RE: Windows NT station to join the domain through a PIX firewall
On a LAN, open UDP ports 137 and 138, and TCP port 139. I think Allen was thinking VPN through an Internet connection. If this is the case then GRE is TCP port 47, and PPTP is TCP port 1723. Check out http://support.microsoft.com/support/kb/articles/Q150/5/43.ASP?LN=EN-USSD=g nFR=0qry=PPTP%20Portsrnk=3src=DHCS_MSPSS_gn_SRCHSPR=NTS40 (watch for word wrap) HTH, Evan -Original Message- From: Allen May [mailto:[EMAIL PROTECTED]] Sent: Monday, March 19, 2001 9:46 AM To: Udo Konstantin; 'Ehab Mohamad Abdullah'; [EMAIL PROTECTED] Subject: Re: Windows NT station to join the domain through a PIX firewall RAS or RRAS to authenticate. Ports must be opened to allow this. Also you may find you need to edit the hosts file to force it to choose a particular domain controller. Without looking the ports up I seem to remember 2 or 3 of them had to be opened. GRE and 1 or 2 more.. That info is available on microsoft.com in the support for IT Professionals section. - Original Message - From: "Udo Konstantin" [EMAIL PROTECTED] To: "'Ehab Mohamad Abdullah'" [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, March 19, 2001 8:47 AM Subject: AW: Windows NT station to join the domain through a PIX firewall First: If you want behind a FW you must authorized. Second: That is only a udp broadcast for dhcp udo -Ursprungliche Nachricht- Von: Ehab Mohamad Abdullah [mailto:[EMAIL PROTECTED]] Gesendet: Montag, 19. Marz 2001 15:38 An: [EMAIL PROTECTED] Betreff: Windows NT station to join the domain through a PIX firewall Any body has an idea on the following? How can windows NT workstation login to the domain while the NT server is behind a Firewall (PIX) ? Is it a port or another kind of traffic? Ehab _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Password Utility
Why? Depending on the encryption, you will probably need a helluva lot of processing power. If you are having password problems with Cisco equipment go here: http://www.cisco.com/warp/public/474/index.shtml (watch for word wrap) HTH, Evan -Original Message- From: The.Rock [mailto:[EMAIL PROTECTED]] Sent: Monday, March 19, 2001 10:39 AM To: [EMAIL PROTECTED] Subject: Password Utility Anyone have the password hash utility to de-crypt a password? _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Recall: Password Utility
Evan Francen would like to recall the message, "Password Utility". _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Cisco share in downfall
If you love to do networking, do networking. If you love server admin, do server admin. If you love grooming cats and dogs, groom cats and dogs. The point I am trying to make is, if you are good at what you do, and you continue to improve yourself, you will not be out of work. If you are good, your job prospects are good. If you are half-ass, your prospects will be half-ass. To me personally, it doesn't matter what the economy is doing, or what the competition is doing. I love to do what I do, I am good at what I do, and I get paid well. What else matters? Venting, Evan -Original Message- From: ahmadbilal [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 15, 2001 10:32 PM To: [EMAIL PROTECTED] Subject: Cisco share in downfall Dear all, i would like to know your comments and suggestions,as we all know IT is in shaky ground these days the hype surrounding it is fizzling out.We the network engineers are facing more and more competion and the openings once prjected seem far,what should we do ?should we continue our quest should we keep at networking or shift towards system(unix,sun,etc) or should we wait . the situation maynot be that gloomy as ive projected but we need a serious rethinking to survive ,any suggestions. Regards, _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Set VLAN question?
You would use the commands to modify the behavior of STP. To influence which port forwards and which port blocks for a particular VLAN, on redundant links. Check here: http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_6_1/cmd_ref/ setsn_su.htm#22448 (watch for word wrap) or here: http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_5_2/config/s pantree.htm#xtocid2879624 and here: http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_5_2/config/s pantree.htm#xtocid2879622 If you are not sure how Spanning Tree works, the Perlman or Webb books would be a good read. HTH, Evan -Original Message- From: mak [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 14, 2001 7:14 AM To: [EMAIL PROTECTED] Subject: Set VLAN question? !doctype html public "-//w3c//dtd html 4.0 transitional//en" html Hi, pI cannot distinguish the situation I should use portvlancost or portvlanpri. Would someone can tell me? pThanks brnbsp; pmak/html _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: DTE side clock speed
Show controllers -Original Message- From: YY [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 07, 2001 8:22 AM To: [EMAIL PROTECTED] Subject: DTE side clock speed For leased line, our router is on DTE side. How to check the clock speed we buy from the service provider ? thanks. Regards, YY _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX mem upgrade..
Hi All, The maximum RAM available for the 515 is 64MB of RAM. You would need to go to a 510 to support 128MB. Check it out here: http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v51/install/me mory.htm Hope this helps, Evan -Original Message- From: Vasudeva Venkateshaiah [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 06, 2001 12:59 PM To: '[EMAIL PROTECTED]' Subject: PIX mem upgrade.. Hi.. I am in the process of ordering a new PIX 515 with the unrestricted software feature. The documentation says the Random Access Memory for 515 is 64mb. Can this be upgraded to 128kb? What is the maximum RAM capacity? Clarification is appreciated. Thanks Vasudev. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Firewalls and VPNs
The PIX does route, but it is not a router. You can add static routes: pixfirewall(config)# route usage: [no] route if_name foreign_ip mask gateway [metric] or, you can run RIP to broadcast default route or run passive RIP: pixfirewall(config)# rip usage: [no] rip if_name default|passive [version 1|2] [authentication text| md5 key key id] The PIX can be configured differently (hardware-wise) depending on your needs. We currently run 2-515UR's each with 6 interfaces (inside, outside, and 4 DMZs). Each interface on the PIX is a seperate Fast Ethernet segment, and routing between them is done by the PIX. To display the route table on a PIX: pixfirewall(config)# show route outside 0.0.0.0 0.0.0.0 63.X.X.X 1 OTHER static WEB 10.X.X.0 255.255.255.0 10.X.X.X 1 CONNECT static dmz3 10.X.X.0 255.255.255.0 10.X.X.X 1 CONNECT static SQL 172.16.X.0 255.255.255.0 172.16.X.X 1 CONNECT static inside 192.168.100.0 255.255.255.0 192.168.X.X 1 CONNECT static dmz2 10.X.X.X 255.255.255.0 10.X.X.X 1 CONNECT static outside 198.133.219.25 255.255.255.0 63.X.X.X OTHER static The route table can be modified to point anywhere, really. Just as you could a router. Hope this helps, Evan -Original Message- From: haroldnjoe [mailto:[EMAIL PROTECTED]] Sent: Friday, February 16, 2001 11:06 AM To: [EMAIL PROTECTED] Subject: Firewalls and VPNs I've read here a couple of times that PIX's don't route. Period. In light of this I'm left a little confused as to a proposed network map I was given recently. The core layer router is a 3640 linking all of our branch offices together. From the 3640, there is an ethernet connection to a PIX 515R. From the PIX, there is another ethernet connection to a 1750 router. The 1750 connects via T1 to our ISP. There is yet another ethernet connection from the PIX to the isolation lan, on which resides an internet mail/web server and a VPN 3000 concentrator. If PIX's don't route, what subnet is the isolation lan going to sit on? As I understand it, the PIX will be providing NAT functionality for the 3640 and everything behind it. So I would assume that the T1 and ethernet interfaces on the 1750, the outside interfaces on the PIX, and everything in the isolation lan including the VPN concentrator will have to have public IP addresses which will be given to us by our ISP. The way the map is layed out, it looks to me like the isolation lan would have to be on its own subnet. What am I missing? If the PIX doesn't route, do it's ethernet interfaces reside on the same subnet as the isolation lan? If so, then the ethernet interface on the 1750 must also be on that subnet, right? This is the proposed network map that Cisco's presale engineers gave me. I'm sure it's a solid design, but I'm still trying to work out the details so that I understand what I'm implementing (always a good thing, I think). Thanks for your time, [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Which LSA type is NOT allowed in the Stub Area?
D. -Original Message- From: David Tran [mailto:[EMAIL PROTECTED]] Sent: Monday, February 12, 2001 8:58 AM To: [EMAIL PROTECTED] Subject: Which LSA type is NOT allowed in the Stub Area? Hi Everyone, I need an answer rather quickly to this question. =20 Which LSA type is NOT allowed in the Stub Area? A. Type 1, Route LSA B. Type 2, Network LSA's=20 C. Type 3, Secure LSA D. Type 5, external LSA Many thanks David [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE:
Check this link for the IANA assigned numbers, and other non-IANA registered numbers: http://www.sockets.com/services.htm RealPlayer/RealAudio is very hard to filter because it can be configured to run over TCP port 80 (HTTP). So there ya go, Evan -Original Message- From: Chris Sweeting [mailto:[EMAIL PROTECTED]] Sent: Friday, February 09, 2001 9:23 AM To: [EMAIL PROTECTED] Subject: Question I am trying to find an updated listing of all udp and tcp ports so I can write an access list to block Real Audio, or is Real audio using port 80. Or is there a better way ? Write me back at this address thanks _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Intermittent ping
All of your times are slow. 1891ms ave., with 3 timeouts/11 echoes. This could be due to alot of different things, check times from your router to your ISP router, then continue checking routers from there. A trace would give your more information on where the latency is occurring. These are my ping times: Pinging 198.133.219.25 with 32 bytes of data: Reply from 198.133.219.25: bytes=32 time=60ms TTL=246 Reply from 198.133.219.25: bytes=32 time=61ms TTL=246 Reply from 198.133.219.25: bytes=32 time=60ms TTL=246 Reply from 198.133.219.25: bytes=32 time=60ms TTL=246 Reply from 198.133.219.25: bytes=32 time=60ms TTL=246 Reply from 198.133.219.25: bytes=32 time=60ms TTL=246 Reply from 198.133.219.25: bytes=32 time=60ms TTL=246 Ping statistics for 198.133.219.25: Packets: Sent = 7, Received = 7, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 60ms, Maximum = 61ms, Average = 60ms So, to answer your question, no this is not a normal symptom, and you will have to employ some troubleshooting to find out where/what the problem is. HTH, Evan -Original Message- From: Alex Boh [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 06, 2001 9:15 AM To: [EMAIL PROTECTED] Subject: Intermittent ping Hi everyone, Hope someone can enlighten me on the preceding issue. Recently I acquired a 512Kb lease line point-to-point connection. When I ping from my PC to cisco.com (cping 198.133.219.25 -t), I got reply and some "request time out", Is this a normal symptom? Pinging cisco.com [198.133.219.25] with 32 bytes of data: Reply from 198.133.219.25: bytes=32 time=1778ms TTL=244 Request timed out. Reply from 198.133.219.25: bytes=32 time=1878ms TTL=244 Request timed out. Reply from 198.133.219.25: bytes=32 time=1661ms TTL=244 Reply from 198.133.219.25: bytes=32 time=2091ms TTL=244 Reply from 198.133.219.25: bytes=32 time=1801ms TTL=244 Request timed out. Reply from 198.133.219.25: bytes=32 time=2056ms TTL=244 Reply from 198.133.219.25: bytes=32 time=1977ms TTL=244 Reply from 198.133.219.25: bytes=32 time=1890ms TTL=244 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Show Router Model
show version, or show hardware, it will give you the base router model. Then you can determine from the interfaces installed, what router you have. Evan -Original Message- From: Liwanag, Manolito [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 06, 2001 9:51 AM To: 'Cisco Group Study' Subject: Show Router Model Hi guys, Can anyone tell me how to tell what model router you have from CLI ? I am trying to figure out what model we have in a few branches remotely (through telnet) but my brain is frozen. I can't recall the command. Can any one help ? I tried doing a sh tech but the info was flying by. How do I slow that info down ? Thank you in advanced. rgds, Manolito _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: MAC address
show cam {dynamic | static | permanent} mod_num/port_num, if this is a
set-based switch.
HTH,
Evan
-Original Message-
From: John Chang [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 05, 2001 3:52 PM
To: [EMAIL PROTECTED]
Subject: MAC address
On a network with 12 switches all connected to 1 core switch using the
default vlan 1. What is the best way to find out which port the MAC
address is broadcasted from? Thanks.
_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VLANs on Catalyst 1900 Switches
Cat1900's support VLANs. The command is from interface configuration mode, and it is vlan-membership static [vlan#]. Unless you are doing dynamic VLANs. Then substitute the static with dynamic, and configure that. 9.00.04 Enterprise definitely supports vlans, and all 1900s (1912, 1924, etc.) support this hardware-wise. I haven't worked with 8.01.00 Standard, so I can say for sure that vlans are supported, but I would be really surprised if they weren't. .02, Evan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, February 05, 2001 4:10 PM To: [EMAIL PROTECTED] Subject: VLANs on Catalyst 1900 Switches I have 2 Cat1900 switches (WS-1912-A). One has the 8.01.00 Standard Edition loaded and the other has the 9.00.04 Enterprise Edition loaded. On neither of them are any of the VLAN commands available. The Cisco ICND book covers VLANs on Cat1900 switches and a co-worker just attended a GlobalKnowledge CCNA Boot Camp where they did configure VLANs on Cat1900s (with version 8.xx loaded). In addition to the software version, is there a hardware issue? Do some Cat1900s not support VLANs? Dave Goldsmith _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Access Lists on a Cisco 7200
Woah! Make sure you do a permit any any first. Remember that there is an implicit deny any at the end of your access list! There shouldn't be a problem stopping NetBIOS at the router, a better example might look like below. Ex.: access-list 101 deny udp any any eq 137 access-list 101 permit any any HTH, Evan -Original Message- From: Scott S. [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 17, 2001 1:36 PM To: [EMAIL PROTECTED] Subject: Access Lists on a Cisco 7200 Our WatchGuard FireBox seems to be getting overloaded by the number of NetBios packets it is denying. We are thinking that it might be a good idea of blocking these at our router instead. It is a Cisco 7200 with a pretty light load. Does this sound like a sensible idea? If so I was thinking the following rule would be appropriate: access-list 101 deny any 195.50.79.0 eq 137 Is this correct, or am I way off? Thanks in advance for any replies. Sincerely, Scott _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Multicast: Router and Switch locations
You would not have to setup the router with ip multicast-routing (IGMP), unless the multicast server and clients are in seperate VLANs. The workstation doesn't need to tell the router that it joined the group when the server and clients are in the same VLAN. The server will just send the multicast data to a specific multicast group (224.0.0.1 - 239.255.255.255), then the clients listening for that group address will respond. Switches forward mulicast data out all ports except the one that the data was received on. I would think that with 10 clients on the switch, it would be overkill to add another router. Multicasting will work fine with only a switch, the traffic will just be forwarded through all ports. If you have separate VLANs, then turn on multicast routing on the switch, choose your PIM mode, and enable CGMP. The router uses CGMP to aid the switch in building the CAM table for multicast traffic. HTH, Evan -Original Message- From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 17, 2001 1:38 PM To: '[EMAIL PROTECTED]' Subject: Multicast: Router and Switch locations Currently reading about Multicast, which I have not any experience with yet. If you have a small simple LAN with 1 fileserver, 10 workstations and 1 router to the Internet: INTERNET---[router]---[switch]---[fileserver 10 workstations] In order for that fileserver to send multicast data to participating workstations without changing the topology, I would have to setup the router with IGMP and CGMP, so the workstation could tell the router that it joined a group, and the router could then inform the switch with CGMP about that workstation. The fileserver would now send multicast data and the switch would know which interface(s) to forward it out to. Since the server and every workstation has their own connection to the switch (and hence has their own individual collision domain), would I be right in assuming that it would not improve the situation to add an additional router to act like a filter between the switch and the server? INTERNET---[router]---[switch]---[10 workstations] | [router2] | [fileserver] Also, will we see multicasting work without a router or an rsm but only with a switch in the future (I know that switches don't understand IGMP)? Thanks, Ole Ole Drews Jensen Systems Network Manager CCNA, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] http://www.oledrews.com/ccnp NEED A JOB ??? http://www.oledrews.com/job _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Which Router for BGP4 ??
A 3640, for sure nothing less. Are you going to be supporting a full BGP table, or not? If you need support for a full BGP table, you need at least 128MB of RAM. Why have you chosen to run BGP instead of default routes (are you going for fault tolerance on multiple circuits)? I dunno, my 2 cents, Evan -Original Message- From: John Gesualdi [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 16, 2001 4:40 AM To: [EMAIL PROTECTED] Subject: Which Router for BGP4 ?? I need to run BGP4 with my ISP. Which router would you recommend I purchase? Should I go with a 3620,3640 or a 2650,2651? Thanks. -- John A. Gesualdi,CCNP, CCDP [EMAIL PROTECTED] The Providence Journal Company Phone (401)277-8133 Pager (401)785-6938 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Which Router for BGP4 ??
If I am not mistaken, a 3620 only supports up to 64 MB of RAM. The 3640 is the "lowest" router in the Cisco line to support 128 MB. E -Original Message- From: Andy [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 16, 2001 4:01 AM To: John Gesualdi Cc: [EMAIL PROTECTED] Subject: Re: Which Router for BGP4 ?? 3620 with 128 megs of ram should be fine. andy On Tue, 16 Jan 2001, John Gesualdi wrote: I need to run BGP4 with my ISP. Which router would you recommend I purchase? Should I go with a 3620,3640 or a 2650,2651? Thanks. -- John A. Gesualdi,CCNP, CCDP [EMAIL PROTECTED] The Providence Journal Company Phone (401)277-8133 Pager (401)785-6938 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Rip 2 and VLSM Does rip 2 support VLSM
Yes! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 16, 2001 1:43 PM To: [EMAIL PROTECTED] Subject: Rip 2 and VLSM "Does rip 2 support VLSM" Does Rip 2 support VLSM?? _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: telnetting?
No telnet daemon. You can try this, http://www.goodtechsys.com/products.htm, but why? If you need to know more about telnet, you can check the RFC here, http://www.cis.ohio-state.edu/htbin/rfc/rfc854.html. HTH, Evan -Original Message- From: Paver, Charles [mailto:[EMAIL PROTECTED]] Sent: Monday, January 15, 2001 1:02 PM To: '[EMAIL PROTECTED]' Subject: telnetting? Hi. Was wondering if someone could explain to me the following: If I want to telnet into another machine, like from pc to pc, how do i do it? I mean, I can telnet into a router or switch once I obviously know the ip address; but even when I do know the ip address of another pc, I still cant telnet into the pc on a network! Any ideas? Thanks! _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: subnetting and tcp/ip
1. 0.0 is the host portion, reserved for your host IDs, the network portion is 130.5, given the default subnet mask of 255.255.0.0. Not all network numbers end is 0s. For instance, if your subnet mask is 255.255.255.252 (classic for a point-to-point network), your network number might be 192.1.1.4. You can have a network number of 172.5.5.0. What really dictates where the network ends, and the host portion begins, is the subnet mask. In order to fully understand IP addressing, take the IP address and covert it to binary. Take your example: 130.5.0.0, in binary is 1010.0101.. (the bit values are 128 64 32 16 8 4 2 1). The default subnet mask for a class B address is .... The ones (on bits) in a subnet mask designate "network" values, while the zeros (off bits) designate values that can be used for host numbers. Remember to follow the simple rule that the host portion cannot be all 1s (broadcast), or all zeros (this network only). You really can't learn IP addressing quickly in an email, but be positive, and you will get it! 2. You can't tell if two IPs are on the same network without taking the subnet mask into consideration. You refer to a class B (subnet mask 255.255.0.0). This being the case, all 4 numbers given refer to the same network. In a default class B network, the first two octets designate the network number, leaving the last two octets for hosts. In your example, the 130.5.0.0 is the network number, and the third and fourth octet are for hosts. HTH, Evan P.S. This is a pretty good reference, but once you get it, you got it! http://www.3com.com/nsc/501302.html -Original Message- From: Paver, Charles [mailto:[EMAIL PROTECTED]] Sent: Monday, January 15, 2001 3:15 PM To: '[EMAIL PROTECTED]' Subject: subnetting and tcp/ip Am studying tcp/ip now, and have a couple of questions (believe me, this is the basics for you guys!) Im reading a tutorial on the web, and still am a little confused. I need someone to go line by line with me, please! In return, Ill give you a cookie : Take the following: 1. I have a network, ip address 130.5.0.0 (why is it 0.0)? Do all network #s end in 0? And for Class B to have the network address, must it be x.x.0.0? Cant I have something like 172.5.5.0? I understand 130, for class b, but where did they get 5 from? 2. Next I have the list of ips on my network, per pc (or device). Such as : 130.5.32.0 130.5.64.0 130.5.160.0 130.5.224.0 So, are they on the same network or not? I know that each pc must have its unique host--I dont want you guys to think Im that basic with this; yes Im weak, but I do know that with class b its network.network.host.host-- So, the host id seems to be on the same network while the host is having a dfferent id. I just get confused when I read a class B and think, which parameter has to be changed? The 3rd octect ONLY or the 4th as well. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: How can I read these files
_ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: hsrp question..a tough one for me
You CAN'T use one of your physical router IP addresses for the virtual. There will be problems with the MAC addresses learned and cached by your clients. The MAC address for the virtual router is virtual, the MAC address for the router is physical. The correct answer would be to 1)re-address your network (using a subnet mask other than 240), allowing more IP addresses, 2)use DHCP with a short lease period and lease IP addresses as needed, or 3)use ip unnumbered on the routers freeing two IP addresses and then using one of the freed addresses for your virtual. I have tried "3" in lab, and it worked fine. There are probably more solutions, but these were from the top of my head. HTH, Evan -Original Message- From: ipguru [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 11, 2001 11:09 AM To: [EMAIL PROTECTED] Subject: hsrp question..a tough one for me A question was recently posed: Two routers-subnet for 12 hosts. Do hsrp. naturally you assume a subnet for 14 hosts, one address each for router a and b. then don't you need an address for the virtual ip for hsrp. This only leaves 11 host addresses available. My question was, "can you use one of the addresses from one of the routers for the virtual ip address for hsrp". This would put you back up to 12 host addresses. Is this the right answer? thanks, bk _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: RSFC
It is my understanding that the RSFC supports the full Cisco router IOS, and therefore, supports route-maps the same. The only difference being that the RSFC uses the "interface vlan." Other than that, just the "ip policy route-map map-tag", "route-map map-tag [permit | deny] [sequence-number]", match statements, and set statements, then I think it would work just fine. hth, Evan -Original Message- From: Kent Hawkins [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 09, 2001 2:21 PM To: [EMAIL PROTECTED] Subject: RSFC Does anyone have the config for setting up policy routing on an RSFC, need to divert port 80 traffic into another VLAN without having escape out the default gateway? _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Protocol numbers
http://www.isi.edu/in-notes/iana/assignments/port-numbers hth, Evan -Original Message- From: Shane Stockman [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 09, 2001 3:07 PM To: [EMAIL PROTECTED] Subject: Protocol numbers I see in the BSCN courseware they mention something about protocol number for example igrp=9 and RIP has a UDP port of 520. Does anyone know where I could get a list of the numbers for protocols. I have searched Cisco.com but could not find. Thanks _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Spanning Tree and Root Bridge Question
Switch2 is the root bridge. Bridge ID MAC ADDR and Designated Root are identical, and cost is 0. Switch1's configuration is incorrect. Recheck your VLAN and STP configurations. HTH, Evan -Original Message- From: Giggsy [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 02, 2001 7:59 AM To: [EMAIL PROTECTED] Subject: Spanning Tree and Root Bridge Question Hi Pls refer to my Switch1 Spanning Tree display. Is this my Root Bridge? How come the MAC for Switch1 is 00-00-00-00-00-00? Any problem with this switch? it is so different from Switch2 (pls refer to the below) Switch1 (enable) sh spantree VLAN 1 Spanning tree enabled Spanning tree type ieee Designated Root 00-00-00-00-00-00 Designated Root Priority0 Designated Root Cost0 Designated Root Port1/0 Root Max Age 0 secHello Time 0 sec Forward Delay 0 sec Bridge ID MAC ADDR 00-00-00-00-00-00 Bridge ID Priority 32768 Bridge Max Age 20 secHello Time 2 sec Forward Delay 15 sec Port Vlan Port-StateCost Priority Portfast Channel_id - - -- -- Switch1 (enable) Switch2 (enable) sh spantree VLAN 1 Spanning tree enabled Spanning tree type ieee Designated Root 00-02-fc-10-40-00 Designated Root Priority32768 Designated Root Cost0 Designated Root Port1/0 Root Max Age 20 secHello Time 2 sec Forward Delay 15 sec Bridge ID MAC ADDR 00-02-fc-10-40-00 Bridge ID Priority 32768 Bridge Max Age 20 secHello Time 2 sec Forward Delay 15 sec Port Vlan Port-State Cost Priority Fast-Start Group-Method - - - -- 2/1 1 forwarding1932 disabled 2/9 1 not-connected10032 disabled 2/10 1 not-connected10032 disabled 2/11 1 not-connected10032 disabled 2/12 1 not-connected10032 disabled 2/13 1 not-connected10032 disabled 2/14 1 not-connected10032 disabled 2/15 1 not-connected10032 disabled 2/16 1 not-connected10032 disabled Switch2 (enable) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how to recover password of cat5000?
http://www.cisco.com/warp/public/474/index.shtml Evan -Original Message- From: Zhiping Li [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 13, 2000 6:04 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: how to recover password of cat5000? Hi,meganac, i read your mail about how to recover the password of catalyst 19xx,it is very helpful. But if you could tell us how to recover the password of catalyst 5xxx,6xxx? And could you please tell me how you get these information? Thanks alot. __ Do You Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions of Products. http://shopping.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: What cisco router platforms are usually deployed for BGP full routes(ie, 75000) ?
Cisco recommends that in order to accept full BGP tables, you should have a minimum of 128MB of RAM. The smallest router in the Cisco line that supports this much RAM is a 3640 (7200 and 12000 would also work fine, obviously). For partial routes, it depends on how "partial." Some ISPs won't give you the option. I would not go with anything less than a 3600 series. For default route, it depends on the traffic/options you want to employ. A 2500, 2600, 3600, etc. would work fine. My 2 cents. Evan -Original Message- From: Jaeheon Yoo [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 07, 2000 5:34 AM To: [EMAIL PROTECTED] Subject: What cisco router platforms are usually deployed for BGP full routes(ie, 75000) ? Hi, while I'm reading Halabi's book, I'm getting curious. Please let me know what cisco router platforms are usually deployed for BGP full routes? In addition to that, what are platforms for partial routes and for default routes only? Thanks in advance. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE:
http://www.cisco.com/cgi-bin/front.x/wwtraining/colt/ColtLogin.pl -Original Message- From: Ravi Kumar [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 07, 2000 6:44 AM To: [EMAIL PROTECTED] Subject: dear friends can any body tell me URL for CISCO online Tests (COLT) regards ravee Get free email and a permanent address at http://www.netaddress.com/?N=1 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: callback
Router(config-if)#no dialer callback-secure This command ensures that the initial call is always disconnected at the receiving end and the return call is made only if the username is configured for callback. If the username (hostname in the dialer map command) is not configured for callback, the initial call stays up and no return call is made. So if you want to accept callback clients as well as non-callback clients, you will need to disable callback security Hope this helps -Original Message- From: Frank [mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 22, 2000 7:47 AM To: [EMAIL PROTECTED] Subject: callback when i dial in a 3640 ,before i setup the callback ,the user "frank"works, after i setup callback ,and added the user "tom",tom works,the callback succeeded, but "frank" failed,so i guess the router must think "frank" is also a callback user.Actually ,it's not . I want to make some users be callback users,others not ,how can make such config on the router ? thanks. frank the following is cut from the running config: username frank password 0 dd username tom callback-dialstring 1001 password 0 ee ! interface Group-Async1 ip unnumbered Serial1/0 no ip directed-broadcast encapsulation ppp dialer in-band dialer callback-secure async default routing async mode interactive peer default ip address pool default ppp callback initiate ppp authentication chap group-range 65 72 ! _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: OSPF transport question...
The OSPF protocol runs directly over IP, using IP protocol 89. - From RFC1583 Evan -Original Message- From: keith wood [mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 22, 2000 4:12 AM To: [EMAIL PROTECTED] Subject: OSPF transport question... OSPF routes IP data. What part of the IP stack does OSPF itself run over? Is it TCP, UDP or does it interface directly onto IP (as ICMP does). My protocol diagrams dont make it that clear, and a search of the cisco website seems to tell you about how OSPF is structured but not how it actually is transported - any ideas? Thanks. Keith _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
COLT URL
I know that the URL has been posted before, so I apologize for my oversight... Does anyone know the URL for COLT on Cisco's web site? Thanks in advance! Evan _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: BSCN
There were no questions on AppleTalk, IPX or switching methods. You must know EIGRP, OSPF, BGP, route optimization, and some policy-based routing in order to pass. Hope this helps, Evan Francen -Original Message- From: Gene Park [mailto:[EMAIL PROTECTED]] Sent: Friday, October 20, 2000 8:32 AM To: [EMAIL PROTECTED] Subject: BSCN I'm planning to take BSCN test soon. Anyone had a question relating to AppleTalk and Nonroutable Protocol in the test ? Thank you. Gene = Gene Park [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Messenger - Talk while you surf! It's FREE. http://im.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX question***************
Use an outbound access-list. http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v44/pix44cfg/p ix44cfg.htm Hope this helps, Evan Francen -Original Message- From: Peter Gray [mailto:[EMAIL PROTECTED]] Sent: Friday, October 20, 2000 5:13 PM To: [EMAIL PROTECTED] Subject: PIX question*** In the PIX firewall I have to allow one internal address to access one external address on a specific port. I am using PIX Ver 4.4. And the outbound statement only allows either source or destination. Is there any way I can do it..? Thanks _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Router Bootup Problem
Have you ever opened the case on this router before. Try reseating the flash memory module and copying an new flash image from tftp. Evan -Original Message- From: Peter Gray [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 19, 2000 6:59 PM To: [EMAIL PROTECTED] Subject: Router Bootup Problem I have got a corrupt flash on my router. It goes to ROMMON after starting. IP doesn't start and it goes to same mood even if I change config-reg to 0x2101 . Its a 2600. See the startup message. System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1) Copyright (c) 1999 by cisco Systems, Inc. TAC:Home:SW:IOS:Specials for info C2600 platform with 24576 Kbytes of main memory device does not contain a valid magic number boot: cannot open "flash:" boot: cannot determine first file name on device "flash:" System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1) Copyright (c) 1999 by cisco Systems, Inc. TAC:Home:SW:IOS:Specials for info C2600 platform with 24576 Kbytes of main memory device does not contain a valid magic number boot: cannot open "flash:" boot: cannot determine first file name on device "flash:" System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1) Copyright (c) 1999 by cisco Systems, Inc. TAC:Home:SW:IOS:Specials for info C2600 platform with 24576 Kbytes of main memory rommon 1 Any comments! _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
