Re: Cisco 802 remote access

2000-09-14 Thread David

You may find help by sending a sample from your current config...

Andy Barkl <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I am trying to configure a Cisco 802 for remote access with NAT but it
> doesn't respond when accessing it externally. I am not sure of where my
> configuration error is.
> Any ideas are welcome.
> Thanks!
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Bring equipments in and out of US

2000-09-18 Thread David

I took some hi-tech hardware through a 3rd world country and after
convincing them that the gear would leave when i did ( 6 weeks time
period ), they noted the serial numbers on my passport and let me on my way.

FYI, they didnt have any concern about the equipment or serial numbers when
I left the country...




"Jason" <[EMAIL PROTECTED]> wrote in message
8q0qmv$ruj$[EMAIL PROTECTED]">news:8q0qmv$ruj$[EMAIL PROTECTED]...
> I need to bring a few routers out of US and maybe in a couple of months,
> bring them back again. What can I do to avoid any inport and export taxes
> since I plan to bring the same equipments in and out for personal use. But
> I'm sure I'll have a hard time convincing them that I have 6 routers for
> personal use !! :-P
>
> Anybody has any experiences, trainers, etc , please let me know.
>
> Thanks !!
>
>
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What is Loopback address for IPv6?

2000-09-18 Thread David

another site is www.6bone.net

it has all the links to get your 'learn onz'

Manishkumar Patel <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All!
> Can anybody tell me what is Loopback address for IPv6.
> Any site good for IPv6 concepts?
> Thanks
> MK
>
> 
> Get free email and a permanent address at http://www.netaddress.com/?N=1
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Exam for CCDP Cert

2000-09-26 Thread David

you need

ccna
ccda
routing switching and remote access (or foundation routing & switching)
cid
that is what gets you CCDP

CCNP is
ccna
routing switching and remote access (or foundation routing & switching)
cit


"Cisco Kid" <[EMAIL PROTECTED]> wrote in message
8qps76$16o$[EMAIL PROTECTED]">news:8qps76$16o$[EMAIL PROTECTED]...
> Hi !
>
> Can anyone tell me if there are 2 exams to take for CCDP after CCNP or
just
> the one.
>
> Thanx.
>
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCDP?

2000-09-27 Thread David

I want both CCDP and CCNP, and at this point, I'm thinking about CCIE-Design
for the future. I have ccna and just passed ccda.

Chuck, does your employer design networks?

Thanks,

David


"Chuck Larrieu" <[EMAIL PROTECTED]> wrote in message
003d01c027fe$08f00ce0$[EMAIL PROTECTED]">news:003d01c027fe$08f00ce0$[EMAIL PROTECTED]...
> Come to work for my employer. Believe it of not, they value the CCDP FAR
> more than the CCNP. I am told that I qualify for a hefty raise come review
> time. :-> CCIE still rules all, though.
>
> Chuck
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
John
> Robert
> Sent: Tuesday, September 26, 2000 1:39 PM
> To: [EMAIL PROTECTED]
> Subject: CCDP?
>
> Hi all,
>
> I am currently CCNP and taking CCIE Written in two weeks.  I want to know
if
> doing CCDP will help in my career?  I saw outlines for two exams that I
have
> to take in order to become CCDP after my CCNP; CCDA and CID, outlines
looks
> pretty familiar.  Any idea how hard these exams are?  and if earning CCDP
is
> a good idea?  How employers in usa are considering this certificate?
>
> Thanks!
>
>
> p.s.  I am in USA.  :)
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Book for CCDA???

2000-10-02 Thread David

I used DCN by Cisco Press, but I heard that Top Down Network Design is the
more useful book both for the test and the future as a reference book...

David


"Alex" <[EMAIL PROTECTED]> wrote in message
8r084e$pu3$[EMAIL PROTECTED]">news:8r084e$pu3$[EMAIL PROTECTED]...
> Hi
> I'm looking for a good CCDA book, any suggestions???
> Thanks
>
>
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>




**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Book for CCDA???

2000-10-02 Thread David

I used DCN by Cisco Press, but I heard that Top Down Network Design is the
more useful book both for the test and the future as a reference book...

David


"Alex" <[EMAIL PROTECTED]> wrote in message
8r084e$pu3$[EMAIL PROTECTED]">news:8r084e$pu3$[EMAIL PROTECTED]...
> Hi
> I'm looking for a good CCDA book, any suggestions???
> Thanks
>
>
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Lab date 09/02/2002 @ RTP for swap

2000-10-02 Thread David

Was 2002 the earliest available date?



"Shahzad Ali" <[EMAIL PROTECTED]> wrote in message
00fe01c02bc6$87045160$[EMAIL PROTECTED]">news:00fe01c02bc6$87045160$[EMAIL PROTECTED]...
> Hi there,
>
> I have lab scheduled at RTP on 09/02/2002 and I like to swap it for
November
> or December, 2000 at the RTP. Please email if someone like to swap the
date.
>
> Regards,
>
> ShahzaD
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: which is better ?

2000-10-05 Thread David

NT


Antonius Kurniadi <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Dear groups,
>
> I want to implement DHCP to our networks (20 sites). Which is better
> DHCP from Cisco Router or DHCP from Windows NT ?
>
> Thanks in advance.
>
> Anton
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what is dark fiber?

2000-09-05 Thread David

It is my understanding that dark fiber is un-used/non-saturated fiber. I
havn't heard that its a special type of fiber, just a condition of the
fiber.



"bahadir korkmaz" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> hi.
> what is dark fiber?
> i found some sites that says dark fiber means unused fiber.
> is it so?
> i think dark fiber must be different then unused fiber.
> i mean for example. 10gigabit ethernet runs on dark fiber.
> dark must be something related to bandwidth or wavelength.
>
> if someone knows dark fiber definition i ll be happy.
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: (OT) Firewall!!!!

2000-05-23 Thread David

I think another important thing to keep in mind is maintenance cost. 
There is a lot of other stuff going on in a Solaris or WinNT box running
Checkpoint, that usually requires basic systems maintenance from time to
time.  With a hardware firewall like PIX or Netscreen, they're designed
to firewall and not require maintenance, and do it fast.  They'll also
reboot in the event of a crash about 10 times faster then a Checkpoint
server, and handle higher traffic loads much more gracefully.  So, in my
opinion, hardware based firewalls are going to be much less cost in
terms of initial investment and ongoing maintenance.

hope this helps ;)
david



> 
> > -Message d'origine-
> > De:   ElephantChild [SMTP:[EMAIL PROTECTED]]
> > Date: mardi 23 mai 2000 11:55
> > À:Achal Kataria
> > Cc:   [EMAIL PROTECTED]
> > Objet:Re: (OT) Firewall
> >
> > On Tue, 23 May 2000, Achal Kataria wrote:
> >
> > > Just wanted to know one thing , which one is better PIX or
> > > Checkpoint Firewall 1 and why??
> >

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: router throughput test software

2000-05-23 Thread David

Port status, MRTG:

http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/mrtg.html

Everything you wanted to know about Cisco MIBs:

ftp://ftp.cisco.com/pub/mibs

for all their products.  I can't remember where I found this link from
CCO.. it didn't come up right away.  I just posted the MRTG link to the
list about this same question a few weeks ago.  I'm sure it's in the
archives.

hope this helps,
david



Larry Averitt wrote:
> 
> Hey Everyone,
>  What I'm looking for is a way to have a current throughput status
> of all of my ports. (constantly) . I couldn't really find what I was
> looking for in the archives. Any ideas ?
> 
>  Secondly, does cisco have a mib file? I've been in and out of the
> cisco web site with nothing but a paper trail leading me back to rfc
> 1213 but no actual file. I understand that there will be dif. mibs for
> switches and routers.. but still no file. :)
> 
> thanks for the advice
> larry
> 
> Larry Averitt, CCNA
> Design Validation
> www.imcnetworks.com
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: packets

2000-05-25 Thread David

Not to be too nit-picky but that third part of the TCP handshake should
be:

A -> Replys ACK=1, SYN=0, SEQ=1001, ACK#=5001

SYN should be 0 there not 1.  probably just a typo.  

> A -> Sends  SYN=1, ACK=0, SEQ=1000, ACK#=0
> B -> Replys ACK=1, SYN=1, SEQ=5000, ACK#=1001
> A -> Replys ACK=1, SYN=1, SEQ=1001, ACK#=5001
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Calculating bandwidth utilization

2000-05-25 Thread David

you'll do it manually just like any network management tools would do
it.  Take a timed snapshot from the interface counters (show interface)
to figure out bytes/sec.  then you can divide that by the max bytes/sec
to get a percentage.

'sh proc' will give you a cpu usage line at the top.

'sh mem' shows various memory statistics.

david


[EMAIL PROTECTED] wrote:
> 
> Hey,
> 
> Where can I find information on calculating the utilization on an
> interface. Since I dont have any network management tools to use I want to
> try to figure it out manually (if possible). Also are their any show
> commands that show CPU and Memory resource utilization?
> 
> Thanks,
> 
> Pete
> 
> Remove the nospam from e-mail address.
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to modify router's configuration with a script?

2000-05-25 Thread David

Albert Ip wrote:
> 
> Why would you want to do that?
> 
I just posted something else about this recently.  One easy way if you
have expect installed is to run 'autoexpect', telnet to the router, run
one command, then exit.  After that, exit autoexpect, and modify the
name of the command you ran with $argv.  Then to run any command on that
one router, you'd just run

./script.exp 'some cisco IOS command here'

another way is to use an old livingston C utility called 'pmwho' still
available on their ftp site at

ftp://ftp.livingston.com/pub/le/contrib 

or something very similar to that.

very strange that I've posted 6 answers now to the same two questions. 
I think that was the last time.




> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Roger Lu
> Sent: Thursday, May 25, 2000 3:37 PM
> To: [EMAIL PROTECTED]
> Subject: How to modify router's configuration with a script?
> 
> I am looking for a way to create a script(with Perl, C, etc) which can
> telnet a Cisco router and modify the configuration constantly according to
> other condition. Anybody has any idea how to do it?
> 
> Thanks!
> 
> Roger Lu
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: extreme and cisco

2000-05-26 Thread David

yes, we had a couple catalysts, along with lots of fore and extreme
switches at the place I was just working.  In our environment, it seemed
the Cisco ethernet interfaces worked fine, as long as auto-negotiation
wasn't taking place.  On both our router and catalyst 2924, the fast
ethernet interfaces would usually auto-negotiate to 100Mb/half duplex
when connecting to the fore's or extremes.  Setting both sides manually
to 100Mb/full worked great.

David
  

Chancp wrote:
> 
> hi all,
> 
> has anyone tried internetwork a extreme switch and cisco switch b4??? how
> was the interopability and management like???
> 
> rgds
> chan...;-)
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco and Unix

2000-05-26 Thread David

well, it depends on the employers.  A lot of large enterprise employers
won't look at linux yet because it doesn't have certain reliability
features, and it lacks a long history in the market to prove itself. 
But, that's changing quickly because of all the press linux has received
in the past several years including large amounts of support from
Netscape, Sun, HP, IBM, and many others.  And in my opinion, after doing
unix admin for several years, I had no problem moving into
solaris/sunos/irix/hp/bsd administration after knowing linux really
well.  It does, after all, include a mix of features from BSD/SYSv-ish
tools.  Just read the red unix admin bible by Evi Nemeth and friends and
you'll get a good feel for the differences.  

Sorry for the topic digression, this is a cisco only list after all. 
But, it's been noted in several messages lately that obviously a good
working knowledge of an operating system is necessary to really function
well in a high level position.  It is a piece of the picture, and
knowing capabilities of various operating systems is quite important. 
It's like knowing all seven layers of OSI.  How many CCNP/CCIE's out
there understand the frame format's for DS-1, or SONET, or what B8ZS and
ESF actually do?  The OS implements all seven layers.  Most network
engineers work primarily with layers 2-4.  If you understand the
protocols outside these layers well it makes troubleshooting and
understanding networks magnitudes easier.

Back to your original question.  Go get a free ($20 for the media) copy
of solaris x86 from sun's web site, play around, and then focus on what
you can do in linux (like sendmail, INN, BIND, etc) in your resume.  And
by the way, if I remember correctly from a recent linux journal article,
Cisco's entire printing system is run off linux servers, with slightly
modified code.


David



Billy Monroe wrote:
> 
> I think a good background in Unix would help to get a position at Cisco.
> Most of their testing labs are using Unix.
> What I have noticed is that most employers I talk requiring Unix experience
> don't give too much attention for Linux knowledge.
> I think it is not what they want to hear (yet)...
> 
> ""AC Schneider"" <[EMAIL PROTECTED]> wrote in message
> 8gfpoa$5u$[EMAIL PROTECTED]">news:8gfpoa$5u$[EMAIL PROTECTED]...
> > As a newbie to these parts, I've recently decided to start my studies for
> > the CCNA 2.0.  Out of curiosity, I went to the Cisco web site and noticed
> > many positions I looked at had Unix as a requirement.  So my question, in
> > general is it good to have a Unix back ground to complement Cisco
> > certification?  If so, would Linux do as a substitute?
> >
> > Your input is appreciated,
> > -ACS

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Value of Cisco certifications

2000-05-30 Thread David

I think this issue can be taken in a much more practical sense.  It's
quite obvious that a very large majority of the people on this list
already work in the technology field, some of which have contacts inside
Cisco.  If anyone from Cisco is monitoring this list, or gets copies of
emails that may violate NDA's, it would not be difficult for them to
contact one of the individuals cc'd on the message, or contact the list
owner and track down received: headers from the originating poster.  If
you have concerns about NDA violation in what you're posting and don't
want to have your certifications revoked for any reason, then you
probably shouldn't post your question in this public forum.

David

-

 -Original Message- 
 From: TyRhon144000 
 To: [EMAIL PROTECTED] 
 Sent: 5/30/00 2:47 PM 
 Subject: Value of Cisco certifications 

 Is there any way Cisco can make their certifications
challenging enough, 
 that they can give a realistic estimate of a person's skills? 
 I really don't believe that there is such a thing as 
 paper-certification, 
 everyone's certification comes on paper and everyone has to do
some 
 amount 
 of study to get certified. Yet, as a CCNA myself, I would like
for all 
 of 
 Cisco certifications to reflect real world knowledge. 
 I applaud Cisco for making the CCIE as challenging as it is. I
am also 
 happy 
 that just about every CCIE lives up to the NDA. If only those
who have 
 obtained other certifications from Cisco lives up to the NDA,
then maybe 
 some of their other certifications will not lose credibility. 
 Is there anything, that we can do to preserve the credibility
of Cisco 
 certifications? 
 T. Knox

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RE-Passive-interface

2000-05-31 Thread David

in a general statement, as I've come across questions that I too believe
are erroneous, I'll usually answer them as I think Cisco wants me to
answer them, and then be sure to leave some crazy comment in the
"Comment" window.. something like "What the hell kind of question is
this???" :-)

David 
CCNP



Warren Shubin wrote:
> 
> And the six-million dollar question:
> 
> Should one answer it the "right" way or the "wrong" way on the test, as the
> tests are taken from the materials?
> 
> -Original Message-
> From: Atif Awan [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, May 31, 2000 8:05 AM
> To: David Sanderson; [EMAIL PROTECTED]
> Subject: Re: RE-Passive-interface
> 
> Definitely an erroneous statement.
> 
> Regards
> Atif

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off topic - PMTU discovery on Solaris

2000-06-01 Thread David

/usr/sbin/ndd -get /dev/tcp tcp_ignore_path_mtu

to get the current value.  1 is true 0 false. 

/usr/sbin/ndd -get /dev/tcp ? 

to see a list of all TCP tunable parameters.


"Clark, Jason" wrote:
> 
> Does anyone know how to enable PMTU discovery on Solaris?
> 
> Thanks
> 
> Jason
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Quick config for SNMP on 3548 for MTRG

2000-06-06 Thread David

interface byte counters should be part of the standard SNMP MIB, and not
require any special SNMP setup.  Have you tried just running the config
maker script against the switch?



Dave Santeramo wrote:
> 
> Just wondering if someone can shoot me a quick SNMP setup so that MRTG
> can track usage of a switch.
> 
> thanks
> 
> ___
> To get your own FREE ZDNet Onebox - FREE voicemail, email, and fax,
> all in one place - sign up today at http://www.zdnetonebox.com
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Secure !!!!!

2000-06-06 Thread David

Brad Ellis wrote:
> 
> no, you need to buy it
> ""skt"" <[EMAIL PROTECTED]> wrote in message
> 000301bfcfbd$5f917500$[EMAIL PROTECTED]">news:000301bfcfbd$5f917500$[EMAIL PROTECTED]...
> Hi all..
> 
> can any one tell me about cisco secure  i have heard about it, that it
> is shareversion .can u pleasse tell me the url which points to that
> location



Well, it really depends on what you want to do.  I haven't had a chance
to play around with CiscoSecure yet, but it apparently requires an
Oracle or Sybase installation to maintain RADIUS, TACACS+, and other
information.  It's designed for large environments with many thousands
of entries.  If you just need a simple TACACS+ or RADIUS server for a
hundred accounts or so, there are plenty of free platforms out there. 
Just search around.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RAID question

2000-06-07 Thread David

well, i do think this is a bit off-topic for a Cisco list, but here
goes.  All major NOS support RAID 1-5, and probably 0+1, although I'm
not sure about that one  Most hardware RAID devices do the same.

I'd wager at least 95% of installations use RAID 0, 0+1, or 5 depending
on speed and cost requirements, and a few applications use 3 and 4. 
I've never seen raid 2 in use.

Search for 'raid' on www.whatis.com for a decent description of all the
RAID types, or read "The RAID Handbook" for everything you've ever
wanted to know.

David


Barry Marthaler wrote:
> 
> what level of RAID(1-4) is supported by most network operating systems?
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Sniffing on switched networks

2000-06-08 Thread David

you can define static arps, but I can't think of anything that would be
more difficult to manage.  arp spoof attacks are fairly rare in practice
(that I've seen at least -- but they're fairly new as well).  The most
important thing you can do is make sure your local networks are safe
from attack and safe from people exploiting root access.  Of course,
since it's near impossible to protect yourself 100%, some people are
working on AntiSniff tools (antisniff being one of them) to detect
things like this.  I haven't checked up on all their capabilities, but
there was a recent post to BUGTRAQ about them. Search the archives at
www.geek-girl.com.  

The only thing I can think of to protect this from happening internally
is to provide a higher level of authentication/encryption on the packets
so that spoofing ARP and listening to packets will become useless
anyway.  Hooray IPSEC!

If anyone has more comments that would be great!

David



Jeff Kell wrote:
> 
> Recently I came across some advisories on a new (to me) hack tool called
> dsniff (IIRC).  The basic operation is as follows:
> 
> * enemy spoofs an ARP reply to a target host/client for the victim's
>   IP, but supplies it's own MAC address.
> * target stashes this in it's ARP table, subsequent IP packets are
>   sent to the enemy's MAC.
> * enemy copies the packet and forwards on to the victim.
> 
> It is a bit scary, and gets down to the bit-level of various TCP
> stacks.  On paper it sounds rather simple, and I'm trying to devise some
> means of protection against this.  Among my concerns about the
> attack:
> 
> * do all stacks accept and cache 'unsolicited' ARP replies?  Routers?
>   Windows?  NT?  Various unix flavors?
> * will this overwrite any existing ARP entry in the cache?
> * will this overwrite a static ARP entry?
> 
> To insure a "sniff-proof" connection between yourself and a host, can
> you define static ARPs on the client, host, and endpoint router(s) if on
> different subnets and protect yourself from such an attack?
> 
> Sorry if somewhat off-topic, but it does get to the way ARP works (is it
> stateful - request and wait on reply, or they two events handled
> asynchronously?)
> 
> Jeff Kell <[EMAIL PROTECTED]>
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



(end of) salary

2000-06-09 Thread David

again, this is not worth anyone bickering about.  This is a list
dedicated to getting cisco certifications, not weekly questions about
how much money technology professionals can make.  And please remember,
there IS a searchable archive.  try searching for the word "salary" and
see what you get, or post your question on the jobs list at the same
site, or search for jobs on one of the big job sites and check the ones
that list salary ranges.

David


JohnMail wrote:
> 
> Hey:
> 
> Sorry but many smart employees who know their worth, value, and how to
> bargain and negotiate do just that all the time.
> The fact that this is inconceivable to you does not mean anything.
> 
> - Original Message -
> From: Steve Dangerfield ([EMAIL PROTECTED])
> <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Saturday, June 10, 2000 11:31 AM
> Subject: Re: salary
> 
> > Sorry to be so blunt, but Think about it !
> >
> > You don't just get your CCNP then, walk into the nearest Employer and say
> > "I've got a CCNP give me x pounds/dollars a year !".
> >
> > This has been covered before, watch for the retorical questions !
> >
> > Where do you live ?, How much techi Experience ? How much business
> > Experience ? And the questions go on !
> >
> > Steve
> >

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Checkpoint firewall

2000-06-09 Thread David

while on the topic of security, I almost see it as a necessity of any
good administrator (depending on your function(s)) to be a part of the
BUGTRAQ security mailing list.  This has been an excellent resource for
many years, that eventually most exploits and security problems make it
to, whether Unix, NT, application, or network device related.  There
have been many exploits on many firewalls, router OS's (a few on IOS
too!), switches, talks about bypassing VLAN's over trunks, ARP spoofing
code and discussions, and many other topics related to postings I've
seen on this list.  I have learned quite a lot by just subscribing to
this list for the past 5 years.

BUGTRAQ is archived at www.geek-girl.com (among others I'm sure) for
those interested.

David



Richard Holland wrote:
> 
>   This is a bit off-topic, but I recall a discussion of using Checkpoint
> firewall, and thought I'd share a SANS security newsletter concerning
> checkpoint.
> 
> "It's possible to use various fragmented packets (such as those generated by
> Jolt2.c) to cause the firewall to crash or operate at 100% CPU utilization.
> Firewall rules are ineffective for defense.  More information is in this
> issue as item {00.24.025} ("Check Point FireWall-1 fragmentation DoS")."
> 
> I could forward the complete message to anybody interested.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Checkpoint firewall

2000-06-09 Thread David

What is even more fun is trying to send a packet requiring fragmentation
from Linux through a firewall!  A small snippet in the kernel source
shows that linux will fragment a packet and send the LAST fragment
first, for various reasons that I don't completely understand.  This
means that the first fragment of a packet from a linux host will have no
layer 4 info!  What is a firewall supposed to do with that other then
hold it in memory, and use some kind of timers and DoS checking code in
the firmware?  I only dealt with this on the Netscreens, and they
currently pass the fragments through for this reason if I remember
correctly.   This isn't perfect, but not too bad, because the host can
most likely handle this better then a firewall handling thousands of
connections for all hosts with a limited memory capacity.

David


Nimesh Vakharia wrote:
> 
> I am curious how the PIX handles this exploit.
> 
> The exploit is Checkpoint reassembles fragmented packet before forwarding.
> But it does not inspect the packet in any way until it has completely
> built the packet... so you can keep sending multiple fragments and it
> keeps reassembling, using up system resources and probably crash at one
> point. Checkpoint supposedly does not check against its rule base
> (conduit/statics in PIX) when it receives a fragmented packet!
> 
> I vaguely remember that the PIX ignores the first fragment of the
> entire series (if it maches the rules) and forwards everything after that.
> This way irrespective of how malicious the fragment is, it never gets
> built at the host endCan anyone confirm as to how the PIX handles
> fragmented packets?
> 
> BTW: Check out
> http://www.enteract.com/~lspitz/fwtable.html
> 
> This really shows how much work need to be done on firewall code!
> - Stateful monitoring is a joke
> - No inspection on sequence nos.
> - Fragments!
> 
> Nimesh.
> 
> On Fri, 9 Jun 2000, Richard Holland wrote:
> 
> >   This is a bit off-topic, but I recall a discussion of using Checkpoint
> > firewall, and thought I'd share a SANS security newsletter concerning
> > checkpoint.
> >
> > "It's possible to use various fragmented packets (such as those generated by
> > Jolt2.c) to cause the firewall to crash or operate at 100% CPU utilization.
> > Firewall rules are ineffective for defense.  More information is in this
> > issue as item {00.24.025} ("Check Point FireWall-1 fragmentation DoS")."

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Microsoft 'Routers'

2000-06-13 Thread David

FYI, unix has also had routing capabilities inherent in the operating
system, as well as software for BGP, OSPF, RIP and friends in free
software like routed/gated since the beginning of the Internet.   But,
would I ever use any unix box for a router?  Not unless it was five
years ago, it was linux, and I was starting up an ISP with pocket
change.  That was the trend while companies were out there providing
descent T-1/ISDN/PRI/Frame Relay cards and drivers for Linux x86
machines.  The good thing about this setup, is that Linux can route a
full T-1 without any trouble using aging 486 hardware (ie: very very
dirt cheap router... $50?).  But what's that , you want to route a
DS-3?  Unlikely.  I don't know anyone that makes DS-3/HSSI cards for
PCs.  Anyone want to jump in on that?

But, I've never trusted Windows NT/98 etc to do any routing, unless I
wanted it to crash all the time -- and no I'm really not wanting to
start a discussion about which is better or anything.  I'd be interested
to see how much microsoft has cleaned it up in 2000.  I really have a
lot of hope for this OS in terms of functions (ie: active directory) and
hopefully a newfound stability.  

In general any PC is not built for high speed routing.  There will be
hardware architecture limitations to it's performance.  Also, since the
operating systems are so bloated (compared to something streamlined for
routing like IOS), and running tons of applications at the same time --
unless you have a dedicated box -- a server will have a lot of other
things to do other then route packets.  If you have no needs for real
performance, perhaps you could use a windows platform as a router, but
considering the resource needs of Windows in terms of hardware, you'd be
better off buying a real router instead.  

There is an interesting Linux mini-distribution out there called LRP, or
The Linux Router Project.  It's a linux OS that fits onto a floppy (or
it did at least) and has full capabilities for routing and other things
like firewalling I'd assume.  I haven't looked at it for a long time.

It's at http://www.linuxrouter.org although the server doesn't appear to
be accepting connections right now.  hmmm, I hope it's not running on a
LRP distribution hahaha.

David


Billy Monroe wrote:
> 
> I see that Microsoft has provided resources to configure OSPF and RIP in
> Windows 2000 servers
> to provide routing capabilities.
> 
> Has anybody evaluate this ? Do you think this could substitute 'real'
> routers ?
> 
> Thanks,
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What came first?

2000-06-13 Thread David

nope, FECN and BECN are bits strictly in the frame relay header.  ICMP
will have nothing to do with this.  These bits will only be set by frame
relay switches in the cloud that don't know a thing about layer 3, IP,
or ICMP.  When they can't process frames fast enough, they'll set these
bits to ease congestion on their hardware (and buffers, etc.). It's then
up to the endpoint stations' higher layer protocols to initiate
retransmission, as they will never see the discarded frames.

I'm actually not sure what source-quench does myself, and I want to
leave work NOW, so I'm not going to look it up ;)


David


Dale Cantrell wrote:
> 
> Evening all,
> I'm reading about Frame Relay on Protocols.com and a question arises.
> When the network becomes congested to the point that it cannot process
> new data transmissions, it begins to start discarding frames. Two bits are
> changed in the F.R. header..FECN bit and BECN bit. In this way all
> downstream nodes and the attached user device learn about congestion on the
> line.
> Does this  not   mean that ICMP would send a "buffer full" message, and
> I thought that was the job of a "source-quench message"? Any movement of the
> definition lines would be gladly received.
> Ya'lls truly, :>)
> Dale
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Microsoft 'Routers'

2000-06-13 Thread David


>  Yes, UNIX systems have had routing capabilities for a very long
> time, but saying "since the beginning of the Internet" is probably a
> bit of an exageration.  In the beginning, there were things called,
> IMP's, which were basically custom code running on IBM RT-PC's, that
> handled routing in the Internet.  RIP, etc. came along much later.
> RFC-1, which is the IMP RFC is dated April 7, 1969; whereas, the RIP
> RFC, RFC-1058, is dated June 1988, almost 20 years later.  BGP appears
> to be first defined in RFC-1105, dated June 1989, and OSPF appears to
> be first defined in RFC-1131, which is only available in PostScript
> format, so I don't have an exact date for it, but it is probably
> somewhere around August 1989, given that RFC-1105 is dated June 1989.
> 

Thanks for the clarification, esp. on the IMPs.  But again, I said
'routing' in unix, not 'routing protocols' which I fully understand came
about much later then "the beginning of the Internet".  That's why I
also mentioned routed/gated, just without the dates.

>  You would have had to been extremely naive to even consider that.
> The 2.2.x series of kernels are supposed to be much better; although,
> they still have problems.  But, five years ago, the state of Linux
> TCP/IP was atrocious both in terms of performance and reliability.
> 

I absolutely agree.  But five years ago the only choice out there for
this kind of setup was linux 1.2 (and probably FreeBSD, please excuse my
lack of knowledge of that platform) and that's what many mom and pop
ISPs used for a basic T-1 router using things like the ETINC cards, and
dialin service, using the Cyclades and RocketPort cards and USR modems
when they were the best around.  This proved a lot more stable and 100%
more flexible then the aging Xyplex hardware.  Once Livingston PM-2e's
came around and the first RADIUS server, they soon became the preferred
choice for many people.  


> } dirt cheap router... $50?).  But what's that , you want to route a
> } DS-3?  Unlikely.  I don't know anyone that makes DS-3/HSSI cards for
> } PCs.  Anyone want to jump in on that?
> 
>  Lan Media Corporation (see http://www.lanmedia.com/ ) makes
> DS-3/HSSI cards that work with BSD/OS, FreeBSD, Linux, NetBSD, OpenBSD,
> and Solaris.  I don't know anything about them.  Besides, I don't think
> I would recommend using a general purpose OS on generic PC hardware for
> this job.  If you have the money for a DS-3, it is pretty much a given
> that you have the money to do the job right using the proper
> equipment.


another point properly stated.  I simply wouldn't trust pushing DS-3
levels of traffic through any OS or hardware platform other then one
made for the purpose.


>  There is also PicoBSD (see http://people.FreeBSD.org/~picobsd/ ),
> which is along the same lines, but based on FreeBSD.  The packet
> filtering software included with the *BSD's is capable of keeping
> state, unlike the Linux packet filtering software which can only do
> basic filtering, 
>

Cool, I appreciate your comments.  I agree with the necessity to
maintain connection state in any type of real firewall.  And I'll go
ahead and point out that Linux 2.4 has added a multi-threaded networking
stack and updated firewalling code, although I haven't checked its
capabilities yet.  The IP filter kernel module -- that I assume is still
the code which does the firewalling you mention above in FreeBSD -- has
been ported to linux 2.0, and I'm sure 2.2/2.4 is done or well underway
although I didn't look that deep into it.

I've long heard the heralds from unix people about the rock solid
everything of FreeBSD's TCP/IP stack.  I've just don't have extensive
experience with it.  This thread should probably cease before it drones
into a unix geek session.

David

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CIT 4.0/Support 2.0

2000-06-16 Thread David

Sanjay Dalal wrote:
> 
> Hello All :
> 
> I plan to take the CIT 4.0 exam next week.
> However, I am not sure if I should go for the new Support 2.0 exam.
> Lot of individuals in this group have complained about the CIT 4.0 exam
> very poorly written.
> Any thoughts ?


hey sanjay..  check out the list archives at
http://www.groupstudy.com/arch_front/index.html

click the cisco cert mailing list, and just search for "boson cit". 
lots of info.

sorry I won't keep posting annoying messages like this all the time ;-) 
but remember that the archive database will get you answers instantly,
not in hours and hours.  time is precious!

David
CCNP

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



[Fwd: RE: Microsoft 'Routers']

2000-06-16 Thread David

forwarded from a small thread.

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent:   Tuesday, June 13, 2000 4:26 PM
To: Chuck Larrieu
Cc: Marlon Brown
Subject:Re: Microsoft 'Routers'

I would bet that it doesn't as well, but then again, all previous
releases of Windows didn't have any Microsoft developeed product in the
OS that performed routing protocols right?  Has anyone yet looked at the
OSPF implementation in Win2000?  Is it at all Microsoft-ized for the
average admin so they can design OSPF networks "hassle-free"?



Chuck Larrieu wrote:
>
> I took this reply off the group.
>
> The question remains - who ya gonna call?  I kinda doubt that the MCSE -
> 2000 or otherwise - demands much in the way of routing knowledge.
>
> -Original Message-
> From:   Marlon Brown [mailto:[EMAIL PROTECTED]]
> Sent:   Tuesday, June 13, 2000 4:12 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject:RE: Microsoft 'Routers'
>
> I disagree with you regarding the support issue. They
> could call the MCSE 2000 people :-)
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Firewalls

2000-06-19 Thread David

well, simply blocking traffic from outdoors and using NAT is usually OK
for a SOHO or regular user, but in general access lists ARE NOT A
FIREWALL.  They don't keep status of connections and do any realtime
inspection of traffic looking for more then just IP/TCP/UDP
information.  A stateful firewall keeps an active table of all
connections and can do a lot more then just deny traffic on basic things
in the layer 3/4 header.  If you really want to protect a network don't
just use access lists.  

In larger environments, one of the big factors to address is
performance.  If you're sitting behind a T-1 with 40 to 50 average users
and a server or two, this may not be a big deal.  Any decent software
based firewall or small hardware-based solution should be fine.  But if
you're sitting behind a network with hundreds of users, hundreds of
servers, and pushing 50+ Mb/s of traffic out multiple DS-3's, you better

A.  Make sure you segment your network and use multiple firewalls.
B.  Use a fast hardware based solution.


Some of the bigger firewall platforms out there are Checkpoint's
Firewall-1, Cisco PIX, and my current favorite, Netscreen.  I'm not sure
about netscreen's site right now, but Cisco and Checkpoint should have
some basic firewall/security documentation out there about firewalls. 
There are plenty of good books on firewalls out there as well as things
on the Internet, but I haven't searched.  


David


Sammi wrote:
> 
> Hi all,
> In pursuit of a network position I'm often queried as to my knowledge
> of firewalls. During my Cisco studies I haven't seen much mentioned on
> the subject, though I have deduced (correctly?) that access lists can
> effectively be used as a firewall. What are the leading industry
> firewall applications and how do they interact with Cisco products?
> Realizing perspectives are much different on an enterprise level than
> the home network level, is there much difference in principle between
> firewalls the home user might employ (blackice, @guard, etc.) and that
> used on the larger scale? Any recommendations as to links,
> documentation?
> 
> As always, my thanks for your advice.
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Firewalls

2000-06-20 Thread David

You'll probably want to look up performance stats with Cisco and
Checkpoint directly, although I would doubt that Checkpoint is faster. 
Can someone else with more experience on PIX hardware jump in with more
information?  You also have to look at the cost perspective.  Ok, maybe
Checkpoint running on an E450 or an E3000 will be as fast as much less
hardware/cost in a PIX solution.  But, do you have the extra rack space
to lug one of those Sun boxes in?  Do you have a hired unix admin to
take care of the box when it goes down, or needs general
maintenance/upgrades?  Sun reps can be expensive. 

In general, hardware based firewalls are always going to be faster.  
I've worked a lot with the netscreen 100 devices that are mostly
hardware based, cost about $10,000 and use 100Mb ethernet ports on all
sides.  They perform very well under a wide variety of traffic loads,
although I've never pushed more then 70Mb/s through it.  Using a
SmartBit to max it out isn't always the most realistic of scenarios
either.  Netscreen claims that their hardware adds very little
(microseconds) latency, but again, this is all in their labs using only
SmartBits.  I haven't measured realistic latency myself.

Ok enough firewall plugs.. I'd really suggest going to the NetworkWorld
trade journal site http://www.networkworld.com and searching for
firewalls in their archives.  They do routine performance evals of every
major platform out there.

David


Kent wrote:
> 
> David,
> 
> I have a question, as I understand that Checkpoint is
> a software based firewall, right?
> And it is faster than PIX, which makes me think that
> software based firewalls sometimes can be faster than
> hareware based ones, is that right?
> 
> Thanks
> 
> Kent
> --- David <[EMAIL PROTECTED]> wrote:
> > well, simply blocking traffic from outdoors and
> > using NAT is usually OK
> > for a SOHO or regular user, but in general access
> > lists ARE NOT A
> > FIREWALL.  They don't keep status of connections and
> > do any realtime
> > inspection of traffic looking for more then just
> > IP/TCP/UDP
> > information.  A stateful firewall keeps an active
> > table of all
> > connections and can do a lot more then just deny
> > traffic on basic things
> > in the layer 3/4 header.  If you really want to
> > protect a network don't
> > just use access lists.
> >
> > In larger environments, one of the big factors to
> > address is
> > performance.  If you're sitting behind a T-1 with 40
> > to 50 average users
> > and a server or two, this may not be a big deal.
> > Any decent software
> > based firewall or small hardware-based solution
> > should be fine.  But if
> > you're sitting behind a network with hundreds of
> > users, hundreds of
> > servers, and pushing 50+ Mb/s of traffic out
> > multiple DS-3's, you better
> >
> > A.  Make sure you segment your network and use
> > multiple firewalls.
> > B.  Use a fast hardware based solution.
> >
> >
> > Some of the bigger firewall platforms out there are
> > Checkpoint's
> > Firewall-1, Cisco PIX, and my current favorite,
> > Netscreen.  I'm not sure
> > about netscreen's site right now, but Cisco and
> > Checkpoint should have
> > some basic firewall/security documentation out there
> > about firewalls.
> > There are plenty of good books on firewalls out
> > there as well as things
> > on the Internet, but I haven't searched.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Secure shell through NAT

2000-06-23 Thread David

ssh through NAT will work fine.   If you're going out, no problem.  RSA
auth, and password auth work fine.  Coming in, you'll have to have a
static address that maps to an IP of a host running sshd open on port
22, of course..  

David


Trent wrote:
> 
> Has anyone out there successfully run secure shell through NAT and had it work.  If 
>you have done this and it did or did not work, please let me know.
> 
> Trent Minter
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



[Fwd: RE: Microsoft 'Routers']

2000-06-25 Thread David

forwarded from out small thread.

david


 Original Message 
Subject: RE: Microsoft 'Routers'
Date: Tue, 13 Jun 2000 16:52:47 -0700
From: "Chuck Larrieu" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
CC: "Marlon Brown" <[EMAIL PROTECTED]>

In my dreams I see a world wide network of hassle free devices. Plug it
in,
it self configures, and life is good.

Won't happen in my lifetime. Folks under 30 may see the beginnings of it
in
their lifetimes.

Those hassle free protocols will not be ospf, I'm pretty sure :->

Microsoft has run IP forwarding for quite some time in the NT boxes.
That
was RIP. I am guessing that Microsoft just wanted to provide an easy way
to
expand a network by adding a second segment. Anything built around NT is
a
hack, in my opinion. With all the issues about the ease of compromise of
NT
boxes ( let alone unix or linux boxes ) I would not want to place
anything
but a real router in a critical position in my network.

Just my opinion.

Chuck

-Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent:   Tuesday, June 13, 2000 4:26 PM
To: Chuck Larrieu
Cc: Marlon Brown
Subject:Re: Microsoft 'Routers'

I would bet that it doesn't as well, but then again, all previous
releases of Windows didn't have any Microsoft developeed product in the
OS that performed routing protocols right?  Has anyone yet looked at the
OSPF implementation in Win2000?  Is it at all Microsoft-ized for the
average admin so they can design OSPF networks "hassle-free"?



Chuck Larrieu wrote:
>
> I took this reply off the group.
>
> The question remains - who ya gonna call?  I kinda doubt that the MCSE -
> 2000 or otherwise - demands much in the way of routing knowledge.
>
> -Original Message-
> From:   Marlon Brown [mailto:[EMAIL PROTECTED]]
> Sent:   Tuesday, June 13, 2000 4:12 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject:RE: Microsoft 'Routers'
>
> I disagree with you regarding the support issue. They
> could call the MCSE 2000 people :-)
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Diff between point to point T1 and T1 with framerelay

2000-06-26 Thread David

sure.. PPP (point-to-point protocol) and Frame relay are both different
layer two protocols that run on top of the T-1 service.  PPP over T-1 is
the same PPP the is commonly used for modems when dialing up to an ISP. 
It's based on the HDLC protocol.

Frame relay has an addressing scheme separate from IP that makes it a
shared protocol that can be switched throughout a telco providers switch
network.  It uses the concept of a DLCI (Dynamic Link Channel
Identifier) and of SVCs and PVCs to implement a point-to-point or
point-to-multipoint scheme connecting many sites over a single physical
circuit.  Essentially, the provider can say ok, here's a PVC (Permanent
virtual circuit) at DLCI 16 that points to company B, and here's another
that points to Company C on dlci 17.  you set these up on your side, and
then the provider gives the other companies their own dlci numbers that
correspond to that circuit connection.  SVCs do the same thing but on an
as-needed basis.  many providers don't support these.  frame relay also
provides LMI (local mgmt. interface) to list DLCI numbers and assure
connectivity (among other things) to a FRAD (frame relay access device).

it's important point to note that because of frame relay's features and
the fact that it is switched (PPP is mapped directly from point A to
point B by the provider), mean that overhead is incurred and a portion
of the total circuit bandwidth will be used by the protocol.  So, a T-1
won't be able to run at a full T-1 speed over frame relay, and the
network won't provide you assurance of that unless you give them lots of
money.  This gets into congestion control (FECN and BECN) and the
concept of CIR.

Many of these terms (HDLC, frame relay, PPP, T-1, etc.) are fairly well
definied with links to further explanations at http://www.whatis.com.

i love network acronym speak.  it makes me feel like a doctor.

hope this helps,
david



John Zaggat wrote:
> 
> Can some clearly explain the difference, I have
> checked the Archives and not found a good explanation.
> Also if you have some sample configs, that would be a
> great help to me.
> Thank you.
> 
> =
> JZ
> [EMAIL PROTECTED]
> 
> __
> Do You Yahoo!?
> Yahoo! Photos -- now, 100 FREE prints!
> http://photos.yahoo.com
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Secure !!!!!

2000-06-26 Thread David

FYI, I found the answer I was looking for.  For Unix, you HAVE to use
some kind of database backend.  If you don't own a database product that
it support (Sybase or Oracle), you have to use Sybase SQL Anywhere, a
small Sybase compatible product that ships with CiscoSecure and supports
no more then 5000 entries.

David


Henrique Issamu Terada wrote:
> 
> yeah ! I did it.
> 
> With SQL Server database too.
> 
> Henrique Issamu Terada
> CPM Comunicações - Brazil
> CCNA Certified
> - Original Message -
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Wednesday, June 07, 2000 7:15 AM
> Subject: RE: Cisco Secure !
> 
> > One does not need a database product to run CiscoSecure.  Although, one
> does
> > have an option to use one with CiscoSecure.  It makes for a nice way to
> use
> > an AS5x00 with an established NT environment as one can use an NT domain
> for
> > validating.
> >
> > -Original Message-
> > From: David [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, June 06, 2000 9:43 PM
> > To: Brad Ellis
> > Cc: [EMAIL PROTECTED]
> > Subject: Re: Cisco Secure !
> >
> >
> > Brad Ellis wrote:
> > >
> > > no, you need to buy it
> > > ""skt"" <[EMAIL PROTECTED]> wrote in message
> > > 000301bfcfbd$5f917500$[EMAIL PROTECTED]">news:000301bfcfbd$5f917500$[EMAIL PROTECTED]...
> > > Hi all..
> > >
> > > can any one tell me about cisco secure  i have heard about it, that
> it
> > > is shareversion .can u pleasse tell me the url which points to that
> > > location
> >
> >
> >
> > Well, it really depends on what you want to do.  I haven't had a chance
> > to play around with CiscoSecure yet, but it apparently requires an
> > Oracle or Sybase installation to maintain RADIUS, TACACS+, and other
> > information.  It's designed for large environments with many thousands
> > of entries.  If you just need a simple TACACS+ or RADIUS server for a
> > hundred accounts or so, there are plenty of free platforms out there.
> > Just search around.
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



fax over vofr, please help!!!! [7:66323]

2003-03-27 Thread David
Dear all,

I config 2 cisco routers which running vofr, the voice can operate porperly,
but the fax can't transmit over the wan link, does anyone experience the
issue? please help!!!

Thanks & regards,
David




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66323&t=66323
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


any difference of 6509 connections [7:18716]

2001-09-05 Thread david

i want to connect 2 6509s by two ways ,
1. 2.5G POS module by fiber
2. 2G trunk by fiber

Which one is better ,any difference ?
Of course ,by POS is more expensive.

Thanks



david




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=18716&t=18716
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



what does "dark fiber" mean? [7:18718]

2001-09-05 Thread david

Thanks,


david




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=18718&t=18718
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what does "dark fiber" mean? [7:18718]

2001-09-05 Thread david

Could i use dark fiber to connect 2 OC48 module on 6509s ?
if ok,any difference from GE module connections on 6509s?


Thanks,

david
""Lupi, Guy""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Some companies have run fiber optic lines in certain areas, mostly
> metropolitan areas, and they sell fiber runs to companies that require
them.
> Dark means that the fiber carries no services when you get it, it is just
a
> cable between 2 locations, you can then connect the fiber to equipment at
> both ends and run services over it.  So I could order a dark fiber
> connection between downtown New York and uptown New York, and connect it
to
> Gig E interfaces at both ends.
>
> Guy
>
> -Original Message-
> From: david [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 05, 2001 10:16 PM
> To: [EMAIL PROTECTED]
> Subject: what does "dark fiber" mean? [7:18718]
>
>
> Thanks,
>
>
> david




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=18729&t=18718
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: any difference of 6509 connections [7:18716]

2001-09-05 Thread david

Is the maximum distance of POS connection  80km?
what about GE connections?
""wong zero""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I think the 2G trunk by fiber is enough,if the distance is no too long




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=18731&t=18716
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



What does "a single point of failure" mean? [7:18734]

2001-09-05 Thread david

it usually means a routing or switching device is down,or the link is cut?


Thanks,

David




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=18734&t=18734
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what does "dark fiber" mean? [7:18718]

2001-09-05 Thread david

I just want to connect two campus network ,which 8 kms apart.
i use each 6509 as the core switch at each campus.
One 6509 will uplink to a 7609 router to access internet .
I also wonder the connection means between 7609 and 6509,they are at one
NOC.

Thanks,

David
""dre""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> ""david""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Could i use dark fiber to connect 2 OC48 module on 6509s ?
> > if ok,any difference from GE module connections on 6509s?
>
> if you were using DPT, yes.  otherwise, you probably wouldn't
> want to.  Maybe you could with GbE.  I think you'd be wasting
> fiber if you weren't using WDM.  If you got a 2F hand-off, you
> probably want to get an ADM and run it with APS 1:1 and
> 2F BLSR.  That's just a guess, you might not want to protect
> it and use it all instead.  In that case, you'd probably want two
> 6509's and use OSPF/ISIS/EIGRP to protect your IP investment.
> GbE would be cheaper than OC-48 blades, so that doesn't sound
> like too bad of an idea.  People generally use SONET protection,
> but you don't have to if you don't want to.  More power to that.
>
> What do you have on both sides?  What's the application?
> What problem are you trying to solve? :>
>
> -dre




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=18736&t=18718
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: any difference of 6509 connections [7:18716]

2001-09-05 Thread david

What do u mean?

""wong yelleft""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> is the 6500 supper the POS?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=18737&t=18716
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CID exam 640-025 [7:57268]

2002-11-11 Thread David
Hi folks,

The CID exam. The Cisco has a lot of SNA content in it, 
however I can't find any SNA stuff at (excuse wrapping)
http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_exams/640-025.html


I can't find anything about changes on Cisco's website,
so...does the CID have any SNA?

Cheers,

David




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=57268&t=57268
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Anybody want to sell their CCIE boot camp labs?

2001-01-25 Thread David Johnstad

Marc Russell President & CEO of Network Learning have worked hard developing
a solid CCIE lab training program over the Internet.  I think it would be
very offensive to re-sell their labs.  I have purchased labs from NLI and
there are very good.  Please have integrity and purchase the labs directly
from www.ccbootcamp.com.

David Johnstad
Senior Network Engineer
Interelate, Inc.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 25, 2001 2:21 PM
To: [EMAIL PROTECTED]
Subject: Anybody want to sell their CCIE boot camp labs?


I am going to be attempting the lab in a few months.
If anybody out there is done with their ccie boot camp labs, and would like
to sell them, please let me know.

Thanks,
Manjit
___
Get your free @pakistanmail.com email address   http://pakistanmail.com

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Am I alive??

2001-01-26 Thread David Richard

Hey..

This is test mail..


DR.


Get free email and a permanent address at http://www.netaddress.com/?N=1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Am I alive??

2001-01-26 Thread David Richard

Hey..

This is test mail..


DR.


Get free email and a permanent address at http://www.netaddress.com/?N=1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NAT or ACL??

2001-01-29 Thread David Richard

Hi All,

Any body knows whats the best way to protect Internal network from Internet
??

I found many different answers out of them,Finallyy I have to choose b/w
two..

NAT  or Acces-Lists??

ANyh help would be appreciated.

DR.


Get free email and a permanent address at http://www.netaddress.com/?N=1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF Wildcard mask

2001-01-29 Thread David Richard

If I want to configure OSPF for my serial interface having Ip-address of 

183.23.45.46 255.255.255.224

Am I correct to choose its wild card mask as  0.0.0.31???



DR.


Get free email and a permanent address at http://www.netaddress.com/?N=1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Data or Network Layer???

2001-01-29 Thread David Richard

Hey Guyss.

Again with you with a confusing issue ..

Is LANE operates on Data link Layer..or Network Layer???

The answer I got from all my resources is Data link???

But Confusion is that How it performes ARP,If it works on DL???

DR.



Get free email and a permanent address at http://www.netaddress.com/?N=1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IPX Rip Matric??

2001-01-29 Thread David Richard

How IPX RIP Chooses its best Path???Using Ticks or Using Hops?
I read in Bruce Carlson,s that It primarily uses Ticks.In case of Tie It uses
hops then..

Any suggestions will be appreciated..

Thanks.

DR.


Get free email and a permanent address at http://www.netaddress.com/?N=1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Catalyst error message

2001-01-30 Thread Halaska, David

I believe that the supervisor engine is faulty and would need replacing.  If
you don't have a contract that can get expensive.  CBL is the color blocking
logic.  I think every line card has that.  On the CCO site do a search on
"cbl error" and you get some info.  Its all pretty sketchy though.

David Halaska

-Original Message-
From: Mask Of Zorro [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 30, 2001 1:42 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Catalyst error message


What does the following error message mean:

BOOTROM Version 2.1, Dated Jun 4 1996 12:02:33
BOOT date: 12/01/00
BOOT time: 21:38:29
SIMM RAM address test
SIMM Ram r/w 55aa
SIMM Ram r/w aa55
Uncompressing image. This will take a minute...
Module 1 failure due to CBL0, CBL1, or CBL2 Error

I was contemplating buying this sup engine until I saw the following startup

error.

Z


_
Get your FREE download of MSN Explorer at http://explorer.msn.com

___
To unsubscribe from the CCIELAB list, send a message to
[EMAIL PROTECTED] with the body containing:
unsubscribe ccielab

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: gsr12012 show command..

2001-01-30 Thread Schmidt, David

 Wow, you sound desperate!  I hope this tells you something mate.

The following is from a GSR 12012, running 12.0(10)S1
___

router#sho int ser 1/0
Serial1/0 is up, line protocol is up
  Hardware is Packet over DS3
  Description: 
  Internet address is x.x.x.x /30
  MTU 4470 bytes, BW 44210 Kbit, DLY 200 usec, rely 255/255, load 1/255
  Encapsulation HDLC, crc 16, loopback not set
  Keepalive set (10 sec)
  Last input 00:00:07, output 00:00:02, output hang never
  Last clearing of "show interface" counters never
  Queueing strategy: fifo
  Output queue 0/40, 0 drops; input queue 0/75, 0 drops
  5 minute input rate 6000 bits/sec, 20 packets/sec
  5 minute output rate 6000 bits/sec, 12 packets/sec
 43343044 packets input, 417655339 bytes, 0 no buffer
 Received 0 broadcasts, 267 runts, 0 giants, 0 throttles
  0 parity
 777 input errors, 57 CRC, 242 frame, 0 overrun, 0 ignored, 211 abort
 42328073 packets output, 594197015 bytes, 0 underruns
 0 output errors, 0 applique, 0 interface resets
 0 output buffer failures, 0 output buffers swapped out
 1 carrier transitions

router#sho controllers serial 1/0
Interface Serial1/0 (DS3 port 0)
 hwidb = 0x61614360
 ssb = , ds = x
 Line state is up
  rxLOS inactive, rxLOF inactive, rxAIS inactive
  txAIS inactive, rxRAI inactive, txRAI inactive
 Current configurable parameter settings:
  Loopback is none, Framing is c-bit
  Clock source is line, Cable length is 50
  DSU mode is cisco, DSU bandwidth limit is 44210
  Payload scrambling is disabled, CRC is 16
  Bert pattern is disabled, Bert interval is 0
  Transmitter delay is 0, Encapsulation is HDLC
  Idle character is flags, Invert data is disabled
  Remote fullrate has no request outstanding
  Remote accept is enabled, MTU is 4470
 MIB information:
  Data in current interval (517 seconds elapsed):
   0 Line Code Violations, 0 P-bit Coding Violations
   0 C-bit Coding Violations
   0 P-bit Err Secs, 0 P-bit Sev Err Secs
   0 Sev Err Framing Secs, 0 Unavailable Secs
   0 Line Errored Secs, 0 C-bit Errored Secs, 0 C-bit Sev Err Secs
  No alarms detected.

-Original Message-
From: ?
To: cisco group study
Sent: 1/30/2001 5:40 PM
Subject: gsr12012 show command..

in the gsr12012, what show command will give us a information of
specific line.. etc.. oc3 or oc12..
show line ? or show port ? or show interface ?
plz, let me know about it...
if possible, could you give me some dump of that show command?
it's so urgent..
plz..

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN dialer map and broadcast...

2001-01-31 Thread David FAHED

All the routing protocol use broadcast or unicast to exchange information. If
you don't put the keyword broadcast you will let pass through the isdn line
only unicast packet. No the broadcast and Multicast packet.

Hope this help!


Nigel Taylor wrote:

> Hi All,
> When using the command=20
>
> "dialer map =
> 
>
> I've made some weird observations.  I checked CCO and it states that the =
>  option is optional(for=20
> enabling IPX/RIP, IPX/SAP updates across the link) but when configuring =
> 2 directly connected routers in=20
> an attempt to use dynamic routing(rip/igrp/eigrp) no routes were being =
> learned by either device.=20
>  I enabled the broadcast option on one side of the ISDN connection and =
> the routes were propagated. =20
> However, the other side did not pass its routing information.  There's =
> couple of sample TAC=20
> configurations  that make no use if the broadcast option and routing =
> works. =20
>
> What I'm I missing...or is this a noted "feature" within the IOS...?
>
> Nigel.
> =20
>
> ___
> To unsubscribe from the CCIELAB list, send a message to
> [EMAIL PROTECTED] with the body containing:
> unsubscribe ccielab

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Frame Relay Split Horizon NBMA

2001-02-01 Thread David Nie

I think that split horison is only applied to distance vector routing
protocol.

""Pierre-Alex"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> On page 14-27 on the Cisco ICND manual, it is written that one will have
> reachability issues if one is using:
>
> *a distance vector routing protocol
> *partial meshed network
> *NBMA frame relay model
> *split horizon enabled on the routing protocol.
>
> My understanding is that split horizon will prevent routes to be
adverstised
> on the same interface from which they were learned. This should apply
> regardless of whether the routing protocol is using broadcastd (distance
> vector), multicasts or unicasts (link state and hybrid routing protocols)!
>
> Am I missing something?
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



SNMP set - tool?

2001-02-02 Thread David Steele

I'm looking for a tool that'll allow me to perform SNMP set commands,
specifically to allow me to get a router to tftp it's running config to a
tftp server of my choosing, per the Cisco document:
http://www.cisco.com/warp/public/477/SNMP/11.html (this document is designed
for HP Openview users)

My company has only provided me with What's Up Gold, which seems to be a
viewer (get) tool only. OV / CiscoWorks are out of the question, and no, I
don't have access to a Macintosh to run the SNMP program that has been
mentioned recently for that platform. I actually only have access to Win NT
:(

Can anyone recommend a freeware or similar application that will allow me to
perform SNMP queries? Effectively all I need is a command line tool, as I
know the exact format of the command that I wish to run.

Any and all thoughts are welcome.

Rgds,
David Steele
CCNP, CCDA



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: SNMP set - tool?

2001-02-02 Thread Hennen, David

could you expand on how that is done.  I pulled down a copy of Getif 2.2 and
I  see a function for set in the MBrowser screen (MIB Browser I assume).
Could you give an example of how to set a value for an OID, something
harmless like the hostname perhaps.

It would help me, and others I'm sure, to understand how it works.

thanks if you can help,
dave h

-Original Message-
From: Greg [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 02, 2001 11:19 AM
To: [EMAIL PROTECTED]
Subject: Re: SNMP set - tool?


I use GetIF 2.2 to do exactly what you are trying to do and it works great.

Regards,
Greg Weise
CCNA, CCDA


"David Steele" <[EMAIL PROTECTED]> wrote in message
95epv6$lag$[EMAIL PROTECTED]">news:95epv6$lag$[EMAIL PROTECTED]...
> I'm looking for a tool that'll allow me to perform SNMP set commands,
> specifically to allow me to get a router to tftp it's running config to a
> tftp server of my choosing, per the Cisco document:
> http://www.cisco.com/warp/public/477/SNMP/11.html (this document is
designed
> for HP Openview users)
>
> My company has only provided me with What's Up Gold, which seems to be a
> viewer (get) tool only. OV / CiscoWorks are out of the question, and no, I
> don't have access to a Macintosh to run the SNMP program that has been
> mentioned recently for that platform. I actually only have access to Win
NT
> :(
>
> Can anyone recommend a freeware or similar application that will allow me
to
> perform SNMP queries? Effectively all I need is a command line tool, as I
> know the exact format of the command that I wish to run.
>
> Any and all thoughts are welcome.
>
> Rgds,
> David Steele
> CCNP, CCDA
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: catalyst 1900 problem

2001-02-02 Thread David Toalson

A question from a couple of weeks ago.

I had the same problem with the modem like display.  Working through BTAC we
have corrected the problem.  When using the standard terminal clips and roll
over cable connected to the console port of the 1900 switch you can get into
the diagnostics mode (hold down the mode button while power cycling), but
not into the configuration main menu.  You will need a null modem cable to
connect properly to the console port.  Once we plugged in a null modem cable
the main menu popped up and I was able to do the configuration.

David Toalson
816-701-4142

> --
> From: J Roysdon[SMTP:[EMAIL PROTECTED]]
> Reply To: J Roysdon
> Sent: Thursday, January 18, 2001 12:55 AM
> To:   [EMAIL PROTECTED]
> Subject:  Re: catalyst 1900 problem
> 
> It was configured to auto-detect/configure a modem, probably with a
> script.
> Search CCO for modem & 1900.  I've never tried to do such a thing, and
> usually console ports can't properly handle modems (they can't detect when
> carrier is lost, etc., so they never hang them up, plus limited to 9600
> baud
> with no UART buffer, I believe).
> 
> --
> Jason Roysdon, CCNP/CCDP, MCSE, CNA, Network+, A+
> List email: [EMAIL PROTECTED]
> Homepage: http://jason.artoo.net/
> Cisco resources: http://r2cisco.artoo.net/
> 
> 
> "md" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hello all,
> > has anyone ever encountered this problem?
> > Whenever I connect to the console port of my catalyst 1900 switch, a
> > dial string is displayed that says ATQ0Z or ATQ0Z0.  Apparently, the
> > previous owner had a modem attached to the port.  Any suggestions would
> > be greatly appreciated.
> >
> > thanks
> >
> > [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> 
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: SNMP set - tool?

2001-02-05 Thread David Steele

Thanks a lot for that - It does exactly what I was after.

For anyone interested, here is a brief overview of what I had to do to get
it working:

After installing the application, I grabbed all of the Cisco MIBs
(http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml) and threw
them in the MIBs directory of GetIF.

I set up the router in the parameters tab (IP, SNMP community strings), then
entered the command in the bottom of the MBrowser tab:
.1.3.6.1.4.1.9.2.1.55.$.$.$.$, s (string), then the name of the file to
write to on the tftp server.

Rgds,
Dave.


""Greg"" <[EMAIL PROTECTED]> wrote in message
95eqn3$q7e$[EMAIL PROTECTED]">news:95eqn3$q7e$[EMAIL PROTECTED]...
> I use GetIF 2.2 to do exactly what you are trying to do and it works
great.
>
> Regards,
> Greg Weise
> CCNA, CCDA
>
>
> "David Steele" <[EMAIL PROTECTED]> wrote in message
> 95epv6$lag$[EMAIL PROTECTED]">news:95epv6$lag$[EMAIL PROTECTED]...
> > I'm looking for a tool that'll allow me to perform SNMP set commands,
> > specifically to allow me to get a router to tftp it's running config to
a
> > tftp server of my choosing, per the Cisco document:
> > http://www.cisco.com/warp/public/477/SNMP/11.html (this document is
> designed
> > for HP Openview users)
> >
> > My company has only provided me with What's Up Gold, which seems to be a
> > viewer (get) tool only. OV / CiscoWorks are out of the question, and no,
I
> > don't have access to a Macintosh to run the SNMP program that has been
> > mentioned recently for that platform. I actually only have access to Win
> NT
> > :(
> >
> > Can anyone recommend a freeware or similar application that will allow
me
> to
> > perform SNMP queries? Effectively all I need is a command line tool, as
I
> > know the exact format of the command that I wish to run.
> >
> > Any and all thoughts are welcome.
> >
> > Rgds,
> > David Steele
> > CCNP, CCDA
> >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



what required more??

2001-02-05 Thread David Richard

Hi All,

I have already passed my CCNA(1.0), CCNP(1.0) and CCIE R&S Qualification.??

What I need to pass more to achieve CCDP(R&S)??(only CID or CCDA as well)

Also please guide me for some good CCDP resources.

Thanks a lot


DR. 


Get free email and a permanent address at http://www.netaddress.com/?N=1

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Which LSA type is NOT allowed in the Stub Area?

2001-02-12 Thread David Tran

Hi Everyone,
I need an answer rather quickly to this question. =20
Which LSA type is NOT allowed in the Stub Area?

A. Type 1, Route LSA
B. Type 2, Network LSA's=20
C. Type 3, Secure LSA
D. Type 5, external LSA

Many thanks....

David
[EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



bgp questions

2001-02-12 Thread David Tran

I have this question on my cisco prep exam fill-in-the-blank.  Please =
help.

A BGP router reports all activate routes based from BGP __.  This is =
the default policy action for BGP routers.

A. to all BGP peers
B. to all IBGP peers
C. to all EBGP peers
D. and the IGP's configured on the router to all BGP peers

I select choice a.  Is it correct?

David Tran
[EMAIL PROTECTED]


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Problem with Cisco 2620 (24MB RAM/8MB Flash) keep rebooting

2001-02-12 Thread David Tran

Hi Everyone,
I have a cisco router 2620 that was running fine until Sunday when I =
decided to upgrade the router=20
with a new IOS.  The new IOS image is specifically for cisco2610-2621.  =
However, after upgrading
the flash and reboot the router, my Fast Ethernet Interface (f0/0) is =
completely gone from the=20
configuration file.  Furthermore, the IOS image file on the flash is =
also gone.  So I tried to bootup
the router via tftp server.  The router can see the tftp server and load =
the image into memory. =20
However, after loading the image into memory (RAM), the router just =
keeps rebooting itself=20
(running in a loop) and each time this is the message that I keep =
getting:

SYSTEM INIT: INSUFFICIENT MEMORY TO BOOT THE IMAGE!

Is this because 24MB is not sufficient?  The IOS image that I use is: =
c2600-i-mz.120-5.T1.bin=20
Cisco says that this image only requires 20MB of RAM and 8MB of Flash.  =
As of now, the router=20
just keeps running in a loop.

Can anyone help me with this problem? =20


Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-D-M), Version 12.0(5)T1,  RELEASE =
SOFTWARE (fc1)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 17-Aug-99 13:11 by cmong
Image text-base: 0x80008088, data-base: 0x80859E60


SYSTEM INIT: INSUFFICIENT MEMORY TO BOOT THE IMAGE!


System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
Copyright (c) 1999 by cisco Systems, Inc.
TAC:Home:SW:IOS:Specials for info
C2600 platform with 24576 Kbytes of main memory

David Tran
[EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Space Phone

2001-02-15 Thread David York

> Would someone send me a copy of the Cisco Space Phone email, I seemed to
> have lost mine.
> 
> Thanks
> 
> Cameron Ashley 
> Sr. Network Engineer
> [EMAIL PROTECTED]
> 
> 

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Space Phone -

2001-02-15 Thread David York

Thanks guys/gals for sending the email to me.

Cameron Ashley 
Sr. Network Engineer
[EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Favorable purchases and work for you.

2001-02-17 Thread David Felder

Hi!

My participant's ID code is 1072.

Do you want to earn some money using you computer?
Do you want to get the popular electronics , investing $65?

Important addition:
If you reconsider, you can return your $65 anytime.

If the answer is "Yes", please read this letter and/or visit
http://www.friendlybuys.com

Friendly Buys program gives you all these opportunities.
-You may get real, but not virtual, goods.
-You may make money, not virtual millions, but you will get your 5-7
thousands per month.
-Credit cards are accepted. (Online)
-If you reconsider, your $65 will be returned to you by first request.

The catalogue is updated regularly, the entire catalogue you may examine on
http://www.friendlybuys.com

If you are interested with the program and you decide to become its
participant, while registration you should enter my ID code: 1072.


Attention!
I'm terribly sorry if you are not interested in the participation in any
sort of net programs and you have received this letter accidentally. I'm not
going to use your e-mail to inform you about the program in the future.

Good luck!
Be happy!

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: EMUTEL LITE setup

2001-02-19 Thread David Wolsefer

The spids are most likely configured in the emutel lite already since they
come from the factory with a default setting depending upon which version of
the emutel lite you have. The default ISDN switch is a basic-ni1 if I
remember correctly. Obviously, if you got an emutel lite with a European
siwtch type, then you won't have any spids to worry about. I thought it was
a breeze to set up the emutel lite because there was essentially no
configuration. If you don't have the manual, download it from the emutel web
site to get what the default spids are. You may not need NT1s depending upon
whether your 2503s have U interfaces or S/T interfaces. I am assuming you
must have S/T since you are using the NT1s.

Regards,

David Wolsefer, CCIE #5858

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Dennis Laganiere
Sent: Monday, February 19, 2001 12:08 PM
To: [EMAIL PROTECTED]
Subject: EMUTEL LITE setup


I'm going to configuring my ISDN test bed this evening and I've got two
2503's, two NT1's and an EMUTEL LITE ISDN simulator.  I think I've got the
routers set-up right, the NT1 seems to be just a plug in thing, but I'm not
looking forward to configuring this ISDN simulator.  It looks like by
default the SPIDs are disabled, and there's probably a bunch of other
settings that need to be set properly.  Can anybody save me several hours of
frustration by letting me share your experience in setting up this box?  Let
me know...

--- Dennis

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 4 Ethernet Int

2001-02-21 Thread Hennen, David

there is a NM-2FE2W module for the 3600 series that has 2 fast ethernet
ports.  You could install 2 of these in a 3620 for a total of four fast
ethernet interfaces.  

I haven't seen or heard of anyone trying this so I would research the
compatibility before doing any buying.  I also would be skeptical if that
model would be able to keep up with four fast ethernets going full speed.

dave h

-Original Message-
From: Avila, James [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 21, 2001 4:00 PM
To: [EMAIL PROTECTED]
Subject: 4 Ethernet Int


New to the cisco world.

Does anyone know what the smallest Cisco router I can place 4 routable fast
ethernet interfaces might be?

TIA


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Fatkid - Adv BGP Lab 325

2001-02-25 Thread David FAHED

The communities are not propagatedto internal or external BGP neighbors by
default. The send-community option is required in order for the assigned
community to be sent out.
And you need to use the community no-export to avoid the route to be
propagated 


Nigel Taylor wrote:

> All,
> I just got done working through lab 325 - Adv BGP Routing and I was =
> hoping someone could tell me if I'm missing something or =
> misunderstanding the requirements for task (11) eleven.  The =
> requirements calls for the implementation of communitites attribute to =
> dynamically limit the advertisment of an external learned network route =
> from AS300 to AS100.  In doing so I accomplished this with the use of =
> applying the following configuration commands.  In the fatkid solution =
> they make use of the command "send-community" on every bgp peer =
> connection.  Based on the requirements I don't think this necessary?  =
> Anyone did this lab and had the same questions or thoughts..
>
> Nigel.
>
> R2:
> router bgp 200
>  bgp router-id 190.19.15.145
>  redistribute eigrp 200 route-map localnet
>  neighbor 190.19.15.177 remote-as 200
>  neighbor 190.19.15.177 update-source Loopback0
>  neighbor 190.19.15.177 send-community
>  neighbor 190.19.15.177 route-map setcom out
>  neighbor 210.10.10.5 remote-as 300
>  neighbor 210.10.10.5 weight 450
>  no auto-summary
> !
> ip classless
> !
> dialer-list 1 protocol ip permit
> route-map setcom permit 10
>  set community no-export
>
> R3:
> router bgp 200
>  bgp router-id 190.19.15.161
>  redistribute eigrp 200 route-map localnet
>  neighbor 190.19.15.177 remote-as 200
>  neighbor 190.19.15.177 update-source Loopback0
>  neighbor 190.19.15.177 send-community
>  neighbor 190.19.15.177 route-map setcom out
>  neighbor 210.10.10.1 remote-as 300
>  no auto-summary
> !
> ip classless
> !
> dialer-list 1 protocol ip permit
> route-map setcom permit 10
>  set community no-export
>
> R4:
> router bgp 200
>  bgp router-id 190.19.15.177
>  bgp log-neighbor-changes
>  redistribute eigrp 200 route-map localnet
>  neighbor 190.19.15.145 remote-as 200
>  neighbor 190.19.15.145 update-source Loopback0
>  neighbor 190.19.15.145 route-reflector-client
>  neighbor 190.19.15.161 remote-as 200
>  neighbor 190.19.15.161 update-source Loopback0
>  neighbor 190.19.15.161 route-reflector-client
>  neighbor 192.19.15.1 remote-as 100
>  neighbor 192.19.15.1 route-map weight250 in
>  no auto-summary
>
> R4#sh ip bgp
> BGP table version is 25, local router ID is 190.19.15.177
> Status codes: s suppressed, d damped, h history, * valid, > best, i - =
> internal
> Origin codes: i - IGP, e - EGP, ? - incomplete
>
>Network  Next HopMetric LocPrf Weight Path
> *> 20.1.1.0/24  192.19.15.1  0   250 100 i
> *> 22.1.1.0/24  192.19.15.1  0   250 100 i
> *> 24.1.1.0/24  192.19.15.1  0   250 100 i
> * i190.1.0.0210.10.10.1  0100  0 300 i
> *>i 210.10.10.5  0100  0 300 i
> *> 190.19.15.0/26   0.0.0.0  0 32768 ?
> * i 190.19.15.1610100  0 ?
> *> 190.19.15.64/26  0.0.0.0  0 32768 ?
> * i 190.19.15.1450100  0 ?
> *> 190.19.15.128/28 190.19.15.66  40537600 32768 ?
> * i 190.19.15.1610100  0 ?
> * i 190.19.15.1450100  0 ?
> *> 190.19.15.129/32 190.19.15.2   40537600 32768 ?
> * i 190.19.15.1610100  0 ?
> *> 190.19.15.130/32 190.19.15.66  40537600 32768 ?
> * i 190.19.15.1450100  0 ?
> *> 190.19.15.144/28 190.19.15.66409600 32768 ?
> * i 190.19.15.1450100  0 ?
>Network  Next HopMetric LocPrf Weight Path
> *> 190.19.15.160/28 190.19.15.2 409600 32768 ?
> * i 190.19.15.1610100  0 ?
> *> 190.19.15.176/28 0.0.0.0  0 32768 ?
> *> 192.19.15.0  0.0.0.0  0 32768 ?
> *> 210.10.10.0/30   190.19.15.22195456 32768 ?
> * i 190.19.15.1610100  0 ?
> *> 210.10.10.4/30   190.19.15.66   2195456 32768 ?
> * i 190.19.15.1450100  0 ?
> r3_14#
>
> r4#sh ip bgp 190.1.0.0=20
> BGP routing table entry for 190.1.0.0/16, version 2
> Paths: (2 available, best #2, table Default-IP-Routing-Table, not =
> advertised to EBGP peer)
>   Advertised to non peer-group peers:
>   190.19.15.161=20
>   300, (Received from a RR-client)
> 210.10.10.1 (metric 2195456) from 190.19.15.161 (190.19.15.161)
>   Origin IGP, metric 0, localpref 100, valid, internal, synchronized
>   Community: no-export
>   300, (Received from 

CIT

2001-02-25 Thread David Sanderson

I have the Cisco Internetwork Troubleshooting book and I can't tell if this
is the latest version.  It's published 1999, ISBN 1-57870-092-2.  It just
seems that with the CCNP 2.0 that there would also be a newer CIT.  Thanks,
Dave

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: suresh's CCNP materials [1:2160]

2001-02-26 Thread David Rosenbaum

Ian,
I bought his BSCN and BCMSN pack last week and found good thought it is =
not as much bigger than CCNA pack in size, it has got good number of =
actual questions, I took 896 with his pack on the BSCN. I yet to take =
the BCMSN booked for the coming week. In the test I had some 35-40 =
questions closely related to the contents not word by word but in =
someotherway say its a gist of the real questions.

You can go aheadhttp://www.sureshhomepage.com

thanks
David Rosenbaum MCSE+I, CCNA, CCNP(1 down)
Chief Consultant & Security Advisor
NA Inc. NJ.


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: SNMP Agent on Router

2001-02-26 Thread Hennen, David

The mib database is installed on the SNMP manager (the host), as part of the
snmp application running on that system.  The router sends numeric strings
(traps) to the listening SNMP manager indicating events have happened like a
power supply failure or a wan link down.

When the SNMP manager receives one of these numeric strings it looks through
the mib database and resolves the meaning of the trap.  If the trap is not
in the mib then the manager won't be able to resolve the trap and will
usually report just the numbers in an snmp log or similar.  If the trap is
in the mib, it will report something a little more meaningful.

Here's a trap for an ISDN link going inactive

SNMP 10.10.10.254 Trap(linkDown) ifIndex.5=5 ifDescr.5=BRI1:1 ifType.5=23
cisco.2.2.1.1.20.5=down

Here's a trap for a power supply being turned off on a Catalyst 6509, where
the trap is not in the mib database.

SNMP 10.10.12.12 Trap(cisco.5-6.5) cisco.5.1.2.13.0=1 cisco.5.1.2.11.0=2
cisco.5.1.2.12.0=1 cisco.5.1.2.9.0=2 cisco.5.1.2.10.0=0
cisco.5.1.3.1.1.10.1=2 cisco.5.1.3.1.1.11.1=0 cisco.5.1.2.4.0=2
cisco.5.1.2.5.0=0 cisco.5.1.2.7.0=4 cisco.5.1.2.8.0=32

See how it just says cisco followed by some numbers.  The application was
able to resolve the first part of the trap to the private enterprise family
of traps for Cisco but it didn't know what the rest of the numbers mean.
The solution is to get the mib for Catalyst 6509 and import it into the
existing mib for the SNMP application.

Hope this is helpful
Dave H

-Original Message-
From: Amit Gupta [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 26, 2001 6:47 AM
To: [EMAIL PROTECTED]
Subject: SNMP Agent on Router


Hi All,

I need some help for making the router SNMP enabled. I
am  actually testing it out SNMP Manager Utility.
I am using the following commands on the router

snmp-server community hppublic RO
snmp-server enable traps snmp
snmp-server host x.x.x.x traps hppublic

where x.x.x.x is the IP address of the machine on
which the SNMP Manager is running.

Do I have to specify a file or directory for which
SNMP Manager looks for ?
How will the SNMP Manager query the MIB database ?


Thanks & Regards

Amit



__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Flashing a 2600 series by modem

2001-02-26 Thread Hennen, David

was the interface flapping or was it up/up solid the whole time...

:)

dave h



-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 26, 2001 3:13 PM
To: Howard C. Berkowitz; [EMAIL PROTECTED]
Subject: Re: Flashing a 2600 series by modem


>  >Hey gang,
>  >
>  >I'm having trouble flashing a 2620 through a modem connection, any 
>  >help would be
>  >appreciated.
>  >
>  >Ron
>  >
>  
>  
>  Flashing it?  I have this sudden image of trying to signal an open 
>  raincoat over a modem connection.
>  
>  :-)
>  

That gives an entirely new meaning to modem handshaking!  

If this were TCP, what would be the proper response to that signal, a
sin-ack?

Off-topic, but speaking of connection-oriented protocols, this just made me
think of my relationship with my wife as a PPP connection:  I keep sending
CONFREQ but receive lots and lots of CONFREJ AND CONFNAK. 

I'm glad she doesn't read this list.  :-)

John





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Multiplexing/Load balancing

2001-02-28 Thread Hennen, David

Larscom makes equipment to do this, I'm sure there are others.  We have a
couple of sites that take multiple t1's and combine them for higher
bandwidth.  it looks something like this

cisco hssi port (4.5mb) - larscom t1 mux -3 t1's- larscom t1 mux - cisco
hssi port (4.5mb)

hope this is helpful,
dave h

-Original Message-
From: Keith Townsend [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 28, 2001 10:18 AM
To: [EMAIL PROTECTED]
Subject: Multiplexing/Load balancing


You know I've never given this much thought I just assumed it was possible
to multiplex serveral T1 lines.
If I wanted a 10mb connection between to points and I had 6
individual T1 lines can I/do I multiplex the lines or do I have to load
balance between all six lines.  The later doesn't make much since to me
because I'd have to have a Router with 6 WAN ports to support my a 10mb
connection.  Maybe my thinking is all wrong on this.  Any help would be
appreciated.

Thanks,

Keith


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF design question re: location of Area Border Router

2001-02-28 Thread Hennen, David

Hi, I am preparing to bring up a new site in an ospf network.  The new site
will be a training facility connected back to the main office by a t1.
Currently we use OSPF and have everything in area 0, around 100 routers.

I want to make this new site a different area and to make the new area a
Totally Stubby Area.  We have two 7513 routers at the main office that
handle all the wan traffic, the new remote office would connect to one of
these.  The remote training office will have a 4500.

One of my coworkers suggested that the 7513 at the main office should be the
Area Border Router, because we should keep area 0 from being spread out over
a bunch of wan links.  I had it in mind that the remote 4500 should be the
ABR.  I don't have a strong reason for thinking that way.  The cpu of the
7513 runs between 20-30 % utilization according to snmp info.

Are there any rules of thumb regarding this?  I looked through the Cisco
OSPF network design book and can see some examples that support having the
ABR at the main office.  Is that the accepted practice?  Are there any
gotcha's to look out for?

Thanks if you can help
dave h

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: circuit overbooked?

2001-02-28 Thread Luong, David

Hello,

Isn' that an killing the hq T1 circuit if you have 90 PVC terminating on one
T1?

David.

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 28, 2001 8:04 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: circuit overbooked?


To answer this intelligently we'd have to get some more information,
such as:

1.  What is the average/typical load per PVC right now?
2.  What are your typical peak loads?
3.  Would peak times on one PVC necessarily correspond with the peaks
on another PVC?
4.  What protocols are you running on these PVCs?  SNA? TCP/IP? IPX?
5.  What routing protocols are you using, if any?
6.  How much growth do you foresee?
7.  Are your applications able to handle variable latency and delay?
8.  Can they recover well if retransmissions are necessary?

Those are the types of things I would consider when oversubscribing a
circuit.  With that said, I'll mention two examples in our network.  

The bulk of our traffic between branches is TCP/IP and we tend to
terminate between 7 and 10 PVCs on a single T-1.  We also have an
additional PVC to each branch that is solely for SNA traffic, which is
very low volume, and we're using static routing here.  In this case, we
have 90 PVCs (coming from 256k and full T-1 circuits) all terminating at
a single T-1 here at headquarters.

At the moment we're barely pushing that second T-1, but due to growth
needs we will be adding a second SNA T-1 in the future.

HTH,
John


>>> "Jerry Deer" <[EMAIL PROTECTED]> 2/28/01 8:29:16 AM >>>

 If i have a 256k host ckt, how many remote 256k ckts with a cir of 64k
can
i have pointing at the host before i have an over utilization problem? 
Will
the cir of the host be a key factor?

Thanks for any and all replies,
Jerry

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html 
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



icmp weirdness

2001-02-28 Thread David Cooper

Hey folks,

I've got an issue at work I'd like to run by you. I sent a request to 
cisco's forum but have yet to hear an answer from anyone. We have a Cisco 
2610 router in Ireland. This router has 1 Ethernet connected to a local 
segment and s0 point-to-point frame relay going to chicago, Ill (sub 
interface).  Heres the details on the Ireland router:

Ethernet segment: e0's primary address is 132.158.132.252/24 (some hosts 
refuse to change addresses). e0's secondary is 10.43.0.1/16. 
Serial 0/0.1 is 10.126.43.2/24. All advertised by Eigrp. 


Chicago's router is:

Ethernet segment is varibly subnetted 10.4.0.0/16.
Serial 0/0.13 is 10.126.43.1/24. Once again, Eigrp is the routing protocol.

There is a host on Ireland's lan with address 10.43.3.230/16.

If I log into Ireland's router and issue ping 10.43.3.230, nothing happens. 
It just times out. If I log into Chicago's router and ping the same host, it 
replies fine. If I ping it from a host behind Chicago's router, it replies as 
well.  If another host on 10.43.0.0/16 pings that host it replies fine.  I 
can ping any of 3.230's neighbors no problem. Its just that Ireland's router 
wont ping it at all. show ip route verifies a route as directly connected. 

Has anyone heard of this? A bug? I can't verify all the way down because I 
don't have physical access to Ireland's lan (thank god) to put a sniffer up. 


We are trying to use this host for a second default route to a vpn box incase 
the frame relay ever fails (and it does... often). 

Sorry to drag this on.

Thanks in advance.
Dave Cooper, CCNA
Littelfuse, Inc.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: 1900 switch

2001-03-01 Thread David Toalson

What cables are you using?  I had this problem recently and after getting
BTAC support involved we discovered that you need a "NULL" modem cable to
connect your PC/laptop to the 9 pin console port of your 1900 switch.  It
took 3 CCIE's, a CCNP, two service reps, a service technician and a wannabe
before we discovered the answer.  The third CCIE finally came up with the
solution.

David Toalson
816-701-4142

> --
> From: Charles Paver[SMTP:[EMAIL PROTECTED]]
> Reply To: Charles Paver
> Sent: Wednesday, February 28, 2001 8:23 PM
> To:   [EMAIL PROTECTED]
> Subject:  1900 switch
> 
> Hi--I cant hyperterminal into my new 1900 series
> switch!  I changed the baud rate to 9600, and left all
> the same, but still no dice!  Also, I changed the flow
> control to hware, to none...and I cant get on. 
> Also,Im using nt ws, as well as windows 98.  Same
> error every time--weird characters across the screen. 
> such as atx0h0
> 
> its weird...
> any ideas?
>  
> 
> __
> Do You Yahoo!?
> Get email at your own domain with Yahoo! Mail. 
> http://personal.mail.yahoo.com/
> 
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to setup VLAN, Pls help.

2001-03-01 Thread David Armstrong

I don't think the link to the Catalyst 5000 will help him much. He's got an
IOS based switch. Here's a couple of links that go over 2900XL switch
configuration. You might want to download the pdf file format for easier
readability.

http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35xu/scg/inde
x.htm

http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35xu/scg/kivl
an.htm

David Armstrong


"Rizzo Damian" <[EMAIL PROTECTED]> wrote in message
49C181ACF35ED311A7DC00508B5AF61102E52464@NAEXCHANGE">news:49C181ACF35ED311A7DC00508B5AF61102E52464@NAEXCHANGE...
> Try here...
>
>
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_5_2/config/v
> lans.htm
>
> -Original Message-
> From: Gunjan Mathur [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, March 01, 2001 9:14 AM
> To: [EMAIL PROTECTED]
> Subject: How to setup VLAN, Pls help.
>
>
> Hi,
>
> I'm new to this field, and my boss want to implement
> VLAN in my network. We are using Cisco 2900/1900
> switches.
> Pls guide me or send me links, which explain the
> procedure to implement the VLAN.
>
> Thanks,
>
> Gm
>
> __
> Do You Yahoo!?
> Get email at your own domain with Yahoo! Mail.
> http://personal.mail.yahoo.com/
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF design question re: location of Area Border Router

2001-03-01 Thread Hennen, David

Jenny,

Yes, the 4500 will be the only router at the remote site.  There will be a
Catalyst 5500 and there will be several intra-area vlans being routed by the
4500, I'll try summarizing those.  It should be a fun project.

If things go well, there might be a couple of other sites that would be
setup similarly on this same 7513 router.  More than anything, I'm trying to
explore some other features OSPF can offer instead of making everything part
of one big area 0, which has worked fine so far.

Dave H

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 28, 2001 4:54 PM
To: [EMAIL PROTECTED]
Subject: OSPF design question re: location of Area Border Router


John,
You could equally well have the 7513 with one interface in area 1 and the
rest in area 0, and the 4500 with all interfaces in area 1, in which case
the 7513 is the ABR.

David,
Am I correct in thinking that the only router at the remote site is the
4500?  Or is there more 'behind it'?  Because if the 4500 is the only
router, you're not gaining much by making the 4500 the ABR.  Area 0 will
still include all the routers in your network, and the 4500 will still have
all the area 0 information.  You can summarise your remote site routes into
area 0, but that's about it.
Are you planning on extending this idea and having lots of other areas set
up in the same way?  Generally regarded as not a good idea to have 'too
many' areas defined on one router - the guidelines I saw last (quite a
while ago) suggested a maximum of three areas per router but even at the
time that was a very vague rule of thumb - they also suggested a maximum of
about 60 routers in an area which you are obviously exceeding, presumably
without problems.
Running area 0 over WAN links is not necessarily a terrible thing to do -
if your network is stable, OSPF doesn't spew out lots of traffic.
Making the 7513 the ABR is probably your best bet - it sounds like your
7513 can cope with it (check your memory usage as well, though).

JMcL


-- Forwarded by Jenny Mcleod/NSO/CSDA on 01/03/2001
08:38 am ---


"John Neiberger" <[EMAIL PROTECTED]>@groupstudy.com on
01/03/2001 04:19:39 am

Please respond to "John Neiberger" <[EMAIL PROTECTED]>

Sent by:  [EMAIL PROTECTED]



To:   [EMAIL PROTECTED]
cc:


Subject:  OSPF design question re: location of Area Border Router


I think I must be missing something here, or I don't understand the
concept of ABR.

If you have a 7513 in area 0 connected to a 4500 in area 1, for
instance, then the 4500 will have one interface in area0 and the rest
presumably in area 1.  By definition, that makes the 4500 an ABR,
doesn't it?  I don't see how you have any choice in this matter at all,
but since I've never actually configured OSPF perhaps someone will
enlighten me.

>>> "Hennen, David" <[EMAIL PROTECTED]> 2/28/01 9:32:59 AM >>>
Hi, I am preparing to bring up a new site in an ospf network.  The new
site
will be a training facility connected back to the main office by a t1.
Currently we use OSPF and have everything in area 0, around 100
routers.

I want to make this new site a different area and to make the new area
a
Totally Stubby Area.  We have two 7513 routers at the main office that
handle all the wan traffic, the new remote office would connect to one
of
these.  The remote training office will have a 4500.

One of my coworkers suggested that the 7513 at the main office should
be the
Area Border Router, because we should keep area 0 from being spread out
over
a bunch of wan links.  I had it in mind that the remote 4500 should be
the
ABR.  I don't have a strong reason for thinking that way.  The cpu of
the
7513 runs between 20-30 % utilization according to snmp info.

Are there any rules of thumb regarding this?  I looked through the
Cisco
OSPF network design book and can see some examples that support having
the
ABR at the main office.  Is that the accepted practice?  Are there any
gotcha's to look out for?

Thanks if you can help
dave h

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN B Chanell

2001-03-01 Thread David Cooper

On Thursday 01 March 2001 21:17, Santosh Koshy wrote:
> I am presently using the command  "dialer load-threshold 1 either"  to no
> sucess...
>
> "Daniel Cotts" <[EMAIL PROTECTED]> wrote in message
> 303479FA060CD211B893F805A88AA11009@EXCHANGE1">news:303479FA060CD211B893F805A88AA11009@EXCHANGE1...
>
> > On the BRI interface use "dialer load-threshold 'load'". A value of 1 for
> > load brings up the second link instantaneously. Quoted from the Cisco
>
> Press
>
> > BCRAN book edited by Catherine Paquet p197. There is more detail to this
> > - so best to check out CCO.
> >
> > > -Original Message-
> > > From: Santosh Koshy [mailto:[EMAIL PROTECTED]]
> > > Sent: Thursday, March 01, 2001 7:37 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: ISDN B Chanell
> > >
> > >
> > > Hello All,
> > >
> > > I am setting up a simple point to point ISDN BRI
> > > connection. It
> > > works like a charm, but for the life of me, I cannot get the
> > > secondary B
> > > chanell to come up. When I initiate a ping, it brings up the
> > > first B chanell
> > > instantaneously, but it wont bring up the secondary.
> > >
> > > ROUTER 1
> > > interface BRI0
> > >  ip address 10.10.10.1 255.255.255.240
> > >  no ip directed-broadcast
> > >  encapsulation ppp
> > >  dialer idle-timeout 86400
> > >  dialer map ip 10.10.10.2 name ABC broadcast 9032031701
> > >  dialer map ip 10.10.10.2 name ABC broadcast 9032031704
> > >  dialer hold-queue 1
> > >  dialer load-threshold 1 either
> > >  dialer-group 1
> > >  isdn switch-type basic-ni
> > >  isdn spid1 90319074001
> > >  isdn spid2 903319074101
> > >  compress stac
> > >  ppp authentication chap
> > >  ppp multilink
> > >
> > > ROUTER 2
> > > interface BRI0
> > >  ip address 10.10.10.2 255.255.255.240
> > >  no ip directed-broadcast
> > >  encapsulation ppp
> > >  dialer idle-timeout 86400
> > >  dialer map ip 10.10.10.1 name XYZ broadcast 9033190740
> > >  dialer map ip 10.10.10.1 name XYZ broadcast 9033190741
> > >  dialer hold-queue 1
> > >  dialer load-threshold 1 either
> > >  dialer-group 1
> > >  isdn switch-type basic-ni
> > >  isdn spid1 903203170101
> > >  isdn spid2 903203170401
> > >  compress stac
> > >  ppp authentication chap
> > >  ppp multilink
> > >
> > > Thanx,
> > > Santosh
> > >
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct
> > > and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
>
> http://www.groupstudy.com/list/cisco.html
>
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html Report misconduct and
> Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



snmp monitoring PBX equipment that doesn't have a network connection

2001-03-05 Thread Hennen, David

Hi, I'm looking into monitoring of some "mission critical"
communications/network equipment.  

Some of the equipment doesn't have a network interface, like a PBX or some
brands of UPS for instance.  Focusing on PBX's, does anyone have experience
in methods to remotely monitor this type of equipment, using snmp or some
other method.

I recall hearing about using the dry contact inteface cards from APC to do
something similar.  A question that comes to mind is whether, using APC's
triple expansion chassis, can I have an Environment Monitoring Card and an
SNMP card both running and configured so a break on the contacts on the Env.
card will trigger an snmp trap from the snmp card?

War stories about similar projects would be appreciated.  If you want to
reply direct, email to [EMAIL PROTECTED]

thanks if you can help

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: icmp weirdness

2001-03-05 Thread David Cooper

Hey, thanks for the help. In the frame relay network we have, hops are 
transparent kind of. Only the CPE is visable. I had established that the 
problem was occuring at the last router's ethernet interface. When I trace 
the routes out it just gets to that router and times out. What 
Erick B. pointed out was due to the fact that the primary address on e0 was 
not the same network that the host in question was on. This turns out to be 
the case. If I do an extended ping and source the packets from the secondary 
address, the machine responds without haste. I've requested that the 
administrator of the hosts over there build a static route to the foriegn 
network address to help out although I don't suspect it will help alot from 
an analytical point of view. :)


Thanks for all the help! - Sorry for the delay in replies.
Dave

On Thursday 01 March 2001 00:17, David Cooper wrote:
> Hey folks,
>
>   I've got an issue at work I'd like to run by you. I sent a request to
> cisco's forum but have yet to hear an answer from anyone. We have a Cisco
> 2610 router in Ireland. This router has 1 Ethernet connected to a local
> segment and s0 point-to-point frame relay going to chicago, Ill (sub
> interface).  Heres the details on the Ireland router:
>
> Ethernet segment: e0's primary address is 132.158.132.252/24 (some hosts
> refuse to change addresses). e0's secondary is 10.43.0.1/16.
> Serial 0/0.1 is 10.126.43.2/24. All advertised by Eigrp.
>
>
> Chicago's router is:
>
> Ethernet segment is varibly subnetted 10.4.0.0/16.
> Serial 0/0.13 is 10.126.43.1/24. Once again, Eigrp is the routing protocol.
>
> There is a host on Ireland's lan with address 10.43.3.230/16.
>
> If I log into Ireland's router and issue ping 10.43.3.230, nothing happens.
> It just times out. If I log into Chicago's router and ping the same host,
> it replies fine. If I ping it from a host behind Chicago's router, it
> replies as well.  If another host on 10.43.0.0/16 pings that host it
> replies fine.  I can ping any of 3.230's neighbors no problem. Its just
> that Ireland's router wont ping it at all. show ip route verifies a route
> as directly connected.
>
> Has anyone heard of this? A bug? I can't verify all the way down because I
> don't have physical access to Ireland's lan (thank god) to put a sniffer
> up.
>
>
> We are trying to use this host for a second default route to a vpn box
> incase the frame relay ever fails (and it does... often).
>
> Sorry to drag this on.
>
> Thanks in advance.
> Dave Cooper, CCNA
> Littelfuse, Inc.
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html Report misconduct and
> Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: split horizon

2001-03-05 Thread David Nie

show ip interface


""jeongwoo park"" <[EMAIL PROTECTED]> wrote in message
9826on$9gh$[EMAIL PROTECTED]">news:9826on$9gh$[EMAIL PROTECTED]...
> Hi all
> what command displays the default status of split-horizon?
> thanks in adv
>
> --
> jeongwoo
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CRC errors on ISDN Interface

2001-03-06 Thread David Staatz

are you using voice modems or is it strickly isdn data?

-Original Message-
From:   Stephen Robichaud [SMTP:[EMAIL PROTECTED]]
Sent:   Tuesday, March 06, 2001 1:39 PM
To: [EMAIL PROTECTED]
Subject:CRC errors on ISDN Interface

I have a problem with an ISDN circuit that keeps on dropping off. When I 
look at the BRI interface I see CRC errors. I have swapped out the patch 
cable going to the providers jack, I swapped out the router and the ISDN WIC 
but I still keep on getting the CRC errors. The provider has checked the 
line and they said the line is ok. This router keeps on dropping off and the 
customer is now getting upset. Any idea have any ideas what I can check or 
try next?

Thanks
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Slightly OT: Denver Cisco Users Group meeting tonight

2001-03-08 Thread David Weiss

I am going, I will be in the black 1st Bank Shirt.

>>> "John Neiberger" <[EMAIL PROTECTED]> 03/08/01 10:21AM
>>>
Anyone from the list going?  If so, if you see me, stop and say howdy.

I'll be the only one in the room wearing a white 1stBank shirt.  I
know,
there will be 200 people there but you never know, you just might spot
me.

John

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html 
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF multicast addresses

2001-03-12 Thread David Staatz

you are right. 5 is used in the beginning at exchange process. During maint.
it is as you described.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Fred Danson
Sent: Monday, March 12, 2001 12:59 AM
To: [EMAIL PROTECTED]
Subject: OSPF multicast addresses


Hi everyone,

I am trying to figure out in which situations certain OSPF multicast
addresses are used. The two multicast addresses used in OSPF that I know of
are 224.0.0.5 and 224.0.0.6. From my understanding, in a broadcast network,
all ospf routers send link info to the DR/BDR with the address of 224.0.0.6.
The DR will then send all the data back to the DROTHER routers using the
address of 224.0.0.5. Is this correct?

I previously thought that the DR sent the data back using the address of
224.0.0.6, but this wouldn't work because the DROTHER routers don't listen
to that address. Is this also correct?

Thanks in advance,
Fred

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Serial intermittant flapping

2001-03-13 Thread David Heaton

Hi All

I've a FR site 32/64Kbit that flaps intermittantly
The carrier has check it & says nothing is wrong, cable has been replaced

detail below:

router#sh fr pvc

PVC Statistics for interface Serial0/0 (Frame Relay DTE)

  Active Inactive  Deleted   Static
  Local  1000
  Switched   0000
  Unused 0000

DLCI = 16, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial0/0.16

  input pkts 251505output pkts 254458   in bytes 60629859  
  out bytes 29044923   dropped pkts 794 in FECN pkts 0 
  in BECN pkts 0   out FECN pkts 0  out BECN pkts 0 
  in DE pkts 10933 out DE pkts 0 
  out bcast pkts 26559  out bcast bytes 2862020   
  Shaping adapts to BECN
  pvc create time 15:31:26, last time pvc status changed 02:16:23

router#sh fr lmi

LMI Statistics for interface Serial0/0 (Frame Relay DTE) LMI TYPE = ANSI
  Invalid Unnumbered info 0 Invalid Prot Disc 0
  Invalid dummy Call Ref 0  Invalid Msg Type 0
  Invalid Status Message 0  Invalid Lock Shift 0
  Invalid Information ID 0  Invalid Report IE Len 0
  Invalid Report Request 0  Invalid Keep IE Len 0
  Num Status Enq. Sent 5588 Num Status msgs Rcvd 5588
  Num Update Status Rcvd 0  Num Status Timeouts 49

Mar 14 10:22:01: Serial0/0(in): Status, myseq 162
Mar 14 10:22:01: RT IE 1, length 1, type 1
Mar 14 10:22:01: KA IE 3, length 2, yourseq 195, myseq 162
Mar 14 10:22:11: Serial0/0(out): StEnq, myseq 163, yourseen 195, DTE up   
Mar 14 10:22:11: datagramstart = 0x1B759D4, datagramsize = 14
Mar 14 10:22:11: FR encap = 0x00010308
Mar 14 10:22:11: 00 75 95 01 01 01 03 02 A3 C3 

Mar 14 10:16:51: Serial0/0(in): Status, myseq 131
Mar 14 10:16:51: RT IE 1, length 1, type 0
Mar 14 10:16:51: KA IE 3, length 2, yourseq 164, myseq 131
Mar 14 10:16:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2 
Mar 14 10:17:01: Serial0/0(out): StEnq, myseq 132, yourseen 164, DTE up
Mar 14 10:17:01: datagramstart = 0x1B75254, datagramsize = 14
Mar 14 10:17:01: FR encap = 0x00010308
Mar 14 10:17:01: 00 75 95 01 01 01 03 02 84 A4 

Mar 14 10:19:51: Serial0/0(in): Status, myseq 149
Mar 14 10:19:51: RT IE 1, length 1, type 0
Mar 14 10:19:51: KA IE 3, length 2, yourseq 182, myseq 149
Mar 14 10:19:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2 
Mar 14 10:20:01: Serial0/0(out): StEnq, myseq 150, yourseen 182, DTE up
Mar 14 10:20:01: datagramstart = 0x1B759D4, datagramsize = 14
Mar 14 10:20:01: FR encap = 0x00010308
Mar 14 10:20:01: 00 75 95 01 01 01 03 02 96 B6 

Mar 14 10:20:51: Serial0/0(in): Status, myseq 155
Mar 14 10:20:51: RT IE 1, length 1, type 0
Mar 14 10:20:51: KA IE 3, length 2, yourseq 188, myseq 155
Mar 14 10:20:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2 
Mar 14 10:21:01: Serial0/0(out): StEnq, myseq 156, yourseen 188, DTE up
Mar 14 10:21:01: datagramstart = 0x1B74AD4, datagramsize = 14
Mar 14 10:21:01: FR encap = 0x00010308
Mar 14 10:21:01: 00 75 95 01 01 01 03 02 9C BC 

Mar 14 10:21:51: Serial0/0(in): Status, myseq 161
Mar 14 10:21:51: RT IE 1, length 1, type 0
Mar 14 10:21:51: KA IE 3, length 2, yourseq 194, myseq 161
Mar 14 10:21:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2 
Mar 14 10:22:01: Serial0/0(out): StEnq, myseq 162, yourseen 194, DTE up
Mar 14 10:22:01: datagramstart = 0x1B74D54, datagramsize = 14
Mar 14 10:22:01: FR encap = 0x00010308
Mar 14 10:22:01: 00 75 95 01 01 01 03 02 A2 C2 


Any help appreciated

Thankyou

David

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Serial intermittant flapping

2001-03-13 Thread David Heaton
tagramstart = 0x1B759D4, datagramsize = 14
>  Mar 14 10:20:01: FR encap = 0x00010308
>  Mar 14 10:20:01: 00 75 95 01 01 01 03 02 96 B6 
>  
>  Mar 14 10:20:51: Serial0/0(in): Status, myseq 155
>  Mar 14 10:20:51: RT IE 1, length 1, type 0
>  Mar 14 10:20:51: KA IE 3, length 2, yourseq 188, myseq 155
>  Mar 14 10:20:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2 
>  Mar 14 10:21:01: Serial0/0(out): StEnq, myseq 156, yourseen 188, DTE up
>  Mar 14 10:21:01: datagramstart = 0x1B74AD4, datagramsize = 14
>  Mar 14 10:21:01: FR encap = 0x00010308
>  Mar 14 10:21:01: 00 75 95 01 01 01 03 02 9C BC 
>  
>  Mar 14 10:21:51: Serial0/0(in): Status, myseq 161
>  Mar 14 10:21:51: RT IE 1, length 1, type 0
>  Mar 14 10:21:51: KA IE 3, length 2, yourseq 194, myseq 161
>  Mar 14 10:21:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2 
>  Mar 14 10:22:01: Serial0/0(out): StEnq, myseq 162, yourseen 194, DTE up
>  Mar 14 10:22:01: datagramstart = 0x1B74D54, datagramsize = 14
>  Mar 14 10:22:01: FR encap = 0x00010308
>  Mar 14 10:22:01: 00 75 95 01 01 01 03 02 A2 C2 
>  
>  
>  Any help appreciated
>  
>  Thankyou
>  
>  David
>  
>  _
>  FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html 
>  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] 





___
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/ 


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Serial intermittant flapping

2001-03-13 Thread David Heaton

we're moving the serial to s1/0 this arvo
then if that fails they are also upgrading the access rate on the NTU (only device 
between router)
then if it still fails we might be able to convice the carrier to replace the NTU
& we've also managed to get a spare router out of the client

carrier techs say it may be radio fade as the FR is remote in this region 
& delivered via radio bearers

sh ver
Cisco Internetwork Operating System Software 
IOS (tm) C2600 Software (C2600-D-M), Version 12.1(2), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2000 by cisco Systems, Inc.
Compiled Tue 09-May-00 23:09 by linda
Image text-base: 0x80008088, data-base: 0x808FA304

ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)

thursday-island uptime is 20 hours, 35 minutes
System returned to ROM by power-on at 11:22:46 EST Mon Nov 13 2000
System restarted at 19:15:45 EST Tue Mar 13 2001
System image file is "flash:1:c2600-d-mz.121-2.bin"

cisco 2610 (MPC860) processor (revision 0x203) with 26624K/6144K bytes of memory.
M860 processor: part number 0, mask 49
Bridging software.
X.25 software, Version 3.0.0.
Basic Rate ISDN software, Version 1.1.
1 Ethernet/IEEE 802.3 interface(s)
2 Serial(sync/async) network interface(s)
1 ISDN Basic Rate interface(s)
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash partition 1 (Read/Write)
8192K bytes of processor board System flash partition 2 (Read/Write)

Configuration register is 0x2102

thanks all

David

>>> John Neiberger <[EMAIL PROTECTED]> 03/14 2:40 pm >>>
Hmmm...  well, in 16.5 hours it only dropped one keepalive and had one error
out of 307000 packets, which isn't too bad.  there shouldn't be any at all,
but one bad packet in 300k isn't going to hurt that much.

The line certainly doesn't appear to be over-utilized by any stretch.

Hmmm... I'd still blame the telco, but that's my number one rule anyway. :-)
One thing that is worth trying is to disconnect all the relevant cables and
reconnect them a few times, especially the cable from the CSU/DSU to the
network jack.  This actually resolved a problem that we had that neither I
or the telco could figure out.  That T-1 is now running perfectly clean and
it was experiencing 5-10% errors before.

HTH,
John

>  Gladly, I think the frame error coincided with a line proto bounce
>  I think it may be environmental at site - maybe 
>  
>  Serial0/0 is up, line protocol is up 
>Hardware is PowerQUICC Serial
>Description: 128k Frame Relay Service Y216077142N
>MTU 1500 bytes, BW 1544 Kbit, DLY 2 usec, 
>   reliability 255/255, txload 1/255, rxload 6/255
>Encapsulation FRAME-RELAY IETF, loopback not set
>Keepalive set (10 sec)
>LMI enq sent  5960, LMI stat recvd 5959, LMI upd recvd 0, DTE LMI up
>LMI enq recvd 0, LMI stat sent  0, LMI upd sent  0
>LMI DLCI 0  LMI type is ANSI Annex D  frame relay DTE
>Broadcast queue 0/64, broadcasts sent/dropped 28365/0, interface
broadcasts 27328
>Last input 00:00:00, output 00:00:00, output hang never
>Last clearing of "show interface" counters 16:33:25
>Queueing strategy: fifo
>Output queue 0/40, 0 drops; input queue 0/75, 0 drops
>5 minute input rate 42000 bits/sec, 20 packets/sec
>5 minute output rate 11000 bits/sec, 17 packets/sec
>   307661 packets input, 75148222 bytes, 0 no buffer
>   Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
>   1 input errors, 0 CRC, 1 frame, 0 overrun, 0 ignored, 0 abort
>   315493 packets output, 34616802 bytes, 0 underruns
>   0 output errors, 0 collisions, 1 interface resets
>   0 output buffer failures, 0 output buffers swapped out
>   0 carrier transitions
>   DCD=up  DSR=up  DTR=up  RTS=up  CTS=up
>  
>  >>> John Neiberger <[EMAIL PROTECTED]> 03/14 11:09 am >>>
>  Could we also see a copy of "show interfaces"?  I didn't see anything
>  obviously wrong with what you already posted, except that the logs are
out
>  of order.  Well, I'm not sure what those LMI status timeouts mean.  It's
not
>  dropping keepalives, though.  Hmmm...  Yes, please post some more
interface
>  info.
>  
>  And do you have any other information? Have you replaced the CSU/DSU?
Have
>  you replaced both cables attached to it? Have you tried a different port
on
>  the router, or a different router?
>  
>  John
>  
>  >  Hi All
>  >  
>  >  I've a FR site 32/64Kbit that flaps intermittantly
>  >  The carrier has check it & says nothing is wrong, cable has been
replaced
>  >  
>  >  detail below:
>  >  
>  >  router#sh fr pvc
>  >  
>  >  PVC Statistics for interface Serial0/0 (Frame Relay DTE)
>  >  
>

Re: Serial intermittant flapping

2001-03-14 Thread David Heaton

You're gonna love this

we've been trying to pin it on the carrier for a while

latest rumour is that the radio bearer (rather transmitted waves)
at the central site gets 'radio fade' during high tides
the thing you don't see when you're not at site

hence the intermittant nature... now if I can just correlate the tides with the
flapping

David

>>> "Brian" <[EMAIL PROTECTED]> 03/15 7:36 am >>>
Looked at serial interface usage, I mean is it dropping during periods of
peak utilization?

Bri

- Original Message -
From: "David Heaton" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 13, 2001 4:49 PM
Subject: Serial intermittant flapping


> Hi All
>
> I've a FR site 32/64Kbit that flaps intermittantly
> The carrier has check it & says nothing is wrong, cable has been replaced
>
> detail below:
>
> router#sh fr pvc
>
> PVC Statistics for interface Serial0/0 (Frame Relay DTE)
>
>   Active Inactive  Deleted   Static
>   Local  1000
>   Switched   0000
>   Unused 0000
>
> DLCI = 16, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE =
Serial0/0.16
>
>   input pkts 251505output pkts 254458   in bytes 60629859
>   out bytes 29044923   dropped pkts 794 in FECN pkts 0
>   in BECN pkts 0   out FECN pkts 0  out BECN pkts 0
>   in DE pkts 10933 out DE pkts 0
>   out bcast pkts 26559  out bcast bytes 2862020
>   Shaping adapts to BECN
>   pvc create time 15:31:26, last time pvc status changed 02:16:23
>
> router#sh fr lmi
>
> LMI Statistics for interface Serial0/0 (Frame Relay DTE) LMI TYPE = ANSI
>   Invalid Unnumbered info 0 Invalid Prot Disc 0
>   Invalid dummy Call Ref 0  Invalid Msg Type 0
>   Invalid Status Message 0  Invalid Lock Shift 0
>   Invalid Information ID 0  Invalid Report IE Len 0
>   Invalid Report Request 0  Invalid Keep IE Len 0
>   Num Status Enq. Sent 5588 Num Status msgs Rcvd 5588
>   Num Update Status Rcvd 0  Num Status Timeouts 49
>
> Mar 14 10:22:01: Serial0/0(in): Status, myseq 162
> Mar 14 10:22:01: RT IE 1, length 1, type 1
> Mar 14 10:22:01: KA IE 3, length 2, yourseq 195, myseq 162
> Mar 14 10:22:11: Serial0/0(out): StEnq, myseq 163, yourseen 195, DTE up
> Mar 14 10:22:11: datagramstart = 0x1B759D4, datagramsize = 14
> Mar 14 10:22:11: FR encap = 0x00010308
> Mar 14 10:22:11: 00 75 95 01 01 01 03 02 A3 C3
>
> Mar 14 10:16:51: Serial0/0(in): Status, myseq 131
> Mar 14 10:16:51: RT IE 1, length 1, type 0
> Mar 14 10:16:51: KA IE 3, length 2, yourseq 164, myseq 131
> Mar 14 10:16:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2
> Mar 14 10:17:01: Serial0/0(out): StEnq, myseq 132, yourseen 164, DTE up
> Mar 14 10:17:01: datagramstart = 0x1B75254, datagramsize = 14
> Mar 14 10:17:01: FR encap = 0x00010308
> Mar 14 10:17:01: 00 75 95 01 01 01 03 02 84 A4
>
> Mar 14 10:19:51: Serial0/0(in): Status, myseq 149
> Mar 14 10:19:51: RT IE 1, length 1, type 0
> Mar 14 10:19:51: KA IE 3, length 2, yourseq 182, myseq 149
> Mar 14 10:19:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2
> Mar 14 10:20:01: Serial0/0(out): StEnq, myseq 150, yourseen 182, DTE up
> Mar 14 10:20:01: datagramstart = 0x1B759D4, datagramsize = 14
> Mar 14 10:20:01: FR encap = 0x00010308
> Mar 14 10:20:01: 00 75 95 01 01 01 03 02 96 B6
>
> Mar 14 10:20:51: Serial0/0(in): Status, myseq 155
> Mar 14 10:20:51: RT IE 1, length 1, type 0
> Mar 14 10:20:51: KA IE 3, length 2, yourseq 188, myseq 155
> Mar 14 10:20:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2
> Mar 14 10:21:01: Serial0/0(out): StEnq, myseq 156, yourseen 188, DTE up
> Mar 14 10:21:01: datagramstart = 0x1B74AD4, datagramsize = 14
> Mar 14 10:21:01: FR encap = 0x00010308
> Mar 14 10:21:01: 00 75 95 01 01 01 03 02 9C BC
>
> Mar 14 10:21:51: Serial0/0(in): Status, myseq 161
> Mar 14 10:21:51: RT IE 1, length 1, type 0
> Mar 14 10:21:51: KA IE 3, length 2, yourseq 194, myseq 161
> Mar 14 10:21:51: PVC IE 0x7 , length 0x3 , dlci 16, status 0x2
> Mar 14 10:22:01: Serial0/0(out): StEnq, myseq 162, yourseen 194, DTE up
> Mar 14 10:22:01: datagramstart = 0x1B74D54, datagramsize = 14
> Mar 14 10:22:01: FR encap = 0x00010308
> Mar 14 10:22:01: 00 75 95 01 01 01 03 02 A2 C2
>
>
> Any help appreciated
>
> Thankyou
>
> David
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html 
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] 
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF

2001-03-14 Thread David Cooper

Hey all,

I've been reading into BSCN here lately with Cisco press books. In the book 
there is a fairly detailed discussion of OSPF. I'm not in the least opposed 
to learning it. One thing I would like to understand is why an organization 
would use it. Is this used in ISP's? What are the advantages of it over say, 
EIGRP? I always see it compared to RIPv1 but I find it silly for advanced 
routing protocols to be compared with ripV1. 


Please forgive me if this is shortsighted of me.

Thanks in advance, 
Dave

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco1600 ISDN + D channell (& PRI D channel nfas)

2001-03-14 Thread David Heaton

router(config-if)#isdn x25 dchannel
allowsd isdn on the d channel for a BRI x25 connection IOS 12.1.2 Desktop

on an e1 PRI ISDN controller you can configure the nfas_d D Channel timeslot
to be backup, primary or 'none' which permits it to be a B channel

which should show up under sh isdn serv as an available channel
never actually done it myself

as for BRI I've never heard of it being don
although you can configure lapb (b channel) variables:
  N1Maximum number of bits per I-frame
  N2Maximum number of attempts to transmit a frame
  T1Retransmission timer
  T2Explicit acknowledge deferral timer
  T4Keepalive timer
  interface-outage  Interface outage deadband (partial T3)
  k Maximum number of outstanding frames (window size)
  moduloSet frame numbering modulus

has anyone ever configured these variables, & if so to fix what problems?

also, does anyone know why BRI is represented as 192K total in some books
(I though 2B=2x64 + D =16K)

US PRI = 23B + 2 D  how big is D (54K?)
Europe PRI = 30B + D (64K)

what would the carrier use for signalling if the D channel was taken?

Cheer
David


>>> "Brian" <[EMAIL PROTECTED]> 03/15 7:57 am >>>
I saw that there is isdn technology that allows data to pass along the
always up control channel.  If I remember correctly, it passes 8k along it.
I do not know how commercially available this is.  Only use I could think of
is you could then use it for dial on demand inbound, but do you want that.

Bri

- Original Message -
From: "Damien Kelly" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 14, 2001 7:10 AM
Subject: FW: Cisco1600 ISDN + D channell


> Just sending this again,  No one commented.. was this a stupid question to
> ask?
>
>
>
>
> > Is it true that a cisco can be configured to use the D Channell to
> > remotely bring up an ISDN line on a remote router configured for dial on
> > demand?.
> >
> > I was told sometime ago that a cisco ( also DoD ) could be used to
> > remotely connect to another cisco on a remote network which is on ISDN
> > dialup, using the ISDN D Channell.  anyone know if this is true,  or
> > possible?  anyone have any experience in this?
> >
> >
> > Any suggestions?
> >
> > Thanks
> >
> > Damien Kelly,
> >
> >
>
>
> **
> The information contained in this message is confidential and
> is intended for the addressee(s) only.  If you have received
> this message in error or there are any problems please notify
> the originator immediately.  The unauthorised use, disclosure,
> copying or alteration of this message is strictly forbidden. This
> message and any attachments have been scanned for viruses.
> Orbiscom Ltd. will not be liable for direct, special, indirect or
> consequential damages arising from alteration of the contents
> of this message by a third party or as a result of any virus being
> passed on.
>
>
> www.Orbiscom.com 
> **
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html 
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] 
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html 
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF

2001-03-15 Thread David Cooper

just what I was looking for :)

Thanks,
Dave

On Wednesday 14 March 2001 23:34, Howard C. Berkowitz wrote:
> >Hey all,
> >
> > I've been reading into BSCN here lately with Cisco press
> >books. In the book
> >there is a fairly detailed discussion of OSPF. I'm not in the least
> > opposed to learning it. One thing I would like to understand is why an
> > organization would use it. Is this used in ISP's? What are the advantages
> > of it over say, EIGRP? I always see it compared to RIPv1 but I find it
> > silly for advanced routing protocols to be compared with ripV1.
>
> I'll preface my remarks with the observation that all three advanced
> IGPs:  OSPF, EIGRP, and ISIS, all work well. ISIS is more a niche
> protocol for ISPs.  There are pros and cons for each one.
>
> OSPF and ISIS require structured network topology from the very
> beginning, while EIGRP is much more tolerant -- up to a point.  For
> me, the definitive comment came over a few beers shared with a
> distinguished Cisco engineer.  He observed, "to build a really big
> network, you absolutely have to have clue."  He burped loudly, and
> then went on. "EIGRP has the advantage of letting you stay clueless
> for longer."
>
> The biggest argument against EIGRP is that it is Cisco proprietary.
> Being proprietary has implications beyond the multivendor question.
> Because some of the EIGRP mechanisms have not been published by
> Cisco, there isn't the external knowledge base about EIGRP that there
> is about OSPF and ISIS.  Protocol and network architects have a very
> deep understanding how OSPF and ISIS will behave and what their
> strengths and weaknesses are, but no one who hasn't been a Cisco
> employee can have the same sort of insight.
>
> For similar topologies, EIGRP generally needs less processing than
> OSPF. On the other hand, with ever-faster processors, this may not be
> a significant constraint.  In a fair test, with equivalent timers set
> to equivalent values, both converge very fast, and convergence time
> should not be an issue with any protocol (assuming reasonable network
> topology). EIGRP may be able to find an alternate path faster when
> that path goes through a neighbor, but OSPF is faster if the
> alternate path might be several hops away.
>
> If you run Appletalk or IPX routing, there is a definite advantage to
> using EIGRP. EIGRP also can bring incremental updating to a Netware
> 3.x environment that can't be upgraded.
>
> A few things to consider.
>
> >Please forgive me if this is shortsighted of me.
> >
> >Thanks in advance,
> >Dave
> >
> >_
> >FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html Report misconduct and
> Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Looking for a CCIE lab partner in New York City area

2001-03-15 Thread David Eitel

I'm looking for lab partner in the New York City area. I currently have 6
routers that handle 85% of the interfaces for the CCIE. I'm also using
bootcamp labs for prep. Email me at [EMAIL PROTECTED] if interested

David Eitel


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: differences between the 2505 and 2524

2001-03-16 Thread Hennen, David

the 2505 has a built in 8 port 10BaseT ethernet hub and 2 serial ports to
which you have to attach external connectivity devices like csu/dsu.  

The 2524 has one on board 10mb ethernet port (10BaseT I think) and three
modular slots, one of which is dedicated to ISDN BRI.  The other two can
have various modules installed for 56K to frac/full T1 connections and can
include the csu/dsu internally with the appropriate module.

hope this helps,
dave h

-Original Message-
From: Aidan Manning [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 16, 2001 5:27 AM
To: [EMAIL PROTECTED]
Subject: differences between the 2505 and 2524


Can anybody tell me the differences between the 2505 and 2524 as I'm setting
up a test network for webhosting.

Ta,
Aidan..


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Point to Point T1 connectivity

2001-03-16 Thread David Eitel

I have a problem. I have a point to point t1
router 1Line up protocol down
router 2 Line down protocol down
On router 2 the alarm LED is on. Both routers shared the same circuit
configs. Router 1 clocking is internal and router 2 clocking is line. Should
the cables from the demark be straight through? One straight through? One
crossed? Any advice would be greatly appreciated.

David Eitel



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



  1   2   3   4   5   6   7   8   9   10   >