Re: Frame Relay over IP [7:70927]

2003-06-20 Thread Cisco Breaker
I am tryin to use Frame relay switching over IP. Not IP over frame relay. If
we can do that we can connect two sites that are connected over IP from L2
point of view.

Frame Relay

Frame Relay over IP is not yet readily available. The draft IETF
specification was produced

in March 2001. This has not left much time for industry take-up. Frame Relay
over IP

would probably appeal only to the carrier market in any case.

Carriers may embrace this to reduce their frame relay network costs. It is
unlikely to find

widespread deployment at all, although it may see limited use towards the
end of this year.

It should hold little attraction for enterprise companies- where is the
benefit of adding

another layer of complexity when they can engineer and migrate to an IP VPN
instead?


Best regards,


""Pedro Cabarga""  wrote in message
news:[EMAIL PROTECTED]
> May I ask you what r u tryng to do?
>
>
> ""Cisco Breaker""  wrote in message
> news:[EMAIL PROTECTED]
> > Hi all,
> >
> > Anybody used Frame relay over IP without using MPLS or GRE Tunnel with
> Cisco
> > routers?
> >
> > We are searching for a solution to deploy Frame relay over IP without
> using
> > MPLS or GRE tunnel.
> >
> > Any help will be appreciated.
> >
> > Best regards,
> >
> > Cisco Breaker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=70955&t=70927
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Frame Relay over IP [7:70927]

2003-06-19 Thread Cisco Breaker
Hi all,

Anybody used Frame relay over IP without using MPLS or GRE Tunnel with Cisco
routers?

We are searching for a solution to deploy Frame relay over IP without using
MPLS or GRE tunnel.

Any help will be appreciated.

Best regards,

Cisco Breaker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=70927&t=70927
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Wireless 350 bridge problem [7:57827]

2002-11-21 Thread Cisco Breaker
We cannot afford that equipment right now. Also ran the diagnostic test to
find the clear channel, we found the channel but bridges didn't work.

Best regards,



""Tunde Kalejaiye""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> try using a spectrum analyser to determine if there is a strong RF
> interference from somewhere close bythis is probably ur best bet.
>
> Tunde
>
>
> - Original Message -
> From: "Cisco Breaker"
> To:
> Sent: Thursday, November 21, 2002 9:04 AM
> Subject: Wireless 350 bridge problem [7:57827]
>
>
> > Hi All,
> >
> > We have installed Aironet 350 series bridges 2 months ago. They were
> working
> > fine until yesterday.  Bridges are on the top of  two buildings and they
> > were and are clearly seeing each other, freshnel zone okey. But
yesterday
> > morning the network was gone. We have controlled the settings and set up
> the
> > bridges again. Checked that if they can see each other, yes. But it
> doesn't
> > work. Bridge link down. Then we have changed the rate to only 1 Mbit,
> found
> > a really clear channel and it started to work but really in a bad mood.
> The
> > client bridge was associating and then disappearing every 1 minute. Now
> the
> > wireless network is down.
> >
> > Has anybody faced a problem like this?
> >
> > Any help will be highly appreciated.
> >
> > Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=57835&t=57827
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Wireless 350 bridge problem [7:57827]

2002-11-21 Thread Cisco Breaker
Hi All,

We have installed Aironet 350 series bridges 2 months ago. They were working
fine until yesterday.  Bridges are on the top of  two buildings and they
were and are clearly seeing each other, freshnel zone okey. But yesterday
morning the network was gone. We have controlled the settings and set up the
bridges again. Checked that if they can see each other, yes. But it doesn't
work. Bridge link down. Then we have changed the rate to only 1 Mbit, found
a really clear channel and it started to work but really in a bad mood. The
client bridge was associating and then disappearing every 1 minute. Now the
wireless network is down.

Has anybody faced a problem like this?

Any help will be highly appreciated.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=57827&t=57827
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPSec Manual and SPI question [7:57448]

2002-11-19 Thread Cisco Breaker
I have red that page many times and search for manual keying also. . But
that didn't answer my question. Anyway I got an answer from cisco group
saying that

Basically yes. Each line in your ACL actually builds a separate tunnel, with
unique SPI's. If you use manual keys, you can only provide one set of SPI's,
and therefore, the router/firewall can only build one tunnel, hence only one
line in your ACL.

With IKE, it dynamically creates unique SPI's per tunnel/ACL line, and
therefore you're not limited.

Best regards,

Cisco Breaker


""Brunner Joseph""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I think your confusing SPI with a "CBAC" technology. AN spi is a
> uni-directional IPSEC peer transform set hash (agreement on what your
using
> with your IPSEC PEER).
>
> An SPI is made in each direction to each peer. The Access-list permits
> flag traffic (matched by the router) as "permitted for IPSEC".
> The access-list being referenced in the "Crypto map" will make sure
> the permits get applied ipsec and sent to the peer.
>
>
> I think reading this simple page will clear any misconceptions or
questions
> you may have about IPSEC/MANUAL (NO IKE).
>
> http://www.cisco.com/warp/public/707/manual.shtml
>
> And by the way, IKE is really a CONVENIENCE protocol, which was made
> popular by adding autonegotiation for IPSEC PHASE 1 and added some
> great security features like key management and secure key exchange
> (SKEME/OAKLEY).




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=57688&t=57448
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IPSec Manual and SPI question [7:57448]

2002-11-14 Thread Cisco Breaker
Hi all,

We are impelementing IPSec manual site to site because other site doesn't
support IKE. I know that if you implement IPSec manual keying
-- ACL's for crypto map entries tagged as ipsec-manual are restricted to as
single permit entry and subsequent entries are ignored.
-- The SAs established by a manual crypto map entry are only for a single
data flow.

IKE doesn't have any restrictions like that. Is this because of IKE
automatically assigns SPI numbers to the other permit entries for the same
access-list. Or is there any other reason?

I know the solution for the IPSec manual restriction of permit entries. I
want to know why is this restriction. Because of one SPI for one permit
entry?

Any help will be really appreciated.

Best regards,

Cisco Breaker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=57448&t=57448
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CiscoWorks Monitoring Center for Security [7:56987]

2002-11-06 Thread Cisco Breaker
Anyone used Monitoring center? Is it smilar to CSPM?
Does it shows like top 10 ip address, top 10 visited sites and something
like these? (You can view these from CSPM )

Anyhelp will be appreciated.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56987&t=56987
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Managed Security Services [7:56602]

2002-10-31 Thread Cisco Breaker
Hi all,

Are there anybody working at an ISP and deployed Managed Security Services ?
Which product did you use, for IDS, Firewall and VPN?
As I saw only Cisco supports both of them. Any suggestions that might help
will be appreciated.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56602&t=56602
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Networkers Power Slides [7:47900]

2002-07-02 Thread Cisco Breaker

Thanks Steve.

Best regards,
Cisco Breaker

""Steven A. Ridder""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Oops, wrong link.
>
> pad
> pad
> pad
>
> http://www.cisco.com/networkers/nw02/presos.html
>
>
> --
> RFC 1149 Compliant
>
>
>
>
> ""Clayton Dukes""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > I didn't see the power slides there, where are they?
> >
> >
> > Clayton Dukes
> > CCNA, CCDA, CCDP, CCNP, NCC
> >
> > - Original Message -
> > From: "Steven A. Ridder"
> > To:
> > Sent: Tuesday, July 02, 2002 10:09 AM
> > Subject: Re: Networkers Power Slides [7:47900]
> >
> >
> > > Found the link finally.
> > >
> > > pad
> > > pad
> > >
> > > http://www.cisco.com/networkers/nw02/update/index.html
> > >
> > >
> > >
> > > ""Steven A. Ridder""  wrote in message
> > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > What are the power slides?  But they are publically available, I
just
> > have
> > > > to find the link
> > > >
> > > > --
> > > >
> > > > RFC 1149 Compliant.
> > > >
> > > >
> > > >
> > > > ""JohnZ""  wrote in message
> > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > > Does any one have the link to the Power Slides from San Diego
> > Networkers
> > > > 02.
> > > > > Are these even available yet.
> > > > > Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=47981&t=47900
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Strange 6500/IPX Issue!! HELP!! [7:47951]

2002-07-02 Thread Cisco Breaker

Did you disable spanning tree or used portfast on the ports which are
connected to clients. We have a customer that had the same issue and we
changed the client ports on the 6500's to portfast.
Here is the link.

http://www.cisco.com/warp/public/473/12.html

Best regards,

Cisco Breaker

""Michael Williams""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Okay we have two 6509s with Sup2/MSFC2 running Native IOS 12.1(8b)E7,
> and a Cat5513 running CatOS 4.5(2) with RSM running IOS 11.3(3a)WA4(5).
We
> have 6509A connected via a Gig trunk (ISL) to 6509B and 6509B connects to
> the 5513 via a 4-link FastEtherchannel trunk (ISL).  Most of our Novell
> servers are connected to the 5513 and ALL Novell servers reside in VLAN1.
> All VLANs are trunked between all 3 switches.  The RSM in the 5500 handles
> all IPX routing for all VLANs and the two 6500s do no IPX routing.  IP
> Routing for the various VLANs are spread around the 6500s/5513 with HSRP.
> Our standard PC image has Win95 with Netware Client 3.2 (I believe)
> installed. IPX frame type under Windows is set to 802.3. Under normal
> circumstances, the PC boots, and comes up to the Novell login.
>
> Issue:
>
> * If the PC is connected to 6509B in any other VLAN except 1, you get a
> Novell login and IPX works fine.
>
> * If you connect a PC to 6509B in VLAN1, and boot, you get no Novell
login.
>   You can, from the RSM in the 5513, so an IPX ping with standard Novell
> Echos and it is successful.
>   But I also have a utility that runs in a DOS window under Windows called
> SPXping.  Using SPXping, I cannot ping to or from said PC.
>
> * If I move that PC to either 6509A or 5513, and reboot, it comes up fine
> and SPXping works fine. (remember that 6509A has to go through 6509B to
> reach the Novell servers on the 5513)
> * If the PC is connected to either 6509A or 5513, boots up and you login
to
> Novell, you can then move the connection to 6509B and it works fine until
> the PC is rebooted.
>
> * IP is not affected in any way no matter which switch the PC connects to
> (which seems to imply a L3 IPX issue, but 6509B isn't running any L3 IPX
and
> should, from an IPX perspective, act as a L2 switch only for PCs connected
> to it)
>
> Any input is appreciated!!  I about to tear my hair out over this (and
> so is the TAC engr)
>
> Thanks!
> Mike W.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=47952&t=47951
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Full-Duplex Communication [7:47562]

2002-06-27 Thread Cisco Breaker

Full-Duplex Communication
You can select half-duplex or full-duplex communication. The advantage of
using full-duplex is that communication packets can flow in both directions
simultaneously, which results in doubling the throughput capacity on the
segment.

Full-duplex communication eliminates the performance degradation resulting
from packet collisions. Packets cannot collide because they each travel on
their own path--like cars going in opposite directions on a two-lane
highway. So while the effective bandwidth to a 10BaseT port configured for
half-duplex Ethernet is a maximum of 10 Mbps, with full-duplex Ethernet it
is doubled to 20 Mbps.
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3ks/3000/acopspcs.htm

Catalyst 5000 Series
Supervisor II engine ports on 10/100 ports on Fast EtherChannel-capable line
cards enable high-speed connectivity between switches, switches and routers,
and switches and servers. Up to four Fast Ethernet ports can be grouped to
provide up to 800 Mbps of load-sharing, redundant, and point-to-point
connections between the Catalyst 5500, 5509, 5505, 5002, and 5000 switches.
To achieve higher bandwidth, Gigabit EtherChannel can be deployed, which
supports up to 8 Gbps (full-duplex) of inter-switch bandwidth, and is
supported across the Catalyst 5000 Family.
http://www.cisco.com/univercd/cc/td/doc/pcat/ca5000.htm

If  I connect a server to a swtich full duplex then if only one client
connected with its gig eth card, he can't use 2 gigs. I think they are
writing these manuals incorrectly. Cause you can use 1 gig for sending 1 gig
for receiving. Not 2 gigs sending and receiving. If you say to a customer
that with gig ether channel they can reach up to 8 gigs on 6500 swithes he
will obviously thinks that he can send 8 gig and receive 8 gig not 4 gig RX
for gig TX.

Best regards,

Cisco Breaker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=47562&t=47562
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX question [7:45658]

2002-06-03 Thread Cisco Breaker

PIX doesnt support that, routers or sups supports.

Best regards,



""Anil Kumar""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All,
>
> Does the PIX fw support secondary ip address option for the
> interface, as which is carried out on router ethernet
> interface?
>
>
> Thanks in Advance.
>
> Regards.. Anil
>
>
> __
> Do You Yahoo!?
> Yahoo! - Official partner of 2002 FIFA World Cup
> http://fifaworldcup.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45660&t=45658
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How many committed access rate policies with access-lists can [7:45655]

2002-06-03 Thread Cisco Breaker

Hi all,

My questions are regarding to CAR aka rate-limit. I have use rate-limit with
access-list but I never wonder how many policies can I create with
access-lists.

How many committed access rate policies with access-lists can be applied to
an interface?

Documentations says 100 policies (can be either access-list or other type as
I understand) to subinterface not to an interface. Is it limited to standard
or extended access-list number limit 99? Can I use 99 standard access list
and 99 extended access lists and apply each one of them to a different (200)
CAR policy. Or am I limited to 100 policies only as stated.

Also if I can use 200 policies how much cpu utilization could I see on a
3600 or 7200? Documentations only states that it would be a significant
impact to use extended access-lists with car.

I would really appreciate if anyone  answers these questions.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45655&t=45655
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Terminal Server load balancing [7:44002]

2002-05-17 Thread Cisco Breaker

As I said before load balancing is okey, the problem is with statistics. For
example when you especialy look to the statistics with sh service summary
and sh summary you see 4 persons on server 5 when you looked from server 5
there are 7 persons. This is the problem I am trying to tell. Although there
are 7 persons connected to server 5 CSS show only 4 persons connected to
server 5.

Best regards,

""Greene, Patrick""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> What are you balancing on?  Have you configured the CSS to balance on
> least connections because the default is round robin.  These are your
> load balancing options, Round Robin(default),Weighted Round Robin,Least
> Connections/Bytes, and
> ArrowPoint Content Aware (ACA).
>
> If you want to balance based on least connections, in the content rule
> specify "balance leastconn" to balance based on connections.
>
> Sincerely,
> Patrick J Greene
>
>
>
>
> -Original Message-
> From: Cisco Breaker [mailto:[EMAIL PROTECTED]]
> Sent: Monday, May 13, 2002 3:26 AM
> To: [EMAIL PROTECTED]
> Subject: Terminal Server load balancing [7:44002]
>
>
> Hi,
>
> We have implemented load balancing between 5 microsoft terminal servers.
> The problem is when I looked at the second server I see 5 people
> connected but from the CSS view there is only 2 people connected. We
> tried this example with clearing counters on CSS and restarting all
> terminal servers to make sure everyone disconnected. After that again we
> check the statistics and nothing changed. For ex. Cisco shows 4
> Microsoft shows 8.
>
> All the statistic gathered by issuing sh service summary and sh summary
> are not accurate as Microsoft Terminal Server Managers.
>
> What can be the problem?
>
> Any help will be appreciated?
>
> Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44327&t=44002
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IDS Questions [7:44153]

2002-05-14 Thread Cisco Breaker

Hi,

Latest update is at
http://www.cisco.com/kobayashi/sw-center/sw-ciscosecure.shtml
For the attacks you cant do anything other than blocking or reset. You can
change the severtiy level for e-mails.

Best regards,


""Johnson, Richard (NY Int)""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All,
>
> Just some basic questions...
>
> Currently my IDS 4210 is setup to block and do a TCP reset when I get hit
> with WWW WinNT cmd.exe Access. What else can I do to stop this? Also, I am
> getting emailed upon these "attacks". But all it says is the severity
level.
> How do I get what exactly is being done? Lastly, Where do I find the
latest
> update for the IDS? Is there a way to automate the search for this on the
> IDS itself?
>
>
> Thanks,
>
> Rich




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44162&t=44153
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Terminal Server load balancing [7:44002]

2002-05-14 Thread Cisco Breaker

Yes, We are using CSS to load balance between five Microsoft  Terminal
Servers.

Best regards,


""Michael Williams""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> What are you using to do the load balancing?  The Windows machines?  Or
> something in the Cisco, like Server Load Balancing?
>
> Mike W.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44159&t=44002
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Terminal Server load balancing [7:44002]

2002-05-13 Thread Cisco Breaker

Hi,

We have implemented load balancing between 5 microsoft terminal servers. The
problem is when I looked at the second server I see 5 people connected but
from the CSS view there is only 2 people connected. We tried this example
with clearing counters on CSS and restarting all terminal servers to make
sure everyone disconnected. After that again we check the statistics and
nothing changed. For ex. Cisco shows 4 Microsoft shows 8.

All the statistic gathered by issuing sh service summary and sh summary are
not accurate as Microsoft Terminal Server Managers.

What can be the problem?

Any help will be appreciated?

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44002&t=44002
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Multi Vlan and cat4006 sup3 [7:41571]

2002-04-16 Thread Cisco Breaker

Can you configure Appletalk routing between VLAN's on cat4006sup3?

Best regards,


""MADMAN""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I just got a supIII installed in the lab a couple days ago and I don't
> see any multi vlan options aside from a trunk:
>
> C4006SUPIII(config-if)#switchport ?
>   accessSet access mode characteristics of the interface
>   host  Set port host
>   mode  Set trunking mode of the interface
>   nonegotiate   Device will not engage in negotiation protocol on this
> interface
>   private-vlan  Set the private VLAN host association or promiscuous
> mapping
>   trunk Set trunking characteristics of the interface
>
>
> C4006SUPIII(config-if)#switchport acc
> C4006SUPIII(config-if)#switchport access ?
>   vlan  Set VLAN when interface is in access mode
>
>   As far as appletalk is concerned yes you need a appletalke capable
> router or bridge it.
>
>   Dave
>
>   As
>
> Cisco Breaker wrote:
> >
> > Hi All,
> >
> > Our customer wants to buy cat 4006 with sup3. But they use Appletalk. As
I
> > know the sup3 IOS doesnt support Appletalk routing yet, so I have to put
a
> > router for that, am I right?
> >
> >  And also is it possible to assign the server's port  into 2 vlans. If I
> can
> > put the server's port which is on the switch to 2 Vlans (multi Vlan) it
> will
> > be OK but is it possible?
> >
> > Any help will be appreciated.
> >
> > Best regards,
> >
> > Cisco Breaker
> --
> David Madland
> Sr. Network Engineer
> CCIE# 2016
> Qwest Communications Int. Inc.
> [EMAIL PROTECTED]
> 612-664-3367
>
> "Emotion should reflect reason not guide it"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41601&t=41571
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Multi Vlan and cat4006 sup3 [7:41571]

2002-04-16 Thread Cisco Breaker

Hi All,

Our customer wants to buy cat 4006 with sup3. But they use Appletalk. As I
know the sup3 IOS doesnt support Appletalk routing yet, so I have to put a
router for that, am I right?

 And also is it possible to assign the server's port  into 2 vlans. If I can
put the server's port which is on the switch to 2 Vlans (multi Vlan) it will
be OK but is it possible?

Any help will be appreciated.

Best regards,

Cisco Breaker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41571&t=41571
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Signature for blocking telnet to SMTP server [7:41565]

2002-04-15 Thread Cisco Breaker

Hi,

Is it possible to block telnet to SMTP server from port 25 with IDS. I want
to create a custom signature for this but I don't know how this can be done.
If  I write a signature beginning with hello it will block all mail traffic
because all of them starts with hello as I know.  And are there any
resources that tells how to write a custom signature. We are using CSPM
2.3.3i.

Any help will be appreciated.

Best regards,

Cisco Breaker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41565&t=41565
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CAR bandwidth limitation problem [7:39533]

2002-03-28 Thread Cisco Breaker

I will try to apply your solutions but the pix has gone for 2 days to a
customer.


""Steven A. Ridder""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> What was the resolution?
>
> --
>
> RFC 1149 Compliant.
> Get in my head:
> http://sar.dynu.com
>
>
> ""Ladrach, Daniel E.""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Make sure you turned on CEF. Also, make sure your access-lists are
> correct.
> >
> > Daniel Ladrach
> > CCNA, CCNP
> > WorldCom
> >
> >
> > -Original Message-
> > From: Cisco Breaker [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, March 26, 2002 11:12 AM
> > To: [EMAIL PROTECTED]
> > Subject: CAR bandwidth limitation problem [7:39533]
> >
> >
> > Hi all,
> >
> > I wanted to limit our internet usage so I applied rate-limit command to
> our
> > internet routers serial interface bu couln't make it work. configuration
> is
> > below. what I wanted to do is I want to give 96000 bits bandwidth to
users
> > who come from the firewall with 192.168.2.5 and I want to give all the
> > others who are coming with ip address 192.168.2.6 only 16000 bits. But
it
> > doesnt work, when I look with sh int ser 0 rate-limit, all I see is
> nothing
> > conformed. I applied it as input because download is important for us
not
> > upload. Any help will be appreciated? I am tired of trying so many
things
> so
> > I thought maybe someone can help.
> >
> > Best regards,
> >
> > Cisco Breaker,
> > CCNP,CCDP
> >
> > Router#sh run
> > Building configuration...
> >
> > Current configuration : 1959 bytes
> > !
> > interface Ethernet0
> >  ip address 192.168.1.3 255.255.255.0
> >
> > interface Serial0
> >  ip address 192.168.2.2 255.255.255.252
> >  rate-limit input access-group 5 96000 8000 16000 conform-action
transmit
> > exceed-action drop
> >  rate-limit input access-group 110 16000 1500 2000 conform-action
transmit
> > exceed-action drop
> > !
> > interface Serial1
> >  no ip address
> > !
> > no ip classless
> > ip route 0.0.0.0 0.0.0.0 192.168.2.1
> > no ip http server
> > !
> > no logging trap
> > access-list 5 permit 192.168.2.5 log
> > access-list 110 permit ip host 192.168.2.6 any log
> >
> > Router#sh int ser 0 rat
> > Serial0
> >   Input
> > matches: access-group 5
> >   params:  96000 bps, 8000 limit, 16000 extended limit
> >   conformed 0 packets, 0 bytes; action: transmit
> >   exceeded 0 packets, 0 bytes; action: drop
> >   last packet: 1213151652ms ago, current burst: 0 bytes
> >   last cleared 00:24:18 ago, conformed 0 bps, exceeded 0 bps
> > matches: access-group 110
> >   params:  16000 bps, 1500 limit, 2000 extended limit
> >   conformed 0 packets, 0 bytes; action: transmit
> >   exceeded 0 packets, 0 bytes; action: drop
> >   last packet: 1213151692ms ago, current burst: 0 bytes
> >   last cleared 00:23:58 ago, conformed 0 bps, exceeded 0 bps




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39735&t=39533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CAR bandwidth limitation problem [7:39533]

2002-03-26 Thread Cisco Breaker

Nothing changes... the same statistics. I applied them as output for eth.

Best regards,

""Steven A. Ridder""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Try it on the ethernet interface
>
> --
>
> RFC 1149 Compliant.
> Get in my head:
> http://sar.dynu.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39536&t=39533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CAR bandwidth limitation problem [7:39533]

2002-03-26 Thread Cisco Breaker

Hi all,

I wanted to limit our internet usage so I applied rate-limit command to our
internet routers serial interface bu couln't make it work. configuration is
below. what I wanted to do is I want to give 96000 bits bandwidth to users
who come from the firewall with 192.168.2.5 and I want to give all the
others who are coming with ip address 192.168.2.6 only 16000 bits. But it
doesnt work, when I look with sh int ser 0 rate-limit, all I see is nothing
conformed. I applied it as input because download is important for us not
upload. Any help will be appreciated? I am tired of trying so many things so
I thought maybe someone can help.

Best regards,

Cisco Breaker,
CCNP,CCDP

Router#sh run
Building configuration...

Current configuration : 1959 bytes
!
interface Ethernet0
 ip address 192.168.1.3 255.255.255.0

interface Serial0
 ip address 192.168.2.2 255.255.255.252
 rate-limit input access-group 5 96000 8000 16000 conform-action transmit
exceed-action drop
 rate-limit input access-group 110 16000 1500 2000 conform-action transmit
exceed-action drop
!
interface Serial1
 no ip address
!
no ip classless
ip route 0.0.0.0 0.0.0.0 192.168.2.1
no ip http server
!
no logging trap
access-list 5 permit 192.168.2.5 log
access-list 110 permit ip host 192.168.2.6 any log

Router#sh int ser 0 rat
Serial0
  Input
matches: access-group 5
  params:  96000 bps, 8000 limit, 16000 extended limit
  conformed 0 packets, 0 bytes; action: transmit
  exceeded 0 packets, 0 bytes; action: drop
  last packet: 1213151652ms ago, current burst: 0 bytes
  last cleared 00:24:18 ago, conformed 0 bps, exceeded 0 bps
matches: access-group 110
  params:  16000 bps, 1500 limit, 2000 extended limit
  conformed 0 packets, 0 bytes; action: transmit
  exceeded 0 packets, 0 bytes; action: drop
  last packet: 1213151692ms ago, current burst: 0 bytes
  last cleared 00:23:58 ago, conformed 0 bps, exceeded 0 bps




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39533&t=39533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: pirority group damn it [7:38084]

2002-03-15 Thread Cisco Breaker

Excuse me for the configuration mistyping but before I had change my config
my access list was different than that . It belongs to another network ip
like 172.16.1.2. Anyway thanks for the correction. I want to make sure that
these priority or custom queuing methods  are only used when congestion
happens. So I was thinking right.

This group is great.. I  always read this newsgroup but post occasionally.
But when you post you really get an answer. Knowledge sharing, great. I
remember those years that you cant find an answer and can't ask to anyone.
Stand by yourself , eat yourself. But now if you can't understand or can't
solve it, somebody might have done it before and can enlighten you. This is
rellay grea.

Best regards,

Cisco Breaker


""Priscilla Oppenheimer""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Your access-list 150 and priority list say to make traffic from the
> firewall be highest priority. All other IP traffic appears to be the
lowest
> priority. But what traffic does your firewall actually send?
>
> The term firewall gets used to mean all sorts of things including proxy
> servers. But if your firewall is simply a device that examines packets and
> allows or doesn't allow, it is not the source IP address for most traffic.
> The source address is the end host client or server.
>
> Perhaps what you want is to change the list to all devices on the 10.1.1.0
> network, rather than just the firewall.
>
> Priscilla
>
> At 03:41 AM 3/13/02, Cisco Breaker wrote:
> >Hi all,
> >
> >I have a question regarding priority groups. We have 2 firewalls.
10.1.1.2
> >and 10.1.1.3. I am using 10.1.1.2 . But even if  I am using 10.1.1.2 the
> >connection is slow as before. What is wrong with my config? Any answer
will
> >be highly appreciated.
> >
> >Best regards,
> >
> >Ciscobreaker,
> >CCNP,CCDP
> >
> >Router#sh run
> >Building configuration...
> >
> >Current configuration : 2121 bytes
> >!
> >version 12.1
> >service timestamps debug uptime
> >service timestamps log uptime
> >service password-encryption
> >service udp-small-servers
> >!
> >hostname Router
> >!
> >enable secret 5 $1$J0OT$To6EJUMsXnNQN6v.yGy9R1
> >enable password  ak
> >
> >interface Ethernet0
> >  ip address 10.1.1.1 255.255.255.0
> >!
> >interface Serial0
> >  bandwidth 128000
> >  ip address 192.168.1.2 255.255.255.0
> >  priority-group 1
> >!
> >interface Serial1
> >  no ip address
> >!
> >no ip classless
> >ip route 0.0.0.0 0.0.0.0 192.168.1.1
> >
> >no ip http server
> >!
> >no logging trap
> >access-list 150 permit ip host 10.1.1.2 any
> >priority-list 1 protocol ipx medium
> >priority-list 1 protocol pad normal
> >priority-list 1 protocol ip high list 150
> >priority-list 1 default low
> >!
> >
> >line con 0
> >line aux 0
> >line vty 0 4
> >  password  ak login
> >!
> >end
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38370&t=38084
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



pirority group damn it [7:38084]

2002-03-13 Thread Cisco Breaker

Hi all,

I have a question regarding priority groups. We have 2 firewalls. 10.1.1.2
and 10.1.1.3. I am using 10.1.1.2 . But even if  I am using 10.1.1.2 the
connection is slow as before. What is wrong with my config? Any answer will
be highly appreciated.

Best regards,

Ciscobreaker,
CCNP,CCDP

Router#sh run
Building configuration...

Current configuration : 2121 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
service password-encryption
service udp-small-servers
!
hostname Router
!
enable secret 5 $1$J0OT$To6EJUMsXnNQN6v.yGy9R1
enable password  ak

interface Ethernet0
 ip address 10.1.1.1 255.255.255.0
!
interface Serial0
 bandwidth 128000
 ip address 192.168.1.2 255.255.255.0
 priority-group 1
!
interface Serial1
 no ip address
!
no ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1

no ip http server
!
no logging trap
access-list 150 permit ip host 10.1.1.2 any
priority-list 1 protocol ipx medium
priority-list 1 protocol pad normal
priority-list 1 protocol ip high list 150
priority-list 1 default low
!

line con 0
line aux 0
line vty 0 4
 password  ak login
!
end




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38084&t=38084
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Layer 3 configuration from CAT4000 CWI [7:34736]

2002-02-07 Thread Cisco Breaker

]f you havent donloaded the catalyst CWI to the switch it doesnt work even
if you apply IP HTTP SERVER command. Not an answer to my question but
thanks.


""Georg Pauwen""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi,
>
> I am not sure if it works through the Catalyst CWI, but if you configure
the
> layer 3 module/SUPIII with the IP HTTP SERVER command, you should be able
to
> connect to it through a web interface.
>
> Regards,
>
> Georg




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34827&t=34736
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Layer 3 configuration from CAT4000 CWI [7:34736]

2002-02-06 Thread Cisco Breaker

I know that you can create VLAN or enable a port from CWI software inside
the CAT4000. Is it possible to configure layer3 routing (if you have the
module SUP3) from the CWI of the CAT4000? Because my customer doesnt want to
buy CiscoWorks2000 for only one switch.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34736&t=34736
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Assigning an IP address by username [7:33568]

2002-01-29 Thread Cisco Breaker

I want to assign IP addresses to my users based on their username and
password on the 2522 router. They are connecting through the async lines. So
far I was giving IP addresses from the ip pool but because of the rules on
the firewall I have to do something like this. Can it be done without an AAA
server? Any help will be appreciated?

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33568&t=33568
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Static route load balancing? [7:31715]

2002-01-13 Thread Cisco Breaker

So you are actually saying that some packets will be lost. Can we avoid this
with policy-maps or something else?

Best regards,


""Chuck Larrieu""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> doesn't matter.
>
> Serial1/0  100.100.100.1   YES manual up
> up
>
> Serial1/1  100.100.13.1YES manual up
> up
>
> r1#ping 10.1.1.1
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:
> .!.!.
> Success rate is 40 percent (2/5), round-trip min/avg/max = 20/20/20 ms
> r1#ping 10.1.1.1
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:
> !.!.!
> Success rate is 60 percent (3/5), round-trip min/avg/max = 20/20/20 ms
> r1#
>
> as long as your side of the link is up, this is what happens
>
> can't do further testing, as my frame setup would take too long to change.
I
> presume, though, that if your side of the link is down then all packets
> would go out the one interface that is still up.
>
> Chuck
>
>
> ""Brian Whalen""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Doesnt that depend on whether you route to the local interface or the
> > remote ip?
> >
> > Brian "Sonic" Whalen
> > Success = Preparation + Opportunity
> >
> >
> > On Sat, 12 Jan 2002, Bill Carter wrote:
> >
> > > If the static routes have the save metric, the router will load
balance
> > > traffic it sends out according to the routes.  I don't like this
option
> > > because if one path goes down every other packet will fail.
> > >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > > Cisco Breaker
> > > Sent: Saturday, January 12, 2002 6:05 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: Static route loacd balancing? [7:31715]
> > >
> > >
> > > Hi all,
> > >
> > > My customer wants load balancing solution to a branch office. He heard
> that
> > > it can be done with static routes, but as I know load balancing can't
be
> > > done by deploying static routes. Any help about this? Can it be done
or
> how
> > > effective will it be?
> > >
> > > Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31828&t=31715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Static route loacd balancing? [7:31715]

2002-01-12 Thread Cisco Breaker

Hi all,

My customer wants load balancing solution to a branch office. He heard that
it can be done with static routes, but as I know load balancing can't be
done by deploying static routes. Any help about this? Can it be done or how
effective will it be?

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31715&t=31715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PPP link negotiation problem [7:31132]

2002-01-10 Thread Cisco Breaker

The benefit is that you can use names other than the hostname of your router
that is the only purpose of the command.

Best regards,


""bergenpeak""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Thanks for the responses so far.  I still don't understand the
> purpose of the "ppp chap hostname" command under the interface
> config.
>
> Using this command, I am now able to get a PPP link up.  But I must
> do the following:
>
> rtr-a config:
>
> username rtr-b
>
> int serial 0
> encap ppp
> ppp chap hostname rtr-a
>
> rtr-b config:
>
> username rtr-a
>
> int serial 0
> encap ppp
> ppp chap hostname rtr-b
>
> That is, I must define the hostnames to be *different* on each
> side, and then define the corresponding global username to match the
> remote hostname on each side of the link.  Thus, the interface
> "ppp chap hostname" command doesn't appaear to simplify the CHAP
> config.   This seems to defeat the purpose of this command as suposedly
> it's used to simplify the CHAP config so that the same hostname can be
> used on multiple routers.  Or so its stated in the ICRC book (page 373).
>
> So, I'm not really sure what benefit there is for this command,
> as it doesn't seem to simplify the config.
>
> But I'm sure I'm missing something... :-)
>
> Thanks for any more info/comments.
>
>
>
> Cisco Breaker wrote:
> >
> > Your only choice is to use global username other router and  password
the
> > sama as your router they must be identical on both sides.
> >
> > ""bergenpeak""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > "sent-username" is not an option for me under ppp chap.  My
> > > options at "ppp chap" are "hostname", "password", "wait", and
> > > "refuse".
> > >
> > > Thanks
> > >
> > >
> > > "McCallum, Robert" wrote:
> > > >
> > > > what about ppp chap sent-username ?
> > > >
> > > > -Original Message-
> > > > From: bergenpeak [mailto:[EMAIL PROTECTED]]
> > > > Sent: 07 January 2002 13:09
> > > > To: [EMAIL PROTECTED]
> > > > Subject: PPP link negotiation problem [7:31132]
> > > >
> > > > I'm working through the different ways one can configure CHAP
> > > > authentication between two routers over a PPP serial link.
> > > >
> > > > If I configure ppp encap and ppp chap authentication and both sides
> > > > of the link and use the global:
> > > >
> > > > username  password
> > > >
> > > > for identification, the link comes up and IPCP is established.  The
> > > > routers have hostnames defined to be "rtr-2505" and "rtr-2514".
> > > >
> > > > When I try to use the "simpler" CHAP config, where one can encode
> > > > in the interface directly the same hostname and password, I see
> > > > the error:
> > > >
> > > > PPP Serial0: Using alternative CHAP hostname something
> > > > PPP Serial0: CHAP Challenge id=14 received from something
> > > > PPP Serial0: ignoring challenge with local name
> > > >
> > > > On both rtrs I have the following defined on the serial interface:
> > > > ppp encap
> > > > ppp authentication chap
> > > > ppp chap hostname something
> > > > ppp chap password else
> > > >
> > > > there are no usernames defined globally.
> > > >
> > > > Ideas?
> > > >
> > > > Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31518&t=31132
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PPP link negotiation problem [7:31132]

2002-01-08 Thread Cisco Breaker

Your only choice is to use global username other router and  password the
sama as your router they must be identical on both sides.

""bergenpeak""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> "sent-username" is not an option for me under ppp chap.  My
> options at "ppp chap" are "hostname", "password", "wait", and
> "refuse".
>
> Thanks
>
>
> "McCallum, Robert" wrote:
> >
> > what about ppp chap sent-username ?
> >
> > -Original Message-
> > From: bergenpeak [mailto:[EMAIL PROTECTED]]
> > Sent: 07 January 2002 13:09
> > To: [EMAIL PROTECTED]
> > Subject: PPP link negotiation problem [7:31132]
> >
> > I'm working through the different ways one can configure CHAP
> > authentication between two routers over a PPP serial link.
> >
> > If I configure ppp encap and ppp chap authentication and both sides
> > of the link and use the global:
> >
> > username  password
> >
> > for identification, the link comes up and IPCP is established.  The
> > routers have hostnames defined to be "rtr-2505" and "rtr-2514".
> >
> > When I try to use the "simpler" CHAP config, where one can encode
> > in the interface directly the same hostname and password, I see
> > the error:
> >
> > PPP Serial0: Using alternative CHAP hostname something
> > PPP Serial0: CHAP Challenge id=14 received from something
> > PPP Serial0: ignoring challenge with local name
> >
> > On both rtrs I have the following defined on the serial interface:
> > ppp encap
> > ppp authentication chap
> > ppp chap hostname something
> > ppp chap password else
> >
> > there are no usernames defined globally.
> >
> > Ideas?
> >
> > Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31356&t=31132
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: dialer group or dialer string Why? [7:31139]

2002-01-07 Thread Cisco Breaker

Also if I assign different subnet ip addresses to async interfaces how can
they ping each other. example ny 151.11.20.5 albany 132.14.15.16. same as ip
unnumbered eth or loopback. But I dont understand they are not in the same
subnet but because of async connection they can ping. Any explanation for
this?

Best regards,


""Cisco Breaker""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi all,
>
> I solved the problem about ppp negotiation on the previous thread now a
> strange thing happened. The configs are below.
>
> host A--newyork-albany---host B
> 10.1.3.2   10.1.1.2
>
> Everything works fine ppp authentication and connection from aux. But
while
> they were connected from aux if I tried to ping from host A to host B I
can
> not ping B. But newyork router can ping Host B. I got crazy and changed my
> configs so many times and I find out that if I add the command dialer
string
> 125 to Albany router bingo, I can ping host B from host A but if I don't
add
> the command I cannot ping host b from host A. And also if I delete all the
> dialer commands froms albany routers config, again I can ping host B from
> Host A.
>
> As I know Dialer on demand shouldnt block the pings. Because with or
without
> the dialer commands the show ip route command is same for Albany. Why is
it
> happening? Any idea?
>
> Best regards,
>
>
> newyork#sh run
> Building configuration...
>
> Current configuration : 1368 bytes
> !
> version 12.1
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname newyork
> !
> !
> username albany password 0 cisco
> !
> !
> !
> !
> memory-size iomem 25
> ip subnet-zero
> !
> chat-script backup "" "atdt\T" TIMEOUT 60 CONNECT \c
> !
> interface Loopback0
>  ip address 192.168.3.1 255.255.255.255
> !
> interface Serial0
>  no ip address
>  encapsulation frame-relay
>  no fair-queue
> !
> interface Serial0.1 point-to-point
>  ip address 192.168.1.3 255.255.255.0
>  frame-relay interface-dlci 16
> !
> interface Serial1
>  no ip address
>  shutdown
> !
> interface FastEthernet0
>  ip address 10.1.3.1 255.255.255.0
>  speed auto
> !
> interface Async5
>  ip unnumbered Loopback0
>  encapsulation ppp
>  dialer in-band
>  dialer idle-timeout 3600
>  dialer fast-idle 10
>  dialer enable-timeout 10
>  dialer string 250
>  dialer-group 1
>  async mode dedicated
>  no peer default ip address
>  ppp authentication chap callin
> !
> ip classless
> ip route 10.1.1.0 255.255.255.255 Async5
> no ip http server
> !
> dialer-list 1 protocol ip permit
> !
> line con 0
> line aux 0
>  exec-timeout 0 0
>  script dialer backup
>  modem InOut
>  transport input all
>  stopbits 1
>  speed 38400
>  flowcontrol hardware
> line vty 0 4
>  login
> !
> no scheduler allocate
> end
>
>
> here is the config for albany router
>
> albany#sh run
> Building configuration...
>
> Current configuration : 1031 bytes
> !
> version 12.1
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname albany
> !
> username newyork password 0 cisco
> !
> !
> !
> !
> memory-size iomem 25
> ip subnet-zero
> no ip domain-lookup
> !
> !
> !
> voice-port 2/0
> !
> voice-port 2/1
> !
> !
> !
> !
> interface Loopback0
>  ip address 192.168.2.1 255.255.255.255
> !
> interface Serial0
>  no ip address
>  encapsulation frame-relay
> !
> interface Serial0.1 multipoint
>  ip address 192.168.1.1 255.255.255.0
>  frame-relay interface-dlci 16
> !
> interface FastEthernet0
>  ip address 10.1.1.1 255.255.255.0
>  speed auto
> !
> interface Async5
>  ip unnumbered Loopback0
>  encapsulation ppp
>  dialer in-band
>  dialer-group 1
>  async mode dedicated
>  no peer default ip address
>  ppp authentication chap
> !
> ip classless
> ip route 10.1.3.0 255.255.255.0 Async5
> no ip http server
> !
> dialer-list 1 protocol ip permit
> !
> line con 0
> line aux 0
>  modem InOut
>  transport input all
>  stopbits 1
>  speed 38400
>  flowcontrol hardware
> line vty 0 4
>  login
> !
> end




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31145&t=31139
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



dialer group or dialer string Why? [7:31139]

2002-01-07 Thread Cisco Breaker

Hi all,

I solved the problem about ppp negotiation on the previous thread now a
strange thing happened. The configs are below.

host A--newyork-albany---host B
10.1.3.2   10.1.1.2

Everything works fine ppp authentication and connection from aux. But while
they were connected from aux if I tried to ping from host A to host B I can
not ping B. But newyork router can ping Host B. I got crazy and changed my
configs so many times and I find out that if I add the command dialer string
125 to Albany router bingo, I can ping host B from host A but if I don't add
the command I cannot ping host b from host A. And also if I delete all the
dialer commands froms albany routers config, again I can ping host B from
Host A.

As I know Dialer on demand shouldnt block the pings. Because with or without
the dialer commands the show ip route command is same for Albany. Why is it
happening? Any idea?

Best regards,


newyork#sh run
Building configuration...

Current configuration : 1368 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname newyork
!
!
username albany password 0 cisco
!
!
!
!
memory-size iomem 25
ip subnet-zero
!
chat-script backup "" "atdt\T" TIMEOUT 60 CONNECT \c
!
interface Loopback0
 ip address 192.168.3.1 255.255.255.255
!
interface Serial0
 no ip address
 encapsulation frame-relay
 no fair-queue
!
interface Serial0.1 point-to-point
 ip address 192.168.1.3 255.255.255.0
 frame-relay interface-dlci 16
!
interface Serial1
 no ip address
 shutdown
!
interface FastEthernet0
 ip address 10.1.3.1 255.255.255.0
 speed auto
!
interface Async5
 ip unnumbered Loopback0
 encapsulation ppp
 dialer in-band
 dialer idle-timeout 3600
 dialer fast-idle 10
 dialer enable-timeout 10
 dialer string 250
 dialer-group 1
 async mode dedicated
 no peer default ip address
 ppp authentication chap callin
!
ip classless
ip route 10.1.1.0 255.255.255.255 Async5
no ip http server
!
dialer-list 1 protocol ip permit
!
line con 0
line aux 0
 exec-timeout 0 0
 script dialer backup
 modem InOut
 transport input all
 stopbits 1
 speed 38400
 flowcontrol hardware
line vty 0 4
 login
!
no scheduler allocate
end


here is the config for albany router

albany#sh run
Building configuration...

Current configuration : 1031 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname albany
!
username newyork password 0 cisco
!
!
!
!
memory-size iomem 25
ip subnet-zero
no ip domain-lookup
!
!
!
voice-port 2/0
!
voice-port 2/1
!
!
!
!
interface Loopback0
 ip address 192.168.2.1 255.255.255.255
!
interface Serial0
 no ip address
 encapsulation frame-relay
!
interface Serial0.1 multipoint
 ip address 192.168.1.1 255.255.255.0
 frame-relay interface-dlci 16
!
interface FastEthernet0
 ip address 10.1.1.1 255.255.255.0
 speed auto
!
interface Async5
 ip unnumbered Loopback0
 encapsulation ppp
 dialer in-band
 dialer-group 1
 async mode dedicated
 no peer default ip address
 ppp authentication chap
!
ip classless
ip route 10.1.3.0 255.255.255.0 Async5
no ip http server
!
dialer-list 1 protocol ip permit
!
line con 0
line aux 0
 modem InOut
 transport input all
 stopbits 1
 speed 38400
 flowcontrol hardware
line vty 0 4
 login
!
end




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31139&t=31139
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Subject: PPP negotiaiton problem [7:30767]

2002-01-07 Thread Cisco Breaker

The problem is not that command the problem is related to layer 2 and is
solved in 2 ways.
1 decreasing the speed to 9600
2 or change the ios to 12.09

best regards,


""Paul Werner""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> As previously mentioned in another post, your shared secret is
> not the same on both username/password combinations for both
> routers.  As you indicated, you had a copy/paste error and I do
> not necessarily believe that is the root of the problem,
> because your debugs (which appears to be "debug ppp neg" or
> possibly "debug ppp auth" does not explicitly indicate a CHAP
> failure.  It would be clearly indicated.  There appears to be
> other issues at work.
>
> One of the first things that caught my eye was why you set the
> interfaces to unnumbered, but pointed them to different IP
> networks, namely 192.168.3.1/32 and 192.168.2.1/32.  Just out
> of curiosity, why not place the interfaces on the same IP
> subnet, such as 192.168.2.1/30 and 192.168.2.2/30 for the other
> side?  That is still not going to cause the problem you have,
> because your debug seems to indicate you are not getting past
> layer 2.  I was also curious as to why only one side of this
> backup link was allowed to detect and initiate failure?
> Specifically, you have a dialer map statement from Ney York to
> Albany, but you have no dialer map statement from Albany to new
> York?  Was this intentional?
>
> I also noticed that you have indicated the intent was to use
> the AUX ports for a dial backup solution (I assume in the event
> that the frame relay circuit goes down between the two
> locations).  What is not clear looking at the configs is how
> this will be accomplished without the use of the backup
> interface command or dialer profiles (which is probably better).
>
> Additionally, I do not see how packets sourced from the
> Ethernet interface on either router will have a path to the
> other ethernet interface on the far side router.  You do not
> appear to have enough routes on each routers' static route
> statements to make it all work.  Still, this is not causing the
> problem you have.
>
> My bet is that the problem you are having is related to this
> command here:
>
> ppp authentication chap callin
>
> You may want to read this link (watch wrap) to understand why
> that command may not be necessarily appropriate for what you
> are trying to do:
>
> http://www.cisco.com/warp/public/131/ppp_callin_hostname.html
>
> HTH,
>
> Paul Werner
>
> > Hi all,
> >
> > I am configuring 2 router from their aux ports (but not back
> to back)
> > with
> > usr modems. I have configured the aux ports like they will
> act as back
> > up
> > ports. Everything is normal till it comes to ppp
> authentication session.
> > I
> > am pasting the configs and also after I tried my configs but
> they didnt
> > work
> > so I found a config from cisco and tried that one but it
> didn't worked
> > too.
> >
> http://www.cisco.com/warp/public/793/access_dial/async_backup_14
> 281.html
> >
> > Software versions are 12.1 (10), Any help willl be
> appreciated.
> >
> > Best regards,
> >
> >
> > newyork#sh run
> > Building configuration...
> >
> > Current configuration : 1368 bytes
> > !
> > version 12.1
> > service timestamps debug uptime
> > service timestamps log uptime
> > no service password-encryption
> > !
> > hostname newyork
> > !
> > !
> > username albany password 0 cisco
> > !
> > !
> > !
> > !
> > memory-size iomem 25
> > ip subnet-zero
> > !
> > chat-script backup "" "atdt\T" TIMEOUT 60 CONNECT \c
> > !
> > !
> > voice-port 1/0
> > !
> > voice-port 1/1
> > !
> > voice-port 2/0
> > !
> > voice-port 2/1
> > !
> > !
> > !
> > !
> > interface Loopback0
> >  ip address 192.168.3.1 255.255.255.255
> > !
> > interface Serial0
> >  no ip address
> >  encapsulation frame-relay
> >  no fair-queue
> > !
> > interface Serial0.1 point-to-point
> >  ip address 192.168.1.3 255.255.255.0
> >  frame-relay interface-dlci 16
> > !
> > interface Serial1
> >  no ip address
> >  shutdown
> > !
> > interface FastEthernet0
> >  ip address 10.1.3.1 255.255.255.0
> >  speed auto
> > !
> > interface Async5
> >  ip unnumbered Loopback0
> >  encapsulation ppp
> >  dialer in-band
> >  dialer idle-timeout 3600
> >  dialer fast-idle 10
> >  dialer enable-timeout 10
> >  dialer map ip 192.168.2.1 name albany modem-script backup 250
> >  dialer-group 1
> >  async mode dedicated
> >  no peer default ip address
> >  ppp authentication chap callin
> > !
> > ip classless
> > ip route 192.168.2.1 255.255.255.255 Serial0
> > ip route 192.168.2.1 255.255.255.255 Async5 2
> > no ip http server
> > !
> > dialer-list 1 protocol ip permit
> > !
> > line con 0
> > line aux 0
> >  exec-timeout 0 0
> >  script dialer backup
> >  modem InOut
> >  transport input all
> >  stopbits 1
> >  speed 38400
> >  flowcontrol hardware
> > line vty 0 4
> >  login
> > !
> > no scheduler allocate
> > end
> >
> >
> > here is the config and debug for albany router
> 

Re: PPP negotiaiton problem [7:30767]

2002-01-06 Thread Cisco Breaker

Yes you are damn right.

Best regards,

""Stefan Dozier""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Well, those were my symptons..exactly!
>
> A couple of months ago I was doing ddr configs using modems connected
> via the aux ports and everything thing worked fine at 38400. I still
> had the configs saved, so I know they worked!
>
> When I revisited ddr during the thanksgiving holidays, using the same
> configs I had working before, the connection(s) would establish, but I
> couldn't any data (read: icmp packets or pings)to pass at 38400. Debugs
> indicated that the dialer was connecting but the PPP Authentication
> process was having problems! Actually, the exact same debug symptons you
> posted!
>
> What made me think to drop the modem speed down to 9600, remains a
> mystery, but I did and it worked! I finished my tasks and I didn't
> really think about it any more. The reason: I don't have usr modems,
> I have some old Supras with no documentation, and with all the AT
> commands I punched in the modems from memory, (knowledge or forgotten
> knowledge from my bbs days) I felt fortunate to have them working at 9600.
> Besides packet speed doesn't matter hear at home anyway as long as I
> can get them across the link, when needed! So I moved on to other
> scenarios!
>
> So when your message came across, and you didn't find a solution I
> figured it was worth a shot to drop the line speed and see if it
> was the same problem I experienced. So it surprised me when you replied
> that it worked and it piqued my interest!
>
> The only thing I know for a fact that I changed, (besides me changing
> the modem settings) was between the time I had them working at 38400
> and not being able to get them working at 38400 was.
> I upgraded IOS from 12.0 to 12.1. I noticed you're running 12.1.
>
> So today I downgraded the IOS to 12.0(20) and viola...
> They work fine at 38400 using 12.0. Went back to 12.1 with the same
> configs I just had working at 38400 and with IOS 12.1 I have to drop
> the aux line speed to 9600 to get them to work! A buglet...possibly!
>
> So try downgrading the IOS and see if they start to work at 38400, again!
>
> Stefan
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Cisco Breaker
> Sent: Friday, January 04, 2002 3:48 AM
> To: [EMAIL PROTECTED]
> Subject: Re: PPP negotiaiton problem [7:30767]
>
>
> Yes you are right it worked, but I can not belive. Because as I have
tested
> before aux interfaces support up to 38400 with usr dial up modems. Now I
> wonder what is your experience, I am  curious, would you please tell me?
>
> Best regards,
>
>
> ""Stefan Dozier""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > This may seem like a strange request, but bear with me a moment:
> >
> > Try changing your aux line speed from 38400 to 9600. If it works,
> > I'll share a puzzling experience I had recently!
> >
> > Stefan
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Cisco Breaker
> > Sent: Thursday, January 03, 2002 12:34 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: PPP negotiaiton problem [7:30767]
> >
> >
> > Excuse me everyone but passwords are the same. While I was pasting here
I
> > just changed the passwords of the config but they were the same before
as
> > cisco. And I am trying now, both passwords are the same but it isnt
> working.
> >
> > Best regards,
> >
> >
> > ""Cisco Breaker""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Hi all,
> > >
> > > I am configuring 2 router from their aux ports (but not back to back)
> > with
> > > usr modems. I have configured the aux ports like they will act as back
> up
> > > ports. Everything is normal till it comes to ppp authentication
session.
> I
> > > am pasting the configs and also after I tried my configs but they
didnt
> > work
> > > so I found a config from cisco and tried that one but it didn't worked
> > too.
> > >
http://www.cisco.com/warp/public/793/access_dial/async_backup_14281.html
> > >
> > > Software versions are 12.1 (10), Any help willl be appreciated.
> > >
> > > Best regards,
> > >
> > >
> > > newyork#sh run
> > > Building configuration...
> > >
> > > Current configuration : 1368 bytes
> > > !
> > > ver

Re: IDS Test [7:30806]

2002-01-04 Thread Cisco Breaker

Then what is the passing score, 800?

Best regards,

""Lange, Eric""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> No.  However,  I took the test, and failed it with a 755, and they do ask
a
> lot of GUI questions.  Specifically,  to do this function do you click on
> this than click on this or, click on this than click on that.  Pretty
> brutal.  I completed my CCNP almost a year ago and passed my MCNS exam
about
> 3 months ago.  I thought this was the worst test so far, IMHO of course.
I
> took the class, ordered the Boson exam, which out of 204 questions I
scored
> 96% on, and still failed the test.  I know the only one to blame is my
self.
> Some of the questions I just didn't know the answers.  What do you do!  At
> least I know what to study now!
>
> To make a short answer long.  You do NOT have to memorize all the
> signatures.  Just know IP is 1000, ICMP is 2000 etc
>
> Good luck!
>
> -Eric
>
> -Original Message-
> From: Jay Creasy [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 03, 2002 11:56 AM
> To: [EMAIL PROTECTED]
> Subject: IDS Test [7:30806]
>
>
> Does anyone have any info on the IDS test. Specifically, Do you have to
> memories the couple hundered pages of Signatures in the IDS book ?
>
> Thanks
>
> Jay




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30900&t=30806
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PPP negotiaiton problem [7:30767]

2002-01-04 Thread Cisco Breaker

Yes you are right it worked, but I can not belive. Because as I have tested
before aux interfaces support up to 38400 with usr dial up modems. Now I
wonder what is your experience, I am  curious, would you please tell me?

Best regards,


""Stefan Dozier""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> This may seem like a strange request, but bear with me a moment:
>
> Try changing your aux line speed from 38400 to 9600. If it works,
> I'll share a puzzling experience I had recently!
>
> Stefan
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Cisco Breaker
> Sent: Thursday, January 03, 2002 12:34 PM
> To: [EMAIL PROTECTED]
> Subject: Re: PPP negotiaiton problem [7:30767]
>
>
> Excuse me everyone but passwords are the same. While I was pasting here I
> just changed the passwords of the config but they were the same before as
> cisco. And I am trying now, both passwords are the same but it isnt
working.
>
> Best regards,
>
>
> ""Cisco Breaker""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hi all,
> >
> > I am configuring 2 router from their aux ports (but not back to back)
> with
> > usr modems. I have configured the aux ports like they will act as back
up
> > ports. Everything is normal till it comes to ppp authentication session.
I
> > am pasting the configs and also after I tried my configs but they didnt
> work
> > so I found a config from cisco and tried that one but it didn't worked
> too.
> > http://www.cisco.com/warp/public/793/access_dial/async_backup_14281.html
> >
> > Software versions are 12.1 (10), Any help willl be appreciated.
> >
> > Best regards,
> >
> >
> > newyork#sh run
> > Building configuration...
> >
> > Current configuration : 1368 bytes
> > !
> > version 12.1
> > service timestamps debug uptime
> > service timestamps log uptime
> > no service password-encryption
> > !
> > hostname newyork
> > !
> > !
> > username albany password 0 cisco
> > !
> > !
> > !
> > !
> > memory-size iomem 25
> > ip subnet-zero
> > !
> > chat-script backup "" "atdt\T" TIMEOUT 60 CONNECT \c
> > !
> > !
> > voice-port 1/0
> > !
> > voice-port 1/1
> > !
> > voice-port 2/0
> > !
> > voice-port 2/1
> > !
> > !
> > !
> > !
> > interface Loopback0
> >  ip address 192.168.3.1 255.255.255.255
> > !
> > interface Serial0
> >  no ip address
> >  encapsulation frame-relay
> >  no fair-queue
> > !
> > interface Serial0.1 point-to-point
> >  ip address 192.168.1.3 255.255.255.0
> >  frame-relay interface-dlci 16
> > !
> > interface Serial1
> >  no ip address
> >  shutdown
> > !
> > interface FastEthernet0
> >  ip address 10.1.3.1 255.255.255.0
> >  speed auto
> > !
> > interface Async5
> >  ip unnumbered Loopback0
> >  encapsulation ppp
> >  dialer in-band
> >  dialer idle-timeout 3600
> >  dialer fast-idle 10
> >  dialer enable-timeout 10
> >  dialer map ip 192.168.2.1 name albany modem-script backup 250
> >  dialer-group 1
> >  async mode dedicated
> >  no peer default ip address
> >  ppp authentication chap callin
> > !
> > ip classless
> > ip route 192.168.2.1 255.255.255.255 Serial0
> > ip route 192.168.2.1 255.255.255.255 Async5 2
> > no ip http server
> > !
> > dialer-list 1 protocol ip permit
> > !
> > line con 0
> > line aux 0
> >  exec-timeout 0 0
> >  script dialer backup
> >  modem InOut
> >  transport input all
> >  stopbits 1
> >  speed 38400
> >  flowcontrol hardware
> > line vty 0 4
> >  login
> > !
> > no scheduler allocate
> > end
> >
> >
> > here is the config and debug for albany router
> >
> > albany#sh run
> > Building configuration...
> >
> > Current configuration : 1031 bytes
> > !
> > version 12.1
> > service timestamps debug uptime
> > service timestamps log uptime
> > no service password-encryption
> > !
> > hostname albany
> > !
> > username newyork password 0 cspm
> > !
> > !
> > !
> > !
> > memory-size iomem 25
> > ip subnet-zero
> > no ip domain-lookup
> > !
> > !
> > !
> > voice-port 2/0
> > !
> > voice-port 2/1
> > !
> > !
> > !
>

Re: PPP negotiaiton problem [7:30767]

2002-01-03 Thread Cisco Breaker

Excuse me everyone but passwords are the same. While I was pasting here I
just changed the passwords of the config but they were the same before as
cisco. And I am trying now, both passwords are the same but it isnt working.

Best regards,


""Cisco Breaker""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi all,
>
> I am configuring 2 router from their aux ports (but not back to back)
with
> usr modems. I have configured the aux ports like they will act as back up
> ports. Everything is normal till it comes to ppp authentication session. I
> am pasting the configs and also after I tried my configs but they didnt
work
> so I found a config from cisco and tried that one but it didn't worked
too.
> http://www.cisco.com/warp/public/793/access_dial/async_backup_14281.html
>
> Software versions are 12.1 (10), Any help willl be appreciated.
>
> Best regards,
>
>
> newyork#sh run
> Building configuration...
>
> Current configuration : 1368 bytes
> !
> version 12.1
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname newyork
> !
> !
> username albany password 0 cisco
> !
> !
> !
> !
> memory-size iomem 25
> ip subnet-zero
> !
> chat-script backup "" "atdt\T" TIMEOUT 60 CONNECT \c
> !
> !
> voice-port 1/0
> !
> voice-port 1/1
> !
> voice-port 2/0
> !
> voice-port 2/1
> !
> !
> !
> !
> interface Loopback0
>  ip address 192.168.3.1 255.255.255.255
> !
> interface Serial0
>  no ip address
>  encapsulation frame-relay
>  no fair-queue
> !
> interface Serial0.1 point-to-point
>  ip address 192.168.1.3 255.255.255.0
>  frame-relay interface-dlci 16
> !
> interface Serial1
>  no ip address
>  shutdown
> !
> interface FastEthernet0
>  ip address 10.1.3.1 255.255.255.0
>  speed auto
> !
> interface Async5
>  ip unnumbered Loopback0
>  encapsulation ppp
>  dialer in-band
>  dialer idle-timeout 3600
>  dialer fast-idle 10
>  dialer enable-timeout 10
>  dialer map ip 192.168.2.1 name albany modem-script backup 250
>  dialer-group 1
>  async mode dedicated
>  no peer default ip address
>  ppp authentication chap callin
> !
> ip classless
> ip route 192.168.2.1 255.255.255.255 Serial0
> ip route 192.168.2.1 255.255.255.255 Async5 2
> no ip http server
> !
> dialer-list 1 protocol ip permit
> !
> line con 0
> line aux 0
>  exec-timeout 0 0
>  script dialer backup
>  modem InOut
>  transport input all
>  stopbits 1
>  speed 38400
>  flowcontrol hardware
> line vty 0 4
>  login
> !
> no scheduler allocate
> end
>
>
> here is the config and debug for albany router
>
> albany#sh run
> Building configuration...
>
> Current configuration : 1031 bytes
> !
> version 12.1
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname albany
> !
> username newyork password 0 cspm
> !
> !
> !
> !
> memory-size iomem 25
> ip subnet-zero
> no ip domain-lookup
> !
> !
> !
> voice-port 2/0
> !
> voice-port 2/1
> !
> !
> !
> !
> interface Loopback0
>  ip address 192.168.2.1 255.255.255.255
> !
> interface Serial0
>  no ip address
>  encapsulation frame-relay
> !
> interface Serial0.1 multipoint
>  ip address 192.168.1.1 255.255.255.0
>  frame-relay interface-dlci 16
> !
> interface FastEthernet0
>  ip address 10.1.1.1 255.255.255.0
>  speed auto
> !
> interface Async5
>  ip unnumbered Loopback0
>  encapsulation ppp
>  dialer in-band
>  dialer-group 1
>  async mode dedicated
>  no peer default ip address
>  ppp authentication chap
> !
> ip classless
> ip route 192.168.3.1 255.255.255.255 Async5 2
> ip route 192.168.3.1 255.255.255.255 Serial0 2
> no ip http server
> !
> dialer-list 1 protocol ip permit
> !
> line con 0
> line aux 0
>  modem InOut
>  transport input all
>  stopbits 1
>  speed 38400
>  flowcontrol hardware
> line vty 0 4
>  login
> !
> end
>
>
> 00:38:27: %LINK-3-UPDOWN: Interface Async5, changed state to up
> 00:38:27: As5 PPP: Treating connection as a callin
> 00:38:27: As5 PPP: Phase is ESTABLISHING, Passive Open
> 00:38:27: As5 LCP: State is Listen
> 00:38:29: As5 LCP: TIMEout: State Listen
> 00:38:29: As5 LCP: O CONFREQ [Listen] id 41 len 25
> 00:38:29: As5 LCP:ACCM 0x000A (0x0206000A)
> 00:38:29: As5 LCP:AuthProto CHAP (0x0305C22305)
> 00:38:29: As5 LCP:MagicNumber 0x0731DE4D (0x05060731DE4D)
> 00:38:29: As5 LCP:PFC (0x0702)
> 00:38:29: As5 LCP:ACFC

PPP negotiaiton problem [7:30767]

2002-01-03 Thread Cisco Breaker

Hi all,

I am configuring 2 router from their aux ports (but not back to back)  with
usr modems. I have configured the aux ports like they will act as back up
ports. Everything is normal till it comes to ppp authentication session. I
am pasting the configs and also after I tried my configs but they didnt work
so I found a config from cisco and tried that one but it didn't worked too.
http://www.cisco.com/warp/public/793/access_dial/async_backup_14281.html

Software versions are 12.1 (10), Any help willl be appreciated.

Best regards,


newyork#sh run
Building configuration...

Current configuration : 1368 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname newyork
!
!
username albany password 0 cisco
!
!
!
!
memory-size iomem 25
ip subnet-zero
!
chat-script backup "" "atdt\T" TIMEOUT 60 CONNECT \c
!
!
voice-port 1/0
!
voice-port 1/1
!
voice-port 2/0
!
voice-port 2/1
!
!
!
!
interface Loopback0
 ip address 192.168.3.1 255.255.255.255
!
interface Serial0
 no ip address
 encapsulation frame-relay
 no fair-queue
!
interface Serial0.1 point-to-point
 ip address 192.168.1.3 255.255.255.0
 frame-relay interface-dlci 16
!
interface Serial1
 no ip address
 shutdown
!
interface FastEthernet0
 ip address 10.1.3.1 255.255.255.0
 speed auto
!
interface Async5
 ip unnumbered Loopback0
 encapsulation ppp
 dialer in-band
 dialer idle-timeout 3600
 dialer fast-idle 10
 dialer enable-timeout 10
 dialer map ip 192.168.2.1 name albany modem-script backup 250
 dialer-group 1
 async mode dedicated
 no peer default ip address
 ppp authentication chap callin
!
ip classless
ip route 192.168.2.1 255.255.255.255 Serial0
ip route 192.168.2.1 255.255.255.255 Async5 2
no ip http server
!
dialer-list 1 protocol ip permit
!
line con 0
line aux 0
 exec-timeout 0 0
 script dialer backup
 modem InOut
 transport input all
 stopbits 1
 speed 38400
 flowcontrol hardware
line vty 0 4
 login
!
no scheduler allocate
end


here is the config and debug for albany router

albany#sh run
Building configuration...

Current configuration : 1031 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname albany
!
username newyork password 0 cspm
!
!
!
!
memory-size iomem 25
ip subnet-zero
no ip domain-lookup
!
!
!
voice-port 2/0
!
voice-port 2/1
!
!
!
!
interface Loopback0
 ip address 192.168.2.1 255.255.255.255
!
interface Serial0
 no ip address
 encapsulation frame-relay
!
interface Serial0.1 multipoint
 ip address 192.168.1.1 255.255.255.0
 frame-relay interface-dlci 16
!
interface FastEthernet0
 ip address 10.1.1.1 255.255.255.0
 speed auto
!
interface Async5
 ip unnumbered Loopback0
 encapsulation ppp
 dialer in-band
 dialer-group 1
 async mode dedicated
 no peer default ip address
 ppp authentication chap
!
ip classless
ip route 192.168.3.1 255.255.255.255 Async5 2
ip route 192.168.3.1 255.255.255.255 Serial0 2
no ip http server
!
dialer-list 1 protocol ip permit
!
line con 0
line aux 0
 modem InOut
 transport input all
 stopbits 1
 speed 38400
 flowcontrol hardware
line vty 0 4
 login
!
end


00:38:27: %LINK-3-UPDOWN: Interface Async5, changed state to up
00:38:27: As5 PPP: Treating connection as a callin
00:38:27: As5 PPP: Phase is ESTABLISHING, Passive Open
00:38:27: As5 LCP: State is Listen
00:38:29: As5 LCP: TIMEout: State Listen
00:38:29: As5 LCP: O CONFREQ [Listen] id 41 len 25
00:38:29: As5 LCP:ACCM 0x000A (0x0206000A)
00:38:29: As5 LCP:AuthProto CHAP (0x0305C22305)
00:38:29: As5 LCP:MagicNumber 0x0731DE4D (0x05060731DE4D)
00:38:29: As5 LCP:PFC (0x0702)
00:38:29: As5 LCP:ACFC (0x0802)
00:38:31: As5 LCP: TIMEout: State REQsent
00:38:31: As5 LCP: O CONFREQ [REQsent] id 42 len 25
00:38:31: As5 LCP:ACCM 0x000A (0x0206000A)
00:38:31: As5 LCP:AuthProto CHAP (0x0305C22305)
00:38:31: As5 LCP:MagicNumber 0x0731DE4D (0x05060731DE4D)
00:38:31: As5 LCP:PFC (0x0702)
00:38:31: As5 LCP:ACFC (0x0802)
00:38:33: As5 LCP: TIMEout: State REQsent
00:38:33: As5 LCP: O CONFREQ [REQsent] id 43 len 25
00:38:33: As5 LCP:ACCM 0x000A (0x0206000A)
00:38:33: As5 LCP:AuthProto CHAP (0x0305C22305)
00:38:33: As5 LCP:MagicNumber 0x0731DE4D (0x05060731DE4D)
00:38:33: As5 LCP:PFC (0x0702)
00:38:33: As5 LCP:ACFC (0x0802)
00:38:35: As5 LCP: TIMEout: State REQsent
00:38:35: As5 LCP: O CONFREQ [REQsent] id 44 len 25
00:38:35: As5 LCP:ACCM 0x000A (0x0206000A)
00:38:35: As5 LCP:AuthProto CHAP (0x0305C22305)
00:38:35: As5 LCP:MagicNumber 0x0731DE4D (0x05060731DE4D)
00:38:35: As5 LCP:PFC (0x0702)
00:38:35: As5 LCP:ACFC (0x0802)
00:38:37: As5 LCP: TIMEout: State REQsent
00:38:37: As5 LCP: O CONFREQ [REQsent] id 45 len 25
00:38:37: As5 LCP:ACCM 0x000A (0x0206000A)
00:38:37: As5 LCP:AuthProto CHAP (0x0305C22305)
00:38:37: As5 LCP:MagicNumber 0x0731DE4D (0x05060731DE4D)
00:38:37: As5 LCP:PFC (0x0702)
00:38:37: As5 LCP

Re: ICMP Error [7:30030]

2001-12-26 Thread Cisco Breaker

Thanks for your answers. Ill report these ideas to my customer and wait for
his response.

Best regards,



""Cisco Breaker""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All,
>
> I have a client that installed a Linux NIS server which is working with
> broadcasts. That server is connected to cisco 4908. Server IP is
> 192.168.5.2. He is saying that when NIS server starts to work all clients
> and NIS server is receiving a message at below,
>
> " 192.168.5.2 sent an invalid ICMP error to broadcast"
>
> What is the meaning of this message, I searched on cisco but didnt find
> anything. Can it be because of  "no ip directed-broadcast" command on the
> interface.
>
> Any help will be appreciated?
>
> Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30105&t=30030
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ICMP Error [7:30030]

2001-12-24 Thread Cisco Breaker

Hi All,

I have a client that installed a Linux NIS server which is working with
broadcasts. That server is connected to cisco 4908. Server IP is
192.168.5.2. He is saying that when NIS server starts to work all clients
and NIS server is receiving a message at below,

" 192.168.5.2 sent an invalid ICMP error to broadcast"

What is the meaning of this message, I searched on cisco but didnt find
anything. Can it be because of  "no ip directed-broadcast" command on the
interface.

Any help will be appreciated?

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30030&t=30030
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: O/T Cisco article from SJ Mercury [7:28007]

2001-12-04 Thread Cisco Breaker

Very interesting. Thank you so much.

""Priscilla Oppenheimer""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> This is filler due to the GroupStudy bug that eliminates text with URLs at
> the beginning of messages. This is filler due to the GroupStudy bug that
> eliminates text with URLs at the beginning of messages.  This is filler
due
> to the GroupStudy bug that eliminates text with URLs at the beginning of
> messages.  This is filler due to the GroupStudy bug that eliminates text
> with URLs at the beginning of messages.
>
> FYI: Interesting article on the "true" history of Cisco, with more credit
> given to Stanford and less to Bosack and Lerner.
>
> http://www.siliconvalley.com/docs/news/depth/cisco120201.htm
>
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28066&t=28007
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ACl, authentication and logging [7:28060]

2001-12-04 Thread Cisco Breaker

Hi everyone,

I have a customer that uses 3600 with E1 leased line connections to their
branch offices and their consultant company. They want a full control on the
consultants so they want some config changes to manage them.

First there are two locations that connect to their network for consulting,
but my customer wants to be informed when they enter the network, also wants
to set some access lists so they can only enter some part of the network.
But he also wants an authentication too. As I know username password
combination only applies to ppp so I thought may be he can handle this by
assigning class-maps or something like that. Any idea?

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28060&t=28060
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF Unequal load balancing? [7:27311]

2001-11-26 Thread Cisco Breaker

As I said before I implemented equal load balancing on Motorola and Cisco
what I want to know is, Is it possible to configure OSPF unequal load
balancing ? You are saying that OSPF unequal load balancing can not be done
on cisco I know that. The reason why I asked the question is cause I know
that cisco can not do but is it the OSPF behaviour not to implement unequal
load balancing or is it belong to Cisco's OSPF implementation?
My guess is OSPF.

Best regards,


""Ralph Fudamak""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I don't know how Motorola implements OSPF, but with Cisco's
> implementation you can not do unequal cost load balancing with OSPF.  This
> is not to say that you can't manually change the metrics on the links to
> appear to be equal cost.  Keep in mind that this load balancing is *equal*
> then. Your slow link will get as much traffic as your fast one, which
could
> cause a bottleneck.  See if there is some command to set a default cost on
> the link, then set them both the same.
>
> Hope this helps
>
> ""Cisco Breaker""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > I implemented OSPF load balancing but never done unequal load balancing.
> My
> > customer wants Unequal loadbalancing on Motorola routers. As I know
> Unequal
> > load balancing cant be implemented on Cisco without policy-map? Any
> > suggestions or any info?
> >
> > Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27322&t=27311
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF Unequal load balancing? [7:27311]

2001-11-26 Thread Cisco Breaker

I implemented OSPF load balancing but never done unequal load balancing. My
customer wants Unequal loadbalancing on Motorola routers. As I know Unequal
load balancing cant be implemented on Cisco without policy-map? Any
suggestions or any info?

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27311&t=27311
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Price of a CCNP series exam. [7:27182]

2001-11-26 Thread Cisco Breaker

100 $ for one exam in USA
Best regards,

""]hsan Turkmen""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi folks..!
> How much do you pay for a CCNP exam in other parts of the world?. It is
180
> USD + VAT here (Turkey). Your feedbacks are appreciated..




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27306&t=27182
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Ip Telephony question [7:26344]

2001-11-14 Thread Cisco Breaker

Hi All,

I will take the IP Telephony 9E0-569 CIPT tomorrow, so any last minute
advice for me. If anyone taken this exam before what is the mostly questions
based on? I did not understand very well the last 3 chapters which are
CallManager Architecture, Call Preservation and Media Resources, WAN Design
Considerations. What is the percentage of these 3 chapters in the exam?

Any help will be appreciated?

Best regards,

Cisco Breaker




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=26344&t=26344
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VLAN and IPX [7:24641]

2001-10-30 Thread Cisco Breaker

Hi all,

I have a customer that uses both Novell and NT. We upgraded their LAN with
6500 and 3500 switches. Now we will implement VLANs. I know how to configure
VLAN for IP but never done it with IPX. I red the docs on cisco but I have a
question on my mind. As I know the customer only give a network IPX number
to the server and clients get their Network numbers from the server. If I
put the server on a different VLAN will the router give a network number to
clients or will I have to show the way to clients to reach the server.

My guess is this

interface vlan 2
ip address ..
ipx network 101 (this is the network where the server is)
interface vlan 3
ip address 
ipx network 102 (this is the network where clients will be)

If  I configure my router like this will clients able to find the server or
what should I do?

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24641&t=24641
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



terminal and router [7:23770]

2001-10-22 Thread Cisco Breaker

Hi all,

I am trying to use a windows CE platform to configure routers or modems but
I cant do it. I installed different kind of emulation programs and set the
baud rate to 9600 blah blah also used VT100 but nothing works. I checked the
cable and verified that it is working. Has anybody tried this kind of thing
before? I bet someone did. Any help appraciated about how to configure the
terminal options.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=23770&t=23770
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CVOICE [7:22000]

2001-10-04 Thread Cisco Breaker

Questions like how many voice ports cisco 3660 series have or how many calls
can cisco mcs3810 handle? And also questions about quality of service.

Best regards,


""Patrick Donlon""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Congrats, what sort of questions did you get? I've been thinking of taking
> the voice exam for sometime but haven't because I thought the exams are
only
> for Cisco partners and I'm working for a end user at the moment.
>
> Regards
>
> Patrick
>
> ""Cisco Breaker""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Passed . Questions about ports on 36xx and 26xx series was hard.
> >
> > best regards,
> >
> >
> > ""Cisco Breaker""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > I am taking CVOICE exam in a few hours. Any last minute advice would
be
> > > appraciated.
> > >
> > > Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=22195&t=22000
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CVOICE [7:22000]

2001-10-04 Thread Cisco Breaker

Passed . Questions about ports on 36xx and 26xx series was hard.

best regards,


""Cisco Breaker""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I am taking CVOICE exam in a few hours. Any last minute advice would be
> appraciated.
>
> Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=22033&t=22000
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CVOICE [7:22000]

2001-10-03 Thread Cisco Breaker

I am taking CVOICE exam in a few hours. Any last minute advice would be
appraciated.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=22000&t=22000
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Help me to configure async callback in 2511 router [7:21652]

2001-10-02 Thread Cisco Breaker

]f you are really sure about the client side configuration then the problem
is your IOS.  I had a similar problem like yours while I was at customer
site and fixed it with upgrading the IOS to 12.09. The previous IOS was 11.x
version and It has the commands to apply callback too but they didn't work.

Best regards,

Cisco Breaker

""manhho nguyen""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I want to configure asyn callback in router 2511.
> the configuration is below, but when receive callback number from client,
> the router cannot initiate callback function.
>
>
> version 12.0
> service password-encryption
> !
> hostname Router
> !
> boot system flash
> enable secret 5 $1$XpI9$5zIQu14lpRMz53STOwOH
> y1
> !
> username back callback-dialstring "" callback-line 1 password ok
> ip subnet-zero
> ip domain-name hnpt.com
> ip name-server 10.10.24.4
> chat-script resetModem "" "atz" OK "at&s0=1" OK
> chat-script startModem "" "atz" OK "at&s0=1" OK
> chat-script callback ABORT ERROR ABORT BUSY "" "AT" OK "ATDT \T" TIMEOUT
45
> CONNECT \c
> chat-script offhook "" "ATH1" OK \c
> !
> interface Ethernet0
> ip address 10.10.24.1 255.255.254.0
> no ip directed-broadcast
> no ip route-cache
> !
> interface Async1
> ip unnumbered Ethernet0
> no ip directed-broadcast
> ip mtu 512
> encapsulation ppp
> no ip route-cache
> ip tcp header-compression passive
> no ip mroute-cache
> async default routing
> async mode dedicated
> peer default ip address pool local-pool
> ppp callback accept
> ppp authentication pap callin
> !
> ip local pool local-pool 10.10.24.238 10.10.24.254
> ip default-gateway 10.10.24.2
> no ip classless
> !
> line con 0
> transport input none
> line 1
> session-timeout 5
> autoselect during-login
> script startup startModem
> script modem-off-hook offhook
> script callback callback
> login local
> modem answer-timeout 3
> modem autoconfigure type usr_sportster
> modem InOut
> transport input all
> autohangup
> callback forced-wait 10
> speed 115200
> flowcontrol hardware
> !
>
> I debug some output:
>
> General OS:
> Modem control/process activation debugging is on
> PPP:
> PPP authentication debugging is on
> PPP protocol negotiation debugging is on
> Chat Scripts:
> Chat scripts activity debugging is on
> Callback:
> Callback activity debugging is on
>
> and the result is:
>
> 1d22h: TTY1: DSR came up
> 1d22h: TTY1: destroy timer type 1
> 1d22h: TTY1: destroy timer type 0
> 1d22h: TTY1: create timer type 2, 300 seconds
> 1d22h: tty1: Modem: IDLE->READY
> 1d22h: As1 LCP: I CONFREQ [Closed] id 0 len 23
> 1d22h: As1 LCP: ACCM 0x (0x0206)
> 1d22h: As1 LCP: MagicNumber 0x2477 (0x05062477)
> 1d22h: As1 LCP: PFC (0x0702)
> 1d22h: As1 LCP: ACFC (0x0802)
> 1d22h: As1 LCP: Callback 6 (0x0D0306)
> 1d22h: As1 LCP: Lower layer not up, Fast Starting
> 1d22h: As1 PPP: Treating connection as a dedicated line
> 1d22h: As1 PPP: Phase is ESTABLISHING, Active Open
> 1d22h: As1 LCP: O CONFREQ [Closed] id 44 len 24
> 1d22h: As1 LCP: ACCM 0x000A (0x0206000A)
> 1d22h: As1 LCP: AuthProto PAP (0x0304C023)
> 1d22h: As1 LCP: MagicNumber 0x1A7AD1B6 (0x05061A7AD1B6)
> 1d22h: As1 LCP: PFC (0x0702)
> 1d22h: As1 LCP: ACFC (0x0802)
> 1d22h: As1 LCP: O CONFACK [REQsent] id 0 len 23
> 1d22h: As1 LCP: ACCM 0x (0x0206)
> 1d22h: As1 LCP: MagicNumber 0x2477 (0x05062477)
> 1d22h: As1 LCP: PFC (0x0702)
> 1d22h: As1 LCP: ACFC (0x0802)
> 1d22h: As1 LCP: Callback 6 (0x0D0306)
> *Mar 2 22:35:00: %LINK-3-UPDOWN: Interface Async1, changed state to up
> 1d22h: As1 LCP: I CONFACK [ACKsent] id 44 len 24
> 1d22h: As1 LCP: ACCM 0x000A (0x0206000A)
> 1d22h: As1 LCP: AuthProto PAP (0x0304C023)
> 1d22h: As1 LCP: MagicNumber 0x1A7AD1B6 (0x05061A7AD1B6)
> 1d22h: As1 LCP: PFC (0x0702)
> 1d22h: As1 LCP: ACFC (0x0802)
> 1d22h: As1 LCP: State is Open
> 1d22h: As1 PPP: Phase is AUTHENTICATING, by this end
> 1d22h: As1 LCP: I IDENTIFY [Open] id 1 len 18 magic 0x2477 MSRASV4.00
> 1d22h: As1 LCP: I IDENTIFY [Open] id 2 len 20 magic 0x2477
MSRAS-1-KING
> 1d22h: As1 PAP: I AUTH-REQ id 22 len 22 from "callback"
> 1d22h: As1 PAP: Authenticating peer callback
> 1d22h: As1 PAP: O AUTH-ACK id 22 len 5
> 1d22h: As1 MCB: User callback Callback Number - Client ANY
> 1d22h: Async1 PPP: O MCB Request(1) id 208 len 9
> 1d22h: Async1 MCB: O 1 D0 0 9 2 5 0 1 0
> 1d22h: As1 MCB: O Request Id 208 Callback Type Client-Num delay 0
> 1d22h: As1 PPP: Phas

Re: Voice over IP specific [7:21031]

2001-09-26 Thread Cisco Breaker

I have made the config with num-exp command and it worked.

Thanks for the answers.

""Cisco Breaker""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All,
>
> We have a customer that wants a implementation of voice over ip. Their
dial
> plan will be like this.
>
> A-clients --pbx--router--voip--router--pbx--Bclients
>|
>|
>   router
>   |
>PBX
>   |
>   Cclients
>
> Normally if an A client want to reach a client from B, they dial 66 and
from
> PBX or FXS they get a line and dial 76 and reach the corresponding route
> rfrom voip and dial 86 to reach PBX and the last step they dial the
Bclients
> expansion number 801. My question is this, Is it possible to only dial
once
> and reach the corresponding Bclient from A without PLar (cause A client
will
> Cclients too)? I want to appoint   ony one number and make it dial all
> 66,76,86,801 with  commas ofcourse cause there is a waiting time over
PBXs.
>
> Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=21119&t=21031
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How config changes logged? [7:20968]

2001-09-25 Thread Cisco Breaker

Thanks for the answers .

Best regards,

""Cisco Breaker""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi everyone?
>
> Does anybody know how to view the last time the config changed or how to
> view which commands added at what time to a router? I tried show log I
only
> see updowns etc..
>
> Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=21034&t=20968
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Voice over IP specific [7:21031]

2001-09-25 Thread Cisco Breaker

Hi All,

We have a customer that wants a implementation of voice over ip. Their dial
plan will be like this.

A-clients --pbx--router--voip--router--pbx--Bclients
   |
   |
  router
  |
   PBX
  |
  Cclients

Normally if an A client want to reach a client from B, they dial 66 and from
PBX or FXS they get a line and dial 76 and reach the corresponding route
rfrom voip and dial 86 to reach PBX and the last step they dial the Bclients
expansion number 801. My question is this, Is it possible to only dial once
and reach the corresponding Bclient from A without PLar (cause A client will
Cclients too)? I want to appoint   ony one number and make it dial all
66,76,86,801 with  commas ofcourse cause there is a waiting time over PBXs.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=21031&t=21031
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How config changes logged? [7:20968]

2001-09-25 Thread Cisco Breaker

My problem is to view this type of info without TACACS, with show commands.

Best regards,


""Sean Young""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> aaa accounting exec default start-stop group tacacs+
> aaa accounting commands 0 default start-stop group tacacs+
> aaa accounting commands 1 default start-stop group tacacs+
> aaa accounting commands 15 default start-stop group tacacs+
> aaa accounting network default start-stop group tacacs+
> aaa accounting connection default start-stop group tacacs+
> aaa accounting system default start-stop group tacacs+
>
> AAA accounting will solve this problem.  However, you will have t setup a
> TACACS server and an accounting file.
>
> >From: "Cisco Breaker" >Reply-To: "Cisco Breaker" >To:
> [EMAIL PROTECTED] >Subject: How config changes logged? [7:20968]
> >Date: Tue, 25 Sep 2001 04:00:47 -0400 > >Hi everyone? > >Does anybody
> know how to view the last time the config changed or how to >view which
> commands added at what time to a router? I tried show log I only >see
> misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> 
>
> Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=20975&t=20968
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



How config changes logged? [7:20968]

2001-09-25 Thread Cisco Breaker

Hi everyone?

Does anybody know how to view the last time the config changed or how to
view which commands added at what time to a router? I tried show log I only
see updowns etc..

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=20968&t=20968
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CVOICE [7:20562]

2001-09-20 Thread Cisco Breaker

Hi All,

I am planning to take CVOICE exam so I have a few questions about the topics
regarding the exam.

Approximately how many questions will be about the commands, and are there
any questions about AVVID.

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=20562&t=20562
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Voice over IP [7:19590]

2001-09-12 Thread Cisco Breaker

clearly we will route them from eth to wan by frame relay


""Patrick Donlon""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> In short yes, once you've packetised the voice you can just route it like
> any other ip packets
>
> cheers Pat
>
>
> ""Cisco Breaker""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hi all,
> >
> > I have a question regarding to Voice over IP. Is it possible to make
voice
> > over IP connections on eth and distributing it by ip over frame relay by
a
> > different vendors router?.
> >
> > Let me explain this scenerio in detail. You have a wide area network
> > connected by a frame relay cloud with  Motorola routers. The main
Motorola
> > router is connected to PBX by 2 E&M ports. And it is the wide area
> > connection by ip over frame relay to the frame relay cloud. We want to
> > connect a cisco 1750 router to ethernet and its fxs port to  PBX of the
> > company. Is it possible to put another 1750 to the other side of the
frame
> > relay cloud and put its FXS to its PBX and make these to areas talk
voice
> > over ip like below figure.
> >
> >   ETH
> >  ---
> >| |
> >| |
> > Eth  Eth
> > Cisco 1750   Mot 6560 s0--FRAME RELAY  and IP--s0 Cisco
> > FXSE&M  CLOUD
> 1750
> > | |
> > FXS
> > | | ---P
> > |
> > |-B
> > Telephone
> > |   X
> >  Telephone
> >
> > Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19602&t=19590
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Voice over IP [7:19590]

2001-09-12 Thread Cisco Breaker

Hi all,

I have a question regarding to Voice over IP. Is it possible to make voice
over IP connections on eth and distributing it by ip over frame relay by a
different vendors router?.

Let me explain this scenerio in detail. You have a wide area network
connected by a frame relay cloud with  Motorola routers. The main Motorola
router is connected to PBX by 2 E&M ports. And it is the wide area
connection by ip over frame relay to the frame relay cloud. We want to
connect a cisco 1750 router to ethernet and its fxs port to  PBX of the
company. Is it possible to put another 1750 to the other side of the frame
relay cloud and put its FXS to its PBX and make these to areas talk voice
over ip like below figure.

  ETH
 ---
   | |
   | |
Eth  Eth
Cisco 1750   Mot 6560 s0--FRAME RELAY  and IP--s0 Cisco
FXSE&M  CLOUD  1750
| |
FXS
| | ---P
|
|-B
Telephone
|   X
 Telephone

Best regards,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19590&t=19590
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]