Re: Can't Ping- What's Up ??? [7:29290]
Is it possible that when you ping, that the device is using the wrong source address? This would cause the packet to reach the destination, but the destination doesnot know how to reply. Make sure that if your server has more than one interface that the non relative interfaces are disconnected. I've run into problems with a windows server in which, it insisted on using the wrong source address, hence all pings failed. Let me know if this is the problem ""Circusnuts"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > 3524xl#sh arp > Protocol Address Age (min) Hardware Addr Type Interface > Internet 10.1.1.12 5 00e0.1456.4cd8 ARPA VLAN1 > Internet 10.1.1.21 00e0.2998.3372 ARPA VLAN1 > Internet 10.1.1.3- 0003.6b80.8180 ARPA VLAN1 > 3524xl#ping 10.1.1.2 > > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds: > . > Success rate is 0 percent (0/5) > > Im going crazy here. 10.1.1.2 is a directly connected server and is > live to the Internet (accepting E-mail as we speak). 10.1.1.2 can Ping > everyone on this switch. 10.1.1.12 (Internet router) cannot Ping > 10.1.1.2 (server) and I cant even Ping 10.1.1.2 (sever) when @ the > Console of 10.1.1.3 (3524 LAN switch IP). In essence- the server works, > but I can see it. I have rebooted all devices and Arp entries stay > current and increment accordingly. > > Ideas ??? > Phil Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29297&t=29290 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Can't Ping- What's Up ??? [7:29290]
Actually I made a mistake. I noticed that you can ping from the server. Maybe the router is using the wrong source address when pinging the server. This could cause the ping to fail. If this is a cisco router, try a "debug ip packet detail" and see if the source is correct. If it is wrong, try an extended ping using the correct source address. ""Circusnuts"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > 3524xl#sh arp > Protocol Address Age (min) Hardware Addr Type Interface > Internet 10.1.1.12 5 00e0.1456.4cd8 ARPA VLAN1 > Internet 10.1.1.21 00e0.2998.3372 ARPA VLAN1 > Internet 10.1.1.3- 0003.6b80.8180 ARPA VLAN1 > 3524xl#ping 10.1.1.2 > > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds: > . > Success rate is 0 percent (0/5) > > Im going crazy here. 10.1.1.2 is a directly connected server and is > live to the Internet (accepting E-mail as we speak). 10.1.1.2 can Ping > everyone on this switch. 10.1.1.12 (Internet router) cannot Ping > 10.1.1.2 (server) and I cant even Ping 10.1.1.2 (sever) when @ the > Console of 10.1.1.3 (3524 LAN switch IP). In essence- the server works, > but I can see it. I have rebooted all devices and Arp entries stay > current and increment accordingly. > > Ideas ??? > Phil Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29298&t=29290 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Frame Relay help please .. thanks [7:29002]
Turn off your keepalives and see if that works! If it does, we'll discuss why later. If that does not work, then either you have misconfigured your router or the Frame relay switch is misconfigured Could you post your entire config? ""Telemachus Luu"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi, > > I am having some issues bringing up a 64k frame relay circuit. Wcom seems > to think it's a bad csu as they aren't able to loop it. As a result, I did > some testing on my end. I enabled inward bound looping on the dsu also. > For some reason, the line protocol for the serial interface comes up for > about 10 seconds, the comes back down. When I do a shut and then a no shut, > again, it comes back up for about 10 seconds and then goes back down. > Here's the current config and a sh int ser... LMI enq for send and receive > still increment even when line protocol is in down state... If I set the > csu/dsu to loopback, shouldn't the line protocol stay in up state forever? > If so, what could be the issue here? > > interface Serial3/3 > ip address 10.252.0.1 255.255.0.0 > encapsulation frame-relay > ! > > Serial3/3 is up, line protocol is down (looped) > Hardware is M4T > Internet address is 10.252.0.1/16 > MTU 1500 bytes, BW 1544 Kbit, DLY 2 usec, > reliability 255/255, txload 1/255, rxload 1/255 > Encapsulation FRAME-RELAY, crc 16, loopback not set > Keepalive set (10 sec) > LMI enq sent 136, LMI stat recvd 0, LMI upd recvd 0, DTE LMI down > LMI enq recvd 146, LMI stat sent 0, LMI upd sent 0 > LMI DLCI 1023 LMI type is CISCO frame relay DTE > FR SVC disabled, LAPF state down > Broadcast queue 0/64, broadcasts sent/dropped 0/4, interface broadcasts 0 > Last input 00:00:09, output 00:00:09, output hang never > Last clearing of "show interface" counters 00:20:31 > Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 > Queueing strategy: weighted fair > Output queue: 0/1000/64/0 (size/max total/threshold/drops) > Conversations 0/1/256 (active/max active/max total) > Reserved Conversations 0/0 (allocated/max allocated) > 5 minute input rate 0 bits/sec, 0 packets/sec > 5 minute output rate 0 bits/sec, 0 packets/sec > 150 packets input, 2035 bytes, 0 no buffer > Received 0 broadcasts, 0 runts, 0 giants, 0 throttles > 1 input errors, 0 CRC, 0 frame, 1 overrun, 0 ignored, 0 abort > 184 packets output, 2415 bytes, 0 underruns > 0 output errors, 0 collisions, 22 interface resets > 0 output buffer failures, 0 output buffers swapped out > 36 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up > > Any help would be appreciated.. > > thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29300&t=29002 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: 2509 configuration [7:29341]
shawn, Your configuration looks ok, and this should work. Try Pressing "enter" a few times when you see this message: R2509#telnet 10.1.1.1 2001 Trying 10.1.1.1, 2001 ... Open Also, make sure that your loopback interface is up. It should always be up, but just make sure using "sh ip int brief". If that is not the problem. Make sure that your cables are plugged into the console (not the aux) port, and make sure that the lines you are trying to connect to are the ones that are connected to your routers. You may have not connected lines 1-5 to anything, which could give you this message. If all of my suggestions fail, let me know. ""shawn lloyd"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi > > I'm configuring a 2509 terminal server for my home lab. The octal cable is > connected to the console ports of my 5 routers. But when I try to establish a > telnet connection I receive the following : > R2509#telnet 10.1.1.1 2001 > Trying 10.1.1.1, 2001 ... Open > > But nothing else happens. I'm not able to log into the router. > THe configuration of the terminal server is > > ! > service udp-small-servers > service tcp-small-servers > ! > hostname R2509 > ! > enable secret cisco > ! > no ip domain-lookup > ! > ip host r1-2501 2001 10.1.1.1 > ip host r2-2501 2002 10.1.1.1 > ip host r3-2501 2003 10.1.1.1 > ip host r4-2502 2004 10.1.1.1 > ip host r5-2523 2005 10.1.1.1 > ! > interface Loopback0 > ip address 10.1.1.1 255.255.255.255 > ! > ip classless > ! > line con 0 > ! > line 1 8 > transport input all > no exec > line aux 0 > line vty 0 4 > login > ! > end > > Router 1 configuration > R1-2501#sh run > Building configuration... > > Current configuration: > ! > version 12.0 > service timestamps debug uptime > service timestamps log uptime > no service password-encryption > ! > hostname R1-2501 > ! > ! > ip subnet-zero > ! > ! > ! > interface Loopback0 > ip address 1.1.1.2 255.0.0.0 > no ip directed-broadcast > ! > interface Ethernet0 > no ip address > no ip directed-broadcast > shutdown > ! > interface Serial0 > no ip address > no ip directed-broadcast > no ip mroute-cache > shutdown > no fair-queue > ! > interface Serial1 > no ip address > no ip directed-broadcast > shutdown > ! > ip classless > ! > ! > line con 0 > transport input none > line aux 0 > line vty 0 4 > login > ! > end Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29344&t=29341 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: cannot ping loopback IP addresses [7:29345]
Set the masks of your loopback addresses to 255.255.255.255 ""mindiani mindiani"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I have two routers connected to the same LAN but I cannot ping the loopback > IP address of each other. from router1 I am not able to ping the loopback of > router2 and vice-versa. Why ?. > > Here is the sample config of the two routers. > > -- > Router1: > > hostname router1 > interface loopback0 > ip address 100.0.1.1 255.255.255.0 > ! > interface Ethernet0 > ip address 192.100.103.9 255.255.255.0 > no ip-directed broadcast > ! > eigrp 1 > network 192.100.103.0 > network 100.0.0.0 > no auto-summary > > - > Router2: > > hostname router2 > interface loopback0 > ip address 100.0.1.6 255.255.255.0 > ! > interface Ethernet0 > ip address 192.100.103.10 255.255.255.0 > no ip-directed broadcast > ! > eigrp 1 > network 192.100.103.0 > network 100.0.0.0 > no auto-summary > > > _ > Join the worlds largest e-mail service with MSN Hotmail. > http://www.hotmail.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29347&t=29345 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: static routes [7:29372]
When your hosts receives the ping, it will try to send a reply back to destination network 10.2.2.0. The Hosts are connected on a 192.168.1.0 network. Your host should recognize that the destination network 10.2.2.0 is not on its local ethernet segment so it will forward the ping reply to its default gateway(the hosts default gateway). The host's default gateway should be 192.168.1.33. Make sure that your hosts have this default gateway(192.168.1.33) configured correctly. Let me know if this was the problem ""Richard Wilson"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi > > I know Im doing something completely stupid here so > please be kind. > > Master and Oldie are linked via S0 (10.2.2.0/24). > 192.168.1.0/24 is a network on e0 > Im trying to use static routes as you can see. No > routing protocols are running. > From Oldie, I can ping the Ethernet interface > (192.168.1.33) but I cant ping a host out on the > 192.168.1.0 network. What is wrong? > > > Current configuration: > ! > version 11.0 > service udp-small-servers > service tcp-small-servers > ! > hostname Oldie > ! > ! > partition flash 2 8 8 > ! > ! > interface Serial0 > ip address 10.2.2.2 255.255.255.0 > ! > interface Serial1 > no ip address > shutdown > ! > interface TokenRing0 > no ip address > shutdown > ! > ip route 192.168.1.0 255.255.255.0 10.2.2.1 > ! > ! > line con 0 > line aux 0 > transport input all > line vty 0 4 > login > ! > end > > Oldie# > > Current configuration: > ! > version 11.2 > no service udp-small-servers > no service tcp-small-servers > ! > hostname Master > ! > enable secret 5 $1$R9bp$WOhi9Vc5vjX9rqoRVd/zY. > ! > no ip domain-lookup > ip host internet 2003 10.1.1.1 > ip host netguy 2002 10.1.1.1 > ip host oldie 2001 10.1.1.1 > ! > interface Loopback0 > ip address 10.1.1.1 255.255.255.0 > ! > interface Ethernet0 > ip address 192.168.1.33 255.255.255.0 > ! > interface Serial0 > ip address 10.2.2.1 255.255.255.0 > clockrate 56000 > ! > interface Serial1 > no ip address > shutdown > ! > no ip classless > ip default-network 192.168.1.0 > ! > line con 0 > line 1 8 > no exec > transport input all > line 9 16 > line aux 0 > line vty 0 4 > password cisco > login > ! > end > > Master# > > > __ > Do You Yahoo!? > Check out Yahoo! Shopping and Yahoo! Auctions for all of > your unique holiday gifts! Buy at http://shopping.yahoo.com > or bid at http://auctions.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29374&t=29372 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: accesslist [7:29468]
Try changing you access-group command to: "ip access-group 103 in" Let me know if this helps ""kaushalender"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > hi , > all i want to make accesslist on inboud traffic on ethernet .Iwant that > traffic of 64.110.93.192/28 and 216.252.243.0/24 should be allowed rest will > be dinied . I have tried this > > access-list 101 permit ip 64.110.93.192 0.0.0.15 any > access-list 101 permit ip 216.252.243.0 0.0.0.225 any > > but didnt worked plz help me i giving the detail of int e0/0 > > > interface Ethernet0/0 > ip address 10.101.3.48 255.255.252.0 secondary > ip address 216.252.243.161 255.255.255.240 secondary > ip address 216.252.243.1 255.255.255.252 secondary > ip address 64.110.93.194 255.255.255.240 > ip access-group 103 out > full-duplex > > thanx > regards > kaushalender Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29474&t=29468 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Proper dress for CCIE lab? [7:29524]
"Cisco" culture does not require you to wear a suit to work. I don't think it would be fair for them to make no-employees pay money to play dress up. But If you insist on wearing a suit, I would save it for the second attempt :-) ""Steven A. Ridder"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Is it true that you have to be dressed in a suit for the CCIE lab? Do them > mark mannerisms, speech and dress? I have some old Novell guys telling me > horror stories of the Novel Instructor Program. > > Steve Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29577&t=29524 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: help on acl setup [7:31336]
In order to permit only the odd ip addresses in subnet 192.168.1.0 try: access-list permit 192.168.1.1 0.0.0.254 To permit only even addresses try: access-list permit 192.168.1.0 0.0.0.254 ""Jinsoo"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello all, > > I have a question regarding acl setup. I have a network addr to deny access > on odd ip addr and permit even ip addr in telnetting. Can anyone tell me how > to setup? > > Thanks > Jin Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31601&t=31336 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF and The Disappearing Neighbor Statement [7:31656]
The only time that the "neighbor" statement will not show up in the running-config, is if you do not have a "network" statement under the "router ospf" process. I am doubting that the neighbors formed an adjacency without the neigbor or network statements showing up under the ospf config. If the adjacency was actually formed, then it must be a bug. Another thing that I have noticed is than when trying to use the neighbor statement to set the priority, "neighbor 1.1.1.1 priority 255" the priority will change to something other than what I set it too. It took me a while to figure this one out. The problem is that I have to have matching "ip ospf priority 255" statements under the interfaces running ospf . ""John Neiberger"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > It was hot, too hot. Our detective had been working feverishly to > configure OSPF over NBMA without the use of ip ospf network statements. > He knew that to do this he must explicitly add neighbor statements or > adjacencies would not form. > > He logs into the hub router and types in his three neighbor statements. > All seems well. It's still too hot, but it's a dry heat. > > He now logs into one of the spoke routers and types in his neighbor > statement. He pauses momentarily and then checks the OSPF adjacencies. > Something seems to be wrong, he thinks to himself. This ought to be > working, but it isn't. Why not? He looks through the running config to > look for any errors and notices the the neighbor statement that he just > entered is missing! > > He slowly and deliberately types it in again making sure there are no > mistakes but yet it still does not show up in the running configuration. > Is this an IOS issue? Operator error? Some rift in the space-time > continuum? > > He jumps to another spoke router running a different IOS and tries the > same thing with the same result. He is frantic now, beads of sweat > pouring down his face. What if this were the real CCIE lab exam? Could > this be a fatal stumbling block? > > He finally notices that adjacencies do eventually form after clearing > the relevant interfaces. This must be because the hub router accepted > the neighbor statements. But what if it hadn't, he ponders. He thinks > forward into the future when--a day after taking the lab exam--he > receives the dreaded email that says, "We're sorry, it is apparent that > you have no clue." > > Back to the real world > > What was the cause of the missing neighbor statements? Have any of you > run into this before? I've never bothered to explicitly use neighbor > statements as I'm in the habit of using the ip ospf network command to > make them unnecessary. > > Any thoughts? > > Thanks, > John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31684&t=31656 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF and The Disappearing Neighbor Statement [7:31656]
I was able to reproduce your exact scenario. I had a hub with two spokes and the neighbor statements only appeared on the hub. This is very interesting and I'm not sure what the reason behind it is. I am glad that this was brought up, because I would love to get to the bottom of this situation. I'll keep you posted ""John Neiberger"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > The network statement definitely was there, but the neighbor statements > would only appear on the hub router. Interestingly, I just saw a sample > configuration similar to this on CCO and they only had the neighbor > statement on one router, not both. I think as long as one router has a > neighbor statement configured, the adjacency will form assuming all > other things being equal (network type, etc.) > > The adjacencies formed but I had to cycle the interfaces to get things > started. Even if the neighbor statement is only required on one side, > I still don't understand why the router wouldn't let me add it. The > adjacencies would eventually form, however, and routing occurred exactly > as I expected it. > > I did notice a minor issue with the neighbor statements on the hub. I > had three of them, and one of them inserted 'priority 1' at the end, yet > the other two remained as I entered them. > > >>> "Router Man" 1/11/02 3:08:03 PM >>> > The only time that the "neighbor" statement will not show up in the > running-config, is if you do not have a "network" statement under the > "router ospf" process. I am doubting that the neighbors formed an > adjacency > without the neigbor or network statements showing up under the ospf > config. > If the adjacency was actually formed, then it must be a bug. > > Another thing that I have noticed is than when trying to use the > neighbor > statement to set the priority, "neighbor 1.1.1.1 priority 255" the > priority > will change to something other than what I set it too. It took me a > while > to figure this one out. The problem is that I have to have matching > "ip > ospf priority 255" statements under the interfaces running ospf . > ""John Neiberger"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > It was hot, too hot. Our detective had been working feverishly to > > configure OSPF over NBMA without the use of ip ospf network > statements. > > He knew that to do this he must explicitly add neighbor statements > or > > adjacencies would not form. > > > > He logs into the hub router and types in his three neighbor > statements. > > All seems well. It's still too hot, but it's a dry heat. > > > > He now logs into one of the spoke routers and types in his neighbor > > statement. He pauses momentarily and then checks the OSPF > adjacencies. > > Something seems to be wrong, he thinks to himself. This ought to be > > working, but it isn't. Why not? He looks through the running config > to > > look for any errors and notices the the neighbor statement that he > just > > entered is missing! > > > > He slowly and deliberately types it in again making sure there are > no > > mistakes but yet it still does not show up in the running > configuration. > > Is this an IOS issue? Operator error? Some rift in the space-time > > continuum? > > > > He jumps to another spoke router running a different IOS and tries > the > > same thing with the same result. He is frantic now, beads of sweat > > pouring down his face. What if this were the real CCIE lab exam? > Could > > this be a fatal stumbling block? > > > > He finally notices that adjacencies do eventually form after > clearing > > the relevant interfaces. This must be because the hub router > accepted > > the neighbor statements. But what if it hadn't, he ponders. He > thinks > > forward into the future when--a day after taking the lab exam--he > > receives the dreaded email that says, "We're sorry, it is apparent > that > > you have no clue." > > > > Back to the real world > > > > What was the cause of the missing neighbor statements? Have any of > you > > run into this before? I've never bothered to explicitly use > neighbor > > statements as I'm in the habit of using the ip ospf network command > to > > make them unnecessary. > > > > Any thoughts? > > > > Thanks, > > John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31772&t=31656 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Help with access server [7:31801]
When you say that "it doesn't work", what exactly are the symptoms? ""Stephane Wantou Siantou"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi everybody, > I am trying to configure a Cisco 2509 access server to access my 3 routers > RouterA, RouterB,and RouterC so that I don't have to use the console cable > to access each > router. But it doesn't > w work. I am using an octal cable. 3 cables from the octal cable are > connected to RouterA, RouterB, and RouterC and the terminal server is > accessed with a console cable. What am I doing wrong can anyone help? Do > I need to configure anything on RouterA, RouterB, and RouterC to be > accessed from the access server? This is the configuration of the > access server. > Thanks, > Stephane > > Current configuration: > ! > version 12.0 > service timestamps debug uptime > service timestamps log uptime > no service password-encryption > ! > hostname terminal_server > ! > ! > ip subnet-zero > ip host RouterA 2001 172.16.1.1 > ip host RouterB 2002 172.16.1.1 > ip host RouterC 2003 172.16.1.1 > ! > ! > ! > interface Loopback0 > ip address 172.16.1.1 255.255.255.255 > no ip directed-broadcast > ! > ip classless > ! > line con 0 > transport input none > line 1 8 > no exec > transport input all > line aux 0 > line vty 0 4 > login > ! > end Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31810&t=31801 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: router cannot see host [7:31800]
enable "debug ip packet detail" on the router to see if the router is even making an attempt to send the packet out. Also, Do you have more than one NIC on your workstation? ""LaRoy Slaughter"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I know this is a RTFM type question but for the life of me I cannot > figure out why the router cannot ping the work station, but the > workstation can ping and telnet to the router Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31811&t=31800 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: tunnel interfaces [7:32953]
5.5.5.5 6.6.6.6 e0IP cloud e0 R1-R2-R3-R4-R5-R6R7 t0 t0 1.1.1.1 1.1.1.2 Lets say that you have two routers (R1&R7) each with a tunnel interface. Also there are about 5 routers in between them(R2-R6). The 5 routers in the middle will only know the How to reach the E0 interfaces (or ip addresses), NOT the tunnel interface (or tunnel ip address). Anytime you send a packet destined for a tunnel interface, the source/destination addressess will be the ip address of the E0 interfaces. The tunnel information is seen as data to the outgoing/incoming IP packet. If sending from R1 to R7, R1 will use the source address of E0 then add the tunnel info as the payload. When R7 sees the data in the packet he will see a GRE header which tells him that there is tunnel information which follows. R7 will strip off the GRE header then see the source ip address of the tunnell interface on R1. The only traffic that will be tunneled will be traffic that has a next hop of the tunnel interface wrote in message news:[EMAIL PROTECTED]... > I am kinda confused on the details of how tunneling > works... > > questions: > > 1> what will the source and destination ip addresses > of the gre encapsulated packets be? (posible answers > include the address of the tunnels, or the e0 > interfaces, etc...) > > 2>what traffic will be tunneled? (all traffic inbound > to e0, or all traffic detined to the local tunnel > interface?) > > hope that makes sense > > r1: > interface Tunnel0 > ip address 192.168.20.1 255.255.255.0 > tunnel source Ethernet0 > tunnel destination 11.11.11.11 > r2: > interface Tunnel0 > ip address 192.168.20.2 255.255.255.0 > tunnel source Ethernet0 > tunnel destination 9.9.9.9 > > > __ > Do You Yahoo!? > Send FREE video emails in Yahoo! Mail! > http://promo.yahoo.com/videomail/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33101&t=32953 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Lab Score Results on the Web now. [7:33078]
This site will also display your lab results and Section Percentages ""Jim Dixon"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I don't know when this was made effective, but apparently > now you can see your score from the Lab Exam about two days > after you take it. (Routing and Switching Only so far) > > http://www.cisco.com/warp/public/625/ccie/ccie_program/whatsnew.html#1 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33110&t=33078 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Config Cat 5K GBIC interfaces [7:56410]
Try setting to switch to autonegotiate ""Patrick Donlon"" wrote in message news:200210281321.NAA04008@;groupstudy.com... > Doe anyone have experience connecting a Cat 5K g-bit interface to a Fluke's > g-bit interface? Can't seem to get any layer 3 comms, here's the the show > interface below. NOTE the interface is NOT connected, when it is though the > status is "Connected" and all the relevant LEDs light up and the cable tests > are passed on the fluke OK > > Cheers > > Pat > > > (enable) sh port 5/1 > Port Name Status Vlan Level Duplex Speed Type > - -- -- -- -- -- - --- -- > --- > 5/1 FLUKE Optiview notconnect 1 normal full 1000 > 1000BaseSX > > Port Trap IfIndex > - --- > 5/1 disabled 456 > > Port Broadcast-Limit Broadcast-Drop > --- -- > 5/1 - 0 > > Port Send FlowControlReceive FlowControl RxPause TxPause Unsupported >adminoper adminoper opcodes > - --- --- - -- > 5/1 desired offoff off 0 0 0 > > > Port Align-Err FCS-ErrXmit-Err Rcv-ErrUnderSize > - -- -- -- -- - > 5/1 0 0 0 0 0 > > Port Single-Col Multi-Coll Late-Coll Excess-Col Carri-Sen Runts Giants > - -- -- -- -- - - -- > --- > 5/1 0 0 0 0 0 0 > 0 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56429&t=56410 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Forrest Gump-like arp(?) question [7:56680]
Change the mac-address of the second router to the mac-address of the first router using the mac-address comand. This will answer your question about the arp-cache. router(config-if)#mac-address .. ""Mark Smith"" wrote in message news:200211011409.OAA10912@;groupstudy.com... > I need to replace a router in a cabinet at the facility where my hosted > servers and equipment is. My equipment is "talking" to the hosting > facility's network via a port on a 6509 switch. I replaced my router and > then nothing from my network could connect to the outside world. I waited > about 2 minutes (during which time my entire site's down and my bosses get > VERY nervous) and I never was able to connect from inside and my tester on > the outside was never able to get in to me. I finally put router #1 back in > and all was well again. I've scoured the configuration and #2's is identical > with #1 so I don't believe that is the problem. I'm ass-u-me-ing that the > reason for this is the 6509 port's ARP cache is looking for the MAC address > of router #1 and it ain't there anymore. Would this ass-u-me-ption be > correct or is it possibly something else I'm not thinking/aware of? If it is > an ARP issue, is there a way that I can remotely force the 6509 port to > reset/clear/refresh it's ARP cache? I'm at a Sprint facility and I'd sooner > get a live body (that's not a first level phone answerer anyway) to talk to > me when I'm calling Mars than trying to get one at Sprint. > > Any ideas/thoughts/chastisements on missing the obvious here? As much as I'd > like to work with Cisco gear full time, it's only a very small part of my > current job and, consequently, due to my lack of familiarity with what you > guys do all day every day, it's very likely that I'm missing something that > all in the world except me know about. > Thanks for any help or ideas. > > Mark Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56681&t=56680 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: What is lineset? [7:56665]
These are nothing more than 7200 Port Adatpters (PA's). In otherwords, they are interfaces that you plug other devices into. For example the FAST ETHERNET FX is a Fast ethernet interface which requires Fiber optic capling (F is for Fiber). The FAST ETHERNET ISL requires Copper cabling. The ATM PAs also require Fiber. The E1/T1 most likely is a BNC-like cable. Make sense? ""2000 mpls"" wrote in message news:200211010857.IAA07446@;groupstudy.com... > Hi, > > I am trying to setup a MPLS network in my lab using the given specification > from customer. > > One of the items is lineset, which goes like this: > ETHERNET-10BT, ETHERNET-10BFL, FAST ETHERNET ISL, FAST ETHERNET FX > MULTI-CHANNEL T1/PRI, MULTI-CHANNEL DS3, PACKET OVER SONET/SDH, > MULTI-CHANNEL E1/PRI_120 OHM, ENHANCED ATM, FAST SERIAL, ENHANCED > C7200-IO-2FE, PA-8T-X21 > > As I am an alien in this area, will somebody please tell what are these > things actually? > > How do they relate to my MPLS network which uses Cisco 7200 series? > > Will someone please give me a light bulb to enlighten me? > > Thank you very much and have a nice day. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56684&t=56665 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Routing Question. [7:56639]
You can route based on source address if you use Policy based routing. I'm not sure of the exact syntax, but you can look it up on CCO (www.cisco.com) Its something like this 1. Create an access-list that matches the source address 2. route-map national permit 10 match ip address 101 set ip next-hop int fa1/0 3. apply policy to interface router(config-if)#ip policy national ""Jose Tomas Pinal Salvador"" wrote in message news:200210312259.WAA16059@;groupstudy.com... > Hello Group Study! > > Currently, I have a Cisco router 7513 speaking BGP4 routing protocol with 2 > providers. I need to route all the national traficc for provider 1 and all > the International traficc for provider 2. How can I configure that in the > router. Can I do that based in source and destination IP or based in the > Autonomous System of each provider around the world?. > We are studying to buy a Net Flow for to get statics. > > Thanks for your help. > > > > > _ > Unlimited Internet access -- and 2 months free! Try MSN. > http://resourcecenter.msn.com/access/plans/2monthsfree.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56685&t=56639 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: switch and router security [7:56721]
For basic user login authentication I would suggest Tacacs+ . Its very easy to setup and has some nice features such as encryption of the username/password and keeping a log of each user's executed commands. You can manually configure username/passwords or use a unix passwd file. Please note that this will not encrypt all data from PC to router, for that type of encryption you should look into IPSec. ""Wilson, Christian"" wrote in message news:200211012153.VAA23055@;groupstudy.com... > I have recently implemented the following switches and routers: > > 4006 > 6509 > 3640 > 2600 > > My dillema is how to secure remote administration. I have not been able to > find any documentation supporting SSH on the 4006's. I have found docs on > SSH for the 6509, but only in hybrid mode, and I am running native. I have > found a sketchy doc for the routers implementation of SSH, but it lists that > it is not supported software and documents are scarce. What are my other > alternatives? I have read about cisco secure ACS and have ordered the > software, which should enable many options, but they are unclear to me. > Does RADIUS, S/Key, and TACACS+ encrpt the data between my PC and the > router, or does it just encrypt the login iformation between the router and > the ACS server? I need to protect my sessions end to end. Any advise would > be greatly appreciated! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56728&t=56721 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: 1750 router boot loading problem [7:58028]
What is the router doing? At what point is it broken? Does it try to boot the image? Is it stuck in a loop? You can try CNTRL-BRK, but I know that this will not work with some versions of Microsoft Hyperterm. You can try hyperterminal Private edition http://www.hilgraeve.com/htpe/newfeatures.html or user Tera term. ""Ilker"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all, > > After writing wrong confreg count. I can not break POST during boot in order > to get rommon screen on 1750 router. I m using hyperterminal of win2000 > with autodetect terminal setting. > > How can i break boot process? > > Any ideas ? > > Thanks. > Ilker G. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=58169&t=58028 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router Temperature [7:59054]
Try using the show environment cmd. They will show the normal temperatures ""Hamed Sedighi"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi, > > What is the best Temperature for Routers(2511 & 3661)? > I'm using 'MRTG" for drawing Graph about my Routers Temperature but I don't > know what is the good degree for my Router. Please advise me about this > subject. > > Regards, > H.Sedighi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=59210&t=59054 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Reverse Telnet on Cisco [7:51218]
>From a Unix machine you would type "Ctrl ]" (Hold the Ctrl key down and the right bracket). At the prompt type "send break" or "send brk" . If you are using a windows program, do a search on google to find out how to send a "break" from that application. The break must be done within 60secs after a reboot ""RAJESH.V.S"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi All, > > I have a scenario like this. > one 2509 is acting as the console access server for several routers. each of > these router's console is connected to a tty line of 2509, and from 2509 I > can access any routers console using reverse telnet. > Now my problem is that I want send break command to these reverse telnet > accessible console, so that I can break the booting of these routers and > force them enter ROMMON. > > Is it possible to send break via reverse telnet ? If yes how ? > Thanks in advance. > > regards > Rajesh Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=51425&t=51218 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF External Summarization Problem [7:50260]
Why can't you use the summary-address on the ASBRs. Is there some restriction? ""Jay Greenberg"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello group, > > I seem to have a problem with OSPF external LSA summarization. I have > an Ethernet segment in area 4. There are 2 ASBRs (RAS Gear), and 1 ABR > (the router connected to my backbone). Suppose for now, that ASBR1 is > injecting 192.168.0.1/32 into OSPF as an E2 LSA, and ASBR2 is injecting > 192.168.0.128/25 into OSPF as an E2 LSA. I would like the other areas > to just understand that 192.168.0.0/24 is reachable via the area 4 ABR, > however, #area 4 range 192.168.0.0 255.255.255.0 will not work, because > it will not summarize external routes, and I cannot use summary-address > (or can I?) on the ABR, because it is only supposed to be used by > ASBRs. > > My question is: How can I get the ABR to summarise the /24? > > Jay Greenberg Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=51429&t=50260 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF dead-interval to hello-interval relation? [7:54969]
I've always known it to work the other way around. If you change the hello interval - the dead interval will become 4 times the hello interval. ""Cisco Nuts"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello, > > Couple of questions on OSPF hello and dead interval...(that's driving me > NUTS) :-) > > 1. Why does OSPF NOT change the hello-interval when you first configure the > dead-interval. Ex. I changed the dead-interval to 60 but the hello-interval > still showed up as 10. > > R1-RTD(config-subif)#ip os dead-interval 60 > > R1-RTD#sh ip os int s0/0.2 > Timer intervals configured, Hello 10, Dead 60, Wait 60, Retransmit 10 > > I was assuming that the hello interval would get bumped to 15 but looks like > that's not how it works!! > > -- > > 2. So I changed the hello interval next to 20 thinking that it would bump > the dead interval to 80. But lo! behold! It does NOT change it to 80. Why is > this?? > > R1-RTD(config-subif)#ip os hello-interval 20 > > R1-RTD#sh ip os int s0/0.2 > Timer intervals configured, Hello 20, Dead 60, Wait 60, Retransmit 10 > > -- > > 3. Next, I set the hello interval back to it's default of 10 but still the > dead interval does not get set back to 40. Why?? > > R1-RTD(config-subif)#ip os hello-interval 10 > > R1-RTD#sh ip os int s0/0.2 > Timer intervals configured, Hello 10, Dead 60, Wait 60, Retransmit 10 > > -- > > 4. So, I changed the dead interval back to 40 manually. > > Next, I changed the hello interval to 20 and this time, OSPF set the dead > interval to 80. > > R1-RTD(config-subif)#ip ospf hello-interval 20 > > R1-RTD#sh ip os int s0/0.2 > Timer intervals configured, Hello 20, Dead 80, Wait 80, Retransmit 10 > > 5. Ok, Finally I set the hello interval to 10 and this time OSPF worked at > the way is should work. > > R1-RTD(config-subif)#ip ospf hello-interval 10 > > R1-RTD#sh ip os int s0/0.2 > Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 10 > > > Anybody have any real good explanations for this or is it just a BUG? OR is > this the way Cisco OSPF works!! > > Running ver. > R1-RTD#sh ver > Cisco Internetwork Operating System Software > IOS (tm) C2600 Software (C2600-D-M), Version 12.1(2), RELEASE SOFTWARE (fc1) > > Thank you. > > Sincerely. > > > > > _ > Send and receive Hotmail on your mobile device: http://mobile.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=55169&t=54969 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
