RE: More about Linux VS. Cisco [7:66811]

2003-04-04 Thread Jason Steig
I agree also that the best mix to have is definitly Cisco expertise and
Linux/Unix expertise ebcuase they realy go hand in hand in an enterprise
environment.  I know yahoo runs their e-mail on sendmail servers so unix and
linux is very widly used.  In some cases it's much easier then microsoft too
becuase your dealing with 1 to 2 files at the most with several programs.
Sendmail is one file, Bind is about 3 files. Apache is one files you have to
modify.  I'am studying for my CCNP along side learning solaris 8 and
redhat.  I use minicom in redhat to console to my routers. See yah hyper
terminal.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66860&t=66811
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: route-maps from one neighbor [7:66371]

2003-04-01 Thread Jason Steig
what i was going for was to simulate an isp . so i was trying to inject more
as's into the path


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66594&t=66371
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


BGP can't find origin [7:66571]

2003-03-31 Thread Jason Steig
when you see this message does this mean there is a router loop or that BGP
just can't find the origin?  Is this command going to affect routing in
anyway?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66571&t=66571
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


route-maps from one neighbor [7:66371]

2003-03-28 Thread Jason Steig
I have a question about route maps.  For example i'am peering between two
different AS.  On the left there is AS 200 and on the right AS 1.  AS 200 is
sending a bunch of EBGP routes to AS 1.  Two routes for example 192.168.1.0
and 192.168.2.0 are coming into AS 1 and the edge router wants to prepend AS
400 to 192.168.1.0 and prepend AS 500 to 192.168.2.0.  Now I set up the
route maps correctly but your only allowed to apply one route-map statement
per neighbor in BGP.  Then if you set two permit instances in the one
route-map it will match the first and prepend 192.168.1.0 with 400 but then
it stops and does not prepend the 500 to 192.168.2.0.  Why is that and how
can this be done?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66371&t=66371
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: tftp to flash timeout [7:64226]

2003-03-02 Thread Jason Steig
whoopppsss


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=64238&t=64226
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: tftp to flash timeout [7:64226]

2003-03-02 Thread Jason Steig
actually i don't think i have enough ram


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=64231&t=64226
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


tftp to flash timeout [7:64226]

2003-03-02 Thread Jason Steig
Copyright (c) 1986-1995 by cisco Systems, Inc.
Compiled Wed 01-Nov-95 15:04 by vatran
Image text-base: 0x600087E0, data-base: 0x60248000

ROM: System Bootstrap, Version 5.2(7b) [mkamson 7b], RELEASE SOFTWARE (fc1)

Router uptime is 33 minutes
System restarted by power-on
Running default software

cisco 4500 (R4K) processor (revision B) with 32768K/8192K bytes of memory.
Processor board serial number 04058420
R4600 processor, Implementation 33, Revision 1.0
G.703/E1 software, Version 1.0.
X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
2 Ethernet/IEEE 802.3 interfaces.
4 Serial network interfaces.
128K bytes of non-volatile configuration memory.
4096K bytes of processor board System flash (Read/Write)
4096K bytes of processor board Boot flash (Read/Write)

Configuration register is 0x2102

Router(boot)#

Here is my 4500M.  I'am trying to tftp into flash the new 12.2
c2500-ik8s-l.122-6-ipplussec IOS. however it is failing in the transfer
becuase the router timesout.  This is becuase of the 16mb limit correct? 
what do i have to upgrade for the router to stop timing out?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=64226&t=64226
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


ISIS problem in 12.2?? [7:63824]

2003-02-25 Thread Jason Steig
why can't i use the router isis command in 12.2?  it won't let me into the
ISIS sub menu.  In 12.1 I can get in just fine. whats up?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63824&t=63824
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


new access list problem [7:63715]

2003-02-25 Thread Jason Steig
Hello i networks 192.17.73.0 - 192.17.77.0

is there anyway to deny these networks with one entry in an access list?


such as deny 192.17.73.0 0.0.248.255?

is this going to deny these networks?  it's also going to black hole several
other networks though.  Or does the list have to be

deny 192.17.73.0 0.0.7.255 ?

i thought zeros must match and ones we don't care.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63715&t=63715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Access List help!! [7:63644]

2003-02-24 Thread Jason Steig
it worked!! thanks!Jason Steig wrote:
> 
> so your saying that my statement
> ip access-list 1 permit ip 192.17.73.0 0.191.251.0 will permit
> all hosts from network 192.17.73.0 and 192.81.73.0??
> 
> 17 is  00010001
> 81 is  01010001
> 
> so the bit it doesn't match on is the 64 bit.  so i just have
> to switch it around if your saying the ones don't count
> 
> so it would be 0.191.251.0 ??
> 
> becuase if the zeros must match and ones don't count then that
> would be it then??
> 
>  or is is 0.192.252.255  becuase the last octet is 255 so it
> allows all hosts?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63676&t=63644
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: Access List help!! [7:63644]

2003-02-24 Thread Jason Steig
so your saying that my statement
ip access-list 1 permit ip 192.17.73.0 0.191.251.0 will permit all hosts
from network 192.17.73.0 and 192.81.73.0??

17 is  00010001
81 is  01010001

so the bit it doesn't match on is the 64 bit.  so i just have to switch it
around if your saying the ones don't count

so it would be 0.191.251.0 ??

becuase if the zeros must match and ones don't count then that would be it
then??

 or is is 0.192.252.255  becuase the last octet is 255 so it allows all hosts?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63674&t=63644
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Access List help!! [7:63644]

2003-02-24 Thread Jason Steig
Hello all. I'am stumped on an access-list that i need to create. What i did
was i set up two routers using rip and put loopbacks on one of them and
advertised them in rip. I then attempted to build an access-list allowing
just these networks to pass into the other router. The router with the
loopbacks is A the destination is B. so I know this will be a standard
access list (direction in) on router B's interface to router A.

The requirements are 

allow any packet originating from 192.17.77.0 /24 
allow any packet originating from 192.17.73.0 /24 
allow any packet originating from 192.81.77.0 /24 
allow any packet originating from 192.81.73.0 /24 
allow any packet originating from 176.17.77.0 /24 
allow any packet originating from 176.17.73.0 /24 
allow any packet originating from 176.81.77.0 /24 
allow any packet originating from 176.81.73.0 /24 

Hers what i think i can do 

with the 182 address i can do 
permit ip 192.17.73.0 0.64.4.0 

because the 64 will increase the second octet to 81 then the 4 in the third
bit will increase the network to 77. Is this how i would impliment this
filtering policy in just two statements? The same way with the 176 networks?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63644&t=63644
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


access-lists [7:63520]

2003-02-21 Thread Jason Steig
Hello all. I'am stumped on an access-list that i need to create. What i did
was i set up two routers using rip and put loopbacks on one of them and
advertised them in rip. I then attempted to build an access-list allowing
just these networks to pass into the other router. The router with the
loopbacks is A the destination is B. so I know this will be a standard
access list (direction in) on router B's interface to router A.

The requirements are 

allow any packet originating from 192.17.77.0 /24 
allow any packet originating from 192.17.73.0 /24 
allow any packet originating from 192.81.77.0 /24 
allow any packet originating from 192.81.73.0 /24 
allow any packet originating from 176.17.77.0 /24 
allow any packet originating from 176.17.73.0 /24 
allow any packet originating from 176.81.77.0 /24 
allow any packet originating from 176.81.73.0 /24 

Hers what i think i can do 

with the 182 address i can do 
permit ip 192.17.73.0 0.64.4.0 

because the 64 will increase the second octet to 81 then the 4 in the third
bit will increase the network to 77. Is this how i would impliment this
filtering policy in just two statements? The same way with the 176 networks?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63520&t=63520
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Access-List questions [7:63399]

2003-02-19 Thread Jason Steig
Hello all.  I'am stumped on an access-list that i need to create.  What i
did was i set up two routers using rip and put loopbacks on one of them and
advertised them in rip.  I then attempted to build an access-list allowing
just these networks to pass into the other router.  The router with the
loopbacks is A the destination is B.  so I know this will be a standard
access list (direction in) on router B's interface to router A.

The requirements are 

allow any packet originating from 182.17.77.0 /24
allow any packet originating from 182.17.73.0 /24
allow any packet originating from 182.81.77.0 /24
allow any packet originating from 182.81.73.0 /24
allow any packet originating from 190.17.77.0 /24
allow any packet originating from 190.17.73.0 /24
allow any packet originating from 190.81.77.0 /24
allow any packet originating from 190.81.73.0 /24

Hers what i think i can do

with the 182 address i can do
permit ip 182.17.73.0 0.64.4.0

because the 64 will increase the second octet to 81 then the 4 in the third
bit will increase the network to 77.  Is this how i would impliment this
filtering policy in just two statements? The same way with the 190 networks?



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63399&t=63399
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Setting Privilege Levels for Users [7:63073]

2003-02-14 Thread Jason Steig
I'am working on a Boson's CCIE lab with a friend and we are working on
setting up privilege levels for users who need to telnet to the router.

User1 needs to have access to just the user level commands nothing more.

User2 needs access to all the commands that user 1 has access to as well as
about 5 different exec commands.  lets say "show ip interface" "show ip ospf
neighbors" "show ip route" and "show version"  i think most of those are
exec commands.

User3 needs access to every commands.  This is privilege level 15 right?


How would you implement these?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63073&t=63073
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Telnet to 2501 through a linksys router [7:62654]

2003-02-10 Thread Jason Steig
ahh i see i did not specify the gefault gatway command on my cisco 2501 for
the linksys.  all i did was make the external port for my sun box 2323 and
for my cisco 23 to activate the port forwarding from my linksys over my NAT
internally to my 2511 router.  Actually mine is also a 2511.
Sorry whoops i actually have a siemens router.  It works the same was as the
linksys with port forwarding.  So all i'am doing is port forarding port 23
and 2323 to seperate internal IP's

Router#show run
Building configuration...

Current configuration : 997 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
enable secret 5 $1$Tn.K$eTsahgNCkNWMWaSFRMa/A1
!
username all
ip subnet-zero
no ip domain-lookup
!
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
!
!
interface Loopback0
 ip address 192.168.1.1 255.255.255.0
 ip ospf network point-to-point
!
interface Ethernet0
 ip address 192.168.254.119 255.255.255.0 (interface i'am telneting too)
!
interface Serial0
 ip address 192.168.3.3 255.255.255.0
!
interface Serial1
 no ip address
 shutdown
!
ip default-gateway 192.168.254.254  (I just added it)
ip classless
ip http server
ip pim bidir-enable
!
logging trap debugging
logging 192.168.254.176
snmp-server user internal internal v3
snmp-server group internal v3 noauth notify *tv..
snmp-server community internal RO
snmp-server host 192.168.254.176 version 3 noauth internal
!
line con 0
 exec-timeout 0 0
 logging synchronous
line 1 16
line aux 0
line vty 0 4
 password 
 login
!
end






















































































Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62674&t=62654
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: question [7:62655]

2003-02-07 Thread Jason Steig
cause he is the moderator. he's moderating


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62657&t=62655
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Telnet to 2501 through a linksys router [7:62654]

2003-02-07 Thread Jason Steig
Here is my dilema maybe someone can help me.  I have a linksys router and
then internaly i have my cisco lab.  I did port forwarding on the linksys
and told it to forward all telnet requests internaly to my router which i
want to use as the entry into my lab.  The problem is I can't connect and
I'am not sure what the problem is.  I also have a sun box.  When i telnet to
that then go from that to my cisco router it gets through!!! why won't my
cisco 2501 accept direct connects through my linksys nat?  I know i'am doing
the port forwarding correctly.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62654&t=62654
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]