Re: Router gets stuck

2000-12-01 Thread Erik Mintz

It is reading the config file after loading the IOS. When it gets to the con
line 0 configuration, something is wrong.
Break the router on boot, and from rommon mode, check out the startup
config, and remove any configuration you have under "line con 0"
-Erik
[EMAIL PROTECTED]



- Original Message -
From: "Barbara Cobbina" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 01, 2000 6:15 AM
Subject: Router gets stuck


| Well, After fiddling around with hperterminal and the
| cables it now works.
| However the router stops after  going through the
| post.
| The last message I get is
|
| %LINK-5-CHANGED: Interface serial1 administratively
| down.
|
| I know this error mesage is informational and nothing
| needs to be done., however it gets  stuck here and  I
| cannot type in anything after this .
|
| Any ideas, anyone ?
|
| Babs
|
|
|
| __
| Do You Yahoo!?
| Yahoo! Shopping - Thousands of Stores. Millions of Products.
| http://shopping.yahoo.com/
|
| _
| FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
| Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
|


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Lab router management

2000-12-02 Thread Erik Mintz

Set up a terminal server with console connections to all the routers.
You will need to power clear the routers to begin the process. the best
setup would be by using remote power switches.
Write a script that sends a break to the terminal servers. Then sends
commands for setting the required configs, setting aliases and then do a
tftpdnld ( in case they changed the IOS.)

-Erik
[EMAIL PROTECTED]

- Original Message -
From: "Ben Hockenhull" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 01, 2000 2:10 PM
Subject: Lab router management


| A student of mine just came into my office and posed this problem to me:
|
| Given a set of lab routers, where a student is allowed to do anything they
| wish to the router, how can things be set up so that the router is
| automatically restored to a known default configuration at the end of the
| student's session?
|
| My initial response is that there's really no good way to do this, short
| of special boot roms that would somehow intelligently tftpboot.
|
| boot net statements won't work, as the student can remove them.
| config register frobbing won't work, as the student can change the config
| register, and, indeed, might have to do so to practice password recovery.
|
| Given that the student can change config registers, write erase, set
| enable passwords, reload, etc, how do labs manage their routers in these
| situations?  He seemed to think that Cisco Academy has some kind of
| software that helps them with this problem, but I don't see how it's
| possible.
|
| Seems to me that all you can really do is have a staff of people to set
| things right all the time.
|
| Anyone have any ideas?
|
| Ben
|
| --
| Ben Hockenhull
| [EMAIL PROTECTED]
|
| _
| FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
| Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
|


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: EASY ?? FOR MOST OF YOU

2001-01-23 Thread Erik Mintz

I have a question regarding CSMA/CD vs full duplex. If the problems relating to 
distance are set due to the limitations of CSMA/CD,
what are the limits when using full duplex? I have had several situations where I had 
to run fiber because of distance, but these
where almost invariably full duplex uplinks or trunks. Can I go farther with copper if 
the link is full-duplex?

-Erik

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Priscilla Oppenheimer
Sent: Monday, January 22, 2001 7:16 PM
To: Brian Lodwick; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: EASY ?? FOR MOST OF YOU


At 09:20 PM 1/22/01, Brian Lodwick wrote:
>B for
>
> >>>Brian
>My additional question on top of this one is:
>
>If the maximum legal length was set to 1/10th the size to make regular
>(10Mb/sec) increased by a factor of 10, what was done to further increase
>100Mb/sec Ethernet by a factor of 10 to get Gigabit Ethernet?

I like your plan to turn this into a non-easy question! The only experience
I have with Gigabit Ethernet is in a fully-switched network where every
port is full duplex, in which case CSMA/CD parameters are not an issue.
However, shared, half-duplex Gigabit Ethernet is viable also.

With shared 10 and 100-Mbps Ethernet, the minimum frame size is equal to
the maximum round-trip propagation delay of the network. In other words,
the minimum frame size is equal to the slotTime = 512 bits. Sticking to
this rule would haver resulted in impracticably small networks for Gigabit
Ethernet, however. The solution was a process called "carrier extension."

According to Rich Seifert in his excellent book, "Gigabit Ethernet," "The
key change is that the slotTime and the minimum frame are no longer the
same. The minimum frame is maintained at 512 bits (64 bytes, as in 10 Mbps
and 100 Mbps Ethernets), but the slotTime is set at 4096 bit-times (512 bytes).

Frames that are shorter than the slotTime are artificially extended by
appending a carrier-extension field so that they are exactly one slotTime
long. This extends the duration of the time that the station transmits
If a collision occurs during any time from the beginning of the frame to
the end of the extension field, the MAC will jam, abort, and backoff."

See the book for even more gory details! &;-)

Priscilla



> >>>Brian
>
>
>attenuation is effected by 3 elements spreading, scattering, and absorption.
>
> >From: Alvarado Jesus <[EMAIL PROTECTED]>
> >Reply-To: Alvarado Jesus <[EMAIL PROTECTED]>
> >To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> >Subject: EASY ?? FOR MOST OF YOU
> >Date: Mon, 22 Jan 2001 14:10:43 -0500
> >
> >The network span of a 100Base-T Network (205) meters is approx. 10 times
> >smaller than the network span of a 10Base-T network (2500) meters Because
> >
> >
> >A) ,  Higher speed data signals attenuate more quickly and so cannot be
> >transmitted that far
> >
> >
> >B) .  Both Networks have minimum frame sizes of 64 bytes and the network
> >spans must be tied directly to the minimum frame transmission time to avoid
> >collisions.
> >
> >_
> >FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>_
>Get your FREE download of MSN Explorer at http://explorer.msn.com
>
>_
>FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Priscilla Oppenheimer
http://www.priscilla.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Linux kernel ported to work on Cisco hardware

2000-09-13 Thread Erik Mintz

Although it conflicts with the original goal of Linux as a *NIX for cheap
hardware, the use of Linux on Cisco hardware will benefit those who have
simple routing tasks to do and do not need a bloated -whoops, feature rich
OS for the job. good WAN cards for x86 boxes can be expensive and
troublesome, this could solve some real world problems with custom network
systems and applications that need direct access to network hardware, and
the Cisco hardware with Linux will also be great for development of new
protocols.

Erik Mintz
mail.com

- Original Message -
From: "Richard A. Holland" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 12, 2000 11:51 PM
Subject: Linux kernel ported to work on Cisco hardware


| I just came across this link:
|
| http://freshmeat.net/projects/uclinux-cisco/
|
| kind of scary, but interesting.  Wouldn't catch me ditching the IOS for
| linux though.
|
|
| Richard A. Holland
| Voice/Data Integrator
| Telec, Inc.
| http://www.telecinc.com
|
| CCDA,CCNP,MCSE,CSE



**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: isdn backup

2000-09-21 Thread Erik Mintz

What are you trying to backup here? I don't see any routing. Start with a
working primary first and I can probably give you suggestions for a
solution.
Roughly, what you need are two static routes with different weights so the
primary is favored, and the backup is much more costlier, or, set the dialer
as the default route with a static 0.0.0.0 pointing to the primary, that
way, when the primary disappears, the static leaves the table and the dialer
goes up. remember to write an access list on the dialer to prevent dialing
for RIP updates, etc. depending on what type of traffic you have traversing
the router.


-Erik

- Original Message -
From: "Clue Less" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 21, 2000 10:25 AM
Subject: isdn backup


| Greetings all,
|
| Got a question on routing with ISDN backup.  Could
| someone shed some light on how to properly implement
| the backup command with routing?
|
| I'm using the backup command, and ip unnumber for both
| primary and backup interfaces.
|
| int loop 0 R3 int s0/0-primary--int s2 R5
| int loop 0 (5.0.0.5)
|   int di1---backup---int di1
|
| Below is config.
|
| What static route can I use to complete the routing to
| the remote end?  Because unnumbered addresses is use,
| I'm unsure what the static route should look like.
| The only thing I can think of is using floating
| static, but that sort of defeat the purpose of the
| backup command.
|
|
| ClueLess
|
| !
| hostname r3
| !
| interface Loopback0
|  ip address 3.0.0.3 255.255.255.0
|  no ip directed-broadcast
| !
| interface Serial0/0
|  backup interface Dialer1
|  ip unnumbered Loopback0
|  no ip directed-broadcast
|  clockrate 64000
| !
| interface BRI0/0
|  no ip address
|  no ip directed-broadcast
|  encapsulation ppp
|  dialer pool-member 3
|  isdn switch-type basic-ts013
|  isdn answer1 :3
|  ppp authentication chap
| !
| interface Dialer1
|  ip unnumbered Loopback0
|  no ip directed-broadcast
|  encapsulation ppp
|  dialer remote-name r5
|  dialer string :5
|  dialer pool 3
|  dialer-group 1
|  ppp authentication chap
| !
| dialer-list 1 protocol ip permit
|
| r3#sh ip route
| Codes: C - connected, S - static, I - IGRP, R - RIP, M
| - mobile, B - BGP
|D - EIGRP, EX - EIGRP external, O - OSPF, IA -
| OSPF inter area
|N1 - OSPF NSSA external type 1, N2 - OSPF NSSA
| external type 2
|E1 - OSPF external type 1, E2 - OSPF external
| type 2, E - EGP
|i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS
| level-2, * - candidate default
|U - per-user static route, o - ODR
|
| Gateway of last resort is not set
|
|  3.0.0.0/24 is subnetted, 1 subnets
| C   3.0.0.0 is directly connected, Loopback0
| r3#
|


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Ether Channel is it an issue???

2000-10-02 Thread Erik Mintz

enable portfast on every host/server.

-Erik

- Original Message - 
From: "Sandeep Kulkarni" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 02, 2000 12:13 PM
Subject: Ether Channel is it an issue???


| Hi All,
| Slightly off topic, But i just want to share someone's
| view on this one. 
| We are in the process of migrating our infrastructure
| to the Cisco switches. We have a pure NT netowrk with
| Once PDC & One BDC. I mooved all the users to the new
| switch with no issues at all. Then started mooving all
| the NT member Servers, This also went very smmothly.
| However when i mooved my BDC i am having a nightmare,
| I am getting all kind's of authentication problem like
| login script hangs, Or people not able to see the
| domain controller (Tcpip connectivity is fine) This
| has started happening only after we mooved the BDC to
| the new switch. I have Ether Channel on the Servers
| with the Intel cards. Tcpip connectivity looks fine.
| This started happening only after i mooved the DC to
| the new Cisco 6509 switch. I don't know weather it's a
| coincidence or a problem. Also i have checked the
| Domain controllers for their sync. issues there are
| none.
| I was just wondering if anyone has land up in the same
| mess as i am & have any resolution to this one. Any
| help is greatly appriciated
| 
| thank you in advance
| 
| Sandeep
| 
| __
| Do You Yahoo!?
| Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free!
| http://photos.yahoo.com/
| 
| **NOTE: New CCNA/CCDA List has been formed. For more information go to
| http://www.groupstudy.com/list/Associates.html
| _
| UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
| FAQ, list archives, and subscription info: http://www.groupstudy.com
| Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
| 

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Terminal server not able to Reverse Telnet

2000-11-03 Thread Erik Mintz

You're not logging out of the first connection, therefore, the terminal line
is in use when you try to log in again. Use the command "sh user" to show
current line connections. You will see a user on the async line, use the
command "clear line " to reset the connection.

Erik Mintz
Domestic Field Engineering Manager
Mail.com
[EMAIL PROTECTED]


- Original Message -
From: "Manishkumar Patel" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, November 03, 2000 5:15 PM
Subject: Terminal server not able to Reverse Telnet


| Dear All,
| Hi!
| I have setup 2511 as Terminal Server, with the Octal RJ-45 cables
connected to
| Console port of 4 2500 Routers. During a day the reverse Telnet works
fine,
| but when I try to Telnet on next day morning, it says " CONNECTION
REFUSED",
| What can be the Problem & solution?
|
| It works fine after Rebooting the Terminal Server.
| Your help will be appreciated.
| Thanks in advance...Have a nice weekend.
| Regards
| MK
| Andre Fecteau <[EMAIL PROTECTED]> wrote:
|
| > -
| > Attachment:
| > MIME Type: multipart/alternative
| > -
| > I configured some routers for ISDN, but one of the spids is coming up
| > invalid can anyone tell me why?  I put the BRI configurations for both
| > sides as well as the error message that I'm getting.  Can someone help
| > me fix this problem?  By the way I called the service provider and they
| > said everything is OK regarding the ISDN lines and spids.  I can telnet
| > and other things, but I just can't get both channels to come up at the
| > same time.  And obviously at least from my limited knowledge base the
| > invalid spid has something to do with that!  I've been pulling my hair
| > out over this one for a few days!  I'd like a solution, but all
| > suggestions are more than welcome!!!
| >
| > Both side have this:
| > isdn switch-type basic-ni
| > isdn voice-call-failure 0
| > isdn tei-negotiation first-call
| >
| > One side
| > interface BRI1/1
| >  ip address x.x.x.x x.x.x.x
| >  ip nat inside
| >  encapsulation ppp
| >  dialer map ip y.y.y.y name y broadcast yyy(first #)
| >  dialer map ip y.y.y.y name y broadcast yyy(second #)
| >  dialer load-threshold 10 either
| >  dialer-group 1
| >  isdn switch-type basic-ni
| >  isdn spid1 xx xxx
| >  isdn spid2 xx xxx
| >  ppp authentication chap
| >  ppp multilink
| > !
| >
| > Other side:
| > !
| > interface BRI1/0
| >  ip address y.y.y.y y.y.y.y
| >  encapsulation ppp
| >  dialer map ip x.x.x.x name x broadcast xxx(first #)
| >  dialer map ip x.x.x.x name x broadcast xxx(second #)
| >  dialer load-threshold 1 outbound
| >  dialer-group 1
| >  isdn switch-type basic-ni
| >  isdn spid1 yy yyy
| >  isdn spid2 yy yyy
| >  ppp authentication chap
| >  ppp multilink
| > !
| >
| > This is the ISDN status :  The other side is the same except both spids
| > are valid!
| > Global ISDN Switchtype = basic-ni
| > ISDN BRI1/0 interface
| > dsl 8, interface ISDN Switchtype = basic-ni
| > Layer 1 Status:
| > ACTIVE
| > Layer 2 Status:
| > TEI = 73, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED
| > TEI = 74, Ces = 2, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED
| > TEI 73, ces = 1, state = 5(init)
| > spid1 configured, spid1 NOT sent, spid1 valid
| > Endpoint ID Info: epsf = 0, usid = 40, tid = 1
| > TEI 74, ces = 2, state = 4(await init)
| > spid2 configured, spid2 sent, spid2 NOT valid
| > Layer 3 Status:
| > 0 Active Layer 3 Call(s)
| > Activated dsl 8 CCBs = 0
| > The Free Channel Mask:  0x8003
| >
| >  Help!
| > Andre
| >
| >
| > --
| > Andre Fecteau
| > Unix Software Engineer
| > [EMAIL PROTECTED]
| > CNE3, 4 & CCNA
| >
|
|
| 
| Get free email and a permanent address at http://www.netaddress.com/?N=1
|
| _
| FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
| Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
|




_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Should I save my old router?

2000-11-10 Thread Erik Mintz

I have a question to the CCIE lab veterans regarding this question; Do the
proctors throw in systems with older IOS's on them in the lab to cause
problems that are solved by newer IOS versions? And if so, do they smile or
frown upon upgrading to solve the problem, or expect you to find a different
workaround?

Erik Mintz
Mail.com
[EMAIL PROTECTED]


- Original Message -
From: "Dennis Laganiere" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Friday, November 10, 2000 9:57 PM
Subject: Should I save my old router?


| I'm putting together my little home CCIE lab and amoung the 2500's and
| 3600's on my desk is a little, lonely 1005.  It's cute, it works fine as a
| 1-Ethernet, 1-Serial box, but the IOS is version 10.3(7) and it only has
8k
| NVRAM and 4mb flash.
|
| The questions are:
|
| Should I try and upgrade the IOS (and/or memory), or does it actually help
| me to have another version of IOS available to play with?
|
| and
|
| Should I just retire this little buddy and pick up another 2501?
|
| Let me know your thoughts...
|- Dennis
|
| _
| FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
| Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
|


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: About accessing to some sites

2000-07-14 Thread Erik Mintz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If you can trace and ping the sites, it sounds like your address
blocks may be filtered at the destination or more likely, your L4
switches. First try telnetting to port 80 from both sides of the
switches, if you suspect it is they're side, run a ping against the
sites checking port 80 and varying your source addresses.
Also, first try pinging from the troublesome source IP's with large
packets, it could be a misconfigured circuit dropping your HTTP
requests but passing the tiny ping packets, I've seen this before on
x.25 links and could happen at any layer 2-3 device.

Erik Mintz
Director, IT operations
Crosslinks systems
1 Silicon alley plaza
New York, NY
10038
[EMAIL PROTECTED]



- -Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Á¶ ±¤ ¼®
Sent: Friday, July 14, 2000 5:16 AM
To: [EMAIL PROTECTED]
Subject: About accessing to some sites


This is kornet in korea.   The kornet is one of ISPs in our nation.
Recently we have had difficulty in getting to some sites like
www.chez.com,www.com,www.yahoo.co.uk
www.blizard.com,www.polarismech.com.
Mostly  we have got lots of calls from the customers who use ADSL
connection
with source ip address 211.38.0.0.  they say they can traceroute 
and
ping to the destinations but can't open
the sites on the web.  With the ip space 168.126.0.0 that we
currently
use, we also can reach to
the sites but we can't open the two sites www.chez.com,www.com on the
web.
For your reference, our customers go through L4 switches and Net
caches.
we need your help!!  if you need further more question, feel free to
ask us
!!!

from cho


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: PGP 6.5

iQA/AwUBOW81/JYKdIYZnR1XEQLSXgCcCRq/4qAZrhLGYGU88QNsYcNgxqkAoMSj
Ir0ASyJBxbpTgoI7Xnizjula
=/znK
-END PGP SIGNATURE-

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Altiga/VPN guru's

2000-07-17 Thread Erik Mintz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

What problems are you having in detail? What you are probably running
into is conflicts with the NAT implementations the providers are
using, causing the TCP header checksums to fail with AH auth. Try a
combination of L2TP with IPSec, you can get alot of info on IPSec from
the cisco website, and of course from the RFC's and drafts, I would
would start with talking to cisco, Altiga says they're "IPSec"
compliant, but the options and complexity of IPSec makes that somewhat
grey at this time.

Erik Mintz
Director, IT operations
Crosslinks systems
1 Silicon alley plaza
New York, NY
10038
[EMAIL PROTECTED]



- -Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Chris H
Sent: Monday, July 17, 2000 9:11 AM
To: [EMAIL PROTECTED]
Subject: Altiga/VPN guru's


Group,

There has to be someone out there having the same problems with the
Altiga 
client that I have seen.  I have found that the Altiga client only
works 
with a limited number of ISP's such as Mindspring, Earthlink, etc. 
However, 
any obscure or off the beaten path type of connection, the client will
time 
out.  My questions:

1.  Is there a work around, or a newer release of the client revision
that 
corrects these problems?

2.  What other clients (using IPSec) has anyone tested with the Altiga
VPN 
concentrator?

Your comments are appreciated, thanks in advance.

Chris



Get Your Private, Free E-mail from MSN Hotmail at
http://www.hotmail.com

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: PGP 6.5

iQA/AwUBOXMwG5YKdIYZnR1XEQK21QCeJNVkw0ymnK9kYQE4R9doX6RZIwUAoJah
triWv3FZY2xYnGshH6TdHIAI
=Z7wH
-END PGP SIGNATURE-

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: BGP multihoming question

2000-07-17 Thread Erik Mintz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

A 2500 won't hold enough RAM, The minimun I would use is a 3640 w/
128M, cisco has been suggesting the 7140 for small, simple setups, and
the pricing is pretty good. If you are on a real tight budget, do it
with a server running Linux and GateD, or Solaris/GateD, you can build
a PC based server to handle a relatively large amount of traffic and
and your peering for less than 4 grand.

- -Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Mehmet Ilgaz
Sent: Monday, July 17, 2000 12:18 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: BGP multihoming question


As a costumer, I want to have two internet connection to 2 different
ISP.
I must have an AS number and  a registered IP block . Is it true?
What is the minimum router konfiguration for this situation?Can Cisco
2500
support this?


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: PGP 6.5

iQA/AwUBOXM9ApYKdIYZnR1XEQLVLgCeKHyJtxDxQx53f6FczrevF3h4jfcAnijf
K09rJ9knFXQQaawI2goE4H9B
=DB0q
-END PGP SIGNATURE-

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco Prerequisites

2000-08-04 Thread Erik Mintz

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I wouldn't waste my time with mastering windows if you have no
interest in it, or anything else you're not interested in, for that
matter. Myself, I don't do windows, My opinion of microsoft products
is that they are the worst consumer products of the modern age. You
are a step ahead of other newbies with your love for the command line,
most people would rather point and click. Learn the fundamentals of
networking, if possible, take cisco's ICRC class, great course. Use
you Linux box to provide various network services and solve problems,
build as many as you can to represent a complex network. Keep up with
mailing lists like this and hit the newsgroups for more, make friends
by helping others solve they're networking problems. Before you know
it you'll be working with experienced people and finding more
opportunities.
I know many top level network engineers who couldn't find the start
menu on a windows box, so the answer is no, you don't need micro$oft
experience to to succeed. There is enough work out there right now so
you can tell a potential employer "no thanks" if they demand you to
have NT experience for whatever reason. Of course, it doesn't hurt to
know your way around an operating system that is found almost
everywhere, just don't cry when you find yourself staring at blue
screens and up all night tracking down bug-fixes to cryptic error
messages that reference code that is locked up tight in the Washington
woods -here's one that was sent to me in an FYI from my NT admin last
week before he had to patch a server;
A fatal MTA database server error was encountered. A bad list member
length is on object 0646. File offset: 3134. Attribute ID: 79.
Referenced object  (0 => N/A). Referenced object error: 0. [DB
Server DISP:ROUTER 8 42] (16)

What the hell does that mean?

Erik Mintz 
Director, IT operations
Crosslinks systems
1 Silicon alley plaza
New York, NY  10038
[EMAIL PROTECTED]
:-)
"They have computers, and they may have other weapons of mass
destruction."
- -Janet Reno, US Attorney General, 2/27/98


#-Original Message-
#From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf
Of
#Okuwa, Daley
#Sent: Thursday, August 03, 2000 6:19 AM
#To: 'Adedapo Ola'
#Cc: '[EMAIL PROTECTED]'
#Subject: RE: Cisco Prerequisites
#
#
#Not neccesarily but it gives you a better edge if you have been in
LAN
#enviroment and probably MCSE 
# 
#
#Daley Okuwa 
#EDS Network services 
#Stockley Park 
#Tel no 0208 -5353144 
#fax no 0208-7544057 

-BEGIN PGP SIGNATURE-
Version: PGP 6.5

iQA/AwUBOYrSrpYKdIYZnR1XEQIVIQCgnJtjpEsL5Q/EvF0DxIdqnVySR6sAoNc6
hAYnXdmbZAIK5AsCUKciv/Of
=YoYe
-END PGP SIGNATURE-

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Standard Cisco passwords

2000-09-05 Thread Erik Mintz

>From the default password database, maintained by Eric Knight.
see -http://www.securityparadigm.com/defaultpw.htm

Cisco,IOS,,Multi,enable,cisco,,"IOS technically has no ""default pw'"
Cisco,IOS,2600 series,Multi,n/a,c,,but these are common misconfigurations
Cisco,IOS,,Multi,n/a,cc,,
Cisco,IOS,,Multi,n/a,cisco,,
Cisco,IOS,,Multi,n/a,Cisco router,,
Cisco,CiscoWorks 2000,,,guest,(none),User,
Cisco,CiscoWorks 2000,,,admin,cisco,Admin,

Looking at the full list will give you an appreciation of cisco's design, as
the database is filled with default passwords for other vendors.

Erik Mintz
Mail.com


- Original Message -
From: "Hans Stout" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 29, 2000 6:30 AM
Subject: Standard Cisco passwords


> Hi colleagues,
>
> do you know what the Cisco standard passwords are ? As far as I remember,
> they are 'cisco' and 'sanfran', but I am not sure (also not sure about
> lower/upper case).
> Thanks for your help in advance.
>
> Georg Pauwen
>



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: dns

2000-09-06 Thread Erik Mintz



There are several options for the goal you are 
seeking. The question is how much money you have. The best solution of course 
would be to distribute the site over geographically distant locations, 
multi-homed at each site peering (BGP) with multiple providers. Also, don't 
forget farms of redundant servers/switches/routers at each site with load 
balancers. 
I suggest starting your high redundancy plan with a 
single good data center with redundant connections to an ISP with a very high 
SLA and a redundant backbone that is peered to multiple providers. Go redundant 
on switches and routers to your server farm, and add a pair of load balancers. 
You can also add DNS load balancers, cisco calls theirs "distributed director". 
I personally don't believe in relying on DNS for disaster recovery, unless I 
have a data center explode, I can bring everything back up long before the DNS 
updates propagate everywhere.  
 

Erik Mintz
Mail.com
[EMAIL PROTECTED]
 
 
- Original Message - 

  From: 
  Nurarif 
  Wibawa 
  To: [EMAIL PROTECTED] 
  Sent: Wednesday, September 06, 2000 4:37 
  AM
  Subject: dns
  
  Hi,
   
  I need a solution for the configuration 
  below:
   
   
  Internet
   | 
  |
   
  | |
   ISP 
  A ISP B
   
  | |
   
  | |
     Customer
    
  |
   
    Web Server
   
  Web Server will has 2 IP addresses, one will be 
  given by ISP A and the other one will be given by ISP B.
  Primary DNS server is on ISP A and 
  secondary DNS server is on ISP B.
  The DNS server on ISP A has two records for 
  customer's web server, for example :
  www  a   10.0.0.1  (IP 
  address given by ISP A)
  www  a   20.0.0.1  (IP 
  address given by ISP B)
  The goal is to use dual ISP for back-up purpose, 
  so the web server will serve for 24 hour / day.
  Since the DNS server only load balance between 
  two same host records, how about if one link is broken ?
  For example :
  Link from ISP B to Customer is 
  broken, meanwhile someone in Internet is accessing the web server 
  and the DNS server give him the IP address of  20.0.0.1, so the 
  session will time out. He will has an access to web server until the 
  DNS server give him the IP address of 10.0.0.1 (because the DNS server 
  load balance these two records).
  Are there any solutions to solve this 
  problem, so the DNS server could detect the unreachable IP address 
  and after that it would give the correct reachable IP 
  address to the client ?
   
  Thank you
   


Telephony switches

2000-09-11 Thread Erik Mintz

Hello All, can I get some suggestions on good books and/or resources to help
me get familiarized with telephony switching, in particular, the
Cisco/summafour telephony switches? I found cisco's online docs for the
VCO/4k, but I am light in experience with telephony switching and need some
more fundamental info.

Thanks,

Erik Mintz
Domestic field engineering manager
Mail.com
[EMAIL PROTECTED]


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Router Configuration Backups?? [7:70009]

2003-06-04 Thread Erik Mintz
Use a TFTP server with tripwire installed.

All you need is an old PC, a basic linux install and a free version of
tripwire.

Cost is next to nothing.

Erik Mintz

--
>From: "Stevo" 
>To: [EMAIL PROTECTED]
>Subject: Router Configuration Backups?? [7:70009]
>Date: Mon, Jun 2, 2003, 12:37 PM
>

> Hey Group,
>
> I have a number of routers that don't get their configs backed up on a
> regular basis... does anyone have (or know of) any software products out
> there that will do the backups for me...  or even better still, let me know
> if a config is changed by someone??
>
> Thanks
>
> --Stevo




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=70106&t=70009
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: FR concept question [7:71263]

2003-06-24 Thread Erik Mintz
The short answer is no.

Server1 requests a file from Server2.
At  router Chicago, a frame is created with a remote destination DLCI 100.
Encapsulated in that frame is the packet with a destination of Server 1.FR
is a layer two protocol. It only has info to forward the packet to the
remote switch with DLCI 100. This is defined by the PVC mapping.

Yes,  shorter path would be to use the frame cloud to send it to DLCI 99
directly. However, DLCI 86 and DLCI 99 are DTE devices that are not aware of
each other.

 If the frame was addressed to DLCI 99 directly, it would be dropped by the
carrier as a violation of the defined map. Since there are only ten bits
available for addressing, DLCI numbers are reused for different customers.

 Chicago  Miami
[Server2]  [Server 1]
   /\  /\
DLCI 99  DLCI 86
| --|
 ||
   DLCI 100   DLCI 200
  |/\-{HUB SITE}-/\|


Erik Mintz


--
>From: "Aaron Ajello" 
>To: [EMAIL PROTECTED]
>Subject: FR concept question [7:71263]
>Date: Tue, Jun 24, 2003, 1:05 PM
>

> This is probably a very simple concept question, but I've asked a couple
> people and haven't gotten a solid answer.
>
> If I've got two frame relay spoke sites connected point to point with a hub
> site and a server in one spoke site copies a file to a server in the other
> spoke site, does all the traffic pass through the hub site, or is it
> switched within the frame cloud?
>
> I guess what I'm wondering is does a frame cloud act somewhat like a lan,
> where initially packets will go through the default gateway and be routed
> and then the following packets will be switched?
>
> thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=71293&t=71263
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]