Re: Tacacs+/Radius

2001-01-29 Thread John Nemeth

On Jun 21,  5:24am, "Kevin Wigle" wrote:
}
} Our lab tech is really an anti-NT type of guy.  He doesn't want any
} production servers using NT.

 My type of guy...

} And he also would prefer Radius over Tacacs+.  Does anyone have a source of
} freeware Radius for unix?  His preferred platform is Solaris.

 See:  http://www.miquels.cistron.nl/radius and
http://www.freeradius.org/ .

}-- End of excerpt from "Kevin Wigle"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Resume Length (was: Certifications on resumes)

2001-01-29 Thread John Nemeth

 All you people should bickering about resumes should go and read
everything there is at http://www.asktheheadhunter.com/ .  Resumes are
irrelevent!

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BPX going out of style?

2001-02-10 Thread John Nemeth

 From what I see, there seems to be a lot of emphasis on GigE and
the very rapidly upcoming 10GigE combined with QOS now adays.  ATM
really doesn't seem to work that well with data (TCP/IP) and has a very
high overhead.  Ethernet is getting fast enough that when combined with
QOS it can easily handle voice and video as well as data.  Also,
ethernet is cheap, cheap, cheap; even GigE when you compare it with
ATM, and just about everybody knows how to handle ethernet, but ATM is
something that relatively few people know really well.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLANs on Catalyst 1900 Switches

2001-02-13 Thread John Nemeth

On Jun 28, 11:46am, Tom Lisa wrote:
} 
} It sounds like your switches are configured for bridge groups rather than VLANS.  
This
} can be reset by going to the Main Menu and selecting S (System Sub-Menu).  Then 
select
} option T (Reset to VLANS) to enable VLAN configuration.  Option T changes to Reset to
} Bridge Groups when VLANS are enabled.

 It took me a bit of time to find it, but the command line
equivalent is "no bridge-group enable".  Executing the commnand will
cause the switch to immediately reload.  I killed over 300 days uptime
when I tried it.  Oops.  :->  Oh well, a week later, the switch was
replaced with a 2924.

}-- End of excerpt from Tom Lisa

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BPX going out of style?

2001-02-14 Thread John Nemeth

On Jul 3,  3:55am, "Howard C. Berkowitz" wrote:
} 
} Photonic switching, where traffic is rerouted based at the high-speed 
} stream level rather than the packet or cell level, isn't here in 
} production, but it is coming rapidly.  Photonic switching will 
} complement, not replace, routing.  Please do not get me started on 
} the buzzword of "optical routing."  With the capacity of newer 

 Okay, how about lambda swtiching? :-)

}-- End of excerpt from "Howard C. Berkowitz"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: BPX going out of style?

2001-02-14 Thread John Nemeth

On Jul 6,  1:28pm, "Brian Lodwick" wrote:
}
} I have heard many tales of how ATM will explode soon, will be partenered 
} perfectly with DSL, and everyone will implement it, but I just haven't seen 
} it. I like the idea of improving technologies your engineering and support 
} staff are familiar with (Not counting new technology with old names like 
} IPv6). I hope this is able to work out, and isn't too far down the road.

 IPv6 is coming.  There are just too many shortcomings in IPv4 that
can't be solved using hacks.  The biggest being the lack of address
space.  It really isn't a question of "if" but rather "when".

} Is there any talk of using smaller tags in IP to create big pipes similar to 
} ATM's VCI's so that you could lower the ip address & mask-lookup processor 
} overhead on backbone IP routers? I think this would be a neat idea. Even 

 You've just described MPLS.

} though the CAM table is fast the router must still read the entire address 
} and mask. Small pipe identifiers could be inserted into the ip header and 
} extracted at the gateways and lookup would be lowered. Like xtags on VLANS.

 IP headers are only 20 bytes and aren't much of a problem.  The
real problem is with compression, encryption, access lists, etc.  Check
out this URL for a study on what happens when access lists are used:
http://www.nwc.com/1004/1004ws2.html

}-- End of excerpt from "Brian Lodwick"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VTY LINES NON EXISTENT!!!!

2001-02-14 Thread John Nemeth

On Jul 6,  7:16am, "Leigh Anne Chisholm" wrote:
} 
} You'll notice that when you access your Catalyst switch via the console
} port, that without issuing any sort of password, you're immediately able to
} access several commands on the switch -- you've immediately got access to
} "user mode".  In some organizations, this can present a security risk.  Can

 Yeah, I noticed this and found it rather surprising, not to
mention disturbing.  Especially, when you consider that the standard
software doesn't have this problem (of course, it doesn't have the
"enable" mode distinction, or a CLI for that matter).

} you set a "user-mode" password for the Catalyst 1900 series switch?  If so,
} how?

 Somebody has already shown that it can be done.  Digging through a
switch, the only thing that comes to mind is TACACS?  However, setting
up TACACS just for a couple of switches seems like a big waste.

}-- End of excerpt from "Leigh Anne Chisholm"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On Jul 6, 12:56pm, "Howard C. Berkowitz" wrote:
} 
} I am having this horrible pang of sympathy, then, trying to picture 
} you making a very reasonable demand of the TAC to escalate the 
} problem.  Let's put it this way.  Legal Seafoods, one of the best 
} chains (admittedly small--Massachusetts and the DC area), is owned by 
} the Berkowitz family. No relation that I know of, but I get truly 
} strange looks when making a reservation.

 When I was in university, there was a physics prof that sometimes
substituted for my regular prof, whose last name was "Beer".  You can
bet that a lot people thought it wasn't real.  If nothing else, that
taught me that even the weirdest names can be real.

}-- End of excerpt from "Howard C. Berkowitz"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On Jul 6, 12:09pm, "Howard C. Berkowitz" wrote:
} 
} To be honest, I hate to see product bashing on this list. I cringe 
} when I see people starting out with "I have this bug in my production 
} network."  My first reaction is "and what did the TAC say about it?"
} 
} If the response is "I don't have a support contract,"  my response is 
} "then you deserve the problems you have."  It's one thing for someone 
} not to buy support for a home lab, but anyone (except possibly 
} high-level resellers) who doesn't is a fool.

 I wouldn't be so quick to say that.  A lot of companies want/need
the best, i.e. Cisco gear, but their budgets are somewhat tight.  Cisco
support is generally considered to be very good.  But, one of the
complaints I frequently hear is the cost of it, as well as the
equipment.  However, the latter problem has much improved.  New
equipment is considered to be capital expenditure and is much easier to
handle then yearly on-going expenses.

} Perhaps I'm in a bad mood today about negativism, if that isn't 
} circular logic.  It's far too easy to slam anonymously on this and 

 I don't think so; although, it might be recursive.

}-- End of excerpt from "Howard C. Berkowitz"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On Jul 6,  4:09pm, "Howard C. Berkowitz" wrote:
}
} >This is all well and good for the big time players, ISPs, big corps
} >yadda yadda yadda, and companies with cash to burn like so much old toilet
} >paper. The Small and Midsized Business market (SMB) almost always can
} >accomplish what they want with free Unix or Linux for layer 3 and
} >cheap stackable switches with or without 802.1q support.
} >
} >So my obligatory cisco alternative:
} >www.zebra.org
} 
} And, in a non-information technology related SMB, who installs and supports it?

 Why, the secretary, who uses the computer a lot and knows a lot
about them, of course.  :->  Or for those slightly more sophisticated,
a computer store tech. who porbably knows next nothing, but runs Linux
on his PC at home.

}-- End of excerpt from "Howard C. Berkowitz"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On Jul 6,  4:37pm, "Mask Of Zorro" wrote:
} >From: "Howard C. Berkowitz" <[EMAIL PROTECTED]>
} >To: [EMAIL PROTECTED]
} >Subject: Re: alternative to Cisco routers
} >Date: Tue, 13 Feb 2001 21:34:15 -0500
} >
} > >This is all well and good for the big time players, ISPs, big corps
} > >yadda yadda yadda, and companies with cash to burn like so much old 
} >toilet
} > >paper. The Small and Midsized Business market (SMB) almost always can
} > >accomplish what they want with free Unix or Linux for layer 3 and
} > >cheap stackable switches with or without 802.1q support.
} > >
} > >So my obligatory cisco alternative:
} > >www.zebra.org
} >
} >And, in a non-information technology related SMB, who installs and supports 
} >it?
}
} Some overworked, under-paid college kid with nothing but time on his hands 
} to learn all this stuff and thirst for it that leaves him with a list or 
} certifications as long as my arm... I run into these kids every day in the 

 And, who has probably never ran a production server in his life.

 Of course, you also get the people that are too cheap to pay for
proper support.  I ran into a case of this not long ago.  A local
company that develops high end Oracle applications had their Linux
"firewall" hacked and it was being used to attack other sites.  They
are using @Home.  They need their Internet connection in order to
Conduct business, and they got cutoff until their system was fixed.
When they found out what it would cost for me to rebuild the box
properly, they decided not to use me.  Instead they used some kid that
did it for $30.  Gee, isn't that what got them into trouble in the
first place?  Of course, given what they do, if I were to ask them to
do even a really simple thing for $30, they probably wouldn't even give
me the time of day.  Even some technology oriented companies aren't
very bright.

 Anyways, I'm not desperate enough for business that I will lower
my rates to compete with kids that don't know what they are doing.  At
that rate, I would have to be extremely high volume in order to be able
to eat, which means that my quality would suffer big time.

} field. My hat's off to 'em! They forge new ground, but sooner or later they 

 Maybe so, but that doesn't mean that they should be building
business critical systems.

}-- End of excerpt from "Mask Of Zorro"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On Jul 6,  2:30pm, "dre" wrote:
}
} I disagree, Linux is a bad choice!  A Cisco 3640
} router would cost about the same and I'd like to see

 Gee, I'd sure like to know where you get your routers...

} you get a full BGP table with Linux for the same
} hardware cost.  plus, linux doesn't have CEF or
} any of the standard stuff that comes with IOS

 It definitely wouldn't have the forwarding performance or
stability.

} The SMB market does what they will, and who
} cares anyways?  They have *no* market share,
} they aren't Internet players, they aren't market
} players, they are NOTHING.  what they DON'T

 Cisco disagrees with you.  Actually, I do too.  Individually, they
may not be much; but, together they are a huge market.  The enterprise
market is starting to get full whereas the SMB market is just really
getting into technology.

} NEED is another strange weird solution that I would
} only put into a lab ; they need something standard,
} something that works, something that will scale,
} something that will perform up to their needs,

 I will agree with this.  The trick is finding companies that are
willing to spend the money to do it right.  If they aren't, then move
on since they won't be worth the aggravation.  On the other hand, if it
is a really small company that only has a single server, then having it
also act as their Internet gateway isn't necessarily a bad thing.

} and something that most $20/hour NT admins
} could configure.

 I'd be scared to have to depend on a router that was configured by
a $20/hour NT admin.

}-- End of excerpt from "dre"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE R&S Going to be Replaced..!!

2001-02-14 Thread John Nemeth

On Jul 6,  7:38pm, "Rodgers Moore" wrote:
}
} Witches or not, think about this.  Cisco is end of lifing the 2500 series
} this year.  So it is reasonable to expect that all of the routers in the lab

 Hmm, I haven't heard this.  But, it doesn't surprise me.  I
thought these things should have been gone some time ago.  They are
overpriced and underpowered.  However, I think they would still be good
for home labs.

}-- End of excerpt from "Rodgers Moore"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On Jul 7,  4:07am, "Fowler, Robert J." wrote:
} 
} However it might be a good choice for someone who is building a home lab. It
} is much cheaper to piece together some computers and throw zebra on it than
} to buy several routers. I've never used Zebra but it sounds like if you had
} some existing equipment and wanted to expand on that, couldn't afford to buy
} another router but had some old PC's it would be the way to go, since
} speed/reliability wouldn't be a real factor in a home lab. Any thoughts?

 Although, you may learn something about the protocols, you won't
learn anything about real routers.  You definitely need to get hands on
with real routers.  Zebra could be used to simulate a secondary router
in a multi-router experiment, but it isn't sufficient by itself.

}-- End of excerpt from "Fowler, Robert J."

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On May 31,  7:43pm, anthony kim wrote:
} --- "Howard C. Berkowitz" <[EMAIL PROTECTED]> wrote:
} > >paper. The Small and Midsized Business market (SMB) almost always
} > can
} > >accomplish what they want with free Unix or Linux for layer 3 and
} > >cheap stackable switches with or without 802.1q support.
} > >
} > >So my obligatory cisco alternative:
} > >www.zebra.org
} > 
} > And, in a non-information technology related SMB, who installs and
} > supports it?
} 
} 
} Good question.
} 
} I think under 1,000 employees is reasonable for a mid-sized company.
} Less than 400 is a rough estimate for a small company. These

 Your numbers are a little off.  Cisco defines them as:

SOHO -- Small Office / Home Office: 1-20 users
Small Business: 20-100 users
Medium Business: 100-500 users

I would tend to go along with these numbers.

} companies tend to already have people taking care of their NT/Novell

 Medium businesses certainly.  However, small businesses may or may
not.  Many of them will contract out the higher end stuff.

} I don't think it's too much of a stretch for their in-house staff to
} maintain Linux or FreeBSD. College grads are already familiar with
} these free systems, or ought to be. Presumably, in-house staff should

 There's a big difference between playing with them at home and
knowing how to handle production systems.  Also, unless they went to
vocational or technical schools, they won't have any operations
training.

} already know OSI, TCP/IP, and IPX. Thus, the learning curve isn't too

 That's a big presumption.

} And routing isn't too difficult, really. Especially in small
} environments: Anyone reasonably intelligent who knows TCP/IP
} intimately, can manage routing, or a firewall for that matter. Or

 How many people know TCP/IP intimately?  Probably fewer then you
think.

 Firewalls are specialty items that still require knowledgable
people.  Unless you like either having people break into your network
or having your network break.

} I've worked for small companies. The limited resources require
} sysadmins who can wear several hats and learn quickly. It's just the
} nature of the beast, nasty, brutish, but for expediency's sake, as
} variegated as the business needs require.

 That's true, but they don't necessarily have to know everything.
Some of the more complex stuff could be farmed out.

}-- End of excerpt from anthony kim
On May 31,  7:43pm, anthony kim wrote:
} --- "Howard C. Berkowitz" <[EMAIL PROTECTED]> wrote:
} > >paper. The Small and Midsized Business market (SMB) almost always
} > can
} > >accomplish what they want with free Unix or Linux for layer 3 and
} > >cheap stackable switches with or without 802.1q support.
} > >
} > >So my obligatory cisco alternative:
} > >www.zebra.org
} > 
} > And, in a non-information technology related SMB, who installs and
} > supports it?
} 
} 
} Good question.
} 
} I think under 1,000 employees is reasonable for a mid-sized company.
} Less than 400 is a rough estimate for a small company. These

 Your numbers are a little off.  Cisco defines them as:

SOHO -- Small Office / Home Office: 1-20 users
Small Business: 20-100 users
Medium Business: 100-500 users

I would tend to go along with these numbers.

} companies tend to already have people taking care of their NT/Novell

 Medium businesses certainly.  However, small businesses may or may
not.  Many of them will contract out the higher end stuff.

} I don't think it's too much of a stretch for their in-house staff to
} maintain Linux or FreeBSD. College grads are already familiar with
} these free systems, or ought to be. Presumably, in-house staff should

 There's a big difference between playing with them at home and
knowing how to handle production systems.  Also, unless they went to
vocational or technical schools, they won't have any operations
training.

} already know OSI, TCP/IP, and IPX. Thus, the learning curve isn't too

 That's a big presumption.

} And routing isn't too difficult, really. Especially in small
} environments: Anyone reasonably intelligent who knows TCP/IP
} intimately, can manage routing, or a firewall for that matter. Or

 How many people know TCP/IP intimately?  Probably fewer then you
think.

 Firewalls are specialty items that still require knowledgable
people.  Unless you like either having people break into your network
or having your network break.

} I've worked for small companies. The limited resources require
} sysadmins who can wear several hats and learn quickly. It's just the
} nature of the beast, nasty, brutish, but for expediency's sake, as
} variegated as the business needs require.

 That's true, but they don't necessarily have to know everything.
Some of the more complex stuff could be farmed out.

}-- End of excerpt from anthony kim

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondis

RE: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On May 31,  8:23pm, anthony kim wrote:
} --- John Nemeth <[EMAIL PROTECTED]> wrote:
} > On Jul 7,  4:07am, "Fowler, Robert J." wrote:
} > } 
} > } However it might be a good choice for someone who is building a
} > home lab. It
} > } is much cheaper to piece together some computers and throw zebra
} > on it than
} > } to buy several routers. I've never used Zebra but it sounds like
} > if you had
} > } some existing equipment and wanted to expand on that, couldn't
} > afford to buy
} > } another router but had some old PC's it would be the way to go,
} > since
} > } speed/reliability wouldn't be a real factor in a home lab. Any
} > thoughts?
} > 
} >  Although, you may learn something about the protocols, you
} > won't
} > learn anything about real routers.  You definitely need to get
} > hands on
} > with real routers.  Zebra could be used to simulate a secondary
} > router
} > in a multi-router experiment, but it isn't sufficient by itself.
} 
} Is a real router a device which routes layer 3 packets? Or a device
} "specifically designed" to route layer 3 packets. Your statement
} implies the latter. Whereas I believe the former.

 The latter.  A PC make be able to route packets, but that doesn't
make it a real router.  The hardware device is going to be faster
(especially at the high end), more reliable, require much less
maintenance (which makes it cheaper in the long run), and easier to
install and setup (not to mention take up far less space).  I'm a huge
fan of UNIX and will tend to run just about everything on UNIX systems,
but even I realise that UNIX host based systems are not the correct
solution for every problem.

} You *will* learn about real routers because the pc is a real router.
} You may *not learn* anything about IOS or $VENDOR's routers.

 That is the purpose of getting Cisco certs...

}-- End of excerpt from anthony kim

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On May 31,  9:53pm, anthony kim wrote:
}
} Intersting thread. I didn't know cisco defined a small business so
} strictly. Is that an exam question? :)

 It came from the SMB sales essential course, which is a reseller
course.  However, it closely co-incides with other definitions I've
seen.

} Of course the bottom line is, you make technology recommendations on
} what the business can handle, what they require, and what they can
} afford. At some intersection of this triad, an answer may surface.

 Yep.

} I am fortunate in that my experience with networking people have all
} been with knowledgable and clever folks.

 Very fortunate.

}-- End of excerpt from anthony kim

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: alternative to Cisco routers

2001-02-14 Thread John Nemeth

On May 31,  9:58pm, anthony kim wrote:
} --- John Nemeth <[EMAIL PROTECTED]> wrote:
} > } 
} > } Is a real router a device which routes layer 3 packets? Or a
} > device
} > } "specifically designed" to route layer 3 packets. Your statement
} > } implies the latter. Whereas I believe the former.
} > 
} >  The latter.  A PC make be able to route packets, but that
} > doesn't
} > make it a real router.  The hardware device is going to be faster
} > (especially at the high end), more reliable, require much less
} > maintenance (which makes it cheaper in the long run), and easier to
} > install and setup (not to mention take up far less space).
} 
} John, you've just added qualifications to the definition of a real
} router. Am I correct then in saying you believe a real router is
} 
} a) a device that routes layer 3 packets
} b) a device strictly designed to route layer 3 packets
} c) a device that routes layer 3 fast and reliably
} d) all of the above
} 
} The cisco exam answer is: d)
} I'm just too damn liberal with my definitions so would have chosen a)

 I would say d).  Here's an analogy for you.  You can insert/remove
Philips (and, some other) screws by using a small slotted screwdriver.
Does that make the slotted screwdriver a Philips screwdriver?

}-- End of excerpt from anthony kim

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Hub-to-Switch connection problem

2000-12-01 Thread John Nemeth

On Apr 23,  3:52am, Mayo Joseph W CONT NSSG wrote:
}
} The hub and switch are both at the same OSI layer 2. The rule is still
} correct.

 Really!?!  When did hubs get promoted to layer 2???

 Hint, a hub simply amplifies and repeats the analog signal on the
wire with no knowledge of how to interpret the signal.  A switch deals
with frames and is capable of interpreting MAC addresses.

}-- End of excerpt from Mayo Joseph W CONT NSSG

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Hub-to-Switch connection problem

2000-12-01 Thread John Nemeth

On Apr 23,  2:06am, "Bradley J. Wilson" wrote:
}
} The users who were directly connected to the switch had no problem accessing
} the network and Internet.  The users on the hub were dead in the water.  We
} tried swapping out the cable between the hub and switch, tried plugging
} either end into different ports, tried flipping the MDI/MDI-X switch, and
} nothing worked.  The only thing that *did* work was using a *crossover*
} cable between the hub and the switch.

 The MDI/MDI-X switch should have worked unless it was for a
different port, or you had a bad cable.

} Now, the rule (which I gleaned from this newsgroup, btw) is that when you're
} connecting devices at different OSI layers, you use a straight-through -
} e.g. PC to hub, PC to switch, switch to router, hub to switch - that's all
} straight-through.  You use a crossover when you're connecting devices at the
} same OSI layer - router to router, switch to switch, hub to hub, PC to PC.

 That rule is wrong.  A correct rule would be:

hub/switch to hub/switch   -- use crossover
hub/swtich to anything else-- use straight-through
anything else to anything else -- use crossover

} In the situation yesterday, a straight-through seemed logical, as we were
} trying to connect a hub to a switch.  Am I wrong here?  Why did the
} crossover work?

If the rule was right, then what you did would have been correct.
But, since the rule is wrong, all bets are off.

}-- End of excerpt from "Bradley J. Wilson"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: eXtreme ,juniper, Foundary and Cisco

2000-12-12 Thread John Nemeth

On Mar 29, 10:18am, Brian wrote:
} 
} We had a need to upgrade our workcloset switches.
} 
} We needed 72 10/100 ports, gigabit capibility, dual power.
} 
} Cat 5000, 3 24 port 10/100 blades, gigabit, Supervisor, and dual power,
} came to like $65000 or some crazy number like that.  total switch fabric?
} 3Gbps
} 
} Foundry FastIron II was about $15k list, $12k street price. Total switch
} fabric 16Gbps, with a packet forwarding speed that stomped on the cisco.
} The switch's OS is almost identical to IOS as well.

 This just illustrates why one should work through a knowledgable
reseller, instead of trying to put something together on their own.  I
did some number crunching (prices in CDN$, prices may vary, etc.
etc.):

Cat 5505, 3 x 24FE, SupIIG, extra AC  -- $40,204,80
bundled 5505 + SupIIG, bundled 3 x 24FE, extra AC -- $36,937.20

Of course, instead of using legacy equipment, I would recommend going with
the Cat 4000:

bundled 4003 + 48FE + 32FE/2G, extra AC -- $22,250.40

This gives a total of 80 10/100 ports and only costs 2/3rds as much.
It also has a 24G backplane.  One thing, I've noticed is that Cisco
switches tend to have lots of bandwidth.

Converting your Foundry FastIron II to CDN$ gives $18,000.  Although,
to be fair, I would have to find a CDN supplier and apply the same
markup.

P.S.  Doesn't anybody believe in snipping irrelevent content
anymore???

}-- End of excerpt from Brian

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: A question

2001-01-06 Thread John Nemeth

On May 28,  9:48am, "Howard C. Berkowitz" wrote:
} >Chuck Larrieu mentioned,
} 
} >I believe the 169.250.0.0 is a Microsoft reserved address. Microsoft, if
} >memory serves, uses it in conjunction with their automatic network
} >configuration A search of the RFC's did not reveal anything.
} 
} As I remember, it's buried in the DHCP specification, or even a draft 
} revision.  I vaguely remember a proposal to document 169.254/16, but 
} can't remember if that was a draft or RFC.

 It was a draft, which has expired.  I used to have a reference to
the draft, but I don't know where it is at the moment.  However, a
search of Internet Drafts at http://www.ietf.org/ turned up the
following URL:

http://search.ietf.org/internet-drafts/draft-ietf-zeroconf-ipv4-linklocal-01.txt

which appears to be an updated version of the draft (covers machines
with multiple interfaces).  Surprisingly, it was written by somebody at
Apple.

}-- End of excerpt from "Howard C. Berkowitz"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: A question regarding private addressing

2001-01-06 Thread John Nemeth

On May 28, 10:03am, Priscilla Oppenheimer wrote:
} 
} Microsoft stole this from AppleTalk. Ironically, Apple doesn't care and in 

 MS made a draft RFC about it, which has expired, and there is a
new draft by Apple (see my previous note).

} fact has been using the Automatic Private IP Addressing scheme for a few 
} years. I think Microsoft themselves only started using it pretty recently. 
} (Windows 2000, you say?)

 No, Windows 98 does it as well (not sure about Windows 95, but it
would be a good bet).

}-- End of excerpt from Priscilla Oppenheimer

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: A question regarding private addressing

2001-01-06 Thread John Nemeth

On May 29,  5:24am, Craig Columbus wrote:
}
} OK.  I can accept that Microsoft (or Apple for that matter) would do 
} something like this and then expect the world to revolve around 

 Actually, as Howard mentioned, neither of these companies
initiated the protocol, but that's a minor point.

} them.  However, I'm confused as to the benefit.  Why would anyone want a 
} non-assigned default IP address to appear on their network?  Do they really 
} think that people will implement a non-RFC1918 compliant address space just 
} to save configuration time?  (Actually, I can think of several cases where 

 It does save configuration time, since this is for cases where no
configuration at all happens, most likely due to the lack of a real
administrator.

} How do Internet backbone routers (BGP ASs) deal with this traffic?

 They don't.  There is a reason why this address range is called
"link local".  It's only useful within a single network segment that
isn't connected to any other networks.

} Let's say that I want to take the easy way out and I connect a small 
} network to the Internet via an ISP.  I'm not running NAT, but I'm running 
} the 169.254 addresses inside my network. If I've got a static route to an 

 Then, you're SOL.  To connect to the Internet, some kind of
configuration must happen (even, if it is just a box running NAT on the
outside interface and a DHCP server on the inside interface).

} ISP public address, and we're not exchanging routing information, I can't 
} see how this traffic would ever get back to my network.  If I'm exchanging 

 It wouldn't.

} routes with an ISP (via BGP or some other interior protocol), where and how 
} do the 169.254 routes get filtered?  There has to be some mechanism, or 

 It should be filtered at the network ingress point.

} there would be thousands of summary routes back to 169.254 showing up on 
} the Internet table.

 169.254 should never ever show up on the Internet, although I
wouldn't be surprised if it did.  I've seen some pretty large ISP's put
RFC-1918 addresses on the global Internet, which is also a no-no.

} Any help in understanding this is appreciated.

 The purpose of this is to setup small impromptu isolated networks
which often don't have an administrator with no configuration at all
required.

}-- End of excerpt from Craig Columbus

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP Security

2001-01-07 Thread John Nemeth

On May 30,  1:15am, "Chuck Larrieu" wrote:
}
} In terms of the access list parts, I still believe that the Gild Held /
} Keith Huntley book Cisco Access List Field Guide is an excellent source.
} Hhmmm. can't find it on Amazon. Out of print? Bad news!

 Really?!?  I found it pretty much instantly and I was using Lynx,
a text only browser.  Anyways, here's the URL (watch the wrap):

http://www.amazon.com/exec/obidos/ASIN/0072123354/sr=1-1/ref=sc_b_1/103-3059403-1667860

}-- End of excerpt from "Chuck Larrieu"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: crossover or straight cable?

2001-01-17 Thread John Nemeth

On May 3,  7:42pm, Sampy Ren wrote:
}
} The rule to follow about cross-over or straight
} cabling confusion is this :
} 
} If you are connecting same layer devices, use a
} cross-over cable (as in switch to a switch-layer 2 to
} layer 2 or a router to a router -layer 3 to layer 3).
} 
} If you are connecting devices from different layers,
} use a straight cable ( as in connecting a switch to a
} router - layer 2 to layer 3 connectivity).

 Aaarggh!!  I thought I had
laid this to rest the last time this thread came up.  This rule is
completely and utterly bogus!  For the simple reason, that a hub is a
layer 1 device and a switch is a layer 2 device, yet you use a
crossover cable to connect them together.  The rule that actually works
is:

hub/swtich to anything else -- use straight through
hub/switch to hub/switch -- use crossover
anything else to anything else -- use crossover

which reduces to when connecting anything to a hub/switch use a straight
through cable, otherwise use a crossover cable.

P.S.  If anybody tries to come up with some kind of wonky argument
saying that a hub (i.e. a simple repeater) is a layer 2 device in order
to justify the bogus layer rule, they will be char broiled (hint:
layer 1 devices deal with signals only, whereas layer 2 devices deal
with frames).

}-- End of excerpt from Sampy Ren

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Remote Telnet access via dial-up

2001-01-19 Thread John Nemeth

On Jun 10, 11:13am, Priscilla Oppenheimer wrote:

 Yes.  I would have the head of anybody that tried that stunt.  At
the very least, he should have been using ssh.  However, even that
would have been dicey.

 As far as the lack of an analogue phone line, that problem is
easily solved (depending on your point of view) by using CDPD (Cellular
D? Packet Data).  I have a friend in Canada that has a CDPD modem in
his laptop.  The service is $50/month for unlimited usage from Telus
Mobility.  It doesn't matter where he is, his laptop is always
on-line.  Add an ethernet card in the second PCMCIA slot, and you've
got a roaming router that could create a back door into any network.

}-- End of excerpt from Priscilla Oppenheimer

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Seally Question!!!!

2001-01-19 Thread John Nemeth

On Mar 15, 10:37am, "Joseph Kiang" wrote:
}
} What's the difference between NetBIOS and NetBEUI???

 NetBIOS is a networking API, similar to Berkeley sockets and
winsocks.  It is approximately layer 4.  NetBEUI is a networking
protocol.  It is a very simple one where hosts are identified by 14
character names, and there is no network field (i.e. it isn't routable;
things like DLSw and DLSw+ not withstanding).  It is approximately
layer 2.

}-- End of excerpt from "Joseph Kiang"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Seally Question!!!!

2001-01-19 Thread John Nemeth

On Jun 11, 12:14am, Adam Hickey wrote:
}
} A little further clarification.
} 
} NetBEUI is a networking protocol which uses NetBIOS at its core. Thus its
} name is an acronym for NetBIOS Extended User Interface.

 Usually I think of "core" as being the innermost or lowest layer
of something.  NetBEUI doesn't provide a user interface, it is the
lowest layer, sitting just above the hardware.  The name is a bit of a
misnomer.

}-- End of excerpt from Adam Hickey

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Sprint wire management class

2000-09-15 Thread John Nemeth

On Feb 4,  3:16pm, "Richard A. Holland" wrote:
}
} So the instructor proceeds to talk a bit about networking, and refers to
} Toke Ring as 802.4.  802.4 Is token passing using a bus topology, yet he
} refered to 802.4 as token passing in a ring.  Anybody else take classes from
} "leading vendors of network equipment" and notice their instructors have
} some crossed wires?  This kind of concerns me...

 Since when was Sprint a vendor of network equipment, much less a
"leading vendor"?  Network services, yes; but, not equipment.

}-- End of excerpt from "Richard A. Holland"

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Why 8 wires in RJ-45?

2000-09-20 Thread John Nemeth

On Feb 8,  5:12pm, "CCIE TB" wrote:
} 
} In TP cables we have eight wires. Only four are used. Why we need the other 
} four. The same thing applies to DB-25 and other types of cables. We don't 
} use all of the wires. Why?

 Because the standard actually comes from the telephony industry,
where it has other uses such as ISDN.  In the data industry, 100BaseT4
runs over Cat 3 using all four pairs; 100BaseVG, something that was
proposed by HP but never caught on, uses all four pairs; and 1000BaseT
runs over Cat 5 using all four pairs.  So, if you want your cable to be
usable in the future, or for other things, then you'd better wire it
according to the standards.  Cabling is by far the single most
expensive part of installing a network.  Recabling after a building is
finished, as opposed to prewiring when the building is only framed, is
even more expensive.  This is why it is best to overwire.  The marginal
cost of pulling extra cable or hooking up extra pairs is very cheap as
opposed to having to recable.

 The RS-232 standard, which I assume is what you mean by DB-25,
actually defines all 25 pins; but, in reality, most are rarely used.

}-- End of excerpt from "CCIE TB"

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: cross-over roll-over : Here is THE simplest rule

2000-11-09 Thread John Nemeth

On Mar 8,  3:01am, Bernard wrote:
}
} The rule is:
} connecting devices of the same OSI layer, use cross-over cable.
} connecting devices of different layers, use straight through.

 Hubs are at layer 1 and switches are at layer 2.  If you're
connecting a hub to a switch, you need to use a crossover cable.  So,
this rule doesn't work.  The real rule is, if you're connecting a
hub/switch to a hub/switch use a crossover, otherwise use a straight
through cable.

}-- End of excerpt from Bernard

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE 350-001: prep kit question.

2000-11-09 Thread John Nemeth

On Mar 8,  5:00am, [EMAIL PROTECTED] wrote:
} 
} CCIE 350-001: prep kit
} 
} page 332 "netBIOS is not routable, but NetBEUI is"
} 
} Is this right? I thought that NetBEUI was unroutable?

 No.  First off, NetBIOS is not a network protocol, it is an API
(i.e.  a way for an application program to use a networking protocol).
So, asking whether NetBIOS is routable or not is a nonsensical
question.  NetBEUI is a networking protocol.  It does not have the
concept of a network address, only a host address, so you are right
that it is non-routable.

}-- End of excerpt from [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NT1 needed

2000-11-09 Thread John Nemeth

On Feb 5,  4:46am, Brian wrote:
} 
} Does anyone know of an NT1 model that will allow the connection of 2 S/T
} interfaces (2 different routers) so that each can use a single chennel of
} the single ISDN line connected to it (like a splitter).

 The S/T bus is a parallel bus.  You can connect up to eight
devices to it (they are distinguished by their TEI -- Terminal Endpoint
Idenifier).  You don't need a special NT1, just a splitter which you
plug into any NT1.  I have seen eight-way splitters built just for this
purpose, but I don't know where to get them.

}-- End of excerpt from Brian

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NT1 needed

2000-11-09 Thread John Nemeth

On Apr 1,  3:29am, "Mike Momb" wrote:
} 
} I have seen this done where six ISDN phones were connected to a BRI but only two 
could be used at one time.   

 Yes, that is because there are only two B channels.

} >>> John Nemeth <[EMAIL PROTECTED]> 11/09 5:34 AM >>>
} On Feb 5,  4:46am, Brian wrote:
} } 
} } Does anyone know of an NT1 model that will allow the connection of 2 S/T
} } interfaces (2 different routers) so that each can use a single chennel of
} } the single ISDN line connected to it (like a splitter).
} 
}  The S/T bus is a parallel bus.  You can connect up to eight
} devices to it (they are distinguished by their TEI -- Terminal Endpoint
} Idenifier).  You don't need a special NT1, just a splitter which you
} plug into any NT1.  I have seen eight-way splitters built just for this
} purpose, but I don't know where to get them.
} 
}-- End of excerpt from "Mike Momb"

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: happy independence day

2000-07-14 Thread John Nemeth

On Nov 24, 10:48am, "Oladele Ayuba" wrote:
} 
} I'm in Nigeria but I was really expecting to see a lot of Independence day
} posts! The same thing that happened to engineers in school (college) is

 Silly question, but considering that Independence Day posts are
grossly off topic for this list, why would you expect to see any?

} happening to networkers. They get so engulfed by their work and miss out on the
} rest of the fun..

 You noted the problem, but totally missed the point.  On the July
1st weekend (I'm Canadian), I was out celebrating and enjoying myself
the whole weekend and was much too busy to be making off topic posts on
Groupstudy (or any other mailing list).  It's the people posting about
it, that are missing out on the fun.

}-- End of excerpt from "Oladele Ayuba"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Layer 3 VS. Layer 2

2000-07-14 Thread John Nemeth

On Nov 24,  3:40pm, Priscilla Oppenheimer wrote:
}
} And don't forget Layer 1 switching (sometimes called routing)! ;-) See 
} http://www.techreview.com/articles/july00/fairley.htm for a well-written 
} article on optical switching.

 The information I've gotten on this to date, called it "lambda
switching" (usually the greek symbol for lambda was used).

}-- End of excerpt from Priscilla Oppenheimer

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Deferred Packets

2000-07-18 Thread John Nemeth

On Nov 3,  5:28am, Erick wrote:
}
} > On a 10-half ethernet connection between two
} > routers, we are seeing deferred
} > packets happening as well as the normal usual
} > collisions. Are deferred
} > packets just normal as well? Is it expected in
} > ethernet media? Thanks in

 Yes, it is normal and expected.  However, too many, would be an
indication of an overloaded segment.  I'm not totally sure what
constitutes "too many".

} Defered packets occur when the ethernet is too busy
} and the interface can't put the packet out on the
} wire, so the packet is dropped. This is normal. I

 Bzzt, wrong!  The packet isn't dropped, it's held and transmitted
when the wire is free.

}-- End of excerpt from Erick

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Windows based sniffer

2000-07-19 Thread John Nemeth

On Dec 5,  3:23am, Oscar Rau wrote:
} 
} I am looking for a good windows based sniffer. I heard about Network Generals
} sniffer but I could not find the link to it. If you have the URL, would you please
} pass it on to me? If there other good sniffer products please let me know.

 It would be helpful if you specified the features you needed.
However, for simple packet capture and decoding, I generally use
WinDump, which is a port of tcpdump from UNIX.  You can find it at:

http://netgroup-serv.polito.it/windump/

}-- End of excerpt from Oscar Rau

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Deferred Packets

2000-07-25 Thread John Nemeth

On Nov 3, 10:39am, Erick wrote:
} Subject: Re: Deferred Packets
} > 
} > } Defered packets occur when the ethernet is too
} > busy
} > } and the interface can't put the packet out on the
} > } wire, so the packet is dropped. This is normal. I
} > 
} >  Bzzt, wrong!  The packet isn't dropped, it's
} > held and transmitted when the wire is free.
} 
} My mistake. I would argue that if there are many
} deferred packets queue'd up waiting to being
} transmitted that possibly the buffer for holding these
} packets could become full, thus packets could get
} dropped. 

 True, but this would be a "dropped packets" statistic and isn't
implied by deferred packets.

}-- End of excerpt from Erick

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: TCP

2000-07-25 Thread John Nemeth

On Dec 9,  4:01am, [EMAIL PROTECTED] wrote:
}
} Pls. elaborate your point of view

 It is not a "point of view", but rather part of the TCP spec.  You
asked what happens to the original piece of data when a duplicate
arrives due to the lose of an acknowledgement packet.  The short answer
is that nothing happens to the original piece of data.  The duplicate
piece of data is discarded.  A critical point the Ole didn't mention is
that another acknowledgement is sent out.  Hopefully the sender will
see the (duplicate) acknowledgement, which will cause it to stop
sending the data.  If the sender never sees an acknowledgement, for
whatever reasons, it will assume that something has happened to the
connection and will drop the connection.  See RFC793 (
http://www.faqs.org/rfcs/rfc793.html ) for all the gory details.


 I really wish people would learn to write e-mails properly.
Replies belong at the bottom of the message, so that context can easily
be seen, not at the top!  Excess text (greetings, signatures, anything
else not related to the issue) should be snipped.  There were three
standard groupstudy signtures plus personal signatures in this
message!  That's a lot of waste.  And, people shouldn't be using crappy
mail software that fails to distinguish between who wrote what.


} Ole Drews Jensen <[EMAIL PROTECTED]> on 07/18/2000 08:39:06 PM
} 
} To:   harora, [EMAIL PROTECTED]
} 
} The receiver will look at the data and see that it has already received it
} and drop it.
} 
} > -Original Message-
} > From:   [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
} > Sent:   Tuesday, July 18, 2000 8:26 AM
} >
} > Can anyone resolve my problem? My question is as follows:
} >
} > In a TCP connection, there is an acknowledgement between the sender and
} > the
} > reciever. The reciever sends the acknowledgement to the sender after the
} > reception of the packets. The sender recieves the packet and further
} sends
} > the data. Now suppose the reciever's acknowledgement is dropped in
} between
} > i.e. the sender did not recieve any ack. The sender will re-transmit the
} > data. But what will happen to the previous data which has been recieved
} by
} > the reciever. Suppose this happens for a no. of times, then the reciever
} > will have the same data again and again.
} 
}-- End of excerpt from [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Deferred Packets

2000-07-25 Thread John Nemeth

On Dec 9,  7:30am, "Ruslan S Tchinyakov" wrote:
}
} Packets are counted to be deferred are due to
} 15 successive collisions to happen after first send attempt-
} the CSMA/CD algorythm version used propose the cut of the back off

 The first two letters here stand for "Carrier Sense".  That means
you have to listen to the wire before transmitting.  If there is traffic
on the wire. then you have to wait.  That is a deferral, it is not a
collision.

} and go to start)- so this implies some not well-uderstood  by many readers
} Ethernet limitations-
} such as summary number of 1024 nodes in collision domain and so on.

 This has nothing to do with deferrals.

}-- End of excerpt from "Ruslan S Tchinyakov"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Deferred Packets

2000-07-25 Thread John Nemeth

On Dec 9,  6:25am, Priscilla Oppenheimer wrote:
} 
} This means that it's kind of a useless statistic since deferring because 
} the medium is already in use is absolutely normal on a shared and/or 
} half-duplex Ethernet. The threshold where it would be considered abnormal 

 I don't know if I would consider it be completely useless.  Yes,
it is completely normal, but an excessive number would be an indication
of an overloaded segment and could use as justification for either
further segmenting the LAN or installing a switch.

} completely depends on the number of stations and their traffic patterns, 
} which is not easy to measure or predict on a busy, shared Ethernet. 

 This, of course, is the catch.  But, even given this, if a node
can't transmit when it wants because the wire is saturated, then you
have a problem.

} (Luckily, we don't have that many busy, shared Ethernets any more.)

 I see more then I would like.  I also continuously hear lay people
say things like, "It's only a few nodes, you don't need a switch."
However, considering that you can get an eight port unmanaged switch
for $200CDN or less, it's getting to the point where installing a hub
in a bussiness location is foolhardy (unfortunately, there are a lot of
foolish people making networking decisions).  Actually, given the
current costs of both low-end hubs and low-end switches, I expect hubs
to completely disappear from the market in the next year or two, as
they become uneconomical to manufacture.

}-- End of excerpt from Priscilla Oppenheimer

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Hang on Cisco Documentation

2000-07-26 Thread John Nemeth

On Dec 9,  5:49pm, "myccie Lian" wrote:
} 
} My PC is Win98 after I installed cisco documentation CD and launch CD.
} Sometimes it works that I can access the CD but sometimes when I click
} on a
} link  it appear "Connect: host 127.0.0.1:8080 contacted. Waiting for
} reply".
} It hang there forever. I have tried Netscape(come with cisco) and IE

 I have found that some "firewalling" software can cause this kind
of problem.  Are you using any kind of "firewalling" software?

}-- End of excerpt from "myccie Lian"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CPA-2509 (2nd try)

2000-08-14 Thread John Nemeth

 I have an opportunity to pick up a CiscoPro 2509.  I have
physically examined it, but I haven't fired it up yet (I will try to do
that soon).  The box contained router, power cord, console cable, and
docs.  This one had the funny multiport plug for the async ports, but
didn't include any serial cables (async or sync).  The problem is that
I need to determine the value of it.  Checking eBay indicates that
regular 2509's go for about $800 to $900 US, and checking the
groupstudy archives people are suggesting that CiscoPro devices are
worth about have of the equivalent regular Cisco device.  So, I'm guess
at a value of approximately $400 to $500 US for this device.  Would
this be a fair estimate?  I will, of course, want to upgrade the IOS on
it, which leaves me wondering if it has enough flash and RAM for even
basic IOS 12.x?

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Great book!

2000-08-17 Thread John Nemeth

On Jan 6,  3:48am, "Sean Odom" wrote:
}
} The Cisco recommendations are really for medium to large organizations.  My
} recommendation for a hundred users (not knowing what the future expansion
} plans hold are

 Yes, exact recommendations would definitely depend on future
expansion plans.

} 1. If cost is a concern and you can do with 10 Mbps to each desktop go with
} 1924's and create a trunk between the two 10/100 ports.
} 2. If you need a little more umph and 10/100 to each desktop go with the
} 2900XL series.

 I actually agree with his suggestion of using 3548XL's.  This
would give him 96 ports assuming he uses the gigastack option.  For a
bit more money (not sure why he would do this), he could use two 2948G,
which also gives him 96 ports, assuming he uses the Gig ports for
connecting them.  For about the same as the 3548XL's, he could get the
104-port stack pack, (WS-C2900-XL-EN-104) which includes 1 2924M XL and
4 2924XL's (I don't know what the exact configuration is, lookup the
part number I gave on CCO).  I'm in Canada so I wouldn't be able to
give accurate US prices; besides, I don't generally post prices since I
don't wish to abuse this list (unlike certain others).

} 3. If cost is not a concern and you have expansion plans, go with the 5000
} family.  They are much more equiped to handle expansion mondules.

 The 5000 family is old, I would go with the 4000 family.  Cost may
change this, but in general I think it is better to go with newer
equipment which is going to have a longer service life.

} -Original Message-
} From: Jeff Walzer [mailto:[EMAIL PROTECTED]]
} Sent: Wednesday, August 16, 2000 8:21 AM
} To: '[EMAIL PROTECTED]'
} 
} One question I have (if you don't mind and have the time) is we are
} installing a new network from scratch and I was wondering what type of Cisco
} switch that I should get for our office. We will have around 100 users with
} some web development and coding work being done at our location. I am trying
} to follow the Core, Distribution, and Access layer model that Cisco
} recommends but the thing is that we are basically a flat network. Right now
} I am leaning towards the 3548 XL switches but I am not sure if I need to go
} to the 4000 or 5000 series.
} 
}-- End of excerpt from "Sean Odom"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCDA study site

2000-08-23 Thread John Nemeth

 Does anybody know what is happening with the CCDA study site at

http://216.98.236.26/courses/cisco/pdt/ccdastudy/home/home.htm

I haven't been able to access it for a couple of weeks and I'm only
half way through it.  I have read TND, but I want something that is a
bit more exam oriented now.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Win2k SNMP Traffic

2000-09-08 Thread John Nemeth

On Jan 27,  2:53pm, Deepak Sharma wrote:
}
} [gibberish snipped]
} 
} So is there any way i can block SNMP traffic on win2k professional from
} the routers..cause i still wanna see the pdc and bdc's.but this
} is not too important...I just REALLY need to stop those win2k machines
} from appearing on network neighborhood
} 
} Deepak Sharma
} MSCE  CCNA  ACT  A+
    
} Ceridian Canada Ltd.

 Thanks for devaluing these certifications.  Remind me never to
hire you for anything, since it is extremely obvious that you are only
paper certified.  HINT:  SNMP has absolutely nothing to do with network
neighbourhood.  If you had actually earned those certifications you
would know that.

}-- End of excerpt from Deepak Sharma

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associate-Announcement.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NAT for ISPs

2000-06-07 Thread John Nemeth

On Oct 28,  6:40am, "Howard C. Berkowitz" wrote:
}
} Current IP address allocation from ARIN assumes that ISPs will use 
} private addressing and NAT for single-homed customers.  They are 
} reasonable about exceptions, such as protocols that won't work 
} through NAT, but the exceptions need to be justified for the ISP to 

 You mean like FTP, etc.

} continue getting address space.

 This is totally bogus and unacceptable.  If my ISP even thought
about putting me behind a NAT gateway, I would be looking for a new one
really quickly.  It is one thing for a customer to run NAT internally at
their own option, but it is totally unacceptable for an ISP to force
them to use NAT.  Note that I don't have a problem with an ISP charging
extra for giving a customer a large address range as opposed to just
giving them one address.

}-- End of excerpt from "Howard C. Berkowitz"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ATM

2000-06-07 Thread John Nemeth

On Oct 29,  6:28am, "Mark Holloway" wrote:
}
} You honestly think ATM is going to take over Gigabit?  ATM had its chance in

 I don't think it has a chance.

} business.  ATM on the WAN is still growing rapidly, but ATM on the LAN is

 Actually with technologies such as 10GbE (expected in the next
year or so), [CD]WDM, MPLS, lamba switching (switching of light rays),
etc. I expect that ATM will soon start to die in the WAN as well,
except for legacy networks.  ATM is just too expensive, complicated,
and inefficient.  It has a 9.4 per cent raw overhead per cell and when
you add in all the gobbledygook necessary to actually use it, the
overhead supposedly comes to 24.5 per cent.  On the bottom of page 298
in TND, Priscilla says:

"One disadvantage of ATM is that the overhead for transmitting ATM data
is much higher than the overhead for transmitting traditional LAN
data.  The 5-byte header required in each 53-byte ATM cell equals 9.4
percent[sic] overhead.  When segmentation and reassembly and ATM
Adaptation Layer (AAL) functionality are added, the overhead can grow
to 13 bytes or 24.5 percent[sic]."

That means that your nice OC3 connection only has a throughput of
117mbps.  That is absolutely rediculous.

}-- End of excerpt from "Mark Holloway"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Making a switch behave like a hub

2000-06-16 Thread John Nemeth

On Nov 2,  1:40am, "Howard C. Berkowitz" wrote:
}
} More complex:  what problem are you trying to solve?  Even in a hub, 
} the bits that come in on one port are not the same physical bits that 
} exit on another port.  They will be regenerated, so it's arguable if 
} the frame changes or it's simply a frame copy.

 This sounds like one of those philosophy arguments about Star
Trek.  When somebody is transported, is the person on the receiving
end, the same person that left the transmitting end?

}-- End of excerpt from "Howard C. Berkowitz"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off Topic Is Star Trek Transport UDP or TCP? WASRE: Making a switch behave like a hub

2000-06-24 Thread John Nemeth

On Nov 7,  4:12am, "Chuck Larrieu" wrote:
}
} I've often wondered if a molecule or two get lost along the way? Imagine the
} error checking routines! Wonder what happens over a slow link? what's the
} packet size? What's the window? Who does the error checking, since the end
} result is UDP? Or if it is TCP, what device on the other end does the
} checking? What is the size of the frame check sequence? Questions questions
} questions

 I would assume the answer to this question depends on whether it is
a site-to-site transport (i.e. between two transporters) or not.

}-- End of excerpt from "Chuck Larrieu"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: collision on cut-through switch

2000-06-24 Thread John Nemeth

On Nov 9,  9:48am, Priscilla Oppenheimer wrote:
}
} The 1900 and 2820 Catalyst switches do cut-through. I did find a good white 
} paper at:
} 
} http://www.cisco.com/warp/public/cc/cisco/mkt/switch/cat/c1928/tech/nwgen_wp.htm
} 
} But it never comes right out and says what happens upon a collision when 
} forwarding. I can guess based on the architecture, but I'm looking for some 
} more definitive answers to prove my point with the other instructor. ;-)

 I read the paper, and it says, "forward processing begins as soon
as the destination address is recognized".  This isn't the same as
saying forwarding begins.  Presumably, if the destination port is busy,
the packet isn't buffered.

}-- End of excerpt from Priscilla Oppenheimer

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Firewalls

2000-06-24 Thread John Nemeth

On Nov 9, 11:47am, David wrote:
}
} well, simply blocking traffic from outdoors and using NAT is usually OK
} for a SOHO or regular user, but in general access lists ARE NOT A
} FIREWALL.  They don't keep status of connections and do any realtime
} inspection of traffic looking for more then just IP/TCP/UDP

 Just a minor correction, IP Filter is capable of keeping status.
However, it can't do inspection of the packet (i.e. make sure that
somebody isn't trying to send the SMTP DEBUG command).  IP Filter is
available for the following OS'es:

Solaris/Solaris-x86 2.3 - 8
SunOS 4.1.1 - 4.1.4
NetBSD 1.0 - 1.4
FreeBSD 2.0.0 - 2.2.8
BSD/OS-1.1 - 4
IRIX 6.2
HP-UX 11.00 (IPFilter 3.5alpha*)

See http://coombs.anu.edu.au/~avalon/ip-filter.html for more information.

}-- End of excerpt from David

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: collision on cut-through switch

2000-06-25 Thread John Nemeth

On Nov 9,  8:23am, Priscilla Oppenheimer wrote:
} 
} I got into a discussion with a knowledgeable Sniffer instructor recently. 
} When he teaches cut-through-switching theory, he warns his students that a 
} cut-through switch does not really isolate collision domains. Consider this 
} example:
} 
} * The switch is receiving a frame from port 1 destined for a station out 
} port 2.
} * The switch recognizes the destination address and starts forwarding the 
} frame to port 2 ASAP.
} * There is a collision on port 2. (It's a shared and/or half-duplex Ethernet.)
} 
} According to the instructor, the Switch sends a jam signal back to port 1 
} to let the initial sender know that the frame experienced a collision. This 
} allows the sender to retransmit.

 I would be really surprised if it worked this way.  If it did,
then you logically you would have an overpriced hub, not a switch and
there would be no point in using a switch (ignoring the fact that a
switch can extend the radius of the network).  This simply doesn't make
sense.  Also, with full-duplex ethernet, there would be no way to send
back a jam signal, so the only option would be to just drop the
packet.  Personally, if I paid good money for a switch and it behaved
in the described manner, I would be quite perturbed.

} I don't think the Sniffer instructor's conclusion is true, however. I 
} believe that a Cisco cut-through switch buffers the frame and hence has the 
} ability to retransmit. There is no requirement to send a jam to the 
} original sender because port 2 in our example retransmits after sensing the 
} collision.

 Personally, I would expect that the frame would simply be buffered
and not transmitted if the destination port is busy, so that no
collision occurs.  That is, after all, the whole purpose of having a
switch in the first place.

} Who do you think is right? Can you point me to any white papers that would 
} prove who is right?

 Given the equipment needed to teach a sniffing class, I would expect
that you and/or the other instructor could easily setup an experiment to
test the theory.  I would be interested in the results, but don't have an
easy way to test it at the moment.

}-- End of excerpt from Priscilla Oppenheimer

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Access-lists question??

2000-06-28 Thread John Nemeth

On Nov 5, 11:41am, "Johnny Dedon" wrote:
}
} Guys, be very careful with advice on access-list on production routers.  The
} best practice for adding or changing access-list is to remove it from the
} interface before modifying it.  The implicit deny all can be a real disaster
} with typos and the like when working from remote location. Be sure to remove
} the old access-list with a no access-list # before pasteing back the new
} one.

 Another good idea is to create a new access-list using a new
number, and then switch the interface to the new access-list when it is
ready.

}-- End of excerpt from "Johnny Dedon"

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Documentation CD

2000-06-28 Thread John Nemeth

On Oct 3,  3:58am, ElephantChild wrote:
} On Sat, 17 Jun 2000, Bharat Suneja wrote:
} 
} > Please help Cisco!! A lot of us are now using Windows 2000 (it works great
} 
} 
} Remember you're speaking about a corporation that believes Slowlaris is
} the only Unix platform and that NT is a great OS for network management,
} and that apparently never heard of lynx or text-only web pages.

 Actually, I have used Lynx to look at CCO a number of times.  The
site isn't the most Lynx-friendly, but it certainly isn't the worst I've
seen by far.

}-- End of excerpt from ElephantChild

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Earthquakes?

2000-06-28 Thread John Nemeth

On Nov 10,  9:01am, Shaq Patel wrote:
} 
} How do you make machines in california or where ever reistent and shock
} proof, best possible way during an earthquake?

 This topic is way beyond this list, since it gets into structural
engineering.  If you really want to do this right, you will need the
services of a good structural engineer.  Anyways, the basic process is
pick a good solid location (i.e. it wouldn't do any good to have your
building stay intact while it sinks into the ground), get redundancies
for utilities if required, make sure the building is as earthquake
proof as required, and make sure that ALL equipment is bolted into
racks which are in turn bolted to concrete floors with shock mounts.

 If you want an example of a company that has taken this idea to an
extreme, check out http://www.infosure.com/ , which is a company that is
located in Victoria, B.C., which is at the northern end of the San Andreas
faultline, the same one that California is on.

}-- End of excerpt from Shaq Patel

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE lab equipment - VOIP help needed. [7:1774]

2001-04-25 Thread [EMAIL PROTECTED] (John Nemeth)

On Sep 14, 11:18am, "Jon" wrote:
}
} Might look at the 827-4v router, as well.  It's an Alcatel-DSL modem, with
} an ethernet interface and four FXS interfaces.  Should be able to buy two

 Not to mention the DSL port.  I've been wondering how one could do
DSL in a lab?

}-- End of excerpt from "Jon"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1839&t=1774
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco IOS Question [7:2545]

2001-05-01 Thread [EMAIL PROTECTED] (John Nemeth)

On Sep 20,  2:21pm, "Jason Roysdon" wrote:
}
} Actually, IP IOS still costs $15 (at least according to my sales folks). 
It
} may ship with the router, but you're still supposed to purchase the IOS.

 It depends on how the router is purchased.  If it is purchased
directly from Cisco then it doesn't come with IOS, which must be
purchased seperately.  If it is purchased through the channel (i.e.
from a distributer), then it will come with IP only (both loaded and on
CD).  Either way, the reseller is responsible for making sure the
appropriate version is bought.

 Note, that according to Cisco, only the original purchaser is
licenced to use a given copy of IOS.  In other words, if you purchase a
router off of E-Bay, you are supposed to buy your own copy of IOS from
a reseller.

 BTW, in Canada, I would expect it to cost around $20 when shipped
with a router.  If you buy it seperately, it may cost more due to the
overhead of handling such a small order.

}-- End of excerpt from "Jason Roysdon"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2715&t=2545
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Howard's other books [7:3008]

2001-05-02 Thread [EMAIL PROTECTED] (John Nemeth)

We all know about Howard's book, Designing Addressing
Architectures for Routing and Switching; but, we rarely hear about his
other books.  I have just finished this book.  It is a very good book,
as most people here know; although, I wouldn't recommend it for
somebody just starting out.  You should have some experience and some
idea of the basic concepts first.  I have over ten years experience
designing, implementing, and maintaining small LAN/WANs using a variety
of technologies and protocols.  I've found networking to be
interesting, so I'm trying to build up my skills.  Right now, I'm
studying for CCDA in a somewhat roundabout way.  I've already read
Top-Down Network Design, as well as Howard's book, and I've started on
Designing Cisco Networks.  What I'm wondering about is Howard's other
books, that we don't hear about very often, such as, Designing Routing
and Switching Architectures.  Is this one that would be good to read
for basic design skills, or should I leave it for CCDP.  Obviously, I'm
not looking to just pass CCDA, but to really nail network design.  I
also have Christian Huitema's IPv6 2ed, which I will probably read
after I finish the MySQL book (besides networking, I do quite a bit of
System Administration and consulting).




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3008&t=3008
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Is there any really good IS-IS reference out t [7:5166]

2001-05-20 Thread [EMAIL PROTECTED] (John Nemeth)

On Oct 9,  7:34am, "Irwin Lazar" wrote:
}
} This URL filter is getting extremely annoying. :-)

 What URL filter???  Since you're probably on a PC of some sort
using a "smart" e-mail program, you're probably not seeing the entire
message.  I've included the entire message below as I received it.  As
you can see, URL's are not being filtered, but rather they are somehow
incorrectly ending up as part of the header (everything before the
first blank line).  I do not know if this is a problem on your end, or
a problem with groupstudy.  You may need to try some experiments (i.e.
try sending a message where the URL isn't the first line).  Also, I
guess Paul could try trapping incoming messages and have a look at them
before they are processed to determine if the problem is with the
incoming message or the processing.

}-- End of excerpt from "Irwin Lazar"

--- Forwarded mail from "Irwin Lazar" 

>From [EMAIL PROTECTED] Sat May 19 09:19:30 2001
Received: from groupstudy.com (www.groupstudy.com [63.104.50.75])
by vtn1.victoria.tc.ca (8.9.3/8.9.3) with ESMTP id JAA18774
for ; Sat, 19 May 2001 09:19:30 -0700 (PDT)
Received: from localhost (mail@localhost)
by groupstudy.com (8.9.3/8.9.3) with SMTP id MAA00589;
Sat, 19 May 2001 12:33:28 -0400
Received: by groupstudy.com (bulk_mailer v1.12); Sat, 19 May 2001 12:33:28
-0400
Received: (from listserver@localhost)
by groupstudy.com (8.9.3/8.9.3) id MAA00571
GroupStudy Mailer; Sat, 19 May 2001 12:33:28 -0400
Received: (from mail@localhost)
by groupstudy.com (8.9.3/8.9.3) id MAA00562
GroupStudy Mailer; Sat, 19 May 2001 12:33:27 -0400
Date: Sat, 19 May 2001 12:33:27 -0400
Message-Id: 
From: "Irwin Lazar" 
X-GroupStudy-Version: 3.1.1a
X-GroupStudy: Network Technical
To: [EMAIL PROTECTED]
Subject: RE: Is there any really good IS-IS reference out there? [7:5121]
See: 
http: //www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/n
Sender: [EMAIL PROTECTED]
Reply-To: "Irwin Lazar" 
Precedence: bulk

p1_c/1cisis.htm

Irwin

> -Original Message-
> From: NRF [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, May 19, 2001 3:45 AM
> To: [EMAIL PROTECTED]
> Subject: Is there any really good IS-IS reference out there? [7:5100]
> 
> 
> Does anybody know of any really good literature about IS-IS?  
> Not just about
> how IS-IS works, but sample designs and configs, and so 
> forth.   Ultimately,
> I would like to find something for IS-IS that is comparable 
> to what Halabi's
> book is for BGP, but that may be asking for too much.All 
> I've found so
> far is Radia's book, and that one chapter in Doyle's book.  Is there
> anything else?
> 
> Thanx
> FAQ, list archives, and subscription info: 
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


--- End of forwarded message from "Irwin Lazar" 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5166&t=5166
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



weird BGP question [7:10384]

2001-06-29 Thread [EMAIL PROTECTED] (John Nemeth)

Here's a weird BGP question I got today.  Take a standard
dual-homed site using BGP to connect to two upstreams.  Is it possible
to get BGP to route the first 300G of traffic per month to upstream A
and the rest to upstream B?  I'm told it's done all the time, but
somehow I doubt it.

 Before the famous question gets asked, the problem being solved is
cost.  The idea is to not exceed the minimum cost of upstream A.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10384&t=10384
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



argh! -- darn bookstores [7:10539]

2001-06-30 Thread [EMAIL PROTECTED] (John Nemeth)

A site for which I've recently taken over the networking wants to
multihome in the next two months, and probably connect to a regional
exchange point that is supposed to be setup within a year.  This means
that it's time to bone up on BGP.  So, I wander off to the bookstores.
First place is Half Price Computer Books (always check there first); no
luck, second is the local Chapter's (major chain here in Canada with
very large stores); no luck there, and finally I checked the website of
Bolen's (a very large independent store); no luck there either.  In
general, both Chapter's and Bolen's tend to be very good and have lots
of high end technical books.  But, of course, when I want a real high
end book and want it RIGHT NOW, nobody has it.  Looks like I'm going to
have to order on-line, or possibly check the Vancouver (big city across
the pond {Juan de Fuca strait}) book stores next week.  I just had to
get that off my chest.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10539&t=10539
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Howard's new book [7:10735]

2001-07-02 Thread [EMAIL PROTECTED] (John Nemeth)

Howard, you have mentioned that you are working on a new book that
is aimed at ISPs.  Is there a timeframe for this book?  Do you need any
"beta testers"?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10735&t=10735
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off Topic - CCIE LAB and NDA [7:34244]

2002-02-12 Thread [EMAIL PROTECTED] (John Nemeth)

On Jun 25,  7:08pm, "Chuck Larrieu" wrote:
}
} before I shut down for the evening, a few random thoughts on the CCIE Lab
} and NDA. Inspired by several posts here of late from persons asking about
} topology, IOS versions, or speaking of rumors about equipment changes.
} 
} 1) It is unclear what really constitutes NDA. Caslow? The ECP1 class? NLI's
} practice labs? Caslow's new prep class? Cisco's own ASET lab? All of these
} could be considered violations of NDA in many ways, from topic content to
} lab topology. Cisco's own ASET program used real but "retired" CCIE labs.

 It is very clear.  Cisco's NDA only covers materials produced by
Cisco.  That means Caslow, ECP1, NLI, etc. aren't covered.  If those
people want protection, then they will have to produce their own NDA
agreement and have you sign it.  If any of them break Cisco's NDA in
producing their material, then that is their problem, not yours.  If
you can show that you got something from a source other then Cisco then
you are in the clear.  As for the ASET program, I don't know.  You
would have to ask Cisco if the NDA applies to it.  This one ranks as a
maybe, which means that you better ask before revealing anything that
isn't on the public web site.

} 2) what is it Cisco really considers CCIE level skill? In the past, things

 Presumably whatever is covered the info at
http://www.cisco.com/go/ccie/ .

} like DecNet, Apollo, and Vines were core topics. Cisco has recently dropped
} those, plus ATM LANE, presumably in response to market conditions. Which
} leads one to ask - why token ring? The only real world token ring project I

 That is a very good question.  Maybe it is because they thing it
is still relevant.  In that case, one would have to wonder why the 3900
has been discontinued.  Maybe because it ties in nicely with dlsw.  Of
course, everything else that is even remotely related to SNA is gone
from the lab.  Another reason might be because removing it would mean
replacing the token ring equipment in the lab with ethernet equipment
and revising the labs accordingly.  That takes more planning and costs
more then simply dropping something that is strictly a matter of IOS
configurations.  Of course, it would probably be a good thing since
having more ethernet switches would make it possible to have more
complex and realistic switching scenarios.  A network would have to be
very small to have only one switch.  Also, with only one switch
spanning tree pretty much drops out of the picture, and on larger
networks it is a major issue, so not having to deal with it on the CCIE
lab means that the lab lacks realism.

} have been involved with the past couple of years is ripping them out and
} replacing them with ethernet. The apologia that there are still some major
} token ring networks around is a bit lame. There are still some major DecNet
} networks around, I'm sure. Until very recently ( and maybe they still are
),
} a major utility company out this way was still running Vines. As was the
U.S
} Navy.

 The B.C. provincial government used Vines quite heavily until
recently as well.  I know very little about it.  On the other hand, I
still have networks using Appletalk and IPX as well as IP (sometines
all three on the same wire).

} 3) Is the CCIE a forward looking certification or not? Based on what I am
} seeing in the marketplace, the advanced skill levels that one needs to meet
} demand center around VPN, VoIP, wireless, security, and the underlying
} infrastructure required to support these technologies. that means lots of
} QoS, switching, L2-L3 interaction, ATM, giga-whatever, etc.

 I don't see much ATM.  From what I see, ATM is goner.  It's
benefits are being replaced by things like QoS and MPLS.  I don't think
it keeps up with GigE much less 10GigE which is rapidly hitting the
market.  Breaking packets up into cels is a huge overhead.  With things
like GigE, you're better off just shipping the packet and being done
with it.  The only people that seem interested in it are telcos and the
like that have already heavily invested in it.  Advanced data people,
i.e. CANARIE (see http://www.canarie.ca/ ) aren't at all interested in
it.

 What you mention is probably too much to cover in a one day lab.
Note that security (which includes VPN) has its own lab.

} I would purely love to see discussed good focused discussion on core
} competencies, core issues. But there is that awful specter of NDA that
hangs
} over all of our heads.

 NDA certainly shouldn't cause problems with discussing core
competencies and issues.  NDA prevents you from discussing exactly
what is on the lab.  It doesn't prevent you from discussing things like
the intricate details of how OSPF or BGP behave in various situations.
You just can't say what situations are presented by the lab.  Besides,
the idea is that you should be preparing for anything, not just what is
on the lab.  Especially, since what is on the lab can change at any
time.

}

Re: Please help me answer this question [7:36295]

2002-02-25 Thread [EMAIL PROTECTED] (John Nemeth)

On Jul 16, 11:56am, "Priscilla Oppenheimer" wrote:
}
} It sounds like you're trying to pass the CID test. You should have signed 
} an NDA that says that you won't disclose questions on the test.

 This reply isn't aimed at any single person, since several people
did the same thing.

 The original poster did not specify the source of the question.
Therefore, he did not disclose that it is a question on the test, so
unless the reader has already taken the test, they wouldn't know that
it is a question on the test.  Several people responded claiming that
the question came from a test, thus disclosing a question on the test,
thus breaking NDA.  Ironic, isn't it?  Without the whistle blowers,
nobody would have been the wiser.

 I haven't taken any Cisco exams yet (mainly due to lack of time);
but, I have taken Microsoft exams.  I found a couple of questions that
were on Microsoft exams that were exactly the same as some questions in
the official Microsoft study material.  So, without asking the person,
we can't be sure what the source of the question was.

 Another thing I noticed is that all the people replying kept the
question, thus circulating the question more and adding more copies of
it to the archives.

 If you really must be a whistle blower, then it would be best do
directly so you can avoid the above problems.

}-- End of excerpt from "Priscilla Oppenheimer"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36455&t=36295
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



eBay seller kabel_inc [7:36666]

2002-02-27 Thread [EMAIL PROTECTED] (John Nemeth)

Does anybody know anything about eBay seller kabel_inc?  Is this
perhaps another alias for ojick?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3&t=3
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Infrastructure Upgrade..... [7:37627]

2002-03-07 Thread [EMAIL PROTECTED] (John Nemeth)

On Jul 28,  5:03pm, "Juan Blanco" wrote:
} 
} I am in the process of upgrading all  hubs in 4 different sites, each site
} has 8 hubs, I will replace each site with a 2950(24 ports)10/100mbs. I will
} connect each switch(2,3,4) to the switch(1) on the basement where a router
} will be available to connect to the Frame Relay cloud.
} 
} Questions:
} 
}   Will it make more sense to get the 1900 switch(10mbs) and not the 2950

 No.  2950's are on sale right now and are quite cheap.  In fact,
the 1900 is approx. $33.60 CDN retail more.  The other issue is that
applications are becoming more network intensive, so you are going to
regret putting in a slow switch.  You would probably actually be smart
to get 2950Ts (Gig uplinks).

}   Will I be able to set any one port to full(100mbs) on the 2950

 Each port is configured indivually for both speed and duplex.  Any
port can take on any combination of settings.

}   Will I be able to set up vlans and isl (as long as my route has a
} fastethernet port)

 The 2950, being a newer product, uses 802.1q.  The switch won't
have a problem.  The question is which router and what software feature
set.

}   Is this the appropriate replacements for the hubs(we don't have a lot of
} money to spend)

 This can't be answered without doing a detailed analysis of your
network.  The basic question is:  are you having performance problems
that can be solved by moving to switches.  If yes, then yes the
switches are most likely appropriate.

}-- End of excerpt from "Juan Blanco"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37640&t=37627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Infrastructure Upgrade..... [7:37627]

2002-03-07 Thread [EMAIL PROTECTED] (John Nemeth)

On Jul 28,  6:01pm, "Juan Blanco" wrote:
}
} Actually what we are trying to do is increase speed, eliminate collisions
} and reduce any kind of broadcasting in the LAN

 Eliminating broadcasts is impossible (consider that ARP uses
broadcasts).  Furthermore, broadcasts are an application function.
Switches have nothing to do with them (apart from flooding them to
every port in the same VLAN).  Routers don't normally pass broadcasts,
but I really don't think you want to put every device on a seperate
subnet.

}-- End of excerpt from "Juan Blanco"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37642&t=37627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Firmware Releases: Cisco Compared to Microsoft [7:38454]

2002-03-16 Thread [EMAIL PROTECTED] (John Nemeth)

On Aug 5,  2:19pm, "Mark Odette II" wrote:
} 
} Cisco's IOS updates have their gotchas too, but I've yet to experience one
} myself, save the exception of only a few key versions of IOS have support
} for the WIC-1ENET card that goes in the 1700 Routers. :(

 Tell me about it.  I just found out the hard way.  I was
installing a brand new 1720 for a client.  Stuck a second WIC-1ENET
into the right hand slot, booted the router, and said "oops!"

} Nothing like being stuck at 12.1.5(YB1-4), when the rest of the crew is
} using 12.2.x :(

 Supposedly, 12.2(2)XJ and higher has support for WIC-1ENET in the
right hand slot.  According to the release notes for that version, the
feature has been added to 12.2(6)T and higher.  Unfortunately, the
router I have has 12.2(4)T in it.  Time to call TAC...

} Speaking of that, is there anyone out there that knows of a newer version
of
} IOS for the 1750 that supports Voice and the WIC-1ENET Module
} simultaneously?!?!

 Try 12.2(8)T.

}-- End of excerpt from "Mark Odette II"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38581&t=38454
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Firmware Releases: Cisco Compared to Microsoft [7:38454]

2002-03-16 Thread [EMAIL PROTECTED] (John Nemeth)

On Aug 5,  6:11pm, "Tom Petzold" wrote:
} 
} This was found using the Hardware Software Compatibility Matrix at:
} http://www.cisco.com/cgi-bin/front.x/Support/HWSWmatrix/hwswmatrix.cgi

 Is there a "go" shortcut for this?

}-- End of excerpt from "Tom Petzold"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38585&t=38454
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: 3700 Series (3600 successor?) [7:38588]

2002-03-17 Thread [EMAIL PROTECTED] (John Nemeth)

On Aug 6, 10:14pm, "O Diogenes" wrote:
}
} For those who have used them -- anyone care to comment on the new 3700
} series, e.g., ability to comfortably handle gig traffic, vpn throughput,
} etc?  Will the 3600 series, sans 3631, go EOL soon?

 Personally, I don't think there is any reason for the 3620 to
exist any more.  Consider that the 2650 has better specs and costs less
then a 3620 plus ethernet module (the 2650 has 10/100 ethernet
built-in, so you don't waste a slot and you get 100M ethernet).

}-- End of excerpt from "O Diogenes"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38590&t=38588
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CPA to regular conversion [7:39524]

2002-03-26 Thread [EMAIL PROTECTED] (John Nemeth)

I'm having trouble converting my CPA2509 to a regular 2509.  I've
upgraded the boot ROMs and the memory (to 16D/16F).  That part all
seems to be fine.  I got an IP Feature Pack (CD25-C-12.0=), so I have
all the software I should have as far as I know.  I can successfully
tftp the upgrade file to the router, cpa25-upgrade-1.112-3.P .
However, during the download, the router says:

%Warning: File not a recommended image for this system

and, when it runs the file, it says:

---
Router Upgrade Utility for CANCUN, Version 2.0
Compiled by cstohs on Tue 11-Mar-97 19:53


Converting 2500 to CPA2500...

Completed.  Rebooting to Bootstrap Image...
---

and, sure enough when it is done, I still have a CPA2500, which won't
run a regular image.  The image that came with the router was
cpa25-y-l.102-872 .  Does anybody have any idea what is wrong and/or
what I need to do to make this thing into a regular 2509?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39524&t=39524
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cheap switch... [7:39547]

2002-03-27 Thread [EMAIL PROTECTED] (John Nemeth)

On Aug 17,  5:04am, "sam sneed" wrote:
}
} The XL switches run IOS which you need to know anyway the non XL run CatOS.
} I'd say spend a little more money and get a 5000 series switch, it'll be
} able to do layer 3 with the rigth accesories. No XL swtiches do Layer 3.

 No, but there is the new 3550 series, which are really cheap for
Layer 3 switches.  I was actually quite impressed when I found them.
There is also the 3550-48-SMI (Layer 2 only, but software upgradable),
which compares to the 2948G, but is cheaper.  See
http://www.cisco.com/go/cat3550/ for more info.

}-- End of excerpt from "sam sneed"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39722&t=39547
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE market FLOOD !! was: Current Wait time on the lab [7:12996]

2001-07-19 Thread [EMAIL PROTECTED] (John Nemeth)

On Dec 9,  2:34am, "[EMAIL PROTECTED]" wrote:
}
} Can you give me some examples of developments they pulled back on/never
} delivered? (we can take this off line if you prefer, I'm not sure what
} interest there is in this discussion by others).

 I'm interested in this.  As Caesar said, "know thy enemy."  Or,
more to the point, it is always good to know what is going on in the
marketplace.  Competition keeps everybody on their toes and helps to
improve both products and services.

} We are starting to stage equiptment this week thoughwe used to be a
} 3com shop and Extreme seemed to have the most/best interconnectivity with
} the old 3com gear, among other reasons.

 Considering 3Com never was a serious player on the high end, and
is now out of the market, you should probably plan on migrating away
from your 3Com gear.

}-- End of excerpt from "[EMAIL PROTECTED]"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12996&t=12996
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: bgp [7:13786]

2001-07-25 Thread [EMAIL PROTECTED] (John Nemeth)

On Dec 15,  9:16am, "Bill Carter" wrote:
} SH Wesson wrote:
} 
} > What is the recommended router if I wanted to run bgp on my dual
internet
} > connection.  I currently have a 2651 and will be upgrading it to 128MB
but
} > am not sure if that's enough to run bgp considering the size of the bgp 
} > routing table. Thank you.
}
} I would run a 3600 with a minimum of 256MB.  3620 looks good.  You could 
} try the 2600 with 128MB, but long term the 3620 would be better.

 I suggest you actually do some research before making product
recommendations in the future.  The 2651 is as fast as the 3620, comes
with more slots, comes with two built-in fast ethernet ports, can
handle a maximum of 128M RAM.  The 3620 doesn't have any built in
ports, can only handle a maximum of 64M RAM, and the cost of a 3620
plus ethernet ports is considerably more then the cost of a 265x.
Between the two, the 265x is obviously a much better deal.  At this
point, I'm not sure there is any reason for the 3620 to even exist.  To
get 256M of RAM, you need to go to a 3660, which greatly increases your
cost.

}-- End of excerpt from "Bill Carter"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13814&t=13786
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT: PEC CIMs [7:14291]

2001-07-30 Thread [EMAIL PROTECTED] (John Nemeth)

I have been trying to use the CIMs that are currently available
for free at Partner E-learning Connection, but I've only been able to
successfully complete "Router Basics".  All the other CIMs are littered
with "403" errors (HTTP error code for page not found).  I've opened a
case (#4109082) with PECsupport, but so far they haven't been much
help, and CIMs are only available until the end of the month, which
would be tomorrow.  Have any of the other Partners here tried them and
experienced the same problem?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14291&t=14291
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PEC CIMs [7:14291]

2001-07-31 Thread [EMAIL PROTECTED] (John Nemeth)

On Dec 20,  4:44pm, "Greg Macaulay" wrote:
}
} I opened a case with the PECsupport folks and they told me that there are
} evidently an "old" "outdated version" of the CIMs and a "new" version.  The
} old version of (all) the CIMs is what is causing problems.  So go to edit
} your progress and delete all the CIMs you signed up for.  Then on the PEC
} page -- click on SEARCH and put in CIM.  You should get a page with the 5
} CIMs which you can sign up for today.

 I tried this and it didn't work.

 Here is a sample of what I've been seeing:

--
Not Found

The requested URL /cmn/pec/cim/ipr-dv_v2r4/content/module1/quizData.js was
not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an
ErrorDocument to handle the request.

Apache/1.3.9 Server at cisco-elearning-sjdc.digisle.net Port 80
---

This problem is sprinkled throughout all five CIMs.  Given that
Leigh-Ann said she doesn't have problems, and the "sjdc" (San Jose?) in
the server name, I suspect that there may be mirrors and Cisco
Distributed Director (or something similar) is in use.

 Anyways, PEC support has finally acknowledged the problem and said
they are looking into it.

} As far as what happens at midnight tomorrow -- whether Cinderella's
carriage
} turns into a pumkin or not, etc. I don't know the answer.  I (hope) and
} suspect that if you are already signed up for the CIM, then it will still
be
} available -- but I don't know that for sure!

 PEC support said they would try to get me an extension.

}-- End of excerpt from "Greg Macaulay"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14425&t=14291
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cat 4 OS? [7:18156]

2001-08-31 Thread [EMAIL PROTECTED] (John Nemeth)

Does the Catalyst 4000 series run the set based OS, or IOS?  Or,
can it run either like the Catalyst 6000 series?  I'm going to a live
auction in a couple of weeks that has several Catalyst 4000s.  I don't
really need a switch at this point, but if I can get one stupidly
cheap...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=18156&t=18156
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX 501 [7:27002]

2001-11-21 Thread [EMAIL PROTECTED] (John Nemeth)

On Apr 13,  5:42am, "Ole Drews Jensen" wrote:
}
} If you look here (watch for wordwrap)
} 
} http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/prodlit/px501_ds.htm
} 
} You will see that it has 4 x 10/100 Mbps ethernet interfaces.

 Read the description a little more closely.  You will see, "...its
integrated, high-performance four-port 10/100-Mbps switch."  In other
words, it only has two interfaces.  One of them just happens to be a
four port 10/100 switch (most likely unmanaged).

}-- End of excerpt from "Ole Drews Jensen"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27055&t=27002
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: The Scoop on PIX? [7:26607]

2001-12-05 Thread [EMAIL PROTECTED] (John Nemeth)

On Apr 10,  6:23am, "trammer" wrote:

 I meant to respond to this awhile ago...

} If you feel that the firewall aspect of your network does not require the
} horsepower, functionality, failover, expansion, etc. of a dedicated purpose
} box such as the PIX, then a regular router (2600, 3600, etc.) running the
} IOS firewall code may be the correct step.

 You can get a PIX 501 starting at about $800 CDN retail.  Whereas,
the IP/Firewall Plus IPSEC feature pack for the 2600 is going to set
you back about $2300 CDN retail.  That's a huge difference.  Heck for
that kind of money, you could almost get into a 506 (about $2650 CDN
retail).  When you look at the cost, it doesn't seem to make sense to
use a router as a firewall, unless there is a huge requirement to save
space or use fewer devices.

} Ultimately you may refer to the term "you get what you pay for".

I'm not even sure about that.

}-- End of excerpt from "trammer"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28179&t=26607
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Where Can I download GATED 9.0 for testing BGP [7:27496]

2001-12-05 Thread [EMAIL PROTECTED] (John Nemeth)

On Apr 19,  8:39am, "Howard C. Berkowitz" wrote:
}
} >  Gated is embedded in all Unix platforms.
} 
} Are you sure? RouteD, yes. I've always thought I had to install GateD.

 You're right, GateD is commercial software, although there is an
academic licence available.  See http://www.gated.org/ for more
information.

}-- End of excerpt from "Howard C. Berkowitz"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28184&t=27496
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CPA 25xx Upgrade Tool [7:28018]

2001-12-05 Thread [EMAIL PROTECTED] (John Nemeth)

On Apr 25, 11:25am, "Circusnuts" wrote:
}
} http: //www.cisco.com/cgi-bin/Software/Tablebuild/tablebuild.pl/rsl
} 
} Man-o-man !!!  It took me a while to track this down this afternoon.  If
you
} upgrading a CPA router, you'll need this piece of software.

 I don't think it is particularly hard to find.  However, you need
download privileges to get it.  The other way to get it is to buy
CD25-C-12.0= (i.e. 2500 IP feature pack).  The problem there is that
most distributors don't seem to be stocking 2500 stuff anymore (my main
distributor has one 2514 and that's it).  I've had the 2500 IOS on back
order for more then a month now with no sign of it.  I sure wish it
would show up so I could upgrade my CPA2509 (I've already upgraded the
ROMs).

}-- End of excerpt from "Circusnuts"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28193&t=28018
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Re[6]: VPN is a Backdoor !!! [7:27725]

2001-12-06 Thread [EMAIL PROTECTED] (John Nemeth)

On Apr 27,  6:24pm, "Chuck Larrieu" wrote:
}
} one interesting solution I heard was to require two partitions on the hard
} drive. One partition boots to the VPN, the other to normal use. completely
} separate OS installations on both, so that if the non VPN partition is
} compromised, it still does not effect the other. anyone heard of this or
} doing it now? any comments?

 I really don't think this will work.  For this to work, the unused
partition would have to be completely untouchable.  In the situation
you describe, the unused partition is normally available as "D:".  The
malware would simply have to search for other writable partitions and
infect the files on it as well.

}-- End of excerpt from "Chuck Larrieu"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28274&t=27725
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: UDP question [7:28263]

2001-12-06 Thread [EMAIL PROTECTED] (John Nemeth)

On Apr 27,  9:55pm, "Danny Rising II" wrote:
} 
} OK guys, I am running into a little problem in my CCIE Written study. I
have
} two different testing Engines and they have both gave me the same question
} but different answers on both tests. Does anyone know what the correct
} answer should be, here is the question they are asking.
} 
} Which statement is true when a UDP packet has to be fragmented?
} A. only the first fragment has the UDP header
} B. All fragments hold the UDP header, so that access lists that look at the
} port would be usable
} C. The first fragment holds only the UDP header, not the UDP data. The UDP
} data is transmitted inthe subsequent fragments.
} D. None of the Above.
} 
} One testing software says A, while the other says B.
} 
} please let me know.

 To answer this question, you should read RFC 768 -- User Datagram
Protocol and RFC 791 -- Internet Protocol.  I've read both of them,
amongst many others, and can say that they are some of the shorter and
easier ones to read.  A CCIE candidate should be able to easily digest
them.  Heck, the UDP one is only three pages long and ranks as one of
the shortest RFCs that exists.  The IP one is somewhat longer at 45
pages.  Anyways, you should poke around at http://www.rfc-editor.org/
.  When you have problems like the one above, the best solution is to
go to the source...

 Anyways, my answer to the question would be "D. None of the
Above".  For any given packet, A. or C. may be right, but B. is flat
out wrong (this could easily be seen by reading the RFCs I mentioned).
The reason for my answer is that there is no such thing as a "UDP
packet".  What goes on the wire is an IP packet.  Indeed, there is no
provision for fragmentation at the UDP level, that happens at IP level
(or, at layer 2 in the case of Frame Relay, ATM, etc.).  Every packet
must have an IP header to tell where it is going and what fragments to
put together.  The data portion of the packet is the "UDP packet"
mentioned above.  Each packet can contain as little as one byte of the
data portion (the UDP header is eight bytes) or as much as can be
stuffed into the packet allowed by the MTU.  Because the UDP header is
so short, it will normally be fully included in the first fragment.
Also, normally there is no overlap or repetition of any of the data
portion.  Based, on what I know about certification tests, I would
probably answer A. for this question, even though the real answer is
D.  This just points to the need to keep in mind the difference between
the fantasy world of test writers and the real world.

 Bad guys have been known to not stick the UDP header completely in
the first fragment in order to sneak past ACLs.  This means that
anything using ACLs must either drop short frags or put the packet back
together.  Bad guys have also been known to overlap fragments again to
trick devices or to crash them.  They have also been known to send many
fragmented packets with missing fragments in order to overflow buffers
and crash devices.  This, of course, gets into the need for resiliency
in the face of protocol violations.

 Note to Rick Lowe.  How many of your CCNA weenies can do an
analysis like this?  Heck, how many of them even know what an RFC is?
When it comes to the tough stuff, I'd pit myself against the average
(people like Leigh Anne would probably give me a run for my money) CCNA
any day.

}-- End of excerpt from "Danny Rising II"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28278&t=28263
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off Topic: DNS Delegation Help [7:28910]

2001-12-12 Thread [EMAIL PROTECTED] (John Nemeth)

On May 4,  7:20am, "Shawn Xu" wrote:
}
} We are ISP to assign different ip blocks to our customers. After
subnetting
} , one of our clients asks me to do "Reverse DNS Delegation" for his DNS.
He
} owns his DNS and domain name which is not our subdomain.

 You're right.  This is grossly off-topic.  Also, the very fact
that you are asking this question (combined with the stuff that I
snipped) means that you really need to hire somebody that knows what
they are doing.  I charge people a lot of money for solving these kinds
of problems (not to mention the fact that it is off-topic), so all I'm
going to say is, see RFC 2317.

}-- End of excerpt from "Shawn Xu"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28942&t=28910
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: UDP question [7:28263] [7:28263]

2001-12-12 Thread [EMAIL PROTECTED] (John Nemeth)

On May 2,  8:58am, "Priscilla Oppenheimer" wrote:
}
} I agree that CCIE candidates should read RFCs. If you answer D, however,
} it's because your job should really be to be an editor, not a CCIE. ;-)

 Although, I can edit, it isn't my favourite activity.  Hmm, not
even a CCNA and already being told that networking isn't for me :->

} Seriously, the question is worded stranged mainly because of the use of
} passive voice. A good editor would have told the author to fix that and the
} question would have said:
}
} "Which statement is true when IP needs to fragment a UDP packet?"
}
} Answer C couldn't be right unless the MTU were 28 bytes! That's so unlikely
} that a good test taker would not answer C.
}
} The answer is A.

 As I said, if I was writing the test, I would answer A, since 99%
of the time, it would be right.  However, strictly speaking, from the
protocol specs, there is no need for any of the answers to be true (the
MTU could be less then 28 bytes, in which case you wouldn't get the
entire UDP header in a single packet, or somebody could just be doing
something weird).

}-- End of excerpt from "Priscilla Oppenheimer"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28957&t=28263
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Need BCRAN latest Dumps! [7:28236] [7:28236]

2001-12-12 Thread [EMAIL PROTECTED] (John Nemeth)

On Apr 29, 11:30am, "Priscilla Oppenheimer" wrote:
}
} What would a girl be doing at a college? Must be a child genius. Asking her
} to do something other than go to the library or study would be illegal. ;-)
} The correct word for a female human above the age of 18 is WOMAN and don't
} forget that.

 Most people where I live finish high school while they are 17 or
18, which means that it is very feasible for somebody that is 18 or
less to enter college/university.  As for doing anything other then
telling them to study, I'm told that locally the age of consent is 16
(I'm not interested in dating somebody half my age, so it isn't
important to me).

 Just playing devil's advocate :->

}-- End of excerpt from "Priscilla Oppenheimer"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28956&t=28236
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ATM circuit [7:28774] [7:28774]

2001-12-12 Thread [EMAIL PROTECTED] (John Nemeth)

On May 2,  2:22pm, "Priscilla Oppenheimer" wrote:
}
} My co-author added this statement to the book I'm working on:

 Your first book was great.  Now that you've let the cat out of the
bag, you have give us the details on the new one (what's it about, when
will it be released, who is the co-author, etc.).

}-- End of excerpt from "Priscilla Oppenheimer"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28955&t=28774
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Does session layer protocol use IP address ? [7:28378]

2001-12-12 Thread [EMAIL PROTECTED] (John Nemeth)

On May 3,  4:27am, "anil" wrote:
}
} -Anil (PhD [Comp-Sci Tokyo Inst of Technology]- Sister School of MIT)
} Does that count??

 Since this thread seems to have concluded, I won't belabour the
point.  However, comp-sci is a huge field with many specialities and in
many cases, subspecialities.  You say that you have a PhD in comp-sci,
but you didn't tell us what the topic of your thesis was or anything
else about your background.  For all we know, you could have studied
something human interface design or something else that has nothing to
do with networking.  So, saying that you have a PhD in comp-sci really
doesn't tell us anything.

 As another example, somebody on one of the other mailing lists I'm
on tried to claim that you can do full-duplex with a hub.  When people
corrected him, he said that he was an Electronics Engineer and that he
should know.  Electronics Engineering is a very large field, so unless
he specifically studied physical networking hardware, he wouldn't
know.  Anybody that knows anything about networking knows that a hub is
a dumb multiport repeater (i.e. not much more then a signal amplifier)
and therefore can't support full-duplex connections (for that, you need
some smarts).  Needless to say, he got thoroughly trounced for his
haughty attitude.

}-- End of excerpt from "anil"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28958&t=28378
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Correction - about multicast address! [7:29057]

2001-12-20 Thread [EMAIL PROTECTED] (John Nemeth)

On May 6,  8:25am, "Priscilla Oppenheimer" wrote:
}
} It does help to have the option of copy and pasting from one's current 
} work! ;-)
} 
} A few people have asked, and I responded a couple times, but I think they 
} all got filtered (hmm what does that mean?), but I am working on a new
book
} on troubleshooting and protocol analysis. It will cover all Cisco Support 
} test topics and many topics for the Routing & Switching CCIE written test. 
} The writing is almost done, but the production, editing, etc. takes 
} forever, so stay tuned. Thanks for asking!

 This should be interesting.  I'd be interested to see how your
recommended method compares to the method I used to resolve a
compability issue between the ISC DHCP client and Shaw@Home (the
problem was a bug in the Shaw@Home DHCP implementation, but I did
manage to work around it).  After solving that problem, I read about
protocol analysis in the "Supporting Windows NT Server in the
Enterprise" course book.  That was a total joke, which didn't teach you
anything.  To add insult to injury, the topic wasn't even on the exam.
What a waste of time.

}-- End of excerpt from "Priscilla Oppenheimer"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29758&t=29057
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Proper dress for CCIE lab? [7:29524]

2001-12-20 Thread [EMAIL PROTECTED] (John Nemeth)

On May 10,  7:53pm, "Leigh Anne Chisholm" wrote:
} 
} (Note to all the guys on this list:  The ladies here are all petite, very
} physically fit, and are always dressed to kill!)
} 
} (Note to all the ladies on this list:  We know the above isn't true, but
} since
} most on the list don't know what we look like, why not give their
} imaginations
} something to work with.  Hmm... I wonder what the "virtual" me looks like
to
} most of them.).

 There is a picture of Priscilla sitting in front of an iBook (aka
"toilet seat" -- I *just* had to throw that in there, the devil made me
do it :->), so it is easy to get a general idea of what she looks like.

 As for you, given your comments about being perfectly happy
swinging from the rafters in mountain climbing gear in order to install
cabling, I suspect that you are in fairly good shape which usually
translates into keeping fit, looking after yourself, not being
overweight etc., which usually means that you would be fairly good
looking (good thing my girlfriend doesn't read this list).  Beyond
that, I have no idea how tall you are, how much you weigh, what colour
your hair is, how long your hair is, what colour your eyes are, etc.
Given the above, I don't have any problem believing "petite, very
physically fit, and always dressed to kill".

} PS.  Oh a way off topic we will go!  A way off topic we will go!

 Yeah, but this one sure beats the flame wars.

}-- End of excerpt from "Leigh Anne Chisholm"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29764&t=29524
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Proper dress for CCIE lab? [7:29524]

2001-12-20 Thread [EMAIL PROTECTED] (John Nemeth)

On May 12,  3:21am, "[EMAIL PROTECTED] (John Nemeth)" wrote:
} On May 10,  7:53pm, "Leigh Anne Chisholm" wrote:
} } 
} } (Note to all the guys on this list:  The ladies here are all petite, very
} } physically fit, and are always dressed to kill!)
} } 
} } (Note to all the ladies on this list:  We know the above isn't true, but
} } since
} } most on the list don't know what we look like, why not give their
} } imaginations
} } something to work with.  Hmm... I wonder what the "virtual" me looks like
} to
} } most of them.).
} 
}  There is a picture of Priscilla sitting in front of an iBook (aka
} "toilet seat" -- I *just* had to throw that in there, the devil made me
} do it :->), so it is easy to get a general idea of what she looks like.

 Oops, bad editing...  it should say "on her website, "

}-- End of excerpt from "[EMAIL PROTECTED] (John Nemeth)"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29766&t=29524
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNA tutorial in beta for Cisco 2900 configuration [7:30907]

2002-01-04 Thread [EMAIL PROTECTED] (John Nemeth)

On May 23,  6:49am, "Mike Sweeney" wrote:
}
} I just posted the first version at a new tutorial I'm working for
} configuring the Cisco 2900 ethernet switch. Drop by and take a look. This
is
} 
} Anything else?
} 
} http://www.packetattack.com/tutorials.html

 Just a comment on the web page.  Some of the dark green print is
hard to read since it doesn't contrast enough with the black
background.  I have this to be a mistake made by many beginning webpage
designers that don't have formal design training and haven't been
taught colour theory.  Just remember "contrast, contrast, contrast".
In other words don't put dark print on a dark background or light print
on a light background.  You also have to remember that colours won't
appear the same on systems, so you have to have quite a bit of
contrast.

}-- End of excerpt from "Mike Sweeney"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30907&t=30907
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT - Firewall performance Comparisons - is it quitting time [7:30908]

2002-01-04 Thread [EMAIL PROTECTED] (John Nemeth)

On May 23, 11:25am, "Chuck Larrieu" wrote:
}
} Interesting to see in the results was that the Cisco 1601 with IP firewall
} feature set outperformed the Cisco 2610 by a decent ( but not overwhelming
)
} margin. The PIX 515 looks to be about 50% faster than the 1601 and twice as
} fast as the 2610.

 Did any of these boxes have a hardware crypto accelerator installed?
That could skew the results.

}-- End of excerpt from "Chuck Larrieu"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30908&t=30908
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT - Firewall performance Comparisons - is it quitting time [7:30911]

2002-01-04 Thread [EMAIL PROTECTED] (John Nemeth)

On May 23, 12:25pm, "Eric" wrote:
}
} The Checkpoint/Nokia 330 runs IPSO as the OS on hardened freeBSD. These
will
} actually run routing protocols too, i.e.., RIP, OSPF, IGRP, etc Nice
GUI

 Who, in their right mind, would run a routing protocol on a
firewall?

 I've often seen this comment about the Checkpoint GUI.  But, I
think it is irrelevant.  Firewalls are highly specialised devices that
should only be handled by experts.  An expert should be comfortable
with the command line.  Even with the latest versions of Windows, to
truely be an expert, you need to be comfortable with the command line.
Just because reviewers like to rave about particular features doesn't
mean that they are needed or wanted by expert users.  Besides, I've
seen Checkpoint show up on Bugtraq before because of its GUI hiding
things.  GUIs aren't always a blessing.

}-- End of excerpt from "Eric"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30911&t=30911
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: wireless max distance question [7:30822]

2002-01-09 Thread [EMAIL PROTECTED] (John Nemeth)

On May 30,  7:10am, "Hire, Ejay" wrote:
}
} Back to the off topic subject of Liquid cooled CPU's, most desings I've
seen
} use mineral oil.  A fault with this design is that "bubbles" of moisture
can
} settle out and sink onto the Board/cpu.

 The other thing I was wondering is wouldn't the mineral cause the
insulation on the various cables (power, disk, keyboard, etc.) to break
down?

}-- End of excerpt from "Hire, Ejay"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31493&t=30822
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VTP Trunking dangerous [7:33097]

2002-01-25 Thread [EMAIL PROTECTED] (John Nemeth)

On Jun 16,  9:41pm, "Mike Sweeney" wrote:
}
} LOL-  you have those nice people too?  We threatened one guy with a very
} public stoning after he did something like that.

 Just tell him that he won "The Lottery"; see

http://www.mostweb.cc/Classics/Jackson/TheLottery/

}-- End of excerpt from "Mike Sweeney"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33274&t=33097
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Is CCIEprep on crack or what ? [7:32787]

2002-01-26 Thread [EMAIL PROTECTED] (John Nemeth)

On Jun 14,  2:36pm, "Tom Lisa" wrote:
}
} I've had that problem with my CCNA students.  With a little effort it is
} quite easy to
} put a DB60 on upside down (even though I labled them "this side up").  The

 When it is upside down they can't see the "this side up" label, so
you need to put a "this side down" label on the bottom.

}-- End of excerpt from "Tom Lisa"




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33348&t=32787
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



  1   2   >