test subscription, please disregard [7:5835]

2001-05-24 Thread Patrick Ramsey

Testing new subsciption, please disregard




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5835&t=5835
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Where to get cheap memory for routers? [7:7168]

2001-06-05 Thread Patrick Ramsey

I stuck some memory from an old 3com 3500 into a 3620 and it works fine...
It's normal pc memory.  I'm sure cisco would have somethign to say about the
warranty though... :)

>>> "Jon Krabbenschmidt"  06/04/01 07:04PM >>>
Try here. I buy all my memory from Crucial.

http://www.crucial.com/store/listparts.asp?model=3660+Series+Routers+%28DRAM 
%29&x=12&y=8


Jon


-Original Message-
From: Thomas [mailto:[EMAIL PROTECTED]] 
Sent: Monday, June 04, 2001 3:16 PM
To: [EMAIL PROTECTED] 
Subject: Where to get cheap memory for routers? [7:7168]


Hi All,

I am looking for upgrading our Cisco 3660 router.  However, the cost for the
128MB of Cisco memory susprised me.  It costs like ... $5000.00 for a piece
of 128MB memory module for Cisco 3660.  I wonder if it is OK to plug in a
third party memory module? Has anyone out there do this? Is it safe to do?
Which vendors do you recommend with good quality and cheap (or reasonable)
price?  Thanks All!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7245&t=7168
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Linux Console program (Hypterminal equivlant)? [7:7188]

2001-06-05 Thread Patrick Ramsey

minicom

you can grap it here:

http://filewatcher.org/file_i/23107443/minicom.html

>>> "nethacker711"  06/04/01 08:55PM >>>
I was searching the archives and could not find this one. Does anyone know
of or can recommend a good HyperTerminal like program that will let me
console into Cisco routers and other devices on Linux (RedHat)?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7246&t=7188
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: span port [7:8310]

2001-06-13 Thread Patrick Ramsey

No you will not catch all the frame if they exceed 10mb.  The cat may not
even allow it.  I am not sure.  but if the switch does allow it, and the
data amount exceeds 10mb, then it can not possibly mirror from 100mb to 10mb
which your laptop is set to.

-Patrick

>>> "Bob S"  06/13/01 01:16PM >>>
Yes, you will be able to mirror the traffic from the source you've specified 
to the destination port.  There aren't any issue that I know of.


>From: "Adekola, Dennis D" 
>Reply-To: "Adekola, Dennis D" 
>To: [EMAIL PROTECTED] 
>Subject: span port [7:8310]
>Date: Wed, 13 Jun 2001 04:14:41 -0400
>
>Hi Guys,
>
>i have a server running at 100mb
>and i am trying to mirror the port on a CAT 6509
>with the set span command.
>
>The problem is i have an ethernet card on my laptop which runs at 10mb
>
>The question is will i be able to capture the frames adequately with my 
>10mb
>NIC
>
>
>Thanks for your help
>
>Tade (CCNP)
_
Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8372&t=8310
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: span port [7:8310]

2001-06-13 Thread Patrick Ramsey

I could see allowing it...  But capturing data will only be correct up to
10mb.

I guess if the server is slow, then that would not be a problem. But if you
have some high end unix servers with 5,000+ users logged in at any one given
time, that 10mb gets eaten up real quick.. :)

>>> "Bob S"  06/13/01 02:02PM >>>
Cat6509 will allow you to configure SPAN feature even when the two ports 
does not match speed.  It will prevent you to configure the SPAN if the 
source and destination ports are in the same ASIC.

The SPAN configuraion guidelines does not mention that it is not recommended 
tthe both destination and source be in same speed.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_5_5/cnfg_gd/span.htm#14293
 


>From: "Patrick Ramsey" 
>Reply-To: "Patrick Ramsey" 
>To: [EMAIL PROTECTED] 
>Subject: Re: span port [7:8310]
>Date: Wed, 13 Jun 2001 13:31:53 -0400
>
>No you will not catch all the frame if they exceed 10mb.  The cat may not
>even allow it.  I am not sure.  but if the switch does allow it, and the
>data amount exceeds 10mb, then it can not possibly mirror from 100mb to 
>10mb
>which your laptop is set to.
>
>-Patrick
>
> >>> "Bob S"  06/13/01 01:16PM >>>
>Yes, you will be able to mirror the traffic from the source you've 
>specified
>to the destination port.  There aren't any issue that I know of.
>
>
> >From: "Adekola, Dennis D"
> >Reply-To: "Adekola, Dennis D"
> >To: [EMAIL PROTECTED] 
> >Subject: span port [7:8310]
> >Date: Wed, 13 Jun 2001 04:14:41 -0400
> >
> >Hi Guys,
> >
> >i have a server running at 100mb
> >and i am trying to mirror the port on a CAT 6509
> >with the set span command.
> >
> >The problem is i have an ethernet card on my laptop which runs at 10mb
> >
> >The question is will i be able to capture the frames adequately with my
> >10mb
> >NIC
> >
> >
> >Thanks for your help
> >
> >Tade (CCNP)
>_
>Get your FREE download of MSN Explorer at http://explorer.msn.com 
_
Get your FREE download of MSN Explorer at http://explorer.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8393&t=8310
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Vlans - maximum no of devices [7:8128]

2001-06-14 Thread Patrick Ramsey

We run about 750-950 computers/printers in each of our vlans. (major
facillites)  with no performance problems.  I couldn't imagine only having
200 devices per vlan.  That would be close to 2 subnets in each of our
closets.   We run on 6509's with POS blades in a full mesh.  Broadcasts are
not that bad at each facillity.  Utilization stays at less than 15% on the
LAN and no more than 30% across the WAN links.

-Patrick

>>> "CCB"  06/14/01 12:55AM >>>
I have to agree, I would not personally put more than around 200 devices in
a broadcast domain and that is pushing it.  If it is possible I would break
it into two or more VLANS and route between the VLANS, this help out in the
performance arena.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Hire, Ejay
Sent: Tuesday, June 12, 2001 6:19 AM
To: [EMAIL PROTECTED] 
Subject: RE: Vlans - maximum no of devices [7:8128]


The theory behind it is this.  Would you, in a preplanned network
deployment, put over 250 devices in the same Broadcast domain?

-Original Message-
From: John Kale [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, June 12, 2001 5:45 AM
To: [EMAIL PROTECTED] 
Subject: Vlans - maximum no of devices [7:8128]


hi all,

I read somewhere that there can only be a maximum of 254 devices in a vlan.
I'm currently redesigning a network that would have a vlan containing about
300 devices. Is the 254 restriction a design one? Please can someone
enlighting me on this issue.


regards,


Tunde
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8495&t=8128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Quiz:"auto proxy IP" [7:8308]

2001-06-14 Thread Patrick Ramsey

Creat a cname or A record for wpad.yourdomain.com and create a wpad.dat file
on that webserver.

for more info on this, go to microsoft and do a search for auto proxy config.

-Patrick

>>> "ElephantChild"  06/14/01 07:13AM >>>
On Thu, 14 Jun 2001, Susan Stone wrote:

> can this be done is Microsoft DNS??
> 
> proxy.your.domain.goes.there. IN A 10.0.0.6
>   IN A 10.0.0.7

I have no experience with anything other than bind, so I don't know. 
Hopefully, it can, perhaps using a slightly different syntax. Did you
try it? (IMHO, if it can't, you should consider going for better DNS
software.)

> >From: ElephantChild 
> >Subject: Re: Quiz:"auto proxy IP" [7:8308]
> >
> >On Wed, 13 Jun 2001, Susan Stone wrote:
> >
> > > Hi..  We need to do the auto-proxy solution for browsing.  I have a
main
> > > proxy's IP 10.0.0.6 and back up proxy 10.0.0.7.  I need to all my IE 
> >clients
> > > to point to a "auto IP address" let say 10.0.0.5 which can actually 
> >point to
> > > 10.0.0.6 when both are on line, if 10.0.0.6 go down, it will 
> >automatically
> > > point to the back up proxy 10.0.0.7.  What is the better way to do
it.
> >How
> > > about in Cisco way?  Any idea?
> >
> >If by "proxy" you mean "default router", go to http://www.cisco.com/ and
> >search for HSRP. If you're thinking of an HTTP proxy, your best bet is
> >to forget about 10.0.0.5 and just declare a single proxy in your DNS
> >zone file, with 2 addresses, as in
> >
> >proxy.your.domain.goes.there.IN A 10.0.0.6
> > IN A 10.0.0.7
> >
> >Then you can just configure proxy.your.domain.goes.there. as the HTTP
> >proxy in your users' browsers and forget that there are 2 addresses
> >behind that name.

-- 
"Someone approached me and asked me to teach a javascript course. I was
about to decline, saying that my complete ignorance of the subject made
me unsuitable, then I thought again, that maybe it doesn't, as driving
people away from it is a desirable outcome." --Me




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8501&t=8308
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE Total Lab Package For Sale! [7:8729]

2001-06-15 Thread Patrick Ramsey

You sure this stuff didn't 'fall off' the truck?   

So does this mean you are a CCIE now?

>>> "JC"  06/15/01 12:31PM >>>
Hello Groupstudy,

 Before I list this lab on E-bay I wanted to first try to sell the
following total CCIE lab package to anyone interested.  The lab contains the
following:


1) Telton ILS-2000 Line Simulator (Brand New, never out of the box!!!) It
has both U and S/T interfaces.
2) Cisco 2620 Router (Brand spankin new, never been used!!)
3) Cisco 4000M Router (Contains 1 Token Ring Module, and 1 4-Port serial
module)
4) Cisco 2523 Router (Has 8 sync/async serial ports,  two high-speed serial
interfaces, one token ring port, and 1 ISDN BRI interface) Also has 1 token
ring adapter for the token ring port)
5) Cisco 2501 Router (Has 2 serial interfaces, and one AUI ethernet
interface) Also has 1 brand new AUI Ethernet Transceiver for conversion from
AUI port to RJ-45.

6) Cisco 2503 (Has 2 serial interfaces, 1 AUI ethernet interface, and one
S/T type BRI interface) Also has 1 brand new AUI Transceiver for conversion
from AUI port to RJ-45, also your getting the top of the line ISDN simulator
which accepts the S/T BRI interaces of both the 2503 and 2523 routers, just
plug RJ-45 from your router BRI interface to the S/T jack on the ISDN
simulator and your ready to rock 'n roll.

7) Cisco 2507 (Has 2 serial interfaces, and a 16 port hub built-in)
8) Andrew 8228 Token Ring MAU 8-port addition (RJ-45 type)
9) Catalyst 5005 Switch (Has 1 supervisor III module installed, and has a 12
port 10/100 ethernet module installed.)
10) 8 back to back serial cable (DB-60 to DB-60)
11) 8 console cables.


I payed a large sum of money for this equipment and expect to regain
some of my money.  The total price of this package is $15,000, I will help
split shipping costs on these items as that can be pricy with everything.
If you are interested please send me an e-mail at:

[EMAIL PROTECTED] 


   Thanks,

   JC




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8741&t=8729
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DHCP Requests across VLANs [7:8689]

2001-06-15 Thread Patrick Ramsey

Start a session with the router and insert a 'ip helper' address.

Be carefull though...by default, for whatever reason, cisco thinks netbios
broadcast and name resolution along with dns and a few other broadcasts
should be forwarded as well.  You'll need to manually shut these off via 'no
ip forward'

example:

interface Vlan1
 ip address 10.40.48.1 255.255.240.0
 ip helper-address 10.70.48.48
 ip helper-address 10.70.80.30
 ip helper-address 10.70.80.33
 ipx network 104048

Then in global config do the following:

no ip forward-protocol udp tftp
no ip forward-protocol udp domain
no ip forward-protocol udp time
no ip forward-protocol udp netbios-ns
no ip forward-protocol udp netbios-dgm


-Patrick


>>> "Vlade"  06/15/01 10:44AM >>>
There is an easy Win NT solution. You can have a one of the servers or
workstations act as a DHCP relay for the other subnets. They will listen dor
DHCP broadcats and forward them to the proper DHCP server.
""[EMAIL PROTECTED]""  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi all,
>
> In a Cat6509, we have created three VLANs. In one of the three VLANs, an
NT
> Server is configured as a DHCP Server. My doubt no.1 is. Can a client
in
> another VLAN get its DHCP request served by this DHCP Server. If yes, how
> this can be done. If not, is there any other way we can have all the
clients
> in the three VLANs get IP Address from a single DHCP Server.
>
> My doubt no.2 is slightly off topic. If the clients in all three VLANs can
> get IP Address from the NT DHCP Server, Can I give IP Addresses from a
single
> DHCP Scope.
>
> Thanks in Advance!
>
> S.Kalidasan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8742&t=8689
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DHCP Requests across VLANs [7:8689]

2001-06-15 Thread Patrick Ramsey

And no... You need to define 3 scopes one for each vlan/network.  The
router then unicasts the original broadcast and replaces the network field
which originates as 0 with the proper subnet the station is on.

The dhcp server then sees a request from the workstation and answers
appropriately for that network and the router is all done.

-Patrick

>>> "Vlade"  06/15/01 10:44AM >>>
There is an easy Win NT solution. You can have a one of the servers or
workstations act as a DHCP relay for the other subnets. They will listen dor
DHCP broadcats and forward them to the proper DHCP server.
""[EMAIL PROTECTED]""  wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi all,
>
> In a Cat6509, we have created three VLANs. In one of the three VLANs, an
NT
> Server is configured as a DHCP Server. My doubt no.1 is. Can a client
in
> another VLAN get its DHCP request served by this DHCP Server. If yes, how
> this can be done. If not, is there any other way we can have all the
clients
> in the three VLANs get IP Address from a single DHCP Server.
>
> My doubt no.2 is slightly off topic. If the clients in all three VLANs can
> get IP Address from the NT DHCP Server, Can I give IP Addresses from a
single
> DHCP Scope.
>
> Thanks in Advance!
>
> S.Kalidasan




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8743&t=8689
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Wake on LAN [7:8755]

2001-06-15 Thread Patrick Ramsey

It is indeed a packet.  And all of the utils I have seen to perform a WOL to
a device use MAC addresses, so routing would not be possible.   Now that I
think about it, this would be the only way this would work unless you could
build a tcp/ip stack into the rom of a nic.  (otherwise the OS would already
have to be awake to make use of it's tcp/ip stack)

-Patrick

>>> "Priscilla Oppenheimer"  06/15/01 03:48PM >>>
Could you capture with a protocol analyzer the actual Wake on LAN packet? 
It's always been a mystery to me. But my guess is that it's not a routable 
packet.

On the other hand, is it even a packet or it is just an electrical surge or 
something?

I suggest you find out more about what the Wake on LAN sender actually 
sends. Maybe somebody else knows. We did discuss it once before. Check the 
archives. We did not discusss it from the point of view of it crossing a 
router, though.

Priscilla

At 03:29 PM 6/15/01, khramov wrote:
>Is there a special config on a router for wake on lan to work?


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8776&t=8755
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Wake on LAN [7:8755]

2001-06-15 Thread Patrick Ramsey

There are ways around this...  Check this site out:

http://esupport.ca.com/public/sdo_shipit/infodocs/7065.asp

>>> "khramov"  06/15/01 04:57PM >>>
Well it seems that WOL is a widely used technology.  So there is got to be a
way how
pass those packets through the router.
Any ideas?

Patrick Ramsey wrote:

> It is indeed a packet.  And all of the utils I have seen to perform a WOL
to
> a device use MAC addresses, so routing would not be possible.   Now that I
> think about it, this would be the only way this would work unless you could
> build a tcp/ip stack into the rom of a nic.  (otherwise the OS would
already
> have to be awake to make use of it's tcp/ip stack)
>
> -Patrick
>
> >>> "Priscilla Oppenheimer"  06/15/01 03:48PM >>>
> Could you capture with a protocol analyzer the actual Wake on LAN packet?
> It's always been a mystery to me. But my guess is that it's not a routable
> packet.
>
> On the other hand, is it even a packet or it is just an electrical surge or
> something?
>
> I suggest you find out more about what the Wake on LAN sender actually
> sends. Maybe somebody else knows. We did discuss it once before. Check the
> archives. We did not discusss it from the point of view of it crossing a
> router, though.
>
> Priscilla
>
> At 03:29 PM 6/15/01, khramov wrote:
> >Is there a special config on a router for wake on lan to work?
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8781&t=8755
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Man on the moon [7:33860]

2002-01-31 Thread Patrick Ramsey

I'm sick for 2 days and miss an entire conversation!


>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33860&t=33860
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Weird Problem [7:33961]

2002-01-31 Thread Patrick Ramsey

aha!  finally somebody else has seen this!  hehe  Cisco thinks I am being
silly...

try changing the encapsualation on the 'remote' side to frame-relay ietf or
just frame-relay depending on what your end is currently set up as...then
switch it back...if it doesn't work so the same for the 'local' side...

I personally think it's an issue with memory problems on cisco
equipment...sometimes the configs get stuck in space somewhere not in
running or start-up...just out there in some lonley bits and bytes

anyway..after a while of switching the two sides around, you should sync up
on an encapsualation and vavoom

I know it seems illogical but hey... why have a 6th sense if you don't
use it?  :)

>>> "Ali, Abbas"  01/31/02 04:53PM >>>
I have a network corporate side is connected to four branch offices with
full T1 and branches are also connected to each other through Frame-Relay in
a full mesh topology as a backup.

Everything is working fine, all the branches have installed the preferred
route through T1 link to reach the corporate network and other sites.  Just
to confuse you I have a DHCP server running at the corporate as well as one
of the branch sides. All the branches have a IP helper  address pointing to
a DHCP server which is running on a branch office.  In other words, traffic
goes to the corporate first then from there go the branch office for dhcp
lease ip address and logon to a windows 2000 domain.  It is just a temporary
solution.  Eventually all branches will be pointing to the corporate office
through wins or ip helper address for logon to a windows 2000 server.

Here is the issue, one of the branches even though is going through a
preferred route through T1, all the windows hosts will not even boot up and
stuck in a black screen mode if Frame-Relay link is up which is S0.  When I
say up it means that is ready to take over incase of the primary link which
is Point to Point fails.  As soon as I shut down the S0 interface for
Frame-Relay link, and then boot the hosts they boot fine and also logs on to
the windows 2000 domain.  I even made sure that the branch is installing the
preferred route through T1 link and will only go through FR cloud if primary
link goes down.  

I can't figure it out how Frame Relay interface can possibly conflict with
this problem.  Other branches are working fine with being Frame-Relay
interfaces are up.

Does anyone have a clue?  All the help will be appreciated.

Regards,

Ali
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33971&t=33961
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: when do you use an inverted mask? (i.e. 0.0.0.255) [7: [7:33974]

2002-01-31 Thread Patrick Ramsey

ospf

>>> "Eric Waguespack"  01/31/02 05:08PM >>>
besides access-lists, that is.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33974&t=33974
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE starting pay [7:33899]

2002-01-31 Thread Patrick Ramsey

gosh to be quite honest, I could not imagine a CCIE without any
experience...   Has this happened?  Are these people still around?

I'd like to hear from anyone that has accomplished CCIE with NO practical
experience... I'd like to know how they are doing and what advances they
have seen.

-Patrick

>>> "Wes Updike"  01/31/02 03:10PM >>>
I would say $50-60K.  I am currently studying for the CCIE written and I
have no "on the job" experience.  The only experience I have is in the
classroom, but I passed my tests on the first try.  I would expect someone
to hire a CCIE with no experience, but at a reduced salary compared to
others with experience.

  WES
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33969&t=33899
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: Re-Create a server [7:33950]

2002-01-31 Thread Patrick Ramsey

Cisco ghost oh wait...that's norton ghost???

dd works wonders for unix

Is this a serious question?  how about tape backup?  how about a copy of the
image on cd/dvd?  how about reel to reel?  Spanned floppies?

I can't imagine you guys are running mainstream servers with no backups...


>>> A.Steinbock  01/31/02 04:45PM >>>
Sorry for OT- I need the help of Server gurus.

How do you backup/recreate a server, if
1- Clustering is not an option
2- Data is not an issue

We have a Win2000 server that is running an application that is a hell to
re-install ( third party non-standard drivers, no documentation, multiple
layers..). Last time the server died it took us a week to bring up another
server.
Is there anyway one can backup such server and restore it to another server?

TIA.
Akim



Get free e-mail and a permanent address at http://www.amexmail.com/?A=1 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33970&t=33950
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCIE starting pay [7:33899]

2002-01-31 Thread Patrick Ramsey

exactamundo!

>>> Guy  01/31/02 03:34PM >>>
A CCIE With no work experience

I think most employers would shy away from that! A CCNP, or CCNA possible,
but CCIE... Im not sure. That would be like a Brain surgeon with no work
experience... WHat would you pay him to operate on your brain

Makes you think eh??? I think your best bet is to get a job as a CCNP or
CCNA, get a year or two experience (Minimum) then worry about CCIE. Maybe
work some other certs in there too, like Unix or maybe Microsoft or
something to round you out a bit more and make some opportunities in the
market for yourself... Or firewalls, and or something like tripwire etc...

My point is, If you have a CCNA, CCNP, CCIE, and 50 other certifications
behind your name, and no work experience, poeple are going to know you are a
good test taker, but you will still be starting off at the bottom. With a
salary range of maybe 30-50k But that CCIE is not going to make it 100k no
matter what your cousins brother or whatever told you. All the
certifications are for is to take someone who has the experience, and
skills, and gives them something they can use as proof of their expertise.

It is not for an entry level person to get so they can get a higher start
pay... All that does is cheapen the cert.

Look at the MCSE. Back when I took my MCSE, that cert gave me credibility. I
walked out of every interview with an offer. I could make my own choices. I
took my MCSE after several years of workwith Net systems including Novell,
IBM OS/2, and Microsoft. It was more of a proof of my skill set. Not a proof
I can read Brain Dumps, and hope I will do ok if someone gives me the
chance...

Now days you mention MCSE, and what goes through your mind??? Thats right
Worthless.

Now why is that?

Its because people with no skills heard of someone who became an MCSE, and
started making 70k or whatever... Then that person decided, Hey, I can
do that And found Transcenders etc... Became an M CSE, but cant even
copy files to a floppy 

This happened on a large scale, and soon employers were hiring worthless
MCSEs, and were getting frustrated...

Now, in the IT industry, it has become a low level Cert... TO me that ticks
me off. Ive been an MCSE since 96, and mine is prrof of the pudding not
a piece of paper...

Now, Cisco is becoming the same way. Look at how many people are becoming
CCNP...CCNA...etc... How many of those people could configure a medium level
network lab without the directions

How many could trouble shoot their way out of a paper bag

If people dont try to really learn the systems, all certifications will be
no better than a 3rd grade diploma!

sorry for my soap box, just really feel people take these things the wrong
way If people dont wake up, then all of this is for nothing...

I would not be happy spending a couple thousand dollars to get a 3rd grade
diploma



- Original Message -
From: "Joe Carr" 
To: 
Sent: Thursday, January 31, 2002 12:26 PM
Subject: CCIE starting pay [7:33899]


> what would be the average starting pay for CCIE with no work experience.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33977&t=33899
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CW lan/rwan [7:34072]

2002-02-01 Thread Patrick Ramsey

Hey guys/gals,

Anybody install the rwan bundle ontop of the normal Ciscoworks Lan
management?  Or vice versa?

Any reason why I shouldn't?

-Patrick


>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34072&t=34072
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: frame relay question [7:34090]

2002-02-01 Thread Patrick Ramsey

I usually use the 1 to 8 rule  for every 8mb you think you need, order 1

Will each facility be pumping a solid 14mb across the wan all day long?

If so, one ds3 (45mb) will suffice at the HQthen purchase shaped DS3 
circuits for the WAN... (15mb shape)

-Patrick

>>> "Yatou Wu"  02/01/02 01:20PM >>>
Hi,

if there are one central site and three remote sites. all the remote sites 
need to connect to the central site. now I need to decide the access circuit 
and port speed for the central site. the CIR requirement are following:

Remote site A: 14M
Remote site B: 14M
Remote site C: 14M

how many T3 access Circuits and ports are needed for the central sites?

any advise is highly appreciated!

yatou


_
Join the worlds largest e-mail service with MSN Hotmail. 
http://www.hotmail.com 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34095&t=34090
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: frame relay question [7:34090]

2002-02-01 Thread Patrick Ramsey

well, if you really need 90mb, then the best thing to do would be to inverse
mux on your end and have the telco muc them on yoru end... (2 ds3's)

then you would have a 90mb frame pipe to bring remote site into.

-Patrick

>>> "Yatou Wu"  02/01/02 02:08PM >>>
thanks for your reply. sorry that I didn't make my question clear.

Actually what I want to know is that, if the port speed requirment to every 
remote site is 28mb, then the aggregate port speed requirement in central 
site would be 84mb. should I order 2 T3 access circuits or 3 at the central 
site? if 2, how can i config the 3 DLCI across the 2 T3 circuits? because 
there would be 1 DLCI needed to be split between the 2 T3 circuits.

thanks again!

Yatou


>From: "Patrick Ramsey" 
>To: [EMAIL PROTECTED], [EMAIL PROTECTED] 
>Subject: Re: frame relay question [7:34090]
>Date: Fri, 01 Feb 2002 13:41:34 -0500
>
>I usually use the 1 to 8 rule  for every 8mb you think you need, order 
>1
>
>Will each facility be pumping a solid 14mb across the wan all day long?
>
>If so, one ds3 (45mb) will suffice at the HQthen purchase shaped DS3  
>circuits for the WAN... (15mb shape)
>
>-Patrick
>
> >>> "Yatou Wu"  02/01/02 01:20PM >>>
>Hi,
>
>if there are one central site and three remote sites. all the remote sites
>need to connect to the central site. now I need to decide the access 
>circuit
>and port speed for the central site. the CIR requirement are following:
>
>Remote site A: 14M
>Remote site B: 14M
>Remote site C: 14M
>
>how many T3 access Circuits and ports are needed for the central sites?
>
>any advise is highly appreciated!
>
>yatou
>
>
>_
>Join the worlds largest e-mail service with MSN Hotmail.
>http://www.hotmail.com 
> >>>>>>>>>>>>>  Confidentiality Disclaimer   This email and any files
transmitted with it may contain confidential and
>/or proprietary information in the possession of WellStar Health System, 
>Inc. ("WellStar") and is intended only for the individual or entity to whom 
>addressed.  This email may contain information that is held to be 
>privileged, confidential and exempt from disclosure under applicable law. 
>If the reader of this message is not the intended recipient, you are hereby 
>notified that any unauthorized access, dissemination, distribution or 
>copying of any information from this email is strictly prohibited, and may 
>subject you to criminal and/or civil liability. If you have received this 
>email in error, please notify the sender by reply email and then delete 
>this email and its attachments from your computer. Thank you.
>
>
>
>
>
>


_
Send and receive Hotmail on your mobile device: http://mobile.msn.com 




>>>>>>>>>>>>>  Confidentiality Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34120&t=34090
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: frame relay question [7:34090]

2002-02-01 Thread Patrick Ramsey

ouch!

we have no such restrictions here in Atlanta!  :)

>>> "Chuck Larrieu"  02/01/02 02:34PM >>>
Some telcos have some basic oversubscription requirements, designed more so
that they can sell you more bandwidth than as a real practical requirement.

Here in California, for example, the local telco permits no more than a 2
for 1 oversubscription.

So if you have 20 spokes, each at 256K CIR, then you MUST have a minimum
2.56 megabit CIR at your center ( fractional DS3 or ATM ), for example.

I believe the reasoning is that the telco does not want a lot of calls
complaining about their circuits when the problem is overutilization of
bandwidth. And they want to sell you more, of course. ;->

Chuck


""Patrick Ramsey""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I usually use the 1 to 8 rule  for every 8mb you think you need, order
1
>
> Will each facility be pumping a solid 14mb across the wan all day long?
>
> If so, one ds3 (45mb) will suffice at the HQthen purchase shaped DS3
> circuits for the WAN... (15mb shape)
>
> -Patrick
>
> >>> "Yatou Wu"  02/01/02 01:20PM >>>
> Hi,
>
> if there are one central site and three remote sites. all the remote sites
> need to connect to the central site. now I need to decide the access
circuit
> and port speed for the central site. the CIR requirement are following:
>
> Remote site A: 14M
> Remote site B: 14M
> Remote site C: 14M
>
> how many T3 access Circuits and ports are needed for the central sites?
>
> any advise is highly appreciated!
>
> yatou
>
>
> _
> Join the worlds largest e-mail service with MSN Hotmail.
> http://www.hotmail.com 
> >>>>>>>>>>>>>  Confidentiality DisclaimerThis email and any files
transmitted with it may contain confidential and
> /or proprietary information in the possession of WellStar Health System,
> Inc. ("WellStar") and is intended only for the individual or entity to
whom
> addressed.  This email may contain information that is held to be
> privileged, confidential and exempt from disclosure under applicable law.
If
> the reader of this message is not the intended recipient, you are hereby
> notified that any unauthorized access, dissemination, distribution or
> copying of any information from this email is strictly prohibited, and may
> subject you to criminal and/or civil liability. If you have received this
> email in error, please notify the sender by reply email and then delete
this
> email and its attachments from your computer. Thank you.
>
> 
>>>>>>>>>>>>>  Confidentiality Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34121&t=34090
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 4000 Series switch [7:34449]

2002-02-05 Thread Patrick Ramsey

for the most part, cat os based switches are the same and ios based switches
are the same...every once in a while you catch something different..but to
answer you, the 4000 series and 5000 series are the same.

-Patrick

>>> Nisus  02/05/02 05:21AM >>>
First of all I would like to thank you who replied to my questions about
VLans and how to set them up.

Second.  In the information I have been reading about VLans usually 2
classes of switches are referenced.
The first being a lower model or switch 1900 series.  The Vlan setup is
mostly menu driven as I found out from my Cisco instructor in class
yesterday.  There were some problems we encountered when setting up a VLan
on this type of switch.

Third.  Usually when ever I read about VLans and setting them up it uses a
5000 series switch as a reference, using the OSI command interface.

Does the 4000 switch use the same setup or interface as the 5000?

Does any one know ?

Thank you very much,
Steven M Aiello
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34463&t=34449
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: info on blocking aol im [7:34459]

2002-02-05 Thread Patrick Ramsey

or you can script the replacement od such services with an executable that
reads "The application is not allowed"

assuming you are scrupting logins that is

This can be done in NT or novell...

-Patrick

>>> "Roberts, Larry"  02/05/02 11:10AM >>>
You need to block access to the login server IP's.
If I remember it is login.oscar.aol.com. Just nslookup the ips associated
and block them ( I do it via a route to null0)

Same process with Yahoo IM, although you have to block about a million
address's it seems like.

Both services change IP's regularly and you will need to periodically check
to see if new address's are brought on line. Be aware that the process of
blocking YIM will sometimes break access to yahoo e-mail servers that are in
the same range as the login servers.

Also,

Be sure to find the Java script client IP address of AOL and block it as
well. I didn't know that it existed until I walked by someone's desk and
they were just a chatting away. Man was I PO'd bout that one.

It is not an easy process to block and keep them blocked. Both services are
evolving and finding new ways around firewalls so you have to stay vigilant
until you can get those that be to press down and say its not authorized and
those using it will be disciplined.


Larry 

-Original Message-
From: Walls Matthew [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, February 05, 2002 10:13 AM
To: [EMAIL PROTECTED] 
Subject: info on blocking aol im [7:34459]


Looking to block aol im with pix and 2600s router.  Seems to use multiple
ports, etc

Any advice on blocking this?...

 

 

Matthew J. Walls
Sr. Systems Engineer, Systems Development [EMAIL PROTECTED] 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34472&t=34459
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Patrick Ramsey

was it traversing two separate vendors by the time it hit the server?

I know with 3com and cisco, the defaults for rip and sap updates are
different.  3com defaults to update on change only...where cisco's defaults
are timed.  When you connect both vendors together, cisco will send updates
but 3com won't listen...and since 3com doesn't send updates, cisco with time
the values out and clear routes/saps...

-Patrick

>>> "Priscilla Oppenheimer"  02/05/02 03:25PM >>>
The server must be set with the non-standard 300 second timer also? That 
would be my theory.

Priscilla

At 02:50 PM 2/5/02, Tom Martin wrote:
>Does anyone have any idea why this worked???  Setting the RIP and SAP
>timers on a __LAN__ link should have had no positive effect.  It seems
>like the only perceivable change would be the flapping of remote networks
>and servers -- assuming that the timers were not modified on the server
>also.
>
>Any thoughts???
>
>- Tom
>
>On Tue, 05 Feb 2002 13:21:55 -0500, Fraasch James wrote:
>
> > Ah, to be a network engineer!!! The fun!!!
> >
> > So here it is, 28 hours later I have fallen across the solution to the
> > problem I posted yesterday where people were not able to access an IPX
> > server.  Users were actually able to access it but for no more than a
> > few minutes at a time.
> >
> > Had to add the following command to interface that houses the server:
> >
> > interface TokenRing1/2
> >  mac-address 0200.1099.81ca
> >  ip address 172.25.71.200 255.255.255.0 ip directed-broadcast ipx
> >  encapsulation SNAP
> >  ipx network A040
> >  ipx update interval rip 300
> >  ipx update interval sap 300
> >  ring-speed 16
> >
> > IPX update intervals for rip and sap seem to have solved the problem.
> >
> > Thought you might want to know.
> >
> > Thanks for the help! Now lets just hope I keep my job! Just kidding, I
> > can blame it on only being with the company a few months. I'm the new
> > guy, I can make mistakes and not get in troubleI think that's how it
> > works.
> >
> > James
> > misconduct and Nondisclosure violations to [EMAIL PROTECTED] 


Priscilla Oppenheimer
http://www.priscilla.com 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34510&t=34485
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Patrick Ramsey

this should also work:

ipx update interval rip changes-only
ipx update interval sap changes-only

those are on the interface itself

-Patrick
>>> "Fraasch James"  02/05/02 03:58PM >>>
It is Cisco to Cisco. 7204 to 2600.

'By changing the update interval from 1 minute to 5 minutes you are
preventing the route and server from flapping and thereby keeping your
connection to the server up.'

This is what the Cisco tech said- AFTER I had already put the command in. I
am not sure why it worked either.  I would have thought with 1 minute SAP
and RIP advertisements it would be better than 5 save for the amount of
traffic it produces.

I understand 'flapping' in the cable modem sense of the word but I hadnt
seen it happen in this environment.  To me, the flapping means that the
cable modem is connecting and disconnecting at random intervals, sometimes
due to incorrect power configurations.  But in this sense I am gathering
that it means the route to the particular server flapped.  If that is the
case then it would explain why users could intermittently connect to the
server. Then the question becomes, why did the flapping occur in the first
place?
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34516&t=34485
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Port spanning question [7:34469]

2002-02-05 Thread Patrick Ramsey

how are you liking ios?  seen any problems or performance issues?

>>> "Michael Williams"  02/05/02 04:36PM >>>
Here's an interesting twist to that question:  If your switch/router is a
6500 running Native IOS, can you span ports that are configured as router
interfaces as opposed to switchports?

I'm using a 6509 with Native IOS, and I have a server connected to a port
configured as a "switchport".  I was able to "monitor" that port on another
port, also configured as a "switchport".  I wonder if it's possible to
"monitor" an ethernet port that's being used as a routing interface (i.e.
not a switchport).  Time to try it out. too bad that 6509 is a
production box =)

Mike W.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34522&t=34469
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34521]

2002-02-05 Thread Patrick Ramsey

ha! Is that allowed?  

>>> "W. Alan Robertson"  02/05/02 04:40PM >>>
Folks,

Just to let you know, I ran across what looked like a bug in Cisco's
BGP code...  Turns out, this is undocumented new behavior.

We just deployed a pair of 3640s for one of our customers, for
dual-router, dual-homed Internet connectivity.  We are taking full
tables from Genuity (AS 1), and Worldcom (AS 701).

Each router was learning 104,000+ prefixes from each of the external
peers, but the iBGP peering was acting really strange.  One of the
routers was learning the full table from the other, but the second
router was only taking like 700 prefixes.

When we cleared the internal peer (soft or hard), we could see the
whole table being transferred...  It would climb as though it were
going to learn them all, and then as it approached 100,000 prefixes,
it would rapidly drop back down to 700.  I debugged the iBGP peer, and
saw it issuing withdrawls for all of these routes.

We opened a ticket with the TAC, and they initially believed it to be
a bug as well.  Upon further review, they came back and told us that
this was the desired behavior in the newer code (We are running
12.0(20) on these boxes).  In order to conserve memory, and processor,
if an iBGP peer learns that another iBGP peer already has a better
route to a specific prefix,  it will issue a withdrawl to that peer
for the prefix(es).

I spent quite a while second guessing what seemed to be a very simple,
straighforward configuration.  I have done several near identical
deployments in the past.

I guess the moral is this:  If you know your config is correct, and
the router behavior is not what you expect, do not hesitate to call
the TAC.

I hope they are as helpful on Monday, when I call them from the CCIE
Lab in RTP.  ;)

Regards...

Alan
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34524&t=34521
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Port spanning question [7:34469]

2002-02-06 Thread Patrick Ramsey

I'm not totally positive because I have never used the inpkts switch on a
monitor command...but I think he might have been referring to the sniffer
being able to send packets out... (say you are using a sniffer, not in
promiscuous mode, and you want to be able to do reverse lookups on ip
addresses sniffed)  good theory?   :)

-Patrick

>>> "Michael Williams"  02/06/02 03:07AM >>>
We've setup span ports to monitor servers, etc and we never had to issue any
extra commands so that layer 3 (IP) worked properly. I'm "monitoring" a port
right now and the server attached to the port I'm s "monitoring" operates
just fine, IP broadcasts, ping, etc

Mike W.

Jeff D wrote:
> 
> If you want to allow the attached device to ping or browse, be
> it an IDS or
> pc, you need to add the "inpkts" cmd when setting up any span
> or rspan
> session.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34613&t=34469
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pinging all the way!!! [7:34611]

2002-02-06 Thread Patrick Ramsey

Usage: ping [-t] [-a] [-n count] [-l size] [-f] [-i TTL] [-v TOS]
[-r count] [-s count] [[-j host-list] | [-k host-list]]
[-w timeout] destination-list

Options:
-t Ping the specified host until stopped.
   To see statistics and continue - type Control-Break;
   To stop - type Control-C.
-a Resolve addresses to hostnames.
-n count   Number of echo requests to send.
-l sizeSend buffer size.
-f Set Don't Fragment flag in packet.
-i TTL Time To Live.
-v TOS Type Of Service.
-r count   Record route for count hops.
-s count   Timestamp for count hops.
-j host-list   Loose source route along host-list.
-k host-list   Strict source route along host-list.
-w timeout Timeout in milliseconds to wait for each reply.


>>> "Tel Khan"  02/06/02 09:21AM >>>
Hi folks, 
As far as i know if you ping an address it will usally responsed with 4
lines TTL. If i want to continue the ping lets say for over an hour is there
a command to do this?

Thanks in advance.

Tel

Example:

C:\>ping cisco.com

Pinging cisco.com [198.133.219.25] with 32 bytes of data:

Reply from 198.133.219.25: bytes=32 time=160ms TTL=238
Reply from 198.133.219.25: bytes=32 time=160ms TTL=238
Reply from 198.133.219.25: bytes=32 time=160ms TTL=238
Reply from 198.133.219.25: bytes=32 time=161ms TTL=238

Ping statistics for 198.133.219.25:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 160ms, Maximum =  161ms, Average =  160ms
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34614&t=34611
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX question [7:34630]

2002-02-06 Thread Patrick Ramsey

I didn't realize it didn't support http

I really don't think there is need for http statefull failover though...

I mean logically... with every link you can start a new session...if the
page is sitting in front of you, why keep state?

-Patrick

>>> Gaz  02/06/02 11:27AM >>>
I'm guessing that Long Distance State Sharing is the use of firewalls with
stateful failover which are separated by a long distance.
As you may or may not know, the Pix Failover cable limits the distance
between Pix's at the moment (unless something's changed recently). Can't
remember how long it is exactly (guessing 10 feet).

Don't know the reason for lack of support for stateful http. Possibly large
amount of work for little benefit.

Gaz

""BASSOLE Rock""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi group,
>
>
> I want to know what is Long Distance State Sharing (LDSS) and for what
> reason it's supported by the stateful failover?
> Also why the PIX does not transfer HTTP (port 80) session in stateful
> failover?
>
> Thank you.
>
> Rock .
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34642&t=34630
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pix and vlan [7:34663]

2002-02-06 Thread Patrick Ramsey

I never knew the pix was even capable of VLAN's

>>> "Bates, Steven (SIGNAL)"  02/06/02 03:03PM >>>
Has anyone heard of the PIX having problems passing tagged packets as in
dot1q and how about ISL?  I did some testing before with the Lucent Brick
and it could not deal with tagged packets.  I know the the new Bricks will
handle it, but don't know about the PIX.  Specifically 6.0

Steven Kell Bates
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34668&t=34663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 3DES [7:34754]

2002-02-07 Thread Patrick Ramsey

ya know... I'm not trying to shoot pix down...but for the small office..I
would not even go that routeGo netscreen they can do NAT,
transparent bridging, and normal firewalling and they are not expensive. 
(and a snap to set up)  Not to mention that they support site to site or
site to user vpns out of the box practically...(extremely easy to set up!)

$.02

-Patrick

for what it's worth we use border manager, severeal netscreens and two pix
535's in failover..  ;)

>>> "Brian Zeitz"  02/07/02 10:38AM >>>
I have been looking at routers/firewalls. I am thinking of going with
the 2611 with a ADSL card, I also want to get a 515. Our office is not
that big yet, but I want to plan for the future. I see that the Pix 515R
only does DES, but doesn't do 3DES. But when I buy the router, I can get
it with 3DES. I am just kinda confused, where is the best place to use
3DES, on the firewall, or on the router? Or it doesn't matter. The way I
see it, if I wanted to do 3DES on the firewall with the 515, I would
have to buy the 515UR, which is about 10K. I don't really need the
thoughput for 100,000 users just yet though. Any suggestions on this?



Thanks in advance...



Brian Zee MCSE, CCNA, A+
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34757&t=34754
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: 3DES [7:34754]

2002-02-07 Thread Patrick Ramsey

I hope you are not being serious about '3rd party' firewalls I'm not
saying you shouldn't study pix if you want the certbut resume's are much
more impressive the more firewalls you have under you belt.  Especially
firewalls that are more capable than pix.

Of course if your company does not plan on using DCOM or any other
proprietery protocols, then pix will be fine.. (although it's still expensive)
be careful with your planning though...pix's security strategy is based on
NATstatic in from a lower level interface and dynamic out from a higher
security interface... (and variances thereof)  It does not truly route
traffic like other firewalls... A way around this is the use of NAT 0, but
then even Cisco tac does not reccomend this configuration for highly
utilized interfaces.

-Patrick

>>> "Brian Zeitz"  02/07/02 11:21AM >>>
Netscreen wont help me with the Pix exam, or the cisco VPN exam or the
CCNP exams :) I like using Cisco stuff cause it's a standard, you can
find information on there site (and groups like this, thanks) when
things go bad. I am not big on any 3rd party stuff, because when you go
to an interview, its more likely they will have Cisco then any other
product for real networking :) Anyway, thanks for the suggestion, but I
don't think that will fly by the CTO.

-Original Message-
From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, February 07, 2002 11:03 AM
To: [EMAIL PROTECTED]; Brian Zeitz
Subject: Re: 3DES [7:34754]

ya know... I'm not trying to shoot pix down...but for the small
office..I would not even go that routeGo netscreen they can do
NAT, transparent bridging, and normal firewalling and they are not
expensive.  (and a snap to set up)  Not to mention that they support
site to site or site to user vpns out of the box
practically...(extremely easy to set up!)

$.02

-Patrick

for what it's worth we use border manager, severeal netscreens and two
pix 535's in failover..  ;)

>>> "Brian Zeitz"  02/07/02 10:38AM >>>
I have been looking at routers/firewalls. I am thinking of going with
the 2611 with a ADSL card, I also want to get a 515. Our office is not
that big yet, but I want to plan for the future. I see that the Pix 515R
only does DES, but doesn't do 3DES. But when I buy the router, I can get
it with 3DES. I am just kinda confused, where is the best place to use
3DES, on the firewall, or on the router? Or it doesn't matter. The way I
see it, if I wanted to do 3DES on the firewall with the 515, I would
have to buy the 515UR, which is about 10K. I don't really need the
thoughput for 100,000 users just yet though. Any suggestions on this?



Thanks in advance...



Brian Zee MCSE, CCNA, A+
>>>>>>>>>>>>>  Confidentiality Disclaimer   >>>>>>>>>>>>  Confidentiality
Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34764&t=34754
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Secret Clearance? [7:4152]

2002-02-09 Thread Patrick Ramsey

not to mention that if they say it is required they probably do not want to
pay the $$$ to have it done...hence the "required" portion of the job
description.

-
Patrick



>>> "Craig Columbus"  02/09/02 15:38 PM >>>
Check the archives of the list.  This has been discussed many, many times.

Craig

At 11:04 AM 2/9/2002 -0500, you wrote:
>So how does one gain Secret Clearance?
>--- Jeff D  wrote:
> > The contractor has no say in it. If the government
> > says you need a clearance
> > to enter the building, then you have to have one,
> > period. Why waste your
> > time if you don't?
> >
> > Jeff
> >
> >  wrote in message
> > news:[EMAIL PROTECTED]...
> > > this Clearance thing is kind of funny.
> > > I think they should screen someone who is
> > qulaified for the position even
> > if
> > > they dont have the Clearance.
> > >
>
>
>=
>Paul M. Immo CCDP, CCNP, CCIE Written, MCSE
>(248)634-3362 Home
>(248)343-0440 Cell
>View my Resume online: http://briefcase.yahoo.com/paulimmo
>Imagination is more important than knowledge
>Albert Einstein
>
>__
>Do You Yahoo!?
>Send FREE Valentine eCards with Yahoo! Greetings!
>http://greetings.yahoo.com
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34984&t=4152
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: URL Filtering and the PIX [7:35163]

2002-02-12 Thread Patrick Ramsey

any content vectoring protocol based app should work configure it on the
pix as you did your previous.

-Patrick

>>> "Rodney Jackson"  02/11/02 09:23PM >>>
Our web traffic was being filtered by WebSense which worked with the PIX
however our license has expired and the filtering no longer works.  Does
anyone know of any other filtering software that works with the PIX?
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35198&t=35163
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



=?ISO-8859-1?Q?Re: [7:35325]

2002-02-13 Thread Patrick Ramsey

Can you send your message one more time...I don't think I got it...  
heh

>>> "Frederick R. Carlson"  02/13/02 01:25PM >>>
Is there anyting to this?  I, for one, am not happy at all with CERT for
this "press
offensive" (its in the NY Times as well). Is there any there - there??

Eric wrote:

> FYI -
>
> If your running SNMP on your networks you'll probably want to check this
out.
> Just popped up on Cert.org and Cisco.com another DOS technique has reared
its
> head again.
>
> - http://www.cert.org/advisories/CA-2002-03.html#vendors 
>
> - http://www.cisco.com/warp/public/707/cisco-malformed-snmp-msgs-pub.shtml 
>
> Eric
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35325&t=35325
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



slip/arp/proxy arp switch to csu [7:35413]

2002-02-14 Thread Patrick Ramsey

Ok guys/gals/fellow listers,

I've been doing some research on setting up a slip connection to a csu from
a switch or router.  a lot of the cisco TAC refers to the use of term
servers for this but there are some documents on the site that talk about
manualy connecting from a switch or router through the console port.

Is this a sound method for establishing a slip connection you want to stay
in place?  Any comments?  And does the console port then behave like a
switch port? Will normal ethernet protocols go across?  (arp for example)

I'm having to do this without the use of a spare CSU and am just trying to
get some prelim questions answered.  thanks!

-Patrick


>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35413&t=35413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: slip/arp/proxy arp switch to csu [7:35413]

2002-02-14 Thread Patrick Ramsey

well...this isn't really for controlling it like a console connection.  This
is for snmp traps and NNM polling... If I were to do a reverse telnet to it,
that would indeed give me console access but there's no way to spew snmp
traps back to NNM serially.  I needto be able to assign sl0 an ip address
and  then give the csu a slip address.

A thought beyond my original is that it would have to be from a router and
not a switch.  because I am goingto have to route to that slip network.

so...now...any more comments from anyone else?  Anyone tried this?

-Patrick

>>> "Daniel Cotts"  02/14/02 12:11PM >>>
First thoughts are that if I needed to connect to a CSU that I'd connect to
its console port. To do that I'd do reverse telnet using the aux port of the
router. Biggest issue would be verifying the pin outs. Might have to build a
custom cable or adapter. HTH

> -Original Message-
> From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] 
> Sent: Thursday, February 14, 2002 10:42 AM
> To: [EMAIL PROTECTED] 
> Subject: slip/arp/proxy arp switch to csu [7:35413]
> 
> 
> Ok guys/gals/fellow listers,
> 
> I've been doing some research on setting up a slip connection 
> to a csu from
> a switch or router.  a lot of the cisco TAC refers to the use of term
> servers for this but there are some documents on the site 
> that talk about
> manualy connecting from a switch or router through the console port.
> 
> Is this a sound method for establishing a slip connection you 
> want to stay
> in place?  Any comments?  And does the console port then behave like a
> switch port? Will normal ethernet protocols go across?  (arp 
> for example)
> 
> I'm having to do this without the use of a spare CSU and am 
> just trying to
> get some prelim questions answered.  thanks!
> 
> -Patrick
> 
> 
> >>>>>>>>>>>>>  Confidentiality DisclaimerThis email and any files
transmitted with it may contain
> confidential and
> /or proprietary information in the possession of WellStar 
> Health System,
> Inc. ("WellStar") and is intended only for the individual or 
> entity to whom
> addressed.  This email may contain information that is held to be
> privileged, confidential and exempt from disclosure under 
> applicable law. If
> the reader of this message is not the intended recipient, you 
> are hereby
> notified that any unauthorized access, dissemination, distribution or
> copying of any information from this email is strictly 
> prohibited, and may
> subject you to criminal and/or civil liability. If you have 
> received this
> email in error, please notify the sender by reply email and 
> then delete this
> email and its attachments from your computer. Thank you.
> 
> 
>>>>>>>>>>>>>  Confidentiality Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35423&t=35413
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off topic but somehow interesting problem [7:35426]

2002-02-14 Thread Patrick Ramsey

arp is an ethernet protocol...not in the ip stack per se... (even though I
think Microsoft install arp with it's ip stack)

-Patrick

>>> "Steven A. Ridder"  02/14/02 02:42PM >>>
Is it some sort of arp to check and see if anyone else is using the IP?
who's IP is it using when it makes these broadcasts?
""A Mehr""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Sorry to be off topic .
>
> I was just installing an old realtech 8019 on my home client machine .
> Everything was all right , but It couldn't ping my other computer .
> When I ran a protocol analyzer , it showed the the realtech was doing arp
> and was sending ICMP echo messages but it set it's own mac address to
> ff-ff-ff-ff-ff-ff which is the broadcast address . ipconfig /all is
telling
> me the same thing . anyone has got a clue to when an NIC assumes the
> broadcast address as its mac address ?
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35432&t=35426
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Secret Clearance? [7:4152]

2002-02-14 Thread Patrick Ramsey

IT took me 6 months to get mine and I almost didn't get it because a friend
in high school got busted sometime after graduation for dealing drugs... And
even when I did get it, it was interim and took another 4 months before it
was perm.

-Patrick

I think the Navy estimates 50,000 smackers per investigation

>>> "Logan, Harold"  02/14/02 01:03PM >>>
I disagree. In order to get a clearance, not only do you have to make
the right choices, but all of your past and present friends, roomates,
and coworkers need to make the right choices too. Add to that, it only
takes one person bad-mouthing you to delay or even end your
investigation... ask yourself this, is there at least one person out
there who would lie about you in order to make your life difficult?

It's a very subjective process, and one that I don't care to go through
again. If you have a clearance, be glad that you do.

Hal

-Original Message-
From: Jeff Buehler [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, February 13, 2002 6:34 PM
To: [EMAIL PROTECTED] 
Subject: Re: Secret Clearance? [7:4152]


You were not "Lucky" that you had nothing in your background.  You made
the
right choices.  People who make the wrong choices pay for it their whole
life.  It is called Character.


""William Gragido""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Well, since this is obviously a never ending thread I'll add my 2
cents.
I
> have a Top Secret SCI that is still valid from my active duty period
in
the
> USMC.  In regards to joining the service just to get a clearance, I'd
say
> thats some of the most low brow thinking that I've ever heard.  There
are
no
> guarantees that you'll get one.  It all depends on the investigation
and
> what they unearth, so don't be fooled into thinking that simply by
selecting
> an MOS that requires a clearance you'll automatically qualify.  Its
not
the
> case.  I saw Marines go through schools only to be turned down for
> clearances.  I was lucky and had nothing in my background that would
> prohibit my from obtaining one, but again, it all depends on what
one's
> civilian life is compromised of that helps dictates whehter or not a
person
> rates one.
>
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> John Faubion
> Sent: Sunday, February 10, 2002 10:34 PM
> To: [EMAIL PROTECTED] 
> Subject: Re: Secret Clearance? [7:4152]
>
>
> Ohh that's a good idea, then when you get orders to Bosnia, Somalia,
Kuwait,
> or Afghanistan, you can be like the whiners of Desert Storm that cried
about
> joining to get an education, not to go to war. Only this time it will
be
> about getting a security clearance instead of going to war!
>
> While you can get a security clearance in the military, it is not
valid
> after leaving the military unless it is documented correctly. However
the
> reinstatement cost can be drastically reduced since the previous leg
work
> has already been done.
>
> John
>
> - Original Message -
> From: "Steven A. Ridder"
> To:
> Sent: Sunday, February 10, 2002 7:52 PM
> Subject: Re: Secret Clearance? [7:4152]
>
>
> > 80K!!!  You could always do what I did and join the Army.  If you
pick a
> > good MOS, you'll get a secret clearance for free while you are in
Basic
or
> > AIT.  Some jobs I'm sure will give you a top secret if needed.   I
bet
> just
> > joining the reserves would get you a secret if the MOS called for
it.
> > ""Julian Eccli""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > A secret clearance can cost somewhere between $50K-$80K to get all
the
> > > proper paper work and verifications done, hence why they want you
to
> have
> > it
> > > already :)
> > >
> > >
> > > -Julian
> > >
> > > ""Patrick Ramsey""  wrote in message
> > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > not to mention that if they say it is required they probably do
not
> want
> > > to
> > > > pay the $$$ to have it done...hence the "required" portion of
the
job
> > > > description.
> > > >
> > > > -
> > > > Patrick
> > > >
> > > >
> > > >
> > > > >>> "Craig Columbus"  02/09/02 15:38 PM >>>
> > > > Check the archives of the list.  This has been discussed many,
many
> > times.
> > > >
> > > > Craig
> > > >
> > > > At 11:04 AM 2/9/2002 -0500, you wrote:
&g

Re: Dening telnet access [7:35628]

2002-02-18 Thread Patrick Ramsey

really?  I have had no luck using inbound acl's to control telnet to the
router...I always have to use acc's on the vty's

Is there a trick to this?

-Patrick

>>> MADMAN  02/18/02 12:16PM >>>
Actually telnet packets are processed by inbound access-list.  Now if
your refering to outbound access-lists then you would be correct.

  Dave

"Hire, Ejay" wrote:
> 
> Because telnet packets destined for the router are not normally processed
by
> access-lists.  (i don't understand why not, but hey...)
> 
> instead do this
> 
> access-list y deny xx.xx.xx.xx xx.xx.xx.xx
> 
> line vty 0 n (n = the results of a ?, usually 4)
> access-class y
> 
> -Original Message-
> From: McHugh Randy [mailto:[EMAIL PROTECTED]] 
> Sent: Saturday, February 16, 2002 4:49 PM
> To: [EMAIL PROTECTED] 
> Subject: Dening telnet access [7:35628]
> 
> Access list problem:
> 
> Why does this extended access list not work to deny telnet access applied
to
> the internet interface on a 2514?
> 
> Extended IP access list 199
> deny tcp any any eq telnet
> 
> interface Ethernet0
> 
> ip access-group 199 in
> 
> I have alot more statments than this and of course the statement
> access-list 199 permit ip any any
> 
> to take care of the implicit deny all , but I can still access the router
> from the internet through telnet.
> Anyone have any ideas what else might be needed to prevent of selectivly
> allow telnet access to my router.
> Thanks,
> Randy
-- 
David Madland
Sr. Network Engineer
CCIE# 2016
Qwest Communications Int. Inc.
[EMAIL PROTECTED] 
612-664-3367

"Emotion should reflect reason not guide it"
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35744&t=35628
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Dening telnet access [7:35628]

2002-02-18 Thread Patrick Ramsey

This is what I am seeing on 12.2(3) (various 2600 series routers)

ACL's do not work except for devices behind the router...ACC's work for the
router it's self.

-Patrick

>>> "Roberts, Larry"  02/18/02 02:17PM >>>
The only way that the access-list applied to the inbound interface ( non-vty
) blocked your telnet is if you were trying to telnet
To an address that was not the directly connected address ( loopback or far
side serial/ethernet )

If you were to telnet directly to the interface that the access-list was
applied to you WOULD get in. Only an access-class applied
To the VTY ports will stop that.

Thanks

Larry 

-Original Message-
From: MADMAN [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 18, 2002 1:05 PM
To: [EMAIL PROTECTED] 
Subject: Re: Dening telnet access [7:35628]


I know it does.  I have, even fairly recently, locked myself out of a router
via an inbound access list applied to an interface,DOH:(  Try again and if
it doesn't work I would like to see the config.

  Are you sure the interface on which you applied the access list is the
interface you were telneting to/thru??

  Dave

Patrick Ramsey wrote:
> 
> really?  I have had no luck using inbound acl's to control telnet to 
> the
router...I always have to use acc's on the vty's
> 
> Is there a trick to this?
> 
> -Patrick
> 
> >>> MADMAN  02/18/02 12:16PM >>>
> Actually telnet packets are processed by inbound access-list.  Now if 
> your refering to outbound access-lists then you would be correct.
> 
>   Dave
> 
> "Hire, Ejay" wrote:
> >
> > Because telnet packets destined for the router are not normally 
> > processed
> by
> > access-lists.  (i don't understand why not, but hey...)
> >
> > instead do this
> >
> > access-list y deny xx.xx.xx.xx xx.xx.xx.xx
> >
> > line vty 0 n (n = the results of a ?, usually 4) access-class y
> >
> > -Original Message-
> > From: McHugh Randy [mailto:[EMAIL PROTECTED]] 
> > Sent: Saturday, February 16, 2002 4:49 PM
> > To: [EMAIL PROTECTED] 
> > Subject: Dening telnet access [7:35628]
> >
> > Access list problem:
> >
> > Why does this extended access list not work to deny telnet access 
> > applied
> to
> > the internet interface on a 2514?
> >
> > Extended IP access list 199
> > deny tcp any any eq telnet
> >
> > interface Ethernet0
> >
> > ip access-group 199 in
> >
> > I have alot more statments than this and of course the statement 
> > access-list 199 permit ip any any
> >
> > to take care of the implicit deny all , but I can still access the 
> > router from the internet through telnet. Anyone have any ideas what 
> > else might be needed to prevent of selectivly allow telnet access to 
> > my router. Thanks,
> > Randy
> --
> David Madland
> Sr. Network Engineer
> CCIE# 2016
> Qwest Communications Int. Inc.
> [EMAIL PROTECTED] 
> 612-664-3367
> 
> "Emotion should reflect reason not guide it"
> >>>>>>>>>>>>>  Confidentiality DisclaimerThis email and any files
transmitted with it may contain confidential and /or proprietary information
in the possession of WellStar Health System, Inc. ("WellStar") and is
intended only for the individual or entity to whom addressed.  This email
may contain information that is held to be privileged, confidential and
exempt from disclosure under applicable law. If the reader of this message
is not the intended recipient, you are hereby notified that any unauthorized
access, dissemination, distribution or copying of any information from this
email is strictly prohibited, and may subject you to criminal and/or civil
liability. If you have received this email in error, please notify the
sender by reply email and then delete this email and its attachments from
your computer. Thank you.
> 
> 

-- 
David Madland
Sr. Network Engineer
CCIE# 2016
Qwest Communications Int. Inc.
[EMAIL PROTECTED] 
612-664-3367

"Emotion should reflect reason not guide it"
>>>>>>>>>>>>>  Confidentiality Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recip

Re: Dening telnet access [7:35628]

2002-02-18 Thread Patrick Ramsey

what platform and what ios?  That's odd... That exact ACL does not work on
my 2600's.  Now this is going to bug me.  12.2(3)

>>> MADMAN  02/18/02 03:19PM >>>
Not in my world:

interface Ethernet4/0/0
 bandwidth 1000
 ip address 172.28.64.11 255.255.255.192
 ip access-group 150 in
 no ip directed-broadcast
 no ip mroute-cache
!
 access-list 150 deny   tcp host 172.28.56.48 any eq telnet log
access-list 150 permit ip any any

*Feb 18 12:11:42: %SEC-6-IPACCESSLOGP: list 150 denied tcp
172.28.56.48(57010) -
> 172.28.64.11(23), 1 packet

  Thank you!!

  Dave

"Roberts, Larry" wrote:
> 
> The only way that the access-list applied to the inbound interface (
non-vty
> ) blocked your telnet is if you were trying to telnet
> To an address that was not the directly connected address ( loopback or far
> side serial/ethernet )
> 
> If you were to telnet directly to the interface that the access-list was
> applied to you WOULD get in. Only an access-class applied
> To the VTY ports will stop that.
> 
> Thanks
> 
> Larry
> 
> -Original Message-
> From: MADMAN [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, February 18, 2002 1:05 PM
> To: [EMAIL PROTECTED] 
> Subject: Re: Dening telnet access [7:35628]
> 
> I know it does.  I have, even fairly recently, locked myself out of a
router
> via an inbound access list applied to an interface,DOH:(  Try again and if
> it doesn't work I would like to see the config.
> 
>   Are you sure the interface on which you applied the access list is the
> interface you were telneting to/thru??
> 
>   Dave
> 
> Patrick Ramsey wrote:
> >
> > really?  I have had no luck using inbound acl's to control telnet to
> > the
> router...I always have to use acc's on the vty's
> >
> > Is there a trick to this?
> >
> > -Patrick
> >
> > >>> MADMAN  02/18/02 12:16PM >>>
> > Actually telnet packets are processed by inbound access-list.  Now if
> > your refering to outbound access-lists then you would be correct.
> >
> >   Dave
> >
> > "Hire, Ejay" wrote:
> > >
> > > Because telnet packets destined for the router are not normally
> > > processed
> > by
> > > access-lists.  (i don't understand why not, but hey...)
> > >
> > > instead do this
> > >
> > > access-list y deny xx.xx.xx.xx xx.xx.xx.xx
> > >
> > > line vty 0 n (n = the results of a ?, usually 4) access-class y
> > >
> > > -Original Message-
> > > From: McHugh Randy [mailto:[EMAIL PROTECTED]] 
> > > Sent: Saturday, February 16, 2002 4:49 PM
> > > To: [EMAIL PROTECTED] 
> > > Subject: Dening telnet access [7:35628]
> > >
> > > Access list problem:
> > >
> > > Why does this extended access list not work to deny telnet access
> > > applied
> > to
> > > the internet interface on a 2514?
> > >
> > > Extended IP access list 199
> > > deny tcp any any eq telnet
> > >
> > > interface Ethernet0
> > >
> > > ip access-group 199 in
> > >
> > > I have alot more statments than this and of course the statement
> > > access-list 199 permit ip any any
> > >
> > > to take care of the implicit deny all , but I can still access the
> > > router from the internet through telnet. Anyone have any ideas what
> > > else might be needed to prevent of selectivly allow telnet access to
> > > my router. Thanks,
> > > Randy
> > --
> > David Madland
> > Sr. Network Engineer
> > CCIE# 2016
> > Qwest Communications Int. Inc.
> > [EMAIL PROTECTED] 
> > 612-664-3367
> >
> > "Emotion should reflect reason not guide it"
> > >>>>>>>>>>>>>  Confidentiality DisclaimerThis email and any files
> transmitted with it may contain confidential and /or proprietary
information
> in the possession of WellStar Health System, Inc. ("WellStar") and is
> intended only for the individual or entity to whom addressed.  This email
> may contain information that is held to be privileged, confidential and
> exempt from disclosure under applicable law. If the reader of this message
> is not the intended recipient, you are hereby notified that any
unauthorized
> access, dissemination, distribution or copying of any information from this
> email is strictly prohibited, and may subject you to criminal and/or civil
> liability. If you have received this email in error, please notify the
> sender by reply email and then delete t

Re: DNS Request Redirection [7:35703]

2002-02-18 Thread Patrick Ramsey

not to add any heat underneath anyone behind, but I routinely use
UUNET/Mindspring/Earthlink/Qwest... (their caching of course)

to be honest with you, I have never run into an isp that wouldn't allow
lookups from external hosts...  I mean...for authoratative servers,  how
would you propagate your zones without allowing lookups from other caching
servers?  Unless you restricted lookups from root servers only...But
wouldn't that be kinda unefficient?
 
-Patrick

>>> "Priscilla Oppenheimer"  02/18/02 03:50PM >>>
Yes, I can use that DNS server that you mentioned without any problem. I 
have my PC set to use it right now. And I know of others that anyone can 
use too, but I'm not going to give details in case they would not like this 
info to get out. ;-)

Priscilla

At 03:24 PM 2/18/02, Chuck wrote:
>the simple way to test this would be to set your workstation with some other
>ISP's DNS address, and see how things go. In one of my posts I provided the
>real IP of an active DNS server. Someone want to give it a try? or post one
>that you know about. I'll be happy to test.
>
>I wish the guy who posted the original question would get back to us with
>his results.
>
>Chuck
>
>""Priscilla Oppenheimer""  wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > At 12:28 PM 2/18/02, Marc Thach Xuan Ky wrote:
> > >Any decent ISP will refuse DNS recursion from any IP address that is not
> > >within its own address space.
> >
> > He wasn't asking about recursion. He was asking about the initial query
> > from the end host. Although I could believe you that a service provider
> > should make sure these queries only come from customers, my experience is
> > that service providers don't do this. I can set my PC to use a variety of
> > DNS servers around the Internet and it works.
> >
> > I think it's because it's tricky to do, especially for small ISPs. Some
> > ISPs might have only one DNS server. The same server that provides DNS
> > services to Internet-access customers may also be the authority for
>various
> > names managed by the ISP. The ISP may be doing Web hosting and be the
> > authority for a bunch of names. In that case, it can't filter out DNS
> > queries coming from the Internet.
> >
> > For example, say your PC asks your local DNS server to resolve
> > www.priscilla.com. Your server can't do it. It asks its upstream server,
> > probably one of the root servers. The root server figures out that
> > petiteisp.com owns www.priscilla.com and tells your server the IP address
> > of the authoritative name server at petiteisp.com. Your server queries
> > petiteisp.com which gives your server the IP address for
>www.priscilla.com.
> > Your server finally responds to your PC.
> >
> > Notice that the query to petiteisp.com came from some unexpected IP
>address
> > that can't be anticipated in a filter. If petiteisp.com had a filter to
> > allow queries only from its customers, the query from your server would
> > have failed.
> >
> > Did that make sense? ;-) How to bigger ISPs handle this? I suppose bigger
> > ISPs have more than one DNS server, one for Internet access customers,
and
> > one that is the authority for names owned by the ISP.
> >
> > Priscilla
> >
> > >  This is fundamental to DNS security.
> > >You need to rewrite the destination IP address.  Note that Cisco's NAT
> > >is not suitable for this because of the DNS ALG.  The easiest thing to
> > >do may be to provide an on-site cacheing DNS using the old ISPs DNS
> > >addresses.  If you've got a lot of workstations and a decent bandwidth
> > >to the Internet, you will probably find that running your own DNS cache
> > >will be more satisfactory anyway.
> > >rgds
> > >Marc TXK
> > >
> > >
> > >Godswill HO wrote:
> > > >
> > > > You can still use your former ISP's DNS records while using the new
>ISP's
> > > > bandwidth. It does not matter who owns the DNS server. Everybody have
> > >access
> > > > to it once they are in the internet. Except when they are
specifically
> > > > filtered.
> > > >
> > > > The only drawn back is that, Your new ISP have to forward the packet
>in a
> > > > round trip to the old ISP's network through the internet before they
>are
> > > > resolved and sent back to you machine, had it been you are using the
>DNS
> > of
> > > > your new ISP, these request would stop there. Do not loose your
sleep,
> > > > because at the worst these delays are in milisseconds and not easily
> > > > noticeable by the eye, more each machine have a cache so it does not
> > >forward
> > > > every request. Great if you have a Cache Engine to compliment the
> > machine's
> > > > cache.
> > > >
> > > > Whatever, you are kool and everything will be fine, switch to your
new
> > ISP
> > > > and enjoy.
> > > >
> > > > Regards.
> > > > Oletu
> > > > - Original Message -
> > > > From: Michael Hair
> > > > To:
> > > > Sent: Sunday, February 17, 2002 8:07 PM
> > > > Subject: DNS Request Redirection [7:35703]
> > > >
> > > > > I was wondering what is

Re: can you bind two frame relay circuits? [7:35854]

2002-02-19 Thread Patrick Ramsey

well you wouldn't really "bind" them...but, if you were using a routing
protocol such as ospf, then it could round robin packets for you.

-Patrick

>>> beth  02/19/02 10:34AM >>>
I have several 256k frame relay circuits some coming back to same host
circuit
my question is , is there anyway to way to bind a couple of these on a router
to increase bandwidth to 512k??
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35858&t=35854
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: can you bind two frame relay circuits? [7:35854]

2002-02-19 Thread Patrick Ramsey

Is this possible with 3 different dlci's?

>>> "McCallum, Robert"  02/19/02 11:23AM >>>
yes,  look up multilink frame relay

-Original Message-
From: beth [mailto:[EMAIL PROTECTED]] 
Sent: 19 February 2002 15:34
To: [EMAIL PROTECTED] 
Subject: can you bind two frame relay circuits? [7:35854]


I have several 256k frame relay circuits some coming back to same host
circuit
my question is , is there anyway to way to bind a couple of these on a router
to increase bandwidth to 512k??
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35866&t=35854
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Should I buy IDS ? [7:36053]

2002-02-21 Thread Patrick Ramsey

Well...it depends on how secure you want your network!

The size is completely irrelevant... if you own a medical practice with
patient data floating around your network and you only have 10 computers,
with 4 of them offering some type of internet service through the
firewal,etc etc... then I would say yes...ids is important... if you own
jokenetwork.com and you have 50,000 machines trading jokes all day, are you
worried about sombody stealing your jokes? probably not...

If you do decide to implement some type of ids, look at http://www.lids.org/

remember signature based ids are signature based ids regardless of company
and price as long as you have a constant way to update signatures, you
should be fine.  To supplement your signature based design, though check out
www.lancope.com ...They have an AWESOME supplement to signature based
systems.  Even though there box will trigger on some signature based
attacks, it is not meant to trigger on them as soon as they happenThis
is why I say it is a supplement and not a complete kit.

Of course...a good security policy would help you decide on what you need! 
:)

http://www.sans.org/newlook/resources/policies/policies.htm#template 

-Patrick

ps. if you run tons of data through your internet connection (45mb plus) or
your ids is from backbone to backbone, I would stay away from LIDS unless
you have a BADA$$ machine to run it on...  :)

>>> "Arni V. Skarphedinsson"  02/21/02 09:32AM >>>
I am administrating a network of about 500 computers, 30 servers, and
somthink like 70 WAN locations,

I have been thinking about the Cisco IDS system, anyone have any good
reasons to use one, have you used it, and has it detected much intrusion.

I realy need somthing to sell the ides to the managment.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36058&t=36053
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Should I buy IDS ? [7:36053]

2002-02-21 Thread Patrick Ramsey

www.snort.org 

and remember

www.lids.org 

:)  Install lids then snort... (unless you are plannign on runnign snort on
a microsoft platform!  :)  (but that kinda defeats the purpose of security...)

>>> "Tel Khan"  02/21/02 10:12AM >>>
Hi,

 Where can i obtain information on SNORT?


Thanks in advance

Tel
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36063&t=36053
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DEC server addressing [7:36068]

2002-02-21 Thread Patrick Ramsey

" def int gateway x.x.x.x "

>>> "Wilson, Gavin (KBPB)"  02/21/02 10:46AM >>>
Hi there

Does anyone know how to change the ip address and default gateway on a dec
server then the correct way of saving it to memory.

Cheers Gavin


Gavin Wilson
Kleinwort Benson Private Bank
Tel: 0207 4751771
Mobile: 07989441850
email: [EMAIL PROTECTED] 



--
This email and any files transmitted with it are intended solely for the
addressee(s) and may be legally privileged and/or confidential.  If you have
received this email in error you may not copy, forward or use the contents,
attachments or information in any way.  Please destroy it and contact the
sender via our switchboard on +44(0) 20 7475 6600 or via return email.  Any 
unauthorised use or disclosure may be unlawful.  Kleinwort Benson Private
Bank
give no warranty as to the accuracy or completeness of this email after it is
sent over the Internet and accept no responsibility for change made after it
was sent.  Any opinions expressed in this email may be personal to the author
and may not necessarily reflect the opinions of Dresdner Bank or its
affiliates. They may also be subject to change without notice.
--
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36071&t=36068
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DEC server addressing [7:36068]

2002-02-21 Thread Patrick Ramsey

sorry

def int address x.x.x.x

def int mask x.x.x.x

-Patrick

>>> "Wilson, Gavin (KBPB)"  02/21/02 10:46AM >>>
Hi there

Does anyone know how to change the ip address and default gateway on a dec
server then the correct way of saving it to memory.

Cheers Gavin


Gavin Wilson
Kleinwort Benson Private Bank
Tel: 0207 4751771
Mobile: 07989441850
email: [EMAIL PROTECTED] 



--
This email and any files transmitted with it are intended solely for the
addressee(s) and may be legally privileged and/or confidential.  If you have
received this email in error you may not copy, forward or use the contents,
attachments or information in any way.  Please destroy it and contact the
sender via our switchboard on +44(0) 20 7475 6600 or via return email.  Any 
unauthorised use or disclosure may be unlawful.  Kleinwort Benson Private
Bank
give no warranty as to the accuracy or completeness of this email after it is
sent over the Internet and accept no responsibility for change made after it
was sent.  Any opinions expressed in this email may be personal to the author
and may not necessarily reflect the opinions of Dresdner Bank or its
affiliates. They may also be subject to change without notice.
--
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36073&t=36068
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX Logs [7:36090]

2002-02-21 Thread Patrick Ramsey

50mb?  What are you logging to?

check out kiwisyslog  and the various utils on their site

www.kiwisyslog.com 

-Patrick

>>> "[EMAIL PROTECTED]"  02/21/02 01:37PM >>>
Greetings all,

I have a big pix log (50mb) and I need to clean it up to get src/dest
and port numbers in a clean format.  Do you guys know of any freebie I
can use to clean it?

Thanks.Nabil
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36106&t=36090
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Delay Metric in EIGRP [7:36001]

2002-02-21 Thread Patrick Ramsey

ahhh you ole cut'n'paster

:p

:)

>>> "Priscilla Oppenheimer"  02/21/02 02:51PM >>>
Did anyone notice that I explained reliability and load backwards? ;-) It 
was a copy-and-paste error. Reverse the two explanations below please.

Priscilla

At 08:43 PM 2/20/02, Priscilla Oppenheimer wrote:
>The delay part of the EIGRP composite metric is not measured. It's based on
>the type of interface. Each type of interface has a default value. You can
>change it, although this is risky and not recommended.
>
>Because EIGRP is a distance-vector protocol, the router sends route updates
>that list networks. For each network, the router states the different parts
>of the composite metric:
>
>1) The delay to get to the network, which is a cumulation of all interface
>delays.
>
>2) The bandwidth to that network, which is the minimum bandwidth for all
>interfaces.
>
>3) Reliability which is not used by default, but you can configure the
>router to use it. If used, the reliability is measured and represents how
>much of the bandwidth to the network is in use.
>
>4) Load which is not used by default, but you can configure the router to
>use it. If used, the load is measured and represents the fraction of
>packets that arrive at the network undamaged.
>
>The router also sends the following info, which is not part of the metric,
>but useful for other routers to know:
>
>1) MTU is the maximum packet size that can be sent along the entire path
>without fragmentation. (That is, it is the minimum of the MTUs of all the
>networks involved in the path.)
>
>2) The hop count is simply the number of routers that a packet will have to
>go through to get to the destination.
>
>3) Next hop is the address of the router to use to get to the destination,
>which is usually the router sending the update.
>
>Priscilla
>
>At 05:15 PM 2/20/02, Yatou Wu wrote:
> >Hi,
> >
> >In EIGRP, the delay metric is taken as configured in the interface of the
> >router by the administrator, by default, or by measurement?
> >
> >when the router calculates the metric, it needs to know the minimum
> >bandwidth along the path, and also the delay along the path. how can the
> >router pass the infor around? pass the total delay along the path, or
delay
> >of every link?
> >
> >thanks
> >
> >yatou
> >
> >_
> >Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp.
>
>
>Priscilla Oppenheimer
>http://www.priscilla.com 


Priscilla Oppenheimer
http://www.priscilla.com 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36107&t=36001
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Patrick Ramsey

ccna makes 50?  uh

maybe with a little experience Here in atlanta cna means squat

>>> "Steven A. Ridder"  02/21/02 03:50PM >>>
A CCNA makes more than 50k.  And you wouldn't have to pay your company to
work for them and get training.  Most companies pay you and pay for your
training.

--
RFC 1149 Compliant.

""Sean Knox""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I've taken some classes at ICTP. From what I gather, their CCIE intern
> program works like this: you sign up for their CCIE program (which is not
> cheap I should add) and when you pass your CCIE written/lab (I vaguely
> remember that the CCIE written pass is all you need), you can work as a
> subcontractor for ICTP. You make substantially   less money than a CCIE is
> "worth", (I believe around $50,000, don't quote me on that) but for those
> with little or no experience (i.e., people enrolling in this program), it
> works out really well. Hopefully Mr. Lee could explain the program more in
> detail.
>
> - Sean
>
> -Original Message-
> From: Brian [mailto:[EMAIL PROTECTED]] 
> Sent: Thursday, February 21, 2002 11:34 AM
> To: [EMAIL PROTECTED] 
> Subject: Re: CISCO INTERNSHIP.CCIE. [7:36091]
>
>
> Perhaps its a new look on recruiting, they train u, get a slice of the
> dough for awhile??  Just speculating of course..
>
> Brian
>
> On Thu, 21 Feb 2002, Cisco Nuts wrote:
>
> > And upon finishing the program, how many years of slavery will we
> > unfortunate ones be indebted to your gracious company? :-)
> > Can you clarify this??
> >
> >
> > >From: "Jason Lee"
> > >Reply-To: "Jason Lee"
> > >To: [EMAIL PROTECTED] 
> > >Subject: CISCO INTERNSHIP.CCIE. [7:36091]
> > >Date: Thu, 21 Feb 2002 13:40:20 -0500
> > >
> > >Hi all,
> > >
> > >My name is Jason Lee I currently work for ICTP located in anaheim
> > >california
> > >we are currently looking for few candidates to go through our very
> intense
> > >cisco training, also to note that upon finishing the program CEA (cisco
> > >expert academy)you can be eligible for an internship... we have
> information
> > >session going on every other friday, so if this sounds interesting to
> you,
> > >or if you need a lab to study for the ccie or ccnp please give me a
call.
> > >
> > >Jason Lee
> > >IT specialist
> > >714-783-1083
> > >www.ICTP.com 
> > _
> > Join the worlds largest e-mail service with MSN Hotmail.
> > http://www.hotmail.com 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36108&t=36091
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Patrick Ramsey

pay for an internship?

sounds like I am in the wrong business all together...  hehe

>>> "Cisco Nuts"  02/21/02 04:54PM >>>
That's right. A CCNA could potentially make more than $50K (with skills
though)

Here is what I don't understand: Jason states that his company is
looking(note) for people while Sean mentions that you do have to actually
sign up(note) for their program which he adds is not cheap??

So basically, looks like people will first have to shell out this huge
dough out of their pocket to get an intership thru this company.

 

>From: "Steven A. Ridder" >Reply-To: "Steven A. Ridder" >To:
[EMAIL PROTECTED] >Subject: Re: CISCO INTERNSHIP.CCIE.
[7:36091] >Date: Thu, 21 Feb 2002 15:50:16 -0500 > >A CCNA makes more
than 50k. And you wouldn't have to pay your company to >work for them and
get training. Most companies pay you and pay for your >training. > >--
>RFC 1149 Compliant. > >""Sean Knox"" wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > I've taken some classes
at ICTP. From what I gather, their CCIE intern > > program works like
this: you sign up for their CCIE program (which is not > > cheap I should
add) and when you pass your CCIE written/lab (I vaguely > > remember that
the CCIE written pass is all you need), you can work as a > >
subcontractor for ICTP. You make substantially less money than a CCIE is
> > "worth", (I believe around $50,000, don't quote me on that) but for
those > > with little or no experience (i.e., people enrolling in this
program), it > > works out really well. Hopefully Mr. Lee could explain
the program more in > > detail. > > > > - Sean > > > > -Original
Message- > > From: Brian [mailto:[EMAIL PROTECTED]] > > Sent:
Thursday, February 21, 2002 11:34 AM > > To: [EMAIL PROTECTED] > >
Subject: Re: CISCO INTERNSHIP.CCIE. [7:36091] > > > > > > Perhaps
its a new look on recruiting, they train u, get a slice of the > > dough
for awhile?? Just speculating of course.. > > > > Brian > > > > On Thu,
21 Feb 2002, Cisco Nuts wrote: > > > > > And upon finishing the program,
how many years of slavery will we > > > unfortunate ones be indebted to
your gracious company? :-) > > > Can you clarify this?? > > > > > > > > >
>From: "Jason Lee" > > > >Reply-To: "Jason Lee" > > > >To:
[EMAIL PROTECTED] > > > >Subject: CISCO INTERNSHIP.CCIE.
[7:36091] > > > >Date: Thu, 21 Feb 2002 13:40:20 -0500 > > > > > > > >Hi
all, > > > > > > > >My name is Jason Lee I currently work for ICTP
located in anaheim > > > >california > > > >we are currently looking for
few candidates to go through our very > > intense > > > >cisco training,
also to note that upon finishing the program CEA (cisco > > > >expert
academy)you can be eligible for an internship... we have > > information
> > > >session going on every other friday, so if this sounds interesting
to > > you, > > > >or if you need a lab to study for the ccie or ccnp
please give me a >call. > > > > > > > >Jason Lee > > > >IT specialist > >
> >714-783-1083 > > > >www.ICTP.com > > >
_ > > >
Join the worlds largest e-mail service with MSN Hotmail. > > >
misconduct and Nondisclosure violations to [EMAIL PROTECTED] 



Get your FREE download of MSN Explorer at http://explorer.msn.com.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36112&t=36091
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: PIX information [7:35294]

2002-02-22 Thread Patrick Ramsey

wr st will do this for you... "write standby"

-Patrick

>>> "Mears, Rob"  02/21/02 05:24PM >>>
Any changes you make to the Pri PIX will be written to the SEC, no need to
day anything.  Good Idea to move the sec and do a Wr M


Rob

-Original Message-
From: Evans, TJ [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, February 13, 2002 12:53 PM
To: [EMAIL PROTECTED] 
Subject: RE: PIX information [7:35294]

I believe it sync's them auto-magically, or perhaps on a timed basis.
Regardless ... I always do a wr standby ... just to be sure.


Thanks!
TJ

 -Original Message-
From:   Hartnell, George [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, February 13, 2002 12:46 PM
To: [EMAIL PROTECTED] 
Subject:RE: PIX information [7:35294]

AND, am I to understand correctly, as the manual is quite vague, that an
upgrade of the primary failover unit also updates the secondary?  Or, must
the hapless administrator do each individually?

Best, G.

> -Original Message-
> From: Jose Celestino [mailto:[EMAIL PROTECTED]] 
> Sent: Wednesday, February 13, 2002 7:12 AM
> To: [EMAIL PROTECTED] 
> Subject: Re: PIX information [7:35294]
> 
> 
> PIX-FW1# copy ?
> usage: copy tftp[:[[//location][/pathname]]] flash
> 
> For instance:
> 
> copy tftp://192.168.2.2/configs/pix.cfg flash
> 
> 
> Thus spake BASSOLE Rock, on Wed, Feb 13, 2002 at 09:06:59AM -0500:
> > Hello group,
> > 
> > 
> > What command can I use to copy a configuraton form a tftp 
> server to a PIX
> > Firewall? I have look on the cisco web site for the command 
> but couldn't
> > find. Can somebody help.
> > 
> > Thank you.
> > 
> > Rock
> -- 
> Jose Celestino 
> -
> "Little prigs and three-quarter madmen may have the conceit 
> that the laws of
> nature are constantly broken for their sakes."
> -- Friedrich Nietzsche

*
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. 

If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter. 

*
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36211&t=35294
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NAT Detection Utility [7:36248]

2002-02-22 Thread Patrick Ramsey

dynamic nat a security breach?  I was under the impression that dynamic was
a security practice?and if you are speaking of static nat, well
darn...that's you guys...

-Patrick

>>> Kwame  02/22/02 02:04PM >>>
Anyone know of a tool for detecting NAT activity on the network. I work in a
large university and we've instituted a policy against nat especially in the
dorms due to some very serious security breaches. Is there anything out
there that can remotely detect a nat operation? Thanks.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36258&t=36248
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DEC terminal Connection settings [7:36311]

2002-02-23 Thread Patrick Ramsey

depends on what it was configured for originaly... 9600 8 n 1 is out of the
box

Make sure you are using proper dec pinouts

>>> "Wilson, Gavin (KBPB)"  02/23/02 06:09 AM >>>
Does anyone know what the terminal setting are when connecting to dec sever
on port 1 , speed etc...

Cheers Gavin

Gavin Wilson
Kleinwort Benson Private Bank
Tel: 0207 4751771
Mobile: 07989441850
email: [EMAIL PROTECTED]



--
This email and any files transmitted with it are intended solely for the
addressee(s) and may be legally privileged and/or confidential.  If you have
received this email in error you may not copy, forward or use the contents,
attachments or information in any way.  Please destroy it and contact the
sender via our switchboard on +44(0) 20 7475 6600 or via return email.  Any 
unauthorised use or disclosure may be unlawful.  Kleinwort Benson Private
Bank
give no warranty as to the accuracy or completeness of this email after it is
sent over the Internet and accept no responsibility for change made after it
was sent.  Any opinions expressed in this email may be personal to the author
and may not necessarily reflect the opinions of Dresdner Bank or its
affiliates. They may also be subject to change without notice.
--
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36322&t=36311
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TWO ISP AND ONE FAILURE [7:36371]

2002-02-25 Thread Patrick Ramsey

chances are bgp will not be availablefirst..he has to have the address
space...second...if he didn't plan for it before hand, he's probably got a
couple'a 2500's or 2600's Try running bgp on a 2500. (unless of
course he uses the same isp for both connections and they work with him on
setting up redundancy)  But at that point he still would not have his own
asn for bgp...

-Patrick

>>> "sam sneed"  02/25/02 10:46AM >>>
You would want to use both HSRP and BGP in this case. HSRP will solve the
problem of changing the default gateway on the clients when a link fails.
BGP will be used for fault tolerance at the ISP side. Here is a sample doc I
got form the cisco site:

http://www.v-man.net/support/pdf/hsrp_bgp.pdf 

""Yassel Omar Izquierdo Souchay""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello i have a frecuent porblem with one of my isp, i have two cisco
routers
> and each one to different isp. Frequentily i have to change the gateway of
> one of my servers, because one isp is failure.
> I want to know if with one of BGP, OSPF, RIP, NAT or other protocol i
could
> do the change automatically to the other active isp.
> It happening me right now. And when i have to do that i have to reset one
of
> my servers.. :S. Is a costs operatrion its a mail server.
> So if somebody knows how to resolve between routers with different isp
each
> one, how to route accross the other good gateway.
>
> Thnx in advance
> Yassl
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36380&t=36371
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TWO ISP AND ONE FAILURE [7:36371]+ Some details of my [7:36381]

2002-02-25 Thread Patrick Ramsey

wow...At this point I hope nobody is scanning archives for ip addresses...

>>> "Yassel Omar Izquierdo Souchay"  02/25/02 10:56AM >>>
Hello
The mail server have 2 ips one for 65.169.240.  and the second 169.158.32.
network.

This is de configuration havae in my server:.
NETWORKING=yes
HOSTNAME=MailServer
#GATEWAY=169.158.32.1
GATEWAY=65.169.240.209

In this moment my gateway is 65.169.240.209, because the other (commented
with #) is down, so i have to do tha manually and restart the network
service
I thanks to you i study how to do it with HSRP. And study how this changes
affects my mail server.


So when 169.158.32.  is down. I have to to manually the change of gateways
""Chris Charlebois""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Depends alot on what kind of connection you want.  If you are just talking
> about outbound access from your site, that isn't a problem.  Setup the two
> routers on the same subnet and use HSRP.  Best practive would be to set up
> two HSRP address; each router will be primarary for one address and backup
> for the other.  That way you can direct traffic over a specific connection
> when it's all up, but traffic will failover to one connection if the other
> goes down.
>
> If, on the other hand, you want to maintain public services during an
outage
> (ie, web pages, FTP sites, incoming e-mail), that is a gorilla of a
> completly different color.  If you're site is big enough, you could
justify
> a /19 public address, which can be routed via BGP.  That would solve alot
of
> you're problems, but it's unlikely that you'd be asking the question if
you
> had a /19.  Some protocols will allow you to specifiy a backup via DNS
(I'm
> thinking SMTP), but that only helps with mail.  Otherwise, you're options
> are co-locateing the equipment you always want available, or switching
both
> your WAN connections to the same ISP.  THere is no really easy solution.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36381&t=36381
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ciscoworks autodiscovery [7:36386]

2002-02-25 Thread Patrick Ramsey

Hey group,

Anybody run into any problems with autodicovery form ani?

I installed the entire lan management collection, browsed to ciscoworks url,
changed the autodicovery dates/times...Then it asked me if I would like to
go ahead and perform an autodiscovery... wow...how convienant...of course I
would!... and WAHLA!   uhh...  nothing happened... so I thought...maybe
I'll let it sit over the weekend and run through all the different times I
had autodiscovery set up for... and low and behold still nothing!

what gives?  my snmp strings are as follows

*.*.*.*:pub::priv

with pub and priv being substituted for the real deal...

any ideas?  Is there some cheezy setting somewhere I am just missing?

-Patrick



>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36386&t=36386
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



dialup mac address [7:36394]

2002-02-25 Thread Patrick Ramsey

hey group

I've got a 3640 with a couple'a pri's and two modem banks... I want to give
vendors access to very specific servers through a firewall... (netscreen) 
My original thought was to place the vendor's mac address for it's dialup
adapter in dhcp and assign it the same ip every timethen base the ACL's
to each server on the vendor ip address...

All the searching I have done on the web say dialup adapters have generic
mac addresses, ie 44-45-53-54-00-00 ... How can I get the 3640 to dole out
specfic ip's to vendors?  How do isp's keep up with leases if this is the
case?

-Patrick


>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36394&t=36394
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: dialup mac address [7:36394]

2002-02-25 Thread Patrick Ramsey

Can I assume secure ACS does this?

>>> "Hire, Ejay"  02/25/02 01:24PM >>>
You can assign them a specific IP and/or privledges based on username using
radius.

-Original Message-
From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] 
Sent: Monday, February 25, 2002 12:29 PM
To: [EMAIL PROTECTED] 
Subject: dialup mac address [7:36394]


hey group

I've got a 3640 with a couple'a pri's and two modem banks... I want to give
vendors access to very specific servers through a firewall... (netscreen) 
My original thought was to place the vendor's mac address for it's dialup
adapter in dhcp and assign it the same ip every timethen base the ACL's
to each server on the vendor ip address...

All the searching I have done on the web say dialup adapters have generic
mac addresses, ie 44-45-53-54-00-00 ... How can I get the 3640 to dole out
specfic ip's to vendors?  How do isp's keep up with leases if this is the
case?

-Patrick


>>>>>>>>>>>>>  Confidentiality Disclaimer   >>>>>>>>>>>>  Confidentiality
Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36416&t=36394
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 3COM Password [7:36476]

2002-02-26 Thread Patrick Ramsey

3300 defaults:

admin, no pw
security, no pw
manager, no pw
monitor, no pw

as far as I know there is no way to recover PW's without an RMA... 
hopefully I am wrong about this.

-Patrick

>>> dr_sukhi  02/25/02 11:43PM >>>
Can anybody tell me how to bypass the password of a 3COM 3300 switch. I know
the procedure in Cisco switch. If it is something like that, kindly give me
a clue as to what to do in 3COM. The password has been lost and there is
direct physical access to the switch. Thankyou in advance.
S.Singh 
CCNP 
India
Get Your Private, Free E-mail from Indiatimes at 
http://email.indiatimes.com
Buy Music, Video, CD-ROM, Audio-Books and Music Accessories from
http://www.planetm.co.in 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36502&t=36476
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: OT: netmeeting problem [7:36524]

2002-02-26 Thread Patrick Ramsey

sounds like the flux capacitor blew inside the server

Try to run a lightening stick into the back of the primary power supply and
sit it outside during a storm

then do a search on google and click on ther second link...

http://www.google.com/search?sourceid=navclient&q=netmeeting+problems 

-Patrick

>>> "Jim Bond"  02/26/02 02:08PM >>>
Hello,

I've got a netmeeting server, when users logon, only
first 2 users can see video, others can only use white
board, share directories. What's wrong?

Thanks.

Jim

__
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36529&t=36524
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to get the activation key for my clone Pix? [7:36533]

2002-02-26 Thread Patrick Ramsey

why not?  if you are speaking of morals...sheeesh...who has those any
more... hehe

Are we even sure it's illegal?

>>> "Greg Kellogg"  02/26/02 03:15PM >>>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If I may make a suggestion:  DO NOT DO THIS

- -Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Athony Jones
Sent: Tuesday, February 26, 2002 1:02 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED] 
Subject: How to get the activation key for my clone Pix?


Hi Everyone,
After struggling for the past two days, I have 
successfully cloned a Pix firewall by using my PC.
I plug the 16MB flash card into the PC's ISA slot 
and the PC recognize that it is a Pix flash card
(cost me $400.00). It boots up fine and everything
seems to be in order.  However, after the boot up 
sequence, it asks me for the activation key.  I've 
been trying many different possible scenarios without
much success.  I even tried to use the activation key
from another Pix firewall but that doesn't work
either.

Anybody know how I can fake my clone Pix with a 
fake activation key?  By the way,I am running Pix OS
code version 6.1(2). I even tried 5.3(1), 5.3(2),
6.0(1) and 6.1(1) and one of them works.  By the way,
the PC has 128MB of RAM and a 16Mb Flash ISA card.  
I tried to clone a Pix520.

Please help.

Jason

__
Do You Yahoo!?
-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use 

iQA/AwUBPHvrqy/udHpWjye2EQI07wCdGksAbi7/t8xXckH9E3g/Y4EvhqwAoLYf
vE2NqCj82ZYO3p4LE19FNt9y
=dDyd
-END PGP SIGNATURE-
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36554&t=36533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: How to get the activation key for my clone Pix [7:36638]

2002-02-27 Thread Patrick Ramsey

setting up vpn's is nothign like having a dmz...   Having multiport
firewalls allows for segregation of all networks behind those interfaces
while still allowing internet connectivity to all.  Who wants to connect to
a vpn just to browse to a web server that could be in the dmz?

-Patrick

>>> "Scott Morris"  02/27/02 09:58AM >>>
Personally?  I have two 520's that I got a sweet deal on (EBay).

But other than that, what is the functional difference between having two
501's and two of something higher?

By that, I mean what is the difference between setting up VPN's to the
outside interfaces versus a DMZ?  What is the big deal?  There's nothing
that you can't test yourself on with a pair of 501's that will be that
dramatically different with 506's, 515's or whatever  The difference
would be in the permissions or translations, but as long as you understand
that difference, I don't see what the big deal is.

Other than playing around for emulating a customers network, I've really
never used my DMZ interfaces for lab testing.  So if I didn't have them, it
wouldn't affect me one way or the other.

-Original Message-
From: Wes Stevens [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, February 27, 2002 8:56 AM
To: [EMAIL PROTECTED] 
Cc: [EMAIL PROTECTED] 
Subject: RE: How to get the activation key for my clone Pix?


In my own lab a I have a 506. I would like to have another pix with a dmz
interface. I am sure pretty sure they will cover pix to pix and dmz in the
ccie security. But even on ebay to buy a 520 with three interfaces usually
runs over $2k. I have a full lab at home - atm, token ring, isdn, frame -
ten routers and three switches. Another $2k to $3k for a pix with three
interfaces is beyond my reach.

So how do you practice pix to pix and dmz?

>From: "Scott Morris" 
>Reply-To: 
>To: "'Wes Stevens'" 
>Subject: RE: How to get the activation key for my clone Pix?
>Date: Wed, 27 Feb 2002 08:32:24 -0500
>
>Somebody's already been selling 'em on EBay.
>
>And I never said legal action should be brought against anyway...  I merely
>said it wasn't a bright idea to discuss it in a public forum where Cisco
>people were at.
>
>As for discouraging the program, I hardly think this would do it.  You
>don't
>see people cloning ATM boxes, or VoIP stuff, do ya?  So the argument of
>this
>is a cost-effective marketing tool for the CCIE program hasn't historically
>been a problem.
>
>*shrug*  If people want to do it, they'll do it.  However, I don't think it
>is advisable to discuss it publically, nor sell it.  Whether to another
>person for "study purposes only" or whatever...  Control gets lost after
>that.
>
>And you can get a 501 for the same price, if not less than the 16 meg card
>anyway, so what the hell is the point in building your own?  It's not the
>price-point!
>
>Scott
>
>-Original Message-
>From: Wes Stevens [mailto:[EMAIL PROTECTED]] 
>Sent: Wednesday, February 27, 2002 7:53 AM
>To: [EMAIL PROTECTED] 
>Subject: RE: How to get the activation key for my clone Pix?
>
>
>Scott,
>
>"use other then intended"
>
>Maybe, but they sell the board with the code installed. It is intended as
>an
>upgrade, but I don't think there is any legal clause shipped with it saying
>you can use it for no other purpose. Again the original post was a pix for
>a
>CCIE security lab. I just cannot see Cisco taking legal action there. They
>have never been a legally heavy handed company. To take action in that case
>would send the wrong message. The CCIE program is one of their best
>marketing tools. It puts industry reconized experts in the field with a
>diffinite Cisco bias to them. The CCIE Security program is fairly new and I
>don't think it would be in their best interest to discourage it in any way.
>
>Now if someone starts cloning pix's by the dozens and selling them on ebay
>that is a whole different story.
>
> >From: "Scott Morris" 
> >Reply-To: 
> >To: "'Wes Stevens'" 
> >Subject: RE: How to get the activation key for my clone Pix?
> >Date: Wed, 27 Feb 2002 07:26:33 -0500
> >
> >I believe that would be a "use other than intended"
> >
> >Cisco is a little lax in enforcing software licenses...  Lots of people
> >resell routers with IOS installed (not supposed to).  Lots of people
> >download feature sets they don't have licenses for (not supposed to).
> >
> >There have actually been some cases where Cisco's gone after people
> >(typically larger companies).  But it's a WHOLE different thing to BUILD
>a
> >device and put their software on it...  If I were to build my own router
> >(god only knows why), and put their software on it, I would fully expect
>to
> >hear from Cisco.
> >
> >Worse, if I were to sell it on EBay, that's just asking for trouble.  And
> >before you comment, yes, PIX clones HAVE been sold on Ebay from
> >not-so-bright individuals.
> >
> >Where do you draw the line?  Lots of people drive fast.  It's still
> >illegal.
> >If you do it enough, and publically flaunt it, chances are you'll get
> >

Re: DECserver 700 console access [7:36664]

2002-02-28 Thread Patrick Ramsey

I'm not sure what you meanare you sayign you are telnetting into this
beast?  and then want to manipulate a port setting?  Why would you want to
change to port 16?  What is the goal here?

If you have local access and you want to configure this guy serially, then
you can hook into any non modified port at 96008n1... Some units shipped
with dce defaulted and others shipped with dte... (a smart cable would be a
good investment if you plan on working heavily with these devices)
http://www.smart-cable.com/

the following is the pinout you will need to use

RJ  DB
Orange  2
Yellow  3
Blue/Black  7   
4 and 5 jumped - 6, 8, and 20 jumped


if you can't get into a port you know has not been altered, then swap 2 and
3 and try again..


hth
-Patrick


>>> "Wilson, Gavin (KBPB)"  02/27/02 11:42AM >>>
Do I have to set port to local access and then use the change server console
port 16 in order to gain console to the  DEC server?

Gavin Wilson
Kleinwort Benson Private Bank
Tel: 0207 4751771
Mobile: 07989441850
email: [EMAIL PROTECTED] 



--
This email and any files transmitted with it are intended solely for the
addressee(s) and may be legally privileged and/or confidential.  If you have
received this email in error you may not copy, forward or use the contents,
attachments or information in any way.  Please destroy it and contact the
sender via our switchboard on +44(0) 20 7475 6600 or via return email.  Any 
unauthorised use or disclosure may be unlawful.  Kleinwort Benson Private
Bank
give no warranty as to the accuracy or completeness of this email after it is
sent over the Internet and accept no responsibility for change made after it
was sent.  Any opinions expressed in this email may be personal to the author
and may not necessarily reflect the opinions of Dresdner Bank or its
affiliates. They may also be subject to change without notice.
--
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36805&t=36664
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



pix HW upgrade in failover config [7:36812]

2002-02-28 Thread Patrick Ramsey

Hey list,

Anybody ever used failover on the pix to upgrade hardware with minimal
downtime?  I'm wondering what exactly is goign to happen.  I want to take
the secondary offline, insert a gig module, then bring it back
onlinewill the difference in hardware cause issues with the config
sync?  I then want to bring the primary down and insert a gig module (or
vice versa)  Maybe I should bring the primary down first so when I bring it
back up, at least I will have one working firewall...?  anybody?

-Patrick


>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36812&t=36812
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: question about stateful inspection [7:36817]

2002-02-28 Thread Patrick Ramsey

Well...if stateful inspection is used at layer three..then the device
utilizing this function is keeping track of the session flowing through...

I would think that stateful inspection at the application layer would be
doing the same...(at leastmaybe even extra stuff)

So if you have an smtp session open through a device that had statefull
inspection enabled for the application layer, then it would track the actual
communication and not the session per seof course... It would almost
seem weird to have stateful inspection in the higher levels without layer
3things that make you go hmmm. Tiem to go do some research...hehe

-Patrick

>>> "Steven A Ridder"  02/28/02 12:17PM >>>
I think it means the ability to check other layers such as 4-7.  For
example, the ability to check http or SMTP commands.

--
RFC 1149 Compliant


""John Green""  wrote in message
news:[EMAIL PROTECTED].;
> what is multilayer stateful inspection ?
>
> stateful inspection is understood fine. but what does
> the prefix multilayer denote or mean ?
>
> state refers to the state of a session information
> that is temporarily kept in a state table for open
> connections and is wiped or erased when the session
> ends. BUT what does multilayer mean here ?
>
> __
> Do You Yahoo!?
> Yahoo! Greetings - Send FREE e-cards for every occasion!
> http://greetings.yahoo.com 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36826&t=36817
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: caching server behind firewall [7:37004]

2002-03-01 Thread Patrick Ramsey

uhh  assuming you are using pix, you would just place this in yoru
inside acl...

acess-l inside permit ip host web.cac.svr any

you'll need a nat and a global statement as well

I generaly do not set up outbound acl's like this though I like to have
a separate permit statement per application...that way if I want to stop one
app I can.

-Patrick
>>> "george gittins"  03/01/02 02:25PM >>>
Is their any documentation what show show to configure a web caching server
behind a firewall i want to let any request go un filtered.

George Gittins
Internet Systems Manager
Weslaco, Tx 78599
Phone (956)9696557
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37007&t=37004
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pix NAT - Two to one [7:37179]

2002-03-04 Thread Patrick Ramsey

what is the overall goal?

>>> Gaz  03/04/02 03:06PM >>>
Hi all,

Has anybody tried NAT'ing two outside addresses to one internal (DMZ)
address on the same port (80) in some way.
Not too difficult to get round, as I can get the DNS of one site changed and
use the single address outside to single inside.
The advantage would be that when the web sites are separated, to two
machines inside, I would like to be able to change the pix settings
immediately rather than change DNS and wait a couple of days for DNS to
propagate.
I'm sure there may be some simple way of doing it, but I couldn't find it
whilst playing about today.

Any ideas welcome.

Thanks,

Gaz
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37192&t=37179
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Not the whole domain - Re: Delete VLAN [7:37254]

2002-03-05 Thread Patrick Ramsey

you have to pay attention to the CAT you are deleting the vlan fromif it
is in transparent mode, then the vlan, like the book says will be deleted
from the CAT only if it is in client mode, then no changes can be made
VLAN wise on the switch.  If it is the vtp server, then removing VLAN 5 will
delete VLAN 5 from that CAT and all the other CAT's in the vtp domain...

Read the quoted text you placed in your email to usIt describes the
process as well as anybody could describe it.  Are you havign problems
following/determining what a switch is? (Server, client, transparent)

-Patrick

>>> mlh  03/05/02 12:06PM >>>
Hi,Dave,

First, thank you for your answer.
But I really got confused. Pls read the following excerpt
about Deleting VLAN from the book of Cisco LAN Switching
written by Clark & Hamilton :
You can remove VLANs from the management domain using the clear vlan
vlan_number
command. For example, if you want to remove VLAN 5 from your VTP management
domain, you can type the command clear vlan 5 on a Catalyst configured as a
VTP server.
You cannot delete VLANs from a VTP client Catalyst. If the Catalyst is
configured in
transparent mode, you can delete the VLAN. However, the VLAN is removed only
from the
one Catalyst and is not deleted throughout the management domain. All VLAN
creations
and deletions are only locally significant on a transparent Catalyst.

So, according the above words, it just remove the portion of vlan 5 on that
Catalyst
which clear command was executed. Is it right?

>From Woody's answer to my last question :
Vlan 5 will also be cleared on all switches that are configured as
clients as well. Also, any port that is configured on those switches
will also lose their vlan assignment to vlan 5.

I raised another question: if Woody is right, the portion of vlan 5 on the
Catalysts
configured as clients will also be removed, then my question is: Will all
clients
or just clients configured from that server-Catalyst which clear command is
executed
be removed?

Sorry for taking you long time to read my questions.
Any suggestion would be welcome.


mlh

- Original Message -
From: "MADMAN" 
To: 
Sent: Tuesday, March 05, 2002 10:14 AM
Subject: Re: Delete VLAN [7:37254]


> the whole domain.
>
>   Dave
>
> mlh wrote:
> >
> > In a VTP domain environment, when you use the command "clear vlan 5"
> > on a Catalyst configured as a VTP server, do you actually remove vlan 5
> > only from that Catalyst or from all Catalysts in that VTP domain?
> >
> > Thank you.
> --
> David Madland
> Sr. Network Engineer
> CCIE# 2016
> Qwest Communications Int. Inc.
> [EMAIL PROTECTED] 
> 612-664-3367
>
> "Emotion should reflect reason not guide it"
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37288&t=37254
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Stupid 2500 confreg question [7:37287]

2002-03-05 Thread Patrick Ramsey

like Dave suggested before, put a break out on it and go from thereyou
may find that the serial port is expecting cts/rts and one of the pins are
severed.  I'm not sure what cisco requires to be 'live' on their
2500'san extremely half-assed search on google didn't yield anythign too
interestingbut I'm sure you can find it out there...  :)

-Patrick

>>> "Craig Columbus"  03/05/02 12:17PM >>>
The cable is good and scroll lock isn't on.  Same PC setup and cable work 
fine on other 2500 series.  I haven't run into this particular issue before.

Craig


At 11:50 AM 3/5/2002 -0500, you wrote:
>Have you tried a different cable?
>
>
>- Original Message -
>From: "Craig Columbus" 
>To: 
>Cc: 
>Sent: Tuesday, March 05, 2002 11:18 AM
>Subject: Stupid 2500 confreg question
>
>
> > Has anyone run into an issue where a 2500 series router won't respond to
> > console input?
> > Here's the deal:
> > The PC is running 9600-8-N-1 and is connected to the 2500 console port.
> > The router has had nvram erased and is being booted for the first time.
> > Upon boot, the normal boot process is seen on the monitor screen.
> > When prompted to enter configuration dialogue, it's not possible to input
> > anything on the router.  Typing does nothing and there is no response
from
> > the router.
> > If Ctrl-F6-Break is pressed during boot, the router goes to the > prompt,
> > but after that, the router still won't accept any input from the console
>port.
> >
> > Has anyone experienced this issue?  Is this a config register problem? 
If
> > so, is there a fix other than experimenting with different settings on
the
> > PC side?  If not, does anyone have an answer?  Could it be bad boot ROM?
> >
> > Thanks,
> > Craig
> > _
> > Commercial lab list: http://www.groupstudy.com/list/commercial.html 
> > Please discuss commercial lab solutions on this list.
>_
>Commercial lab list: http://www.groupstudy.com/list/commercial.html 
>Please discuss commercial lab solutions on this list.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37291&t=37287
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Voice over IP [7:37298]

2002-03-05 Thread Patrick Ramsey

2600 is enough actualy Cisco's vg200 is a modified 2600... (that is what
is used as the voip gateway)  That gateway can also function as the call
manager but you lose a lot fo functionallity (it is normaly used as a
back up call manager)  Say your call mnager is across a wan link and the wan
link goes down...the 2600/vg200 will act as a temp call manager until the
wan link comes back up, allowing all local calls.  And if you bring a
separate T into the 2600/vg200 then it can also route outbound calls if the
wan link is down.

If you plan on using a full featured call manager server, then you will need
to contact cisco for a demo.

-Patrick

>>> "[EMAIL PROTECTED]"  03/05/02 01:07PM >>>
Greetings all,

What is the minimum equipment I need to setup/test VoIP?  I've a lot
26XX and 36XX routers around here.  Any suggestions would be great.

ThanksNabil
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37303&t=37298
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Slight point [7:37298]

2002-03-05 Thread Patrick Ramsey

heh..well yeah...how many of us have ip sioftware phones on our machines... 
but how fun is that to play with   There's not a whole lot of experience
gained either just setting up a couple'a ip phones...I think the amazement
would wear off in about 5 minutes... :)

"Hey Bob!"
"Yeah!"
"Can ya hear me?"
"Yeah!"
"Cool!"
"now what?"
"uhhh...tear it down and use wireless nics on our handhelds"

repeat process..

"Hey Bob!"
"Yeah!"
"Can ya hear me?"
"Yeah!"
"Cool!"
"now what?"

:) I'm just in one of those crazy moods today

>>> "Chris Charlebois"  03/05/02 02:49PM >>>
VoIP does not require a Call Manager.  VoIP is just that, Voice over IP.  It
does not specify any call features and only extremely limited call
handling.  Use of a Call Manager implies IP Telephony, which is an
alternative to PBX switches.  IP Telephony includes complex call handling,
call routing, and features like forwarding, transfering, on-hold,
conferencing, etc.

VoIP (and any VoX) can be used as a point-to-point toll bypass solution,
using traditional PBX switches to provide the call routing and other
features.  However, for any kind of certification, all you typically need to
do is make a phone ring, which can be done without IP Telephony.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37317&t=37298
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: the RD [7:37401]

2002-03-06 Thread Patrick Ramsey

Dude... If you just ask a question, it can be answered as soon as you
say "do not violate nda" or talk about the exam, yadda yadaa...you ruin the
chances of getting the answer you want

Just ask... If somebody answers you, there is nothing to prove it has
anything to do with any test/exam...

-Patrick

>>> "Mckenzie Bill"  03/06/02 10:08AM >>>
Without Violating the NDA, I was just wondering how important it is to know
how to convert to the RD into Hex.

Thanks.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37404&t=37401
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Problems with Nortel [7:37403]

2002-03-06 Thread Patrick Ramsey

do you mean application level 'cutting' or acess across the t1 in general? 
I mean an extended acl can block his access into the router preventing him
from saturatin the T

-Patrick

>>> "David j"  03/06/02 10:33AM >>>
I know that this is a Cisco forum, but anybody has been working with Nortel
BPS2000 and BayStack 450?
We have bought some BPS2000 and Nortel have been having troubles with
cascade and fiber modules for a long time.
We would be interested in talking with someone who is working with this kind
of equipment.
By the way, anybody knows a Nortel forum? in the archives people said that
there is no one, but perhaps someone has new information.

Off the topic. Do you know how to cut a specific connection in a Cisco 2600?
I mean, if someone is overloading the line how can I manage to cut (only)his
connection?
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37408&t=37403
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ani discovery problems (solution) [7:37471]

2002-03-06 Thread Patrick Ramsey

Ok boys and girls,

Setting up Cisco works lms with ani server doing autodiscovery:

orginal problem: ANI was doing discovery, export to RME was configured but
not excepting data.

Campus manager had no topology services and basicaly was all jacked up.

solution:

Change url from localhost to ip address.

It took TAC maybe 30 seconds to solve the problem... the first question out
of his mouth was "what url are you pointing to?"

meanwhile back at the ranch, 16 man hours wasted... heha

-Patrick


>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37471&t=37471
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Sharing IP address - int sc0 & int vlan 1 [7:37624]

2002-03-07 Thread Patrick Ramsey

maybe I am not interpreting this correctly...but if you do what I think you
are saying you want to do, you would lose connectivity to one of the
hosts...I mean...how would you be able to telnet into the switch portion to
make a change if your router had the same ip?

-Patrick

>>> "Tim Booth"  03/07/02 09:48PM >>>
Does anyone know of a possible configuration where the ip address that
is assigned to a Cat5k sc0 interface can be shared with a vlan interface
on the Cat5k RSM?

Kind Regards,
Tim Booth
MCDBA, CCNP, CCDP, CCIE written
-
Those who would give up essential liberty to purchase a little temporary
safety deserve neither liberty nor safety.
Benjamin Franklin, 1759
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37630&t=37624
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Infrastructure Upgrade..... [7:37627]

2002-03-07 Thread Patrick Ramsey

Well,

You did pick a pretty expensive switch to purchase...hehe

the 1900's are 10mb to the desktop... You'll see some improvement over 10mb
hubs on the lan but across the frame connection, it's really irrelevant. 
Are you looking to increase lan speed?

In this day in age, I never reccommend hubs...but if you are really tight on
cash flow, you would probably do better to purchase a 12 port 100mb switch
and 8 100mb hubs.

-Patrick

>>> "Juan Blanco"  03/07/02 10:27PM >>>
Team,

I am in the process of upgrading all  hubs in 4 different sites, each site
has 8 hubs, I will replace each site with a 2950(24 ports)10/100mbs. I will
connect each switch(2,3,4) to the switch(1) on the basement where a router
will be available to connect to the Frame Relay cloud.

Questions:

Will it make more sense to get the 1900 switch(10mbs) and not the 2950
Will I be able to set any one port to full(100mbs) on the 2950
Will I be able to set up vlans and isl (as long as my route has a
fastethernet port)
Is this the appropriate replacements for the hubs(we don't have a lot of
money to spend)
Thanks,


JB
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37634&t=37627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Infrastructure Upgrade..... [7:37627]

2002-03-08 Thread Patrick Ramsey

1 24 port hub hanging off of a switch port will be in it's own collision
domain...and will not be that bad at all.  Broadcasts however will not
change... all f's get forwarded through every port on a switch or a hub.

-Patrick

>>> "Juan Blanco"  03/07/02 11:33PM >>>
Actually what we are trying to do is increase speed, eliminate collisions
and reduce any kind of broadcasting in the LAN....

-----Original Message-
From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, March 07, 2002 11:19 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED] 
Subject: Re: Infrastructure Upgrade. [7:37627]


Well,

You did pick a pretty expensive switch to purchase...hehe

the 1900's are 10mb to the desktop... You'll see some improvement over 10mb
hubs on the lan but across the frame connection, it's really irrelevant.
Are you looking to increase lan speed?

In this day in age, I never reccommend hubs...but if you are really tight on
cash flow, you would probably do better to purchase a 12 port 100mb switch
and 8 100mb hubs.

-Patrick

>>> "Juan Blanco"  03/07/02 10:27PM >>>
Team,

I am in the process of upgrading all  hubs in 4 different sites, each site
has 8 hubs, I will replace each site with a 2950(24 ports)10/100mbs. I will
connect each switch(2,3,4) to the switch(1) on the basement where a router
will be available to connect to the Frame Relay cloud.

Questions:

Will it make more sense to get the 1900 switch(10mbs) and not the 2950
Will I be able to set any one port to full(100mbs) on the 2950
Will I be able to set up vlans and isl (as long as my route has a
fastethernet port)
Is this the appropriate replacements for the hubs(we don't have a lot of
money to spend)
Thanks,


JB
>>>>>>>>>>>>>  Confidentiality Disclaimer   >>>>>>>>>>>>  Confidentiality
Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37655&t=37627
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: application to test multicast routing [7:37646]

2002-03-08 Thread Patrick Ramsey

pcanywhere uses multicast when multtple clients connect to it...

>>> "colin newman"  03/08/02 01:53AM >>>
Hi

I?m currently studying for the BCMSN test and was looking for an application
to test multicast routing in my lab.  Any suggestions?  The lab consists of
some 2500?s, a 2620, a Cat 1900, a Cat 2926T, and some Linux boxes and a
Windows 2000 box.

Thanks

Colin
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37656&t=37646
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Free Cisco Secure ACS Server [7:37797]

2002-03-11 Thread Patrick Ramsey

I believe it is free for linux

>>> "Mike Sweeney"  03/10/02 01:53PM >>>
While I dont know if ACS was free.. the TACACS server was free.  I have a
few different TACACS servers and docs for downloading at:

www.packetattack.com/downloads.html 

MikeS
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37858&t=37797
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISL or 802.1q? [7:37859]

2002-03-11 Thread Patrick Ramsey

well here is a quote from cisco's site

http://www.cisco.com/warp/public/473/43.html

"Catalyst 2950 series switches only support 802.1q trunking. They do not
support ISL trunking"

and the 2950 is one of their best of breed switches...maybe this means they
will begettign rid of isl soon...

-Patrick

>>> "Audy Bautista"  03/11/02 10:18AM >>>
I've always had the same question in my head.  In our environment (all
Cisco; at least 4 6509s and about a dozen 2948s, some 3548s, 2924s, etc.) we
use 802.1q mostly because the 2948s don't support ISL.  We even trunk the
6509s using 802.1q even though of course 6509s support ISL and 802.1q.  But
I don't know which one is better, and I've done similar searches in the past
for more info; no luck.

Audy



""Kaminski, Shawn G""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Repost. First one didn't make it.
>
> >  -Original Message-
> > From: Kaminski, Shawn G
> > Sent: Friday, March 08, 2002 2:54 PM
> > To: 'Groupstudy'
> > Subject: ISL or 802.1q?
> >
> > After a search of the archives and reading the posts, I realize this has
> > been discussed before. I also searched CCO. However, there didn't seem
to
> > be a clear answer on what I was looking for. We have two Distribution
> > Cisco 6509 switches trunked together and there is an argument as to
> > whether we should use ISL or 802.1q on this trunk. Our network is all
> > Cisco. Some people are saying 802.1q on everything because Cisco is
> > leaning towards this direction anyway. Some say ISL should be used
between
> > the Distribution switches and 802.1q between Distribution and Access
> > switches. I don't know why because I couldn't find anything on this.
Some
> > of the people here keep saying that ISL has more "features" than 802.1q.
> > Could some of you please give your opinions about what you would use
(ISL
> > or 802.1q) in this situation?
> >
> > Thanks,
> > Shawn G. Kaminski
> > EDS Network Engineering - DowNET
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37864&t=37859
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISL or 802.1q? [7:37859]

2002-03-11 Thread Patrick Ramsey

I know the older 2900's so per vlan spannign tree...heh I found out the hard
way.

>>> "Kent Yu"  03/11/02 01:31PM >>>
Dave,

If memory serves, cisco's dot1q implementation always uses per vlan
spannging tree.

Kent


""MADMAN""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> add the CAT4K to your list of dot1q only devices.  The old arguement
> of dot1q not supporting per VLAN spanning is also moot.
>
>   Dave
>
> Patrick Ramsey wrote:
> >
> > well here is a quote from cisco's site
> >
> > http://www.cisco.com/warp/public/473/43.html 
> >
> > "Catalyst 2950 series switches only support 802.1q trunking. They do not
> > support ISL trunking"
> >
> > and the 2950 is one of their best of breed switches...maybe this means
they
> > will begettign rid of isl soon...
> >
> > -Patrick
> >
> > >>> "Audy Bautista"  03/11/02 10:18AM >>>
> > I've always had the same question in my head.  In our environment (all
> > Cisco; at least 4 6509s and about a dozen 2948s, some 3548s, 2924s,
etc.)
> we
> > use 802.1q mostly because the 2948s don't support ISL.  We even trunk
the
> > 6509s using 802.1q even though of course 6509s support ISL and 802.1q.
But
> > I don't know which one is better, and I've done similar searches in the
> past
> > for more info; no luck.
> >
> > Audy
> >
> > ""Kaminski, Shawn G""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Repost. First one didn't make it.
> > >
> > > >  -Original Message-
> > > > From: Kaminski, Shawn G
> > > > Sent: Friday, March 08, 2002 2:54 PM
> > > > To: 'Groupstudy'
> > > > Subject: ISL or 802.1q?
> > > >
> > > > After a search of the archives and reading the posts, I realize this
> has
> > > > been discussed before. I also searched CCO. However, there didn't
seem
> > to
> > > > be a clear answer on what I was looking for. We have two
Distribution
> > > > Cisco 6509 switches trunked together and there is an argument as to
> > > > whether we should use ISL or 802.1q on this trunk. Our network is
all
> > > > Cisco. Some people are saying 802.1q on everything because Cisco is
> > > > leaning towards this direction anyway. Some say ISL should be used
> > between
> > > > the Distribution switches and 802.1q between Distribution and Access
> > > > switches. I don't know why because I couldn't find anything on this.
> > Some
> > > > of the people here keep saying that ISL has more "features" than
> 802.1q.
> > > > Could some of you please give your opinions about what you would use
> > (ISL
> > > > or 802.1q) in this situation?
> > > >
> > > > Thanks,
> > > > Shawn G. Kaminski
> > > > EDS Network Engineering - DowNET
> > >>>>>>>>>>>>>  Confidentiality DisclaimerThis email and any files
> transmitted with it may contain confidential and
> > /or proprietary information in the possession of WellStar Health System,
> > Inc. ("WellStar") and is intended only for the individual or entity to
whom
> > addressed.  This email may contain information that is held to be
> > privileged, confidential and exempt from disclosure under applicable
law.
> If
> > the reader of this message is not the intended recipient, you are hereby
> > notified that any unauthorized access, dissemination, distribution or
> > copying of any information from this email is strictly prohibited, and
may
> > subject you to criminal and/or civil liability. If you have received
this
> > email in error, please notify the sender by reply email and then delete
> this
> > email and its attachments from your computer. Thank you.
> >
> > 
> --
> David Madland
> Sr. Network Engineer
> CCIE# 2016
> Qwest Communications Int. Inc.
> [EMAIL PROTECTED] 
> 612-664-3367
>
> "Emotion should reflect reason not guide it"
>>>>>>>>>>>>>  Confidentiality Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37885&t=37859
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VLoFR and atm popularity [7:38003]

2002-03-12 Thread Patrick Ramsey

Cisco support vlan tagging over frame circuits?

I was looking at a Tierra networks router and it was listed as one of it +'s.

Does Cisco even support this?  This kinda creeps up even further on the +'s
of atm and how long atm is going to survive.

Other than being capable of joining elans at oen fac. from another, can
anyone even think of why atm still exists?  With wdm and all the newer
technology coming around the corner, why is atm still so saught after for
long distance links?

-Patrick


>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38003&t=38003
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLoFR and atm popularity [7:38003]

2002-03-13 Thread Patrick Ramsey

the largest I have had expereince with is oc-12 on an oc-48 smart
ring...There's no difference in setup really.  hell I would go for the
cheapest!

>>> "Mike Mandulak"  03/13/02 01:19AM >>>
Do you think I need a couple for my home lab?  The largest I've worked
with are oc-3's.

- Original Message -
From: "Mike Bernico" 
To: "Mike Mandulak" ; 
Sent: Wednesday, March 13, 2002 12:24 AM
Subject: RE: VLoFR and atm popularity [7:38003]


> Heh, for only about $240,000 list you too can own a 1 port oc-192 POS card
for a 124xx series GSR that will do not only PPP and HDLC over sonet, but
also frame relay encapsulation...
>
> Seriously though, we aren't ready for 10Gig yet, but when the time comes
I'm considering using 10 Gig E between our core routers instead.  I'm not
sure how serious I am about that, but the line cards will be less than half
the cost.  Anyone other SPs out there considering that?
>
> Mike
>
> -Original Message-
> From: Mike Mandulak [mailto:[EMAIL PROTECTED]] 
> Sent: Tue 3/12/2002 5:14 PM
> To: [EMAIL PROTECTED] 
> Cc:
> Subject: Re: VLoFR and atm popularity [7:38003]
>
>
>
> Out of curiosity, what hardware/protocol do you use for an OC-192?
>
> - Original Message -
> From: "Mike Bernico"
> To:
> Sent: Tuesday, March 12, 2002 5:28 PM
> Subject: RE: VLoFR and atm popularity [7:38003]
>
>
> > I work for a large ISP.  As far as I'm concerned there is no such thing
as
> a
> > high speed ATM link. In the cisco carrier class ATM world oc-12 is as
fast
> > as you go.  Unless of course you use the mgx 8850, the biggest piece of
> junk
> > ever painted blue and stamped with a bridge.  ATM is still a great way
to
> do
> > statistical multiplexing, a great revenue stream for carriers and
popular
> > among the "connect all the sites in my enterprise together with DS3s
> > crowd."  ATM circuit emulation is darn handy for legacy video.  It's
days
> > are numbered in larger networks.  It's all but extinct in the > OC-12
> > networks, but it's going to be around for a while for smaller networks.
> >
> >
> > Mike
> > ---
> > Mike Bernico [EMAIL PROTECTED] 
> > Illinois Century Network  http://www.illinois.net 
> > (217) 557-6555
> >
> >
> > > -Original Message-
> > > From: Larry Letterman [mailto:[EMAIL PROTECTED]] 
> > > Sent: Tuesday, March 12, 2002 3:00 PM
> > > To: [EMAIL PROTECTED] 
> > > Subject: RE: VLoFR and atm popularity [7:38003]
> > >
> > >
> > > quite possibly because the big telecom providers
> > > connect most of their pops/CO's with high speed
> > > atm links...
> > >
> > >
> > > Larry Letterman
> > > Cisco Systems
> > > [EMAIL PROTECTED] 
> > >
> > >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > > Patrick Ramsey
> > > Sent: Tuesday, March 12, 2002 12:25 PM
> > > To: [EMAIL PROTECTED] 
> > > Subject: VLoFR and atm popularity [7:38003]
> > >
> > >
> > > Cisco support vlan tagging over frame circuits?
> > >
> > > I was looking at a Tierra networks router and it was listed
> > > as one of it
> > > +'s.
> > >
> > > Does Cisco even support this?  This kinda creeps up even
> > > further on the +'s
> > > of atm and how long atm is going to survive.
> > >
> > > Other than being capable of joining elans at oen fac. from
> > > another, can
> > > anyone even think of why atm still exists?  With wdm and all the newer
> > > technology coming around the corner, why is atm still so
> > > saught after for
> > > long distance links?
> > >
> > > -Patrick
> > >
> > >
> > > >>>>>>>>>>>>>  Confidentiality DisclaimerThis email and any files
> > transmitted with it may contain
> > > confidential and
> > > /or proprietary information in the possession of WellStar
> > > Health System,
> > > Inc. ("WellStar") and is intended only for the individual or
> > > entity to whom
> > > addressed.  This email may contain information that is held to be
> > > privileged, confidential and exempt from disclosure under
> > > applicable law. If
> > > the reader of this message is not the intended recipient, you
> > > are hereby
&

RE: Stacking 3548s [7:38208]

2002-03-14 Thread Patrick Ramsey

This doesn't mean that you should do this though be careful with
openview... it starts acting squirly when you cluster switches.  And issuing
commands from a telnet session to manage 16 switches is flakey at best.  Now
if you are not a OV user and you have cisco works installed, clustering is
pretty cool.  Still not like having a separate ip on each switch, but decent.

-Patrick

out of curiosity, are you using registered addresses?  Or just
ultraconservative on the ip space?  :)

>>> "Kelly Cobean"  03/14/02 09:24AM >>>
Man, I'm glad you said that.  My boss (who did the ordering of all of our
Cat3548's) said the limit was 9He's a pretty smart guy, so I took him at
face value...Shame on me!  Thanks for the correctionThat helps alot!!!

Kelly Cobean

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Ladrach, Daniel E.
Sent: Thursday, March 14, 2002 8:12 AM
To: [EMAIL PROTECTED] 
Subject: RE: Stacking 3548s [7:38208]


Cisco Switch Clustering
Breakthrough Cisco Switch Clustering technology enables up to 16
interconnected Catalyst 3500 XL, Catalyst 2900 XL, and Catalyst 1900
switches, regardless of geographic proximity, to form a single IP management
domain. Cisco Switch Clustering supports a broad range of standards-based
connectivity options and configurations to deliver levels of performance
that are scalable to meet customer requirements. Switch Cluster connectivity
options for the Catalyst 3500 Series XL include Ethernet, Fast Ethernet,
Fast EtherChannel, low-cost Cisco GigaStack GBIC, Gigabit Ethernet, and
Gigabit EtherChannel connectivity. Because the technology is not limited by
proprietary stacking modules or stacking cables, Cisco Switch Clustering
expands the traditional stacking domain beyond a single wiring closet and
lets users mix and match interconnections to meet specific management,
performance, and cost requirements. Catalyst 3500 XL switches can be
configured either as command or member switches in a Cisco switch stack or
cluster. The command switch serves as the single IP address management point
and disburses all management instructions dictated by the network
administrator. Command switches can cluster up to 15 additional
interconnected member switches regardless of interconnection media.

Daniel Ladrach
CCNA, CCNP
WorldCom


-Original Message-
From: Thomas [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, March 14, 2002 2:59 AM
To: [EMAIL PROTECTED] 
Subject: Stacking 3548s [7:38208]


What's the maximum number of Catalyst 3548s can I stack them together?
Thanks!
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38237&t=38208
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MUX Vs Router [7:38258]

2002-03-14 Thread Patrick Ramsey

Well, they are two different pieces of equipment that do two different
thingsRouters take traffic from multiple layer 3 networks, allowing
comunication between them.  MUX's and DEMUX's take multiple layer 2 segments
and combine them to form one.

now, aside from that, there are vendors that sell "mux's" that route
traffic... such as http://www.tiaranetworks.com


These are routers in every sense of the word that can also aggregate
bandwidth through multiple serial connections.

hth,

-Patrick
>>>  03/14/02 01:00PM >>>
what's the simlar  and different , when to use mux and when to use router.?

Thanks :)
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38261&t=38258
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Packet loss on OSPF LAN [7:38397]

2002-03-15 Thread Patrick Ramsey

how have you decided that it is ospf?  Or have you?  And are you losing
packets because every other packet gets forwarded the wrong way?

if both paths out are equal, try monitoring the port that each router is
plugged into on the 6509 and match against your source address and say
icmp... send 100 pings to the end point and see if you see them across each
router... IF so, do they make it back to the 6509?  Where do they stop?  Do
you have asymetrical routing going on?  Is OSPF even funtioning properly? 
Are there any other protocols involved?  static routes?

-Patrick

>>> "travis marlow"  03/15/02 10:19AM >>>
I need to tap into the collective brain power of this list.  We have 4 7206
VXR's that are all plugged into a Cat 6509 on the same VLAN with two of the
routers tied to different upstream ISPs.  When I'm pinging through this
"core" I'm getting packet loss.  I don't understand why, since there is not
much of a load.  I've checked buffers, CPU, switch utilization...  Are there
any special considerations for running multiple OSPF routers on the same
segment.
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38416&t=38397
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TACACS+ Server [7:38324]

2002-03-15 Thread Patrick Ramsey

a copmputer?  I think most of the list has put together a machine or two.

>>> "Ray Smith"  03/15/02 02:25PM >>>
Solaris buddy.  Do you know how to build one?

>From: Brian 
>To: Ray Smith 
>CC: [EMAIL PROTECTED] 
>Subject: Re: TACACS+ Server [7:38324]
>Date: Thu, 14 Mar 2002 16:52:17 -0800 (PST)
>
>I suspect that depends slightly on the od u want to use?
>BSD, Linux, and Solaris will all run on that, which r u planning to use?
>
>   Bri
>
>On Thu, 14 Mar 2002, Ray Smith wrote:
>
> > Does anyone know how to build/setup a TACACS+ Server on a Sparc-5?
> >
> > Ray
> >
> >
> > _
> > Chat with friends online, try MSN Messenger: http://messenger.msn.com 
_
Send and receive Hotmail on your mobile device: http://mobile.msn.com 
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38479&t=38324
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: off topic: How to switch windows automatically? [7:38625]

2002-03-18 Thread Patrick Ramsey

write a macro that alt-tabs through the open windows...

>>> "sam sneed"  03/18/02 10:52AM >>>
Try a Winblows newsgroup.


""Sim, CT (Chee Tong)""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi..  We have install a big screen on the wall to monitor our network,
> servers.  We have several windows for each monitoring software. Only one
> Windows can occupy the screen at one time. But we want to switch between
> windows automatically.  Any software or scripts to do it?  FYI, we are
using
> windows 2000.
>
> Thanks
>
>
>
>
> ==
> De informatie opgenomen in dit bericht kan vertrouwelijk zijn en
> is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht
> onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en
> de afzender direct te informeren door het bericht te retourneren.
> ==
> The information contained in this message may be confidential
> and is intended to be exclusively for the addressee. Should you
> receive this message unintentionally, please do not use the contents
> herein and notify the sender immediately by return e-mail.
>
>
> ==
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38695&t=38625
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: off topic: How to switch windows automatically? [7:38625]

2002-03-18 Thread Patrick Ramsey

write a macro that alt-tabs through the open windows...

>>> "sam sneed"  03/18/02 10:52AM >>>
Try a Winblows newsgroup.


""Sim, CT (Chee Tong)""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi..  We have install a big screen on the wall to monitor our network,
> servers.  We have several windows for each monitoring software. Only one
> Windows can occupy the screen at one time. But we want to switch between
> windows automatically.  Any software or scripts to do it?  FYI, we are
using
> windows 2000.
>
> Thanks
>
>
>
>
> ==
> De informatie opgenomen in dit bericht kan vertrouwelijk zijn en
> is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht
> onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en
> de afzender direct te informeren door het bericht te retourneren.
> ==
> The information contained in this message may be confidential
> and is intended to be exclusively for the addressee. Should you
> receive this message unintentionally, please do not use the contents
> herein and notify the sender immediately by return e-mail.
>
>
> ==
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38696&t=38625
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: off topic: How to switch windows automatically? [7:38625]

2002-03-18 Thread Patrick Ramsey

Run linux as the host OS and install win2k in a vmware session.  (you'd be
surprised at how much more stable Microsoft is! (or maybe you wouldn't be
surprised)  hehe

>>> "Mark Odette II"  03/18/02 12:06PM >>>
Just to make your reply more useful, rather than critical,

Do you have a Unix Alternative suggestion??


Would be curious, as you so eloquently refer to current product the original
poster is using.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
sam sneed
Sent: Monday, March 18, 2002 9:53 AM
To: [EMAIL PROTECTED] 
Subject: Re: off topic: How to switch windows automatically? [7:38625]


Try a Winblows newsgroup.


""Sim, CT (Chee Tong)""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi..  We have install a big screen on the wall to monitor our network,
> servers.  We have several windows for each monitoring software. Only one
> Windows can occupy the screen at one time. But we want to switch between
> windows automatically.  Any software or scripts to do it?  FYI, we are
using
> windows 2000.
>
> Thanks
>
>
>
>
> ==
> De informatie opgenomen in dit bericht kan vertrouwelijk zijn en
> is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht
> onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en
> de afzender direct te informeren door het bericht te retourneren.
> ==
> The information contained in this message may be confidential
> and is intended to be exclusively for the addressee. Should you
> receive this message unintentionally, please do not use the contents
> herein and notify the sender immediately by return e-mail.
>
>
> ==
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38697&t=38625
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Is cable network really a shared medium? [7:38705]

2002-03-18 Thread Patrick Ramsey

depending on the carrier, docsis could be implemented...I have not tcpdumped
my current connection (through att) but I believe att does filter.

a quick search on google yielded some docsis info but I didn't see whether
or not it was done at the modem or the switch. I'm guessing the latter.  I
would hate to think I could go out and by any modem I wanted to and change
the way att does business... :)

-Patrick

>>> "sam sneed"  03/18/02 02:56PM >>>
I just changed services from DSL to cable modem. I have heard from people,
including verizon, that cable is not as secure as DSL becuase it is over a
shared medium. I connected to my cable modem and fired up my packet sniffer.
I did not see anyone elses traffic on the line so i am assuming the bandwith
is shared( a known fact about cable access) but is somehow filtered at the
cable modem(bridge). Does anyone know if this assumption is true and the
inside details of the how data is transmitted over the cable network? A link
to a whitepaer would be great.

thanks
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38714&t=38705
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Is cable network really a shared medium?(more info) [7:38718]

2002-03-18 Thread Patrick Ramsey

on further invesitgation,

Thirdly, and most importantly, DOCSIS provides a feature called Baseline
Privacy.  This is a very secure encryption method that protects data while
it resides on the RF plant.  That means that even if someone figures out a
way to get all of your downstream traffic from the RF carrier, which is
unlikely, if Baseline Privacy is enabled they still have to decrypt it.  A
case could be made that the RF portion of a Baseline Privacy enabled cable
plant is the most secure portion of the net.  Remember, however, that
Baseline Privacy only protects your signal while on the RF plant.  All
normal precautions for sending data out on the Internet still need to be
obeyed


http://www.docsis.org/faq.php3 



>>> "Patrick Ramsey"  03/18/02 03:32PM >>>
depending on the carrier, docsis could be implemented...I have not tcpdumped
my current connection (through att) but I believe att does filter.

a quick search on google yielded some docsis info but I didn't see whether
or not it was done at the modem or the switch. I'm guessing the latter.  I
would hate to think I could go out and by any modem I wanted to and change
the way att does business... :)

-Patrick

>>> "sam sneed"  03/18/02 02:56PM >>>
I just changed services from DSL to cable modem. I have heard from people,
including verizon, that cable is not as secure as DSL becuase it is over a
shared medium. I connected to my cable modem and fired up my packet sniffer.
I did not see anyone elses traffic on the line so i am assuming the bandwith
is shared( a known fact about cable access) but is somehow filtered at the
cable modem(bridge). Does anyone know if this assumption is true and the
inside details of the how data is transmitted over the cable network? A link
to a whitepaer would be great.

thanks
>>>>>>>>>>>>>  Confidentiality Disclaimer   >>>>>>>>>>>>  Confidentiality
Disclaimer   >>>>>>>>>>>>  Confidentiality Disclaimer   <<<<<<<<<<<<<<<<
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38718&t=38718
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Rack [7:38796]

2002-03-19 Thread Patrick Ramsey

I didn't see any with shelves but this is what all my buddies say is good
stuff!

http://www.geocities.com/Yosemite/Geyser/9050/

>>> "[EMAIL PROTECTED]"  03/19/02 10:57AM >>>
Hello all,

I am looking for a rack with shelves as well, any advice would be
appreciated.  Cheap would be good too!   :-)





Kevin McCarty
Computer Sciences Corporation
Defense Sector
618 622 4757


   

   
"Woods,
Randall, To:
[EMAIL PROTECTED] 
SOLCM"  
cc:
   
   
Sent
by:
   
nobody
   

   

   
03/19/2002
09:32
AM
   
Please
respond
to
   
"Woods,
   
Randall,
   
SOLCM"
   

   





Hi all,
I'm trying to find a rack for my routers. Does anyone have a good
source?

Woody
CCNP
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38810&t=38796
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: SNMP Packet question [7:38824]

2002-03-19 Thread Patrick Ramsey

I think the rrdtool has some of this built into it...it's a great spinoff of
mrtg... (it's bascialy the engine and you do with it as you please 
check out this link.

http://people.ee.ethz.ch/~oetiker/webtools/rrdtool/ 

and look at so of the graphs people are doing there are also some sample
scripts there!

hth,

-Patrick

>>> "sam sneed"  03/19/02 12:33PM >>>
Hello group,

I am trying to write a script in perl to monitor interface errors and total
traffic during work hours. I'm doing an snmpwalk to get the info. I want the
total amount of packets in and out of an interface so I can calculate the %
of errors on the line.

Cisco says on their site : http://www.cisco.com/warp/public/477/SNMP/5.html 

that
  ifInNUcastPkts (.1.3.6.1.2.1.2.2.1.12) are counts of inbound broadcast
and multicast packets

  ifOutUcastPkts (.1.3.6.1.2.1.2.2.1.17) are counts of outbound
broadcast and multicast packets


besides In and Out whats the difference? I thought Ucast meant unicast and
NUcast meant broadcast and multicast.
When queried, every int gives NUcast and Ucast which are different values.
How could Cisco define them as the same.

Is this a misprint?
Lastly I'm assuming that total packets would be the sum of the 2(unicast +
multicast/broadcast).
Is this assumption correct?


ps i don't want ifOutOctets  because i want the # of packets not bytes.

thankd
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38833&t=38824
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PIX performance problem again ! [7:38955]

2002-03-21 Thread Patrick Ramsey

I would hate to ask the obvious but are your interfaces showing high error
rates?  Are they at half duplex?  Are they at 10mb?  Is the switch the
inside interface is plugged into stable?  what about the router on the other
side?

-Patrick

>>> "Mohannad Khuffash"  03/20/02 02:47PM >>>
Dear all,
My problem with th PIX still present! the throughput between my inside
cleints an the out side ftp server still very low ! the only node between
them is the PIX,and  the speed cann't be more than 50K B/s, i have checked
the two cisco fixing problem for such like these cases: DNS pointer and
IDENT protocols, but the problem is still present  Please can any one
help me ?

Thanks in advance for your efforts

--







Mohannad N. Khuffash
Network Administrator
Palestine Telecommunication Company
Tel: 00972-02-2982330
Fax:00972-02-2980235
>  Confidentiality Disclaimer   
This email and any files transmitted with it may contain confidential and
/or proprietary information in the possession of WellStar Health System,
Inc. ("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be
privileged, confidential and exempt from disclosure under applicable law. If
the reader of this message is not the intended recipient, you are hereby
notified that any unauthorized access, dissemination, distribution or
copying of any information from this email is strictly prohibited, and may
subject you to criminal and/or civil liability. If you have received this
email in error, please notify the sender by reply email and then delete this
email and its attachments from your computer. Thank you.






Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39080&t=38955
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



  1   2   3   4   >