recovering VTP password HELP!! [7:70222]

2003-06-06 Thread Michael Witte
We have a network comprised of a cat6500 as server and 3500 switches as
clients. we need to add more switches and we do not know the VTP password so
we can propagate the VLANS. I cannot find anyway of recovering this. Anyone
else had luck with this ??


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=70222&t=70222
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: ISDN - OSPF DEMAND CIRCUIT [7:61310]

2003-01-21 Thread Michael Witte
Its got something to do with the cost. try setting the ip opsf cost on the
bri to . I had simular issues and I read this somewhere.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=61528&t=61310
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE LAB Re-Grade [7:56458]

2002-10-29 Thread Michael Witte
I took the lab on 9/24/2002 and did not pass. I didn't agree on my scores
and put in for a re-grade on Sat.I know I did much better. Does anyone know
what the process is and if they will be contacting me for credit card info
ect?It also took them until Sat afternoon to get my grade so I think
something was wrong down there. thanks.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56458&t=56458
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Quick Vlan question [7:49533]

2002-07-24 Thread Michael Witte

ISL is not supported on 10mbs interfaces. You need the ISL header so that
you retain the VLAN information. If you had a 100mbs interface is would look
something like this. This would set up int fa0/0 as a trunk and it would be
trunking VLAN 1,2,3.

int fa0/0.1
  encapsulation isl 1
  Ip address 10.0.1.1 255.255.255.0
int fa0/0.2
  encapsulation isl 2
  ip address 10.0.2.1 255.255.255.0
int fa0/0.3
  encapsulation isl 3
  ip address 10.0.3.1 255.255.255.0
router rip
  network 10.0.0.0

on the switch set up the port you are connecting to the router with as a
trunk and make sure VLANS 1,2,3 are in it.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49553&t=49533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: boson Router Simulator ..Verdict [7:49004]

2002-07-17 Thread Michael Witte

Don't waste your time. Get a couple of 2500 routers and serial crossover on
EBAY. I got mine for around $450. The Boson won't do debugs and a lot of
other things you need. You will want the equipment anyway when you go for
the lab.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49047&t=49004
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: New Lab Format [7:48731]

2002-07-17 Thread Michael Witte

I personally had a Nov 4th lab date and was able to swap to a Oct 24th date
a couple of weeks ago. My thinking was that if they are getting rid of IPX
and token switch stuff(fairly easy), that content will be replaced by other
areas, not neccesarily the 3550 switch. I was totally geared up to take a
test that had token ring and IPX in it and have been preparing for that
since Jan. To throw out all of the study effort was painful and I didn't
want to conquer new ground right now. I still need some more work on ATM,
VOIP and BGP but everything else is pretty good. One good thing is that I am
taking Caslow's class in Sept and he will be covering both the pre Nov 4th
material and post Nov 4th material. This way if I am one of the 85% taking
it over I will know what else to cover.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49049&t=48731
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN BRI Simulator Comparison [7:44763]

2002-05-22 Thread Michael Witte

I bought a adtran 550 for $1600 from someone who appropriated it when they
got laid off at a dot com. Anyway it work real good and you can get POTS
modules for it. I haven't been able to get PPP multilink to work with it
anyone have thoughts? Its a real bitch to set upo too. But it is the one
they use in the LAB! My thinking is that we are really just renting this
stuff anyway and after we get our 4 numbers we will sell it back on Ebay for
as much or greater than what we paid. I have around $4000 in equipment and I
know if need be I can get it back. Then I am thinking that in the future I
would like to consult and do design and installs for companies. If I have
all this equipment it would be very easy to simulate whatever their
requirements were and then just implement with configs you did at home. just
my 2 cents


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44771&t=44763
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: L3 Between VLANS- no RSM or MSFC [7:44462]

2002-05-20 Thread Michael Witte

Just remember that each VLAN is a seperate subnet. Setup a trunk on the
switch(must be fast ethernet and ISL capable. Then setup  sub-interfaces on
router and encapsulation ISL this will cause the routers fast ethernet to be
a trunk The 4000 fast e module on ebay is like 800 you can get a 2620 for
1100 so I went with the 2620 and besides you can put voice ports in the 2620.

int fa0/0.1
 encapsulation ISL 1
 ip address 10.0.1.1 255.255.255.0
int fa0/0.2
 encapsulation ISL 2
 ip address 10.0.2.1 255.255.255.0
int fa0/0.3
 encapsulation ISL 3
 ip address 10.0.3.1 255.255.255.0
router rip
 network 10.0.0.0

Any workstation on VLAN 1 will be on the 10.0.1.0 subnet with a default
gateway of 10.0.1.1

encap ISL 1 uses vlan 1
encap ISL 2 uses vlan 2
these must match your vlans

HTH


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44524&t=44462
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: I got it now! [7:44507]

2002-05-20 Thread Michael Witte

I was actually thinking that laying in bed last night. The bit boundary is
actually 4 bits not 3 hence the .240 mask. Thanks


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44523&t=44507
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



I got it now! [7:44507]

2002-05-19 Thread Michael Witte

Ok new summary this time with eigrp.
Summarize 170.10.10.1/24,161.10.10.1/24,160.10.10.1/24

 170=10101010
 161=1011
 160=1010
   ^Bit Boundary
Mask=1110 (224)

160=1010
224=1110
AND=1010(160) We can use 160 for Network #

Int E0
 ip summary-address eigrp 1 160.0.0.0 224.0.0.0

sh ip route 
O E1 160.0.0.0/3 [110/212] via 137.20.103.1

Weird huh? Pings are successful so I have this down!
Thanks Guys!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44507&t=44507
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF inter-area summarization [7:44465]

2002-05-19 Thread Michael Witte

Great explaination. I just had issues with not being able to use my .32
network address but now I see why.I am taking the road to CCIE very
carefully and try to understand exactly why things are the way they are.
That is why I love working on the networking end of things; There is a
definitive reason for every action. there are also standards(RFC's) that
need to be followed. I do a lot of Microsoft stuff at work and you apply a
patch that overwrites some .dll and a part of your website doesn't work. Its
so frustrating. I worked for 20 years in the electronics field and you could
calculate exactly what changing a value would do. this stuff is very
simular. Thanks for the help only about 1000 more things to conquer.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44501&t=44465
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OSPF inter-area summarization [7:44465]

2002-05-19 Thread Michael Witte

Larry,
I had the idea right to use 255.255.255.192 mask because that is where the
bit boundary is. My question is why can't you use the 137.20.1.32/26 to
summarize from 32-95. What if you had a subnet zero and didn't want that
summarized. Why do I have to use the 137.20.1.0 network for summarization?
If we use this example:

172.20.8.0/22  1000 >8
172.20.12.0/22 1100 >12
   ^Bit boundary=248
   1000 >248

   1000 >8 subnet
   1000 >248 mask
   1000 >8 subnet
I think I see now.If you binary AND the subnet and mask and get the subnet
you can use that subnet in your summarization. If the binary AND becomes
zero, then you must use zero as your network in the summary command. Is this
correct? I spent too much time on this and need things like this put to bed
for the Lab in November. Thanks.
   
area 11 range 172.20.8.0 255.255.248.0


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44487&t=44465
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OSPF inter-area summarization [7:44465]

2002-05-18 Thread Michael Witte

I am trying to do a lab that needs a inter-area ospf summary address
configured
I have two loopbacks 137.20.1.17/28 and 137.20.1.33/28. These are then of
course on networks 137.20.1.16 and 137.20.1.32. Taking the last octet of the
subnets into binary we have:

16= 0001
32= 0010
 Acording to Doyle and everything else I have read I should be able to
summarize by masking the first two bits. I should be able to use:
area 11 range 137.20.1.32 255.255.255.192. I am not able to and the router
says I have a invalid address/mask. Furthermore the solution to the lab uses
"area 11 range 137.20.1.0 255.255.255.0" which creates a summary address to
all addresses of 137.20.1.X. What am I missing. This does work and I am able
to ping the loopbacks but the math doesn't work for me. I should be able to
summarize the 16 and 32 subnets.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44465&t=44465
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



"frame-relay interface-dlci" issues. [7:42902]

2002-04-30 Thread Michael Witte

Just a quick heads up to a couple of problems I had over the weekend on the
Solie scenarios. Anyway one the routers needed to be set up a having two sub
interfaces, one point-to-point, one multipoint. On the PTP I mapped the
wrong DLCI to it and even though I removed the statement and rebooted, it
would not remove it. I needed to remove the subinterface and reboot then
recreate the subinterface with the correct DLCI. Also I had a problem with
another DLCI not being seen by the spoke router. This router's serial
interface line protocol was also going up down. I suspected missing LMI and
that was the case. It turns out that in recabling for the new lab, I bent
one of the pins on the serial over. Anyway these two things cost some time
so if I can save anyone grief with similar problems great. Otherwise I
learned a few things which is the whole point of this.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42902&t=42902
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PPP multilink problems and more [7:42264]

2002-04-22 Thread Michael Witte

Hi ;
 That is what is frustrating about this whole lab study process. You get
scenarios that are supposed to prepare you for the exam. They have crazy "do
not use this" parts to them that you would never do in real life. the real
lab is supposed to do things like this so I gues I had better get used to
it. I had a simular issue with another lab until I used the called routers
name in the dialer map statement as per Cisco. I had tried it without call
back even initiated it from the other side, the encapsulation always failed
on the side that did not have the map statement. Anyway you say you are just
using dialer string without the map statements. How are you maping layer 2
to layer 3? Here are the two routers configs, a "debug ppp neg" and an
extended ping to try to bring up the second Bri0:2 line. Without the dialer
map statement it would dial and then call back but OSPF would never for a
adj. As you can see everything works fine except multilink(Adtran maybe?)
and the fact that I did not follow instructions to not use the dialer map
statement. Oh well!

router5#sh run
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname router5
!
!
username ccie password 0 cisco
username router6 password 0 cisco
memory-size iomem 15
ip subnet-zero
no ip finger
ip tcp synwait-time 5
no ip domain-lookup
!
ip multicast-routing
ip dvmrp route-limit 2
clns routing
ipx routing 0003.6bf4.da60
isdn switch-type basic-ni
!
!
!
!
interface Loopback0
 ip address 15.15.5.5 255.255.255.0
 no ip directed-broadcast
 ip router isis
 clns enable
!
interface FastEthernet0/0
 ip address 15.5.5.5 255.255.255.0
 no ip directed-broadcast
 ip router isis
 ip pim dense-mode
 ip igmp join-group 224.10.1.2
 ip cgmp
 ipx network FA00
!
interface BRI0/0
 ip address 10.1.35.5 255.255.255.252
 no ip directed-broadcast
 encapsulation ppp
 ip ospf demand-circuit
 dialer map ip 10.1.35.6 name router6 broadcast 9635000
 dialer load-threshold 1 outbound
 dialer-group 1
 isdn switch-type basic-ni
 isdn spid1 2569636101
 isdn spid2 25696360010101
 ppp callback request
 ppp authentication chap
 ppp chap hostname ccie
 ppp multilink
 hold-queue 75 in
!
interface Serial0/0
 no ip address
 no ip directed-broadcast
 encapsulation frame-relay
 backup delay 10 10
 backup interface BRI0/0
 custom-queue-list 1
!
interface Serial0/0.1 point-to-point
 ip address 10.1.12.194 255.255.255.240
 no ip directed-broadcast
 ip router isis
 ipx network 1405
 frame-relay interface-dlci 100
!
router ospf 1
 redistribute isis level-2 metric 10 subnets
 redistribute eigrp 1
 network 10.1.35.5 0.0.0.0 area 5
 log-adjacency-changes
!
router isis
 redistribute ospf 1 metric 10 metric-type external level-1-2
 net 00.0001.0003.6bf4.da60.00
!
router bgp 100
 neighbor 10.1.5.2 remote-as 200
 neighbor 10.1.5.2 ebgp-multihop 255
 neighbor 10.1.11.1 remote-as 100
 neighbor 10.1.11.1 ebgp-multihop 255
!
ip classless
no ip http server
!
access-list 101 deny   eigrp any any
access-list 101 deny   ospf any any
access-list 101 permit ip any any
queue-list 1 protocol ipx 1
queue-list 1 protocol ip 2
queue-list 1 default 3
queue-list 1 queue 1 byte-count 1000
queue-list 1 queue 2 byte-count 2000
queue-list 1 queue 3 byte-count 1000
dialer-list 1 protocol ip list 101
!
!
!
ipx router eigrp 10
 network 1405
!
!
!
alias configure a access-list
alias configure ae alias exec
alias configure rm route-map
alias configure fr frame-relay
alias exec ct configure terminal
alias exec a show access-list
alias exec b show ip bgp
alias exec d show dlsw
alias exec e show ip eigrp
alias exec o show ip ospf
alias exec f show frame-relay
alias exec ib show ip interface brief
alias exec ip show ip protocol
alias exec son show ip ospf neighbor
alias exec p show protocol
alias exec sr show run
alias exec xb show ipx interface brief
alias exec six show ipx route
alias exec sir show ip route
alias exec cib clear ip bgp *
alias exec x exit
alias exec csr copy run star
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 transport input none
line aux 0
line vty 0 4
 login
!
no scheduler allocate
end

router6#sh run
Building configuration...



Current configuration : 3560 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname router6
!
netbios access-list host cisco deny c???
!
username ccie password 0 cisco
ip subnet-zero
ip tcp synwait-time 5
no ip domain-lookup
!
ip multicast-routing
ipx routing 0060.5cf4.d510
ipx internal-network 6000
isdn switch-type basic-ni
!
!
dlsw local-peer peer-id 15.15.6.6 promiscuous
dlsw remote-peer 0 tcp 15.15.4.4 host-netbios-out cisco
dlsw remote-peer 0 tcp 15.15.3.3 host-netbios-out cisco
dlsw bridge-group 1
!
interface Loopback0
 ip address 15.15.6.6 255.255.255.0
!
interface Ethernet0
 ip address 10.1.5.2 255.255.255.248
 ip pim dense-mode
 ip igmp join-group 224.10.1.2
 ip cg

PPP multilink problems and more [7:42264]

2002-04-22 Thread Michael Witte

Hi;
 I am doing a lab scenario that is looking for a ISDN PPP Multilink with
callback connection between two routers(lab17). Anyway the lab specifies not
to use the dialer map command on the calling router but on the callback
router its ok. I used the "dialer string" command and can get the router to
call and be called back ok. The problem is without the "dialer map ip"
command I get encapsulation failed when I do a "debug ip packet" and this in
turn causes the OSPF hellos on the BRI0 interface to fail. I have looked
high and low on both this site and Cisco for a solution but couldn't find
one. The labs solution called for the "dialer string" command I just can't
make it work. If I remove the dialer string command and replace it with a
dialer map command my OSPF comes up and then the demand circuit works and
suppresses the hellos. Also on the lab they call for both BRI channels to
come up. I am using the "PPP multilink" and "dialer load-threshold 1"
command to no avail. a "show ppp multilink" shows only the BRI0:1 coming up.
My only thought is that my ISDN simulator(Adtran550) doesn't support it, but
i know they use this box in the real CCIE labs. Is there something that
needs to be configured on the Adtran or is there something else I am
missing? I am starting one of the CCIE practical studies lab(Skynet) tonight
so any quick help would be good if not I move on.Thanks.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42264&t=42264
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Buy Vs. Virtual Rack Time for CCIE [7:40100]

2002-04-04 Thread Michael Witte

Buying is the only way to go. I am in for about $4000 and I have 7 routers,
a 5000 and a ISDN simulator. Look at EBAY and watch the auctions to see what
stuff is going for. Be careful about how much flash and if the bootroms will
support more memory. You need 16meg flash 16 meg ram and 12.1 IOS with
support for DLSW IPX ISIS and such. With your home lab you can go downstairs
for a couple of hours at a time most of the lab sites sell blocks of 8 or 12
hours for and if you don't use it all whats the sense. I recommend the labs
for access to expensive stuff like ATM and VOIP but I would save that until
the end of my studies after I can configure everything in record time. Get
some labs from CCBootcamp or such and practice away. I heard you need about
750 hours of practice time for a fighting chance. I set my lab up about 2
months ago and I probabaly have over 100 hours on my lab. I have a long way
to go every night you see something new. For people that have families like
me I can only devote a couple hours a night a some weekend time before the
wifey needs help or something. For me the home lab makes sense because I am
not forced to work on the rack if something comes up last minute. The CCIE
is not a cheap thing to obtain I have allocated 12-15k to get it between
equiment, rack time, boot camps, books, and travel to the lab itself.
hopefully after I pass my earning potential will increase 20-30% and the
money will be well spent. If you think about it you are a business and you
are selling your services so it makes good sense to invest in your business.
Just my 2 cents.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=40406&t=40100
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: question on cisco lab [7:39683]

2002-03-28 Thread Michael Witte

I had the same issue and its quite simple. I went for a couple of weeks like
this and my friend showed me the trick. i assume you have the ip host setups
for each router. lets say you have 6 routers R1,R2,R3,R4,R5,R6. Log onto
each one in order. Now Cntrl+shift+6 x to go back to your terminal server.
To go to each router now just type 1 instead of R1, 2 instead of R2. The
reason is you are going back to your open session not opening another one,
that is why the connection fails, it is already opened. Went through the
same thing.george gittins wrote:
> 
> Im using a terminal server connected to my routers for my built
> cisco lab.
> however
> everytime that i change the ip address or modify the
> configuration i can do
> a reverse telnet to the router? i need to plug in a laptop and
> modify  the
> con  0 line again
> is there a reason for this. I thought that once you set  this
> settings and
> if screw up
> on the ip;s their always a backdoor?
> terminal-server#telnet router1
> Trying router1 (172.21.1.1, 2001)...
> % Connection refused by remote host
> 
> 
> 
> 
> 
> 
> George Gittins
> Internet Systems Manager
> Weslaco, Tx 78599
> Phone (956)9696557
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39841&t=39683
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: wan home lab [7:39441]

2002-03-25 Thread Michael Witte

The DCE/DTE cable is all you need. On the cable that is marked DCE you must
use the "clockrate 64000" under the seral port you are using.
If the cable is not marked, do a "show controller int s0" and it will show
what serail port is a DCe, which is a DTE. To simulate frame-relay all that
is necessary is the "encapsulation frame-relay" under bothe serial
interfaces. You should be able to do a "no shut" and both intf should be up.
HTH


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39447&t=39441
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN Problem [7:39342]

2002-03-25 Thread Michael Witte

A couple of things come to mind:
a) I would like to see the show int bri0:1 to see if the B channnel came up.
b) I do not see a dialer map statement, without it the packet will not know
where to go.
c) I had a similar problem with encapsulation failed on the packet debugs.
The  Bri0:1 B channel was up, and the packets were being forwarded to the
Bri0 correctly. The problem was the ping packet on the other side had a
encapsulation failed. The issue was traced to needing a "PPP authentication
pap/CHAP" statement with the appropriate username shared secret password
combo. I don't know why it was needed, but I found it on TAC under
troubleshooting.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39419&t=39342
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CLI for 1900 Switch [7:37805]

2002-03-14 Thread Michael Witte

You need enterprise edition IOS software.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38299&t=37805
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: nter-Vlan routing [7:38088]

2002-03-14 Thread Michael Witte

This link will help to find any feature supported on any platform and the
IOS required. Otherwise it is difficult at best to figure out the supported
features.
http://www.cisco.com/cgi-bin/Support/FeatureNav/FN.pl


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38231&t=38088
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Strange VLAN Problem [7:37517]

2002-03-06 Thread Michael Witte

Here is the scenerio: 2 Catalyst 1912 switches connected with 100 Mbits port
and set up for trunking. 6 Vlans set up on both swithes, 2 ports to a VLAN.
2 workstations 10.0.4.10/22 10.0.4.11/22. If wkstA and WkstB are in same
VLAN on same switch they can ping. If wkstA and WkstB are in same VLAN on
second switch they can ping. Now here is where it gets weird. If you move
one of the worksations out of the VLAN on a single switch they can't
ping(expected). If you are on seperate switches but in the same VLAN and
ping 10.0.4.11 -t , then move the workstation to another VLAN on the  switch
they can still ping(not expected). My thoughts were that there must be some
kind of cache on the trunk port that has source MAC's(Workstation's)
associated with ISL tags. By moving the workstation to another port in a
different VLAN, you still had the  same source MAC and therefore would be
tagged by ISL as still being in the previous VLAN and would therefore be
forwarded to the port in the previous VLAN. Kinda like MLS cache flows. By
doing a shut and no shut on the trunk interface  or disconnecting and
connecting the cable you were not able to ping so I figure the cache was
cleared. Has anyone seen this on the higher end switches? Things that make
you say HMM.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37517&t=37517
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



encapsulation failed on ISDN line [7:37119]

2002-03-03 Thread Michael Witte

I have been working on a problem and would like to share the fix I found it
looks like others have had simular problems in the past. I have two routers
with BRI-U's going into a Adtran 550. Everything comes up, but on the called
router I get encapsulation failed when I ping and do a "debug ip packet'.
This is normally a layer 2 issue like needing the "frame-relay map ip"
statemnts. Anyway i could not find why the packet wouldn't go out the BRI
interace if you show "ip route" the ip address of the calling router is in
the route table. After searching Cisco I found that if you enable "ppp
authentication chap" it will give the layer 2 mapping to the called router.
That worked perfect, just thought I would share.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37119&t=37119
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Single user for dialer pool on Ras [7:36589]

2002-02-28 Thread Michael Witte

I was able to configure the Radius server for a new user which was the
router. I specified the first IP in the pool to it and for the default user
I specified a pool on Radius and started it after the first address which I
used for the router dialing in so no one would grab the IP. Good Stuff. The
PPP protocol can use Radius to configure quite alot for a dialin user. Guess
I have to learn some more Linux too!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36926&t=36589
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Very Weird Frame Relay Issue [7:36736]

2002-02-28 Thread Michael Witte

you must reboot after any changes on subinterfaces they may use the old
configs. that is why we have no life; reboot after everone is in bed!


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36924&t=36736
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OSPF Network Type (In)Compatabilities [7:36781]

2002-02-28 Thread Michael Witte

You could just use the "ip ospf hello-interval" to fix hello
inconsistancies. I don't think that point-to-point or multipoint mismatches
will cause issues just hello mismatches. You could also use the "ip ospf
priority 0" command on all interfaces of the router from preventing DR/BDR
elections on that router.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36923&t=36781
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Single user for dialer pool on Ras [7:36589]

2002-02-26 Thread Michael Witte

I have been tasked with giving a vendor DLSW connectivity through our
RAS(3640) using a 1660 with a modem on the aux port. Everything works fine I
just need to have the router get the same ip address everytime it logs on so
I can use that ip address for my DLSW local-peer. I know you can do it with
Radius but I am not very good with that and I need a workaround so I can
define a single user a ip address. Any thoughts? Thanks in advance.


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36589&t=36589
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



What equip is really necessary for lab studies? [7:31295]

2002-01-08 Thread Michael Witte

Hello all;
  I know the equipment subject has been discussed many times in this group,
I have followed many of the threads. Of course it would be nice to buy every
piece of equipment on the CCIE lab list but sometimes that is not practical
for people that have kids to feed. Anyway I would like some input on what I
equipment I really need to concentrate on. Right now I have a 2523 for my
frame-relay switch, a 2524,2504,2 2610's and 2 1900's. All have latest IOS
and is sufficient for doing most OSPF, BGP and anything else. I was planning
on getting a 2513 for translation bridging, and a 5500 and 2620 so I can do
a router on a stick and VLAN stuff. I am 99% sure I need fast ethernet to do
ISL and inter-VLAN routing hence the 5500 and 2620. I realized yesterday
that the 4500 can support fast ethernet and token ring so instead of the
2513 and 2620 I can use this. I am also planning on getting a Teletone
simulator for ISDN. As far a VOIP,ATM,and the 3900 I was going to use some
rack time for practice. Here is what I need input on:
1)5500 and 4500 for inter-Vlan routing and VTP-  Can I get away with rack
time?
2)ISDN simulator- Again can I get away with rack time?
3)VOIP,ATM,3900 -rack time?
   I just got the new CCIE Practical studies Part1 and don't see much
inter-VLAN routing. I looks like a great book I only got it yesterday and
its worth a look. They are going to put out volume2 which will go into BGP
and IPX more. I assume Inter-VLAN routing be covered in the lab, just how
much? If the recommendation from everyone is to get the equipment I will,I
would rather spend it on a bootcamp a month before the LAB. I plan on taking
the lab in Sept, but I want to nail down the equipment so I can have one
less thing on my mind. I have access to a lot of equipment at work I just
can't play that much. Thanks in advance everyone!



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31295&t=31295
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]