Re: Catalyst 5000 Console

2000-11-07 Thread Raymond Everson (Rainman)

Sup' 1 & 2 use rollovers; Sup 3 uses straight through, as Winston said.
R/ Rainman

"Shaw, Winston Mr." wrote:

> Please try a straight-through cable.
>
> Winston.
>
> -Original Message-
> From: Austin [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, November 04, 2000 5:55 PM
> To: [EMAIL PROTECTED]
> Subject: Catalyst 5000 Console
>
> How does one connect to the Cat 5000 console port?
> The Cat's console port is not like other Cisco routers console ports.
> Please let me know.
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Remove me from list

2000-08-01 Thread Raymond Everson (Rainman)

Please remove my name from this august bunch and this great list.
I'll request reinstatement after my 2 week stint in the caribbean
for vacation.
Rainman

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Dealing with the garbage mail...

2000-07-29 Thread Raymond Everson (Rainman)



Here's my cut:
I don't know about ya'll, but I get >150 daily from this list. 
I agree absolutely and completely with Kevin;
that is, I have long ago grown weary of "How many questions?" ... "I
just passed my [fill in blank]"  &
even more, folks asking even the most rudimentary question without
so much as trying any of a bazillion,
readily available reference sources.  I'm tolerant of newbies
& novices, but not when you have to spoon
feed the little guys ... . that's called LAZY, and PLEASE do a little
homework before posting ...
Also, PLEASE, this is not an online auction or flea market.  Don't
ask where you can "getta" and PLEASE
STOP using this forum for discount sales.  It's disrespectful
and calls your professional ethics into question.
Likewise, "Integrator Wanted!"  you gotta be frickin' kidding me! 
You can't swing a dead cat by the
tail without hitting a head-hunter.  If you'd like a mailing list,
please ping me in private, but PLEASE!  This
is not a friggin' JOB POST.
"I'm a CCNA 2.0" "What's to become of my CCNA 1.0 cerification" "CCNA
expires" Look, I really am glad
for you and you've demonstrated an admirable commitment which enhances
ALL of our credibility.  BE
GIDDY SOMEWHERE ELSE!  Call your friends, shout from the mountain
top!!  PLEASE, for crying out loud,
take it where it belongs. and that AIN'T HERE.
Lastly, please do not drag the earnest participants of this list down
with clever demonstrations of your
social aptitude.  IOW:  two sentence banterings are a major
p.i.t.a.  Contribute something or hit the
bricks. honest.
Very sincerely,
Rainman
Kevin Wigle wrote:

hmmm
- I thought this list was for certification questions and help making sense
out of exam questions and understanding why this answer is wrong and that
one is right. Actually,
this list is not for technical inquiries.  You normally pay someone
for that. (unless Howard rescues you and puts the question into a certification
compatible form :-)  ) I
would prefer that our FAQ be updated and then I would agree to the blunt
answer like: Read the FAQ! for questions about how many questions, passing
score, how long, etc. my
take anyway. Kevin
WigleCCDP, CCNP..

- Original Message -

From:
whatshakin

To: [EMAIL PROTECTED]

Sent: Friday, 28 July, 2000 22:42

Subject: Dealing with the garbage
mail...
 From here on out I am going to reply
to all those certification related questions I see with a blunt: Cisco
certification related posts are not acceptable in this newsgroup. Please
go to alt.certification.cisco with all your cert related questions. 
This newsgroup is for technical Cisco related inquiries and reference only. 
Thank You. If everyone
else would can this response and use it when they see errant posts we can
get it done quickly and comprehensively.  As long as we stop answering
all the questions they should go away...hopefully.  Further, if everyone
uses the same response we could use it as a filter in our email clients
to avoid them ever getting to our inboxes etc, or you could send the replies
directly to the original poster so the group does not have to endure them. What
do you folks think?  






Re: High availability design with FR, how?

2000-07-18 Thread Raymond Everson (Rainman)

My I please suggest you check out MHSRP?  Natural TCP conversation
load balancing it works:


Oz wrote:

> have not read the whole thread  but from my meager understanding using HSRP
> you need a live T  to go with it ..
> To have the  instant failover..
>  I will be playing with this in a couple of weeks cause I have exaclty the
> same problem I have to resolve for a client..
> just waiting for the other T  to comes in..
>   But I am trying to figure out a way how to utilise both T   rather than
> having one just sitting there..
>   i am not 100 %  sure  but i thought I heard the PM  say that UUNET give us
> a sweet deal for the second T
> As they understand only one will be sucking up the BW at any given point in
> time..
> maybe we can change that..
>   i am very tired as I just got in but please let me know how you make out
> or email me your fone #  and we can yak about it a little in the morning
> Oz
> http://www.mcseco-op.com/helpfull_links.htm
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Router throughput

2000-07-18 Thread Raymond Everson (Rainman)

After further thought and having been a little short, I thought I'd add
something to my previous offering.  I specifically remember two very
odd questions on the CCIE written (roughly) about this subject, no
kiddin'.

Throughput=Switching Time+(Packet SizexTime per Byte) Look at this
formula a little more closely. It says, for one thing, that the time
normally
needed to switch a packet is a constant, made up of factors like
interrupt
frequency, header processing, routing table lookup time needed, and so
on.
Also, the throughput formula claims that there is a component to
throughput
that is proportional to packet size and that represents the time needed
to
copy a packet before translating it.

Using this formula can be of some help in comparing routers whose
vendors
use differing yardsticks in measuring their products' performance.
Another way
of making sense of such comparisons is to obtain throughput statistics
for different-
size packets, perhaps of a minimum, middle, and maximum size. Or you
could
look for two different statistics--switching speed given in packets per
second
and throughput represented as bytes per second.

r/
rainman

"Howard C. Berkowitz" wrote:

> >Hello to All,
> >
> >What command can I use on a Cisco router to display
> >the Mhz power of the router?
> >
> >
> >Thanks
> >
> >Omer
>
> What problem are you trying to solve?
>
> Even small routers have some distributed intelligence -- the physical
> and data link handling are not in the main processor.  As you move up
> in routing power, more and more ASICs and processors are involved in
> handling an individual packet.  Performance can vary significanty
> with the particular path a packet takes through the router.
>
> So the MHz of one processor doesn't necessarily determine router
> performance.  Indeed, I'm not even sure if MHz is a meaningful
> measurement for some of the ASICs.  Perhaps a more hardware-literate
> person can comment there--they presumably are clocked.
>
> Another area, more to the point in very high speed routers, is that
> the chips are evolving to having multiple data streams and possibly
> multiple instruction streams.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Opinions on Caslows CCIE Book and How was Networkers

2000-07-17 Thread Raymond Everson (Rainman)

IMHO, The Caslow "Cisco Certification" book is peerless.  Al the right core
stuff
with the "What to do/What to look for" in a neat, understandable format.
r/
rainman

J K wrote:

> Hello Group ,
>
> Anyone get to go to orlando to networkers havent heard much conversation
> about it besides cisco's site .
>
> i was wondering  if any one has had success using this book and how would
> you rate this book . I recently purchased the 3 volume set from fatbrain
> that comes with his ccie "lifesaver" an internet book and ATM volume 3 .
> also if anyone that has had success could recomend some titles to me . I
> would appreciate it .
>
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2505 routers

2000-07-16 Thread Raymond Everson (Rainman)

They're just hub ports, with an internal controller BUT, if you want to
pass traffic to another segment or if you want to employ other "routing"
functions, i.e. ACL's, Policy Routing destinations, caching tweaks, etc.
then the hub connected devices are the segment/broadcast domain
those routing functions would target.  In other words, you're routing
TO the devices connected to the hub through the E0 virtual interface.

FTP is one of the TCP/IP applications and TFTP is another =8^) 
c'mon mister mcse, you knew that!  you're testing us, right?  =8^)
but seriously, if you want the NT box to run the TFTP daemon (listening
service) all you need to do is put one on there and configure it.
Hummingbird Exceed, Netmanage Chameleon Suite are both good
commercial products. You can also get some good information from:
http://www.microsoft.com/NTServer/nts/exec/vendors/freeshare/default.asp

r/
rainman


Dave Page wrote:

> Please help out a Cisco newbie with two naive questions:
>
> 1.  The 2505 has two serial interfaces and 8 RJ-45 ethernet ports.  Are the
> 8 ethernet ports routable interfaces, or is it just the serial ports?  My
> hunch is that the ethernet ports just perform a hub function.
>
> 2.  What qualifies as a TFTP server?  My NT 4.0 server is an FTP server,
> does that count?  If it's possible, what has to be done to an NT box to make
> it a TFTP server?
>
> Thanks in advance everyone!
>
> Dave Page
>
> MCSE, MCP+I, A+
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Router CPU power

2000-07-16 Thread Raymond Everson (Rainman)

Howeird is completely correct.  Sure enough, you can get cpu processor
speeds from the gear fact sheet, but this is a poor indicator of how the
box is going to perform under load.  There are simply too many factors
effecting actual throughput to use this metric for anything except a
stripped-down router.  This is why routers, switches, etc. are rated on
PPS.
r/
rainman

"Howard C. Berkowitz" wrote:

> >Hello to All,
> >
> >What command can I use on a Cisco router to display
> >the Mhz power of the router?
> >
> >
> >Thanks
> >
> >Omer
>
> What problem are you trying to solve?
>
> Even small routers have some distributed intelligence -- the physical
> and data link handling are not in the main processor.  As you move up
> in routing power, more and more ASICs and processors are involved in
> handling an individual packet.  Performance can vary significanty
> with the particular path a packet takes through the router.
>
> So the MHz of one processor doesn't necessarily determine router
> performance.  Indeed, I'm not even sure if MHz is a meaningful
> measurement for some of the ASICs.  Perhaps a more hardware-literate
> person can comment there--they presumably are clocked.
>
> Another area, more to the point in very high speed routers, is that
> the chips are evolving to having multiple data streams and possibly
> multiple instruction streams.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CDP not working on subinterface

2000-07-16 Thread Raymond Everson (Rainman)

... m'tinks Ele'Chil' might be on to sumpin' here could you capture the
sho fr pvc / and sho fr map from both ends of the one NOT passing CDP
traffic... and post them?

 yeah, this is of some interest to me too, but priscilla hit the issue
with the "broadcast" thread

 think of all the mechanisms passing the various protocol encaps here
inarp - what's the LPort doing?  What's the CIR/BW?  Util?  When you do
an extended ping with a bit pattern of 0x4040; 0x; & 0x with,
say 150 itterations, what happens?

R/
Rainman

ElephantChild wrote:

> On Wed, 12 Jul 2000, John Neiberger wrote:
>
> > The PVC is working perfectly, except for CDP.  It's configured exactly like
> > the 89 other subinterfaces on that major interface, so I doubt it's a
> > configuration issue, but it still may be.  The remote side has two PVCs on
> > one major interface and CDP is working on one subinterface only and they,
> > too, are configured exactly the same except for DLCI and IP address.
>
> Do you have problems with other broadcasts not making it on that (or any
> other) PVC? If you're not exceeding your CIR on that PVC (have you
> checked that?), my guess is that the broadcast queue on the
> (sub)interface gets full, or that some other queuing limit kicks in.
>
> > >  Is it just CDP not working or is the whole PVC showing as inactive?
> > I've
> > >  seen where if LMI was configured incorrectly at the remote end when the
> > >  router was first brought up it would come up but after a minute or so go
> > >  down because it wasn't receiving lmi keepalives from the switch.  In this
> > >  case it was a telco switch problem and I do know that LMI is supposed to
> > be
> > >  autosensing with the newer software.
> > >
> > >  If it is just CDP down I would have suggested something to do with the
> > >  timers but you said the remote end isn't receiving any packets at all?
> > >  Hmmm.
> > >
> > >  -Original Message-
> > >  From: John Neiberger [mailto:[EMAIL PROTECTED]]
> > >  Subject: RE: CDP not working on subinterface
> > >
> > >  We use entirely point-to-point subinterfaces, and we have no special
> > >  configuration on them regarding broadcasts.  On this particular major
> > >  interface, there are 90 subinterfaces and CDP is working just fine on all
> > >  but two of them.  They all have identical configs except for the DLCIs
> > and
> > >  IP addresses.  "show cdp int" shows that CDP packets are being sent, but
> > >  they aren't being received at the opposite end, according to "debug cdp
> > >  packets".
> > >
> > >  Another oddity about this is that it worked correctly when I first
> > brought
> > >  the circuit up for about a minute or so, and then it stopped.  Very
> > >  strange...
> > >
> > >  >  This is purely a guess...
> > >  >
> > >  >  Are you allowing broadcasts across the PVC by using the broadcast
> > keyword
> > >
> > >  >  on the frame-relay map command? CDP sends to a multicast address.
> > >  >
> > >  >  Priscilla
> > >  >
> > >  >  At 08:50 PM 7/11/00, John Neiberger wrote:
> > >  >  >No, I haven't done that, but I did "show cdp int" and the router said
> > >  that
> > >  >  >it was sending cdp packets out that interface.  Both routers on each
> > end
> > >  of
> > >  >  >the link reported this.  I'll try debugging tomorrow.
> > >  >  >
> > >  >  >
> > >  >  > >  Did you run "debug cdp" to verify that it is being sent?
> > >  >  > >
> > >  >  > >  Magnus Thorne
> > >  >  > >
> > >  >  > >  -Original Message-
> > >  >  > >  From: John Neiberger [mailto:[EMAIL PROTECTED]]
> > >  >  > >  Subject: CDP not working on subinterface
> > >  >  > >
> > >  >  > >  We do not have CDP disabled anywhere on our routers, either
> > globally
> > >  or
> > >  >  >at
> > >  >  > >  the interface level.  I brought up a new PVC today and at the
> > remote
> > >  side
> > >  >  >I
> > >  >  > >  could see both PVCs to that router.  After a few seconds, though,
> > >  one of
> > >  >  > >  them disappeared from the "show cdp neighbors" output.  No
> > changes
> > >  were
> > >  >  >made
> > >  >  > >  to configs at either side, it just did this on it's own.  This
> > >  particular
> > >  >  > >  PVC is terminating at a subinterface on both routers, and other
> > >  >  > >  subinterfaces on the major interfaces at each end still report
> > their
> > >  cdp
> > >  >  > >  neighbors correctly;  the problem is only on this particular
> > >  >  >subinterface.
> > >  >  > >
> > >  >  > >  I have noticed this in the past with a different PVC, so it's
> > >  happened at
> > >  >  > >  least twice in our network.
> > >  >  > >
> > >  >  > >  any ideas why it works temporarily and then quits?
>
> --
> Bungee jumping and skydiving are for wimps. If you want to experience
> true gut-wrenching terror, have children. --Dusty Rhoades.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.g

Re: Access List Question

2000-07-16 Thread Raymond Everson (Rainman)

I'm sorry Mohamed, I have to disagree that this is not possible with Cisco
IOS.
All of the advice I've seen so far is true to Standard & Extended ACL's.
BUT,
with Named Access Lists (=/> IOS 11.2) you can dynamically change the list,
but you must disable the ACL wherever it's applied, and re-enable it after
the
change (personal experience).

Named Access List Example

The following configuration creates a standard access list named
Internet_filter and an extended access list named
marketing_group:

interface Ethernet 1
 ip address 2.0.5.1 255.255.255.0
 ip access-group Internet_filter out
 ip access-group marketing_group in
...
ip access-list standard Internet_filter
 permit 1.2.3.4
 deny any
ip access-list extended marketing_group
 permit tcp any 171.69.0.0 0.0.255.255 eq telnet
 deny tcp any any
 permit icmp any any
 deny udp any 171.69.0.0 0.0.255.255 lt 1024
 deny ip any any log


... I will say that I never say (yeesh, what a sentence!) NEVER so, I
could be just as wrong as right!

R/
Rainman

Mohamed Abubakkar Siddiqu wrote:

> It is not possible in Cisco.
>
> But one stupid Idea.
>
> U just transfer the configuration into TFTP server.
> Edit the Configuration and transfer back.
>
> regards
> siddiqu .T
>
> --
> T. Mohamed Abubakkar Siddiqu CCNA
>
>  "Scott M. Trieste" <[EMAIL PROTECTED]> wrote:
> > Is there anyway to remove a specific line from an access list without
> > erasing the entire thing.  Thanks in advance.
> >
> > Best Regards,
> >
> > Scott M. Trieste
> >
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> __
> FREE voicemail, email, and fax...all in one place.
> Sign Up Now! http://www.onebox.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: LAN to LAN bridge

2000-07-08 Thread Raymond Everson (Rainman)

Only way I can think of to tie different parts of the same ip subnet
together in disparate locations (routers) is through IRB.  Here's a
sample config:
-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-
version 11.2
!
hostname BVI1
!
ip subnet-zero
!
interface Hssi0
 no ip address
 no logging event subif-link-status
 bridge-group 1
!
interface FastEthernet0
 description connected to Ames Home Office LAN
 no ip address
 no logging event subif-link-status
 bridge-group 1
!
interface BVI1
 description Rocky Hill-to-Southbury IRB Connection (Southbury)
 ip address 172.16.8.110 255.255.0.0
 no logging event subif-link-status
!
router eigrp 1
 network 172.16.0.0
!
ip classless
!
bridge irb
bridge 1 protocol ieee
 bridge 1 route ip
!
-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-;-

HTH
Rainman

I have two LAN connected by dedicated line and two cisco 2611 routers
.Brief config can be seen  below .
 router1#
inter s0/0
 ip address 10.20.1.1/24
inter e0/0
 ip address 10.10.10.21/24
ip route 10.10.12.0 255.255.255.0 10.20.1.2
router2#
 inter s0/0
  ip address 10.20.1.2/24
 inter e0/0
  ip add 10.10.12.21
 ip route 10.10.10.0 255.255.255.0 10.20.1.1

Can I make the two lan be in the same subnet by bridging  , how can I do
that ,is there any effects ?


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



What's wrong with this question?

2000-07-08 Thread Raymond Everson (Rainman)


Which of the following is/are true?
 
# An internetwork is usually confined to a single organization
# An internetwork can connect many separate, and usually different,
networks
# An internetwork can connect similar networks and depending on the
range of media attachments, transmission speeds, and other technical details,
maay be able to connecti different types of networks
 
Choose each appropriate item.


Re: Spanning Tree

2000-07-03 Thread Raymond Everson (Rainman)


h
A Root Bridge election is one function:  determine which bridge
in a collection of
bridges on a LAN and for multiple inter-connected LANS will be the
Root...
The Designated Bridge election has another, different function: 
determine which
bridge, as you noted, has the least cost path TO the Root Bridge. 
This notion of
having a designated bridge precludes the possibility of having simultaneously
active
bridges that are acting in parallel to each other between two LANs.
Each election process is triggered anew with topology deltas, of course,
which is
why the STA is a dynamic algorithm.
Does this explanation respond to both of your questions?  =8^)
R/
Rainman
"Deloso, Elmer G." wrote:
 
Hi, all.
First of all, I just want to test
if I'm able to post on the forum at all since I don't see any responses
to my first posting.
If this goes through, can someone
tell me why would Spanning Tree Algorithm need a designated
port when the root port has already
been established as the least cost path to the Root Bridge?
Thanks.



Re: Static Routing or Route Maps

2000-07-02 Thread Raymond Everson (Rainman)

Pardon my interruption Lekan I *believe* there may be one consideration
missing from your advice.  If I am wrong, please forgive me.  Floating statics
which point to a next hop address are, of course, hard-coded routes in your
IGP table... no matter if the metric for a secondary or backup route has a
larger AD the one with the smaller AD is hard-coded in the route table; if
it goes down, there's no way for the route table to know it.  What I have
done to overcome this is to use the interface itself as the next hop, e.g.:

0.0.0.0 0.0.0.0 Serial0/0.1
0.0.0.0 0.0.0.0 Serial0/0.2 200

... but, truth be known, I do not have a very granular explanation why this
configuration is able to dynamically perform routing table maintenance.

How 'bout it you Brainiacs?

R/
Rainman

Lekan Magbagbeola wrote:

> Debbie,
>
> How about if you configure two floating static routes and make the static
> route to the primary link to have a lower admin distance than the secondary
> link. Try this and let me know if it works.
>
> Lekan
>
> >From: "Debbie Westall" <[EMAIL PROTECTED]>
> >Reply-To: "Debbie Westall" <[EMAIL PROTECTED]>
> >To: <[EMAIL PROTECTED]>
> >Subject: Static Routing or Route Maps
> >Date: Fri, 30 Jun 2000 11:15:20 -0700
> >
> >Greetings,
> >
> >I have a customer that has two routers, each with links to ISPs. The links
> >are statically routed. Using default routes in each router. They would like
> >to have one link switch over to the other if one fails and when it comes up
> >switch back. Is there a way to do this using static routing still (maybe
> >floating static routes) or can I use route-maps OR will I have to configure
> >a routing protocol?
> >
> >Thank you for your assistance.
> >
> >
> >Debbie Westall   Conxion Corporation
> >Manager, Network Support 4201 Burton Drive
> >Voice: (408) 566-8534  Santa Clara, CA 95054-1512
> >Pager: (408) 407-2917  Email:  [EMAIL PROTECTED]
> >***
> >
>
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: pasting access list to router config

2000-06-28 Thread Raymond Everson (Rainman)

... the answer to your question is "yes" ... .
adding/subtracting/manipulating
acls is, and has always been, a little bit of a black art (most especially
the
big ones) you are not alone, my brother and no amount of
experience
is going to make this any easier... believe it you just have to learn
to pay
attention to detail.
r/
rainman

Erick wrote:

> Do you have this access list applied to the interface
> your telnet'd into/across? If so, you may be blocking
> your telnet for a second while access list is changed?
> Just a thought.
>
> --- [EMAIL PROTECTED] wrote:
> > Hi group,
> >
> > I've been having some problems when pasting access
> > lists to routers over
> > telnet.
> >
> > sometimes the paste "crashes" and sometimes the
> > lines get corrupted! I've had
> > to resort to pasting the list a bit at a time - but
> > even this isn't always
> > 100% successful.
> >
> > just wondered if anyone has had similar problems?
> >
> >
> > Simon
> >
> > ___
> > UPDATED Posting Guidelines:
> > http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
>
> __
> Do You Yahoo!?
> Get Yahoo! Mail - Free email you can access from anywhere!
> http://mail.yahoo.com/
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Explanation for PAT and ISDN Callback

2000-06-28 Thread Raymond Everson (Rainman)

PAT=Port Address Translation
To enable, end NAT IG statement w/ "overload"
"Port" refers to TCP port ... so, on the inbound port, the IOS keeps track of
the actual packet, because he assigns a unique tcp port to that data
conversation...
 and recognizes the packet outbound (if it ever happens).and strips the
arbitrary tcp port tag he put on there..

... but basically, that's it.  Lemme know if you want or need any more 
R/
Rainman

"David.Singh" wrote:

> Hi
>
> PAT
> Can someone pls explain how PAT works. I read Cisco's NAT doc but I am still
> confused.
>
> ISDN Call-Back - When does one use this and why
>
> Rgds
> DS
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Slightly OT: Telco Line Problems

2000-06-27 Thread Raymond Everson (Rainman)

I have a vast wealth of (unfortunate) experience with US West no kidding.
US West's internal customer care POLICY is to deny any problem with their
FR network it's nearly assured you're experiencing problems arising from
some of the US West extra-terrestrials.

 here's something to try on your next event:

extended ping; 1500 byte packets; 1 second intervals; 1000 itterations; bit
patterns of 0x4040 & 0x. if you're missing every 20th =/- packet, rest
assured mate, it's in the frame network.
R...
Rainman

John Neiberger wrote:

> >  >We are having some odd line problems at one of our branches that none of
> us
> >  >have been able to figure out so I thought I'd throw this one out to the
> >  >group.
> >  >
> >  >From time to time, sometimes many weeks in between events, our csu/dsu
> >  >begins to report OOF and AIS (T1 yellow alarm) errors, but the line will
> >  >stay up for a while.  Then, at some point, we'll get a T1 red alarm and
> the
> >  >circuit will die.  We call USWest who then tests the line.  According to
> >  >them, they've replaced just about everything between the CO and our
> >  >location, and the line tests clean.  Friday it was bouncing every 30-60
> >  >seconds so we had them test it again.  Since the test, it has been error
> >  >free but they claim not to have discovered any problems.
> >
> >   From CSU/DSU or router interface statistics, can you plot any pattern
> >  from when you first get errors to when it goes red?
>
> We haven't really noticed a pattern.  Although, this latest time the line
> died, the amount of time between bounces almost seemed to decrease
> logarithmically.  First it would bounce every couple of weeks, then every
> few days, then every few hours, etc. until it was bouncing every 30-60
> seconds.  At that point, I told them to do intrusive testing.  They claim
> they didn't fix a thing but the line has been perfect ever since.
>
> >
> >  >
> >  >My only remaining guesses are these two:  bad csu/dsu that isn't bad all
> the
> >  >time, or intermittent problems at the location (we share it with a very
> >  >large supermarket.)
> >
> >  I can't resist.  Do you have a special problem with bean counters there?
>
> Perhaps those are the cause of the AIS errors (Actuarial Interference of
> Service) or the OOF errors (Overdose Of Fava).  
>
> ___
> Get 100% FREE Internet Access powered by Excite
> Visit http://freelane.excite.com/freeisp
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Can you block CDP with an access list???

2000-06-27 Thread Raymond Everson (Rainman)

again. read up udp=layer 4
cdp=NOT layer 4
 in fatto:  cdp is cisco's implementation of stretching layer 2 rules.

The Cisco Discovery Protocol (CDP) Discovery Protocol

CDP allows devices to share basic configuration information without even
configuring any protocol
specific information.  CDP is enabled by default on all interfaces.

CDP is a Datalink Protocol occuring at Layer 2 of the OSI model.   This is
important to understand
because CDP is not routable.  It can only traverse to directly connected
devices.

CDP allows you to view information such Operating System Version, Protocol
Information, and much
more.   This can be very handy for troubleshooting a variety of problems.

Aaron Prather wrote:

> If you can what protocol does it use? UDP? i know its a protocol in
> itself, but can this be done? what port number?
>
> Thanks guys,
>
> Aaron
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Setting the time on the router

2000-06-27 Thread Raymond Everson (Rainman)

c'mon guy, this is just plain lazy

R1#en
Password:
R1#clock ?
  set  Set the time and date

R1#clock set ?
  hh:mm:ss  Current Time

R1#clock set [n' go from there]

malzubt wrote:

>  What is the simplest way to set the time on a router.
>
> thanks
>
> --== Sent via Deja.com http://www.deja.com/ ==--
> Before you buy.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN Configuration - Help

2000-06-26 Thread Raymond Everson (Rainman)

Aziz, Light! (Sorry, it's from "The Fifth Element" and I couldn't help it)

First, the easy one:
If you don't want RouterB to be able to dial to RouterA, simply do not define
interesting traffic (am I missing something?)
Second (the linear thinker in me) (Assuming Q.931 & Q.921 are cool)
Remove auth. altogether; does the int complete the call?
Next (progressive jazz):
Eliminate "Ppp pap sent-username RouterB password cisco2" from the BRI0
interface on RouterB; with debug dialer & debug ppp neg, what's going on?
(btw:  doophus question of the day:  what's "debug ppp auth" ?
I think your passwords are bass-ackwards.  On RouterB, I think you wanna
put "Ppp pap sent-username RouterA password cisco1" and vice-versa on
RouterA.

Remember the words of the venerable Bruce Caslow "It's always TWO
things; (1) What to do; and (2) What to look for"

Please let me know if this works 'cause I can't call out to another ISDN-
Connected router  (unless you want to work a few things out together!)
Tx,
Rainman

mm wrote:

> Do a search on 'chap pap' and 'callin'
>
> "Aziz Islam" <[EMAIL PROTECTED]> wrote in message
> 000701bfd544$81014620$[EMAIL PROTECTED]">news:000701bfd544$81014620$[EMAIL PROTECTED]...
> > Hi Folks,
> > My ISDN configuration (using an ISDN simulator) does not work for some
> > reason. Can anyone please give a sanity check to my configurations below
> and
> > point out where I am fumbling.  I am trying to make an ISDN configuration
> > using PAP and different passwords at both ends to work. Also, only RouterA
> > should be able to dial-out to RouterB. When I do a "debug ppp auth" and
> > "debug ppp neg", I see an authentication failure message.  Can anyone
> please
> > spot the problem with my configuration ? I have tried to scan the whole
> > documentation CD but to no avail. Thanks.
> >
> > Aziz
> >
> > RouterA#
> > Isdn switch-type basic-dms100
> > Username RouterB password cisco2
> >
> > Int bri 0
> > Ip address 10.1.1.1 255.255.255.0
> > Encap ppp
> > Ppp authentication pap
> > Dialer map ip 10.1.1.2 name RouterB broadcast 2220001
> > Isdn spid1 111000100 1110001
> > Isdn spid2 111000200 1110002
> > Dialer-group 1
> > Ppp pap sent-username RouterA password cisco1
> > !
> > dialer-list 1 protocol ip permit
> >
> > RouterB#
> > Isdn switch-type basic-dms100
> > Username RouterA password cisco1
> >
> > Int bri 0
> > Ip address 10.1.1.2 255.255.255.0
> > Encap ppp
> > Ppp authentication pap
> > Dialer map ip 10.1.1.1 name RouterA broadcast
> > Isdn spid1 222000100 2220001
> > Isdn spid2 222000200 2220002
> > Dialer-group 1
> > Ppp pap sent-username RouterB password cisco2
> > !
> > dialer-list 1 protocol ip permit
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > ---
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ip and subnet

2000-06-25 Thread Raymond Everson (Rainman)

Let me have a whack at this (somewhat ambiguous) scenario
10.150.25.25/16 tries to ping 10.150.100.25/24 (assuming we're
traversing a router, right?)

10.150.25.25/16 is trying to ping an address in his same network and the
interface has no reason to believe that 10.150.100.25 is NOT in his own
broadcast domain or in his own subnet and therefore has no reason
to attempt to arp elsewhere for the owner of an address he thinks he
owns.

How'd I do?
Rainman

Joe Pinkus wrote:

> No this will not work,  tell us what will happen when a user on floor 1, let's
> say his ip address is 10.150.25.25/16 tries to ping a user on floor 2 whose ip
> address is 10.150.100.25/24.  The ping will fail, but you need to know why in
> order to understand why this ip scheme will not work.  By the way, if you are
> using a private address, why are you choosing an addressing scheme like this
> anyway.
>
> Joe
>
> SH Wesson wrote:
>
> > If on one floor I use 10.150.0.0 255.255.0.0 and on the remaining 2 floors I
> > use 10.150.100.0 255.255.255.0 and 10..150.102.0 255.255.255.0, will this
> > work in terms of all three networks being able to communicate with each
> > other.  Will there be any problems, etc.  Can someone help me reason this
> > out.  Thanks.
> > 
> > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: cpu utilization & ipx routing

2000-06-24 Thread Raymond Everson (Rainman)

What IOS are you running?  Any tunneling going on there?  You're right!  This is

weird
Rainman

Michael Fountain wrote:

> when you do a -  show proc cpu  -  what is using up the greatest precentage?
>
> >
> >i have a weird problem.
> >it is a 2500 router.
> >running ipx, apple , and ip.
> >supporting apple machines with appletalk and ip.
> >ipx is not needed at all.
> >i take the ipx routing out then the cpu utilization goes
> >up 25%.
> >i put it back on then down to around 10 %.
> >is this not weird.
> >tell me what you all think on this issue.
> >thanks.
>
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Sample Question Question

2000-06-24 Thread Raymond Everson (Rainman)

I ran across this question some time ago and kept the darned thing
because (I *guess*) I still have something to learn about IP ... . just
when I was *sure* I had it down cold.  Could you lend a fella a hand?

Given the IP address of 193.243.12.43 and a subnet mask of
255.255.255.128, what is the subnet address?

a.194.243.12.32
b.193.243.0.0
c.194.243.12.43
d.193.243.12.128
e.None of the above.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
e. None of the above

The Subnet Address is found by setting all of the host bits in an
address to 0.
According to the mask, there are 7 host bits, so applying this rule
yields a subnet
address of 193.243.12.0. However, closer inspection yields that there is
only one
subnet bit in this Class C address - therefore, this is an illegal
address/mask pair.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VISIEO??? HELP!! Need Icons

2000-06-24 Thread Raymond Everson (Rainman)

If you have visio, you can get some @:
http://www.cisco.com/partner/visio/

 if you don't, you SHOULD!

Brandon Carroll wrote:

> Where can I find a downloadable program that has the icons for routers and
> switches for doing a network design?
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ACL Question

2000-06-24 Thread Raymond Everson (Rainman)

*Still* haven't figured this one out:

Create an IP ACL, in as few lines as possible of course, which permits
only even-numbered IP addresses.

Ideas?

Rainman

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]