Re: Stop multicast to router [7:15]

2001-04-09 Thread ElephantChild

On Mon, 9 Apr 2001, J Roysdon wrote:

> Would an ACL blocking 224.0.0.0 be appropriate?  Is there a better way?

Goodbye, OSPF. Goodbye, EIGRP. Goodbye, Mrs Calabash, wherever you are.

Even assuming a more selective ACL, I'm not sure where it would go, as
putting it on the 2948 (which I suppose is a 2948L3) may cause the very
problem it's trying to avoid (I missed part of the thread so I don't
know whether the original poster explained what he means by "a little
grief").

> ""Tony van Ree""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hi all,
> >
> > I have been presented a problem I'm not sure of the answer.
> >
> > I have a CAT5000 switch connecting several VLAN's and a Cisco2948
> providing routing/switching.  One of the VLAN's has a process that uses a
> multicasts.  These multicasts cause the Cisco2948 a little grief.  I do not
> want the Cisco2980 to see the multicast traffic.
> >
> > Any clues would be appreciated.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24&t=15
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Broadcast [7:132]

2001-04-11 Thread ElephantChild

On Wed, 11 Apr 2001, Howard C. Berkowitz wrote:

> >At 12:28 AM 4/11/01, Chuck Larrieu wrote:
> >>So IS-IS does NOT comply with the OSI model?  ;->
> >>
> >>Seriously, Howard, when you say that IS-IS operates at the MAC layer,
> >
> >He certainly didn't say that! ;-) He said "ISIS runs directly over the
data
> >link layer." Since I learned protocols the Sniffer way, I understood this
> >to mean that ISIS packets are encapsulated in 802.3 frames. There is not
IP
> >layer.
> >
> >Priscilla
> 
> None of the above.
> 
>   IS-IS
>   802.2
>   MAC layer
> 
> as opposed to
> 
>RIP BGPOSPF(E)IGRP
>UDP TCP(none)  (none)
>--802.2---
> MAC layer


Drawn that way, there's little difference between OSPF, EIGRP, and ISIS.
But I suspect that you meant:

   RIP BGPOSPF(E)IGRP
   UDP TCP(none)  (none)
   ---IP-
 802.2
   MAC layer


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=270&t=132
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: An routing scenario and a question [7:309]

2001-04-11 Thread ElephantChild

On Thu, 12 Apr 2001, [EMAIL PROTECTED] wrote:

> redundant links (serial) to router 2 and one serial connection to router
3.
> Routers 2 and 3 are attached via an ethernet connection.
> 
> Requirement: To have ethernet network learned via RIP without
> redistribution.
> Is this possible? We have tried this experiment in one of our labs.

Is there a reasn why you can't use RIP on all 3 routers? You wouldn't
need to redistribute anything in that case. But if you want/have to use
BGP alone on serial links (reading between the lines of your question
below), you need to redistribute something into BGP, whether RIP or
static routes.

> Question: When running BGP, when does the age time on a route switch from 
> hours, minutes and seconds to a hexidecimal number?

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=311&t=309
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TEEN PORN SPAM... [7:543]

2001-04-14 Thread ElephantChild

On Fri, 13 Apr 2001, Paul Borghese wrote:

> We need some ideas on how to block spam more efficiently.  Any suggestions?

Here's some bookmarks I have. I'm sure others can toss their own.

Disclaimer: The information below is geared toward traditional MTAs.
Some or all of it may be irrelevant or unworkable for HTML form-based
posting. 

For specific how-to ways and spamblock services (some free, some
paying), see: 

http://mail-abuse.org/rbl/
http://mail-abuse.org/dul/
http://mail-abuse.org/rss/

For more general how-to information:

http://www.brettglass.com/spam/paper.html
http://www.cis.ohio-state.edu/cgi-bin/rfc/rfc2505.html
http://spam.abuse.net/tools/mailblock.html

Adapt based on the MTA software you use and the steps you already took.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=610&t=543
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Subject: Re: Check this one out ..... [7:608]

2001-04-14 Thread ElephantChild

On Sat, 14 Apr 2001, Paul Werner wrote:

> I'm looking for the next great thinker that will 
> harness the power of sea water to obviate the 
> need for the underwater cables/fiber and generate 
> almost limitless capacity/bandwidth.

You would need a whale of a carrier wave for that porpoise.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=629&t=608
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Check this one out ..... [7:537]

2001-04-14 Thread ElephantChild

On Sat, 14 Apr 2001, Howard C. Berkowitz wrote:

> Even worse was the Foo Bird of certain remote Polynesian islands in 
> which the birds could spray you with the foo secretion.  If you 
> cleaned off thr e stickly foo sunstane you would intstantly die.  It 
> became even more dangeroud when the ceteaceans devlopd thr lethAL FOO 
> ABILITY where every seal could clealy foo,

*GROAN*

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=630&t=537
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Which Job post get most money!? [7:643]

2001-04-14 Thread ElephantChild

On Sat, 14 Apr 2001, Victim wrote:

> So, i  can know which job post ( e.g. System administrator / Network
> engineer) get what salary from the following website?

Only if you actually go look at it. And FYI, after you look at it, you
probably won't have to ask that question. :-)

> "Jason J. Roysdon"  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Check some online job posting places and just see what's going for what
> > salary.
> > http://www.dice.com/

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=658&t=643
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Virtual Token Ring Interface [7:519]

2001-04-14 Thread ElephantChild

On Sat, 14 Apr 2001, Howard C. Berkowitz wrote:

> I still struggle with the question of whether the token rotates in 
> the opposite direction in the Southern Hemisphere.

It does, except when you lift your whole network gently and flip it
upside down.

> If so, would no IBM LAN operate precisely on the equator?

(dons DrScience hat)
You must be thinking of FDDI. Normally, tokens go round and round in the
2 rings, one clockwise and one counterclockwise, and go past each other
without ever touching. However, when they would otherwise cross the
equator, tokens reverse direction and switch rings. Sometimes, when that
happens, they collide and give birth to exotic MAC layer protocols,
which scientists like me study and write long monographs about. Thus
were such wonders as BRAP and MLMA discoverd. 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=661&t=519
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NTP Server/Master (Sample Config?) [7:789]

2001-04-16 Thread ElephantChild

On Mon, 16 Apr 2001, Michael Snyder wrote:

> I need to setup a 3600 to update it's clock, then supply it's time to the
> rest of a internal network.
> 
> I've seen this in done in about 4 lines, but can't find it now on CCO.
> 
> Anyone have a sample config they can post?

I would look into the IOS configuration guide(s). Relevant section is
probably called "Configuring NTP" or something close. Exact URL left to
the reader as an exercise. 

> Second question, Can a pix be a NTP Master/Server?

Hmm, why do you want your PIX to skin that racoon? Without any specific
figures, I'm going on a limb there, but it seems unlikely that the money
value of the added risk is worth the few grands that a peecee running a
free Unix, coupled to a receiver for a radio time source, eg GPS, would
cost you.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=810&t=789
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Security question [7:1079]

2001-04-18 Thread ElephantChild

On Wed, 18 Apr 2001, BASSOLE Rock wrote:

> We currently putting security into our Border Routers. We intend to protect
> ourselfs form smurf, anti-spoofing and SYN Flood attacks. Can somebody tell
> me what is the difference between DDoS and DoS. I have another question
what
> are matians Networks??.

Others gave good answers to the foremer question, so I'll handle the
latter. Assuming you meant "Martian networks", they're IP (or other) 
addresses that are obviously incorrect given the context. Common
examples are:

- Multicast source address.
- RFC 1918 address in packets received from the Internet.
- Source address allocated to you in packets received from the Internet.
- Destination address neither your own nor multicast in packets received
  from the Internet.
- Source or destination address 127.0.0.1 in packets received on any
  interface except a loopback.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1143&t=1079
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: BGP Dampening, What is a flap? [7:1128]

2001-04-19 Thread ElephantChild

On Thu, 19 Apr 2001, Priscilla Oppenheimer wrote:

> It doesn't answer the question. It says there's a penalty for each flap.
Is
> there a penalty for
> 
> 1. each time a route goes down
> or
> 2. each time a route goes down and back up
> 
> The answer is probably number 2, as the orignal poster thought also, since 
> just going down isn't really "flapping."

Well, maybe I'm missing something, but I don't see how a route could go
down more than once without going up meanwhile, or up more than once
without going down meanwhile. So 1 and 2 are pretty much the same thing,
except perhaps for an extra up or down at either end. OTOH, it could be
that some BGP implementations send several WITHDRAWS in a row, or that a
single route going down may result in a given router getting several
withdraws (eg, redundant route reflectors, or multiple peers advertizing
the same prefix). Does someone know whether 1- BGP protocol definition
allows sending several WITHDRAWS to the same peer for a single up-down
transition and 2- routers apply the flap penalty repeatedly when they get a
WITHDRAW for a prefix already marked down?

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1322&t=1128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN loadsharing [7:1280]

2001-04-19 Thread ElephantChild

On Thu, 19 Apr 2001, Paul L Holloway wrote:

> I have a customer wanting his ISDN line(BRI)to take up the slack when the
> utilization on his T1 gets to high. He has a 3640 router. I know the load
> balancing considerations for routing protocols and am suggesting he run
> EIGRP as his IGP since OSPF won't load balance across two "unequal" paths.
> The config. on his serial I believe would be:
> 
> int S1/0
> ip address x.x.x.x x.x.x.x 
> no ip redirects
> no ip directed-broadcast
> no ip proxy-arp
> encapsulation ppp
> no ip route-cache distributed
> no fair-queue
> no cdp enable
> backup delay 30 60
> backup int BRI1/0
> backup load 70 40
> 
> Are there any other snags or problems I may run into with this setup?
> Thanks in advance.

Hmm, you configured it as a serial interface, wo I assume that the whole
bandwidth of your T1 goes to a single destination (eg, ISP router port).
You want to load-balance 30% (100% - 70% load threshold needed for ISDN
to kick in) of your T1's bandwidth, which is about 450 Kbits/sec., with
1 ISDN channel, which will give you 1/7 at best of that bandwidth.

So the main snag, I would think, is that your ISDN won't help that much.
OTOH, it will come handy when your T1 gets acquainted with a backhoe,
which also appears to be one of your design goals, since you put in a
backup delay. Depending on how you rank these design goals, you'll get a
satisfied customer or an irate one.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1327&t=1280
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Passed Support [7:1389]

2001-04-20 Thread ElephantChild

On Fri, 20 Apr 2001, Medley, Tim wrote:

> I passed the HDLC with 100% although I didn't have any questions that
> referenced HDLC. Go FIgure.

Well, you answered all HDLC questions correctly. That's 100%. :-) (ISTR
that APL defined 0/0 as returning 1.)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1425&t=1389
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN loadsharing [7:1280]

2001-04-20 Thread ElephantChild

On Fri, 20 Apr 2001, [EMAIL PROTECTED] wrote:

> [ElephantChild wrote:]
> 
> [You want to load-balance 30% (100% - 70% load threshold needed for ISDN to
> kick in) of your T1's bandwidth, which is about 450 Kbits/sec., with 1 ISDN
> channel, which will give you 1/7 at best of that bandwidth.]
> 
> I am not sure I understand what you are saying?  
> 
> Isn't the "BACKUP LOAD {enable-threshold | NEVER} {disable-threshold |
> NEVER}" command specifying when the backup interface will be kicked in, and
> dropped?  It has been a while but looking through the docs again it seems
> that the BRI will kick in at 70% util (input or output 5 minute moving
> average).  It will remain up until the COMBINED utilization of the two
> (input or output 5 minute moving average) drops bellow 30% of the S1/0
> bandwidth.

It is. The BRI kicks in at 70% of the T1's bandwidth, so the fraction of
the T1's bandwidth that gets spread out is the remaining 30%, or perhaps
the difference between 70% and the peak usage, come to think of it. If
the original poster didn't baseline that already, now would be a good
time to.

> I donn't see how the backup delay really has anything to do with the
> "loadsharing" issue?

It doesn't, but I never said it did. :-) The 30% I mentioned comes from
100% (full T1 bandwidth) - the 70 of the backup load command, not the 30
of the backup delay.

> As I write this I find that I have some questions?
> ### It has been a while, and the Docs are a little vague###

> 1. Can either the input or output utilization start the backup?
> 2. Once the backup is enabled do BOTH the input and output utilizations
have
> to be bellow the disable-threshold to drop the backup.

I don't have routers handy to experiment on, but my guesses would be:

1. No. Backup requires that the ISDN or analog line be setup to call the
   same router as the point-to-point line it's supposed to back up,
   IIRC. Hence, the output load on one router should be the same as the
   input load on the other.

2. Dunno either. It would make sense for it to, since otherwise the
   other router would restart the backup at once. OTOH, it assumes that
   both have the same backup load thresholds.

Perhaps someone would care to set up a lab and report? Chuck? 
Circusnuts? Cthulu? Anyone? :-)

> "ElephantChild"  wrote:
> >
> > On Thu, 19 Apr 2001, Paul L Holloway wrote:
> > 
> > > I have a customer wanting his ISDN line(BRI)to take up the slack when
the
> > > utilization on his T1 gets to high. He has a 3640 router. I know the
load
> > > balancing considerations for routing protocols and am suggesting he run
> > > EIGRP as his IGP since OSPF won't load balance across two "unequal"
> paths.
> > > The config. on his serial I believe would be:
> > > 
> > > int S1/0
> > > ip address x.x.x.x x.x.x.x 
> > > no ip redirects
> > > no ip directed-broadcast
> > > no ip proxy-arp
> > > encapsulation ppp
> > > no ip route-cache distributed
> > > no fair-queue
> > > no cdp enable
> > > backup delay 30 60
> > > backup int BRI1/0
> > > backup load 70 40
> > > 
> > > Are there any other snags or problems I may run into with this setup?
> > > Thanks in advance.
> > 
> > Hmm, you configured it as a serial interface, wo I assume that the whole
> > bandwidth of your T1 goes to a single destination (eg, ISP router port).
> > You want to load-balance 30% (100% - 70% load threshold needed for ISDN
> > to kick in) of your T1's bandwidth, which is about 450 Kbits/sec., with
> > 1 ISDN channel, which will give you 1/7 at best of that bandwidth.
> > 
> > So the main snag, I would think, is that your ISDN won't help that much.
> > OTOH, it will come handy when your T1 gets acquainted with a backhoe,
> > which also appears to be one of your design goals, since you put in a
> > backup delay. Depending on how you rank these design goals, you'll get a
> > satisfied customer or an irate one.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1461&t=1280
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: U/Grade ED IOS on live Client network [7:1474]

2001-04-21 Thread ElephantChild

On Sat, 21 Apr 2001, Cisco Kid wrote:

> Hi Guys,
> 
> I was just wondering whether it was advisable to upgrade to an ED IOS
> Version on routers on Client networks, or whether this should not be done
> and only GD versions should be globally deployed.

How conservative are your clients? How critical is a network failure? 
Would it cost lives? Megabucks? How badly do your clients need the
features in the ED version you're considering, or the hardware only that
version supports? Have you researched the bugs and caveats in that
version?

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1477&t=1474
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: boson cisco tests v3.6x [7:1528]

2001-04-22 Thread ElephantChild

On Sun, 22 Apr 2001, Luca Cuppari wrote:

> Hi,
> 
> I've just checked the boson site and found the demo cisco tests versione
> 3.62.
> Does anyone know hot to find a suitable crack?
> 
> Also, I could only find cracks for version 3.22: does anyone know hot to
find
> the relative tests?

Boy, are you going to get flamed... :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1533&t=1528
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: Win32 app to read/interpret tcpdump file [7:1568]

2001-04-23 Thread ElephantChild

On Mon, 23 Apr 2001, Jason J. Roysdon wrote:

> the evidence without knowing it.  Anyone have a Win32 app that can read
> tcpdump raw capture files?

I take it that tcpdump -r won't do?

> refuses to put behind the pix saying he has it secure.  Hehee, guess where
> that box will be by the end of tomorrow?).

In a dumpster, pinning its former maintainer face down in stinky, slimy
garbage? :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1579&t=1568
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: Discriination? Uh? (was Re: ISDN loadsharing [7:1280]) [7:1681]

2001-04-23 Thread ElephantChild

Is it only me, or did other participants to this thread receive an
autoanswer similar to the one attached below? And if you did, were you
able to figure out what triggered the filter? :-) 

-
From: System Attendant 
To: 'ElephantChild' 
Date: Tue, 24 Apr 2001 03:58:37 +0200
Subject: ScanMail Message: To Sender, sensitive content found and action
 taken.

Trend SMEX Content Filter has detected sensitive content.

Place = [EMAIL PROTECTED]; ; ; ElephantChild
Sender = ElephantChild
Subject = Re: ISDN loadsharing [7:1280]
Delivery Time = April 24, 2001 (Tuesday) 03:58:31
Policy = Sexual Discrimination
Action on this mail = Quarantine message

Warning message from administrator:
Sender, Content filter has detected a sensitive e-mail.
-

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1681&t=1681
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Documentation CD [7:1802]

2001-04-25 Thread ElephantChild

On Tue, 24 Apr 2001, Hoa Ngo wrote:

> Hi!
> I have a documentatin CD( Version April 2000). I have trouble to use it on 
> windows 2000. Does anyone have problem? Can you show me the way to fix
this?
> Thank you in advance.

Search the list archives. That question gets asked at least once per
month.

> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html

In case you're wondering how to get to the archives. That footer only
appears on every message from the list, so it's easy to miss it. :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1827&t=1802
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Documentation CD [7:1802]

2001-04-25 Thread ElephantChild

On Wed, 25 Apr 2001, Jason J. Roysdon wrote:

> I don't know why Cisco can't just store the whole
> thing in pure HTML so folks can browse it with whatever OS/browser you
> want... silly folks.

Paul, Jason's money is no good for the rest of the week. :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1836&t=1802
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Question [7:2447]

2001-04-29 Thread ElephantChild

On Sun, 29 Apr 2001, Victim wrote:

> What is the wide area networking acronym that describes the default router
> device type?
> 
> a. DTE
> b. DCE
> c. CPE
> d. CO

Expand all 4 acronyms. You should then be able to answer your own
question. Or you could look it up in (I think) Internetworking
Technology Overview (coming soon to a CD near you, or it's on cisco's
own web site).

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2450&t=2447
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OFF TOPIC -Job Offer without Interview?? [7:2369]

2001-04-29 Thread ElephantChild

On Sun, 29 Apr 2001, Greg Macaulay wrote:

> Who is our loyalty to go towars?? The client -- who we know is being given
> less than bargained for -- or the guy who's paying for our salary?? I
> already know the practical answer -- but somewhere in those Cisco books we
> all study -- I'm sure it also says that we are to have honesty and
integrity
> in our dealings with clients. Doesn't it?? Oh well. . . .

Perhaps not the books themselves, or not in so many words, but ISTR that
the NDA, or perhaps another agreement that you "sign" online, says that
cisco may strip you of your right to use the CC.. title if you're
naughty. 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2478&t=2369
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: retransmission of packets in WAN [7:2525]

2001-04-30 Thread ElephantChild

On Mon, 30 Apr 2001, Priscilla Oppenheimer wrote:

> >b. HDLC --> The job of HDLC is to ensure that data passed up to the next
> >layer has been received exactly as transmitted (i.e error free, without
loss
> >and in the correct order).
> 
> Except Cisco's HDLC doesn't do all that, and for the CCIE test you should 
> know the Cisco way. Cisco's HDLC does error detection only. It does not 
> retransmit.

Not just cisco's. HDLC detects and discards mangled frames, but doesn't
retransmit. I suspect that many people say HDLC when they actually mean
LAPB. LAPB retransmits lost or mangled frames and handles duplicates and
out-of-order frames.

> Great answer otherwise!
> 
> Priscilla
> 
> 
> >c. SDLC --> Less error control than HDLC in that it only provides link
> >integrity. Frames received correctly are acknowledged by the receiver
while
> >erroneous frames are ignored.
> >
> >d. Frame-relay --> There is no guarantee of data integrity at all. Error
> >control is sacrificed in the interest of speed. Its assumed that higher
> >layer protocols will handle all necessary error control. The network
> >delivers frames, whether the CRC check matches or not. It does not even
> >necessarily deliver all frames, discarding frames whenever there is
network
> >congestion.
> >
> >e. DLSw+ --> Error control is provided by SNA, not DLSw. DLSw only handles
> >link control. Most bridging protocols (as far as I know anyway) deal
> >strictly with getting the data from point A to point B and let the layer
3/4
> >protocols handle error control/correction.
> >
> >f. ATM --> ATM does not have error control functionality (think about what
> >goes into an ATM cell - and what doesn't). Any error control has to be
> >performed by the protocols that are encapsulated in the ATM cells.
> >
> >g. T1, E1 --> These are layer 1 protocols. T1 and E1 deals with signaling
> >and encoding. At this level, its just bits, not frames or packets. Error
> >control is generally handled at layers 2 through 4 (when its done at all).
> >
> >Hope this helps,
> > Karen
> >
> >*** REPLY SEPARATOR  ***
> >
> >On 4/30/2001 at 12:28 AM Kuldip Singh wrote:
> >
> > >Hi,
> > >
> > >Can someone help me find out who (router or host) will
> > >retransmit the packets if they were lost in the cloud
> > >while using:
> > >a. X.25 --> guarantees data integrity by using HDLC to handle error
> control.
> > >b. HDLC --> the purpose of this protocol is to provide an error free
link
> >between two connected devices.
> > >c. SDLC --> provides link integrity. Frames received correctly are
> >acknowledged by the receiver while erroneous frames are ignored.
> > >d. Frame-relay --> Think about what makes Frame-Relay different from
X-25.
> >There is no guarantee of data integrity at all.
> > >e. DLSw+ --> Error control is provided by SNA, not DLSw.
> > >f. ATM --> ATM does not have error control functionality (think about
what
> >goes into an ATM cell - and what doesn't).
> > >g. T1, E1 --> These are layer 1 protocols. Error control is generally
> >handled at layers 2 through 4.
> > >to connect from one router to another.
> > >
> > >HostRoutercloudRouterHost
> > >
> > >Thanks
> > >
> > >__
> > >Do You Yahoo!?
> > >Yahoo! Auctions - buy the things you want at great prices
> > >http://auctions.yahoo.com/
> > >FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >FAQ, list archives, and subscription info: 
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 
> 
> 
> 
> Priscilla Oppenheimer
> http://www.priscilla.com
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2697&t=2525
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Serial cables... [7:3091]

2001-05-03 Thread ElephantChild

On Thu, 3 May 2001, Priscilla Oppenheimer wrote:

> At 04:22 PM 5/3/01, Rizzo Damian wrote:
> >Do they make a serial cable that goes from DB60M to the new High
> >Density
> 
> >Smart Serial Male?
> 
> Is there such a thing? The dense part I could believe.

Relatively speaking, there is. Serial males are smarter, on average,
than parallel males.

> Sorry, couldn't resist. ;-)

Ditto.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3129&t=3091
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Scary Kitty Mutation [7:3097]

2001-05-03 Thread ElephantChild

On Thu, 3 May 2001, Neal Rauhauser wrote:

> If one of you scholars can forward me the pinout needed to cross
> token ring on an RJ45 port I'll whip up a cable for them. If I dig a
> little more I might find some token ring cables so I can hook a couple
> of routers up to these things.

OTTOMH, TR uses 36, 45. An archive search should confirm that and give
more detailed info about crossing (such as whether it's needed -
depending on the port configuration, it might not).

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3139&t=3097
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCDA [7:2971]

2001-05-04 Thread ElephantChild

On Fri, 4 May 2001, Chuck Larrieu wrote:

> I am 0x33 and I know I'm not the oldest CCNP/CCDP around, on this list or
at
> my place of employment.  ( although some days it sure feels like it :->  )

Maybe not the oldest, but you're older than me. (I'm 046.)

> So, PO, you're now sweet 0x1C ?  ;->
> 
> chuck
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> Priscilla Oppenheimer
> Sent: Friday, May 04, 2001 11:48 AM
> To:   [EMAIL PROTECTED]
> Subject:  Re: CCDA [7:2971]
> 
> CCDA never required CCNA. CCDP always has and still does. That takes a lot
> of people by surprise.
> 
> I may be one of the older CCDPs!? I used to tell my age in hex, but it has
> letters in it now, so it's not a joke that normal people get.
> 
> Priscilla
> 
> At 02:37 PM 5/4/01, Kevin Wigle wrote:
> >not sure if you're asking how old the oldest CCNP/CCDP is... (hey Greg!!!)
> >
> >or how long ago CCDA required CCNA
> >
> >or how old I am...
> >
> >I'll assume the second.
> >
> >I did CCNA/CCDA around Dec 1999/Jan 2000 and I thought CCDA required it
> >then.
> >
> >As for Greg
> >
> >Kevin Wigle
> >
> >- Original Message -
> >From: Traceroute
> >To:
> >Sent: Friday, May 04, 2001 1:14 PM
> >Subject: Re: CCDA [7:2971]
> >
> >
> > > how old, just curious???
> > > - Original Message -
> > > From: "Greg Macaulay"
> > > To:
> > > Sent: Friday, May 04, 2001 11:34 AM
> > > Subject: RE: CCDA [7:2971]
> > >
> > >
> > > > Kevin,
> > > >
> > > > I'm not sure that you're not still sleepin' -- so to speak
> > > >
> > > > I just checked the CCDA and CCDP requirements.  You are correct that
> the
> > > > CCNA is NOT a prerequisite for the CCDA (I'm too old to recall
whether
> >the
> > > > CCNA WAS ONCE a requirement!!-- but I don't think so!).  However, in
> >order
> > > > to obtain the CCDP designation, you must have the CCNA (not to
mention
> >the
> > > > other reqs.)
> > > >
> > > > So, IMHO I don't think that a watering down has occurred.
> > > >
> > > > Regards
> > > >
> > > > Greg Macaulay
> > > > Oldest CCNP/DP on Earth
> > > > Lifetime Member of AARP
> > > > Retired Attorney/Law Professor
> > > >
> > > >
> > > >
> > > >
> > > > -Original Message-
> > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf
Of
> > > > Kevin Wigle
> > > > Sent: Wednesday, May 02, 2001 7:31 PM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: CCDA [7:2971]
> > > >
> > > >
> > > > Dear Group,
> > > >
> > > > I guess I've been sleeping again..
> > > >
> > > > It used to be the case that getting CCDA meant that you have passed
> CCNA
> > > and
> > > > DCN.
> > > >
> > > > However looking at CCO, it seems that CCDA is now a one exam cert
also
> -
> > > > although:
> > > >
> > > > CCDA Prerequisites
> > > >
> > > > Knowledge and skills to install, configure, and operate small
> networks.
> > > CCNA
> > > > certification is highly recommended.
> > > > Making it easier to get the junior certs I guess.  Whether that is a
> >good
> > > > thing
> > > >
> > > >
> > > > Kevin Wigle
> > > > FAQ, list archives, and subscription info:
> > > > http://www.groupstudy.com/list/cisco.html
> > > > Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
> > > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > > Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
> > > FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 
> 
> 
> 
> Priscilla Oppenheimer
> http://www.priscilla.com
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3268&t=2971
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: RFC 1149 is in use [7:3244]

2001-05-04 Thread ElephantChild

On Fri, 4 May 2001, Chuck Larrieu wrote:

> There's a very important command missing - no pigeon-stuff excess
> 
> Hhh Is that considered "quality of service"? guess it's time to
look
> into RFC2549

No, it's a fragmentation issue. You probably need to look into Primary
Air Transit Heading Multiple Trailing Unsavories features.

> Chuck
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> Brian Dennis
> Sent: Friday, May 04, 2001 3:57 PM
> To:   [EMAIL PROTECTED]
> Subject:  RE: RFC 1149 is in use [7:3244]
> 
> If you go into the CCIE lab and see a pigeon loft in your rack you're just
> out of luck I guess. I wonder what the config would look like for it.
> 
> interface Pigeon 0/0
>  encapsulation feather
>  ip address 172.16.1.1 255.255.255.0
>  foot-band id 47.0001...0001.00
>  source-bridge winged
>  no ip pigeon-cache
> 
> 
> Brian Dennis, CCIE #2210 (R&S)(ISP/Dial) CCSI #98640
> 5G Networks, Inc.
> [EMAIL PROTECTED]
> (925) 260-2724
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > sdonoho
> > Sent: Friday, May 04, 2001 3:06 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: RFC 1149 is in use [7:3244]
> >
> >
> > I hope RFC 1149 isn't covered in the CCIE lab exam!
> >
> > Scott Donoho CCNP
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> > > Sent: Friday, May 04, 2001 4:31 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: OT: RFC 1149 is in use [7:3244]
> > >
> > >
> > > Hi All
> > >
> > > Checkout
> > > http://news.cnet.com/news/0-1003-200-5825807.html?tag=tp_pr
> > >
> > > RFC 1149 in a successful test!
> > > --
> > > John Hardman CCNP MCSE
> > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3271&t=3244
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Disable telnet port (Cisco Trivia) [7:3287]

2001-05-05 Thread ElephantChild

On Sat, 5 May 2001, Brian Dennis wrote:

> Anyone know how to get to a Cisco router remotely that doesn't have an IP
> address configured on it? Going in through a console, aux or async line
> doesn't count.

Only things that comes to mind are X28 and Decnet.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3297&t=3287
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Disable telnet port (Cisco Trivia) [7:3287]

2001-05-05 Thread ElephantChild

On Sat, 5 May 2001, Jacques Atlas wrote:

> On Sat, 5 May 2001, Brian Dennis wrote:
> 
> |Anyone know how to get to a Cisco router remotely that doesn't have an IP
> |address configured on it? Going in through a console, aux or async line
> |doesn't count.
> 
> cool so we can do this through a sync interface :-)
> 
> use ip helper-address, just tested it

Read the question again. What helper address are you going to configure,
if your target router doesn't have any IP address assigned to any of its
interfaces?

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3298&t=3287
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: passwords [7:3440]

2001-05-07 Thread ElephantChild

On Mon, 7 May 2001, stephano mwendo wrote:

> Haloo,
> Could anyone help on how to change the router password
> remotely (not the eable secret, just the unpriveledged
> level password)

A handful of ideas. Pick any that's feasible in your setup.

3- Telnet into the router.
2- Dial into the router's con or aux port. 
3- Handhold, bribe, or blackmail someone into pressing the required keys
   for you.
4. Hire a NASA space probe designer to build a remote-controlled robot
   with a camera and a 1-fingered "hand", and use that to press the
   required keys.

Just in case you're asking which commands to use, they're the same that
you would use if connected to the con port, unless you're looking for
password recovery (ie, I don't remember the password, and I need to
change/view it). In the latter case, search http://www.cisco.com/ for
"password recovery".

HTH

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3450&t=3440
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: Need a name for my IDS CSPM box [7:3538]

2001-05-08 Thread ElephantChild

On Mon, 7 May 2001, Jason Roysdon wrote:

> Anyone else have good ideas for sci-fi naming conventions?  I'm just about
> out of Star Wars names *g*

LaFollet or Candle (Honor Harrington series)
Bothari or Pym (Miles Vorkosigan series)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3573&t=3538
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Just been Hacked!!!!! [7:3452]

2001-05-08 Thread ElephantChild

On Tue, 8 May 2001, Robert Nelson-Cox wrote:

> >Sorry to find humor in this (but that's my nature), but:
> >
> >Step #1 to securing NT: disable IIS ;-p
> 
> Step #1 to securing your network - Remove all MS products.

Step #1 to securing your network: remove all users.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3577&t=3452
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What is demarc zone? [7:3576]

2001-05-08 Thread ElephantChild

On Tue, 8 May 2001, Subba Rao wrote:

> Hi,
> 
> I am still new to Cisco networking. While touring a network facility, one
of
> the network engineer's showed a telecom closet and said it is the "demarc
> zone".
> I heard DMZ a lot (but I could swear I heard "demarc zone too).
> 
> What is "demarc zone" in networking?

The boundary (sometimes materialized by a RJ jack, sometimes invisible) 
between the part of the network under the other guy's responsibility and
care, which always has 110% availability and reliability and exceeds all
requirements or specifications, and your part, in which lies the cause
of each and every problem you would try to dump in the other guy's lap. 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3595&t=3576
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE prep - review lab inventory and budget [7:3908]

2001-05-10 Thread ElephantChild

On Wed, 9 May 2001, Brian wrote:

(following up on a post about removing TR from the CCIE lab)

> yeah i would love to see focus put on current popular technologies, not
> those used by a small minority.

I hate to reopen that debate, but what difference would that leave
between a CCIE and a CCNP/CCDP with say, 5-6 years experience? Sure,
looking at it from the employer's seat, it's nice to have (relatively) 
cheap people who can deal competently with the 50% (or whatever) of all
available technologies that 99% of all networks will use in some form,
but what (IMHO) makes a CCIE worth the money is the ability to deal with
the older or exotic technologies that only 1% of the sites use.

To give a concrete example, it may be OK to require CCDPs and CCNPs to
know about FR, but not about X.25, but if you do the same for CCIEs,
then anyone who *needs* the features that only X25 provides is left up
the proverbial creek. (Having seen the kind of infrastructure that's
considered state of the art in some countries or locations from my stint
with an oil company, I can attest that when you need X25 or LAPB, you
need it badly, and switching to FR/HDLC/PPP is simply not an option.)

*tosses 2 cents Allanward*

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3982&t=3908
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco HSRP Denial of Service Vulnerability [7:3534]

2001-05-10 Thread ElephantChild

On Thu, 10 May 2001, Kevin Wigle wrote:

> Unfortunately, HSRP tests the interface and not the path.  I would like an
> additional keyword like:
> 
> Standby DestinationIP w.x.y.z
> 
> If the destination is reachable - cool, if it isn't.. failover.
> 
> This I think would give us the same capability that HSRP has with serial
> interfaces.

How about tracking a tunnel interface? Would that work? (The description
for show interface tunnel in the command reference implies that tunnel
interfaces are always up, but that the line protocol can be down if the
tunnel destination is no longer reachable.)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4039&t=3534
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE #7354 - for Jeff McCoy [7:3998]

2001-05-10 Thread ElephantChild

On Thu, 10 May 2001, Christopher Kolp wrote:

> Survey says:

I thought the game was called "Simon says", not "Survey says".

Did I miss something?

(rest of post snipped)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4071&t=3998
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: If. [7:4139]

2001-05-10 Thread ElephantChild

If you can keep your job when all about you
Are losing theirs and blaming it on you;
If you can trust yourself when all men flame you,
But make allowance for their flaming too;
If you can wait and not be tired by waiting,
Or, being lied about, don't deal in lies,
Or, being hacked, don't give way to hacking,
And yet don't look too good, nor talk too wise;

If you can dream - and not make dreams your master;
If you can think - and not make thoughts your aim;
If you can meet with Extreme and Juniper
And treat those two imposters just the same;
If you can bear to hear the truth you've spoken
Test-writers turn into a trap for fools,
Or watch the things you gave your life to broken,
And stoop and build 'em up with wornout tools;

If you can make one heap of all your learnings
And risk it on one turn of pitch-and-toss,
And lose, and start again at your beginnings
And never breath a word about your loss;
If you can force your heart and nerve and sinew
To serve your turn long after they are gone,
And so hold on when there is nothing in you
Except the Will which says to them: "Hold on";

If you broadcast to crowds and keep your virtue,
Or peer with kings - nor lose the common touch;
If no proctors or HR fiends can hurt you;
If all hops count with you, but none too much;
If you can fill the unforgiving minute  
With sixty seconds' worth of distance run -
Yours is the 'Net and everything that's in it,
And - which is more - you'll get your cert my son! 

(with apologies to Rudyard Kipling)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4139&t=4139
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: On-line registration for the CCIE R&S lab [7:4149]

2001-05-11 Thread ElephantChild

On Fri, 11 May 2001, Brian Dennis wrote:

> Dang I feel kind of left out ;)

You shouldn't. I tried to register online and it won't accept my testing
ID.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4158&t=4149
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TUNNEL Config [7:4156]

2001-05-11 Thread ElephantChild

On Fri, 11 May 2001, Ugur ISBUYURAN wrote:

> Hi , I`m configuring  a tunnel between two routers , when the line is down
,
> the tunnel interface is still up , but I want it to be down , how can I do
> that.?

I don't think you can. However, when the router can't reach the other
end of the tunnel (eg, no route to the tunnel destination IP address),
the tunnel interface should show as up, line protocol down.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4231&t=4156
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: pix overload question [7:4187]

2001-05-11 Thread ElephantChild

On Fri, 11 May 2001, Brian wrote:

> I have a question regarding the PIX, hopefully someone
> can help me on this one.
> 
> What version of PIX code is needed to be able to do NAT
> overload, like you can on the routers?  Can someone give
> an example of the command on how that is done?

According to the PIX docs on CCO, 5.3 does it, and there's an example of
sorts in the configuration guide/reference.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4235&t=4187
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cabletron [7:4205]

2001-05-11 Thread ElephantChild

On Fri, 11 May 2001, Logan, Harold wrote:

> >> BTW, youngen Eric, I was troubleshooting Cabletrons b4 there was
> Cisco. And
> 
> >> the relationship? Guess where Cisco and IOS came from? CABLETRON. You
> learn
> 
> Hrmm and I wonder where Cabletron commands came from? ::cough
> cough::UNIX::cough cough::
> 
> I suppose Cisco and Cabletron should just close up shop and let Sun, HP,
> and Red Hat make routers then...

And given Unix' ancestry, perhaps we should defer to whoever's selling
Multics or GECOS today (if anyone is). (Last time I looked, it was
GE^H^HHon^H^H^HBull, but that was about 10 years ago.)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4241&t=4205
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Frame relay and dropped packets... [7:4529]

2001-05-15 Thread ElephantChild

On Tue, 15 May 2001, Rizzo Damian wrote:

>   We have reason to believe we are experiencing Dropped packets
> between us and our remote branch. What I need 
> Is proof, so I can go to my manager and say, "here, look at this". He
> believes just because he looks at the router and does a "show frame pvc"
and
> the Dropped Pkts statistic is 0, that there are no packets being dropped.
> Logical Assumption, but I've been told that just isn't the case. Let me
> throw this out to the groupForget about the FECN's, BECN's and the DE
> pkts...If you were to telnet to both routers and look at the statistics of
> the point-to-point DLCI and compare the Output pkts on one end to the Input
> pkts on the other end, and if you see a discrepancy of 500,000correct
me
> if I'm wrong here, but wouldn't that symbolize Dropped packets???   
Thanks!

Strictly speaking, it doesn't. It implies that there are packets sent
out one router that don't make it to the other, but packets may be
dropped before or after the stage that would increment the counter you
and your boss are looking at. For instance, they may be dropped within
the FR cloud itself, because of congestion or transmission errors, or on
the sending router after the frame exited the PVC-specific queue and
entered the common interface queue (assuming there's such a thing).

You may want to look at a few other statistics to help you figure what's
going on and where:

- show interface (CRC errors, other input errors, input/output drops) 

- show frame pvc (in/out FECN/BECN/DE packets)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4548&t=4529
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Strange connectivity issue [7:4533]

2001-05-15 Thread ElephantChild

On Tue, 15 May 2001, John Neiberger wrote:

> Okay, this is driving me crazy!!  This just started happening around
> 2:00 this afternoon and I can't think of a single explanation for it. 
> Here's the deal:
> 
> PC  RouterA  RouterB
>  BaySwitch
> 
> The Bay switch has a management IP address configured with correctly
> configured mask and default gateway.  For some reason, any PC on the
> subnet that I belong to cannot ping the Bay switch.  From any other
> subnet in our network pings succeed;  they only fail from my specific
> subnet.  There are no access lists involved anywhere in this scenario
> and pings to any other device on the same subnet as the switch will
> succeed from anywhere.
> 
> RouterA can ping the Bay switch using a standard ping, but pings fail
> if I use an extended ping and set the source address to the interface on
> the same subnet as my PC.
> 
> I've done traceroutes from a few locations to make sure traffic was
> flowing correctly and I can see no problems whatsoever.  The routing
> tables of all routers involved look exactly as I would expect them to
> look.  The default gateway and mask is set correctly on the switch.  If
> that were not the case then pings from other subnets would fail as
> well.
> 
> I've also telnetted to the switch and from there I can ping anywhere in
> the network except my subnet.  This is baking my noodle and considering
> I just got back from a vacation in Mexico I'm just not ready for this
> yet.  :-)

It sounds from what you say that the problem subnet isn't the one the
switch is attached to, but it isn't clear how much the path(s) from the
switch to it have in common with the paths to subnets that don't exhibit
the problem. The first thought that comes to mind is that the switch got
confused and has the wrong MAC address in its ARP table, or the wrong
port in its switching table, for the first hop to the failing subnet.
Another possible cause is that at some point, it received an ICMP
redirect pointing it to a first hop that's no longer present. 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4549&t=4533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2601 Config. Please help [7:4555]

2001-05-15 Thread ElephantChild

On Tue, 15 May 2001, Oriya Pollak wrote:

> Can anyone please help configuring a 2621 Router witn a CSU/DSU module to
> make
> me T1 work with is. here is the info I have from my ISP, please help.

FTR, posting the same request from 2 different addresses 1 minute apart
won't get you help any faster, esp. as you're rather vague about what
kind of help you hope to get. I'll assume that you're asking where in
your configuration these (which are common FR configuration commands) 
should go. I never laid my grubby paws on that specific router/interface
combo, but something along these lines should get you started:

controller t1 0/1
channel-group 3 0-23
interface serial 0/1:3
>  encapsulation frame-relay IETF
>  frame-relay lmi-type ansi
interface serial 0/1:3.38 point-to-point
>  ip address 216.239.229.77 255.255.255.252
>  frame-relay interface-dlci 38

(change parameters as required for your actual configuration)

For more information, look up the commands in the relevant configuration
guide or command reference.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4579&t=4555
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ID that router...... [7:4563]

2001-05-15 Thread ElephantChild

On Tue, 15 May 2001, Scott Donoho wrote:

> Hey All,
>  I'm being offered a 4000 series router, but I don't
> know which kind it is, I don't have physical access to
> it. I was verbally given the following info: 
> 
>  * On the front it says: 4000 series router.

Means it can be anything other than an original 4000 (it would say "4000
router".) 

>  * The show version command says that it's running IOS
> 4500 software

Could be a 4500, a 4700, or the -M variant of either.

>  * the processor is a 4700(R4K).
> 
>  My guess is that it is a 4700?

Could be a 4700-M too.

>  In the Cisco Product Guide, they list 4500-M and
> 4700-M. What is the significance of the "-M". I've
> seen 4000 series routers advertised with out the M as
> well. Can anyone provide me with fairly specific ID of
> this router I need to know so I can price it.

Historically, the -M variants' motherboards have been redesigned to be
more flexible than the M-less' while using the same software and
interfaces. Typical differences are more maximum memory (RAM/flash) or
smaller increments. If the configuration is one that's possible only on
the -M, that's what you have. Otherwise, it could be either. You may
also be able to tell based on the manufacturing date or serial #. How
much that matters in practice is uncertain, though.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4581&t=4563
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: hi [7:4536]

2001-05-15 Thread ElephantChild

On Tue, 15 May 2001, Natasha wrote:

> I've often wondered what would happen if the Borg assimilated someone
> with Tourette's syndrome.

Or with split personalities. :-)

> Chuck, you seem to be an expert on this.
> 
> Allen May wrote:
> > 
> > We apparently assimilated a bad speller.  The collective is contaminated.
> > 
> > - Original Message -
> > From: "Feargal Ledwidge"
> > To:
> > Sent: Tuesday, May 15, 2001 3:08 PM
> > Subject: RE: hi [7:4536]
> > 
> > > Also - the Borg can spell their URL correctly ;-)
> > >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > > Allen May
> > > Sent: Tuesday, May 15, 2001 12:41 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: Re: hi [7:4536]
> > >
> > >
> > > Not so.  Borg are a collective.  You are not an individual who can
claim
> a
> > > singular right.
> > >
> > > - Original Message -
> > > From: "Chuck Larrieu"
> > > To:
> > > Sent: Tuesday, May 15, 2001 1:22 PM
> > > Subject: RE: hi [7:4536]
> > >
> > >
> > > > All right... That does it!
> > > >
> > > > I am the only one on the list allowed to use this theme.
> > > >
> > > > Chuck
> > > > --
> > > > I am Locutus, a CCIE Lab Proctor. Xx_Brain_dumps_xX are futile. Your
> > life
> > > as
> > > > it has been is over ( if you hope to pass ) From this time forward,
you
> > > will
> > > > study US!
> > > > www.chuck.to/Locutus.hml
> > > >
> > > >
> > > >
> > > > -Original Message-
> > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf
Of
> > > > Natasha
> > > > Sent: Tuesday, May 15, 2001 9:25 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: Re: hi [7:4536]
> > > >
> > > > Hello new,
> > > > We are the Borg.
> > > > you will be assimilated, resistance is futile.
> > > > Have a nice day! ;-)
> > > >
> > > > David Wong wrote:
> > > > >
> > > > > Hello gang,
> > > > >
> > > > > I am new.
> > > > >
> > > > > jc2
> > > > > FAQ, list archives, and subscription info:
> > > > http://www.groupstudy.com/list/cisco.html
> > > > > Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
> > > >
> > > > --
> > > > Natasha Flazynski
> > > > CCNA, MCSE
> > > > http://www.ciscobot.com
> > > > My Cisco information site.
> > > > http://www.botbuilders.com
> > > > Artificial Intelligence and Linux development
> > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> > >
> > > _
> > > Do You Yahoo!?
> > > Get your free @yahoo.com address at http://mail.yahoo.com
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 
> -- 
> Natasha Flazynski
> CCNA, MCSE
> http://www.ciscobot.com
> My Cisco information site.
> http://www.botbuilders.com 
> Artificial Intelligence and Linux development 
> 
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4607&t=4536
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: LOL - bye bye [7:4769]

2001-05-16 Thread ElephantChild

On Wed, 16 May 2001, Gareth Hinton wrote:

> "Hear is my payback"???
> 
> Skools aint wot they used to be.
> 
> Bet your kicking you'reself four that one.
> 
> Buy buy!

Missteaks are wunnerfool opperchunities two lurn.

Speeling falmes arnt.

> ""bob bobson""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hear is my payback for the huge waste of time this
> > list has been, Sorry to the non spammers.
> >
> > After joing this list two weeks ago, I now know why
> > CCIE has a 85% fail rate.
> >
> > What a waste of time, 80% crap, and I've never seen so
> > many dumb@ss .sig whor3s on a list.
> >
> > Iam Cool
> > SR Wannabe
> > Unemployed corp
> > MCSE, CCNP, CCNA, ISUCK++, DVDA specialist
> >
> > LOL

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4805&t=4769
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: SNA and CCIE R/S [7:4913]

2001-05-17 Thread ElephantChild

On Thu, 17 May 2001, Lists Wizard wrote:

> Hi group,
> 
> Does the CCIE R/S lab exam covers SNA?

Look at the CCIE lab blueprint in the training/certification area of
CCO, or search the archive for this here fine list. The truth's out
there.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4924&t=4913
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proxy-ARP Behavior [7:5075]

2001-05-18 Thread ElephantChild

On Fri, 18 May 2001, David Chandler wrote:

> Just completed a lab on Proxy-ARP behavior, and thought I'd share the
> results.  
> 
> Last week there was a thread about proxy-arp and someone pointed out the
> cisco documentation which states "the Cisco IOS software evaluates
> whether it has the BEST route to that host. If it does, the device sends
> an ARP Reply".  I was not positive about what was meant by "BEST route"
> so I tested it out.

Just out of curiosity, have you tried what happens when the interface
the ARP request comes in has multiple addresses, and both the source and
the destination of the ping are on it, but on different prefixes? I
would publicly predict what I think will happen, but I don't want to
bias your experiments. :-) *cough*

> ###
> 
> Setup:
> #1. I setup a misconfigured host to generate the arps. 4.1.1.101/8  will
> ping 4.1.2.1
> #2. R1, R2, & R3 with subnets that included the host's address but with
> 4.1.1.x/24 addresses.
> #3. Sniffer to verify who is doing what. 
> 
> Assumptions:  
>IP PROXY-ARP enabled.
>Router has a route for the arp'd subnet  (not directly connected)
> 
> ###   
> 
> Results:   
> A proxy-arp is sent IF the following three conditions are met.
> 
> #1. Arp received on an interface whose IP/Mask (subnet range) does not
> belong the the requested IP address of the arp.
> 
> #2. The router has a route in the table to the requested subnet. (If #1
> is true then it will NOT be directly connected.)
> 
> #3. The routing table's next hop is NOT reached via the interface the
> arp came in on.
> 
> 
> 
> Side notes:
> Tried the setup with rip, eigrp, & ospf with various metrics AND static
> routes interface and next-hop.
> The routing protocol made no difference.
> The host (NT workstation) used the MAC of whoever responded first.
> Running HSRP made no difference other than the MAC address.
> 
> # 
> 
> Please reply if there are other quirks, 
> There is always some small detail/senerio that changes the behavior of
> these protocols.
> 
> 
> 
> DaveC
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5078&t=5075
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: b**** tests [7:5194]

2001-05-20 Thread ElephantChild

On Sun, 20 May 2001, John Andrews wrote:

> First of all:
> 
> I worded the subject space that way because I was unsure if the word B
> is
> banned here or not, so that was to be on the safe side so this would go 
> through to the group.
> 
> My question:
> 
> Are the above tests for switching close to the exam type questions that
> appear
> on the prometric. I have both switching exams and have been using them for 
> practice examinations.

If the name you're thinking of is the same as that of the class of
elementary pbrticles that follow the Bose-Einstein statistics, as
opposed to say, a female representative of species Canis domesticus or
(according to some) Homo sapiens, you can use it here. Boson. Boson. 
Boson boson bosonbosonboson. See? :-) And it's been abundantly discussed
on this here fine list, so hitting the archives is probably your best
bet. 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5197&t=5194
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AS-PATH Regular Expression [7:5234]

2001-05-21 Thread ElephantChild

On Mon, 21 May 2001, Tay Chee Yong wrote:

> Hi all,
> 
> I am suppose to accept the following routes from my peer AS123, which has 
> peering with another AS (AS456). I was told to accept the following routes 
> from them, but I don't really understand the regular expression. Can
anyone
> please help to explain to me the following? And what does the "+" and the 
> parenthese means in this AS-PATH.
> 
> (_123)+(_456)+
> 
> I am confused with the parenthese and the "+" sign. Please advise. Thank
you.

*browsebrowsebrowse*
http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/
np1_r/1rbgp.htm#xtocid2382618
[...]
   as-regular-expression
 
   Autonomous system in the access list using a regular expression. See
   the "Regular Expressions" appendix in the Dial Solutions Command
   Reference for information about forming regular expressions.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5239&t=5234
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AS-PATH Regular Expression [7:5234]

2001-05-21 Thread ElephantChild

On Mon, 21 May 2001, ElephantChild wrote:

> On Mon, 21 May 2001, Tay Chee Yong wrote:
> 
> > Hi all,
> > 
> > I am suppose to accept the following routes from my peer AS123, which
has
> > peering with another AS (AS456). I was told to accept the following
routes
> > from them, but I don't really understand the regular expression. Can
anyone
> > please help to explain to me the following? And what does the "+" and
the
> > parenthese means in this AS-PATH.
> > 
> > (_123)+(_456)+
> > 
> > I am confused with the parenthese and the "+" sign. Please advise. Thank
you.
> 
> *browsebrowsebrowse*
> http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/
> np1_r/1rbgp.htm#xtocid2382618

(rest snipped)

Sorry, folks, incomplete answer. I meant to add the URL for the actual
syntax description, then decided as I read it that it was a bit obscure 
as an introduction to regular expressions. Anyway, here's my FMTYWTK
answer:

_ matches any character that separates individual ASNs in an AS path,
including the start or end of the AS path. So _123 ensures that the 123
in the regular expression won't match say, AS 4123. It could, however,
match AS 1234 if used by itself, but the rest of the expression will
take care of that.

+ matches at least one occurence, and perhaps more than one, of the
preceding character or sub-expression between (). So if your peer
indulges in AS path prepending, (_123)+ will take care of that by
matching 123 123 or 123 123 123 12345 as well as a single 123 or 1234.
The rest of the regular expression, and specifically the _ that starts
(_456)+, takes care of that, since it doesn't match the 4 in 1234 or
12345, but only the separator after the 3 of the final 123.

Now that I dissected your regular expression, I will say that IMHO, it's
more complex than what you need, and may still not do what you want in
some cases. Depending on what you want, you may use one of the
following:

- To match any AS path that contains ASNs 123 and 456 in that order, and
  may contain any other ASN either before or after, but not between, use
  _123_456_ (Note that this would still match 123 789 456 123 456, but
  that path has a loop in it, and if your peer will feed you that kind
  of paths, you have more serious trouble than just an unwanted 789.)

- To match any AS path that starts with one or more occurences of ASN
  123, followed with one (at least) occurence of 456, possibly followed
  by other ASNs, use ^(123_)+456_

- To match any AS path that starts with one or more occurences of ASN
  123, possibly followed by one or more occurences of ASN 456, but
  contains no other ASN, use ^(123_)+(456_)*$

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5251&t=5234
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Router as TFTP Server [7:5426]

2001-05-22 Thread ElephantChild

On Tue, 22 May 2001, Kelly D Griffin wrote:

> I have configured a 2500 as a tftp server and have it connected via a WAN
> link in my lab to another 2500.  I can ping across the circuit in both
> directions, but when I attempt a tftp transfer I get this:
> 
> R2#copy tftp flash
>    NOTICE  
> Flash load helper v1.0
> This process will accept the copy options and then terminate
> the current system image to use the ROM based image for the copy.
> Routing functionality will not be available during that time.

(snip rest of session)

> I can ping across the circuit from the tftp server router while the
timeouts
> are occurring.  The 1.1.1.1 address is the address of Loopback0 on R1.  I
am
> running EIGRP for routing and do not have a default route statement in
> either router.
> 
> Any ideas?

Yes. Pay attention to the last line I left of the notice above. :-) If
from R1 (which I assume is the TFTP server) you did an extended ping
using lo0 as the source interface, it would also fail.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5455&t=5426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: cisconetlabs.com Availability [7:5428]

2001-05-22 Thread ElephantChild

On Tue, 22 May 2001, Robert Nelson-Cox wrote:

> On the 1st of July cisconetlabs.com will be open, offering a single lab of 
> six routers, with another security lab with PIX and IPSec devices opening 
> shortly after.
> 
> What would the list like to see from this, what would people pay (please
be
> realistic, $5 per hour is not really enough)?
> 
> I was thinking about $150 per four hour session for the first lab, #200
per
> four hour session for the second.

This is rather more expensive than cciebootcamp's racks. You may be able
to get away with it for your planned second rack, as I'm not aware of
any other rack having PIXen, but even the largest of cciebootcamp's
racks are priced at $200 per 24 hours.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5456&t=5428
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DLSw+/Source-Route Bridging etc... [7:5497]

2001-05-22 Thread ElephantChild

On Tue, 22 May 2001, Kareem Jones wrote:

> Can anyone break down the differences between Source-Route Bridging, DLSw+,
> Transparent Bridging, Remote Source-Route Bridging, and Source-Route
> Translational Bridging?

Have you looked at Internetworking Technology Overview, by the fine
folks at cisco? It's available online for the price of the Internet
connection that you appear to have already.

> Also can someone tell me what does LAT mean? And what is it used for?

Local Area (mumble) (Terminal?) It's terminal emulation for Decnet,
IIRC.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5513&t=5497
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPv^ info from Cisco [7:5602]

2001-05-23 Thread ElephantChild

On Wed, 23 May 2001, Howard C. Berkowitz wrote:

> >It appears that for routing protocols Cisco has only implented RIPv6
> >and BGP for IPv6 in 12.2T.  Is there any reason why they have chosen not
> >to implement EIGRP for IPv6?  It seems odd that in their first foray
> >into IPv6 that they would exclude their own routing protocol of choice.
> >
> >John
> 
> Think about it.  Aren't the early adopters for v6 likely to be 
> interested in multivendor interoperability?

Are the tests going to be the same as for the TCP/IP bake-offs of RFC
1025 fame? And who gets to supply the flakeway? :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5636&t=5602
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Slighly OT: TCP State machine? [7:5629]

2001-05-23 Thread ElephantChild

On Wed, 23 May 2001, John Neiberger wrote:

(about state-machine, dispatch-character, dispatch-machine, and 
dispatch-timeout)
>  
> Applying The Berkowitz Interrogative, what problem are these commands
> designed to solve?  From reading through their descriptions I wasn't
> able to think of a use for them but that's probably because I still
> don't really understand what they do.

As Priscilla said, it allows some degree of control over how characters
coming in on an asynchronous line are bunched together into packets, to
avoid having packets with 1 byte payload and 60 bytes overhead (for
telnet), or even 1 byte payload and 5 bytes overhead (for triple X,
which is probably where the whole scheme comes from). Anyway, you want
the router/terminal server/PAD to stop gathering incoming bytes and send
them out in a packet if any of the following happens:

- there are more than n characters pending, for some predefined n.

- there are characters pending and nothing comes in on the line for
  longer than a certain time.

- a trigger character marking the end of a logical unit (eg, CR meaning
  end of line), or a special action (such as ^C meaning ABORT ABORT
  ABORT) that the host wants to see as soon as the trigger char is seen.

- a character marking the start of a sequence that should be sent as a
  single unit, such as the ESC that often starts a function key.

Mapping from those to the commands you listed is left as an exercise for
the reader. :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5701&t=5629
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Slighly OT: TCP State machine? [7:5629]

2001-05-23 Thread ElephantChild

On Wed, 23 May 2001, Priscilla Oppenheimer wrote:

> And I thought NRF sent the strangest questions. ;-)
> 
> Seriously, I think this has to do with terminal servers.
> 
> I worked on terminal software back in the last millennium. Sometimes a 
> state machine is required to keep track of what the user has typed
already.
> With character-based terminal applications you can send the data when a 
> particular character is sent, such as a CR usually. This avoids the
default
> behavior of sending each character separately. On the other hand,
sometimes
> you want to send on a timeout instead. Sending on CR doesn't work with
some
> applications, such as vi where a j moves up a line, etc.

That's essentially correct. See my other posting for details.

> Beyond that, I can't remember anything else. You know what they say about 
> the 80s. If you remember them you weren't there!?

Well, I was there, and I had managed to forget that bit of historical
lore until John brought it back with his question. I'm still trying to
decide whether I should thank him, or curse him, for that. :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5702&t=5629
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE Written Exam [7:5657]

2001-05-24 Thread ElephantChild

On Wed, 23 May 2001, [EMAIL PROTECTED] (Aaron) wrote:

> I have a question about CCIE Written, how many questions and how long may
I
> take it. 
> 
> could you mail the answer to me?

Look under "Certifications and training" (or something like that) on
CCO. You'll need to have a long look at that anyway, if you want a
chance of getting your CCIE, so you may as well get started now. 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5706&t=5657
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ARP versus Proxy-arp [7:5664]

2001-05-24 Thread ElephantChild

On Wed, 23 May 2001, Chuck Larrieu wrote:

> So in other words, proxy arp may be viewed as something of an obsolete
> protocol / operation in that most modern TCP stacks contain the mechanisms
> for doing the network XOR determination, and then using the default
gateway.
> A modern stack would recognize that a host is on a different network and go
> the default gateway route, so to speak.
> 
> In other words, the necessity for proxy arp is eliminated for the most part
> because of the default gateway concept and the modern TCP stack.

Correct. Proxy ARP still remains useful when you have say, to split a
400-host ethernet into 4 VLANS. With it active on the router
interface(s), you don't need to reconfigure the hosts' notion of the
mask all at once. I'm not sure why it still defaults to on, though. (Or
does it? It did last time I looked, but that was quitre some time ago.)

> Has it sunk through this thick head finally?
> 
> PS Comer states that proxy arp is aka arp hack. :->

IIRC, that's the name it got when someone proposed it as a temporary
workaround at the time subnetting was introduced.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5708&t=5664
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: (Cisco) Cache Engines Required [7:5714]

2001-05-24 Thread ElephantChild

On Thu, 24 May 2001, Kigunda Mbogo wrote:

> hi,
> 
> We do have like 30 cybercafes. We would like to make use of proxy cache
> services preferably cisco. we are looking at two options: to have one
> centralized cache box and to have several cache servers at the cafes. Can
> someone assist me in providing information about cache engines products.
the
> budget is US$ 2000 per center or even more if the product is to sort us
out!

Hard to answer that with the information you're giving. What problem do
you think the HTTP caching server(s) will solve? Do you have a central
Internet connection, or does each cafe have its own? If the former,
what's the topology of your network? If the latter, how does each cafe
connect to the Internet? In both cases, do you have stats on the total
number of HTTP requests vs. the number of unique URLs accessed, and the
corresponding volumes? And do you know where your towel is?

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5718&t=5714
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: (Cisco) Cache Engines Required [7:5714]

2001-05-24 Thread ElephantChild

On Thu, 24 May 2001, Kigunda Mbogo wrote:

> to answer your question:
> each cafe has its own link to the same ISP. the problem (actually not a
> problem) is to reduce wastage of bandwidth for static web pages and other
> files that would be appropriate to cache. statistics show that most users
in
> the cafe use the net to access yahoo or hotmail mails (of which i know
would
> not be appropriate to cache).
> 
> the issue is to share the other static pages like cnn.com and the like
which
> rate second.

Assuming the bandwidth you want to save is on the links from each cafe
to your ISP, and unless you have your cafes connected together with
bandwidth to spare on *those* links, then the only solution is to have
one cache server per cafe. Been a long time since I looked at it, but a
decent Unix-based PC running harvest or squid should be well within your
budget. Or you could go with the cisco devices, if they do what you want
and you're more familiar with them. Dunno where that would leave your
budget, though.

If, OTOH, the bandwidth bottleneck is within your ISP or upstream, and
you can colo a machine with them, you may want to have a single cache
server located there. You will user as much bandwidth on the links from
your cafes to the ISP as you would without any caching external to the
browsers, but you will save more, since all requests for a given static
page will be served by the caching server, no matter how many cafes
request it.

Oh, and the purpose of the list is (also) to help its subscribers learn
about network design issues beyond strictly cisco-related issues, not
just to provide free advice. :-) Accordingly, it's a good idea to cc: it
on all follow-ups. Hope you don't mind my doing so on this.

> > On Thu, 24 May 2001, Kigunda Mbogo wrote:
> >
> > > hi,
> > >
> > > We do have like 30 cybercafes. We would like to make use of proxy cache
> > > services preferably cisco. we are looking at two options: to have one
> > > centralized cache box and to have several cache servers at the cafes.
> Can
> > > someone assist me in providing information about cache engines
products.
> > the
> > > budget is US$ 2000 per center or even more if the product is to sort us
> > out!
> > 
> > And I answered:
> >
> > Hard to answer that with the information you're giving. What problem do
> > you think the HTTP caching server(s) will solve? Do you have a central
> > Internet connection, or does each cafe have its own? If the former,
> > what's the topology of your network? If the latter, how does each cafe
> > connect to the Internet? In both cases, do you have stats on the total
> > number of HTTP requests vs. the number of unique URLs accessed, and the
> > corresponding volumes? And do you know where your towel is?
> >
> > --
> > "Someone approached me and asked me to teach a javascript course. I was
> > about to decline, saying that my complete ignorance of the subject made
> > me unsuitable, then I thought again, that maybe it doesn't, as driving
> > people away from it is a desirable outcome." --Me
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> 
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5768&t=5714
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What is the problem when we use 3COM CB9000 series ? [7:5770]

2001-05-24 Thread ElephantChild

On Thu, 24 May 2001, Cho  kwang suk wrote:

> Dear Groupstudy,
> 
> I would like to get some help about using 3COM CB9000.  Would anyone give
me
> some information
> about what can be the problem when we use 3COM CB9000 ?
> I will wait for all possible answers about the problem and expect you to
> descrice all the problem in detail.
> 
> Waiting for your answer..

Go read http://perl.plover.com/Questions.html, then ask your question
again, if you still think it'll get an answer. :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5770&t=5770
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE written is outdated. [7:5756]

2001-05-24 Thread ElephantChild

On Thu, 24 May 2001, [EMAIL PROTECTED] wrote:

> The following have been removed from the lab. Why haven't the been removed
> from the CCIE written?
> 
> LAT, DECnet, Apollo, Banyan VINES, ISO CLNS, XNS, ATM LANE, and X.25.
> Effective February 1, 2001, Appletalk will also be removed from the lab
exam
> content.

42.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5772&t=5756
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ARP versus Proxy-arp [7:5664]

2001-05-24 Thread ElephantChild

On Thu, 24 May 2001, Priscilla Oppenheimer wrote:

> At 10:36 PM 5/23/01, Chuck Larrieu wrote:
> 
> >A host through it's TCP stack does the XOR and determines that a host lies
> >on another network. The host therefore sends the packet to the device
> >indicated as its default gateway in its configuration. It sends an ARP
> >request for the MAC of the default gateway. Normal ARP?
> 
> Normal ARP, yes. Isn't it an AND function, not XOR?

Both, actually. (my address XOR target address) AND mask is 0 if and
only if the target is directly reachable.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5841&t=5664
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DNS and ISP question [7:5898]

2001-05-25 Thread ElephantChild

On Fri, 25 May 2001, Scott Meyer wrote:

> I have a question about changing ISP's when a domain name(s) is registered
> to an IP address(s) owned by the ISP.
> 
> Obviously, we need to get the DNS registration changed to an address owned
> by the new ISP. I have had some transitions that have not been real smooth,
> and would like the current best practice for doing this.
> 
> Any input is apprectiated.

ObWhereDidItGo: Does anyone know where the "Ask Dr. DNS" web site went?
I wanted to point the poster to it, but couldn't find it. Oh well...

Just making sure I understand you right:

- You are the proud owner of domain bar.com.
- Some machine foo.bar.com is a public resource on your network, and it 
  is about to get a new IP address (or perhaps a group of machines is).
- You want to avoid becoming the proud owner of a giant headache.

In the procedure below, I'm going to assume that a 1-2 hour window from
the time you switch over the server and the time the last clients
elsewhere on the Internet see the new address is tolerable. Also, some
of the parameters below are arbitrary. Adjust as you see fit.

The key is to have direct control of the primary, or master, name server
for your domain. If you don't have that control, get it handed to you
ASAP. Well, perhaps not to you personally, but it should be controlled
by your organization, not by your ISP. Otherwise, you will most likely
have problems.

With that done, the rest is comparatively easy. Lower the minimum and
refresh times for your domain (in the SOA for domain bar.com, in my
example) and the TTL for the resources you're switching (the A for
foo.bar.com), in the weeks and days before the switch. Exactly when and
by how much, depends on the initial value. Assuming they were set to 1
week (a common value), you could set them to 24 hours 8 days before the
switch, then to 1 hour 36 hours before the switch.

When the time comes for the switch, change the address(es) *and the
serial # in the SOA*, and make your master server reload the zone. Check
that it loaded correctly, then have your slave servers get the zone from
the master. (Note: some of your slave servers may not be under your
control, and their admins may be reluctant to empty their dearly bought
name cache just for you. Don't lose too much sleep if that happens:
Thanks to the previous step, they will reload your zone anyway in at
most 1 hour, and most if not all clients will see the changes in at most
2 hours.) Test that clients go to the new address for the server.

Let it rest some time, say 24 hours, until you're sure the changes have
had time to percolate everywhere but to the more weirdly (and probably
incorrectly) configured name servers, then change the refresh and
minimum values on the SOA and the TTL on the A resource back to their
former values. Don't forget to change the serial # again. This time,
don't bother reloading your slave servers or bugging sysadmins. They'll
pick up on the changes soon enough without needing human intervention.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5933&t=5898
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Tunneling [7:5945]

2001-05-25 Thread ElephantChild

> My machine (on site A) is 200.200.62.70 / 255.255.255.240 with gateway
> 255.255.255.65.  

Do you mean 200.200.62.65 there? As stated here, A's default gateway
isn't on the same subnet as A. Won't work.

> * site A:
> ip route 200.200.46.208 255.255.255.240 tunnel0
> *  Site B:
> ip route 200.200.62.64 255.255.255.240 tunnel0

Did you try

  ip route 200.200.46.208 255.255.255.240 192.168.1.2

and

  ip route 200.200.62.64 255.255.255.240 192.168.1.1

instead?

Did you try using traceroute instead of ping to see where you get stuck? 
Did you make sure that the tunnel interface is up and running on both
routers? Di you try pinging from router A (using extended ping and
different source interfaces) to see whether the problem was on the
router or the host?

On Fri, 25 May 2001, Eduardo D Piovesam wrote:

> Hello,
> 
> First, apologies for this long mail.
> 
> I'm beggining with "cisco routers", and my "first" problem is with tunnels.
> 
> I'm trying to set up a tunnel between our two locations with no success.
> 
> These sites are linkeds to a ISP backbone.
> 
> The "transport/passenger" protocols are IP. The routers are Cisco 2501 IOS
> 12.0(6).
> 
> Addresses:
> - Site A LAN address : 200.200.62.64 / 255.255.255.240
> - Site B LAN address : 200.200.46.208 / 255.255.255.240
> 
> * site A:
> -
> interface Tunnel0
>  ip address 192.168.1.1 255.255.255.252
>  no ip directed-broadcast
>  tunnel source XXX.YYY.230.234   -- serial0
>  tunnel destination XXX.YYY.49.238   -- serial0 on router on site B
> !
> interface Ethernet0
>  ip address 200.200.62.65 255.255.255.248
>  no ip directed-broadcast
>  no ip route-cache
>  no ip mroute-cache
> !
> interface Serial0
>  ip address XXX.YYY.230.234 255.255.255.252
>  no ip directed-broadcast
>  encapsulation frame-relay
>  no ip route-cache
>  no ip mroute-cache
>  no fair-queue
> !
> ip classless
> ip route 0.0.0.0 0.0.0.0 XXX.YYY.230.233  -- serial port on ISP router
> ip route 200.200.46.208 255.255.255.240 tunnel0
> !
> -
> 
> *  Site B:
> -
> !
> interface Tunnel0
>  ip address 192.168.1.2 255.255.255.252
>  no ip directed-broadcast
>  tunnel source XXX.YYY.49.238-- serial0
>  tunnel destination XXX.YYY.230.234  -- serial0 on router on site A
> !
> interface Ethernet0
>  ip address 200.200.46.209 255.255.255.248
>  no ip directed-broadcast
>  no ip route-cache
>  no ip mroute-cache
> !
> interface Serial0
>  ip address XXX.YYY.49.238 255.255.255.252
>  no ip directed-broadcast
>  encapsulation frame-relay
>  no ip route-cache
>  no ip mroute-cache
> !
> ip classless
> ip route 0.0.0.0 0.0.0.0 XXX.YYY.49.237   -- serial port on ISP router
> ip route 200.200.62.64 255.255.255.240 tunnel0
> !
> -
> 
> My machine (on site A) is 200.200.62.70 / 255.255.255.240 with gateway
> 255.255.255.65.
> 
> If I try to ping 200.200.46.209 with the tunnel on routers, I get "Request
> timed out". If I remove the 2nd routes from both routers, I can ping
> 200.200.46.209... :(
> 
> Where I wrong?
> 
> Thank you for any hint, clue, help...anything.
> 
> Regards,
> Eduardo
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5958&t=5945
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE written is outdated. [7:5756]

2001-05-27 Thread ElephantChild

On Sun, 27 May 2001, andyh wrote:

> > I'm still chewing on my CCNP, but in my job in a large NOC, we had one
> very
> > large network (Fortune 50) running DEC, IS-IS and a few X.25 lines,
> several
> > banking customers who used SDLC/DLSW for their ATM machines, some
> Appletalk,
> > and some other odd stuff. IMHO, it's not a bad idea at all that Cisco
> > guarantees that CCIE's have been exposed to all of this at least once.
> 
> didn't know you could encapsulate ATM inside SDLC/DLSW ;-)

ATM, the ATM network uses an ATM core, and its design documents contain
ATM fonts.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6063&t=5756
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TokenRing MAU - anyone have one to sell [7:6062]

2001-05-27 Thread ElephantChild

On Sun, 27 May 2001, andyh wrote:

> have been looking for a cheap & cheerful token-ring MAU without any luck
> 
> if anyone has a spare and wants to sell then please get in touch
> 
> I am in the UK, but can import if need be

Not sure what you mean by cheap, but a quick search showed one at #26 on
eBay UK and 40 or so, most at less than $10, on eBay.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6065&t=6062
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Serial1/3.1 is deleted, line protocol is down [7:6090]

2001-05-27 Thread ElephantChild

On Mon, 28 May 2001, Arun wrote:

> Hi
> i am getting this message when i run
> show int command on 3600 series router with x25 on it
> i tried configuring it but i removed whats wrong can u pls help

If you didn't do so already, read what the cisco docs say on "show
interface", then tell us what specific part you still don't understand,
and what you think it could mean. Also tell us what other steps you took
to answer your question, and how and why you think they failed.

Or, if your question isn't "what does a deleted/down status mean?",
you'll have to tell us what it is.

> Regards
> Arun Sharma
> 
> Serial1/3.1 is deleted, line protocol is down
>   Hardware is M4T
>   MTU 1500 bytes, BW 1544 Kbit, DLY 2 usec,
>  reliability 255/255, txload 1/255, rxload 1/255
>   Encapsulation X25
> Serial2/0 is down, line protocol is down
>   Hardware is M4T
>   Description: BGW 1.1
>   MTU 1500 bytes, BW 1544 Kbit, DLY 2 usec,
>  reliability 255/255, txload 1/255, rxload 1/255
>   Encapsulation X25, loopback not set
>   X.25 DCE, address , state R/Inactive, modulo 8, timer 0
>   Defaults: idle VC timeout 0
> cisco encapsulation
> input/output window sizes 2/2, packet sizes 128/128
>   Timers: T10 60

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6095&t=6090
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Curious Q [7:6114]

2001-05-28 Thread ElephantChild

On Mon, 28 May 2001, RamG wrote:

> I have 5 routers.  When I issue show ver each router returns different
> output regarding how the router was started.  Is something wrong?

Not necessarily. It could be nothing more than a difference in ROM
versions or IOS versions. Have you looked at the rest of what show ver
tells you?

> R2501 uptime is 23 minutes
> System returned to ROM by power-on
> System image file is "flash:c2500-js-l.122-1.bin"
> 
> R2502 uptime is 26 minutes
> System restarted by power-on
> System image file is "flash:c2500-i-l.120-9.bin"
> 
> R2503 uptime is 24 minutes
> System returned to ROM by power-on
> System image file is "flash:c2500-js-l.122-1.bin"
> 
> R2504 uptime is 26 minutes
> System restarted by power-on
> System image file is "igs-ir-l.110-10.3", booted via flash
> 
> 2511 uptime is 27 minutes
> System restarted by power-on
> System image file is "c2500-js-l.112-9.bin", booted via flash

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6118&t=6114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Curious Q [7:6114]

2001-05-28 Thread ElephantChild

On Mon, 28 May 2001, RamG wrote:

> 
> E - Output of show ver for one of the router which returned to ROM by
> power-on.  I recently upgraded ios to 12.2 ver.  Did I make any mistake
> during upgrade.

1. Please share with the list. Just because I answered your initial
question doesn't mean that I will answer the followup. And even if I do,
others may learn from the thread. I cc'd the list on this. Please do so
on any follow-up.

2. Again, not necessarily. Compare *all* the information that show ver
gives you across all routers, and I'm pretty sure you will see different
ROM versions, or different IOS versions, or both, that explain the
slightly different messages that you see.

3. Is this your only cause for worry? Or are there other problems that
you think may be linked to this one? If so, what are they?

> RamG
> 
> R2501#show ver
> Cisco Internetwork Operating System Software
> IOS (tm) 2500 Software (C2500-JS-L), Version 12.2(1), RELEASE SOFTWARE
(fc2)
> Copyright (c) 1986-2001 by cisco Systems, Inc.
> Compiled Fri 27-Apr-01 16:11 by cmong
> Image text-base: 0x03076B18, data-base: 0x1000
> 
> ROM: System Bootstrap, Version 11.0(10c)XB1, PLATFORM SPECIFIC RELEASE
> SOFTWARE (fc1)
> BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c)XB1,
> PLATFORM SPECIFIC RELEA
> SE SOFTWARE (fc1)
> 
> R2501 uptime is 1 hour, 41 minutes
> System returned to ROM by power-on
> System image file is "flash:c2500-js-l.122-1.bin"
> 
> cisco 2500 (68030) processor (revision D) with 16384K/2048K bytes of
memory.
> Processor board ID 01560991, with hardware revision 
> Bridging software.
> X.25 software, Version 3.0.0.
> SuperLAT software (copyright 1990 by Meridian Technology Corp).
> TN3270 Emulation software.
> 1 Ethernet/IEEE 802.3 interface(s)
> 2 Serial network interface(s)
> 32K bytes of non-volatile configuration memory.
> 16384K bytes of processor board System flash (Read ONLY)
> 
> Configuration register is 0x2102
> 
> -Original Message-
> From: ElephantChild [mailto:[EMAIL PROTECTED]]
> Sent: Monday, May 28, 2001 8:49 AM
> To: RamG
> Cc: [EMAIL PROTECTED]
> Subject: Re: Curious Q [7:6114]
> 
> 
> On Mon, 28 May 2001, RamG wrote:
> 
> > I have 5 routers.  When I issue show ver each router returns different
> > output regarding how the router was started.  Is something wrong?
> 
> Not necessarily. It could be nothing more than a difference in ROM
> versions or IOS versions. Have you looked at the rest of what show ver
> tells you?
> 
> > R2501 uptime is 23 minutes
> > System returned to ROM by power-on
> > System image file is "flash:c2500-js-l.122-1.bin"
> >
> > R2502 uptime is 26 minutes
> > System restarted by power-on
> > System image file is "flash:c2500-i-l.120-9.bin"
> >
> > R2503 uptime is 24 minutes
> > System returned to ROM by power-on
> > System image file is "flash:c2500-js-l.122-1.bin"
> >
> > R2504 uptime is 26 minutes
> > System restarted by power-on
> > System image file is "igs-ir-l.110-10.3", booted via flash
> >
> > 2511 uptime is 27 minutes
> > System restarted by power-on
> > System image file is "c2500-js-l.112-9.bin", booted via flash
> 
> --
> "Someone approached me and asked me to teach a javascript course. I was
> about to decline, saying that my complete ignorance of the subject made
> me unsuitable, then I thought again, that maybe it doesn't, as driving
> people away from it is a desirable outcome." --Me
> 
> 
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6133&t=6114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: After boot error [7:6152]

2001-05-28 Thread ElephantChild

On Mon, 28 May 2001, NetEng wrote:

> I continously get this error after booting (about every 60s)
> 
> %Error opening tftp://255.255.255.255/network-confg (Timed out)
> %Error opening tftp://255.255.255.255/cisconet.cfg (Timed out)
> %Error opening tftp://255.255.255.255/2600router-confg (Timed out)
> %Error opening tftp://255.255.255.255/2600rout.cfg (Timed out)
> 
> the hostname is 2600router.
> I have the config-register set to 0x2102 (default according to Cisco) and
> have the router set to boot from flash (yes there is an image there). What
> is causing this error? I would appreciate hints instead of an answer, as I
> am trying to learn more and moreThanks

Others already answered your request, but I would like to offer congrats
for asking not to be spoon-fed a solution. I wish more posters would do
that. :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6190&t=6152
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Help-Anybody has some recommendation for Anti-DDoS attack [7:6192]

2001-05-29 Thread ElephantChild

On Mon, 28 May 2001, Dean wrote:

> Dear Group,
> 
> Security issues come over to me in a certain case of mine:
> 
> how to prevent an ISP and IDC from being attacked by DDoS?
> ACL CAR in exit routers may be bringing some impack on performance?
> Firewall may be having some throughput problem?
> 
> Any advice for this kind of issues,I am very appreciated.

Go to http://www.securityfocus.com/ and read. There's no easy
does-it-all solution that doesn't have any trade-offs of some kind. 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6192&t=6192
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: With a dialup setup, I can trace, but not ping, why's that? [7:6195]

2001-05-29 Thread ElephantChild

On Tue, 29 May 2001, NRF wrote:

> I got this weird situation here:
> 
> I got router A that dials into router B through an analog modem (async
> lines).  On both routers A and B, I am using dialer profiles with
> rotary-groups.  B is also connected to the Internet, through E0 (to a cable
> modem), and I have properly set up NAT, so that E0 is the outside interface
> and the dialer interface is the inside interface.
> 
> A can properly dial into B with no problem.  A has a static route pointing
> to its dialer interface.  A does not have any other routes (all other
> interfaces have been shut, etc.)  So basically, A has to dial to B to get
> anywhere.  I have verified that dialing does indeed work properly.
> 
> A cannot ping the outside world.  For example, if I ping www.yahoo.com I
get
> nothing.  But here's the really weird part.  Apparently, A can trace to
> www.yahoo.com, with no problem.   I should also state that my dialer-list
is
> this:
> 
> dialer-list 1 protocol ip permit
> 
> So, does anybody know why I can trace, but not ping?  Is there something
> about Async interfaces or Dialer interfaces that causes thing weird
behavior
> to happen?

Does anything happen at all when you ping a remote machine? Modem
dialing, or trying to? Does the ping work after the traceroute causes A
to dial into B?

Look at the output of the following debug commands:

debug serial packets
debug serial events
debug serial killer
debug ip icmp

You may also try using IP adresses instead of names, to factor out any
possible side effect of the DNS requests. 

>  Check out this output:
> 
> r1#trace www.yahoo.com
> Translating "www.yahoo.com"...domain server (128.32.136.12) [OK]
> 
> Type escape sequence to abort.
> Tracing the route to www.yahoo.akadns.net (204.71.200.67)
> 
>   1 50.50.50.50 40 msec 36 msec 36 msec
>   2 24.250.141.1 52 msec 48 msec 48 msec
>   3 r1-ge-3-0.pinol1.sfba.home.net (24.9.239.225) 52 msec 48 msec 52 msec
>   4 r1-dpt-srp-5-0.oakland1.sfba.home.net (216.197.144.148) 52 msec 52 msec
> 48 m
> sec
>   5 bb1-dpt-srp-1-0.rdc1.sfba.home.net (216.197.144.129) 56 msec 52 msec 53
> msec
> 
>   6 c2-pos5-1.snjsca1.home.net (24.7.76.181) 52 msec 52 msec 52 msec
>   7 pos6-3.core1.SanJose1.Level3.net (209.245.146.129) 64 msec 56 msec 52
> msec
>   8 gigaethernet6-0.ipcolo1.SanJose1.Level3.net (209.244.13.42) 56 msec 56
> msec
> 52 msec
>   9 POS11-0.ipcolo3.SanJose1.Level3.net (209.244.13.58) 52 msec 53 msec 52
> msec
>  10 cust-int.level3.net (64.152.69.18) 56 msec 56 msec 56 msec
>  11 ge-1-2-0.msr2.pao.yahoo.com (216.115.100.154) 60 msec 52 msec 52 msec
>  12 vl21.bas2.snv.yahoo.com (216.115.100.229) 53 msec 56 msec 56 msec
>  13 www.yahoo.akadns.net (204.71.200.67) 52 msec 56 msec 52 msec
> r1#ping 204.71.200.67
> 
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 204.71.200.67, timeout is 2 seconds:
> .
> Success rate is 0 percent (0/5)
> r1#
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 


-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6195&t=6195
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: With a dialup setup, I can trace, but not ping, why's that? [7:6207]

2001-05-29 Thread ElephantChild

On Tue, 29 May 2001, NRF wrote:

> When I try to ping, the modem dials, and the async int comes up, etc.  So
> everything seems to behave normally when I ping.  It just doesn't receive
> any echo replies.
> 
>  I even debug ip packet on router B (the dial up server), and I see that
> packets to yahoo are indeed being forwarded correctly.  So the modem is
> working, the dialer-list is correct, the IP routing is working.  But
> apparently replies never come back.  Weird, really weird.
> 
> Which is odd because I can ping www.yahoo.com from router B just fine. 
And,
> like I said, I can trace Yahoo from A with no problem.  I just cannot ping
> yahoo from A.  But A can ping all interfaces of router B.

Possible causes (list not limitative):

- NAT problem on B either on the way out or back in.

- Filter somewhere that blocks the NAT outside address range in combo
  with ICMP echo requests or replies.

> And yes, I have tried using IP addresses, without DNS names.  Same result.
> I can do everything except ping from A.

*nod* I stopped counting "I can't reach (mumble)"  problems that were
actually bad resolver or name server configuration about a thousand
years ago.

> By the way, I like the idea of "debug serial killer".   But of course, it
> only works if you have previously typed the command "hostname
charlesmanson"

That actually depends on which IOS version you're using. Older versions
may require use of different names.

> ""ElephantChild""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > On Tue, 29 May 2001, NRF wrote:
> >
> > > I got this weird situation here:
> > >
> > > I got router A that dials into router B through an analog modem (async
> > > lines).  On both routers A and B, I am using dialer profiles with
> > > rotary-groups.  B is also connected to the Internet, through E0 (to a
> cable
> > > modem), and I have properly set up NAT, so that E0 is the outside
> interface
> > > and the dialer interface is the inside interface.
> > >
> > > A can properly dial into B with no problem.  A has a static route
> pointing
> > > to its dialer interface.  A does not have any other routes (all other
> > > interfaces have been shut, etc.)  So basically, A has to dial to B to
> get
> > > anywhere.  I have verified that dialing does indeed work properly.
> > >
> > > A cannot ping the outside world.  For example, if I ping www.yahoo.com
I
> > get
> > > nothing.  But here's the really weird part.  Apparently, A can trace to
> > > www.yahoo.com, with no problem.   I should also state that my
> dialer-list
> > is
> > > this:
> > >
> > > dialer-list 1 protocol ip permit
> > >
> > > So, does anybody know why I can trace, but not ping?  Is there
something
> > > about Async interfaces or Dialer interfaces that causes thing weird
> > behavior
> > > to happen?
> >
> > Does anything happen at all when you ping a remote machine? Modem
> > dialing, or trying to? Does the ping work after the traceroute causes A
> > to dial into B?
> >
> > Look at the output of the following debug commands:
> >
> > debug serial packets
> > debug serial events
> > debug serial killer
> > debug ip icmp
> >
> > You may also try using IP adresses instead of names, to factor out any
> > possible side effect of the DNS requests.
> >
> > >  Check out this output:
> > >
> > > r1#trace www.yahoo.com
> > > Translating "www.yahoo.com"...domain server (128.32.136.12) [OK]
> > >
> > > Type escape sequence to abort.
> > > Tracing the route to www.yahoo.akadns.net (204.71.200.67)
> > >
> > >   1 50.50.50.50 40 msec 36 msec 36 msec
> > >   2 24.250.141.1 52 msec 48 msec 48 msec
> > >   3 r1-ge-3-0.pinol1.sfba.home.net (24.9.239.225) 52 msec 48 msec 52
> msec
> > >   4 r1-dpt-srp-5-0.oakland1.sfba.home.net (216.197.144.148) 52 msec 52
> msec
> > > 48 m
> > > sec
> > >   5 bb1-dpt-srp-1-0.rdc1.sfba.home.net (216.197.144.129) 56 msec 52
msec
> 53
> > > msec
> > >
> > >   6 c2-pos5-1.snjsca1.home.net (24.7.76.181) 52 msec 52 msec 52 msec
> > >   7 pos6-3.core1.SanJose1.Level3.net (209.245.146.129) 64 msec 56 msec
> 52
> > > msec
> > >   8 gigaethernet6-0.ipcolo1.SanJose1.Level3.net (209.244.13.42) 56 msec
> 56
> > > msec
> > > 52 msec
> > >   9 POS11-0.ipcolo3.SanJose1.Level3.net (209.244.13.58) 52 msec 53 msec
> 52
> > > mse

Re: another OT: why you UNIX guys look down on we NT guys? [7:6331]

2001-05-29 Thread ElephantChild

On Tue, 29 May 2001, Jim Bond wrote:

> UNIX guys,
> 
> I make $240K per year, how much you make? Why you guys
> look down on us??? I don't get it...
> 
> Jim
> NT guy

That's a troll, right?

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6331&t=6331
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Help on Cisco 4000 Switch [7:6191]

2001-05-30 Thread ElephantChild

On Wed, 30 May 2001, Rik Guyler wrote:

> Friend, eh?!?  Oh the humanity...  ;-}

(...]

> "his" little heart desires it so badly...

[...]

> you...I mean he...has other issues to contend with.

Hmm, mebbe that invisible unicorn is an invisible pink unicorn. :-)

: . o O ( Time to resurrect the "gals in networking" thread? )

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6388&t=6191
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Does MPLS really live up to all its hype? [7:6151]

2001-05-30 Thread ElephantChild

On Wed, 30 May 2001, Howard C. Berkowitz wrote:

> Much as I like Nortel, the True Leader is Mary.
> 
> "Mary had a little lambda..."

Mirror had a little lambda, its hue a ruddy glow
And everyway the mirror faced, the lambda had to go...

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6455&t=6151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: booting from the rommon command prompt [7:6447]

2001-05-30 Thread ElephantChild

On Wed, 30 May 2001, Lists Wizard wrote:

> I have a router that gives me a series of Cs at boot time before it starts
> decompressing the image. What the router is doing before decompressing
> the IOS image?

Hint: To decompress a file, you need a writable storage device to
decompress it to.

>  rommon 3 > boot slot0:gsr-p-mz.120-16.ST.bin
>

> 
>

> 
>

> 
>

> 
> CCC
> Self decompressing the image :
> #
>

> 

(whole buncha more #s snipped)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6457&t=6447
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: O.T : Heart By-pass Surgery...Anyone got any links???? [7:6491]

2001-05-30 Thread ElephantChild

On Wed, 30 May 2001, simonis wrote:

> "Howard C. Berkowitz" wrote:
> > 
> > >Hi,
> > >
> > >i have seen recently a vast amount of non-cisco related questions
recently
> > >and i thought that i would try my luck 
> > >
> > >my uncle needs some heart surgery and was wondering if anyone has some
> > >advise.
> > 
> > Well, I'm not sure exactly what you are asking, but both having done
> > some biomedical engineering and also having been through
> > angioplasties, bypass, pacemakers, and various research procedures...
> 
> Did anyone see that they just accomplished bypass surgery without
> cutting into the chest?  I guess thats like wireless technology, eh?

Perhaps, but is it bleeding edge technology? Hardly, methinks.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6491&t=6491
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: help [7:6571]

2001-05-30 Thread ElephantChild

On Thu, 31 May 2001, William Harrison wrote:

> Since I m 200 miles from the router a console connection is not possible.
> And I knew that I should have put a modem on the aux port but!
> 
> I was hoping the someone had a brut force password crack that I could run
> against the enable password?

I don't think anyone on the list will tell you that, because of the risk
of abuse. Your best bet, if driving and flying aren't options, is to
walk someone through password recovery. Or you could have the router
shipped to you.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6575&t=6571
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Technology Religion (was Re: last word: UNIX guys look down [7:6866]

2001-06-02 Thread ElephantChild

On Fri, 1 Jun 2001, Cthulu wrote:

> I have said it before and I will say it again:  all OSes and IOSes s*ck in
> their own special way.   If they did not, none of us would have a job.
> Please, enjoy the unqiue s*ckiness of each component you deal with, and do
> not compare it to other components.

Do I hear echoes of the Monestary here? :-)

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6866&t=6866
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: where has the bible or dump for 504? [7:6883]

2001-06-02 Thread ElephantChild

On Sat, 2 Jun 2001, McCallum, Robert wrote:

> Unless my English has totally left me I reckon you might need to elaborate
> slightly as I do not have a clue what you are on about!

My guess is that he's looking for a braindump for 640-504.

> -Original Message-
> From: samuel [mailto:[EMAIL PROTECTED]]
> Sent: 02 June 2001 16:30
> To: [EMAIL PROTECTED]
> Subject: where has the bible or dump for 504? [7:6883]
> 
> anybody know it ,please tell me

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6894&t=6883
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TR card what is it? [7:6902]

2001-06-02 Thread ElephantChild

On Sat, 2 Jun 2001, John Chang wrote:

> I have this Token Ring card and I don't know what it is.  Can you look at 
> it and let me know.  Thanks.
> 
> http://www-personal.umich.edu/~johnec/tr.html

As indicated by the big fat DCA label silk-screened on the card, it was
manufactured by DCA, aka Digital Communication Associates (which, IIRC,
either folded down or were bought out years ago, possibly by either
Microsoft or Attachmate). Judging by the edge bus connector and the
bracket, it's an ISA (or perhaps EISA) card. Judging by the connector on
the other side, it was probably designed to be mated to something else,
or perhaps as a dual-bus card. (And now that I think of it, I dimly
remember something about an ISA+MCA dual-bus card.)

Does that answer your question?

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6917&t=6902
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPX/SPX window? (was TCP Sliding Windows question) [7:6925]

2001-06-02 Thread ElephantChild

On Sat, 2 Jun 2001, andyh wrote:

> sort of continuing, although on an IPX track
> 
> was reading Radia Perlman's book the other day, and she mentions that SPX
> has a window size of 1.  Now, I seem to remember from my DOS/Win3.11 days
> that there was some kind of SPX burst facility available (with addition TSR
> drivers).  Wasn't really au-fait with networking back int those days, but
> would I be right in assuming that this adds some kind of sliding window
> functionality to SPX?

The burst facility you're thinking of is probably the one used by NCP,
which is Novell's notion of a client-to-server application-level
protocol, and is to SPX what the original NFS was to TCP (ie, a distant
relative). SPX-with-a-real-window was (IIRC) what SPX2 would have been
had it not been stillborn.

All of the above is from dim memories, and any relation to reality may
or may not be a coincidence. 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6925&t=6925
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IPX/SPX window? (was TCP Sliding Windows question) [7:6925]

2001-06-02 Thread ElephantChild

On Sat, 2 Jun 2001, Chuck Larrieu wrote:

> If memory serves ( always a question in my case ) the facility was called
> Pburst, ( maybe pburst.nlm? ) and was one of those things that got blamed
> for a lot of problems on Novell servers. Almost the first words out of any
> NetWare engineer's mouth were "have you disabled packet burst?"

That and that other gizmo they called "large IPX", yes. And "Did you run
bindfix?"...

Boy, am I glad I don't do Netware servers anymore... :-)

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> ElephantChild
> Sent: Saturday, June 02, 2001 6:47 PM
> To:   [EMAIL PROTECTED]
> Subject:  Re: IPX/SPX window? (was TCP Sliding Windows question) [7:6925]
> 
> On Sat, 2 Jun 2001, andyh wrote:
> 
> > sort of continuing, although on an IPX track
> >
> > was reading Radia Perlman's book the other day, and she mentions that SPX
> > has a window size of 1.  Now, I seem to remember from my DOS/Win3.11 days
> > that there was some kind of SPX burst facility available (with addition
> TSR
> > drivers).  Wasn't really au-fait with networking back int those days, but
> > would I be right in assuming that this adds some kind of sliding window
> > functionality to SPX?
> 
> The burst facility you're thinking of is probably the one used by NCP,
> which is Novell's notion of a client-to-server application-level
> protocol, and is to SPX what the original NFS was to TCP (ie, a distant
> relative). SPX-with-a-real-window was (IIRC) what SPX2 would have been
> had it not been stillborn.
> 
> All of the above is from dim memories, and any relation to reality may
> or may not be a coincidence.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6966&t=6925
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Encryption+Compression [7:7012]

2001-06-04 Thread ElephantChild

On Sun, 3 Jun 2001, Lists Wizard wrote:

> Hello,
> 
> Is it good to both compress and encrypt data going out of an interface?
> 
> Thanks
> 
> Law

Yes, in theory. Compression, if performed *before* encrypting, removes
redundancy, thus making cryptanalysis much harder. It used to be,
though, that cisco routers, when asked to do both, would insist on
encrypting first, thus essentially turning compression into a
time-consuming no-op. I haven't looked whether that was still the case.
Hmm... *browse* *browse* *ping* *traceroute* Sorry, can't get to CCO.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7040&t=7012
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BRI0 Backup Interface for Ethernet Primary Interface [7:7041]

2001-06-04 Thread ElephantChild

> My config:
> interface Ethernet1
> backup delay  0 3
> backup interface BRI0
>
> router eigrp 10
> network 172.26.0.0
>
> ip route 172.20.20.0 255.255.255.0 10.10.9.5  200

That's too skimpy for a reliable diagnostic. Can you post your whole
configuration to the list? (Sanitize as necessary.)

A few things you may want to try or check:

- I don't think you need the backup statements in that case. What
  triggers dialing using the BRI isn't e1 going down, but traffic to
  172.20.20.0/24 after EIGRP removes the route to that through e1.

- Is 10.10.9.5 reachable with e1 down? Does pinging it bring up bri0?

- When you say bri0 doesn't come up, do you mean when e1 goes down, when
  the EIGRP route goes away, or when there's traffic for 172.20.20.0/24 
  and the route's down? 

On Mon, 4 Jun 2001, KM Reynolds wrote:

> Hi Everyone,
> 
> I need to configure a ISDN link as backup for the primary interface.  The 
> primary interface is Ethernet1.  I researched a numbers of books and they 
> all are talk about serial or frame relay interface as the primary.
> I was able to search the archives and I found the identical problem that I 
> am encountering.  The post stated that yes the BRI0 interface can work as
a
> backup for an ethernet interface.  The following is a paste of the post(by 
> Howard Berkowitz):
> 
> "Yes. The key to the solution is to use a low-overhead routing protocol
such
> as OSPF or EIGRP as a layer 3 keepalive mechanism."
> "Set up OSPF or EIGRP to define a path to the destination using the
> Ethernet.  Set up a static route with administrative distance greater than 
> that of the routing protocol (at least 200 is a good idea), with this
static
> route going to the next hop address of the remote ISDN interface.
> If OSPF or EIGRP stop seeing hellos across the Ethernet, they will drop
the
> route.  The static route will now float up into the routing table, and you 
> will get dial-on-demand routing across the ISDN.  When OSPF sees its route 
> again, after the Ethernet is back up, the Ethernet route will replace the 
> ISDN in the active routing table, and the inactivity timer on the ISDN
will
> disconnect it."
> 
> I have followed the instructions, but no luck. When I shutdown the
ethernet
> interface the BRI0 backup interface will not come up.
> The question I have are:
> 1. If I administratively shutdown the ethernet interface is that the same
as
> if I disconnected the cable so that the e1 interface will not see a 
> keepalive.
> 2. I did not see any other treads as to if solution worked. Has anyone run 
> into this situation and has an answer or suggest anything.
> 
> My config:
> interface Ethernet1
> backup delay  0 3
> backup interface BRI0
> 
> router eigrp 10
> network 172.26.0.0
> 
> ip route 172.20.20.0 255.255.255.0 10.10.9.5  200
> 
> Lastly, one of the books (Internetworking & Troubleshooting by C. Long) 
> stated something about layer 2 and the "no keepalive" option.  It didn't
go
> further on this issue and don't know if I understood it.  If someone can 
> explain, it would be much appreciated.
> 
> Sorry for the long post. TIA

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7041&t=7041
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2900XL Switch [7:7053]

2001-06-04 Thread ElephantChild

On Mon, 4 Jun 2001, Rodney Spears wrote:

> Can anyone please advise me of what is wrong with my
> Switch?  It keeps rebooting and rebooting into this
> loop.  Thanks in advance, the output from the 2900XL
> is below.

Looks like a hardware problem to me. What does the TAC say? Or your
favorite official support channel?

> Cisco Internetwork Operating System Software
> IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version
> 12.0(5.1)XW, MAINTENANCE IN
> TERIM SOFTWARE
> Copyright (c) 1986-2000 by cisco Systems, Inc.
> Compiled Thu 21-Dec-00 11:45 by devgoyal
> 
> Switch uptime is 14 seconds
> 
> cisco WS-C2924-XL (PowerPC403GA) processor (revision
> 0x11) with 8192K/1024K byte
> s of memory.
> 
> 
> C2900XL Boot Loader (C2900-HBOOT-M) Version
> 12.0(5.1)XP, MAINTENANCE INTERIM SOF
> TWARE
> Compiled Fri 10-Dec-99 11:06 by cchang
>  starting...
> Base ethernet MAC Address: 00:02:16:65:20:40
> Xmodem file system is available.
> Initializing Flash...
> flashfs[0]: 111 files, 3 directories
> flashfs[0]: 0 orphaned files, 0 orphaned directories
> flashfs[0]: Total bytes: 3612672
> flashfs[0]: Bytes used: 2861568
> flashfs[0]: Bytes available: 751104
> flashfs[0]: flashfs fsck took 6 seconds.
> ...done Initializing Flash.
> Boot Sector Filesystem (bs:) installed, fsid: 3
> Parameter Block Filesystem (pb:) installed, fsid: 4
> Loading
> "flash:c2900xl-c3h2s-mz-120.5-xu.bin"...
>

> #
> 
> File "flash:c2900xl-c3h2s-mz-120.5-xu.bin"
> uncompressed and installed, entry poi
> nt: 0x3000
> executing...
> 
>   Restricted Rights Legend
> 
> Use, duplication, or disclosure by the Government is
> subject to restrictions as set forth in subparagraph
> (c) of the Commercial Computer Software - Restricted
> Rights clause at FAR sec. 52.227-19 and subparagraph
> (c) (1) (ii) of the Rights in Technical Data and
> Computer
> Software clause at DFARS sec. 252.227-7013.
> 
>cisco Systems, Inc.
>170 West Tasman Drive
>San Jose, California 95134-1706
> 
> 
> 
> Cisco Internetwork Operating System Software
> IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version
> 12.0(5.1)XW, MAINTENANCE IN
> TERIM SOFTWARE
> Copyright (c) 1986-2000 by cisco Systems, Inc.
> Compiled Thu 21-Dec-00 11:45 by devgoyal
> Image text-base: 0x3000, data-base: 0x00329E10
> 
> 
> Initializing C2900XL flash...
> flashfs[1]: 111 files, 3 directories
> flashfs[1]: 0 orphaned files, 0 orphaned directories
> flashfs[1]: Total bytes: 3612672
> flashfs[1]: Bytes used: 2861568
> flashfs[1]: Bytes available: 751104
> flashfs[1]: flashfs fsck took 7 seconds.
> flashfs[1]: Initialization complete.
> ...done Initializing C2900XL flash.
> C2900XL POST: System Board Test: Passed
> C2900XL POST: Daughter Card Test: Passed
> C2900XL POST: CPU Buffer Test: Passed
> C2900XL POST: CPU Notify RAM Test: Passed
> C2900XL POST: CPU Interface Test: Passed
> C2900XL POST: Testing Switch Core: Passed
> Error with Switch Core BIST test Phase 0.
> Returns: Test Complete Low : 0x000FFF7F, Test Complete
> High  : 0x000E
>  Test Phase Low: 0x, Test Phase
> High : 0x0200
>  Test Phase Third  : 0x, Test Complete
> Third : 0x
> 
> C2900XL POST FAILURE: Testing Switch Core: Failed
> C2900XL POST FAILURE: Testing Buffer Table: Failed
> C2900XL POST FAILURE: Data Buffer Test: Failed
> C2900XL POST FAILURE: Configuring Switch Parameters:
> Failed
> C2900XL POST FAILURE: Switch Core BIST failed.
> C2900XL POST FAILURE: Cannot test Modules due to
> failure of Switch Core POST
> Del Mar Failure (0th Del Mar): req system failed to
> init
> C2900XL POST FAILURE:
> C2900XL POST FAILURE: ATM: required system failed to
> init
> C2900XL POST: Ethernet Controller Test: Passed
> C2900XL POST FAILURE: MII Test: Failed
> C2900XL POST FAILURE: Error waiting for Ethernet
> Controller and SW_PARAMS
> C2900XL POST FAILURE: Initialization/POST failed
> C2900XL POST FAILURE: AT: Failing because system POST
> failed
> Exception (8192)! Debug Exception (Could be NULL
> pointer dereference)
> CPU Register Context:
> Vector = 0x2000  PC = 0x000EECC8  MSR = 0x00029200
>  CR = 0x2200
> LR = 0x000F1F1C  CTR = 0x001D6BD8  XER = 0x60001000
> R0 = 0x  R1 = 0x0059E7E8  R2 = 0x  R3
> = 0x
> R4 = 0x0001  R5 = 0x  R6 = 0x0059E980  R7
> = 0x0059E980
> R8 = 0x0059E980  R9 = 0x  R10 = 0x 
> R11 = 0x0044
> R12 = 0x4200  R13 = 0xA0F40453  R14 = 0x 
> R15 = 0x
> R16 = 0x  R17 = 0x  R18 = 0x 
> R19 = 0x
> R20 = 0x  R21 = 0x  R22 = 0x 
> R23 = 0x
> R24 = 0x  R25 = 0x0020  R26 = 0x0059E980 
> R27 = 0x0059E980
> R28 = 0x0020  R29 = 0x2513  R30 = 0x0001 
> R31 = 0x
> 
> Stack trace:
> PC =

Re: Cisco May Bid for Marconi [7:7024]

2001-06-04 Thread ElephantChild

On Mon, 4 Jun 2001, KY wrote:

> Noted the officials from both companies declined to comment, it is so
> obviouse to me that they must be doing something.

The CIA didn't comment either, so it must be a covert operation. :-) 

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7161&t=7024
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: unknown Traffic [7:7129]

2001-06-05 Thread ElephantChild

Resend following the list crash - apologies for any duplicates

-- Forwarded message --
From: ElephantChild 
To: Andy Low 
Cc: [EMAIL PROTECTED]
Date: Tue, 5 Jun 2001 09:58:33 +0200 (CEST)
Subject: Re: unknown Traffic [7:7129]
Organization: (noun) 1. the act or process of organizing. 2. the state
  of being organized. 3. a body of persons acting together
  for some purpose.

On Mon, 4 Jun 2001, Andy Low wrote:

> Hi,
> 
> Hope somebody can enlighten me.
> 
> I got this router 2 uplinks and 1 connected to my LAN. When I performed "sh
> int" on the respective interfaces, this was the result:
> 
> Uplink 1:
> 
>   5 minute input rate 501000 bits/sec, 373 packets/sec
>   5 minute output rate 1748000 bits/sec, 330 packets/sec
> 
> Uplink 2:
> 
>   5 minute input rate 749000 bits/sec, 735 packets/sec
>   5 minute output rate 23912000 bits/sec, 2762 packets/sec
> 
> LAN interface:
> 
>   5 minute input rate 3678 bits/sec, 4011 packets/sec
>   5 minute output rate 13476000 bits/sec, 2096 packets/sec
> 
> Can someone explain to me why when 36M of traffic went into my LAN
interface
> (input), only less than 26M were threw out to the Uplinks (output)

Hard to say whether that explains it without knowing how packet sizes
are distributed on your network, but remember that typically, LAN (level
2) protocols have much larger headers than WAN level 2 protocols. 

Another possible explanation is that packets going into an interface get
out of that same interface. Total input rate is 3803 bps, vs a total
output rate of 39136000 bps, which is much closer (about 2.5% vs 33%),
and even more so when you look at packet rates (5119 pps input vs. 5188
pps output, which are within 1.5% of each other). Does that suggest
anything?

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7253&t=7129
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ************ Maximum Security ************* [7:7159]

2001-06-05 Thread ElephantChild

Resend following the list crash - apologies for any duplicates

-- Forwarded message --
From: ElephantChild 
To: Hamid 
Cc: [EMAIL PROTECTED]
Date: Tue, 5 Jun 2001 10:27:37 +0200 (CEST)
Subject: Re: Maximum Security* [7:7159]
Organization: (noun) 1. the act or process of organizing. 2. the state
  of being organized. 3. a body of persons acting together
  for some purpose.

On Mon, 4 Jun 2001, Hamid wrote:

> I want to provide maximum security for my network which is connected with a
> Cisco 3600 router to the Internet.
> 
> The network consists of a web-server, mail server, a cache server (Squid) ,
> a security server (TACACS+ Server) and an accounting/billing  server. All
> these servers are LINUX servers.
> 
> Security considerations are already made on Linux servers, and I am going
to
> configure the Cisco routers.
> 
> A Cisco 3600 router will be acting as an Access Server for dial-up clients
> and another C3600 router will be connected to the Internet backbone. Both
> routers must be configured to provide maximum security. (Security
> considerations should be made for the dial-up clients as well as the
> Internet)
> 
> Any suggestions on the following topics would be welcome to make this as
> secure as possible :
> 
> -Router configuration ( Both routers)
> -Assigning valid/invalid IP addresses to the Servers.
> -Network Plan / Design / Topology
> -Special configuration on the Linux servers.

Short answer: What problem are you trying to solve?

Long answer: 

If you really want maximum security, you should power off your routers
and your servers, unplug them, encase them into several ft. of concrete,
and dump them into the Marianas Trench. As that wouldn't let you offer
any Internet or dial-up access, you will have to trade off security vs.
functionality. How much of each, and at what cost, should be in a
requirements document called a security policy, much as for any other
network design process.

If you don't have that document, *ask for it now*. If it doesn't exist,
write it *and have your customer/boss/whatever sign it*, or better, have
the aforementioned critter write and sign it. Then use it to design and
implement your firewall. Here are some references, off-hand: 

- Firewalls and Internet Security (Cheswick and Bellovin - AW)
- Building Internet Firewalls (Chapman and Zwicky - ORA)
- Practical Unix and Internet Security (Spafford and Garfinkel - ORA)
- The firewalls mailing list (used to be [EMAIL PROTECTED])
- http://www.securityfocus.org/
- Any web page by Marcus J. Ranum
- The "Site Security Handbook" RFC (don't remember the number, but you
- should be able to search for it on any site that carries RFCs). 

Howard mentioned the following resources on a thread long past. Some may
no longer exist or be relevant, so YMMV.

  Some other random references, some more theoretical than others.
  Network security in general, not just firewalls.

  IETF Security Area Advisory Group  http://web.mit.edu/network/ietf/sa/
  IETF Working Groups http://www.ietf.org/html.charters/wg-dir.html
   -- navigate to Security Area for subgroups

  RFC 1579 Firewall-Friendly FTP. S. Bellovin.

  RFC 2647 Benchmarking Terminology for Firewall Performance. D. Newman.

  NSA Rainbow Library.  Contains some HEAVY theory, but also lots of
  good information.
  http://www.radium.ncsc.mil/tpep/library/rainbow/index.html

  International Computer Security Association http://www.icsa.net/
   contains ratings of specific firewall products

  Computer Emergency Response Team http://www.cert.org

(End quote of Howard's words. You may now look up again. :-) )

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7254&t=7159
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: what ASes are we? [7:7252]

2001-06-05 Thread ElephantChild

On Tue, 5 Jun 2001, Andy Harding wrote:

> something that would facinate me would be a show of hands relating to who
is
> with which AS, and maybe where else they had been in their illustrious
past?

And I'd like another show of hands: who else first read the subject as
"what asses"? 

> personally I have been 8372/8220, and am now 2914

I have been a smartass, and I'm still one. (Quiet, Chuck. :-) )

> Andy
> 
> ps - info for identification, not representation

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7267&t=7252
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: loopback addr in BGP & OSPF [7:7271]

2001-06-05 Thread ElephantChild

On Tue, 5 Jun 2001, [EMAIL PROTECTED] (david) wrote:

> Hi,
> 
> Is there any advantage to declare loopback addr with a /32 than to give
all
> loopback a pool of addr eg /24?

The obvious. It saves on addresses. That assumes you're using a
VLSM-aware routing protocol, though.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7305&t=7271
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Differences between ATM and Ethernet [7:7494]

2001-06-07 Thread ElephantChild

On Thu, 7 Jun 2001, Cisco Boy wrote:

> Can anyone help explain briefly the difference or advantages/disadvantages
> between Ethernet and ATM?I know Ethernet uses frames and ATM uses cells,
> right?  But what makes what is it that would influence people to use ATM
> instead of Ethernet?  Thanks in advance.-CiscoBoy

Ethernet (all flavors) has much better multicasting. ATM is better where
bandwidth reservation, guaranted low/bounded variations in transit time,
and similar QoS-related features, are required. For more insights in
these technologies, individually and in contrast, you should search the
list archives, or http://www.cisco.com/ (I think the Internetworking
Technology Overview discusses them). Other possible resources include
canonical GSer must-haves such as _Interconnections_ and _Computer
Networks_, also oft-mentioned in the archives of this here fine list.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7499&t=7494
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: grc.com under a DOS attack [7:7377]

2001-06-07 Thread ElephantChild

On Wed, 6 Jun 2001, Logan, Harold wrote:

> Hrmm... I don't know how much bandwidth the good people at grc have from
> their ISP, but considering the number of people that have been referred
> to the site from this list, and considering that the site is unavailable
> right now, I'd say it looks like Priscilla just engineered a DOS attack
> on the poor people at grc.com. Poor guys. Maybe I'll get to read the
> article after the entire networking community gets done reading it.
> 
> =)

That wouldn't be the first time, I think. That a DOS attack occurs
inadvertently, I mean.  not that our resident Priscilla engineers one. 
Look up "slashdot effect" in the Jargon File.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7500&t=7377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ICMP type 3 code ?????????? [7:7697]

2001-06-08 Thread ElephantChild

On Fri, 8 Jun 2001, Burnham, Chris wrote:

> Question guys,
>   I have received the following back from a ciso router that I
> do not have control over. ICMP type 3 code 0xd.
> hex d = decimal 13.  This code value 13 doesn't exist.

It does. See:

  http://www.isi.edu/in-notes/iana/assignments/icmp-parameters

and

  http://www.cis.ohio-state.edu/cgi-bin/rfc/rfc1812.html.

> Is this due to an
> inbound access-list?

Possibly an access-list, or the equivalent for whatever box sends it. 
Not necessarily inbound, though.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7711&t=7697
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Automation [7:7707]

2001-06-08 Thread ElephantChild

On Fri, 8 Jun 2001, Pierre-Alex wrote:

> Who do you reconfig your routers in the lab setup if you arent there?
> And how do you push the config after the students have logged out?

Script-based solution: use perl and one of Expect.pm, Net::Telnet.pm,
and Net::Telnet::Cisco.pm, and hope that the enable secret hasn't
changed.

Router-based solution: use service config in your router configuration
and "reload at" or "reload in" to have your routers reload at 3am. Then
you just have to deal with students removing the config command and
saving, or cancelling the reload.

Bottom line: You probably can't have a fully automated system. Whether a
partial solution one would be good enough depends on how often your
students do something that defeats it.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7714&t=7707
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Semi-RANT: extended exams [7:7871]

2001-06-11 Thread ElephantChild

This is a copy of a message I sent to cisco training about hidden
dangers of extended exams. Thoughtful comments and answering rants are
equally welcome. No flames, please.

-- Forwarded message --
From: ElephantChild 
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
Date: Sat, 9 Jun 2001 13:51:08 +0200 (CEST)
Subject: CSIDS 2.0 beta: can I have the unextended version?
Organization: (noun) 1. the act or process of organizing. 2. the state of
being organized. 3. a body of persons acting together for some purpose.


On June 1st, I registered to take 9E1-572, the CSIDS 2.0 beta. I'm
scheduled to take it on June 14 at a VUE testing center in France. The
confirmation message I received stated that the test time was extended
by 30 minutes to accomodate me as a "non-native English speaker living
in (a) non-English-speaking country", when I didn't request any such
accomodation. That, IMO, carries 3 disturbing assumptions:

1- That no native English speaker would live outside an English-speaking
   country.

2- That ESL fluency is somehow inferior to native fluency, and not
   enough to handle technical material on a subject I should know well
   at the same rate as a native speaker would, or at a rate close enough
   not to need extra time.

3- That I want the extension at all.

I raised that issue with VUE, and I was eventually told that I needed to
get approval from cisco training before VUE, or anyone, would let me
take the unextended version.

If you follow discussions among cisco certified professionals, you
probably noticed that a recurring theme is the perception that making
any certification too easy lowers the worth of all certifications for
those who hold them, are preparing for them, or are contemplating
passing them.

Granted, some candidates, maybe most of them, know the subject well
enough, but have trouble with English and need the extra time to
understand the questions and the possible answers. For them, the extra
time may help keep the exam more or less as difficult as the unextended
exam is for a candidate fluent in English. However, for a fluent English
speaker (whether native or not), that's not needed, and forcing me to
take an extended version when I don't need it is lowering its worth for
all candidates worldwide.

This strikes me as especially important for a beta exam, as you're still
trying to set the difficulty and evaluate individual questions for
clarity, accuracy, and relevance. I'm not sure how many worldwide will
be taking that exam, and what share of them got the extended version. It
seems to me, though, that the less unsure you are how much of the score
comes from domain knowledge and how much from English fluency (or the
lack of either), the better for the released exam.

I respectfully request that you make extended exams an option, available
to the candidates who request them, and not force them on candidates who
neither want nor need them. I also request that you let candidates
registered for the beta who didn't take it already choose which version
they want to take, and inform them quickly if you decide to grant my
request.

Thanks for listening.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7871&t=7871
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



  1   2   >