RE: "Priority-queuing-weighted-fair-queuing" [7:1853]
I believe this is the concept behind LLQ, the queuing mechanism that cisco propeses in order to have strict QoS (specially with VoIP over high traffic netowrks) = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Cthulu [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, April 25, 2001 4:01 PM > To: [EMAIL PROTECTED] > Subject: "Priority-queuing-weighted-fair-queuing" [7:1853] > > > Hi,all, > > I just finished Caslow, 2nd ed. In the chapter on queuing, > he very briefly > mentions a beast called "priority-queuing weighted fair > queuing". The two > alone, I get; however, I am unable to find any info on the > Cisco site about > the merger (if you can call it that) that results in "PQ-WFQ". > > Was Caslow smoking crack, or does have a line to Madame Cleo > where he can > see technologies before they are actually here? > > Can someone give me some links to the official Cisco PQ-WFQ > pages/docs? > > > Thanks, > > Charles > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=1857&t=1853 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CATM HELP REQUIRED [7:3321]
I've used the Cisco ATM Solutions book, from cisco press. In there you'll find anything you need about the exam. My exam had a lot of theoritical questions about ATM's functions and of course questions about the LS1010. Good luck = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Faisal Athar [mailto:[EMAIL PROTECTED]] > Sent: Saturday, May 05, 2001 9:07 PM > To: [EMAIL PROTECTED] > Subject: CATM HELP REQUIRED [7:3321] > > > Hey Guys... > > Any one knows any good source for CATM??? > > I have a very little time to get prepare for it..cause its > getting expired > on > 14th of this month.. > > Any tips /tricks or shortcuts?? > > Any help would be highly appreciated. > > Thanks. > Faisal. > > > Get free email and a permanent address at > http://www.netaddress.com/?N=1 > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=3422&t=3321 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Pix firewall and mail server - bad combo? [7:4748]
Hi, I have run several times into such problems (up to version 5.2). The only solution I've found so far is to disable the smtp guard (no fixup protocol smtp 25). = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Chewy Gravy [mailto:[EMAIL PROTECTED]] > Sent: Thursday, May 17, 2001 12:32 AM > To: [EMAIL PROTECTED] > Subject: Pix firewall and mail server - bad combo? [7:4748] > > > Hi all - > > I'm encountering some problems with mail delivery, and it > seems that the > Pix firewall may be the culprit. Here are the symptoms (IP and domain > names have ben changed to protect the inept): > > - telnet to port 25 from a machine not passing through the pix and you > get a standard response: > 220 mail.mydomain.com ESMTP server (Post.Office v3.5.3 > release 223) ready > Wed, 16 May 2001 14:23:12 -0700 > ehlo mydomain.com (my input) > 250-mail.mydomain.com > 250-HELP > 250-EXPN > 250-XREMOTEQUEUE > 250-ETRN > 250-PIPELINING > 250 SIZE > > - telnet to port 25 from a machine that passes through the > Pix, and you > get this mess: > telnet mail.mydomain.com 25 > Trying 172.16.16.16... > Connected to mail.mydomain.com. > Escape character is '^]'. > 220 > 22 > **0***20***00**00*0***200*2**0*00 > ehlo mydomain.com (my input) > 500 Command unknown: '' > > In the Pix config I have the following relevant entries (IP addresses > have been changed): > fixup protocol smtp 25 > static (inside,outside) 172.16.16.16 172.16.16.16 netmask > 255.255.255.255 > 0 0 > conduit permit tcp host 172.16.16.16 eq smtp any > conduit permit tcp host 172.16.16.16 eq pop3 any > > We're also getting log entries on the mail server that > indicate timeouts > - the biggest problem is that some of my users are getting repeats of > messages - sometimes hundreds of them over the course of a > week or more. > > Ideas? > > Doug > [EMAIL PROTECTED] > = > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=4814&t=4748 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX question... [7:5248]
Hi all, Just configure the outside interface as you would configure the inside interface (nat on the outside with a global pool on the inside). Regards, = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Rizzo Damian [mailto:[EMAIL PROTECTED]] > Sent: Monday, May 21, 2001 5:16 PM > To: [EMAIL PROTECTED] > Subject: PIX question... [7:5248] > > > Hey all, is it possible to translate public IP addresses (outside) to > private IP addresses (inside) on a PIX firewall. Basically the exact > opposite of what's usually performed on a firewall. We are > going to have > users dial in to our internet router and receive a Public IP > address. They > have to get through our firewall to gain access to our LAN. > Is there a way > to translate the Public IP address they will obtain into a private IP > address used by our LAN so they can access it? I thank you > for your help... > > > -Rizzo > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5408&t=5248 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX 520 [7:5775]
Since it is supporting up to 6 interfaces, it should be the restricted one. = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Tim Hickman [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, May 30, 2001 12:29 AM > To: [EMAIL PROTECTED] > Subject: Re: PIX 520 [7:5775] > > > This box came to me 'used' and I have not done any upgrading > with it (memory > or software). I'm just trying to determine what type of > license (if any) it > has. > > On Tuesday 29 May 2001 02:37 pm, Allen May wrote: > > This may have already been answered, but did you do > upgrades one version at > > a time? If not you had to write down the activation keys > and reenter after > > upgrading. > > > > > > - Original Message - > > From: "Tim Hickman" > > To: > > Sent: Thursday, May 24, 2001 3:09 PM > > Subject: Re: PIX 520 [7:5775] > > > > > Here is the 'sh ver' from the box I have another > pix 520 that has > > > > been > > > > > upgraded to 5.3 and shows the number of connections, but > this one does > > > > not. > > > > > pixfirewall# sh ver > > > > > > Cisco Secure PIX Firewall Version 5.1(4) > > > Compiled on Mon 02-Oct-00 07:19 by morlee > > > Finesse Bios V3.3 > > > > > > pixfirewall up 49 secs > > > > > > Hardware: SE440BX2, 32 MB RAM, CPU Pentium II 349 MHz > > > Flash AT29C040A @ 0x300, 2MB > > > BIOS Flash AM28F256 @ 0xfffd8000, 32KB > > > > > > [snip] > > > > > > > > > Licensed Features: > > > Failover: Enabled > > > VPN-DES:Enabled > > > VPN-3DES: Disabled > > > Maximum Interfaces: 6 > > > > > > Serial Number: > > > Activation Key: > > > pixfirewall# > > > > > > On Thursday 24 May 2001 01:38 pm, Jonathan Hays wrote: > > > > Are you sure that "show version" doesn't give the > number of licensed > > > > connections? It does on the PIX 520 in our lab. See > output below. > > > > > > > > Or are you referring to something else? > > > > > > > > -Jonathan > > > > > > > > SF-Pix# sh ver > > > > > > > > Cisco Secure PIX Firewall Version 5.1(4) > > > > Compiled on Mon 02-Oct-00 07:19 by morlee > > > > Finesse Bios V3.3 > > > > . > > > > . > > > > [snip] > > > > . > > > > Licensed connections: 128 > > > > . > > > > . > > > > > > > > SF-Pix# > > > > > > > > Tim Hickman wrote: > > > > > How do you find the license of simultaneous > connections that a pix > > > > has. > > > > > > > I have a 520 w/ version 5.1(4). No info is given in > the 'show ver' > > > > > of the pix. > > > > > > > > > > > > > > > Thanks. > > > > > FAQ, list archives, and subscription info: > > > > > http://www.groupstudy.com/list/cisco.html Report > misconduct and > > > > > Nondisclosure violations to [EMAIL PROTECTED] > > > FAQ, list archives, and subscription info: > > > > http://www.groupstudy.com/list/cisco.html > > > > > Report misconduct and Nondisclosure violations to > [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=6383&t=5775 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: PIX FIREWALL UPGRADE [7:5976]
Hello all, In 4.x you can see the activation key only when you try to upgrade the PIX IOS. You can upgrade to whatever version you like (as long as you have the required flash and ram). For example I have upgraded a 4.4(5) to 6.0(1) without any problems. Regards = Panayiotis PsihoyiosSyNET S.A. CCNP (Security, ATM), CCDP, MCP 118 B, Agias Eleoussis Street Network EngineerGR 151 25 Maroussi email: [EMAIL PROTECTED] Athens - Greece Tel:++ 301 61 29 500Fax: ++ 301 61 25 313 = > -Original Message- > From: Allen May [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, May 29, 2001 7:51 PM > To: [EMAIL PROTECTED] > Subject: Re: PIX FIREWALL UPGRADE [7:5976] > > > Just upgrade one version at a time. I believe the next > upgrade is the one > that starts showing the activation keys. You can do one > upgrade, get the > key, then go to the version you want, OR just keep going one > version at a > time. Either way works but you need to get the key by > upgrading one version > first either way. > > Allen > > - Original Message - > From: "netman" > To: > Sent: Tuesday, May 29, 2001 8:56 AM > Subject: Re: PIX FIREWALL UPGRADE [7:5976] > > > > I am not sure if 4.44 showed the activation key in show ver. > > > > I don't think the Pix will run if it didn't have an activation key. > > - Original Message - > > From: "Jtnatas Amorim" > > To: > > Sent: Friday, May 25, 2001 4:32 PM > > Subject: PIX FIREWALL UPGRADE [7:5976] > > > > > > > I'd be grateful if someone could help me solve this problem: > > > > > > I have a PIX 520 in a customer network with the following > show version > > > command results: > > > > > > pix# sh versh har > > > > > > PIX Version 4.4(4) > > > > > > Compiled on Thu 06-Jan-00 16:07 by pixbuild > > > > > > pix up 2 days 3 hours > > > > > > Hardware: SE440BX2, 128 MB RAM, CPU Pentium II 349 MHz > > > > > > Flash strata @ base 0x300 > > > > > > 0: ethernet0: address is 00d0.b785.4f86, irq 11 > > > > > > 1: ethernet1: address is 00d0.b783.e78a, irq 10 > > > > > > Licensed Connections: 128 > > > > > > Serial Number: 18029118 > > > > > > > > > > > > Please I'd like to know if in the case of a PIX software > upgrade from a > > > 4.4(4) to a 5.2(1) version, I will need a activation Key. > > > > > > Note: As you can see with the show version command, > actually the device > > does > > > not have a activation key. > > > > > > Thank in advance, > > > > > > > __ > ___ > > > Get Your Private, Free E-mail from MSN Hotmail at > http://www.hotmail.com. > > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com/list/cisco.html > > > Report misconduct and Nondisclosure violations to > [EMAIL PROTECTED] > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to > [EMAIL PROTECTED] > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=6382&t=5976 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: books on PIX? [7:16720]
Hi group, The best books on PIX I've read so far are the manuals. Also the MCNS book from Cisco Press has some good info on the PIX. Regards === Panayiotis Psihoyios CCNP (Security, ATM), CCDP, MCP Network Engineer Synet S.A. 118 B, Agias Eleousis Street Marousi GR 151 25 Greece Tel: ++ 301 0 61 29 500 Fax: ++ 301 0 61 25 313 http://www.synet.com.gr === > -Original Message- > From: sam sneed [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, August 21, 2001 11:10 PM > To: [EMAIL PROTECTED] > Subject: books on PIX? [7:16720] > > > Anyone know of any good introductory books on PIX firewalls? > Something nice > and simple that has a beginning, middle, and an ending.(Most > authors of tech > books miss this concept). I'd rather not have to jump around > in CCO land > getting snippets of different functionalities that I probably > would never > have to implement. Just the basics. Thanks. > > > Sam Sneed Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=16795&t=16720 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: tftp server crashes when uploading new image [7:20961]
Hi all, Are you using Cisco's TFTP server? From my experience, this program shows quite often this kind of errors (specially when downloading IOS to 3640 or 3660). There are some freeware tftp servers, maybe you should try one of them. Regards === Panayiotis Psihoyios CCNP (Security, ATM), CCDP, MCP Network Engineer Synet S.A. 118 B, Agias Eleousis Street Marousi GR 151 25 Greece Tel: ++ 301 0 61 29 500 Fax: ++ 301 0 61 25 313 http://www.synet.com.gr === > -Original Message- > From: Gary Crouch [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, September 25, 2001 8:59 AM > To: [EMAIL PROTECTED] > Subject: tftp server crashes when uploading new image [7:20961] > > > I am trying to upgrade my 3640 router from 11.1 to 12.5 > when I try yo TFTP I get a app error the instruction at "0x006e6900" > referenced memory at "0x006e6900" the memory could not be > "read" click ok to > terminate the program. > I have used the same file and TFTP server to upgrade our > other 3640 router > the only difference is that this router is running BGP > anyone know how to get around this ? > current version is 11.1 > > Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=20964&t=20961 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Cat 6000 [7:21845]
Hi all, I've seen this behaviour also. It occurs when using win9x too. So far I haven't found a software version than eliminates the problem. Word is that it is a combined (hardware + software) "minor" problem. === Panayiotis Psihoyios CCNP (Security, ATM), CCDP, MCP Network Engineer Synet S.A. 118 B, Agias Eleousis Street Marousi GR 151 25 Greece Tel: ++ 301 0 61 29 500 Fax: ++ 301 0 61 25 313 http://www.synet.com.gr === > -Original Message- > From: Rik Guyler [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 04, 2001 2:20 AM > To: [EMAIL PROTECTED] > Subject: RE: Cat 6000 [7:21845] > > > Strange behavior indeed! I don't know if it's the same > thing, but an old, > well-known bug with NT/Win2k and Catalysts is very similar. > By connecting > an NT/Win2k serial port to the console port of a Cat when the > PC is booting > will reset or freeze the switch. I have witnessed (in other > words "done") > this on several different models of switches. I've heard > that it has to do > with the way NT/Win2k polls the serial port but I haven't > confirmed it. > Nowadays, I make sure my notebook is all the way up and my > terminal emulator > (Teraterm usually) is up as well. Funny, but it doesn't seem > to affect > routers, firewalls, etc...only the switches. > > Rik > > -Original Message- > From: Patrick Donlon [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, October 03, 2001 10:29 AM > To: [EMAIL PROTECTED] > Subject: Cat 6000 [7:21845] > > > We have a couple of Cat 6Ks running IOS, when CRT terminal software is > starting from a PC with the console cable connected it goes > into rom monitor > mode. Anyone know the reason for this, I haven't found > anything on the CCO > yet > > regards Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=22001&t=21845 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
