Re: response time between PIX with VPN [7:60981]

2003-01-17 Thread Mike Sweeney
Well..well..well.. in a way I feel like idiot.. but in another it was a very
much a learning experience.

After checking over everything and recreating the 800mS to 2 second delays,
I found the problem.

When I first set up the lab, I spent some time working with the debugs for
ipsec, isakmp and icmp. I was bouncing between PIXs looking at the results
and working out the configs. Apparently, on the 520 PIX, I left a debug
process running or it hung there on it's own from one of the times the ssh
window timed out. I would have thought it would have died on its own
but..then again maybe not.

I had to reboot the 520 but that clear the problem and pings went to an
expected 2mS response time. I had not rebooted the 520 since I was trying to
replicate using a production PIX. I'm starting to think that when working
with VPNs and the like, a reboot is a useful thing to do. Yes? no?

Thanks again for the comments.. as it turns out I learned things from the
comments and my own struggles. Sometimes it's best this way :)

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=61261&t=60981
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: response time between PIX with VPN [7:60981]

2003-01-16 Thread Mike Sweeney
Darrell-

I like the tidbit about reverse lookup with traceroute.. I always wondered
why the Sun boxes were so slow at times during pings . Now I need to fire up
the sniffer and the x86 Solaris and see what I can see :) It would be my
luck that the x86 Solaris is different ..

Anyways.. this config was a Win2K laptop to a Win98 laptop. The back to back
between PIXs is made via two ports on a 2900. I plan to run through it again
this weekend and get some better notes.

Priscilla.. I started with ping but went with traceroute to play with access
lists allowing traceroute to pass. The telnet was just a quick and dirty
test that I could in fact make the connection through the tunnel. It was an
observation that the response time of the telnet was very *bursty slow*. It
would almost *pause* and then send a sequence of keystrokes. Almost like the
tunnel was flapping but the debug did not show this.

That slowness tied into the 800ms times posted by traceroute since 100ms is
preceptible by a user.

Like I said, I'll run a more formal test and gather up some more data. I
posted just to see if anyone had some ideas off the top of their heads.

Thanks

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=61240&t=60981
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: response time between PIX with VPN [7:60981]

2003-01-13 Thread Mike Sweeney
In answer to Eric, there is not any DNS involved as the traceroute is IP
only... no name resolution needed.

In answer Ed's comments, I have both plugged into a switch and so it's not
*back to back* in the normal sense of the word.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60984&t=60981
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



response time between PIX with VPN [7:60981]

2003-01-13 Thread Mike Sweeney
I just set up a back to back PIX firewall test. Using IKE and IPsec with a
laptop on either end. One is a 520 (6.2) and the other is a 501 (6.2) and
Win2K and Win98 as clients. Everything works as it should but.. isnt there
always a but? the traceroute response time is something like 800mS. When I
telnet into the 2K box from the 98 client, it's pretty slow in the echo back
to the telnet session.

Ideas of what to check? I cant believe that is considered normal unless it's
directly related to the 501 being pokey and the 520 being an older PII300??

Thanks

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60981&t=60981
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: TACACS password encryption [7:60886]

2003-01-12 Thread Mike Sweeney
I just ran a trace showing a telnet session from a desktop to the terminal
server which uses TACACS to provide authentication.

The telnet session where I typed in the password is plain text.. this is in
response to the terminal server prompt. The actual username/password between
the terminal server and the TACACS server is encrypted.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60932&t=60886
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Learning PIX [7:60919]

2003-01-12 Thread Mike Sweeney
We have a PIX tutorial on our site. It's built around the 501 but the ideas
will be the same. We also have other Cisco links to various PIX pages.

www.packetattack.com/tutorials.html

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60931&t=60919
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT: Technical Writing [7:50077]

2002-07-29 Thread Mike Sweeney

When I write, I rarely start in front of a monitor at first. Normally it's
with a pen and a pad of paper at a local starbucks/coffee house or hanging
in my patio canvas chair. I long hand an outline and then rough in a few
paragrahs. Then I get out the laptop and goes nuts. But I dont insist on a
quiet house. I normally put on some classic (since when I did become a
classic) rock or blues tunes for *background* noise. My better half
needs a completely quiet house when she writes so we trade off times/days as
needed.

Everyone is different but there are times where it just doesnt work and
times where I hate to get up since it's flowing so well.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=50078&t=50077
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 500CS Comm Server [7:49071]

2002-07-17 Thread Mike Sweeney

H... Mike's and mine are close.. but I run TACACS on mine since it faces
the public via a DMZ

MikeS

Current configuration:
!
version 10.3
service config
no service pad
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname xxx
!
boot system cs500-c-m.103-19a.Z.bin 192.168.50.29
aaa new-model
aaa authentication login default tacacs+ enable
aaa authentication login old_way none
aaa authorization commands 1 tacacs+ if-authenticated
aaa authorization commands 15 tacacs+ if-authenticated
aaa accounting exec start-stop tacacs+
aaa accounting network start-stop tacacs+
aaa accounting connection start-stop tacacs+
aaa accounting system start-stop tacacs+
enable password 7 zz
!
no ip domain-lookup 

::snip:::



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49101&t=49071
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: FW: PIX 520 Motherboard repair replace [7:48959]

2002-07-17 Thread Mike Sweeney

Intel Etherexpress 10/100B  which has a S82557 chipset. Others may work but
these I've tested and have been very reliable. I have a close up shot of the
NIC here(along with other parts)

www.packetattack.com/frankenpix.html

I dont know of a way to tell the 16Meg flash apart from the 2 meg flash only
because I do not have the 16 to take a look at. I would suspect you could
look at the PN on the flash chips.

One error that seems to be very common is that the video card screws up the
IRQ that that PIX bios wants to use. Since you need to config the
motherboard BIOS for things like CPU speed and so on, you need a video card.
Once the PIX bios takes over, the video card is useless. But.. when testing,
the IRQ conflict happens pretty often.

My FP is running 5.1(4) which is the last 2meg flash image I'm aware of..
there might be one slightly newer but this one does everything I need it to
do for now.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49053&t=48959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX 520 Motherboard repair replace [7:48959]

2002-07-16 Thread Mike Sweeney

You think thats bad-  I'm looking for a still of Dr. FrankenSTIEN to edit a
bit with the mad doc looking over a frankenpix on the table :)

idle minds...

MikeS


Brad Ellis wrote:
> 
> Actually, there are a couple mother boards that will work.  CPU
> is dependent
> on the motherboard.  Ive seen frankenpix's with 850MHZ
> processors in them...
> 
> Mike - you've got frankenpix in your http address!  too funny. 
> can i come
> after you for trademark infrindgement??  :)  (j/k)
> 
> thanks,
> -Brad Ellis
> CCIE#5796 (R&S / Security)
> [EMAIL PROTECTED]
> Cisco home labs:  www.optsys.net
> ""Alex Lei""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Facts have spoken. I retract my prior statements.
> >
> > By extension, could you have used a differenet MB / CPU?
> >
> > Alex
> >
> > Mike Sweeney wrote:
> > >
> > > Special drivers? bunk-
> > >
> > > http://www.packetattack.com/frankenpix.html
> > >
> > >
> > > It can be replaced with a normal, garden varity Intel
> SE440BX
> > > motherboard. I happen to use a recycled PII 300Mhz slot1
> > > processor which had been used as a paperweight for the last
> > > year ;)
> > >
> > > MikeS
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=48988&t=48959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Terminal server configuration [7:48678]

2002-07-16 Thread Mike Sweeney

Dan-  put together a cheapo linux box and put a TACACS server on it. Now you
can go nuts with who gets what. Use webmin for a GUI interface to manage the
Linux box and you are set.

Or you can do what I do alot. I bought a copy of Virtual PC for Windows off
ebay for under 70 bucks. Install it on a workstation and run a virtual PC
session with either ACS running on a virtual session or Linux running on a
virtual session. This works very well for the occasional use application.

MikeS
[EMAIL PROTECTED]


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=48970&t=48678
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX 520 Motherboard repair replace [7:48959]

2002-07-16 Thread Mike Sweeney

Special drivers? bunk-

http://www.packetattack.com/frankenpix.html


It can be replaced with a normal, garden varity Intel SE440BX motherboard. I
happen to use a recycled PII 300Mhz slot1 processor which had been used as a
paperweight for the last year ;)

MikeS





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=48968&t=48959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX 501 Upgrade [7:46519]

2002-06-13 Thread Mike Sweeney

I had Cisco TAC gen a new key for for me.. their Oracle Database which does
this automaticily was broken. Then I used this link to get the details of
the install. the instructions are for a 515 but work the same since the 501
doesnt have the floppy.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v51/config/bootmode.htm#xtocid139834

Watch for wrap.. 

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=46542&t=46519
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: The end of Token Ring etc [7:46497]

2002-06-13 Thread Mike Sweeney

Besides, many us use our labs not just for testing but for mocking up
customer solutions/problems/possible ideas. I still get jobs with Netware
3.12 involved and one hospital I was at had over 300 nodes of Token Ring for
the forseeable future.

I agree that Ebay pricing on some things will tank in the next month. But it
doesn mean that it suddenly disappear from networks.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=46522&t=46497
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Training Documents? [7:46298]

2002-06-12 Thread Mike Sweeney

Well.. My site is a bit more *low brow* relative to the various CCIE cert 
sites :)  I cater towards CCNA, CCNP candiates and CCIE's who are
researching various projects. Not to mention practicing network geeks who
want to read up up network security, intrusion detection, honeypots and the
like.

www.packetattack.com

No registration require at this point in time. Just show up and enjoy.

MikeS


John Stamos wrote:
> 
> Hi Everyone,
> 
> I'm new to the list and was wondering if there are any good
> websites that offer free training material?
> 
> Thank you!
> 
> -John
> 
>  
> 
> 
> 
> -
> Do You Yahoo!?
> Sign-up for Video Highlights of 2002 FIFA World Cup
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=46350&t=46298
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cloning a PIX from a PC (FrankenPIX) [7:45833]

2002-06-05 Thread Mike Sweeney

I have to ask why go through the heartache of building something like this?
oh yes, it can be done.. but the 501 *new* is 425 delivered and is running
6.1  About the only thing that I have found it wont do is redundent
failover(no port) and a *real* DMZ again because of the 2 port limit. If you
are considering the 506, then you do not seem to care about 2 port limit??

I am assumning this is for a lab as I would not expect any self repecting
engineer to put a *frankenPIX* in a production network.

You must have found the same place I did for the flash.. so far as I know
it's Cisco's card or nothing.

Besides, the 501 is so dinky, that it takes virtually no space in the rack :)

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45883&t=45833
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Off Topic - inauspicious beginning [7:45592]

2002-06-01 Thread Mike Sweeney

capslock on?


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45610&t=45592
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX 501 [7:45544]

2002-05-31 Thread Mike Sweeney

I will offer up three suggestions

Cisco Secure PIX firewalls / Cisco Press

Cisco Security / Global Knowledge
This is my second choice. I liked the layout and the information was
presented pretty well.

Cisco Scure Internet Security Solutions / Cisco Press
This one I found the most useful with configs and line by line explanations
to what was being done in the config


I have not yet played with any of the Labs available. soon though :)

MikeS




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45557&t=45544
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Chatsworth Router Rack Home Installation [7:45517]

2002-05-31 Thread Mike Sweeney

3/4 in plywood makes a pretty good base.. If you use *carriage* bolts, there
will not be anything sticking down from the bottom. The smooth head is
underneath and the nuts would be on top.

I would consider using that and then running a mount to the ceiling to help
keep things from rocking back and forth too much. Another thought is to find
something thats not too ugly but heavy to put on the outside edge of the
plywood.

I'm sure others will have some suggestions on this excerise :)

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45519&t=45517
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNA level IPX question, proper phrasing [7:45138]

2002-05-28 Thread Mike Sweeney

It win2K friendly.. in fact it's being developed on a Win2K box :)  I will
check the current package since I reloaded it late yesterday with some edits.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45279&t=45138
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNA level IPX question, proper phrasing [7:45138]

2002-05-28 Thread Mike Sweeney

So far I'm running about 3 to 1 in favor of the question as it is. Both
sides have made interesting arguments in their favor. But I'm a bit biased :)

Logan, I had not thought of the IPX pinging, good call on that.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45248&t=45138
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNA level IPX question, proper phrasing [7:45138]

2002-05-27 Thread Mike Sweeney

I have a IPX question in my CCNA practice test beta and I've had some mixed
feedback on it. The questions asks what is the command to enable IPX routing
on a router and gives a MAC address as part of the question. The question is
a *fill in the blank* type.  The answer I have is:

ipx routing 

Is making the MAC a requirement of the answer a *fair* use of the command? I
thought so even though IPX routing will automaticaly assign the node
address. I felt inclusion of the MAC into the question was a clue that it
needed to specified.  Is this too much to ask of a budding CCNA?

PS-  for those who would want to look at the entire beta, it's 60 questions
at this point and a free download.. as long as you use the feedback form to
give me yes, no, it sucks etc..etc..  :) I have managed to get some good
feedback so far and will always take more.

www.packetattack.com/tutorials.html

Thanks

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45138&t=45138
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: GROUPstudy.com......with the Emphasis on GROUP [7:44969]

2002-05-25 Thread Mike Sweeney

I have to agree.. in the last few months the board has taken a distinct turn
for the worse and I find myself coming around here less and less. When I
first started hanging around here over 1.5 years ago, it was much *looser*
and friendlier. I have noticed that some who regularly contributed rarely
say much anymore and that's a loss.  If I want flame wars and name calling,
I can go the newsgroups for that behavior. It should not be part of this
group from anyone. I do not always agree with people here but most times the
points are not worth the effort and the discontent to make an issue about it.

MikeS
:::pining for the old days:::


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=45027&t=44969
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Coriolis/Examcram [7:44924]

2002-05-23 Thread Mike Sweeney

Keith Woodworth wrote:
> 
> Ive purchased over the last few years some books from Coriolis
> - the Exam
> Cram series and found them to be not bad.
> 
> Looks like their sites have been down for the last few weeks.
> Anyone know
> what happend to them? They go belly-up?
> 
> Thanks,
> Keith
> 
> 


Can we spell *toast*

I got one of the last deals before they went away for the last time. 12
bucks shipped for their book on SAMBA ;)

It was pretty sudden from everything I've been told.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44926&t=44924
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Chuck Semeria's IP Addressing Tutorial - Gone? [7:44865]

2002-05-23 Thread Mike Sweeney

Go to http://www.packetattack.com/downloads.html

About halfway down the page I have PDF versions posted. 3 files.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44879&t=44865
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN BRI Simulator Comparison [7:44763]

2002-05-22 Thread Mike Sweeney

I have an older Arca Emutel which is ST only. No external NT1's required on
the older 2500s. Works great and about the only difference between the new
one and this one is the U interface.

Default numbers are 55 and 66

Switch type default is Basic-dms100

Bought it used from one of the guys on the boards here :)

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44792&t=44763
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Mounting Brackets? [7:44503]

2002-05-21 Thread Mike Sweeney


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44614&t=44503
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: debug ppp authentication [7:44575]

2002-05-21 Thread Mike Sweeney

This is off a 2504. It's also on my other 2500s with 12.x code

What are you running for a router?  one of those space heaters from a long
time ago ;-)


MikeS


CentralRouter#debug ppp authen
CentralRouter#debug ppp authentication ?
  

CentralRouter#debug ppp authentication
PPP authentication debugging is on
CentralRouter#ping 192.168.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:

00:05:16: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
00:05:16: %DIALER-6-BIND: Interface BRI0:1 bound to profile Dialer1.
00:05:16: BR0:1 PPP: Treating connection as a callout
00:05:16: BR0:1 PPP: Phase is AUTHENTICATING, by the peer
00:05:16: BR0:1 AUTH: Started process 0 pid 28
00:05:16: BR0:1 CHAP: I CHALLENGE id 1 len 33 from "BranchRouter"
00:05:16: BR0:1 CHAP: O RESPONSE id 1 len 34 from "CentralRouter"
00:05:16: BR0:1 CHAP: I SUCCESS id 1 len 4
00:05:17: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed
state
to up...
00:05:22: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 55
55.
Success rate is 0 percent (0/5)
CentralRouter#


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44613&t=44575
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Support Passed [7:44599]

2002-05-21 Thread Mike Sweeney

Cody Lerum wrote:
> 
> Ok, well I started kinda backward, but I passed my CCNP Support
> test, and I'm now working on my Remote Access. I have the cisco
> press books, which I love, but is there anything I should know
> about the remote access test?
> 
> 
> 
> Cody Lerum, CCNA, (1/4)CCNP

Know your ISDN pretty well. Know the U-T-S-R (use tange sparingly richard)
sequence and reference points of a ISDN circuit. Bone up on a the protocols
that make up ISDN, PPP and X.25  I had only a couple of X.25 questions but
alot on ISDN, Frame and design(which router for what circumstance) I had two
questions on connecting via DUN(windows) so give it a brief look. A few
light questions on NAT and a few on AAA(basics)

The books I used were the Cisco Academy series along with the lab book for
some practice labs. The Exam Cram was terrible relative to the actual test
which was somewhat surprising given the Routing and  Switching books seemed
to be a much better match to the test material.

I used Trancenders and CCXX's study questions. Both matched well to the
exam. BTW- the current exam NOT the new one in the wings.

MikeS
www.packetattack.com


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44612&t=44599
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: BeachFrontDirect.com [7:44048]

2002-05-13 Thread Mike Sweeney

When I did my MCSE, I tried it. It had errors and I ended back with
Trancenders.

Just my opinion

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44068&t=44048
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: cheapest router supporting two ethernet ports [7:44061]

2002-05-13 Thread Mike Sweeney

2514's have fallen quite a bit on Ebay of late. They roughly the same as a
1605 nowdays. Figure right about 500ish.. my quick numbers show that the
average price PAID on Ebay for the last 30 days is 409.00

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44067&t=44061
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE in 3-6 Months from cisco Interesting [7:43306]

2002-05-05 Thread Mike Sweeney

Boy-  I read all this about *money this and salary this etc* and I feel
pretty much out of the loop. I think I have come to the conclusion that I am
the *token* wannabe CCIE (at some point) who does what he does because he
LIKES it.. Sure.. money is nice but my salary has bounced up and down a few
times and I must say that generally speaking, life is more enjoyable at the
lower salary with less stress and expectations. I spend many, many hours
working with computers, networks, web pages etc because I'm am a technology
junkie, I love what I do to make money and I want the certs for personal
satisfaction. I dont brag about test scores(which have been good so far) and
I like to design self-help tutorials for free as evidenced by the goodies on
my site.  This preoccupation with money is a waste of time and effort. Spend
your time bettering yourself both technically speaking AND socially speaking
and two things will happen. One, you will like yourself better as will those
around you AND money will come along in unexpected ways.

Just a humble opinion to be taken with a grain of salt.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=43338&t=43306
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Free Sniffer download [7:43297]

2002-05-04 Thread Mike Sweeney


I have a few shareware and demos here. 

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=43314&t=43297
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: US Robotics modem to Cisco 2514 [7:41894]

2002-04-19 Thread Mike Sweeney

> 
> This is what I have used for a 2501. The Sportster modem has
> original dip
> switch setting of 3,5,8 down all others up.
> 
> line aux 0
> login local
> password password
> modem inout
> modem autoconfigure type usr_sportster
> transport input all
> flowcontrol hardware
> stopbits 1
> speed 38400
> 
> 

Interesting.. I used settings I found on a Cisco doc..

Switch for a Sportster 56K is

1,4,8 down the rest up

line aux 0
 password cisco
 login
 modem InOut
 transport input all
 flowcontrol hardware

This worked well enough to bring up the modem via reverse telnet and for it
to autoanswer. Not much else but it was a good starting point.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41976&t=41894
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Swicthing and sniffing [7:41501]

2002-04-16 Thread Mike Sweeney

Well.. on the big cats, 2900s and 1900s, you can set up a monitor port which
gets a mirror of data from a port you specify. Works pretty well. You can
sniff either port or specify a VLAN to be mirrored. I tend to use the hub as
a quicky tool when I'm at an office and out of ports.

On the cheapo switches like Linksys and Netgear, I dont know of any *mirror*
function so it's drop and insert the hub.

I'm sure other folks here have some tricks and tips.. 

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41606&t=41501
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Terminal server reverse telnet ? [7:41496]

2002-04-15 Thread Mike Sweeney

Got it..

CTRL-SHIFT-6-6-x

Notice the double 6?  thats the magic I needed to know. Gotta love Google
once you get the right search words. In this case, the word *nested* is what
brought me to the answer. And it was not found on Cisco's site..

Thanks

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41499&t=41496
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Terminal server reverse telnet ? [7:41496]

2002-04-15 Thread Mike Sweeney

I would swear I've seen this answered here before but I can seem to find it
now that I need it.

The short version is I have a terminal server connected to a router. The
router is config'ed on the AUX port for a modem. I reverse telnet into the
router(normal) from the terminalserver. Then I need to reverse telnet to the
modem on the router. So far so good. The problem is when I need to pause and
drop out of the AUX session back to the router. The normal shift 6 x kicks
me all the way back to the terminalserver and not just the router that is
being worked on. I know there is a way around this but I dont remember
it::whimper::

If someone would be kind enough to post an answer, link etc.. Meanwhile I'll
keep looking on my own.

THanks!!

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41496&t=41496
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP:Switching Exam !! [7:41211]

2002-04-11 Thread Mike Sweeney

know your multilayer switching commands.. 

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41212&t=41211
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP exams [7:41039]

2002-04-10 Thread Mike Sweeney

Hmm.. I have ended up almost always at Half.com or Amazon for my books
USED..

I use bestwebbuys.com to search out the best pricing and most of the "used"
books were actually new books.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41123&t=41039
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP Training kit [7:40915]

2002-04-09 Thread Mike Sweeney

Matt-

Can you define *terrible*??  bad questions? incorrect? 

Inquiring minds would like to know

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=40943&t=40915
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP Training kit [7:40915]

2002-04-09 Thread Mike Sweeney

To add to this comment, for giggles I went over one of these *cheet sheets*
that folks seem to so in love with.. 100 questions..  4 not usable due to
missing exibits and the caption *use your best judgement*... another 3 were
just plain wrong(verified by looking up in books instead of memory) and
several more were suspect...

Cheating doesnt pay..

So where does that leave us where the dark side is incorrect AND the good
guys put out such a shoddy product?

I used Transcender with ok results, Beachhead had errors on their CCNA..
might be corrected now, Boson was spotty in quality but my experience is
limited with their product and may not respresentive of their current
product. Exam Prep is now toast unless picked up by someone else.

I do like the material by CCxx Productions. 

I used the Cisco Academy semester 5-6 books and materials. That seems to be
pretty good but I did find many *small* errors in the labs.. things like
printing 172. when they meant 192..  I did find a few missing
commands but in most cases they worked as they should.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=40937&t=40915
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Local Area Mobility Saved My Hiney [7:39770]

2002-03-28 Thread Mike Sweeney

Hey John-  neato trick.. I need to put that one into the PalmPilot ;)

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39809&t=39770
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN Problem [7:39342]

2002-03-24 Thread Mike Sweeney

Hey Abbas-

Check your switch type with the carrier.. my guess is that it's incorrectly
set.

:::snip::
 Cause i = 0x82EF - Protocol error; unspecified. 
::snip::

MikeS
www.packetattack.com



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39356&t=39342
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: TACACS+ [7:39297]

2002-03-23 Thread Mike Sweeney

Come by my site.. I have a few different flavors of TACACS+ for downloading
along with docs and white papers. I have a link to the TACACS stuff in the
news columm.

MikeS

www.packetattack.com


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39305&t=39297
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCNP exams [7:39172]

2002-03-23 Thread Mike Sweeney

> Real life is:
> 
> 
> 
>  You need over 5 years experience, Certifications and a 4 year
> B.S.
> degree computer related.
> 
> 

No-  this is not accurate. I do pretty well without the 4 year degree in
Computer Science or EE(original path)

There are *some* companies that use the 4 year as a filter but in many
cases, it's not somewhere I would want to work anyways. The only time I have
had troubles because of the lack of degree, comes from someone who is
insecure in their own position OR they have a need to constantly validate
their life choices such as a degree.

I'm all for the changing of the tests periodically.. and this is from
someone who is *in the pipe* for their own CCNP. Why?  because if you really
know the material, then the test does not matter. If you really know the
commands(like you should) then sims dont matter. If you are someone trying
to get by with the absolute barest investement in yourself by using
cheetsheets and rote memorization, then tough.. go get a life somewhere else.

My routing test took longer then I thought it would because I sat down and
practiced quite a few labs since I had not worked with BGP at all. I could
have just read the book, crammed the night before and passed. But I would
NOT have KNOWN the material. I learned much more setting up the labs, typing
in the commands over and over and the cursing that follows when it doesnt
work right. Troubleshooting is an excellent teacher :)

I do agree that the questions by and large are badly written in the attempt
to make them *difficult*.. such is life.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39295&t=39172
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Free PIX command trainer [7:39226]

2002-03-23 Thread Mike Sweeney

Ole-

Thanks for the useful programs :)

MikeS
www.packetattack.com



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39294&t=39226
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Has anyone attended ICTP? [7:38900]

2002-03-21 Thread Mike Sweeney

Hey Aaron-  when you get out here.. drop an email for a brew or two. I'm
about 10 minutes from the lab.. not that I go there ;)

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39027&t=38900
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Free Home routing moch labs?? [7:38943]

2002-03-20 Thread Mike Sweeney

I would suggest the Cisco Academy  series of books. The labs are pretty good
for practice up to CCNP level. CCIE practice can be found with  the All in
ONe CCIE Lab Study Guide book.

I for one have been translating and testing the semester 5-6 labs to my
rental rack.. in other words, you can pick up the semester 5 book, go to my
site, rent the rack and get a diagram that maps the rack to the lab in the
book and the results will be the same.

MikeS

www.packetattack.com



Daniel Cotts wrote:
> 
> There are tons of sample configs on CCO. All free.
> 
> > -Original Message-
> > From: Tom Brokaw [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, March 20, 2002 9:49 AM
> > To: [EMAIL PROTECTED]
> > Subject: Free Home routing moch labs?? [7:38943]
> > 
> > 
> > Does anyone know about any free routing labs to confiugreo n
> your home
> > routers?  No simulators, or rack time.  I am looking for a
> free or low
> > priced routing lab practice.  I know about fatkid.com.  I 
> > don't want to pay
> > $300,$650. etc.  I am sure there is something out there to 
> > help us poor
> > Cisco students.  Thanks.
> >   Michael Williams  wrote: Are you sure that's the workbook
> for $315?
> > 
> > I think this is the workbook you speak of for $494:
> > 
> > http://www.ipexpert.net/products/itemdetail.asp?SKU=ip0001
> > 
> > (watch for URL wrap)
> > 
> > I'm not sure what that is for $315.. 
> > 
> > Anyone?
> > 
> > Mike W.
> > Do You Yahoo!?
> > Yahoo! Sports - live college hoops coverage
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38972&t=38943
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX 501 (quick help needed) [7:38645]

2002-03-18 Thread Mike Sweeney

Yes and yes..

I have one in my lab config'ed this way for testing of a secondary link.

MikeS
www.packetattack.com



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38646&t=38645
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: you American need to think [7:38323]

2002-03-15 Thread Mike Sweeney

I think you folks are missing a valuable point and lesson here. 

The real point has nothing to do with if *Jim* is correct, a flame baiter, a
pond scum commie or my best friend.. it does have everything to do with
something that America is pretty unique about having for US living here. THe
ablility to say virtually ANYTHING you want without fear of the jackboot
crowd coming to visit you and inform you of the error of your ways.
Unintentionly *Jim* has reminded us.. or should remind us that America for
all it's faults is still the one place that people to this day DIE to try to
get to. Why?  because Americans come close to being free in the true sense
of the word. You can buy what you want, pick and choose what you want,
sponge off your neighbors, have 8 SUVs, and SAY pretty much what you want.
Oh, there may be repercussions of saying things.. but most times the police
are not going to shoot you down in the street(Kent State excepted) or have
you *disappear*(watch of the unmarked black helicopters)

So *Jim*.. bad mouth us all you want and personally I will enjoy the fact
that I live in a place where I can read your rants, reply to them or delete
them without fear.

Long live the Bill of Rights and the US Constitution. May we remember  why
they exist and people die for those beliefs.

MikeS
www.packetattack.com

PS-- for those that seem to care.. I am neither Right or Left.. I happen to
Libertarian which puts me outside of the box :)


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38383&t=38323
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Jr. CCIE Ad on Dice [7:38034]

2002-03-13 Thread Mike Sweeney

Ken Diliberto wrote:
> 
> This is good for a laugh.  They are looking for a junior CCIE.
> 
> http://www.dice.com/DandL/c/cxapga.35951.html
> 
> 

I've dealt with these folks before.. bad news for all concerned. They do not
screen the clients well or match the candiates well at all. In one case they
called me in at the last moment for an interview and I found the clients
were looking for Netware experience and could have cared less about the
Cisco and networking experience. They looked at me like I was the crazy one
for being there. If you are breathing and upright, you will be thrown into
the interview without regard to how well of a match it is. Also, some of the
clients are pretty pissed by the time you see them from the hardball tactics
they use so you are really wasting your time.

Overall, not a lot of fun

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38170&t=38034
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Free Cisco Secure ACS Server [7:37797]

2002-03-10 Thread Mike Sweeney

While I dont know if ACS was free.. the TACACS server was free.  I have a
few different TACACS servers and docs for downloading at:

www.packetattack.com/downloads.html

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37799&t=37797
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: BGP using AS_PATH attribute [7:37749]

2002-03-10 Thread Mike Sweeney

Yep.. and traceroute..  the failure is at R2.. I can ping the interface
facing R1 and the loopback(different subnet) but can NOT ping the outgoing
interface to R3.

R2 can ping everybody 

R3 can only ping R2 incoming interface and loopback..

It's like R2 is not passing between AS100 and AS65000 even though it has
complete routes and Sync is off.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37783&t=37749
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



BGP using AS_PATH attribute [7:37749]

2002-03-09 Thread Mike Sweeney

I've been studying BGP using several books and papers. One of which is the
Cisco Academy Semester 5 lab companion. So far it's been pretty good but Lab
8-3 drives me nuts.

3 routers.. 3 AS

R1R2R3
AS100AS300  AS65000

The idea is to have everyone share routes(did that) and then to filter off
the AS65000 number as the update is sent ot R1(did that)

The kicker was I was *supposed* be able to ping R3 from R1 after this.. no
way.. wasnt going to happen. The only network statements were the loopbacks
for each router.. I was able to ping r3 AFTER I added the network statement
to R2 that id'ed the interface IP between R2 and R1. That was not in the lab..

If someone who has this lab take a look and explain why the ping should or
should not work?

Thanks

MikeS
PS- I really am learning to dislike BGP right now ;)

---lab configs used


hostname R1
!
!
memory-size iomem 10
ip subnet-zero
!
interface Loopback0
 ip address 201.1.1.1 255.255.255.0
 ip directed-broadcast
!
interface FastEthernet0/0
 no ip address
 no ip directed-broadcast
!
interface Serial0/0
 ip address 192.168.1.5 255.255.255.252
 no ip directed-broadcast
 no ip mroute-cache
 no fair-queue
!
router bgp 100
 no synchronization
 network 201.1.1.0
 neighbor 192.168.1.6 remote-as 300
 neighbor 202.2.2.2 remote-as 300
!
no ip classless
no ip http server
!
!
!
line con 0
 transport input none
line aux 0
line vty 0 4
 login
!
no scheduler allocate
end

R1#


hostname R2
!
!
ip subnet-zero
!
!
!
interface Loopback0
 ip address 202.2.2.2 255.255.255.0
 no ip directed-broadcast
!
interface Ethernet0
 no ip address
 no ip directed-broadcast
 shutdown
 media-type 10BaseT
!
interface Serial0
 ip address 172.24.1.17 255.255.255.252
 no ip directed-broadcast
 no ip mroute-cache
 clockrate 56000
!
interface Serial3
 ip address 192.168.1.6 255.255.255.252
 no ip directed-broadcast
 clockrate 100
!
router bgp 300
 no synchronization
 network 202.2.2.0
 neighbor 172.24.1.18 remote-as 65000
 neighbor 192.168.1.5 remote-as 100
 neighbor 192.168.1.5 remove-private-AS
!
!if I add network 192.168.1.0, I can ping R3 from R1. Without it..no go
no ip classless
!
!
line con 0
 transport input none
line aux 0
line vty 0 4
 login
!
end

R2#


hostname R3
!
!
no ip subnet-zero
!
!
process-max-time 200
!
interface Loopback0
 ip address 203.3.3.3 255.255.255.0
 ip directed-broadcast
!
interface Ethernet0
 no ip address
 no ip directed-broadcast
 shutdown
!
interface Serial0
 ip address 172.24.1.18 255.255.255.252
 no ip directed-broadcast
!
router bgp 65000
 no synchronization
 network 203.3.3.0
 neighbor 172.24.1.17 remote-as 300
!
no ip classless
!
!
line con 0
 transport input none
line aux 0
line vty 0 4
!
end

R3#


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37749&t=37749
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Security Design - PIX or Whatever [7:36677]

2002-02-27 Thread Mike Sweeney

Yeah- HIPPA gets better and better.. not only is the heathcare provider
responsible for the security/auditing/tracking of patient data, they are
responsible for the security if an off-sight Doc connects to the data. This
drove one place I was at nuts because in a cost saving fit a few years ago,
virtually all the Docs were made contractors.. now it's coming back to haunt
them.

Not only that but try to convince the management of the provider that they
need a security officer.. someone who does nothing BUT security.. that went
over like a lead brick.. meanwhile they just whacked a few more bodies
before Xmas..  its going to be a mess. And it's just not the healthcare
providers, one shop I support is a health insurance processing house.. HIPPA
is a BIG deal to them.. They are pulling in separate DSL circuits for each
contract because they can not get a straight answer if they can consolidate
the data from one vendor on the same circuit along with other vendors. VPNs,
firewalls, audit tracking for NT etc..  fun stuff..

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36740&t=36677
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX Simulator [7:36654]

2002-02-27 Thread Mike Sweeney

kevhed wrote:
> 
> Does anyone know of or can recommend a PIX IOS simulator?  I'm
> gearing up
> for the CSS1 cert and need some experience on a newer version
> of pix ios.
> We have a pix but it's running some ancient ios (2.7.11) and
> there's no
> upgrade in for it in the near future.  So I'm hoping to find a
> simulator (if
> one exists) to practice  on a newer ver of ios.   Thx in
> advance.
> --
> Kevin Keay (N+,CNE,CCSE,CCDP,CCNP)
> Sr. Network Specialist
> Ondeo-Nalco
> 
> 

401.00 will get you a 501 PIX, 6.1 IOS.. DES encyrption for free after
registration.. 3DES is extra.. 10 users..  not a bad deal at all. The
*simulated* PIX is a PX with the Cisco flashcard installed.. something
around $900-1000.00  It does give multiple interfaces. Not being a PIX geek,
I dont know how valuable that is for the training labs.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36680&t=36654
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Security Design - PIX or Whatever [7:36677]

2002-02-27 Thread Mike Sweeney

Lets not forget politcal concerns when trying do a reasonable level of
security. I worked a healthcare provider and boy, you should have heard the
Docs squawk about passwords and pin codes for access to the primary
LAN/WAN... to the point that admin overruled the IS dept and special
*permission* not to use the security procedures...  happens every day..

MikeS
'


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36679&t=36677
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to get the activation key for my clone Pix [7:36583]

2002-02-27 Thread Mike Sweeney

Just for the record.. I picked up a 501 NEW in the box for $401.00 US and no
shipping. Just sales tax. This was not 3DES.. just plain of DES and 10
users. Works like a top.. Place is in FL but apparently they use IngramMicro
as the fulfillment center(still had the lable)

The new 506E pricing just got came in at $1,100 which like they said, is
cheaper then before.

SonicWall is in serious trouble with these price points. I use both the PIX
is a better firewall for the price. I have no experience with Nokia so I can
not comment on their product vs. a PIX.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36634&t=36583
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



speaking of PIX clones [7:36593]

2002-02-26 Thread Mike Sweeney

I just heard from a friend that a SonicWall rep was saying(dont you love 5th
hand news) that Cisco is planning to crack down on PIXes being resold on
Ebay by killing any and all support for them. No smartnet, no software, no
activation keys etc..

I personally think it is a bunch of hooyie.. The number of PIX units being
sold 2nd hand on Ebay is a grain of sand compared to national/world sales of
new units and to expend that much effort, ill will and bad karma really
doesnt strike me as the "cisco way" of doing business. MS maybe.. but not
cisco.

Am I off base here?  even if it's a bunch of crap, it makes for some
interesting thoughts.. whats next? no support for used routers? switches ? 
talk about killing the goose that lays golden eggs..

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36593&t=36593
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Mike Sweeney

I've sat through the dog and pony show..

short version:

you sign up for the complete package of training..
you pay it up front.. something around 30-40K .. and they offer a convient
loan package through FannieMay..
you sign a contract where X dollars (roughly half)are *forgiven* on
completion of course work AND you promise to teach there for 1-2 years.

No written promise of hours per week.. just that you *should* get 17-30
hours a week at a pitance of a salary.. they run 7 days a week so kiss off
your weekends

I dont have all the exact details in front of me and in truth it's been
about a year since I heard all this so it may have changed some. I will say
that I have heard from others that it's still pretty much the same but take
it at 2nd hand talk..

I decided that it was not a choice for myself.. my opinion only.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36178&t=36091
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Access List Builder [7:36015]

2002-02-20 Thread Mike Sweeney

Chesapeake ALE (access list editor) which was based in Java worked ok.. I
have it but I can not find a active link with it since Mentor went away.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36041&t=36015
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Round 1 to the lab [7:35410]

2002-02-14 Thread Mike Sweeney

Bad news on one hand.. but on the other hand, you now have a very clear idea
of what needs to be done and how to do it. So I suspect you will clean house
on the 2nd go around.

I wish you the best with the 2nd try..

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35411&t=35410
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



New Beta Tutorial of 1900 switch configuration [7:35384]

2002-02-13 Thread Mike Sweeney

The newest beta of  Packetattack's Tutorial series is posted for your
viewing pleasure. This new tutorial is along the same lines as the 2900
Configuration Tutorial but is for the baby brother, the 1900 series switch. 
It's mostly complete and contains enough information to be useful. Comments
as always are welcomed.

MikeS

www.packetattack.com/tutorials.html


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35384&t=35384
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Win 2K Domain Controllers [7:35022]

2002-02-10 Thread Mike Sweeney

I have to ask.. are the servers running SP2? all hotfixes? Is Exchange
running the newest SP?  Clients?

It did not matter with NT4 as much about service packs but it sure does now
days.. more importantly with AD is to have ALL servers in the AD
domain(forrest?) on the same SP revision.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35027&t=35022
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Router Fan [7:34952]

2002-02-09 Thread Mike Sweeney

It is possible to get replacement fans that are alot quiter.. it wont be
cheap but hardcore PC users do this all the time. One of the hack sites..
Toms Hardware?? I think.. they did a review on the various cooling fans and
gave the sound levels. Also gave some sources.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34962&t=34952
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VLan Ooops [7:34680]

2002-02-06 Thread Mike Sweeney

Yes with some work. You need to be able to create a trunk port on both the
switch and the router's interface. The trunk on the switch needs to have
encapsulation set (if required) and whatever VLANs included that you want to
pass to the router. On the router side, you would need set the encapsulation
and make some subinterfaces to match the vlans.

http://www.packetattack.com/cisco_documents.html

At the bottom on the left side I have some links to cisco for configuring
vlans.

MikeS


Nisus wrote:
> 
> Hello All,
> 
> I have been posting questions about VLans and I think I
> may have not
> worded the question right.
> 
> If I have multiple VLans can they all go out the uplink port on
> my switch to
> my router ?
> 
> I am setting up VLans by port NOT IP or MAC address ???
> 
> Thanks a ton
> Steven M Aiello
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34706&t=34680
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Average afterwork time Tech learning commitment? [7:34634]

2002-02-06 Thread Mike Sweeney

You get out it what you put into it. Its that simple.

I know far too many people who would do well but refuse to admit that they
need to spend some time studying. "why wont they pay for it" is the biggest
whine.. you are entitled to NOTHING in this world except to die at some
point so it's really up to you where to go and how to get there.

In my years, I have had the commute from hell and I used audio tapes and
studied during lunchtime instead of going out with the guys. I squeezed in
some class time at the college. I've spent time carpooling with the express
idea of reading.. I have a laptop so I can at the least run sims on the run.
I take it to family functions and it's understood that after a few hours of
togetherness, I will disappear for a few hours of study time. I've explained
to my daughter that even daddy has homework to do and so we each do our
*homework* at the same time. She normally is done first :)

And yes, a long suffering wife helps out alot. And I do make a point of some
days, blowing off Cisco/networks/PCs to spend time with family and friends..
it's a tough balancing act to do.

If there is a will, there is a way. 

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34657&t=34634
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: why can't copy flash from TFTP? [7:34603]

2002-02-06 Thread Mike Sweeney

I have a tutorial that will be your best friend for this :)

Go to www.packetattack.com/tutorials.html 

And view the 2900 tutorial. I believe it will answer that and a few other
questions. When you are done, please drop a note with any suggestions or
comments.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34617&t=34603
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 25xx Good Laugh [7:34127]

2002-02-01 Thread Mike Sweeney

Alot more common then you might think... I've lost count how many times I've
pointed out something that I took as *common sense*

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34141&t=34127
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT: Re-Create a server [7:33950]

2002-01-31 Thread Mike Sweeney

Ghost comes to mind. I use it often for this sort of thing. But it's really
an all or nothing proposition. You can not lift an application and the
install it somewhere else.

DoubleTake works well as a real time hot standby. I've used it with SQL and
some other applications.

I have heard of an application that you take a snapshot of the system,
install the new app, take a 2nd snapshot and builds an install file from it.
I think this is how Installshield works if I remember correctly. I never
used it myself, only been around the developers who were using it so dont
take it as gospel.

MikeS



A.Steinbock wrote:
> 
> Sorry for OT- I need the help of Server gurus.
> 
> How do you backup/recreate a server, if
> 1- Clustering is not an option
> 2- Data is not an issue
> 
> We have a Win2000 server that is running an application that is
> a hell to
> re-install ( third party non-standard drivers, no
> documentation, multiple
> layers..). Last time the server died it took us a week to bring
> up another
> server.
> Is there anyway one can backup such server and restore it to
> another server?
> 
> TIA.
> Akim
> 
> 
> 
> Get free e-mail and a permanent address at
> http://www.amexmail.com/?A=1
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33985&t=33950
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Terminal Server setup [7:33439]

2002-01-28 Thread Mike Sweeney

Is this a newer 1924 or the older one with the DB9 plug?

Also, post the config you are using for this port.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33447&t=33439
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Which switch for CCNP home lab ? [7:33283]

2002-01-27 Thread Mike Sweeney

I disagree a bit with Brad.. :)

I would suggest TWO switches..

1900 and a 2900

They use different interfaces and you need to know both. If you get the 8
port versions, you can save a few bucks but the prices have been falling in
the last few months.

On the 1900, make sure it's a newer one.. uses a RJ45 for the console port,
not a DB9.

On the 2900, make sure it has 8  meg of memory so you can upgrade it to the
newer 12.x enterprise code for vlans. Some early ones come only with 4 meg
which is not optimal since you can not install the 12.x enterprise code on it.

I have a tutorial on my site that you might be interested in for the 2900..
the 1900 tutorial is not completed yet.

www.packetattack.com/tutorials.html


Of course, a viable option is to rent lab time over the net.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33359&t=33283
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Custom Upgrade for Cat 5000 Switch [7:33294]

2002-01-27 Thread Mike Sweeney

Watch your mail box :)

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33358&t=33294
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Custom Upgrade for Cat 5000 Switch [7:33294]

2002-01-26 Thread Mike Sweeney

I found it :)  right on top of the piles

Anyways.. the kit I have is for Supervisor cards models 73-1414-01 to
73-1414-08 ONLY. this is custom SIMM that is needed for softwaare upgrades
from 2.1

The actual kit number is MEM-C5K-4M-V21

let me know if this is what you need

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33302&t=33294
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Custom Upgrade for Cat 5000 Switch [7:33294]

2002-01-26 Thread Mike Sweeney

Derek- is this the odd memory upgrade for the early Sup1s?  if so, I *may*
have one around here..  let me know before I tear the office apart :)

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33300&t=33294
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: lost my certification wallet [7:33214]

2002-01-25 Thread Mike Sweeney

I lost my biz card holder with cert card under someone's floor.. 5 months
later a vendor found it and returned it to me. I own that man a drink :)

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33247&t=33214
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VTP Trunking dangerous [7:33097]

2002-01-24 Thread Mike Sweeney

LOL-  you have those nice people too?  We threatened one guy with a very
public stoning after he did something like that.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33173&t=33097
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: VTP Trunking dangerous [7:33097]

2002-01-24 Thread Mike Sweeney

Then use VTP and password it.  They can drop a switch but without the
password configured, it's ignored.

See the following link for details:

http://www.cisco.com/warp/public/473/21.html#v2

It's best to have things like spanning tree, VTP and whatnot set up since
few of us are seers and can predict the future with any amount of
certainity. It's always nice to be ahead of the game when planning things
like network growth.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33139&t=33097
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Can anyone help - Router going in loop - not worki [7:33062]

2002-01-24 Thread Mike Sweeney

I've seen this with bad memory, corrupted image and the best one was a chip
overheating on the main board. I could hit it with freeze mist and the
router would work for another 10 minutes then overhead again.

It's easy enough to pop out the memory and see what happens.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33080&t=33062
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Switch for home lab [7:32797]

2002-01-22 Thread Mike Sweeney

If you are ready for the big toys.. the 5K is a good way to go. If and I do
mean IF you shop carefully, you can find a Cat5K for under 800 US. Dont pay
extra for the pretty ones with all the covers.. Do pay attention to what
cards are included. The sups come in several different flavors. The cheapest
is a SupI and unless you have fiber converters, make sure it has the 10/100
ports. There is not enough difference between the I and II to justify the
difference in price for a lab.. the IIIs are pretty pricy but I can see
where an advanced lab would have one. On the Ethernet blades, get at least a
5213A which can do ISL. A better bet is the 5203 which will do
Etherchannel(required for CCNP) Again, this will drive up the cost. I bought
mine very cheaply and then added a few items as time went on.

Get a 2nd switch.. a 2912 which is cheaper then the 24 port version. This
switch can run 10/100 on all ports and run Etherchannel on all ports. Now
you can hook the two together and have some fun. Toss in a 2620/21 and you
have a router on a stick for the vlans and you have saved over 1500 bucks on
the RSM.

Just my opinions..

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=32811&t=32797
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Tacacs+ software [7:32699]

2002-01-21 Thread Mike Sweeney

I have a few different ones available for downloading along with some docs
and white papers

www.packetattack.com/downloads.html

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=32730&t=32699
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Off Topic - Half.com book purchase [7:32234]

2002-01-17 Thread Mike Sweeney

I've used Half quite a few times and have been happy overall with it. I dont
mind waiting for a book where I paid 10.00 and the retail is 60.00.. when
you can find it.

I normally use www.bestwebbuys.com to comp price between 10 or more vendors
for new and used prices. It's a great time saver.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=32291&t=32234
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Custom Telnet Application [7:31889]

2002-01-14 Thread Mike Sweeney

Me too :)

MikeS

www.packetattack.com


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31940&t=31889
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to block MSN, and others. [7:31057]

2002-01-14 Thread Mike Sweeney

Here is a clip from the newest TechRepublic newsletter. In order to read the
whole article, I think you need to be registered. But it is a decent site so
it might be worth it to you.

article starts here:::
Instant messaging threatens enterprise security 

It’s no surprise that instant messaging (IM) is gaining in popularity.
The often-free communication feature lets people interact instantly, make
decisions on the fly, and provide immediate contact, as opposed to the
delays that can occur when using e-mail.

(this is the point I was trying to make about personal use vs. corporation
use. Different rules apply for each)

But what may be surprising, especially to today’s IT leaders, are the
serious security issues posed by IM usage. Add that to the fact that most IM
applications are used without corporate IT’s knowledge or approval,
and it’s not a pretty picture for network security.

:::article continues on:::

http://www.techrepublic.com/article_guest.jhtmlid=r00520011218sss01.htm&fromtm=e101-3


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31852&t=31057
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT: you bad boys and girls... [7:31777]

2002-01-13 Thread Mike Sweeney

Whats football?  the other half is the football nut. Me? I was down at the
hardware store digging up some clips and screws for my new rack I bought
yesterday :)

MikeS
www.packetattack.com


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31791&t=31777
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: What good is this stuff, anyway? [7:31705]

2002-01-12 Thread Mike Sweeney

I've been on the other end.. a CCIE with a really bad 'tude. He was called
in since management did not want to believe my results from testing.. go
figure. So he comes in with the CCIE on his forehead and ready to show us
how good he is. He may have been good on something but it sure was not using
the Sniffer nor taking that data and working backwards. At the end of it all
I called him on his results and asked why he thought they were correct when
I had stats in front of me that said otherwise. He never called back or
responded to my email. In the end, I was correct with my inital assumptions
and results.

The lesson learned is the CCIE letters alone do not make a good engineer. 

On the flip side, I do know some CCIEs that I will trust on my networks
without a problem.

MikeS


George Murphy CCNP, MCSE wrote:
> 
> Good Stuff!, Sounds like my shop Chuck. We have similar real
> world
> scenarios that end up just like that...ya know...enterasys, 
> lucent...etc... kinda gets one inspired!
> 
> Chuck Larrieu wrote:
> 
> >I had the extreme good fortune of sitting in a meeting today
> with a
> >customer. The project has moved out of the sales phase ( a
> year in the
> >making ) and into the project phase. In attendance were the
> customer's top
> >IT networking staff and my employer's project team.
> >
> >This ended up being a four hour meeting, completely dominated
> by Customer IT
> >Director and my employer's Mr. CCIE
> >
> >One of the high points? the customer had sent Mr. CCIE an L3
> switch
> >configuration the previous day. Mr. CCIE was to offer comment
> on the design.
> >Mr. CCIE said "from what I see here, I'll bet you have a
> routing loop. I'll
> >bet that if you do a traceroute from that switch to this
> particular network
> >it will go nowhere." The customer said "you're on", telnetted
> into the
> >switch, performed the trace, and sure enough, the * * * * * *
> appeared after
> >three hops. You shoulda seen this guy's face!
> >
> >this was but a small part of a fascinating dialogue between
> the customer and
> >Mr. CCIE.
> >
> >Oh, it did not hurt that Mr. CCIE had fifteen years technology
> experience,
> >and ten years in networking.
> >
> >Anyway, back to the books. I'm jazzed about learning the dirty
> little BS
> >things again!
> >
> >Chuck
> 
> 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31724&t=31705
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Static route loacd balancing? [7:31715]

2002-01-12 Thread Mike Sweeney

Turns out that if you turn off fast route switching (no ip route-cache), the
router will do a packet by packet *round-robin* over available interfaces. I
worked in one shop that did this but it's really not recommeded as it puts a
large CPU load on the router.

Search cisco on ip route-cache and there are several documents on this.

Like mentioned before you can do floating static routes. You can also use
policy routing to balance packet types.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31722&t=31715
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



OT but related [7:31450]

2002-01-09 Thread Mike Sweeney

I'm looking for something a bit odd but with good reason. I need an original
copy of Cisco ACS version 1.0  I'm willing to pay a small amount for this so
it's a chance to dig through the software archives and get a bit of beer
money for a very old CD.

The reason for wanting this old software is simple. I want to try Cisco's
interface to their TACACS software. Currently I use a Linux flavor of TACACS
which works but I'm struggling with the logging which I want. Since 1.0 was
TACACS only, it fits the bill perfectly. There had been one on Ebay but it
was overpriced in my opinion.

Thanks

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31450&t=31450
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCxx Copyright Infringement [7:31391]

2002-01-09 Thread Mike Sweeney

Stealing is a strong accusation but it is a reality of the *lift and paste*
mindset of some folks. You can do things to help slow it down and then do
other items to protect your copywrite..

embedded copywrites in images  (not visible normally)
watermark images(visible)
compress html files (stops only casual users)
embed copywrites into various places in page code

And so on.. I know there are other ways but not being the HTML hacker, I
just dink around with it.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31451&t=31391
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT Request; LAN/WAN monitoring software [7:31227]

2002-01-07 Thread Mike Sweeney

Take a look at Solarwinds Professional or the Engineering version. Both will
run under 2K just fine. They can spit out reports on various stats and track
performance over time.

MikeS



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31245&t=31227
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to block MSN, and others. [7:31107]

2002-01-07 Thread Mike Sweeney

I'll agree that a *properly* designed antivirus protection scheme will
filter both email(SMTP/POP/MAPI) and web borne nasties. But, that ignores
the business realities.

1: We have ABC on the desktops.. it cost us XXX dollars and now we need to
spend HOW MUCH MORE? for the exchange server(insert server of choice)

2: Why do we need to have yet another box on the network for filtering web
traffic, I thought that is what the desktop software was for..

3: Well.. our budget is not enough for all of the bells and whisles.. so we
will just get couple of servers and the desktops


'and more..

I have heard all the above and it's an uphill battle with clients to educate
them to the evils of having security holes. Sometimes I think the larger
companys with deeper pockets are the worst.

At one place, we ended up clamping down very hard on the staff after a few
monthly reports showed various activities during work hours that last longer
then the normal "lets take a peek". One guy( who was fired) was using
X-Drive to distribute porn during business hours. Since he did not *bring it
into work* he thought he could get away with it. Novel.. but it did not
work. ANother person was timed though logins and router logs to have been in
an certain ethnic chat room from the time their shift started to when it
would almost be over.

This is why we blocked ports. Basicly, a few of the staff could not be
trusted to be responsible and would cause problems for the whole shop.

Oh the joys!!

MikeS 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31143&t=31107
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



2900 beta updated [7:31114]

2002-01-06 Thread Mike Sweeney

OK-  I've updated the tutorial with a new and easier font to read. I added
how to remove vlans from trunks, how to config the VTP domain and how to
upgrade the IOS. I personally think I will be tweaking the upgrade
directions a few times but I think right now it's pretty close to being
correct. I added a link to Cisco's own docs just in case :)

www.packetattack.com/tutorials.html


MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31114&t=31114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to block MSN, and others. [7:31057]

2002-01-06 Thread Mike Sweeney

Let me put something into perspective here. It was said earlier about why
give access then block it. Why indeed... the why is for BUSINESS reasons..
not day trading, not stock tickers, not chatting for hours(documented) with
friends at the expense of work, viruses coming in on Hotmail attachments
that bypass the clamped down exchange server and so on.

The internet is given to employees for business reasons with the expectation
that the employee will be responsible with it. Will there be personal use..
of course.. just like the phone. Why limit certain things? gee.. the company
pays for a T1, they have 4,000 users, 100 decide to watch a Victoria Secret
webcast at 300Kbps.. see the problem?  This not theorical.. this really
happened to one of my clients and the webcastusers/readaudio users managed
to max out the T during working hours.

The courts have already decided for good or bad that email is company
property and they can do what they wish with it. I would imagine that web
access falls under the same rules as it's a company building, desk, PC(or
Mac), servers, connection and so on.

My opinion 

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31077&t=31057
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to block MSN, and others. [7:31057]

2002-01-06 Thread Mike Sweeney

Excellent information.  Does anyone else have tibits like this? I've seen
bits and pieces floating around on things to watch for regarding "bad apps"
and ports.

We had an issue with a 3rd party company(now a dot-bomb) who provided
firewalling and virus scanning. We got them to block real audio but could
not get them to block MS's media player. The claim was it was using port 80
just like anything other web traffic. I left before I could work this issue
and I've wondered since then how true it was?

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31059&t=31057
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNA tutorial in beta for Cisco 2900 configura [7:30970]

2002-01-05 Thread Mike Sweeney

Njamba Ti Ikere wrote:
> 
> Hey Dude,
> Congrats for work well done ,I chanced on your tutorials
> yesterday and they
> were very good.
> However my only beef is that when you open a web page from
> within your site,
> you cannot maximize or minimize the browser screen.
> Otherwise the rest is very good and please do'nt deem me
> persnickety ; i
> just felt constricted and all.
> Again thanks for a worthy resource.
> 
> 

Actually, they are resizable by the code.. you should be able to resize the
window but no tool bar. BUT- I think I have a code issue somewhere else
since you are correct. Dont you just love javascript?  They do not resize
properly even though the indicator is there for the resize. Not being a HTML
geek, this might take a while to track down. ::sigh::

MikeS





Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31019&t=30970
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: OT: Comcast Cable newsgroup server? [7:31015]

2002-01-05 Thread Mike Sweeney

This is precisely why I *pay* for my newsgroup access.. that and it's not
filtered by some self rightous dork behind a desk.

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=31018&t=31015
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 500-CS Access Router [7:30873]

2002-01-04 Thread Mike Sweeney

Well... the default IOS for these is 9.1 unless you either have the new ROMS
or boot from a TFTP server. With 10.3 you *could* use TACACS and assign
permissions for the various commands. One way is to authticate all commands.
I have one set to allow resume, disconnect, where, connect and a few other
odd commands. So far there has not been any reason give any more commands to
the users.

I happen to run TACACS on a linux box but if you have Cisco secure, you can
do the same or run a RADIUS server.

I have some info at my site:

www.packetattack.com/downloads.html

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30953&t=30873
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCNA tutorial in beta for Cisco 2900 configura [7:30562]

2001-12-31 Thread Mike Sweeney

I had started the slides for the VLANs.. they are in progress.. I was also
thinking of a few slides of spanning tree for getting stats and blocked
ports.. anything else I should include?

MikeS


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30607&t=30562
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNA tutorial in beta for Cisco 2900 configuration [7:30543]

2001-12-31 Thread Mike Sweeney

I just posted the first version at a new tutorial I'm working for
configuring the Cisco 2900 ethernet switch. Drop by and take a look. This is
a "how do I do ??? type of tutorial. All comments are welcome. Include
suggestions for other details that might be useful... I plan to add over the
next few weeks the following

trunking
etherchannel
logging


Anything else?

http://www.packetattack.com/tutorials.html


MikeS

PS-  yes I know that some will have great fun with this at my expense.. but
what is life without some whimsey added ( Thanks Howard for reminding me of
a fun word :) )




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30543&t=30543
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Virtual Study Groups [7:30295]

2001-12-28 Thread Mike Sweeney

Suranjith Ariyapperuma wrote:
> 
> Dear Friends,
> Is forming a Virtual Study Group a practical idea ?. if yes
> would anyone be willing to form one?, currently I am studying
> for CCNP routing exam (BSCN).
> Suranjith
> 

It can be done..  I've taking online classes which work roughly the same
way. It requires a bit more dedication then when everyone lives local but I
will toss out some ideas..

Use a instant messaging program- you can have several people yakking at the
same time. On AOL, you can make a custom chat room which would accomplish
the same idea.. a common forum.

Get a rack online where people can telnet to it while in the chat room

Personally I think it would work nicely..  another idea which I did use when
dating my wife, is to use an internet phone for a more real-time connection.
The phone requires a decent sound card for full duplex and at least a 56K
link but it does work.

If you want to pursue this more off line- drop me a email.

MikeS
find me at www dot packetattack dot com


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30305&t=30295
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



  1   2   >