RE: Access list question [7:36124]

2002-02-21 Thread David Jones

Justin,

This is typically used in an Internet/NAT situation where you are allowing
something from the Internet to come back in, only if it's a reply to a
request that originated from inside your network.  For instance, with a
router connected to the Internet, you typically want an access-list applied
to your Internet-facing port that denies incoming traffic, as you don't want
them trying to walk all over your router or network.  However, this same
access list will drop valid replies to requests from clients inside your
network, i.e. http replies, etc.

With the 'established' option, you can tell the router with access lists
"drop everything inbound from the Internet, except replies to requests made
from inside my network".

Typically, people do this because they don't want to pay for a firewall, but
this isn't the best thing to do.  If you need to set this up for someone for
Internet access, you need to dig a little deeper into it because if my
memory serves me right, this command may or may not work with UDP traffic
and only TCP traffic.  I'm not sure and might be totally wrong, so you need
to check.

Hope this helps,

Dave


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36127&t=36124
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: access to AUX port [7:20364]

2001-09-20 Thread David Jones

I don't think you need any special config on the aux port.  Hook an external
modem to it with the cisco rollover cable, just like a console port, and you
should be in business.  Use something like Hyperterminal to access it, set
Hyperterminal to 9600/8/none/1.

Dave


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=20586&t=20364
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Router IP Question [7:20419]

2001-09-20 Thread David Jones

Sure can.  Just use static nat for your internal devices that you want the
outside to reach.  Then set your mx and other records to point to that
outside ip address.  I would highly suggest, if you are going to put a
router on your dsl line, to put some strong access-lists on the router.

Dave


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=20584&t=20419
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: T1 Router question [7:20460]

2001-09-20 Thread David Jones

If you're using routing protocols, like EIGRP, you can simply set the
bandwidth statements on both interfaces to be the same and as long as the
destination is reachable via both T's, it will automagically load balance,
on a per destination basis by default.  You can do a 'no ip route-cache' on
the serial interfaces for it to do per packet load balancing.

If you just want to use it for redundancy, you can use static routes and
just assign a higher cost to the second T1 route, but if you're paying for 2
T's , you might as well use them.

Dave


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=20582&t=20460
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VPN Client 3.0 Through Watchguard [7:20461]

2001-09-20 Thread David Jones

Don,

I have installed and configured quite a few WG FB's where I last worked. 
Where I work now, we setup a Cisco VPN 3000 concentrator for customers to
connect to us over the Internet.  One customer has a Watchguard and was
unable to connect.  We obtained a temporary FB II for testing and could not
get it to fully work.  We were able to establish a connection, but within a
few seconds, it would drop.

You do not need TCP 50 and 51, what is needed is protocol 50 and 51.  I was
not able to find the ability in the WG to allow these, only tcp/udp port
numbers.  You do need some tcp/udp port numbers as well as the protocol
numbers.

Last I had heard, WG did not have a resolution to this.  It is something
with their firewall.

Dave


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=20581&t=20461
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: subinterfaces

2000-09-01 Thread David Jones
Title: RE: subinterfaces



You 
have to have the IP Plus version of your IOS.  They have that in a few 
flavors of 11.2 or you can go with 12.  Just make sure you note the 
requirements of flash and ram, as you may need to add some of 
both.
 
Dave

  -Original Message-From: Nova Rich 
  [mailto:[EMAIL PROTECTED]]Sent: Friday, September 01, 2000 1:05 
  PMTo: '[EMAIL PROTECTED]'Subject: RE: 
  subinterfaces
  Thanx guys for the help. The "secondary" command at 
  the end was the problem. 
  But now I realize that the Cisco 1610 with IOS 11.2 
  doesn't support NAT. Does anyone know if you can do NAT on a 1600 and if, so 
  which ver. IOS?
  NovaRich 


RE: Cast yourself on the Net

2000-09-01 Thread David Jones

1 - This isn't a job posting board or advertisement area.  Find somewhere
else.
2 - Out of curiosity, I went to your site.  Couldn't find any kind of jobs
anywhere, with keywords such as "cisco", "network", "microsoft".  We don't
want your advertisements, especially to a site with no information.

My $.02

Dave

-Original Message-
From: IndiaRediff.Com [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 01, 2000 9:48 AM
To: [EMAIL PROTECTED]
Subject: Cast yourself on the Net


JOB HUNTING MADE EASIER AND MUCH MORE EFFECTIVE...
... BENEFICIAL TO BOTH EMPLOYERS AND POTENTIAL EMPLOYEES.

To make the most of this opportunity, visit the first of its own kind Human
Resource Portal - IndiaRediff.Com.

If you are unemployed or scouting around for better prospects, here is an
ideal medium to cast yourself on the Net.  IndiaRediff.Com makes it the
easiest thing in the world to find a job of your style.  Now no more
newspaper markings, retyping the resume and shrugging all the way with the
hectic routine of posting and waiting.  Everything is done for you in just
one go!  All you have to do is to visit the site http://www.IndiaRediff.Com

If you are an employer, searching for a dedicated and appropriate candidate
with most potential for your company, IndiaRediff.Com does it for you in the
most subtle and professional way.  Now you can cut down your sky scrapping
day-to-day expenses for advertising by simply registering yourself at
http://www.IndiaRediff.Com and thus accessing thousands of Resumes just
according to your choice. 

So don't wait for your accountant to present you the balance sheet for
expenses made during the process of recruitment or your secretary to manage
or mismanage the hectic routine, just recruit an employee while sitting at
your home or your work-desk through IndiaRediff.Com without any hustle and
bustle.

GET READY TO SHOOT OFF - YOU PROBABLY WON'T HAVE TO REMAIN
JOBLESS/EMPLOYEELESS IN CYBERSPACE FOR VERY LONG.


Remember : http://www.IndiaRediff.Com : It's FREE!!
---
If you conside this mail as spam, 
we apologize for inconvenience.
Please send a blank mail as reply 
to unsubscribe from list.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: NAT WITHIN An ETHERNET INTERFACE.

2000-09-01 Thread David Jones

This isn't a tough one!  Sorry for the long e-mail, but check out the
attached config.  It has been sanitized.

Building configuration...
 
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname ROUTER
!
enable secret 
!
ip subnet-zero
no ip finger
!
!
!
interface Ethernet0
 ip address 2.11.215.1 255.255.255.192 secondary
 ip address 192.168.20.1 255.255.255.0
 no ip directed-broadcast
 ip nat inside
!
interface Serial0
 bandwidth 384
 no ip address
 no ip directed-broadcast
 encapsulation frame-relay IETF
!
interface Serial0.16 point-to-point
 description
 ip address 192.168.26.2 255.255.255.0
 no ip directed-broadcast
 ip nat outside
 frame-relay interface-dlci 16
!
interface Serial1
 no ip address
 no ip directed-broadcast
 shutdown
!
ip nat pool ROUTER 2.11.215.2 2.11.215.2 netmask 255.255.255.192
ip nat inside source list 1 pool ROUTER overload
ip nat inside source static 192.168.20.12 2.11.215.6
ip nat inside source static 192.168.20.2 2.11.215.3
ip nat inside source static 192.168.20.3 2.11.215.4
ip nat inside source static 192.168.20.4 2.11.215.5
ip nat inside source static 192.168.20.22 2.11.215.7
ip nat inside source static 192.168.20.166 2.11.215.8
ip nat inside source static 192.168.20.206 2.11.215.9
ip nat inside source static 192.168.20.121 2.11.215.10
ip nat inside source static 192.168.20.150 2.11.215.11
ip nat inside source static 192.168.20.151 2.11.215.12
ip nat inside source static 192.168.20.154 2.11.215.13
ip nat inside source static 192.168.20.155 2.11.215.14
ip nat inside source static 192.168.20.157 2.11.215.15
ip nat inside source static 192.168.20.158 2.11.215.16
ip nat inside source static 192.168.20.159 2.11.215.17
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0.16
!
access-list 1 deny   192.168.26.2
access-list 1 deny   192.168.20.10
access-list 1 deny   192.168.20.1
access-list 1 permit any
!
line con 0
 login
 transport input none
line 1 8
line aux 0
line vty 0 4
 login
!
end
 

-Original Message-
From: CiscoDiety [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 01, 2000 10:14 AM
To: andrew lennon; 'Erick B.'; 'Groupstudy Cisco'
Subject: Re: NAT WITHIN An ETHERNET INTERFACE.


Configuring IP routing on a LAN subinterface is only allowed if that
subinterface is already configured as part of an IEEE 802.10, IEEE 802.1Q,
or ISL vLAN.

So, unless you have it in a switched environment, you're out of luck.



Clayton Dukes
Internetwork Solutions Engineer
Internetwork Management Engineer
Thrupoint, Inc.
CCNA, CCDA, CCDP, CCNP
SunCSA, Etc.




- Original Message -
From: "andrew lennon" <[EMAIL PROTECTED]>
To: "'Erick B.'" <[EMAIL PROTECTED]>; "'Groupstudy Cisco'"
<[EMAIL PROTECTED]>
Sent: Friday, September 01, 2000 9:01 AM
Subject: RE: NAT WITHIN An ETHERNET INTERFACE.


> have you tried subinterfaces ?
>
> Andy Lennon
> CCNP/DP MCSE
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Erick B.
> Sent: 01 September 2000 06:29
> To: [EMAIL PROTECTED]; Groupstudy Cisco
> Subject: Re: NAT WITHIN An ETHERNET INTERFACE.
>
>
>
> Each cisco interface can only be inside or outside,
> not both. Looks like you'll have to get a 2nd ethernet
> for your 2600.
>
> --- [EMAIL PROTECTED] wrote:
> > Hi,
> > I have an Ethernet Network with 2 ips.
> > One ip is Internet IP. The other is PRIVATE ip.
> > I want the machines with the private ip\'s also to
> > browse without the use of a proxy server.
> > is it possible to implement this is
> > cisco NAT or anyother service.
> >
> > The cisco IOS version is 11.3 and the router is
> > cisco 2600
> > model with a single ethernet port.
> >
> >
> > regards
> >
> >
> >
> >
> >
> -
> > This mail sent through  http://www.sify.com
> >
> > ___
> > UPDATED Posting Guidelines:
> > http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
>
>
> __
> Do You Yahoo!?
> Yahoo! Mail - Free email you can access from anywhere!
> http://mail.yahoo.com/
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://ww

RE: getting rid of broadcast storm on 5500

2000-08-31 Thread David Jones

First thing I would try is to see if you can shut off the unnecessary
protocols.  Print servers do that a lot too.  I had a customer recently who
was experiencing poor network performance and I found an Intel print server
that was pumping out about 10,000 IPX RIP packets a minute.  It wasn't
servicing any Netware queues so I removed IPX from it.

Dave

-Original Message-
From: Dost [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 31, 2000 3:10 AM
To: [EMAIL PROTECTED]
Subject: getting rid of broadcast storm on 5500


Hello everyone:

We got 2 catalyst 5500 serving 1500 nodes. We got old WANG system which
sends all protocol traffic including banyan, netbuie, ipx etc. We experience
broadcast
storm at least couple times a day and network load hits the sky.
I am also certain that it's coming from WANG system and wondering how do I
prevent it.
Thanks in advance.

Dost


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: permanent ISDN connection

2000-08-29 Thread David Jones

You could probably use one of those "tickler" programs that sometimes you
have to do if your dialup ISP likes to drop you when there's been no
activity.

Dave

-Original Message-
From: Miller, Nathan (AZ15) [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 29, 2000 1:48 PM
To: Rue Barb the Tangled; [EMAIL PROTECTED]
Subject: RE: permanent ISDN connection


I am doing this to an ISP.  I have turned up NTP which sends an
"interesting" packet every 60 seconds.  This has worked fairly well for me
and the load imposed on the router and circuit is minimal.
Nathan Miller

-Original Message-
From: Rue Barb the Tangled [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 29, 2000 7:44 AM
To: [EMAIL PROTECTED]
Subject: permanent ISDN connection


quick question - We're setting up a temp. ISDN connection and the powers 
that be want a PERMANENT (not DDR) connection on a Cisco 2500 (ios 11.2)

I've got a BRI and Dialer setup (which also aren't working, but that's 
another story) - is there a default - like Dialer idle-timeout 0 that will 
keep an ISDN connection up in a permanent state for a few weeks?

I know it doesn't make sense, but they're paying for it, so no skin off my 
nose.

CA
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VLAN's

2000-08-29 Thread David Jones

My understanding is... If you're going to have multiple vlan's, you will
typically have different subnets.  In order for one vlan to talk to another,
a router has to be involved.  You can use a Catalyst 5000, 6000, etc. with
an RSM or a router with multiple ethernet ports, each configured for its
appropriate subnet.

HTH

Dave

-Original Message-
From: sujar khmar [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 29, 2000 2:56 PM
To: [EMAIL PROTECTED]
Subject: VLAN's


Group,
I have a catalyst 3524 switch in my practice lab set up with four vlans
(1-4).  One port is a member  of all vlans and that is the router port.  In
what I have learned you should be able to be a node on vlan 2 and be able to
go out the vlan2 port on the switch to the router and back to the vlan 4
port (or any other vlan for that matter)  and reach a node on vlan 4.  I
said should be able to because it doesn't work that way right now for me.  I
can see every node on the network except the nodes on vlan 1, 3-4.  I have
deduced that it isn't being routed back into the appropriate port.  All
these networks are on the same subnet, but since it's not a 5000 so I can't
assign a different subnet.
Am I way off base here?  My question really is how can I route vlan 1
back to vlan 2 via one ethernet port on the router back to the other vlans.


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Aironet 340 Series

2000-08-29 Thread David Jones

I have installed a couple of them.  They're pretty easy to setup and get
running.  Just realize, that the max you're going to get is around 6mbps.
Haven't done encryption yet.  I went to a free "training" session with Cisco
and unfortunately, they didn't have the equipment setup ahead of time and
the engineer kept having problems getting encryption working.  It was quite
interesting.  Make sure you get their Excel spreadsheet on calculating
distances and which antennaes you would require, etc.  

Dave

-Original Message-
From: Pete [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 28, 2000 8:15 PM
To: Cisco@groupstudy. com (E-mail)
Subject: Aironet 340 Series 


Has anyone worked with these wireless products? If so what did your think?

Sincerely,
Peter Kurdziel 
CCNA,MCSE,MCP+I


NetZero Free Internet Access and Email_
Download Now http://www.netzero.net/download/index.html
Request a CDROM  1-800-333-3633
___

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Internal CSU

2000-08-25 Thread David Jones

The up/down means the serial interface sees carrier but the protocol is
down.  Make sure you have the encapsulation specified correctly.  Also, make
sure that you have specified the correct channels for the T1, i.e if you're
only using a few of them.

HTH

Dave

-Original Message-
From: Steve Smith [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 25, 2000 11:45 AM
To: 'Mike Baker'; [EMAIL PROTECTED]
Subject: RE: Internal CSU


If your LP and CD light are green you are cool. Look at the manual that came
with it it tells what each light means.
Use the command to put your interface in loop-back. If the LP light turns
yellow and the CD stays green your card is fine.

Regards,
Steve
-Original Message-
From: Mike Baker [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 25, 2000 9:15 AM
To: [EMAIL PROTECTED]
Subject: Internal CSU



I can't find any online help for troubleshooting Cisco's internal CSUs.

I have two routers, one on each end of a T1 circuit.  Each router has a T1
WIC
in it.

The interfaces are UP DOWN.  If I turn on the loopback button on the remote
router the local end comes UP UP.  Both routers have keepalives enables and
the
circuit has been verified to be B8Zs all the way through.  The WICs are set
to
their default value.  I also tried adding clocking on one end - no luck.

Any ideas?


Michael K. Baker
Telecom Network Analyst

ALLTEL Information Services
2000 Highland Road
Twinsburg, Ohio 44087
330-963-1648

www.alltel.com
INIHGROBMALATNAWI

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: $13,300 for 5 months

2000-08-23 Thread David Jones

Everything I have done, has been self study and I always pass my tests, not
with flying colors, but I do it.  I wouldn't mind classroom training simply
because of time restraints.  I have a family and between work and home, I
get very little time to study.  It typically takes me a month to a month and
a half to study enough to pass a test.  And that's staying up late every
night with my wife going to bed without me.

My $.02

Dave
-Original Message-
From: Dale Holmes [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 23, 2000 4:31 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: $13,300 for 5 months



NO training is worth the money. NONE. Period.

BUT - many people cannot do it on thier own - they need training, and so 
they must pay the price. In any given class, you have a collection of people

who cannot do it alone (and one or two who probably could have if they had 
the confidence). Out of those, there are several who not only cannot do it 
alone, they simply cannot do it. And they won't do it. AND they will blame 
it on the training center. No doubt about it.

Some training centers are excellent and others are, well... not excellent. 
The same can be said of the students. I never recommend training to people, 
only self study. But if you lack the confidence to do it on your own, 
training might be the answer. It is a crapshoot... some win, many lose.

One thing is certain though, if they do nothing then they will certainly get

nothing in return.

My 2 cents...

Dale
[=`)

>From: "Croyle, James" <[EMAIL PROTECTED]>
>Reply-To: "Croyle, James" <[EMAIL PROTECTED]>
>To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
>Subject: RE: $13,300 for 5 months
>Date: Wed, 23 Aug 2000 16:06:12 -0400
>
>This is going to evoke some flames, especially if The Chubb Institute is
>reading this... So send them privately as to not waste bandwidth.  I went 
>to
>The Chubb Institute last year from February to June, and during that 
>period,
>got my MSCE, CNA, A+, and did the CCNA on my own.  Out of the 15 in my
>class, 6 of us got the whole MSCE, and no one got all the certs I did.  I
>gave the instructor the notes that I had gathered from my reading and 
>taking
>the test.  Unless The Chubb Institute has changed their curriculum, there 
>is
>no CCNA course there.  I would have him verify that the person he talked
>with knows the difference between CCNA, and CNA.  In addition, if I had it
>over, I would have taken my 10K and bought 3 computers, NT Server, NT
>Workstation, Win 95, and a router and switch or two (low end) and done it
>all myself.  Hindsight is 20/20 they say.  If he is a self starter, and not
>afraid to talk to/ask others when he is stuck, he will get an immesurable
>amount of better experience from building it himself and doing the 
>learning.
>I have not recommended anyone of my collegues to attend Chubb either full 
>or
>part time, that should say something.
>
>IMVHO,
>
>Jim Croyle
>
>-Original Message-
>From: Marshal Schoener [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, August 23, 2000 3:33 PM
>To: 'Rah Sta'; [EMAIL PROTECTED]
>Subject: RE: $13,300 for 5 months
>
>
>In my opinion, 5 months is enough time to pass those 5 tests!!!
>But, that's just my opinion :-)
>I know some people that went to CHUBBS, and liked it.
>   -Marshal
>
>-Original Message-
>From: Rah Sta [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, August 23, 2000 12:09 PM
>To: [EMAIL PROTECTED]
>Subject: $13,300 for 5 months
>
>
>To all,
>
>I have a friend who wants to get into networking. He plans on taking a 5
>month networking course at CHUBBS. I told him he's crazy. He said that they
>will give him the skills he need to PASS 4 Microsoft exam(MCSE) and CCNA. I
>told him that impossible, especially for $13,500. He lives in the New
>York/New Jersey area. I know there are better courses out there. Does any
>one have any suggestion? He has $13,500 to spend.
>
>
>Raheem
>
>Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
Get Your Private, Free E-mail from MSN Hotmail 

RE: How to pronounce? router

2000-08-23 Thread David Jones

I have a feeling this is going to start another thread like the "Sysco"
cert. did :)

-Original Message-
From: Dale Holmes [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 23, 2000 10:25 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: How to pronounce? router


Well, it's spelled "router", but it's pronounced "Throat wobbler 
mangrove"...

But soon it will be pronounced everywhere as: "Layer 3 switch"

Heheheh

Dale
[=`)

>From: Ole Drews Jensen <[EMAIL PROTECTED]>
>Reply-To: Ole Drews Jensen <[EMAIL PROTECTED]>
>To: "'Ajaz Nawaz'" <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
>Subject: RE: How to pronounce? router
>Date: Wed, 23 Aug 2000 08:50:20 -0500
>
>Take a look here:
>
>http://www.dictionary.com/cgi-bin/dict.pl?term=router
>
>The funny thing is that it can be pronounced different ways.
>
>I, being from Denmark, have used the word both there and in Houston, Texas
>where I have lived for the last four years, and both places I have always
>used and heard it pronounced "rau-dor".
>
>I have never heard it pronounced "roo-ter" - not even at Hooters :-)
>
>Hth,
>
>Ole
>
>
>  Ole Drews Jensen
>  Systems Network Manager
>  CCNA, MCSE, MCP+I
>  RWR Enterprises, Inc.
>  [EMAIL PROTECTED]
>
>
>-Original Message-
>From: Ajaz Nawaz [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, August 23, 2000 8:14 AM
>To: [EMAIL PROTECTED]
>Subject: Re: How to pronounce? router
>
>
>How should one pronounce - ROUTER
>
>In England most say - rooter
>
>I know in the US most say - rau ter
>
>
>
>Paul Borghese wrote:
>
> > In Boston it is:
> >
> >Tkaas
> >
> > In New York it is:
> >
> >"Who wants to know?"
> >
> > In New Jersey it is pronounced TACACS but you need to give not just your
>Username and Password but also what exit.
> >
> > In Georgia it is pronounced Tacacs but you need to add a "ya' all" to 
>the
>end and the password is always peach.
> >
> > In San Francisco it is pronounced:
> >
> > Tacacs.com
> >
> > Paul Borghese
> >
> > ""Cthulu, CCIE Candidate"" <[EMAIL PROTECTED]> wrote in 
>message
>8nvemd$p0t$[EMAIL PROTECTED]">news:8nvemd$p0t$[EMAIL PROTECTED]...
> > > Here's the way new Texans pronounce it...
> > >
> > >
> > > Tacacs = 'TIE- kax"
> > >
> > > RADIUS = "Ray Dee Us"
> > >
> > > HTH,
> > >
> > > Charles
> > >
> > >
> > > ""Victor Jia"" <[EMAIL PROTECTED]> wrote in message
> > > 8nvea4$noh$[EMAIL PROTECTED]">news:8nvea4$noh$[EMAIL PROTECTED]...
> > > > Can anyone tell how to pronounce the words TACACS, RADIUS? Anywhere
>can I
> > > > find the pronounciation of all those abbreviations?
> > > >
> > > > Thanks.
> > > >
> > > >
> > > > ___
> > > > UPDATED Posting Guidelines: 
>http://www.groupstudy.com/list/guide.html
> > > > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > > > Report misconduct and Nondisclosure violations to 
>[EMAIL PROTECTED]
> > > > ---
> > >
> > >
> > > ___
> > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > > ---
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > ---
>
>
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ip classless ?

2000-08-23 Thread David Jones

Casey is right.  I've setup quite a few Internet connections where no
routing protocols are used and in order to route correctly when using a
supernetted class A or other, you must use ip classless or you ain't goin'
nowhere.

Dave

-Original Message-
From: whatshakin [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 23, 2000 3:27 AM
To: [EMAIL PROTECTED]
Subject: Re: ip classless ?


This is wrong amigo.

The 'ip classless' command is used when configuring default routes.  It is
used because when you create a default route on a router it gets advertised
as 0.0.0.0 in addition to the default network.   When a router recieves the
advertised default route it will forward packets to a destination which does
not appear in its routing table.  Specifically you need to use the 'ip
classless' command when using IGRP and EIGRP because they only advertise the
network you configured on them.  If you do not use this command to enable
the default path to be used for non-connected subnets of the same major
classful network, the packets will be dropped at the router.


- Original Message -
From: Casey Fahey <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, August 22, 2000 8:48 PM
Subject: Re: ip classless ?


> Ah yes, classful addressing.  Blast from the past...
>
>   I am assuming you are aware of the classes of IP addresses, and how a
> class A address has a first octet of 1-127, etc..
>
> Well, what IP Classless means is that the router *does not* assume that an
> IP address with a first octet of 1-126 is a /8 address, 128-191 a /16
> address, 192-223 a /24 address and so forth.
>
> Sound a bit archaic?  Hmm...  So are IGRP and RIP.  ; )
>
> Your question is kind of tough to answer directly, since you do not need
to
> use IP Classless unless you need to break, say a 10.x.x.x network into /24
> subnets.  If you don't include IP Classless, the router will assume the
mask
> is instead /8 and things will get weird...
>
> HTH,
>
> Casey
>
> >From: "Yee, Jason" <[EMAIL PROTECTED]>
> >Reply-To: "Yee, Jason" <[EMAIL PROTECTED]>
> >To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> >Subject: ip classless ?
> >Date: Tue, 22 Aug 2000 22:07:51 -0500
> >
> >hi ,
> >
> >Anyone knows why when we use RIP or IGRP routing protocols and we have a
> >default network command entered , we need to include ip classless?
> >
> >Any form of input will be greatly appreciated
> >
> >
> >thanks
> >
> >
> >Jason
> >
> >___
> >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> >FAQ, list archives, and subscription info: http://www.groupstudy.com
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: how to capture the packet in the lan

2000-08-22 Thread David Jones



Pick a 
port on the switch that you are going to plug your sniffer into.  Get into 
the switch (telnet, console), configuration mode, go to the switch port your 
sniffer's on (int fa0/4) and type in port monitor fa0/5, etc. to monitor the 
ports you want to.
 
Dave

  -Original Message-From: gary 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 21, 2000 11:26 
  PMTo: [EMAIL PROTECTED]Subject: how to capture the 
  packet in the lan
  hi guys:
   
  I have installed a sniffer in my lan,i want to capture all 
  the packet in the lan
  what will i do on my catalyst 
3504


RE: I am now CCNP 2.0

2000-08-17 Thread David Jones

Thanks for the insight.

Dave

-Original Message-
From: McCallum, Robert [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 17, 2000 1:07 PM
To: 'wind'; [EMAIL PROTECTED]
Subject: RE: I am now CCNP 2.0


Only through my own experience, but the CCDA is a complete doddle.  It only
tasks your common sense.  The hard part about it is reading the damn case
studies over and over and over again, so much so that you end up getting
peed off with them and guessing the most correct answer.  The CID (CCDP)
exam however is another matter.  As far as I am concerned this is the
hardest exam you will sit in the CCDP / CCNP qualifications.  The sections
are wide and varied i.e.

Desktop Protocols 25% worth.
Wan Design 25% worth
TCPIP design 25% worth.
SNA design around 8 questions.
Stratacom around 2 - 5 questions.
The rest is made up of piddly little areas (I cant remember exactly).  The
problem is not that the content is exactly unbelievably hard it is that you
have to approach the exam with common sense rather than technical.  Most
questions have at least 2 if not 3 correct answers BUT only 1 is the most
correct answer.  One bit of advice is to treat this exam with respect.

Hope this helps.

RMcC

-Original Message-
From: wind [mailto:[EMAIL PROTECTED]]
Sent: 17 August 2000 14:00
To: [EMAIL PROTECTED]
Subject: I am now CCNP 2.0


Hi all;

Thanks for the support of this group, I passed exam today.
Now I am going to working toward to achieve CCDP.  Anyone can please provide
me
any infomation about CCDA and CID exam.

   Thanks in advance.

Cheers
Vincent Chong
Network Engineer
CCNP, CNA, CLS, MCSE



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BGP & BSCN

2000-08-17 Thread David Jones

It appears that the BSCN part of CCNP is the only course that focuses on
BGP.  According to the course outline on Cisco's site anyway.  Can anyone
confirm that?

Dave

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Figure this one out!!! (telco was wrong)

2000-08-16 Thread David Jones

Understand that cir is rated in bits per second, so your 16k cir is 16,000
bits per second, that's 2,000 bytes per second, 120,000 bytes per minute, so
they were WAY off!!

Dave

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 4:20 PM
To: [EMAIL PROTECTED]
Subject: Re: Figure this one out!!! (telco was wrong)


Hey group,
Thanks for the help I got from you. We wound up getting on the phone
with telco and worked through it with them. They said that they were seeing
140% overutilization for the CIR on that link and when we would look at our
show command we saw, for 3 minutes 16,000 bytes sent. Our CIR is 16K PER
SECOND! We were doing 16k for 3 minutes and those geniuses at telco, who
were watching the link at the same time we were, said that it was at 140%
over. How does that add up??? Well I've learned something very valuable in
my first week of work in this field...NEVER TRUST, LISTEN TO, REASON WITH,
OR TRY TO UNDERSTAND...who?...you guessed it...TELCO!!! By the way, after
about 20 minutes he says, "Oh, wait a minute...now I'm seeing something
strange from that device...I'll have to re-route this one" So tickets
closed. Thanks for the help again guys. I'll wait a little longer before
posting these for now on. See-ya

Mark Z. ~ CCNA,CCDA
Unisys, e-@ction net manag serv

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Figure this one out!!! (damn telco)

2000-08-16 Thread David Jones

Make sure you don't have duplicated routes on either end.  Look at your
interfaces to make sure your not dropping packets there, or getting CRC's,
runts, etc.

HTH

Dave

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 3:35 PM
To: [EMAIL PROTECTED]
Subject: Figure this one out!!! (damn telco)


Hey Group,
 Got another issue for you all to give opinions on. We have a client's
router attached to the telco's FR cloud. We seem to have a problem with
strickly the ping command. When we ping an IP in the telco's net, we get
dropped packets. Maybe 60% will go through. Then maybe 100%, and so on. When
other traffic goes through the line everything is normal. The telco said
that there is not a problem on their side and they don't see anything wrong
(as usual). We have looked at everything, ACL's, CIR's, DE bits. We cant
figure why this is happening and why packets are being dropped, especially
at the low rate of traffic that is being sent. It almost seems like when you
grab a water hose and bend it to stop the water from flowing and then let it
go the let the water flow again...strange stuff. What do you all think.

Mark Z ~ CCNA, CCDA
Unisys e-@ction net manag. services

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN Security

2000-08-16 Thread David Jones

Unplug the phone line until they call you?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 10:13 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: ISDN Security



  Hello all,

   Can anyone tell me if what I'm trying to do is possible
I am setting up a point to point ISDN link between my organisation 
and a third party company that needs dialin access into our network for 
application support, but I am looking for a way if possible not to let the 
third party dialin without first informing us. I can't put in a time 
restriction because we have a 24hours operations, so they might want to 
dialin any time.


Thanks in advance
Michael
   


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MY 1ST JOB OFFER

2000-08-16 Thread David Jones

I believe in the word-of-mouth as well.  I've been hunting the job boards
and not getting much.  A friend referred me to someone, actually had an
interview with a technical person and now I'm getting an offer.  They didn't
care much for my certifications, although that helps when discussing salary.
They liked my experience.  Lord knows how long it would be until I got an
offer from any apps. I sent out via the job boards.

Dave
CCNA,CCDA,CNA,MCP..

-Original Message-
From: Timothy Harkin [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 8:33 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: MY 1ST JOB OFFER


Finding ways to get experience can be a HUGE help.  I changed careers six 
months ago (from 'traditional' engineering).  Prior to taking the leap, I 
got my MCSE and had started towards my CCNA.  I feel that the certs helped 
me get interviews.  However, I NEVER claimed to be an expert in anything - I

just stated my belief that having the cert means that I have a certain 
minimum level of knowledge.

I recieved job offers because I had found experience on a volunteer basis.  
I set up a network for my church and for a local community center.  I also 
performed other non-networking tasks for non-profits so I could have a more 
rounded IT resume (i.e., I set up an Access database for a local parks 
conservatory group to track their donors).

I also found that the best way to get job offers is through word-of-mouth.  
Newspapers and job boards only produce jobs that would put me at a salary I 
was making ten years ago.  I did take a pay cut from my old salary, but I 
found a job in a small investment firm where I will not have to spend six 
months just doing user accounts or some other drudgery.


From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: Re: MY 1ST JOB OFFER
Date: Tue, 15 Aug 2000 18:48:26 EDT

In a message dated 8/15/00 6:34:25 PM Eastern Daylight Time, [EMAIL PROTECTED]
writes:

<<  I mean imagine if you have your CCNA and no experience it is just like
  having no CCNA at all.  My response was appreciate the offer ,but I
  wouldn't take 15 to 20k less than the person sitting next to me with 1
  year experience and their CCNA...ANY THOUGHTS
   >>

 My thoughts are that you were wrong. You said that having your CCNA and
no experience is just like having no CCNA at all. Well if you didn't have 
the
CCNA then you wouldn't have gotten the call at all. If there was a person
without a CCNA but had a years worth of experience, he would probably know
more than a person who just got their CCNA without experience, actually I'm
sure of this. Your situation is like this: If you've been looking for a
position for more than a month now...you made a huge mistake. Remember, 
money
can come later...build your experience for now. Good luck and don't be 
greedy,

Mark Zabludovsky ~ CCNA, CCDA
UNISYS
e-@ction Remote Network Management Services
[EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: bootp config

2000-08-15 Thread David Jones

You may need to do a spanning-tree portfast on the port of the printer.
Without portfast turned on, the port doesn't actually start passing data
until spanning-tree has determined that the port is not going to create a
loop.  This will affect things like bootp, dhcp and logging into NT domains
on bootup.

HTH,

Dave

-Original Message-
From: Sites, Bob [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 15, 2000 3:57 PM
To: '[EMAIL PROTECTED]'
Subject: bootp config


Trying to configure an IBM 7913 coax/twinax for a printer using BootP from
out AIX UNIX server. For some reason we cannot get it to flow through our
C5509 and C5500 switches. Before we installed the switches, using purely
Cisco routers this was not a problem. Bootp is the only option to configure
these devises. Have tried BootP programs from a laptop but are not working
either. Could be the Win2000 conflicting with my old pgms. We have IP Helper
turned on pointing to the BootP server. Any ideas? 

Bob Sites
System Engineer, CCNA

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Testing the T1 line ...

2000-08-15 Thread David Jones
Title: RE: Testing the T1 line ...



Setup 
a server on each side of the T1 and install any kind of FTP service.  Push 
some huge files down/up and see what rates you're getting.  From a command 
prompt, when the ftp is done, it will tell you that it transferred the amount of 
data at a rate of kbytes per second.  Use this formula to make it 
mbitsps - =*8*1000/100.
 
hth
 
Dave

  -Original Message-From: Scott Folkedahl 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, August 15, 2000 3:00 
  PMTo: 'Bac Nguyen'; [EMAIL PROTECTED]Subject: RE: 
  Testing the T1 line ...
  Bac, 
  I've used a couple of websites...  ComputingCentral.com 
  and 2wire.com 
  You should run the tests a few times to get an average. 
  
  These aren't accurate tests...  There are FAQs about the 
  speed tests on computingcentral.com's web site. 
  Scott CCNA, MCSE+I 
   -Original Message- From: 
    Bac Nguyen [mailto:[EMAIL PROTECTED]] 
  Sent:   Tuesday, August 15, 2000 9:30 
  AM To: 
  [EMAIL PROTECTED] Subject:    Testing the T1 line 
  ... 
  Hi all, 
  Is there a way ( software, hardware device, or website ) that 
  you can run and measure the throughput of T1 line ? I 
  just have another T1 line installed and would like to 
  run some test to measure the "actual" throughput of 
  it. 
  TIA 
  ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html 
  FAQ, list archives, and subscription info: http://www.groupstudy.com 
  Report misconduct and Nondisclosure violations to 
  [EMAIL PROTECTED]   
   
  This message may be privileged, confidential and protected 
  from disclosure. If you are not the intended 
  recipient named above, any dissemination, distribution or copying of this communication is prohibited. If you 
  received this in error, please notify us 
  immediately and delete it from your computer and other records. Thank you. 
  Solutions Media, Inc.  760-496-7746, or email 
  [EMAIL PROTECTED] 


RE: 1600 startup-config

2000-08-15 Thread David Jones

Type wri mem.

-Original Message-
From: Fanglo MA [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 14, 2000 10:05 PM
To: [EMAIL PROTECTED]
Subject: 1600 startup-config


Dear group,

I have no experience with CISCO 1600 router. And current I got one from
ebay. When I try saving the configuration to NVRAM by command

copy run start

and then submit the reload command by which I expect the saved config will
be executed. To my surprise, the router return to no configuration and ask
for my setting!!

Can anyone give me some guidance?

Best regards,
Fanglo MA

>
est.net
>
22:36:44 -0400
>
22:36:44 -0400
>
>
>
1AEBD0090279A940B13BEF7@DSM-EXCH>
<009301c0032c$66728740$[EMAIL PROTECTED]>6991157 Xref:
groupstudy.c
> groupstudy.cisco:50671
>
[EMAIL PROTECTED]
>
networksix.com (Dave Hennen)
>
>
>
>
>
22:36:44 -0400
>
>
22:36:44 -0400
>
>
22:36:44 -0400

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Intermittent loss of connectivity

2000-08-15 Thread David Jones

You can check the interface of the router to see if it is getting carrier
transitions or dropping packets.  I ran into something similiar once at a
customer's.  I set up a new site for them and they supplied the ip
addresses.  Come to find out, the ethernet ip's they gave me for the new
site were in use somewhere else.  So now, we had two routes going two
different places for the same subnet.  Readdressed the new site and took out
the duplicate route.

Dave

-Original Message-
From: H.K Braimoh [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 15, 2000 6:04 AM
To: [EMAIL PROTECTED]
Subject: Intermittent loss of connectivity


Hi all, I am troubleshooting connectivity problems we have to one of our
sites. there is continuous flapping on the link. For every 5 or 6 ping
requests at least one or two times out. the sites are linked via FRA-ATM,
the router on site is a 2500, has anyone had a similar experience? or has
anyone got any suggestions on where to start troubleshooting?


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Ethernet Troubleshooting Woes

2000-08-10 Thread David Jones

The first thing I would suggest is don't assume too much.  Usually, when
you're getting alignment errors and CRC's on a Cisco switch, it means that
there is a mismatch between the switch port and the NIC's speed/duplex
settings.  Configure the switch port that the server is on and hardcode it
for speed/duplex settings.  Here's an example:
conf t
int fa0/1
speed 100
dup full

Try one thing at a time.  You would be amazed at what something so simple
can affect you.  

HTH

Dave

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 10, 2000 3:56 PM
To: [EMAIL PROTECTED]
Subject: Ethernet Troubleshooting Woes


Okay, I'm going completely out of my mind.  I am at the end of my rope with
this problem and I have no idea where to go from here.  Basically, I'm
begging for suggestions!

Several PCs at one of our branches are having difficulty running a certain
application, which uses IPX on 802.3 frames.  We are also running IP on this
LAN with arpa frames.  There is a file server and printer on this LAN, and
all IPX traffic is between the hosts and that file server.

We are have ZERO problems with IP traffic on this LAN.  I've been pinging
the tar out the hosts and they act perfectly normal, except for the file
server which had, at worst, a 98% success rate over time.

On our ethernet switch, we are seeing alignment errors and CRC errors coming
from the file server.  The cable has been replaced and we verified that it
is cat 5, but the problems still exist.  This is a new file server with a
new NIC.

Okay, the problem is that this particular application takes forever to run
from a desktop out in the building.  yet, if you bring that very PC back to
the room where the switch is, the application runs very quickly.  This led
us to believe that the cabling was bad.  However, if the cabling were bad,
why are we having no problems with IP traffic?  None at all!  That just
doesn't make any sense to me.

Granted, the cabling out to the desks is Cat 3 and this branch has had some
previous EMI problems in the room, but I just don't see how EMI could
selectively cause one application to fail without there being some
indication of problems with other applications.

I've considered replacing the switch, but the problem only happens when a PC
out in the main room uses the application, no matter what port it is
connected to.  Bring a PC back to the switch room and connect it to any port
and the program runs as advertised.  So, I'm not going to waste my time with
that.  I've also considered replacing the NIC in the server since we're
seeing errors coming from it, but that would not explain the problems we're
having, anyway, so that is probably pointless.

any ideas?  Our next step is to hire a very expensive data center design
company to go up there and check things out.  We've had electricians check
the room and they said they could find no obvious sources of EMI, even
though we know that it is prevalent there.

Help...please helpI'm dying here, and I'm quickly losing faith in my
troubleshooting skills!

TIA,
John





___
Say Bye to Slow Internet!
http://www.home.com/xinbox/signup.html

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: "no weighted fair-queue" ?

2000-08-10 Thread David Jones

You might also try a command like this:  priority-list 1 protocol ip high
tcp telnet

Dave

-Original Message-
From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 10, 2000 1:15 PM
To: 'Phil Barker'; cisco GroupStudy
Subject: RE: "no weighted fair-queue" ?


I haven't heard of a WFQ bug, but to my knowledge FIFO is no longer the
default queuring.

Hth,

Ole


 Ole Drews Jensen
 Systems Network Manager
 CCNA, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]


-Original Message-
From: Phil Barker [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 10, 2000 11:17 AM
To: cisco GroupStudy
Subject: "no weighted fair-queue" ?


Hi gang,
 I just spotted this in one of our configs, set on
all the Serial interfaces. I know this will default to
FIFO which I could do without, for obvious reasons.
i.e I need a good telnet response.
 Has anyone heard of a BUG in 11.2 series IOS in
WFQ whereby switching it off was a better option ?
I havn't myself, but I'm curious.

Regards,

Phil.




Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 2501 strange problems

2000-08-09 Thread David Jones

Sounds like it's having problems on power up with the flash and maybe going
into ROM mode.  Maybe try re-flashing the router and see if that helps.

Dave

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 09, 2000 5:29 PM
To: [EMAIL PROTECTED]
Subject: 2501 strange problems


Anybody,
   I am fairly new to this so bear with me. I couldn't find a solution from
the archives. I have a 2501 router that has worked well for me. I have two 
2501 routers the connect 2 subnets. The routers are connected back to back
w/ 
DB60 cable (since I use them for lab). Since each 2501 has only one
ethernet, 
I use router_a for one subnet, and router_b for another. This has worked 
fine. However, I
have been having problems with it lately. When I start router_b, I can't
ping across subnets. I telnet into router_b through the console and see
this:

What?
>

If I enter a command it reverts back to:

What?
>

However the enable command gives me something like this:

4: 4AFC4AFC  <>
8: 4AFC4AFC  <>

If I reboot (by turning router off/on) the I get the bootstrap routine. 
Everything seems OK and I can ping, etc. The hostname also shows up
correctly 
(router_b). But when I first power up (I shut down everything overnight), I 
get the WHAT? then just a ">". What's causing this...?

John C

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: NAT Problems

2000-08-09 Thread David Jones

It's possible there might be something "buggy" in the IOS version.  I know
we had a lot of problems with a 3640 and the first two IOS's we put on it.
Not this particular problem.  In the meantime, maybe try going into
configuration mode and type in "ip nat trans timeout ", the  meaning
seconds.  That way, any hung translations will automatically be cleared on
timeout.

HTH

Dave

-Original Message-
From: Tai Ngo [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 09, 2000 8:37 PM
To: [EMAIL PROTECTED]
Subject: NAT Problems


Hi All,

I am having problems using NAT on my Cisco 3620 router.  NAT translations
works fine but for some reason, the cpu utilization on my router starts
increasing to about 91% after a few days.  When access to the Internet gets
slow, I also notice that I have lots of dynamic address translation when I
do a "show ip nat stat", over 1000 active translation with dyanmic
translations being the majority and when my router is really slow, around
6000 dynamic translation.  When I do a "clear ip nat trans *", the router
returns to normal, cpu utilization also drops to around 10%.  Should I have
to do this every so often or am I missing something from my config file.  

I am currently running IOS 12.0(5) and have 48MB RAM on my router.

Any hints/tips would be greatly appreciated.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Preventing password recovery

2000-08-09 Thread David Jones

I believe there is a config-register command that will stop this from
happening.  In the 25xx series, the register is set to 0x2102.  There is
another one you can set it to to disable the break function.  Maybe search
CCO under password recovery.

HTH

Dave

-Original Message-
From: Mark Townley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 09, 2000 12:25 PM
To: Michael Fountain; [EMAIL PROTECTED]
Subject: Re: Preventing password recovery


At 12:08 9.8.2000, Michael Fountain wrote:
>We have a cisco router (1720) at a customers location.  The customer's 
>techs have used the password recovery procedure to get into the router and 
>look at the configs and change the passwords in them.
>
>Does anyone know how can we prevent the router from responding to a break 
>during boot?

how about:

no boot enable-break ???

Never tried it personally !

Mark.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: What is route map ?

2000-08-09 Thread David Jones

You can use in conjunction with access-lists to force traffic in a certain
direction.  For instance, I have a customer with a multiple ethernet port
router and a firewall on one of those ports.  I can use the route-map
statements along with access-lists to force certain traffic through the
firewall.

HTH

Dave

-Original Message-
From: Tapas Das [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 09, 2000 1:32 PM
To: [EMAIL PROTECTED]
Subject: What is route map ?


What is route map ?


Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: "You can call yourself and internetworking engineer when . . . ."

2000-08-08 Thread David Jones

Ooh Ben, been there done that :)

-Original Message-
From: Cbridgett [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 08, 2000 6:46 PM
To: Ben Lovegrove; [EMAIL PROTECTED]
Subject: RE: "You can call yourself and internetworking engineer when .
. . ."


Got one even better.

copy run testconfg
  Do you want to erase flash?
  Y

...ohhssh


oeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoe
oeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoe
oe
"...to hell with what other people think, I'm ridin' my own broom!" L. M.

Cynthia Bridgett, raised in SE DC
   and proud of it!
CCNA, MCSE, CNE, CNA, MCP, A+
oeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoe
oeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoeoe
oe



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Ben Lovegrove
Sent: Tuesday, August 08, 2000 3:20 AM
To: [EMAIL PROTECTED]
Subject: "You can call yourself and internetworking engineer when . . .
."


(tongue firmly in cheek)

I have this theory that you can call yourself and internetworking
engineer when . . . .

1.  You have run a debug command on a customer router while
investigating a performance problem, or perhaps a security issue, and
you have caused the CPU to exceed 100% and the router has hung/crashed.

2.  You have edited an ACL remotely and reapplied it only to find you
have blocked all traffic including telnet from your desk and you are
now locked out.

3.  In both of the above scenarios you have made up some story for the
Help Desk/1st Line Support and asked them to get the customer to reboot
the router, claiming that "a reboot may help the performance problem .
. blah . . blah"

4.  In each of points 1 & 2 the customer in question is a major account
that has threatened legal action against your company for failing to
maintain SLAs, or to close the account altogether.

Does this sound familiar to anyone?  Have you every felt that cold
feeling in the pit of your stomach when you entered a command and the
screen froze?  Did you blame hardware/software/customer/gremlins i.e.
anybody and anything but not yourself?

;-)

Ben



=
Ben Lovegrove, CCNP
Redspan Solutions Ltd
http://www.redspan.com
Cisco: Products, Training, Jobs, Study Guides, Resources.


Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Need recomendation

2000-08-08 Thread David Jones

I did this same thing but much cheaper.  I had a Xyplex terminal server.
Configured each port as needed and cabled to the various console ports.
Built a menu so I could telnet or dial into the terminal server and choose
which device I wanted to connect to.  Worked great.  You can do the same
thing with an Equinox terminal server, just another brand name.

Dave

-Original Message-
From: Patrick Stiever [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 08, 2000 12:31 PM
To: '[EMAIL PROTECTED]'
Subject: Need recomendation


Ladies and Gentleman,

I need another recommendation, I have about a dozen or so routers,
LocalDirectors, and Switches here at our HQ, I would like to buy something
like a 2509 router so I can hook them up from their console port to the
2509's async port.  That way I don't have to run back to the NOC with
laptop, cable, and  try to console in.  Basically, I need a info on what
piece of equipment would be best suited for this application.  Thanks again.

Patrick Stiever 
Communications Engineer 
24 Hour Fitness 
(760) 918 4459 
[EMAIL PROTECTED] 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 2-wire and 4-wire 56K DSU/CSU

2000-08-08 Thread David Jones

I believe that the built-in CSU/DSU on the 1602's will only support 56k.  If
you have a 64k circuit, you will need to buy a serial interface card and an
external 64k CSU/DSU.  Correct me if I'm wrong.

Dave

-Original Message-
From: Fanglo MA [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 07, 2000 11:51 PM
To: [EMAIL PROTECTED]
Subject: 2-wire and 4-wire 56K DSU/CSU


Dear group,

I get a 56DSU/CSU cisco router, however, my company connection to one
site by 64K leased line is a 2-wire connection to DSU/CSU. I search
cisco page and find that the default for the new router, it is 1602, is
for 4-wire connection. Would anyone show the way or URL for testing this
1602 with the two-wire connection?

Thanks for any advice.

Best regards,
Fanglo MA

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Editing ACL's

2000-08-07 Thread David Jones

Just depends on the access-list.  I've had to have a user reboot the router
for me ONCE.  I learned my lesson to check the list out before I make that
kind of change.

Dave

-Original Message-
From: McCallum, Robert [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 07, 2000 11:13 AM
To: 'David Jones'; 'STRAND Scott'; [EMAIL PROTECTED]
Subject: RE: Editing ACL's


I follow this rule all the time too.  BUT I have never been cut off when
deleting the existing access-list.  I do it remotely all the time!

-----Original Message-
From: David Jones [mailto:[EMAIL PROTECTED]]
Sent: 07 August 2000 15:46
To: 'STRAND Scott'; [EMAIL PROTECTED]
Subject: RE: Editing ACL's


Typically what I do, is do a wri t, copy the acl's to notepad, edit the
lines that I want to change, copy that to the clipboard, on the router, say
'no access-list xxx', then edit and paste.  Just keep in mind that if you
are accessing it remotely and removing the entire access-list will cut your
connection, you will either need to be local on the console either
physically or via modem.

Dave

-Original Message-
From: STRAND Scott [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 07, 2000 9:51 AM
To: [EMAIL PROTECTED]
Subject: Editing ACL's


Is it possible to edit only one line of an access list without removing the
entire ACL. I heard that it is possible now with having
to cut and paste. Can you advise.

Thanks,
Scott

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: SERIAL is UP, but no routes to destn

2000-08-07 Thread David Jones



Can 
you just use a static route and see if that has any affect?
 
Dave

  -Original Message-From: msasif 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, August 07, 2000 11:15 
  AMTo: [EMAIL PROTECTED]Subject: SERIAL is UP, but no 
  routes to destn
  HI,
  I have strange problem with one of my customer 
  router. The users in the branch will not be able to connect to the HO for 
  sometimes and when I checked the serial it shows (serial is up and line 
  protocol is up) but when I gave(show ip route) I could not see the branch n/w 
  subnet route, I could not be able to ping the ethernet ip address of the 
  branch from HO. When I gave shutdown and no shutdown at the HO serial, I can 
  see the branch subnet and the users can access the server. Iam using RIP. I 
  tried changing the keepalive to 5sec but no use.
   
  Is it h/w problem, but Iam getting this very 
  rarely(twice, sometime in a week). 
   
  thanks
   
  imran    



RE: PIX versus Firewall-1 comparison

2000-08-07 Thread David Jones

My understanding is there is some software that makes it much easier to
configure a PIX.  My company has an NFR on order now.  Will have to wait
until I get it to see how good it is.  I'll update this list after I test it
out.  Just FYI.

Dave

-Original Message-
From: Ben Lovegrove [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 07, 2000 10:48 AM
To: Phil Barker; cisco GroupStudy
Subject: Re: PIX versus Firewall-1 comparison


Phil,

I would imagine that the preference for Firewall-1 was expressed
because the administration of it is far more user friendly that a PIX. 
Admin of FW-1 can be carried out using a Windows GUI with all the rules
laid out in glorious technicolour, while admin of a PIX involves a CLI
(command line interface).

But then again if you're a die-hard Cisco engineer you might think that
Windows GUIs are a bit of a soft option, and that you prefer to do
things in raw CLI fashion.  

Regards,
Ben

--- Phil Barker <[EMAIL PROTECTED]> wrote: > Hi Gang,
> Does anyone know where I can get a decent white
> paper comparing these two firewall solutions from a
> neutral standpoint ?
> 
> I've been in a meeting recently where it has been
> claimed that we would always prefer Firewall-1 to PIX.
> 
> Would anyone like to comment technically why this
> should be ?
> 
> Regards,
> 
> Phil.
> 
> 
> 
> Do You Yahoo!?
> Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
> or your free @yahoo.ie address at http://mail.yahoo.ie
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


=
Ben Lovegrove, CCNP
Redspan Solutions Ltd
http://www.redspan.com
Cisco: Products, Training, Jobs, Study Guides, Resources.


Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Editing ACL's

2000-08-07 Thread David Jones

Typically what I do, is do a wri t, copy the acl's to notepad, edit the
lines that I want to change, copy that to the clipboard, on the router, say
'no access-list xxx', then edit and paste.  Just keep in mind that if you
are accessing it remotely and removing the entire access-list will cut your
connection, you will either need to be local on the console either
physically or via modem.

Dave

-Original Message-
From: STRAND Scott [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 07, 2000 9:51 AM
To: [EMAIL PROTECTED]
Subject: Editing ACL's


Is it possible to edit only one line of an access list without removing the
entire ACL. I heard that it is possible now with having
to cut and paste. Can you advise.

Thanks,
Scott

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IPX routing question.

2000-08-07 Thread David Jones

Each lan has to have its own IPX network number.  Then on the serial
interfaces of your routers (or subinterfaces), you have to have an ipx
network on those as well.  On the serial interfaces though, the ipx network
number has to be the SAME between two sites.  You also need to make sure
you're using the same frame format, i.e. novell-ether, sap (802.2 or
802.3)See below:

Site A, lan ipx 1234 Cisco Wan ipx 3456 --- Cisco Wan ipx 3456 -
Site B, lan ipx 7890

HTH,

Dave

-Original Message-
From: whatshakin [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 07, 2000 2:42 AM
To: [EMAIL PROTECTED]
Subject: Re: IPX routing question.


I guess your problem is that now the computers on one network cannot see
those on opposite network right?  Anyhow, Novell 3.X and 4.X require the
same identical EXTERNAL network numbers.  By the looks of what you have
given us you need to revert the 887 network back to 888.  Make sure your
frame type is consistent across the network too.

Changing hardware should not make any difference.  Perhaps someone with
first hand experience can confirm this.

Do some double checking on the modems to make sure they are working
correctly.

HTH

Let us know how you fare.


- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Sunday, August 06, 2000 6:21 PM
Subject: IPX routing question.


> Hi guys,
>
> I had a problem with IPX and I'm totally lost with it.
>
> Scenario:
> My customer change their analogue to digital (64kbps) lease line few days
> ago and they were doing bridging
> with Microm router. My role there is to change the Microm router to Cisco
> 1602 routing the IPX traffic to the remote
> location which is Cisco 1602 also. My understanding is when I enable the
> IPX routing and change their IPX network
> number in one of the location (btw, they are using the same network
number,
> 888 I change it) to 887.
>
> Before:
> Novell A (802.3, Net 888) -Microm --Analogue
lease --Microm
> - Novell B(802.3, Net 888)
>
> After:
> Novell A (802.3, Net 888)  --- 1602 -64k --1602
>  Novell B (802.3, Net 887)
>
> Additional info, both of the Novell ethernet are running on novel-ether.
>
> Thanks for the time.
> Ryan
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VLANing Cisco and HP 4000M swtiches

2000-08-04 Thread David Jones

If the HP's support vlans, but you will have to encapsulate them in 802.1Q.

Dave

-Original Message-
From: Dost [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 04, 2000 3:36 AM
To: [EMAIL PROTECTED]
Subject: VLANing Cisco and HP 4000M swtiches


Hi there:

I will be setting up VLANs and QOS using HP Procurve 4000 and Cisco
switch. My first question is Cisco and HP switches are compatible
to each other ?
Would I need  any thing else other than updating IOS on Cisco switches ?

thank u

Dost


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: MAC Address ACL's

2000-08-04 Thread David Jones

Without playing with a router, I think you could probably do like a
route-map statement that uses an access list, i.e. if packet = this, set
next hop to here.  HTH

Dave

-Original Message-
From: Ed [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 03, 2000 7:01 PM
To: [EMAIL PROTECTED]
Subject: Re: MAC Address ACL's


I actually just found that ACL's 700 - 799 are used for MAC's.
Does anyone have any idea on forcing the destination address
for a denied client?  What we're trying to do is pop a web page
for denied clients.

Sorry for the waste of the first message.
Thanx in advance!

--Ed
""Ed"" <[EMAIL PROTECTED]> wrote in message
8mcsm5$1ra$[EMAIL PROTECTED]">news:8mcsm5$1ra$[EMAIL PROTECTED]...
> I've been told by a trusted friend that it's possible to filter on the MAC
> address and if it's denied, to proxy the denied box to a specific web
sight.
>
> I've been looking through CCO but not having much luck.
> Anyone else have some thoughts?
>
> --Ed
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Terminal Monitor problem

2000-08-03 Thread David Jones

You have to turn on the appropriate debugging commands, i.e. debug ip
routing or whatever you're wanting to see.

Dave

-Original Message-
From: Eric Hauptman [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 04, 2000 1:18 AM
To: [EMAIL PROTECTED]
Subject: Terminal Monitor problem


I am dialing into a 2600 router using Hyperterminal.  I need to see the
router messages on the Hyperterm screen and have issued "Terminal
Monitor" successfully.  However, it is not working.  I have another 2600
that displays the messages just fine.  Any ideas what might be the
problem.  Both routers are running the same IOS.

Eric

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: mls

2000-08-03 Thread David Jones



Multiprotocol Label 
Switching

  -Original Message-From: Perez, Robert 
  [mailto:[EMAIL PROTECTED]]Sent: Thursday, August 03, 2000 11:00 
  AMTo: '[EMAIL PROTECTED]'Subject: 
  mls
  Hi All,
   
  Could someone please let me 
  know what MLS refers to for switching??
  Robert J. 
  Perez
  IBM Desktop 
  Support
  Phone 
  #215-349-4644
  Pager 
  #609-569-2019
    
  800-759- x1251831
   


RE: Wireless

2000-08-03 Thread David Jones

I've setup a couple of sites using the BR342's.  Pretty easy to do.  They
are just bridges though so the two connecting sites will be on the same
subnet unless you hook one end into a separate vlan or something.  Haven't
done the voice part though.

Dave

-Original Message-
From: Sites, Bob [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 03, 2000 8:44 AM
To: '[EMAIL PROTECTED]'
Subject: Wireless


Has anyone used, or have any opinions on the Cisco Aironet 340? I'm looking
into hooking up a small office in a remote bldg going bldg to bldg that is
less than a mile apart. Would like to run data and voice on the same pipe,
and somehow breaking the voice out at the receiving end to pipe it to my pbx
and piping the data to a Catalyst switch. 

Bob Sites
System Engineer, CCNA

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: FastEtherchannel configuration

2000-08-03 Thread David Jones

I'm running 12.0(5.1)XP on my 3524's and 12.1(1)E on my 6000.  Not sure
about the VTP pruning, but I will check into it.  Yes, I am trunking with
vlans as well.

Dave

-Original Message-
From: Chris McCoy [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 03, 2000 1:33 AM
To: David Jones
Cc: [EMAIL PROTECTED]
Subject: Re: FastEtherchannel configuration


I just noticed...this was fixed in IOS 12.0(5.2)XU.

Chris M.

- Original Message -
From: "Chris McCoy" <[EMAIL PROTECTED]>
To: "David Jones" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, August 02, 2000 7:59 PM
Subject: Re: FastEtherchannel configuration


> Hi David,
>
>   This is an interesting problem.  I do have a couple of questions about
it:
>
> 1)  Are you using trunking between the 6009 & the 3500's with VLANs?
> 2)  Do you have VTP pruning turned on in the 6009?
>
>   The IOS-based Cisco switches have a nasty habit of not working with VTP
> pruning, causing the 6009 to shut off VLANs to a switch.  It's quite
> possible this is what's happening.
>
> Chris M.
>
> - Original Message -
> From: "David Jones" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, August 02, 2000 11:01 AM
> Subject: FastEtherchannel configuration
>
>
> > Does anyone have any experience configuring FastEtherchannel on Cisco
> > switches?  I have two scenarios:
> >
> > Cisco 3524  Cisco 6009 = Cisco 3524
> > Running two xover cables to each 3524.  When I configure what I believe
to
> > be correct on the 6000 and the 3500's assigning two ports each to the
> > channel, I end up losing connectivity and have to remove the channel
> config.
> >
> > Those switches are now in a production environment so for now, I have
two
> > 3524's, two xover's between them, trying to setup up the etherchannel.
So
> > far, I can't tell that I've been successful.  Any suggestions or hints?
> >
> > Thanks,
> >
> > Dave
> >
> >
> >
> >  <>
> >
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: FLASH upgrade question

2000-08-03 Thread David Jones

No, you won't lose your flash.  However, if you're putting in the extra
flash so you can get a bigger IOS on it, make sure you do a "no partition
flash" first.

Dave

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 02, 2000 3:25 PM
To: [EMAIL PROTECTED]
Subject: FLASH upgrade question


I'm going to be adding 8 MB of FLASH to a 2520 that already has 8 MB.  Will
adding the new SIMM cause me to lose the IOS image currently residing in the
existing SIMM?  I suppose this is a moot question because I'll be upgrading
the IOS immediately afterward, but I'm curious about this.

John 





___
Say Bye to Slow Internet!
http://www.home.com/xinbox/signup.html

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: FastEtherchannel configuration

2000-08-02 Thread David Jones

Yes, as far as I can tell.  I may be missing something though.  On my
testbed 3524's, this is what I have set on each one:

interface FastEthernet0/1
 duplex full
 speed 100
 port group 1
 switchport mode trunk
 spanning-tree portfast
!
interface FastEthernet0/2
 duplex full
 speed 100
 port group 1
 switchport mode trunk
 spanning-tree portfast

Dave

-Original Message-
From: Donald B Johnson Jr [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 02, 2000 6:56 PM
To: David Jones; [EMAIL PROTECTED]
Subject: Re: FastEtherchannel configuration


Are you setting up trunking first.
Duck
- Original Message -
From: David Jones <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 02, 2000 11:01 AM
Subject: FastEtherchannel configuration


> Does anyone have any experience configuring FastEtherchannel on Cisco
> switches?  I have two scenarios:
>
> Cisco 3524  Cisco 6009 = Cisco 3524
> Running two xover cables to each 3524.  When I configure what I believe to
> be correct on the 6000 and the 3500's assigning two ports each to the
> channel, I end up losing connectivity and have to remove the channel
config.
>
> Those switches are now in a production environment so for now, I have two
> 3524's, two xover's between them, trying to setup up the etherchannel.  So
> far, I can't tell that I've been successful.  Any suggestions or hints?
>
> Thanks,
>
> Dave
>
>
>
>  <>
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: sniffer training where?

2000-08-02 Thread David Jones

You can also check out www.pmg.com

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 02, 2000 12:36 PM
To: [EMAIL PROTECTED]
Subject: Re: sniffer training where?


Check out Laura Chappell's site, www.packet-level.com.  It's probably
exactly what you're looking for.

>  I would like to some packet level network analysis training. does anyone
>  know where this is available can can point me in the right direction?
>  thanks,
>  JD
>  
>  ___
>  UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>  FAQ, list archives, and subscription info: http://www.groupstudy.com
>  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]





___
Say Bye to Slow Internet!
http://www.home.com/xinbox/signup.html

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FastEtherchannel configuration

2000-08-02 Thread David Jones

Does anyone have any experience configuring FastEtherchannel on Cisco
switches?  I have two scenarios:

Cisco 3524  Cisco 6009 = Cisco 3524
Running two xover cables to each 3524.  When I configure what I believe to
be correct on the 6000 and the 3500's assigning two ports each to the
channel, I end up losing connectivity and have to remove the channel config.

Those switches are now in a production environment so for now, I have two
3524's, two xover's between them, trying to setup up the etherchannel.  So
far, I can't tell that I've been successful.  Any suggestions or hints?

Thanks,

Dave



 <> 

 David Jones.vcf