Re: CCIE communication and services [7:43714]
Based on your post above, as the lab is the same general knowledge, would you need to keep taking it, providing you have passed it once, to get more than one CCIE? Or would the various written exams suffice? Just curious. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43779&t=43714 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE communication and services [7:43714]
Sorry, I guess that wasn't very clear. Suppose you attain an R/S CCIE and now wish to go for security or C/S. As the lab is the same for all three, is it necessary to keep retaking the lab or will the written be enough? I assume you probably do have to take the lab again, however since it is the same test you have already passed,it just seems redundant. nrf wrote: > > Uh, what? I don't understand your question. If you're saying > that you're > thinking that you can just keep getting more than one C/S CCIE > by taking > that lab over and over again (but by passing different C/S > writtens), then > the answer is absolutely not. Contrary to what many people > believe, there > are no different 'flavors' of the C/S. There is only 1 C/S > CCIE, and you're > either a C/S CCIE or you're not. And really, this makes > perfect sense, > since there is only one unified C/S lab which every C/S > candidate takes, no > matter which written he/she passed. > > > > > ""Jason Owens"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Based on your post above, as the lab is the same general > knowledge, would > > you need to keep taking it, providing you have passed it > once, to get more > > than one CCIE? Or would the various written exams suffice? > Just curious. > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43821&t=43714 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE communication and services [7:43714]
OK. I have no idea if the labs are the same or not. I was basing my question on the earlier post. The deal is, you pass one of 8 possible writtens (although only 4 are available as of today), which consist of 50% general knowledge material, and the other 50% of subject-specific material, where those are defined on the Cisco website. Then, no matter which written you took, everybody takes the same lab which covers only general knowledge material. Good luck on your lab! Roberts, Larry wrote: > > Only one small flaw in logic. > > The labs are NOT the same. The security lab only has IP routing > , but it > also includes a PIX firewall as well as IDS and IOS FW problems. > Those are not present in the R&S lab ( Or at least this is what > Im told, I > haven't actually been to the lab. 45 days and counting ) > > > Thanks > > Larry > > -Original Message- > From: Jason Owens [mailto:[EMAIL PROTECTED]] > Sent: Friday, May 10, 2002 7:07 AM > To: [EMAIL PROTECTED] > Subject: Re: CCIE communication and services [7:43714] > > > Sorry, I guess that wasn't very clear. Suppose you attain an > R/S CCIE and > now wish to go for security or C/S. As the lab is the same for > all three, is > it necessary to keep retaking the lab or will the written be > enough? I > assume you probably do have to take the lab again, however > since it is the > same test you have already passed,it just seems redundant. > > nrf wrote: > > > > Uh, what? I don't understand your question. If you're > saying that > > you're thinking that you can just keep getting more than one > C/S CCIE > > by taking > > that lab over and over again (but by passing different C/S > > writtens), then > > the answer is absolutely not. Contrary to what many people > > believe, there > > are no different 'flavors' of the C/S. There is only 1 C/S > > CCIE, and you're > > either a C/S CCIE or you're not. And really, this makes > > perfect sense, > > since there is only one unified C/S lab which every C/S > > candidate takes, no > > matter which written he/she passed. > > > > > > > > > > ""Jason Owens"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Based on your post above, as the lab is the same general > > knowledge, would > > > you need to keep taking it, providing you have passed it > > once, to get more > > > than one CCIE? Or would the various written exams suffice? > > Just curious. > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43835&t=43714 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: no lmi - dlci inactive - telco says my problem? [7:44709]
This link should help. http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/tr1918.htm beth shriver wrote: > > Hello friends, I am having a little problem getting a > new long distance frame relay circuit going and > getting the ol "its your equipment" answer from telco > and not sure if this is the case or not. I have > checked cables and tsu/router config and all seems ok > . when the telco loops my csu/tsu it causes my > interface to "bounce" but interface then stays in > interface UP protocol DOWN state. Telco is saying they > see no LMI from my equipment. In the past when i seen > no LMI it always turned out to be something on the > telco side. I dont do frame relays much so i am kind > of at the mercy of tech who is turning this circuit up > so can someone give me some pointers on what i can > look for to make sure it is not in my equipment ? or > how i can tell if it is a telco issue with circuit? > any replies would be greatly appreciated! fast replies > appreciated even more!!! :) > > __ > Do You Yahoo!? > LAUNCH - Your Yahoo! Music Experience > http://launch.yahoo.com > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=44710&t=44709 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Cisco Works 2000 [7:46446]
IE 6.0 Patrick Donlon wrote: > > I've just started to use CW2000 after it had been installed by a > colleague. I have a Sun workstation and Netscape 4.78, the > problem > I have is that Netscape doesn't display all the frames > sometimes or the > data in a page. I do have a Windows machine and it does display > the > pages but very slowly. What do other people use with CW2000?? > > > Cheers > > Pat > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46472&t=46446 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IPX bridge on 6509?? [7:56533]
I have a LAN segment in which I wish to move the routing from a 7206 to a new 6509. On the 7206, The interface I want to move has the one main segment (172.16.x.y/24) and around 15 secondary interfaces of various networks (My predecessors apparently didn't like sub-interfaces). Unfortunately, IPX is also being routed off of that interface. I want to separate all of these IP networks into individual VLAN's and route between them. My question is how can I get this one IPX network amongst the vlan's that need it? Is this possible? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56533&t=56533 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IPX bridge on 6509?? [7:56533]
First, thanks for both of your responses. Ive tried to answer some of the questions in line. > > Couldn't you bridge IPX traffic between these VLANs? To do > this you > wouldn't > > put any ipx network numbers on the subinterfaces, but you > would put the > ones > > that have IPX devices in the same bridge group. > > CL: that's exactly right. works for all bridged protocols. If I make the SVIs bridged interfaces, am I not now bridging IP as well? Can you separate the protocols that you wish to bridge from the ones you wish to route?. (Are VLANs > > new to this network? Was it all one big broadcast domain Ø before??) Yes, VLANs are new to this network and it is essentially just one big broadcast domain. This is the interface that I am going to move from the 7206 to the 6509. interface FastEthernet6/0 ip address 192.168.49.61 255.255.255.252 secondary ip address 192.168.79.1 255.255.255.0 secondary ip address 192.168.80.1 255.255.255.0 secondary ip address 192.168.250.1 255.255.255.0 secondary ip address 192.168.38.1 255.255.255.0 secondary ip address 10.24.75.33 255.255.255.248 secondary ip address 172.22.8.1 255.255.248.0 no ip directed-broadcast full-duplex ipx encapsulation SAP ipx network FFA0001 The 7206 currently has a bunch of 2924's with servers (and the local LAN) hung off of it. I have a new 6509 w/ redundant sup2/msfc2/pfc2 running native 12.1(11b)E7 that will have four 4006's connected to it. All of the servers will be moved onto the 4006's and I wanted to now perform the routing between these networks on the 6509. Again, I wish to break out all of the IP networks into separate VLANs. Unfortunately a few of these ranges have servers that are using IPX as well. I need to bridge the FFA0001 network between some of these VLANs until I can get all of the clients to use IP. I was just trying to avoid having to bridge the IP as well, because at that point I effectively have the same network I started with. Hopefully, this made more sense. Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56599&t=56533 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: dot1x? [7:57109]
Dave, I ran into this the other day as well. I can't figure out what dot1x has to do with the HA for the life of me either. This isn't Cisco specific but this link is good base info: http://www.80211-planet.com/tutorials/article.php/1041171 We were looking at possibly making our LAN clients authenticate via dot1x, however we really don't have any XP in our organization, and didn't wish to pay for one of the commercial packages. In addition to that, the packages's I looked at are geared more for a wireless solution versus a wired LAN implementation.MADMAN wrote: > > Hi all, > > While doing something else I stumbled upon something I > haven't seen > and can't find any good docs on. The platform is a 6509 with > dual > supII's and the command is: > > C6509> (enable) set dot1x ? > system-auth-controlEnable/Disable dot1x on the system > max-reqSet dot1x maximum number of > retransmissions > quiet-period Set dot1x quiet period > re-authperiod Set dot1x re-authentication period > server-timeout Set dot1x server timeout > supp-timeout Set dot1x supplicant timeout > tx-period Set dot1x tx period > C6509> (enable) set dot1x > > I found it when trying to enable highavailability: > > C6509> (enable) set sys highavailability ena > Failed to enable system high availability. > Feature not allowed while DOT1X is enabled. > > Anyone have and god URLs that better describe what this > feature is all > about?? I can find the command description all over but not > when and > why I would want this feature and why is disables > highavailability. > > Thanks > > Dave > -- > David Madland > CCIE# 2016 > Sr. Network Engineer > Qwest Communications > 612-664-3367 > > "You don't make the poor richer by making the rich poorer." > --Winston > Churchill > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=57137&t=57109 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE Vs. BS or MS dergree [7:60347]
Untrue. http://urbanlegends.about.com/library/blellison.htm An email text circulating since June 2000 purports to contain a commencement address given by Oracle's flamboyant CEO, Larry Ellison, to Yale's Class of 2000. Here's a snippet of that alleged speech: As I look out before me today, I don't see a thousand hopes for a bright tomorrow. I don't see a thousand future leaders in a thousand industries. I see a thousand losers. What can you expect? Loser. Loserhood. Loser cum laude The speech goes on in that vein before closing abruptly with Ellison chiding the bodyguards who are supposedly dragging him off the stage. Is this true? It's truly funny, but it's not factual. Larry Ellison was not at Yale University's graduation ceremony in May 2000. There was no guest speaker there in fact. There was a keynote speaker, however, and that was journalist Bob Woodward, who graduated from Yale in 1965, and is now well known for his Watergate Scandal reporting for the Washington Post. And not even he said any of the things in the missive above. The material in question is simply a funny that made its first appearance on the SatireWire Website. A friend of a friend of somebody's friend, and possibly several such somebodies, then copied and pasted the text from the SatireWire web page into email, without providing proper attribution as to either the article's copyrighted source, or its author, Andrew Marlatt. But it's out there in suggestive email forwards for all the world to guffaw at and ask about, from now until kingdom come. These things just happen. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=60420&t=60347 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Help the newbie... [7:62087]
One thing you can look at is EIGRP and unequal cost load balancing. Here is a link that explains what it is: http://www.cisco.com/en/US/tech/tk648/tk365/technologies_tech_note09186a008009437d.shtml Waters, Kristina wrote: > > Everyone, > > I have a site that is currently connected with a 512k frame > relay link. We > are adding an additional T1 link to the same location. Is it > possible to > aggregate these links in such a way that traffic will be > carried across > both? If they are configured this way, will the other link > still be a valid > route if one goes down? I tried searching, but I'm not exactly > sure what to > search for. > > TIA > > Kris. > > > > > > ** > This email and any files transmitted with it are confidential > and > intended solely for the use of the individual or entity to whom > they > are addressed. If you have received this email in error please > notify > the sender by email, delete and destroy this message and its > attachments. > ** > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62090&t=62087 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Serial Interface Bandwidth [7:50381]
The command would be show service-module serial x (if it is an integrated CSU/DSU). rtr#sh ser ser 0 Module type is T1/fractional Hardware revision is 0.96, Software revision is 0.2, Image checksum is 0x70F47262, Protocol revision is 0.1 Receiver has no alarms. Framing is ESF, Line Code is B8ZS, Current clock source is line, Fraction has 2 timeslots (64 Kbits/sec each), Net bandwidth is 128 Kbits/sec. Henry D. wrote: > > That would work if you have integrated CSU, the timeslots would > be there. > If you connect say with V.35 to an external CSU/DSU then you > won't get the > timeslot information. The only way to figure out the bandwidth > then would be > to stress-test the circuit and see how far you can get the > bandwidth > utilization > on this interface. > > ""Turpin, Mark"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > A show interface serial 'x' > > where x = the serial interface's number will tell you > > a couple things that are important. > > > > 1) the 5 minute load average for input/output > > 2) the timeslots used > > > > You can use the timeslots to determine the bandwidth > > that is technically available, and the load average > > to get an idea of what is currently being used. > > > > hth, > > -mark > > > > -Original Message- > > From: Curious [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, August 01, 2002 9:43 AM > > To: [EMAIL PROTECTED] > > Subject: Serial Interface Bandwidth [7:50381] > > > > > > I want to know the current bandwidth of my serial Interface > of Router. > Lets > > say i have a fractional T1, how would i know what bandwidth i > have for my > > serial interface. > > > > thanks, > > "The information transmitted is intended only for the person > or entity to > > which it is addressed and may contain confidential and/or > privileged > > material. Any review, retransmission, dissemination or other > use of, or > > taking of any action in reliance upon, this information by > persons or > > entities other than the intended recipient is prohibited. If > you received > > this in error, please contact the sender and delete the > material from all > > computers." > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=50410&t=50381 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
load balance/share [7:50988]
I am trying to lab up a scenario where I can load balance/share across two routers (for redundancy) connected into an MPLS cloud. Additionally, I have HSRP running between the two (I don't want to use MHSRP because I don't want two gateways on the LAN). There is a direct connection between the routers. I know I can use statics, however I want all traffic to be able to failover to the remaining link if one goes down, instead of being being blackholed. | | | | Router 1---Router 2 activestandby I have tried with EIGRP, however I was having trouble with getting a default route injected in (without using statics). Is there any way to do this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=50988&t=50988 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: load balance/share [7:50988]
Mark, Your diagram is correct. I am trying to load balance/share across the links to the PER (per-packet preferably). The clients are behind Rtr A & B using an HSRP address. So say Rtr A is the active router. I want to load balance across both links (half of the traffic needs to traverse out Rtr A's ser0 and the other half across the link to Rtr B and then out it's ser0). If I use a static and one link goes down, half of my traffic becomes blackholed. I was trying to find a way to have a default route put into a routing protocol so the routing process would recognize that if one link was down that it needed to send all traffic out the remaining link. Is this clearer? Turpin, Mark wrote: > > Jason, > > Is this your lab network? > > > + PE Rtr + > > / \ > / \ > + > + RtrA +--+ Rtr B + > + > \-> Client Networks > With that diagram, or a revised one, can you clarify > your question? You mention statics; what routers are > you trying to advertise statics to, and from what router > are you wishing to advertise them? > > In regards to load balancing, are you asking if you > can load balance clients to router A and router B? > Or do you want to load balance the PE router to A&B? > > Thanks, > -Mark > > > -Original Message- > From: Jason Owens [mailto:[EMAIL PROTECTED]] > Sent: Thursday, August 08, 2002 4:16 PM > To: [EMAIL PROTECTED] > Subject: load balance/share [7:50988] > > > I am trying to lab up a scenario where I can load balance/share > across two > routers (for redundancy) connected into an MPLS cloud. > Additionally, I have > HSRP running between the two (I don't want to use MHSRP because > I don't want > two gateways on the LAN). There is a direct connection between > the routers. > > I know I can use statics, however I want all traffic to be able > to failover > to the remaining link if one goes down, instead of being being > blackholed. > > | | > | | > Router 1---Router 2 > active standby > > I have tried with EIGRP, however I was having trouble with > getting a default > route injected in (without using statics). Is there any way to > do this? > "The information transmitted is intended only for the person > or entity to > which it is addressed and may contain confidential and/or > privileged > material. Any review, retransmission, dissemination or other > use of, or > taking of any action in reliance upon, this information by > persons or > entities other than the intended recipient is prohibited. If > you received > this in error, please contact the sender and delete the > material from all > computers." > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=51060&t=50988 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: load balance/share [7:50988]
Mark, I have looked EIGRP in this regard. My issue seems to be with the default route. If put it in statically there is no failover if one link goes down, and I can't figure out another way to get it in. I have looked at bgp to resolve this as well (both routers need it to peer with the PER anyway), however since the connection between Rtr A and B is IBGP, the EBGP route from the PER takes precedence and there is no load sharing. Turpin, Mark wrote: > > Jason, > Lots! Basically your network looks like this: > >PER > m10/ \m10 > AB >m10 > > Let's say a metric of 10 for each link for example? > A->PER = 10 > A->B->PER = 20 > > Before we get really far into this, have you looked into > EIGRP's capability to load balance across unequal cost paths? > Modifying the variance on your CE routers should do the trick. > http://www.cisco.com/warp/public/103/eigrp1.html > http://www.cisco.com/warp/public/103/eigrp9.html > http://www.cisco.com/warp/public/103/19.html > > One question though when you do this: > I have not tried a HSRP impelmentation like this. > Variance should be local to the router. Please let > me know if Router A changes the way it advertises > its metrics to router B once variance is implemented. > > Thanks, > -Mark > > > -Original Message- > From: Jason Owens [mailto:[EMAIL PROTECTED]] > Sent: Friday, August 09, 2002 11:05 AM > To: [EMAIL PROTECTED] > Subject: RE: load balance/share [7:50988] > > > Mark, > Your diagram is correct. I am trying to load balance/share > across the > links to the PER (per-packet preferably). The clients are > behind Rtr A & B > using an HSRP address. So say Rtr A is the active router. I > want to load > balance across both links (half of the traffic needs to > traverse out Rtr A's > ser0 and the other half across the link to Rtr B and then out > it's ser0). If > I use a static and one link goes down, half of my traffic > becomes > blackholed. I was trying to find a way to have a default route > put into a > routing protocol so the routing process would recognize that if > one link was > down that it needed to send all traffic out the remaining link. > Is this > clearer? > > Turpin, Mark wrote: > > > > Jason, > > > > Is this your lab network? > > > > > > + PE Rtr + > > > > / \ > > / \ > > + > > + RtrA +--+ Rtr B + > > + > > \-> Client Networks > > With that diagram, or a revised one, can you clarify > > your question? You mention statics; what routers are > > you trying to advertise statics to, and from what router > > are you wishing to advertise them? > > > > In regards to load balancing, are you asking if you > > can load balance clients to router A and router B? > > Or do you want to load balance the PE router to A&B? > > > > Thanks, > > -Mark > > > > > > -Original Message- > > From: Jason Owens [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, August 08, 2002 4:16 PM > > To: [EMAIL PROTECTED] > > Subject: load balance/share [7:50988] > > > > > > I am trying to lab up a scenario where I can load > balance/share > > across two > > routers (for redundancy) connected into an MPLS cloud. > > Additionally, I have > > HSRP running between the two (I don't want to use MHSRP > because > > I don't want > > two gateways on the LAN). There is a direct connection between > > the routers. > > > > I know I can use statics, however I want all traffic to be > able > > to failover > > to the remaining link if one goes down, instead of being being > > blackholed. > > > > | | > > | | > > Router 1---Router 2 > > activestandby > > > > I have tried with EIGRP, however I was having trouble with > > getting a default > > route injected in (without using statics). Is there any way to > > do this? > "The information transmitted is intended only for the person > or entity to > which it is addressed and may contain confidential and/or > privileged > material. Any review, retransmission, dissemination or other > use of, or > taking of any action in reliance upon, this information by > persons or > entities other than the intended recipient is prohibited. If > you received > this in error, please contact the sender and delete the > material from all > computers." > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=51244&t=50988 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Interesting Situation with a 2948G-L3 and Inter-VL [7:51240]
I am not sure about the 2948, however with the 2950T it is spanning-tree portfast applied from the interface. 2840-1st-sw1(config-if)#int fa0/1 2840-1st-sw1(config-if)#spanning-tree portfast %Warning: portfast enabled on FastEthernet0/1. Usually portfast should be enabled on ports connected to a single host. When portfast is enabled, connecting hubs, concentrators, switches, bridges, etc. to this interface may cause temporary spanning tree loops. Use with CAUTION. Don Pezet wrote: > > Priscilla and Cisco_Maniac, > > Well, I have been tinkering around with it a bit more (which is > pretty much how I got here) and here are my findings. First, I > went > ahead and did a 'debug span events' on the 2948G-L3 and noticed > no > convergence issues... actually no events at all. A quick 'show > span' > returned the following: > > > Bridge group 1 is executing the IEEE compatible Spanning Tree > protocol > Bridge Identifier has priority 32768, address 0001.c779.f807 > Configured hello time 2, max age 20, forward delay 15 > We are the root of the spanning tree > Topology change flag not set, detected flag not set > Times: hold 1, topology change 35, notification 2 > hello 2, max age 20, forward delay 15 > Timers: hello 1, topology change 0, notification 0 > bridge aging time 300 > > Port 4 (FastEthernet1) of Bridge group 1 is forwarding >Port path cost 19, Port priority 128 >Designated root has priority 32768, address 0001.c779.f807 >Designated bridge has priority 32768, address 0001.c779.f807 >Designated port is 4, path cost 0 >Timers: message age 0, forward delay 0, hold 0 >BPDU: sent 40808, received 0 > > ... Removed additional ports (2 - 46) > > Port 50 (FastEthernet47) of Bridge group 1 is forwarding >Port path cost 19, Port priority 128 >Designated root has priority 32768, address 0001.c779.f807 >Designated bridge has priority 32768, address 0001.c779.f807 >Designated port is 50, path cost 0 >Timers: message age 0, forward delay 0, hold 0 >BPDU: sent 40865, received 0 > > Port 54 (FastEthernet48.1 ISL) of Bridge group 1 is forwarding >Port path cost 19, Port priority 128 >Designated root has priority 32768, address 0001.c779.f807 >Designated bridge has priority 32768, address 0001.c779.f807 >Designated port is 54, path cost 0 >Timers: message age 0, forward delay 0, hold 0 >BPDU: sent 40867, received 0 > > Port 56 (GigabitEthernet49.1 ISL) of Bridge group 1 is > forwarding >Port path cost 4, Port priority 128 >Designated root has priority 32768, address 0001.c779.f807 >Designated bridge has priority 32768, address 0001.c779.f807 >Designated port is 56, path cost 0 >Timers: message age 0, forward delay 0, hold 0 >BPDU: sent 40874, received 5 > > Bridge group 2 is executing the IEEE compatible Spanning Tree > protocol > Bridge Identifier has priority 32768, address 0001.c779.f836 > Configured hello time 2, max age 20, forward delay 15 > We are the root of the spanning tree > Topology change flag not set, detected flag not set > Times: hold 1, topology change 35, notification 2 > hello 2, max age 20, forward delay 15 > Timers: hello 0, topology change 0, notification 0 > bridge aging time 300 > > Port 55 (FastEthernet48.2 ISL) of Bridge group 2 is forwarding >Port path cost 19, Port priority 128 >Designated root has priority 32768, address 0001.c779.f836 >Designated bridge has priority 32768, address 0001.c779.f836 >Designated port is 55, path cost 0 >Timers: message age 0, forward delay 0, hold 0 >BPDU: sent 40867, received 0 > > Port 57 (GigabitEthernet49.2 ISL) of Bridge group 2 is > forwarding >Port path cost 4, Port priority 128 >Designated root has priority 32768, address 0001.c779.f836 >Designated bridge has priority 32768, address 0001.c779.f836 >Designated port is 57, path cost 0 >Timers: message age 0, forward delay 0, hold 0 >BPDU: sent 40876, received 6 > > Bridge group 10 is executing the IEEE compatible Spanning Tree > protocol > Bridge Identifier has priority 32768, address 0001.c779.f907 > Configured hello time 2, max age 20, forward delay 15 > We are the root of the spanning tree > Topology change flag not set, detected flag not set > Times: hold 1, topology change 35, notification 2 > hello 2, max age 20, forward delay 15 > Timers: hello 1, topology change 0, notification 0 > bridge aging time 300 > > Port 58 (GigabitEthernet49.10 ISL) of Bridge group 10 is > forwarding >Port path cost 4, Port priority 128 >Designated root has priority 32768, address 0001.c779.f907 >Designated bridge has priority 32768, address 0001.c779.f907 >Designated port is 58, path cost 0 >Timers: message age 0, forward delay 0, hold 0 >BPDU: sent 40874, received 4 > > Bridge group 20 is executing the IEEE compat
RE: load balance/share [7:50988]
Yes. There is a "logical" hub on the other side of the PER that has the servers these pc's need access to and the internet pipe. Unfortunately the PER is not a cisco device, so I can't do a 'no ip summary' towards rtr A. I can do it from B, however then I can't load share across the two links. If I use a static towards the PER on A, it goes into the table over the summary from B. No load share, No Good. As for bgp, which the PER and my routers use to peer, I have tried the default-originate. In that case Rtr A accepts the default from the PER and puts it into it's table. Rtr B does the same and then passes the default route to A across the shared link. Rtr A & B are IBGP peers so A never considers the fact that there are two possible defaults out (to load share) because a route from an EBGP peer is preferred over the IBGP peer. Again no load share. Thanks for all your help so far, however I think you are starting to see my dilemma. It is a requirement that there be two active links for quick failover in case one goes down. The design was for the speed of each link to be set at @ 3/4 of what the site needs and load balance across them. Do you have any other suggestions? Turpin, Mark wrote: > > Jason, > > Where are you trying to advertise a default route from? The > PER? > If so, check out > http://www.cisco.com/warp/public/103/eigrp8.html > where it discusses using a summary per interface to advertise a > default to neighbors. You could stick this on your PER's > interfaces > towards RtrA and RtrB. If we're talking about BGP, you can have > your PER advertise a default with 'neighbor x.x.x.x > default-originate' > http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipr > rp_r/bgp_r/1rfbgp1.htm#xtocid46 > (wrap there) > > Let me know if this is what you meant, or if this works out for > you. > > hth, > -Mark > > -Original Message- > From: Jason Owens [mailto:[EMAIL PROTECTED]] > Sent: Monday, August 12, 2002 12:29 PM > To: [EMAIL PROTECTED] > Subject: RE: load balance/share [7:50988] > > > Mark, > I have looked EIGRP in this regard. My issue seems to be with > the > default > route. If put it in statically there is no failover if one link > goes down, > and I can't figure out another way to get it in. I have looked > at bgp to > resolve this as well (both routers need it to peer with the PER > anyway), > however since the connection between Rtr A and B is IBGP, the > EBGP route > from the PER takes precedence and there is no load sharing. > > Turpin, Mark wrote: > > > > Jason, > > Lots! Basically your network looks like this: > > > >PER > > m10/ \m10 > > AB > >m10 > > > > Let's say a metric of 10 for each link for example? > > A->PER = 10 > > A->B->PER = 20 > > > > Before we get really far into this, have you looked into > > EIGRP's capability to load balance across unequal cost paths? > > Modifying the variance on your CE routers should do the trick. > > http://www.cisco.com/warp/public/103/eigrp1.html > > http://www.cisco.com/warp/public/103/eigrp9.html > > http://www.cisco.com/warp/public/103/19.html > > > > One question though when you do this: > > I have not tried a HSRP impelmentation like this. > > Variance should be local to the router. Please let > > me know if Router A changes the way it advertises > > its metrics to router B once variance is implemented. > > > > Thanks, > > -Mark > > > > > > -Original Message- > > From: Jason Owens [mailto:[EMAIL PROTECTED]] > > Sent: Friday, August 09, 2002 11:05 AM > > To: [EMAIL PROTECTED] > > Subject: RE: load balance/share [7:50988] > > > > > > Mark, > > Your diagram is correct. I am trying to load > balance/share > > across the > > links to the PER (per-packet preferably). The clients are > > behind Rtr A & B > > using an HSRP address. So say Rtr A is the active router. I > > want to load > > balance across both links (half of the traffic needs to > > traverse out Rtr A's > > ser0 and the other half across the link to Rtr B and then out > > it's ser0). If > > I use a static and one link goes down, half of my traffic > > becomes > > blackholed. I was trying to find a way to have a default route > > put into a > > routing protocol so the routing process would recognize that > if > > one link was > > down that it needed to send all traffic out the remaining > link. > > Is this > > clearer? > >
RE: Help, Switching Solution with 4006 [7:51799]
Have you thought about using copper as an alternative to the GBICs and fiber? We use the 48 port 10/100/1000 blades with the 2950T switches (2 copper 10/100/1000 uplinks). This setup has been working well for us. Tim O'Brien wrote: > > Rik is correct. The SupIII only supports IP routing protocols. > To get layer3 > IPX in the 4000 you will need to install the 4232 L3 blade and > the enhanced > IOS image for it. This would not be very clean. Do they really > need the IPX? > Maybe you can pitch a conversion from IPX to IP while > installing the switch. > I also notice that you have the 5483 TX GBIC's specked out. Are > your cable > runs within the distance limitations? When you are talking > about running > between floors you better have them tested to be sure. > > Tim > CCIE 9015, CSS1 > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of > Larkin, Richard > Sent: Wednesday, August 21, 2002 4:43 AM > To: [EMAIL PROTECTED] > Subject: RE: Help, Switching Solution with 4006 [7:51799] > > > I was told by Cisco that Sup III didn't support IPX routing! > > Rik > > -Original Message- > From: Wayne Jang [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, 21 August 2002 8:29 AM > To: [EMAIL PROTECTED] > Subject: Help, Switching Solution with 4006 [7:51799] > > > Hi, > > I am proposing the following LAN solution to a customer. Does > it make > sense? > > -WS-C4006-S3(sup III engine) > Do I need special licenses for this? The customer will be > using IP and IPX. > I saw some licensing software for the Sup III that was around > $1700 for both > IP and IPX. I don't know that that is all about. > > -One 48 port RJ45 blade for servers and workstations on same > floor > > -One 6 port GBIC blade (WS-X4306-GB) that will be used to > connect to five > WS-2950s on different floors > > -I will use the WS-5483 GBICs to connect the 2950s to the six > port > WS-X4306-GB > > Can anyone think of things I haven't considered? > > Thanks > Wayne > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=51830&t=51799 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Network Management Sofware [7:52886]
I like the event notifications of Network Performance Monitor better. It allows you to get them by interfaces going up/down as opposed to the entire router. However, the What's Up network mapping feature is nice. In any case, Network Performance Monitor is one of a suite of tools that are all pretty useful. http://www.solarwinds.net/Tools/Engineer/index.htm Albert Lu wrote: > > Hi, > > You might want to check out What's Up Gold by IPSwitch. > > http://www.ipswitch.com/ > > Regards, > > Albert Lu > CCIE #8705 > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of > Linda & Vaughan Beckerling > Sent: Sunday, September 08, 2002 6:16 PM > To: [EMAIL PROTECTED] > Subject: Network Management Sofware [7:52886] > > > Anyone know of some great shareware/freeware or low cost > Network management > software. To run on win 2000 server/desktop and analyse > traffic flows and > report link state. We host multiple small business WAN's > providing remote > office connectivity soutions. > > HP Open View is prohibitively expensive and Cisco Works will > cost the > company upwards of $2200 and at this price, my CIO would rather > purchase > another 1700 router. > > We are having bandwidth problems (limited bandwidth via 256k > leased line). > Our ISP is implementing a Lucent AP450 QOS box as a managed > solution and it > is just compounding the problem. Also, my CIO is concerned that > if I > implement an IOS based SNMP solution it will add to the > protocol overhead. > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=52930&t=52886 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco 4507 [7:52942]
I am having trouble finding information on this. Do you have a link? MADMAN wrote: > > It kinda seems like a little 6500. I don't know that it will > be too > bug riddled though, nothing radically new here just some of the > features > of it's big brother. > > Question is how do I justify getting one in the lab!! > > Dave > > Michael Greenbaum wrote: > > > > I was playing around on the Configurator this morning pricing > out a design I > > am doing and saw Cisco is now offering the 4507R. Its a 7 > Slot 4006 set for > > Redundant Supe's. Looked wild but I am going to wait on > sticking it in my > > designs until they work out the bugs... > > > > Any thoughts? > > > > ---Michael > > > > > _ > > Send and receive Hotmail on your mobile device: > http://mobile.msn.com > -- > David Madland > CCIE# 2016 > Sr. Network Engineer > Qwest Communications > 612-664-3367 > > "You don't make the poor richer by making the rich poorer." > --Winston > Churchill > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=52977&t=52942 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: IP subnet Tool - Slightly off topic [7:52999]
This entire suite might be overkill for you if you only want to keep track of subnets, but Subnet List is one of the tools in it. http://solarwinds.net/Tools/Network_Discovery/SubnetList/index.htm Robert Fowler wrote: > > Good morning, > > I've been using an excel spreadsheet to track about 100+ sites > on our > network as far as subnetting etc. But we are going to be moving > to a > standardized subnetting scheme and I was wondering if anyone > had an access > database tool or other program that they would recommend for ip > subnet > tracking so you don't use duplicates ranges when adding a site > etc. Does > anyone know of a tool that will handle this? > > > > Robert Fowler > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=53012&t=52999 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Duplicate packets with same SEQ #'s... [7:53024]
Have you looked at your spanning-tree? I had something similar happen to me because of a malfunctioning gig port. I would have sworn I didn't have a loop, but it ended up being a port was sending that by all appearances was blocking. We found many instances of the same packet circling through our switches by using a sniffer. r34rv13wm1rr0r wrote: > > This is from a tcpdump off of one of my core switches. It > appears that it is > logging a duplicate packet with the same SEQ #. Does any one > have any idea > why this is occuring? > > Thanks, > > A > > 11:18:04.688408 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 1:65(64) ack 49 > win 8320NBT Packet (DF) > 11:18:04.688409 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 1:65(64) ack 49 > win 8320NBT Packet (DF) > > 11:18:04.688643 172.X.103.10.netbios-ssn > 172.X.15.15.1503: P > 158405518:158405625(107) ack 1210141117 win 8608NBT Packet (DF) > 11:18:04.688644 172.X.103.10.netbios-ssn > 172.X.15.15.1503: P > 0:107(107) ack > 1 win 8608NBT Packet (DF) > > 11:18:04.688645 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 65:119(54) ack > 98 win 8271NBT Packet (DF) > 11:18:04.688646 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 65:119(54) ack > 98 win 8271NBT Packet (DF) > > 11:18:04.63 X.X.6.3.http > 172.X.14.50.1123: . ack > 4294967295 win 8155 > (DF) > 11:18:04.65 X.X.6.3.http > 172.X.14.50.1123: . ack > 4294967295 win 8155 > (DF) > > 11:18:04.66 172.23.27.10.3021 > 172.X.15.10.netbios-ssn: P > 3194256684:3194256844(160) ack 95965178 win 7515NBT Packet (DF) > 11:18:04.67 172.23.27.10.3021 > 172.X.15.10.netbios-ssn: P > 0:160(160) ack > 1 win 7515NBT Packet (DF) > > 11:18:04.68 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 119:173(54) ack > 147 win 8222NBT Packet (DF) > 11:18:04.69 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 119:173(54) ack > 147 win 8222NBT Packet (DF) > > 11:18:04.688890 172.X.15.15.1503 > 172.X.103.10.netbios-ssn: P > 1:161(160) ack > 107 win 7996NBT Packet (DF) > 11:18:04.688891 172.X.15.15.1503 > 172.X.103.10.netbios-ssn: P > 1:161(160) ack > 107 win 7996NBT Packet (DF) > > 11:18:04.689183 172.X.15.10.netbios-ssn > 172.23.27.10.3021: P > 1:129(128) ack > 160 win 8138NBT Packet (DF) > 11:18:04.689185 172.X.15.10.netbios-ssn > 172.23.27.10.3021: P > 1:129(128) ack > 160 win 8138NBT Packet (DF) > > 11:18:04.689186 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 173:255(82) ack > 196 win 8173NBT Packet (DF) > 11:18:04.689187 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 173:255(82) ack > 196 win 8173NBT Packet (DF) > > 11:18:04.689188 172.X.15.151.ssh > 172.X.53.186.1219: P > 2849560709:2849560801(92) ack 2980294350 win 9648 (DF) [tos > 0x10] > 11:18:04.689189 172.X.15.151.ssh > 172.X.53.186.1219: P > 0:92(92) ack 1 win > 9648 (DF) [tos 0x10] > > 11:18:04.689192 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 255:309(54) ack > 245 win 8124NBT Packet (DF) > 11:18:04.689193 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 255:309(54) ack > 245 win 8124NBT Packet (DF) > > 11:18:04.689608 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 309:363(54) ack > 294 win 8075NBT Packet (DF) > 11:18:04.689609 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 309:363(54) ack > 294 win 8075NBT Packet (DF) > > 11:18:04.689610 172.X.243.6.printer > 172.X.240.10.723: . ack > 4096314569 win > 2144 > 11:18:04.689610 172.X.243.6.printer > 172.X.240.10.723: . ack 1 > win 2144 > > 11:18:04.689611 172.X.53.186.1219 > 172.X.15.151.ssh: P > 1:45(44) ack 92 win > 16724 (DF) > 11:18:04.689612 172.X.53.186.1219 > 172.X.15.151.ssh: P > 1:45(44) ack 92 win > 16724 (DF) > > 11:18:04.689614 172.X.61.103.1066 > 172.X.15.49.netbios-ssn: P > 294:343(49) ack > 363 win 7380NBT Packet (DF) [tos 0x4] > 11:18:04.718183 172.X.61.103.1066 > 172.X.15.49.netbios-ssn: P > 6762:6811(49) > ack 8223 win 8397NBT Packet (DF) [tos 0x4] > > 11:18:04.718187 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 8223:8287(64) > ack 6811 win 7438NBT Packet (DF) > 11:18:04.718188 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 8223:8287(64) > ack 6811 win 7438NBT Packet (DF) > > 11:18:04.718423 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 8287:8341(54) > ack 6860 win 7389NBT Packet (DF) > 11:18:04.718424 172.X.15.49.netbios-ssn > 172.X.61.103.1066: P > 8287:8341(54) > ack 6860 win 7389NBT Packet (DF) > > 11:18:04.718425 172.X.240.220.6103 > 172.X.15.68.4720: . > 2920:4380(1460) ack 1 > win 16816 (DF) > 11:18:04.718586 172.X.240.220.6103 > 172.X.15.68.4720: . > 4380:5840(1460) ack 1 > win 16816 (DF) > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=53027&t=53024 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
2924 reboots when I plug in a console cable [7:53135]
When I plug in a console cable to some of my 2924's they reboot (My coworker is convinced that it is Win2000 sending out a probe because of plug-and-play). I have only seen this on the 2924 and it doesn't happen on all of the ones I have. Has this happened to anyone else? I have been unable to find anything about this on the Cisco web site. Here is a sh ver from one of the switches this has happened on: Cisco Internetwork Operating System Software IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)XU, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2000 by cisco Systems, Inc. Compiled Mon 03-Apr-00 16:37 by swati Image text-base: 0x3000, data-base: 0x00301398 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=53135&t=53135 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: RE: 2924 reboots when I plug in a console cabl [7:53135]
I actually am using a Dell laptop. I guess I'll have to look at that too. I was just going to upgrade the IOS on all of these switches. Thanks. [EMAIL PROTECTED] wrote: > > Are you using a DELL laptop. There is know problem with the > Dell's and some Cisco devices. Check CCO for more details. > > > > From: "Haakon Claassen (hclaasse)" > > Date: 2002/09/11 Wed PM 04:14:33 EDT > > To: [EMAIL PROTECTED] > > Subject: RE: 2924 reboots when I plug in a console cable > [7:53135] > > > > Never had it > > > > Configured over a hundred of these devices the field > > Using w2k and XP with Hyperterm or terraterm > > > > regs > > > > > > Haakon Claassen > > EMEA - IT Transport Services -WAN > > > > Cisco Systems > > De Kleetlaan 6b - Pegasus Park > > B-1831 Diegem (Belgium) > > > > > > > > -Original Message- > > From: Jason Owens [mailto:[EMAIL PROTECTED]] > > Sent: woensdag 11 september 2002 21:51 > > To: [EMAIL PROTECTED] > > Subject: 2924 reboots when I plug in a console cable [7:53135] > > > > When I plug in a console cable to some of my 2924's they > reboot (My > > coworker > > is convinced that it is Win2000 sending out a probe because of > > plug-and-play). I have only seen this on the 2924 and it > doesn't happen > > on > > all of the ones I have. Has this happened to anyone else? I > have been > > unable > > to find anything about this on the Cisco web site. > > > > Here is a sh ver from one of the switches this has happened > on: > > > > Cisco Internetwork Operating System Software > > IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version > 12.0(5)XU, RELEASE > > SOFTWARE (fc1) > > Copyright (c) 1986-2000 by cisco Systems, Inc. > > Compiled Mon 03-Apr-00 16:37 by swati > > Image text-base: 0x3000, data-base: 0x00301398 > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=53254&t=53135 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco 4500 switches [7:53568]
A few people, along with myself, had been wondering about the 4500 series switches. Here is part of an email I just received. **New Catalyst 4500 Series Modular Switches and Supervisor IV** Integrated Resiliency for Advanced Control of Converged Networks Cisco is pleased to externally announce the Catalyst 4500 Series of Modular Switches targeted at Enterprise and Metro Ethernet customers. A next generation Catalyst 4000 Family platform, the Catalyst 4500 series includes three new Catalyst chassis: Catalyst 4507R (7-slot), Catalyst 4506 (6-slot) and Catalyst 4503 (3-slot). All three chassis will support the new Supervisor Engine IV which integrates non-blocking Layer 2/3/4 switching with integrated resiliency, further enhancing control of converged networks. Integrated resiliency enhancements offered in the Catalyst 4500 series include 1+1 supervisor engine redundancy (Catalyst 4507R with Supervisor IV only), integrated in-line power for IP telephony, software based fault tolerance and 1+1 power supply redundancy. Integrated resiliency in both hardware and software minimizes network downtime, ensuring workforce productivity, profitability, and customer success. Orderability for all three Catalyst 4500 Series Chassis and Supervisor IV is immediate. All products are shipping with normal new product leadtimes. (3 weeks) Catalyst 4500 Datasheet http://www.cisco.com/warp/public/cc/pd/si/casi/ps4324/prodlit/c4500_ds.htm Supervisor IV DataSheet: http://www.cisco.com/warp/public/cc/pd/si/casi/ps4324/ps4334/prodlit/sup4_ds.htm Q&A: http://www.cisco.com/warp/public/cc/pd/si/casi/ps4324/prodlit/c4500_qp.htm Catalyst 4500 Series Homepage with links to other Exciting Documents http://www.cisco.com/warp/public/cc/pd/si/casi/ps4324/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=53568&t=53568 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VPNs and CEF [7:74429]
I have a remote site that is looking into getting 4 T1's to the internet and tunneling all traffic to my site (3015 concentrator with redundant DS3's). Clearly I can't use CEF per-destination as there is only one source-dest. pair and I want to utilize all T1's. Are there any issues with CEF per-packet load balancing and VPN's that I should worry about? Any other options or suggestions? Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74429&t=74429 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html