unsubscribe [7:4024]

2001-05-10 Thread Paul Carco

unsubscribe

__
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=4024t=4024
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Central Hub Site with six T1's. [7:3841]

2001-05-10 Thread Paul Carco

Why not consider a Hub and Spoke VPN solution..?

Central Site - T1 to ISP
@6 Remotes T1's to ISP

Utilize IPSEC to establish secure vpn tunnels to the
Central Site and if you need to have spoke to spoke
connectivity then GRE Tunnels for dynamic routing is
an option but since you said static would suffice then
its even easier.  

Upside: Do not need to have a Hub Router with 6 Serial
interfaces.  By Having local internet access at the 6
remotes your the hero because you would not have to
support Web traffic to your Hub since you would only
encrypt traffic destined for the protected networks at
the hub site. 

Downside: Don't see any.. I think that more and more
Frame Relay networks will get replaced with a VPN
topology like I am suggesting.

Hope this helps..

Regards,
Paul

--- Brian  wrote:
 On Wed, 9 May 2001, Daniel Cotts wrote:
 
  Your central site also needs LAN interfaces. Any
 Internet connectivity? A
  good bet would be the 3640 with two NM-4T cards
 assuming that you want
  external CSU/DSUs. Not sure of the card and port
 density for built-in
  CSU/DSU. Add LAN ports as needed.
  Now if you don't want Smartnet and are into
 Jurassic networking then
  consider a used 4500/4700 or a 7000.
 
 I actually find the latest 11.2 images for the 7000
 to be quite good.
 Especially the S train (service provider).  You can
 do all your normal
 stuff.  Sure no CEF, but just about all else you
 need.
 
 Brian
 
 
 
   -Original Message-
   From: SJ [mailto:[EMAIL PROTECTED]]
   Sent: Wednesday, May 09, 2001 11:32 AM
   To: [EMAIL PROTECTED]
   Subject: Central Hub Site with six T1's.
 [7:3841]
  
  
   Hello,
  
   I hope everyone is doing well today.  Since
 this is my first time
   writing to the Cisco groupstudy I would like to
 say that I am
   glad to be a
   member.  As each of you I to hope to someday
 reach CCIE
   status.  However, as
   all of us I have to support myself and my family
 so work is
   always number
   one priority.  With that being said I have a
 work related
   question.  I have
   a customer who has 6 remote sites and a central
 site.  Each
   remote site will
   be tied into the hub (central site) via T1's. 
 Frame relay is
   not an option
   because all of the sites are within about 15
 miles of the
   central site I
   have chosen as their hub, and their bandwidth
 needs are such
   that a T1 is
   feasible.  So, now to my question.  Which cisco
 router
   supports 6 or more T1
   connections.  This customer is on a limited
 budget, as such I will be
   deploying cisco 1750's at each remote site,
 however I want to
   tie all of the
   remote sites into the central site, so I need a
 router with enough
   interfaces to support 6 or more T1's.  My goal
 is that each
   remote site will
   have default routes to the central site, and at
 the central
   site I will
   create static routes to the remote sites, as
 there is no need to run a
   routing protocol in this configuration.  Can
 anyone give me a
   good central
   site router (cheap) that supports six or more T1
 interfaces.
  
  
  
  
   Thanks,
  
  
   SJ
   FAQ, list archives, and subscription info:
   http://www.groupstudy.com/list/cisco.html
   Report misconduct
   and Nondisclosure violations to
 [EMAIL PROTECTED]
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to
 [EMAIL PROTECTED]
 
 
 
 ---
 We have MOVED!! Make note of our new address!!!
 
 I'm buying / selling used CISCO gear!!
 email me for a quote
 
 Brian Feeny,CCDP,CCNP+VAS Scarlett Parria
 [EMAIL PROTECTED] [EMAIL PROTECTED]
 318-213-4709  318-213-4701
 
 Netjam, LLC http://www.netjam.net
 333 Texas St.   VISA/MC/AMEX/COD
 Suite 1401  30 day warranty
 Shreveport, LA 71101Cisco Channel Partner
 p: 318-212-0245
 f: 318-212-0246
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


__
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=4040t=3841
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: cant access WAn from PC but can from router [7:3958]

2001-05-10 Thread Paul Carco

If you do a trace route what are you seeing?  I know
you said you configured the workstations correctly but
check the default gateway's of these machines...

--- Brian  wrote:
 On Thu, 10 May 2001, John Brandis wrote:
 
  G'Day all for the second time today.
  2 questions:
 
  Question 1: I have a 4MB HDSL link coming into my
 2503 serial 0 port. Can I
  check the bandwidth to make sure that this is what
 I really have in terms
 of
  BW...
 
 check the clockrate on show controllers
 
 
  Question 2: Have configured the router to connect
 to the HDSL network and
 the
  ethernet network. That part is fine, I can access
 hosts on both networks
  (ping) from the router. However, when I go to my
 workstation and I
 CORRECTLY
  configure the IP settings, all I can access is the
 router and nothing over
  the
  WAN link. I made sure that there are NO ACL's
 going against me and I have
 the
  route static route configured correctly. What can
 I try now /
 
 
 
 The ip's assigned to the ethernet interface of the
 2503, are these IP's
 that your upstream routed to you, or are these IP's
 you just made up
 yourself?  Are you running NAT?  The IP's you use on
 the e0 interface must
 be IP's that were routed to you from the HDSL
 network provider.
 Alternativly, you can use RFC1918 space and run NAT.
 
 Brian
 
 
  thanks
  [EMAIL PROTECTED]
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to
 [EMAIL PROTECTED]
 
 
 
 ---
 We have MOVED!! Make note of our new address!!!
 
 I'm buying / selling used CISCO gear!!
 email me for a quote
 
 Brian Feeny,CCDP,CCNP+VAS Scarlett Parria
 [EMAIL PROTECTED] [EMAIL PROTECTED]
 318-213-4709  318-213-4701
 
 Netjam, LLC http://www.netjam.net
 333 Texas St.   VISA/MC/AMEX/COD
 Suite 1401  30 day warranty
 Shreveport, LA 71101Cisco Channel Partner
 p: 318-212-0245
 f: 318-212-0246
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


__
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=4063t=3958
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: telnet access to pix

2001-02-12 Thread Paul Carco

Frank,
  
  Telnet access is only allowed from the inside
interface UNLESS you have IPSEC (Encryption standard
for VPN's) configured and then you would do this

telnet 192.168.1.1 255.255.255.0 outside

Paul

--- Frank Kim [EMAIL PROTECTED] wrote:
 Hey guys,
 I got eth0= security0 and eth1=security100.  I'm
 able to telnet from the
 inside network.  Is there any way for me to telnet
 from the outside?  Pix
 has disabled this by default.
 
 -Frank
 
 
 _
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail - only $35 
a year!  http://personal.mail.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IP Tunneling - Typical requirement

2001-02-01 Thread Paul Carco

If I understand your requirements correctly, what you
need to do is configure and IPSEC tunnel between your
network and the customer network. Many companies that
are doing business via the internet use IPSEC to
create secure encrypted access into their intranets or
extranets.  If you not concerned about security of
clear text traffic between your companie and your
partners then just simply open up your router/firewall
to permit this connection.
--- A  Mateen [EMAIL PROTECTED] wrote:
 Hi !
 
 I have a typical requirement as follows
 1. I have a public network
 2. One of the customers is having the public IP from
 other service provider.
 3. my requirement is that I want to route the IP
 packets of the other ISP network via my routing
 policies and my IP network.
 4. I was planning to put a tunnel ip over ip and
 convert the other ISP IPs into my registered public
 IPs at  interface with both the routers.
 5. I am looking for such configuration
 
 Pls guide me to do so
 

_
 Chat with your friends as soon as they come online.
 Get Rediff Bol at
 http://bol.rediff.com
 
 
 
 
 _
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


__
Get personalized email addresses from Yahoo! Mail - only $35 
a year!  http://personal.mail.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]