip

-Original Message-
From: mike greenberg [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 3:53 PM
To: [EMAIL PROTECTED]
Subject: RE: TACACS+ [7:53721]


Now I know why EDS stock is taking a beating
When you use TACACS+, you basically offload the authentication,
authorization and
accounting to the TACACS+ server (running on your Linux box).  If you don't
want
people to connect to your routers via telnet, set the vty line on your
routers to
accept only SSH.  You can still log onto the routers with SSH and use the
account
on your TACACS+ server (if you configure the router properly).  I have a
sample
TACACS+ configuration.  Contact me off-line if you are interested.  The
configuration
of TACACS+ has nothing to do with either telnet or ssh
 "Blair, Philip S" 
wrote:Your passwords are encrypted with SSH between the client and router,
between
the router and tacacs server your tacacs key is used.

I use tac_plus with clients that use a combination of SSH and telnet. Some
routers require SSH some basic telnet is allowed. I have no special
configurations within tac_plus to accommodate the two access methods.

Philip

-Original Message-
From: Erich Kuehn [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 12:16 PM
To: [EMAIL PROTECTED]
Subject: TACACS+ [7:53721]


Im trying to setup tacacs+ for aaa on my routers. I have downloaded and
installed tacplus from cisco on a linux box (RH7.3). Im looking for some
examples of config files for the tac_plus executable. Currently we use SSH
and local logins for authentication, I would like to continue to use SSH
to get into my boxes. From the config files I have seen Im unsure as to how
I would continue to use SSH as the passwords are all encrypted.

Thanks

Erich
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=53748&t=53721
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: TACACS+ [7:53721]

2002-09-20 Thread Blair, Philip S

Your passwords are encrypted with SSH between the client and router, between
the router and tacacs server your tacacs key is used.

I use tac_plus with clients that use a combination of SSH and telnet. Some
routers require SSH some basic telnet is allowed.  I have no special
configurations within tac_plus to accommodate the two access methods.

Philip

-Original Message-
From: Erich Kuehn [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 12:16 PM
To: [EMAIL PROTECTED]
Subject: TACACS+ [7:53721]


Im trying to setup tacacs+ for aaa on my routers. I have downloaded and
installed tacplus from cisco on a linux box (RH7.3). Im looking for some
examples of config files for the tac_plus executable. Currently we use SSH
and local logins for authentication,  I would like to continue to use SSH
to get into my boxes. From the config files I have seen Im unsure as to how
I would continue to use SSH as the passwords are all encrypted.

Thanks

Erich




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=53734&t=53721
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: priviledge levels [7:53723]

2002-09-20 Thread Blair, Philip S

I'm quite sure you could accomplish your goals with TACACS and aaa
authorization, is that out of the question?

-Original Message-
From: Adam Hickey [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 12:52 PM
To: [EMAIL PROTECTED]
Subject: priviledge levels [7:53723]


All,

I want to configure a special priviledge level for our NOC in all our cisco
devices to basically have all commands except config. Looking at cco, if you
allow sh run at any priv level other than , the user will only be able to
see
the commands they can configure which defeats the purpose. Anyone know a way
around this - so the NOC can have say a level 14 access and be able to see
the
entire running-config without being able to configure anything?

thx
Adam




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=53727&t=53723
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: EIGRP default route distribution. [7:52377]

2002-08-30 Thread Blair, Philip S

You don't have all your loopbak addresses in the 172.26.128.0/24 network, do
you?

If so, create unique subnets for each loopback.

-Original Message-
From: Robert Cluett [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 30, 2002 2:47 PM
To: [EMAIL PROTECTED]
Subject: RE: EIGRP default route distribution. [7:52377]


Ah! "redistribute static", and removing the "default-network" worked!

The other option would have forced EIGRP to run on the interface I was
running RIP on, and thus would defeat the purpose of what I was trying to
do.

Only one problem...why cannot I not get to the loopback addresses I have
placed on each router and included in the eigrp 1 process as network
172.26.128.0/24?  Any ideas?

Thanks guys!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=52388&t=52377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: EIGRP default route distribution. [7:52377]

2002-08-30 Thread Blair, Philip S

Try adding:

router eigrp 1
 redistribute static

Lose the ip default-network command

-Original Message-
From: Robert Cluett [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 30, 2002 1:29 PM
To: [EMAIL PROTECTED]
Subject: EIGRP default route distribution. [7:52377]


I have the following network in my home lab:

Internet RouterEisenhowerRooseveltNixonKennedy
  
The Internet Router (192.168.1.1) runs RIP.  Eisenhower (E0:192.168.1.100
and S0:172.26.1.9) runs RIP and EIGRP.  Roosevelt, Nixon, and Kennedy run
EIGRP for the 172.26.1.0,172.26.128.0,192.168.3.0, and 192.168.4.0
networks.  I am peforming redistribution of EIGRP into RIP on the internet
router which also hosts my LAN of 192.168.1.0).  I am unable to propagate
the default route out to the rest of the EIGRP routers being Roosevelt,
Nixon and Kennedy.  Any one have a clue on what I am missing?

EISENHOWER CONFIG BELOW

router eigrp 1
 passive-interface Ethernet0
 network 172.26.1.0 0.0.0.255
 network 172.26.128.0 0.0.0.255
 network 192.168.3.0
 network 192.168.4.0
 auto-summary
 eigrp log-neighbor-changes
!
router rip
 version 2
 redistribute eigrp 1 metric 0
 passive-interface Serial0
 passive-interface Serial1
 network 192.168.1.0
 no auto-summary
!
ip classless
ip default-network 0.0.0.0
ip route 0.0.0.0 0.0.0.0 192.168.1.1




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=52381&t=52377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ACL studying [7:49154]

2002-07-18 Thread Blair, Philip S

A different spin.

access-list 1 permit 10.10.10.32 0.0.0.1
access-list 1 permit host 10.10.10.34 
access-list 1 deny 10.10.10.32 0.0.0.127
access-list 1 deny host 10.10.10.49
access-list 1 permit any




-Original Message-
From: Persio Pucci [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 18, 2002 2:19 PM
To: [EMAIL PROTECTED]
Subject: ACL studying [7:49154]


Folks,

what would be the smallest way to put an ACL to filter, let's say, IPs
10.10.10.35 to 10.10.10.49?

(just want to check if I am doing it ok...)

Persio




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49175&t=49154
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Dual Link redundancy .... [7:47854]

2002-07-01 Thread Blair, Philip S

Check out Fast Etherchannel

(watch for wrapping)
http://www.cisco.com/warp/customer/cc/techno/media/lan/ether/channel/tech/fe
tec_wp.htm

-Original Message-
From: Paul [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 01, 2002 2:05 PM
To: [EMAIL PROTECTED]
Subject: Dual Link redundancy  [7:47854]


I have two switches that will be connected over fibre ... two connections at
each end  (hope you like the top Ascii art :))


|   1  |---| 1   |
|  A  |   | B   |
|_2 _|---|_2_ |


How can I fix it so that if A1-B1 goes down A2-B2 automatically becomes
active
?? Or even use both links to load balance and hence take the full load if
the
other falls over .

Regards

Paul ...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=47865&t=47854
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: authentication and router [7:46932]

2002-06-24 Thread Blair, Philip S

Try to change:
line con0 
line authentication no_tacacs

To:
line con0 
login authentication no_tacacs

-Original Message-
From: GEORGE [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 21, 2002 11:52 AM
To: [EMAIL PROTECTED]
Subject: FW: authentication and router [7:46932]


I wouldn't like any username prompt at the console

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Blair, Philip S
Sent: Thursday, June 20, 2002 3:20 PM
To: [EMAIL PROTECTED]
Subject: FW: authentication and router [7:46932]

At the password prompt, if you enter your configured enable password you
get
access?

Sounds like it's working as you have it configured, how did you want it
to
work?

Philip

-Original Message-
From: GEORGE [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 5:37 PM
To: [EMAIL PROTECTED]
Subject: authentication and router [7:46932]


I just configured my router to authenticate with cisco secure every
works ok, except if I try to
Console I get a password promt, and I stop cisco secure I get a password
promt
Now I tried to enter my enable password and wont work
Am I missing something here
 
 
 
aaa new-model
aaa authentication login default group tacacs+ enable
aaa authentication login local local
aaa authentication login no_tacacs enable
aaa authentication ppp default if-needed group tacacs+
aaa authorization exec default group tacacs+ local
aaa authorization network default group tacacs+
aaa accounting exec default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
 
 
 
line con0 
line authentication no_tacacs




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=47290&t=46932
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: authentication and router [7:46932]

2002-06-20 Thread Blair, Philip S

At the password prompt, if you enter your configured enable password you get
access?

Sounds like it's working as you have it configured, how did you want it to
work?

Philip

-Original Message-
From: GEORGE [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 5:37 PM
To: [EMAIL PROTECTED]
Subject: authentication and router [7:46932]


I just configured my router to authenticate with cisco secure every
works ok, except if I try to
Console I get a password promt, and I stop cisco secure I get a password
promt
Now I tried to enter my enable password and wont work
Am I missing something here
 
 
 
aaa new-model
aaa authentication login default group tacacs+ enable
aaa authentication login local local
aaa authentication login no_tacacs enable
aaa authentication ppp default if-needed group tacacs+
aaa authorization exec default group tacacs+ local
aaa authorization network default group tacacs+
aaa accounting exec default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
 
 
 
line con0 
line authentication no_tacacs




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=47096&t=46932
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Let the flamin' begin....dumbass beginner question [7:43772]

2002-05-09 Thread Blair, Philip S

Use PPP or HDLC encapsulation on each end.

PPP  PPP
or 
HDLC  HDLC

On the router with the DCE end of the cable set the clock rate.

interface serial 0
 encap ppp
 ip address 10.1.1.1 255.255.255.252
 clock rate 64000

For more detail see:

http://www.cisco.com/warp/public/116/ppp_back.html

Everyone was a beginner once :)

Later

-Original Message-
From: mark [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 09, 2002 1:19 PM
To: [EMAIL PROTECTED]
Subject: Let the flamin' begindumbass beginner question [7:43759]


I originally configured and maintain several Cisco routers at work so I'm
not a TOTAL dumbass when it comes to routers but I sure do feel like one
about now.
I have a couple of 2500's and a 2600 router with a couple of back to back
cables. I'm not doing something correctly to allow the units to talk to each
other using those cables. I can telnet into each router or connect via
console connection and all are working. The green lights come on the serial
connections when the b to b cables are plugged in but I can't for the life
of me get them to talk to each other. Can't ping from one serial port on
subnet A thru the b-to-b cable to the serial port on the other router on the
same subnet on any of the routers. I have checked and rechecked ip info on
all. I have tried frame-relay and PPP (which I would NOT trust my
configuraion of but I do know frame OK - or at least I thought I did). I
have RIP and EIGRP enabled on all and have them redistributing. I have tried
the DCE and the DTE at each end. This is what maybe the particularly dumbass
question - Do I need to set a clock rate or data rate for a frame connection
using these cables? If so the commands required would be helpful. I can look
at the options available. I just need to know where to start with them. If
it's not a clock rate issue, have I given enough info for anyone to give me
an educated guess as to what I'm doing wrong? If not, what other info can I
provide?
Muchas gracias.

Mark "Gump"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=43772&t=43772
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IPX Traceroute [7:43327]

2002-05-06 Thread Blair, Philip S

If SWITCH1 is a layer two device, then RTR-1 and RTR-3 should be on the same
IPX Network (either 1c10 or 1100).  Of course I could be misinterupting the
ASCII art.

Philip

-Original Message-
From: Arjun Das [mailto:[EMAIL PROTECTED]]
Sent: Sunday, May 05, 2002 4:55 AM
To: [EMAIL PROTECTED]
Subject: IPX Traceroute [7:43327]


Dear Group Members,

This is my first message please accept apologies
for any mistakes.  However, I seek help for the
following problem.

Here is the setup!


  IPX Network: 100
  ---|--|---
 |  |
   RTR-1   RTR-AL
  / /   |(1c10)
 / /|
   (1120)/ /   SWITCH1
/ / |
   / /(1210)|  (1100)
RTR-2  RTR-3

Problem:

IPX routing is enabled on all the routers.  I can ping
(IPX) RTR-AL from RTR-3 but can not perform
TRACEROUTE?  Any help will be much appreciated? 


Output from ROUTER-3 (RTR-3)
---
RTR-3#
RTR-3#ping 100..0c3d.d1eb
Translating "100..0c3d.d1eb"

Type escape sequence to abort.
Sending 5, 100-byte IPX Novell Echoes to
100..0c3d.d1eb, timeout is 2 seconds:
!
Success rate is 100 percent (5/5), round-trip
min/avg/max = 32/35/44 ms
RTR-3#
RTR-3#
RTR-3#traceroute ipx 100..0c3d.d1eb

Type escape sequence to abort.
Tracing the route to 100..0c3d.d1eb

  0  *  *  *
  1  *  *  *
  2  *  *  *
  3  *  *  *

 ... tracing the route using Diagnostic Requests
  4  *  *  *
RTR-3#

__
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=43386&t=43327
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Urgent help Please! [7:43084]

2002-05-02 Thread Blair, Philip S

Type 7 passwords are easily decrypted.  Type 5 (enable) are not.

If you have physical access to the box then you can perform password
recovery via the console, see the cisco website for the specifics for your
router.

If you have SNMP read/write access your can download the config, make the
change, then push it back.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 02, 2002 12:19 AM
To: [EMAIL PROTECTED]
Subject: Urgent help Please! [7:43084]


Hi ! All,

Can any one please break this password?

enable secret 5 $1$rMrT$blzJIo4ZyCBfJkvu2CP/Z1

Thanks in advance.

===
WARNING
 This message may contain information that is confidential
 and may be subject to the provisions of section 61A of the
 Police Act 1958, which creates an offence to have unlawful
 possession of Police documents. If you are not the
 intended recipient of this message or have received
 this message in error, you must not peruse, use, pass or
 copy this message or any of its contents.

 Also note, the views expressed in this message may not
 necessarily reflect those of the New Zealand Police.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=43129&t=43084
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN dial problem [7:43071]

2002-05-02 Thread Blair, Philip S

Can you share the config?

If you have only a group-async interface defined with the modem lines, you
may need to define a dialer intreface to pickup the ISDN calls.

Philip

-Original Message-
From: supernet [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 01, 2002 10:30 PM
To: [EMAIL PROTECTED]
Subject: ISDN dial problem [7:43071]


Hi Dear Friends,
 
We have a Cisco 5300 as RAS router. It has PRI and digital modems.
Regular modem users dial the number no problem, they can always get
connected. But ISDN users (Cisco 1604 router) couldn't make a
connection. On 1604 router, it says "carrier wait timeout". We suspect
that it's LEC problem but they insist everything is good on their side.
What seems to be the problem?
 
Thanks a lot.
 
Yoshi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=43133&t=43071
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ip route statement [7:43001]

2002-05-02 Thread Blair, Philip S

How a Null route can prevent a routing loop.

If you have, for example, 4 networks behind you router.

10.1.0.0\24
10.1.1.0\24
10.1.2.0\24
10.1.3.0\24

And to reduce the size of the routing tables in the upstream routers you
summarize those networks to one network.

10.1.0.0\26

and you have a default route point to the upstream router.

All is good, until you lose one of your networks.

Now you don't have 10.1.2.0\24 in your routing table, *&*^$#!
So you send it to the upstream router, your gateway of last resort.
The upstream router has your summary route so the packet is routed back to
you, %&^$^%^%*!
And around it goes...

In come the null route to save the day.
Add a null route to your summary address and when you have the route in your
routing table, more specific prefix, you route it accordingly.  However,
when a more specific route disappears packets destined to the missing route
will match the null route, thus stopping the loop.

Hope that explains at least one case.

Philip

-Original Message-
From: Chuck [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 01, 2002 10:18 PM
To: [EMAIL PROTECTED]
Subject: Re: ip route statement [7:43001]


can you provide an example of what circumstance might require the use of a
null route to prevent a loop? My lack of imagination is preventing me from
deriving my own example.




""Ladrach, Daniel E.""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> The Null interface is typically used for preventing routing loops.
>
> Daniel Ladrach
> CCNA, CCNP
> WorldCom
>
>
> > -Original Message-
> > From: Stanfast Preye [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, May 01, 2002 2:34 PM
> > To: [EMAIL PROTECTED]
> > Subject: ip route statement [7:43001]
> >
> >
> > Dear Group,
> >
> > Why is it necessary to configure all routers in a network
> > with "ip route
> > xxx.xxx.xxx.xxx null 0" statement before implementing
> > migrating to a new IP
> > address scheme and DHCP service in the network.
> >
> > Somebody please help
> >
> > Regards,
> >
> > Preye.
> >
> >
> >
> >
> >
> >
> >
> > -
> > Do You Yahoo!?
> > Yahoo! Tax Center - online filing with TurboTax




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=43123&t=43001
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN dial [7:42884]

2002-04-30 Thread Blair, Philip S

You can define multiple dialer string under the interface.

The latest version of IOS 12.2T gives you greater control when using
multiple dialer strings.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122
t/122t8/ftrotdls.htm

(watch for line wrap)

Philip

-Original Message-
From: Michalis Palis [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 30, 2002 8:52 AM
To: 
Subject: ISDN dial [7:42884]


Hello all.

I have a customer who wants a router to dial  (ISDN)
to another destination in case the fist destination
fails to answer ( no answer, busy etc). How can I do
it using a Cisco router?

I will appreciate your help.

__
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42893&t=42884
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF over ISDN demand circuit [7:42348]

2002-04-23 Thread Blair, Philip S

Are you trying the setup the circuit to use Dial on Demand Routing (DDR),
such that that circuit only comes up when needed then disconnects? If so,
what are you implementing?

backup interface?
floating static?
dialer watch?

Depending on your implementation of DDR you need to adjust your interesting
traffic (dialer-list).

Philip

-Original Message-
From: Ruihai An [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 23, 2002 2:18 PM
To: 
Subject: OSPF over ISDN demand circuit [7:42348]


Hi, Group,

On an ISDN circuit running ospf , if I want to use "ip ospf demand-circuit"
to keep it from being brought up by ospf update, do I need to define
224.0.0.5 as non-interesting traffic in dialer-list?

I have configured "ip ospf demand-circuit"  on one side of the ISDN, but
routing update to 224.0.0.5 keeps activating the circuit?  What is the
problem?

Thanks

Ruihai




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42363&t=42348
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to disable error logging on serial interface? [7:42215]

2002-04-22 Thread Blair, Philip S

If it is logging to a SNMP manager try:

int ser 2
no snmp trap link-status

-Original Message-
From: Love Cisco [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 22, 2002 5:53 AM
To: [EMAIL PROTECTED]
Subject: How to disable error logging on serial interface? [7:42215]


Hi, everyone
I want disable error logging on serial 2 interface.
I tried no logging event link-status on serial 2 interface. But it does not
work. If you know how. Please let me know.

Many thanks

Kevin




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42235&t=42215
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Using a Router to redirect IP traffic [7:42217]

2002-04-22 Thread Blair, Philip S

Not that I'm advocating it, but whether or not it could be done depends.

>From a high level, you could define some static network address translations
(NAT) that map your old address to your new addresses.

The depends part comes now, your router would need to be positioned such
that the old addresses would be routed to it.  And I believe the second
interface would need to be on a separate subnet.  NAT requires an inside and
an outside interface and those interface need to be on separate subnets.

Better solutions..
Adjust the TTL on the DNS records for the web servers to stop DNS records
from being cached.  Then change the DNS record during the move.  Sound like
you don't like that option.

How about leaving a reverse-proxy or just a http server with a redirect at
the old ip address for some time.



-Original Message-
From: Trevor Jennings [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 22, 2002 9:16 AM
To: [EMAIL PROTECTED]
Subject: OT: Using a Router to redirect IP traffic [7:42217]


Hello,

 Where I work, we have a number of servers being co-located at one
location and are planning on moving those servers to another co-location
provider soon. My boss asked me why we could not, when we move the
servers, just place a router at the original ISP to redirect all traffic
from the original ip's to the new ip's rather than having duplicate
servers or adjusting the DNS at the same time. I told him that I wasnt
sure whether it was possible and was told by a friend that its not
really possible to do that. Can anyone confirm that or rather explain why
that is not possible? My Boss's theory was that we would have a router
with 2 ethernet ports and redirect the original ip's to the new ip's
through the second ethernet. 

Cheers,

 - Trevor




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42234&t=42217
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: output buffers swapped out [7:41985]

2002-04-19 Thread Blair, Philip S

Take a look at:
http://www.cisco.com/warp/public/784/packet/oct99/pdfs/p70-troubleshooting.p
df

It may help explain when the counter gets bumped.

Philip

-Original Message-
From: Pierre-Alex Guanel [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 19, 2002 1:57 PM
To: [EMAIL PROTECTED]
Subject: output buffers swapped out [7:41985]


(resent)

Can't find any explanation on CCO about "output buffers swapped out"
(Ethernet interface)

Any one has a definition of what it is and what could cause  146399903
"output buffers swapped out" on an Ethernet interface?

thank you,

Pierre-Alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41995&t=41985
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Connecting printer through Cisco Routers [7:41473]

2002-04-15 Thread Blair, Philip S

My interpretation of the question may be incorrect but it sounds like your
looking to extend a RS-232 connection across your router network? 

PC-> RS-232-> Router-> Net-> Router-> RS-232-> Printer

I assume in theory you could use STUN (serial tunneling), but throw in the
fact that you want to use the console port and things become a little more
difficult.

Philip

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Monday, April 15, 2002 5:04 AM
To: [EMAIL PROTECTED]
Subject: Connecting printer through Cisco Routers [7:41473]


Hi Guys
I have a strange problem.
I have to carry a printer  a different location ( The PC connected to
printer is not  moving , only printer)
The printer must be connected to RS 232 Port of the PC.
So  I will have to carry RS232 signals through Cisco Router.
I mean PC connected to serial port of router and Printer will connect to
the other router s serial port.

Anybody tried this or has an idea ?

Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41494&t=41473
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Dialer profile vs. rotary group? [7:41271]

2002-04-12 Thread Blair, Philip S

Legacy Dial
One Physical w/Dial

Rotary Groups
Multiple Physical Interfaces, One dialer Interface

Dialer Pools
Multiple Physical Interfaces, Multiple Dialer Interface

Dialer pool expands on the rotary concept by allowing a physical interface
to belong to multiple pools, the dialer interface can then reference the
pool of physical interfaces or multiple pools.

Philip

-Original Message-
From: Sean Knox [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 12, 2002 2:15 AM
To: [EMAIL PROTECTED]
Subject: Dialer profile vs. rotary group? [7:41271]


Hey all,

I am confused by the difference(s) between dialer profiles and
rotary
groups. All the text I've read seems rather convoluted - physical interfaces
can only be in one rotary group but can exist in many different dialer pools
(if using dialer profiles)? Is that the main difference? Rotary groups seem
to be an outdated configuration solution. Someone please point me in the
right direction...

Sean




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41335&t=41271
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]