Re: CCNP test order

[Kevin Welch]

I had alot of support experience and hands on switching experience when I
started on the CCNP path.
I am taking the tests in the following order.

Support, Switching, Remote Access and Routing.

I am taking the BCRAN Friday Feb 16. Then studying alot of BGP before I
attempt routing.

-- Kevin


- Original Message -
From: "Brian Ledbetter" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, January 26, 2001 10:00 AM
Subject: CCNP test order


> Any recommendations as to the order of exams I should take toward my CCNP.
> I know that technically it doesn't matter, as long as I finish all 4 - but
I
> was just wondering if anyone might have some suggestions on test order
> preference... (Routing then Switching, Switching then Routing, RA, etc.).
>
> Thanks for the help -
>
> Brian
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: PIX in parallel with another appliance box

[Kevin Welch]

You could use a hub or a switch.  If you used a switch just put all of the
outside interfaces on the same vlan with the ISP's feed.

-- Kevin
- Original Message -
From: "pat" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, January 27, 2001 11:42 PM
Subject: PIX in parallel with another appliance box


> Hello,
>
>My PIX is sitting directly on the internet. The
> cat5 connection from ISP is connected to external
> (ethernet) inerface of PIX. The inside(ethernet)
> interface is conneted to switch. From this switch
> internal network is connected. I have another Firewall
> appliance with 2 ethernet inerface which needs to be
> connected in parallel to PIX. Can anybody give some
> hints as how these connections are to made? I am
> thinking just to connect ISP connection to an ordinary
> hub & from there take two connections to outside
> interface for both firewall. Connect inside interface
> of both firewall to same switch. Is this right way of
> doing it? My only concern is can both outside
> interface of firewall be connected on on same hub? In
> fact External IPs for both & default gateway fall in
> same subnet. OR is there a requirement of any kind of
> a router or switch?
>
> Both firewalls need to be in parallel. One can't sit
> behind other OR can't be in DMZ of other.
>
> Thanks a lot for any advices...
>
> __
> Do You Yahoo!?
> Yahoo! Auctions - Buy the things you want at great prices.
> http://auctions.yahoo.com/
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Pls help: ATM study materials

[Kevin Welch]

Try the following:
   http://www.cisco.com/cgi-bin/Support/PSP/index.pl?i=Technologies

And this book:
  http://www.bookpool.com/.x/ieoydmhlf4/sm/1578702135

-- Kevin

- Original Message -
From: "Li Li Zhao" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, January 28, 2001 2:59 PM
Subject: Pls help: ATM study materials


> Dear all,
>
> My current project is all about ATM. But I never
> really touch ATM before.
>
> Anyone has idea on where I can find good ATM study
> materials?
>
> Thanks so much!!
>
> Best regards,
> lilly
>
> __
> Do You Yahoo!?
> Yahoo! Auctions - Buy the things you want at great prices.
> http://auctions.yahoo.com/
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: SH RUN reveals encrypted password

[Kevin Welch]

The problem is that if you do not have access to show the running config, it
is ommited completely from the show tech-support.  At least when I tried it.

-- Kevin


"Avran" <[EMAIL PROTECTED]> wrote in message
9535uc$tst$[EMAIL PROTECTED]">news:9535uc$tst$[EMAIL PROTECTED]...
> I suggest that you setup password level between 2 and 14 and define them.
> For example just let the user use only "show tech-support " which will
hide
> all config that is deemed secure.  Just try the command and see.
>
> In fact CISCO engineers suggest that you use 8 or more characters and
> include underscore in your secret.  This cannot be cracked easily with
> software such as Loft etc.
>
> Hope this helps.
>
> Avran
> ===
> "Hans Stout" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hello colleagues,
> >
> > do you know if there is a way to make the line 'enable secret 5
> > $1$vwIl$YEZxTVGPapUUVCD.c54Ya' invisible when doing a 'sh run' in user
> mode
> > ? The problem is that I want to allow RO access and also allow to
execute
> > the 'sh run' command, but that with a password decryptor, one could
eaily
> > decrypt the enable password.
> > Thanks for your help in advance.
> >
> > Regards,
> >
> > Hans
> >
_
> > Get Your Private, Free E-mail from MSN Hotmail at
http://www.hotmail.com.
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Tacacs+/Radius

[Kevin Welch]

Cisco does sell a TACACS+ server for solaris.   I agree with your anti-NT
type... if its NT and its in production someone is going to get called
afterhours.

-- Kevin
- Original Message -
From: "Kevin Wigle" <[EMAIL PROTECTED]>
To: "cisco" <[EMAIL PROTECTED]>
Sent: Monday, January 29, 2001 7:48 AM
Subject: Tacacs+/Radius


> and further on things tacacs..
>
> Our lab tech is really an anti-NT type of guy.  He doesn't want any
> production servers using NT.
>
> And he also would prefer Radius over Tacacs+.  Does anyone have a source
of
> freeware Radius for unix?  His preferred platform is Solaris.
>
> again, tia
>
> Kevin Wigle
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: How do I disable ping on outside interface of PIX

[Kevin Welch]

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v42/pix42cfg/p
ix42cmd.htm#26486

Check out the above link.  This should help you.  Basiclly you want to
permit echo's going out, and allow echo replys coming in.  The rest is in
the doc.

-- Kevin

- Original Message -
From: "Hinds, Christopher" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 30, 2001 8:23 AM
Subject: How do I disable ping on outside interface of PIX


> Hi,
>
> I'm trying to disable ping (ibound) on the outside (internet address) side
> of my PIX 520 version 4.4.7 . How can this be done whilst still retaining
> the outbound only icmp access I have for internal machines ?
> cheers
> Chris
>
>
>
>
> **
> This communication is confidential and is intended only for
> the person to whom it is addressed.  If you are not that
> person you are not permitted to make use of the information
> and you are requested to notify mailto:[EMAIL PROTECTED]
> immediately that you have received it and then destroy the
> copy in your possession.
> comdirect ltd is regulated by the SFA and is a member of the LSE.
> **
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Cisco Documentation CD

[Kevin Welch]

You can order them direct from Cisco... or you can find them on ebay pretty
cheap.

-- Kevin


- Original Message -
From: "Wonkyu Lee" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, January 30, 2001 3:41 PM
Subject: Cisco Documentation CD


>
> Hi All,
>
> I just wonder how I can order a Cisco documentation CD. Mine is November,
> 1999 version and does not work on win2k.
>
>
> TIA
>
> Wonkyu Lee
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

CCIE Prep lab at UCSC

[Kevin Welch]

I was wondering if anyone has any expereince using the CCIE Prep Lab =
facility at UCSC.  Thoughts, comments, usefulness of this facility =
appreciated.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Simulation

[Kevin Welch]

Telnet.

Just open a telnet session to the destination on a specific port and type
away.

-- Kevin
- Original Message -
From: "Pierre-Alex" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, February 05, 2001 4:43 PM
Subject: Simulation


> Hi All,
>
> I would like to test my access-lists.
>
> Is there a tool that allows you to send traffic to specific ports of a
> server?
>
>
> Pierre-Alex
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Port Scanners (Was Re: Simulation: ---Unix!)

[Kevin Welch]

NMAP is a pretty powerful tool.  For windows port scans I actually prefer a
program called superscan.  If your interested in giving it a shot, try the
link below:
   http://www.foundstone.com/rdlabs/proddesc/superscan.html

It is not as good as nmap, but if your stuck on a windows box its a pretty
good choice.

-- Kevin

- Original Message -
From: "Pierre-Alex" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: "Kevin Welch" <[EMAIL PROTECTED]>; "Tony van Ree"
<[EMAIL PROTECTED]>; "ElephantChild" <[EMAIL PROTECTED]>
Sent: Monday, February 05, 2001 7:09 PM
Subject: Simulation: ---Unix!


> Hi All,
>
> I found the answer to my question by doing a search on "port scanner"
>
> Looks like the software is running on Unix, which means I am going to have
> to learn another operating system. :)
>
> Which version of Unix would you recommand? Seems to be hundreds of vendors
> out there!!!
>
> Pierre-Alex
>
> --
--
> --
> NMap Port scanner
>
>
>  Details
> A new version of NMap has been released. Nmap is used for security
auditing,
> and the new version improves performance, stability and adds more
features.
> Some of the new features are:
>
> 1) Fast parallel pinging of all the hosts on a network to determine which
> ones are up. You can use the traditional ICMP echo request (ping), TCP ACK
> packet, or TCP SYN packet to probe for responses. By default it uses both
> ACKs & ICMP pings to maximize the chance of sneaking through packet
filters.
> There is also a connect() version for under-privileged users. The syntax
for
> specifying what hosts should be scanned is quite flexible.
>
> 2) Improved port scans can be used to determine what services are running.
> Techniques you can use include the SYN (half-open) scan, FIN, Xmas, or
Null
> stealth scans, connect scan (does not require root), FTP bounce attack,
and
> UDP scan. Options exist for common filter-bypassing techniques such as
> packet fragmentation and the ability to set the source port number (to 20
or
> 53, for example). It can also query a remote identd for the usernames the
> server is running under. You can select any (or all) port number(s) to
scan,
> since you may want to just sweep the networks you run for 1 or 2 services
> recently found to be vulnerable.
>
> 3) Remote OS detection via TCP/IP fingerprinting allows you to determine
> what operating system release each host is running. This functionality is
> similar to the awesome queso program, although nmap implements many new
> techniques. In many cases, nmap can narrow down the OS to the kernel
number
> or release version. A database of ~100 fingerprints for common operating
> system versions is included, thanks to a couple dozen beta testers who
> worked on the last 19 private beta releases.
>
> 4) TCP ISN sequence predictability lets you know what sequence prediction
> class (64K, time dependent, "true random", constant, etc.) the host falls
> into. A difficulty index is provided to tell you roughly how vulnerable
the
> machine is to sequence prediction.
>
> 5) Decoy scans can be used. The idea is that for every packet sent by nmap
> from your address, a similar packet is sent from each of the decoy hosts
you
> specify. This is useful due to the rising popularity of stealth port
> scanning detection software. If such software is used, it will generally
> report a dozen (or however many you choose) port scans from different
> addresses at the same time. It is very difficult to determine which
address
> is doing the scanning, and which are simply innocent decoys.
>
>
>  Links
> You can download NMap 2.12 at:
> http://www.insecure.org/nmap/dist/nmap-2.12.tgz NMap's home page is at:
> http://www.insecure.org/nmap/.
>
>
>
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Cisco Documentation CD

[Kevin Welch]

This has been discussed on the list before...  Any CD after August of 2000
is supposed to work fine with Win2k.  I have a December 2000 cd and it works
fine under win2k.

-- Kevin

-Original Message-
From: Bolton, Travis [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 08, 2001 2:39 PM
To: 'Kevin Welch'; Wonkyu Lee; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: RE: Cisco Documentation CD


 Does the newer version of the CD work with win2k?  I didn't think it did
but maybe that's changed recently.

-Original Message-----
From: Kevin Welch [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 30, 2001 8:52 PM
To: Wonkyu Lee; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: Cisco Documentation CD


You can order them direct from Cisco... or you can find them on ebay pretty
cheap.

-- Kevin


- Original Message -
From: "Wonkyu Lee" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, January 30, 2001 3:41 PM
Subject: Cisco Documentation CD


>
> Hi All,
>
> I just wonder how I can order a Cisco documentation CD. Mine is November,
> 1999 version and does not work on win2k.
>
>
> TIA
>
> Wonkyu Lee
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Opinions of Cisco Networkers Conference

[Kevin Welch]

I am thinking of going to the Cisco Networkers Conference in Chicago.  I =
am interested in hearing the opinions from anyone who attended these =
events in the past.  Is it worth the $$$, was it fun, etc You know =
the drill.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE LAB CERTIFIED

[Kevin Welch]

I am going to be nice with this reply, some of the fellow list members will
probably not be so forgiving.  This is not a list for spamming job posting
or recruiting, a seperate mailing list is maintainted for unhappy engineers
who are looking for other opportunities.  Please remember that your actions
reflect poorly on you and your company.  You may also find that complete
sentences are more effective at convincing prospective candidates that you
have the mental capacity to properly market their talent.  I will consider
this an innocent mistake and will not forward a harsh reply to the director
names I found on your web site:  [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED];

Thanks for understanding.

-- Kevin

- Original Message -
From: "Angel Castillo" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 27, 2001 10:18 AM
Subject: CCIE LAB CERTIFIED


>
> FAT SALARY'S. BIG COMPANIES.
> Denver, NY, Chicago
> Lab certified CCIE's, please e-mail me for information on these
> opportunities.: [EMAIL PROTECTED]
> Phone interviews starting March 5, 2001
>
> Angel M. Castillo
> Technical Recruiter
> Networking People USA
> 1901 Avenue of the Stars #1244
> Los Angeles, CA 90067
> tel: 310 277 3344
> fax: 310 277 3348
> e: [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: juniper and cisco

[Kevin Welch]

I have heard of similar issues with foundry routers, but it was second hand.

-- Kevin

- Original Message -
From: "W. Alan Robertson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 27, 2001 11:25 AM
Subject: Re: juniper and cisco


> I have resisted the temptation to get involved in this, but since it's
already
> being discussed some, I've got a question:
>
> "Net Bum" <[EMAIL PROTECTED]> wrote:
>
> > I had a Cisco 2600 series on my side and I asked him what he had on
> > his side.  He said (as if I wouldn't know :-), "A big router, it's a
Cisco
> > 12000 series."  Then I asked him, "Do you use any Juniper stuff?"  He
said,
> > "Yes, we use them in our core.  They are behind the 12000's."
>
> This is not the first time I've heard this; major ISPs utilizing Juniper
in
> parts of their core, but always using Cisco at the edge.
>
> About 6 months ago, I was down at one of Cisco's offices in Florida (Ft.
> Lauderdale), for a 2 day BGP seminar.  I caught the guy who was giving the
> seminar out in the hall afterward, and we were talking about a multitude
of
> topics, and Juniper came up.  He had mostly good things to say about them,
> particularly about their speed (He was a relatively new employee at
Cisco...  He
> might not have drank the Kool-Aid yet).
>
> One of the things he did criticize, however, was some kind of problem
Juniper
> had with their BGP4 implementation, and he specifically mentioned that
Juniper
> was making a dent at the core (understatement perhaps), but that they were
> having a difficult time at the edge as a result of this BGP problem.
>
> I regret, now, not pressing him for more detail, and as I haven't been
doing
> anything BGP related, I haven't really taken the time to research this.
>
> Is anyone on the list familiar with a problem with Juniper's BGP
implementation
> when peering with other vendors?
>
> Alan
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: what is the average age of people in this stuff?

[Kevin Welch]

I vote we change the Youths from YPK to PFY.  In case you dont follow the
Bastard Operator From Hell series (BOFH) this stands for Pimply Faced Youth.

:-)

Experience and open mindedness are more important than age.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Cert Difficulty Comparison.

[Kevin Welch]

Depends on experience.  If I worked in marketing I would probably think that
the Cisco tests are difficult. If I have 5 years of related industry
experience, a good understanding of troubleshooting methodology, and know
how to properly take tests... yeah they are a walk in the park.  Its all
relative.

Another note, you mention that you are a MCSE.  Alot of the concepts on the
CCNA test relate very closely to the MCSE TCP/IP Fundimentals course (or Net
Essentials or whatever they are calling it these days).  Not everyone goes
into the CCNA having a firm understanding of the OSI model and how to relate
network protocols to it.  I am curious to know if you have any real world
experience in the areas of Switching, Routing, Remote Access, and
Troubleshooting?  Difficulty is a relative term... if the test was easy then
you did a good job studying.

I like to force my opinion on the importance of design to everyone I can,
having a good understanding of design and design concepts helps in many
ways.

My 2 cents.

-- Kevin

- Original Message -
From: "Craig Lindstrom" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 27, 2001 2:28 PM
Subject: Cert Difficulty Comparison.


> Hi,
> I'm just starting my Cisco Cert and I was wondering if anyone else is
> surprised how easy the Cisco tests are.  I always hesitated doing the
Cisco
> certs because I heard they were "hard".  Not that I mind a challenge, its
> just I'm a little busy right now.  Anyway,  I just started a week and a
bit
> ago.  I took the CCNA the Monday before last, and switching last Monday.
I
> felt the exams were quite easy.  I passed both with scores well into the
> 900s and didn't spend that much time studying.  I work full time and teach
> during the evenings, so all I studied was a little on Sat and Sun.  I'm
not
> the sharpest knife in the drawer, did I just luck out on questions, or
take
> the easy test first, or are all the test about the same difficulty?
>
> I seem to see folks pooh-pooh the MCSE but I feel like the MS tests are
much
> harder than the Cisco ones.  MS tests cover a large range of topics where
> the Cisco test are a really small subset of topics.  Does anyone else feel
> that way or am I just way up in the night?  I've decided to do a test a
week
> until I finish the CCNP, does this sound nuts?  Anyway I am just trying to
> see what other folks think.
>
> A little mystified,
> Craig Lindstrom
> MCT MCSE+I CCNA(as of last week!) SOB:)
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Passed BCRAN today

[Kevin Welch]

Thought I would drop a line letting you know that I passed my BCRAN exam
today, my final score was 849/1000.  I was suprised by the amount of design
oriented questions and there was a very large focus on isdn technology.  I
plan on completing the BSCN and CID exams over the enxt few months, maybe
then I can justify raising my rates as a consultant :-)

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

SNMP OID's -- Sifting through too much infomration

[Kevin Welch]

I am trying to figure out which OID's I need to mointor in order to =
gather the following information from Routers and Switches (CatOS and =
IOS based)

Interface Name
Interface 5 Min Avg
Error Rates
Cpu Load
Voltage
Memory Utilization
Uptime
Buffer utilization

And anything else that would you would consider important to monitor =
(most of these I am planning to graph with a RRDtool or MRTG.  I am =
trying to get this information from Cisco's web site but i am finding =
that there are alot of OID's to sift through and I am unsure of the =
excact names of what I am looking for.

Thanks in Advance

-- Kevin


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Security flaw in Cisco IOS systems- Most versions affected

[Kevin Welch]

Yeah... This has been discussed on NANOG the better part of this week.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: About MPLS

[Kevin Welch]

Cisco press also has a book out about MPLS VPNs Titled:
   MPLS and VPN Architectures
  ISBN 1-58705-002-1

Hope that helps

-- Kevin

- Original Message -
From: "Talib" <[EMAIL PROTECTED]>
Newsgroups: groupstudy.cisco
To: <[EMAIL PROTECTED]>; "Tony" <[EMAIL PROTECTED]>
Sent: Tuesday, December 26, 2000 8:24 AM
Subject: Re: About MPLS


> Below are two cisco documents.
>
> http://www.cisco.com/warp/public/cc/so/neso/vvda/ipatm/index.shtml
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120
t/120t5/vpn.htm
>
> 
> Shabbir S. Talib
> MCSE, CNE, CCNA
>
> Tony wrote:
> >
> > Hi FOLKS,
> > I want use MPLS to make a VPN for my client,is there anyone can
> > recommand some material of MPLS to me?some samples is best.
> >  Thanks and Merry Christmas!
> >
> > --
> >  Yours sincerely
> > Tony
> >
> > _
> > FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

CDP

[Kevin Welch]

I haven't had much of a chance to look at 2k server, but in my CIPT =
class we were seeing the Win2k Server as a CDP Neighbor on our 6509   =
Can someone confirm that win2k sends CDP packets?

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CDP

[Kevin Welch]

Nevermind... I found it on cisco's web site.  Aparently Cisco created a =
CDP driver for Win2k and call managerI was really hoping that =
someone jumped on the CDP bandwagon...  I remember reading that cisco =
published a RFC or IETF draft on CDP trying make it an open standard, =
but I have not been able to locate such a document.

--- Kevin
  - Original Message -=20
  From: Kevin Welch=20
  To: [EMAIL PROTECTED]=20
  Sent: Tuesday, December 26, 2000 10:57 AM
  Subject: CDP


  I haven't had much of a chance to look at 2k server, but in my CIPT =
class we were seeing the Win2k Server as a CDP Neighbor on our 6509   =
Can someone confirm that win2k sends CDP packets?

  -- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

IP Multicasting TTL

[Kevin Welch]

I am boning up on IP multicasting and I have a question about TTL =
Thresholds.  When a multicast packet passes through an interface with a =
configured TTL threshold, is the TTL decremented my 1 or by the =
threshold value?

-- Kevin=20

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Passed Switching 2.0

[Kevin Welch]

I passed my switching 2.0 test yesterday, I was very pleased with the =
results.  I did poorly exactly where I expected to do poorly, ip =
multicasting.  My final score was 867/1000.  In studying for the BCMSN I =
was able to rely heavily on the cisco press book and some on the job =
training.  I also studied the sybex training guide because I dont like =
to rely on just one source of information.

Now I need to move on to the BCRAN or BSCN.  I may not post to this list =
too often, but I do read the posts and find the information very =
helpful.  Thanks goes out to everyone who helps answer questions on this =
list.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Troubleshooting 101

[Kevin Welch]

The only thing I would suggest, because it has happened to me before is
this:

Is your hostname too long.  Are you actually in the router subconfig menu
and just cant tell by the prompt?

-- Kevin
- Original Message -
From: "Chuck Larrieu" <[EMAIL PROTECTED]>
To: "Cisco Mail List" <[EMAIL PROTECTED]>
Sent: Friday, January 05, 2001 4:46 PM
Subject: Troubleshooting 101


> This has been an interesting afternoon. For my lunch hour I thought I
would
> review my miserable failure of an attempt to negotiate the Mentor Tech
Vlab
> 3040 ( IS-IS routing ) I kinda blew it last night. So I thought I would
try
> things on my own routers and see what happens
>
> So I open up my pod, and start configuring. Router 3 and router 2 get to
> talking integrated IS-IS ( IP over IS-IS )
>
> But router 1 does not want to cooperate. I enter the command router isis
> WORD The command is accepted. But I am not in a router subconfiguration
> mode. Swell. Try again. Command accepted. But no router subconfiguration
> mode.
>
> Being raised in a Microsoft environment, I reload the router and try
again.
> No dice. I erase the startup config, reload, and try again. No dice. Every
> time, the command is accepted but no router subconfiguration menu.
>
> At this point I believe I know:
>
> 1) it is not the configuration command entry.
> 2) it is not a minor corruption of the running IOS itself.
> 3) It should not be the IOS version, because I am running the same IOS
> version on each of my three routers.
>
> So next I start to get a bit desperate. I consider that maybe the flash
> image itself is corrupt. I try to re-image using router software loader,
and
> of course nothing but problems. After all the nice things I've said about
> RSL on this forum and others, it acts up. Yes I have a console cable
plugged
> into the right routers, and yes, I have an ethernet crossover cable
plugged
> between my PC and the router ethernet port. All right. Tweak and moan and
do
> TFTP rather than RSL. New image on router and no change. The command is
> accepted, but no router subconfiguration menu.
>
> All right. Maybe I'm nuts. On the other hand, when I upgraded the flash on
> these guys a few months ago this particular router was the only one where
I
> did not also upgrade the boot prom. Something come back to bite me?
>
> So I back down to another version of IOS, reload the router, and now
things
> seem to behave the way I would expect.
>
> In terms of troubleshooting methodology, anyone care to use this example
as
> a means of instruction? Any steps you think I overlooked?
>
> Chuck
> --
> I am Locutus, a CCIE Lab Proctor. Xx_Brain_dumps_xX are futile. Your life
as
> it has been is over ( if you hope to pass ) From this time forward, you
will
> study US!
> ( apologies to the folks at Star Trek TNG )
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Troubleshooting 101

[Kevin Welch]

I just tried it on my router after I fired off my quick e-mail... I would
say that falls into the wierd catagory.

-- Kevin
- Original Message -
From: "Chuck Larrieu" <[EMAIL PROTECTED]>
To: "Kevin Welch" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Friday, January 05, 2001 6:27 PM
Subject: RE: Troubleshooting 101


> Tokyo (config )#
>
>
> -Original Message-
> From: Kevin Welch [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 05, 2001 6:13 PM
> To: Chuck Larrieu; [EMAIL PROTECTED]
> Subject: Re: Troubleshooting 101
>
> The only thing I would suggest, because it has happened to me before is
> this:
>
> Is your hostname too long.  Are you actually in the router subconfig menu
> and just cant tell by the prompt?
>
> -- Kevin
> - Original Message -
> From: "Chuck Larrieu" <[EMAIL PROTECTED]>
> To: "Cisco Mail List" <[EMAIL PROTECTED]>
> Sent: Friday, January 05, 2001 4:46 PM
> Subject: Troubleshooting 101
>
>
> > This has been an interesting afternoon. For my lunch hour I thought I
> would
> > review my miserable failure of an attempt to negotiate the Mentor Tech
> Vlab
> > 3040 ( IS-IS routing ) I kinda blew it last night. So I thought I would
> try
> > things on my own routers and see what happens
> >
> > So I open up my pod, and start configuring. Router 3 and router 2 get to
> > talking integrated IS-IS ( IP over IS-IS )
> >
> > But router 1 does not want to cooperate. I enter the command router isis
> > WORD The command is accepted. But I am not in a router subconfiguration
> > mode. Swell. Try again. Command accepted. But no router subconfiguration
> > mode.
> >
> > Being raised in a Microsoft environment, I reload the router and try
> again.
> > No dice. I erase the startup config, reload, and try again. No dice.
Every
> > time, the command is accepted but no router subconfiguration menu.
> >
> > At this point I believe I know:
> >
> > 1) it is not the configuration command entry.
> > 2) it is not a minor corruption of the running IOS itself.
> > 3) It should not be the IOS version, because I am running the same IOS
> > version on each of my three routers.
> >
> > So next I start to get a bit desperate. I consider that maybe the flash
> > image itself is corrupt. I try to re-image using router software loader,
> and
> > of course nothing but problems. After all the nice things I've said
about
> > RSL on this forum and others, it acts up. Yes I have a console cable
> plugged
> > into the right routers, and yes, I have an ethernet crossover cable
> plugged
> > between my PC and the router ethernet port. All right. Tweak and moan
and
> do
> > TFTP rather than RSL. New image on router and no change. The command is
> > accepted, but no router subconfiguration menu.
> >
> > All right. Maybe I'm nuts. On the other hand, when I upgraded the flash
on
> > these guys a few months ago this particular router was the only one
where
> I
> > did not also upgrade the boot prom. Something come back to bite me?
> >
> > So I back down to another version of IOS, reload the router, and now
> things
> > seem to behave the way I would expect.
> >
> > In terms of troubleshooting methodology, anyone care to use this example
> as
> > a means of instruction? Any steps you think I overlooked?
> >
> > Chuck
> > --
> > I am Locutus, a CCIE Lab Proctor. Xx_Brain_dumps_xX are futile. Your
life
> as
> > it has been is over ( if you hope to pass ) From this time forward, you
> will
> > study US!
> > ( apologies to the folks at Star Trek TNG )
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Troubleshooting 101

[Kevin Welch]

Can you enter any commands beginning with clns in global configuration mode?
I dont know really anything about isis, but it looks like there is a 'clns
routing' command that must be entered in global config mode... maybe is a
feature set issue.

-- Kevin

- Original Message -
From: "Chuck Larrieu" <[EMAIL PROTECTED]>
To: "Kevin Welch" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Friday, January 05, 2001 6:27 PM
Subject: RE: Troubleshooting 101


> Tokyo (config )#
>
>
> -Original Message-
> From: Kevin Welch [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 05, 2001 6:13 PM
> To: Chuck Larrieu; [EMAIL PROTECTED]
> Subject: Re: Troubleshooting 101
>
> The only thing I would suggest, because it has happened to me before is
> this:
>
> Is your hostname too long.  Are you actually in the router subconfig menu
> and just cant tell by the prompt?
>
> -- Kevin
> - Original Message -
> From: "Chuck Larrieu" <[EMAIL PROTECTED]>
> To: "Cisco Mail List" <[EMAIL PROTECTED]>
> Sent: Friday, January 05, 2001 4:46 PM
> Subject: Troubleshooting 101
>
>
> > This has been an interesting afternoon. For my lunch hour I thought I
> would
> > review my miserable failure of an attempt to negotiate the Mentor Tech
> Vlab
> > 3040 ( IS-IS routing ) I kinda blew it last night. So I thought I would
> try
> > things on my own routers and see what happens
> >
> > So I open up my pod, and start configuring. Router 3 and router 2 get to
> > talking integrated IS-IS ( IP over IS-IS )
> >
> > But router 1 does not want to cooperate. I enter the command router isis
> > WORD The command is accepted. But I am not in a router subconfiguration
> > mode. Swell. Try again. Command accepted. But no router subconfiguration
> > mode.
> >
> > Being raised in a Microsoft environment, I reload the router and try
> again.
> > No dice. I erase the startup config, reload, and try again. No dice.
Every
> > time, the command is accepted but no router subconfiguration menu.
> >
> > At this point I believe I know:
> >
> > 1) it is not the configuration command entry.
> > 2) it is not a minor corruption of the running IOS itself.
> > 3) It should not be the IOS version, because I am running the same IOS
> > version on each of my three routers.
> >
> > So next I start to get a bit desperate. I consider that maybe the flash
> > image itself is corrupt. I try to re-image using router software loader,
> and
> > of course nothing but problems. After all the nice things I've said
about
> > RSL on this forum and others, it acts up. Yes I have a console cable
> plugged
> > into the right routers, and yes, I have an ethernet crossover cable
> plugged
> > between my PC and the router ethernet port. All right. Tweak and moan
and
> do
> > TFTP rather than RSL. New image on router and no change. The command is
> > accepted, but no router subconfiguration menu.
> >
> > All right. Maybe I'm nuts. On the other hand, when I upgraded the flash
on
> > these guys a few months ago this particular router was the only one
where
> I
> > did not also upgrade the boot prom. Something come back to bite me?
> >
> > So I back down to another version of IOS, reload the router, and now
> things
> > seem to behave the way I would expect.
> >
> > In terms of troubleshooting methodology, anyone care to use this example
> as
> > a means of instruction? Any steps you think I overlooked?
> >
> > Chuck
> > --
> > I am Locutus, a CCIE Lab Proctor. Xx_Brain_dumps_xX are futile. Your
life
> as
> > it has been is over ( if you hope to pass ) From this time forward, you
> will
> > study US!
> > ( apologies to the folks at Star Trek TNG )
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Troubleshooting 101

[Kevin Welch]

Thanks for the information, I started reading the chapter on IS-IS in
routing TCP/IP Volume One to try to at least get a basic understanding of
the protocol.

-- Kevin

- Original Message -
From: "Chuck Larrieu" <[EMAIL PROTECTED]>
To: "Kevin Welch" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Friday, January 05, 2001 6:50 PM
Subject: RE: Troubleshooting 101


> For straight integrated isis ( ip only, no ISO crap ) things can be set up
> with just a couple of commands.
>
> For those who haven't done IS-IS, it's a little unusual for those coming
> from RIP or EIGRP or any of the IP routing protocols. But in general, one
> can quickly get something up and going by doing the following steps
>
> Router isis [ area tag, which appears to be optional ]
> Net something  and here is the weird stuff. The format is highly unusual
for
> us Cisco jocks.
>So in my case, 49.0001.router i.d. in the format of ..
> .00
>This RID ( if you will ) must be unique to each router.
>The first part - the 49.0001 is the isis area id. I believe that
> actually the first two numbers indicate something other than area. Still
> have some reading to do.
> Is-type level-1|level-2|level-1-2
>
> Then on each interface one must enter the ip router isis [area tag, if one
> used it in the router process setup ]
>
> There are a wealth of commands within isis, but most appear to be relevant
> only to CLNS / ISO rather than native IP
>
> I can see where Cisco would throw something like this on the CCIE Lab just
> to mess with your mind At first glance it would appear that IS-IS is
> completely alien to the ip protocols, as implemented in the Cisco world.
>
> Chuck
>
> -Original Message-
> From: Kevin Welch [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 05, 2001 6:41 PM
> To: Chuck Larrieu; [EMAIL PROTECTED]
> Subject: Re: Troubleshooting 101
>
> Can you enter any commands beginning with clns in global configuration
mode?
> I dont know really anything about isis, but it looks like there is a 'clns
> routing' command that must be entered in global config mode... maybe is a
> feature set issue.
>
> -- Kevin
>
> - Original Message -
> From: "Chuck Larrieu" <[EMAIL PROTECTED]>
> To: "Kevin Welch" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Friday, January 05, 2001 6:27 PM
> Subject: RE: Troubleshooting 101
>
>
> > Tokyo (config )#
> >
> >
> > -Original Message-
> > From: Kevin Welch [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, January 05, 2001 6:13 PM
> > To: Chuck Larrieu; [EMAIL PROTECTED]
> > Subject: Re: Troubleshooting 101
> >
> > The only thing I would suggest, because it has happened to me before is
> > this:
> >
> > Is your hostname too long.  Are you actually in the router subconfig
menu
> > and just cant tell by the prompt?
> >
> > -- Kevin
> > - Original Message -
> > From: "Chuck Larrieu" <[EMAIL PROTECTED]>
> > To: "Cisco Mail List" <[EMAIL PROTECTED]>
> > Sent: Friday, January 05, 2001 4:46 PM
> > Subject: Troubleshooting 101
> >
> >
> > > This has been an interesting afternoon. For my lunch hour I thought I
> > would
> > > review my miserable failure of an attempt to negotiate the Mentor Tech
> > Vlab
> > > 3040 ( IS-IS routing ) I kinda blew it last night. So I thought I
would
> > try
> > > things on my own routers and see what happens
> > >
> > > So I open up my pod, and start configuring. Router 3 and router 2 get
to
> > > talking integrated IS-IS ( IP over IS-IS )
> > >
> > > But router 1 does not want to cooperate. I enter the command router
isis
> > > WORD The command is accepted. But I am not in a router
subconfiguration
> > > mode. Swell. Try again. Command accepted. But no router
subconfiguration
> > > mode.
> > >
> > > Being raised in a Microsoft environment, I reload the router and try
> > again.
> > > No dice. I erase the startup config, reload, and try again. No dice.
> Every
> > > time, the command is accepted but no router subconfiguration menu.
> > >
> > > At this point I believe I know:
> > >
> > > 1) it is not the configuration command entry.
> > > 2) it is not a minor corruption of the running IOS itself.
> > > 3) It should not be the IOS version, because I am running the same IOS
> > > version on each of my three routers.
> > >
> > > So next I start to get a bit desperate.

Re: IS-IS routing domain to look at

[Kevin Welch]

So Chuck, What turned out to be the problem with enabling IS-IS earlier?

-- Kevin

- Original Message -
From: "Chuck Larrieu" <[EMAIL PROTECTED]>
To: "Cisco Mail List" <[EMAIL PROTECTED]>
Sent: Saturday, January 06, 2001 7:38 PM
Subject: IS-IS routing domain to look at


> For those who haven't seen one before, I set up a quick and dirty IS-IS
> domain in my home lab. As I will be busy studying some other things the
rest
> of the weekend, folks on the list here are cordially invited to take a
peek.
>
> Telnet to 64.220.150.11  all passwords are cisco
>
> Feel free to poke around
>
> Please play nicely.
>
>
> Chuck
> --
> I am Locutus, a CCIE Lab Proctor. Xx_Brain_dumps_xX are futile. Your life
as
> it has been is over ( if you hope to pass ) From this time forward, you
will
> study US!
> ( apologies to the folks at Star Trek TNG )
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Why dont I see SNMP discussion on this board ??

[Kevin Welch]

Maybe its because no one has started a thread about SNMP

-- Kevin
- Original Message -
From: "Pradeep Kumar" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Saturday, January 06, 2001 11:30 PM
Subject: Why dont I see SNMP discussion on this board ??


> Folks,
>
> Did you notice - in our forum which claims to be addressing 10,000 Network
proffessionals , SNMP related discussion does not seem to be too attractive
! not on the forum at least.
>
> Why dont I see discussion on Cisco MIB's, SNMP, RMON ?
>
> Is this not a trouble area ? Or is it becoz , there is not much of SNMP
topics on any of the CCxx exams ?
>
> Is there any exams to prove the mettle of SNMP geeks ?
>
> -Guru
>
>
>
>
>
>
>
___
> Visit http://www.visto.com/info, your free web-based communications
center.
> Visto.com. Life on the Dot.
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Frame Relay Security

[Kevin Welch]

I understand most of the benefits of frame relay, but I am wondering if =
there are any security problems assoicated with this protocol?  Is it =
secure enough for unencrypted transfer of financial or sensitive =
information?  Any help understanding the security risks associated with =
frame relay appreciated.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Down side to frame relay?

[Kevin Welch]

Can someone please help me with any negative issues or downsides to =
frame relay? =20

I am trying to make a comparison between frame relay, dedicated leased =
lines like T1's, and VPN's using existing internet connectivity. =20
Complexity doesnt even really compare to most VPN solutions.  In all but =
the extreme cases frame relay is cheaper than a leased T1.  Frame relay =
is described as a more shared medium like cable or DSL than a leased =
line, but isnt the point of the CIR to make sure that you get what you =
are paying for?   Also the normal NBMA and split horizon problems with =
point-to-multipoint configurations.=20

Are there any other negative reasons not to choose frame relay in the =
WAN? =20

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Disappointed with ccnp!!

[Kevin Welch]

Well this is a hot thread so I thought I would put in my 2 cents.  First,
having a CCNP is a plus but is no replacement for actual experience.  The
interview process is about personal marketing, you need to sell the
interviewer on how having you on his team will benefit him and the company.
Don't be afraid to identify areas where you know you are weak.

-- Kevin
- Original Message -
From: "park jeongwoo" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 08, 2001 7:42 PM
Subject: Disappointed with ccnp!!


> Hi group members.
> I need your help.
> I am having a hard time on finding a job.
> I recently got ccnp certification and looking for the
> entry level of job for network engineer.
> I am living in San Francisco, and graduated from
> college less than a year ago.
> I have less than a year of network experience that I
> got from school computer lab.
> I had a harder time finding a job before I became
> ccnp. So I studied hard believing that  ccnp would get
> me somewhere at least as a entry level network
> engineer. Now I am kind of confused and disappointed
> with the fact that I am still having a hard time
> finding a job even with ccnp certification.
> I feel like I need more cisco certifications such as
> ccda, ccdp.
> Would these certification ever help me find job?
> It is really discouraging that cisco certification
> doesn't help me much find a job at this point, because
> I am also pursuing ccie too. I have to ask myself what
> is the point of getting cisco certification.
> Lots of CCNAs are having a job. Why not ccnp?
>
> Could somebody tell me why it goes like this, and what
> I should do?
> Am I looking for wrong job?
>
> I will appreiciate your input.
>
> jeongwoo
>
> __
> Do You Yahoo!?
> Yahoo! Photos - Share your holiday photos online!
> http://photos.yahoo.com/
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Disappointed with CCNP --Original poster

[Kevin Welch]

I would say that is a broad generalization and partially depends on if you
studued or crammed.  Normally a person must repeat something at least 3
times to commit it to long term memory, exam cramming plays off of the fact
that you will remember most of what you learn in your short term memory...
This is how most boot camps work and why they are successful.  If you spend
a good 30+ days studying the same subject matter and do it in a fashion that
combimes common learning methods, your long term retention of the subject
matter will be much better.  For the most part this is retention of facts
and concepts, this provides a solid foundation and understanding but is not
the same as real world experience.  I am a firm believer that some things
cannot be taught in books, and those are the qualities to look for in a
perspective employee.

I will be the first to admit that I do not know everything.   Saying that
puts me a better position than those who think they do know it all...  at
least I can swallow my pride and look something up or ask for assitance.

Now its my turn to make a sweeping generalization:  There are two types of
people who persue certification.  Those who persue it to better themselves
and those who persue it better their career.  To me the knowledge I obtain
in the path to my certification is more important than the cert itself.

-- Kevin
"Everything works in theory.  Someday I hope to move there."

- Original Message -
From: "Groupstudy" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, January 10, 2001 11:51 PM
Subject: Re: Disappointed with CCNP --Original poster


> Unfortunately, anyone that is not getting hands on experience will quickly
> forget pretty much everything they learned during their studies -in a
matter
> of weeks.  This fact quickly turns CCNP's back into CCNA's!
>
> Best of luck to you.
>
> - Original Message -
> From: jeongwoo park <[EMAIL PROTECTED]>
> To: Groupstudy <[EMAIL PROTECTED]>
> Sent: Wednesday, January 10, 2001 7:55 PM
> Subject: Disappointed with CCNP --Original poster
>
>
> > Hi group members!!
> > I am the original poster of this thread.
> > First of all, I appreciate your encouragements,
> > concerns and even criticizing point. I received more
> > replies than I expected.
> >
> > There were some people who made a point on removing my
> > ccnp cert from my resume.
> > It was not only thoughtful suggestion, but also scary
> > suggestion, because I felt that removing it from my
> > resume was like 7 months of ccnp prep going down the
> > drain all of a sudden.
> > However, I made up my mind not remove it.
> > My intension of listing ccnp on my resume was to show
> > how much interest I have on networking. I believe that
> > there is clear difference between ccna without
> > experience and ccnp without experience. If I were
> > employer, I would hire ccnp without experience because
> > there is obviously difference between these two guys
> > in terms of the amount of technical knowledge and
> > potential performance that he or she might make.
> > As some members mentioned, lots of people consider
> > their careers from IT industry because of money. I
> > agree with them not only I am partly one of them, but
> > also money can be one of strong motivation in
> > advancing their living condition. But money doesn't
> > give me enough motivation as my interest in networking
> > does. I didn't even consider CCNP. I was going to
> > start to look for a job after I got MCSE and CCNA
> > certifications.
> > But I couldn't stop my interest in knowing more on
> > network knowledge.
> >
> > There might be some people who would say, " none of
> > these guys would be hired."
> > Well, the biggest irony that I have is that who is
> > going to start his or her career in IT industry if
> > everyone is looking for only experienced engineer.
> > That is why I am looking for entry level of job. I
> > wouldn't be able to perform in the beginning as much
> > as years of experienced CCNP would do. But I am sure
> > that I could learn things faster than most of
> > entry-level job applicants.
> > If nobody offers me a job, I would go for CCIE without
> > any corporation experience. I would buy network
> > devices, and take ccie lab classes. I wonder if there
> > is anyone who made ccie without any corporation
> > experience. I wish there were. If not, I will be the
> > first one who becomes ccie without experience. I am
> > not talking about home-network or training school
> > network experience. I am talking about the experience
> > that can be obtained as a network engineer.
> > I know it would be harder to become ccie without real
> > world experience, but I believe that lots of members
> > who showed their concern would be with me.
> > When I become CCIE, I will put nothing but CCIE, and
> > see if anyone gives me job offer.
> > I wonder if people who emphasizes on only experience
> > still wouldn't hire me.
> >
> > For the people who are already out the

IPSEC VPN question

[Kevin Welch]

What measures does ipsec use to deal with man in the middle attacks?

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: IPSEC VPN question

[Kevin Welch]

Guess I should have looked first... sorry guys I found out what I need I =
think.

-- Kevin
  - Original Message -=20
  From: Kevin Welch=20
  To: [EMAIL PROTECTED]=20
  Sent: Thursday, January 11, 2001 11:53 PM
  Subject: IPSEC VPN question


  What measures does ipsec use to deal with man in the middle attacks?

  -- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Little ID card

[Kevin Welch]

It should be noted that according to Cisco (if I remember, its too late to
look up the link), but you are only supposed to list your highest
certification on your business cards and such.  But I will admit the MCSE
cards look more professional.

-- Kevin
- Original Message -
From: "Timothy Metz" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, January 13, 2001 12:35 AM
Subject: RE: Little ID card


> Ya, that little ID card is crap, Cisco should be ashamed to be s
outdone
> by Microsoft on this point
>
> Tim
>
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Jason Roysdon
> > Sent: Saturday, January 13, 2001 9:03 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: Little ID card
> >
> >
> > Be careful when you get mailed your certification letter.  When I
> > passed my
> > CCDA, I took the letter out, skimmed and promptly tossed it, took out
the
> > cert, and tossed the envelope.  While hanging the cert, I recalled that
I
> > had gotten a CCNA card and wondered why I didn't get one for my CCDA.  I
> > went and checked the envelope, and sure enough stuck in the bottom was
the
> > card.
> >
> > I wish Cisco would make them look a bit more professional, instead of a
> > piece of laminated paper.  Furthermore, it'd be nice if they listed all
> > current certs on the same card as Microsoft does (MCP, MCSE, MCT,
MCSE+I,
> > etc.).  A card listing CCNA, CCDA, CCNP, CCDP, CCNP: Security
> > would make me
> > happy.  And no, I didn't get a card for my CCNP: Security
Specialization,
> > but I did get a Certification paper.
> >
> > Maybe I should just make my own Cisco card with all the nifty letters
and
> > logos that I have?  Probably not ok with Cisco, plus a bit too much
work,
> > hehee.
> >
> > --
> > Jason Roysdon, CCNP/CCDP, MCSE, CNA, Network+, A+
> > List email: [EMAIL PROTECTED]
> > Homepage: http://jason.artoo.net/
> > Cisco resources: http://r2cisco.artoo.net/
> >
> >
> > ""Taylor, Don"" <[EMAIL PROTECTED]> wrote in message
> > news:[EMAIL PROTECTED]
> > effectcorp
> > .com...
> > > Yep, ya sure do. I've got two new ones since getting my NP/DP certs.
> > >
> > > -Original Message-
> > > From: Steven Dangerfield [mailto:[EMAIL PROTECTED]]
> > > Sent: Friday, January 12, 2001 8:32 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: OT: Little ID card
> > >
> > >
> > > Don't want to sound too fussy, but,
> > >
> > > Now a days when you get your cisco cert do you still get the credit
card
> > > sized
> > > id card that says your name, cisco id, and the qualification you've
got.
> > > These
> > > sort of things are handy at interview time ! anyone passed CCNP and
got
> > one
> > > of
> > > these let me know !
> > >
> > > Steve
> > >
> > > Steven Dangerfield, Network Engineer/Analyst
> > > B.Eng, CCNA, CCSA
> > >
> > > Email : [EMAIL PROTECTED]
> > >
> > >
> > > Totalise - the Users ISP
> > > -
> > > To become a member and a shareholder
> > > visit http://www.totalise.net
> > >
> > > ---
> > > "From Golfing Breaks to Carribean Cruises, Totalise shop has the
holiday
> > for
> > > you"
> > > http://www.totaliseshop.co.uk
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Useful things to do with trolls

[Kevin Welch]

A couple RFC's on this subject  :)

RFC 1149:   A Standard for the Transmission of IP Datagrams on Avian
Carriers
http://sunsite.dk/RFC/rfc/rfc1149.html

 and

RFC 2549: IP over Avian Carriers with Quality of Service
http://sunsite.dk/RFC/rfc/rfc2549.html


-- Kevin

- Original Message -
From: "Chuck Larrieu" <[EMAIL PROTECTED]>
To: "Natasha" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Saturday, January 13, 2001 2:14 PM
Subject: RE: Useful things to do with trolls


> Ip route swallow nicht 0  ???
>
> The ladened versus unladened must have something to do with traffic
> shaping.
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> Natasha
> Sent: Saturday, January 13, 2001 6:46 AM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: Re: Useful things to do with trolls
>
> Then you have the question of An African swallow, or a European Swallow.
> The European being slightly faster at Approximately 28 kilometers per
> hour.
> Whereas the African at Approximately 21 kilometers per hour.
> Both unladen of course.
>
> [EMAIL PROTECTED] wrote:
> >
> > If you refer to swallows instead, they'll probably be able to recognize
> the
> > reference slightly faster.
> >
> > "Chuck Larrieu" <[EMAIL PROTECTED]>@groupstudy.com on 01/13/2001
> 05:15:13
> > AM
> >
> > Please respond to "Chuck Larrieu" <[EMAIL PROTECTED]>
> >
> > Sent by:  [EMAIL PROTECTED]
> >
> > To:   <[EMAIL PROTECTED]>
> > cc:(bcc: Kevin Cullimore)
> > Subject:  RE: Useful things to do with trolls
> >
> > The secret to passing The Lab is not to ask the proctor "what kind of a
> > sparrow" but to tell the proctor what you know of the several species of
> > sparrow, the velocities of each, and then ask which one he would prefer
> ;->
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf
> Of
> > Ray
> > Mosely
> > Sent: Friday, January 12, 2001 3:11 PM
> > To:  Howard C. Berkowitz; [EMAIL PROTECTED]
> > Subject:  RE: Useful things to do with trolls
> >
> > What kind of sparrow?
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Howard C. Berkowitz
> > Sent: Friday, January 12, 2001 2:58 PM
> > To: [EMAIL PROTECTED]
> > Subject: Useful things to do with trolls
> >
> > >I agree.  When it comes to trolls and other threads such as these,
> > sometimes
> > >the best course of action is to do nothing but hit the delete button.
> > This
> > >is the "Let it drop because no one will remember it in a couple of
days,
> > >anyway" philosophy.  Ignore trolls and they often go away.  If they
> don't,
> > >then into the kill file they go.
> > >
> > >just my $.01 after taxes,
> > >John
> >
> > Bringing the subject back to networking, remember, when studying
> > bridging, that a troll traditionally is the layer below the bridge.
> > Unfortunately, no bridge management tool of which I am aware is
> > preprogrammed to ask:
> >
> >  "what is your name?
> >  "what is your quest?
> >  "what is the velocity of the sparrow?
> >
> > Is implementing this capability a potential CCIE lab requirement?
> >
> > >
> > >>
> > >>   Those of us that have been on mailing-lists for many years have a
> name
> > >for
> > >>   the orginal message. Its called a troll. When someone trolls your
> > list,
> > >>   you simply do not respond to it, as that is the purpose of the
troll
> > and
> > >>   get on with your lives. Some people have spent entirely too much
time
> > >>   worrying about this when you don't even know if he even had a
crack,
> > and
> > >>   if he did fine. If you care, email him privately, if you don't,
then
> > >>   you delete it. I'm just simply amazed at the amount of energy and
> time
> > >>   that went into this thread. This stuff just isn't that hard...
> > >  >
> >
> > Andy
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > +-+
> > | This message may contain confidential and/or privileged |
> > | information.  If you are not the addressee or authorized to |
> > | receive this for the addressee, you must not use, copy, |
> > | disclose or take any action based on this message or any|
> > | information herein.  If you have received this message in   |
> > | error, please advise the sender immediately by reply e-mail |
> > | 

Memory for 4000 series router

[Kevin Welch]

I am trying to upgrade the memory in my 4000 series router.  It looks =
like 72-pin 60ns parity, can someone confirm this?=20

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: equipment rack

[Kevin Welch]

Tightly packed you could fit 20.

2500 series routers are 1u each.

The thing to remember is that the fans are on the bottom of the 2500's so
its best to space them a bit.

-- Kevin

- Original Message -
From: "Dennis" <[EMAIL PROTECTED]>
Newsgroups: groupstudy.cisco
To: <[EMAIL PROTECTED]>
Sent: Friday, January 19, 2001 7:21 PM
Subject: equipment rack


> question:
>
>
> an ad for an equipment rack states that it is 20U.  how many cisco 2500's
> will fit in such a rack.
>
> Thanks,
>
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE reading: TCP/IP by Doyle Vol.1 or 2

[Kevin Welch]

Is  Routing TCP/IP Volume 2 out yet?  I see it listed on Amazon as a 4-6
week ship time and cannot find it at all on bookpool.com?

-- Kevin

- Original Message -
From: "Katson PN Yeung" <[EMAIL PROTECTED]>
Newsgroups: groupstudy.cisco
To: <[EMAIL PROTECTED]>
Sent: Saturday, January 20, 2001 10:32 PM
Subject: Re: CCIE reading: TCP/IP by Doyle Vol.1 or 2


> Yes, this is very true that Dr. Perlman's book should be on the shelf
> Here is my list (and the reading procedure.)
>
> 1. Interconnection 2nd edition
> 2. Routing TCP/IP vol 1
> 3. IRA. 1st edition
> 4. Caslow's 2nd edition.
> 5. Cisco ATM solution
> 6.Integrating Voice and data networks.
>
> I have already finished 1-3 multiple times and I really find it is helpful
> for my daily job. Now I am doing 4, after reading it from cover to cover,
I
> will go for a written test.
>
> One more point, personally, I think Interconnection 2nd edition should be
> read and understand before anything else...
>
>
>
> "Craig Columbus" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > I haven't read Doyle's Vol2, but if volume1 is taken as an indicator,
I'm
> > sure it'll be a good reference.
> > I've read the others that you have on your list, with the exception of
the
> > Rossi book, and can confirm that you should have them on your shelf.
> > In addition, you really should obtain a copy of Interconnections by
Radia
> > Perlman.
> >
> > Craig
> >
> > At 09:29 AM 1/20/2001 -0600, you wrote:
> > >Hello,
> > >
> > >I am looking at obtaining the books that are "Required reading" for the
> > >CCIE lab, according to www.ccbootcamp.com. I have heard great things
> about
> > >their perpetration labs and plan to buy them as soon as I can get my
lab
> > >pieced together from optsys.
> > >
> > >The books listed are:
> > >
> > >Internet Routing Architectures, Bassam Halabi
> > >CCIE Prof. Development Routing TCP/IP Volume I, Jeff Doyle
> > >Cisco Certification Bridges, Routers, and Switches for CCIE's, Caslow
> > >Cisco Lan Switching (CCIE professional development)
> > >Cisco Catalyst Lan Switching Louis R Rossi, Louis D. Rossi, Thomas
Rossi
> > >
> > >
> > >I noticed the TCP/IP book by Doyle has a Volume 1 and Volume 2. The
first
> > >book  seems to be the foundation book while the second one goes into
BGP.
> > >Multicasting, etc.
> > >
> > >The Architecture book by Halabib is a must have, from everyone that has
> > >read it. It  seems to be heavy in BGP more than other exterior routing
> > >protocols. Is Doyle vol 2 worth reading back to front or are their
better
> > >reads one the list for that information?
> > >
> > >Thanks,
> > >
> > >-Eric Gunn
> > >
> > >_
> > >FAQ, list archives, and subscription info:
> > >http://www.groupstudy.com/list/cisco.html
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE reading: TCP/IP by Doyle Vol.1 or 2

[Kevin Welch]

Actually there are a couple more books I would add to this excellent list:

Top Down Network Design  (Thanks again for the wonderful book Priscilla)
Performance and Fault Management
Cisco Access Lists Field Guide

-- Kevin

- Original Message -
From: "Kevin Welch" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, January 21, 2001 12:53 AM
Subject: Re: CCIE reading: TCP/IP by Doyle Vol.1 or 2


> Is  Routing TCP/IP Volume 2 out yet?  I see it listed on Amazon as a 4-6
> week ship time and cannot find it at all on bookpool.com?
>
> -- Kevin
>
> - Original Message -
> From: "Katson PN Yeung" <[EMAIL PROTECTED]>
> Newsgroups: groupstudy.cisco
> To: <[EMAIL PROTECTED]>
> Sent: Saturday, January 20, 2001 10:32 PM
> Subject: Re: CCIE reading: TCP/IP by Doyle Vol.1 or 2
>
>
> > Yes, this is very true that Dr. Perlman's book should be on the
shelf
> > Here is my list (and the reading procedure.)
> >
> > 1. Interconnection 2nd edition
> > 2. Routing TCP/IP vol 1
> > 3. IRA. 1st edition
> > 4. Caslow's 2nd edition.
> > 5. Cisco ATM solution
> > 6.Integrating Voice and data networks.
> >
> > I have already finished 1-3 multiple times and I really find it is
helpful
> > for my daily job. Now I am doing 4, after reading it from cover to
cover,
> I
> > will go for a written test.
> >
> > One more point, personally, I think Interconnection 2nd edition should
be
> > read and understand before anything else...
> >
> >
> >
> > "Craig Columbus" <[EMAIL PROTECTED]> wrote in
message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > I haven't read Doyle's Vol2, but if volume1 is taken as an indicator,
> I'm
> > > sure it'll be a good reference.
> > > I've read the others that you have on your list, with the exception of
> the
> > > Rossi book, and can confirm that you should have them on your shelf.
> > > In addition, you really should obtain a copy of Interconnections by
> Radia
> > > Perlman.
> > >
> > > Craig
> > >
> > > At 09:29 AM 1/20/2001 -0600, you wrote:
> > > >Hello,
> > > >
> > > >I am looking at obtaining the books that are "Required reading" for
the
> > > >CCIE lab, according to www.ccbootcamp.com. I have heard great things
> > about
> > > >their perpetration labs and plan to buy them as soon as I can get my
> lab
> > > >pieced together from optsys.
> > > >
> > > >The books listed are:
> > > >
> > > >Internet Routing Architectures, Bassam Halabi
> > > >CCIE Prof. Development Routing TCP/IP Volume I, Jeff Doyle
> > > >Cisco Certification Bridges, Routers, and Switches for CCIE's, Caslow
> > > >Cisco Lan Switching (CCIE professional development)
> > > >Cisco Catalyst Lan Switching Louis R Rossi, Louis D. Rossi, Thomas
> Rossi
> > > >
> > > >
> > > >I noticed the TCP/IP book by Doyle has a Volume 1 and Volume 2. The
> first
> > > >book  seems to be the foundation book while the second one goes into
> BGP.
> > > >Multicasting, etc.
> > > >
> > > >The Architecture book by Halabib is a must have, from everyone that
has
> > > >read it. It  seems to be heavy in BGP more than other exterior
routing
> > > >protocols. Is Doyle vol 2 worth reading back to front or are their
> better
> > > >reads one the list for that information?
> > > >
> > > >Thanks,
> > > >
> > > >-Eric Gunn
> > > >
> > > >_
> > > >FAQ, list archives, and subscription info:
> > > >http://www.groupstudy.com/list/cisco.html
> > > >Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Type 1 to RJ45 TR Cables

[Kevin Welch]

Does anyone know a part number or a place that sells IBM Type 1 Token =
Ring to RJ45 Connectors.  I am trying to connect my the TR port on my =
2612 to an IBM 8228 MAU.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Alaising more than one command

[Kevin Welch]

Is there a way to use a alias to run more than one command.  For example =
aliasing wq for write mem then quit.  Another example would be output =
from say  show tech-support command where you are combining multiple =
show commands for simplified troubleshooting procedures in an operations =
center.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE reading: TCP/IP by Doyle Vol.1 or 2

[Kevin Welch]

 Recommended Book list
Top Down Network Design -- ISBN: 1578700698
Cisco Access Lists Field Guide  -- ISBN: 0072123354
Interconnections (2nd Ed.) -- ISBN: 0201634481
Routing TCP/IP vol 1 -- ISBN: 1578700418
Routing TCP/IP vol 2 -- ISBN: 1578700892
Internet Routing Architectures (2nd Ed.) -- ISBN: 157870233X
Bridges, Routers, Switches for CCIE's (2nd Ed.) -- ISBN: 0130903892
Cisco ATM solutions -- ISBN: 1578702135
Integrating Voice and data networks -- ISBN: 1578701961
Performance and Fault Management -- ISBN: 1578701805
 -- Kevin

- Original Message -=20
From: "Brant Stevens" <[EMAIL PROTECTED]>
To: "Chuck Larrieu" <[EMAIL PROTECTED]>; "Eric Gunn" =
<[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Sunday, January 21, 2001 5:24 PM
Subject: RE: CCIE reading: TCP/IP by Doyle Vol.1 or 2


> You have ISBN numbers for these books?
>=20
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Chuck Larrieu
> Sent: Saturday, January 20, 2001 11:04 AM
> To: Eric Gunn; [EMAIL PROTECTED]
> Subject: RE: CCIE reading: TCP/IP by Doyle Vol.1 or 2
>=20
>=20
> According to Amazon, Doyle's volume 2 has a 6 week lead time. Has =
anyone
> actually seen this one on the shelves yet?
>=20
> Halabi is remarkably clear reading. But it never hurts to have a =
second way
> of looking at things.
>=20
> Doyle vol 1 is definitely a must. I would add Slattery / Burton =
Advanced IP
> routing in Cisco Networks for the wealth of examples and router =
outputs.
>=20
> One must read Caslow in the frame of mind in which it is intended. =
Caslow
> expects that you already know the basics, and now you want to start =
thinking
> like a CCIE. It is a book about problem solving, not a book about =
learning
> fundamentals.
>=20
> Chuck
>=20
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf =
Of Eric
> Gunn
> Sent: Saturday, January 20, 2001 7:30 AM
> To: [EMAIL PROTECTED]
> Subject: CCIE reading: TCP/IP by Doyle Vol.1 or 2
>=20
> Hello,
>=20
> I am looking at obtaining the books that are "Required reading" for =
the
> CCIE lab, according to www.ccbootcamp.com. I have heard great things =
about
> their perpetration labs and plan to buy them as soon as I can get my =
lab
> pieced together from optsys.
>=20
> The books listed are:
>=20
> Internet Routing Architectures, Bassam Halabi
> CCIE Prof. Development Routing TCP/IP Volume I, Jeff Doyle
> Cisco Certification Bridges, Routers, and Switches for CCIE's, Caslow
> Cisco Lan Switching (CCIE professional development)
> Cisco Catalyst Lan Switching Louis R Rossi, Louis D. Rossi, Thomas =
Rossi
>=20
>=20
> I noticed the TCP/IP book by Doyle has a Volume 1 and Volume 2. The =
first
> book  seems to be the foundation book while the second one goes into =
BGP.
> Multicasting, etc.
>=20
> The Architecture book by Halabib is a must have, from everyone that =
has
> read it. It  seems to be heavy in BGP more than other exterior routing
> protocols. Is Doyle vol 2 worth reading back to front or are their =
better
> reads one the list for that information?
>=20
> Thanks,
>=20
> -Eric Gunn
>=20
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>=20
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>=20
> _
> FAQ, list archives, and subscription info: =
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Enabling SSH on a router

[Kevin Welch]

I searched Cisco's web site, followed all instructions in the link below =
but cannot get ssh to function on my 2621... As a matter of fact now of =
the ssh specific commands work even though it is supposed to be in every =
crypto ios rev.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/=
121t/121t1/sshv1.htm

Any help appreciated.

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Enabling SSH on a router

[Kevin Welch]

Well I generated the crypto key and was able to verify its existence, but
ssh commands like ip ssh still a no go.  The router has a hostname and a
domain name.

-- Kevin

- Original Message -
From: "Kevin Welch" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 23, 2001 1:45 AM
Subject: Enabling SSH on a router


> I searched Cisco's web site, followed all instructions in the link below =
> but cannot get ssh to function on my 2621... As a matter of fact now of =
> the ssh specific commands work even though it is supposed to be in every =
> crypto ios rev.
>
> http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/=
> 121t/121t1/sshv1.htm
>
> Any help appreciated.
>
> -- Kevin
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

CatOS or NativeIOS mode?

[Kevin Welch]

I am in the process of implimenting a new network 
design and I wanted to ask everyones opinion on which configuration mode to use 
on my 6509's.  Should I stick with a hybrid CATOS and IOS mode or should I 
use the NativeIOS mode Since I am familar with routers and with XL series 
switches, going with the Native IOS mode is an interesting option... Are there 
any drawbacks to using this mode over the standard XDI/CatOS interface?  

 
I look foward to hearing from you.
 
-- Kevin

Re: CatOS or NativeIOS mode?

[Kevin Welch]

Heh, answered my own question... I guess I should 
remember to check CCO, before I go firing off e-mails and such.  Anyways, 
it seems the native IOS mode does not support some features that would be useful 
to me.  For Example, the documentation states it does not support HSRP 
between redundant SUP cards.
 
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/ios121e/78_11047.htm
 
-- Kevin

  - Original Message - 
  From: 
  Kevin Welch 
  To: [EMAIL PROTECTED] 
  Sent: Sunday, September 24, 2000 3:17 
  AM
  Subject: CatOS or NativeIOS mode?
  
  I am in the process of implimenting a new network 
  design and I wanted to ask everyones opinion on which configuration mode to 
  use on my 6509's.  Should I stick with a hybrid CATOS and IOS mode or 
  should I use the NativeIOS mode Since I am familar with routers and with 
  XL series switches, going with the Native IOS mode is an interesting option... 
  Are there any drawbacks to using this mode over the standard XDI/CatOS 
  interface?  
   
  I look foward to hearing from you.
   
  -- Kevin

Re: RADB - BGP routing

[Kevin Welch]

Check www.arin.net, you should be able to find some answers there.

-- Kevin

- Original Message -
From: "Benny Leong (HTHK - Senior Engineer II - iServices Development,
NNSD)" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, September 24, 2000 11:09 PM
Subject: RADB - BGP routing


> What is the use of RADB ?
> Is it a must to register AS number and the route to the RADB ?
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Diff between rfc1483 and rfc1577

[Kevin Welch]

RFC 1483 was obsoleted by RFC 2684
RFC 1577 was obsoleted by RFC 2225

RFC 2225 Describes Classical IP and ARP over ATM.  It appears to deal with
LANE  (LAN Emulation) and treats clients as if they are part of the same
broadcast network.

RFC 2684 seems to deal with just carrying multiprotocol traffic over ATM,
either by using different Switched Virtual Connections or the same SVC.

Just by reading the abstract you can kind of see the differences between the
two... I would assume that the they get more into detail the more you read
into them.  I just skimmed the abstract to get the above.

-- Kevin

- Original Message -
From: "huan" <[EMAIL PROTECTED]>
Newsgroups: groupstudy.cisco
To: <[EMAIL PROTECTED]>
Sent: Saturday, September 30, 2000 10:43 AM
Subject: Diff between rfc1483 and rfc1577


> They both work on IP over ATM, 1483 is classic IP, and 1577 is IP over
ATM,
> but what is the real diff between them?
>
> Thanks
>
>
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

High Availability. (Maybe OT)

[Kevin Welch]

I am trying to figure out how to impliment a 
redundant network design.  The problem I keep running into is the 
connection to the server.  I can provide Access redundancy through the use 
of two switches.  I can provide some level of server redundancy via the use 
of 2 NICs or 2 Servers.  The problem is how to provide application layer 
redundancy.  I have been able to prove the network itself is redundant, but 
connectivity to servers seems to be where I am having trouble with my 
studies.
 
From my understanding I cannot do etherchannel 
accross switches, and more over, I remember that etherchannel does not 
provide redundancy because if one link goes down the whole channel goes 
down.  Please correct me if this is wrong.  
 
Example:
  Realizing that the expectation that a server 
stay up all the time would still be a single point of failure.  In the 
event of a network failure on a switch, how do I provide network access to the 
Server.  
 
Proposed is to connect the server via a second NIC 
or second port on a dual or quad NIC to a secondary access switch.  

 
Problem, maintaing the same layer 3 address 
accross both switches in the advent that one link should fail, the server 
maintains reachability.
 
Giving that in this case I would be talking about a 
solaris system, I have thought about using simple scripts to watch for the 
interface to go down and reconfigure.  I am curious if anyone knows of any 
hardware/software solutions for doing this?   I am guessing that I am 
not the first person to ask for something like this.
 
-- Kevin

Re: High Availability. (Maybe OT)

[Kevin Welch]

Actually Cisco has a Content Caching Switch (CSS Something for the model)
That is a very nice unit, they are a variety of different sizes, and the
entry price is comparable to a LocalDirector.  The Content Switch, will
allow you to be alot more granular in traffic forwarding.

-- Kevin


- Original Message -
From: "Brian" <[EMAIL PROTECTED]>
To: "Priscilla Oppenheimer" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, October 13, 2000 1:08 PM
Subject: Re: High Availability. (Maybe OT)


> On Fri, 13 Oct 2000, Priscilla Oppenheimer wrote:
>
> > Who makes Layer 4 switches such as what you're talking about, Brian?
Sorry
> > if it's a dumb question.
>
> Foundry Networks www.foundrynet.com we use the serverion line.
> Alteon Networks www.alteon.com makes good ones too (acedirector line)
>
> Cisco makes one called the localdirector I believe as well.  I think F5
> has some too.  Foundry IMHO is the way to go.  Very nice.  We use them for
> Server Load Balancing and Transparent Redirection (cache farms)
>
> >
> > I'm helping a customer who has a setup similar to what you describe, I
> > think. The customer is reluctant (unable?) to give me all the details,
even
> > though I'm helping him troubleshoot some problems that are probably
> > related. (Layer 8, politics, will get you every time!)
> >
>
> Feel free to ask for any more details,
>
> Brian
>
> > Thank-you for your help.
> >
> > Priscilla
> >
> >
> > At 08:30 AM 10/13/00, Brian wrote:
> > >Using Server Load Balancing on switches.  Then between the switches you
> > >run a hot standby protocol.  For example:
> > >
> > >The ip the clients use for the server would really be a "virtual" ip
> > >address, which is actually bound to the layer4 switch.  The layer 4
switch
> > >receives requests for the application (lets say port 80) and then load
> > >balances accross a server farm using a hash table.  If servers
die..it
> > >can handle this, because it does health checks to the servers.  If the
> > >switch dies, then hot standby kicks in and another switch is activated.
> > >
> > >Even "session" level stuff like cookies and whatnot can be handled by
> > >these switches, to make sure your session stays on the same server.
> > >
> > >Other applications like databases etc, have similar scenerios.
Normally
> > >in the above scenerio, you backend all the servers off a single file
> > >server so that the data is the same on all servers (NFS).  This file
> > >server would be a high reliable server such as a NetApp
> > >
> > > >
> > >
> > > >
> > > > Problem, maintaing the same layer 3 address accross both switches in
> > > > the advent that one link should fail, the server maintains
> > > > reachability.
> > >
> > >
> > >
> > > >
> > > > Giving that in this case I would be talking about a solaris system,
I
> > > > have thought about using simple scripts to watch for the interface
to
> > > > go down and reconfigure.  I am curious if anyone knows of any
> > > > hardware/software solutions for doing this?  I am guessing that I am
> > > > not the first person to ask for something like this.
> > >
> > >Brian
> > >
> > >
> > > >
> > > > -- Kevin
> > > >
> > >
> > >---
> > >Brian Feeny, CCNP, CCDP   [EMAIL PROTECTED]
> > >Network Administrator
> > >ShreveNet Inc. (ASN 11881)
> > >
> > >_
> > >FAQ, list archives, and subscription info:
> > >http://www.groupstudy.com/list/cisco.html
> > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
> > 
> >
> > Priscilla Oppenheimer
> > http://www.priscilla.com
> >
> > _
> > FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> ---
> Brian Feeny, CCNP, CCDP   [EMAIL PROTECTED]
> Network Administrator
> ShreveNet Inc. (ASN 11881)
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Redistributing routes

[Kevin Welch]

Hi, 
 
I am trying to understand some route 
redistribution, here is the senario:
 
I have two routers, each is receiving a default 
route from its BGP peer.  Both peers are to the same providers network, I 
want to make both of these routes available to both routers, right now each 
router is only receiving one route.  In order to acheive good load 
balancing and fault tolerance, I need to make sure both links are 
utilized.  My inital thought was just to redistribute use the redistribute 
bgp command, but the routes are not seen when this is done.  My guess is 
that I am missing some step to redistribute the default routes I am 
receiving.  
 
I would prefer a nudge in the right direction, 
rather than an all out answer if possible.  I have looked through Cisco's 
web site, but I have not had much luck.  
 
-- Kevin

6509 Question

[Kevin Welch]

Ok, this is a follow up to my e-mail last night, as it would seem, the
problem was not with my route configuration, but rather with the MSFC
detcing a link failure.  So here goes the next round of questions.

I have two 6509's configured for redundant connectivity.  I am trying to get
the MSFC to detect a link failure at Layer2 so that the routing table will
be updated and packets can traverse the alternate path.  The problem seems
to be that when all ports fail in a VLAN that the VLAN is still considered
up.  

Is there any way to get the MSFC to view a port on the catalyst as a single
interface and detect a failure on that link?  If not, how can I have layer 3
redundancy in the event of a link/module failure?

Any help appreciated

-- Kevin

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: 2511 Reverse Telnet Problems - Long

[Kevin Welch]

It looks like the lines are configured with two stop bits instead of one:
 no parity, 2 stopbits, 8 databits

Proper settings are 9600, 8, N, 1
8 databits, no parity, 1 stopbit

So unless your connecting to something that makes use of two stopbits this
could very well be your problem.

-- Kevin

- Original Message -
From: "perryb" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, April 05, 2001 2:02 PM
Subject: 2511 Reverse Telnet Problems - Long


> Hello,
>
> I'm still having 2511 terminal server reverse telnet problems.  This may
be
> a little long, but I want to provide all the details.  Before I ramble on,
> is there any way to verify that the 2511 line interface hardware is not
> broken ?  I've swapped out my octal cable and I've changed the ios
version.
> So here goes...
>
> Here are the 2511 pertinent command lines:
>
> interface Loopback0
>  ip address 1.1.1.10 255.255.255.255
> line 1 16
>  no exec
>  transport input all
> !
> Here are the router (2501) lines that I'm trying to successfully rev
telnet
> to (console port):
>
> interface Loopback0
>  ip address 1.1.1.1 255.255.255.255
> line con 0
> !
>
> Here is the "sho line" of the 2511 before attempting the rev telnet:
>
> Tty Typ Tx/RxA Modem  Roty AccO AccI   Uses   Noise  Overruns
Int
>  0 CTY  --  ---   2
> 0 0/0   -
>  1 TTY   9600/9600  --  ---  12   1
> 0/0   -
> !!
>
> Here is the "sho line 1" of the 2511 before attempting rev telnet:
>
> Line 1, Location: "", Type: ""
> Length: 24 lines, Width: 80 columns
> Baud rate (TX/RX) is 9600/9600, no parity, 2 stopbits, 8 databits
> Status: Ready
> Capabilities: none
> Modem state: Ready
> Modem hardware state: noCTS noDSR  DTR RTS
> Special Chars: Escape  Hold  Stop  Start  Disconnect  Activation
> ^^xnone   - -   none
> Timeouts:  Idle EXECIdle Session   Modem Answer  Session
Dispatch
>00:10:00nevernone not
set
> Idle Session Disconnect Warning
>   never
> Login-sequence User Response
>  00:00:30
> Autoselect Initial Wait
>   not set
> Modem type is unknown.
> Session limit is not set.
> Time since activation: never
> Editing is enabled.
> History is enabled, history size is 10.
> DNS resolution in show commands is enabled
> Full user help is disabled
> Allowed transports are pad v120 telnet rlogin.  Preferred is telnet.
> No output characters are padded
> No special data dispatching characters
> 
> Here is the sho line of the 2501 before rev telnet:
>
> Tty Typ Tx/RxA Modem  Roty AccO AccI   Uses   Noise  Overruns
Int
>  0 CTY  --  ---   0
> 0 0/0   -
>  1 AUX   9600/9600  --  ---   0   0
> 0/0   -
> !
>
> This is my rev telnet execution with debug out put from the console of the
> 2511
>
> TermServ#tel 1.1.1.10 2001 /debug
> Trying 1.1.1.10, 2001 ... Open
>
> [TN: received WILL ECHO (1)]
> [TN: sent DO ECHO (1)]
> [TN: received WILL SUPPRESS-GA (3)]
> [TN: sent DO SUPPRESS-GA (3)]
> [TN: received DO TTY-TYPE (24)]
> [TN: sent WILL TTY-TYPE (24)]
> [TN: received DO WINDOW-SIZE (31)]
> [TN: sent WILL WINDOW-SIZE (31)]
> [TN: Sent SB NAWS 100 36]
> [TN: recv SB 24 1 ]
> [TN: Sent SB 24 0 vt100]
>
> !
>
> At this point, the terminal freezes and no characters echo to the
terminal -
> basically, it's frozen.  I then do a ctrl+shift+6+x to break out and have
a
> look at things...this is what I see:
>
> Output of "sho line 1" on 2511:
>
>Tty Typ Tx/RxA Modem  Roty AccO AccI   Uses   Noise  Overruns
> Int
> *1 TTY   9600/9600  --  --- 13   1
> 0   -
>
> Line 1, Location: "", Type: "vt100"
> Length: 36 lines, Width: 100 columns
> Baud rate (TX/RX) is 9600/9600, no parity, 2 stopbits, 8 databits
> Status: Ready, Connected, Active
> Capabilities: none
> Modem state: Ready
> Modem hardware state: CTS* DSR*  DTR RTS
> Special Chars: Escape  Hold  Stop  Start  Disconnect  Activation
> ^^xnone   - -   none
> Timeouts:  Idle EXECIdle Session   Modem Answer  Session
Dispatch
>00:10:00nevernone not
set
> Idle Session Disconnect Warning
>   never
> Login-sequence User Response
>  00:00:30
> 

Re: Re: CODE RED protection ! ! ! [7:15989]

[Kevin Welch]

There are a couple links that discuss how do this but require features like
NBAR to be sucessful.  However, I do not see a link anywhere in this reply,
so here goes.

http://www.iponeverything.net/CodeRed.html
http://www.cisco.com/warp/public/63/nbar_acl_codered.shtml

Hope those help.

-- Kevin

> Hi
>
> The problem is that I do have web servers on my network, blocking port
> 80 would stop these web servers .
>
> Hamid
> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> my company just got hit by code red last week. the only logical thing
>> to deploy on your routers is to block all access to port 80 in and out
>> of all the interfaces by ACL.
>>
>> Unless you have the luxury of running IOS 12.1 and above on all your
>> routers, you will not be able to use NBAR. Deployed the ACLs onto all
>> interfaces to control all port 80 traffic.
>>
>> Use "ip route-cache flow" and "show ip cache flow" on your interfaces
>> to detect the IP addresses that are propagating http traffic to port
>> 80. You will have to look out for port 0050 under destination port
>> when you
> perform
>> a "show ip cache flow".
>>
>> Cheers.
>>
>> - Original Message -
>> From:  "Dennis Bailey"
>> To:  [EMAIL PROTECTED]
>> Sent: Tue, 14 Aug 2001 15:34:19 -0400
>> Subject:  Re: CODE RED protection ! ! ! [7:15989]
>> Depending upon the router platform you can use NBAR.
>>
>>  I am just really depressed right now because there are costumers
>>  getting
>> involved in our business.  I knew I wasn't the only one who liked to
>> get dressed up but now think of the pressure that there will be with
>> professionals out there..
>>
>>
>> ""Hamid""  wrote in message
>> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> > Hi group
>> >
>> > I have some costumers whom I belive are infected with CODE RED. Any
> ideas
>> > how I can deny any traffic related to CODE RED on my router?
>> >
>> > Thanks
>> >
>> > Hamid
>> --
>> FAQ, list archives, and subscription info:
>> http://www.groupstudy.com/list/cisco.html
>> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>>
>>
>

> 
>> Check any e-mail over the Web for free at MailBreeze
>> (http://www.mailbreeze.com)
> Nondisclosure violations to [EMAIL PROTECTED]



understand, v.:
To reach a point, in your investigation of some subject, at which
you cease to examine what is really present, and operate on the basis of
your own internal model instead.

-
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16148&t=15989
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Strange Behavior on my IOS ! ! ! [7:16144]

[Kevin Welch]

Without knowing more its hard to say...  personally I would blame this
issue on user error or possibly a DNS problem by the limited information
available.   Have you been able to duplicate the problem yourself?  Run
pings, traceroutes, check name resolution, etc... Start with the
troubleshooting basics and see where that leads you.

-- Kevin

> Hi group
>
> I have recently upgraded the IOS on my C3660 router to a IOS 12.2.3
> ENTERPRISE/FW/IDS PLUS IPSEC 56.  The previous version was 12.0.7 XK.
>
> No configurations have been changed. The router has 4 NM-16AM modules
> which currently acts as an Access Server.
>
> The problem is none of my clients can login using their MSN Messenger
> or Yahoo Messenger, they can't chech their E-mails with programs like
> Outlook either.
>
> I have checked the configs, there are no access lists applied to the
> Async interfaces. I still can login to my Messengers in the LAN.
>
> I have returned the previous IOS and everything worked fine ! ! !
>
> Any idea what the problem is?
>
> Thanx in advance
>
> Hamid
> Nondisclosure violations to [EMAIL PROTECTED]



understand, v.:
To reach a point, in your investigation of some subject, at which
you cease to examine what is really present, and operate on the basis of
your own internal model instead.

-
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16149&t=16144
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: MOTD on Cat5000/5500 [7:16137]

[Kevin Welch]

Usage Guidelines

The banner cannot contain more than 3,070 characters, including tabs. Tabs
display as eight characters but take only one character of memory.

That is from :
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_5_5/cmd_ref/
ses_sete.htm#xtocid85598

It would appear that this may vary depending on software image loaded on
the device.  Hope that helps..

-- Kevin

> Hello colleagues,
>
> I have a question regarding the Message of the Day banner on
> Cat5000/5500  switches. It looks like I am limited to 255 characters;
> do you know if this  can be changed so that I can put in a banner that
> exceeds 255 ?
> Thanks for your help in advance.
>
> Regards,
>
> Hans
>
>
> _
> Get your FREE download of MSN Explorer at
> http://explorer.msn.com/intl.asp
> Nondisclosure violations to [EMAIL PROTECTED]



http://www.siliconsamurai.net

-
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16150&t=16137
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Recently passed BSCN -- Now CCNP [7:16152]

[Kevin Welch]

Just wanted to drop a line... I havent been too active on this list in the
past, but have been a member since around Feb, 2000.  I have recently
completed all the tests needed for my CCNP 2.0 Certifcation and now begin
the road to CCDP then CCIE.  I am also working on updating my web site and
some lab gear online (its currently available in limited blocks to
interested parties check out the link below for more info).

Anyways I wanted to thank everyone on the list for providing such wonderful
insight and tidbits of knowledge.  I have learned to how to find just about
anything I can on CCO, but if I cannot I normally can find my answer in the
archives somewhere (hence the lack of posting).

Time to go search for good CID resources  :-)

-- Kevin

http://www.siliconsamurai.net

-
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16152&t=16152
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: tools for detecting DOS attack other than ip accounting [7:16156]

[Kevin Welch]

Well,  I would recommend using an IDS and a span port on a switch.  Snort
(http://www.snort.org) is an opensource Intrusion detection system that
ties into tools like syslog and swatch and can accurately report Intrusion
and Denial of Service attempts allowing you then decide how to respond.
These tools would generally rely on a unix system attached to a switch span
port on the lan side of your router.

-- Kevin

> hi all
>
> anyone knows if there are any tools to detect DOS
> attack on network other than turning on ip accounting
> at the routers because ip accounting utilises very
> much CPU resources on the router
>
> any inputs will be greatly appreciated
>
> regards
>
> suaveguru
>
> __
> Do You Yahoo!?
> Make international calls for as low as $.04/minute with Yahoo!
> Messenger http://phonecard.yahoo.com/
> Nondisclosure violations to [EMAIL PROTECTED]


http://www.siliconsamurai.net

-
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16156&t=16156
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: MOTD on Cat5000/5500 [7:16137]

[Kevin Welch]

My guess would first go to what software revision are you running?   My
second would be to ask that are you accidentally typing your delimiting
character?

I have tried on 6.1(2) without any problems...  However, on 5.3(2) The
banner did cut off after a few lines of text.

-- Kevin

> Kevin,
>
> thanks for the info. The problem I am having is that, after typing in 5
> or 6  lines, the switch itself ends the MOTD entry and says 'banner
> motd set',  even without me typing the ending delimiter. Any idea what
> could cause that  ?
> Thanks for your help in advance.
>
> Regards,
>
> Hans
>
>
>>From: "Kevin Welch" 
>>Reply-To: "Kevin Welch" 
>>To: [EMAIL PROTECTED]
>>Subject: Re: MOTD on Cat5000/5500 [7:16137]
>>Date: Wed, 15 Aug 2001 06:48:51 -0400
>>
>>Usage Guidelines
>>
>>The banner cannot contain more than 3,070 characters, including tabs.
>>Tabs display as eight characters but take only one character of memory.
>>
>>That is from :
>>http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_5_5/cmd_re
f/
>>ses_sete.htm#xtocid85598
>>
>>It would appear that this may vary depending on software image loaded
>>on the device.  Hope that helps..
>>
>>-- Kevin
>>
>> > Hello colleagues,
>> >
>> > I have a question regarding the Message of the Day banner on
>> > Cat5000/5500  switches. It looks like I am limited to 255
>> > characters; do you know if this  can be changed so that I can put in
>> > a banner that exceeds 255 ?
>> > Thanks for your help in advance.
>> >
>> > Regards,
>> >
>> > Hans
>> >
>> >
>> > _
>> > Get your FREE download of MSN Explorer at
>> > http://explorer.msn.com/intl.asp
>> > Nondisclosure violations to [EMAIL PROTECTED]
>>
>>
>>
>>http://www.siliconsamurai.net
>>
>>-
>>This email was sent using SquirrelMail.
>>"Webmail for nuts!"
>>http://squirrelmail.org/
> _
> Get your FREE download of MSN Explorer at
> http://explorer.msn.com/intl.asp



http://www.siliconsamurai.net

-
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16161&t=16137
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Loopback Interface [7:16174]

[Kevin Welch]

16.htm#xtocid1566416

>From CCO:

You can specify a software-only interface called a loopback interface that
emulates an interface that is always up. A loopback interface is a virtual
interface that allows BGP and RSRB sessions to stay up even if the outbound
interface is down, and is supported on all platforms.

You can use the loopback interface as the termination address for BGP
sessions, for RSRB connections, or for establishing a Telnet session from
the communication server's console to its auxiliary port when all other
interfaces are down. In applications where other communication servers will
attempt to reach this loopback interface, you should configure a routing
protocol to distribute the subnet assigned to the loopback address.

Packets routed to the loopback interface are rerouted back to the box and
processed locally. IP packets routed out the loopback interface but not
destined to the loopback interface are dropped. This means the loopback
interface also serves as the Null 0 interface.

-- Kevin


> Would you please explain me in simple terms what is loopback interface?
> One of the techs from our ISP told me to config my router for loopback
> interface instead of multilink interface so that he would push the
> config to my router.  He also told me that multilink requires high CPU
> usage.  Would you please give me your opinion on this.
> Thanks
> Nondisclosure violations to [EMAIL PROTECTED]



http://www.siliconsamurai.net

-
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16187&t=16174
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Private VLAN's & VTP [7:27940]

[Kevin Welch]

If I understand private vlans properly...  They are configured exactly
like normal vlans, however, the ports are either left alone
(promiscuous) or restricted.   Restricted ports cannot talk to each
other, they can only talk to promiscuous ports. 

-- Kevin Welch


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Urooj's Hi-speed Internet
Sent: Sunday, December 02, 2001 1:32 PM
To: [EMAIL PROTECTED]
Subject: Private VLAN's & VTP [7:27940]

Hi Folks,
Do VLAN's configured as PVLAN's get communicated throughout the VTP
domain
via VTP messages or are they kept segregated ? Can someone please
enlighten
me on this ? Thanks very much.

Aziz




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27960&t=27940
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: PIX [7:28083]

[Kevin Welch]

That is very correct.  The pix is more a NAT box than anything (sorry if
this offends anyone).

-- Kevin Welch


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Michael J. Doherty
Sent: Tuesday, December 04, 2001 12:33 PM
To: [EMAIL PROTECTED]
Subject: Re: PIX [7:28083]

The PIX has limited routing capabilities (in order to allow packets
through
the firewall).  It cannot route packets out the same interface that it
arrived on.  If it does not have a route to a host on another interface,
it
will drop the packet.  (my understanding, anyway, feel free to correct
an
inaccuracies).

Mike

- Original Message -
From: "BASSOLE Rock" 
To: 
Sent: Tuesday, December 04, 2001 12:03
Subject: PIX [7:28083]


> Hi group,
>
>
> I'am using a PIX with 2 interfaces (inside and outside).
>
> -Security level for the inside interface is 100.
> -Security level for the outside interface is 0.
>
> Is it possible to use the PIX to route a specific host installed on
the
> outside interface towards another subnet (still on the outside
interface)?
>
> Will the packet be droped because the host is on the outside
interface?
>
> Regards,
>
> Rock BASSOLE
> Til: +33 (0) 1 45 96 22 03
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28097&t=28083
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Cisco and other network related links [7:28146]

[Kevin Welch]

I have a nice collection of CCO and miscellany network links I thought I
would share with the group and see if anyone has any others they might
like to share.  I tried to avoid some of the more specific links dealing
with OSPF, DLSW, SRB, etc.  I look forward to see your handy links.
 
-- Kevin
 
Tools
AirSnort -- AirSnort is a wireless LAN (WLAN) tool which recovers
encryption keys. AirSnort operates by passively monitoring
transmissions, computing the encryption key when enough packets have
been gathered.
http://airsnort.sourceforge.net/
 
Arin Whois -- The ARIN Whois database can be used to look up owners of
IP address ranges and AS information.  
http://www.arin.net/whois/
 
Expect - Expect is a tool that can be used to automate interactive
sessions.  
http://expect.nist.gov/
 
Mail Relay Testing - This site can be used to test a mail server against
various open relay tests.  
http://www.abuse.net/relay.html
 
Traceroute.org - Traceroute.org maintains a list of looking glasses,
public traceroute CGI's, and route-servers.  
http://www.traceroute.org/
 
Jeff Olenchek's VMPS Page - A neat little VMPS project I stumbled
across.  
http://www.uwm.edu/People/jeff/vmps/
 
 
Informational
 
Sockets.com Services - This site contains a list of assigned and well
known TCP/UDP Port numbers.  
http://www.sockets.com/services.htm
 
EtherType Field Public Assignments -- If you ever do protocol decodes
you may find this handy. A list of assigned EtherTypes
http://yocum.org/faqs/ethertypes.html
 
RFC.dk - RFC.dk is a very easy to remember site for finding Internet
RFC's, it also has these documents in HTML format for easy
viewing/printing.  
http://www.rfc.dk  
 
NSA Cisco Router Security Recommendations - This is a set of security
guidelines straight from the NSA for Cisco routers.  This is a very good
read for anyone interested in network security.  
http://nsa2.www.conxion.com/cisco/download.htm
 
Undocumented Cisco Commands - This site contains undocumented commands
in various in Cisco products.  It also has links to other sites that
maintain such database.  ** I take no responsibility for damage done **.

http://www.elemental.net/~lf/undoc/
 
CCO Links -- Some of these may require a CCO Login
 
IOS Feature Navigator - This handy dandy tool allows you to easily track
down what features are supported by an IOS rev and will recommend an IOS
rev based on your feature requirements.  
http://www.cisco.com/cgi-bin/Support/FeatureNav/FN.pl
 
Cisco Technologies Page - This is one of my all time favorite CCO links,
browse sample configurations and design guides by technology.  Very
complete and no engineer is complete without it.
http://www.cisco.com/pcgi-bin/Support/PSP/index.pl?i=Technologies
 
Cisco Password Recovery - This page contains links to password recover
instructions for every model device you could ever need.  
http://www.cisco.com/warp/public/474/
 
Cisco DocGen - DocGen is a java applet that allows you to generate
custom documentation, based on a number of criteria.  Its great for
building study guides.
http://www.cisco.com/cgi-bin/front.x/DocGen.pl
 
IOS Command Lookup Tool - This site allows you to look up information on
IOS commands very quickly and efficiently and is very handy if you need
syntax or usage information about a command.
http://www.cisco.com/support/Cmdlookup/ios-search.html
 
HW/SW Compatibility Matrix - Need to know what IOS revision supports
your new fancy module?  Well look no further this is indispensable and
should be consulted before the upgrade of any modular Cisco device.
http://www.cisco.com/cgi-bin/front.x/Support/HWSWmatrix/hwswmatrix.cgi
 
Improving Security on Cisco Routers - This is router security according
to Cisco and is another very handy guide to understanding network and
router security.  
http://www.cisco.com/warp/public/707/21.html
 
PSIRT Advisories - Keep up on the latest security advisories from
Cisco's Product Security Incident Response Team.  
http://www.cisco.com/warp/public/707/advisory.html
 
Understanding and Troubleshooting Router Crashes - This is a very
informational document for anyone who runs has problems with router
crashes, it gives you an idea what to expect from TAC, how to help you
isolate the problem, etc.
http://www.cisco.com/warp/public/122/crashes_router_troubleshooting.shtm
l
 
Cisco Connection Documentation - The all knowing OZ, the great, the
powerful, documentation CD.  Available to you online.
http://www.cisco.com/univercd/home/home.htm
 
Pix Documentation - Your one stop shop for Pix documentation.
http://www.cisco.com/warp/public/110/pix_command_ref.shtml
 
Cisco Access Dial Configuration Cookbook - If you have any RAS questions
or just want a little more background in Access Dial Technologies, then
look no further.
http://www.cisco.com/warp/public/793/access_dial/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28146&t=28146
--
FAQ, list archives, and subscription info: 

RE: Telephone lines [7:28151]

[Kevin Welch]

A standard telephone line uses 1 pair (2 conductors) for analog phone
services.

-- Kevin Welch

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
John Tafasi
Sent: Tuesday, December 04, 2001 10:20 PM
To: [EMAIL PROTECTED]
Subject: Telephone lines [7:28151]

Hi group,

Can some one tell me how many twisted pair there are in a regular
telephone
line.


Thanks

John Tafasi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28155&t=28151
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Re; How VSAT works ? [7:28156]

[Kevin Welch]

www.vsat.net is a starting point. Or
http://searchnetworking.techtarget.com/sDefinition/0,,sid7_gci214155,00.
html

Im sure more would turn up in google.

-- Kevin Welch


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, December 04, 2001 11:18 PM
To: [EMAIL PROTECTED]
Subject: Re; How VSAT works ? [7:28156]

Hi guys,
I have cisco routers such as 3620 ,3640 with leased lines connectivity
to
remote locations Now I am planning to implement/replace these lines to
VSATs, but I am not much familiar with the terms such as PAMA,DAMA,CDMA
,
Also how the operation of VSAT takes place ?Can anybody clear my doubts
,
Also is there any URL which will give details on these terms?
Thanks in advance .




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28161&t=28156
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Loss of productivity [7:28162]

[Kevin Welch]

As part of my quest to stifle productivity, I thought I would share a
little game that has been going around the net.  Forgive me if this has
already been posted:
http://www.input-entertainment.de/laser/laser.html
 
-- Kevin Welch




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28162&t=28162
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: ccbootcamp labs [7:29512]

[Kevin Welch]

I just wanted to chime in and say as a purchaser of Marcs labs they are
worth it and an excellent tool.  I admit being skeptical before I
decided to pay for the labs, but I reviewed the archives, asked the
opinion of others in this mailing list, and when I received the labs I
was very happy with the product.

While I do not feel Marc should really have needed to try and justify
himself here his activity in this mailing list and response shows you
something about the company and the people behind it.  I am also glad to
hear about revisions for the new one day format and look forward with to
this material with anticipation.  

Because of their lab workbooks (and close physical proximity) I look
forward to sitting down for one of the classes held my Marc's company in
the near future.

-- Kevin Welch


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Marc Russell
Sent: Wednesday, December 19, 2001 1:17 AM
To: [EMAIL PROTECTED]
Subject: Re: ccbootcamp labs [7:29512]

Not even sure how to respond in a politically correct manner to a post
such
as this, but I will try my best. I must say that if someone is going to
publicly slam a company as a "scam" it would carry more weight if they
used
a real e-mail address and if it came from an individual that has
actually
posted on Groupstudy before. However, I need to be fair and will just
assume
that this user may have just setup a new e-mail account wrong and did
not
intentionally try to hide behind a fake e-mail address for their first
post
on Groupstudy.

Yes, we have fallen behind in creating new labs, as we have been busy
creating new labs and setting up hardware for our Security CCIE products
that we are now just releasing. We have also been busy with several
other
new products and upgrades that will become available next year. Expect
to
see lab 21 for our R&S lab subscription in the next few weeks. Our
subscription product started with 7 labs and we have added 14 new labs
since
then with another on the way very soon.

In addition, our practice labs 1-20 are in the process of being upgraded
to
the new 1-day format, removing old content on labs 1-14, and fixing all
known errors. All new labs will follow this format as they are released.
This upgrade will be offered as a complete set, when they are all
complete.
Keep in mind that the 1-day or 2-day format issue is really a non-issue.
The
content for both lab formats is the same. Now you just have your lab
cabled
for you with same basic configs started and less time to work with. Your
preparation and knowledge for both exam types is exactly the same. The
only
minor difference is the requirement for increased speed as you have less
time and the lack of a dedicated troubleshooting section. Subscription
customers will receive all updates and new labs as they are released for
free except for the cost of delivery.

I do agree with part of your post. CCIE candidates should use
Groupstudy's
open forum to exchange study ideas, strategies, labs, info, etc. I have
always recommended that all CCIE candidates join Paul's CCIE mailing
list,
as it is a great resource. I have never recommended that a CCIE
candidate
use our lab material as their only resource for preparation as any topic
is
fair game on the lab exam and you may have some weak areas that need
more
practice. However, as our reviews at
(http://www.ccbootcamp.com/customer_reviews.htm) show many individuals
have
had great success working our company with many passing on their pass
attempt. The road to CCIE is very difficult and most individuals will
have
to use a variety of resources to be successful.

Did I create my company to make a buck? Heck yes. I didn't setup a
training
room, 3800 sq. feet of office space, 5 remote racks, 6 classroom racks,
a
development rack, hire people, etc. just for fun. There are many
companies
that offer training services to help individuals to get certified in a
variety of computer technologies from a range of different
manufacturers. We
are no different.



Marc Russell CEO
Network Learning, Inc.
1677 W. Hamlin
Rochester Hills, MI 48309
Ph# 248-299-8114
www.ccbootcamp.com
[EMAIL PROTECTED]



""Jason""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I was looking in to purchasing the labs from ccbootcamp, but correct
me
> if I am wrong,  they look outdated and full of annoying little errors.
> Ccbootcamp says that
> it is a subscription but how many have they sent out in the last 3
> months? Zero!  Or even the last six months. One!  This just looks to
be
> a big scam!  These guys
> wouldn't last a minute if there was some real competition, who made
> worth while labs.  What a joke.  Maybe, since we are all in this
> together, we could collectively make
> some labs and share them among the group.  I will release some of the
> ones I have been working on for FREE after I refine the

RE: CCIE Lab - Definitive Books

[Kevin Welch]

Ccie Professional Development : Cisco Lan Switching and the BCMSN book

Add those to your list.


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Adrian Chew
> Sent: Sunday, August 20, 2000 9:48 AM
> To: [EMAIL PROTECTED]
> Subject: CCIE Lab - Definitive Books
>
>
> I'm trying to narrow down the number of books/material from the choices
> available - specifically for CCIE lab preparation.  Here's what I've
> compiled so far:-
>
> Cisco Certification - Caslow
> Internet Routing Architectures (I'm waiting for that 2nd ed. book!!!
> when???) - Halabi
> Routing TCP/IP, 2nd Ed. - Doyle
> Advanced IP Routing In Cisco Networks - Slattery/Burton
> CCIE Lab Study Guide - Hutnik (not definitive, but for more practice labs)
> Network Design and Case Studies, 2nd Ed. - Cisco Press
> CCIE Bootcamp Labs
>
> Books I'm thinking about but not sure if I should consider:-
>
> OSPF Network Design Solutions
> EIGRP Network Design Solutions
> Large Scale IP Network Solutions
> Internetworking SNA with Cisco Solutions
>
> I'm leaning towards the latter 2 as Routing TCP/IP already does
> an excellent
> job for EIGRP/OSPF.  As for SNA - its just plain hard to find anything
> Cisco/SNA.  Any other thoughts/suggestions?
>
> Regards,
> Adrian
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: cisco 2504 problem

[Kevin Welch]

Do a show ver make sure the config register is 0x2102. If it is not go into
config mode and change it with the config-register command.

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> [EMAIL PROTECTED]
> Sent: Sunday, August 20, 2000 5:59 PM
> To: [EMAIL PROTECTED]
> Subject: cisco 2504 problem
>
>
> ok techies...
> here is a problem i been trying to sort out for a quite a little time now
> this router I purchased recently seems ok nothing is broken boots ok now
> the problem is everytime it boots up it has forgotten what the last
> configuration was I mean I always make config changes and give the comman
> "copy run star" and no error pops up but when I turn it off and back on
> again and there is stupid message asking me to redo the whole damn config
> file could someone tell me if it is the Flash or the IOS itself or
> something else that could be wrong with the router.
>
> Regards,
> Amir
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Router type questions

[Kevin Welch]

I would recommend starting out with a 2500 or 2600 series router.  However,
you could get away with just purchasing equipment time online or buying one
of the routersim packages available.  The routersim packages are fairly
cheep and provide enough of a foundation to get you started, and then find a
company that is willing to provide training and/or Lab equipment for you.

Well thats my opinion anyway.

-- Kevin Welch

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Stance Nixon
> Sent: Sunday, August 20, 2000 3:00 PM
> To: Cisco Study Group
> Subject: Router type questions
>
>
> Hi all:
>
>   I am working on my CCNA and eventually my CCNP. If you
> could afford a
> router which would you recommend to help learn those certs?
>
>   Money is a limitation.
>
>
> Thanks
>
> Stance
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Is this correct in cisco switch?

[Kevin Welch]

That comment is not totally correct.  Some access layer switches do take set
based commands.  the 1900 and all the XL series routers use an ios based
syntax.

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> jeongwoo park
> Sent: Monday, August 21, 2000 4:21 PM
> To: Groupstudy
> Subject: Is this correct in cisco switch?
>
>
> HI all
> Is this comment correct?
> Comment:
> All access layer switches take only IOS based command.
> All distribution layer switches take only set based
> command?
>
> Could someone clarify this?
>
> Thanks in adv.
>
> jeongwoo
>
>
> __
> Do You Yahoo!?
> Yahoo! Mail – Free email you can access from anywhere!
> http://mail.yahoo.com/
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Cisco + Checkpoint

[Kevin Welch]

I have done this before and I have some checkpoint documents that may be of
use...  Please check the following link a little later tonight.

http://my.ispchannel.com/~kwelch/Cisco

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> vr4drvr .
> Sent: Monday, August 21, 2000 12:30 PM
> To: [EMAIL PROTECTED]
> Subject: OT: Cisco + Checkpoint
>
>
> Hi.  Has anyone set up a VPN with a cisco router going to a CheckPoint
> firewall?  I'm sure that it can be done using standards based
> configs, but
> are there any issues that I should research before the imp?  TIA.
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Cisco + Checkpoint

[Kevin Welch]

I have done this before and I have some checkpoint documents that may be of
use...  Please check the following link a little later tonight.

http://my.ispchannel.com/~kwelch/Cisco

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> vr4drvr .
> Sent: Monday, August 21, 2000 12:30 PM
> To: [EMAIL PROTECTED]
> Subject: OT: Cisco + Checkpoint
> 
> 
> Hi.  Has anyone set up a VPN with a cisco router going to a CheckPoint 
> firewall?  I'm sure that it can be done using standards based 
> configs, but 
> are there any issues that I should research before the imp?  TIA.
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
> 
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Pix VPN

[Kevin Welch]

Title: Pix VPN



Hi. I 
am interested in helping you with your problem. 
 
To 
address the point of revealing internal address ranges... well if the traffic is 
destined for the remote network then they already know the remote address range 
dont they?  In order to do a VPN the address needs to be the inside address 
of the pix.  Of course you could toss a router behind the pix and do NAT 
after the VPN address leaves the pix, but a good acl and security polciy could 
be used to tighten down the access.
 
IPSEC 
encapsulates the packet before it leaves the outside interface of the pix, so 
for example, IF a packet form 10.101.0.2 is traveling over an IPSEC VPN to 
10.102.0.4, the entire packet is encapsulated and sent outside of the public 
interface of the pix to the remote peer.  At this point the packet is then 
decapsulated and forwarded out the clean interface of the pix to its 
destination.  The problem you would run into if both networks are the same 
is if you have a device active on both sides of the network with the same IP 
address.  You could however, set up a router to do NAT before the packets 
are encapsulated.
 
I hope 
this helps.. if you have any questions go ahead and e-mail 
me.
 
-- 
Kevin Welch
 

    ---Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Price, 
  JamieSent: Wednesday, August 23, 2000 3:36 PMTo: 
  [EMAIL PROTECTED]Subject: Pix VPN
  Hi Guys, 
  Although the Pix is not on the R&S lab i am 
  hoping someone can help me out. 
  I want to set up a Pix to Pix VPN (I admit this is 
  a real lifer - I have a client that wants a VPN between Pixs to their 
  client).  I want traffic from all hosts on site A to be encrypted when 
  destined for specific hosts at site B and vice versa, traffic from all hosts 
  on site B to be encrypted when destined for specific hosts on site A.  
  I'm having a bit of a blockage though when trying to prepare for the upcoming 
  configs.  I've looked all over CCO but can't seem to find the answer I'm 
  looking for.  
  According to the docs, when you create tha 
  access-list used for determing traffic to be encrypted, it is formed as 
  thus:
  The source address range (or host if desired) is 
  derived from the network attached to the inside interface of the local 
  Pix.  
  The destination address range (or host) is derived 
  from the network attached to the inside interface of the remote Pix. 
  
  This is the important question. 
  What if you don't want to reveal your internal 
  range to the remote site (assume the other end is untrusted and you are 
  limiting their inbound traffic to one port/one host via a conduit).  Can 
  you specify the destination in your access-list as the external (statically 
  translated) address that is configured within the Pix for that 
  host??
  Also, and this is not the case in this scenario but 
  a spin off question, what if both sites are running the same internal ranges 
  are non-routable and overlapping - i.e. they both are using 10.1.1.x 
  internally (I realize there are some configuration steps for overlapping 
  addresses within IOS NAT but can the same be applied to a Pix??).  I 
  guess I'm having problems comprehending how a packet can cross the Internet to 
  a private nonroutable address.  Or am I on the wrong track - is maybe all 
  traffic destined for that range actually sent to the peer address which is the 
  external address of the Pix - but then wouldn't that cause a problem if both 
  internal ranges were the same?
  Hopefully someone can help out - but be warned, I'm 
  keen to get a good grasp on this so the thread may drag out :)  Reply to 
  me personally if you like rather than to the group.
  Thanks 
  Jamie 

RE: CCIE WRITTEN

[Kevin Welch]

I think this guy abused the mailing list and spammed us.

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> luobin Yang
> Sent: Sunday, August 27, 2000 12:16 PM
> To: [EMAIL PROTECTED]
> Subject: Re: CCIE WRITTEN
>
>
> I also received it, but I have no intention to try it out at the moment.
>
> Luobin
>
> "McCallum, Robert" wrote:
>
> > Hi,
> >
> > I got this email through the other day.  Any one else received
> it or indeed
> > tried it out?
> >
> > Cheers
> >
> > begin
> >
> > http://www.cciewritten.bigstep.com/
> >
> > The collection of material is only $49.95 and is delivered to
> your e-mail
> > account
> > within 24 hrs of your payment! Wow! Order now and don't delay!
> If you are
> > not
> > 100% satisfied (and do not pass the CCIE written exam), we will
> return your
> > entire
> > payment!
> >
> > Also, after your initial purchase, you will receive FREE updates for the
> > lifetime of this product when available!!!
> >
> > Robert McCallum
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Starting BCMSN - suggestions?

[Kevin Welch]

CCIE Cisco LAN Switching Book.  Its fairly easy to read too.

IBSN 1-57870-094-9

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Seth Wilson
> Sent: Saturday, September 02, 2000 8:47 PM
> To: [EMAIL PROTECTED]
> Subject: Starting BCMSN - suggestions?
>
>
> Hey everyone,
>
> Well, after a longer-than-intended respite after passing my CCNA,
> I plan on
> going after the CCDA and starting on my CCNP tests.  I'm working on the
> BCMSN now.  I have the Cisco Press book for the course, written by a woman
> whose name escapes me at the moment.  Just wondering if anyone can suggest
> any resources for this test, or can extemporize on what to expect on the
> exam.  Many thanks in advance.
>
> ~Seth~
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Port storm-control

[Kevin Welch]

I am playing around 
with a switch and looking at the storm-control feature.  I cannot seem to 
find any reference on what good values are for thresholds to indicate a 
broadcast storm.  I am currently using 200 broadcasts per second and I 
think thats about right, but I would like to know what the rest of you 
think. 
 
Thanks, 

 
-- Kevin 
Welch

RE: Port storm-control

[Kevin Welch]

I am actually trying to prevent problems from occuring... I had a situation
that was work related that has caused me to rethink the need to make sure
that broadcasts are kept in check.  I had a localdirector connected to a
switch and I had two of the localdirector ports connected to the same vlan
due to a misread on the design.  Now I had 4 localdirectors setup this way,
each generated approximately 40 MBits/sec of ARP requests.  This actually
managed to take down the MSFC on the 6509 that was trunked to my 3548.  It
was actually fairly interesting, and I have learned quite a bit as a result
of this, but I am actually trying to lab a similar setup and properly filter
broadcasts to keep this from happening again...  I guess in effect I have
answered my own question... I need to determine the most appropriate number
of broadcasts based on my network.

Just a tip for those of you who get to play with localdirectors... I wouldnt
recommend hooking up two inside ports on the same vlan, unless you like arp
storms.

-- Kevin


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Howard C. Berkowitz
> Sent: Monday, September 04, 2000 4:08 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Port storm-control
>
>
> "Kevin Welch" <[EMAIL PROTECTED]> wrote
>
> A broadcast frame takes up the same bandwidth as any other frame of
> the same length.  The urban legend that "broadcasts consume
> bandwidth" really refers to broadcast storms, so you are looking at
> the correct problem.
>
> A NetBEUI host that sends seven name resolution broadcasts when one
> would do is taking up the bandwidth that would be associated with
> seven more rational hosts.
>
> The more common effect of broadcasts is that they impact the CPU of
> all hosts that hear them.  CID has some old figures showing the
> effect of 10 Mbps broadcasts on a Sparc 2 host.
>
>  100 per second  3% CPU
> 1000 per second 25% CPU
> 3800 per second Host OS crashed
>
> >I am playing around with a switch and looking at the storm-control
> >feature.  I cannot seem to find any reference on what good values
> >are for thresholds to indicate a broadcast storm.  I am currently
> >using 200 broadcasts per second and I think thats about right, but I
> >would like to know what the rest of you think.
> >
>
> The more hosts in a broadcast domain, the greater the effect of a
> broadcast storm can be.  Remember that a storm on one host can
> trigger storms on others.  Without a huge amount of science behind
> it, I use about 500 per second as a basic value, but 200 is certainly
> within reason.
>
> Setting it too low, if you have something like NetBEUI, can interfere
> with operations.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: high speed internet access over satellite dish?

[Kevin Welch]

You may want to check out www.vsat.net.  Thats the only place I know of off
the top of my head.  If you are very dependent on low latency, you should
probably look at either land lines or LEO (Low Earth Orbit) solutions.

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Yee, Jason
> Sent: Monday, September 04, 2000 7:36 PM
> To: cisco@groupstudy. com (E-mail)
> Subject: high speed internet access over satellite dish?
>
>
> hi ,
>
> Anyone got any knowledge on establishing high speed internet access over
> satellite dish?
>
> thanks b4 hand
>
> Jason
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Cat5k/6k flash cards in a notebook

[Kevin Welch]

I was wondering if 
it is possible read/write to the pcmcia flash card used in the cat5k/6k models 
from a standard pcmcia port on a laptop.  If anyone knows where I could 
find any infomration on doing so I would appreciate it.  

 
Thanks
 
-- Kevin 
Welch

RE: ISL on sub-if

[Kevin Welch]

I will be trying this between a 3524 and a 2621 tomorrow... I will let you
know my findings.

-- Kevin Welch

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> whatshakin
> Sent: Tuesday, September 05, 2000 1:27 AM
> To: [EMAIL PROTECTED]
> Subject: Re: ISL on sub-if
>
>
> Cmon Jay, of course I tried sub interface config model.  Also, note I am
> using a 2621 which has two 10/100 ports!  Out of curiosity, what feature
> sets are those images you mention?
>
> Cheers
>
> - Original Message -
> From: Jay Hennigan <[EMAIL PROTECTED]>
> To: whatshakin <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Tuesday, September 05, 2000 12:55 AM
> Subject: Re: ISL on sub-if
>
>
> > On Tue, 5 Sep 2000, whatshakin wrote, in one ridiculously long line:
> >
> > > I just tried 12.0.3T3 Enterprise Plus and 12.0.4T IP Plus on a 2621
> > > and neither version has an encapsulation command available under the
> > > interface config mode.
> >
> > Did you create a sub-interface and try it there?  It works for me on
> > a sub-interface, 2621, Version 12.0(7)T, c2600-d-mz_120-7_T.bin.
> >
> > You must have:
> >
> > 100-base-T or 10/100 or Gig ports
> > A "Plus" image
> >
> > --
> > Jay Hennigan  -  Network Administration  -  [EMAIL PROTECTED]
> > NetLojix Communications, Inc.  NASDAQ: NETX  -  http://www.netlojix.com/
> > WestNet:  Connecting you to the planet.  805 884-6323
> >
> >
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Etherchannel on a XL series.

[Kevin Welch]

I cant seem to find 
documentation on configuring a XL series witch for etherchannel.  Could 
someone please direct me to such information. or sample configs I would 
appreciate it.
 
Thanks
 
-- Kevin 
Welch

RE: Etherchannel on a XL series.

[Kevin Welch]

I 
answered my own question I think:
http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35xp/scg/kiconfig.htm#xtocid109327
 

  -Original Message-From: Kevin Welch 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 2000 
  7:01 PMTo: [EMAIL PROTECTED]Subject: Etherchannel on 
  a XL series.
  I cant seem to find 
  documentation on configuring a XL series witch for etherchannel.  Could 
  someone please direct me to such information. or sample configs I would 
  appreciate it.
   
  Thanks
   
  -- Kevin 
  Welch

RE: Etherchannel on a XL series.

[Kevin Welch]

I also 
found the link for the LAN Switching Command Reference, which was what I 
wanted... I will post it just in case someone else is interested.  I have 
to say that navigating CCO is an art form in its own right.
 
http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35sa6/cmdref/macrcli.htm#xtocid2498845
 
-- 
Kevin

  -Original Message-From: Kevin Welch 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 2000 
  7:21 PMTo: [EMAIL PROTECTED]Subject: RE: Etherchannel 
  on a XL series.
  I 
  answered my own question I think:
  http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35xp/scg/kiconfig.htm#xtocid109327
   
  
-Original Message-From: Kevin Welch 
[mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 05, 
2000 7:01 PMTo: [EMAIL PROTECTED]Subject: 
Etherchannel on a XL series.
I cant seem to 
find documentation on configuring a XL series witch for etherchannel.  
Could someone please direct me to such information. or sample configs I 
would appreciate it.
 
Thanks
 
-- Kevin 
Welch

catOS image differences...

[Kevin Welch]

Could someone please 
help me understand the difference between catOS images and catOS images with a 
CSX in the description.
 
-- 
Thanks

RE: Does it have to be 255?

[Kevin Welch]

Not to mention your RFC1918 Address ranges.

-- Kevin Welch

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> ElephantChild
> Sent: Tuesday, September 05, 2000 5:59 PM
> To: Cthulu, CCIE Candidate
> Cc: [EMAIL PROTECTED]
> Subject: Re: Does it have to be 255?
>
>
> On Tue, 5 Sep 2000, Cthulu, CCIE Candidate wrote:
>
> > why shouldn't I do this (see below):   Granted, classful
> routing protocols
> > such as RIP V1 would probably sicken and be unable to handle
> something like
> > this, but what of EIGRP and OSPF?  IS-IS?  Something like this
> would be good
> > for aggregation purposes (BGP)??
> >
> > Technically, doing the straight math, we have two subnets
> containing all the
> > host addresses in the free world!!!  Wowza!  ("Bob, we just
> lost Wichita!")
> >
> > 0.0.0.0 to 127.255.255.255 (subnet number and its associated broadcast
> > address, first host address would be 0.0.0.1)
> > 128.0.0.0 to 255.255.255.255 (subnet number and its associated broadcast
> > address, first host address would be 128.0.0.1)
>
> 128.0.0.0/1 includes the multicast address range (224.0.0.0/4) aka
> "class D" and the reserved address range (240.0.0.0/16) aka "class E"
> (IIRC). This is a Bad Thing(tm).
>
> --
> Bungee jumping and skydiving are for wimps. If you want to experience
> true gut-wrenching terror, have children. --Dusty Rhoades.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

FCS errors, collisions, etc

[Kevin Welch]

Could someone help me establish a baseline...

What ratio of FCS errors should I expect on switched network?

What ratio of collisions, including multiple and late collisions?

How do these stats tie together? 

And one more on kind of the same track...

IF I have a router set up with an IP helper address and the data is being
forwarded in a unicast fashion to the DHCP server, how does a dhcp server
respond to the unicast packet received from the router?  Does it in turn
respond by broadcast or in a unicast fashion?

The reason I ask, is I am seeing a fair number of the above error types on an
ethernet switch and I am attempting to find the source of the problem..  Any
information on the above or relating to the above is appreciated.

-- Kevin

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: [Re: CCNP 1.0 VS CCNP 2.0]

[Kevin Welch]

Yes, but remember you can always go back and the 2.0 exams you missed and get
your 2.0, so you could easily take the acrc in june, then take the BSCN when
its released.

-- Kevin


"Annlee Hines" <[EMAIL PROTECTED]> wrote:
You will be 1.0 if you do any of the 1.0 track. A 2.0 is all 2.0 exams.

Annlee

subramanian nallasivam wrote in message
<[EMAIL PROTECTED]>...
>Hi ,
>
>  I am planning to take ACRC this june. I have a small
>doubt. If I take ACRC this june and the rest of the
>other exam(CIT,CLSC,CMTD) after november will I get
>the certificate CCNP 2.0 or CCNP 1.0
>
>Thanks in advance for the replies.
>
>-Subi, CCNA
>
>__
>Do You Yahoo!?
>Send instant messages & get email alerts with Yahoo! Messenger.
>http://im.yahoo.com/
>
>___
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>---


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Catalyst 2924-M-XL-EN for say on ebay

[Kevin Welch]

I have an extra catalyst switch still in the factory sealed box I am selling
on ebay.  If this should not be posted to this group I apologize.

http://cgi.ebay.com/aw-cgi/eBayISAPI.dll?ViewItem&item=334786311


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Cross Cabel

[Kevin Welch]

http://www.hwb.acc.umu.se/ca_Ethernet10BaseTCrossover.html

and

http://www.hwb.acc.umu.se/ca_Ethernet100BaseT4Crossover.html

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Anand Sudula
> Sent: Thursday, May 18, 2000 8:20 PM
> To: [EMAIL PROTECTED]
> Subject: Cross Cabel
> Importance: High
>
>
> All
> Can any one tell me what is exactly a cross cable is and any reason why it
> is required to connect to two switches (I have tried with cisco switches ,
> and I need the cross cable to connect my cat5500 and 1900 switch)
> Thanks in advance
> Anand
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: stupid question

[Kevin Welch]

Doesnt the console cable need to be a roll over cable?
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_fix/cis2500/2501/
2500ug/pin.htm

(watch the wrap on the above link)

Or you could do something like this:
http://www.hwb.acc.umu.se/ca_CiscoConsole9.html


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Sadguna Kumar Dasari
> Sent: Thursday, May 18, 2000 11:10 PM
> To: [EMAIL PROTECTED]
> Subject: Re: stupid question
>
>
> The above replys and if you don't have the "light blue console cable" just
> make a regular 8 conductor straight thru cable. But you will have
> to end up
> using rj45 to db9/db25 adapter (cisco's or the one with
> compatible pinout).
>
> Kumar Dasari
> "Quinton Maynard" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > i can't even believe i have run into this, but getting into my new 2509
> for
> > the first time. in the past i have always telnetted into
> routers using the
> > ip address. how do i get in on the console port? is it hyperterminal?...
> > detailed explanation would be really appreciated, i am feeling dumb
> tonight.
> > :)
> > thanks
> > quinton
> > 
> > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > ---
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: NAT Security

[Kevin Welch]

Just to provide my opinion on Zone Alarm:

I think Zone Alarm is a nice piece of software, it is by no means fool
proof, but its application specific settings make it a very nice solution.
With Zone Alarm it is very easy to allow one application access to the net
while denying another.  For example on my machine at work I can allow
Outlook to Access the intranet, but keep it from accessing the Internet.  I
can allow my browser to browse both the Internet and intranet.  And I can
make sure our lousy sysadmins cannot use SMS to spy on my work habbits by
denying SMS access to any network resources at all.  This can be both a boon
and burden so like any security solution its best to expect it to fail, at
least that way you are not suprised when it does :-)

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> ElephantChild
> Sent: Thursday, May 18, 2000 10:42 PM
> To: Mortensen, Terrill
> Cc: '[EMAIL PROTECTED]'
> Subject: Re: NAT Security
>
>
> On Thu, 18 May 2000, Mortensen, Terrill wrote:
>
> > I received a message from my ISP that I did not have to worry about any
> > network attacks "since the router uses NAT it is impossible for
> anyone from
> > the Net to hack in to your box".
>
> They're wrong.
>
> > I thought that NAT made it more difficult to break into due to
> the nature of
> > how it works, but it is not a firewall and does not secure your
> network???
>
> You're right.
>
> > I could not find any information on Cisco's site that specifically said
> > either way (or any site for that matter).
> >
> > Can someone point me to a site or link on Cisco's site that specifically
> > states that NAT is secure or is not secure.
>
> Search the archives of this here fine list. It's been discussed many
> times already. :-)
>
> > The ISP also pointed me to a piece of software called ZoneAlarm from
> > www.zonelabs.com .  Has anyone used
> this and does
> > it protect your network from hacking if configured properly?
>
> Never used it, but calling any network security gizmo "iron-clad" and
> "easy to use" in the same sentence raises loud alarms for me. OTOH, they
> don't refer to script kiddies as "hackers", which seems to indicate
> above-average cluedness. And since it targets windoze machines, I can't
> try it out, so my uninformed opinion will have to remain that.
>
> > My confidence in my ISP and their tech support is not complete
> and I just
> > want to know the facts.
>
> They *do* sound weak on security issues, but so do other decent ISPs. As
> long as you don't let them be your sole source for security information,
> or for protecting your machine, that doesn't have to be a reason to move
> away.
>
> HTH.
>
> --
> "Now, I believe there are some things that 7 year olds shouldn't have to
> be exposed to yet, and the entry in the dropdown menu he was perusing
> that said "emacs" is one of those things."  --AdB in SDM
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE:

[Kevin Welch]

This question has been answered many times throughout the archives of this
group... actually I am sure this has been addressed in the last week.

I would recommend reading the FAQ under the training section of the CCO for
the answer as I do not feel like repeating it right now.

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> steve billy
> Sent: Friday, May 19, 2000 1:36 AM
> To: [EMAIL PROTECTED]
> Subject:
>
>
> Hello Gurus,
>
> Can anyone please tell me the answer for the
> following?
>
> 1. CCNP 1.0 exams can be taken till July 31, 2000. If
> for some reason, I am not able to finish all 4 exams
> by July 31, then can I take the corresponding exam in
> the new Series CCNP 2.0? Suppose if I clear all exams
> except CMTD then if I take BCRAN in 2.0 series, will
> my CCNP show as complete?
>
> 2. How soon I will have to recertify again if I clear
> all exmas of CCNP 1.0 by July 31, 2000.
>
> Thanks in advance.
>
> Steve
>
> __
> Do You Yahoo!?
> Send instant messages & get email alerts with Yahoo! Messenger.
> http://im.yahoo.com/
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: config files down the Console cable

[Kevin Welch]

Yes, this can be done by initiating an xmodem download to the router.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/fun_c
/fcprt2/fcimages.htm#xtocid901038

(watch the wrap on the above)

-- Kevin



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Janine Williams
> Sent: Friday, May 19, 2000 1:50 AM
> To: [EMAIL PROTECTED]
> Subject: config files down the Console cable
>
>
> Hi peeps,
>
> Thanks for the response, but i think i need the make
> my questions a bit clearer.
>
> Question.  When a config is copied from a router  to
> TFTP server, what format is this file? (is it just
> *.txt ???)
>
>
> Now, suppose I'm physically connected to a newly
> out-of-the-box router via the light blue console cable
> and in a Hyperterminal session, say no to all the
> setup prompts.  Now suppose I have a config file on my
> PC that is the same format that it would be on the
> TFTP server.
>
> Is there a way that i can send this config file as a
> whole directly to NVRAM, or RAM, when connected via
> the console port?
>
> I read some people's responce about cut and pasting,
> can someone just explain how you do this, i haven't
> tried this yet.  Do you just cut and pastes the whole
> config or do it in stages?
>
> Thanks in advance
>
> __
> Do You Yahoo!?
> Send instant messages & get email alerts with Yahoo! Messenger.
> http://im.yahoo.com/
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: CCNA worthless?

[Kevin Welch]

I would have to say it depends on the person.  If you want nothing more than
a piece of paper certification out of training then thats all you will get.
The cert may get you the interview, your knowledge and exerpience will get
you the job and pay you want.

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> paul doyl
> Sent: Friday, May 19, 2000 8:31 AM
> To: [EMAIL PROTECTED]
> Subject: CCNA worthless?
>
>
> Hello people
> Yesterday a we interveiwed a guy for a job for general network hardware
> support. He had a CCNA gained from CCNA boot camp (4 days). The thing is
> (from what I hear) he had very little idea and couldn't answer
> the simplest
> questions, long blank pause after being asked what a subnet was
> or explain
> what a subnet mask was. Now I'm concerned as I actually had to
> study quite
> hard to get my CCNA. Does anyone have similar tales or stories to
> tell about
> what goes on at these 'boot camps'?
> Thanks in advance.
> Bodey
>
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: CCNA worthless?

[Kevin Welch]

Now I want to say that it is not my intent to start a flame war on this
group, or to belittle anyone.  I am just stating my opinion and would not
mind some alternate opinions.

I can understand how having an MCSE or Cisco certification can be helpful in
landing you a job, but I dont see how the two exactly mesh together.  In any
company of significant size you will be dealing NT servers OR Cisco routers.
The primary responsibilities of an MCSE and CCNP/DP/IE vary by quite a large
margin.  So if you just want to have basic understanding at the CCNA level,
then I could see how it would be good to get both.  However, If you are more
interested in persuing a career in network engineering then focus on network
and telco experience over server experience.  While I do think it it best to
diversify and not overspecialize, I think it is important to determine in
what field you wish to work.  I know this may sound kind of idealistic, but
the last thing I look for in a career decision is salary.  I would rather be
happy and making less money, than having to deal with a work environment
that was not friendly and cooperative.

My 2 cents

-- Kevin

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> JohnMail
> Sent: Friday, May 19, 2000 10:34 AM
> To: Brian Lodwick; [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Re: CCNA worthless?
>
>
> Brian:
>
> I still think that you should stay with NT/2000.  Its installation base is
> far too large to ignore.  CISCO is cool as we all know, but Cisco & MCSE
> will give you much more competitive advantage in the world of work.  Both
> certs over either one!  Also do not forget that Microsoft and CISCO have
> already signed a major collaberation deal.  The people who can integrate
> systems or run interoperable networks are those with skills in both CISCO
> and MCSE spheres.
>
>
>
>
>
> - Original Message -
> From: Brian Lodwick <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Friday, May 19, 2000 6:59 PM
> Subject: RE: CCNA worthless?
>
>
> >
> > I keep telling myself that knowledge and experience will get me
> the job I
> > want as I work here and troubleshoot problems everyday for everyone. I
> want
> > to be configuring routers making crazy cool batch config files,
> analyzing
> > traffic patterns, applying queueing, all the stuff I'm learning in the
> > books. I decided to drop the NT admin idea about a year after
> getting MCSE
> > get into this routing switching world. I feel like I would've
> been working
> a
> > much better job by now in NT administration and making more money, but I
> > really want to do all this crazy Cisco stuff. I hope it pans out in the
> long
> > run.
> > >>>Brian
> >
> >
> > >From: "Kevin Welch" <[EMAIL PROTECTED]>
> > >Reply-To: "Kevin Welch" <[EMAIL PROTECTED]>
> > >To: "paul doyl" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
> > >Subject: RE: CCNA worthless?
> > >Date: Fri, 19 May 2000 10:07:04 -0700
> > >
> > >I would have to say it depends on the person.  If you want nothing more
> > >than
> > >a piece of paper certification out of training then thats all you will
> get.
> > >The cert may get you the interview, your knowledge and exerpience will
> get
> > >you the job and pay you want.
> > >
> > >-- Kevin
> > >
> > > > -Original Message-
> > > > From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> > > > paul doyl
> > > > Sent: Friday, May 19, 2000 8:31 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: CCNA worthless?
> > > >
> > > >
> > > > Hello people
> > > > Yesterday a we interveiwed a guy for a job for general network
> hardware
> > > > support. He had a CCNA gained from CCNA boot camp (4 days).
> The thing
> is
> > > > (from what I hear) he had very little idea and couldn't answer
> > > > the simplest
> > > > questions, long blank pause after being asked what a subnet was
> > > > or explain
> > > > what a subnet mask was. Now I'm concerned as I actually had to
> > > > study quite
> > > > hard to get my CCNA. Does anyone have similar tales or stories to
> > > > tell about
> > > > what goes on at these 'boot camps'?
> > > > Thanks in advance.
> > > > Bodey
> > > >
> >

RE: Radia Perlman

[Kevin Welch]

Try this link:
http://www.manta.ieee.org/groups/802/1/


-- Kevin
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Deepak Sharma
> Sent: Saturday, May 20, 2000 4:48 PM
> To: cisco
> Subject: Radia Perlman
> 
> 
> Hi
> 
> does anyone have or know the website were i can find a white paper on
> Spanning Tree Protocal.  I know she has a book called
> "interconnections", but i don't need all that information.
> 
> Just a plain simple RFC/whitepaper on Spanning tree Protocal.
> 
> thank you in advance...
> 
> Deepak
> 
> 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]