Cisco Routers and Radius Authentication [7:16403]

2001-08-17 Thread David A. Lauer

I'm trying to configure Cisco routers (7206,3662, 2600, etc...) to use
Radius authentication.  I'd like the authenticated user(s) to either be
dropped directly into enable mode or left only at the telnet prompt based
on their authority (defined by the Radius server).  I'm assuming this
involves two levels of AAA. Authentication and Authorization.

I have been able to configure a 3662 (Version 12.2(2)T) to allow
authentication and leave the logged on user at an enable prompt without
requiring the user to enter the 'enable' command.

What I am unable to get to work properly is the latter part of my
requirement.  i.e. those without authority to enable mode only get the
telnet prompt and view access to the router.

Any suggestions on how to allow this configuration?

Here's my configuration;
--
--

Radiator Radius is my radius server.

Cisco router:
-
aaa new-model
aaa authentication login default group radius enable
aaa authentication enable default group radius enable
aaa authorization exec default group radius local

radius-server host 200.x.x.x auth-port 1645 acct-port 1646 key 7 
radius-server retransmit 3


-- 
David A. Lauer
IFX Communications Ventures




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=16403t=16403
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Routers and Radius Authentication [7:16310]

2001-08-16 Thread David A. Lauer

I'm trying to configure Cisco routers (7206,3662, 2600, etc...) to use
Radius authentication.  I'd like the authenticated user(s) to either be
dropped directly into enable mode or left only at the telnet prompt based
on their authority (defined by the Radius server).  I'm assuming this
involves two levels of AAA. Authentication and Authorization.

I have been able to configure a 3662 (Version 12.2(2)T) to allow
authentication and leave the logged on user at an enable prompt without
requiring the user to enter the 'enable' command.

What I am unable to get to work properly is the latter part of my
requirement.  i.e. those without authority to enable mode only get the
telnet prompt and view access to the router.

Any suggestions on how to allow this configuration?

Here's my configuration;
--
--

Radiator Radius is my radius server.

Cisco router:
-
aaa new-model
aaa authentication login default group radius enable
aaa authentication enable default group radius enable
aaa authorization exec default group radius local

radius-server host 200.x.x.x auth-port 1645 acct-port 1646 key 7 
radius-server retransmit 3


-- 
David A. Lauer
IFX Communications Ventures




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=16310t=16310
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Routers and Radius Authentication [7:16232]

2001-08-15 Thread David A. Lauer

I'm trying to configure Cisco routers (7206,3662, 2600, etc...) to use
Radius authentication.  I'd like the authenticated user(s) to either be
dropped directly into enable mode or left only at the telnet prompt based
on their authority (defined by the Radius server).  I'm assuming this
involves two levels of AAA. Authentication and Authorization.

I have been able to configure a 3662 (Version 12.2(2)T) to allow
authentication and leave the logged on user at an enable prompt without
requiring the user to enter the 'enable' command.

What I am unable to get to work properly is the latter part of my
requirement.  i.e. those without authority to enable mode only get the
telnet prompt and view access to the router.

Any suggestions on how to allow this configuration?

Here's my configuration;
--
--

Radiator Radius is my radius server.

Cisco router:
-
aaa new-model
aaa authentication login default group radius enable
aaa authentication enable default group radius enable
aaa authorization exec default group radius local

radius-server host 200.x.x.x auth-port 1645 acct-port 1646 key 7 
radius-server retransmit 3


-- 
David A. Lauer
IFX Communications Ventures




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=16232t=16232
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: difficult ccna question

2001-03-22 Thread David A. Lauer


Wouldn't the first subnet be 172.16.0.0?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Joshua Beining
Sent: Thursday, March 22, 2001 11:43 AM
To: 'Lowell Sharrah'
Cc: '[EMAIL PROTECTED]'
Subject: RE: difficult ccna question


Based on the subnet mask (255.255.192.0) subtract 256 from 192 which is 64.
Therefore 64 is your first subnet.  To get the second subnet, add 64 to the
first subnet.  To get the third add 64 to the second subnet and so on.
Continue in this fashion until you reach 192.  Remember that you cannot use
the ranges 172.16.0.1  -  172.16.0.62 and 172.16.255.193  -  172.16.255.254
(network and broadcast respectively) unless your router is configured to do
so.

Subnet  Host Range
1   172.16.0.65  -  172.16.0.126
2   172.16.0.129  -  172.16.0.190
3   172.16.0.193  -  172.16.0.254
4   172.16.1.1  -  172.16.1.62
5   172.16.1.65  -  172.16.1.126
6   172.16.1.129  -  172.16.1.190
7   172.16.1.193  -  172.16.1.254
8   172.16.2.1  -  172.16.2.62
9   172.16.2.65  -  172.16.2.126
   10   172.16.2.129  -  172.16.2.190
.
.
.
.
.
.

 1015   172.16.253.193  -  172.16.253.254
 1016   172.16.254.1  -  172.16.254.62
 1017   172.16.254.65  -  172.16.254.126
 1018   172.16.254.129  -  172.16.254.190
 1019   172.16.254.193  -  172.16.254.254
 1020   172.16.255.1  -  172.16.255.62
 1021   172.16.255.65  -  172.16.255.126
 1022   172.16.255.129  -  172.16.255.190

-Joshua
-Original Message-
From: Lowell Sharrah [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 22, 2001 8:14 AM
To: [EMAIL PROTECTED]
Subject: RE: difficult ccna question


how do you know where the first subnet begins?

 Joshua Beining [EMAIL PROTECTED] 03/22/01 10:34AM 
Just remember the following fomulas:

(2^# of masked bits) - 2 = Total # of subnets
(2^# of unmasked bits - 2 = Total # of hosts

Based on this the correct answer is A.

-Original Message-
From: George [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 22, 2001 12:16 AM
To: [EMAIL PROTECTED]
Subject: difficult ccna question


if you have a class B network with a 10-bit subnet mask, how many subnet and
how many hosts do you have?

a. 1022 subnets, 62 hosts
b. 62 subnets, 8190 hosts
c. 8190 subnets, 254 hosts
d. 254 subnets , 126 hosts


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: difficult ccna question

2001-03-22 Thread David A. Lauer


Can you give examples of OSs that don't support all ones?

-Original Message-
From: Joshua Beining [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 22, 2001 2:44 PM
To: 'David A. Lauer'
Cc: '[EMAIL PROTECTED]'
Subject: RE: difficult ccna question


Technically yes.  But like most things you cannot get something for free.
There is a price for subnetting which is that you loose the first subnet
(network - all zeros) and the last subnet (broadcast - all ones).  Note that
with some routers you can configure them to use these subnets.  But be
careful, because some OS's and devices do not react well to using then.
HTH.

-Joshua

-Original Message-
From: David A. Lauer [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 22, 2001 11:14 AM
To: [EMAIL PROTECTED]
Subject: RE: difficult ccna question



Wouldn't the first subnet be 172.16.0.0?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Joshua Beining
Sent: Thursday, March 22, 2001 11:43 AM
To: 'Lowell Sharrah'
Cc: '[EMAIL PROTECTED]'
Subject: RE: difficult ccna question


Based on the subnet mask (255.255.192.0) subtract 256 from 192 which is 64.
Therefore 64 is your first subnet.  To get the second subnet, add 64 to the
first subnet.  To get the third add 64 to the second subnet and so on.
Continue in this fashion until you reach 192.  Remember that you cannot use
the ranges 172.16.0.1  -  172.16.0.62 and 172.16.255.193  -  172.16.255.254
(network and broadcast respectively) unless your router is configured to do
so.

Subnet  Host Range
1   172.16.0.65  -  172.16.0.126
2   172.16.0.129  -  172.16.0.190
3   172.16.0.193  -  172.16.0.254
4   172.16.1.1  -  172.16.1.62
5   172.16.1.65  -  172.16.1.126
6   172.16.1.129  -  172.16.1.190
7   172.16.1.193  -  172.16.1.254
8   172.16.2.1  -  172.16.2.62
9   172.16.2.65  -  172.16.2.126
   10   172.16.2.129  -  172.16.2.190
.
.
.
.
.
.

 1015   172.16.253.193  -  172.16.253.254
 1016   172.16.254.1  -  172.16.254.62
 1017   172.16.254.65  -  172.16.254.126
 1018   172.16.254.129  -  172.16.254.190
 1019   172.16.254.193  -  172.16.254.254
 1020   172.16.255.1  -  172.16.255.62
 1021   172.16.255.65  -  172.16.255.126
 1022   172.16.255.129  -  172.16.255.190

-Joshua
-Original Message-
From: Lowell Sharrah [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 22, 2001 8:14 AM
To: [EMAIL PROTECTED]
Subject: RE: difficult ccna question


how do you know where the first subnet begins?

 Joshua Beining [EMAIL PROTECTED] 03/22/01 10:34AM 
Just remember the following fomulas:

(2^# of masked bits) - 2 = Total # of subnets
(2^# of unmasked bits - 2 = Total # of hosts

Based on this the correct answer is A.

-Original Message-
From: George [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 22, 2001 12:16 AM
To: [EMAIL PROTECTED]
Subject: difficult ccna question


if you have a class B network with a 10-bit subnet mask, how many subnet and
how many hosts do you have?

a. 1022 subnets, 62 hosts
b. 62 subnets, 8190 hosts
c. 8190 subnets, 254 hosts
d. 254 subnets , 126 hosts


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Bandwidth on demand off a DS3

2001-03-22 Thread David A. Lauer


you might be able to use Dyband from Crosskeys.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jack
Sent: Thursday, March 22, 2001 10:04 PM
To: [EMAIL PROTECTED]
Subject: Bandwidth on demand off a DS3


I have a customer ( a hotel) who is looking to offer video conferencing
capabilities to their customers.
They have a DS3 and 10 conference rooms. What they want is an easy way to
increase or limit the bandwidth available to those conference rooms as
needed.
For instance, lets say 5 room needs 5 megs and 2 rooms need 10 megs.
So I'm guessing they need some device similarto that used by an ISP  to set
CIR on a frame circuit.
Anyone know of a way this can be done?
What's important is ease of use. The allocation of B/W would probably need
to be done at the front desk, almost instantaneously and by someone who
isn't that computer savvy so a GUI is key.

Thanks in advance


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Clocking provided by 3640 router

2001-03-21 Thread David A. Lauer


I think the way to configure this would be just that.  Have one routers
clock set to internal and the others set to get it's clock from the line
(provided by the other router).

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Zwaanswijk, John
Sent: Wednesday, March 21, 2001 10:38 AM
To: [EMAIL PROTECTED]
Subject: Clocking provided by 3640 router


Hi everybody,
 
Can someone help me with the following problem
I've a customer with two 3640 router, both connected via an E1 interface
to a satellite dish on both customer sides.
The problem is that the satellite link does not provide any clocking, it
is a transparent connection ( the supplier told me that), so the routers
are running on their own clocks, and a few times a day they are running
out of sync, and the line is going down, and up again in a few seconds.
Is it possible that one of the routers provide a clock to the satellite
link, and that it is transported via the satellite, so the other router
can use this clock for synchronisation.
 
Regards John Zwaanswijk
 

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Multiple T1's

2001-03-21 Thread David A. Lauer


Could you also configure these as point-to-point interfaces with /30
addresses and run a dynamic routing protocol, i.e. OSPF which would allow
for both routes to perform load balancing and failover?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Vijay Ramcharan
Sent: Wednesday, March 21, 2001 11:31 AM
To: Cisco Groupstudy. com Mailing list (E-mail)
Subject: Multiple T1's


To revisit this question from yesterday, could the following be done and
what does it accomplish, if anything?
The question posed is below.

"Jason Stephens" [EMAIL PROTECTED] wrote in message
998ndv$1fh$[EMAIL PROTECTED]">news:998ndv$1fh$[EMAIL PROTECTED]...
We have a situation where we want to have 2 t1's going to another office.
We want these 2 t1's to not only provide redundancy in case 1 goes down, but
also want them to load balance while they are both up.
So basically, we want the two t1's to be up providing 3 mpbs of bandwidth
and if one goes down for it to automatically send all traffic to the t1 that
is still up. We have 3600 series routers on both ends. Can this be done? If
so, please explain how. I looked into the Multilink PPP stuff, but it seems
to be only for async ports. Thanks for any info in advance!

Is this possible to achieve using the solution below?

Use a "backup interface" command along with "backup load" and "backup delay"
commands to achieve redundancy and
load balancing.  Both T1's are correctly configured and are connected to the
same router. Static routes are used for each T1 using "ip route 0.0.0.0
0.0.0.0 next-hop-address".

By my reasoning, by using the backup interface command on the primary line,
if the primary line goes down the second line is used automatically to route
traffic.

If the primary line exceeds the load specified by the "backup load" command,
the second line is put into use automatically.
The "backup delay" command just tells the router to stop using the second
line when usage on the primary line drops below the predefined load.

Any input would be appreciated.  Thanks.

Vijay Ramcharan


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Vijay Ramcharan
Sent: Tuesday, March 20, 2001 6:34 PM
To: [EMAIL PROTECTED]
Subject: RE: Multiple T1's


In this scenario, is it possible to use a "backup interface" command along
with "backup load" and "backup delay" commands to achieve redundancy and
load balancing?  Providing that both T1's are correctly configured and are
connected to the same router?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Howard C. Berkowitz
Sent: Tuesday, March 20, 2001 5:39 PM
To: [EMAIL PROTECTED]
Subject: RE: Multiple T1's


At 02:12 PM 3/20/2001 -0800, you wrote:
If you are running EIGRP as your routing protocol, it will take care of the
load balancing for you without the added complexity and CPU overhead of PPP
multilink.

There are some great EIGRP config guides on CCO.

Chris Lemagie


I don't understand what advantage EIGRP would give.   First, no routing
protocol load balances.  It is the routing table
task that makes the final decision about load balancing, with the mode
dependent
on the switching modes of the output interfaces.

Second, any routing protocol, except standard BGP (i.e., without Cisco
extensions) and
OSPF externals, can produce equal-cost routes eligible for load balancing.

EIGRP and IGRP can produce unequal-cost routes eligible for load balancing,
but the media here specifically are equal cost


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Brian
Sent: Tuesday, March 20, 2001 1:57 PM
To: [EMAIL PROTECTED]
Subject: Re: Multiple T1's


On each end, static route traffic out both interfaces.

 Bri
"Jason Stephens" [EMAIL PROTECTED] wrote in message
998ndv$1fh$[EMAIL PROTECTED]">news:998ndv$1fh$[EMAIL PROTECTED]...
  We have a situation where we want to have 2 t1's going to another
office.
We
  want these 2 t1's to not
  only provide redundancy in case 1 goes down, but also want them to load
  balance while they are both up.
  So basically, we want the two t1's to be up providing 3 mpbs of
bandwidth
  and if one goes down for it
  to automatically send all traffic to the t1 that is still up. We have
3600
  series routers on both ends. Can
  this be done? If so, please explain how. I looked into the Multilink PPP
  stuff, but it seems to be only for
  async ports. Thanks for any info in advance!
 
 
  _
  FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:

RE: loopback test

2001-03-19 Thread David A. Lauer


Why would you need to?  Do you have a link light at the interface port and
the hub/switch?  Does the interface show Interface UP line Protocol up?

Cat 5 ethernet uses the 568B pinout for the RJ45 connectors.  You could
create loopback plug by cross-connecting pins 1-3 and 2-6.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
zd z
Sent: Monday, March 19, 2001 4:26 AM
To: [EMAIL PROTECTED]
Subject: loopback test


Is there any one knows how to do the
loopback test on ethernet or fastethernet port ?


__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail.
http://personal.mail.yahoo.com/

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 2500 wont save config

2001-03-19 Thread David A. Lauer


Is this list turning confrontational to those who use it.  It seems your
remark "its not one that someone
would ask in your position" to this post is out of line.  You don't know
anything about this persons position or experience.

Additionally isn't this an open list where all can contribute and
participate?

DaL

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
The.Rock
Sent: Monday, March 19, 2001 12:03 PM
To: [EMAIL PROTECTED]
Subject: Re: 2500 wont save config


It might not save due to lack of mem. Make sure you have enough room to hold
both the current IOS as well as the one your trying to upgrade. Otherwise
you will need to delete one of them first. Being that your on IOS 10.3 tells
me that probably you don't have enough memory.

And I see your title." LAN Engineer". I'm not picking on you, but it
just seems that for the question you just asked, its not one that someone
would ask in your position. This goes back to the paper cert thing


""Plantier, William (Spencer)"" [EMAIL PROTECTED] wrote in
message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 I have a 2500 router with 10.3 IOS and I cant save the config. Any
 suggestions?

 Wm. Spencer Plantier
 LAN Engineer
 (919) 474-1300 ext 0873 Office
 (919) 474-1056 Fax
 (919)696-8848 Cell
 [EMAIL PROTECTED]



 _
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]





_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Off topic(Kinda) Link to website which compares Book Prices

2001-03-19 Thread David A. Lauer

check out bestbookbuys.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Brian
Sent: Monday, March 19, 2001 1:36 PM
To: Eric Gunn
Cc: [EMAIL PROTECTED]
Subject: Re: Off topic(Kinda) Link to website which compares Book Prices


I like www.mysimon.com.

Bri

On Mon, 19 Mar 2001, Eric Gunn wrote:

 I am going to be adding Caslow 2nd edition to my book collection and
 remember seeing a website that compared the prices of the various book
 stores when you search for a book. Would someone be kind
 enough to post the link?

 Thank You,

 -Eric

 _
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: loopback the WIC card, how is it done?

2001-03-19 Thread David A. Lauer


It's a configuration command under the T1 controller.

i.e.;
config t
controller t1 slot/port
loopback {diagnostic |local {payload | line}|remote {iboc |esf {payload |
line}}

DaL

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Bullock, Jason (1125)
Sent: Monday, March 19, 2001 6:05 PM
To: '[EMAIL PROTECTED] '
Subject: RE: loopback the WIC card, how is it done?


Hey Listers.

I was thinking about this cool thing one of the cisco TAC engineers did when
helping me troubleshoot a tricky network problem a few months ago.  They
looped up my serial interface on a 2600 to verify the WIC card was working
properly, and that the attached CSU was not faulty.  They configured the WIC
interface to show up and up , even though there T1 was down.
The problem is , I can not remember the command sets that were run to make
this work. !   Anyone know this one?   ugh.

jason


-Original Message-
From: Tony van Ree
To: David A. Lauer; [EMAIL PROTECTED]
Sent: 3/19/2001 4:17 PM
Subject: RE: loopback test

Hi,

If you want to check your protocol stack you should be able to ping
yourself, check you ip interfaces and/or check your route table
(assuming IP is used).  There are a number of utilities that check
network cards.

Teunis
Hobart, Tasmania
Australia


On Monday, March 19, 2001 at 07:56:26 AM, David A. Lauer wrote:


 Why would you need to?  Do you have a link light at the interface port
and
 the hub/switch?  Does the interface show Interface UP line Protocol
up?

 Cat 5 ethernet uses the 568B pinout for the RJ45 connectors.  You
could
 create loopback plug by cross-connecting pins 1-3 and 2-6.


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 zd z
 Sent: Monday, March 19, 2001 4:26 AM
 To: [EMAIL PROTECTED]
 Subject: loopback test


 Is there any one knows how to do the
 loopback test on ethernet or fastethernet port ?


 __
 Do You Yahoo!?
 Get email at your own domain with Yahoo! Mail.
 http://personal.mail.yahoo.com/

 _
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

 _
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




--
www.tasmail.com


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IPX Help

2001-03-19 Thread David A. Lauer


How about routing IPX over a WAN?  What are the issues and performance hits?

DaL

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Bradley J. Wilson
Sent: Monday, March 19, 2001 5:54 PM
To: cisco
Subject: Re: IPX Help


The command "no ipx routing" will clear up *all* your troubles. ;-)

BJ

- Original Message -
From: Nabil Fares
To: [EMAIL PROTECTED]
Sent: Monday, March 19, 2001 5:32 PM
Subject: IPX Help


Greetings all,

I'm trying to find out how routers treat IPX traffic, is there any type of
switching or optimization taking place.  I hope my questions is clear!

Thanks,

Nabil

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Need help configuring DDR on 805

2001-03-16 Thread David A. Lauer


looks like you might be missing the username and password, needed on both
sides for authentication.

username 'name' password 'secret'

The username is case sensitive and must match the opposite router's
hostname. The password is also case sensitive and must match the password
set in the opposite router's corresponding username definition.

Dal

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Indy
Sent: Friday, March 16, 2001 4:07 AM
To: [EMAIL PROTECTED]
Subject: Re: Need help configuring DDR on 805


This is the config I figure by using fast step software combined with CLI
from cisco homepage. I might do some testing tommorow.

version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname cisco805
!
logging buffered 10240 debugging
enable secret 5 
!
ip subnet-zero
no ip source-route
!
chat-script dial ABORT ERROR "" "AT Z" OK "ATDT \T" TIMEOUT 60 CONNECT \c
!
!
process-max-time 200
!
interface Ethernet0
 ip address 192.168.2.1 255.255.255.0
ip access-group 121 in
 no ip directed-broadcast
 no ip proxy-arp
 ip nat inside
!
interface Serial0
 physical-layer async
 no ip address
 no ip directed-broadcast
 encapsulation ppp
 dialer in-band
 dialer pool-member 7
 async mode dedicated
 no fair-queue
 ppp authentication chap pap callin
!
interface Dialer1
 ip address negotiated
 no ip directed-broadcast
 encapsulation ppp
 dialer remote-name dnet
 dialer idle-timeout 300
 dialer string 21,5550019 modem-script dial
 dialer pool 7
 dialer-group 7
 no cdp enable
 ppp authentication chap pap callin
 ppp pap sent-username udin password 7 **
!
ip nat inside source list 18 interface Serial0 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
access-list 18 permit 192.168.2.0 0.0.0.255
access-list 121 deny   udp any eq netbios-dgm any
access-list 121 deny   udp any eq netbios-ns any
access-list 121 deny   udp any eq netbios-ss any
access-list 121 deny   tcp any eq 137 any
access-list 121 deny   tcp any eq 138 any
access-list 121 deny   tcp any eq 139 any
access-list 121 permit ip any any
dialer-list 7 protocol ip permit
!
line con 0
exec-timeout 0 0
 transport input none
 stopbits 1
line 1
 modem InOut
 transport input all
 stopbits 1
 speed 33600
 flowcontrol hardware
line vty 0 4
 exec-timeout 0 0
 login local
!
end

"Piatnitchi Cristian" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Try this it works on 1600 . I think is better to send us
 the config that you are using.

 Cristian


 !
 version 11.3
 service timestamps debug uptime
 service timestamps log uptime
 no service password-encryption
 !
 hostname C1600
 !
 enable secret 5 //
 enable password ??
 !
 chat-script dial ABORT ERROR "" "AT Z" OK "ATDP \T" TIMEOUT 50 CONNECT
 !
 !
 !
 interface Ethernet0
  ip address 172.199.1.5 255.255.255.0
 !
 interface Serial0
  physical-layer async
  ip address negotiated
  encapsulation ppp
  dialer in-band
  dialer string 9,2331417
  dialer-group 1
  async mode interactive
  no peer default ip address
  no cdp enable
  ppp chap refuse
  ppp pap sent-username test password 7 ?
 !

 ip classless
 ip route 0.0.0.0 0.0.0.0 Serial0
 !
 dialer-list 1 protocol ip permit
 dialer-list 1 protocol ipx permit
 !
 line con 0
 line 1
  autoselect ppp
  script dialer dial
  login
  modem InOut
  modem autoconfigure discovery
  transport input all
  stopbits 1
  speed 115200
  flowcontrol hardware


 line vty 0 4
  password telnet
  login
 !
 end

 _
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: TCPmag.com Salary Survey

2001-03-16 Thread David A. Lauer


Tried to get there but wasn't successful.  Is this an open site?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Thangavel .V.M
Sent: Friday, March 16, 2001 6:43 AM
To: [EMAIL PROTECTED]
Subject: TCPmag.com Salary Survey


Hi,

See how much CCIE, CCNP and CCNA's are paid 

 http://tcpmag.com/salarysurvey/2001/default.asp?id=3DSALARY01cid=3D89


Regards / Thangavel

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: TCPmag.com Salary Survey

2001-03-16 Thread David A. Lauer

Got it! thanks.

-Original Message-
From: Damien Kelly [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 16, 2001 10:43 AM
To: 'David A. Lauer'; [EMAIL PROTECTED]
Subject: RE: TCPmag.com Salary Survey


drop everything after default.asp

( ie: ?id=3DSALARY01cid=3D89 )

 -Original Message-
 From: David A. Lauer [SMTP:[EMAIL PROTECTED]]
 Sent: Friday, March 16, 2001 3:36 PM
 To:   [EMAIL PROTECTED]
 Subject:  RE: TCPmag.com  Salary Survey
 
 
 Tried to get there but wasn't successful.  Is this an open site?
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 Thangavel .V.M
 Sent: Friday, March 16, 2001 6:43 AM
 To: [EMAIL PROTECTED]
 Subject: TCPmag.com Salary Survey
 
 
 Hi,
 
 See how much CCIE, CCNP and CCNA's are paid 
 
  http://tcpmag.com/salarysurvey/2001/default.asp?id=3DSALARY01cid=3D89
 
 
 Regards / Thangavel
 
 _
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 
 _
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


**
The information contained in this message is confidential and 
is intended for the addressee(s) only.  If you have received 
this message in error or there are any problems please notify 
the originator immediately.  The unauthorised use, disclosure, 
copying or alteration of this message is strictly forbidden. This
message and any attachments have been scanned for viruses.
Orbiscom Ltd. will not be liable for direct, special, indirect or 
consequential damages arising from alteration of the contents 
of this message by a third party or as a result of any virus being
passed on.


www.Orbiscom.com
**

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BSCN

2001-03-14 Thread David A. Lauer


BSCN - CCNP Routing Test taken and passed. Score: 801


alot of BGP questions.  Some redistribution, EIGRP and whatifs.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Reverse Telnet on 2600 routers not working

2001-03-14 Thread David A. Lauer


exactly what is accomplished by this configuration and command?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, March 13, 2001 6:34 AM
To: [EMAIL PROTECTED]
Subject: RE: Reverse Telnet on 2600 routers not working




reverse telnet to next device.  Aux port is line 65 on 3620/2600
series.  129 on 3640.
1.  Configure ip address on box.
ie.
config t
int loopback 0
ip address 10.10.10.1 255.255.255.255

2. configure line aux port.

line aux 0
 transport input all
 exec

3. Test
telnet 10.10.10.1 2065




This message was sent by Cosmiverse.
http://www.cosmiverse.com
Get Your Free Email Account Today!
Join us Today as a Digital Passenger aboard
Cosmic Voyage 2000 ( http://www.cosmicvoyage2000.com )!

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Rip 2 and VLSM Does rip 2 support VLSM

2001-03-13 Thread David A. Lauer

What version?

My understanding is RIP v1 does not and RIP v2 does.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Atul Kumar Udupi
Sent: Tuesday, March 13, 2001 7:00 AM
To: [EMAIL PROTECTED]
Subject: Re: Rip 2 and VLSM "Does rip 2 support VLSM"


Yes it does


adam lee [EMAIL PROTECTED] wrote in message
01c0a795$4456f890$075901c0@meanboy4">news:01c0a795$4456f890$075901c0@meanboy4...
 Sure does.
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 [EMAIL PROTECTED]
 Sent: Tuesday, January 16, 2001 11:43 AM
 To: [EMAIL PROTECTED]
 Subject: Rip 2 and VLSM "Does rip 2 support VLSM"


 Does Rip 2 support VLSM??

 _
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

 _
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 6500 Catalyst Boots straight to MSFC router module ...

2001-03-12 Thread David A. Lauer


What version of IOS?  They may have the new IOS called True IOS which in my
understanding negates the need for separate management.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Hornbeck, Timothy
Sent: Monday, March 12, 2001 3:21 PM
To: '[EMAIL PROTECTED]'
Subject: 6500 Catalyst Boots straight to MSFC router module ...


We just received 4 new 6500's.  Unboxed and powered them up, they boot
straight to the Router prompt.  How do we get to the Switch prompt.  We
have tried to CTRL+SHIFT+6, X and other key sequences, but have been
unsuccessful.

Thanks for your help in advance.

- Tim Hornbeck

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Reverse Telnet on 2600 routers not working

2001-03-12 Thread David A. Lauer


Do you need to have the 'login' command under the 'line aux 0' heading?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
John Neiberger
Sent: Monday, March 12, 2001 2:50 PM
To: [EMAIL PROTECTED]
Subject: Reverse Telnet on 2600 routers not working


I posted this problem about a year or so ago and we never did find a
resolution to it and I still can't find anything on CCO about it.  The
problem is that I can't reverse telnet out of the AUX port on a 2600
router.  I have a dial modem attached to it that does function, yet when
I try to RT to it the connection is refused.

Here is the config:

line aux 0
 modem InOut
 transport input all
 stopbits 1
 speed 38400
 flowcontrol hardware

Someone suggested adding "no exec", but that had no effect.  This exact
config works just fine on any 2500 in our network, but I have yet to get
RT working with a 2600 series router running 12.0 or 12.1.

Any other ideas?

Thanks,
John

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ccnp guide errors

2001-03-11 Thread David A. Lauer


Where did you find the reviews of these books?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Brian
Sent: Sunday, March 11, 2001 12:09 AM
To: [EMAIL PROTECTED]
Subject: ccnp guide errors



I recently bought the Osborne version of the CCNP routing study guide.
After catching a few errors in the first few chapters, I went online to
look at reviews.  It seems many others have noticed this also.  More
surprising, as I read the reviews for the other versions, including
CiscoPress, ExamCram, and Todd Lammle, this seems to apply to all of them.
What the hell is someone supposed to do to fill in the areas they are not
familiar with?  I am curious if you have an opinion as to which of these
guides is the most error free??

Brian

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: About Point2Point Links and Bandwidth

2001-03-11 Thread David A. Lauer



Along the same line, point-to-point links can be configured for HDLC
(default), PPP, other encapsulation.  What are the benefits / reasons to
configure one type of encap. versus the other?


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, March 09, 2001 4:21 AM
To: '[EMAIL PROTECTED]'
Subject: About Point2Point Links and Bandwidth


Hello everyone.

I have a question about layer 2 encap. for WAN Point-to-Point links (PPP,
HDCLC, SDLC).

Are all of them full-duplex? If the question is yes, does this mean that if
I have an E1 connection (for instance) with a carrier I can say I have
2Mbps for inbound traffic and 2Mbps for outbound?

Thanks in advance.

Juanjo Romero.
CCNA/DA

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Serial port Full Duplex or Half duplex?

2001-03-08 Thread David A. Lauer


My understanding is that serial is full duplex.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Kiran Kumar M
Sent: Thursday, March 08, 2001 1:57 PM
To: [EMAIL PROTECTED]
Subject: Serial port Full Duplex or Half duplex?



Hi,

Can anyone tell me In cisco routers, serial interface with v.35 will work
in Full Deuplex or Half Duplex?

Thanks,
Kiran


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IP Address Syntax

2001-03-08 Thread David A. Lauer


Is it CIDR or VLSM?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Larry Lamb
Sent: Thursday, March 08, 2001 9:38 PM
To: [EMAIL PROTECTED]
Subject: Re: IP Address Syntax


/24 is a CIDR notation.  It means that 24 bits are masked leaving 8 bits for
host addressing.  In this case you'd have 192.35.3.0-255 with 0 being the
NetID, 255 being the broadcast ID, and 1-254 being available for hosts.

"Dennis" wrote in message 989jdk$ths$[EMAIL PROTECTED]...
I would like to know what the " /24 " at the end of this ip address means...
192.35.3.240/24

tai


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IP Address Syntax

2001-03-08 Thread David A. Lauer


it means the ip address should be read in the context of a 24 bit subnet
mask (255.255.255.0)

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Dennis
Sent: Thursday, March 08, 2001 9:33 PM
To: [EMAIL PROTECTED]
Subject: IP Address Syntax


I would like to know what the " /24 " at the end of this ip address means...
192.35.3.240/24

tai


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]