Re: Certifications on resumes

[ROB]

I fall on the side that says; since CCNA is a prerequisite for CCNP, it should not be
listed.

Robert Padjen wrote:

> I was asked an interesting question this morning by a
> friend who just passed their CCNP. Basically they
> wanted to know if they should now remove the CCNA from
> their resume or list both CCNA and CCNP.
>
> I took the position that (as I do) the CCNP implies
> the CCNA, and therefore one would only list their
> 'highest' within a track. A number of co-workers said
> no, list it all.
>
> Please chime in with your position - unicast if your
> just sending a vote and multicast if you are raising a
> discussion. Sorry to those who feel this is an
> improper use of the board.
>
> Thanks.
>
> =
> Robert Padjen
>
> __
> Do You Yahoo!?
> Yahoo! Auctions - Buy the things you want at great prices.
> http://auctions.yahoo.com/
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Certifications on resumes

[Rob]

That sounds like a very good compromise.  I think it is a good way to go.

Craig Columbus wrote:

> I've actually seen more than one post that said CCIE required, CCNA 
> preferred.  Go figure.
> In my experience, CCNP doesn't get a lot of play in HR departments.  HR 
> recognizes CCNA, but doesn't understand CCNP.
> I've also seen a fair number of recruiters/HR confuse CCNA with CNA.
> Bottom line?  I don't put any letters after my name, but I have a 
> certifications section on my resume where I list each certification, spell 
> it out, and put the date achieved...even an HR person should be able to see 
> that the CCNA = Cisco Certified Network Associate, and that it was earned 
> prior to my CCNP.
> 
> Craig
> 
> At 10:08 AM 1/26/2001 +, you wrote:
> 
>> Robert,
>> You will find that some jobs advertised in a way that they are looking for
>> people who are CCNA or CCIE ( so where is CCNP ) . It seems that some
>> recruitment agency do not know the difference between CCIE and CCNA. I will
>> put it the CCNA somewhere in your resume just to avoid that .
>> 
>> Robert Padjen <[EMAIL PROTECTED]> wrote in message
>> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> 
>>> I was asked an interesting question this morning by a
>>> friend who just passed their CCNP. Basically they
>>> wanted to know if they should now remove the CCNA from
>>> their resume or list both CCNA and CCNP.
>>> 
>>> I took the position that (as I do) the CCNP implies
>>> the CCNA, and therefore one would only list their
>>> 'highest' within a track. A number of co-workers said
>>> no, list it all.
>>> 
>>> Please chime in with your position - unicast if your
>>> just sending a vote and multicast if you are raising a
>>> discussion. Sorry to those who feel this is an
>>> improper use of the board.
>>> 
>>> Thanks.
>>> 
>>> =
>>> Robert Padjen
>>> 
>>> __
>>> Do You Yahoo!?
>>> Yahoo! Auctions - Buy the things you want at great prices.
>>> http://auctions.yahoo.com/
>>> 
>>> _
>>> FAQ, list archives, and subscription info:
>> 
>> http://www.groupstudy.com/list/cisco.html
>> 
>>> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>>> 
>> 
>> 
>> _
>> FAQ, list archives, and subscription info: 
>> http://www.groupstudy.com/list/cisco.html
>> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> 
> 
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: SAMPLE QUESTIONS FOR CCNA.

[ROB]

http://www.cisco.com/cgi-bin/front.x/wwtraining/colt/ColtLogin.pl

Vishweshwaran wrote:

>   WHERE CAN I GET THE SAMPLE QUESTION PAPERS FOR CCNA?
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Cisco Product line

[ROB]

For the CCDA, it's not that you need to know exact port densities.  You must know what
product is best suited for what application.  And where in the scheme of the network 
the
product fits.  Be it at the core, distribution, or access layers.

Hunt Lee wrote:

> Does anyone knows what extent of Cisco product line knowledge is
> required for the CCDA exam?  For example:  the number of ports, the
> difference between 3620 and 3640 router etc?  I know a few like 2524,
> 1004, 3600 etc... but there are too many to look up.  Any help would be
> greatly appreciated.
>
> Regards,
> Hunt Lee
> IP Solution Analyst
> Cable and Wireless (Sydney)
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: what is the average age of people in this stuff?

[rob]

I bet you know plenty of 40 year olds that are just as smart.  As well 
as those that are 20 and aren't that intelligent.  The age thing, 
although very important on one lever, should not be the determining 
factor.

The excess energy of youth sometimes manifest itself in a way that can 
cause quite a bit of harm to something as delicate as an enterprise 
network.  The reason that some may view your youth as a bad thing is 
that through experience they have seen and in fact have done a few 
things in haste that may have needed a bit more thought.  Being almost 
right can be worst then being absolutely wrong in some instances.  And 
the one thing that age SOMETIMES gives you is patience.

So, use your youth and the knowledge you have.  Let us old folks 
continue to mentor you.  It makes us feel better and will only serve to 
help you in the long run.  ANd it certainly will not help you if you 
continue to push the fact that you know more then we do in our faces. 
We currently have the seats of power.  hang on.  Your turn is coming fast.

Rob

Denis A. Baldwin wrote:

> I find myself in much of the same situation Dale is in.  At 20, I am busting
> with energy most of the time. I know how to fix the problems and I have the
> desire to, but I often get the "you're not old enough and experienced
> enough" excuse from people who haven't seen my work.  A lot of people assume
> that experience and ability comes with age. I agree with that point to a
> degree.  However, I know a lot of teenagers who are brilliant and a lot of
> people in their 40s who don't have sense enough to get out of the rain. :-)
> 
> Denis
> 
> 
> Denis A. Baldwin - Network Administrator
> A+ / Network + / I-Net+ / MCP
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Robert Padjen
> Sent: Monday, February 26, 2001 1:17 PM
> To: Dale Frohman; Mel Chandler PMI
> Cc: [EMAIL PROTECTED]
> Subject: RE: what is the average age of people in this stuff?
> 
> 
> Contrary to Mr. Reagan, sometimes youth is a positive.
> I have two years on Mel, and I'm just finally getting
> out of the 'you're so young...' Govern your enthusiasm
> and impatience in meetings and kick (*$.
> 
> 
> --- Dale Frohman <[EMAIL PROTECTED]> wrote:
> 
>> If they think you are young, they will probably
>> think I am still a baby
>> being only 19.  I have my CCNA, 1/4 CCNP and
>> actively seeking MCSE 2k.  I
>> also have an AA degree and also seeking my bachelor
>> degree in computer
>> science.  I plan on getting my CCIE within the next
>> few years.  I have
>> worked with an internet company for more than three
>> years now.  I have
>> been told that I am impatient and immature, but I am
>> not one to just sit
>> around.  If anyone can help me dispel some of these
>> notions I would be
>> greatly thankful.  Also if someone veterans can give
>> some pointers/tips on
>> how to make it in this industry, that would also be
>> helpful.  I hope all
>> this hard work pays off!
>> 
>> Dale
>> 
>> 
>> On Mon, 26 Feb 2001, Mel Chandler PMI wrote:
>> 
>> 
>>> I'm 29 and all I ever hear about is how young I am
>> 
>> (I guess youth is
>> 
>>> automatically associated with inexperience)  But
>> 
>> I've been around.  I've
>> 
>>> done a four year tour in the Navy in the Advanced
>> 
>> Electronics field as a
>> 
>>> Sonar Technician on a Submarine.  I've worked for
>> 
>> some fortune 500 companies
>> 
>>> like Airtouch, IBM, Boeing, AST, Bergen Brunswick.
>> 
>>  I have some certs to
>> 
>>> back me up, but no matter what I do, it just never
>> 
>> seems to be enough...  Oh
>> 
>>> well, maybe after I have a PhD and CCIE I'll get
>> 
>> someone to listen to me.
>> 
>>> Mel L. Chandler, A+, Network+, MCNE, MCP+I, MCSE,
>> 
>> CCNA
>> 
>>> [EMAIL PROTECTED]
>>> Network Analyst
>>> Information Services
>>> PMI Delta Dental
>>> (562) 467-6627
>>> 
>>> 
>>> -Original Message-
>>> From: John Hardman
>> 
>> [mailto:[EMAIL PROTECTED]]
>> 
>>> Sent: Saturday, February 24, 2001 9:30 AM
>>> To: [EMAIL PROTECTED]
>>> Subject: Re: what is the average age of people in
>> 
>> this stuff?
>> 
>>> 
>>> LOL!
>>> 
>>> I am 36, and have the same problem, thank Cisco
>> 
>> that they put a ? in the
>> 
>&

Re: can I tell the ip of the PC that connected to a switch port?

[ROB]

The answer is NO.  You there is no command on the switch (basic layer 2 device) that 
will give you the IP address.

Tony van Ree wrote:

> Hi,
>
> Do a show cam dynamic on the switch port.  This will give you the MAC address.  Go 
>to the router or whatever do a show ARP and it will give you the IP address tied to 
>the MAC address.
>
> An ARP Table as I understanmd it shows the mapping of IP address to MAC addresses.  
>The CAM table shows the table of MAC addresses to ports
>
> Teunis
> Hobart, Tasmania
> Australia
>
> On Thursday, December 14, 2000 at 11:05:34 PM, Kenneth Lorenzo wrote:
>
> > Then that wouldn't be telling what the IP of the PC that is connected to
> > which port. You might even say just follow the wire that connects from the
> > PC to the port and lookup the IP of PC using network neighborhood. What I'm
> > trying to answer is in the basic function of a switch, there is not way you
> > can tell what the ip of the pc connected to a port is.
> >
> > "Erick B." <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > If you know the MAC address of the PC you can do a
> > > 'show cam dynamic' to see what switch port the device
> > > is hanging off of.
> > >
> > > --- Kenneth Lorenzo <[EMAIL PROTECTED]>
> > > wrote:
> > > > No. A Switch is a layer 2 device that does not have
> > > > any knowledge of upper
> > > > layer protocol such as IP in this instance.
> > >
> > >
> > > =
> > > -
> > >  Erick B | [EMAIL PROTECTED]
> > >  http://erickbe.home.dhs.org
> > > -
> > >
> > > __
> > > Do You Yahoo!?
> > > Yahoo! Shopping - Thousands of Stores. Millions of Products.
> > > http://shopping.yahoo.com/
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
>
> --
> www.tasmail.com
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: TACACS+

[ROB]

DO some research on Cisco Secure.  I think you will find the answers you need.

ItsMe wrote:

> The big network statement tends to lead me to believe you will wat an ACS
> also.
>
>   http://www.cisco.com/warp/public/cc/pd/sqsw/sq/
>
> ""Avran"" <[EMAIL PROTECTED]> wrote in message
> 918hdl$s5v$[EMAIL PROTECTED]">news:918hdl$s5v$[EMAIL PROTECTED]...
> > I am configuring tacacs for a big network.  Please shed some light on this
> > process.  I am unable to find any reference to TACACS+ for router access.
> >
> > Thank you.
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE exam

[ROB]

As it states, there are 2 phases to the CCIE exam.  First you must pass the
Written(qualification) exam.  Then you get the honor of sweating through the 2 day 
hands on
lab.

mak wrote:

> mak wrote:
>
> > Dear all,
> >
> > As I check the Cisco Web site.
> > There are two CCIE R&S Exams
> > 1. R&S Qualification Exam (MC)
>
> It seems that it is written exam. I thought it is hand-written exam rather than MC 
>exam
> :)
>
> >
> > 2. Lab exam
> >
> > Is the written exam including in lab exam?
> > I thought there are one written exam and one lab exam.
> >
> > Regards,
> > mak
> >
> > _
> > FAQ, list archives, and subscription info: 
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: can I get my ccdp by only take the CID3.0?

[ROB]

Yep...

Tony wrote:

> HI,
> I have get the ccnp1.0 now ,and want to CCDP1.0,can I get my CCDP
> certificate by only take the CID3.0.
>   thanks
>  Tony
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: can I get my ccdp by only take the CID3.0?

[ROB]

OPPS!  My bad.  Forgot about that little brain-teaser.

William Gragido wrote:

> No, you must have your CCNP and CCDA +the CID in order to hold both of the
> CCXP certifications
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Tony
> Sent: Sunday, December 17, 2000 9:44 PM
> To: [EMAIL PROTECTED]
> Subject: can I get my ccdp by only take the CID3.0?
>
> HI,
> I have get the ccnp1.0 now ,and want to CCDP1.0,can I get my CCDP
> certificate by only take the CID3.0.
>   thanks
>  Tony
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Materials

[ROB]

I would suggest that you checkout Ebay, there seems to always be a few labs for sale
there.

Patrick wrote:

> I am looking to extend my current CCNA certification and I was wondering
> what types of routers/switches I would need for a working lab.  I am looking
> to go for my CCNP certification. Also what books do you guys/gals suggest
> for the various tests?
>
> Thanks,
>
> Patrick
> [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

MCNS

[Rob]

Is the Managing Cisco Network Security course and test going away?  Has
a successor been identified?

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: MCSE OR CCNA

[Rob]

ML,
  Your point is well stated, but a little misplaced.  A CCNA is the bottom level cert.
You are comparing it with MCSE and a higher Unix cert.  That is not a fair comparison.
You should compare the MCSE with a CCNP and in the case of the Unix Guru, probably a
CCIE.

  But with that said, I think you have the correct idea by saying that the knowledge of
the server part of the equation will make a network engineer much more valuable.


Rob

ML wrote:

> I would like to reply to this, I have a very good friend that is a UNIX
> guru, makes a ton of cash and is very respected in the industry. Recently he
> did some studying and took the CCNA and passed.  He does not need the cert
> to earn more, mainly because it does not make a difference.  But he did tell
> me that it gave a different perspective on how the network runs and how his
> piece of the pie is affected. I do think that someone that has knowledge of
> servers and admin to include networking even at the basic level makes a
> better technician.  CCNA is a nice deal but not really that great a cert, I
> know plenty of folks that make a much better living as a server tech than a
> CCNA, the CCNA is only one part of a larger picture.  I would easily hire
> someone that has a very good overall knowledge of the network, servers and
> other devices.  Granted that sometimes a specialist is what you want but
> lets face it, folks that can do many things are a better bet.
>
> My Rant.
>
> ML
> Manny Akintayo <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > one has very little to do with the other.
> > I would recommend that you try to obtain your CCNA.
> > Best of luck
> >
> > Jide Akintayo
> > Adedapo Omisore wrote:
> >
> > > Please I need the advice of somebody in the house.
> > > I want to start my cisco certification next year, must I have my MCSE
> first
> > > before moving in to CCNA ? or I can do it directly without bothering
> myself
> > > with MCSE first.
> > > Any little advice will be appreciated.
> > >
> > > Thank you.
> > >
> _
> > > Get Your Private, Free E-mail from MSN Hotmail at
> http://www.hotmail.com.
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCDA exam

[Rob]

CCDA: Cisco Certified Design Associate Study Guide -- Todd Lammle(Contributor), et al;

Top-Down Network Design -- Priscilla Oppenheimer;

The Top-Down book is a must.  I suggest anyone who wants to understand the analysis
behind the designing of a network give this book a read.


Rob

Hunt wrote:

> Does anyone knows what books I should get for CCDA exam? Thanks so much
> for your help in advance, and have a happy Merry Christmas!!!
>
> Hunt   =^o^=
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Job Openings???

[Rob]

Check out the job sites (hotjobs.com, monster.con. ect.)  put in your skills, and see
what pops up.  See if anything pops up that will get you near a networking shop.  or on
that might let you cross train.

[EMAIL PROTECTED] wrote:

> Hello---I have been a CCNA since July 13 and have had no luck finding a job.
> I live in Houston and would prefer a job in Houston but I also have family in
> Chicago; VirginaiaBeach, Virginia; and New York.  I have pc helpdesk
> experience troubleshooting Compaq hardware and software, but have no
> professional networking or Cisco experience..only classroom and lab
> experience with 2500 series routers.I am not looking for a high salary
> just enough to get by, my main focus is getting experience.  My resume is
> attached.  Feel free to look at it and send me an email or call.
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: How to register Networkers 2001 in US

[Rob]

http://www.cisco.com/networkers/



wei li wrote:

> Does anybody know how to register Networkers 2001 in US?
> Thanks
> Wei Li
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Cisco Certs

[ROB]

There is no direct matching.  You can get any Cisco cert with absolutely no class room
time.  Just pass the test.  That plus the fact that there is absolutely no liberal arts
requirement for IT certifications.  There are some colleges that include MCSE and or
other certification type classes into their curriculum.  The University of Maryland for
example.


Rob

Ken wrote:

> Can anyone tell me how do the Cisco certifications match up to degrees
> obtained from a college?  I have been told that getting your MCSE is like
> getting a two year degree or having two years networking experience.
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Disappointed with CCNP!! + extras

[ROB]

What price do you put on folks with a combination of things?  Such as a few years (lets
say 3-4) with a CCNA vs the same experience with a degree?  or a degree and
certification?

Eric Gunn wrote:

> It is unfortunate that there are people that skim by these exams just for
> the sake of certification. But it is also important to remember people that
> are trying to get into the field. I am not saying just because you have
> certification X means you should make X amount of dollars, or expect job X.
> I have heard many horror stories of companies hiring MCSE certified people
> whom could not even format a disk. But for many people, such as myself it
> was a place to start. Lets be realistic here, nobody was born with the
> knowledge and everyone had to learn it at some point.
>
> The damage to certifications was quite evident when I completed my MCSE 1
> 1/2 years ago, at the time I was doing Desktop support with some server
> work in a large network. I was not even expecting to get a high paying job,
> just looking for a place to increase my skills and it was next to
> impossible. Once I took MCSE off my resume I had better luck finding a job,
> just with the 1 year experi.
>
> It is disappointing to someone like myself whom is in the middle. I have
> been working with Cisco equipment now for 2 years, 1 year in depth. So I do
> have some experience with it. Most available jobs I have seen thus far are
> entry level(I would be bored stiff) or Senior Level(I am not ready for
> yet). I just recently completed my CCNP + Security certifications. I do not
> by any means feel that I am a Cisco god, but I am much better off for going
> through the program. I have learned a great deal in the last year while
> completing the CCNP. I think lost in all of the arguments over
> certification is the most important thing of all. That if you do it right,
> you actually learn a great deal and I am sure that was what was the initial
> intent of all certifications.
>
> Sorry for the Rant,
>
> -Eric Gunn
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE Written Sec. Beta results - What if...

[ROB]

Studying for the Marconi (Fore) Certification!!!

Chuck Larrieu wrote:

> I'd be fat, dumb, and happy.
>
> Hhhmmm No change there ;->
>
> -Original Message-
> From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tom
> Lisa
> Sent:   Friday, January 12, 2001 3:45 PM
> To: [EMAIL PROTECTED]
> Subject:Re: CCIE Written Sec. Beta results -  What if...
>
> HORRORS!!! Don't even think such a thing!  I'd be stuck teach 101
> introductory computer
> courses to a bunch of students who either already know it or don't want to.
> What a
> depressing thought.
>
> Tom Lisa, Instructor, CCNA, CCAI
> Community College of Southern Nevada
> Cisco Regional Networking Academy
>
> Nigel Taylor wrote:
>
> > Chuck,
> > Yes, the fact that I didn't pass does leave me completely focused
> on the
> > goal at hand(passing the lab).  Somehow failure in one thing  seems to
> > provide better reason to succeed at something else.
> >
> > And then there's this questions that really get me thinking...
> >
> > - What would we all be doing right now if cisco didn't exist...?
> >
> > Nigel...
> >
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Cat5500 question

[ROB]

SE II is hardware.  A controller board, if you will.  Just purchase it, install it, and
configure it.

Jason Tran wrote:

> Hi Group, just have a quick question.  I have a cat 5500 currently has a
> Supervisor Engine I.  If someone tells me I need Supervisor Engine II, is he
> talking about software or hardware?  How am I going about changing it to
> Supervisor Engine II?  Thanks.
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Problem

[ROB]

You might want to send that info to CISCO, not an open newsgroup.

Kamran Sheikh wrote:

> Sir / Madam
>
> i am unable to logon into the tracking system with
> putting all the correct information. Kindly tell me
> here is my information
>
> My Full Name is   :  Kamran Zamir
> Cisco ID  :  CSCO10168556
>
> Waiting of your kind response.
>
> Thanks
> Kamran
>
> __
> Do You Yahoo!?
> Get email at your own domain with Yahoo! Mail.
> http://personal.mail.yahoo.com/
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Whew... I passed

[ROB]

ItsMe,
  We need to start a whole other thread on your situation.

ItsMe wrote:

> I'm not saying I don't think you owe the company if they pay your way,
> by no means. I just saying to be aware of what you are agreeing to.
>
> Wow 30K to 120K, I could double my pay and not be at 120K,
> it may be time to move forward.
>
> Me
> ccnp+security, ccdp, mcse, mcp+i, n+, a+
>
> "Dennis Laganiere" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > I'm ready to get spammed for this, but here are some thoughts from the
> other
> > side of management.
> >
> > If YOU paid for your own training, lab equipment, and lab attempts
> (probably
> > multiple, at $1,000 piece) then I could see your asking for a huge raise.
> >
> > HOWEVER, if the company paid for your training, bought $15,000 to $20,000
> > worth of lab equipment for you to play with, and gave you the time to
> study,
> > + lab attempts, +travel expenses+ god-knows-what-else, I think you owe
> > something back, and perhaps some time served at your current rate is the
> > least they could expect in return.
> >
> > If they support you through the whole process and you either leave or
> start
> > barking for the stars salary-wise, the guy next to you, who's six months
> > behind you on the same career path, won't get the price of honey for his
> > tea.
> >
> > Again, these are just my $.02
> >
> >
> > --- Dennis
> >
> > -Original Message-
> > From: ItsMe
> > To: [EMAIL PROTECTED]
> > Sent: 1/18/01 6:39 PM
> > Subject: Re: Whew... I passed
> >
> > Convincing the VP isn't the hard part, its after you pass explaining to
> > the
> > VP
> > that a $20K/year raise is warranted. Which in turn he says your are
> > nuts,
> > so you decide to leave... until he breaks out the agreement that says in
> > fine print that you have agreed to pay back all training funds it you
> > leave...
> > Be careful!
> >
> > "Jim Healis" <[EMAIL PROTECTED]> wrote in message
> > DF49A3EC4130D411AC1600508B608DDF01116426@DIALPAD-EX2">news:DF49A3EC4130D411AC1600508B608DDF01116426@DIALPAD-EX2...
> > > Well, I did it.  I passed the CCIE written exam this morning. And, for
> > just
> > > a moment, I felt the weight of the world lift off my shoulders.  Then
> > I
> > > thought about the lab exam and what I need to do to get there.
> > Thankfully,
> > > I have a plan; it just needs to be put on paper so it can be a working
> > > document.
> > > I have posted much in the recent weeks about how I have studied to get
> > this
> > > far, so I won't post it again.  But if you have specific questions
> > about
> > > certain areas, that won't violate the NDA, I will be happy to answer
> > them.
> > > Now, my next challenge comes along... not the lab... convincing my
> > boss
> > that
> > > the company should pay for the lab exam and any needed materials for
> > getting
> > > there. I know that I shouldn't rely on this as the means to the end;
> > but
> > if
> > > I can get it, why not?  Anyone have any pointers on how to convince a
> > VP
> > > that doesn't know much about the CCIE program that he should approve
> > these
> > > things?
> > > Thanks for the wonderful humor and study tips!
> > >
> > > Jim
> > >
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: But isn't that the routers job???

[ROB]

I think it's a question of total throughput.  If the RP has to hit every packet, then
you will have a queue full of packets waiting their turn to get out.  By using the SP,
those packets that must be processed by the RP will get through that queue much sooner.
And that paired with the SP's higher speed makes the entire system more efficient.  
This
is my take on the process.  A bit simplistic, but I's just a simple guy.

Rob

"Taylor, Don" wrote:

> I can see where you're coming from, and maybe I would have worded it
> differently if I'd written the book (i.e. "Why leave it up to the route
> processor when it can be switched faster?"); but do keep in mind that the
> CPU in a router isn't exactly cutting edge technology. If you read the
> specs, most of them are similar to those in computers that we all lusted for
> five years ago. That being the case, the argument is a good one:  take as
> much burden off the processor as possible by reducing the number of lookups.
>
> - Don
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 22, 2001 8:42 PM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: Re: But isn't that the routers job???
>
> Hi Tony,
>  I understand all of this fully but where I'm confused is, how much of a
>
> burden could this be if that's all it has to do. I want to know what the
> "more important" things are...Maybe I overestimate the power of a route
> processor but I would think that its especially created with the power to
> handle tons of routing considering that that's what its designed for...am I
> wrong?
>
> Mark Z.
>
> In a message dated 1/22/01 11:27:41 PM Eastern Standard Time,
> [EMAIL PROTECTED] writes:
>
> > Hi,
> >
> > My understanding is that routers perform basically two functions one is to
>
> > route that is to find the best path a given message should take and the
> > other is to switch that is once the route is known to send the data to the
>
> > appropriate interface.  I think what they are saying in the book.  If you
> > know the path a message should take that is the route then why go through
> > the procedure of identifying it again why not just switch it.
> >
> > I know what I'm trying to say.  What they say in the book is right "why
> > burden the CPU".
> >
> > Teunis,
> > Hobart, Tasmania
> > Australia
> >
> >
> > On Monday, January 22, 2001 at 11:05:02 PM, [EMAIL PROTECTED] wrote:
> >
> > > Hey Group,
> > >  Me again. I'm reading for my CIT and am at the section where it
> goes
> > > into detail of the various switching methods in the router (i.e.,
> > silicon,
> > > CEF, autonomous, etc.) I understand how all this works and understand
> how
> > the
> > > SP takes a lot of the stress away from the RP and this is good because
> > your
> > > avoiding bogging the RP/CPU down. I have a problem with these statements
>
> > > though and want some clarification...
> > >
> > > Taken form the book (Lammle's CIT p. 173):
> > >
> > >  "This is just another reason why switching is such a good practice.
>
> > Why
> > > burden the RP with every packet if it's not necessary? By using
> switching
> > > methods, the RP is free to use valuable CPU time on more important
> things
> > > than doing route lookups for every packet that comes in the router."
> > >
> > > Correct me if I'm wrong but isn't that what a routers supposed to do???
> > What
> > > else does the RP have to do that is more important than ROUTING? I may
> be
> > > overanalyzing this but it just seems that he's saying that the RP has
> > better
> > > things to do like make coffee, rather than route.
> > >
> > > Basically, could somebody give me a list of some other things the RP/CPU
>
> > has
> > > to do other than route lookups...(I know there are access-lists and
> other
> > CPU
> > > things here, I just would like a solid list to remember). Thanks team,
> > >
> > > Mark Zabludovsky ~ CCNA, CCDA, 3/4-NP
> > > [EMAIL PROTECTED]
> > >
> > >  "Even if I knew I had only 1 more week to live, I would still
> > schedule
> > > my CCIE lab. I would just have to work a little harder I guess. After
> > all,
> > > without any goals in life, I'm dead already."
> > >~Mark
&

Sho hardware CBUS

[Rob]

Howdy folks,
   A quicky.  On a 7513, with redundant RSP's, when entering the command 
" sho hardware cbus" recieved no output for the master RSP (slot6).  But 
did get the information for the slave RSP.  I guess it's normal.  since 
it was the same on another 7513 I did it on.  Can someone please explain.

Thanks,

Rob

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Ether Channel is it an issue???

[Rob]

I would agree to enabling portfast, as well as, making sure that your switch
and servers are set to 100 full.  I have seen that as a problem a few
times...
On the NT world, I am not sure if you are running a wins server or not.  The
rules of NT authentication has the workstations broadcasting for the list of
DCs if  it can't find the DC's in the WINS.  The first DC to respond usually
grants the authentication, but in our world broadcast BAD.  By having a WINS
allows the workstations to see the DCs.
Pretty sure that spanning tree is  your problem, but maybe something else
for you to look at...

Rob DuVal
MCSE, CCNA, CCDA


Sandeep Kulkarni <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All,
> Slightly off topic, But i just want to share someone's
> view on this one.
> We are in the process of migrating our infrastructure
> to the Cisco switches. We have a pure NT netowrk with
> Once PDC & One BDC. I mooved all the users to the new
> switch with no issues at all. Then started mooving all
> the NT member Servers, This also went very smmothly.
> However when i mooved my BDC i am having a nightmare,
> I am getting all kind's of authentication problem like
> login script hangs, Or people not able to see the
> domain controller (Tcpip connectivity is fine) This
> has started happening only after we mooved the BDC to
> the new switch. I have Ether Channel on the Servers
> with the Intel cards. Tcpip connectivity looks fine.
> This started happening only after i mooved the DC to
> the new Cisco 6509 switch. I don't know weather it's a
> coincidence or a problem. Also i have checked the
> Domain controllers for their sync. issues there are
> none.
> I was just wondering if anyone has land up in the same
> mess as i am & have any resolution to this one. Any
> help is greatly appriciated
>
> thank you in advance
>
> Sandeep
>
> __
> Do You Yahoo!?
> Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free!
> http://photos.yahoo.com/
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: 10M and 100M Ethernet connection

[Rob]

What routers???

Roland Mok wrote:

> Hi,
>
> I 've a 10M ehternet port router and a 100M fast ethernet port router.
> If I want to directly connect them with UTP cross cable, does it
> auto-sense to work with 10M? Pls advise.
>
> Sincerely,
> Roland
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

OSPF/EIGRP Migration

[Rob]

I am getting ready to jump into a migration of out network from EIGRP to
OSPF.  The procedure is simple enough.  I am wondering if there are any
things that I might want to be careful of.  We will still be
redistributing to and from a couple of EIGRP networks also.  ANy advice
is welcome.

Thank you

Rob

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: multicast or unicast?

[Rob]

You may be confusing multi-point with broadcast.

Zhao Meng wrote:

> i am confused on communication type of ospf point-to-multipoint network
> packet .
>
> 2 descriptions from jeff dolye's routing tcp/ip vol1 are as follow:
>
> page417,2nd paragragh
> routers on these networks(point-to-multipoint networks) do not
> elect a dr and bdr , and because the networks are seen as
> point-to-point links, the ospf packets are multicast.
>~~
> page451,4th paragragh
> on point-to-multipoint and virtual link networks,updates(link
> state update) are unicasted to the interface addresses of the
>   ~
> adjacent neighbors.
>
> which one is correct? or both?
>
> thanks in advance.
>
> --
> Regards,
> Zhao Meng.
> CCNA,MCSE,MCP+I
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

best location for ccie lab - rtp [7:2149]

[Rob]

what's the best location to take the CCIE lab exam?  I realize that the
exams are standardized worldwide but I'm looking for the overall picture,
the friendlieness, good cheap hotels, easy commute to the lab facility etc..
I'm considering NC, halifax and maybe CA..  thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2149&t=2149
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: best location for ccie lab - rtp [7:2149]

[Rob]

what hotel would you recommend ?  thanks


""Urooj's Hi-speed Internet""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I have only been to the Halifax site. It has cheap hotels (if you are
> spending in US $$), five-minute walk to the CCIE lab, very fair and
friendly
> Proctors, plus a historical city to see (for which one may not have the
> time).
>
> And if you manage to pass, you can celebrate with a feast of fine
lobsters.
>
> Aziz S. Islam
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Rob
> Sent: Thursday, April 26, 2001 2:13 PM
> To: [EMAIL PROTECTED]
> Subject: best location for ccie lab - rtp [7:2149]
>
>
> what's the best location to take the CCIE lab exam?  I realize that the
> exams are standardized worldwide but I'm looking for the overall picture,
> the friendlieness, good cheap hotels, easy commute to the lab facility
etc..
> I'm considering NC, halifax and maybe CA..  thanks
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2291&t=2149
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Security Exams Textbooks Required [7:27321]

[Rob]

Has anyone used the Managing Cisco Network Security by: Lusignan, Steudler,
and Allison?

ROb
 wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Theodore,
>
> In what order did you take the exams? PIX, MCNS, VPN and IDS?
>
> Thanks,
>
>
> Hugo Caye
>
> O__  
> c/ /'_ ---
> (*) \(*) --
> 
> ccna ccda
> mcne3 cne5
> mcse (w2k, nt4)
>
> -Original Message-
> From: Theodore stout [mailto:[EMAIL PROTECTED]]
> Sent: quarta-feira, 28 de novembro de 2001 00:30
> To: [EMAIL PROTECTED]
> Subject: Re: Security Exams Textbooks Required [7:27321]
>
>
> I totally agree with Fahim.  You have got to have the MCNS books to
> pass.
> IT is like 40 of the PIX ADV and VPN tests.
>
> Get a PIX though.  You won't pass some parts of the PIX ADV with just
> the
> book I think.  You don't want to be a "paper" CSS1.
>
> Do IDS last.  Read Northcutt, study the material and know how to
> install in,
> as the homepage states.  I found this test to be the hardest.  You
> need a
> rather high score to pass.
>
> Theo
> CCSE, CSS1, CCNP, MCSE




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30516&t=27321
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Study aids [7:30517]

[Rob]

Hi folks,

Anyone have any experience with the Cisco CCNP Training Kit?  Any info
or comments will be very welcome and appreciated.

Thanks,
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=30517&t=30517
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCNP-2.0 Help.

[Rob]

Help you what???

Rajeev KS wrote:

> Hello,
>
> I have finished ACRC & planning to complete CCNP in new track.
>
> Niot getting enough details about exams & I have downloaded PDf exam
> objectives from the cisco site.
>
> I am not geeting the new book from cisoc press for the various exams
>
> Pls help me out.
>
> Thank you
> Rajeev.
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Another Free Book from Cisco

[Rob]

Thanks for the Info.  Loking forward to your concert next month.

Carlos Santana wrote:

> http://www.cisco.com/offer/bbip2/V430-100O3
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Forgot to post good news.

[Rob]

Congratulations.
  Why would you re-cert CCNA if you will have your CCNP?  You should be using
that study time and brain power to study for higher certs, not regress back to
the entry level ones.  (imho).

Douglas James Howe wrote:

> I found out that I passed the CCNA 2.0 beta exam, with a score of 934/1000.
> And I finally got my CCNA kit.  The bad news is I have 2 years of college
> left and will probibly have to take it again by the time I graduate.  I am
> studing now to take the CCNA WAN switching exam next fall since I will be
> presuing the CCNP WAN switching cert. after I complete the initial 4 exams
> to become a CCNP.
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: NetRanger Inst/Ops questions

[Rob]

Sounds like your company needs to pony up some training dollars.

Gabriel wrote:

> My comapany needs me to take (and pass =) the NetRanger
> Installation/Operations test so we can get to the Advanced Security partner
> designation (more discount, in other words.) We're still in the process of
> getting the Sensor and Director ordered; not sure when that's going to go
> through, but they'd like me to be pretty much ready when it gets here, as
> opposed to waiting to play with the equipment for a couple of weeks before
> trying the test.
>
> Does anyone know anything about this test? Would anyone happen to have
> courseware from the class? Any help at all would be great...  Thanks in
> advance.
>
> Gabriel McCall
>
> CCDP/CCNP+Security
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: does it sound queer ORACLE DBA and CCNP

[Rob]

Nothing wrong with diversification.  He probably won't get a job that has
both networking and DBA as requirements, but he will have options.

olubunmi Isinkaye wrote:

> hi
>
> My son is trying to pursue these certifications , he is
> already an msce and ccna , however he has special interest
> in Oracle and he is very good on programs,
> he fears the two fields are too divergent , his is fear
> correct?, or better still ,is there a software angle he can
> combine with his cisco certification so as to be happy in
> life!
>
> ta
>
> paul
>
> __
> Do You Yahoo!?
> Get Yahoo! Mail - Free email you can access from anywhere!
> http://mail.yahoo.com/
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Should I read another book??? (4-CCDA)

[Rob]

I also say Top Down Network Design.  This book is more then an exam prep.  It
actually gives you the nuts and bolts needed to do the analysis behind the
design.  It can be the difference between just being a 'Paper' CCDA and knowing
what is going on in design.

My 2 cents,

Rob

Neil Loffhagen wrote:

> Hi,
>
> Getting hold of Top Down Network Design is well worth doing.
>
> Neil.
>
> >From: [EMAIL PROTECTED]
> >Reply-To: [EMAIL PROTECTED]
> >To: [EMAIL PROTECTED]
> >Subject: Should I read another book??? (4-CCDA)
> >Date: Sun, 2 Jul 2000 21:35:48 EDT
> >
> >Hey Group,
> > I finished reading Lammle's CCDA and allready got one of the Boson
> >tests
> >for CCDA. I registered to write the test on July 31st. This was the
> >earliest
> >I could schedule for the test at that location. Concidering that I have
> >another month to prepare, I was pondering the idea of reading another
> >book...Can't hurt right? ;) I was wondering which one to get? I looked at
> >BN,
> >and found CCDA Cram notes. This one looks good to me cause it only has
> >about
> >300 pages and I think I could fit that in easily, but I've also seen people
> >comment on the top-down network design book. Is this book more geared
> >towards
> >CCDP? Any help and suggestions would be great. Thanks again group.
> >
> >Mark Zabludovsky ~ CCNA
> >[EMAIL PROTECTED]
> >
> > "My peers always told me that growing up would have a huge impact on
> >my
> >life... What they didn't tell me is that the size of the impact would knock
> >me on my ass"...
> > ~ Mark Z.~
> >
> >___
> >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> >FAQ, list archives, and subscription info: http://www.groupstudy.com
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Rob Piotrowski/Freelance.com-Cisco Jobs Overseas!

[Rob Piotrowski]

Hi ,
We are looking for Cisco professionals looking to live in Spain or
France! Great Pay!
Let me know if you have Cisco experience or have colleagues that would
be interested
in this opportunity!

We are therefore looking for freelance CERTIFIED CISCO INSTRUCTORS (CCSI

if I am not mistaken) that have passed the official Cisco exams and that

are willing to work/live in Spain (Madrid or Barcelona) or Portugal.
This is a long term and well-paid project.Also,Becouse of the huge
demand we are also
looking for CCSI instructor in Mexico,
Colombia, Venezuela, Argentina, Caribe, etc..
Saludos,
Pablo.

We are also looking for CERTIFIED CISCO ENGINEERS to do technical
consulting work (not training).

Apart from having the official Cisco certification, candidates need to
be fluent in Spanish or Portuguese respectively. This is an
excellent opportunity for people from Latin America and the US who want
to work (temporarily) in Europe.

Duration:
for training, at least 1 year (or shorter or longer, depending on the
preferences of the freelancer, not the client).
for projects: depends on the preferences of the freelancer.
Price:
aprox. $90/hour  for CCSI (instructors):
aprox  $50/hour  for CCIE (experts)
We are also interested in CC, SI, CCNP and fees depend on profile
This may be quite lower than the US fees, but with such fees one can
live
confortably in Spain/Portugal. It would be especially intereseting for
people that because of personal reasons want to live in Spain/Portugal.
Traing: official CISCO training courses to first-levcel companies
Projects: there are many different projects available.

Please let me know if you are interested in this opportunity or have a
colleague
you can pass my information too.

Thanks in advance,

Rob Piotrowski/Account Manager
Freelance.com
Tel:650.522.8050
E-mail: [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Certifications on resumes

[Rob Michel]

It's been my experience that a lot of head hunters and HR have no clue as to
what the job requirments are for certian positions and wouldn't know that a
CCNA is a prerequist for a CCNP. So I would leave it on for that reason,
also if someone does a resume search on monster for CCNA, you want to make
sure that your resume pops up.

- Original Message -
From: "Robert Padjen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, January 26, 2001 3:27 AM
Subject: Certifications on resumes


> I was asked an interesting question this morning by a
> friend who just passed their CCNP. Basically they
> wanted to know if they should now remove the CCNA from
> their resume or list both CCNA and CCNP.
>
> I took the position that (as I do) the CCNP implies
> the CCNA, and therefore one would only list their
> 'highest' within a track. A number of co-workers said
> no, list it all.
>
> Please chime in with your position - unicast if your
> just sending a vote and multicast if you are raising a
> discussion. Sorry to those who feel this is an
> improper use of the board.
>
> Thanks.
>
> =
> Robert Padjen
>
> __
> Do You Yahoo!?
> Yahoo! Auctions - Buy the things you want at great prices.
> http://auctions.yahoo.com/
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Cisco Positions Available in Portugal!

[Rob Piotrowski]

Hi ,
We are looking for Cisco professionals looking to live in Spain or Portugal!
Great Pay!
Let me know if you have Cisco experience or have colleagues that would be
interested
in this opportunity!
We are looking for certified Cisco Technical Experts and:
We are therefore looking for freelance CERTIFIED CISCO INSTRUCTORS (CCSI)
that have passed the official
Cisco exams and that are willing to work/live in Spain (Madrid or Barcelona)
or Portugal.
This is a long term and well-paid project.

We are also looking for CERTIFIED CISCO ENGINEERS to do technical consulting
work (not training).

Apart from having the official Cisco certification, candidates need to be
fluent in Spanish or Portuguese respectively.
This is an excellent opportunity for people from Latin America and the US
who want
to work (temporarily) in Europe.

Duration:
for training, at least 1 year (or shorter or longer, depending on the
preferences of the freelancer, not the client). for
projects: depends on the preferences of the freelancer.
Price:
aprox. $90/hour  for CCSI (instructors):
aprox  $50/hour  for CCIE (experts)
We are also interested in CC, SI, CCNP and fees depend on profile This may
be quite lower than the US fees, but
with such fees one can live confortably in Spain/Portugal. It would be
especially intereseting for people that because
of personal reasons want to live in Spain/Portugal.
Traing: official CISCO training courses to first-level companies Projects:
there are many different projects available.

Please let me know if you are interested in this opportunity or if you have
a colleague that you can pass my
information too.Please e-mail a (Word) version of your resume along with
your billing rate and position you desire!

Thanks in advance,

Rob Piotrowski/Account Manager
Freelance.com
Tel:650.522.8050
E-mail: [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Last Nights DC Cisco Meeting

[Rob Montgomery]

Yeah, no doubt.  If they think about it, since CCO gives all the answers to
the exams, aren't they breaking their own agreement?

- Original Message -
From: "William E. Gragido" <[EMAIL PROTECTED]>
To: "'Ehab Mohamad Abdullah'" <[EMAIL PROTECTED]>; "'Billy Monroe'"
<[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Sunday, January 28, 2001 6:33 AM
Subject: RE: Last Nights DC Cisco Meeting


> Is that who they are going after?  Certification Zone?  I have been the
> site, and I have not seen anything that really compromises the NDA, in
fact,
> most the papers that are there seem like interpretations of the cisco.com
> site.  That's a shame.  Next it will be Coriolis and Sybex!
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Ehab Mohamad Abdullah
> Sent: Sunday, January 28, 2001 2:44 AM
> To: 'Billy Monroe'
> Cc: '[EMAIL PROTECTED]'
> Subject: RE: Last Nights DC Cisco Meeting
>
>
> Hi,
>
> It is the Certification Zone
>
> Ehab
> CCNP, ASE, MCSE, CNE
> -Original Message-
> From: Billy Monroe [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, January 28, 2001 11:41 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Last Nights DC Cisco Meeting
>
>
> ?
>
> "Nathan Casassa" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Think Cisco will get upset if I forward this info on?
> >
> > To pass the CCIE lab exam you must know this:
> >
> > "configure terminal"
> >
> >
> >
> >
> >
> > "Christine Johnson, CCNP" wrote:
> >
> > > Last night I attended a meeting where one of the Cisco vice presidents
> > > stated that Cisco is investing 50 million dollars in protecting the
> Cisco
> > > CCIE.  They are going after any person that has an NDA agreement and
> posts
> > > things considered a violation and publishes the information on a
website
> or
> > > book.  They stated that they were going after a guy named Howard
> Berkowitz
> > > for having a website that has 168 violations. They are sending him a
> letter
> > > stating he is no longer certified by Cisco and suing him down to a
> > > Volkwagen. Does anyone know what website he has?
> > >
> > > Christine Johnson, CCNP
> > >
> > > ___
> > > Send a cool gift with your E-Card
> > > http://www.bluemountain.com/giftcenter/
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Help!, because Cisco says they can't. Firewall & Vlan problem.

[Rob Cabeca]

You guys have always been on target for me. I am hoping you give some
insight to this. (the following addresses have been slightly altered for
obvious reasons but they are true to the real ones).

Overview.

I am upgrading a network which has a 155.102.0.0 255.255.0.0 network. It is
flat. I have implemented a new IP Scheme  to be used in several VLAN's and
am trying to migrate to it. IP range is 10.25.192.0 - 10.25.223.254 broken
up into several /24's. There are 600 devices. Now to the nitty gritty.

Network Description

The 6506 has seven VLAN's configured as follows:
VLAN 1 - 10.25.223.2 /24 Primary & 155.102.127.26 /16 secondary.
VLAN 2 - 10.25.215.254 /24
VLAN 3 - 10.25.216.254 /24
to -
VLAN 7 - 10.25.220.254 /24

There are 2 2600's which are routing to an ASP. Their addresses are  router
A - 10.25.223.3 & B - .4 with .5 as HSRP.
There is a Pix 515 using address 155.102.18.191 Nating to the internet.
The 2600's have an extended access list on them which directs Port 80
traffic from the 159.102.x.x network between the ASP WAN and the internet.
They are also doing NAT from the ASP to the 155.102.x.x network. 1 class C
NAT pool for each router. A- 10.25.213.0 /24, B - 10.25.214.0 /24.

Problem

I cannot ping the firewall interface from the MFSC or the 6506 or from any
workstation that is using ANY of the VLAN default gateways. I have full
connectivity to the asp wan. I have full connectivity to the other VLAN's.
When devices use the 2600's HSRP address as default gateway, they have
access to the firewall, the asp and the VLAN's. I have no access to the
2600's as they do not belong to us.

I spoke with the Cisco TAC a few times. They gave up and wouldn't escalate
it because they could not find our service contract that we purchased. They
were anxious to close the case.

The trick to this migration is to maintain connectivity to all devices as
they are being migrated to the new IP scheme.

I will be very grateful to any serious replies to this situation.

Thanks for your expertise!
Rob


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Help!, because Cisco says they can't. Firewall & Vlan problem.

[Rob Cabeca]

We are able to ping the firewall interface when the default gateway is set
to the ASP routers and users have access to the internet. The subnetting is
also correct as far as I have been able to determine. We just cannot get to
the firewall through the MSFC.

Any furhter thoughts would be helpful.

Thanks
Rob

-Original Message-
From: Nabil Fares [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 02, 2001 0853
To: Rob Cabeca; groupstudy
Subject: RE: Help!, because Cisco says they can't. Firewall & Vlan
problem.


Rob,

By default PIX does not allow pings!  You can have connectivity though it
but, you can't ping it.  You have to create an access list allowing icmp.
Of course thing assuming its not a subnetting issue.  Cisco recommends this
access-list be used for testing purposes only, remove when done.

HTH,

Nabil

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Rob Cabeca
Sent: Thursday, March 01, 2001 9:37 PM
To: groupstudy
Subject: Help!, because Cisco says they can't. Firewall & Vlan problem.


You guys have always been on target for me. I am hoping you give some
insight to this. (the following addresses have been slightly altered for
obvious reasons but they are true to the real ones).

Overview.

I am upgrading a network which has a 155.102.0.0 255.255.0.0 network. It is
flat. I have implemented a new IP Scheme  to be used in several VLAN's and
am trying to migrate to it. IP range is 10.25.192.0 - 10.25.223.254 broken
up into several /24's. There are 600 devices. Now to the nitty gritty.

Network Description

The 6506 has seven VLAN's configured as follows:
VLAN 1 - 10.25.223.2 /24 Primary & 155.102.127.26 /16 secondary.
VLAN 2 - 10.25.215.254 /24
VLAN 3 - 10.25.216.254 /24
to -
VLAN 7 - 10.25.220.254 /24

There are 2 2600's which are routing to an ASP. Their addresses are  router
A - 10.25.223.3 & B - .4 with .5 as HSRP.
There is a Pix 515 using address 155.102.18.191 Nating to the internet.
The 2600's have an extended access list on them which directs Port 80
traffic from the 159.102.x.x network between the ASP WAN and the internet.
They are also doing NAT from the ASP to the 155.102.x.x network. 1 class C
NAT pool for each router. A- 10.25.213.0 /24, B - 10.25.214.0 /24.

Problem

I cannot ping the firewall interface from the MFSC or the 6506 or from any
workstation that is using ANY of the VLAN default gateways. I have full
connectivity to the asp wan. I have full connectivity to the other VLAN's.
When devices use the 2600's HSRP address as default gateway, they have
access to the firewall, the asp and the VLAN's. I have no access to the
2600's as they do not belong to us.

I spoke with the Cisco TAC a few times. They gave up and wouldn't escalate
it because they could not find our service contract that we purchased. They
were anxious to close the case.

The trick to this migration is to maintain connectivity to all devices as
they are being migrated to the new IP scheme.

I will be very grateful to any serious replies to this situation.

Thanks for your expertise!
Rob


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Help!, because Cisco says they can't. Firewall & Vlan problem.

[Rob Cabeca]

The subnet masks on the pix and secondary address of the msfc is
255.255.0.0. Since the ASP routers are using an access list to direct
traffic to and from the internet, it may be filtering the route from the
msfc. Then we would be sol. I like your idea af switching the primary and
secondary ip's on the msfc. Also, there is no gateway of last resort. my
default gateway is pointing to the asp routers, and we are using the same
eigrp ##.

Thanks for your insight. Any further thoughts will be appreciated.
Rob


-Original Message-
From: Moe Tavakoli [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 02, 2001 0043
To: Rob Cabeca; groupstudy
Subject: Re: Help!, because Cisco says they can't. Firewall & Vlan
problem.


Back to basics:

Check your subnet mask on the interfaces connecting
the MSFC and the PIX (on the 155.102/16 net) If you
can;t ping the inside address of the PIX then your SOL
(make sure nothing is filtering the ping) once you
have this established (also check wirring and the such
and maybe even go to the extent of making your
secondary address the primary on the MSFC)
After that you should look into the routing table of
your MSFC.  Make sure the gateway of last reort (0 0
route) is point to the inside interface of the PIX,
and the selective route for the subnet pointing to the
ASP routers.
Be the packet know your source and destination and
follow it at every hop and make sure it can find out
wehre to go and how to get back (i.e. an internal
route on the PIX for the internal range to the MSFC.)

Moe.

--- Rob Cabeca <[EMAIL PROTECTED]> wrote:
> You guys have always been on target for me. I am
> hoping you give some
> insight to this. (the following addresses have been
> slightly altered for
> obvious reasons but they are true to the real ones).
>
> Overview.
>
> I am upgrading a network which has a 155.102.0.0
> 255.255.0.0 network. It is
> flat. I have implemented a new IP Scheme  to be used
> in several VLAN's and
> am trying to migrate to it. IP range is 10.25.192.0
> - 10.25.223.254 broken
> up into several /24's. There are 600 devices. Now to
> the nitty gritty.
>
> Network Description
>
> The 6506 has seven VLAN's configured as follows:
> VLAN 1 - 10.25.223.2 /24 Primary & 155.102.127.26
> /16 secondary.
> VLAN 2 - 10.25.215.254 /24
> VLAN 3 - 10.25.216.254 /24
> to -
> VLAN 7 - 10.25.220.254 /24
>
> There are 2 2600's which are routing to an ASP.
> Their addresses are  router
> A - 10.25.223.3 & B - .4 with .5 as HSRP.
> There is a Pix 515 using address 155.102.18.191
> Nating to the internet.
> The 2600's have an extended access list on them
> which directs Port 80
> traffic from the 159.102.x.x network between the ASP
> WAN and the internet.
> They are also doing NAT from the ASP to the
> 155.102.x.x network. 1 class C
> NAT pool for each router. A- 10.25.213.0 /24, B -
> 10.25.214.0 /24.
>
> Problem
>
> I cannot ping the firewall interface from the MFSC
> or the 6506 or from any
> workstation that is using ANY of the VLAN default
> gateways. I have full
> connectivity to the asp wan. I have full
> connectivity to the other VLAN's.
> When devices use the 2600's HSRP address as default
> gateway, they have
> access to the firewall, the asp and the VLAN's. I
> have no access to the
> 2600's as they do not belong to us.
>
> I spoke with the Cisco TAC a few times. They gave up
> and wouldn't escalate
> it because they could not find our service contract
> that we purchased. They
> were anxious to close the case.
>
> The trick to this migration is to maintain
> connectivity to all devices as
> they are being migrated to the new IP scheme.
>
> I will be very grateful to any serious replies to
> this situation.
>
> Thanks for your expertise!
> Rob
>
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


=
_
Moe Tavakoli

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail.
http://personal.mail.yahoo.com/

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Help!, because Cisco says they can't. Firewall & Vlan problem.

[Rob Cabeca]

Thanks for responding. I may not be understnading something here. If the
firewall is on the same subnet and it's inside interface is connected to the
6506, what type of routing statement would it need?

I am able to ping the inside interface of the firewall when the
workstation is assigned to vlan 1 and is using 155.102.127.26 as the default
gateway. once I asign the workstation to another vlan, it can ping
everything in the 155 network EXCEPT for the firewall.

Obviously I am confused.

Thanks for your help. Any further thoughts would be appreciated.
rob

  -Original Message-
  From: Darren Crawford [mailto:[EMAIL PROTECTED]]
  Sent: Friday, March 02, 2001 1211
  To: Nabil Fares; Rob Cabeca; groupstudy
  Subject: RE: Help!, because Cisco says they can't. Firewall & Vlan
problem.


  You should be able to Ping the inside interface of your PIX.  You can not
ping an outside interface.  There must be route statements in your PIX so
that it knows where to send the reply.


  At 08:52 AM 03/02/2001 -0500, Nabil Fares wrote:
  >Rob,
  >
  >By default PIX does not allow pings!  You can have connectivity though it
  >but, you can't ping it.  You have to create an access list allowing icmp.
  >Of course thing assuming its not a subnetting issue.  Cisco recommends
this
  >access-list be used for testing purposes only, remove when done.
  >
  >HTH,
  >
  >Nabil
  >
  >-Original Message-
  >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
  >Rob Cabeca
  >Sent: Thursday, March 01, 2001 9:37 PM
  >To: groupstudy
  >Subject: Help!, because Cisco says they can't. Firewall & Vlan problem.
  >
  >
  >You guys have always been on target for me. I am hoping you give some
  >insight to this. (the following addresses have been slightly altered for
  >obvious reasons but they are true to the real ones).
  >
  >Overview.
  >
  >I am upgrading a network which has a 155.102.0.0 255.255.0.0 network. It
is
  >flat. I have implemented a new IP Scheme  to be used in several VLAN's
and
  >am trying to migrate to it. IP range is 10.25.192.0 - 10.25.223.254
broken
  >up into several /24's. There are 600 devices. Now to the nitty gritty.
  >
  >Network Description
  >
  >The 6506 has seven VLAN's configured as follows:
  >VLAN 1 - 10.25.223.2 /24 Primary & 155.102.127.26 /16 secondary.
  >VLAN 2 - 10.25.215.254 /24
  >VLAN 3 - 10.25.216.254 /24
  >to -
  >VLAN 7 - 10.25.220.254 /24
  >
  >There are 2 2600's which are routing to an ASP. Their addresses are
router
  >A - 10.25.223.3 & B - .4 with .5 as HSRP.
  >There is a Pix 515 using address 155.102.18.191 Nating to the internet.
  >The 2600's have an extended access list on them which directs Port 80
  >traffic from the 159.102.x.x network between the ASP WAN and the
internet.
  >They are also doing NAT from the ASP to the 155.102.x.x network. 1 class
C
  >NAT pool for each router. A- 10.25.213.0 /24, B - 10.25.214.0 /24.
  >
  >Problem
  >
  >I cannot ping the firewall interface from the MFSC or the 6506 or from
any
  >workstation that is using ANY of the VLAN default gateways. I have full
  >connectivity to the asp wan. I have full connectivity to the other
VLAN's.
  >When devices use the 2600's HSRP address as default gateway, they have
  >access to the firewall, the asp and the VLAN's. I have no access to the
  >2600's as they do not belong to us.
  >
  >I spoke with the Cisco TAC a few times. They gave up and wouldn't
escalate
  >it because they could not find our service contract that we purchased.
They
  >were anxious to close the case.
  >
  >The trick to this migration is to maintain connectivity to all devices as
  >they are being migrated to the new IP scheme.
  >
  >I will be very grateful to any serious replies to this situation.
  >
  >Thanks for your expertise!
  >Rob
  >
  >
  >_
  >FAQ, list archives, and subscription info:
  >http://www.groupstudy.com/list/cisco.html
  >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
  >
  >_
  >FAQ, list archives, and subscription info:
  >http://www.groupstudy.com/list/cisco.html
  >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

  Darren S. Crawford - CCNA
  Lucent Technologies Worldwide Services
  2377 Gold Meadow WayPhone: (916) 859-5200 x310
  Suite 230   Fax: (916) 859-5201
  Sacramento, CA 95670Pager: (800) 467-1467
  Email: [EMAIL PROTECTED] Epager: [EMAIL PROTECTED]
  http://www.lucent.com   Network Systems Consultant


_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Firewall & Vlan Problem update: Still a problem

[Rob Cabeca]

Update:
I know that the Firewall does not know that the 10.25.192.0 /19 exists. I
tried to put in a route statement on the pix but it would not accept it.
This was the command: "route inside 10.25.192.0 255.255.224.0 10.25.223.2 1"

When I put in a route to the secondary Address of VLAN 1, it accepted it,
but I still could not ping anything in the 10 network from the firewall.
This was the command:"route inside 155.102.0.0 255.255.0.0 155.102.127.26 1"
I am completely stumped!

These were some of the previous comments I received and my original
statement is below. Thank you for amy insight you ma have on this!
Rob

comment:
"It sounds like your PIX doesn't know about 10.25.192.0/19 subnets.  It
knows
about the directly-connected 155 subnet, but not any past the 6506.  It
seems like you'll need some routes on the PIX (but I'm not really familiar
with those boxes).  Your PIX is probably defaulting to its outside
interface.  You need a route for 10.25.192.0/19 to 155.102.127.26 (if that
is the 6506) on the PIX."

comment:
"First, you have to understand that the PIX, out of the box, will not route
any
packets.  So you have to add static route statements pointing at interfaces
so
packets get to their destination.  Example:

route inside 10.0.0.0 255.0.0.0 10.1.1.1 1
route outside 1.2.3.4 255.255.255.0 5.6.7.8 1

The PIX probably doesn't know how to get to the other VLAN.  What are your
route statements in the PIX?"

Original:
Overview.

I am upgrading a network which has a 155.102.0.0 255.255.0.0 network. It is
flat. I have implemented a new IP Scheme  to be used in several VLAN's and
am trying to migrate to it. IP range is 10.25.192.0 - 10.25.223.254 broken
up into several /24's. There are 600 devices. Now to the nitty gritty.

Network Description

The 6506 has seven VLAN's configured as follows:
VLAN 1 - 10.25.223.2 /24 Primary & 155.102.127.26 /16 secondary.
VLAN 2 - 10.25.215.254 /24
VLAN 3 - 10.25.216.254 /24
to -
VLAN 7 - 10.25.220.254 /24

There are 2 2600's which are routing to an ASP. Their addresses are  router
A - 10.25.223.3 & B - .4 with .5 as HSRP.
There is a Pix 515 using address 155.102.18.191 Nating to the internet.
The 2600's have an extended access list on them which directs Port 80
traffic from the 159.102.x.x network between the ASP WAN and the internet.
They are also doing NAT from the ASP to the 155.102.x.x network. 1 class C
NAT pool for each router. A- 10.25.213.0 /24, B - 10.25.214.0 /24.

Problem

I cannot ping the firewall interface from the MFSC or the 6506 or from any
workstation that is using ANY of the VLAN default gateways. I have full
connectivity to the asp wan. I have full connectivity to the other VLAN's.
When devices use the 2600's HSRP address as default gateway, they have
access to the firewall, the asp and the VLAN's. I have no access to the
2600's as they do not belong to us.

I spoke with the Cisco TAC a few times. They gave up and wouldn't escalate
it because they could not find our service contract that we purchased. They
were anxious to close the case.

The trick to this migration is to maintain connectivity to all devices as
they are being migrated to the new IP scheme.

I will be very grateful to any serious replies to this situation.

Thanks for your expertise!
Rob

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: 3COM - CISCO interoperability

[Rob Fielding]

3Com's gig trunking protocol is proprietary.  Its a load sharing method
similar to Cisco's fast etherchannel concept.  The 6506 won't know what to
do with it.  Their gig modules will talk to each other, and both support
802.1q, but you cannot load share links between them.

-Rob Fielding


- Original Message -
From: "freddy moreno" <[EMAIL PROTECTED]>
Newsgroups: groupstudy.cisco
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 13, 2001 1:52 PM
Subject: 3COM - CISCO interoperability


> do any of you have experience connecting a 3com Corebuilder 9000 to a
Cisco
> 6506
> using Gig Trunking?
>any gotchas, special things that need to be done.
>
> please let me know than you
>
> thank you very much
>
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Re: 7505 Reboots randomly Please HELP

[Rob Montgomery]

I'm having this somewhat same problem on my 2521.  It reboots randomly.  I
have NOT upgraded the code and it just started this.

- Original Message -
From: "Paul Werner" <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Wednesday, December 27, 2000 8:37 PM
Subject: Re: Re: 7505 Reboots randomly Please HELP


> Follow up on this topic.
>
> A couple of things I did not glean from your post was whether
> this router was a new (to you) install, or whether it was
> previously working and you recently upgraded the code.  If the
> case is the latter, I am in strong agreement with Jim Dixon
> that the likely culprit in the process is probably the version
> of code you are running.  Specifically, did you have stable
> code on this router and upgrade to a newer 12.x image whereby
> the problems resulted?  If so, it is a very strong indicator
> that the problem is with your software, not the hardware.  If
> you do have CCO access, you may want to consider putting some
> very stable GD type code, such as 11.2(17) and see if that
> works.  If so, and the 12.x code you have does not work, then
> you will need to do some experimentation to see what code is
> stable for the hardware you have and the features you *need*.
> That can only come about through testing.  You may also find
> that 12.1x code may have fixed any potential anomalies that
> 12.0x code may have presented.
>
> HTH,
>
> Paul Werner
>
>
> 
> Get your own "800" number
> Voicemail, fax, email, and a lot more
> http://www.ureach.com/reg/tag
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Coil pinnaccle header

[Rob Mears]

Hi all,

I have 4 6509 cats that are giving me problems. For particular modules on
the switch, user will not be able to login to network. I move them to
different module on same switch all works fine. I look at switch, port
status all is fine.  I check logs on switch and I see for the ports giving
me problem it reports "Coil Pinnacle Header Checksum Error".  What the hell
is this? I searched Cisco's site and find nothing.  

Has anyone seen this?  Please help.

I am about the thought out the damn Module.

Thanks
Rob

Rob Mears III, NNCSS, NNCDS, MCSE, CNE, CCNA, A+
Technical Mercenary



-Original Message-
From: Joe Schnerd [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 08, 2001 3:07 PM
To: [EMAIL PROTECTED]
Subject: Re: PIX Nat vs. IOS Nat for DNS


I have a question along the same line...

If I have a single DNS behind NAT and I want to change it's IP to 10.x.x.x,
how does NAT/Firewall know to forward the request to that address and how
would I register with Network Solutions so that there is a "virtual" name
server? Any suggestions/ideas?

I've been looking at some sample NAT configs, but nothing really addresses
the DNS aspect.

Any help would be greatly appreciated.

Jeff

"Brian Bieber" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>
> My question is about DNS queries through the PIX and the IOS w/NAT.
>
> This is taken from the Cisco web site.
>
> http://www.cisco.com/warp/public/458/41.html#Q21
> <http://www.cisco.com/warp/public/458/41.html#Q21>
> Q: Does Cisco IOS NAT support DNS queries?
> A: Yes, Cisco IOS NAT will translate the address(es) which
> appear in DNS responses to name lookups (A queries) and inverse lookups
(PTR
> queries). Thus, if an outside host sends a name-lookup to a DNS server on
> the inside, and that server responds with a local address, the NAT code
will
> translate that local address to a global address. The opposite is also
true,
> and is how we support IP addresses overlapping: an inside host queries an
> outside DNS server, the response contains an address that matches the
> access-list specified on the "outside source" command, so the code
> translates the outside global address to an outside local address.
> Time-to-live (TTL) values on all DNS resource records (RRs)
> which receive address translations in RR payloads are automatically set to
> zero.
> Cisco IOS NAT does not translate IP addresses embedded in
> DNS zone transfers.
>
> My question is how do I achieve this in the PIX?
>
> Thanks
> Brian Bieber
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Best place to buy book

[Rob Bains]

I'm not sure whether or not someone has mentioned this, try:

www.bestbookbuys.com

It's an awesome site.  It works like a search engine for all the online bookstores that
carry the title that you search for, it even tells you who offers the best price of all
those carrying the title.

I really like it.

 > Rob

Ric Messier wrote:

> I really like bookpool.com -- blows fatbrain's pricing out of the water even
> with my corporate fatbrain discount.
>
> Ric
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Adam Hickey
> Sent: Tuesday, January 16, 2001 12:13 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Re: Best place to buy book
>
> www.fatbrain.com
> www.elgrande.com
>
> Adam Hickey
> [EMAIL PROTECTED]
>
> - Original Message -
> From: <[EMAIL PROTECTED]>
> Newsgroups: groupstudy.cisco
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, January 16, 2001 8:35 AM
> Subject: Best place to buy book
>
> > Does anyone know of any places on the web that sell cisco press books
> > cheaper than cisco sell them? Thanks
> >
> >
> > _
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _
> FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: On topic: Am I the only one that would like Pradeep Kumar to eithershut up or go away?

[Rob Montgomery]

How long have you been on this group?  If you have been on here as long as
some of us have been, you'd feel differently.

- Original Message -
From: "Brian Lodwick" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, January 21, 2001 10:59 PM
Subject: RE: On topic: Am I the only one that would like Pradeep Kumar to
eithershut up or go away?


> Group,
>   Well I don't really particularly like Pradeep's comment's, but I just
> deleted the message. I wouldn't have ever had to think about it again.
> The problem I have is that I like to hear from everyone, and I know
> egotistical people make others think twice before writing in, thinking
> Pradeep will make them feel stupid for asking an "easy" question. I also
> realize some of the people who I might want to hear from may be more
> sensitive to malicious retort than I, and that really sucks if it makes
them
> reluctant to write in. So do us a favor please Pradeep and hold off on the
> hostile comments, and help us with your awesome knowledge by answering
these
> questions we can't figure out. Just think then you can actually claim
> whenever someone achieves CCIE from this list that you were partly
> responsible.
> ~my 2 cents
> (if we gathered up all these 2 cents we could buy lots of Worldcom stock)
>
> >>>Brian
>
> >From: "William E. Gragido" <[EMAIL PROTECTED]>
> >Reply-To: "William E. Gragido" <[EMAIL PROTECTED]>
> >To: "'Dave Swink'" <[EMAIL PROTECTED]>, "'John Day'"
> ><[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>
> >Subject: RE: On topic: Am I the only one that would like Pradeep Kumar to
> >eithershut up or go away?
> >Date: Sun, 21 Jan 2001 23:13:01 -0600
> >
> >Not to mention the fact that its poor form to operate that way on a
public,
> >peer driven forum and that since we are colleagues by virtue of our
trade,
> >it leaves much to be desired in regards to wanting to ever work with you.
> >
> >-Original Message-
> >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> >Dave Swink
> >Sent: Sunday, January 21, 2001 7:31 PM
> >To: John Day; [EMAIL PROTECTED]
> >Subject: RE: On topic: Am I the only one that would like Pradeep Kumar
> >to eithershut up or go away?
> >
> >
> >Pradeep,
> >
> >Your immature, fantastically egotistical, and vicious comments are a
> >frequent cause of discord on this list.  You have been reprimanded
several
> >times.  Take it to heart and change your behavior.  Or go away.
> >
> >I remember several months ago when you were desperately searching for a
> >job.
> >Have you ever stopped to think about how many potential employers are
> >getting an incredibly bad impression of you?  This field is surprisingly
> >small at the senior level.  If you have a hard time with courtesy, at
least
> >try some enlightened self-interest.
> >
> >Dave Swink
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> > > John Day
> > > Sent: Sunday, January 21, 2001 6:14 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: On topic: Am I the only one that would like Pradeep Kumar to
> > > eithershut up or go away?
> > >
> > >
> > > Dear Pradeep Kumar,
> > >
> > > If you don't start to act like a responsible member of this
> > > message group, I
> > > am going to ask the moderator of the group to remove you.
> > >
> > > You don't add anything positive to the discussion, and in fact, only
> >cause
> > > trouble. Please go away. You appear to be a thoroughly disagreeable
> >chap.
> > > You also seem to ask some stupid questions of your own from time to
> >time,
> > > like the one about starting a thread on snmp. If you want a thread on
> > > something, then START ONE. Otherwise, If you don't have anything
> > > positive to
> > > contribute, then keep your mouth shut.
> > >
> > > You obviously don't understand "normal" discussion group conduct. You
> >also
> > > obviously don't understand acceptable versus unacceptable
> > > comments. I doubt
> > > that you are anything close to being a "protocol guru". If you were,
you
> > > wouldn't act like such a JERK.
> > >
> > > FYI, regarding your latest stupid comments, I am the senior manager of
a
> > > global network. For your information, I have fully funded a large
> > > CCIE study
> > > lab at my office, and also buy my Cisco people books, pay for their
> >exams
> > > (passing grades only) and send them to schools. Any my VP didn't
> > > kick me in
> > > the butt for doing it.
> > >
> > > jd102750
> > >
> > >
> > >
> > >
> > > _
> > > FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >_
> >FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >_
> >FAQ, list archives, and subscription info:
> >http://www.group

Re: How to get rid of "Loading network-config ... [timed out]

[Rob Fielding]

Do a show run.  Somewhere near the top, there should be a line that says
"service config".  Remove it by typing "no service config" in global config
mode.

-Rob Fielding, CCNP


- Original Message -
From: "Roger Wright" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, September 15, 2000 12:06 PM
Subject: How to get rid of "Loading network-config ... [timed out]


> Dear Networkers,
>
> Please tell me how to configure my 2611 router so that I don't constantly
get
> the following messages:
>
>
> Loading network-confg ... [timed out]
> Loading cisconet.cfg ... [timed out]
> Loading routera-confg ... [timed out]
> Loading routera.cfg ... [timed out]
>
>
> Thanks in advance,
>
> Roger
>
> 
> Get free email and a permanent address at http://www.netaddress.com/?N=1
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

copy configs

[Provost, Rob]

Title: copy configs





How can I copy the configs from one router and then copy them to another?  Both are 2500s.


Thanks.


Robert Provost

RE: Bye

[Provost, Rob]

Title: RE: Bye





Coming to America.  
Louie Anderson.


-Original Message-
From: John Kaberna [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 21, 2000 12:58 PM
To: Juan Blanco; 'Chris Larson'; [EMAIL PROTECTED]
Subject: Re: Bye



Don't be mad cause you've been studying for 6 months and still haven't
accomplished what took me a week.  :)  Keep it up though dude.  There is a
scene in a movie that reminds me of you Juan.  See if anyone can recognize
it.  Its not exact but a couple people will know it.


Right now I'm washing lettuce.  A few more months I'll be on fries.  A
couple of years.  And I make assistant manager.  And thats when the big
bucks start rollin in. 


- Original Message -
From: Juan Blanco <[EMAIL PROTECTED]>
To: 'Chris Larson' <[EMAIL PROTECTED]>; John Kaberna
<[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, September 21, 2000 8:46 AM
Subject: RE: Bye



> That seems to me the joke of the new millennium.
>
> -Original Message-
> From: Chris Larson [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, September 21, 2000 11:10 AM
> To: John Kaberna; [EMAIL PROTECTED]
> Subject: Re: Bye
>
>
> Yeah right. YOu read all the books and passed the test in 6 days. Sure ya
> did.
>
> - Original Message -
> From: John Kaberna 
> To: [EMAIL PROTECTED] 
> Sent: Thursday, September 21, 2000 1:43 AM
> Subject: Bye
>
> Well the past couple weeks have been fun but reading through over 100
emails
> a day is too much.  I thought this list might have helped me along but
> mostly it just wasted valuable time.  There is never a shortage of stupid
> questions and people that don't know how to read the archives to get 80%
of
> the questions answered.  If I have to read one more question asking what
> book to read for the CCNA or some other test I'm gonna be sick.
>
> In the span of 6 days I read all the books and passed the pathetic CCNP.
> What a joke that test was.  For those of you that asked me about the
> Foundation test it was terribly easy.  Anyone that even reads the material
> and half understands it will pass.
>
> As far as the whiners, snitches, and morons you know what I think of you.
> People like you allow me to command a higher and higher rate every few
> months cause no one wants to work with someone like that.  Keep it up.  I
> even had one crybaby by the name of Louie Belt tell me he was going to
have
> me removed from this list and have my hotmail account terminated.  LOL.
> Apparently he thought he was so influential that he had the power to
> terminate my accounts just cause I called him a name.  :)  Nice try.
>
> For those that I've had positive interaction with feel free to email me if
> you have questions or want to chat.
>
> See ya.
>
> John
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: One last Layer3 switching ?

[rob beady]

24 collision, broadcast will depend on subnetting "still"



NetEng wrote:

> I understand the layer3 switching concept, but what happens to broadcast
> based services? On a 24 port layer3 switch module are there 24
> collision/broadcast domains?
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CISCO SWITCH

[rob beady]

You might want to take a look at a device marketed by F5.  It's called the
Big-IP.  It's sole purpose if guaranteed serviceand failover.

Pushkar Shirolkar wrote:

> hi,
> thanx for the reply .
> but i want the switch failover solution .. not the backbone failover .. what
> if the switch itself fails .. does it failover to another switch ... does it
> have any specific failover port ?
>
> Pushkar
>
> Bob Watson <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > 3524xl series has some redundancy functions to it if you are refering to
> > backbone failover problems.  ie using 2 gbic cards to different backbone
> > connections and such.
> >
> > Also has the router IOS built in which has it's own pro's and con's
> associated
> > to it.
> >
> > Pushkar Shirolkar wrote:
> >
> > > hi,
> > >
> > > i have a requirement that says that i need to have a redundant cisco
> switch
> > > .. i.e. there is a LAN and the if the switch fails .. the other switch
> > > should take over. this is possible in the cisco 6000 series of switches
> ...
> > > but is there some lower end solution .. that costs less and also my
> > > requirement of ports on the switch is also less ... say about 24 ports
> ...
> > > is there any product available which does so .. in 3500 or 2900 series ?
> > > like using ISL (inter-switch link) .. but for the lower end switches ...
> > >
> > > Please reply ASAP
> > >
> > > thanx
> > > Pushkar
> > >
> > > **NOTE: New CCNA/CCDA List has been formed. For more information go to
> > > http://www.groupstudy.com/list/Associates.html
> > > _
> > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > **NOTE: New CCNA/CCDA List has been formed. For more information go to
> > http://www.groupstudy.com/list/Associates.html
> > _
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: OPSF Adj problems

[Rob Fielding]

Your configs would be a big help, but without them my best guess here is
that you were using inverse arp and you added an incorrect frame relay map
statement.  Frame relay map statements disable inverse arp for the protocol
it was configured for.  Any dynamic ip to dlci mappings you had with inverse
arp will remain until you reload the router.
Another possibility is that you have different interface types
(point-to-point vs. non-broadcast for instance) on the two routers.  If that
is the case, your hello and dead timers will be different and you won't form
adjacencies.  Please send your configs.

-Rob Fielding, MCSE, CCNP


- Original Message -
From: "Wilson, Christian" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, November 01, 2000 11:31 AM
Subject: OPSF Adj problems


> Hi all
>
> I have a lab with 4 1602 routers.  I have 2 of them, RA&RB, ospf over nbma
> frame-relay.  When I do a show neighbor on RA, I see RB in the
INIT/DRother
> state.  When I do a show ip ospf neighbor on RB, I get nothing.  I have
> debug ip ospf adj running on both, and I see the hello's exchanging for
the
> 2-way state, but then they time out.  Why can't I form these neighbors?
> They were running fine until RB was reloaded.  Have I lost my RID??
Please
> advise
>
> Christian Wilson
> Network Engineer
> Select Comfort Corporation
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: OPSF Adj problems

[Rob Fielding]

Your configs would be a big help, but without them my best guess here is
that you were using inverse arp and you added an incorrect frame relay map
statement.  Frame relay map statements disable inverse arp for the protocol
it was configured for.  Any dynamic ip to dlci mappings you had with inverse
arp will remain until you reload the router.
Another possibility is that you have different interface types
(point-to-point vs. non-broadcast for instance) on the two routers.  If that
is the case, your hello and dead timers will be different and you won't form
adjacencies.  Please send your configs.

-Rob Fielding, MCSE, CCNP


- Original Message -
From: "Wilson, Christian" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, November 01, 2000 11:31 AM
Subject: OPSF Adj problems


> Hi all
>
> I have a lab with 4 1602 routers.  I have 2 of them, RA&RB, ospf over nbma
> frame-relay.  When I do a show neighbor on RA, I see RB in the
INIT/DRother
> state.  When I do a show ip ospf neighbor on RB, I get nothing.  I have
> debug ip ospf adj running on both, and I see the hello's exchanging for
the
> 2-way state, but then they time out.  Why can't I form these neighbors?
> They were running fine until RB was reloaded.  Have I lost my RID??
Please
> advise
>
> Christian Wilson
> Network Engineer
> Select Comfort Corporation
>
> _
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Passed CCIE Written!

[Rob Fielding]

This was no easy test.  I got 78%.  It 
wasn't very ambiguous, but I really had to pick apart details to choose an 
answer.  To make matters worse, the test exploded half-way through.  
Fortunately, when they got it restarted, it picked up where I left off.  I 
finished with plenty of time to spare.  An occasional joke planted in the 
test helped to clear my head a few times.  I didn't notice a focus on any 
one subject.  There was an even mix of everything (and I mean 
everything!).  This test was more detailed than ACRC.
 
I didn't do a very good job studying for this 
test.  I dragged it out too long.  I was going to take it before 
my son was born, but he arrived a month early so its been hard to find study 
time recently.  I could have taken it a couple of months ago after I 
finished my CCNP cert, but I was just too lazy.  
 
The resources I used were:  
CertificationZone - very good, probably the single 
best resource, but I don't like the fact that you can only take the tests once 
each.  
CCIE Exam Cram - surprisingly detailed.  Good 
sample test, but not enough by itself.
Que CCIE prep kit - Average.
Boson - loaded with errors.  Very 
frustrating.  I never even tried all four tests.  I just gave up after 
two.
I have Internet Routing Architectures and Routing 
TCP/IP, but I haven't read them yet.  I just used them for reference 
occasionally.  
CCNP and field experience - This would have been 
too hard without experience and focused studying.
 
Well, now I'm off to find a lab date and give away 
$1000 to Cisco.  Wish me luck.
 
-Rob Fielding

Re: Free Book Subject expanded

[Rob Bains]

Well said!! I can't think of any better way of saying it than this.
Cheers!
==== > Rob
motor_5 wrote:

To
CiscoStudy Group, I
think any help in whatever form is necessary whatever the content in networking
or telecommunications, be it old or new.I
am certified in atm , and that may be a big deal to some.But
I will tell you from 17 YEARS of experience in the electronic engineering
field that only experience, people willing to help you learn, and the ability
of a "KIND-HEARTED" Individual may will get you through the tough times,
anywhere,anytime, and under any circumstances!!!. I personnally would
enjoy recieving the book in my e-mail. Also would like to send documentaion
of my own to the group when needed. Any comments welcome. Any disagreements
all I have to say is this-you are going to have to learn to share knowledge
and work together as a team or professional individuals to stay in the
networking field where-ever you go. Roy

CCIE Study Partner in San Jose [7:4391]

[Rob Boyd]

Hi gang,

I've taken (and failed) the CCIE lab exam once.  I'm scheduled for December
2001.
I'd like to find anyone in the San Jose, CA area (hopefully with a similar
lab date) who
would be interested in putting together a staged attack.  I have a good
collection of
books and scenarios, lots of experience, and some home equipment.

Please let me know.

Thanks!

-Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4391&t=4391
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: entry in the ospf database but not in the route table ? Is [7:5067]

[Rob Fielding]

This is not a direct answer to your question, but you might be interested to
read this.  This paper describes one strange situation in which ospf routes
don't get into the routing table:

http://www.cisco.com/warp/public/104/10.html


-Rob Fielding



- Original Message -
From: "Padhu (LFG)" 
To: 
Sent: Friday, May 18, 2001 10:53 AM
Subject: entry in the ospf database but not in the route table ? Is that p
ossible ?


> I am trying to locate an email thread that was talking about having an
> entry
> > in the ospf database but not in the route table ? Is that possible ?
> >
> > Cheers,Padhu
> **Please read:http://www.groupstudy.com/list/posting.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5067&t=5067
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Could someone give me an example config of adsl+router? [7:6762]

[Mears, Rob]

Hi,

we are running ADSL at our ROBO around the US, we also use a VPN to get them
back to HQ. I will include a config that might help.   This is a 2621 router

Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom
**
version 12.1
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Amardsl001
!

logging rate-limit console 10 except errors
enable secret 5 $1$Onlr$fH2gcC0tDCI9hEpkC2/Nq.
!
!
!
memory-size iomem 10
ip subnet-zero
!
!
no ip finger
ip name-server XXX.XXX.1.8
!
no ip dhcp-client network-discovery
no mgcp timer receive-rtcp
!
!
crypto isakmp policy 1
 hash md5
 authentication pre-share
crypto isakmp key X address XXX.XXX.37.5
!
!
crypto ipsec transform-set rtpset esp-des esp-md5-hmac
!
crypto map rtp local-address BVI1
crypto map rtp 1 ipsec-isakmp
 set peer XXX.XXX.37.5
 set security-association lifetime seconds 28800
 set transform-set rtpset
 match address amarillo
!
call rsvp-sync
!
!
!
!
!
bridge irb
!
!
!
!
interface FastEthernet0/0
 ip address XXX.XXX.102.1 255.255.255.224
 ip helper-address XXX.xX.6.31
 ip nat inside
 no ip route-cache
 no ip mroute-cache
 duplex auto
 speed auto
!
interface ATM0/1
 description ADSL SWB XXX-3xxx-1600 Trouble 800-net-help
 no ip address
 no ip mroute-cache
 atm vc-per-vp 256
 no atm ilmi-keepalive
 pvc 0/35
  encapsulation aal5snap
 !
 bundle-enable
 dsl operating-mode auto
 no fair-queue
 bridge-group 1
 hold-queue 224 in
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface BVI1
 ip address XXX.XXX.XXX.49 255.255.255.248
 ip nat outside
 no ip route-cache
 no ip mroute-cache
 crypto map rtp
!
ip nat pool Net-XXX.xxX.218.126.50 XXX.xXX.126.50 netmask 255.255.255.248
ip nat inside source route-map nonat pool Net-64 overload
ip classless
ip route 0.0.0.0 0.0.0.0 xxx
no ip http server
!
!
ip access-list extended amarillo
 permit ip x
 permit ip x
 permit ip x
logging 10.x
access-list 1 permit xxx
access-list 120 deny   ip xxx
access-list 120 permit ip xxx
!
!
route-map nonat permit 10
 match ip address 120
!
snmp-server community  RO
snmp-server community  RW
snmp-server packetsize 4096
bridge 1 protocol ieee
 bridge 1 route ip
!
dial-peer cor custom
!
!
!
!
!
line con 0
 transport input none
line aux 0
line vty 0 4
 password xxx
 login
!
no scheduler allocate
end

Amardsl001#





















































-Original Message-
From: Steve Smith [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 01, 2001 8:47 AM
To: [EMAIL PROTECTED]
Subject: RE: Could someone give me an example config of adsl+router?
[7:6756]


I use a 827 router. This will go step by step to config one. You need
CCO.
http://www.cisco.com/warp/customer/794/827_faq.html

Steve

-Original Message-
From: Leo Shen [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 01, 2001 4:05 AM
To: [EMAIL PROTECTED]
Subject: Could someone give me an example config of adsl+router?
[7:6732]


it neednot dial,thanks!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6762&t=6762
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: PIX Firewall [7:9295]

[Rob Smyth]

I wouldn't recommend a direct termination with a cross-over.
They should be plugged into a switch.
I have had problems in the past with 7200 series Routers plugged directly
into the PIX, interfaces tend to go up and down.

If I am not mistaken you can have only one default gateway.

You can specify traffic to other networks using Routes on the interface, the
Pix is a Firewall, not a router or switch.

You could also get an ASN number and run BGP to your ISPs, do a little
subnetting and specify that traffic coming from the lower half goes out one
t-1 and the upper out the other.  This would be based on your static from
the Pix.

Something I have done in the past is set up 2 PIX and split the network out.
One out PIX1 and the other out Pix 2.

If anyone else has suggestion please let me know, I am very interested as
well.

Robert C. Smyth
- Original Message -
From: "sanjeev tyagi" 
To: 
Sent: Thursday, June 21, 2001 5:17 AM
Subject: PIX Firewall [7:9295]


> Dear All,
>
> I am having PIX-515UR with 3-10/100 Ethernet ports, I have 2-ISP's which
are
> connected to 2-different 2500 series Routers.Can I terminate RJ-45
> interfaces from Router on PIX Firewall, how will Pix decide on which
Router
> the packets are to be send.
> Please Help.
> Thanks in advance
> Sanjeev Tyagi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9337&t=9295
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

PIX 5.25 ftp Passive-non Passive [7:10306]

[Mears, Rob]

Question for the gods,

We have a requirement to retrieve data from a client's FTP server which is
not Passive in natures, meaning it does not support. My pix box has no
problems getting to FTP sites that support Passive mode. I am 90% sure the
problem is with the client and not me. I have researched this and have
found, in order to allow my users to the FTP I would have to open a range of
ports on the Fwall. Has anyone run into this and does anyone have a easy
fix? I am about to tell the client to (##$%^) just submit and upgrade their
FTP but who knows how long this will take.

How about some help.


Thanks




Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10306&t=10306
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Exam 640-900 and the CID exam [7:34752]

[Mears, Rob]

Hello all

I just finished the 640-900 exam yesterday for the CCIP cert, and it is a
bitch!. If any one has any qiestion, I will take them off line, just email
me.

I am getting ready to take my CID exam, any advice?

Thanks
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34752&t=34752
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

FW: Exam 640-900 and the CID exam [7:34753]

[Mears, Rob]

Hello all

I just finished the 640-900 exam yesterday for the CCIP cert, and it is a
bitch!. If any one has any question, I will take them off line, just email
me.

I am getting ready to take my CID exam, any advice?

Thanks
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34753&t=34753
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Average afterwork time Tech learning commitmen [7:34634]

[Mears, Rob]

Here is one for you.

I get up @ 0430, thats in the AM and study until i go to work, study @ lunch
and then study @ night.  I need a life

Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 06, 2002 3:37 PM
To: [EMAIL PROTECTED]
Subject: RE: Average afterwork time Tech learning commitmen [7:34634]


> For me, my optimal study time was during my lunch break at
> work.  I'd scarf a sandwich and spend 45 minutes completely
> distraction free sitting in my car in the parking lot.  That
> 45 minutes 5 days a week is more effective than 2 hours a
> day trying to work on the lab with the kid, wife,
> honey-do's, tv and dog all vying for my attention.  Note, do
> not become so engrossed in what you are reading that you sit
> in the car with the windows rolled up and cook yourself like
> a thanksgiving turkey.

I think you're potentially describing an infinite loop, which, 
admittedly, might be a good troubleshooting scenario. If the 
sandwich you are scarfing is leftover Thanksgiving turkey, but the 
weather conditions exist to roast you like a turkey...

Maybe it isn't a loop. It might be an infinite recursion or just the 
formation of a black hole.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34780&t=34634
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Exam 640-900 and the CID exam [7:34752]

[Mears, Rob]

I used the stuff for the Routing exam and then the RFC for IS IS. Good luck
finding info on Cisco site. The two test are the same except for the ISIS,
compare on Cisco web page.



Advice?  Study your Ars off!

They take no prisoners

Thanks
Rob Mears III,  CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+
Technical Mercenary

-Original Message-
From: Tim Medley [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 07, 2002 10:33 AM
To: 'Mears, Rob'
Subject: RE: Exam 640-900 and the CID exam [7:34752]


I'm getting ready to take the 640-900 exam. What did you use to
study/prepare with. What kind of advice do you have for taking the test.

tim

Tim Medley - CCNP+Voice, CCDP
Sr. Network Architect
VoIP Group
iReadyWorld
 
p 704.943.3615
f 704.525.9119

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Mears, Rob
Sent: Thursday, February 07, 2002 10:31 AM
To: [EMAIL PROTECTED]
Subject: Exam 640-900 and the CID exam [7:34752]

Hello all

I just finished the 640-900 exam yesterday for the CCIP cert, and it is
a
bitch!. If any one has any qiestion, I will take them off line, just
email
me.

I am getting ready to take my CID exam, any advice?    

Thanks
Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34781&t=34752
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Exam 640-900 and the CID exam [7:34752]

[Mears, Rob]

You go!  Feel the FORCE

Rob Mears III, CCNP, MCSE, MCP+I, NNCDS, NNCSS, CNE, A+
Valor Telecom
LAN\WAN Engineer
Technical Mercenary

-Original Message-
From: Ranma [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, February 07, 2002 7:57 PM
To: [EMAIL PROTECTED]
Subject: Re: Exam 640-900 and the CID exam [7:34752]

640-900 should be a easy task


""Mears, Rob""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello all
>
> I just finished the 640-900 exam yesterday for the CCIP cert, and it is a
> bitch!. If any one has any qiestion, I will take them off line, just email
> me.
>
> I am getting ready to take my CID exam, any advice?
>
> Thanks
> Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34841&t=34752
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: CIT Test [7:34856]

[Mears, Rob]

This test was not the hardest, maybe the 2nd hardest.  You better study
though. 


Use the Transcenders, they come close to crossing the line as far as the NDA
goes.






-Original Message-
From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]] 
Sent: Friday, February 08, 2002 1:30 PM
To: [EMAIL PROTECTED]
Subject: RE: CIT Test [7:34856]

It sounds to me like everyone agree to it being either the easiest or
hardest - so it probably won't help answering Joshua's answer very well.

And Joshua, I can strongly recommend Priscilla's flash cards - they helped
me pass the test; Thanks again for that Priscilla.

Good luck on your exam, and have a great weekend,

Ole

~~~
 Ole Drews Jensen
 Systems Network Manager
 CCNP, MCSE, MCP+I
 RWR Enterprises, Inc.
 [EMAIL PROTECTED]
~~~ 
 http://www.RouterChief.com
~~~
 NEED A JOB ???
 http://www.oledrews.com/job
~~~

-Original Message-
From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 08, 2002 12:53 PM
To: [EMAIL PROTECTED]
Subject: Re: CIT Test [7:34856]


CIT was by the far the easiest for me. I took the Foundation exam before 
that  and it was much more challenging.

Do you know about my CIT flash cards, just for fun? The URL is:

http://www.priscilla.com/cit/toc.html

Good luck. I think you will pass.

Priscilla

At 11:46 AM 2/8/02, Joshua Barnes wrote:
>I know that folks have asked about this test, but I am taking it Thursday,
>I would like to know of the people who thought that it was the hardest
test,
>did you also feel it was equally hard to study for?
>
>I am studying through the book and BOSON, and quite honestly I think that
>this part comes natural to me.  I certainly don't want to underestimate the
>test. ( I don't think I will) but I would like some feedback on this.  Let
>me know if you guys remember how you felt.
>
>[GroupStudy.com removed an attachment of type application/ms-tnef which had
>a name of winmail.dat]


Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35298&t=34856
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Cisco exams are too easy??? [7:34923]

[Mears, Rob]

I got some land in Florida I will sale you cheap too.  Who are you trying to
fool?


Rob




-Original Message-
From: mike johnson [mailto:[EMAIL PROTECTED]] 
Sent: Friday, February 08, 2002 6:10 PM
To: [EMAIL PROTECTED]
Subject: OT: Cisco exams are too easy??? [7:34923]

Hi All,
I took the Cisco PIX CSPFA exam yesterday and I was
suprised to find out that my score is 970/1000.  I've
never worked with any type of firewalls let alone PIX
Firewall.  I read the CSPFA book and borrowed the 
materials from a friend of mine who went to global
knowledge training a few weeks earlier.  I am very 
disappointed with the exam.  I don't think anyone like

myself should be able to pass the exam that easily.  

I thought yesterday's test score was a fluke so this
morning I went and took the MCNS exam and I got a
score
of 960/1000.  I was completely shocked.  A few hours,
I
decide to sign up for the CCIE written exam. 
Amazingly
I passed with a score of 92/100  That is unbelievable.
To pass the exam for someone like myself really
de-value the prestige of Cisco Certification by some
bookworms like me.  Cisco, after all, should make the
exam a lot harder than the way it is now.

Anyone care to comment on this.

Mike Johnson


__
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35299&t=34923
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: IDS 4210 help [7:35940]

[Rob Webber]

You will need to connect to the console of the IDS.  Log in as netrangr
(note: NO "e" in netrangr). Default Passord: "attack"  Then enter:
#sysconfig-sensor

You will see a menu:

1 - IP Address

2 - IP Netmask

3 - IP Host Name

4 - Default Route

5 - Network Access Control

6 - Communications Infrastructure

7 - Date/Time and Timezone

8 - Passwords

9 - Secure Communications

x - Exit

At a minimum you will need to configure 1, 2, 4, 5 and 6 (for #5 enter the
network that the CSPM server resides on. If its 192.168.15.0/24, enter
192.168.15.) For #6, write down the info you assign the IDS. You will need
this for the CSPM. You will need org. number (such as "1"), Node # (such as
"1") and org name (like your domain name).

HTH, Rob.

CCIE 6922

""Shane Stockman""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I am currently setting up a IDS sensor 4210 and would like to know how to
> set up the command interface and the monitoring interface as I would like
to
> manage it from my CSPM server.
>
> I need to get the command interface to talk to the switch but I don't know
> where to set an ip address for it so that my CSPM software cna find it.
>
> Thanks in advance.
>
> _
> Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35956&t=35940
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: PIX information [7:35294]

[Mears, Rob]

Any changes you make to the Pri PIX will be written to the SEC, no need to
day anything.  Good Idea to move the sec and do a Wr M


Rob

-Original Message-
From: Evans, TJ [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, February 13, 2002 12:53 PM
To: [EMAIL PROTECTED]
Subject: RE: PIX information [7:35294]

I believe it sync's them auto-magically, or perhaps on a timed basis.
Regardless ... I always do a wr standby ... just to be sure.


Thanks!
TJ

 -Original Message-
From:   Hartnell, George [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, February 13, 2002 12:46 PM
To: [EMAIL PROTECTED]
Subject:RE: PIX information [7:35294]

AND, am I to understand correctly, as the manual is quite vague, that an
upgrade of the primary failover unit also updates the secondary?  Or, must
the hapless administrator do each individually?

Best, G.

> -Original Message-
> From: Jose Celestino [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 13, 2002 7:12 AM
> To: [EMAIL PROTECTED]
> Subject: Re: PIX information [7:35294]
> 
> 
> PIX-FW1# copy ?
> usage: copy tftp[:[[//location][/pathname]]] flash
> 
> For instance:
> 
> copy tftp://192.168.2.2/configs/pix.cfg flash
> 
> 
> Thus spake BASSOLE Rock, on Wed, Feb 13, 2002 at 09:06:59AM -0500:
> > Hello group,
> > 
> > 
> > What command can I use to copy a configuraton form a tftp 
> server to a PIX
> > Firewall? I have look on the cisco web site for the command 
> but couldn't
> > find. Can somebody help.
> > 
> > Thank you.
> > 
> > Rock
> -- 
> Jose Celestino 
> -
> "Little prigs and three-quarter madmen may have the conceit 
> that the laws of
> nature are constantly broken for their sakes."
> -- Friedrich Nietzsche

*
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. 

If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter. 

*




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36117&t=35294
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: TWO ISP AND ONE FAILURE [7:36371]

[Rob Webber]

For the outbound connectivity, use the HSRP track feature. That "watches" an
interface (the WAN link to your ISP). If that interface goes down, the HSRP
priority of that router gets reduced, making the other router (with the good
ISP link) the HSRP primary. HSRP will make it so no changes are required at
your server.

As mentioned if you have Internet facing servers (mail server, web server),
you really need BGP. However many ISPs will now accept advertisements as
small as /24. So if you have a class C of registered addresses (or if you
can get that) you can advertise it to both ISPs via BGP (even if it was
assigned to you by one of the ISPs).

Rob.
CCIE 6922

""Chris Charlebois""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Depends alot on what kind of connection you want.  If you are just talking
> about outbound access from your site, that isn't a problem.  Setup the two
> routers on the same subnet and use HSRP.  Best practive would be to set up
> two HSRP address; each router will be primarary for one address and backup
> for the other.  That way you can direct traffic over a specific connection
> when it's all up, but traffic will failover to one connection if the other
> goes down.
>
> If, on the other hand, you want to maintain public services during an
outage
> (ie, web pages, FTP sites, incoming e-mail), that is a gorilla of a
> completly different color.  If you're site is big enough, you could
justify
> a /19 public address, which can be routed via BGP.  That would solve alot
of
> you're problems, but it's unlikely that you'd be asking the question if
you
> had a /19.  Some protocols will allow you to specifiy a backup via DNS
(I'm
> thinking SMTP), but that only helps with mail.  Otherwise, you're options
> are co-locateing the equipment you always want available, or switching
both
> your WAN connections to the same ISP.  THere is no really easy solution.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36378&t=36371
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Fiber optic interface question [7:36366]

[Rob Webber]

I am not completely sure, but I do not believe these two cards will
interoperate. The PA-POS is a packet-over-Sonet module. Thus that box will
look to frame the layer 2 frames as POS frames - and it will use the entire
OC-3 for the one POS connection. The PA-A3 is an ATM module. It is looking
to fill it with ATM 53-byte ATM cells, and it is expecting to divide the
OC-3 bandwidth between whatever SVCs or PVCs have been created.

Just my thoughts - Rob.

""Alejandro Acosta""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hello,
>   I am about to purchase a Fiber Optic Interface; because this kind of
> cards are pretty expensive I prefer to ask you in order do not buy the
wrong
> interface.
>   Can I connect this two cards: PA-POS-OC3SMI and PA-A3-OC3SMI?. We are
> going to use single mode fiber and it is Mid Range.
>
> Thanks in advanced.
>
> Alejandro Acosta




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36412&t=36366
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: TWO ISP AND ONE FAILURE [7:36371]

[Rob Webber]

I agree that this configuration - with HSRP and tracking - could work well
for connections that are initiaed outbound. You would not necessarily need
BGP. R1 could do an outbound NAT to whatever IP address space had been
assigned by ISP 1. R2 could do an outbound NAT to whatever IP address space
had been assigned by ISP 2. The return traffic would use the correct ISP
based on that address space - without any BGP.

However if you do need inbound connections - and chances are you do, BGP is
the most realistic way to do it.

BGP on 2500's is fine. If you are only taking the default route its probably
easier on the box than running OSPF.

Rob.

""John Neiberger""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I'm not sure I understand your point.  Assume the following topology:
>
> [R1] [R2]
>||
>||
>\--/
>   |
>   [HOST]
>
> The two border routers are R1 and R2 and each have a connection to an
> ISP.  HSRP is configured to track the WAN link.  The default gateway on
> the host is the HSRP standby ip address.  If either WAN link goes down,
> the relevant router--because it is tracking the WAN link--will notify
> the other router that it is no longer eligible and the other router will
> take over.
>
> Why are you saying that the perceived uptime to the host would not
> increase using this method?  As I see it, unless both links go down, the
> downtime would be quite minimal.
>
> Thanks,
> John
>
> >>> "Hire, Ejay"  2/25/02 11:24:23 AM >>>
> Come on guys, Think about it for a minute.  Do you really think the
> router
> is failing, or is his downtime caused by the wan link?  HSRP won't
> significantly increase your uptime if the wan link is failing and he
> has to
> manually change his server's IP/default gateway to switch to the other
> link.
>
> A diferent way to think of it...  If you had a car with no brakes and
> a
> broken tail-light, which would you fix first?
>
> -Ejay
>
>
> -Original Message-
> From: Ladrach, Daniel E. [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 25, 2002 11:48 AM
> To: [EMAIL PROTECTED]
> Subject: RE: TWO ISP AND ONE FAILURE [7:36371]
>
>
> Run HSRP between the two cisco routers and then point your default
> gateway
> to the VIP address.
>
> Daniel Ladrach
> CCNA, CCNP
> WorldCom
>
>
> -Original Message-
> From: Yassel Omar Izquierdo Souchay [mailto:[EMAIL PROTECTED]]
> Sent: Monday, February 25, 2002 10:11 AM
> To: [EMAIL PROTECTED]
> Subject: TWO ISP AND ONE FAILURE [7:36371]
>
>
> Hello i have a frecuent porblem with one of my isp, i have two cisco
> routers
> and each one to different isp. Frequentily i have to change the gateway
> of
> one of my servers, because one isp is failure.
> I want to know if with one of BGP, OSPF, RIP, NAT or other protocol i
> could
> do the change automatically to the other active isp.
> It happening me right now. And when i have to do that i have to reset
> one of
> my servers.. :S. Is a costs operatrion its a mail server.
> So if somebody knows how to resolve between routers with different isp
> each
> one, how to route accross the other good gateway.
>
> Thnx in advance
> Yassl




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36430&t=36371
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Where is Bruce Caslow ECP1 Class? [7:36501]

[Rob Webber]

Now called "RS-NMC-1 (Routing and Switching Net Master Class)"

Rob.

""Will K.""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Does anyone know where information about this class can be found? Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36513&t=36501
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Where is Bruce Caslow ECP1 Class? [7:36501]

[Rob Webber]

Oops - apparently the link did not come through for some reason. It is:

www.netmasterclass.net/nmc/

Rob.

""Will K.""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Does anyone know where information about this class can be found? Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36515&t=36501
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: MPLS in the Enterprise [7:36670]

[Rob Webber]

I see your point on security, but I don't completely agree. Your current
Frame Relay network is only as secure as your carrier. If someone at your
carrier maps a PVC between you and company X, real traffic can flow
(assuming your router picks it up and places on the physical interface,
which it likely would). Granted, the only way someone could probably use
this to hack into your network was if they had a route to you (which they
could add) and if you had a route back to them (unlikely unless you are
running a routing protocol and they pick up on it).

It seems to me you could make MPLS fairly secure by using a routing protocol
with authentication and a simple access list.

To answer John's original question, I have only seen MPLS deployed in one
organization - they are using Equant as their carrier. They are happy with
it, but its hardly widespread.

I'm curious why they said they could not give John any-any connectivity if
he kept his addressing?? That's basically exactly what MPLS was meant to
do...perhaps its an implementation issue...? It also curious why they even
suggested changing the addressing. On a network as big as John's (100 site)
its a ridiculous idea, and as Joseph mentioned they are going to add a
unique VRF, so it doesn't matter if the carrier has 100 customers that all
use 192.168.1.0...

Rob.

""Joseph Brunner""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> i was pitched this very thing recently by wcom and qwest.. basically it is
> only as secure as your carriers.. if some "f*cks up" and imports something
> into your VRF, either a default, another vpn, or whatever you security
> is finished.. plug banks are supposed to encrypt over IPSEC, so why bother
> running MPLS (come one how much diff-serv can do you on frac T-1's anyway)
> if you are just going to IPSEC the packets between pix's or vpn
> concentrators
> anyway.. MPLS right now for 100 sites, just can't be trusted. I used to
work
> for ISP's, everyone there was a perp.. trust my vpn security to some loser
> ISP.
> No thanks
>
> read this
>
> http://www.cisco.com/warp/public/cc/pd/iosw/prodlit/mxinf_ds.htm
>
>
>
> Joseph Brunner
> ASN 21572
> MortgageIT MITLending
> New York, NY 10038
> (212) 651 - 7695 Voice
> (212) 651 - 7795 Fax
>
>
>
> -Original Message-
> From: John Neiberger [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 27, 2002 12:24 PM
> To: [EMAIL PROTECTED]
> Subject: MPLS in the Enterprise [7:36670]
>
>
> Okay, I'm about to show how clueless I am when it comes to MPLS
>
> I've been getting calls from multiple providers lately all trying to
> suggest that I migrate our 100-site frame relay network to their MPLS
> network, suggesting that we'll have any-to-any connectivity and the
> ability to prioritize traffic classes within the MPLS network.
>
> Are any of you doing something like this?  I'm going to read up on it
> but I'm having trouble visualizing it.  Does this basically turn our
> network into a giant multipoint network?  Do our branch routers need to
> be aware of MPLS or do providers make this transparent somehow?  How
> does this affect routing?
>
> It seems that if we have any-to-any connectivity then the branch
> routers don't even need to run a routing protocol; every router would
> have one exit point to get to any destination.  But, how would the MPLS
> cloud know where to route packets?  The more I think about it it seems
> like our branch routers would have to participate in MPLS to provide the
> necessary destination info for the MPLS cloud.
>
> See how clueless I am?  Ugh...  Time to do some studying on this.
> Since we already do a little video conferencing over IP and are working
> on getting VoIP working, it might be beneficial to get away from the
> frame relay network.  But since I don't understand this new technology,
> I don't know if it's  a viable solution for us or not.
>
> Off to CCO I go!
>
> Thanks,
> John




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36694&t=36670
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: blocking spanning tre ports [7:37663]

[Rob Webber]

If I understand your topology correctly, switches 3 and 4 share an Ethernet
segment. If I remember Spanning Tree correctly, one of these two will be the
"designated bridge" for that segment. That bridge will be forwarding packets
toward the root. All other bridges on that segment (in this case, the other
switch) will block their link if it creates a loop.

I believe the designated bridge is the one on that segment with the lowest
priority. If the priority is the same, the one with the lowest bridge ID
(mac address) becomes the designated bridge.

Changing the path cost on the link between 3 and 4 shouldn't have much
affect on the switch that is the designated bridge - it will be forwarding
anyway. Changing the path cost on the other switch should affect which of
its links are forwarding and which are blocked.

My guess is you don't have to actually change the path cost on both switches
on floor 1 and floor 4. I think if you change the path cost on one of those
two switches (the designated bridge) it actually won't have any affect (and
thus you really don't need to...). You can also try setting which bridge is
the designated one by making its priority lower than the other one - but
DON'T make its priority lower than the root!

Rob.
CCIE 6922

""steve skinner""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> guys,
>
> another question ..
>
> in on of my sites i have clusters of 3548 switches ..
> At each end of the cluster i have a link to the distribution layer...
> i have multiple uplink to each switch (6 in cluster)..
> and in the middle we have set the spanning-tree cost on one interface of
the
> uplinks to much higher than default ...(that way switch 1 -3 use
> distribution link 1 and switch 4-6 use distribution link 6 )..what i am
> finding odd is that on switches 3 and 4 (the middle of my cluster) i have
to
> increase the cost on both switches`uplinks sometimes
> and others just 1 switch, other times.(to force it into blocking)...
>
> floor 1 i had to do both
> floor 2 just switch 3
> floor 4 both
> floor 5 just switch 3
> floor 6 just switch 3
>
> what i dont understand is why...???
>
> i should have to set the uplink ports from 3 to 4 to
> both having high costs ...
>
> why does it sometimes work with just one...
>
> any idea`s..
>
> _
> Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37879&t=37663
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BGP using AS_PATH attribute [7:37749]

[Rob Webber]

I haven't seen the lab, either, but how did you perform the filtering of
AS65000? When I read your post I was thinking of the neighbor
remove-private-as command. That should allow R3's loopback network to
propagate, just that R1 won't see the 65000 AS. Feel free to post your
configs and anything else relevant, I'll take a look.

Rob.
CCIE 6922

""Mike Sweeney""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I've been studying BGP using several books and papers. One of which is the
> Cisco Academy Semester 5 lab companion. So far it's been pretty good but
Lab
> 8-3 drives me nuts.
>
> 3 routers.. 3 AS
>
> R1R2R3
> AS100AS300  AS65000
>
> The idea is to have everyone share routes(did that) and then to filter off
> the AS65000 number as the update is sent ot R1(did that)
>
> The kicker was I was *supposed* be able to ping R3 from R1 after this.. no
> way.. wasnt going to happen. The only network statements were the
loopbacks
> for each router.. I was able to ping r3 AFTER I added the network
statement
> to R2 that id'ed the interface IP between R2 and R1. That was not in the
lab..
>
> If someone who has this lab take a look and explain why the ping should or
> should not work?
>
> Thanks
>
> MikeS
> PS- I really am learning to dislike BGP right now ;)
>
> ---lab configs used
>
>
> hostname R1
> !
> !
> memory-size iomem 10
> ip subnet-zero
> !
> interface Loopback0
>  ip address 201.1.1.1 255.255.255.0
>  ip directed-broadcast
> !
> interface FastEthernet0/0
>  no ip address
>  no ip directed-broadcast
> !
> interface Serial0/0
>  ip address 192.168.1.5 255.255.255.252
>  no ip directed-broadcast
>  no ip mroute-cache
>  no fair-queue
> !
> router bgp 100
>  no synchronization
>  network 201.1.1.0
>  neighbor 192.168.1.6 remote-as 300
>  neighbor 202.2.2.2 remote-as 300
> !
> no ip classless
> no ip http server
> !
> !
> !
> line con 0
>  transport input none
> line aux 0
> line vty 0 4
>  login
> !
> no scheduler allocate
> end
>
> R1#
>
>
> hostname R2
> !
> !
> ip subnet-zero
> !
> !
> !
> interface Loopback0
>  ip address 202.2.2.2 255.255.255.0
>  no ip directed-broadcast
> !
> interface Ethernet0
>  no ip address
>  no ip directed-broadcast
>  shutdown
>  media-type 10BaseT
> !
> interface Serial0
>  ip address 172.24.1.17 255.255.255.252
>  no ip directed-broadcast
>  no ip mroute-cache
>  clockrate 56000
> !
> interface Serial3
>  ip address 192.168.1.6 255.255.255.252
>  no ip directed-broadcast
>  clockrate 100
> !
> router bgp 300
>  no synchronization
>  network 202.2.2.0
>  neighbor 172.24.1.18 remote-as 65000
>  neighbor 192.168.1.5 remote-as 100
>  neighbor 192.168.1.5 remove-private-AS
> !
> !if I add network 192.168.1.0, I can ping R3 from R1. Without it..no go
> no ip classless
> !
> !
> line con 0
>  transport input none
> line aux 0
> line vty 0 4
>  login
> !
> end
>
> R2#
>
>
> hostname R3
> !
> !
> no ip subnet-zero
> !
> !
> process-max-time 200
> !
> interface Loopback0
>  ip address 203.3.3.3 255.255.255.0
>  ip directed-broadcast
> !
> interface Ethernet0
>  no ip address
>  no ip directed-broadcast
>  shutdown
> !
> interface Serial0
>  ip address 172.24.1.18 255.255.255.252
>  no ip directed-broadcast
> !
> router bgp 65000
>  no synchronization
>  network 203.3.3.0
>  neighbor 172.24.1.17 remote-as 300
> !
> no ip classless
> !
> !
> line con 0
>  transport input none
> line aux 0
> line vty 0 4
> !
> end
>
> R3#




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37881&t=37749
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Is this possible? [7:38098]

[Rob Webber]

As far as getting the PIX to prompt for authentication, it can be done,
however it needs to be done by a browser (since the browser has the ability
to "pop up" a username/password box, but Citrix doesn't have this
capability). You can simply have them go to a static web page that you
create which will ask for authentication. Once authenticated, they can (and
only then) get to Citrix on 1494:

In this example 10.20.10.51 would be your Citrix server and 10.20.10.4 would
be your web server. Obviously they could be the same box...

aaa authentication http inbound 10.20.10.4 255.255.255.255 0.0.0.0 0.0.0.0
tacacs+

aaa authorization tcp/1494 inbound 10.20.10.51 255.255.255.255 0.0.0.0
0.0.0.0

aaa authorization udp/1604 inbound 10.20.10.51 255.255.255.255 0.0.0.0
0.0.0.0

The TACACS+ or Radius server would then have a rule that states when address
x.x.x.x authenticates via HTTP, it is allowed to connect to server y.y.y.y
via 1494 and/or 1604.

Rob.

""Johnson, Richard (NY Int)""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi All,
>
> Is it possible to do the following.I have a Citrix server on my
> internal network which has an outside address via NAT. On the PIX port
1494,
> ICA client, is open and is obviously allowed to come in. The user is then
> prompted for a user name and password. Upon entering this information,
they
> are then prompted for the pin and secure ID by our RSA server. My question
> is this, as opposed to having the Citrix server prompt them for their RSA
> info I would love for them to prompted by the firewall. Any ideas if it
can?
>
>
> Thanks,
>
>
> Rich




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38427&t=38098
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: cisco switches (with MSFC) arp timer question [7:38635]

[Rob Webber]

For step 3, it depends whether the link between core 1 and core 2 is a
routed link or a trunk (ISL or 802.1Q) link. If its a routed link (such as
VLAN 3, with all VLANs running OSPF), core 1 will route the packet to core 2
and core 2 will route the packet to client 2.

For step 4, client 2 will not ARP for client 1. Since client 1 and client 2
are on different VLANs, client 2 will ARP for its default gateway - core 2.
When core 2 receives the packet it will send it via core 1. Again, depending
on whether this is a routed or trunked link will dictate exactly how this
packet is sent from core 2 to core 1.

Anytime a router (MSFC) needs to forward a packet to a client, if it does
not have an ARP entry, it will ARP for the client.

If a switch ages a MAC address out from its CAM table, it will flood (to all
ports on the VLAN) the very first frame that has a destination of the
"unknown" MAC address. Due to the flooding, the frame will reach the correct
destination. Once that station replies with the very first packet, the CAM
table will be updated and no more flooding will occur.

Hope that helps - Rob.
CCIE 6922

""z z""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi
>
> One interesting scenario here. Two core switches (with
> MSFC) running HSRP. Core 1 is the master for vlan 1,
> and core 2 is the master for vlan 2. Understand MSFC
> arp timer is 4 hours, but switch CAM timer is 300
> seconds. So there will be one problem:
>
>
> 1. Client 1 (vlan 1) wants to talk to client 2
> (vlan2). It will send one frame to client 2 using Core
> 1s mac address as the destination mac, because Core 1
> is its gw.
> 2. Core 1 will check its routing table and forward the
> packet to client 2. Meantime, it will change the
> frames source mac address to its own mac and the des
> mac to client 2s mac address.
> 3. Core 2 will just simply switch the frame to client
> 2, because core 1 has done the routing. To core 2, its
> arp table and aft table wont contains client 1s mac
> address so far, since core 1 has translated the
> frames source mac address.
> 4. When client 2 wants to reply, it will send the
> replying packets to core 2. Core 2 will arp for client
> 1s mac address. When client 1 reply this arp request,
> core 2 will add its mac address to both its arp table
> and aft table.
> 5. this is working fine so far.
> 6. after 300 seconds, core 2s aft table time out.
> However its arp table is still valid, so it wont do
> any more arp request. When client 2 wants to talk to
> client 1, core 2 will do the routing correctly, but
> then flood the frames to all the switch ports.
>
> Is my theory correct?
>
>
> __
> Do You Yahoo!?
> Yahoo! Sports - live college hoops coverage
> http://sports.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38701&t=38635
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Appreciate Your Expertise On This Strange ARP Problem [7:38828]

[Rob Webber]

Alec,

This is quite an interesting scenario you ran into. I think I can explain
what happened.

As you mentioned Cisco enables proxy-arp by default. Usually this is a good
thing - in this case it was the cause of the problems.

Before the change when a 10.67.7.* DHCP client wanted to connect to a
10.67.1.* server, the client would issue an ARP request for the 10.67.1.*
address. This ARP request would reach the actual server as well as the A
router. The A router would see that the request was for an address that it
believed was on a completely different subnet (10.67.1.0). Since proxy ARP
was enabled (by default), the router would answer the ARP request using its
own mac address as the destination mac address. At this point there would be
a race between the server responding (correctly) to the ARP request and the
A router responding to the ARP request.

When the server's ARP response won that race, everything worked fine. When
the A router won the ARP response race, it would receive the packets
destined for the server from the client. The A router would then attempt to
route those packets to the correct destination. Its default route said to
route them to router B, which it would do. Router B would then know to
forward those packets right back out the same interface to the server. In
this scenario traffic was taking a strange path, but still working (its
likely router B would actually also send an ICMP packet which may have taken
router A out of the loop).

When the default route for router A was removed, the same race still
occurred. Except now when router A won the race it had no route to correctly
send the packet. Thus the packets would never make it to router B and/or the
server and communication was lost.

You correctly fixed the problem, though it would have been interesting to
see if disabling proxy arp on router A also would have fixed the problem. My
guess is it would have...

Rob.
 wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi there
>
> This is my first time to post a question.
>
> Here is a real scenario which happened a few days ago. Though the problem
> has been resolved, i still cannot understand what the cause is.
>
> Customer A has a partner connection to B's network. due to lack of
> capability on B's Router/Firewall, one of A's router is plugged directly
> onto B's internal LAN(sounds silly, but it is true).
>
> B's LAN use 10.67.0.0/16 address, of which 10.67.1.x is for servers,
> 10.67.2.x for routers/switches, 10.67.7.x and 10.67.8.x for DHCP clients.
> B's router has 10.67.2.1 addr.
>
> A's router on B's LAN gets assigned an ip addr 10.67.2.2,but a wrong /24
> mask was given by B. since A's users need to talk to B's server, a static
> route(ip route 10.67.1.0 255.255.255.0 10.67.2.1) was added.
>
> A default route is also configured(ip route 0.0.0.0 0.0.0.0 10.67.2.1) on
> the A's router.
>
> when this default route was taken off(no obvious reason to point a default
> route to B's default router), all B's dhcp clients cannot talk to their
own
> servers(10.67.1.x) any more even they are on the same subnet.
>
> B's network support was called in, and they found that the A's router is
> incorrectly answering ARP requests(by default ip proxy-arp is enabled on
the
> LAN interface). and somehow the arp respone reaches the client before the
> server's, so the client cannot talk to the servers.
>
> the problem later was resolved by rectifying the subnet mask on A's
router.
> but i still cannot figure out what went wrong when the default route on
A's
> router was removed.
>
> I'll be much appreciated if anyone can shed some lights on this.
>
> regards
>
> Alec Shi
>
>
> Senior Support Engineer
> Axon Computertime
> Auckland
> NZ
>
>
>
> --
> The information contained in this e-mail message is intended only for the
> use of the person or entity to whom it is addressed and may contain
> information that is CONFIDENTIAL and may be exempt from disclosure under
> applicable laws.
>
> If you read this message and are not the addressee you are notified that
> use, dissemination, distribution, or reproduction of this message is
> prohibited. If you have received this message in error, please notify us
> immediately and delete the original message. You should scan this message
> and any attached files for viruses.
>
> Axon Computertime accepts no liability for any loss caused either directly
> or indirectly by a virus arising from the use of this message or any
> attached file.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=38828&t=38828
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Classful Prefix-list [7:39113]

[Rob Webber]

I believe this will do what you are looking for. I did a little testing and
it seemed to work well:

ip prefix-list classful seq 5 permit 0.0.0.0/1 ge 8 le 8
ip prefix-list classful seq 10 permit 128.0.0.0/2 ge 16 le 16
ip prefix-list classful seq 15 permit 192.0.0.0/3 ge 24 le 24

Hope that helps, Rob.
CCIE 6922

""William Lijewski""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Can someone tell me how to create a Prefix-list to only alow classful
routes
> for BGP.  I know you can do the following with an extended access-list:
>
> access-list 100 permit ip 0.0.0.0 127.0.0.0 host 255.0.0.0
> access-list 100 permit ip 128.0.0.0 63.255.0.0 host 255.255.0.0
> access-list 100 permit ip 192.0.0.0 31.255.255.0 host 255.255.255.0
>
> Is there way to do it?  Any good reading material on Prefix-lists?
>
> Thanks in advance.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39187&t=39113
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Classful Prefix-list [7:39113]

[Rob Webber]

To better understand why this works:

In the very first octet, the following applies:

class A addresses start with the first bit = 0

class B addresses start with the first two bits = 10

class C addresses start with the first three bits = 110

So the 0.0.0.0/1 means look for a network address of 0.0.0.0, but only pay
attention to the very first bit (and make sure that it is a zero). So
0.0.0.0/1 identifies all class A networks - from 0.0.0.0 to 127.255.255.255.
The ge 8 le 8 says only accept routes with a mask of 255.0.0.0. The
combination of these two identifies all classful class A networks (0.0.0.0/8
to 127.0.0.0/8).

Same with the 128.0.0.0/2 - that means make sure the first two bits are 10,
but then ignore everything else. So this includes all class B addresses -
from 128.0.0.0 to 191.255.255.255.

Rob.

""Rob Webber""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I believe this will do what you are looking for. I did a little testing
and
> it seemed to work well:
>
> ip prefix-list classful seq 5 permit 0.0.0.0/1 ge 8 le 8
> ip prefix-list classful seq 10 permit 128.0.0.0/2 ge 16 le 16
> ip prefix-list classful seq 15 permit 192.0.0.0/3 ge 24 le 24
>
> Hope that helps, Rob.
> CCIE 6922
>
> ""William Lijewski""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Can someone tell me how to create a Prefix-list to only alow classful
> routes
> > for BGP.  I know you can do the following with an extended access-list:
> >
> > access-list 100 permit ip 0.0.0.0 127.0.0.0 host 255.0.0.0
> > access-list 100 permit ip 128.0.0.0 63.255.0.0 host 255.255.0.0
> > access-list 100 permit ip 192.0.0.0 31.255.255.0 host 255.255.255.0
> >
> > Is there way to do it?  Any good reading material on Prefix-lists?
> >
> > Thanks in advance.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=39204&t=39113
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

3660 router [7:11917]

[Mears, Rob]

Any one ever had a problem loading IOS on a 3660 right out of the box? I
have one with 64meg flash and 256 ram and the damn thing will not come out
of RMMON. I have set the confreg to boot correctly still RMMON. I have
flashed it with two different IOS (121&12.2), swapped out Flash, MEM, even
sent the chassis back to Cisco and the new one had the same problem. TAC has
no clue, they have been sending me part and giving me to different Engineer
with no luck.

What gives?

Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11917&t=11917
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 3660 router [7:11917]

[Mears, Rob]

You can flash it via Xmodem


-Original Message-
From: Peter Slow [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 8:59 AM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router [7:11917]


open up hyperterm, connect to console, log the session, flick the power
switch, and let it drop into ROMMON.

then you need to post the text file IN LINE with your next email.
THEN we can help you.


-Original Message-
From: Mears, Rob [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 9:33 AM
To: [EMAIL PROTECTED]
Subject: 3660 router [7:11917]


Any one ever had a problem loading IOS on a 3660 right out of the box? I
have one with 64meg flash and 256 ram and the damn thing will not come out
of RMMON. I have set the confreg to boot correctly still RMMON. I have
flashed it with two different IOS (121&12.2), swapped out Flash, MEM, even
sent the chassis back to Cisco and the new one had the same problem. TAC has
no clue, they have been sending me part and giving me to different Engineer
with no luck.

What gives?

Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11948&t=11917
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 3660 router [7:11917]

[Mears, Rob]

I hope u can help. With the message below it would appear the it has bad
mem, but I replace it. I got this error message on both router, the old and
the new. The only thing that was left in common was the IOS so I got a
different version and still the same problem.



Here is the error message

WARNING: All existing data in flash will be lost!
Invoke this application only for disaster recovery.
Do you wish to continue? y/n  [n]:  y
Ready to receive file c3660-jk8s-mz.122-1b.bin ...
Erasing flash at 0x3000sector erase failed at location 0x3000,
status 0x
20202020
flash sector will NOT erase...aborting
rommon 2 >

-Original Message-
From: Peter Slow [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 8:59 AM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router [7:11917]


open up hyperterm, connect to console, log the session, flick the power
switch, and let it drop into ROMMON.

then you need to post the text file IN LINE with your next email.
THEN we can help you.


-Original Message-
From: Mears, Rob [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 9:33 AM
To: [EMAIL PROTECTED]
Subject: 3660 router [7:11917]


Any one ever had a problem loading IOS on a 3660 right out of the box? I
have one with 64meg flash and 256 ram and the damn thing will not come out
of RMMON. I have set the confreg to boot correctly still RMMON. I have
flashed it with two different IOS (121&12.2), swapped out Flash, MEM, even
sent the chassis back to Cisco and the new one had the same problem. TAC has
no clue, they have been sending me part and giving me to different Engineer
with no luck.

What gives?

Rob




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11950&t=11917
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 3660 router-----Finished [7:12135]

[Mears, Rob]

Greeting to all,

This problem proved to be a real bitch, and I thank you for all the advice. 

Here is the fix, and I am almost ashamed to say, but I want to pass this on
so none of you all fall into the same trap as I did.

As I said, in one post before, I kept getting the same error messages even
after TAC sent me new memory and a new router. The 3rd TAC engineer was the
charm, because he asked me if this was a TELCO version of the 3660. That was
a real good question cuss I had no idea, as I have never worked on one.
Well, that was the problem, it takes a TELCO FEATURE SET IOS. One telltail
clue is that their is not a plastic front on the Telco version.
I saw this right off the bat, but thought Cisco had just redesigned it.  Man
what a day. The other way to see if the router is an Enterprise version or
Telco is to run the SN numbers. I can think off all the times i do this
before I install an IOS. Maybe i should.

Good news is I got it fixed and got a new Router out of the deal (thanks you
TAC). And as TAC goes, they have pulled my Butt out of the sling more then
once, so I have nothing but good to say for them. Yes I have gotten some
DORKS before, but I have the option to tell them to get lost and give me a
new Engineer. We pay a lot for this service.

Hope this has been as educational for you all as it has been for me.

Look below at link for the difference in the two.
http://www.cisco.com/warp/public/cc/pd/rt/3600/prodlit/36kmp_ds.htm


-Original Message-
From: Charlie Hartwell [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 11, 2001 9:15 AM
To: Mears, Rob
Subject: Re: 3660 router [7:11917]


Hi Rob,
 I didn't want to send this out to the whole group but I sympathise
with your problem - I used to work on TAC and I see this sort of
thing happening more and more. Unfortunately TAC have a new policy of
employing people without much real technical experience (even
pre-CCNA level people) and they put them on the "bread and butter"
TAC teams to break them in. It will be one of those teams dealing
with your problem - probably "euro-config". I know a lot of those
guys and, although they all work hard, they don't have the experience
to deal with a case that gets over complicated.

 If you have had an RMA already and you are still no nearer to
solving the problem then the next step is to have the case escalated.
I expect this case has been going on for a few days already and has
probably passed the P3 SLA so the TAC can escalate to a more
technical team to get you a speedy fix.

 I hope this helps and I would appreciate it if you kept this under
your hat.

Regards

Charlie


 --- "Mears, Rob"  wrote: > Any one ever had
a problem loading IOS on a 3660 right out of the
> box? I
> have one with 64meg flash and 256 ram and the damn thing will not
> come out
> of RMMON. I have set the confreg to boot correctly still RMMON. I
> have
> flashed it with two different IOS (121&12.2), swapped out Flash,
> MEM, even
> sent the chassis back to Cisco and the new one had the same
> problem. TAC has
> no clue, they have been sending me part and giving me to different
> Engineer
> with no luck.
> 
> What gives?
> 
> Rob
[EMAIL PROTECTED] 


Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12135&t=12135
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 3660 router-----Finished [7:12135]

[Mears, Rob]

I feel your pain


Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom



-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 10:29 AM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router-Finished [7:12135]


This brings up a point:  why is there a telco version in the first
place?  What are these telco requirements and why are they there?  I've
been hearing little snippets about this but I don't know the details. 
>From what I've read so far, it sounds like some government agency had
too much time on its hands and felt like being even more intrusive than
usual.  

Who cares if there is a plastic cover or not?  Who cares if the rack is
19" or 24" wide?  Who cares if the equipment is more than 12" deep?  

Someone please explain this to me, and please tell me there are good
reasons for these requirements.  Otherwise, it will just annoy me and
ruin my day.  ;-)  Besides, I have a feeling I'll be running into
situations where equipment that I provision has to meet these
requirements so I might as well know what they are, right?

Thanks,
John (who is just starting his 2nd cup of coffee...be gentle.)

>>> "Mears, Rob"  7/12/01 8:55:12 AM >>>
Greeting to all,

This problem proved to be a real bitch, and I thank you for all the
advice. 

Here is the fix, and I am almost ashamed to say, but I want to pass
this on
so none of you all fall into the same trap as I did.

As I said, in one post before, I kept getting the same error messages
even
after TAC sent me new memory and a new router. The 3rd TAC engineer was
the
charm, because he asked me if this was a TELCO version of the 3660.
That was
a real good question cuss I had no idea, as I have never worked on
one.
Well, that was the problem, it takes a TELCO FEATURE SET IOS. One
telltail
clue is that their is not a plastic front on the Telco version.
I saw this right off the bat, but thought Cisco had just redesigned it.
 Man
what a day. The other way to see if the router is an Enterprise version
or
Telco is to run the SN numbers. I can think off all the times i do
this
before I install an IOS. Maybe i should.

Good news is I got it fixed and got a new Router out of the deal
(thanks you
TAC). And as TAC goes, they have pulled my Butt out of the sling more
then
once, so I have nothing but good to say for them. Yes I have gotten
some
DORKS before, but I have the option to tell them to get lost and give
me a
new Engineer. We pay a lot for this service.

Hope this has been as educational for you all as it has been for me.

Look below at link for the difference in the two.
http://www.cisco.com/warp/public/cc/pd/rt/3600/prodlit/36kmp_ds.htm 


-Original Message-
From: Charlie Hartwell [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 11, 2001 9:15 AM
To: Mears, Rob
Subject: Re: 3660 router [7:11917]


Hi Rob,
 I didn't want to send this out to the whole group but I sympathise
with your problem - I used to work on TAC and I see this sort of
thing happening more and more. Unfortunately TAC have a new policy of
employing people without much real technical experience (even
pre-CCNA level people) and they put them on the "bread and butter"
TAC teams to break them in. It will be one of those teams dealing
with your problem - probably "euro-config". I know a lot of those
guys and, although they all work hard, they don't have the experience
to deal with a case that gets over complicated.

 If you have had an RMA already and you are still no nearer to
solving the problem then the next step is to have the case escalated.
I expect this case has been going on for a few days already and has
probably passed the P3 SLA so the TAC can escalate to a more
technical team to get you a speedy fix.

 I hope this helps and I would appreciate it if you kept this under
your hat.

Regards

Charlie


 --- "Mears, Rob"  wrote: > Any one ever had
a problem loading IOS on a 3660 right out of the
> box? I
> have one with 64meg flash and 256 ram and the damn thing will not
> come out
> of RMMON. I have set the confreg to boot correctly still RMMON. I
> have
> flashed it with two different IOS (121&12.2), swapped out Flash,
> MEM, even
> sent the chassis back to Cisco and the new one had the same
> problem. TAC has
> no clue, they have been sending me part and giving me to different
> Engineer
> with no luck.
> 
> What gives?
> 
> Rob
[EMAIL PROTECTED] 


Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk 
or your free @yahoo.ie address at http://mail.yahoo.ie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12151&t=12135
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 3660 router-----Finished [7:12135]

[Mears, Rob]

that is! that's the one. Damn Telco stuff. You know it was said if they were
to burn (Telco Routers), it would not put off toxic fumes (no plastic an
telco requirment) . I looked around the CO and wondered about the billions
little blue and white analog wires we have form ceiling to floor and
wondered what's the point. Smoke from the router won't kill me, but the
plastic from the wires will.  Man


rob

-Original Message-
From: Peter Slow [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 12:26 PM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router-Finished [7:12135]


Uhh, they do!
c3660-telcoent-mz.121-5.T9.bin

-Original Message-
From: Bob Johnson [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 12:34 PM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router-Finished [7:12135]


Telco requirements are quite strict
There are Bellcore standards that are used at all central offices.
It has nothing to do with the goverment but will Bell ensurring that any
third party equipment will:
1) Fit in telco racks
2) No physically interfer with other equipment in telco racks
3) Not add to the fire load
4) Not cause any undue electrical problems (NEBS grounding, etc)

It's all really for infrastructure protection
Too bad they didn't have a "Telco" version of the IOS.

Bob

-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 8:29 AM
To: [EMAIL PROTECTED]
Subject: RE: 3660 router-Finished [7:12135]


This brings up a point:  why is there a telco version in the first
place?  What are these telco requirements and why are they there?  I've
been hearing little snippets about this but I don't know the details. 
>From what I've read so far, it sounds like some government agency had
too much time on its hands and felt like being even more intrusive than
usual.  

Who cares if there is a plastic cover or not?  Who cares if the rack is
19" or 24" wide?  Who cares if the equipment is more than 12" deep?  

Someone please explain this to me, and please tell me there are good
reasons for these requirements.  Otherwise, it will just annoy me and
ruin my day.  ;-)  Besides, I have a feeling I'll be running into
situations where equipment that I provision has to meet these
requirements so I might as well know what they are, right?

Thanks,
John (who is just starting his 2nd cup of coffee...be gentle.)

>>> "Mears, Rob"  7/12/01 8:55:12 AM >>>
Greeting to all,

This problem proved to be a real bitch, and I thank you for all the
advice. 

Here is the fix, and I am almost ashamed to say, but I want to pass
this on
so none of you all fall into the same trap as I did.

As I said, in one post before, I kept getting the same error messages
even
after TAC sent me new memory and a new router. The 3rd TAC engineer was
the
charm, because he asked me if this was a TELCO version of the 3660.
That was
a real good question cuss I had no idea, as I have never worked on
one.
Well, that was the problem, it takes a TELCO FEATURE SET IOS. One
telltail
clue is that their is not a plastic front on the Telco version.
I saw this right off the bat, but thought Cisco had just redesigned it.
 Man
what a day. The other way to see if the router is an Enterprise version
or
Telco is to run the SN numbers. I can think off all the times i do
this
before I install an IOS. Maybe i should.

Good news is I got it fixed and got a new Router out of the deal
(thanks you
TAC). And as TAC goes, they have pulled my Butt out of the sling more
then
once, so I have nothing but good to say for them. Yes I have gotten
some
DORKS before, but I have the option to tell them to get lost and give
me a
new Engineer. We pay a lot for this service.

Hope this has been as educational for you all as it has been for me.

Look below at link for the difference in the two.
http://www.cisco.com/warp/public/cc/pd/rt/3600/prodlit/36kmp_ds.htm 


-Original Message-
From: Charlie Hartwell [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 11, 2001 9:15 AM
To: Mears, Rob
Subject: Re: 3660 router [7:11917]


Hi Rob,
 I didn't want to send this out to the whole group but I sympathise
with your problem - I used to work on TAC and I see this sort of
thing happening more and more. Unfortunately TAC have a new policy of
employing people without much real technical experience (even
pre-CCNA level people) and they put them on the "bread and butter"
TAC teams to break them in. It will be one of those teams dealing
with your problem - probably "euro-config". I know a lot of those
guys and, although they all work hard, they don't have the experience
to deal with a case that gets over complicated.

 If you have had an RMA already and you are still no nearer to
solving the problem then the next step is to have the case escalated.
I expect this case has been going on for a few days

Re: Age Challenge for Oldest CCNP/DP on Earth!! [7:14167]

[Rob Montgomery]

Offline please.


- Original Message -
From: "Greg Macaulay" 
To: 
Sent: Monday, July 30, 2001 5:13 PM
Subject: FW: Age Challenge for Oldest CCNP/DP on Earth!! [7:14167]


> -Original Message-
> From: Greg Macaulay [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 30, 2001 4:55 PM
> To: [EMAIL PROTECTED]
> Subject: RE: Age Challenge for Oldest CCNP/DP on Earth!! [7:14167]
>
>
> 56 -- and I can prove it -- 8 grandchildren -- can't recall their
b-dates --
> and I have white hair!!!
>
> Gosh, I really didn't think that many folks on the list had so much time
on
> their hands to contribute to this nonsense (and fun!).
>
> Greg Macaulay
> Oldest CCNP/CCDP on Earth (recount in progress)
> Lifetime Member of AARP
> Retired Attorney/Law Professor
>
> -Original Message-
> From: William Gragido [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 30, 2001 4:10 PM
> To: 'Greg Macaulay'; [EMAIL PROTECTED]
> Subject: RE: Age Challenge for Oldest CCNP/DP on Earth!! [7:14167]
>
>
> I can't resist, how old are you?
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Greg Macaulay
> Sent: Monday, July 30, 2001 9:33 AM
> To: [EMAIL PROTECTED]
> Subject: Age Challenge for Oldest CCNP/DP on Earth!! [7:14167]
>
>
> I need proof -- date of birth, place of birth, whether you are left-or
> right-handed or ambidextrous, etc.  Without that -- I still claim the
title.
> In fact, I am taking on the Republicans spin in Florida on this.  My age
has
> been broadcast over this list for months and no one "successfully" came
> forth and refuted my claim to the title.  Thus, there has been an age
count,
> and an age recount and even a recount on the age recount -- and there has
> not been anyone who can prove BRD (lawyers shorthand for Beyond a
Reasonable
> Doubt!) that I am not the duly "self-appointed" and "self-anointed" oldest
> (albeit I concede not the wisest) CCNP/CCDP on this earth!!
>
> If necessary, I will call upon Ms. Katherine Harris (from Florida) to
> mediate this issue!!!
>
> See, we old folks have nothing on our plates so we can engage in this
> nonsensical, time-wasting behavior (at least while I'm having my first
> cuppa' tea this a.m.  Then its on to work!!!
>
> Greg Macaulay
> Oldest CCNP/CCDP on Earth (pending recount!)
> Lifetime Member of AARP
> Retired Attorney/Law Professor
>
>   -Original Message-
>   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
>   Sent: Saturday, July 28, 2001 8:57 PM
>   To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
>   Subject: Re: For those studying VoIP/CVoice! [7:14061]
>
>
>   Greg,
>
>   Good post on a reference URL for VoIP.  I will be taking  Cisco IP Voice
>   class next week and will refer to some of these links.
>
>   TNX
>
>   Note: However, you'll have to revise your signature as I think for the
> moment
>   I am
>   most likely the Oldest and Bald CCIE wannabe  ;-) at age 59 3/4
>
>   Ray
>   Oldest CCNP/CCDP on Earth
>
>
>
>   
>   FYI
>
>   I discovered this page on CCO by accident.  Hope it helps those who are
>   preparing for CVoice
>
>   http://www.cisco.com/warp/public/788/voip/voip.shtml
>
>
>   Greg Macaulay
>   Oldest CCNP/CCDP on Earth
>   Lifetime Member of AARP
>   Retired Attorney/Law Professor
>   




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14269&t=14167
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: DNS, DHCP, UNIX, FTP help [7:15164]

[Rob Bains]

For best materials on any of these topics or any other UNIX related topics,
I would
suggest checking out Oreilly's (www.ora.com).  They are absolutely
outstanding!! And I
don't work for them or get paid to say any of this.

RSB (SCSA, SCNA, CCNA)

Brian wrote:

> hmm, a broad question.
>
> for unix stuff, i'd go with this.
> http://www1.fatbrain.com/asp/bookinfo/bookinfo.asp?theisbn=0130206016&vm=c
>
> It will give you a lot of dirt on the other items also, as anyone into unix
> should get how that stuff works.
>
> Brian
>
> - Original Message -
> From: "mike rose"
> To:
> Sent: Tuesday, August 07, 2001 2:47 PM
> Subject: DNS, DHCP, UNIX, FTP help [7:15164]
>
> > Any one know any good books for the folliowing topics
> >
> > DHCP, DNS, UNIX and FTP
> >
> > Any input will be greatly appreciated.
> >
> > Thanks
> >
> > Mike

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of rbains.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=15204&t=15164
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: banner motd [7:17204]

[Rob Robinson]

Have you tried a code upgrade?  We had a situation where a 4906 Switch
displayed the same behavior...only displayed the partial banner.  It's code
version only allowed a certain number of characters in the banner.  Upgrade
to latest IOS fixed it.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Lupi, Guy
Sent: Saturday, August 25, 2001 3:20 PM
To: [EMAIL PROTECTED]
Subject: RE: banner motd [7:17204]


Should have done that in the first email, here it is.  Like I said, works on
all my other routers, just not on the ones running Version 12.0(3)T3.
Thanks.

banner motd x

* !  WARNING  !*
*  *
* This is a private system.  Unauthorized access is prohibited by law. *
*  *
*   Violators may be prosecuted.  If you are not authorized*
*  *
*to access this system, please disconnect now. *
*  *


x




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=17267&t=17204
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Great Mortgage Rates [7:17354]

[Rob Bains]

Is this list no moderated How do people get away with this type of
non-sense??

Rob

"[EMAIL PROTECTED]" wrote:

> fs756d
> Whether a new home loan is what you seek or to refinance
> your current home loan at a lower interest rate, we can help!
>
> Mortgage rates haven't been this low in the last 12 months,
> take action now!
>
> Refinance your home with us and include all of those pesky
> credit card bills or use the extra cash for that pool you've
> always wanted...
>
> Where others say NO, we say YES!!!
> Even if you have been turned down elsewhere, we can help!
>
> Easy terms!  Our mortgage referral service combines the
> highest quality loans with the most economical rates and
> the easiest qualifications!
>
> Take just 2 minutes to complete the following form.
> There is no obligation, all information is kept strictly
> confidential, and you must be at least 18 years of age.
> Service is available within the United States only.
> This service is fast and free.
>
> Free information request form:
> PLEASE VISIT
> http://www.freewebdirect.net/mortgagezone
>
> 
> Since you have received this message you have either responded
> to one of our offers in the past or your address has been
> registered with us.  If you wish to be removed please reply to:
> mailto:[EMAIL PROTECTED]@yahoo.com?subject=remove
> 
>
> fsda0uio
>
> ***

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of rbains.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=17356&t=17354
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

VPN from 2600 routers to PIX 525 Question [7:17700]

[Mears, Rob]

I am looking for someone who is running VPN's between 2621 routers and PIX
525 on IOS 6.0 to campare notes with.
How are they working for You?


Thanks

Thank you,
Rob Mears III, CCNA, MSCE, CNE, NNCDS, NNCSS, A+
Technical Mercenary
Valor Telecom




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=17700&t=17700
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Offtopic: Sun Solaris Admin [7:17684]

[Rob Bains]

Try solcert on yahoo.  There are a couple of sun related lists on Yahoo, but
solcert is
a good starting point.

 > Rob

Admin wrote:

> hi all,
>
> do you know of a similar discussion group dedicated to Unix/Sun Solaris
Admin
> certification ?
>
> have to get solaris admin cert to retain my job.
>
> thanks

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of rbains.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=17783&t=17684
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]