Re: pix and xlate timeouts [7:52048]
I've also noticed that a CLEAR ARP will resolve the problem temporarily. Very, very strange behaviour indeed. Paul [remove 'nospam' from my e-mail address to reply] David Armstrong wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Yes, and they're very annoying. I installed a 506 last Friday. Mostly the problem is with users who are receiving their IP's via DHCP configured on the PIX but occasionally a user with a static address has this problem. CLEAR XLATE temporarily resolves the problem. I was getting ready to delve into the solution on CCO but thought I'd check here first. Evidently I'm not alone. I'll reply here when the answer is found. David Armstrong Jorge Gittins wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Has anyone here experienced problems with the new ios 6.2 on the pix. I have noticed when I installed it that some users can connect to the internet until I issue clear xlate command. These are my current timeouts: timeout xlate 3:00:00 timeout conn 12:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 s ip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=52227t=52048 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: NAT dilemma [7:42762]
John, Two things I can think of: 1. The cable provider is probably providing you with a default gateway *anyways* in your DHCP request. Likely, you don't need that static route after all. 2. As far as I can tell, your route wouldn't work in any event. Routing out via a physical interface works fine in serial point-to-point situations when the other next-hop router is going to receive the packet anyway... but routing out via an Ethernet interface will likely just *drop* the packet onto that broadcast domain (subnet) without pointing it to a specific next hop. Keep in mind that Ethernet is a broadcast-based multi-access medium. By routing to the physical Ethernet interface, you're basically dropping the packet on the wire, not shoving it directly to the next-hop router. Hope this helps! Paul John Zaggat wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi guys/gals, I am using a 1605R with 2 ethernet interfaces as gateway to my cable service provider. My dilemma is that when I put a default route to outside NAT stops working. I verified this by using a sniffer. Without default route everything seems to work fine but it's just bugging the hell out of me that why is it so. Can some one enlighten me ? Here is my config: Router#sh run Building configuration... Current configuration : 939 bytes ! version 12.2 service timestamps debug uptime service timestamps log uptime no service password-encryption service udp-small-servers service tcp-small-servers ! hostname Router ! ! ip subnet-zero ip name-server 66.75.160.42 ip name-server 66.75.160.41 ip dhcp excluded-address 192.168.1.1 192.168.1.10 ! ip dhcp pool INSIDE network 192.168.1.0 255.255.255.0 default-router 192.168.1.1 dns-server 66.75.160.42 ! ip ssh time-out 120 ip ssh authentication-retries 3 ! ! ! ! interface Ethernet0 ip address dhcp ip nat outside no cdp enable ! interface Ethernet1 ip address 192.168.1.1 255.255.255.0 ip nat inside no cdp enable ! ip nat inside source list 1 interface Ethernet0 overload ip classless ip route 0.0.0.0 0.0.0.0 Ethernet0 no ip http server no ip pim bidir-enable ! access-list 1 permit 192.168.1.0 0.0.0.255 no cdp advertise-v2 no cdp run ! line con 0 line vty 0 3 login line vty 4 password cisco login ! end = JZ [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=42770t=42762 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: AGS+ Router Question [7:38726]
Have you ever seen one of those AGS routers humming away? :-) Let's put it this way... they use standard 110V power, alright, but draw upwards of 7 AMPs. Not only that, but they have a high-output fan blower assembly that runs right off the 110V main power. No dinky 12V fan here! :-) In short, they're loud, they're power hungry, but they're also FAST and very suitable for low-cost Cisco lab racks!! Paul H Howard Lewis Bloom wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Exactly what kind of power are we talking about here? I've seen this routers on Ebay and seen nothing about special power requirements. It's standard 110 Volt right? On 18 Mar 2002 19:01:35 -0500, [EMAIL PROTECTED] (Larry Letterman) wrote: it should be free, since it'll cost a fortune to power it.I got a 4000 with a 4 port serial module to do the frame switch part, works great and the electric company doesn't get my pay check... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Priscilla Oppenheimer Sent: Monday, March 18, 2002 3:23 PM To: [EMAIL PROTECTED] Subject: Re: AGS+ Router Question [7:38726] At 05:46 PM 3/18/02, Jeff Barr wrote: I was thinking of buying an AGS+ router for a frame relay/x.25 switch for my lab. Are there any reasons I would want to buy a 2500 series(2522 or 2523) over one of these? Also, the IOS on the one im looking at is pretty old (like 9.x if im right?). Will this cause any problems? Yes. The frame-relay switching command wasn't added until 10.0! But you could upgrade the IOS, maybe. The AGS is infamous for being very noisy and requiring lots of power. But it's probably cheap! ;-) Im not going to use it for anything else other than to simulate the frame realy/x.25 cloud. TIA, Jeff Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40750t=38726 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: AGS+ parts needed! [7:39921]
Greg, Radio Shack has a handful of ON / OFF toggle switches that will do the job nicely. You may need to shore up the diameter gap between the Radio Shack on/off switch and the hole in the AGS chassis with washers, but it's a nice quick fix. Paul Greg Macaulay wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi all, I recently purchased an AGS+ on eBay and unfortunately it was damaged in shipment. Please don't waste BW telling me the shortcomings of the AGS+ over the 2520 series -- I already know that -- but cost was a major factor! Anyway, the area that was damaged was the on/off switch. Also the metal guard around the switch and the back plate. Very simply, the seller did not package the router correctly and left a space between the rear of the router and the side of the box. During shipment, the router probably constantly slid back and forth, with the switch each time hitting against the side of the box and whatever solid object was on the outside. The plates probably can be reshaped with some careful banging and tapping. But the main item is the on/off switch! It has a neck which broke off from the main part of the switch with each part having a part that the other needs for the whole to function. In any event, I have searched the CCO to no avail!! Does anyone have any idea as to how/where I can obtain a replacement switch?? Any and all suggestions will be quite welcome. Thanks to all in advance. Greg Macaulay Oldest CCNP/CCDP on Earth Lifetime AARP member Retired Attorney/Law Professor Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39959t=39921 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Loading IOS on a 4000M [7:35689]
Hi I don't think the NP-6E is supported on the 4000-M... only the 4500 and 4700. Paul Gragg Vaill wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I admit to being stuck, I have inherited a 4000M that is blank (no IOS) and for the life of me I cannot figure out how to get the IOS loaded on it. The console port is a DB-25 and I do not have a working Ethernet card for it. I do have a couple np-4t cards though. Speaking of Ethernet cards for this model, I have a couple np-6e cards that give the following error on boot up %nim-2-badnimid: BAD NIM ID. I'm guessing that means the cards are bad (boy am I glad that they were part of the inheritance!) and if they aren't, what does the error mean and how would on go about fixing it? Thanks in advance for your time, I do greatly appreciate it. Gragg Vaill Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=35700t=35689 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Terminal Server setup [7:33439]
To do reverse telnet to some Cat switches (with the RJ45 port), you need to hardwire pins 1 and 8 on the Cisco rollover cable. I had the same problem with a 2924XL and this solved the problem. To do this, just nick the side of the rollover cable on pin 1 and pin 8 -- just enough to expose the conductor. Then solder a small strand of wire between pin 1 and pin 8. Should solve the problem. Paul Lalonde wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... All, I have a home lab setup and all the devices in the lab I can reverse telnet to from my 2509, except for a 1924EN switch. When I try to reverse telnet into this switch I never get a prompt back it just sort of hangs. I can't seem to find anything on CCO in reference to this. I am sure some of you guys have setup this same type setup before any help would be appreciated. This is really confusing me something that seems so simple. I have 7 other devices that I am able to reverse telnet into except for this one. Maybe if you can point me to some docs or provide a sample config that would be greatly appreciated. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=33518t=33439 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Ebay question [7:32808]
I have dealt with [EMAIL PROTECTED] and have had no problems. In fact, I had purchased a couple of Bay switches about eight months ago that were advertised with rackmount brackets, but didn't arrive with any. I followed up with him and he subsequently sent me the two I requested, plus TWO EXTRA pairs for my troubles. Great guy! Paul Stuart Laubstein wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Has anyone used the seller [EMAIL PROTECTED] before? Anyone got any good ebay sellers to recommend? thanks stuart Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32946t=32808 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: MZMaker IOS c2500-js-l.12.1.10 [7:32748]
Guys, This is exactly what is happening. Unfortunately, Will has a 2500 without the 2MB of soldered on-board DRAM, thus he only has 14MB of RAM for use by run from RAM images. Will, you'll need to find a smaller image! Or, find a 2500 mainboard with the 2MB of soldered on-board memory. :-( Paul [PCL] Gaz wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Will, I'm guessing a little at this one. The memory at 0x00E392A4, from a quick bash on the calculator is around 14.5 Mb. Your router has 14336 Kbytes of main memory available for the IOS. Someone posted a thread a few days ago, which mentioned the two different types of 2500. One with 2Mb RAM soldered to main board and one without. Looks like yours is one without so is using the first 2mB(ish) for IO. So it actually only has 14336 Kbytes available RAM. As I said, guessing a little, so anyone feel free to jump in and correct. Regards, Gaz Will Francis wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Guys I'm just in the process of building my home lab and I read quite a few previous posting suggesting that one can use MZMAKER to compress enterprise version of IOS 12.1 to run from a 2500 series router with 8mb flash and 16mb Dram. I just tried this and my router just keep on rebooting itself, any ideas at all will be greatly appreciated. System Bootstrap, Version 11.0(10c), SOFTWARE Copyright (c) 1986-1996 by cisco Systems 2500 processor with 14336 Kbytes of main memory %SYS-4-CONFIG_NEWER: Configurations from version 12.0 may not be correctly understood.F3: 8564+6636705+165012 at 0x1000 Error : memory requirements exceed available memory Memory required : 0x00E392A4 Exception: Software forced crash at 0x111E (PC) Thanks in advance !!! -- Regards, Stanley. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32755t=32748 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: 7010 [7:32780]
Hi there, Older 7000s will only accept newer IOS versions with the optional RSP7000 upgrade kit. The RSP7000 kit upgrades a 7000 or 7010 router to the equivalence of a 7507 or 7505. Paul M. Nabelsi wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Has anybody tried to upgrade 7010 to an IOS over 11.2. In other words, can other 7000 IOS work on 7010? 12.0 or over.. Thanks in advance! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32782t=32780 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: cisco 26xxx to run 8mbps [7:32628]
[Insert tongue-in-cheek comment here] Just a dumb guess, but I'd suspect that if you're looking into a satellite carrier, they might have 1 or 2 ideas of their own as to what you'll need. After all, they've probably done this once or twice in the past, being satellite carriers and all. You never know, but they might actually have sales people and technical people who would gladly sell you this solution. [End of tongue-in-cheek comment] As always, free advice gets you exactly what you pay for. :-) Paul suaveguru wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... you are perfectly right if you are thinking in the point of view of Fiber but in the point of view of using a satellite carrier as transport than a single 8mbps makes sense and if that's the case how are we going to solve it? regards, suaveguru --- Paul Lalonde wrote: Hi there, When you say 8Mbps, what kind of service are you referring to? Frame Relay relies on T1, so the max you will get is 1.5Mbps. Are you looking for a solution with, say, 6 T1s to provide you with the 8Mbps you need? Or, are you looking for a solution that will allow you to do 8Mbps over Frame Relay over a single link? I might be putting my foot in my mouth, but I don't think such a service exists. That's what ATM is for. A 2600 would likely be running out of breath with 6 T1s, even fast-switched. Look at a 3640 for your needs. Paul suaveguru wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... hi all thanks for all the comments and tips given by some of you guys . It seems like a 26xxx cannot cater for 8mbps traffic . If this is so what is the min cisco router that supports 8mbps and what interface this router will need? thanks suaveguru __ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.yahoo.com/videomail/ [EMAIL PROTECTED] __ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.yahoo.com/videomail/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32785t=32628 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: SNAM resources [7:32653]
Hi Dennis, Glad to have another CCIE candidate on board! However, I don't believe a CCIE track still exists where SNA is covered. Apart from data-link switching (SDLC, etc.) I don't know how well that SNAM course maps to the CCIE program. I could be totally off-base, though. In any event, good luck with your studies! Paul Dennis Cooper wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi guys I have been lurking for some time and have found the group to be very informative. I am studying towards CCIE and towards that end I am doing the SNAM course and associated exam. Is there a practice exam site someone could point me to? Regards Dennis Cooper CCNP/CCNP Security/CCDP/MCSE/CCSA Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32654t=32653 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: cisco 26xxx to run 8mbps [7:32628]
Hi there, When you say 8Mbps, what kind of service are you referring to? Frame Relay relies on T1, so the max you will get is 1.5Mbps. Are you looking for a solution with, say, 6 T1s to provide you with the 8Mbps you need? Or, are you looking for a solution that will allow you to do 8Mbps over Frame Relay over a single link? I might be putting my foot in my mouth, but I don't think such a service exists. That's what ATM is for. A 2600 would likely be running out of breath with 6 T1s, even fast-switched. Look at a 3640 for your needs. Paul suaveguru wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... hi all thanks for all the comments and tips given by some of you guys . It seems like a 26xxx cannot cater for 8mbps traffic . If this is so what is the min cisco router that supports 8mbps and what interface this router will need? thanks suaveguru __ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.yahoo.com/videomail/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32656t=32628 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ATM Questions [7:32333]
$1400-$1500 is a pretty good price. The ATM module provides the ability to do LANE. I know Optimum Data (www.optimumdata.com) had them for a really good price at one time. Paul Ed Chuchaisri wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Also, what do you think it's the fair price for this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32353t=32333 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Secure communications without an IPsec feature for IOS ? [7:31757]
Christian, A couple of primitive means of securing communications... but by no means as secure as IPSEC. 1) GRE tunnel interface with 'tunnel key' statement for basic protection of encapsulated traffic. Follow this up with #2 for more security. 2) Very restrictive access lists permitting only the other peer and denying everything else (is this practical in an Internet usage scenario?) Other than encryption and hashing algorithms, there's not much else (I think!) Regards, Paul Lalonde Cristian Piatnitchi wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi to everybody I am wondering if is there any method to encrypt / secure the communcation between 2 routers without to use an IPsec based IOS. I am searchig for a cheaper sollution based on a basic IOS 12.0(5) for a 2600 and IOS version 12.0(3c) for a Cisco 3640. cisc0 2600 ios image : c2600-i-mz.121-1 cisco 3640 ios image : c3640-i-mz.120-3c Any advice would be appreciated Thanks in advance Cristian Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=31757t=31757 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: REALLY old ios upgrade [7:31520]
Steve, Sounds like an old boot ROM monitor. Simply set the config register to 0x101 and reboot the router. This will allow you to boot from the ROMs and have access to the flash memory for writing. Commands are: o/r 0x101 and: i(to re-initialize) Hope this helps! Paul steve skinner wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Chaps, i am trying to upgrade a router`s ios but am having some problems... it is version 10.2.5 .. when it boot`s i do the control break and i get into r-mon mode (i think)but the commands are different to the usuall... there is simply an L for load but don`t boot B for load from tftp and boot... but nothing about setting an ip address accesing the flash or anything..!! when i follow the on-screen i.e L c2500_l_d-112.bin 10.1.1.1 i get timed out.. ANY IDEA`S ANYONE!! cheers in advance steve _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=31526t=31520 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OT but related [7:31450]
Mike, Contact me offline. Thanks! Paul Mike Sweeney wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I'm looking for something a bit odd but with good reason. I need an original copy of Cisco ACS version 1.0 I'm willing to pay a small amount for this so it's a chance to dig through the software archives and get a bit of beer money for a very old CD. The reason for wanting this old software is simple. I want to try Cisco's interface to their TACACS software. Currently I use a Linux flavor of TACACS which works but I'm struggling with the logging which I want. Since 1.0 was TACACS only, it fits the bill perfectly. There had been one on Ebay but it was overpriced in my opinion. Thanks MikeS Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=31455t=31450 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISDN Stimulators [7:29787]
Hi there, I had an ISDN stimulator, once. When my ISDN performance wasn't as good and satisfying as I thought it should be, I'd give it a little stimulation. Kidding aside, if you're looking for an ISDN SIMULATOR, your best bet would be to look into companies like Teltone, Emutel, etc. Even Cisco 2600/3600 routers with ISDN interfaces can simulate the ISDN network, now. Fun stuff! Paul AlefTec PvtLtd wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Can some one pls suggest me good ISDN Stimulators which i can use in my labs for BCRAN. I am looking for following features: ISDN BRI and ISDN PRI Thanking u in advance. Merry Christmas Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=29790t=29787 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISDN Stimulators [7:29787]
Hi, Try the following links (variety of ISDN network emulation for PRI and BRI) http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121 t/121t3/dt_q931.htm http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121 t/121t2/dt_qsig.htm http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121 limit/121x/121xi/121xi_3/dt_brint.htm Hope this helps! Paul Robert wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do you have any info on setting up a router as a simulated ISDN switch? Paul Lalonde wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi there, I had an ISDN stimulator, once. When my ISDN performance wasn't as good and satisfying as I thought it should be, I'd give it a little stimulation. Kidding aside, if you're looking for an ISDN SIMULATOR, your best bet would be to look into companies like Teltone, Emutel, etc. Even Cisco 2600/3600 routers with ISDN interfaces can simulate the ISDN network, now. Fun stuff! Paul AlefTec PvtLtd wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Can some one pls suggest me good ISDN Stimulators which i can use in my labs for BCRAN. I am looking for following features: ISDN BRI and ISDN PRI Thanking u in advance. Merry Christmas Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=29811t=29787 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: can't ping 'through' router..help? [7:29724]
Hi there, From the looks of it, you've got private IP addresses on the inside of your router, and public (Internet) addresses on the outside. What's happening is traffic originating from the 192.168.2.x network is not reachable by the Internet. Why? The Internet does not allow routing to private IP addresses. Private IP addresses include 10.0.0.0, 172.16.0.0, 192.168.0.0, etc. etc. What you'll need to do is implement NAT (network address translation) on your router to hide your internal IP addresses... mask them behind the real outside interface of your router, so to speak. Try something like this: access-list 1 permit 192.168.2.0 0.0.0.255 ip nat inside source list 1 interface FastEthernet1/0 overload int FastEthernet 1/0 ip nat outside int FastEthernet 0/1 ip nat inside Try this and see what happens! Best of luck, Paul Lalonde to cisco new wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... hi...i have a question regarding router configuration. i'm trying to set up a 2621 router but am running into a problem, i can't ping through the router (ie, no traffic going through the thing). i can ping from the 2621 to a dsl router, and from the 2621 to a pc i've set up on the lan, but i can't get traffic from the internet (dsl1) to the pc, and vice versa. i've enabled a default route out, as well as rip? i'm kind of new at this so any help would be...well, helpful. here's my config: ! hostname myrouter ! enable secret X enable password X ! ip name-server 207.155.183.72 ! ip subnet-zero ip domain-lookup ip routing ! interface FastEthernet 0/0 no shutdown description will be connected to Internet(dsl 2)-not connected ip address 66.89.59.194 255.255.255.192 no ip directed-broadcast no ip mroute-cache keepalive 10 ! interface FastEthernet 0/1 no shutdown description connected to ethernet ip address 192.168.2.1 255.255.255.0 no ip directed-broadcast no ip mroute-cache keepalive 10 ! interface Ethernet 1/0 no shutdown description connected to Internet (dsl1) ip address 168.103.127.153 255.255.255.248 no ip directed-broadcast no ip mroute-cache keepalive 10 ! router rip version 2 network 66.0.0.0 network 192.168.2.0 passive-interface Ethernet 1/0 no auto-summary ! ! ip classless ! ! IP Static Routes ip route 0.0.0.0 0.0.0.0 Ethernet 1/0 no ip http server snmp-server community public RO no snmp-server location no snmp-server contact ! line console 0 exec-timeout 0 0 login transport input none ! line vty 0 4 login ! thanks in advance... pete Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=29725t=29724 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Need Help : Cisco 508-CS [7:29310]
Hi, Actually, you had the right idea. But I think you mean: router#config t router(config)#line 1 8 router(config-line)#transport input all Paul Router Man wrote in message news:[EMAIL PROTECTED]... Try these commands: router#config t router(config)#line vty 0 4 router(config-line)#transport input all After you enable these commands you should be able to telnet to the Terminal server using a port number. For example telnet x.x.x.x 2001 will connect you to port 1 on your server. x.x.x.x is the ethernet port ip address that you have already configured Sam Ho wrote in message news:[EMAIL PROTECTED]... Dear all : I get a Cisco 508-CS recently. I can access the console and configurate the ethernet. I can use telnet to access this 508 console. I have two cisco 2501 router. I want to connect these 2501 console to this cisco 508-CS for reverse telnet. However, I am not able to locate any reference or sample configuration. Would anyone give me a hand ? Thanks Best Regards Sam Ho CCNA Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=29324t=29310 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Serial tunneling [7:29070]
Hi Naafi, Do you mean STUN or async tunneling? I think that as long as you have enough flash memory and DRAM (you should be fine) to run IP PLUS, you can do STUN and BSTUN. Async tunneling doesn't require anything more than the base IP set, so yes, you should be fine. Paul Naafi Matovu wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... HI. Can a 2610 with 32mb memory support serial tunneling... Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=29097t=29070 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
MAC Cookie problems with RSP7000 in a 7000 router [7:29098]
Hi, I've recently installed an RSP7000 upgrade kit into an older 7000-series router (with an RP1 and SP processor). Everything worked fine with the original processors, but after I installed the RSP7000 kit, I get the following message: RSP-4-Cookie: Corrupt or missing Mac address cookie using random base .5e03.6100 I've checked the archives, and it appears that the EEPROM that maintains the MAC address table for this unit has gone south. The archives mentioned that the RSP7000 would need to be replaced. Is there an easier way? I have access to EEPROM programming equipment.. could this be easily rectified on my own? This router is for my own home use in a CCIE lab environment so I can't afford to put SmartNet on the unit just to get one small chip replaced. Please advise. Thanks! Paul Lalonde Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=29098t=29098 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Lab Attempt #2 - no go :- [7:28142]
Chuck, You didn't fail, buddy, you simply got one BIG step closer to achieving it. It's all about learning, right? I totally admire your approach, and I applaud your determination. The next one's got your name on it... count on it! Paul Chuck Larrieu wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I wish I could say it took so long to get my results back because my excruciatingly sophisticated solutions to the problems presented required detailed and intimate analysis. Alas, that was not the case. For those ninnies who complain that the one day lab devalues the process, all I can say is WRONG! The lab I saw was far more difficult than I remember from my previous attempt, and my previous attempt was NOT easy. In my first attempt, I did not see anything I couldn't do. This time, although FAR better prepared, I saw LOTS of things I couldn't do. IMHO, the one day format, with the elimination of the monkey tasks, allows Cisco to demand a lot more. The 26 points previously allocated to terminal server setup, cabling, and troubleshooting all go someplace. WOW! The places they went! Previous topics that were glossed over appeared in depth. Cisco continues to up the ante, and not always in ways one might expect. Some things I wouldn't have expected were there in spades. Probably THE major factor continues to be reachability. If you don't understand the implications of the given network topology, and given interactions, you will be screwed. The topology presented was interesting. Amazing what one can do on a six router / two switch pod to wreak havoc and let you know what an idiot you are. Devious doesn't begin to describe it. Bootcamp and IPExpert - it ain't the number of routers, boys! The e-mail feedback is amusing, but not particularly informative. I failed with a score greater than 20, meaning I can go back in 30 days for more humiliation, if I so desire. the breakdown percentages ( not scores ) would be of more interest if I were sitting with the proctor discussing the whys and the expectations. Otherwise it does me no god at all. for example, I solved a particular problem doing something a particular way. It worked just fine in terms of the results. Yet on that section I scored very poorly. What were they looking for? Fat fingers are still the major enemy for me, at least. It's no fun fat fingering on a Cat 5K. Not by any means. It also helps to be certain layer two stuff is done correctly. Well, debriefing will be fun. I have the topology duplicated in my home lab, and I will enjoy analyzing the problems I saw in the real lab. No you can't telnet in to look. DON'T ASK! In terms of seating, it appears to me that there are now more racks in the lab, in San Jose, anyway. Half the seats are taken by those testing. The other half seem to be those used the previous day. the proctors crank through the idle racks, grading the previous day's results. One last thing. I know what CCO says, and I know what IOS I saw on my rack. Rats. The advertised IOS would have gone a long way towards eliminating a particular problem I had. Not complaining, because any CCIE should have been able to solve the particular puzzle no matter what the IOS involved. Just observing that some things are still in the process of change. The proctors are still the good folks I remember from last time. Too bad we are not given the opportunity for more interaction afterwards. I would really have enjoyed discussing my results. Whelp, another time. Chuck Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=28143t=28142 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Anybody have the updated boot ROMs for Cat5000? [7:27542]
Hi there, Anybody have a line on the updated boot ROMs for the Cat 5000 Supervisor II? I need new MCP and NMP boot ROM images to support CatOS 5.x. I've ordered boot ROM upgrades for other platforms under contract for my customers in the past, but is there a way for an end-user without a contract to order them? I had heard that Cisco charged only for the cost of shipping. Is this true? Regards, Paul Lalonde Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=27542t=27542 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IPSec VPN [7:26137]
Hi Jim, Sounds like you're using an older IOS with flaky IPSEC code. Try upgrading to one of the 12.2 releases. Solves a lot of IPSEC issues. May also need a policy route map on the router side (internal interface) to set the DF bit to 0 (don't fragment). Will solve MTU issues with IPSEC between the two boxes. Paul Lalonde Jim Bond wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hello, We've got 3660 at central office and PIX at satellite ofices to do IPSec VPN. Sometimes PIX couldn't connect 3660 and I have to reboot 3660 to make it work. I'm wondering if there is a easy way, say clear the connection, so I don't have to reboot the 3660? Thanks in advance. Jim __ Do You Yahoo!? Find the one for you at Yahoo! Personals http://personals.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=26141t=26137 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Two default routes on the same router [7:25750]
Randy, What you want to do is implement policy routing with a route map. A route map will allow you to direct your specific subnets' traffic to their preferred gateway. Check out the following link: http://www.cisco.com/warp/public/105/36.html Hope this helps! Paul Lalonde McHugh Randy wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Does anyone know if you can have two completley different default routes and on the same router in totally two different subnets pointing to two totally different gateways? For instance ip route 0.0.0.0 0.0.0.0 25.13.240.1 ip route 0.0.0.0 0.0.0.0 65.11.213.1 Will the router parse each one separatley or will neither one of them work? This is on a 2514 . Thanks Randy Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=25766t=25750 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: HELP!! [7:25784]
Hmm.. what platform? clear crypto isakmpon an IOS router clear crypto isakmp sa in config term mode on a PIX Hope this helps, Paul Lalonde John Chang wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... To clear the IKE SA is the command clear isakmp or clear isakmp sa? Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=25788t=25784 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CISCO3000back-back [7:25076]
Hi Dave, What specific model of 3000 routers do you have? For the single-serial port models (3102, 3202, etc) the easiest way to get this to happen is to pick yourself up a couple of cheap CSU/DSUs on eBay, a couple of 72-0671 V.35 DTE cables (I believe they are also called CAB-NP2VT2 or something similar), and make yourself a back-to-back CSU/DSU cable. Cheap Adtran 56/64 CSU/DSUs are probably your best bet. This way, you'll be able to do point-to-point and Frame Relay back-to-back configurations on your router. Unfortunately, the older 3000s don't support DCE clocking, so back-to-back cables aren't available for these units. Hope this helps! Paul Lalonde Dave Sinclair wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I am a newbie to the router world and have acquired two old Cisco 3000 routers. I want to hook them up back to back via the serial ports for a home lab. Does anyone have configuration info on this? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=25094t=25076 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Upgrading IOS through Console Cable [7:24435]
Hi, Given that you probably don't have any other modules in the router that you can do this on (like Ethernet, Token Ring, or Serial)... You can do this by configuring your AUX port for asynchronous routing and connecting to it with your PC over a special null-modem cable. The following link describes how to configure your PC to talk to a Cisco router over a null-modem cable to the AUX port: http://www.cisco.com/warp/public/471/103.html You will need the mdmcisco.inf null-modem driver for your operating system. Here are some basic tasks: 1. Configure a dial up networking connection on the PC. You'll need a special modem driver to support PC-to-Cisco async connections over PPP. Check out the link above. Assign a static IP address to the PC dial-up adapter (ie. 192.168.0.1) 2. Configure the Cisco router AUX port to perform asynchronous routing. Do the following: line aux 0 speed 38400 parity none databits 8 stopbits 1 flowcontrol hardware modem inout int async 0 (* you might need to use a different interface # - use 'show line' to find your AUX port interface #) async mode dedicated async default routing ip address 192.168.0.2 255.255.255.0 encapsulation ppp keepalive 5 pulse 5 no shutdown 3. With these two configuration steps, you should be able to 'dial' into your Cisco router over the null-modem cable using PPP. At this point, you will have a network-layer connection to the Cisco router and should be able to TELNET, TFTP, and perform flash management (ie. uploading a new IOS version). IT WILL BE SLOW... BUT IT WORKS! Paul Lalonde Ali RETy wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... How can I upgrade IOS on 4000 Router through console connection. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=2t=24435 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: No Keepalive [7:24446]
I think this is because Ethernet / Fast Ethernet interfaces generate their own keepalives and thus keep themselves up. Serial interfaces receive their keepalives from the remote end and rely on return communications to bring the interface up. Paul Tribavan Raina wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi.. When we give no keepalive command on ethernet or fast ethernet ,the port and line protocol come up but when we do the same thing for serial port why doesnt it work. May be it is a silly question. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24447t=24446 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Spliting 2 B channels between 2 routers, how? [7:24187]
John, The message you're seeing might require you to remove the LDN from the 'isdn spid' statement on each router. I know this is how you had it configured on one router already, but try it on both. Eg. isdn spid1 6025551313 However, ensure that you configure only 'isdn spid1' on each router. Don't configure 'isdn spid2' on either. Check out the following link: http://www.cisco.com/warp/public/129/bri_invalid_spid.html Let me know! Paul John Hardman wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Well your advice and a timely bit of telco magic (they called me right after I posted, don't know what they did, nor do I think they do either ;-) the TE problems have been solved. However I am now getting this... 00:03:55: %ISDN-4-INVALID_CALLEDNUMBER: Interface BR0, Ignoring call, LDN and Ca lled Party Number mismatch Number mismatch... humm... any ideas? I have tried playing with the dialer map number and the LDN number to no avail. BTW the config now matches to the advice from Paul. TIA -- John Hardman CCNP Paul Lalonde wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi John, Two things I've noticed. If you use basic-ni as the ISDN switch, you should configure your 'isdn spid' statement as follows. Note that you include the LDN (local dial number) in the SPID with no area code: On router #1: isdn spid1 6025551313 5551313 On router #2: isdn spid1 6025551212 5551212 ALSO... *don't* configure 'isdn spid1' on router #1 and 'isdn spid2' on router #2. Instead, configure 'isdn spid1' on BOTH routers. Both routers should then pick up the relevant TEI from the ISDN switch. 'spid2' is only valid if you've already defined 'spid1' on the unit. I've been successful doing this a number of times. Let me know how it works. Paul John Hardman wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi All... I have a question... I remember reading somewhere that it was possible to split two B channels of a BRI line between two routers. Here is my layout... ISDN Network -- Adtran NT1 ACE -- S/T#1 -- Router1 S/T#2 -- Router2 Things work great if I config to have both B channels on one router, or have just one B channel on one router. However when I split them, the first router to boot contacts the ISDN switch and gets two TE assigned, even though I have only one SPID config'ed on the BRI interface. When the second router contacts the switch to get a TE it gets an error, TE not assigned, terminal down state. Here are the relivent configs and show outputs. Any ideas what is a miss here? TIA - Router 1 - interface BRI0 ip address 172.20.10.1 255.255.255.0 encapsulation ppp no ip route-cache no ip mroute-cache dialer idle-timeout 900 dialer map ip 172.20.10.2 name r3 broadcast 6025551212 dialer-group 1 isdn switch-type basic-ni isdn spid1 6025551313 ppp authentication chap -- Show ISDN Status Router 2 - Global ISDN Switchtype = basic-ni ISDN BRI0 interface dsl 0, interface ISDN Switchtype = basic-ni Layer 1 Status: ACTIVE Layer 2 Status: TEI = 88, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED TEI 88, ces = 1, state = 5(init) spid1 configured, no LDN, spid1 sent, spid1 valid Endpoint ID Info: epsf = 0, usid = 0, tid = B Layer 3 Status: 0 Active Layer 3 Call(s) Active dsl 0 CCBs = 0 The Free Channel Mask: 0x8003 Total Allocated ISDN CCBs = 0 - Router 2 - interface BRI0 ip address 172.20.10.2 255.255.255.0 encapsulation ppp no ip route-cache ip ospf demand-circuit no ip mroute-cache dialer idle-timeout 900 dialer map ip 172.20.10.1 name r4 broadcast 6025551313 dialer load-threshold 80 outbound dialer-group 1 isdn switch-type basic-ni isdn spid2 6025551212 6025551212 ppp authentication chap -- Show ISDN Status Router 2 - Global ISDN Switchtype = basic-ni ISDN BRI0 interface dsl 0, interface ISDN Switchtype = basic-ni Layer 1 Status: ACTIVE Layer 2 Status: TEI = 82, Ces = 1, SAPI = 0, State = TEI_ASSIGNED TEI Not Assigned, ces = 2, state = 1(terminal down) spid2 configured, spid2 NOT sent, spid2 NOT valid Layer 3 Status: 0 Active Layer 3 Call(s) Active dsl 0 CCBs = 0 The Free Channel Mask: 0x8003 Total Allocated ISDN CCBs = 0 -- John Hardman CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24240t=24187 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misc
Re: Spliting 2 B channels between 2 routers, how? [7:24187]
Hi John, Two things I've noticed. If you use basic-ni as the ISDN switch, you should configure your 'isdn spid' statement as follows. Note that you include the LDN (local dial number) in the SPID with no area code: On router #1: isdn spid1 6025551313 5551313 On router #2: isdn spid1 6025551212 5551212 ALSO... *don't* configure 'isdn spid1' on router #1 and 'isdn spid2' on router #2. Instead, configure 'isdn spid1' on BOTH routers. Both routers should then pick up the relevant TEI from the ISDN switch. 'spid2' is only valid if you've already defined 'spid1' on the unit. I've been successful doing this a number of times. Let me know how it works. Paul John Hardman wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi All... I have a question... I remember reading somewhere that it was possible to split two B channels of a BRI line between two routers. Here is my layout... ISDN Network -- Adtran NT1 ACE -- S/T#1 -- Router1 S/T#2 -- Router2 Things work great if I config to have both B channels on one router, or have just one B channel on one router. However when I split them, the first router to boot contacts the ISDN switch and gets two TE assigned, even though I have only one SPID config'ed on the BRI interface. When the second router contacts the switch to get a TE it gets an error, TE not assigned, terminal down state. Here are the relivent configs and show outputs. Any ideas what is a miss here? TIA - Router 1 - interface BRI0 ip address 172.20.10.1 255.255.255.0 encapsulation ppp no ip route-cache no ip mroute-cache dialer idle-timeout 900 dialer map ip 172.20.10.2 name r3 broadcast 6025551212 dialer-group 1 isdn switch-type basic-ni isdn spid1 6025551313 ppp authentication chap -- Show ISDN Status Router 2 - Global ISDN Switchtype = basic-ni ISDN BRI0 interface dsl 0, interface ISDN Switchtype = basic-ni Layer 1 Status: ACTIVE Layer 2 Status: TEI = 88, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED TEI 88, ces = 1, state = 5(init) spid1 configured, no LDN, spid1 sent, spid1 valid Endpoint ID Info: epsf = 0, usid = 0, tid = B Layer 3 Status: 0 Active Layer 3 Call(s) Active dsl 0 CCBs = 0 The Free Channel Mask: 0x8003 Total Allocated ISDN CCBs = 0 - Router 2 - interface BRI0 ip address 172.20.10.2 255.255.255.0 encapsulation ppp no ip route-cache ip ospf demand-circuit no ip mroute-cache dialer idle-timeout 900 dialer map ip 172.20.10.1 name r4 broadcast 6025551313 dialer load-threshold 80 outbound dialer-group 1 isdn switch-type basic-ni isdn spid2 6025551212 6025551212 ppp authentication chap -- Show ISDN Status Router 2 - Global ISDN Switchtype = basic-ni ISDN BRI0 interface dsl 0, interface ISDN Switchtype = basic-ni Layer 1 Status: ACTIVE Layer 2 Status: TEI = 82, Ces = 1, SAPI = 0, State = TEI_ASSIGNED TEI Not Assigned, ces = 2, state = 1(terminal down) spid2 configured, spid2 NOT sent, spid2 NOT valid Layer 3 Status: 0 Active Layer 3 Call(s) Active dsl 0 CCBs = 0 The Free Channel Mask: 0x8003 Total Allocated ISDN CCBs = 0 -- John Hardman CCNP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24208t=24187 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PPP Multilink studies - interesting results [7:21623]
Hmm.. If this were the case, though, wouldn't I expect to only see 64Kbps of bandwidth for a single user session on a 128K multilinked ISDN call? Seems to me if the link were loaded up properly, you'd see the combined aggregate. Paul Lalonde MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Yes you verified what I have harped a few times, the added complexity of multilinking not to mention the several bugs I have encountered, is why I say just use CEF and load share per packet/destination. Also multilinking nor CEF give your greater speed but you do have more bandwidth. If you have a 2 lane verses a 4 lane highway the additional 2 lanes won't enable you to go any faster but you can get twice as many cars to their destination. So yes two T1's will give you twice the thruput in x time but the links are still 1.5M no matter how you slice it. Dave Chuck Larrieu wrote: A couple of weeks ago there were a couple of discussions on this board about using multiple T1's to improve data throughput. If memory serves, there were two possible ways to do this: 1) per packet load sharing and 2) PPP multilink for no particular reason I decided to do a little study on PPP multilink. Well, OK, I do have two particular reasons - an upcoming Lab and a customer who is asking about this. So, I build a scenario as follows: serial0 token ring R6R5---R4 || serial1 to test throughput, I used extended ping, with multiple pings and various size payloads, from a loopback on R4 to a loopback on R6. the routing protocol was EIGRP, done to assure per packet routing between R6 and R5 as a control. My results were interesting, to say the least. unexpected, but so consistent that there is no question, in my mind, anyway, about some of the assumptions many of us make about various load sharing and multiplexing options. a summary of the results are using the Cisco router reporting of min/avg/max round trip times - the middle number is the one to watch. packet size PPP multilinksingle serial link configured as PPP multilink 1000 24/24/13220/20/104 1500 28/29/52 24/27/112 500 16/19/64 12/13/104 6412/14/60 4/7/104 note that in every case, the single link, configured for PPP multilink, is SIGNIFICANTLY faster than the dual link. Interesting. So I constructed some further experiments, using extended ping, multiple packets of variable size - range 64 to 1500: PPP multilinkper packet load share single T1 8/17/136 4/17/136 4/17/144 these figures are from over 15,000 pings per scenario, so it is not a case of random chance here. there is no difference whatsoever between the results of a single serial link, per packet load sharing over two serial links, and PPP multilink. what is most surprising is that a single serial connection proves JUST AS FAST as a dual serial connection. Now what I conclude from this is an opinion that multiple T1's DO NOT really do much for you in terms of more bandwidth. At least for the kinds of data flows I am able to generate in the lab. Furthermore, PPP multilink is actually harmful to throughput. So I gotta ask - is load sharing really adding anything to the mix? Really? In real world scenarios and data flows, where is it that you are gaining anything? Lastly, I set up a final scenario in which I sent 5000 byte packets. this means fragmentation and reassembly would occur, because the MTU on all wan interfaces is 1500 bytes. Here are the results when pinging 5000 times using a 5000 byte payload: single serial link: 64/66/168 per packet load share: 64/64/168 ppp multilink: 48/52/172 note here that the load sharing scenario is slightly faster than the single serial link, and that the ppp multilink is FAR AND AWAY faster that the other two. I suspect the reason for this is efficiencies gained under the multilink scenario when fragmenting and reassembling the oversized payloads In any case, I hope this presentation will lead to some good discussion of bandwidth and results. would it be fair to suggest that peoples' efforts to solve what they perceive as bandwidth issues by implementing multiple WAN links is really a study in fruitless activity? Maybe I should have set up some IPX scenarios? Chuck -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=21704t=21623 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure vi
Emphasis on token ring switching on CCIE Lab [7:21715]
Obviously, I don't want to get into NDA issues here, but I see that Cisco has the 3900 token ring switch on the CCIE lab exam equipment list. Is token ring switching considered an emphatic hands on topic for CCIE lab preparation? Anyone know how important this particular technology is in the bigger scheme of things? Paul Lalonde Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=21715t=21715 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How to upgrade ios on 2502 [7:18449]
I think the original responder assumed that you had a second router that you could use. Theoretically, the only way to upgrade a single router like this would be by removing the existing flash memory SIMM and replacing it with another flash memory SIMM that had the IOS version you need. Perhaps a friend may help? At the least, you'll need a second router (and connect them back-to-back with the serial ports) or a token ring hub / token ring NIC in your workstation. Paul Lalonde ietobe wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... How to do it? Tks ietobe CCNP CCDP Jason wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Have you consider using the serial port ? ;-) ietobe wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, does anybody know how to upgrade ios version on 2502, as you know I do not have a token ring card on my pc or any other rouer. The router does not provide copy xmodem: flash: command and does not have xmodem command under rom ios. How do I upgrade ios software from console port? TKS ietobe CCNP CCDP Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18457t=18449 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: % Connection refused by remote host
Make sure 'transport input all' is set on the line you're trying to reverse-telnet into. Paul [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, I'm playing with 2511 terminal server and plugged a router and a firewall on the async ports. But when I try to connect to the fire wall with 2001 I get an error msg "% Connection refused by remote host", I can ping it and I can telnet to it via cross-over cable!!??. Any device. Regards, Tarry -- Sent through GMX FreeMail - http://www.gmx.net _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router 1700 showing Junk
It certainly sounds like Hyperterminal settings need to be changed. Some people fiddle with the config-register on their routers and end up changing the baud rate (to 2400, 4800, etc.) Word to the wise, though... if you change your baud rate in HYPERTERMINAL then you have to 'disconnect' and 're-connect' for the settings to take effect. Simply changing the baud rate didn't fix the communications problem until I did the disconnect/re-connect. Paul Hitesh Pathak [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Dear All, I'm having a problem with my 1700 series router. The problem is whenever I start my router it shows continously junk characters on the console. Nothing seems to be working. i have tried changing diff PC as well as console cable. Also I have checked for terminal settings like Baud rate , stop bits , Flow control etceverything is perfect. I am using windows 98 as a terminal (Hyper Terminal). Can anyone help me on this?can it be a DRAM corruption problem. Router has 8 mb of DRAM. many thanks in advance. Get free email and a permanent address at http://www.netaddress.com/?N=1 _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: AUX Port
Hey, Throw in the following and see what happens: speed 19200 modem type autoconfigure this should set the AA on the modem. Paul "Austin" [EMAIL PROTECTED] wrote in message 92ssgt$rg2$[EMAIL PROTECTED]">news:92ssgt$rg2$[EMAIL PROTECTED]... I have a Cisco 2511 Access Server. I want to connect to the 2511 via Modem. I have an old Motorola 14.4 modem. The aux port has the ffg config: line aux 0 login password cisco modem inout transport input all I have the phone line plugged into the Modem (where it says TO WALL) and I have the Parallel connector (Modem) from Cisco's console kit plugged into the Modem Parallel Port. Then I have a regular Cisco console cable running from the modem to the aux port. When I call the number it just rings and rings. The modem does not answer. What am I doing wrong or what am I not doing? All help appreciated. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: MZMaker utility (other way around though)
Hi Chris, Just run PKUNZIP or any UNZIP engine against the image. It'll discard the preamble but should generate the original IOS image as a result. Paul Chris McCoy [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Does anyone know if it's possible to decompress an mz IOS image? How is it accomplished? IIRC, it's GNUzipped with an executable tag at the lead in of the file. Thanks for the help, Chris M. --- Paul Lalonde [EMAIL PROTECTED] wrote: Hi Sam, Images for the 800, 1000, 1600, 2600, 3600 ... are already compressed to run from DRAM. You can't use the MZMAKER utility on these images. MZMAKER was written specifically for the many 3000- and 2500-series systems in use by our groupstudy peers. The 3000- and 2500-series routers don't have "compressed from the factory" images like these newer routers do. Regards, Paul [PCL] "Sam" wrote in message ... Hello friends Could anyone who has used the MZMaker utility to compress IOS images = tell me if I can use it to compress images for a 1600 router. I have done it on a 2500 and it works great. My 1600 has 4MB Ram and 6MB Flash and am not able to load large images. = This is for a home lab so I am not too concerned about slow booting or = response. Thanks Sam _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] __ Do You Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions of Products. http://shopping.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: MZMaker utility
Hi Sam, Images for the 800, 1000, 1600, 2600, 3600 ... are already compressed to run from DRAM. You can't use the MZMAKER utility on these images. MZMAKER was written specifically for the many 3000- and 2500-series systems in use by our groupstudy peers. The 3000- and 2500-series routers don't have "compressed from the factory" images like these newer routers do. Regards, Paul [PCL] "Sam" wrote in message ... Hello friends Could anyone who has used the MZMaker utility to compress IOS images = tell me if I can use it to compress images for a 1600 router. I have done it on a 2500 and it works great. My 1600 has 4MB Ram and 6MB Flash and am not able to load large images. = This is for a home lab so I am not too concerned about slow booting or = response. Thanks Sam _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Newbie question on Multilinking
Hi there, Just do the following: multilink virtual-template 1 interface virtual-template 1 encapsulation ppp ppp multilink ... assign serial link IP address (eg. ip address 192.168.255.249 255.255.255.252) interface serial0 no ip address encapsulation ppp ppp multilink interface serial1 no ip address encapsulation ppp ppp multilink This will bind the two physical serial connections into a single "virtual access" interface and enable Multilink PPP. Paul "Network Operations" wrote in message 90t36m$ug$[EMAIL PROTECTED]... I want to multilink 2nos 64Kbps Leased Lines ( to aggregate 128Kbps) both links connected on same cisco routers on either side (Model of Cisco router is different on both sides) . pls let me know how this configuration can be done also if any particular IOS version is reqd. Is this function limited to any model of cisco router or it is possible on any model. Thanks in advance Akshay _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: WIC-2A/S Courier Modems?
Greg, Synchronous mode only works on a dedicated leased line connection. Ie. the connection is always on, not switched like an analog dial call. Paul "Greg Reaume" [EMAIL PROTECTED] wrote in message 90eh6d$j21$[EMAIL PROTECTED]">news:90eh6d$j21$[EMAIL PROTECTED]... Hi There, I have a 1750 with a WIC-2A/S (2 Asynchronous/Synchronous Serial) and 2 USR Courier V.Everything modems attached via 2 DB25-SmartSerial cables. The courier modems have a synchronous mode I'd like to use and was wondering if anyone here has tried this configuration before. I've tried putting the couriers in sync mode and using in-band v.25 dialer on the dialer interface but I keep getting a message saying encapsulation failed in the debug. I've tried both PPP HDLC and got same message. I don't have too much experience with dial-up so I may be doing something wrong as far as configuration goes. I've just done ISDN before. If anyone could provide a sample config or suggestion to get me on the right track I'd really appreciate it. I've already spent the last 3 days scouring CCO for some configs but all dial-up stuff with chat-scripts and the like are for asynchronous and I can't seem to find much on sync. I'd like to use PPP if possible and bond the two channels. TIA, Greg _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: config-register 0x0000 on 2500
If your config register is 0x0, you won't even be able to boot into a usable IOS to change it... so don't bother trying "config term" !!! Instead, at the prompt, type: o/r 0x2102 and then: i to re-initialize the router. Done! Paul "Jeff Duchin" wrote in message 904b9h$vi0$[EMAIL PROTECTED]... I just got into one of my 2500's and found the subject line config very primitive and I'm wondering how the hell do I change it back to 0x2102??? _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Memory in 2501
Try single-sided 4MB or 16MB parity memory. I don't think the 2500s like double-sided memory. Paul "Jeff Duchin" wrote in message 8vh0e0$sd4$[EMAIL PROTECTED]... What's up guys and gals. I'm upgrading the memory in 2 2501'a and one of them is not registering the new memory I've tried 8 and 16mb 72 pin sims. see below: cisco 2500 (68030) processor (revision A) with 1024K/1024K bytes of memory. Processor board serial number 01289263 X.25 software, Version 2.0, NET2, BFE and GOSIP compliant. Bridging software. SuperLAT software (copyright 1990 by Meridian Technology Corp). Authorized for Enterprise software set. (0x0) 1 Ethernet/IEEE 802.3 interface. 2 Serial network interfaces. 32K bytes of non-volatile configuration memory. 8192K bytes of flash memory sized on embedded flash. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Perplexing: DHCP fails from Ethernet segment to Token Ring segment
Hello all, I've configured a Cisco 2513 router to do full bridging between its Ethernet port and its Token Ring port. I'm using plain transparent bridging (bridge 'x' protocol ieee). The network is broken down into two segments: one switched 10/100 Ethernet segment, and one Token Ring segment. The Cisco 2513 sits in between the two. Currently, the majority of the workstations and servers (including an NT Server running DHCP services) are on the Token Ring side. Initially, I had problems bridging the two segments together because of MAC-address bitswapping issues (Token Ring uses an inverted MAC address, Ethernet doesn't). These issues have been resolved by using the 'bridge bitswap-layer3-addresses' command. However, when Windows 9x/Windows NT workstations on the Ethernet side attempt to obtain a DHCP address through the bridge (to the NT Server on the Token Ring network), they fail to obtain IP addresses. Statically assigning an IP address to these machines works fine! I'm thinking that, perhaps somewhere in the DHCP REQ and ACK packets, the Ethernet MAC addresses are not being handled properly on the NT Server DHCP server. Could the IP address assignments be sent back to an invalid MAC address? Any help would be appreciated! Paul Lalonde _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Pin outs.
I believe they are exactly the same connector, but the RJ48 has a "key" (notch) in the bottom corner. This prevents it from plugging easily into a plain RJ-45 jack. Paul RAUNIYAR RAJEEV [EMAIL PROTECTED] wrote in message Pine.GSO.4.21.0011020953250.9960-10@taiwan">news:Pine.GSO.4.21.0011020953250.9960-10@taiwan... I am trying to connect a RJ-48C to a RJ-45 what would the pinout be? Regards RR _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: access server can't access the dial in- pls help :(
Hi, Sometimes you need the 'modem type ...' or 'modem type autoconfigure' line to allow the router to configure the proper lines on the modem. After finding my USR modem, my access server would answer automatically. Hope this helps, Paul "Sim, CT (Chee Tong)" [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Dear all, I have configured a access server as shown below, I attach my modem in Asyn 1 port and I can reverse telnet to it and the phone line got no problem. Besides, I used use a PC (win95) with a modem installed. In win95, I use hyperterminal to connect the PC modem and tested the at command,.. it work, so I used atdt 7 (my access server phone no) but I only heard the ring ring tone, the access server never accept it but I can see from the word RING RING on the access server's modem at command console. What should I configure to let the access server modem pick up the call ### interface Ethernet0 ip address 60.200.166.11 255.255.252.0 no logging event subif-link-status ! interface Async1 ip unnumbered Ethernet0 encapsulation ppp no logging event subif-link-status async dynamic address async mode interactive peer default ip address 60.200.166.15 ! ip classless ip route 0.0.0.0 0.0.0.0 60.200.164.1 permanent ! line con 0 line 1 password abc123 autoselect ppp login modem InOut transport input all stopbits 1 speed 2400 flowcontrol hardware == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VPN 3DES ON 2MB Link with 25XX
Hi Christophe, The 2500-series routers would *NOT* be capable of performing 3DES processing with a 2MB link. To put it into perspective, I recently spoke to an engineer from Cisco and he confirmed that one of the higher end routers, the 3640, will only perform 3DES encryption at a rate of 512Kbit. The 3640 is easily 10+ times faster than the 2500 series. As well, a 1600-series router performing only DES (56-bit) encryption is only capable of about 64kbit/sec processing. This router is comparable in performance to the 2500-series. 3DES processing, then, would be far less and would be VERY poor. Therefore, the 2500 wouldn't even be capable of managing 64 Kbit or 128 Kbit of 3DES processing. Your 2Mb link would be better served by something like the Cisco VPN Concentrator 3005 or similar. Regards, Paul Lalonde, CCNP [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hello, I wish to setup a 3DES VPN between two sites (a local and a remote site) on a 2MB serial link using 2 2502 cisco routeurs. I will have 30 people working on the remote site using telnet session, NT file and print with servers in the local site. Do you think the 25XX could handle such calculation (3DES processing) for such amount of user. If yes is someone already setup such thing ? regards, Christophe. ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
