Re: Query on VOIP [7:59933]
Try to build a Tunnel between 2 endpoint ss ss wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hello all!! I am working for a carrier company who uses ip network consisting of Cisco Routers to transport voice calls.The company deals mainly with pre-paid calling cards.The customer buys the card and dials a toll free no. to make a voice call or makes a call thro a dialer program(Installed on the pc) which sends the calls thro the ip network.When i make a call from a dialer on a pc which has a dialup connection,then absolutely there is no problem. But when I make a call from a pc which is on the Home LAN then only the destination party is able to hear my voice.I am not able to hear their voice.We r not using any firewalls as of now in the home but may go for it in the future.Nat has been configured on our home router and we hv a DSL connection to the ISP.I am not able to figure out the problem.can someone help me in identifying the problem Thanx in advance.. Cheers ss Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=59934t=59933 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Emergency: Any one have CiscoWorks Voice Manager software ? [7:59935]
Can share the software to me ? I just use it for testing. Email: [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=59935t=59935 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
any good linux BGP simulator [7:46088]
please mail me : [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=46088t=46088 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Emergency: HOw to extend the telnet timeout for a router? [7:45216]
Hi, all the default timeout for a telnet session is 300 sec Any command can extend the telnet timeout time ? Please mail me [EMAIL PROTECTED] Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=45216t=45216 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How can I measure traffic through a 2600 router (over [7:43361]
MRTG Wayne Jang wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I have a client that wants to know how much traffic is passing through his router. They are ordering new service and want to know how much bandwidth to order. What utility should I use? Thanks Wayne Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43361t=43361 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Any body has experience in Cisco SS7 VOIP solution [7:43096]
I have some questions need to consult those people who have experience in SS7 VOIP solution Please contact me [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43096t=43096 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CISCO 2600 NAT [7:43139]
is the service port 5080 started on the server ? jc theard Hello all, I'm trying to configure NAT on a CISCO 2621. I managed to configure it basicaly but I want to use overloading and there is my problem. As shown below I try to specify a route to the right server for port 80 and port 5080. For the port 80, everythg is going well but I can't reach port 5080. Is there any thing to take into account for non-standard ports? ip nat inside source static tcp 192.168.99.100 80 195.246.218.181 80 ip nat inside source static tcp 192.168.99.102 5080 195.246.218.181 5080 Thank you for your help JC Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43182t=43139 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: win98 pptp connection to cisco concentrator 3005 only at [7:41438]
Which modem pool device you are using for accepting dialup service ? suaveguru hi all, anyone can tell me why whenever I connect a win98 pptp client to a cisco concentrator vpn server 3005 via a pstn connection at 56kbps I always only able to connect it at 9.6kbps . Whereas connecting to win2k vpn server can yield at round the same speed as the pstn connection which is around 56kbps any form of inputs will be greatly appreciated suaveguru __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://taxes.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=41438t=41438 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to configure Mobile ARP?? [7:40013]
at cisco web site.. you can find out the sample config for the mobile ip solution with clear explanation ~ Cool~~~ ^o^ IT Guy Yeah.. SOrry for Typp From: Ocsic Reply-To: Ocsic To: [EMAIL PROTECTED] Subject: Re: How to configure Mobile ARP?? [7:40013] Date: Mon, 1 Apr 2002 02:51:38 -0500 do you mean Mobile IP ? IT Guy Guys, Can you pleasee help me to forward some Link or Right procedure for HOW to configure Mobile ARP?? I can see the Docs in CD and on CISCO but its very long procedure whereas the procedure the guys are used to discussed here on list is a short one ..which is the right way to go??? Thanks for help TOM _ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx _ Send and receive Hotmail on your mobile device: http://mobile.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40019t=40013 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to configure Mobile ARP?? [7:40013]
do you mean Mobile IP ? IT Guy Guys, Can you pleasee help me to forward some Link or Right procedure for HOW to configure Mobile ARP?? I can see the Docs in CD and on CISCO but its very long procedure whereas the procedure the guys are used to discussed here on list is a short one ..which is the right way to go??? Thanks for help TOM _ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40017t=40013 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco view Problems [7:39764]
upgrade the java maamun Murangwa Hi all, I'm having a problem with viewing devices using cisco view, i get an error message ''Please grant permission to launch cisco view.Quit the browser and try again'' I have looked at the installation notes no luck so far. Any help will be highly appreciated Thanx in advance MM __ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39861t=39764 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ACS 2.6 problems [7:39023]
CRACK IT ~~~ next time please remember to use local authentication then the radius server, and create a local user before testing the Radius server is work or not.. aaa new-model aaa authentication login default local group radius username localuser password localuser maamun Murangwa Hi all, I have managed to lock myself out of a NAS, i configured AAA authentication,and now i cant acess the NAS. The login prompt comes up, but the password is not authenticated. I have also tried loging on through the console , same problem occurs. Any help will be highly appreciated Regards __ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39025t=39023 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIP has no certification ? [7:38576]
One thing I want to ask I had finished CCIP/Security 2 monthes ago... But I only receive the CCS1 Certificate. Actually, CCIP has no Certification even in Cisco Tracking system There only has CQS logo for download, no CCIP logo appear although you got the CCIP title. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=38576t=38576 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIP has no certification ? [7:38576]
Oops... Already received Cisco [EMAIL PROTECTED] 's Email They had already updated the Tracking and the LOGO and Certification of CCIP will be sent out soon. =^o^= Wait for 2 monthes la Ocsic One thing I want to ask I had finished CCIP/Security 2 monthes ago... But I only receive the CCS1 Certificate. Actually, CCIP has no Certification even in Cisco Tracking system There only has CQS logo for download, no CCIP logo appear although you got the CCIP title. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=38578t=38576 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCNP Foundations Exam [7:38484]
if you dont try you will not success... go and take the foundation exam... you can pass CCNA...means you can also get CCNP easily Larry Youngquist I recently completed my first step and got my CCNA.I've got quite a bit of experience, but had never ventured down the Cisco certification track before. I'm curious if there are any opinions about taking the combined Foundations exam or taking the individual exams for routing, switching and remote access. The obvious advantages of less time and less money are appealing, but I'm concerned that the large amount of information and topics could be overwhelming. Anyone that has taken the Foundations wished they would've taken the exams one at a time? Or, anyone that took the three individually, think that the combined test would've been the better approach? My ultimate goal is not as a CCIE, but a CSS1. Any opinions would be appreciated. Regards, Larry Youngquist CISSP, CCNA, MCSE Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=38516t=38484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ospf and static routes [7:38107]
Please specify more detail info about your case NetEng If I have a static route to the outside world, how do I add that to OSPF? Do I have to create static routes on my ABR to get outside? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=38122t=38107 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Understaning Custom Queue - dual link (PPP / Frame relay) [7:37823]
may be you can use the following mathod instead of CQ. Cause CQ is custom queue, maybe it will lead to a delay in the VOIP if the queue-size is not optimized well. So, may be you can use NBAR to adjust the bandwidth consumption between the Voice IP traffic and normal IP traffic first you define the Access-list for your IP traffic eg. in your first site, a network 192.168.100.X / 24 second site , a network 192.168.101.X/24 access-list 101 permit ip 192.168.100.0 0.0.0.255 192.168.101.0 0.0.0.255 then create a Class MAP for the IP traffic class-map IPTraffic match access-group 101 then, create a POLICY Class for the IP traffic and define the bandwidth you would like to used for the IP traffic policy-map IPTraffic class IPTraffic bandwidth 1 Hi there, I have a setup where I think I 'd need to use CQ but the documents that I found at cisco's site where not enough to understand / master the subject. Here is my scenario : I have a cisco 1750 in my branch office and another one on a remote site. Each cisco has two leased lines, one PPP and the other Frame-relay, both operating with 64K. I use VoIP to make the phone calls and I have database systems located at the remote site. I need to set up some sort of priority so I could optimize the overall usage reserving bandwidth for more critical applications. After searching I found that either policy routing or custom queue should do the job (in one way or another), with CQ being the correct one. Can you help me out ? The examples that I found were too simple for me to make any kind of decision. I am specially confused with the decision of setting a queue size. Best regards, Mario Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=37823t=37823 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Understaning Custom Queue - dual link (PPP / Frame relay) [7:37824]
may be you can use the following mathod instead of CQ. Cause CQ is custom queue, maybe it will lead to a delay in the VOIP if the queue-size is not optimized well. So, may be you can use NBAR to adjust the bandwidth consumption between the Voice IP traffic and normal IP traffic first you define the Access-list for your IP traffic eg. in your first site, a network 192.168.100.X / 24 second site , a network 192.168.101.X/24 access-list 101 permit ip 192.168.100.0 0.0.0.255 192.168.101.0 0.0.0.255 then create a Class MAP for the IP traffic class-map IPTraffic match access-group 101 then, create a POLICY Class for the IP traffic and define the bandwidth you would like to used for the IP traffic policy-map IPTraffic class IPTraffic bandwidth 1 Hi there, I have a setup where I think I 'd need to use CQ but the documents that I found at cisco's site where not enough to understand / master the subject. Here is my scenario : I have a cisco 1750 in my branch office and another one on a remote site. Each cisco has two leased lines, one PPP and the other Frame-relay, both operating with 64K. I use VoIP to make the phone calls and I have database systems located at the remote site. I need to set up some sort of priority so I could optimize the overall usage reserving bandwidth for more critical applications. After searching I found that either policy routing or custom queue should do the job (in one way or another), with CQ being the correct one. Can you help me out ? The examples that I found were too simple for me to make any kind of decision. I am specially confused with the decision of setting a queue size. Best regards, Mario Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=37824t=37824 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Understaning Custom Queue - dual link (PPP _Frame relay) [7:37825]
may be you can use the following mathod instead of CQ. Cause CQ is custom queue, maybe it will lead to a delay in the VOIP if the queue-size is not optimized well. So, may be you can use NBAR to adjust the bandwidth consumption between the Voice IP traffic and normal IP traffic first you define the Access-list for your IP traffic eg. in your first site, a network 192.168.100.X / 24 second site , a network 192.168.101.X/24 access-list 101 permit ip 192.168.100.0 0.0.0.255 192.168.101.0 0.0.0.255 then create a Class MAP for the IP traffic class-map IPTraffic match access-group 101 then, create a POLICY Class for the IP traffic and define the bandwidth you would like to used for the IP traffic policy-map IPTraffic class IPTraffic bandwidth 1 (if you like to only give 10Kb for the IP Traffic) The final Thing is to set the IP POlicy map on your Interface eg. on the serial or ethernet connection int Serial 1or int Fa0/1 service-policy output IPTraffic (becareful of the traffic direction passing through the interface, and each interface can only be apply one input and one output traffic policy class only) Last thing is to verify whther the above config is work or not. show class-map IPTraffic show policy-map IPTraffic show int Hope this can soothe your in-sufficient bandwidth problem. wuwuwuwuwuwuwuwuwuwuwuwuwuwuwu wuwuwuwuwuwuwuwuwuwuwuwuwuwuwu Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=37825t=37825 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Interesting [7:37826]
IN this newsgroup if you type a special sign , the news will be break by the newsgroup ... this sign is OK but if you use the arrow pointing to the left sign, the news will be stoped. so in my previous news, 2 of them are chopped off by the news server. ^_^ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=37826t=37826 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE#8903 [7:37490]
Congratulations! George Zhang All, The title says it all. I took my first attempt at the CCIE lab test yesterday (March 5) in Halifax and received the Congratulations on Passing the CCIE Lab! this morning. I was the only person taking the lab test in Halifax yesterday. I was told that there was another person scheduled yesterday but did not show up. My test started about 8:15 AM in the morning. We broke for lunch at about 12:20PM. By then, I only finished all the IGP stuff and felt some pressure on time. But I have already reviewed rest of the test and knew that I could go through the rest quickly. After the 15 min lunch break, I worked through rest of the test very quickly. By about 3:00 PM, I finished every thing except one small requirement that I had no clue how to do it. I decided to skip that item. Then, I started reviewing and checking my config. Along the way of reviewing/checking, I spotted and fixed a few issues. Just about the time I finished reviewing every thing, the proctor walked in and told me that it' time. I looked at the watch. It was 4:30 PM. My proctor was Steve. Steve is a great proctor. He answered quite a few of my questions and cleared my mis-understanding and confusion about the requirements of the test. I would like to take this opportunity to thank all people who helped me to achieve my goal. First, I would like to thank my wife for her support and understanding. Without her support, there is no way I could achieve my goal. Next, I will give my thanks to Bruce, Val, and Fred of NetMasterClass. As I said earlier, the NMC1 class is the most important part of my final preparation. Thanks to Katie Wong of Cisco who scheduled me to access the ASET racks. Thats my primary resource for hands-on practices for the past couple of months. Thanks to Eric Fairfield for lending me a few routers when I was in Wisconsin. Also thanks to those that I've either studied with or have helped me one way or another. Thanks also to Paul for putting this great list together. As far as my story, I started my quest of the Cisco certifications a little over two and half years ago. I got my CCNA and CCNP in the first year. Three months later, I passed the CCIE written test. I wanted to take the lab a year ago. However, due to work and personal reasons, I did not get time to do it until now. Last year, I was too busy to do much study. At work, as a consultant, I was billing at least 40 hours/week for the whole year. At home, my second child was born in February, my wife finished school in July, and we moved to New Jersey from Wisconsin in September. In October of last year, I foresaw a window of opportunity for me to take the lab test early this year. Then, I lobbed my manager to let me go to the ECP1 class. By the time my manager approved my training request, I found that Mentor Technologies went belly up. However, I learned that Bruce and Val founded a new company called NetMasterClass, LLC (www.netmasterclass.net) and offering the NMC1 and NMC2 classes. I registered and took the NMC1 class by the end January. By the end of last year, the project I worked on finished. So since the beginning of this year I got a lot of time to study. For the past couple of months, I have studied 8-10 hours every day. As far as how I prepared, I have read most of the books (Doyle I II, Caslow, Halabi, Tam-Nam-Kee, Solie, Satterlee, etc.) recommended by people on this list. Among this long list of books, the only one I dont like is Solies book because there are too many errors in the book. There are a few topics I was more confused after reading the book. I dont have a home lab. So my primary resource for hands-on practice is remote labs such as Mentor Technologies vlabs (not available any more), Cisco ASET lab. Because I dont have a home lab, my preparation included more reading than hands-on practice. That actually worked out very well for me. Above all, the most important part of my preparation is the NMC1 class taught by Bruce, Val and Fred. IF I HAD NOT TAKEN THE NMC1 CLASS, IT PROBABLY WOULD HAVE TAKEN ME ONE OR TWO MORE ATTEMPTS BEFORE I COULD GET MY NUMBER. There are a lot of things that just cannot be learned from reading books or practicing. So the NMC1 class helped me to fill in that gap very well. It also helped me to access my strength and weakness. So I know what to study on the last few weeks. I strongly recommend taking the NMC1 class a few weeks before your lab date. Thanks again. George Zhang CCIE#8903, CCNA, CCNP Sr. Network Architect Compuware Corpration 1 Meadowlands Plaza, Suite 1050 East Rutherford, NJ 07073 732-494-0288 _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=37495t=37490
Re: Simulation on PIX firewall before deploying on the [7:36564]
According to Cisco Partner Lab Requirement... The LAB also using 2 Cisco PIX 515 why dont you refer to Cisco Partner Security Lab Requirement and build one in your office to simulate the Clients Situation the lab include Cisco Concentrator, PIX, . etc Brown, M wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I am helping with a PIX 520 configuration. Many and many acl's need to be configured. Is it possible to test the configuration before deploying in the production environment ? I am wondering if there is a simulator or the only here would be spending $$$ to buy one just for parallel test in the lab... Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36564t=36564 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Passed CSIDSPM Exam!!!!!!!!!!!!!!!! [7:36306]
Congratulations! Godswill HO Am very grateful to you all. The group really helped me through out my CSS1 exam track. It has been a big learn place where knowledge is shared.I sat and passed the Cisco Secure Intrusion Detection Systems with Policy Manager(CSIDSPM) version 2.1 exam today to complete the CSS1(Cisco Security Specialist 1) track. It was a beast of an exam, totally different from the first three. It was a tough battle but It is all over, thanks once more. You might think CCIE would be the next, no not at all, next in the list is CISSP (Certified Information Systems Security Professional) or CCSA (Checkpoint Certified Security Administrator). I will be grateful if someone who have taken the CCSA exam help me with the best book/study materials to use. I can only locate materials for the CCSA CP 2000 exam, but I want to take the CCSA NG exam which is the latest version. Any help would be appreciated. Enjoy. Godswill Oletu CCNP,CCDP,CSS1. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36310t=36306 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VPN Services in PPTP .... [7:36197]
Search Virtual Private Dial Up network config.. (VPDN) Mahesh Hi, Can some one give me the advice that how we can configure PPTP on cisco router and my centers can access the my network. We are using the win2000 at client place and we are trying to have VPN solution for the user. So that we can have the secure network. Thanks and Regards Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36199t=36197 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Nortel NNCA certification [7:36190]
any NORTEL NEWSGROUP ? James Barber Hi, firstly my apologies for posting this in a Cisco group. However, there are (still) other networking vendors, and I'd like to get the groups opinion on the Nortel NNCA certification. James ___ http://www.webmail.co.za the South-African free email service Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36202t=36190 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX Support in CW2000 [7:35381]
try upgrading the RME with PIX 2.0 package in the CiscoWorks 2K Danial Morison Hi group, I am trying to add Cisco PIX firewall in CW2000,RME.Error I am getting is Unable to connect to the device.I have used the diagnostics tools and they are showing that PING,NSLOOKUP,TRACEROUTE are ok.Also in Management station to devices UDP,TCP,SNMPR,SNMPW,TFTP,HTTP are fail and TELNET is pass.Any idea where I am doing a mistake. Thanks in advance. Danial _ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=35400t=35381 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: cisco security certification equipment list [7:35213]
Intrusion Detection System Concentrator 3000 Series Cisco Pix Secure Management Software Ken Tony Chen What kind of equipments do I need for the following security exams? Router: IOS: PIX firewall: Tacacs+ server: 640-442 MCNS: Managing Cisco Network Security (MCNS) 9E0-571 CSPFA: Cisco Secure PIX Firewall Advanced (CSPFA) 9E0-572 IDSPM: Cisco Secure Intrusion Detection System Version 2.1 (CSIDS 2.1) 9E0-570 CSVPN: Cisco Secure VPN (CSVPN) Tony *** This message is a private communication. If you are not the intended recipient, please do not read, copy, or use it, and do not disclose it to others. Please notify the sender of the delivery error by replying to this message, and then delete it from your system. Thank you. - Visit http://www.ballfoundation.org for our latest news. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=35250t=35213 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Why do some TFTP sessions take a lot longer [7:35006]
try checking the NIC card duplexing and speed setting sometimes this things will hamper the job^_^ Ozzie Sutcliffe When I do the TFTP lab in class.. I have 6 routers 6 PC and 6 Xover cables All have the same configs except for IP addy's Yet when the class pulls down the IOS the times for a 7 meg bin file vary from 4 to 15 minutes. The cables are all the same length same company who made them. The routers are all 1601's the pc's and NIC's the same all running windoze 98 SE. Ideas anyone ?? This week I will sniff each PC and see what that bring up . Ideas anyone ?? I will post the results next saturday Oz Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=35029t=35006 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
any one have Cisco SS7 Interconnect with Access Server course [7:34698]
please mail to me thx Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=34698t=34698 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
req: twins °¦¥Í¨à ·sºÐMP3, ¦P·R±¡·í¤J¾ê¼@³õª© [7:34385]
thx Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=34385t=34385 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
wrong post [7:34387]
wrong post. sorry Ocsic thx Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=34387t=34387 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: twins °¦¥Í¨à ·sºÐMP3, ¦P·R±¡·í¤J¾ê¼@³õª© [7:34385]
wong post Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=34388t=34385 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: wireless problem. [7:34110]
Have you tied the TCP/IP stack to the Wireless PCCard?? 1. Check the local loop-back address: ping 127.0.0.1 if this doesn't work then check if there is a IRQ conflict with the PC-Card drivers/hardware 2. Check the IP node address: ping x.x.x.x (where x.x.x.x is the IP address of your node) 3. If DHCP doesn't work, check that the BOOTP (UDP on port 67) is forwarding from the 340 access point on to the LAN (not familiar with 340 setup, but treating it like any other network device!) 4. Check gateway address for subnet etc. etc. If your using this in a production environment, then may I suggest you have a read of the following article: http://www.networkmagazine.com/article/NMG20011203S0008 Let's us all know how you get on... SB :) At 14:45 01/02/2002 -0500, george gittins wrote: I have a aironet 340 access point which can obtain an ip address from my dhcp. I installed the pcmcia lan wireless card on my laptop and i can surf the net find.However i cant ping anything neither can i acess my routers , .i cant even ping my ip addresss, is something that im missing here? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=34289t=34110 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Request Training material [7:34238]
Anybody has the following training material (softcopy) ? Cisco SS7 Interconnect for Access Server Cisco SS7 Advanced Troubleshooting Cisco SS7 Interconnect Solutions Cisco SS7 Interconnect for Voice Gateways Solution Cisco SS7 Packet Tandem Solution Can mail it to me ? Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=34238t=34238 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Bridge-Group Circuit-Group? [7:33356]
Hi All! Has anyone tried to group 2 serial interfaces on the same router to act as a single bridged connection (load-balanced)? I've got bridging working OK, but Spanning Tree kicks in and blocks one of the serial interfaces from forwarding! Having checked the commands for this feature, there is reference to a Circuit-Group commands... Bridge-Group Circuit-Group Has anyone used this feature, and how well does it work with a ISDN backup circuit for the serial links? :) Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=33356t=33356 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router problem inserting into token ring [7:33304]
Try the troubleshooting techniques from Cisco - http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/index.htm select Token-Ring and follow the instructions! If that doesn't give you any luck then turn on debug and check the status of the interface... Also if you have CCO then dump the TechReport from the 2503 - https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl That will give you any field/bug fixes for your version of IOS... Hope this helps...infact the above could be used for practically any problem you have with Cisco hardware! :-/ At 18:21 26/01/2002 -0500, Joseph Slawinski wrote: I have checked the ring speed, its the same on the token ring cards and the router. The hub doesn't have a setting for ring speed though. Author: Charles Manafa (---.blueyonder.co.uk) Date: 01-26-02 17:26 Have you checked the ring speed? CM - Original Message - From: Joseph Slawinski To: Sent: Saturday, January 26, 2002 8:26 PM Subject: Router problem inserting into token ring [7:33304] I am having a problem I know most of you folks could help me with. I have two 2502 routers and two token ring hubs. The hubs are dumb hubs, they have no network management capabilities. They don't even have external power supplies. The problem is I am able to hook up my computers to the hubs, the token ring cards will automatically attemt to insert themselves into the rings on the hubs. The relays light up every 15 seconds, so I know that is working ok. My problem is, I am unable to configure the routers to insert themselves into the ring. I have experience connecting hubs with network management modules into routers with no problems, but I somehow can't find a way to configure the routers to attach to these dumb hubs. I know that I'm missing something key here. I was thinking maybe the media filters I am using are defective, but I can't be sure. I know this question may sound dumb, but I have nowhere else to turn. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=33327t=33304 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Emergency: Any body has the Course Material of Cisco SS7 [7:32582]
Hi, everybody, Any body has the Course Material of Cisco SS7 Interconnect for Access server ? Cause I need to implement this system soon, if you have please Email to me: [EMAIL PROTECTED] Many Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32582t=32582 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Emergency: PIX 515 password recovery [7:31514]
for my case, once I use default password cisco to enter it... the aaa configuration take effect, and it prompt out Username: passsword:immediately How can I use write erase command. My situation is that the original AAA configuaration is still active, it will make a great difficulties in passowrd recovery... fahim Hi Use write erase command. this will erase your confiuration then do a reload command to reboot your pix. fahim ccna, ccda, css1 Ranma wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... HI, any one know how to completely erase the whole configuration file of the PIX515 firewall. I had follow the password recovery procedure of Cisco Web page. This method only can clear the TELNET and ENABLE password. For my router, it had previously configured to use AAA-Authentication server. So it always prompt out Username: password: I am now finding a method to completely erase the flash configuration file. Thank you for your help! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=31523t=31514 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Emergency: PIX 515 password recovery [7:31514]
ha ha~~~ already use this method to retrived the password... Thank you for all people ~~ Engelhard M. Labiro How about setup a temporary AAA server with an userpassword and login with that username? You can use sniffer for the IP address of AAA server going out the PIX interface. for my case, once I use default password cisco to enter it... the aaa configuration take effect, and it prompt out Username: passsword:immediately How can I use write erase command. My situation is that the original AAA configuaration is still active, it will make a great difficulties in passowrd recovery... Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=31525t=31514 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX with no NAT [7:31353]
may be you can use for example internal network: 192.168.1.x / 24 external network: 200.100.100.X /24 you can use this static command static 192.168.1.0 192.168.1.0 netmask 255.255.255.0 0 0 access-list OUT permit ip any any access-list IN permit ip X.X.X.X any access-group OUT interface inside access-group IN interface outside Then , the PIX will perform as an ROUTER, you can control the outside and inside access-list instead of using CONDUIT to open/map the port for those internal server. This method is teached by a CCIE of Cisco TAC. Hope this tricky method can help you! Philip Sousa I've been on Cisco's site for hours, but cannot find a conclusive answer to my question. When you disable NAT (NAT 0) to allow the use of public IP's behind the PIX, are the internal nodes allowed to start outbound connections by default?? I need to selectively allow nodes behind the firewall to start outbound connections on certain porthow should I accomplish this? Access-lists? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=31371t=31353 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Passed CCNP Exams [7:30080]
The greatest Christmas Gift. Congratulations! Bravo! Well Done! Stanton Hi, Passed CIT yesterday with 942 and got my CCNP as a gift of X'mas for myself. I spent about 2 months to pass all the CCNP exams with good scores: Switching 946, Remote 920 and Routing 962. The books I used for preparation are focus on Cisco's Study Guide, and I think Lammle's book for CCNA is perfect, but the others are not good for CCNP. Boson's test questions are very good and cover almost all the topics reauired by the examinations. Furthermore, those 2 bibles from Doyle and Halabi are good for in-depth study. Merry Christmas and Happy New Year ! Shengtao CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30081t=30080 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: About ACS 2.3.5 for UNIX [7:30002]
Why not use ACS 3.0 ? It is released! fmxiao Hi all in group anyone can answer the question below. does Cisco ACS 2.3.5 (for UNIX) can install and run under solaris 8 ? thx in advance. Roy Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=30029t=30002 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VoIP Problem: Billing Triggered Before Authentication [7:28284]
in the aaa accounting command , just use stop-only so that the AS5300 will triggered the Radius accounting server when the call is stop. Patrick Donlon What billing system are you using? Is it based on the PSTN Switches or do you use Radius accounting? cheers Pat Chong Chun Wei (Central) wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi all, Pls help. Scenario: 2 AS 5300 acting as the originating and terminating gateway on each side of the network. The originating AS5300 is connected to the PSTN switch ( SW A ) using PRI signaling while the terminating AS 5300 is connected to the PSTN switch ( SW B) using R2 signaling. The customer will dial a specific number to access the SW A and then enter the account and pin number. After the authentication, there will a beep tone follow by the message which prompt the user to enter the destination phone number. For a normal scenario, After the entering of the destination phone number, there will be ringing tone. When B-party picked up the phone, there will be a second beep tone which will trigger the billing system to start the billing. However, what actually happens is that, After the entering of the destination phone number, just right before the ringing tone, there is a click sound immediately before the ringing tone which undesirably, trigger the billing system. This creates problem because even before the call get connected, the customer has already been charged. The Attempted Solutions include 1. Program the progress indicator at the terminating gateway's dial-peer 2. check the output of the debug isdn a931 (looks fine) However, the problem still haven't been solved. Please help. rgds Alvin Chong CCNA Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=28284t=28284 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Any one has experience in Cisco AS5400 ? [7:27907]
the 8port T1 or E1 card on the machine is stable ? any one has tested some seldomly use codec like g.729ab ? is the machine better than AS5300 for VoIP feature? I dont know whether it require VC-WARE to load the DSP card, because in the catalogue it did not mention about the voice card info. thanks Please comment on this machine! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=27907t=27907 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Configuration of Channelized E1 [7:27237]
try e.g conf t cont e1 0 channel-group 0 timeslots 1-31 then you will see a virtual interface appear int s0:0 then conf t int s0:0 ip address 1.2.3.4 255.0.0.0 this will use timeslot 1-31 of the first e1 to be 1.2.3.4 for different timeslots just use a different times slot group e.g channel-group 1 timeslots 1-10 channel-group 2 timeslots 11-30 then int s0:1 will be the first timeslot group int s0:2 will be the send time slot group Vijendra Jaiswal Hello All , If anyone one has implememented do let me know. Pls help me out with the configuration(complete configuration) of channelized E1 terminating on a Cisco PRI E1 controller card. 1) How to configure the timeslots on the channelized E1 , 2) How to alot different IP addresses(30 or 31) for each timeslot. Hope that my question has clarity.if any further deatils are needed do let me know. Thanks a lot , Vijendra. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=27239t=27237 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Passed Cisco Secure VPN! [7:25635]
Great... Any study material you like to share... Theodore stout wrote in message news:[EMAIL PROTECTED]... Man this test was hard! I got over 850 on it. This was incredibly difficult. What I would recommend is to know the environment of VPNs and not just Cisco's implementation of them. What helped me- I read MCNS again twice before the test. I read the CSVPN text so many times that at least 30% of the pages have fallen out. Seriously! Work experience. The ADV PIX test. Do not attempt this test without the ADV PIX test first. Know the concentrators. Sleep with thempropose marriage. Start reading the recommended books for the CCIE Security exam. I have read about half of them and they really helped me to understand the environment of VPN. Finally, the RSA series of books. They really helped me again to understand where Cisco was coming from and why certain solutions are preferred. Coming from a router and trunking background, I personally feel very relaxed with the PIX but rather hostile towards the concentrators. It helped me to get to know other vendors and understand Cisco's marketing and sales strategy against them in context of their manuals. Just made life easier. IDS...Next week. I heard the Darth Maul was the exam protractor. Peace Theo Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=25647t=25635 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Anyone has Cisco Content Netwokings training material ? [7:25718]
Can mail to me ? Thanks ^_^ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=25718t=25718 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Need Urjent help and save my Job.(configuring 2600 routers [7:24583]
how about using CSS , and set a virtual IP for the 2 real server and running round ribon mode... ? Rishi Hi John, I want to know how to configure the routers for load balancing. Here is the situation. I have 3 2610 Routers.One is having two serial interfaces.What i want is the two serial interfaces of that router should be connected two another two router's serial interfaces.After that those two routers should be connected to two web servers. When i am going to hit the web server,there i should hit the servers simultanuasly,that means if i hit the server first it should go to one server and second request should hit the second server and so on Can any body can give complete configuration commands for all three routers and which type of cables should i connect for serial int of routers to another router. it is urjent.Any body's help may save my Job. Thanks in Advance... BY Rishi. __ Do You Yahoo!? Make a great connection at Yahoo! Personals. http://personals.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24583t=24583 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Need Urjent help and save my Job.(configuring 2600 routers [7:24594]
But this case the servers are not a single source-destination is the ip cef load-sharing per-packet can handle this case ? Anymore IDEA? Cisco Nuts wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Just configure ip cef for per packet on both the interfaces...That should do it...!! From: Ocsic Reply-To: Ocsic To: [EMAIL PROTECTED] Subject: Re: Need Urjent help and save my Job.(configuring 2600 routers [7:24583] Date: Mon, 29 Oct 2001 18:44:14 -0500 how about using CSS , and set a virtual IP for the 2 real server and running round ribon mode... ? Rishi Hi John, I want to know how to configure the routers for load balancing. Here is the situation. I have 3 2610 Routers.One is having two serial interfaces.What i want is the two serial interfaces of that router should be connected two another two router's serial interfaces.After that those two routers should be connected to two web servers. When i am going to hit the web server,there i should hit the servers simultanuasly,that means if i hit the server first it should go to one server and second request should hit the second server and so on Can any body can give complete configuration commands for all three routers and which type of cables should i connect for serial int of routers to another router. it is urjent.Any body's help may save my Job. Thanks in Advance... BY Rishi. __ Do You Yahoo!? Make a great connection at Yahoo! Personals. http://personals.yahoo.com _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24594t=24594 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Multilayer Switching [7:24595]
did you enter into the MSFC session ? Thomas N. wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Anyone have any problem turning on VLAN interfaces that are running on NAT protocol? I couldn't turn VLAN on my 6509 that has ip nat inside statement. Thanks! Thomas N. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24596t=24595 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco ACS problem [7:24453]
you have to do some configuration on the router to enable the router send the RADIUS info to the ACS server. aaa authentication login radius radius-server host 1.2.3.4 auth-port 1645 acct-port 1646 radius-server key abcdefg then in the ACS Server add the appropriate ITEM in the router column you will see the logs will generate once a user is logon the router Cheng, Steven wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hello , Guys.. I have testing the product of Cisco Secure ACS 2.6 for Windows 2000. But now I have a problem. I need ACS to log every user who login the router and every action does the user do . I can't find any config regarding this in the Cisco Web site. The web site show : The Cisco Secure ACS can do it. So , could any one can share the experience to me ?? or told me how to config the ACS server and Cisco router ?? Appreciated for your help Best Regards Steven Cheng Associate I/T Specialist Rm DE 16F Hung Tai Century Tower 156,Min-Sheng E.Road Sec.3 , Taipei TEL:886-2-2715-7010 FAX:886-2-2715-7077 Mobile:886-918-564-332 E-Mail: [EMAIL PROTECTED] Jabber ID: [EMAIL PROTECTED] [GroupStudy.com removed an attachment of type image/gif which had a name of banner1.gif] [GroupStudy.com removed an attachment of type image/gif which had a name of Tech.gif] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24455t=24453 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: HSRP Problem [7:24358]
first, ensure both router's ethernet port are connected with the same lan open debug ip hsrp on each router to debug the status of the ACTIVE , STANDBY. Kevin Pan One day, I discovered that one of the router continuously display an error message from the console showing that there is a bad authentication between HSRP members. *Oct 27 07:15:19: %STANDBY-3-BADAUTH: Bad authentication from x.x.x.x, remote state Init Right now, there are only two routers forming the HSRP group. The configuration was extracted as below: Router1 interface Ethernet1 ip address x.x.x.245 255.255.255.0 standby 2 priority 200 preempt standby 2 ip x.x.x.254 Router2 interface Ethernet0/1 ip address x.x.x.247 255.255.255.0 standby 2 priority 150 preempt standby 2 ip x.x.x.254 The message was only discovered on Router1. When I tried to increase the priority of Router2 and make it becomes active. Then no error messages appeared. Anyone has an idea? Please advise. Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24373t=24358 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]