RE: PIX and MS Active Directory [7:44797]

2002-05-23 Thread John Allhiser

Tell him to use SMTP for AD replication, and disable the fixup feature for
SMTP
on the PIX.

-Original Message-
From: Patrick Donlon [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 23, 2002 8:16 AM
To: [EMAIL PROTECTED]
Subject: Re: PIX and MS Active Directory [7:44797]


Brian
I've just found out from the guy testing the AD stuff that it doesn't even
work with static NAT translations, it'll only work with a static mapping
with the same address across the firewall. The bit that isn't working is the
replication between the servers

Cheers

Pat
--
email me on : [EMAIL PROTECTED]


Brian Hill  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Pat,

 Are the clients having the problem, or are the servers having the problem?
 If it's the servers, it's probably just RPC, but if it's the clients, it
 could be lots of things. What exactly isn't working?

 Brian Hill
 CCNP, CCDP, MCSE 2000 (Charter Member),MCSE+I (NT4.0),
 MCSA (Charter Member), MCP+I, MCP(21), Inet+, Net+, A+
 Lead Technology Architect, TechTrain
 Author: Cisco, The Complete Reference
 http://www.alfageek.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44824t=44797
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Disable Telnet [7:41293]

2002-04-13 Thread John Allhiser

This is true also.  If you attempt to telnet into the router, you will
receive a
message that an enable password is required but none set.   

I would (and do) use the access list if I have an enable password already
set.


-Original Message-
From: Persio Pucci [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 12, 2002 10:13 AM
To: John Allhiser
Subject: Re: Disable Telnet [7:41293]


If I am not mistaken, the router shall not accept telnet connections if it
does not have a telnet password on the vty lines...

Persio

- Original Message -
From: John Allhiser 
To: 
Sent: Friday, April 12, 2002 11:20 AM
Subject: RE: Disable Telnet [7:41293]


 access-list 30 deny 0.0.0.0
 line vty 0 4
 access-class 30 in

 -Original Message-
 From: Wright, Jeremy [mailto:[EMAIL PROTECTED]]
 Sent: Friday, April 12, 2002 9:05 AM
 To: [EMAIL PROTECTED]
 Subject: RE: Disable Telnet [7:41293]


 youre correct. i was answering too quick without thinking about it more.
ive
 done it so many times but i havent had any caffeine this morning so i only
 process about half of my thoughts

 -Original Message-
 From: Dimitris Vassilopoulos [mailto:[EMAIL PROTECTED]]
 Sent: Friday, April 12, 2002 8:44 AM
 To: [EMAIL PROTECTED]
 Subject: RE: Disable Telnet [7:41293]


 Jeremy,

 If you enter no login under vty 0 4, then you'll get into
 the router!

 login means that the router prompts  Password:.
 no login instructs the router to bypass that, giving
 you access immediately.

 Dvass




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=41325t=41293
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Disable Telnet [7:41293]

2002-04-12 Thread John Allhiser

access-list 30 deny 0.0.0.0
line vty 0 4
access-class 30 in

-Original Message-
From: Wright, Jeremy [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 12, 2002 9:05 AM
To: [EMAIL PROTECTED]
Subject: RE: Disable Telnet [7:41293]


youre correct. i was answering too quick without thinking about it more. ive
done it so many times but i havent had any caffeine this morning so i only
process about half of my thoughts

-Original Message-
From: Dimitris Vassilopoulos [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 12, 2002 8:44 AM
To: [EMAIL PROTECTED]
Subject: RE: Disable Telnet [7:41293]


Jeremy,

If you enter no login under vty 0 4, then you'll get into
the router!

login means that the router prompts  Password:.
no login instructs the router to bypass that, giving
you access immediately.

Dvass




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=41311t=41293
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Puzzles - WAS RE: My interview story [7:40553]

2002-04-06 Thread John Allhiser

The first one is simple if you relate it to public key sharing in network
security.

Place the diamond in the box. Secure the box with your lock.  Send it to
your friend.  So far, it's safe from the courier.  When your friend receives
the box, she secures the box with her lock and sends it back to you.  Still
safe.  You remove your lock and send it back to her.  Still safe.  She
removes her lock and retrieves the diamond.  All of this is done without the
use of relatively prime numbers.  ;o)

The second puzzle has already been answered using the details given ---
0'-32'


  -Original Message-
  From: Dusty Harper [mailto:[EMAIL PROTECTED]]
  Sent: Friday, April 05, 2002 4:55 PM
  To: [EMAIL PROTECTED]
  Subject: RE: My interview story [7:40553]

  The goal is to determine how you think.  Most real world solutions to
  problems can be applied to technological hurdles, or problems.
 
  As an example:
 
  Prep:
You have an empty box, a lock, a key for your lock, and a
  diamond.
Your friend has an empty box, and a lock for his box.
 
  Goal:
You want to get the diamond to your friend via courier.  However
  the   courier will steal anything that is not locked.  How do you do
  this?
 
 
  Another example:
 
If you have 2 20' poles, a 32' rope strung between them, and the
  lowest point of the rope is 4' off of the ground, how far apart are
  the poles?
 
  It gauges how one thinks and handles situations.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40681t=40553
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Intusion Detection and IT Security [7:40337]

2002-04-03 Thread John Allhiser

O'Reilly Publishing has a good book on this.

These links are also helpful:

http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html 

http://www.networkintrusion.co.uk/


-Original Message-
From:  [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 03, 2002 10:54 AM
To: [EMAIL PROTECTED]
Subject: Intusion Detection and IT Security [7:40337]


Does anyone have a suggestion on good books for learning about Intrusion 
Detection and IT Security for a beginner?  The books don't necesarily have 
to be Cisco based, but more on the basics of Intrusion Detection and IT 
Security concepts and tools used.

Thanks in advance

_
Chat with friends online, try MSN Messenger: http://messenger.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40339t=40337
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: pix and e-mail problem [7:39643]

2002-03-27 Thread John Allhiser

Use the command no fixup smtp
Maybe it was disabled before the ver. upgrade?

The fixup protocol for SMTP on a PIX has a tendency to 
mudge any mail sessions that use ESTMP.  In other words,
it limits the number of commands used in an SMTP session.

Some Email servers (e.g. Exchange 5.5 and 2000) use ESMTP 
and balk when it is disabled.


-Original Message-
From: george gittins [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 27, 2002 11:16 AM
To: [EMAIL PROTECTED]
Subject: pix and e-mail problem [7:39643]


For the past months i been receiving multiple e-mails from the outside
world. Im currently running mail gear from symantec as the primary e-mail
server which is located behind the firewall (pix 520)this  is map with a
conduit statement to a real ip address. The weird thing is this setup has
been working before, of course i have upgraded the ios of the pix to version
6.1 .Tech support told me that their were know issue with the pix and mail
gear
especially mail guard..what is mailguard? and how can i diable it .. any
pointers are apreciated. I also running a packetshaper box and a caching
server from dell behind the firewall. at the same time the issue began to
happen? does anyone have a setup familiar to mine?
thanks



57529# show version

Cisco PIX Firewall Version 6.1(1)
Cisco PIX Device Manager Version 1.1(2)

Compiled on Tue 11-Sep-01 07:45 by morlee

57529 up 75 days 2 hours

Hardware:   AL440LX, 128 MB RAM, CPU Pentium II 233 MHz
Flash i28F640J5 @ 0x300, 16MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB

0: ethernet0: address is 0090.2710.27df, irq 11
1: ethernet1: address is 0090.270d.c12c, irq 10
2: ethernet2: address is 0090.2710.46a2, irq 15

Licensed Features:
Failover:   Enabled
VPN-DES:Enabled
VPN-3DES:   Disabled
Maximum Interfaces: 6
Cut-through Proxy:  Enabled
Guards: Enabled
Websense:   Enabled
Inside Hosts:   Unlimited
Throughput: Unlimited
ISAKMP peers:   Unlimited




George Gittins
Internet Systems Manager
Weslaco, Tx 78599
Phone (956)9696557




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=39656t=39643
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cheap switch... [7:39547]

2002-03-26 Thread John Allhiser

I believe you may have been thinking of the 1201 
(although cheap is relative, and a 2912 can be relatively cheap)

-Original Message-
From: Patrick Ramsey [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 26, 2002 12:00 PM
To: [EMAIL PROTECTED]
Subject: Re: Cheap switch... [7:39547]


1900/2900  (non xl)

-Patrick

 [EMAIL PROTECTED]  03/26/02 12:48PM 
I know this topic has been raised before, and I was fairly sure I had even
saved the series of e-mails. Of course, much like that clever retort to a
co-workers smart remark, the actual information escapes me at the time it
is most needed.

I am studying for my CCNP, and while my home lab has several routers (to
start with), I am in need of an affordable switch. Someone posted a model
easily obtainable from e-bay that was very similar to the bigger Catalysts
command-wise, but much cheaper. Can someone refresh my memory as to what it
was, or offer any other suggestions? Thanks
  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. (WellStar) and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=39552t=39547
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ZHUYAN [7:35946]

2002-03-25 Thread John Allhiser

Osama?  Is that you?
Looking for advice on Aironets?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 25, 2002 5:07 PM
To: [EMAIL PROTECTED]
Subject: ZHUYAN [7:35946]


ARE YOU HERE?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=39490t=35946
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: IDS blade [7:39193]

2002-03-22 Thread John Allhiser

It uses the CSPM software like the standalone device.  
The link to physically install it is:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/idsm/idsm_1/10890_02
.htm

From the CLI, type: session  
then type ciscoids and attack for user and password.
Once you're in, type: setup.
Configure it to connect with the CSPM from there. 

-Original Message-
From: Ali, Abbas [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 22, 2002 12:38 PM
To: [EMAIL PROTECTED]
Subject: IDS blade [7:39193]


Has anyone ever configured IDS module for catalyst 6500 series router?  I
tried browsing Cisco Website, but did not find any help in terms of
installing and configuring the IDS blade.  Can someone point me to correct
link?

Regards,

Ali




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=39220t=39193
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Oops....Re: Re: Quality of Cisco exams [7:38063]

2002-03-13 Thread John Allhiser

Hi Howard,

I'm glad to see gettlabs.com is up and running -- I will definitely peruse
it tonight.

Preface:  I used to teach technology courses at a 4 yr college.  The courses
more or less coincided with certifications.

  Why get certified?
For some with no experience, it's their introduction to the technology.  For
those with experience it can be a baseline determining where they stand.

One thing I always told my students: Don't cheat yourself.  Don't study
for the test.  Study to master the subject.  Testing and certification are
merely mile markers if you do it this way.

I've seen many posts recently on the new test format, the quality of the
tests, and whether the certs really even matter.  One can only write so much
into a test question, and some only learn enough just to answer that
question  That's why the CCIE lab is still where the rubber hits the road.

The quality of the tests are fine. The ideal situation is for the questions
to improve as feedback is provided by the test takers, and the questions are
evolved by the test creators.

My .02 cents worth. (not an argument - just another view)

John Allhiser


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Howard C. Berkowitz
Sent: Wednesday, March 13, 2002 4:02 PM
To: [EMAIL PROTECTED]
Subject: Re: OopsRe: Re: Quality of Cisco exams [7:38063]


I'll admit the quality of Cisco tests (other than perhaps the CCIE
Written) leaves a good deal to be desired. But unless things have
radically changed, this is, in part, a result of the process used to
create them, and the fact that instructional design professionals
are in charge.

When I knew definitely how tests were written, what happened is that
a completed (perhaps beta) course was sent to a generally
non-technical instructional designer who was a specialist in writing
test questions.   The good news is that all the questions and answers
came from the course materials; the bad news is that all the
questions and answers came from the test materials.

If the course was obsolete or wrong, the test writer wasn't qualified
to recognize the problem and fix it, or realize that a question would
be ambiguous to someone in the field.

Now,  don't get me wrong. Instructional design is a legitimate
discipline and I use principles from it in developing lots of my
material. But when instructional designers rise to the PHB level, and
see themselves as managing what they sniff at as SME's -- Subject
Matter Experts -- the process loses quality.  Instructional designers
and technical experts that respect each other and work together
effectively are not from the world of Dilbert.

It isn't easy to write good questions. We've found that's one of the
toughest skills for CertificationZone writers, given that as well as
asking a good set of choices, the question writer also needs to write
a technically accurate and succinct explanation.
--
What Problem are you trying to solve?
***send Cisco questions to the list, so all can benefit -- not
directly to me***


Howard C. Berkowitz  [EMAIL PROTECTED]
Chief Technology Officer, GettLab/Gett Communications
http://www.gettlabs.com
Technical Director, CertificationZone.com http://www.certificationzone.com
retired Certified Cisco Systems Instructor (CID) #93005




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=38153t=38063
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF Question [7:37899]

2002-03-11 Thread John Allhiser

It doesn't affect area.  (It's local to the router) The best use is for
troublshooting or resetting counters.  You can reset according to the pid.

-Original Message-
From: Justin M. Clark [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 11, 2002 4:18 PM
To: [EMAIL PROTECTED]
Subject: OSPF Question [7:37899]


when configuring ospf the first command is:

router ospf process-id

Does the process id have any signifigance?  for instance, If i have one
router with pid of 10 and another with pid 12 can both of them function in
area 0.  If so, where does the process-id come into effect.  What is it
specified for?

Thanks,
Justin




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=37902t=37899
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Brutal Attack! [7:37087]

2002-03-02 Thread John Allhiser

Congrats! I know how you feel.
There will be more celebrating while studying for the lab.




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jeff D
Sent: Saturday, March 02, 2002 5:38 PM
To: [EMAIL PROTECTED]
Subject: Brutal Attack! [7:37087]


Just passed the Written.

Cheers and now beers!

Jeff D




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=37092t=37087
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: BCSN [7:36985]

2002-03-01 Thread John Allhiser

Yes.  The betas are offered until March 9th.  ($50)


-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 01, 2002 11:10 AM
To: [EMAIL PROTECTED]
Subject: Re: BCSN [7:36985]


I must not be paying enough attentionare they changing the format of
the CCNP exams again?

 Brian Zeitz  3/1/02 9:47:28 AM 
Hello Friends,



I just scheduled the BCSN exam for Next Sunday. This is my second try
at
it. I really know a lot more then I did the first time around, and the
first time around I only missed by a few questions. My question is,
saying if I did pass this exam, when will the new exams be
implemented?
How much time do I have to take the other 3 exams before they change
to
the new format? I guess this is motivation for me to get the CCNP done
quickly.



Brian




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=37002t=36985
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CSPM 2.3i and NT versus 2000 [7:35980]

2002-02-20 Thread John Allhiser

I couldn't get past the OS check in the install with 2.3 (90 day eval) on
2000.
Dropped it back to NT4 and installed without any problems.

We finally went with CSPM 3.0  2000.

John Allhiser CCNA MCSE
Network Engineer 
Business Men's Assurance
 

-Original Message-
From: Richard Deal [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 20, 2002 2:23 PM
To: [EMAIL PROTECTED]
Subject: CSPM 2.3i and NT versus 2000 [7:35980]


I'm about to run a trial of CSPM 2.3i for some IDS sensors that I have. I
noticed in the release notes that this version of the product only runs on
Windows NT 4.0; however, I  --REALLY-- would like to run this on Windows 200
server.

Has anyone had any success on running this on Windows 2000 server? If so,
what SP were you using for W2000 server? and what other things did you have
to do to get it up and running? Any of the functionality of 2.3i that you
couldn't get to function?

Thanks for the info!!!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=35996t=35980
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Does session layer protocol use IP address ? [7:28378]

2002-02-03 Thread John Allhiser

Doing some catching up on your email?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Nisus
Sent: Sunday, February 03, 2002 9:00 PM
To: [EMAIL PROTECTED]
Subject: Re: Does session layer protocol use IP address ? [7:28378]


To answer your question.  No the session layer does not handle IP
addressing.  IP addressing is handled at layer 3 of the OSI model.  That is
why routers are known as a layer 3 device, because they route protocols at
this level such as IP or IPX ( Another Layer 3 transport protocol).  The
session layer is a few steps up on the OSI model, it is layer 5.  It handles
establishing communications maintaining communications alive and the like.

Hope I was of some help

Steven M Aiello


[EMAIL PROTECTED] (John Nemeth)  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 On May 3,  4:27am, anil wrote:
 }
 } -Anil (PhD [Comp-Sci Tokyo Inst of Technology]- Sister School of MIT)
 } Does that count??

  Since this thread seems to have concluded, I won't belabour the
 point.  However, comp-sci is a huge field with many specialities and in
 many cases, subspecialities.  You say that you have a PhD in comp-sci,
 but you didn't tell us what the topic of your thesis was or anything
 else about your background.  For all we know, you could have studied
 something human interface design or something else that has nothing to
 do with networking.  So, saying that you have a PhD in comp-sci really
 doesn't tell us anything.

  As another example, somebody on one of the other mailing lists I'm
 on tried to claim that you can do full-duplex with a hub.  When people
 corrected him, he said that he was an Electronics Engineer and that he
 should know.  Electronics Engineering is a very large field, so unless
 he specifically studied physical networking hardware, he wouldn't
 know.  Anybody that knows anything about networking knows that a hub is
 a dumb multiport repeater (i.e. not much more then a signal amplifier)
 and therefore can't support full-duplex connections (for that, you need
 some smarts).  Needless to say, he got thoroughly trounced for his
 haughty attitude.

 }-- End of excerpt from anil




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34291t=28378
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: network monitor software [7:33786]

2002-01-30 Thread John Allhiser

Use a sniffer, such as Ethereal.
It's interface allows you to sort the capture several different ways.

John Allhiser

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jim Bond
Sent: Wednesday, January 30, 2002 6:48 PM
To: [EMAIL PROTECTED]
Subject: network monitor software [7:33786]


Hello,I'm trying to see who is the top talker in a
network
and what traffic it sends out. Any shareware
networkmonitor software I can use?

Thanks in advance.

Jim

__
Do You Yahoo!?
Great stuff seeking new owners in Yahoo! Auctions!
http://auctions.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33798t=33786
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CiscoWorks2000V4:Client Can't Open Web Browser [7:33155]

2002-01-25 Thread John Allhiser

Tony,
Okay, you are accesing it remotely?  You can successfully access it on a
Win2k
server from your client browser, but not on the Sun box.  This probably rules
out any NAT/Routing/Switching/physical layer problems.  
I would take a look at the config on the Sun box.  

Anyone remember that problem with CW2000 on Solaris 2.6 vs SunOS 8?  Don't
know
if that applies here or not, but I believe there was some discussion in the
past
on this.  You could search the archives for it.



-Original Message-
From: Tony Wu [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 24, 2002 11:03 PM
To: [EMAIL PROTECTED]
Subject: Re: CiscoWorks2000V4:Client Can't Open Web Browser [7:33155]


Hi,John Allhiser:
I use ip (not servername)to visit management server.The Managment
station's IP is in a private IP which belongs to NetworkManagement
Vlan1,Vlan1 doesn't have any DNS server.and client use public IP,but have a
route to the Managment station.
Client Browser doesn't have any question.I've cheked.
   What I was canfused is:Why I can visit CiscoWorks2000-Win2000 but can't
visit CiscoWorks2000-Solaris2.6?(I plug off the cable from Win2000 and
plug into Solaris's Net adapter,they have the same IP,netmask#,Default
Gateway).




- Original Message -
From: John Allhiser 
To: Tony Wu 
Sent: Friday, January 25, 2002 12:14 PM
Subject: RE: CiscoWorks2000V4:Client Can't Open Web Browser [7:33155]


 Not enough info for the first question.  Shot in the dark--DNS?
 Did you change the default (1741) port?

 I administer CWSI with IE5.5 sp2 or IE6.  Have you checked the required
 browser settings for the client?

 John Allhiser

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 Tony Wu
 Sent: Thursday, January 24, 2002 9:20 PM
 To: [EMAIL PROTECTED]
 Subject: CiscoWorks2000V4:Client Can't Open Web Browser [7:33155]


 Hi,
 I install CiscoWorks2000Version4 on a Sun station(solaris2.6),I can open
 http://servername:1741 locally,but I can't open it on a client.This client
 sit on another network,ping,telnet to the management station is
disable.But
 I used to install it on a Win2000 station,and I can open Works2000 on the
 same client.Why?

 BTW:How to let the default web browser on solaris to be Netscape(default
is
 hotJava)?After I install Netscape,I had to go to the directory to run
it,and
 every time it let me to input some parameter.I don't what does it mean.


 --



 Tony Wu
 System Integration Dept.
 Wholewise Sci.Tech. Co.,Ltd.
 Web:www.wholewise.com
 Email:[EMAIL PROTECTED]
 Tel:(86-591)3321996-318
 Mobile:13809516610
 Fax:(86-591)3322000
Tony Wu  P4HkO{OPBNE
:[EMAIL PROTECTED]
 Hi,
 I install CiscoWorks2000Version4 on a Sun station(solaris2.6),I can open
 http://servername:1741 locally,but I can't open it on a client.This client
 sit on another network,ping,telnet to the management station is
disable.But
 I used to install it on a Win2000 station,and I can open Works2000 on the
 same client.Why?

 BTW:How to let the default web browser on solaris to be Netscape(default
is
 hotJava)?After I install Netscape,I had to go to the directory to run
it,and
 every time it let me to input some parameter.I don't what does it mean.


 --



 Tony Wu
 System Integration Dept.
 Wholewise Sci.Tech. Co.,Ltd.
 Web:www.wholewise.com
 Email:[EMAIL PROTECTED]
 Tel:(86-591)3321996-318
 Mobile:13809516610
 Fax:(86-591)3322000




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33244t=33155
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Help!!!!About IPX [7:32911]

2002-01-24 Thread John Allhiser

Now I know why the 911 operators sometimes get so frustrated.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 24, 2002 7:52 PM
To: [EMAIL PROTECTED]
Subject: RE: HelpAbout IPX [7:32911]


Anybody Help!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33158t=32911
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: BSCN exam [7:32986]

2002-01-23 Thread John Allhiser

It had EIGRP, OSPF (single and multiple areas), BGP, IP addressing,
optimization, and scalability questions.  For more detail see: 

http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_exams/64
0-503.html

(watch for wrap)

(If there was a FAQ, this, and similar questions should be in it)

John Allhiser

-Original Message-
From: John McCartney [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 23, 2002 1:57 PM
To: [EMAIL PROTECTED]
Subject: BSCN exam [7:32986]


Hi All,

Has anyone taken this exam lately, if so, what topics were targeted a lot.
Did you have to type the cmd a lot or was it more multiple choice. I hope
this doesn't break the NDA...

Cheers!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=32991t=32986
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Static or dynamic VLANs [7:33014]

2002-01-23 Thread John Allhiser

We use the 6509 for our compressed core.  At the moment all 10 of our VLANs
are static.
I say that because the plan is to go dynamic once we upgrade our access
layer to 2950s.
We currently take advantage of Cisco Works and CSPM, so we're getting there.
For now, static meets the company's needs, but I want to play.  ;^)

John Allhiser

- Original Message -
From: Steven A. Ridder 
To: 
Sent: Wednesday, January 23, 2002 5:56 PM
Subject: Re: Static or dynamic VLANs [7:33014]


 I've worked in some large, Fortune 500 company networks and they've all
been
 ststic VLAN's so far.  Maybe other people have seen dynamic, but I haven't
 yet.


 Kane, Christopher A.  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  The role I currently serve offers me little chance to configure/manage
LAN
  switches. I was wondering if everyone can provide feedback as to whether
  they use static or dynamic VLANs. I'm curious to know which one is more
  prevalent. For those of you that manage campus type networks, I'm
 interested
  in knowing who deploys which. I'd like to hear real world scenarios to
add
  to my reading.
 
  Chris




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33026t=33014
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to block MSN, and others. [7:31057]

2002-01-07 Thread John Allhiser

This discussion reminds me of a popular quote I see all the time on another
forum: There are seldom good technological solutions to behavioral
problems.
--attributed to Ed Crowley, Compaq Technical Consultant

A friend of mine worked for a company that had a problem with a certain
spammer.
They blocked the IP address of the offending emailer at the gateway, and to
their utter astonishment, the pernicious perpetrator changed its IP.  The
spam
continued to flow.
Eventually, after about 9 IPs were entered into the deny access-list, the
legitmate email started having problems (the spammer seemed to have been
stopped).+

Long story, short:  The spammer was using the company's ISP's mail relay host
addresses.
By shutting down those IPs, they effectively shut down their Intenet mail
service.

--John


-Original Message-
From: Gaz [mailto:[EMAIL PROTECTED]]
Sent: Sunday, January 06, 2002 1:56 PM
To: [EMAIL PROTECTED]
Subject: Re: How to block MSN, and others. [7:31057]


I suppose it comes down to they type of company/employees. I'm more used to
companies that leave things fairly open for employees, and demand (rather
than expect) that the employee be responsible with it.
Employees will understand that monitoring needs to be done at times and
offenders be dealt with.
Firm and fair sometimes works better than beat me if you can. Not always
though, so admittedly it's horses for courses.

Gaz

Mike Sweeney  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Let me put something into perspective here. It was said earlier about why
 give access then block it. Why indeed... the why is for BUSINESS reasons..
 not day trading, not stock tickers, not chatting for hours(documented)
with
 friends at the expense of work, viruses coming in on Hotmail attachments
 that bypass the clamped down exchange server and so on.

 The internet is given to employees for business reasons with the
expectation
 that the employee will be responsible with it. Will there be personal
use..
 of course.. just like the phone. Why limit certain things? gee.. the
company
 pays for a T1, they have 4,000 users, 100 decide to watch a Victoria
Secret
 webcast at 300Kbps.. see the problem?  This not theorical.. this really
 happened to one of my clients and the webcastusers/readaudio users managed
 to max out the T during working hours.

 The courts have already decided for good or bad that email is company
 property and they can do what they wish with it. I would imagine that web
 access falls under the same rules as it's a company building, desk, PC(or
 Mac), servers, connection and so on.

 My opinion

 MikeS




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=31155t=31057
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Free BOOT CAMP LABS! [7:29926]

2001-12-22 Thread John Allhiser

It was spoofed.  Plug the header into Sam Spade to get a feel for how these
are interpreted.
It can be done several different ways, the crudest of which is to telnet to
port 25 and begin an RFC 2821/2822 compliant telnet session.

The SMTP logs on the Group Study list server may, however, show a bit more
in regards to the connection.

- Original Message -
From: Kevin Wigle 
To: 
Sent: Saturday, December 22, 2001 12:27 PM
Subject: Re: Free BOOT CAMP LABS! [7:29926]


 so..

 we can suspect who this came from but..

 I've always been interested in how to read email headers and source - can
 anyone interpret the headers on this one for me??

 Kevin Wigle

 - Original Message -
 From: screw bootcamp
 To:
 Sent: Saturday, 22 December, 2001 12:41
 Subject: Free BOOT CAMP LABS! [7:29926]


  How would you like a set of bootcamp labs free?
 
  Just post a message to this board stating your interest and you never
know
  they may appear in your inbox over the next couple of weeks.
 
  Tell all your friends and work mates.
 
  Include a list of e-mail addresses in your posting to the board and they
 may
  also receive the material.
 
  Best regards the screw-bootcamp crew!
 
  Mark and Brad have a good Christmas!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=29934t=29926
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Free BOOT CAMP LABS! [7:29926]

2001-12-22 Thread John Allhiser

Sorry about that.
It's kind of a favorite of mine--an all-in-one tool for WHOIS, Traceroute,
Ping, NSLookup, SMTP relay, etc.
http://www.samspade.org/is the site.  You can't beat the price.

One of the tools is an SMTP parser.  You can paste in the header from an
email and get semi-detailed results that walk you through the details.

HTH,
John

- Original Message -
From: Kevin Wigle 
To: John Allhiser ; 
Sent: Saturday, December 22, 2001 4:04 PM
Subject: Re: Free BOOT CAMP LABS! [7:29926]


 ok, I've never been up on the application side of things..

 So, what is Sam Spade??

 Kevin Wigle

 - Original Message -
 From: John Allhiser 
 To: 
 Sent: Saturday, 22 December, 2001 14:37
 Subject: Re: Free BOOT CAMP LABS! [7:29926]


  It was spoofed.  Plug the header into Sam Spade to get a feel for how
 these
  are interpreted.
  It can be done several different ways, the crudest of which is to telnet
 to
  port 25 and begin an RFC 2821/2822 compliant telnet session.
 
  The SMTP logs on the Group Study list server may, however, show a bit
more
  in regards to the connection.
 
  - Original Message -
  From: Kevin Wigle
  To:
  Sent: Saturday, December 22, 2001 12:27 PM
  Subject: Re: Free BOOT CAMP LABS! [7:29926]
 
 
   so..
  
   we can suspect who this came from but..
  
   I've always been interested in how to read email headers and source -
 can
   anyone interpret the headers on this one for me??
  
   Kevin Wigle




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=29943t=29926
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]