RE: RE: Block MSN Messenger [7:57595]

2002-11-19 Thread Mears, Rob
Yes and I have done it all via the PIX
Where you run into problems is when they use port 80.

Rob

Rob H Mears III, CCNP, MCSE, NNCDS, NNCSS, CNE, A+
LAN Engineer and Technical Mercenary
Valor Telecom
469.420.2656


-Original Message-
From: vikramjskeer [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, November 19, 2002 10:46 AM
To: [EMAIL PROTECTED]
Subject: Re: RE: Block MSN Messenger [7:57595]

Hi All,


Very rightly said that these messengers use so many servers and so many
ports that it's kind of impossible to block them all. But you can very
easily do it, right on the OS level. I know about the Win2K that you can
set
up some system policies with which you can directly block these exes
themselves.


Hope it helps:


Regards,


Vikram

Lidiya White wrote:



Try to block the login servers:
http://acronymsonline.com/im_ips.htm

-- Lidiya White



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Josh Green
Sent: Monday, November 18, 2002 10:16 AM
To: [EMAIL PROTECTED]
Subject: RE: Block MSN Messenger [7:57595]


It is possible, however Messenger uses so many different ports on so
many
different servers that it's not worth your time.

-Original Message-
From: Steven A. Ridder [mailto:[EMAIL PROTECTED]]
Sent: Monday, November 18, 2002 8:36 AM
To: [EMAIL PROTECTED]
Subject: Re: Block MSN Messenger [7:57595]

no. don't waste your time.


Ahed Naimi wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
gt; Dear All;
gt;
gt; Is there any way to block MSN Messenger by using the access-list
statements
gt; on an IOS Cisco router.
gt;
gt; Thanks All.
Get Your Private, Free E-mail from Indiatimes at
http://email.indiatimes.com
Buy Music, Video, CD-ROM, Audio-Books and Music Accessories from
http://www.planetm.co.in
Change the way you talk. Indiatimes presents Valufon, Your PC to Phone
service with clear voice at rates far less than the normal ISD rates. Go
to
http://www.valufon.indiatimes.com. Choose your plan. BUY NOW.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57717t=57595
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ICQ and blocking the thing-PIX [7:52285]

2002-09-03 Thread Mears, Rob

So true but ICQ is using port 80, which kills me

-Original Message-
From: Creighton Bill-BCREIGH1 [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, August 29, 2002 12:07 PM
To: [EMAIL PROTECTED]
Subject: RE: ICQ and blocking the thing-PIX [7:52285]

Make sure that you carefully figure out the correct side of the
connection.
ICQ server runs on port 4000, and the client chooses a random
high-numbered
port. That means you will see UDP packets FROM (inbound/source) port
4000
going to the random port. In other words, don't go looking in a port
database trying to figure what that random, high-numbered port means.
The
significant port is the source.

HTH

Bill Creighton CCNP
Senior System Engineer
Motorola
iDEN CNRC Packet Data


-Original Message-
From: Mears, Rob [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, August 29, 2002 9:48 AM
To: [EMAIL PROTECTED]
Subject: ICQ and blocking the thing-PIX [7:52285]

Hi Cisco gods,

I have successfully blocked all chat services at the PIX firewall, I
think. As I walk around and find people using MSN or Messenger I find
that public proxy they are using and kill it too. BUT, I am having a
hell of a time with ICQ. I do have all the ports UDP and TCP blocked so
it does not work UNLESS they use port 80. This is where I am stuck, I
cant block port 80 as you know so how do I kill this monster?   Has any
one had luck with this and has anyone found a way to stop the public
proxy usage?   I really feel as if I am fighting a losing battle, cuss
for every block I am countered with a way around it.  

My inside ACL in the pix is quite impressive and all just for blocking
this crap, if anyone would like it for theirs I will provide as it is
proven and works, with exception to ICQ.  


HELP WANTED

Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52606t=52285
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ICQ and blocking the thing-PIX [7:52285]

2002-09-03 Thread Mears, Rob

Yep all steps you stated have been covered, but Employees will be
employees.
What can I say?





-Original Message-
From: Elijah Savage III [mailto:[EMAIL PROTECTED]] 
Sent: Friday, August 30, 2002 3:49 PM
To: [EMAIL PROTECTED]
Subject: RE: ICQ and blocking the thing-PIX [7:52285]

ICQ now has a web based version also, just go the web put in your ID and
your on. Now being devils advocate I am aware of the trojans and viruses
that get spread on ICQ, but if it is not interferring with work progress
then why such the hassle. It seems as if your burning more cycles trying
to block it when it almost seems to me that this is a loosing battle.
The only recourse I think you have is to go to HR with your security
plan have them put this in your computer ussage policy for work and then
brief everyone of the employees why this is a no no. I have sniffed the
web version with sniffer pro and it looks to me it strictly uses port
80.

But just by blocking it and I do not know if you are notifying anyone or
if this is in your security poilicy it just seems like you're a loose
renegade on the network to implement your own security policy which will
tick people off. I think if you take my approach above and people
understand why your are doing it then it is less likely to turn
whirlwinds into a hurricane of upset users especially if it was allowed
in the past.

NO BASHING please :) you may have took these steps already then if so
the only thing to do is report them to HR especially if it is causing
problems for you on the network and putting business assets at risk.

-Original Message-
From: Shawn Heisey [mailto:[EMAIL PROTECTED]] 
Sent: Friday, August 30, 2002 4:21 PM
To: [EMAIL PROTECTED]
Subject: Re: ICQ and blocking the thing-PIX [7:52285]


I may be off my rocker, but I think it's possible that you could set up
an IDS system that blocks access to any IP on the outside that sends
packets to your network that look like ICQ.  At the very least it could
record the addresses for future inclusion into ACLs.

This won't block the people who set up SSH tunnelling as described in
other messages, but you can make it a violation of security policy to
use that kind of back door.

Thanks,
Shawn

Mears, Rob wrote:
 
 Hi Cisco gods,
 
 I have successfully blocked all chat services at the PIX firewall, I 
 think. As I walk around and find people using MSN or Messenger I find 
 that public proxy they are using and kill it too. BUT, I am having a 
 hell of a time with ICQ. I do have all the ports UDP and TCP blocked 
 so it does not work UNLESS they use port 80. This is where I am stuck,
I
 cant block port 80 as you know so how do I kill this monster?   Has
any
 one had luck with this and has anyone found a way to stop the public
 proxy usage?   I really feel as if I am fighting a losing battle, cuss
 for every block I am countered with a way around it.
 
 My inside ACL in the pix is quite impressive and all just for blocking

 this crap, if anyone would like it for theirs I will provide as it is 
 proven and works, with exception to ICQ.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52607t=52285
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ICQ and blocking the thing-PIX [7:52285]

2002-08-29 Thread Mears, Rob

Hi Cisco gods,

I have successfully blocked all chat services at the PIX firewall, I
think. As I walk around and find people using MSN or Messenger I find
that public proxy they are using and kill it too. BUT, I am having a
hell of a time with ICQ. I do have all the ports UDP and TCP blocked so
it does not work UNLESS they use port 80. This is where I am stuck, I
cant block port 80 as you know so how do I kill this monster?   Has any
one had luck with this and has anyone found a way to stop the public
proxy usage?   I really feel as if I am fighting a losing battle, cuss
for every block I am countered with a way around it.  

My inside ACL in the pix is quite impressive and all just for blocking
this crap, if anyone would like it for theirs I will provide as it is
proven and works, with exception to ICQ.  


HELP WANTED

Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52285t=52285
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Netscreen and Cisco PIX [7:51294]

2002-08-13 Thread Mears, Rob

Hello,
 
Anyone have a working config example from a Ntescreen that is doing VPN to a
Pix ?
 
Thanks
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51294t=51294
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX525\Web Sense and Chat programs [7:46013]

2002-06-10 Thread Mears, Rob

Very well

Thanks
Rob

-Original Message-
From: Roberts, Larry [mailto:[EMAIL PROTECTED]] 
Sent: Friday, June 07, 2002 2:25 PM
To: Mears, Rob; [EMAIL PROTECTED]
Subject: RE: PIX525\Web Sense and Chat programs [7:46013]

For aol just block access to the login servers.

Login.oscar.aol.com ( it used to be this )
For Yahoo, it much more difficult, and time consuming. You will also
inadvertanly block access to some portions of the yahoo website.
I used a sniffer and my PC to see what servers that YIM logged into. I
would
block the one I connected to, and then restart the sniffer and the
software.
It took about 8 hours, but I managed to block YIM. Of course that was
after
they told me it couldn't be done :) Yahoo made a bad mistake telling me
that.
ICQ uses TCP 6667 If I remember correctly. Since I have only allowed
certain
traffic through the FW, It was already blocked.

It takes time to get it figured out, but these programs CAN be blocked.
If
nothing else, just deny access to all of yahoo, but inserting a bad
yahoo.com in your domain server!

Thanks

Larry 

-Original Message-
From: Mears, Rob [mailto:[EMAIL PROTECTED]] 
Sent: Friday, June 07, 2002 9:31 AM
To: [EMAIL PROTECTED]
Subject: PIX525\Web Sense and Chat programs [7:46013]


Hello Cisco people

We are using Web Sense to block most of the Sites that we feel necessary
but
have had problems with programs like AOL, MSN, ICQ chat programs. So I
am
going to stop this at the PIX and was wonder who out there had blocked
Chat
programs in the enterprise, and methods used. I fully understand the
steps
needed to block what is needed on the PIX but was wanting to hear horror
storied or problems you might have encountered. I would also like to
know
what sites (address\protocols) you had to block to stop these programs
because some are http based. (AIM, MSN,ect). For those of you who have
applied rules to the inside interface of the pix, did you notice any
performance issues or any other problem related to having all outbound
traffic filtered?



Thank you


Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical
Mercenary Valor Telecom.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=46194t=46013
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Question about the 350 series AP [7:45971]

2002-06-10 Thread Mears, Rob

Mine has both

-Original Message-
From: Henry D. [mailto:[EMAIL PROTECTED]] 
Sent: Friday, June 07, 2002 1:18 PM
To: [EMAIL PROTECTED]
Subject: Re: Question about the 350 series AP [7:45971]


Mine included everything.

Roberts, Larry  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 OK,

 Can someone confirm/deny that the 350 will only accept in-line power? 
 Does it come with the in-line power injector, or is this a separate 
 item? I have read everything I can and all points say it only has 
 in-line power, but none say whether this is included ( I can't image 
 it wouldn't be )


 Thanks

 Larry




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=46204t=45971
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX525\Web Sense and Chat programs [7:46013]

2002-06-10 Thread Mears, Rob

Cisco People

This is how u block Messenger access on a PIX firewall and it works
Some might ask why not just block all and permit the other, and this is
the way I would like to do it one day, But to encounter the least amount
of down time I chose to apply in this fashion.



To block chat programs, simply use access-list on PIX. 
Some of the common chat programs use following ports 

**common chat ports** 
tcp 6667 (irc) 6660- 6670 (the default being 6667). 
tcp 6665-6669 (common IRC) 
tcp 5190 (aol) 
tcp 5190, dyn =1024 (aol ICQ) 
tcp/udp 5190-5193 (aol) 
tcp 1863 (msn) 
tcp/udp 4020 (ichat) 
tcp 5000-5001 and udp 5000-5010 (Yahoo voice chat) 
tcp 5050 (Yahoo messages) 
tcp 5100 (Yahoo Webcams) 

Below you can get the config for the pix

access-list acl_inside deny tcp any any eq aol
access-list acl_inside deny tcp any any eq 1024
access-list acl_inside deny tcp any any eq 1863
access-list acl_inside deny tcp any any eq 4020
access-list acl_inside deny tcp any any eq 5050
access-list acl_inside deny tcp any any eq 5100
access-list acl_inside deny udp any any eq 4020
access-list acl_inside deny tcp any any range 6665 6669
access-list acl_inside deny udp any any range 5190 5193
access-list acl_inside deny tcp any any range 6660 6670
access-list acl_inside deny tcp any any range 5000 5001
access-list acl_inside permit tcp any any


Hope this helps someone
Thanks
Rob

-Original Message-
From: Mears, Rob 
Sent: Monday, June 10, 2002 8:11 AM
To: [EMAIL PROTECTED]
Subject: RE: PIX525\Web Sense and Chat programs [7:46013]


Very well

Thanks
Rob

-Original Message-
From: Roberts, Larry [mailto:[EMAIL PROTECTED]] 
Sent: Friday, June 07, 2002 2:25 PM
To: Mears, Rob; [EMAIL PROTECTED]
Subject: RE: PIX525\Web Sense and Chat programs [7:46013]

For aol just block access to the login servers.

Login.oscar.aol.com ( it used to be this )
For Yahoo, it much more difficult, and time consuming. You will also
inadvertanly block access to some portions of the yahoo website. I used
a sniffer and my PC to see what servers that YIM logged into. I would
block the one I connected to, and then restart the sniffer and the
software. It took about 8 hours, but I managed to block YIM. Of course
that was after they told me it couldn't be done :) Yahoo made a bad
mistake telling me that. ICQ uses TCP 6667 If I remember correctly.
Since I have only allowed certain traffic through the FW, It was already
blocked.

It takes time to get it figured out, but these programs CAN be blocked.
If nothing else, just deny access to all of yahoo, but inserting a bad
yahoo.com in your domain server!

Thanks

Larry 

-Original Message-
From: Mears, Rob [mailto:[EMAIL PROTECTED]] 
Sent: Friday, June 07, 2002 9:31 AM
To: [EMAIL PROTECTED]
Subject: PIX525\Web Sense and Chat programs [7:46013]


Hello Cisco people

We are using Web Sense to block most of the Sites that we feel necessary
but have had problems with programs like AOL, MSN, ICQ chat programs. So
I am going to stop this at the PIX and was wonder who out there had
blocked Chat programs in the enterprise, and methods used. I fully
understand the steps needed to block what is needed on the PIX but was
wanting to hear horror storied or problems you might have encountered. I
would also like to know what sites (address\protocols) you had to block
to stop these programs because some are http based. (AIM, MSN,ect). For
those of you who have applied rules to the inside interface of the pix,
did you notice any performance issues or any other problem related to
having all outbound traffic filtered?



Thank you


Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary Valor Telecom.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=46207t=46013
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX525\Web Sense and Chat programs [7:46013]

2002-06-07 Thread Mears, Rob

Hello Cisco people

We are using Web Sense to block most of the Sites that we feel necessary
but have had problems with programs like AOL, MSN, ICQ chat programs. So
I am going to stop this at the PIX and was wonder who out there had
blocked Chat programs in the enterprise, and methods used.
I fully understand the steps needed to block what is needed on the PIX
but was wanting to hear horror storied or problems you might have
encountered. I would also like to know what sites (address\protocols)
you had to block to stop these programs because some are http based.
(AIM, MSN,ect).
For those of you who have applied rules to the inside interface of the
pix, did you notice any performance issues or any other problem related
to having all outbound traffic filtered?



Thank you


Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary
Valor Telecom.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=46013t=46013
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX - Why NO glaobal (outside) command [7:45676]

2002-06-03 Thread Mears, Rob

The statement 
NAT and GLOBAL is used for inside to outside communication.

STATIC is used for outside to inside communication.
No longer holds true but it is a good rule to keep you straight.  Check
out ios PIX 6.2, they have removed the rules as we know it.

You can now do a satatic (outside,inside)or a   nat 1 (outside)
x.x.x.x

Cool stuff

Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary
Valor Telecom.com


-Original Message-
From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]] 
Sent: Monday, June 03, 2002 12:43 PM
To: [EMAIL PROTECTED]
Subject: RE: PIX - Why NO glaobal (outside) command [7:45676]


NAT and GLOBAL is used for inside to outside communication.

STATIC is used for outside to inside communication.

Since the device(s) we're talking about seems to be a server/service of
some kind located on your inside network, you use the NAT 0 to let the
server communicate outbound with the same (unNATed) IP address, and you
use STATIC with the same IP for global and local so outside clients can
access the services running on the server.

Hth,

Ole

~
 Ole Drews Jensen
 Systems Network Manager
 CCNP, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~
 http://www.RouterChief.com
~
 Need a Job?
 http://www.OleDrews.com/job
~




-Original Message-
From: Karagozian Sarkis [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 03, 2002 11:02 AM
To: [EMAIL PROTECTED]
Subject: RE: PIX - Why NO glaobal (outside) command [7:45676]


Thanks Ole,

I just noticed the nat 0 

Here is how this old PIX is configured:

nat (inside) 0 216.119.xx.0 255.255.255.0 0 0 
static (inside,outside) 216.119.xx.0 216.119.xx.0 netmask 255.255.255.0
0
0   -- why same IP for both??
static (websvers,oustide) 216.119.xx.240 216.119.xx.240 netmask
255.255.255.240 0 0  --- also same IP for both ??

Can u explain. more...
Thanks
Sarkis




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45700t=45676
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX information [7:35294]

2002-02-21 Thread Mears, Rob

Any changes you make to the Pri PIX will be written to the SEC, no need to
day anything.  Good Idea to move the sec and do a Wr M


Rob

-Original Message-
From: Evans, TJ [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, February 13, 2002 12:53 PM
To: [EMAIL PROTECTED]
Subject: RE: PIX information [7:35294]

I believe it sync's them auto-magically, or perhaps on a timed basis.
Regardless ... I always do a wr standby ... just to be sure.


Thanks!
TJ

 -Original Message-
From:   Hartnell, George [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, February 13, 2002 12:46 PM
To: [EMAIL PROTECTED]
Subject:RE: PIX information [7:35294]

AND, am I to understand correctly, as the manual is quite vague, that an
upgrade of the primary failover unit also updates the secondary?  Or, must
the hapless administrator do each individually?

Best, G.

 -Original Message-
 From: Jose Celestino [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, February 13, 2002 7:12 AM
 To: [EMAIL PROTECTED]
 Subject: Re: PIX information [7:35294]
 
 
 PIX-FW1# copy ?
 usage: copy tftp[:[[//location][/pathname]]] flash
 
 For instance:
 
 copy tftp://192.168.2.2/configs/pix.cfg flash
 
 
 Thus spake BASSOLE Rock, on Wed, Feb 13, 2002 at 09:06:59AM -0500:
  Hello group,
  
  
  What command can I use to copy a configuraton form a tftp 
 server to a PIX
  Firewall? I have look on the cisco web site for the command 
 but couldn't
  find. Can somebody help.
  
  Thank you.
  
  Rock
 -- 
 Jose Celestino 
 -
 Little prigs and three-quarter madmen may have the conceit 
 that the laws of
 nature are constantly broken for their sakes.
 -- Friedrich Nietzsche

*
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. 

If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter. 

*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=36117t=35294
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CIT Test [7:34856]

2002-02-13 Thread Mears, Rob

This test was not the hardest, maybe the 2nd hardest.  You better study
though. 


Use the Transcenders, they come close to crossing the line as far as the NDA
goes.






-Original Message-
From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]] 
Sent: Friday, February 08, 2002 1:30 PM
To: [EMAIL PROTECTED]
Subject: RE: CIT Test [7:34856]

It sounds to me like everyone agree to it being either the easiest or
hardest - so it probably won't help answering Joshua's answer very well.

And Joshua, I can strongly recommend Priscilla's flash cards - they helped
me pass the test; Thanks again for that Priscilla.

Good luck on your exam, and have a great weekend,

Ole

~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNP, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~~~ 
 http://www.RouterChief.com
~~~
 NEED A JOB ???
 http://www.oledrews.com/job
~~~

-Original Message-
From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 08, 2002 12:53 PM
To: [EMAIL PROTECTED]
Subject: Re: CIT Test [7:34856]


CIT was by the far the easiest for me. I took the Foundation exam before 
that  and it was much more challenging.

Do you know about my CIT flash cards, just for fun? The URL is:

http://www.priscilla.com/cit/toc.html

Good luck. I think you will pass.

Priscilla

At 11:46 AM 2/8/02, Joshua Barnes wrote:
I know that folks have asked about this test, but I am taking it Thursday,
I would like to know of the people who thought that it was the hardest
test,
did you also feel it was equally hard to study for?

I am studying through the book and BOSON, and quite honestly I think that
this part comes natural to me.  I certainly don't want to underestimate the
test. ( I don't think I will) but I would like some feedback on this.  Let
me know if you guys remember how you felt.

[GroupStudy.com removed an attachment of type application/ms-tnef which had
a name of winmail.dat]


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=35298t=34856
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Exam 640-900 and the CID exam [7:34752]

2002-02-08 Thread Mears, Rob

You go!  Feel the FORCE

Rob Mears III, CCNP, MCSE, MCP+I, NNCDS, NNCSS, CNE, A+
Valor Telecom
LAN\WAN Engineer
Technical Mercenary

-Original Message-
From: Ranma [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, February 07, 2002 7:57 PM
To: [EMAIL PROTECTED]
Subject: Re: Exam 640-900 and the CID exam [7:34752]

640-900 should be a easy task


Mears, Rob  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hello all

 I just finished the 640-900 exam yesterday for the CCIP cert, and it is a
 bitch!. If any one has any qiestion, I will take them off line, just email
 me.

 I am getting ready to take my CID exam, any advice?

 Thanks
 Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34841t=34752
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Exam 640-900 and the CID exam [7:34752]

2002-02-07 Thread Mears, Rob

Hello all

I just finished the 640-900 exam yesterday for the CCIP cert, and it is a
bitch!. If any one has any qiestion, I will take them off line, just email
me.

I am getting ready to take my CID exam, any advice?

Thanks
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34752t=34752
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



FW: Exam 640-900 and the CID exam [7:34753]

2002-02-07 Thread Mears, Rob

Hello all

I just finished the 640-900 exam yesterday for the CCIP cert, and it is a
bitch!. If any one has any question, I will take them off line, just email
me.

I am getting ready to take my CID exam, any advice?

Thanks
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34753t=34753
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Average afterwork time Tech learning commitmen [7:34634]

2002-02-07 Thread Mears, Rob

Here is one for you.

I get up @ 0430, thats in the AM and study until i go to work, study @ lunch
and then study @ night.  I need a life

Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 06, 2002 3:37 PM
To: [EMAIL PROTECTED]
Subject: RE: Average afterwork time Tech learning commitmen [7:34634]


 For me, my optimal study time was during my lunch break at
 work.  I'd scarf a sandwich and spend 45 minutes completely
 distraction free sitting in my car in the parking lot.  That
 45 minutes 5 days a week is more effective than 2 hours a
 day trying to work on the lab with the kid, wife,
 honey-do's, tv and dog all vying for my attention.  Note, do
 not become so engrossed in what you are reading that you sit
 in the car with the windows rolled up and cook yourself like
 a thanksgiving turkey.

I think you're potentially describing an infinite loop, which, 
admittedly, might be a good troubleshooting scenario. If the 
sandwich you are scarfing is leftover Thanksgiving turkey, but the 
weather conditions exist to roast you like a turkey...

Maybe it isn't a loop. It might be an infinite recursion or just the 
formation of a black hole.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34780t=34634
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Exam 640-900 and the CID exam [7:34752]

2002-02-07 Thread Mears, Rob

I used the stuff for the Routing exam and then the RFC for IS IS. Good luck
finding info on Cisco site. The two test are the same except for the ISIS,
compare on Cisco web page.



Advice?  Study your Ars off!

They take no prisoners

Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary

-Original Message-
From: Tim Medley [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 07, 2002 10:33 AM
To: 'Mears, Rob'
Subject: RE: Exam 640-900 and the CID exam [7:34752]


I'm getting ready to take the 640-900 exam. What did you use to
study/prepare with. What kind of advice do you have for taking the test.

tim

Tim Medley - CCNP+Voice, CCDP
Sr. Network Architect
VoIP Group
iReadyWorld
 
p 704.943.3615
f 704.525.9119

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Mears, Rob
Sent: Thursday, February 07, 2002 10:31 AM
To: [EMAIL PROTECTED]
Subject: Exam 640-900 and the CID exam [7:34752]

Hello all

I just finished the 640-900 exam yesterday for the CCIP cert, and it is
a
bitch!. If any one has any qiestion, I will take them off line, just
email
me.

I am getting ready to take my CID exam, any advice?

Thanks
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=34781t=34752
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF or EIGRP [7:28966]

2001-12-13 Thread Mears, Rob

Hi All,

To your question; we are, as all should be, a pure IP and Cisco shop (:.
As to why we originally went Eigrp, who knows it was before my time but I
would guess Cisco had some influence on it, but now we are growing and plan,
no not plan but have bought the routers\switches for 400 locations and will
be deploying @ the beginning of the year.

I know EIGRP will scale well and will handle our growth for the time being.
As my research points, we will be good with EIGRP for a long time and the
differences I found between the two are really nominal. But since the
network we are rolling out is in parallel to the present, we do not have to
worry about the migration part, so we have the opportunity to do it right
and impress people long after I am gone.  

So correct me where I am wrong and please show me the light OSPF or EIGRP.


Thanks
Rob

-Original Message-
From: Gregg Malcolm [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, December 12, 2001 3:40 PM
To: [EMAIL PROTECTED]
Subject: Re: OSPF or EIGRP [7:28966]

Rob,

Few questions. What routed protocols you plan to run?  Just IP or
IP/IPX/AT,etc.?  Any other vendor equipment other than cisco?  Firewalls
running OSPF for failover?  Why did you initially choose EIGRP?  Does the
network design lend itself well to a backbone area?  Redundant links
(including DDR) ?

I think if you can answer some of these questions, it will help the group
give you a better response.

Gregg


Mears, Rob  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi all,

 We are in the middle of building out a new ATM network for the Core and on
 the outside we are going to be running about 80 3640 or 2600.  We are in a
 big debate about the routing protocol, we are currently EIGRP.

 I have collected lots of info off Cisco's Web site about the two but
wanted
 to hear it from the Engineers in the trenches.
 What's your take on it? If it were you what would you run (EIGRP, OSPF)
and
 why?



 Thanks
 Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=29105t=28966
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF or EIGRP [7:28966]

2001-12-12 Thread Mears, Rob

Hi all,

We are in the middle of building out a new ATM network for the Core and on
the outside we are going to be running about 80 3640 or 2600.  We are in a
big debate about the routing protocol, we are currently EIGRP.   

I have collected lots of info off Cisco's Web site about the two but wanted
to hear it from the Engineers in the trenches.   
What's your take on it? If it were you what would you run (EIGRP, OSPF) and
why?



Thanks
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=28966t=28966
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Which IOS's support DSL? [7:18034]

2001-09-04 Thread Mears, Rob

Use Cisco web site for info like this.  Feel the Force.

c2600-is56i-mz.121-5.YB2  This works


Rob
Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom


-Original Message-
From: Matthew Wilkinson [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 03, 2001 10:08 PM
To: [EMAIL PROTECTED]
Subject: Re: Which IOS's support DSL? [7:18034]


I have a 2600 witha  DSL WIC and none of the newer IOS's I have install
recognise the card.  This is simply pluggd directly into the phone system,
it is used in a home.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=18424t=18034
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: BMC Patrol [7:17794]

2001-08-30 Thread Mears, Rob

It not BMC patrol that is the question but Patrol DashBoard and
 Patrol Visualis, any word???


Thanks
Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom


-Original Message-
From: Patrick Donlon [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 30, 2001 2:55 AM
To: [EMAIL PROTECTED]
Subject: Re: BMC Patrol [7:17794]


BMC patrol was used at the last company I worked at, an ISP based in the
Netherlands, it wasn't a project I was working on, as it was used to monitor
the applications and not the network but if you want to email me offline
then send you the company's details so you can get some info or dirt on it

cheers Pat


350mhz  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi Cisco Geeks,


 We are evaluating a new product from BMC called Patrol DashBoard and
 Patrol Visualis. I am told by the Sales Geeks that this product is
 fairly new; therefore it's been rough getting feed back. So I turn to
 you.  What is the word? Who has used it, what are the Pro and Cons? Is
 this company worth dealing with? They are cutting us a good deal and the
 CIO is about to go for it unless I can dig up some dirt.


 Thank
 Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=17934t=17794
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VPN from 2600 routers to PIX 525 Question [7:17700]

2001-08-29 Thread Mears, Rob

I am looking for someone who is running VPN's between 2621 routers and PIX
525 on IOS 6.0 to campare notes with.
How are they working for You?


Thanks

Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=17700t=17700
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 3660 router-----Finished [7:12135]

2001-07-12 Thread Mears, Rob

Greeting to all,

This problem proved to be a real bitch, and I thank you for all the advice. 

Here is the fix, and I am almost ashamed to say, but I want to pass this on
so none of you all fall into the same trap as I did.

As I said, in one post before, I kept getting the same error messages even
after TAC sent me new memory and a new router. The 3rd TAC engineer was the
charm, because he asked me if this was a TELCO version of the 3660. That was
a real good question cuss I had no idea, as I have never worked on one.
Well, that was the problem, it takes a TELCO FEATURE SET IOS. One telltail
clue is that their is not a plastic front on the Telco version.
I saw this right off the bat, but thought Cisco had just redesigned it.  Man
what a day. The other way to see if the router is an Enterprise version or
Telco is to run the SN numbers. I can think off all the times i do this
before I install an IOS. Maybe i should.

Good news is I got it fixed and got a new Router out of the deal (thanks you
TAC). And as TAC goes, they have pulled my Butt out of the sling more then
once, so I have nothing but good to say for them. Yes I have gotten some
DORKS before, but I have the option to tell them to get lost and give me a
new Engineer. We pay a lot for this service.

Hope this has been as educational for you all as it has been for me.

Look below at link for the difference in the two.
http://www.cisco.com/warp/public/cc/pd/rt/3600/prodlit/36kmp_ds.htm


-Original Message-
From: Charlie Hartwell [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 9:15 AM
To: Mears, Rob
Subject: Re: 3660 router [7:11917]


Hi Rob,
 I didn't want to send this out to the whole group but I sympathise
with your problem - I used to work on TAC and I see this sort of
thing happening more and more. Unfortunately TAC have a new policy of
employing people without much real technical experience (even
pre-CCNA level people) and they put them on the bread and butter
TAC teams to break them in. It will be one of those teams dealing
with your problem - probably euro-config. I know a lot of those
guys and, although they all work hard, they don't have the experience
to deal with a case that gets over complicated.

 If you have had an RMA already and you are still no nearer to
solving the problem then the next step is to have the case escalated.
I expect this case has been going on for a few days already and has
probably passed the P3 SLA so the TAC can escalate to a more
technical team to get you a speedy fix.

 I hope this helps and I would appreciate it if you kept this under
your hat.

Regards

Charlie


 --- Mears, Rob  wrote:  Any one ever had
a problem loading IOS on a 3660 right out of the
 box? I
 have one with 64meg flash and 256 ram and the damn thing will not
 come out
 of RMMON. I have set the confreg to boot correctly still RMMON. I
 have
 flashed it with two different IOS (12112.2), swapped out Flash,
 MEM, even
 sent the chassis back to Cisco and the new one had the same
 problem. TAC has
 no clue, they have been sending me part and giving me to different
 Engineer
 with no luck.
 
 What gives?
 
 Rob
[EMAIL PROTECTED] 


Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=12135t=12135
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 3660 router-----Finished [7:12135]

2001-07-12 Thread Mears, Rob

that is! that's the one. Damn Telco stuff. You know it was said if they were
to burn (Telco Routers), it would not put off toxic fumes (no plastic an
telco requirment) . I looked around the CO and wondered about the billions
little blue and white analog wires we have form ceiling to floor and
wondered what's the point. Smoke from the router won't kill me, but the
plastic from the wires will.  Man


rob

-Original Message-
From: Peter Slow [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 12:26 PM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router-Finished [7:12135]


Uhh, they do!
c3660-telcoent-mz.121-5.T9.bin

-Original Message-
From: Bob Johnson [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 12:34 PM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router-Finished [7:12135]


Telco requirements are quite strict
There are Bellcore standards that are used at all central offices.
It has nothing to do with the goverment but will Bell ensurring that any
third party equipment will:
1) Fit in telco racks
2) No physically interfer with other equipment in telco racks
3) Not add to the fire load
4) Not cause any undue electrical problems (NEBS grounding, etc)

It's all really for infrastructure protection
Too bad they didn't have a Telco version of the IOS.

Bob

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 8:29 AM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router-Finished [7:12135]


This brings up a point:  why is there a telco version in the first
place?  What are these telco requirements and why are they there?  I've
been hearing little snippets about this but I don't know the details. 
From what I've read so far, it sounds like some government agency had
too much time on its hands and felt like being even more intrusive than
usual.  

Who cares if there is a plastic cover or not?  Who cares if the rack is
19 or 24 wide?  Who cares if the equipment is more than 12 deep?  

Someone please explain this to me, and please tell me there are good
reasons for these requirements.  Otherwise, it will just annoy me and
ruin my day.  ;-)  Besides, I have a feeling I'll be running into
situations where equipment that I provision has to meet these
requirements so I might as well know what they are, right?

Thanks,
John (who is just starting his 2nd cup of coffee...be gentle.)

 Mears, Rob  7/12/01 8:55:12 AM 
Greeting to all,

This problem proved to be a real bitch, and I thank you for all the
advice. 

Here is the fix, and I am almost ashamed to say, but I want to pass
this on
so none of you all fall into the same trap as I did.

As I said, in one post before, I kept getting the same error messages
even
after TAC sent me new memory and a new router. The 3rd TAC engineer was
the
charm, because he asked me if this was a TELCO version of the 3660.
That was
a real good question cuss I had no idea, as I have never worked on
one.
Well, that was the problem, it takes a TELCO FEATURE SET IOS. One
telltail
clue is that their is not a plastic front on the Telco version.
I saw this right off the bat, but thought Cisco had just redesigned it.
 Man
what a day. The other way to see if the router is an Enterprise version
or
Telco is to run the SN numbers. I can think off all the times i do
this
before I install an IOS. Maybe i should.

Good news is I got it fixed and got a new Router out of the deal
(thanks you
TAC). And as TAC goes, they have pulled my Butt out of the sling more
then
once, so I have nothing but good to say for them. Yes I have gotten
some
DORKS before, but I have the option to tell them to get lost and give
me a
new Engineer. We pay a lot for this service.

Hope this has been as educational for you all as it has been for me.

Look below at link for the difference in the two.
http://www.cisco.com/warp/public/cc/pd/rt/3600/prodlit/36kmp_ds.htm 


-Original Message-
From: Charlie Hartwell [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 11, 2001 9:15 AM
To: Mears, Rob
Subject: Re: 3660 router [7:11917]


Hi Rob,
 I didn't want to send this out to the whole group but I sympathise
with your problem - I used to work on TAC and I see this sort of
thing happening more and more. Unfortunately TAC have a new policy of
employing people without much real technical experience (even
pre-CCNA level people) and they put them on the bread and butter
TAC teams to break them in. It will be one of those teams dealing
with your problem - probably euro-config. I know a lot of those
guys and, although they all work hard, they don't have the experience
to deal with a case that gets over complicated.

 If you have had an RMA already and you are still no nearer to
solving the problem then the next step is to have the case escalated.
I expect this case has been going on for a few days already and has
probably passed the P3 SLA so the TAC can escalate to a more
technical team to get you a speedy fix.

 I hope this helps and I would

3660 router [7:11917]

2001-07-11 Thread Mears, Rob

Any one ever had a problem loading IOS on a 3660 right out of the box? I
have one with 64meg flash and 256 ram and the damn thing will not come out
of RMMON. I have set the confreg to boot correctly still RMMON. I have
flashed it with two different IOS (12112.2), swapped out Flash, MEM, even
sent the chassis back to Cisco and the new one had the same problem. TAC has
no clue, they have been sending me part and giving me to different Engineer
with no luck.

What gives?

Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=11917t=11917
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 3660 router [7:11917]

2001-07-11 Thread Mears, Rob

You can flash it via Xmodem


-Original Message-
From: Peter Slow [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 8:59 AM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router [7:11917]


open up hyperterm, connect to console, log the session, flick the power
switch, and let it drop into ROMMON.

then you need to post the text file IN LINE with your next email.
THEN we can help you.


-Original Message-
From: Mears, Rob [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 9:33 AM
To: [EMAIL PROTECTED]
Subject: 3660 router [7:11917]


Any one ever had a problem loading IOS on a 3660 right out of the box? I
have one with 64meg flash and 256 ram and the damn thing will not come out
of RMMON. I have set the confreg to boot correctly still RMMON. I have
flashed it with two different IOS (12112.2), swapped out Flash, MEM, even
sent the chassis back to Cisco and the new one had the same problem. TAC has
no clue, they have been sending me part and giving me to different Engineer
with no luck.

What gives?

Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=11948t=11917
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 3660 router [7:11917]

2001-07-11 Thread Mears, Rob

I hope u can help. With the message below it would appear the it has bad
mem, but I replace it. I got this error message on both router, the old and
the new. The only thing that was left in common was the IOS so I got a
different version and still the same problem.



Here is the error message

WARNING: All existing data in flash will be lost!
Invoke this application only for disaster recovery.
Do you wish to continue? y/n  [n]:  y
Ready to receive file c3660-jk8s-mz.122-1b.bin ...
Erasing flash at 0x3000sector erase failed at location 0x3000,
status 0x
20202020
flash sector will NOT erase...aborting
rommon 2 

-Original Message-
From: Peter Slow [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 8:59 AM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router [7:11917]


open up hyperterm, connect to console, log the session, flick the power
switch, and let it drop into ROMMON.

then you need to post the text file IN LINE with your next email.
THEN we can help you.


-Original Message-
From: Mears, Rob [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 9:33 AM
To: [EMAIL PROTECTED]
Subject: 3660 router [7:11917]


Any one ever had a problem loading IOS on a 3660 right out of the box? I
have one with 64meg flash and 256 ram and the damn thing will not come out
of RMMON. I have set the confreg to boot correctly still RMMON. I have
flashed it with two different IOS (12112.2), swapped out Flash, MEM, even
sent the chassis back to Cisco and the new one had the same problem. TAC has
no clue, they have been sending me part and giving me to different Engineer
with no luck.

What gives?

Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=11950t=11917
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



PIX 5.25 ftp Passive-non Passive [7:10306]

2001-06-28 Thread Mears, Rob

Question for the gods,

We have a requirement to retrieve data from a client's FTP server which is
not Passive in natures, meaning it does not support. My pix box has no
problems getting to FTP sites that support Passive mode. I am 90% sure the
problem is with the client and not me. I have researched this and have
found, in order to allow my users to the FTP I would have to open a range of
ports on the Fwall. Has anyone run into this and does anyone have a easy
fix? I am about to tell the client to (##$%^) just submit and upgrade their
FTP but who knows how long this will take.

How about some help.


Thanks




Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=10306t=10306
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Could someone give me an example config of adsl+router? [7:6762]

2001-06-01 Thread Mears, Rob

Hi,

we are running ADSL at our ROBO around the US, we also use a VPN to get them
back to HQ. I will include a config that might help.   This is a 2621 router

Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom
**
version 12.1
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Amardsl001
!

logging rate-limit console 10 except errors
enable secret 5 $1$Onlr$fH2gcC0tDCI9hEpkC2/Nq.
!
!
!
memory-size iomem 10
ip subnet-zero
!
!
no ip finger
ip name-server XXX.XXX.1.8
!
no ip dhcp-client network-discovery
no mgcp timer receive-rtcp
!
!
crypto isakmp policy 1
 hash md5
 authentication pre-share
crypto isakmp key X address XXX.XXX.37.5
!
!
crypto ipsec transform-set rtpset esp-des esp-md5-hmac
!
crypto map rtp local-address BVI1
crypto map rtp 1 ipsec-isakmp
 set peer XXX.XXX.37.5
 set security-association lifetime seconds 28800
 set transform-set rtpset
 match address amarillo
!
call rsvp-sync
!
!
!
!
!
bridge irb
!
!
!
!
interface FastEthernet0/0
 ip address XXX.XXX.102.1 255.255.255.224
 ip helper-address XXX.xX.6.31
 ip nat inside
 no ip route-cache
 no ip mroute-cache
 duplex auto
 speed auto
!
interface ATM0/1
 description ADSL SWB XXX-3xxx-1600 Trouble 800-net-help
 no ip address
 no ip mroute-cache
 atm vc-per-vp 256
 no atm ilmi-keepalive
 pvc 0/35
  encapsulation aal5snap
 !
 bundle-enable
 dsl operating-mode auto
 no fair-queue
 bridge-group 1
 hold-queue 224 in
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface BVI1
 ip address XXX.XXX.XXX.49 255.255.255.248
 ip nat outside
 no ip route-cache
 no ip mroute-cache
 crypto map rtp
!
ip nat pool Net-XXX.xxX.218.126.50 XXX.xXX.126.50 netmask 255.255.255.248
ip nat inside source route-map nonat pool Net-64 overload
ip classless
ip route 0.0.0.0 0.0.0.0 xxx
no ip http server
!
!
ip access-list extended amarillo
 permit ip x
 permit ip x
 permit ip x
logging 10.x
access-list 1 permit xxx
access-list 120 deny   ip xxx
access-list 120 permit ip xxx
!
!
route-map nonat permit 10
 match ip address 120
!
snmp-server community  RO
snmp-server community  RW
snmp-server packetsize 4096
bridge 1 protocol ieee
 bridge 1 route ip
!
dial-peer cor custom
!
!
!
!
!
line con 0
 transport input none
line aux 0
line vty 0 4
 password xxx
 login
!
no scheduler allocate
end

Amardsl001#





















































-Original Message-
From: Steve Smith [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 01, 2001 8:47 AM
To: [EMAIL PROTECTED]
Subject: RE: Could someone give me an example config of adsl+router?
[7:6756]


I use a 827 router. This will go step by step to config one. You need
CCO.
http://www.cisco.com/warp/customer/794/827_faq.html

Steve

-Original Message-
From: Leo Shen [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 01, 2001 4:05 AM
To: [EMAIL PROTECTED]
Subject: Could someone give me an example config of adsl+router?
[7:6732]


it neednot dial,thanks!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6762t=6762
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]