Re: ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-02 Thread Jim Barksdale

I'm not sure if this will help since the problem seems to be brnging up the
second B
channel.

I know if there is a speed mismatch the line will drop after about a 20
second
connection.  Does not even bother to do the CHAP before failing.

I ran into this again last week because I had a finger check in a copy paste
of
configurations.  One side I had the statement 'speed 56' in the dialer map
statement and
not in the other.  Removed it and everything worked.

Try adding the statement speed 56 on both sides to see if this helps.

The US seems to have more of a problem with needing to set the speed to 56
than anywhere
else.

Jim

Sam Deckert wrote:

 Here is the debug isdn events output from when the 1700 disconnects:

 clarendon2-gw#
 04:14:10: ISDN BR0: Event: Hangup call to call id 0x801E
 04:14:10: ISDN BR0: process_disconnect(): call id 0x801E, call type is
DATA,
 b_idb 0x809D7DF8, ces 1, cause Normal call clearing(0x10)
 04:14:10: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from
0353324231
 clarendon, call lasted 20 seconds
 04:14:49400989532: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
 04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
 04:14:47244640267: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down
 04:14:49398792589: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
 04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA

 Here is the debug isdn events output from the 2611 side of things:
 05:12:32225367844: ISDN BR0/1: received HOST_DISCONNECT call_id 0x25
 05:12:30064771072: ISDN BR0/1: Event:  Call to  was hung up.
 05:12:32225367716: ISDN BR0/1: process_disc_ack(): call id 0x25, ces 1,
call
 type DATA
 05:12:30906921739: %ISDN-6-DISCONNECT: Interface BRI0/1:2  disconnected
from
 unknown , call lasted 20 seconds
 05:12:3871552: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to
down
 05:12:3862421: ISDN BR0/1: received HOST_DISCONNECT_ACK call_id 0x25
 05:12:30064771072: ISDN BR0/1: HOST_DISCONNECT_ACK: call type is DATA

 I am still working on it!  Thought it might be the fast-idle timer, so made
 it
 a large value, to no avail.

 Thanks again if anyone can help!

 Sam.

 - Original Message -
 From: Sam Deckert
 To: [EMAIL PROTECTED]
 Sent: Monday, July 02, 2001 3:09 PM
 Subject: ISDN B Channel Disconnecting

 Hello everyone,

 I am having a bit of an ISDN related problem at the moment and was
wondering
 if anyone is able to help.

 I am connecting two sites together via 128k isdn, with one site having a
2611
 and the other a 1700.

 I have the two sites permanently connected fine with the first B channel,
 however whenever I issue the dialer load-threshold 1 either command one
 each
 router to always have the 2nd B channel up, the second B channel connects
and
 remains connected for 20 seconds exactly before disconnecting.  The 1st B
 channel remains connected regardless.

 I have tried changing the idle-timeout values to no avail, and just cant
 figure it out.

 I guess it is probably something simple, but just cant work it out.

 Here is the BRI config of the 2611:

 username clarendon2-gw password 7 094E1B040D0210
 !
 hostname clarendon
 ip subnet-zero
 no ip finger
 !
 ipx routing 0030.854f.c9e0
 ipx gns-response-delay 1500
 isdn switch-type basic-net3
 !
 !
 interface BRI0/1
  ip unnumbered BRI0/0
  encapsulation ppp
  no ip mroute-cache
  dialer idle-timeout 200
  dialer enable-timeout 5
  dialer wait-for-carrier-time 15
  dialer map ip xxx.xxx.xxx.xxx name clarendon2-gw broadcast
  dialer map ipx FEEDBEEF.0002.1761.29dd name clarendon2-gw broadcast
  dialer load-threshold 1 either
  dialer-group 1
  ipx network FEEDBEEF
  no ipx route-cache
  ipx watchdog-spoof
  isdn switch-type basic-net3
  isdn calling-number 
  no fair-queue
  compress stac
  no cdp enable
  ppp authentication chap
  ppp multilink
 !
 dialer-list 1 protocol ip permit
 dialer-list 1 protocol ipx permit
 no cdp run

 Here is the config of the 1700:

 hostname clarendon2-gw
 !
 username clarendon password 7 011153094F0C01
 !
 !
 ipx routing 0002.1761.29dd
 ipx gns-response-delay 1500
 isdn switch-type basic-net3
 !
 interface BRI0
  ip unnumbered FastEthernet0
  encapsulation ppp
  dialer idle-timeout 200
  dialer map ip xxx.xxx.xxx.xxx name clarendon broadcast
  dialer load-threshold 1 either
  dialer-group 1
  ipx network FEEDBEEF
  no ipx route-cache
  ipx watchdog-spoof
  isdn switch-type basic-net3
  no fair-queue
  compress stac
  no cdp enable
  ppp authentication chap
  ppp multilink
 !
 ip classless
 no ip http server
 !
 dialer-list 1 protocol ip permit
 dialer-list 1 protocol ipx permit
 no cdp run
 !
 no scheduler allocate
 end

 What do you think???  Any advice, suggestions welcome and most appreciated!

 Thanks...

 Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=10670t=10596
--
FAQ, list archives, and subscription info: 

Re: ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-02 Thread Jim Barksdale

Forgot one part...id it is only the second B channel you are having problems
with...
make sure the carrier has both channels set to handle data.  They can set
the voice/data
parameters differently for each B channel.

Jim

Sam Deckert wrote:

 Here is the debug isdn events output from when the 1700 disconnects:

 clarendon2-gw#
 04:14:10: ISDN BR0: Event: Hangup call to call id 0x801E
 04:14:10: ISDN BR0: process_disconnect(): call id 0x801E, call type is
DATA,
 b_idb 0x809D7DF8, ces 1, cause Normal call clearing(0x10)
 04:14:10: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from
0353324231
 clarendon, call lasted 20 seconds
 04:14:49400989532: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
 04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
 04:14:47244640267: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down
 04:14:49398792589: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
 04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA

 Here is the debug isdn events output from the 2611 side of things:
 05:12:32225367844: ISDN BR0/1: received HOST_DISCONNECT call_id 0x25
 05:12:30064771072: ISDN BR0/1: Event:  Call to  was hung up.
 05:12:32225367716: ISDN BR0/1: process_disc_ack(): call id 0x25, ces 1,
call
 type DATA
 05:12:30906921739: %ISDN-6-DISCONNECT: Interface BRI0/1:2  disconnected
from
 unknown , call lasted 20 seconds
 05:12:3871552: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to
down
 05:12:3862421: ISDN BR0/1: received HOST_DISCONNECT_ACK call_id 0x25
 05:12:30064771072: ISDN BR0/1: HOST_DISCONNECT_ACK: call type is DATA

 I am still working on it!  Thought it might be the fast-idle timer, so made
 it
 a large value, to no avail.

 Thanks again if anyone can help!

 Sam.

 - Original Message -
 From: Sam Deckert
 To: [EMAIL PROTECTED]
 Sent: Monday, July 02, 2001 3:09 PM
 Subject: ISDN B Channel Disconnecting

 Hello everyone,

 I am having a bit of an ISDN related problem at the moment and was
wondering
 if anyone is able to help.

 I am connecting two sites together via 128k isdn, with one site having a
2611
 and the other a 1700.

 I have the two sites permanently connected fine with the first B channel,
 however whenever I issue the dialer load-threshold 1 either command one
 each
 router to always have the 2nd B channel up, the second B channel connects
and
 remains connected for 20 seconds exactly before disconnecting.  The 1st B
 channel remains connected regardless.

 I have tried changing the idle-timeout values to no avail, and just cant
 figure it out.

 I guess it is probably something simple, but just cant work it out.

 Here is the BRI config of the 2611:

 username clarendon2-gw password 7 094E1B040D0210
 !
 hostname clarendon
 ip subnet-zero
 no ip finger
 !
 ipx routing 0030.854f.c9e0
 ipx gns-response-delay 1500
 isdn switch-type basic-net3
 !
 !
 interface BRI0/1
  ip unnumbered BRI0/0
  encapsulation ppp
  no ip mroute-cache
  dialer idle-timeout 200
  dialer enable-timeout 5
  dialer wait-for-carrier-time 15
  dialer map ip xxx.xxx.xxx.xxx name clarendon2-gw broadcast
  dialer map ipx FEEDBEEF.0002.1761.29dd name clarendon2-gw broadcast
  dialer load-threshold 1 either
  dialer-group 1
  ipx network FEEDBEEF
  no ipx route-cache
  ipx watchdog-spoof
  isdn switch-type basic-net3
  isdn calling-number 
  no fair-queue
  compress stac
  no cdp enable
  ppp authentication chap
  ppp multilink
 !
 dialer-list 1 protocol ip permit
 dialer-list 1 protocol ipx permit
 no cdp run

 Here is the config of the 1700:

 hostname clarendon2-gw
 !
 username clarendon password 7 011153094F0C01
 !
 !
 ipx routing 0002.1761.29dd
 ipx gns-response-delay 1500
 isdn switch-type basic-net3
 !
 interface BRI0
  ip unnumbered FastEthernet0
  encapsulation ppp
  dialer idle-timeout 200
  dialer map ip xxx.xxx.xxx.xxx name clarendon broadcast
  dialer load-threshold 1 either
  dialer-group 1
  ipx network FEEDBEEF
  no ipx route-cache
  ipx watchdog-spoof
  isdn switch-type basic-net3
  no fair-queue
  compress stac
  no cdp enable
  ppp authentication chap
  ppp multilink
 !
 ip classless
 no ip http server
 !
 dialer-list 1 protocol ip permit
 dialer-list 1 protocol ipx permit
 no cdp run
 !
 no scheduler allocate
 end

 What do you think???  Any advice, suggestions welcome and most appreciated!

 Thanks...

 Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=10672t=10596
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Sniffer Resources [7:4410]

2001-05-15 Thread Jim Barksdale

Thanks for the great links.

One of the best things about this list is the sharing of links.

Jim

EA Louie wrote:

 there are TONS of Sniffer resources out there.  Unfortunately, many of them
 cost money because there are training courses to teach exactly what you're
 desiring to learn.

 Here are a few free (teaser) sites

 http://www.decodes.com/index.html
 http://www.networkuptime.com/

 BTW, you might try issuing a search in your favorite search engine on
 Sniffer trace diagnoses or network protocol decodes

 More specifically, diagnoses that Sniffer Pro gives are NAI's analysis
 (based on years of decoding traces) of the trace decode(s).

 What specifically is the concern with the TTL's, retransmissions, long ack
 times, etc?  Do you understand what they are and why they happen, and what
 the effect is of these diagnoses (if any)?  If that is your concern, then
 read Internetworking with TCP/IP volume 1 by Doug Comer.  There's lots of
 theory of operation of the TCP/IP stack behind the diagnoses that the
Expert
 spits out.  The Sniffer help files help out with that theory a little bit
 too.

 Sniffer Pro sets certain threshholds for the Expert Analysis
 interpretations, and sometimes those threshholds are not accurate for your
 network.  If you're looking for root cause, you'll have to dig a little
 deeper than just the diagnosis that Sniffer gives you, because once the
 diagnosis is done, the other 90% of the battle is isolating the problem and
 then convincing everyone else that that's where the problem lies based on
 YOUR detailed analysis and testing.  And the diagnoses are not necessarily
 an indication that there is a problem in the network - sometimes, it's just
 a network characteristic that users are obliviously happy with and
 non-performance affecting.

 ...and everyone used to think that Sniffer traces were such an hard thing
to
 read - I remember back in the old days before they gave the Expert
 diagnoses having to decode the conversations - now I've gotten lazy and
 started to trust the Expert!  yikes...I'm sounding like an old guy here...
 ;-)

 -e-

 - Original Message -
 From:
 To:
 Sent: Monday, May 14, 2001 7:59 AM
 Subject: Sniffer Resources [7:4410]

  Okay all you networking pros out there.  Does anybody know of any good
  Network General Sniffer resources?  More specifically if I want to look
  up diagnoses such as TTL's, retransmissions, long ack times etc.?
 
  jd
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=4567t=4410
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: cross cable length [7:4561]

2001-05-15 Thread Jim Barksdale

If you made the cable yourself...
Make sure you used the correct pairs (colors) on the correct pins.
Short cables it does not make much difference, longer cables it does.


[EMAIL PROTECTED] wrote:

 hi group

 my 1st mail to group , joined a month back has helped me alot
 i thank all of you.

 i have a doubt please help me to sort it out.

 point no. 1

 i am working in an ISP, one of our client is conected from our fastethernet
 port to his router over cross cable(total cable length is 60 meter both
 routers r 3600 series). customer is experincing packet loss, someone said
 that for cross cable length cant me more that 15-20 Meter. But i have never
 come across such thing in any book. all books say that for 100Base T length
 is 100M.

 point no. 2

 we have 2912XL switch, to see ip address/subnet mask/default gateway what
is
 command. in case of 1900 series it is
 sh ip. i tried searching on cisco site but could not locate it.

 looking for u alls support

 thanks

 manoj

 __
 123India.com - India's Premier Portal
 Get your Free Email Account at http://www.123india.com
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=4589t=4561
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: [sc] DLSW+ Problem [7:2616]

2001-04-30 Thread Jim Barksdale

Is the interface on either end dropping packets?
How is the delay?
Has this ever worked?
If everything looks good on the circuit you may need to adjust t1 timers (a
VTAM
parameter)

Fawad Alam wrote:

 I am not having problem with DLSW+ connectivity. THe peers are up but I am
 seeing session drops from application perspective. On the routers I don't
 see sny connectivity problem or problems with DLSW+.
 From application point-of-view my user sees SNA communication and SNA
SYSTEM
 RESOURCE FAILURE messages.

 Thanks..
 Fawad

 From: Qurashi, Iftikhar
 To: 'Fawad Alam'
 Subject: RE: [sc] DLSW+ Problem
 Date: Mon, 30 Apr 2001 16:14:37 -0400
 MIME-Version: 1.0
 Received: from [159.231.69.23] by hotmail.com (3.2) with ESMTP id
 MHotMailBCB7120E00784004314F9FE745179B760; Mon Apr 30 13:11:58 2001
 Received: from cbmrd-xscc001im.scc.intria.com (localhost [127.0.0.1])by
 unixs09.scc.intria.com (8.11.2/8.11.2) with ESMTP id f3UKCJS22386for
 ; Mon, 30 Apr 2001 16:12:26 -0400 (EDT)
 Received: by CBMRD-XSCC001IM with Internet Mail Service (5.5.2650.21)id
 ; Mon, 30 Apr 2001 16:10:08 -0400
 From [EMAIL PROTECTED] Mon Apr 30 13:13:36 2001
 Message-ID:
 Return-Receipt-To: Qurashi, Iftikhar
 X-Mailer: Internet Mail Service (5.5.2650.21)

 Dear Fawad,
 I am also working on exactly same scenario where I have 2621 on one end and
 2612 on other end. let me know more about your scenario and may be I can
 help you somehow in this regard

 Iftikhar.

 -Original Message-
 From: Fawad Alam [mailto:[EMAIL PROTECTED]]
 Sent: Monday, April 30, 2001 2:59 PM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: [sc] DLSW+ Problem

 Hi
 I am having some performance problem  with DLSW+. The peers are 2621 with
 IOS Version 12.0(3)T3 and at the other end I have Cisco 2612 with version
 11.3(9)T.
 Our testing setup with obviously less load worked fine but when we moved to
 production the sessions started dropping. I have checked circuit load and
it

 looks fine. Probably some DLSW+ parametes with some timing features or
 problem with IOS is causing this problem. Or may be its related to 2600
 routers.
 Is there anyone who experienced same kinda issues in past. Any comments.

 Thanks...
 Peter
 _
 Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

 --
 To unsubscribe:  echo unsubscribe cisco-cert | mail [EMAIL PROTECTED]

 _
 Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=2640t=2616
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IBM 8228 MAU

2001-04-02 Thread Jim Barksdale

The 8 ports on the 8228 are electro-mechanical.
The Ring-In, Ring-Out ports are not.
The thingy with the red light has a 9-volt battery in it.
It is used to reset the 8 ports.
Insert the thingy into the port until the light turns on then off (takes only a couple
of seconds.
You need to do this to an 8228 any time you have not used it for awhile.

John Chang wrote:

 I have a IBM 8228 MAU.  What is the easiest/fastest way to test each port
 including the RI RO?  What is the fastest way to test type 1 cables?  I
 have this thing that has the type connector on one end.  It's about 3
 inches long and has a red LED.  What is it called and what is it for?  I
 looked in the archive and I want to IBM's website but couldn't find
 anything helpful.  Thanks.
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IBM 8228 MAU

2001-04-02 Thread Jim Barksdale

Here is a link on how to build your own...
Information on how to use it...
Complete with pictures...

 http://members.aol.com/mcapage1/8228tool.htm

Bob Johnson wrote:

 Has anyone ever seen a schematic diagram for the "port resetting thingy" ?
 I have a MAU that does not seem to work...
 Perhaps all it needs is a "reset" with such a device...
 Perhaps one could build such a device yourself...

 Anyone

 -Original Message-
 From: Jim Barksdale [mailto:[EMAIL PROTECTED]]
 Sent: Monday, April 02, 2001 1:37 PM
 To: [EMAIL PROTECTED]
 Subject: Re: IBM 8228 MAU

 The 8 ports on the 8228 are electro-mechanical.
 The Ring-In, Ring-Out ports are not.
 The thingy with the red light has a 9-volt battery in it.
 It is used to reset the 8 ports.
 Insert the thingy into the port until the light turns on then off (takes
 only a couple
 of seconds.
 You need to do this to an 8228 any time you have not used it for awhile.

 John Chang wrote:

  I have a IBM 8228 MAU.  What is the easiest/fastest way to test each port
  including the RI RO?  What is the fastest way to test type 1 cables?  I
  have this thing that has the type connector on one end.  It's about 3
  inches long and has a red LED.  What is it called and what is it for?  I
  looked in the archive and I want to IBM's website but couldn't find
  anything helpful.  Thanks.
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IBM 8228 MAU reset tool

2001-04-02 Thread Jim Barksdale

Here's another good page

 http://webpages.charter.net/ohlandl/NIC/8228.html

You can buy one here

 http://www.cdromshop.com/cdshop/desc/p.087944087656.html

Jim Dixon wrote:

 Bob,

 The item you refer to is called
 a Ring Initialization tool.

 Try calling IBM.
 I searched Black Box, Google.com
 and IBM's website and found nothing.
 Someone at IBM has one though.
 Call tech services and ask where you can order one.

 -Original Message-
 From: Bob Johnson [mailto:[EMAIL PROTECTED]]
 Sent: Monday, April 02, 2001 4:06 PM
 To: 'Jim Barksdale'; [EMAIL PROTECTED]
 Subject: RE: IBM 8228 MAU

 Has anyone ever seen a schematic diagram for the "port resetting thingy" ?
 I have a MAU that does not seem to work...
 Perhaps all it needs is a "reset" with such a device...
 Perhaps one could build such a device yourself...

 Anyone

 -Original Message-
 From: Jim Barksdale [mailto:[EMAIL PROTECTED]]
 Sent: Monday, April 02, 2001 1:37 PM
 To: [EMAIL PROTECTED]
 Subject: Re: IBM 8228 MAU

 The 8 ports on the 8228 are electro-mechanical.
 The Ring-In, Ring-Out ports are not.
 The thingy with the red light has a 9-volt battery in it.
 It is used to reset the 8 ports.
 Insert the thingy into the port until the light turns on then off (takes
 only a couple
 of seconds.
 You need to do this to an 8228 any time you have not used it for awhile.

 John Chang wrote:

  I have a IBM 8228 MAU.  What is the easiest/fastest way to test each port
  including the RI RO?  What is the fastest way to test type 1 cables?  I
  have this thing that has the type connector on one end.  It's about 3
  inches long and has a red LED.  What is it called and what is it for?  I
  looked in the archive and I want to IBM's website but couldn't find
  anything helpful.  Thanks.
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Firewall

2001-03-19 Thread Jim Barksdale

There is a PC based solution I have used with great success from a company called
Sygate.http://www.sygate.com





John Chang wrote:

 What do people use for a Firewall that does NAT translation?  I know you
 can use a PIX but what's the cost on the low end?  Does anyone have any
 other recommendation if the cost of a PIX is too high?  Looking for a
 software or hardware solution. It'll be used for about 40 user department.

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Passed BCRAN Today

2001-03-08 Thread Jim Barksdale

Know your ISDN, Frame Relay, X.25, Dialer, and Access Routers.
Lots of fill in the blank, but, you get a list to choose from.
62 questions, I think 75 minutes, 706 to pass.
I used the Sybex Remote Access book and the Smart Certify CBT course.

On to BCSN

Jim

CCNA, CCDA

3 more to NP, 4 to DP.


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



TCP Load Balancing with a PIX

2001-03-01 Thread Jim Barksdale

I know using a Router and NAT you can map a single external address to a
virtual host with an internal address,  which then load balances across
several real hosts.
(TCP Load Balancing)
Can the same thing be done on a PIX?

I currently have 1 web server on the DMZ and want to add a second web
server (mirror of the first).  I then want to load balance across the
two of them.
I don't have the budget to buy a 'Local Director'.

Thanks for your help

Jim

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ODD isdn config

2001-02-22 Thread Jim Barksdale

I bet this is an E-1 PRI...the E-1 PRI uses timeslot 15 as the D channel, channels 1-31
A T-1 uses timeslot 24, channels 0-23

Stephen D Skinner wrote:

 GUYS

 i have this odd isdn config which don`t make any sense to me...

 !!! interface Serial1/0:15 !
   no ip address
  no ip directed-broadcast
  encapsulation ppp
  no ip split-horizon
  load-interval 30
  dialer pool-member 1 max-link 20
  dialer pool-member 3
  isdn switch-type primary-net5
  isdn sending-complete
  fair-queue 64 256 0
  no cdp enable
  ppp authentication chap
  ppp multilink

 It`s the FIRST line i don`t understandyou see if i do an "SHOW ISDN
 ACTIVE" ,it brings up 30 channels of my ISDN 30 as active
 when i do as SHOW INT it shows all 30 ...but i thought that "serial 1/0:15 meant
  only channels 0-15..i.e 16 channels...
 am i being thick or what ???

 thanks in advance

 Stephen Skinner
 GIS UK Operations,Esso Petroleum Company
 St. Catherines House.
 2 Kingsway, PO Box 397, London WC2B 6WJ
 External Email:[EMAIL PROTECTED]

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Tunnels and Priority Queueing

2001-02-20 Thread Jim Barksdale

Need some help to make sure I understand...

If I have a logical Tunnel across a physical connection, and I apply
Priority Queueing to the physical interface the Tunnel is not affected
by the queueing?

And if I want the Tunnel to be affected by the priority queueing I need
to apply it to the logical tunnel interface?

Thanks

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: problem with tracking system?

2001-02-12 Thread Jim Barksdale

They had java script problems.
Everything should be ok now.

Andrei Hladki wrote:

 I cannot browse trough tracking system after login from last friday.
 It says that there is an error on the page.
 Do you  have the same problem?

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: General Networking Question

2001-02-09 Thread Jim Barksdale

I'm sure there are several people on this board willing to do contract work for you.

However, most cable modem providers require you (as a non commercial customer) to sign 
a
contract stating you will not use the machine connected to their network as a server
across their network.

If you really want to be able to do this you need to contact your cable provider and 
get
a commercial contract.

You would be using more bandwidth than the normal customer and the cable company wants
to be compensated.



Stan Bowman wrote:

 Hi there to everyone.  I have a computer question I need help with.  I am
 not super-technical with computers so forgive any of my ignorance.  My
 question relates to networking and cable modems.  I am running an
 application for my business from my computer.  My business partner lives in
 another town and she would like to be able to access the software from her
 location.  I checked with the software manufacturer and they said that the
 software supports this.  They said that we can install the application on
 both machines and that the database will reside only on my machine (the
 host).  Then, they said we need to establish a "network" between the two
 machines so that the remote machine can map a drive to my machine.

 My partner needs to map a drive to my computer so that when she logs in, she
 can point to the database located on my machine and us it for the
 application.  She is actually running the application on her machine, but
 through a mapped drive she is pointing to a database on my computer.

 Obviuosly, I could use dial-up networking and have her dial up my machine
 and map a drive that way.  This is not the desired option for a couple
 reasons.  First, my computer is NOT running NT server right now.  As I
 understand it, I would need to upgrade my machine to Windows NT Server
 before she could dial into mine.  Second, the performance over the phone
 line would most likely be too slow and negate the benefit of networking the
 application.

 My question is how can we network our to machines together using our cable
 modems.  We both access the internet via cable modems.  Both our machines
 are running win2000 (millenium).  Both of us have static ip addresses so I
 was hoping we could somehow use this to network them together.  We can ping
 each others machine through DOS without any problem, so I know that the
 communication works.

 I would welcome any suggestions on how we can solve this problem.  Once
 again, the goal is to be able to map a drive from my partner’s computer to
 mine so when she logs into the application on her machine, she can browse to
 my computer and select the database.

 Thanks in advance for your help.  Please email me if you have any questions
 or solutions.  Thanks!!

 Stan
 [EMAIL PROTECTED]

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Written Tomorrow..

2001-01-26 Thread Jim Barksdale

I passed the CCDA yesterday...I know not as big as the CCIE but...

I always have everyone I know pray for me about the time of the test.
As well I say a prayer before I go in.

Jim
CCNA CCDA

"Sheahan, Ryan" wrote:

 Group,

 With my written getting closer every minute, (just over 25 hours away) I am
 starting to get a little nervous.  Any last minute suggestions from others
 who have gone before me?  Any tribal chants I should try?  I am confident in
 my studies but this is the "big one".

 Dazed and confused

 Ryan Sheahan CCNP,CCDP

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: eigrp, frame relay, and ISDN

2001-01-09 Thread Jim Barksdale

We do this on our network.

Do not pacify the BRI under EIGRP.
Instead define EIGRP as uninteresting traffic for the BRI.
Define a floating static to intiate the call with interesting traffic, then once the
ISDN is
up, EIGRP will flow across the link.  If and when the primary link comes back up the
ISDN will time-out even if EIGRP flows across.  Unteresting traffic does not reset the
IDLE timer.

Simple way to think about it is...
Only interesting traffic can initiate a call and reset the IDLE timer.
Uninteresting traffic can and will flow if the link is already up.

The part which makes it confusing...the definition of interesting and unteresting
traffic
looks just like an access list.

The difference is how you apply it to the interface
'dialer-group' vs 'access-group'

Jim

whitaker wrote:

 So here's the scenario...Numerous routers in a central site connected to
 other remote sites via frame-relay with backup ISDN.  Question: What is the
 best way to implement EIGRP in this scenario?  My thoughts were to run EIGRP
 over the frame, set up the dialer interface / bri as a passive interface,
 and use floating static routes (static route with higher administrative
 distance for ISDN backup)

 Thoughs, comments, suggestions, ridicules? ;-)

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: any command to check the bandwidth of frame relay link?

2000-12-20 Thread Jim Barksdale

The best way I have found to verify is to look at bandwidth using  a network monitoring
tool.

If you see bandwidth utilization stop consistantly at half of what you are supposed to
have.  This is a good indicator they are not giving you all of the bandwidth you 
thought
you had.

This won't tell you if they gave you more than you asked for...but who cares.

"Sim, CT (Chee Tong)" wrote:

 Hi..  Dear all,

 May I know is there a command to check the real bandwidth of the frame relay
 line? I have a frame relay link from Singapore to Jakarta as shown. what is
 mean by BW 64 Kbit, ?  They told me it is 128K, CIR 64K, but I cannot tell
 from below.

 Sim

 Serial0 is up, line protocol is up
   Hardware is PowerQUICC Serial
   Description: --- XNR=57754E DNA=2622024 MTN port=AJKT5-12/5
   MTU 1500 bytes, BW 64 Kbit, DLY 2 usec,
  reliability 255/255, txload 15/255, rxload 7/255
   Encapsulation FRAME-RELAY, loopback not set
   Keepalive set (10 sec)
   LMI enq sent  30201, LMI stat recvd 30202, LMI upd recvd 0, DTE LMI up
   LMI enq recvd 0, LMI stat sent  0, LMI upd sent  0
   LMI DLCI 1023  LMI type is CISCO  frame relay DTE
   Broadcast queue 0/64, broadcasts sent/dropped 21916/0, interface
 broadcasts 16853
   Last input 00:00:00, output 00:00:00, output hang never
   Last clearing of "show interface" counters 3d11h
   Input queue: 0/75/0 (size/max/drops); Total output drops: 0
   Queueing strategy: weighted fair
   Output queue: 0/1000/64/0 (size/max total/threshold/drops)
  Conversations  0/18/256 (active/max active/max total)
  Reserved Conversations 0/0 (allocated/max allocated)
   5 minute input rate 2000 bits/sec, 4 packets/sec
   5 minute output rate 4000 bits/sec, 4 packets/sec
  841970 packets input, 340086907 bytes, 0 no buffer
  Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
  5 input errors, 3 CRC, 0 frame, 0 overrun, 0 ignored, 2 abort
  848797 packets output, 303003541 bytes, 0 underruns
  0 output errors, 0 collisions, 4 interface resets
  0 output buffer failures, 0 output buffers swapped out
  31 carrier transitions
  DCD=up  DSR=up  DTR=up  RTS=up  CTS=up

 Serial0.2 is up, line protocol is up
   Hardware is PowerQUICC Serial
   Description: --- To SIN01 ser 1/1.19 ---
   Internet address is 57.200.243.12/30
   MTU 1500 bytes, BW 64 Kbit, DLY 2 usec,
  reliability 255/255, txload 15/255, rxload 7/255
   Encapsulation FRAME-RELAY
 JKT01

 ==
 De informatie opgenomen in dit bericht kan vertrouwelijk zijn en
 is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht
 onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en
 de afzender direct te informeren door het bericht te retourneren.
 ==
 The information contained in this message may be confidential
 and is intended to be exclusively for the addressee. Should you
 receive this message unintentionally, please do not use the contents
 herein and notify the sender immediately by return e-mail.

 ==

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Re : ISDN Backup

2000-12-13 Thread Jim Barksdale

You do not have to use the BACKUP INTERFACE command, that is just another way of doing
it.  I like the floating static commands much better, I can test the ISDN connectivity
without having to take the serial interface down.  And the Backup Interface command 
does
not work very well in a frame relay situation.

I do agree you need to add the commands for Backup Delay, both for going to ISDN and
going back to the primary.

As for preventing the WWW traffic when on ISDN, apply an access list to the BRI to
prevent it.



Taiwo Adeshugba wrote:

 I think you are missing some commands from the config on your router. if you
 want to back up the interface you have to use the BACKUP INTERFACE command
 on the primary interface. And to have a threshold level you need to use the
 command BACKUP DELAY, and for the threshold you need to use the command
 BACKUP LOAD which will be a percentage of the primary line's available
 bandwidth that the traffic load must exceed to enable dial backup.
 The best thing is to send the output of the Running congfig and we can take
 it from there as I think I am walking blindly into this.
 Tai

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 Amit Gupta
 Sent: 13 December 2000 11:27
 To: [EMAIL PROTECTED]
 Subject: Re : ISDN Backup

 Hi All,

 I am using the following config on my router.

 router eigrp xxx
  redistribute static
  passive-interface BRI1/0
  network x.x.x.x
  distribute-list 2 out Serial0/0
 !
 ip route 0.0.0.0 0.0.0.0 Serial0/0
 ip route 0.0.0.0 0.0.0.0 bri1/0 150

 I am using ISDN as the backup interface.
 The problem is that when my Serial link is erratic
 (not down), isdn backup is not able to activate
 (momentarily activates and then disconnects)
 what feature should I use to activate my backup
 immediately as soon as it senses a break in the serial
 link.
 Can I set some threshold level?

 Secondly I wanted to stop the www traffic when my ISDN
 backup is up ??
 Any suggestions.

 Thanks  Regards

 Amit

 __
 Do You Yahoo!?
 Yahoo! Shopping - Thousands of Stores. Millions of Products.
 http://shopping.yahoo.com/

 _
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Lab router management

2000-12-02 Thread Jim Barksdale

Instead of using boot net, why not have them do a 'config net' and choose the file 
from the
server they want.

If the config is so screwed up you can't do that. An alternative would be to connect a 
PC to
the console port, do a wri erase, then copy and paste the config they want from a text 
file.

I use the above method in a lab at work.  I save my config files, and can reload them 
for
whatever testing I want to do.

Tom Lisa wrote:

 We have the same problem.  Several different classes taking different semesters and
 leaving the routers in various configurations and register settings.  Our solution 
has
 been to have default configurations on a TFTP server and each instructor is 
responsible
 for setting up the lab for whatever basic config they need, often having the 
students do
 it as part of the training experience.

 If any body has a better way, I would sure like to hear about.

 Tom Lisa, Instructor, CCNA, CCAI
 Community College of Southern Nevada
 Cisco Regional Networking Academy

 Ben Hockenhull wrote:

  A student of mine just came into my office and posed this problem to me:
 
  Given a set of lab routers, where a student is allowed to do anything they
  wish to the router, how can things be set up so that the router is
  automatically restored to a known default configuration at the end of the
  student's session?
 
  My initial response is that there's really no good way to do this, short
  of special boot roms that would somehow intelligently tftpboot.
 
  boot net statements won't work, as the student can remove them.
  config register frobbing won't work, as the student can change the config
  register, and, indeed, might have to do so to practice password recovery.
 
  Given that the student can change config registers, write erase, set
  enable passwords, reload, etc, how do labs manage their routers in these
  situations?  He seemed to think that Cisco Academy has some kind of
  software that helps them with this problem, but I don't see how it's
  possible.
 
  Seems to me that all you can really do is have a staff of people to set
  things right all the time.
 
  Anyone have any ideas?
 
  Ben
 
  --
  Ben Hockenhull
  [EMAIL PROTECTED]
 
  _
  FAQ, list archives, and subscription info: 
http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: how to go for MCNS

2000-10-16 Thread Jim Barksdale

You must first have your CCNP.  The MCNS is a specialization for the CCNP.

Dinesh_Kakkar wrote:

 Dear friends

 Can any body tell me about MCNS certification. How I can go for--what are
 the exams I have to take.
 Present I am CCNA  working on network security.

 -Dinesh

 _
 FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MCNS

2000-10-13 Thread Jim Barksdale

The lab is made created using the following:
A PIX with 3 interfaces
A perimeter router connected to the outside interface of a PIX.
A ftp / web server on the external network.
A ftp / web server on the protected DMZ network
A NT server running Cisco Secure / ftp / web / syslog / TFTP on the inside
network
A NAS on the inside network.

I hope this helps

Brad Nixon wrote:

 Does any one know the lab set up for the MCNS (Managing Cisco Network
 Security) class? Thanks.

 **NOTE: New CCNA/CCDA List has been formed. For more information go to
 http://www.groupstudy.com/list/Associates.html
 _
 UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
 FAQ, list archives, and subscription info: http://www.groupstudy.com
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco offering CCNP Specialization classes

2000-10-04 Thread Jim Barksdale

I have already taken the MCNS (Managing Cisco Network Security) class through
Ascolta.  Tough class, you go over alot of material in only a week.  Still
studying to prepare for the test.

Carter Jared wrote:

 This was taken from cisco.com:

 Three CCNP Security Specialization courses corresponding to the upcoming
 specialization exams are expected to be available in mid-late fall. The
 upcoming courses are Cisco Secure Pix Firewall Fundamentals, Cisco Secure
 PIX Firewall Advanced, and Cisco Secure Virtual Private Networks.
 /Jared

 **NOTE: New CCNA/CCDA List has been formed. For more information go to
 http://www.groupstudy.com/list/Associates.html
 _
 UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
 FAQ, list archives, and subscription info: http://www.groupstudy.com
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: secondary interface command not working

2000-09-27 Thread Jim Barksdale

Is the 152.222.161.254 on the same wire as the Fast Ethernet port?
If not, won't work
Are there other devices defined as 152.222.161.x?
Can you ping them?


[EMAIL PROTECTED] wrote:

 I need to route to a subnet wich is other than the one I'm using on my Fast Ether 
Port. I have tryed coniguration below but can not ping 152.222.161.254,, Help

  ip address 152.222.161.2 255.255.255.0 secondary
  ip address 152.222.160.2 255.255.255.0
  no ip route-cache
  no ip mroute-cache
  duplex auto
  speed auto

 need to get to 152.222.161.254

 **NOTE: New CCNA/CCDA List has been formed. For more information go to
 http://www.groupstudy.com/list/Associates.html
 _
 UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
 FAQ, list archives, and subscription info: http://www.groupstudy.com
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 911....Help Needed soft error Token Ring

2000-09-25 Thread Jim Barksdale


Here is what I found and the site where I found it

 * The Active Monitor removes circulating
frames from the ring. As a
 frame passes the Active Monitor,
a special bit called a monitor
 count bit is set. If the monitor
count bit is set, the Active
 Monitor assumes the original sender
of the frame was unable to
 remove the frame from the ring.
The Active Monitor purges this
 frame, and sends a Token Error
Soft Error to the Ring Error Monitor.

http://www.landfield.com/faqs/LANs/token-ring-faq/
Jim
Leon Bass wrote:
I have been trying to track down a solution for this
error, any suggestions are appreciated.
I have changed cables.
And in the process of scheduling to switch TokenRing cards.
I have pasted the interface with the erroe as it appears.
TokenRing0/0 is up, line protocol is up
 Hardware is IBM, address is 1110.12ae.1212 (bia 0180.69ae.1234)
 Internet address is 192.99.29.1/24
 MTU 4464 bytes, BW 16000 Kbit, DLY 630 usec,
 reliability 255/255, txload 1/255, rxload
1/255
 Encapsulation SNAP, loopback not set
 Keepalive set (10 sec)
 ARP type: SNAP, ARP Timeout 04:00:00
 Ring speed: 16 Mbps
 Duplex: half
 Mode: Classic token ring station
 Group Address: 0x, Functional Address: 0x0800
 Ethernet Transit OUI: 0x00
 Last Ring Status 00:32:29 Soft Error> (0x2000)
 Last input 00:00:00, output 00:00:00, output hang never
 Last clearing of "show interface" counters never
 Queueing strategy: fifo
 Output queue 0/40, 0 drops; input queue 0/75, 0 drops
 5 minute input rate 1 bits/sec, 11 packets/sec
 5 minute output rate 2000 bits/sec, 3 packets/sec
 2968655 packets input, 416906220 bytes, 0
no buffer
 Received 0 broadcasts, 0 runts, 0 giants,
0 throttles
 256 input errors, 2 CRC, 0 frame, 0 overrun,
0 ignored, 0 abort
--More--




Re: access lists

2000-08-30 Thread Jim Barksdale

http://www.nwc.com/907/907ws1.html

Balal Mahmood wrote:

 can someone explain how access lists work?

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]