RE: Basic IP CEF question (again) [7:75161]

2003-09-11 Thread Curious
Hi Zsombor, what do you mean?? Why the router has the broadcast IP in 
receive mode?
I would like to know more about this ;)



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75224t=75161
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Basic IP CEF question (again) [7:75161]

2003-09-10 Thread Curious
The history:

Author: Zsombor Papp (---.dsl.snfc21.pacbell.net)
Date:   09-08-03 14:47

It means that's the router's own IP address. 

Thanks, 

Zsombor 

Curious wrote: 
 
 Hello dear friends, 
 I would like to know the meaning of the keyword receive that I 
 can see when I execute a show ip cef command: 
 
 For example: 
 
 show ip cef 
 Prefix Next Hop Interface 
  
  
 10.64.15.224/32 receive 
 
 What means that the next-hop is receive. 
 
 More details: 
 
 ROUTER#sh ip route 10.64.15.224 
 Routing entry for 10.64.15.224/28 
 Known via connected, distance 0, metric 0 (connected, via 
 interface) 
 Redistributing via ospf 10 
 Advertised by ospf 10 subnets 
 Routing Descriptor Blocks: 
 * directly connected, via FastEthernet4/1/0.30 
 Route metric is 0, traffic share count is 1 
 
 Any comments?? Bye and Thx 
 
 

My comments:

Hello Zsombor, I can see IP addresses that doesn't belong to the router, for
example:
Router#sh ip cef | include 10.224.0.51
10.224.0.51/32  receive

But the IP address of the router in the subnet is:

 10.224.0.49

The subnet is:

 10.224.0.48/30

So the IP address 10.224.0.51 is the broadcast address of the 
router in the network, but not the IP owned by the router.
What do you think??
Thx a lot.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=75161t=75161
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Basic CEF question. [7:74962]

2003-09-08 Thread Curious
Hello dear friends,
I would like to know the meaning of the keyword receive that I
can see when I execute a show ip cef command:

  For example:

 show ip cef
   Prefix  Next Hop Interface
   
   
   10.64.15.224/32 receive

   What means that the next-hop is receive.

   More details:

   ROUTER#sh ip route 10.64.15.224
Routing entry for 10.64.15.224/28
  Known via connected, distance 0, metric 0 (connected, via interface)
  Redistributing via ospf 10
  Advertised by ospf 10 subnets
  Routing Descriptor Blocks:
  * directly connected, via FastEthernet4/1/0.30
  Route metric is 0, traffic share count is 1

 Any comments?? Bye and Thx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74962t=74962
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Amazing Spanning Tree [7:74594]

2003-09-02 Thread Curious
Hello friends, I want to thank every answer to this post. I knew that a port 
with spanning tree in blockin state has not any relation with being down, I
was surprised with some answers. What surprised me, is that one port were in
forwarding state and the port in front be in blocking state. For me, there
is
no sense in having one port in forwarding state when the port in front is in
blocking
state, why not both in blocking state?? I know that RFC's stablish the rules
but
I want to understand the sense. 

Thanks again!!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74666t=74594
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


RE: Amazing Spanning Tree [7:74594]

2003-09-02 Thread Curious
Brave!! This is exactly the kind of answer I was waiting for. Just 
common sense, now I understand it, and I feel like a stupid because
the answer is obvious.
Thanks Zsombor 






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74685t=74594
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Amazing Spanning Tree [7:74594]

2003-09-01 Thread Curious
Hello friends, I have an spanning tree question for you!

I have a lot of switches connected between them, but I have seen 
something that I can not explain very well. Two of these switches are
connected using two cables:

Switch1 Switch2
Port 29  -  Port 29
Port 30  -  Port 30

I expected to see one port in blocking state (spanning-tree) and the other 
in forwarding state, but suprisingly I have seen that port 30 is in blocking
state
in Switch1 but it is in forwarding state in Switch 2. Let's see these
outputs:



Switch1#sh spanning-tree interface FastEthernet 0/29
Interface Fa0/29 (port 35) in Spanning tree 1 is FORWARDING
   Port path cost 19, Port priority 128
   Designated root has priority 32768, address 0002.fd3c.18b5
   Designated bridge has priority 32768, address 0005.5e0c.57b6
   Designated port is 35, path cost 23
   Timers: message age 0, forward delay 0, hold 0
Switch1#sh spanning-tree interface FastEthernet 0/30
Interface Fa0/30 (port 36) in Spanning tree 1 is FORWARDING
   Port path cost 19, Port priority 128
   Designated root has priority 32768, address 0002.fd3c.18b5
   Designated bridge has priority 32768, address 0005.5e0c.57b6
   Designated port is 36, path cost 23
   Timers: message age 0, forward delay 0, hold 0
   BPDU: sent 264503, received 2



Switch2#sh spanning-tree interface FAstEthernet 0/29
Interface Fa0/29 (port 35) in Spanning tree 1 is FORWARDING
   Port path cost 19, Port priority 128
   Designated root has priority 32768, address 0002.fd3c.18b5
   Designated bridge has priority 32768, address 0005.5e0c.57b6
   Designated port is 35, path cost 23
   Timers: message age 4, forward delay 0, hold 0
   BPDU: sent 2, received 264561
Switch2#sh spanning-tree interface FAstEthernet 0/30
Interface Fa0/30 (port 36) in Spanning tree 1 is BLOCKING
   Port path cost 19, Port priority 128
   Designated root has priority 32768, address 0002.fd3c.18b5
   Designated bridge has priority 32768, address 0005.5e0c.57b6
   Designated port is 36, path cost 23
   Timers: message age 3, forward delay 0, hold 0
   BPDU: sent 2, received 264573

 
 Why a port is in blocking state and the other is in forwarding??? I
expected to
see both ports in blocking, but one forwarding and the other blocking
doesn't make
sense!!!

  Thanks a lot!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74594t=74594
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Amazing Spanning Tree [7:74594]

2003-09-01 Thread Curious
Hello Marko, you said:

I might be giving you wrong answer, but if one port is in blocking and the
other one in blocking state, link is down in any case. The whole point of
STP is acomplished

But this is not right, my ports are up/up, but one of them is
in forwarding state and the other in blocking :) :) I expected to see both
ports in blocking, not one in forwarding and the other in blocking!



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74605t=74594
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Re: Amazing Spanning Tree [7:74594]

2003-09-01 Thread Curious
Thanks bharani, I thought this, but neither Switch1 or Switch2 is 
the root bridge:

Switch1:#sh spanning-tree  

Spanning tree 1 is executing the IEEE compatible Spanning Tree protocol
  Bridge Identifier has priority 32768, address 0005.5e0c.57b6
  Configured hello time 2, max age 20, forward delay 15
  Current root has priority 32768, address 0002.fd3c.18c1
  Root port is 40, cost of root path is 23
  Topology change flag not set, detected flag not set, changes 113816
  Times:  hold 1, topology change 35, notification 2
  hello 2, max age 20, forward delay 15 
  Timers: hello 0, topology change 0, notification 0

Switch2: 
Switch2#sh spanning-tree 

Spanning tree 1 is executing the IEEE compatible Spanning Tree protocol
  Bridge Identifier has priority 32768, address 0005.5e0c.c5b5
  Configured hello time 2, max age 20, forward delay 15
  Current root has priority 32768, address 0002.fd3c.18b5
  Root port is 35, cost of root path is 42
  Topology change flag not set, detected flag not set, changes 113815
  Times:  hold 1, topology change 35, notification 2
  hello 2, max age 20, forward delay 15 
  Timers: hello 0, topology change 0, notification 0

what do you think?? One of them could be the designated bridge, but
it doesn't explain why one port is in forwarding and the port in front of it
is in blockin. I think that our friend Fred is right. If
you can break the ring in one point, why break it in two points??
Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74606t=74594
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Erasing IOS from FLash [7:74459]

2003-08-29 Thread Curious
Hi
I have 3 IOS images on my Cisco 2600 Router.


  1   5742076  c2600-d-mz.121-5.t9.bin [deleted]
  2   10574412  c2600-ds-mz.122-7.bin
  3   7411544  c2600-i-mz.123-1a.bin

I want to delete 2 of them. I issued the command delete
flash:c2600-d-mz.121-5.t9.bin , after that i can see word deleted appearing
in front of this IOS but i can still see its in the flash. I rebooted the
router but it is still here. I want to keep c2600-ds-mz.122-7.bin

thanks,


--
Curious




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74459t=74459
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


Erasing IOS from Flash [7:74457]

2003-08-29 Thread Curious
Hi
I want to know how can i delete this IOS from my FLash



System flash directory:
File  Length   Name/status
  1   5742076  c2600-d-mz.121-5.t9.bin [deleted]
  3   7411544  c2600-i-mz.123-1a.bin

I issued the delete flash command c2600-d-mz.121-5.t9.bin , now i can see
deleted in front of this ios but it is still showing up in Sh FLash.

what is most recommended of deleting IOS from Flash if u have more then 1
IOS

thank



--
Curious




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=74457t=74457
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html


VOIP Minutes [7:73210]

2003-07-29 Thread Curious
Fellows
Where is the best place to buy International VOIP minutes, e.g I have a
voice gateway and i want to call India on a regular phone, i have to have a
voip gateway in inda to make this call or if some one already has voip
gateways in india and they are selling there minutes.
does it make sence to any one. ?



--




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73210t=73210
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Redistributing default route from BGP into OSPF [7:72058]

2003-07-10 Thread Curious
Maybe I am wrong, but if I want a router speaking ospf to generate a default
router I must configure default-information originate under ospf. With
this command when the router speaking OSPF has a default route in its
routing table it will adevertise a ospf default route. For example, if I
have a static default route in my router and I redistribute static routes in
ospf, it will not advertise a default route, I have to configure a
default-information originate or a default-information originate
allways, the first only generates a ospf default route If the router has a
default route learned by another routing protocol, and de second generates a
default route allways.
Joseph are you sure that if the router learns a default route from e-BGP and
you redistribute bgp in ospf it will work? Don't you need a
default-originate command?

Every day I learn a new thing!





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=72089t=72058
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Multiple Span sessions [7:71714]

2003-07-01 Thread Curious
Hello, I have a question for throubleshooting guys!
Suppose that I want to sniff traffic from two differentes vlans, let's say
vlan 2 and vlan 3, simultaneously in the same CATOS switch. I want to put my
sniffer in port 0/1 (for example), I would do this:

1) set span 2 0/1 both create
2) set span 3 0/1 both create

First question: is neccesary the keyword create?
Second question:  Must I configure port 0/1 as trunk port allowing vlan's 2
and 3 or it is not neccesary?

Thanks!!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=71714t=71714
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


PortFast and routers [7:71253]

2003-06-24 Thread Curious
Hello,

I know that is a bad idea to configure a port with portfast when this port
connect with other switch (loops can be created), but the question is: could
I put a port connected to a router in portfast mode? A router is a layer 3
device not a layer 2, so I think this is not a risk, am I right? This way
the port wakes up quickly, right? And the final question: If I configure a
portfast port with a trunk an connect it to a router?

Thanks my friends.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=71253t=71253
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Traffic share count [7:71116]

2003-06-23 Thread Curious
Hello friends,
  I suppose that this is an easy question, but I want to make clear it. It
is about the meaning of traffic share count that I can see when I execute
an show ip route command:

Router#sh ip route x.x.x.x
Routing entry for x.x.x.x/28
Known via static, distance 1, metric 0 (connected)
Routing Descriptor Blocks:
* directly connected, via Serial5/0/0/1
Route metric is 0, traffic share count is 1

I guess It has something to do with load balancing, but I would appreciate
any comments about it because even when there are several routes to the same
destination I can see that the share count is 1:

Routing entry for X.X.X.X/29
  Known via ospf 1000, distance 110, metric 20, type extern 2, forward
metric 5
  Last update from X.X.X.X on ATM0/0/0.10061, 03:52:56 ago
  Routing Descriptor Blocks:
  * Y.Y.Y.Y, from W.W.W.W, 03:52:56 ago, via ATM0/0/0.10060
  Route metric is 20, traffic share count is 1
Z.Z.Z.Z, from V.V.V.V, 03:52:56 ago, via ATM0/0/0.10059
  Route metric is 20, traffic share count is 1

How can this value be changed? It is always 1 and I would like why

Thanks all friends


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=71116t=71116
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Number of routes and memory usage [7:70299]

2003-06-07 Thread Curious
Hello again friends, I want to thank Mr Jvd for his help, and I would like
to post again my question, It is very surprising that we all have been
working with routers for years but there is no answer for this question, I
can evaluate the ammount of memory used in my router for every type of
route, but I would like to learn from someone more skilled than me and test
my results :) :)

Hello folks, 

I have to evaluate the impact of adding almost 1000  routes in my network,
and what I want to know is simple: How many memory do I need for every new
router? Do you know a simle rule? What I want to know is the relationship
between the number of routes and the memory consumption. I can evaluate know
this by looking how many routes are in may routing table and the memory
used, but I would appreciate any experience from you.
Thanks group! 



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=70299t=70299
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Number of routes and Memory [7:70147]

2003-06-05 Thread Curious
Hello folks,

I have to evaluate the impact of adding almost 1000 routes in my network,
and what I want to know is simple: How many memory do I need for every new
router? Do you know a simle rule? What I want to know is the relationship
between the number of routes and the memory consumption. I can evaluate know
this by looking how many routes are in may routing table and the memory
used, but I would appreciate any experience from you.
Thanks group!



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=70147t=70147
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


PIX Firewall --- DMZ to Inside Access [7:69877]

2003-05-31 Thread Curious
Fellows -
I have a senario here,
I have a PIX firewall with 3 Interfaces , Inside, Outside and DMZ.
Machines on the Inside Interface can access Server on DMZ Zone, no problem,
I have to facilitate limited access from DMZ zone Servers to Host on Inside
Interface.
Let take an example,
I have a Server on DMZ zone 10.1.1.1 and i need to alow TCP Port 7000 from
this Server to a host on Inside zone whoes IP address is 192.168.20.10
I have a raw configuration in my mind since i dont a PIX with 3 Interfaces
in my LAB i can not test it. I know i have put an Access List / NAT to do
this.
Any config welcome.

thanks


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=69877t=69877
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Site to Site VPN on VPN Concentrator 3005 [7:65596]

2003-03-17 Thread Curious
Guys-
I have setup VPN (Site to Site  Cisco VPN Client) on PIX, now we are moving
in off from the PIX and buying a Cisco VPN concentrator 3005.
I have heard that Cisco VPN concentrator is not a good choice for Site to
Site VPN connection.
Please tell me is it true and why a dedecated VPN device is not suitable for
Site to Site VPN.

thanks,

--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=65596t=65596
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Can PIX redirect a packet from its outside in [7:65570]

2003-03-17 Thread Curious
I dont quite understand your question or the senario. If you want to enable
traffic between Host 1 and Host 2 and Host2 is connected to the PIX OutSide
Interace LAN, then why you need IPSEC tunnel between Router and PIX. If you
looking in to security point of view then either move host 2 behind the PIX
or Create VPN tunnel between router and Host 2 etc. I dont know what OS you
are running on Host 2 but most of the Server OS supports VPN tunneling.



--
Curious

MCSE, CCNP
 wrote in message
news:[EMAIL PROTECTED]
 The IPSec tunnel is between the Router and the PIX.  Only Host1's traffic
is
 encrypted upto the PIX . Host2 is on the LAN attached to the PIX's outside
 interface.

 Cheers

 Simon


  -Original Message-
 From: Walker, Todd [mailto:[EMAIL PROTECTED]
 Sent: Saturday, March 15, 2003 11:08 PM
 To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Subject: RE: Can PIX redirect a packet from its outside interface???



 Are you saying BOTH host1 and host2 have IPSec tunnels to PIX?  If so, the
 PIX cannot decrypt and re-encrypt back out the same interface.

 Look through the Networker's presentations for Enterprise VPN Design -
there
 are a few slides on the issue.

 If host2 is just on outside interface without IPSec, then you may have a
 chance.  But this PIX limitation may extend to your scenario as well.

 Todd

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 Sent: Sat 3/15/2003 1:39 AM
 To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Cc:
 Subject: Can PIX redirect a packet from its outside interface???


 Hi,

 This must be an easy one for the PIX experts.

 I have a topoloy as shown below.
 Host1---Router ==IPSEC
Tunnel==(outside)PIXFirewall(inside)
 |
 |

 Host2

 Host1 is trying to ping Host2.
 The packet flow would be
 Host1Router--PIX-Host2.
 Is this possible??? Would the PIX forward the packet coming in via the
IPSEc
 tunnel on the outside interface to the Host2 which is on the LAN attached
to
 the outside interface.??  Please note that the packet here is not
 transitting the PIX.


 Cheers
 Simonc




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=65599t=65570
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: Trouble with Cisco 806 [7:64626]

2003-03-07 Thread Curious
Didn't quite understand your question.?


--
Curious

MCSE, CCNP
Ahmed Ali  wrote in message
news:[EMAIL PROTECTED]
 Hi,

 I've in the process of configuring and 806.  However I can ping the
external
 interface on the router from the internal lan.  Any suggestions?

 Thanks
 Ahmed




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=64739t=64626
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Win2k VPN Server [7:64401]

2003-03-04 Thread Curious
I have a Win2k VPN server that just got Hacked, we have decided to move it
behind the firewall.
Any one knows what ports i needs to open on my firewall so that my PPTP vpn
client connects to it.

thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=64401t=64401
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Loopback Testing [7:63515]

2003-02-21 Thread Curious
I want to do a loopback testing between my router and a remote router over a
Frame Circuit.
Tell me what i need to configure
Both routers are Cisco 2600 and running 12.0 IOS.

thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=63515t=63515
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Loopback Testing [7:63515]

2003-02-21 Thread Curious
Yes it has a BuiltIn CSU/DSU


--
Curious

MCSE, CCNP
Priscilla Oppenheimer  wrote in message
news:[EMAIL PROTECTED]
 Do the routers have built-in CSU/DUSs? That makes a difference.

 Priscilla

 Curious wrote:
 
  I want to do a loopback testing between my router and a remote
  router over a
  Frame Circuit.
  Tell me what i need to configure
  Both routers are Cisco 2600 and running 12.0 IOS.
 
  thanks,
 
 
  --
  Curious
 
  MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=63528t=63515
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: access-list acl_out permit ip impact [7:63234]

2003-02-18 Thread Curious
Here is a correct statment for Access group

access-group acl_out in interface outside


Rest is correct.


--
Curious

MCSE, CCNP
Ismail Al-Shelh  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 10.10.0.0 255.255.0.0---515E PIX FIREWALL--1750
 ROUTER10.15.0.0 255.255.0.0

 10.15.0.0 Is the inside network
 10.10.10.0 Is the outside network

 In CISCO PIX FIREWALL  Version 6.1(4), what is the impact of this command?


 access-list acl_out permit ip 10.10.0.0 255.255.0.0 10.15.0.0 255.255.0.0
 access-group in interface outside

 does it mean that the 10.10 network can reach 10.15 network through any
port
 !
 and if not then how can I let the 10.10 network can reach 10.15 network
 through any port !


 is IP include TCP and UDP ?

 Please help me with the exact impact of this command.



 Ismail Al-Shelh
 Abdulla Fouad Company
 Network Engineer
 CD-Dammam




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=63298t=63234
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX 501 NAT / PAT [7:62907]

2003-02-12 Thread Curious
Fellows
I have PIX 501 on my home netwoek, it is connected with Cable Router, from
where its gets Dynamic Internet IP address.
Now lets say i want to run my Web Server or Email Server, i have to NAT or
PAT my Web Server Internal Address with Dynamic Internet IP address that PIX
gets from ISP.
My concern is when Internet IP address will change, i will loose my Web
Server will be down also.
Is there a way i can do dynamic NAT / PAT.
People who have Used Link Sys Cable / DSL Routers knows what i am talking
about. When ever Internet IP address changes Linksys (or other brands)
change the NAT / PAT. and your Web Server / Email Server is always UP.



--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=62907t=62907
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Site to Site VPN Monitering on PIX [7:62676]

2003-02-07 Thread Curious
I have setup Site to Site VPN between our corporate PIX 515 and our
developers PIX 501, i want to moniter the VPN traffic of these Site to Site
VPN connections.
Please tell me what tools are available to accomplish this.

thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=62676t=62676
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VO/IP Study [7:61957]

2003-01-27 Thread Curious
Guys
Tell me the best place to learn / certify on VO/IP in New York City / NJ
area.



--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61957t=61957
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Serial Interface Down [7:61220]

2003-01-16 Thread Curious
We just noticed the Serial Interface of our CIsco 2600 router is down,
here is its current status


Serial0/0 is down, line protocol is down
  Hardware is PQUICC with Fractional T1 CSU/DSU
  Internet address is A.B.C.D
  MTU 1500 bytes, BW 1544 Kbit, DLY 2 usec,
 reliability 253/255, txload 1/255, rxload 1/255
  Encapsulation HDLC, loopback not set
  Keepalive set (10 sec)
  Last input 00:27:48, output 00:27:43, output hang never
  Last clearing of show interface counters never
  Input queue: 0/75/1754 (size/max/drops); Total output drops: 1208
  Queueing strategy: weighted fair
  Output queue: 0/1000/64/1191 (size/max total/threshold/drops)
 Conversations  0/53/256 (active/max active/max total)
 Reserved Conversations 0/0 (allocated/max allocated)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
 83316984 packets input, 2394378579 bytes, 0 no buffer
 Received 507747 broadcasts, 0 runts, 2 giants, 0 throttles
 294 input errors, 201 CRC, 88 frame, 0 overrun, 0 ignored, 4 abort
 80768969 packets output, 3501265478 bytes, 0 underruns
 0 output errors, 0 collisions, 60 interface resets
 0 output buffer failures, 0 output buffers swapped out
 2 carrier transitions
 DCD=down  DSR=up  DTR=up  RTS=up  CTS=down

If some one shed any light on it.

thanks,

--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61220t=61220
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IP Phone [7:59816]

2002-12-28 Thread Curious
Faisal
I know about dialpad and net2phone, what i was looking for is a system that
allows me to plug an IP phone with my telephone line and allows me to call
any where in the world over internet.
Dialpad and Net2Phone rates are very high.

Khan Faisal  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi

 You are talking about VoIP Phone from Creative Labs Inc.  Net2Phone also
 works the same.  Visit www.creativelabs.com or Visit DialPad.com or
 Net2phone.com

 These company will have list of phone that can be configured for Voice
over
 IP Technology.

 Faisal




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=59903t=59816
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IP Phone [7:59816]

2002-12-26 Thread Curious
Guy-
I have seen a phone that you plug with you telehone line any where in the
world ( in my case pakistan) and setup your ISP information in to this
phone, and when ever to call to and from USA to/from that phone it will only
cost you 5 c per min.
Any one is familer with it, what kind of phone is this etc.

thanks,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=59816t=59816
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Site to Site VPN b/w PIX 515 and PIX 501 by using Dynamic Map [7:59084]

2002-12-12 Thread Curious
Guys
I am having a issue Site To Site VPN between PIX 515 and PIX 501. PIX 501 is
at our develper location, and he has DHCP Internet IP address from his ISP,
i am using Dynamic Map on PIX 515 for Site To Site VPN.
Develoer is complaing that his VPN connection goes down (although he sees a
vpn light on PIX 501 but can not access any thing in our office network) on
PIX 501 I see the Crypto map, and access list counter increase on 501 but on
PIX 515 side i dont see his PIX 501 in crypto map.
I thought of timeout or in activity time out issue. Please Advice.

thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=59084t=59084
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Failover MIB for PIX 515 [7:59136]

2002-12-12 Thread Curious
Guys
Is there any MIB for PIX 515 IOS Ver 6.2 for FailOver.

thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=59136t=59136
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Online Libraries [7:58794]

2002-12-09 Thread Curious
Guys
Tell me the best Online library to Read IT books (Cisco) online.

thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=58794t=58794
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX 501 PPOE Verizon [7:58796]

2002-12-09 Thread Curious
Any one of you every use PIX 501 with Verizon DSL modem, which uses PPOE.
How we can specify and user name and password in PIX 501 so that it can
connect with Verizon DSL modem.


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=58796t=58796
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX 501 and MSN Messanger Voice / Video Chat [7:58809]

2002-12-09 Thread Curious
Guys
I have just installed PIX 501 at my home network, i can not do VOICE / VIDEO
chat through MSN Messanger / Net Meeting.
For testing i am permitting IP ANY ANY on outside Interface. Still same
issue,
Let Me know if you know the fix or work around to this problem.

thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=58809t=58809
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX 501 and MSN Messanger Voice / Video Chat [7:58809]

2002-12-09 Thread Curious
Well ! when i dont use PIX and attact my computer with my DSL modem (MSN
DSL) it work fine, i was also running my web site on my own server with out
the issue, but now since i put PIX 501, every thing else work but Audio -
Video Chat.

thanks,


--
Curious

MCSE, CCNP
Stull, Cory  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Find out if your cable modem provider is doing any blocking.. I just found
 out the hard way that Charter Cable filters a lot of different ports heres
a
 few they filter on...   80 23 25 110   and many more.

 -Original Message-
 From: Curious [mailto:[EMAIL PROTECTED]]
 Sent: Monday, December 09, 2002 1:39 PM
 To: [EMAIL PROTECTED]
 Subject: PIX 501 and MSN Messanger Voice / Video Chat [7:58809]


 Guys
 I have just installed PIX 501 at my home network, i can not do VOICE /
VIDEO
 chat through MSN Messanger / Net Meeting.
 For testing i am permitting IP ANY ANY on outside Interface. Still same
 issue,
 Let Me know if you know the fix or work around to this problem.

 thanks,


 --
 Curious

 MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=58821t=58809
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Traffic Analyses [7:58193]

2002-11-27 Thread Curious
Is there a tool which gives me very good traffic analyses or traffic
monitering on my Cisco Routers / PIX FW  (Serial and Eth) Interfaces, over
Ethernet and T1 Link.

Thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=58193t=58193
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX 515 and HP Openview [7:57894]

2002-11-22 Thread Curious
I have a HP open view server on inside interface of my pix 515,
to check the status of Firewall Outside Interface, HP OV send icmp to
outside interface of the firewall,
the issue is we are not getting reply from outside interface of the FW,
although i have permiting icmp echo and echo reply via ICMP command and also
ICMP ports are open on access list on outside interface.


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57894t=57894
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: GRE on PIX and Concentrators [7:57729]

2002-11-19 Thread Curious
PIX supports GRE, i have setup GRE tunnel between my 2 sites.  Here is link
which might helps you.

http://www.cisco.com/en/US/tech/tk648/tk367/technologies_configuration_examp
le09186a00800a43f6.shtml


thanks,

--
Curious

MCSE, CCNP
The Long and Winding Road  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 the last time I checked, the answer was no to either one. it has been
 several months, but at that time the Cisco position was why would you
want
 to and there were several preferred means of terminating secure tunnels
on
 either device.

 --
 TANSTAAFL
 there ain't no such thing as a free lunch




 Azhar Teza  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hi Folks, Does anyone know if PIX or VPN Concentrators support GRE to
 enable
  multiprotocol routing such as EIGRP.I have 10 branches and am thinking
to
  replace my FR clould with site-to-sit VPN.  IPSEC doesn'tsupport
  multiprotocol routing such as EIGRP and requires GRE to work in
parallel.
 As
  far as I know GRE is only supported in routers and Cisco yet to provide
 this
  feature in PIX and Concentrators.How in the world I could  do  this
since
 my
  hearquarter has PIX and that is where I wanted my VPN tunnels.Is there
any
  alternatives? Does PIX 510 support VPN? Regards, Teza
 
  ___
  Join Excite! - http://www.excite.com
  The most personalized portal on the Web!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57738t=57729
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CISCO NETWORKING BULK CBT BUNDLES 1-2 30 CD's [7:57737]

2002-11-19 Thread Curious
Let me know if some one use there CBTes from Cisco, If it is worthed to
invest money on these CBTes.

CISCO NETWORKING BULK CBT BUNDLES 1-2 30 CD's
CISCO Switched Routing Training CD
CISCO Security Training CD
CISCO Call Manager-VOIP 3.0 AVVID Training CD
CISCO Voice  Video Technologies CD
CISCO Configuration  Troubleshooting CD
CISCO Packet Data Serving Node Training CD
CISCO Universal Gateway Manager Training CD
CISCO Works2000 Tutorial Training CD
CISCO DSL-CDM-CPE Training CD
CISCO Advanced QoS/Fragmentation Training CD
CISCO MPLS-VPN Training CD
CISCO MGX-TDM Switch Training CD
CISCO Wireless Technology Training CD
CISCO Web Content Cache Engine Technology Training CD
CISCO Videoconferencing Training CD
CISCO SECURITY  VPN ADVANCED TRAINING CBT
CISCO MNET GSM MOBILE TELEPHONE TRAINING CBT
CISCO CALL MANAGER TRAINING 3.0.5 CBT
CISCO NETSCOUT nGENIUS TRAINING CBT
CISCO ISDN MODEM WAN AGGREGATION TRAINING CBT
CISCO ATM NRP2 CONCENTRATOR TRAINING CBT
CISCO BOOMERANG SERVER - GLOBAL BALANCER CBT
CISCO MGX 8800 IP VPN - VoIP - VoATM CBT
CISCO CE-7320 CONTENT ENGINE CBT
CISCO uBR7100 WIRELESS TRAINING CBT
CISCO AMR II CONFIG.  TROUBLESHOOTING CBT
CISCO 6015 ARCHITECTURE ADSL  DSL CBT
CISCO CAMPUS - OPTICAL - DWDM - DESIGN CBT
CISCO CATALYST 6000 SERVER LOAD BALANCING CBT
CISCO AIRONET WIRELESS (WLAN) TRAINING CBT

thanks,


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57737t=57737
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Clearing access lists counters [7:57241]

2002-11-11 Thread Curious
restart the router.


--
Curious

MCSE, CCNP
John Tafasi  wrote in message
news:20022125.VAA01591;groupstudy.com...
 Can some one tell me how to clear access-list counters? I tried to use the
 command clear access-list counters but it did not work. Please see the
 output of the show command below.

 R5-2503#show access-lis abc
 Extended IP access list abc
 Dynamic test permit ip any any
   permit ip any any (158 matches)
 permit tcp any host 10.10.110.3 eq telnet
 R5-2503#




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57247t=57241
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX as a DHCP relay agent [7:55785]

2002-10-17 Thread Curious
Hi
I dont think you can make PIX DHCP Relay Agent , athough you can make router
as DHCP relay agent(by using IP Helper Address) or make your Windows 2000
Server as DHCP Relay agent.


--
Curious

MCSE, CCNP
Ashraf Hozayen  wrote in message
news:200210170740.HAA27183;groupstudy.com...
 Hi,
 Use the dhcpd enable command to turn on DHCP daemon on PIX , The PIX
 Firewall DHCP client can only be enabled on the outside interface.
 DHCP client support within the PIX Firewall is designed for use within a
 small office, home office (SOHO) environment using a PIX Firewall that is
 directly connected to a DSL or cable modem that supports the DHCP server
 function.





 Ashraf Hozayen
 Network Engineer
 CCNA,CCNP ,CCIE  MCP
 Cisco Security Specialist 1
 VAS  Network IT Dept.
 Vodafone Egypt
 Direct No: +20-2-529-2824
 Fax No: +20-2-5292-499
 Cellular No : +20-105-372-020
 E-mail: [EMAIL PROTECTED]


  -Original Message-
 From: Osama Kamal [mailto:OKamal;Mobinil.com]
 Sent: 17 October 2002 09:11 AM
 To: [EMAIL PROTECTED]
 Subject: PIX as a DHCP relay agent [7:55785]

 2 questions:

 Can the PIX work as a DHCP relay agent?

 What are the ports required to be opened on the pix to allow DHCP relay
 agent traffic to pass through?



 Thanks






 ***
 Important
 Confidentiality: This communication is intended for the above named person
 and is confidential and/or legally privileged any  opinion expressed in
this
 communication are not necessarily those of the Egyptian company for Mobile
 Services (MobiNiL). If it has come to you in error you must take no action
 based on it, nor must you copy or show it to anyone: please delete/destroy
 and  inform the sender  immediately.
 No Responsibility: MobiNiL is not responsible for any political,
religious,
 racial or partisan opinion in any correspondence conducted by its domain
 users. Therefore, any such opinion expressed, whether explicitly or
 implicitly, in any said correspondence is not to be interpreted as that of
 MobiNiL.
 Monitoring / Viruses: MobiNiL may monitor all incoming  outgoing e-mails
in
 line with current legislation. Although we have taken steps to ensure that
 this e-mail and attachments are free from any Virus, we advise that in
 keeping with good computing practice the recepient should ensure they are
 actuallyvirus free.
 The Egyptian Company for Mobile Services (MobiNiL) www.mobinil.com

 The World Trade Center: 1191 Corniche El Nil, Boulaq - Cairo - Egypt
 Telephone: +20 2 574 - 7000 or + 20 12 320 - 
 Fax: +20 2 574 - 7111 or +20 12 320- 7111
 ***




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=55815t=55785
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Site To Site VPN b/w PIX 515 and Open BSD [7:53511]

2002-09-17 Thread Curious

All-
Any one knows to configure site to site VPN over IPSEC tunnel b/w PIX 515
and OpenBSD.

Thanks


--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53511t=53511
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



DNS Behind the firewall [7:53016]

2002-09-10 Thread Curious

My Company's DNS server resides on our External LAN (our Public LAN),
yesterday we move it to our Private LAN (Behind our PIX 515), and Nated its
Public IP address with its new Private IP Address in the Firewall and Open
Port 53.
After all that move and settings we were able to resolve domain names from
Private LAN but not from Public Lan or Internet.
Please let me know if some one has any idea Y...?



Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53016t=53016
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DNS Behind the firewall [7:53016]

2002-09-10 Thread Curious

I am Permitting UDP / TCP port 53 on my access list on Outside Interface.
Clients from the Internal LAN are able to resolve names but Internet Clients
or Client on External or public LAN can not resolve DNS name, one thing i
also noticed, Hit counter for access-list entry for DNS server was 0,
although there was correct entry in translation table and there was no
typing mistake in access-list.


--
Curious

MCSE, CCNP
Mark W. Odette II  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Be sure you have the permit statement for DNS(53) applied to the outside
 interface via access-list.  Unless you put the DNS server in a DMZ, you
 shouldn't really need access-lists applied to the inside interface IMO.

 Whether or not you have a web server that is also running on the same
 machine as DNS, or a mail server, you will need to make sure you put a
 public address A record for said server in your DNS zone along with
 however you choose to resolve the WWW/SMTP/POP3 Server on the inside
 or implement the alias command on the PIX to have the PIX auto-magically
 modify inside DNS requests to the public-addressed host so that you
 resolve to its private address.

 Caveat to the alias command though is that with it in place, you can
 only use the PIX PDM in Monitor mode- PDM doesn't support Alias
 statements... You'd think Cisco would change that in the next update to
 the PDM.  HINT HINT Cisco!!?!? :)


 Hope that helps.

 Mark

 -Original Message-
 From: Curious [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 10, 2002 2:06 PM
 To: [EMAIL PROTECTED]
 Subject: DNS Behind the firewall [7:53016]

 My Company's DNS server resides on our External LAN (our Public LAN),
 yesterday we move it to our Private LAN (Behind our PIX 515), and Nated
 its
 Public IP address with its new Private IP Address in the Firewall and
 Open
 Port 53.
 After all that move and settings we were able to resolve domain names
 from
 Private LAN but not from Public Lan or Internet.
 Please let me know if some one has any idea Y...?



 Curious

 MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53026t=53016
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DNS Behind the firewall [7:53016]

2002-09-10 Thread Curious

O Yes!

--
Curious

MCSE, CCNP
Roberts, Larry  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Does your access-list look like this:

 Access-list 100 permit udp any host a.b.c.d eq domain

 Where a.b.c.d is the EXTERNAL address ? That is what I see wrong most
often.

 Thanks

 Larry


 -Original Message-
 From: Curious [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 10, 2002 3:41 PM
 To: [EMAIL PROTECTED]
 Subject: Re: DNS Behind the firewall [7:53016]


 I am Permitting UDP / TCP port 53 on my access list on Outside Interface.
 Clients from the Internal LAN are able to resolve names but Internet
Clients
 or Client on External or public LAN can not resolve DNS name, one thing i
 also noticed, Hit counter for access-list entry for DNS server was 0,
 although there was correct entry in translation table and there was no
 typing mistake in access-list.


 --
 Curious

 MCSE, CCNP
 Mark W. Odette II  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Be sure you have the permit statement for DNS(53) applied to the
  outside interface via access-list.  Unless you put the DNS server in a
  DMZ, you shouldn't really need access-lists applied to the inside
  interface IMO.
 
  Whether or not you have a web server that is also running on the same
  machine as DNS, or a mail server, you will need to make sure you put a
  public address A record for said server in your DNS zone along with
  however you choose to resolve the WWW/SMTP/POP3 Server on the
  inside or implement the alias command on the PIX to have the PIX
  auto-magically modify inside DNS requests to the public-addressed host
  so that you resolve to its private address.
 
  Caveat to the alias command though is that with it in place, you can
  only use the PIX PDM in Monitor mode- PDM doesn't support Alias
  statements... You'd think Cisco would change that in the next update
  to the PDM.  HINT HINT Cisco!!?!? :)
 
 
  Hope that helps.
 
  Mark
 
  -Original Message-
  From: Curious [mailto:[EMAIL PROTECTED]]
  Sent: Tuesday, September 10, 2002 2:06 PM
  To: [EMAIL PROTECTED]
  Subject: DNS Behind the firewall [7:53016]
 
  My Company's DNS server resides on our External LAN (our Public LAN),
  yesterday we move it to our Private LAN (Behind our PIX 515), and
  Nated its Public IP address with its new Private IP Address in the
  Firewall and Open
  Port 53.
  After all that move and settings we were able to resolve domain names
  from
  Private LAN but not from Public Lan or Internet.
  Please let me know if some one has any idea Y...?
 
 
 
  Curious
 
  MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53033t=53016
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco VPN CLient Windows XP [7:51899]

2002-08-22 Thread Curious

One of our user having issue on his Windows XP machine after he installed
Cisco VPN Client.
He can not Switch User in Windows XP.
Please let me know if some know this issue, and any possible solution.

--
Curious

MCSE, CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51899t=51899
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNP virtual lab and CCNP routersim [7:51232]

2002-08-12 Thread Curious

Fadi
I used CCNP SwitchSIM, it was crap. I felt like i wasted my money on it. I
wont recommend this to any one.



Fadi Younes  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Dear all,
 I am planning to buy a CCNP simulation software and i am trying to
 choose between to available software products which are CCNP Cybex
 Virtual Lab and CCNP RouterSim. Can you advice or comment on both
 softwares if you used them before. Many thanks in advance.

  Fadi Younes
   IT Team Member
   ARAMEX International
   P.O.Box 960913, Amman 11196
   Jordan
   http://www.aramex.com

   Office: +962 6 552 2192
   Fax: +962 6 552 7461




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51269t=51232
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Serial Interface Bandwidth [7:50381]

2002-08-01 Thread Curious

I want to know the current bandwidth of my serial Interface of Router. Lets
say i have a fractional T1, how would i know what bandwidth i have for my
serial interface.

thanks,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=50381t=50381
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CSS 1 Training [7:50184]

2002-07-30 Thread Curious

Guys
I am interesting in taking CSS 1 training, Please let me know if you
recommend any insitute in New York City Area.

Thanks,




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=50184t=50184
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco 2651 Problem [7:49815]

2002-07-26 Thread Curious

Re-Install the Correct IOS.

. .  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi

 I have a Cisco 2651 with two Fast Ethernet interfaces. I have accidentally
 installed a Cisco 2600 IOS image.  now when I do a show run the
interfaces
 are not there anymore.  I tried to make it to boot from boot but the
 interfaces is not showing up.

 If you can give me some help, that would be great

 Thanks

 ===
 Router#show running-config
 Building configuration...

 Current configuration:
 !
 version 12.0
 downward-compatible-config 12.1
 service timestamps debug uptime
 service timestamps log uptime
 no service password-encryption
 no service dhcp
 !
 hostname Router
 !
 boot system rom
 !
 !
 !
 !
 !
 ip subnet-zero
 !
 !
 !
 !
 ip classless
 no ip http server
 !
 !
 line con 0
 transport input none
 line aux 0
 line vty 0 4
 login
 !
 end

 Router#
 Router#show version
 Cisco Internetwork Operating System Software
 IOS (tm) C2600 Software (C2600-I-M), Version 12.0(7)T,  RELEASE SOFTWARE
 (fc2)
 Copyright (c) 1986-1999 by cisco Systems, Inc.
 Compiled Tue 07-Dec-99 02:12 by phanguye
 Image text-base: 0x80008088, data-base: 0x807AAF70

 ROM: System Bootstrap, Version 12.1(3r)T2, RELEASE SOFTWARE (fc1)

 Router uptime is 0 minutes
 System returned to ROM by power-on
 System image file is flash:c2600-i-mz.120-7.T

 cisco 2600 (MPC860) processor (revision 0x200) with 39936K/9216K bytes of
 memory.
 Processor board ID JAB05410GVS (3360889488)
 M860 processor: part number 5, mask 2
 Bridging software.
 X.25 software, Version 3.0.0.
 32K bytes of non-volatile configuration memory.
 8192K bytes of processor board System flash (Read/Write)

 Configuration register is 0x2102

 Router#show flash

 System flash directory:
 File  Length   Name/status
   1   4209848  c2600-i-mz.120-7.T
 [4209912 bytes used, 4178696 available, 8388608 total]
 8192K bytes of processor board System flash (Read/Write)

 Router#


 _
 Chat with friends online, try MSN Messenger: http://messenger.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=49830t=49815
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Collision Detecting [7:48830]

2002-07-15 Thread Curious

Open Question
How do we detect the source of collision, i am experiencing alot of
collision on my LAN, which consisit of 10 Base T HUBS and 10/100 Switches, i
am seeing alot of collision, but i dont know where is a Source, If some one
knows how to detect the source of collsion will be great help for me
!!!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48830t=48830
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ISDN and VPN (IPSEC 3DES) [7:40807]

2002-04-08 Thread Curious

Guys
Any of you familier with issues between ISDN and Cisco VPN Client (IPSEC
3DES). All of my ISDN users unable to VPN using Cisco VPN Client, and we
have pICX 515.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40807t=40807
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco VPN Client PIX [7:40670]

2002-04-06 Thread Curious

Clients are behind Linksys Cable/DSL router and in the office we have PIX
515.
PIX assigns IP address from Local IP address Pool.

Curious  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 I am using Cisco VPN Client to connect with my Office PIX 515 firwall over
 IPSEC 3DES encryption. My connection is droping automatically. It is not
 because of idle time out or maximum time out. it happens on radomly. If
some
 one has any information on it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40688t=40670
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco VPN Client PIX [7:40670]

2002-04-05 Thread Curious

I am using Cisco VPN Client to connect with my Office PIX 515 firwall over
IPSEC 3DES encryption. My connection is droping automatically. It is not
because of idle time out or maximum time out. it happens on radomly. If some
one has any information on it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40670t=40670
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



test [7:38181]

2002-03-13 Thread Curious

test




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=38181t=38181
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AVVID Certification

2001-01-12 Thread Curious

I've searched Cisco's page and do not see such a certification.  If one
exists, do they have an outline for it?


""Lee"" [EMAIL PROTECTED] wrote in message
93lm3h$dul$[EMAIL PROTECTED]">news:93lm3h$dul$[EMAIL PROTECTED]...
 Has anybody taken the Understanding PBX Systems and Technology online at
 www.certification.net?  I've taken the CIPT test at Prometric.  I can't
seem
 to find any reference materials for the PBX test.  Taken it and failed a
 couple of times already.

 Any assistance would be appreciated.


 _
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE R/S Exam 350-001

2000-12-19 Thread Curious

I took it on Friday.  I personally marked about five questions and returned
to them after completing the last question.  If you're going to take it
soon, take a look at the Exam Cram "Routing  Switching" book the day before
and of the test.  If you have studied properly this book is good refresher
before you embark on your journey.


""Billha"" [EMAIL PROTECTED] wrote in message
91oq7m$197$[EMAIL PROTECTED]">news:91oq7m$197$[EMAIL PROTECTED]...
 Several people have taken this exam recently, one post mentioned how you
 could go back to questions.

 If you have sat the exam recently can you tell me, have you been able to
 mark and go back to questions ?

 Bill


 _
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]