Re: Lab location restriction?
>From what I understand you can book anywhere, at your travel expense of course.. Whats the lead time in Australia? "Craig Columbus" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Does anyone know if there's a restriction on where someone may take the > standard R/S lab? I'm getting ready to schedule mine, and if there's a > backlog until August in the states, Australia looks promising. I couldn't > find any info on Cisco's site, other than all labs, worldwide, are pulled > from the same pool. > > Thanks, > Craig > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IGRP to EIGRP conversion #2
Enable EIGRP on the routers and add the network statements as you normally would.. raise the administrative distance of EIGRP to 110, I believe IGRP is 100 so even though both routing protocols are running on every router, EIGRP routes will be rejected because IGRP has a lower admin distance.. Once the routers are ready, simply put the admin distance of EIGRP back to 90 and it should converge within a few mins.. Once the network is using only EIGRP learned routes, remote IGRP off the routers. hope that helps Russ.. ""Roberts, Timothy"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > I have a hub site with 5 remote sites connecting to it via frame relay. > They are all running IGRP with the same AS. What would be the best way to > migrate from IGRP to EIGRP? Starting by enabling EIGRP on the core router > and run both IGRP and EIGRP. Then convert the spokes one by one. Then > remove IGRP from the core. Can I just enable EIGRP on the remotes, allow > some time to propagate routes in to the table, and then disable IGRP? The > people up stairs will not allow for any significant down time. > Thanks > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco PIX 525 Vs Netscreen 100 Firewall
Netscreen 100 is not a modular Firewall.. you cannot add interfaces as needed.. that is my biggest complaint about it. Russ.. "Lim Kok Hua" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi > > > Anyone can give comment on the Cisco Pix 525 vs the Netscreen 100 > Firewall? Both are hardware based firewall. I have heard little about > Netscreen 100 Firwall (except from the www). Any user of Netscreen can > advise ? > > Thanks > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco PIX 525 Vs Netscreen 100 Firewall
"Lim Kok Hua" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi > > > Anyone can give comment on the Cisco Pix 525 vs the Netscreen 100 > Firewall? Both are hardware based firewall. I have heard little about > Netscreen 100 Firwall (except from the www). Any user of Netscreen can > advise ? > > Thanks > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Token Ring Bit Swapping
Ethernet reads frames backwards.. ie: least significant bit first.. so it reads a frame "abcdef" as "fedcba"... Token Ring reads it left to right so the same frame appears as "abcdef". If you are doing transnational bridging between Ethernet and token ring, the bridge/router will have to bit-swap as frames pass through the bridge to make sure that the frames are in the right format.. Another example is that a Token Ring may carry a RIF, that RIF will have to be removed before it passes to the Ethernet segment since Ethernet will not understand .. is that what your after? Do a search on Cisco's site for transnational bridging.. Hope that helps.. Russ... "Mike Neal" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Can anyone help me with Bit swapping from Token to Ethernet. > I can't seem to grasp how it is done. > > Thanks, > Mike > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Unbreakable Auth on Router?
Yes.. but when you do the password recovery (before you reboot the router with the new enable password) check to see if AAA authentication is enabled on the router.. if it is go into config mode and enter "no aaa new-model" that will remove it.. save the config to startup-config and reboot.. Hope that helps Russ.. ""Montgomery, Robert WARCOM Contractor"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Happy holidays all - > > I have a router that I can not get into. It apparently has authorization > enabled because it says "Authorization Failed." Will the password recovery > method of breaking the boot process work on this router? > > Thanks, > > Rob Montgomery CCNA MCP > Information Security Engineer > IA Systems Analyst > Sytex, Inc./ Naval Special Warfare Command > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ASIC ?
Aplication Specific Integrated Circuit.. It's a chip that performs a certain task in a device.. >From the Cisco website Cat 3900 product info: The switching-fabric ASIC is responsible for managing the central shared-data buffer and its associated buffer table, which carries addressing information for the buffer. The 10 Gbps link between the switching-fabric ASIC and the shared-data buffer yields a 5 Gbps forwarding rate. The radial interconnect with network satellites minimizes the number of pins per data interconnection and distributes available bandwidth among the satellites. This design both maximizes reliability and lowers cost. A lot of vendors use ASICs because they perform their task quicker than software code relying on a central CPU and shared memory.. You could have an ASIC donig all the VPN encrypting/de-encrypting in a device and remove that burden from the CPU itself.. Hope that helps Russ.. "John lay" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Guys, > > What is ASIC which is found in Cisco Switches? > > > Thanx > > > > > > ___ > Tired of slow Internet? Get @Home Broadband Internet > http://www.home.com/xinbox/signup.html > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE certificationzone.com Mock Exam 754/1000
CCIE written is a very tough exam, follow the blue print on Cisco's website and you will be fine.. A good book is Roosevelt Giles CCIE all in one study guide.. there is a lot of information covered in that book.. it's probably overdoes it on technical detail, but it definitely helps.. Boson exams are also very good... Russ.. "Phil Barker" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Any Zone Fans out there ? > > Hit a 754/1000 tonight, I'm well pleased, but do you > think I'm ready or just knocking on the door ? > > Past results, > > 629 > 636 > 670 > 608 (Bad Day) > 706 > 706 > 706 (Getting Cheesed off) > 754 (Happier) > > Any comments appreciated. > > Best Regards, > > Phil. > > > > Do You Yahoo!? > Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk > or your free @yahoo.ie address at http://mail.yahoo.ie > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX and OSPF (Revisited)
PIX won't forward multicast packets as it's a pretty big security risk.. the way around this for OSPF is to treat the segment with the PIX as a Non-broadcast network.. OSPF won't try to send updates via the 224.0.0.4 multicast address on Non-broadcast networks, instread you use the "neighor" command on each router to specify the IP address of an OSPF neighbor to establish adjacencies with... Then on the PIX you can set your policies to permit traffic to and from each of the routers interfaces through the PIX itself... Hope that helps.. Russ.. ""Nabil Fares"" <[EMAIL PROTECTED]> wrote in message 000e01c0691a$0be950c0$[EMAIL PROTECTED]">news:000e01c0691a$0be950c0$[EMAIL PROTECTED]... > Greetings all, > > Please forgive me if am asking the same question over and over. > > What is the best way to configure the PIX to pass OSPF (Multicast traffic). > I'm adding PIX firewall to regional sites and need to pass OSPF. > > Cloud-router--PIX-router > > thanks, > > Nabil > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: mail and PIX
If the exchange server is on the inside, have you created a static NAT translation from the private => public IP address on the PIX? If so make sure you have an access-list permitting smtp traffic to the public address.. let us know if you have done that already Hope that helps Russ.. ""Jeff Frontera"" <[EMAIL PROTECTED]> wrote in message 000201c06973$21839180$[EMAIL PROTECTED]">news:000201c06973$21839180$[EMAIL PROTECTED]... > I've recently installed a (2) interface PIX 515...everything seems to be > fine except that remote users can no longer retrieve their email. My client > has only one exchange server set up on the inside network. All local inside > users can send and receive mail with no problem. The DNS is maintained by > the client's ISP and has MX record indicating the mail server's public IP > address. > > thanks in advance > Jeff > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Upgrade IOS
When you do the upgrade with a new image, if there is not enough flash mem for both images, it will ask you if you want to erase the flash before the upload takes place.. Make sure that you have enough flash mem to hold the new image Russ.. "Raymond" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all, > > For 7507 RSP2, the original IOS version is sth like 11.1, and I want to > upgrade to 12.0 > > Since the flash memory capacity is not enough for two IOS image, I would > like to know how can I do the upgrade. > > Thanks you for your kind attention > > Regards, > Raymond > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF
2 ways to do this: 1: Run GATED on the linux box and have it participate in OSPF, you will have to switch your AREA assignement around etc.. but that is probably the best way to do it... 2: If you want the firewall to pass OSPF traffic, you will have to use the "neighbor" command in OSPF to explicitly define your neighbors since they won't respond to 224.0.0.5 (firewall blocks it). Since there are different subnets on each side of the firewall, you will have to create incoming and outgoing static NAT translations so it will appear that the ospf neighbors are local.. option 1 is probably the best.. hope that helps Russ.. "yudaocai" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > all hi! > > I the middle of the routers running OSPF ,I place a firewall in the it ; > the firewall is a linux with multiple NIC ,IP-forwards is open in the kernel,and not rip. > 1¡¢how do they (the lan )communicate ? how can I do ? > 2¡¢can the routing table update from the firewall? > > > > > yudaocai > [EMAIL PROTECTED] > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Keepalive Mismatch
I had the same problem w/ a 2600 router.. Keepalives matched yet the interface was resetting ... IOS upgrade fixed the problem. Check the bug tracker if you have CCO access, or just upgrade to a GD release of 12.x Hope that helps Russ.. ""Rossetti, Stan"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Has anyone encountered the problems below. This problem is on a Cisco 2505 > router with serial interface debugging turned on. I checked the keepalive > values on each connected interface and they match?? > > > > Sep 11 16:38:17 UTC: Serial0: HDLC myseq 842909, mineseen 842908, yourseen > 354617, line up > Sep 11 16:38:27 UTC: HD(0): Reset from 0x303C174 > > Sep 11 16:38:27 UTC: Serial0: HDLC myseq 842910, mineseen 842908, yourseen > 354617, line up > Sep 11 16:38:37 UTC: HD(0): Reset from 0x303C174 > > Sep 11 16:38:37 UTC: Serial: HDLC myseq 842911, mineseen 842908, yourseen > 354617, line down > Sep 11 16:38:37 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface > Serial0, changed state to down > > Sep 11 16:38:47 UTC: Serial0: HDLC myseq 842912, mineseen 842912, yourseen > 354621, line up > Sep 11 16:38:47 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface > Serial0, changed state to up > > Sep 11 16:38:57 UTC: Serial0: HDLC myseq 842913, mineseen 842913, yourseen > 354622, line up > Sep 11 16:39:07 UTC: Serial0: HDLC myseq 842914, mineseen 842914, yourseen > 354623, line up > > > Thanks, > > Stan Rossetti > > > Russia Services Group > Email: [EMAIL PROTECTED] > Phone: (256) 544-5031 > Beeper: 544-1183 pin # 0112 > > <<...>> > > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Learning PIX??
Syngress (www.syngress.com) is coming out with a Cisco Security reference guide.. there is a chapter dedicated to PIX in it.. It covers the PIX very well... As far as learning it, your best bet is to get your hands on one. PIX 506 (low end) is relatively cheap compared to the 515 UR. And as Hao mentioned, check out the cisco website.. loads of information there.. Keep in mind that PIX is a firewall, Checkpoint, Netscreen, Raptor and other firewall products are built off the same concepts.. configuring them is the different part... Hope that helps Russ.. ""JD"" <[EMAIL PROTECTED]> wrote in message 8r580h$8ds$[EMAIL PROTECTED]">news:8r580h$8ds$[EMAIL PROTECTED]... > Hello, > I want to get into the Network Security side of things, right now I am about > to test for Checkpoint, I have my MCSE,CCNA and know VPN pretty well, but > how do I learn PIX, Is there a book that is recommended or anything like > that? I unfortunately don't have access to a PIX firewall. Any advice is > much appreciated. > > Thanks > Steve > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Layer 2 switching and Layer 3
Layer 2 switching makes intelligent forwarding decisions based on MAC addresses. For example, if HostA is on port 1, and HostB is on port 2, and HostA sends a packet for HostB, the switch will only pass the traffic between those 2 ports (unless it's a broadcast). Layer 3 switching is basically a Router. It makes intelligent forwarding decisions based on the Network address, ie: IP address or IPX address. A layer 3 switch is basically a router with a lot of ethernet ports. Those ports can be divided up into VLANs and can route without the help of an external router or Route Switch Module for the Catalyst swtich. There is a lot of confusion out there about layer 3 switching, vendors will brag about their product being able to do layer 3 switching etc.. Basically all they mean is that their product has routing (intelligent forwarding of layer 3 addresses) built into their box, without the use of an external router or module! Hope that helps! Russ.. ""kenny"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all , > Anyone care to explain the difference between Layer 2 and Layer 3 switching ? > > Regards > ken > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Pix Firewall Problem.
Hmm.. what versin of the IOS are you running? Try upgrading your PIX to 5.2x and see if that helps. If not post your config for the list to look at.. Russ.. "Rajeev Karamchand" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi All > > I am facing a strange problem. I am losing my > connectivity to the pix firewall from inside. If I > power cycle the pix everything is ok. I would > appreciate help in this regards > > > > > > > = > Rajeev Karamchand > MCSE,MCSE+I,MCDBA,CCNA > > __ > Do You Yahoo!? > Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free! > http://photos.yahoo.com/ > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BOOKS FOR CCIE WRITTEN
Use all the fore mentioned books, but this one is a must for your written prep: Cisco CCIE All-In-One Study Guide 0071356762 Russ.. ""Steven B. Holmes"" <[EMAIL PROTECTED]> wrote in message 8rb3ks$n6e$[EMAIL PROTECTED]">news:8rb3ks$n6e$[EMAIL PROTECTED]... > What are some good books to prepare for the written exam? > > Thanks! > > Steven > > [EMAIL PROTECTED] > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Layer 2 switching and Layer 3
Makes sense.. thanks for the tip! ""William Wong"" <[EMAIL PROTECTED]> wrote in message 8rbrjs$8iv$[EMAIL PROTECTED]">news:8rbrjs$8iv$[EMAIL PROTECTED]... > Hi Russ > > Layer 3 switching is actually use the concept of "route once, switch many". > > Its mean that the first packet is go through the route processor and the > subsequence packets is "switch" over to the destination port. > > Layer 3 routing which is every packets is process by the router. > > > ""Russell Lusignan"" <[EMAIL PROTECTED]> wrote in message > 8r88h9$hp8$[EMAIL PROTECTED]">news:8r88h9$hp8$[EMAIL PROTECTED]... > > Layer 2 switching makes intelligent forwarding decisions based on MAC > > addresses. For example, if HostA is on port 1, and HostB is on port 2, and > > HostA sends a packet for HostB, the switch will only pass the traffic > > between those 2 ports (unless it's a broadcast). > > > > Layer 3 switching is basically a Router. It makes intelligent forwarding > > decisions based on the Network address, ie: IP address or IPX address. A > > layer 3 switch is basically a router with a lot of ethernet ports. Those > > ports can be divided up into VLANs and can route without the help of an > > external router or Route Switch Module for the Catalyst swtich. > > > > There is a lot of confusion out there about layer 3 switching, vendors > will > > brag about their product being able to do layer 3 switching etc.. > Basically > > all they mean is that their product has routing (intelligent forwarding of > > layer 3 addresses) built into their box, without the use of an external > > router or module! > > > > Hope that helps! > > Russ.. > > > > ""kenny"" <[EMAIL PROTECTED]> wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hi all , > > > Anyone care to explain the difference between Layer 2 and Layer 3 > > switching ? > > > > > > Regards > > > ken > > > > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > > > http://www.groupstudy.com/list/Associates.html > > > _ > > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > > > FAQ, list archives, and subscription info: http://www.groupstudy.com > > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > > > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > > http://www.groupstudy.com/list/Associates.html > > _ > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > > FAQ, list archives, and subscription info: http://www.groupstudy.com > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Layer 2 switching and Layer 3
Ahh yes. now the confusion starts on layer 3 switching.. :) "Jared Carter" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Actually the idea of "Route Once Switch Many" refers to MultiLayer Switching > (MLS). Layer 3 switching is really just routing... > > -Original Message- > From: William Wong [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, October 03, 2000 1:39 AM > To: [EMAIL PROTECTED] > Subject: Re: Layer 2 switching and Layer 3 > > > Hi Russ > > Layer 3 switching is actually use the concept of "route once, switch many". > > Its mean that the first packet is go through the route processor and the > subsequence packets is "switch" over to the destination port. > > Layer 3 routing which is every packets is process by the router. > > > ""Russell Lusignan"" <[EMAIL PROTECTED]> wrote in message > 8r88h9$hp8$[EMAIL PROTECTED]">news:8r88h9$hp8$[EMAIL PROTECTED]... > > Layer 2 switching makes intelligent forwarding decisions based on MAC > > addresses. For example, if HostA is on port 1, and HostB is on port 2, and > > HostA sends a packet for HostB, the switch will only pass the traffic > > between those 2 ports (unless it's a broadcast). > > > > Layer 3 switching is basically a Router. It makes intelligent forwarding > > decisions based on the Network address, ie: IP address or IPX address. A > > layer 3 switch is basically a router with a lot of ethernet ports. Those > > ports can be divided up into VLANs and can route without the help of an > > external router or Route Switch Module for the Catalyst swtich. > > > > There is a lot of confusion out there about layer 3 switching, vendors > will > > brag about their product being able to do layer 3 switching etc.. > Basically > > all they mean is that their product has routing (intelligent forwarding of > > layer 3 addresses) built into their box, without the use of an external > > router or module! > > > > Hope that helps! > > Russ.. > > > > ""kenny"" <[EMAIL PROTECTED]> wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hi all , > > > Anyone care to explain the difference between Layer 2 and Layer 3 > > switching ? > > > > > > Regards > > > ken > > > > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > > > http://www.groupstudy.com/list/Associates.html > > > _ > > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > > > FAQ, list archives, and subscription info: http://www.groupstudy.com > > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > > > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > > http://www.groupstudy.com/list/Associates.html > > _ > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > > FAQ, list archives, and subscription info: http://www.groupstudy.com > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Problem in 2501
Hardware failure of some sort?... 3 years in production is a long time, you may just want to retire the router since you have a 2611.. ""kaushal Bhatt"" <[EMAIL PROTECTED]> wrote in message 004401c03384$eeebbbe0$[EMAIL PROTECTED]">news:004401c03384$eeebbbe0$[EMAIL PROTECTED]... Dear Friends, I have 2501 which was working perfect for past 3 years. Suddenly last week, we found that the router is not working. We were not able to telnet to it. also we were not able to connect to it thru console port.Also the ping was failing. We kept the router aside and purchased a new 2611. The other day the 2501 router was working perfectly. Now If I switch off the router and switch it on. it takes 20 to 30 min before it is operational. We have made no change to config register. nor any change in boot command is made. what can be the possible cause. what should I check for ? regards Kaushal BhattSystems AdministratorThermax Systems & Software Ltdwww.thermaxsoftware.com
Re: PIX Firewall 515 Software Upgradation
If you have CCO access you can download the latest IOS for the PIX and upgrade it like you would any other router. If you don't have CCO access, then you need to get it in order to do the upgrade. Russ.. ""Saravanan Elango"" <[EMAIL PROTECTED]> wrote in message 8ru9rk$d77$[EMAIL PROTECTED]">news:8ru9rk$d77$[EMAIL PROTECTED]... > Hi , > > I have a PIX Firewall 515 with PIX Firewall Manager Software Version > 4.4(4).I would like to upgrade it to the latest version of 5.2(3). What is > the upgrade path for this? > How can i go about it? > > Thanks > Regards > Saravanan Elango > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISL Trunk on a 2500
There are no FE interfaces that are avaiable for the 2500's.. if you want to route between the VLANs, the easiest way is to connect a router to each VLAN via the Ethernet interface, connect those 2 routers together with a back-to-back DCE/DTE cable on the serial interfaces. Enable a routing protocol and assuming you have numbered your subnets properly, then anything on those two vlans can be routed... You could even hook the 3rd router to a 3rd vlan and connect it's serial port to one of the other 2500s... then you can router 3 subnets between 3 routers.. Hope that helps Russ... "Juan Blanco" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Folks, I need help, I have 3 2500 router and 1 2900 switch, I want to be able to route between two vlans, I don't have a 100mb/s Ethernet interface on any of my routers. Questions: 1 There is a 100mb/s interface available for the 2500 2 If there is not a 100mb/s for the 2500 then there is a workaround to be able to do the same thing. Thanks in advance for your response. Juan
Re: how to set priority on traffic type to pass thru router?
Priority Queueing.. http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/qos_c /qcpart2/qcpq.htm (watch the word wrap on the url) Hope that helps.. Russ.. ""Sim, CT (Chee Tong)"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi.. Dear all, > > May I know how to set priority on certain type of traffic to pass thru > router? what is the syntax?? > > Tong > > -Original Message- > From: Stull, Cory [mailto:[EMAIL PROTECTED]] > Sent: Monday, October 02, 2000 11:07 PM > To: 'c.garofalo'; [EMAIL PROTECTED] > Subject: RE: syslog > > > Carmelo, > > I don't know what your problem is getting it to work on Sun but if you go > out to winfiles.com they have some freeware syslog servers "Kiwi Syslog > daemon" that you can setup on 95/NT.. and the router config would be the > same as in the below link. > > Cory > > -Original Message- > From: c.garofalo [mailto:[EMAIL PROTECTED]] > Sent: Monday, October 02, 2000 6:50 AM > To: [EMAIL PROTECTED] > Subject: syslog > > > Hi people, > I would to shape the syslog for the Routers of my Organization on th Sun > Workstation. I find an article on CISCO site that describe the configuration > for the Workstation and the cisco router, but it don't work properly. > > http://www.cisco.com/warp/public/66/15.html > > Can you help me? > Thanks > Carmelo > > > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > **NOTE: New CCNA/CCDA List has been formed. For more information go to > http://www.groupstudy.com/list/Associates.html > _ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > == > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en > de afzender direct te informeren door het bericht te retourneren. > == > The information contained in this message may be confidential > and is intended to be exclusively for the addressee. Should you > receive this message unintentionally, please do not use the contents > herein and notify the sender immediately by return e-mail. > > > == > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX Firewall information
Syngress (www.syngress.com) has a Security book coming out that has a chapter dedicated to PIX, other chapters touch on subjects such as VPN etc.. Cisco Press (www.ciscopress.com) has their Security book due out in December 2000.. The PIX certification would fall under CCNP + Security. PIX is a part of that certification, but it doesn't revolve around it Hope that helps Russ.. "Langa Kentane" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED]. za... > Hi. > I am looking for comprehensive reference material on the Cisco PIX firewall. > Where can I get such? Do you know of any sites or books that might be > helpful? > > Also, is there any Cisco PIX certification available out there? > > Thanks in advance > > Langa Kentane > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Simple Question about metric
A metric is the criteria used to calculate the best route to a destination. Each routing protocol uses different metrics (or a different way of calcualting those metrics) to inject that route into the routing table of the device. For example, RIP will use hop count as one of it's metrics, where BGP will use AS Path as one of it's metrics.. Each routing protocol is different so it will calculate what it thinks to be the best path to a destination differently... Check out www.cisco.com technical docs for more detailed info on how each routing protocol works.. Hope that helps Russ.. ""archstein"" <[EMAIL PROTECTED]> wrote in message 002601c04f7f$e33f6f00$190ca8c0@Platinum">news:002601c04f7f$e33f6f00$190ca8c0@Platinum... Hi group I have a simple question about metric regarding to the routing protocol especially ospf and bgp ?? What does the metric use for ??? what we use metric ?? What is/are the difference(s) is we use metric 2 or 10, for instance ??? Thanks
Re: Switching on the CCIE Lab Exam [7:1296]
Don't bother with the RSM, save the $ for a 3920 switch. ""Lupi, Guy"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I asked this question before, and someone sent some helpful info, but I am > looking for something more specific. I know the 5000 series is the switch > used in the lab, but is the focus more on layer 2 or layer 3? I am going to > get a 5000 series switch but I wanted to know if I should save myself the > cost of the RSM, or if I absolutely need it. Any help would be appreciated. > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=1356&t=1296 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Fwall & Win2k Terminal server Clients [7:1598]
I assume your firewall is NAT'ng right? Make sure that you specify a source port range of 1-65535 and a destionation port of 3389. TCP randomly selects the source port number when a session starts, so if you are filtering on source port 3389 and destination port 3389, there is a 1 in 65535 chance you will get through the firewall. Make sense? -Russ ""Edmund Woltynski"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi Folks > > I am trying to get my head around how to poke holes in a router access > list with a Firewall feature set (1600 series) to allow a Win2k terminal > server client to access a remote TS. From the packet decode the server > uses TCP =3389, but the client grabs a number in the range1560 upwards > ie a new port per session - I can't seem to nail down a range. There has > to be more than just this one port 3389 on the server side considering > Citrix has a few to cater for. > > Does anyone know what the range is - or can nudge me in the right > direction in solving this problem. > > I recall an email on the topic about 6-7 months ago, but can seem to > locate it in the archives, > I have searched through CCO - all the cookbooks, TAC tips, etc and the > MS knowledge base to little avail. > > Any small hint to will be appreciated. > > Thanks > > Regards > Edmund Woltynski >Email: [EMAIL PROTECTED] > ___ > The information transmitted by the following e-mail is intended only for > > the addressee and may contain confidential and/or privileged material. > Any interception, review, retransmission, dissemination, or other use > of, or taking of any action upon this information by persons or entities > > other than the intended recipient is prohibited by law and may subject > them to criminal or civil liability. If you received this communication > in error, please contact us immediately at (618) 83711492, and delete > the communication from any computer or network system. > - > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=1606&t=1598 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE pre-lab [7:5894]
www.cisco.com/go/ccie ""CCSI"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > pls give me some CCIE pre-lab site, I need more ccie lab information > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5906&t=5894 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Required TR for Lab Practice [7:6601]
1 segment of TR should be enough to play around on. -Russ ""RamG"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello - General Q - How many TR int required for CCIE lab practice? I have > 2 routers with TR. > > Thanks / RamG Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=6625&t=6601 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE refrence books!! [7:6595]
Nope. All the books listed in the CCIE professional development list will be releveant, if not for the Written then definitely for the lab itself. -Russ ""Ralph Francis"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi , > > > Can anyone tell me which books to refer to for CCIE written I went > through the Cisco recomended reading list, is there any single Cisco Press > books for Routing & Switching CCIE like they have for CCNA and CCNP... > > Ralph Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=6626&t=6595 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE Lab Construction [7:9092]
You will need a frame-relay switch, 1 or 2 WIC-2Ts for the Frame switch and WIC-1Ts for the spokes will allow you the frame cloud, you may also want to get the NM-8A/S module (8 Async ports), pop that into your frame switch and get an octal cable and you now have a Terminal server + Frame switch in one router. That's just one suggestion -Russ ""Ken Browne"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello. I've recently come into four Cisco 2621's and four Cisco > 2924 switches. I need to configure this equipment into a lab to > study for my CCIE lab exam. Any suggestions? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=9189&t=9092 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CAR [7:15513]
I believe that distributed CAR is only available on those models. CAR is supported on the majority of Cisco routers. http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos _c/fqcprt1/qcfclass.htm#29329 (watch the word wrap) hth -Russ ""Lupi, Guy"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I was reading on the Cisco website today and I found a document on CAR, > committed access rate, that says that this feature is supported on the > following router platforms: > > 7000 > 7200 > 7500 > > Does anyone know if this is the case? I have heard that CAR is supported on > lower end routers. Thanks. > > Guy H. Lupi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=15537&t=15513 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CCIE written study question [7:15514]
The Boson tests are pretty good, also go through the Cisco documentation and papers on different technologies etc.. can't beat getting the information right from the source. hth -Russ ""Wright, Jeremy"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I just wanted to get a suggestion as to where to go next for my CCIE written > studying. This is what I have done (already have my CCNP) so far > > 1. Read the Caslow book > 2. Read the broken-ring bridging paper from ccprep and groupstudy > 3. Read the Doyle Episode 1 > 4. Getting ready to read the Halabi book and Sybex CCIE > 5. I have been doing the Boson tests during my breaks from reading > 6. I have done a few of the c-zone questions but not much > > Any suggestions as to where to go now? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=15538&t=15514 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: cisco lab [7:15484]
Or if you want to get really crazy, get a 2610/2611 with 2 WIC-2Ts and an NM-16A module, now you have your Terminal server and Frame switch in one chassis. -Russ ""george gittins"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I have some spare cisco routers to play around with, however i was wondering > if there was a way to set up like an telnet server which would be connect > through com ports to my cisco routers. the ideal thing that i would like to > have is not to be phyisicaly connect throught modem or console in order for > me to make changes and not be quick out trough the network. > does anyone have some ideas Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=15539&t=15484 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: how to create a cisco lab [7:15368]
Check the archives for "Terminal server" You should find the models you need to do reverse telnet to your other routers. -Russ ""george gittins"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > hello there i have all the cisco gear, andd cables however is was wondering > how i can > make this lab work remotley, right now im just using console to the router, > but i would like to use it from home.. is this possible i heard that one > needs a telnet server. any pointers? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=15540&t=15368 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Connecting two Routers through their Serial Interfaces [7:16295]
Back to back cables will do this for you. You can get them from www.pacificcable.com To use it you need to specify a clockrate on the DCE end of the cable. It's pretty straight forward. Works very well in a lab. hth -Russ ""Hamid"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi group, > > Can anyone tell me if it's possible if you want to connect two routers > Bach-to Back using their serial interfaces. > > And if possible how should I configure the serial inetrfaces. > > Thanks in advace > > Hamid Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=16295&t=16295 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PIX 6.1(1) SSH to outside [7:26502]
Hey group, I have a PIX 525 in failover that I am trying to get SSH enabled on. I have done: password ca generate rsa key 1024 ssh outside ca save all SSH doesn't respond in any way to my client (tried several). Debug SSH shows nothing, and Debug IP packet shows my client IP trying to establish a session on port 22 with the PIX, yet the PIX doesn't respond. The 525s are working correctly (passing traffic etc.. ) Another set of 525's SSH config work fine, can't think of what I am missing here. Anyone have any ideas? -Russ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=26502&t=26502 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX 6.1(1) SSH to outside [7:26502]
Yup, hostname and domain are configured, and show ca mypubkey shows the key, sorry, should have included that in the original post. Let me know if you have any other ideas :) -Russ ""Patrick Bass"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > did you configure a hostname and a domain-name? > do a "show ca mypubkey rsa" from config mode to verify you have a key > also reissue "ssh 0 0 outside" > > if it doesn't work, pls post config > > ""Russell Lusignan"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hey group, > > > > I have a PIX 525 in failover that I am trying to get SSH enabled on. I > have > > done: > > > > password > > ca generate rsa key 1024 > > ssh outside > > ca save all > > > > SSH doesn't respond in any way to my client (tried several). Debug SSH > > shows nothing, and Debug IP packet shows my client IP trying to establish > a > > session on port 22 with the PIX, yet the PIX doesn't respond. The 525s > are > > working correctly (passing traffic etc.. ) > > > > Another set of 525's SSH config work fine, can't think of what I am > missing > > here. > > > > Anyone have any ideas? > > > > -Russ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=26508&t=26502 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX 6.1(1) SSH to outside [7:26502]
0.0.0.0 0.0.0.0 specifies all ... but I have done x.x.x.x 255.255.255.255 outside and it still doesn't work. ""Hansraj Patil"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Don't to have specify client IP address in ssh command...? > > ssh (IP address & netmask) oustside > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Russell Lusignan > Sent: Friday, November 16, 2001 9:46 AM > To: [EMAIL PROTECTED] > Subject: Re: PIX 6.1(1) SSH to outside [7:26502] > > > Yup, hostname and domain are configured, and show ca mypubkey shows the key, > sorry, should have included that in the original post. Let me know if you > have any other ideas :) > > -Russ > > > ""Patrick Bass"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > did you configure a hostname and a domain-name? > > do a "show ca mypubkey rsa" from config mode to verify you have a key > > also reissue "ssh 0 0 outside" > > > > if it doesn't work, pls post config > > > > ""Russell Lusignan"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hey group, > > > > > > I have a PIX 525 in failover that I am trying to get SSH enabled on. I > > have > > > done: > > > > > > password > > > ca generate rsa key 1024 > > > ssh outside > > > ca save all > > > > > > SSH doesn't respond in any way to my client (tried several). Debug SSH > > > shows nothing, and Debug IP packet shows my client IP trying to > establish > > a > > > session on port 22 with the PIX, yet the PIX doesn't respond. The 525s > > are > > > working correctly (passing traffic etc.. ) > > > > > > Another set of 525's SSH config work fine, can't think of what I am > > missing > > > here. > > > > > > Anyone have any ideas? > > > > > > -Russ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=26513&t=26502 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: filtering web sites for users
You have the source address and destination address flipped around and you havn't specified a port, try: access-list 101 deny tcp any host 63.241.16.56 eq www ie: prevent any source address from reaching host 63.241.16.56 on port 80 Hope that helps.. Russ.. ""tselvan"" <[EMAIL PROTECTED]> wrote in message 01e001bfecc0$f5112240$0900a8c0@microsense">news:01e001bfecc0$f5112240$0900a8c0@microsense... hi, we r using cisco 1720 router connected to isp thru a serial interface. router is inturn connected to an ethernet interface to serve the users. we want to filter certain web sites like mp3.com, yahoo.com as we r using the leased line for office use. we have tried out the following using access-list: access-list 100 deny tcp 63.241.16.56 0.0.0.0 192.168.1.0 0.0.0.255 63.241.16.56 - for mp3.com 192.168.1.0- for user network. when we tried out this users were unable to browse. pl suggest for an alternate access control list. beno ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: EIGRP Help!!!! 2nd request
Brandon, The H field is used as a place holder for the eigrp neighbors as they come up. The numbers will never change unless the neighbor is lost and comes back up again. Hope that helps Russ.. ""Brandon Carroll"" <[EMAIL PROTECTED]> wrote in message 8kjnsn$iam$[EMAIL PROTECTED]">news:8kjnsn$iam$[EMAIL PROTECTED]... > Okay, there has got to be a CCIE out there that knows this! This was my > last postSomeone please let me know. Tomorrow is my last day of the > BSCN class and I'd like to have some kind of answer.THANKS > > > Question! > > I am in the BSCN class, by ASCOLTA training, and it is an excelent course. > I know it probably will not be on the exam but when I issue the > show eigrp neighbors command the following results are displayed: > > > IP-EIGRP Neighbors for process 77 > Address Interface Holdtime Uptime Q Seq SRTT > RTO > (secs) (h:m:s) Count Num (ms) > (ms) > 160.89.81.28Ethernet1 13 0:00:41 0 11 4 20 > 160.89.80.28Ethernet0 14 0:02:01 0 10 12 24 > 160.89.80.31Ethernet0 12 0:02:02 0 45 20 > > the only thing missing is that on my router, in the far left colum, there is > a heading, "H" and underneath it is the following: > > IP-EIGRP Neighbors for process 77 > (H) Address Interface Holdtime Uptime Q Seq > SRTT RTO > (secs) (h:m:s) Count Num > (ms) (ms) > 0 160.89.81.28Ethernet1 13 0:00:41 0 11 4 > 20 > 2 160.89.80.28Ethernet0 14 0:02:01 0 10 12 > 24 > 1 160.89.80.31Ethernet0 12 0:02:02 0 45 > 20 > > Can anyone PLEASE explain what they mean! TH/ANKS! > > Brandon Carroll > [EMAIL PROTECTED] > > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Quick question
The show version command will give you a "system restarted by " Hope that helps Russ.. ""Soucy, Aaron"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Does anyone know if there is a way to tell if a router has been power > cycled? > > Thanks in advance, > > Aaron > > > Aaron Soucy, CCNA > IT Support Analyst > Women's Health Connecticut > 22 Waterville Road > Avon, CT 06001 > (860) 678-3496 > (860) 678-3432 (fax) > [EMAIL PROTECTED] > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Napster
Another way of blocking napster is to deny any traffic destined for the napster.com domain (208.184.216.230) I found that even by blocking those ports napster was able to get out on other well known ports.. Hope that helps Russ.. "Steve Smith" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Does anyone know what port I neeed to close on my pix to block > napster? > > Steve Smith > MCSE, CCNA > Freeliant.com > 901-388-4637 ext.106 > <> > ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Loaded new IOS and now router will not boot
You have to do an Xmodem upload through the console port. This should give you some more info on it: http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/cis2600/2600hig/rom.htm Hope that helps Russ.. "Glenn Flood" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... All, I have a 2621 with 8M flash and 24M RAM and loaded the Enterprise Plus 12.1(3) IOS. Now it tells me "INSUFFICIENT MEMORY TO BOOT THE IMAGE!. Can someone direct me to the procedure on the Cisco site that will show me how to reload my previous image through rommon. Thanks, Glenn Glenn Flood MCSE, MCP+I, MCT, CCNA, CNA, A+
Security Specialization
Hey all, Is there an exam outline for the Cisco Security Exam (640-442)? Thanks! Russ.. ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Deleting a DLCI
I believe you enter config mode and: router(config)#int s0.1 router(config-subif)#no frame-relay interface-dlci Hope that helps! Russ.. ""Chris C. Burton"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > How can you delte an active DLCI number from a sub interface on a Cisco 1601 > router? > > Chris > [EMAIL PROTECTED] > [EMAIL PROTECTED] > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Exam Cram for CCIE by corriolis
CCIE written gives you the right to take the lab. Anyone who regurgitates the exam cram on the actual written will get a VERY rude awakening on the actual lab. There is no certificatoin given for CCIE written.. not much to brag about there.. Russ.. ""J K"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > This disgusts me . How can someone put a 32.00 price on a book that helps > people pass the ccie written . exam cram > > Why would anyone want to use this to pass you obviously can't purchase the > exam cram CCIE lab for 25.00 .. > > > And you wonder why the value of certs diminishes after a few years > > > > > Please no flames > > > Just frustrated > > jk > > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VoIP books
Can anyone recommend a good VoIP book which covers content of the CVOICE exam? Thanks! Russ.. ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Boson Tests (Which ones?)
I used the Boson exams (1st one, not the expansions) for each of the CCNP exams.. they were pretty helpful in that they test your knowledge.. some tests reflect some questions on the actual exam.. but don't rely on that, just use them to quiz yourself. They have a practice exam for each of the courses in the CCNP track (1.0, not sure if they have all the 2.0 exams). Also, if your changing machines (ie: work gave you a laptop) then email boson support and explain your situation.. they were very helpful when I swapped machines.. Not sure about the Nortel exams.. Hope that helps.. Russ.. ""Stuart Laubstein"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I have used the Boson test before and liked them but now I was wondering if > anyone might advise on the best ones to purchase--I am going for CCNP--I had > CMTD and CMTD expansion and ACRC 1 from Boson but I may lose them as I am > switching computers. I notice that now there are many more courses listed at > Boson--I dont recognize the teachers though.. Are there any you would > suggest either positively or negatively? > > thanks > > stuart > > > As an aside has anyone tried the other tests Boson offers like Linux or > Nortel etc? > > > > > > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX Questions
In line: ""Peter Gray"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > What is the difference b/w these 2 commands: > conduit permit tcp any 22.0.41.0 255.255.255.0 eq 411 > conduit permit tcp any eq 411 22.0.41.0 255.255.255.0 I believe there is no difference between them other than syntax.. don't quote me on this one. > What does the following lines mean: > conduit permit icmp host 195.210.22.4 any echo-reply > conduit permit icmp host 195.210.22.4 any echo This permits ICMP echos and echo replies to reach the host 195.210.22.4 from any source address from a lower level security interface to a higher level security interface (outside, inside) provided there is a static translation for that host. > What does the following lines mean: > outbound 1 permit 195.2.0.1 255.255.255.192 0 icmp > outbound 1 permit 195.2.0.1 255.255.255.192 8 icmp Hmm.. syntax looks a little off.. I think they are trying to permit icmp type 0 and 8 (echo and echo reply I believe) to originate from host 192.168.0.1 and reach anywhere from a lower level scurity interface through a nigher level security interface (inside, outside) provided there is a NAT/Global statement. Hope that helps Russ.. > > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Thank You All, Passed CVoice
Hey Dorothy, congradulations.. can you pass along the titles (if any) of the books you read? Thanks! Russ.. ""Edmondson, Dorothy M"" <[EMAIL PROTECTED]> wrote in message 076F7AF45C80D31185E029265867033BAF32@SUSDAYTE53">news:076F7AF45C80D31185E029265867033BAF32@SUSDAYTE53... > Sometime ago, I asked for books on CVoice etc. and I want to thank everyone > for their response > to my need. > > I passed the CVoice 1.0 first time around. I am very lucky here at NCR. I > had the opportunity of > attending our own internal comprehensive 8-day Voice class. Needless to > say, I still had to study the > material just like all the other Cisco tests. > > The Boson CVoice test was helpful tool in that it provided focus on every > aspect of the material. This is not > a short cut to passing the test. You really have to know the material and > apply what you have learned. > > Dorothy > > > Dorothy Edmondson, CCSI, CCNP +Voice Access, CCNA, CCDA > WCS Learning > Networking Solutions Education > *Mail: NCR Corporation > 101 W. Schantz Avenue, ECD-1 > Dayton, OH 45479 > > * E-Mail: [EMAIL PROTECTED] > *Office: Voice: 937 445-4133 VP 622-4133 >FAX: 937 445-0850 > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Static, Conduit question.
Actually the syntax on the conduit is a little off.. should be: conduit permit tcp eq conduit permit tcp host 192.168.1.222 any eq www . although with 5.0 of the PIX IOS, they want you to use Access-lists instead of conduit statments.. so your config would look like: static (inside,outside) a.b.c.d 192.168.1.222 netmask 255.255.255.255 0 0 static (inside,outside) a.b.c.d 192.168.1.223 netmask 255.255.255.255 0 0 access-list acl_in permit tcp any host 192.168.1.222 eq www access-list acl_in permit tcp any host 192.168.1.223 eq smtp access-group acl_in in interface outside Hope that helps Russ.. ""Richard Tran"" <[EMAIL PROTECTED]> wrote in message 8mtf4l$vp7$[EMAIL PROTECTED]">news:8mtf4l$vp7$[EMAIL PROTECTED]... > We have an ip address(a.b.c.d) registered with an internet domain name. This > domain is served both as our email and website domain. We have one internal > web(192.168.1.222) and one internal mail server(192.168.1.223). I have a > question about the pix configuration below. > > static (inside,outside) a.b.c.d 192.168.1.222 netmask 255.255.255.255 0 0 > static (inside,outside) a.b.c.d 192.168.1.223 netmask 255.255.255.255 0 0 > conduit permit tcp host a.b.c.d eq www any > conduit permit tcp host a.b.c.d eq smtp any > > Is this the right configuration for the pix to redirect the appropriate > traffic to the internal servers? > > Any response is greatly appreciated. > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BGP Multi-Homing
Hey John, I feel your pain on that one :) Check these links for the BGP stuff.. I found some pretty useful information on it here.. http://www.cisco.com/warp/public/459/18.html Check the BGP4 Case Studies here, pretty useful http://www.cisco.com/cgi-bin/Support/PSP/psp_view.pl?p=Internetworking:BGP Need CCP login, lots of BGP info and examples. Hope that helps.. Russ.. ""John Deatherage"" <[EMAIL PROTECTED]> wrote in message 005601c01128$a2c11220$9a0419d1@johnm">news:005601c01128$a2c11220$9a0419d1@johnm... > Does anyone know where I can find good whitepapers or configuration examples > of BGP in multi-homed environments? ARIN won't give out anything less than > a /21, but some providers won't advertise networks unless the IPs belong to > you. Just another situation where politics are as much of a part of an > engineer's job as everything else. Good thing we have VPs to slam providers > Level 3 > > I've checked the archives and read recent posts by Howard Berkowitz (looking > forward to the whitepaper on Sept. 1st). Any other ideas??? > > This paragraph from Howard basically sums up what I'm discovering: > > Depends on the policy of the particular ISP, even tier 1. Some > simply don't want to advertise any /24 that's not part of their > address space, some won't do it except for direct customers who have > negotiated to advertise provider-independent address space, some > might not be willing to negotiate to advertise an a more-specific > assignment of another provider's space, and some don't care. > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: pix web filtering question...
I use Websense (http://www.websense.com) for URL filtering, works great! You can run reports on people and see what sites they are visiting etc.. Tell the PIX you want to filter all http traffic (filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 ) and then tell the PIX to forward HTTP requests to a server you specify (url-server (inside) host 123.123.123.123 timeout 5) for screening. If your interested in logging traffic through the pix, you may want to check out http://www.4privatei.com It's a syslog analyzer for Cisco PIX and routers. Pretty handy util.. Hope that helps. Russ.. ""Stull, Cory"" <[EMAIL PROTECTED]> wrote in message 0D7A05A19CE4D211BD050008C7330FE7098270@CCUPDC">news:0D7A05A19CE4D211BD050008C7330FE7098270@CCUPDC... > > Cisco gurus, > > Have customer with PIX firewall doing N.A.T out to internet... They want > to be able to block certain internet traffic going out to questionable > sites.Any recommendations? > > Thanks in advance... > > > > > Cory > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Is Laura Chappel's CIT book
I just finished it. It is a great overview of troubleshooting techniques. It's also a good reference guide for quick things (ie: whats the command to debug ARP requests etc...) Plus it has scenarios after the sections to give you examples of how to troubleshoot the various sections. I have used the Cisco Press books for every exam I am written (along w/ the Exam Cram and Boson tests and of course experience..) It's not an overly large book like the Lan Switching or CMTD books, so it shouldn't take too long to read it. Hope that helps. Russ.. ""Scott Merritt"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > An adequate study guide for the CIT exam? Also, is it a good real life book > for those situations you run into all the time? It's the Cisco Press book > edited by Laura Chappel (I have her ACRC book and love it) and Dan Farkas. > > If anyone has read this book or has any feedback on it I would greatly > appreciate hearing about it! > > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CLSC book
Cisco Lan Switching by Cisco Press. It's a big book though.. :) ""computer services"" <[EMAIL PROTECTED]> wrote in message 007a01bfc1d8$c08b13e0$0203@scsi">news:007a01bfc1d8$c08b13e0$0203@scsi... Hi Folks ! i m starting study of CLSC exam and i want to buy a book for it . is there any book availble for this exam better then Tod Lamle's CLSC study guide by Sybex. Regards Haroon Ikram Network Engineer Computer Services ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Firewall!!!!
I evaluated both and I chose the PIX. I have about 1000 users going through it.. but here is what I compared: - Price (PIX is WAY cheaper) - PIX is dedicated Hardware, Checkpoint you must dedicate a server to, so you now have to worry about service pack updates and compatability with other applications, as well as providing the horse power to run Checkpoint. - PIX has faster througput - Checkpoint has a much nicer GUI, but if your very comfortable with the PIX CLI then you should be fine. - Only thing to worry about upgrading on a PIX is the IOS - If your main purpose is VPN, the PIX VPN is very young still.. pretty tricky to setup. Site to Site VPN isn't bad.. but it's not worth it for remote users (yet). That's a general overview of them.. Cisco actually let me borrow a PIX to use for a while and play around with.. Checkpoint also has their own eval version.. best thing is to try them out. Hope that helps. Russ.. "Achal Kataria" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hey People, > > Just wanted to know one thing , which one is better PIX or > Checkpoint Firewall 1 and why?? > > Thanx in adv > Achal > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Gripe about CIT 4.0
This morning I wrote the CIT 4.0 exam. I have written CCNA, ACRC, CLSC and now CIT. Out of all of them I would have to say that the wording in the CIT 4.0 is the worst of them all. Not only do you have to study the exam materials, you also have to study how to answer questions that contradict themselves, give you multiple correct answers whereby you must choose the most correct answer given the circumstances, and deal with the fact that the questions don't clearly tell you what they want answered. Example.. (not from the exam of course) What colour is the sky on a normal day? 1) Blue 2) Dark Blue 3) Light Blue 4) A shade of blue slightly lighter than 2) 5) None of the above. This question would have been easy had they added: 6) Not enough data is given to answer the question. Unless you have a complete grasp on the English language no matter how much you know about the material, you will not pass this exam. I used the CIT Cisco Press book, Exam Cram, Boson exams and working in the industry to prepare. CIT Cisco Press book is a must (or equivalent). Exam Cram is optional, I used it to quickly cover the main points. And finally the Boson exams.. I have used these for every other exam which have helped, but for this one they didn't help me much at all. I found the Exam Cram questions were a lot more accurate to the CIT exam. But even then you will get a rude awakening on the actual exam.. Bottom line, KNOW the course material from the CIT Cisco Press inside and out. Anyhow, I passed the exam, but I felt like griping about it anyways.. Russ.. ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: SUPPORT 2.0
Look at my post "Gripe about CIT 4.0" for feedback.. "monian" <[EMAIL PROTECTED]> wrote in message 007801bfc654$2e61b110$025b@monian">news:007801bfc654$2e61b110$025b@monian... HI GUYS, Further to my earlier msg, just now the Sylvan center called to tell that Support 2.0 (640-506) is still not available and I have to take CIT 4.0 (640-440) only.. The guy just said sorry for his mistake and I do the same to all. Any feedback on CIT 4.0 is most welcome. Tks Monian
Re: Gripe about CIT 4.0
I can't tell you what the questions are.. but as per the exam objectives, know your ISDN, Frame-relay, Catalyst 5000 Switches. Know all the "show" and "debug" commands to troubleshoot those items. Be prepared to read the question a few times.. make sure you understand what the question is asking you.. The questions contradict themselves at times..But as usual, if you know the course material you should be fine. ""Flavio Palumbo"" <[EMAIL PROTECTED]> wrote in message 8glg9i$72l$[EMAIL PROTECTED]">news:8glg9i$72l$[EMAIL PROTECTED]... > Russell, > > may you show me the best way to pass this bad exam ? > > May you tell me about questions ? Which arguments ? > > thanks > Flavio > "Russell Lusignan" ha scritto nel messaggio <8gjdia$523$[EMAIL PROTECTED]>... > >This morning I wrote the CIT 4.0 exam. I have written CCNA, ACRC, CLSC and > >now CIT. Out of all of them I would have to say that the wording in the > CIT > >4.0 is the worst of them all. Not only do you have to study the exam > >materials, you also have to study how to answer questions that contradict > >themselves, give you multiple correct answers whereby you must choose the > >most correct answer given the circumstances, and deal with the fact that > the > >questions don't clearly tell you what they want answered. Example.. (not > >from the exam of course) > > > >What colour is the sky on a normal day? > >1) Blue > >2) Dark Blue > >3) Light Blue > >4) A shade of blue slightly lighter than 2) > >5) None of the above. > > > >This question would have been easy had they added: 6) Not enough data is > >given to answer the question. > > > >Unless you have a complete grasp on the English language no matter how much > >you know about the material, you will not pass this exam. I used the CIT > >Cisco Press book, Exam Cram, Boson exams and working in the industry to > >prepare. CIT Cisco Press book is a must (or equivalent). Exam Cram is > >optional, I used it to quickly cover the main points. And finally the > Boson > >exams.. I have used these for every other exam which have helped, but for > >this one they didn't help me much at all. I found the Exam Cram questions > >were a lot more accurate to the CIT exam. But even then you will get a > rude > >awakening on the actual exam.. Bottom line, KNOW the course material from > >the CIT Cisco Press inside and out. Anyhow, I passed the exam, but I felt > >like griping about it anyways.. > > > >Russ.. > > > > > >___ > >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > >FAQ, list archives, and subscription info: http://www.groupstudy.com > >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > >--- > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CIT 4.0 help
I bought the first set and to my surprise they were nothing like the CIT exam. I have a thread from last week "gripe about CIT 4.0." That will give you more insight on what to expect.. Russ.. ""Clark, Jason"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Are the Boson tests helpful in preparing for the CIT? Boson has 3 separate > sets of practice tests for the CIT exam. Any recommendations on which one > to purchase (1,2, or 3) as I don't want to shell out $90 for all three? > > > TIA > > Jason > > > -Original Message- > > From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] > > Sent: Tuesday, May 30, 2000 3:27 PM > > To: 'CiscoGroupStudy' > > Subject: Re: CIT 4.0 help > > > > > > The course manual and/or the book format, edited by Dan > > Farkas and Laura > > Chappell, are the best way to study for CIT. > > > > Nobody will give you a list of questions from the exam, (see > > other threads > > ;-), but I did make some flash cards to help study for the > > test. When I > > wrote them, I had not taken the exam but after taking the exam, I have > > concluded that they are very close to the exam. See: > > > > > > http://www.priscilla.com/cit/toc.html > > > > Priscilla > > > > At 12:57 PM 5/30/2000 -0700, Shumake, Derrick wrote: > > >What is the recommend train material for CIT 4.0? Does > > anyone have a list of > > >sample question that will be on the test? thanks for your > > help in advance. > > > > > >N. Derrick Shumake > > >Network Consultant > > >Main: 303.488.3405 > > >Mobile: 303.906.2900 > > >Fax: 303.488.3406 > > > > > >NETIGY > > >The World's premier Architect of eBusiness-Ready Networks > > >5445 DTC Parkway, Penthouse Four > > >Englewood, CO 80111 > > >http://www.netigy.com > > > > > > > > > > > >___ > > >UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > > >FAQ, list archives, and subscription info: http://www.groupstudy.com > > >Report misconduct and Nondisclosure violations to > > [EMAIL PROTECTED] > > > > > > > __ > > Priscilla Oppenheimer > > Phone 541-482-5685 > > Fax 541-488-1708 > > Web http://www.priscilla.com > > > > ___ > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > > FAQ, list archives, and subscription info: http://www.groupstudy.com > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Study group in Toronto Area
Anyone in the Toronto area interested in setting up a Study Group? ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: catalyst 5505 question
Hey, It looks like your supervisor engine is running 4.3(1a). I believe that the supervisor engine scans the bus and detects what modules are installed and initializes them or something along those lines. Anyhow, it should be like upgrading a router to versoin 4.5. CCO should have some docs on updating the IOS but it should be a straight TFPT download. Hope that helps. Russ.. <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > Ladies and gents, > > I received a new module WS-X5234 ( RJ-45 10/100BTX for the catalyst 5505 . > I have not managed to make it work: > > talyst5500-SatFarm (enable) > Catalyst5500-SatFarm (enable) sh module > Mod Module-Name Ports Module-Type ModelSerial-Num > Status > --- --- - - - - -- - > > 1 2 1000BaseLX Supervisor WS-X5530 013385727 ok > 2 2410/100BaseTX Ethernet WS-X5225R 013495146 ok > 3 0 unknown WS-X5234 017585140 > faulty > > Mod MAC-Address(es)Hw Fw Sw > --- -- -- -- - - > --- > 1 00-30-b6-74-18-00 to 00-30-b6-74-1b-ff 3.35.1(2) 4.3(1a) > 2 00-d0-06-9e-c5-10 to 00-d0-06-9e-c5-27 3.34.3(1) 4.3(1a) > 3 00-30-7b-b3-53-e8 1.04.5(2) 0.0 > > Mod Sub-Type Sub-Model Sub-Serial Sub-Hw > --- - -- -- > 1 NFFC+WS-F5531 0013411310 1.0 > 1 uplink WS-U5536 0012761743 1.1 > Catalyst5500-SatFarm (enable) 02/16/2001,05:25:16:SYS-5:Module 3 not > responding. > ..resetting module > > I have surfed cisco's website and that particular module needs supervisor > engine version 4.5. > How do I find out which version I have installed? Can I easily upgrade? > > This is what I get when I issue the command show version: > > Catalyst5500-SatFarm (enable) sh version > WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) > Copyright (c) 1995-1998 by Cisco Systems > NMP S/W compiled on Nov 23 1998, 15:22:34 > MCP S/W compiled on Nov 23 1998, 15:19:30 > > System Bootstrap Version: 5.1(2) > > Hardware Version: 1.0 Model: WS-C5505 Serial #: 066554101 > > Mod Port Model Serial # Versions > --- -- - > 1 2WS-X5530 013385727 Hw : 3.3 > Fw : 5.1(2) > Fw1: 4.4(1) > Sw : 4.3(1a) > 2 24 WS-X5225R 013495146 Hw : 3.3 > Fw : 4.3(1) > Sw : 4.3(1a) > 3 0WS-X5234 017585140 Hw : 1.0 > Fw : 4.5(2) > Sw : 0.0 > >DRAMFLASH NVRAM > Module Total UsedFreeTotal UsedFreeTotal Used Free > -- --- --- --- --- --- --- - - - > 1 32640K 13423K 19217K 8192K 3979K 4213K 512K 108K 404K > > Uptime is 81 days, 3 hours, 39 minutes > Catalyst5500-SatFarm (enable) > > > > > > Regards. > MF > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Recommended CCIE reading
Hey all, For those of you who are pursuing the CCIE written/lab, can you give some advice on some reading material?. I have seen Bridges, Routers & Switches for CCIEs by Andrew Caslow pop up now and again. Any feedback on that book? How about the Cisco Press books "Advanced IP Network Design," "Network Design and Case Studies," or "Designing Large Scale IP Networks." Any input would be appreciated! Thanks! Russ.. ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco Documentation CD
Anyone get a recent version of the Cisco Doc CD to run under Win2000 and use IE instead of Netscape? I tried the Jan2000 version but it doesn't seem to want to run under Netscape and IE. Anyone? Russ.. ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: To look for isdn spid problem, using debug isdn q931 or q921?
SPID is a layer 2 feature if the ISDN switch type requires it. You can monitor it w/ the debug isdn q921. That command will debug information passed along the D channel. debug isdn q931 will monitor layer 3 traffic over the BRI lines. I have the CIT book but I don't recall seeing that error, what page is it on? It's incorrect because layer 3 depends on layer 2 to be active. Hope that helps! Russ.. ""Hou, Li"" <[EMAIL PROTECTED]> wrote in message 8iedt3$ajl$[EMAIL PROTECTED]">news:8iedt3$ajl$[EMAIL PROTECTED]... > Which debug command is to used to monitor ISDN spid error? > In Cisco CIT book, it said using debug isdn q931, > but in Cisco Network Design (CCIE Books), it said using debug isdn q921. > I want to know in a CIT exam, which is right? > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISDN setup
You would use BRI0 interfaces on R1 and R2 as backup interfaces to the serial interfaces. R1: int s0 backup int bri0 backup delay 20 40 // Dial R2 if s0 is down for 20 secs, wait 40 secs to disconnect once s0 is back up. ! configure the BRI0 interface to dial R2 R2: int s0 backup int bri0 backup delay 20 40 ! configure the BRI0 interface to dial R1 Depending on your configuration, you can use Dialer interfaces as the backup interface that way your BRI can be used for other purposes. This is covered pretty thoroughly with examples in the Cisco Press ACRC and BCRAN books. Hope that helps Russ.. ""Omer Shommo"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Suppose I have router R1 with s0 connected to s0 of router R2 through Frame relay cloud. Both routers have ISDN > interfaces. How do I configure the ISDN interface of R1 to automatically dial R2 in case the serial link is down? > > Omer > > > > > _ > NetZero - Defenders of the Free World > Click here for FREE Internet Access and Email > http://www.netzero.net/download/index.html > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Backup Interface
You need to configure the backup interface from the serial interface ie: router# int s0 router#(config-if) backup interface bri0 router#(config-if) backup delay 20 40 or router#(config-if) backup interface dialer1 router#(config-if) backup delay 20 40 It would probably be better to use a Dialer interface instead of using the BRI interface directly. Hope that helps Russ.. "Daniel Ma" <[EMAIL PROTECTED]> wrote in message C0CA716714DDD211BB180008C7338C6F014D3BDE@EXCHANGE">news:C0CA716714DDD211BB180008C7338C6F014D3BDE@EXCHANGE... > I am trying to backup an serial interface using Bri port. However I go > through the BRI interface configruation commands, I could not find the > command "backup interface" Can any one help me on how to configure it? > And for Bri interface should I configure normal DDR? I am using one > cisco4700M and one cisco2503, IOS 11.3. > > Thanks in advance. > > Daniel Ma > Systems Engineer > Enterprise Computing Unit > Infonet Systems & Services Pte Ltd > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IOS 12.1 Dialer Weirdness
Try adding the "no cdp enable" to the interface.and see if that helps. Had experiences where CDP was causing problems for load balancing. Also check if the release of the IOS is a GD or ED. If it's ED, you may want to down/upgrade to a GD version. Let me know Russ.. "Darren Ward" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi All, > > Has anyone had problems with 12.1.2T and ISDN multilink using a dialer > profile? > > I upgraded a 3640 from 12.0.4.T to 12.1.2.T and while everything else > worked the multilink PPP did not. > > I'll elaborate, the dialer brought up BRI3/0 and BRI3/1 and made the 4 > calls one after the other like it should and bound them into a virtual > interface but then the dialer started reporting errors saying LCP not > open when all 4 channels did successfully negotiate LCP and both they > and the virtual bundle showed LCP open. The Dialer showed spoofing. > > The end result no pings or traffic was working across the link. > > Downgraded the IOS and it all started miraculously working again! > > Only difference is IP Plus to IP Plus Firewall. > > Any thoughts? > > Darren > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ip and subnet
The way you have it setup means that 2 and 3 floor won't be able to talk to eachother, but the 1st floor will be able to talk to both of the other floors, 2nd and 3rd floor will be able to talk to some hosts on the 1st floor, plus there is a chance of overlapping addresses if your not careful. If your goal is have all the floors to talk to eachother, a better way to subnet it would be: 1st - 10.150.1.0 255.255.0.0 2nd - 10.150.2.0 255.255.0.0 3rd - 10.150.3.0 255.255.0.0 This way all floors are in the same subnet therefore they can all see each other. Hope that helps Russ.. ""SH Wesson"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...> If on one floor I use 10.150.0.0 255.255.0.0 and on the remaining 2 floors I > use 10.150.100.0 255.255.255.0 and 10..150.102.0 255.255.255.0, will this > work in terms of all three networks being able to communicate with each > other. Will there be any problems, etc. Can someone help me reason this > out. Thanks. > > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How far by self study?
I have my CCNP and I never attended any Cisco or related training. I bought Cisco Press books and other related books and since I work with the products full time it helped quite a bit. If your going to do self study for your certification, make sure you have a lab readily available to you. CCNA was passable without actually using a router/switch, but CCNP requires experience Hope that helps Russ.. "Patrick Duggan" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi one and all, > I am curious to know how many people have got to CCDP/CCNP > by self study alone. the difficulty of this is a like the length of string, > given enouh time most things are possible. Realistically, without attending > training courses is it so difficult to get through these exams. I did the > course for CCNA (really good) but self studied CCDA. This i reckon took me > aboout a week of solid study but it came across as a "study friendly topic". > I am now looking at the CCDP path and the CID first, it looks really bloody > difficult! But don't all new topics? So can anybody give advice on the > reality of CCDP self study? > thanks > Pat Duggan ccna ccda mcse blah blah > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IOS Upgrades
Eric, http://www.cisco.com/warp/customer/cc/cisco/mkt/ios/rel/113/prodlit/705_pp.h tm Need CCO login to get to the above URL. This is a "Feature Matrices: Release 10.3 12.1" outlining what features are specific to what release of the IOS. It doesn't give you much detail about the differences between IP, IP Plus etc.. but the release notes may give you more information here: http://www.cisco.com/kobayashi/releases/Release_notes.html Hope that helps Russ.. ""Eric Bishop"" <[EMAIL PROTECTED]> wrote in message 8jcrl3$r4k$[EMAIL PROTECTED]">news:8jcrl3$r4k$[EMAIL PROTECTED]... > Looking to do some upgrades to a few 2500 series routers and need > information in regards to the IP, IP Plus, etc. Does anyone have detailed > information on the differences between the different versions and or know > where this information is kept on the web. > > Thanks, > > EB > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX Firewall Manager
Hmm.. my experience with the PFM wasn't too great. Wasn't happy with it at all, stick with the CLI for configuration. As for syslog analysis and alarm, there are several products out there that do a much better job. I use PrivateI (www.4privatei.com), works very well for NT, there are others but I can't remember what they are, others on the list should have some more insight :) Hope that helps. Russ.. ""lee"" <[EMAIL PROTECTED]> wrote in message 8jbtop$g0c$[EMAIL PROTECTED]">news:8jbtop$g0c$[EMAIL PROTECTED]... > Hi all, has anyone familiar with PIX Firewall Manager 4.3(2)e ??? > My PIX firewall is running ver 4.4(4) and my PFM is running 4.3(2)e. I > managed to add the PIX firewall into the PFM, but i don't know how to enable > the syslog & alarm feature of PFM. > > Thanks in advance. > > rgs, > lee > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Cisco VPN Software
Cisco Secure VPN client is what your looking for http://www.cisco.com/kobayashi/sw-center/vpn/vpnclient/ Need CCO access to download it Hope that helps! Russ.. ""Dave Santeramo"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Does Cisco make a VPN client to go with a VPN capable 2621? Can anyone > recommend a free one if Cisco does not have one. > > > > ___ > To get your own FREE ZDNet Onebox - FREE voicemail, email, and fax, > all in one place - sign up today at http://www.zdnetonebox.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX question
It's fine for software config. The PIX 506 is not hardware upgradable, so if you just plan on using it learn the IOS then it should do nicely. Hope that helps Russ.. "Jim Bond" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello, > > I'm trying to study PIX. Is 506 good enough? > Thanks in advance. > > Jim > > __ > Do You Yahoo!? > Get Yahoo! Mail - Free email you can access from anywhere! > http://mail.yahoo.com/ > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISDN Debug error Message
If that debug output is from debug isdn q931, I believe it means that the called party is not responding .. http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/dbook/disd n.htm If you can, try running a debug on the other router to see if it even seens that a connection is trying to be established. Hope that helps Russ.. ""Tan Choh Koon"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi, > > What is "Cause i = 0x8292 - No user responding" mean ? > > > 07:22:47: ISDN BR0: Outgoing call id = 0x8010, dsl 0 > 07:22:47: ISDN BR0: Event: Call to 87321229 at 64 Kb/s > 07:22:47: ISDN BR0: process_bri_call(): call id 0x8010, called_number > 87321229, > speed 64, call type DATA > 07:22:201863462912: CC_CHAN_GetIdleChanbri: dsl 0 > 07:22:201863462912: Found idle channel B1 > 07:22:201863462912: ISDN BR0: TX -> SETUP pd = 8 callref = 0x10 > 07:22:204021615156: Bearer Capability i = 0x8890 > 07:22:201863462912: Channel ID i = 0x83 > 07:22:201863462912: Called Party Number i = 0x80, '87321229' > 07:22:47: ISDN BR0: RX <- CALL_PROC pd = 8 callref = 0x90 > 07:22:47: Channel ID i = 0x89. > 07:22:204021631044: ISDN BR0: received HOST_PROCEEDING call_id 0x8010 > Success rate is 0 percent (0/5) > hkl# > 07:23:07: ISDN BR0: RX <- DISCONNECT pd = 8 callref = 0x90 > 07:23:07: Cause i = 0x8292 - No user responding > 07:23:30064771072: ISDN BR0: received HOST_DISCONNECT call_id 0x8010 > 07:23:30064771072: ISDN BR0: Event: Call to 87321229 was hung up. > > Choh Koon, Tan > CCDA,CCNP > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PIX Fireawll Visio Stencils
Hey all, Does anyone have a Viso Stencil with a logical representation of a Cisco PIX Firewall? It looks like a hockey puck with a stop label on it :) Does anyone have the logical symbols 2 stenicl also? Thanks! Russ.. ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CIT studying
Cisco Internet Troubleshooting by Catherine Paquet.. It covers everything you need to know for the exam.. a few typos here and there but it will do. Hope that helps Russ.. <[EMAIL PROTECTED]> wrote in message C4D4376F86B9D311BF3D00A0C9B3D36413E786@sonia">news:C4D4376F86B9D311BF3D00A0C9B3D36413E786@sonia... > > HEllo everybody > > I have just passed Foundation routing & switching exam ( it was tough ) and > I am heading for CIT. > What are the best materials to study for CIT ? > > --- > Gabriel Neagoe, GN379-RIPE > Networking solutions consultant > Cisco product manager, CCNA, CCDA > S&T Romania > tel: +401 20 40 300 > fax: +401 20 40 310 > --- > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: set up a WAN
A Frame relay may be what you need.. cost tends to drop the more circuits that you have.. plus you can adjust the CIR (speed) as you see fit with the provider. How often does the file get transferred and how quickly does it have to get there? If it gets tranferred overnight once.. a few IDSN lines may be a better way to go..Need a little more info to give you a better answer.. Russ.. ""rayza manesh"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > How would you design this? > 5 locations separated about 15 miles from each other. > The sixth site is located about 500 miles away. > There will be big file (5-10 MB)transferring between these sites. > > Considering the cost what technology you would suggest. > > Thanks for your respond > > rayza > > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Access List Question
yeap! use: no access-list 101 permit tcp any any eq 23 - or whatever the access-list particulars are. Hope that helps Russ.. ""Scott M. Trieste"" <[EMAIL PROTECTED]> wrote in message 8kf6re$91d$[EMAIL PROTECTED]">news:8kf6re$91d$[EMAIL PROTECTED]... > Is there anyway to remove a specific line from an access list without > erasing the entire thing. Thanks in advance. > > Best Regards, > > Scott M. Trieste > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: connectivity problem
Hey Don, Interesting problem.. Have you tried clearing the arp cache on the 2924? I assume that the hosts connected to the hub are in the same subnet as the ones on the switch? Any Vlans setup on the switch? Any access-lists setup? Finally, have you tried erasing the config and starting from scratch on it? Don't know too much about the Bay hubs so can't really offer any advice on it. Let me know if you were able to fix it and how. Hope that helps Russ.. ""Don Dettmore"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Here is an interesting problem. > > I have a client with a Cisco 2924XL switch. Most stations are > directly connected to the switch, however off of one of the switch > ports is an old Bay 10mb/s hub. > > The problem is that stations connected to the hub cannot communicate > with stations connected to the switch. Switch stations CAN > communicate with switch stations, and hub stations CAN communicate > with hub stations. > > The switch port connected to the hub appears to recognize the hub - > it is up/up and has detected 10mb half duplex. I tried manually > entering these settings with no effect. > > It appears to be an arp problem - if I debug arp and then try to ping > a station connected to the hub, arps are sent out, but no replys are > received. This happens whether the switch itself tries to ping a hub > host, or a if a switch station does so. Interestingly enough tho, if > a hub station pings another hub station, the arp shows up on the > switch debug console - it is definitely seeing the traffic! > > Any suggestions would be greatly appreciated. > > Thanks! > > Don Dettmore > CCNP, MCSE, CNE > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Access List Question
I stand corrected! :) ""Stull, Cory"" <[EMAIL PROTECTED]> wrote in message 0D7A05A19CE4D211BD050008C7330FE7147CAD@CCUPDC">news:0D7A05A19CE4D211BD050008C7330FE7147CAD@CCUPDC... > On page 351 of the Cisco Press CCNA study guide it states Only named access > lists allow individual statements to be deleted. Numbered lists only allow > for deletion of the entire list. Insertion of the new statement into the > list will require deletion and re-addition of all statements after the newly > added statement. > > > > -Original Message- > From: Russell Lusignan [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, July 11, 2000 6:30 AM > To: [EMAIL PROTECTED] > Subject: Re: Access List Question > > > yeap! use: > > no access-list 101 permit tcp any any eq 23 - or whatever the access-list > particulars are. > > Hope that helps > Russ.. > > ""Scott M. Trieste"" <[EMAIL PROTECTED]> wrote in message > 8kf6re$91d$[EMAIL PROTECTED]">news:8kf6re$91d$[EMAIL PROTECTED]... > > Is there anyway to remove a specific line from an access list without > > erasing the entire thing. Thanks in advance. > > > > Best Regards, > > > > Scott M. Trieste > > > > > > ___ > > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > > FAQ, list archives, and subscription info: http://www.groupstudy.com > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > --- > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Passed BCRAN today!!
congrats.. watch the CIT 4.0.. the english is brutal on the exam.. questions tend to contradict themselves as well as being unclear :) ""Lonnie Paschall"" <[EMAIL PROTECTED]> wrote in message 8kd07v$c4f$[EMAIL PROTECTED]">news:8kd07v$c4f$[EMAIL PROTECTED]... > Just passed the BCRAN today. I used the Cisco Press Builiding Cisco Remote > Access Networks book and the boson exams. The test was easier than the > others (ACRC, CLSC). I was suprised to find so many x25 questions in such a > new exam. Cant actually tell you any questions but I would know you ISDN > commands, X25, and Frame-Relay. Now on to CIT!!! > > Lonnie > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Reverse Telnet [7:21857]
Reverse telnet will allow you to access a serial device (mode, console port) connected to a low speed serial, or async port on the terminal server. It's very handy for a single point of access to multiple router/switch consoles, and it's used to access modems that are directly connected. Check out: http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/dial_ c/dcrtelnt.htm hth -Russ ""Ray Smith"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Guys, > > Correct me if I am wrong, but are there several ways of doing a reverse > telnet? When the term reverse telnet surfaces I think of a console > connection via a terminal server to another router or switch using an ip > address and port number (eg. 10.10.5.1 2001). > > However, based on what I am reading I can also connect to a US Robotics > modem via that same terminal server to configure it. I am not very savy in > the area of dial-up and would like one of you gurus to clarify for me. > Thanks > > Ray > > _ > Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21861&t=21857 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
