Re: Unknown Error [7:47822]
On the TAC site there is an Error Message Decoder (account needed). It is great for helping you with the generated errors. Kim From: Reza Date: 2002/07/01 Mon AM 03:36:04 EDT To: [EMAIL PROTECTED] Subject: Unknown Error [7:47822] Hi Group I got this message from my Cisco 3662 fastethernet interface , : %AMDP2_FE-5-LATECOLL: FastEthernet0/1 transmit error my cables , HUB , are working properly , but this still hapens. plz tell me what this erros means .. Thanks Reza Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47829t=47822 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Re: Any last minute words of advice? [7:47798]
Thank you for your reply Theo. It takes a bit of the edge off. Tests make me a bit ansi, crouchy ..oh I know the word, but it is not good to put into an email. Don't worry about the censoring. The NDA is there for a reason and if it keeps the standard(s) of the certification(s) high then I am all for it. High standards can generate high salaries in some instances, :). I lived too long as a struggling artist and love the benefits. ;) Kim From: [EMAIL PROTECTED] Date: 2002/06/30 Sun PM 08:37:59 EDT To: LongTrip CC: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: Any last minute words of advice? [7:47798] It is not as hard as you might think. I passed it with soaring marks when I thought it was going to be 10x harder than it was. New NDA is censoring me.Moderator---ever think of locating the server outside of the States so we can enjoy the 1st amendment??? If you freak out, use Boson #1. Theo LongTrip Sent by: [EMAIL PROTECTED] 07/01/2002 06:49 AM Please respond to LongTrip To: [EMAIL PROTECTED] cc: Subject:Any last minute words of advice? [7:47798] Tuesday morning I am writing the VPN portion of the CSS1. I thought it would be a good idea to write it while the course I took is still fresh in my mind. I have gone over the course material and searched through CCO looking for other relevant data that may happen to be on the exam. Has anyone taken this exam? I am not looking for questions or hints, just, was it easier than you thought? or should I be nervous and study like mad type answers? TIA Kim Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47815t=47798 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: RE: Passed CCIE written at Networkers in San Diego [7:47791]
Chalk it up to the newbie to ask What is the PS CCIE book? Kim From: Frank Merrill Date: 2002/06/30 Sun PM 12:44:23 EDT To: [EMAIL PROTECTED] Subject: RE: Passed CCIE written at Networkers in San Diego [7:47764] BTW: I highly recommend attending the PS session (or atleast trying to get your hand on a copy of the PS CCIE book) Unfortunately the company I'm with isn't going to pay for the PS, and so I actually won't be attending, but I grabbed the PDF of the presentation from last years Networkers, and I'l likely do the same for this years one. If that is what you are referring to when you mention PS CCIE book!? Good Luck! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47791t=47791 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: RE: Passed CCIE written at Networkers in San D [7:47791]
Thanks... For me that will have to be a next year thing. :) Kim From: Oleg Oz Date: 2002/06/30 Sun PM 04:50:33 EDT To: [EMAIL PROTECTED] Subject: Re: RE: Passed CCIE written at Networkers in San D [7:47791] Sorry, I should have been more clear. What I meant to say was the CCIE Power Session Manual - you get this when you attend the CCIE power session at Networkers (Cisco's networking event) Oleg Oz. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47795t=47791 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Any last minute words of advice? [7:47798]
Tuesday morning I am writing the VPN portion of the CSS1. I thought it would be a good idea to write it while the course I took is still fresh in my mind. I have gone over the course material and searched through CCO looking for other relevant data that may happen to be on the exam. Has anyone taken this exam? I am not looking for questions or hints, just, was it easier than you thought? or should I be nervous and study like mad type answers? TIA Kim Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47798t=47798 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Written DPT/SRT - huh? [7:47807]
Do you mean DPT/SRP? If so, it is not that difficult to understand, from a support point of view. My last employer had DPT/SRP rings deployed in different cities. It made moving information around easier and less expensive. From a technical point of view I would have to reread the documentation to answer that side of the question. CCO has a few good papers on what it is and how it functions. There is a white paper at this URL: http://www.cisco.com/warp/public/cc/techno/wnty/dpty/tech/dptm_wp.htm. If it is SRT then please ignore the above information. Kim From: Nick Lesewski Date: 2002/06/30 Sun PM 08:59:01 EDT To: [EMAIL PROTECTED] Subject: CCIE Written DPT/SRT - huh? [7:47807] On the requirements for new CCIE Written Beta they listed DPT/SRT under the WAN section, but I can't find any references these in the groupstudy archives or on the Cisco website. Anybody have any idea what they might be asking about? NIC _ Send and receive Hotmail on your mobile device: http://mobile.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47817t=47807 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CSS1 exams [7:47308]
Recently I had the pleasure of taking one of the courses CSVPN via a training partner. Most of the course material is echo'd on the cisco site. http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur_c/scprt4/index.htm If you step down a layer from that directory you will find another set of docs that may help you with other sections of the CSS1. Other than that the instructor I had mentioned reading the Safe Blueprint. Or check out http://www.cisco.com/warp/public/707/index.shtml As mentioned, I am not sure of the other sections of the course but those sites may help. Don't forget hands on is a good teacher. Just my $0.02 Kim From: [EMAIL PROTECTED] Date: 2002/06/24 Mon PM 03:20:31 EDT To: [EMAIL PROTECTED] Subject: CSS1 exams [7:47308] Since I can't get my cheap company to send me to classes, I have to do self-study go get my Cisco Security Specialist Certification. Does anyone have any suggestion which books would help for each of the exams? Thank you in advance, Joy Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47328t=47308 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Re: HSRP [7:47177]
So you are saying the client never sees the MAC address of RouterA? It only sees the MAC address of the Virtual Router? Kim From: Michael L. Williams Date: 2002/06/23 Sun AM 11:29:24 EDT To: [EMAIL PROTECTED] Subject: Re: HSRP [7:47177] This isn't quite right. See comments below. Kim Graham wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... This brings up a question. I understand that after the initial hi I will be handling your requests please use me as your destination mac address. (Router talking to client). But what happens when the initial router fails and HSRP kicks in? After an unreachable, would ClientA send out an arp or would RouterB initiate the arping to re-establish connections to any client that was using RouterA after it noticed that RouterA was not responding? Scenario: ClientA - RouterA/B(HSRP) -- ClientB ClientA sends a packet to ClientB ClientA talks to the Virtual RouterA/B -- RouterA/B sends to ClientB RouterA/B tells ClientA -- RouterA will be handling your requests. Router A never tells Client A that Router A will be handling your requests. As you mentioned, Client A talks to the Virtual Router via the Virtual IP address which it ARPs to find the Virtual MAC. Client A never knows which of the HSRP routers is intercepting and processing it's requests When Client A sends a frame to the Virtual MAC to go out of it's gateway, both Router A and Router B hear the packet, but only the HSRP Active router will process it. So if, the janitor steps in and unplugs Router A, then after Router B misses enough Hello packets from Router A, it declares itself the Active HSRP router for that HSRP group, and at that point it starts to process the information sent to the Virtual IP/Virtual MAC. This is all transparent to the end clients, Client A in this example. So as far as Client A knows, it's still sending traffic to the Virtual IP via the Virtual MAC address it has in its ARP cache. HTH, Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47236t=47177 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Re: HSRP [7:47177]
hmmm maybe there was a misunderstanding on my part of an earlier post that mentioned The only time you see the virtual MAC address is on the original request from the host. Forwarded requests and replies don't use it. . I understood this to mean that after the initial set up of communications that the virtual mac address was not used in subsequent data transmissions. This will be one for a lab experiment on my part. Until I see it the result with my own eyes it will be a question. Kim From: Thomas E. Lawrence Date: 2002/06/23 Sun PM 01:08:17 EDT To: [EMAIL PROTECTED] Subject: Re: Re: HSRP [7:47177] Perhaps this will help explain http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/ip_c /ipcprt1/1cdip.htm#xtocid23 Yes, HSRP creates a single virtual IP and MAC pair. Yes, when one router fails, the standby router assumes control of this virtual IP and MAC pair. From an end station standpoint, nothing has changed. The end station knows the virtual IP, as configured in it's own settings, or as received as part of its DHCP configuration. In either case, no end station knows all of the IP's of all of the members of the HSRP group. Unless things have changed recently, there is no way to configure multiple default gateways on a Windows machine, at least. This is the reason HSRP, and now VRRP, were developed. If the end station does not already know the MAC of the default gateway, it sends an ARP request, as is standard operating procedure for any host seeking the MAC of an IP. The active router replies with the virtual MAC. You may also want to refer to the VRRP RFC. VRRP is the open standard intended to replace the several proprietary methods that now exist. The first couple of pages provide a good explanation and a good background of the problem to be solved. ftp://ftp.isi.edu/in-notes/rfc2338.txt Tom LongTrip wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... So you are saying the client never sees the MAC address of RouterA? It only sees the MAC address of the Virtual Router? Kim From: Michael L. Williams Date: 2002/06/23 Sun AM 11:29:24 EDT To: [EMAIL PROTECTED] Subject: Re: HSRP [7:47177] This isn't quite right. See comments below. Kim Graham wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... This brings up a question. I understand that after the initial hi I will be handling your requests please use me as your destination mac address. (Router talking to client). But what happens when the initial router fails and HSRP kicks in? After an unreachable, would ClientA send out an arp or would RouterB initiate the arping to re-establish connections to any client that was using RouterA after it noticed that RouterA was not responding? Scenario: ClientA - RouterA/B(HSRP) -- ClientB ClientA sends a packet to ClientB ClientA talks to the Virtual RouterA/B -- RouterA/B sends to ClientB RouterA/B tells ClientA -- RouterA will be handling your requests. Router A never tells Client A that Router A will be handling your requests. As you mentioned, Client A talks to the Virtual Router via the Virtual IP address which it ARPs to find the Virtual MAC. Client A never knows which of the HSRP routers is intercepting and processing it's requests When Client A sends a frame to the Virtual MAC to go out of it's gateway, both Router A and Router B hear the packet, but only the HSRP Active router will process it. So if, the janitor steps in and unplugs Router A, then after Router B misses enough Hello packets from Router A, it declares itself the Active HSRP router for that HSRP group, and at that point it starts to process the information sent to the Virtual IP/Virtual MAC. This is all transparent to the end clients, Client A in this example. So as far as Client A knows, it's still sending traffic to the Virtual IP via the Virtual MAC address it has in its ARP cache. HTH, Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47244t=47177 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Re: HSRP [7:47177]
I will keep that in mind while investigating this and other things. Thx :) Kim From: Kevin Cullimore Date: 2002/06/23 Sun PM 03:08:54 EDT To: [EMAIL PROTECTED] Subject: Re: Re: HSRP [7:47177] A useful notion to keep in mind is that hsrp and its un-patented counterparts (you'd think that during the past century, people would learn from IBM's example, but apparently that isn't the case) are profoundly asymmetric in scope: they are concerned with the host-default gateway portion of the conversation, not the return path (although implementational specifics might force them to address the return path in some circumstances). - Original Message - From: LongTrip To: Sent: 23 June 2002 2:22 pm Subject: Re: Re: HSRP [7:47177] hmmm maybe there was a misunderstanding on my part of an earlier post that mentioned The only time you see the virtual MAC address is on the original request from the host. Forwarded requests and replies don't use it. . I understood this to mean that after the initial set up of communications that the virtual mac address was not used in subsequent data transmissions. This will be one for a lab experiment on my part. Until I see it the result with my own eyes it will be a question. Kim From: Thomas E. Lawrence Date: 2002/06/23 Sun PM 01:08:17 EDT To: [EMAIL PROTECTED] Subject: Re: Re: HSRP [7:47177] Perhaps this will help explain http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/ip_c /ipcprt1/1cdip.htm#xtocid23 Yes, HSRP creates a single virtual IP and MAC pair. Yes, when one router fails, the standby router assumes control of this virtual IP and MAC pair. From an end station standpoint, nothing has changed. The end station knows the virtual IP, as configured in it's own settings, or as received as part of its DHCP configuration. In either case, no end station knows all of the IP's of all of the members of the HSRP group. Unless things have changed recently, there is no way to configure multiple default gateways on a Windows machine, at least. This is the reason HSRP, and now VRRP, were developed. If the end station does not already know the MAC of the default gateway, it sends an ARP request, as is standard operating procedure for any host seeking the MAC of an IP. The active router replies with the virtual MAC. You may also want to refer to the VRRP RFC. VRRP is the open standard intended to replace the several proprietary methods that now exist. The first couple of pages provide a good explanation and a good background of the problem to be solved. ftp://ftp.isi.edu/in-notes/rfc2338.txt Tom LongTrip wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... So you are saying the client never sees the MAC address of RouterA? It only sees the MAC address of the Virtual Router? Kim From: Michael L. Williams Date: 2002/06/23 Sun AM 11:29:24 EDT To: [EMAIL PROTECTED] Subject: Re: HSRP [7:47177] This isn't quite right. See comments below. Kim Graham wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... This brings up a question. I understand that after the initial hi I will be handling your requests please use me as your destination mac address. (Router talking to client). But what happens when the initial router fails and HSRP kicks in? After an unreachable, would ClientA send out an arp or would RouterB initiate the arping to re-establish connections to any client that was using RouterA after it noticed that RouterA was not responding? Scenario: ClientA - RouterA/B(HSRP) -- ClientB ClientA sends a packet to ClientB ClientA talks to the Virtual RouterA/B -- RouterA/B sends to ClientB RouterA/B tells ClientA -- RouterA will be handling your requests. Router A never tells Client A that Router A will be handling your requests. As you mentioned, Client A talks to the Virtual Router via the Virtual IP address which it ARPs to find the Virtual MAC. Client A never knows which of the HSRP routers is intercepting and processing it's requests When Client A sends a frame to the Virtual MAC to go out of it's gateway, both Router A and Router B hear the packet, but only the HSRP Active router will process it. So if, the janitor steps in and unplugs Router A, then after Router B misses enough Hello packets from Router A, it declares itself the Active HSRP router for that HSRP group, and at that point it starts to process the information sent to the Virtual IP/Virtual MAC. This is all transparent to the end clients, Client A in this example. So
Re: Re: HSRP [7:47177]
Comments in line. From: Priscilla Oppenheimer Date: 2002/06/23 Sun PM 08:19:23 EDT To: [EMAIL PROTECTED] Subject: Re: Re: HSRP [7:47177] At 02:22 PM 6/23/02, LongTrip wrote: hmmm maybe there was a misunderstanding on my part of an earlier post that mentioned The only time you see the virtual MAC address is on the original request from the host. Forwarded requests and replies don't use it. . Each request from the host uses the virtual MAC address in the destination. In my experiments, I was only doing a single ping. There was just one request. I understood this to mean that after the initial set up of communications that the virtual mac address was not used in subsequent data transmissions. You jumped to the wrong conclusion. Theoretically, the client doesn't even know any other address. How could it use it? Also, how could redundancy work if it used an actual address for an interface that might go down?? Agreed, hence my curiosity. As mentioned earlier it was a misinterruptation on my part. Thank you for taking the time to explain. Also, you might find it interesting (and confusing) to know that the ARP reply from the active HSRP router actually does come from the real address. But the ARP data in the reply supplies the virtual MAC address. Here is the ARP reply from the active HSRP router after the client ARPed for the virtual IP address of the gateway, which was 10.10.0.3. Notice that the source Ethernet address and the Sender's Hardware address in the ARP data don't match? Cool, eh? Very cool :) Ethernet Header Destination: 00:00:0E:D5:C7:E7 Source: 00:00:0C:05:3E:80 Protocol Type:0x0806 IP ARP ARP - Address Resolution Protocol Hardware: 1 Ethernet (10Mb) Protocol: 0x0800 IP Hardware Address Length:6 Protocol Address Length:4 Operation:2 ARP Response Sender Hardware Address:00:00:0C:07:AC:00 Sender Internet Address:10.10.0.3 Target Hardware Address:00:00:0E:D5:C7:E7 Target Internet Address:10.10.0.10 This will be one for a lab experiment on my part. Until I see it the result with my own eyes it will be a question. Why is it a question? I did a bunch of research for you. Why don't you read what I have written and what others wrote? (Although doing your own research is a good idea too.) I am not dismissing anyone's research or explainations, I am thankful there are others out there willing to share thoughts, research and ideas. But as you say doing your own research is a good idea. I learn a lot by reading, as well as a lot from doing. It is a kin to if you push the wagon down the hill full it goes faster than if it was empty. We all know that fact, but the ride down the hill in a speeding red, wood panelled wagon is much more fun than watching it go down the hill empty. Kim Priscilla Kim From: Thomas E. Lawrence Date: 2002/06/23 Sun PM 01:08:17 EDT To: [EMAIL PROTECTED] Subject: Re: Re: HSRP [7:47177] Perhaps this will help explain http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/ip_c /ipcprt1/1cdip.htm#xtocid23 Yes, HSRP creates a single virtual IP and MAC pair. Yes, when one router fails, the standby router assumes control of this virtual IP and MAC pair. From an end station standpoint, nothing has changed. The end station knows the virtual IP, as configured in it's own settings, or as received as part of its DHCP configuration. In either case, no end station knows all of the IP's of all of the members of the HSRP group. Unless things have changed recently, there is no way to configure multiple default gateways on a Windows machine, at least. This is the reason HSRP, and now VRRP, were developed. If the end station does not already know the MAC of the default gateway, it sends an ARP request, as is standard operating procedure for any host seeking the MAC of an IP. The active router replies with the virtual MAC. You may also want to refer to the VRRP RFC. VRRP is the open standard intended to replace the several proprietary methods that now exist. The first couple of pages provide a good explanation and a good background of the problem to be solved. ftp://ftp.isi.edu/in-notes/rfc2338.txt Tom LongTrip wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... So you are saying the client never sees the MAC address of RouterA? It only sees the MAC address of the Virtual Router? Kim From: Michael L. Williams Date: 2002/06/23 Sun AM 11:29:24 EDT To: [EMAIL PROTECTED] Subject: Re: HSRP [7:47177] This isn't quite right. See comments below. Kim Graham wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... This brings up a question. I under
Re: HSRP [7:47177]
Tim, If you have not hard configured the MAC address then it will be the MAC of the virtual router. This MAC address is a combination of 3 things; vendor code, well known HSRP virtual MAC address, and the group number of the active router. Below are listed some sources of information. http://www.cisco.com/warp/public/473/62.shtml#addressing Quote: HSRP Standby IP Address Communication (All Media Except Token Ring) Since host workstations are configured with their default gateway as the HSRP standby IP address, hosts must communicate with the MAC address associated with the HSRP standby IP address. This MAC address will be a virtual MAC address composed of .0c07.ac**, where ** is the HSRP group number in hexadecimal based on the respective interface. For example, HSRP group one will use the HSRP virtual MAC address of .0c07.ac01. Hosts on the adjoining LAN segment use the normal ARP process to resolve the associated MAC addresses. End Quote: Building Cisco Multilayer Switched Networks (chapter 7) MAC - .0c07.ac01 .0c - Vendor identifier Cisco 07.ac- Well known HSRP Virtual MAC address 01 - Group address http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/1214ea1/3550scg/swhsrp.htm It is configurable if you need to do so with the following command. standby [group-number] mac-address mac-address or standby use-bia Kim From: Tim Potier Date: 2002/06/22 Sat AM 12:17:36 EDT To: [EMAIL PROTECTED] Subject: HSRP [7:47177] Lets say I have HSRP configured on a series of routers... I know clients are sending packets to the MAC/IP of the well known virtual MAC with Cisco equipment. Assume the receiving station recieves the packet directly from the router participating in HSRP with the highest priority... what is the source MAC the receiving station sees? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=47189t=47177 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
