RE: traffic analyzer [7:41267]

2002-04-12 Thread Sam Deckert

Patrick have you tried setting a data pattern??

That's what I did and it works a treat for only monitoring a given subnet.

Sam.



-Original Message-
From: Patrick Ramsey [mailto:[EMAIL PROTECTED]]
Sent: Friday, 12 April 2002 7:12 PM
To: [EMAIL PROTECTED]
Subject: Re: traffic analyzer [7:41267]


yeah...It's not hard to let "expert" spoil you though!

I've kinda grown accustom to letting sniffer pro do all the work for me... :)

>>> "Sean Knox"  04/12/02 04:22 AM >>>
Agreed. Ethereal beats Sniffer Pro, Etherpeek, or any other sniffer I've used
hands down. Best of all, it's free.

Sean

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Patrick
Ramsey
Sent: Thursday, April 11, 2002 11:58 PM
To: [EMAIL PROTECTED]
Subject: Re: traffic analyzer [7:41267]


send a linux box configured with X/ethereal and vnc out there and remote
control it from your end!

-Patrick

>>> supernet  04/12/02 12:42AM >>>
Hi Dear Friends,

I have 1 branch office connected to main office by frame relay. I noticed a
lot of traffic across this link and would like to find out what they are. The
problem is I don't have access to the branch office, therefore, everything
has
to be done in main office. I tried sniffer pro, etherpeek and anasil but they
only allow me to specify a particular source IP, not the whole branch office
subnet. Is there any other software I can use?

Thanks.
Yoshi
>  Confidentiality Disclaimer     Confidentiality
Disclaimer   
This email and any files transmitted with it may contain confidential and /or
proprietary information in the possession of WellStar Health System, Inc.
("WellStar") and is intended only for the individual or entity to whom
addressed.  This email may contain information that is held to be privileged,
confidential and exempt from disclosure under applicable law. If the reader
of
this message is not the intended recipient, you are hereby notified that any
unauthorized access, dissemination, distribution or copying of any
information
from this email is strictly prohibited, and may subject you to criminal
and/or
civil liability. If you have received this email in error, please notify the
sender by reply email and then delete this email and its attachments from
your
computer. Thank you.



[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of Sam Deckert.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41292&t=41267
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: CCIE Written Reading.. [7:41017]

2002-04-10 Thread Sam Deckert

Bridges, Routers, and
Switches for CCIE's by Andrew Bruce Caslow.
0130903892

HTH,

Sam.



-Original Message-
From: Kris Keen [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, 11 April 2002 8:27 AM
To: [EMAIL PROTECTED]
Subject: RE: CCIE Written Reading.. [7:41017]


Thankyou all! Anyone have the NLI Study guide ISBN and also the Caslow
Bridges Routers and Switches ISBN?

Ill purchase the Boson 1,2,3 tomorrow

Thanks all :)
Onto the written!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41124&t=41017
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Cisco Audio Files [7:40911]

2002-04-09 Thread Sam Deckert

That's great - thanks!


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, 9 April 2002 11:42 PM
To: [EMAIL PROTECTED]
Subject: RE: Cisco Audio Files [7:40911]


Is this what you are looking for:
http://recording.safeshopper.com/index.htm?648?

Andy

-Original Message-
From: Sam Deckert [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 09, 2002 9:07 AM
To: [EMAIL PROTECTED]
Subject: Cisco Audio Files [7:40911]


Hello all,

Just wondering if anyone has (or knows where to get) Cisco audio files, such
as from sessions at Networkers?

I would like to be able to listen to them in the car

Thanks for any help anyone is able to provide...

Sam.

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of Sam Deckert.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=40975&t=40911
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Audio Files [7:40911]

2002-04-09 Thread Sam Deckert

Hello all,

Just wondering if anyone has (or knows where to get) Cisco audio files, such
as from sessions at Networkers?

I would like to be able to listen to them in the car

Thanks for any help anyone is able to provide...

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=40911&t=40911
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Traffic type monitoring [7:34382]

2002-02-04 Thread Sam Deckert

by monitoring, i mean by protocol and possibly port..sorry, should have
been more specific.
 
Dont think MRTG will do this??
 
Thanks though!
 
Sam.
 
 -Original Message-
From: Jeroen Timmer [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, 5 February 2002 9:09 AM
To: 'Sam Deckert'
Subject: RE: Traffic type monitoring [7:34382]



You can try MRTG or the RRDtool. 

Gr8 tools for watching traffic. 


JT 


-Original Message----- 
From: Sam Deckert [mailto:[EMAIL PROTECTED]
 ] 
Sent: Monday, February 04, 2002 10:42 PM 
To: [EMAIL PROTECTED] 
Subject: Traffic type monitoring [7:34382] 


Hello everyone, 

Just wondering what you guys would use to monitor the traffic going over a
single frame PVC? 

I was thinking of spanning the port on the switch, and using Sniffer with
filters.  Are there any better alternatives?? 

Thanks for any help! 

Sam. 
&i=34382&t=34382 
-- 
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
  
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34401&t=34382
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Traffic type monitoring [7:34382]

2002-02-04 Thread Sam Deckert

Hello everyone,

Just wondering what you guys would use to monitor the traffic going over a
single frame PVC?

I was thinking of spanning the port on the switch, and using Sniffer with
filters.  Are there any better alternatives??

Thanks for any help!

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34382&t=34382
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNP Voice Specialisation [7:34253]

2002-02-03 Thread Sam Deckert

Hello everyone,

Just wondering if some of you could share some opinions on what study
materials were useful in obtaining the CCNP Voice Specialisation??

I have completed my CCNP and am doing some basic voice implementations at
work, so any recommendations on which exam to tackle first etc would be
great!

Thanks,

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=34253&t=34253
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: ISDN DDR Question [7:28257]

2001-12-06 Thread Sam Deckert

thanks patrick,

however from what i have found the idle-timeout command is for the first
channel being idle, not the second.

What i am after is how to make the second channel stay up longer than the
default after the load threshold drops below its defined value.

thanks,

sam.


-Original Message-
From: Patrick Donlon [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 6 December 2001 7:31 PM
To: [EMAIL PROTECTED]
Subject: Re: ISDN DDR Question [7:28257]


dialer idle-timeout seconds



Have a look at this link it's got lots of info on PPP and multilink

http://www.cisco.com/cgi-bin/Support/PSP/psp_view.pl?p=Internetworking:PPP&s
=Implementation_and_Configuration



Cheers

Pat

""Sam Deckert""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> hey all,
>
> just wondering if anyone knows how to extend the amount of time it takes
> before the second channel comes down after the traffic level drops below
the
> load threshold, when using multilink isdn with 2 channels?
>
> Any help would be great!!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28339&t=28257
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ISDN DDR Question [7:28257]

2001-12-05 Thread Sam Deckert

hey all,

just wondering if anyone knows how to extend the amount of time it takes
before the second channel comes down after the traffic level drops below the
load threshold, when using multilink isdn with 2 channels?

Any help would be great!!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28257&t=28257
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: AARRGGHH!!! Flash on a 2500! [7:24564]

2001-10-29 Thread Sam Deckert

Hey Mike,

>From my limited experience, I usually go by the name of the image.

an "m" means run from memory, and a "z" means the image is compressed.

ie.  c1700-bno3r2sy756i-mz.121-3.XT1.bin

Hope that helps!

Sam.
- Original Message -
From: "Michael Williams" 
To: 
Sent: Tuesday, October 30, 2001 9:46 AM
Subject: RE: AARRGGHH!!! Flash on a 2500! [7:24564]


> Thanks to everyone on their input.  I will try "no partition flash" or the
> booting from TFTP.
>
> This brings up an interesting question tho.  Which models "run from flash"
> therefore making the flash read-only and which models (like the 6500) let
> you boot from flash, then read/write/erase the flash (I presume since the
> IOS was loaded wholly into memory it doesn't need to protect the flash
card)?
>
> Thanks again!
> Mike W.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24584&t=24564
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: new laptop and no db9 [7:24186]

2001-10-25 Thread Sam Deckert

i used a usb to serial converter (not a cable - an actual little box) from
belkin.  It works great.

Check it out @ www.belkin.com

Sam.
- Original Message -
From: "Rick" 
To: 
Sent: Friday, October 26, 2001 11:07 AM
Subject: new laptop and no db9 [7:24186]


> well I got a new laptop in at work today and they order it
> without a 9 pin serial port. I did however find a USB to serial
> cable but it does not seem to be working very good. Anyone else tackled
> this problem? what choices do I have except keeping the old laptop.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24201&t=24186
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DTE/DCE explanation please [7:24071]

2001-10-25 Thread Sam Deckert

Thanks Drew, John and Tim!

That has been great.  Sorry for the simple questions, but I have not had
access to a lab before, and have just got a new job where I will have, so I
am trying to increase my conceptual knowledge to more physical hands-on
knowledge.  I am really looking forward to getting to have a play (in a
non-production environment!) without the threat of bringing anything
important down.

The routers I have worked with in my previous job pretty much involved
telnet and that was it.

Thanks heaps again!

- Original Message -
From: "Drew - Home" 
To: "Sam Deckert" 
Sent: Friday, October 26, 2001 3:28 AM
Subject: Re: DTE/DCE explanation please [7:24071]


> >
> > So, a special db60-db60 cable can be used for back-to-back connections,
> and
> > will work as long as one router is set to be the DCE and provide a
> > clockrate.
>
> Correct.
>
> > Does this cable have any special pinouts or anything?
>
> It is DCE on one end and DTE on the other.
>
> >  Is there
> > a diagram somewhere?  Did a search on google, no luck tho!
> >
>
> Maybe on the Cisco page?
>
>
> > Also, would a setup with two V.35 cables (one male, one female)
connected
> > together between two routers work in the same way?
>
> You can connect one DCE cable to one DTE cable for the same effect.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24166&t=24071
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DTE/DCE explanation please [7:24071]

2001-10-25 Thread Sam Deckert

Thanks Tim, that was great!

So, a special db60-db60 cable can be used for back-to-back connections, and
will work as long as one router is set to be the DCE and provide a
clockrate.  Does this cable have any special pinouts or anything?  Is there
a diagram somewhere?  Did a search on google, no luck tho!

Also, would a setup with two V.35 cables (one male, one female) connected
together between two routers work in the same way?

Thanks for your help!

Sam.

- Original Message -
From: "Ouellette, Tim" 
To: 
Sent: Thursday, October 25, 2001 9:49 PM
Subject: RE: DTE/DCE explanation please [7:24071]


> Sam,
>
> "the whole DTE/DCE" thing is related directly to where the clocking comes
> from. In a "typical" wan, the clocking to your router's serial port comes
> from an external CSU/DSU that your carrier may provide. Therefor, the
> carried is the DCE and your router is the DTE.  In a home environment, if
> you have your routers connected via a db60->db60 cable, one of those
routers
> needs to supply the clock rate.  Check your cable because one end is
> probably labelled as DCE and the other DTE. If it's not, trying using the
> "show controller serial x" and that should tell you the type that is
plugged
> into it. On the DCE side of that connected link, you need to use the
"clock
> rate" command to supply clocking to the other side.
>
> I don't think there is a "DTE cable" I believe it's more of you order the
> proper pin size (db60 on 2500's and db60 or db50 on the 4000's) for each
> side.
>
> Hope that helps.
>
> Tim
>
> > -Original Message-
> > From: Sam Deckert [SMTP:[EMAIL PROTECTED]]
> > Sent: Wednesday, October 24, 2001 10:54 PM
> > To: [EMAIL PROTECTED]
> > Subject: DTE/DCE explanation please [7:24071]
> >
> > Hello,
> >
> > Could someone kindly explain the whole DTE / DCE thing in relation to
> > setting
> > up a home lab and using routers back to back?
> >
> > I believe that DTE is male and DCE female, but what are the other
> > differences?
> >
> > When connecting a router to a CSU/DSU, would you always order a DTE
cable?
> >
> > Thanks for any help anyone can provide!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24093&t=24071
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



DTE/DCE explanation please [7:24071]

2001-10-24 Thread Sam Deckert

Hello,

Could someone kindly explain the whole DTE / DCE thing in relation to setting
up a home lab and using routers back to back?

I believe that DTE is male and DCE female, but what are the other
differences?

When connecting a router to a CSU/DSU, would you always order a DTE cable?

Thanks for any help anyone can provide!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24071&t=24071
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Can I configure 2 leased line for single channel ? [7:21154]

2001-09-26 Thread Sam Deckert

Could he set the encapsulation of each serial int to be ppp, and use ppp
multilink on them??

- Original Message -
From: "Stephen Skinner" 
To: 
Sent: Thursday, September 27, 2001 12:28 AM
Subject: Re: Can I configure 2 leased line for single channel ? [7:21147]


> not as far as i am aware
>
> What you COULD do ..is set them up as seperate lines ...and then run
> eigrp/ospf betweeen them ...this will load balance the lines..
>
> you could just upgrade your one line to 256k...also
>
> but there is no serial "etherchannel" varient..
>
> you can do it with isdn using dialer channel`s
>
>
> HTH steve
>
> >From: "[EMAIL PROTECTED]"
> >
> >Reply-To: "[EMAIL PROTECTED]"
> >
> >To: [EMAIL PROTECTED]
> >Subject: Can I configure 2 leased line for single channel ? [7:21105]
> >Date: Wed, 26 Sep 2001 02:26:48 -0400
> >
> >Hello all
> >I have  128 KBPS leased line  between 2 routers and I want to enhance the
> >performance of the same using one more leased line . Can anyboby suggest
me
> >whether  is there any command which will  make these 2 lines to work as 1
> >logical line as is the case with etherchannel ?
> >Thanks in advance.
> _
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=21154&t=21154
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Regarding 2509 telneting sessions... [7:20476]

2001-09-19 Thread Sam Deckert

Another solution you might consider is using some of SecureCRTs cool
features

Create a connection for each router you want to connect to through the 2509,
and modify the login script for each connection (in the connection
properties), having it first log you into the 2509 and then reverse telnet
(and login as well if you are reay lazy!) to the device for that
connection.

This would give you a window for each device, and also log in to the 2509,
reverse telnet, and login to the target device all with a mouse click (per
target device) if you like.

Let me know if that works ok for you, or if I havent explained myself very
well!

Sam.
- Original Message -
From: "EA Louie" 
To: 
Sent: Thursday, September 20, 2001 3:28 PM
Subject: Re: Regarding 2509 telneting sessions... [7:20476]


> that is right...I stand (or sit) corrected.  commserver IOS allows more
than
> 5 vty lines
>
> -e-
>
> - Original Message -
> From: "Jason"
> To:
> Sent: Wednesday, September 19, 2001 8:49 PM
> Subject: Re: Regarding 2509 telneting sessions... [7:20476]
>
>
> > No, you can also use CommServer IOS and you can have as many lines as
you
> > want.. only problem is you cannot run the advance routing protocols...
> >
> > Jason
> >
> > ""EA Louie""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > ...and to add to Phil's already great description, you're limited to 5
> > > telnet sessions into your 2509 unless Enterprise IOS is installed and
> > you've
> > > configured additional vty lines.
> > >
> > > - Original Message -
> > > From: "Circusnuts"
> > > To:
> > > Sent: Wednesday, September 19, 2001 7:45 PM
> > > Subject: Re: Regarding 2509 telneting sessions... [7:20476]
> > >
> > >
> > > > This is hard to answer.  First- the whole reason for having the
Access
> > > > Server in your lab is to get over the idiosyncrasies of how to
> configure
> > > it
> > > > & how to work it effectively.  That's just one less item to worry
> about
> > > when
> > > > heading to the lab.  Most any Telnet program will open multiple
> > sessions.
> > > > The only way I can imagine this would be possible, with your setup,
is
> > to
> > > > Telnet into your 2509 router multiple times.  Telnet into say the
> > Ethernet
> > > &
> > > > start a session with router "1."  Telnet into the Ethernet again
with,
> > > > setting up a concurrent session with say router "2."  Get the
> picture...
> > > Do
> > > > remember- in the grand scheme of things that 2509's cnrtl, shft, 6,
&
> X
> > is
> > > > really going to make your life easier when using a good size rack of
> > > > equipment :o)
> > > >
> > > > All the best !!!
> > > > Phil
> > > >
> > > >
> > > > - Original Message -
> > > > From:
> > > > To:
> > > > Sent: Wednesday, September 19, 2001 8:29 PM
> > > > Subject: Regarding 2509 telneting sessions... [7:20476]
> > > >
> > > >
> > > > > Hello all:
> > > > >
> > > > >
> > > > > Is there a way that I can open multiple sessions in seperate
> windows.
> > > I'm
> > > > > currently using Windows ME, I downloaded a program called
> > > SecureCRT...its
> > > > > like hyperterminal but Betterso what I would like to do is
open
> up
> > > > each
> > > > > telnet session in a seperate window...  as I hate doing the
> > > CTRL+SHFT+6+x
> > > > > routine...
> > > > > I would much prefer to have all the sessions open in seperate
> > > > windows...can
> > > > > this be done...if so how?
> > > > >
> > > > > P.S. I'm using a 2509 octal cable out to 8 routers.
> > > > >
> > > > > thank you
> > > _
> > > Do You Yahoo!?
> > > Get your free @yahoo.com address at http://mail.yahoo.com
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=20507&t=20476
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IPsec over GRE tunnel to *nix box [7:19554]

2001-09-12 Thread Sam Deckert

Hey everyone,

First and foremost, I hope all people that have been affected by the tragedy
are coping ok - we here in Oz are thinking and praying for you.

Also, I was just wondering if anyone has ever been able to terminate a GRE
tunnel from a Cisco router to a *nix box of some flavor?  I have been
scouring
the net, but havent found anything that can do this as yet.  Is this even
possible?

Thanks for any help/ideas you can provide, and regards

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19554&t=19554
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: how to make a router firewall? [7:18268]

2001-09-10 Thread Sam Deckert

Thanks for that link Bill - it rocks!

Sam.
- Original Message -
From: "Bill Carter" 
To: 
Sent: Tuesday, September 11, 2001 1:23 AM
Subject: RE: how to make a router firewall? [7:18268]


> Rob Thomas has done some good work on this.
>
>  http://www.cymru.com/~robt/Docs/Articles/secure-ios-template.html
>
> ^-^-^-^-^-^-^-^-^-^-^
> Bill Carter
> CCIE 5022
> ^-^-^-^-^-^-^-^-^-^-^
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> William Gragido
> Sent: Wednesday, September 05, 2001 1:01 PM
> To: [EMAIL PROTECTED]
> Subject: RE: how to make a router firewall? [7:18268]
>
>
> The firewall IOS is quite good however, if you do not wish to utilize it
you
> can simply create ACLs that reflect your desires accordingly.  ACLs are in
> laymans terms, the low brow fire wall rule set so have at it!
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Jim Bond
> Sent: Sunday, September 02, 2001 8:57 PM
> To: [EMAIL PROTECTED]
> Subject: how to make a router firewall? [7:18268]
>
>
> Hello,
>
> I'm trying to make a 1720 router as firewall. What IOS
> should I use? What ACLs should I put in the router? My
> understanding on firewall is to allow outgoing traffic
> and block incoming traffic unless it's originated from
> inside, is it correct?
>
> Thanks in advance.
>
> Jim
>
> __
> Do You Yahoo!?
> Get email alerts & NEW webcam video instant messaging with Yahoo!
Messenger
> http://im.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19286&t=18268
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IP in IP GRE tunneling [7:16833]

2001-08-22 Thread Sam Deckert

Would you be able to post a sample config of GRE IP/IP tunnelling over the
Internet (with and without IPSec?)??

That would be great.  Having a bit of trouble with it

Thanks!

Sam.

- Original Message -
From: "Juliano Moises da Luz" 
To: 
Sent: Thursday, August 23, 2001 3:05 AM
Subject: RE: IP in IP GRE tunneling [7:16833]


> I think the main advantage is easy to configure and troubleshoot. We have
> all VPN links using GRE tunneling with and without IPSEC and it works
fine.
>
> -Original Message-
> From: YY [mailto:[EMAIL PROTECTED]]
> Sent: quarta-feira, 22 de agosto de 2001 13:23
> To: [EMAIL PROTECTED]
> Subject: IP in IP GRE tunneling [7:16833]
>
>
> Hi,
> What's advantage or use of IP in IP GRE tunneling ?  Thank you.
>
> Regards,
> YY




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16893&t=16833
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco 761 Firewall [7:16629]

2001-08-21 Thread Sam Deckert

Hello Everyone

Just wonder if anyone is aware of a way to restrict traffic entering a Cisco
761 router form the Internet to only ftp control and data traffic.  From my
searching, I have found that it will probably need to be done with the "set
ip filter" command, however have not seen an example and cannot figure out
how.

Any help would be greatly appreciated!

Thanks...

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16629&t=16629
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



1751 IPSec Tunnel Query [7:16237]

2001-08-15 Thread Sam Deckert

Hey everyone,

Just wondering if anyone knows approximately how many 56-bit IPSec encrypted
tunnels a 1751 with a hardware encryption module would be able to support?
The Internet connection over which the tunnels would be running would
probably be about 2Mb.

Thanks for any help anyone is able to provide.

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16237&t=16237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Recognize this>>>?? [7:14077]

2001-07-29 Thread Sam Deckert

try putting:

no service config

into your config.  It appears to be looking for a config from a tftp
server...

No, I dont think this would be responsible for your link being down

Sam.

- Original Message -
From: "Stephen Flint" 
To: 
Sent: Sunday, July 29, 2001 8:06 PM
Subject: Recognize this>>>?? [7:14077]


> Hi,
>
> Does anyone recognize these error messages?
>
> %Error opening tftp://255.255.255.255/ network-confg
>  "  cisconet-cfg
>  "  routerb-confg
> This will repeat endlessly, right in the middle of typing a command!!
>
> Could this be responsible for my link being down?
>
> Thanks,
> Steve
> [EMAIL PROTECTED]
>
> _
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14079&t=14077
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CCO questions [7:11275]

2001-07-07 Thread Sam Deckert

Hey all

Does anyone know what is involved for a Cisco Authorised Reseller to obtain
access to download router images etc from CCO?  What level of access or
partner status is required to be able to download the software?

Thanks!

Sam.

- Original Message -
From: "Rik Guyler" 
To: 
Sent: Sunday, July 08, 2001 12:50 PM
Subject: RE: CCO questions [7:11275]


> Guys (or gals - don't want to offend the female members!), I hate to break
> it to you, but being a CCNP doesn't get you a CCO account.  Being a CCIE
> does, but that's a different matter.  Instead, why don't you sign up with
> the consultant program?  It's free and you will get a CCO account.  You
> can't download any software with this account but you will gain access to
> the private documents, resources, etc.
>
> ---
> Rik Guyler
>
> -Original Message-
> From: Michael L. Williams [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, July 07, 2001 9:14 PM
> To: [EMAIL PROTECTED]
> Subject: Re: CCO questions [7:11275]
>
>
> How long after finishing CCNP, etc does it usually take to get the CCO
> account?  Just wondering. I finished CCNP and am eager to get my CCO
> login.
>
> Mike W.
>
> "DNT"  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > I think in order to obtain an account on CCO, you must be a CCNP, CCIE,
or
> > reseller.
> >
> > Denny
> >
> >
> >
> > ""Preston Kilburn""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > I have a newbie question here.  What ways can one get a CCO login to
> > > the CCO sight?  Do you have to own equipment or be a CCIE?
> > > -P.Kil




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11304&t=11275
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-02 Thread Sam Deckert

Thanks for you help, Jim.

I will try setting both sides to 56, however I have verified that it does
not appear to be a speed mismatch between the routers with the "debug q931"
output.  Although I guess it could still be that the telco only provisioned
a 56k line?  But the other B channel is connected fine at 64k.

Anyway, I'll include the debug q931 output from both routers, and see what
you think.  I found that each router is sending to the other a Bearer
Capability of i = 0x8890 which according to CCO, is 64k.

Also, according to CCO the problem does not appear to be at the q931 layer,
as a CONNECT_ACK is received by both routers.  It also suggests that when
the cause of the disconnection is "Cause i = 0x8090 - Normal call clearing",
as it is in this case, it is usually a problem with a higher layer.  I think
I might be slowly getting there (optimist!).

Thanks again for any help and further suggestions you might have.  From
this, do you still think I should try setting both ends to 56k??  I am in
Australia, if that helps!

Also - to give you some more background on the issue, this setup is about 1
month old.  It was working fine with both channels up at 128k, then after
about a week the second channel just started disconnecting every 20secs.
The IT guy that normally looks after the routers is on holidays, and cant be
contacted to determine whether he changed anything.  What possible problems
could it be if this was caused by the Telco?  Keep in mind that the first B
channel is up fine and does not disconnect

Thanks again for all your help!

Sam.

Here is the debug q931 output from the 1720 (calling) router:
06:21:236223201963: ISDN BR0: TX ->  SETUP pd = 8  callref = 0x23
06:21:238379534836: Bearer Capability i = 0x8890
06:21:236223201280: Channel ID i = 0x83
06:21:236223201280: Called Party Number i = 0x80, '0353324231',
Plan:Unknown, Type:Unknown
06:21:55: ISDN BR0: RX   CONNECT_ACK pd = 8  callref = 0x23
06:21:246967297336: %LINK-3-UPDOWN: Interface BRI0:2, changed state to up
06:22:17: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from 0353324231
clarendon, call lasted 20 seconds
06:22:7301032: ISDN BR0: TX ->  DISCONNECT pd = 8  callref = 0x23
06:22:75170777588: Cause i = 0x8090 - Normal call clearing
06:22:17: ISDN BR0: RX   RELEASE_COMP pd = 8  callref = 0x23
06:22:7301036: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down


Here is the debug q931 output from the 2611 (called) router:
07:18:52: ISDN BR0/1: RX 
on B2 at 64 Kb/s
07:18:227633266687: ISDN BR0/1: TX ->  CALL_PROC pd = 8  callref = 0xD6
07:18:225498880444: Channel ID i = 0x8A
07:18:52: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to up
07:18:223338299392: ISDN BR0/1: TX ->  CONNECT pd = 8  callref = 0xD6
07:18:52: ISDN BR0/1: RX   RELEASE pd = 8  callref = 0xD6
07:19:57995155900: Cause i = 0x8090 - Normal call clearing
07:19:13: ISDN BR0/1: RX 
To: 
Sent: Tuesday, July 03, 2001 2:50 AM
Subject: Re: ISDN B Channel Disconnecting Cont... [7:10596]


> I'm not sure if this will help since the problem seems to be brnging up
the
> second B
> channel.
>
> I know if there is a speed mismatch the line will drop after about a 20
> second
> connection.  Does not even bother to do the CHAP before failing.
>
> I ran into this again last week because I had a finger check in a copy
paste
> of
> configurations.  One side I had the statement 'speed 56' in the dialer map
> statement and
> not in the other.  Removed it and everything worked.
>
> Try adding the statement speed 56 on both sides to see if this helps.
>
> The US seems to have more of a problem with needing to set the speed to 56
> than anywhere
> else.
>
> Jim
>
> Sam Deckert wrote:
>
> > Here is the debug isdn events output from when the 1700 disconnects:
> >
> > clarendon2-gw#
> > 04:14:10: ISDN BR0: Event: Hangup call to call id 0x801E
> > 04:14:10: ISDN BR0: process_disconnect(): call id 0x801E, call type is
> DATA,
> > b_idb 0x809D7DF8, ces 1, cause Normal call clearing(0x10)
> > 04:14:10: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from
> 0353324231
> > clarendon, call lasted 20 seconds
> > 04:14:49400989532: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
> > 04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
> > 04:14:47244640267: %LINK-3-UPDOWN: Interface BRI0:2, changed state to
down
> > 04:14:49398792589: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
> > 04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
> >
> > Here is the debug isdn events output from the 2611 side of things:
> > 05:12:32225367844: ISDN BR0/1: received HOST_DISCONNECT call_id 0x25
> > 05:12:30064771072: ISDN BR0/1: Event:  Call t

Re: ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-02 Thread Sam Deckert

Thanks Alex, but I already have an idle-timer value of over 2 million
seconds as well as the load-threshold set to 1.

As Tony pointed out earlier, it appears from the debugs to be a problem
during the LCP negotiation phase, prior to even attempting to authenticate
with CHAP.

Here is some of the debug output, showing what I mean.  This is the calling
1700 router output:

05:31:180388626431: %LINK-3-UPDOWN: Interface BRI0:2, changed state to up
05:31:178241142757: BR0:2 PPP: Treating connection as a callout
05:31:178247820600: BR0:2 PPP: Phase is ESTABLISHING, Active Open
05:31:176093659168: BR0:2 LCP: O CONFREQ [Closed] id 55 len 35
05:31:180388626431: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
05:31:176093659136: BR0:2 LCP:MagicNumber 0x03470C22 (0x050603470C22)
05:31:176093659136: BR0:2 LCP:MRRU 1524 (0x110405F4)
05:31:176093659136: BR0:2 LCP:EndpointDisc 1 Local
(0x131001636C6172656E646F6E322D6777)
05:31:42: BR0:2 LCP: I CONFREQ [REQsent] id 55 len 31
05:31:42: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
05:31:42: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
05:31:42: BR0:2 LCP:MRRU 1524 (0x110405F4)
05:31:42: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
05:31:42: BR0:2 LCP: O CONFACK [REQsent] id 55 len 31
05:31:42: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
05:31:42: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
05:31:42: BR0:2 LCP:MRRU 1524 (0x110405F4)
05:31:42: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
05:31:43: BR0:2 LCP: TIMEout: State ACKsent


This same events occurs again, and again until 20secs are up and the line
drops.  It does not even get to the authentication phase.  I think I need to
try and figure out why it is getting a "TIMEout: State ACKsent".

Thanks for the suggestions, keep them coming!!!

Thanks again,

Sam.
- Original Message -
From: "Alex Lee" 
To: 
Sent: Tuesday, July 03, 2001 1:29 AM
Subject: Re: ISDN B Channel Disconnecting Cont... [7:10596]


> If I read it correctly, it seems the command 'dialer load-threshold 1'
will
> not bring up addtional link anymore :-
>
> Quote
> When Multilink PPP is configured and you want a multilink bundle to be
> connected indefinitely, use the dialer idle-timeout command to set a very
> high idle timer. (The dialer load-threshold 1 command no longer keeps a
> multilink bundle of n links connected indefinitely and the dialer
> load-threshold 2 command no longer keeps a multilink bundle of two links
> connected indefinitely.)
> Unquote
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/d
> ial_c/dcprt2/dcppp.htm
>
>
>
>
>
> "Sam Deckert" wrote in message ...
> >Here is the debug isdn events output from when the 1700 disconnects:
> >
> >clarendon2-gw#
> >04:14:10: ISDN BR0: Event: Hangup call to call id 0x801E
> >04:14:10: ISDN BR0: process_disconnect(): call id 0x801E, call type is
> DATA,
> >b_idb 0x809D7DF8, ces 1, cause Normal call clearing(0x10)
> >04:14:10: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from
> 0353324231
> >clarendon, call lasted 20 seconds
> >04:14:49400989532: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
> >04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
> >04:14:47244640267: %LINK-3-UPDOWN: Interface BRI0:2, changed state to
down
> >04:14:49398792589: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
> >04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
> >
> >
> >Here is the debug isdn events output from the 2611 side of things:
> >05:12:32225367844: ISDN BR0/1: received HOST_DISCONNECT call_id 0x25
> >05:12:30064771072: ISDN BR0/1: Event:  Call to  was hung up.
> >05:12:32225367716: ISDN BR0/1: process_disc_ack(): call id 0x25, ces 1,
> call
> >type DATA
> >05:12:30906921739: %ISDN-6-DISCONNECT: Interface BRI0/1:2  disconnected
> from
> >unknown , call lasted 20 seconds
> >05:12:3871552: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to
> down
> >05:12:3862421: ISDN BR0/1: received HOST_DISCONNECT_ACK call_id 0x25
> >05:12:30064771072: ISDN BR0/1: HOST_DISCONNECT_ACK: call type is DATA
> >
> >I am still working on it!  Thought it might be the fast-idle timer, so
made
> >it
> >a large value, to no avail.
> >
> >Thanks again if anyone can help!
> >
> >Sam.
> >
> >
> >- Original Message -
> >From: Sam Deckert
> >To: [EMAIL PROTECTED]
> >Sent: Monday, July 02, 2001 3:09 PM
> >Subject: ISDN B Channel Disconnecting
> >
> >
> >Hello everyone,
> >
> >I am having a bit of an ISDN related problem at the moment and was
> wondering
> >if anyone is able 

Re: ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-01 Thread Sam Deckert

I just did a debug ppp error on both routers when dialling in, however did
not have anything come up - so not sure if the problem is with ppp.  Bugger!

Here was the output:

1700 (calling):
05:51:64424509440: %LINK-3-UPDOWN: Interface BRI0:2, changed state to up
05:51:35: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from 0353324231
clarendon, call lasted 20 seconds
05:51:150323855364: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down

2611 (called):
06:48:11: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to up
06:48:133143986184: %ISDN-6-DISCONNECT: Interface BRI0/1:2  disconnected
from unknown , call lasted 20 seconds
06:48:135302086656: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to
down

- Original Message -
From: "Sam Deckert" 
To: "Tony Medeiros" ; 
Sent: Monday, July 02, 2001 4:54 PM
Subject: Re: ISDN B Channel Disconnecting Cont... [7:10596]


> Thanks Tony,
>
> I thought that the ppp authentication was going ok, as the first channel
is
> always connected, however it is only the second channel that is
disconnected
> after 20 secs.
>
> I was looking at the output from the debug commands you suggested, and saw
> the following on the router being called:
>
> 06:28:36: BR0/1:2 PPP: Phase is ESTABLISHING, Passive Open
> 06:28:36: BR0/1:2 LCP: State is Listen
> 06:28:38: BR0/1:2 LCP: TIMEout: State Listen
>
> Does this mean that the router being called is listening for the first
> authentication from the client, however times out?  I guess what could be
> happening is that CHAP disconnects the call after 20secs of attempting to
> challenge???
>
> Here is the output from "debug PPP authen" and "debug PPP negotiation" on
> each router though.  Pease let me know if you see anything funny - I am
> searching on CCO to try and find out
>
> Sam.
>
> 1700 (calling) router:
>
> 05:31:180388626431: %LINK-3-UPDOWN: Interface BRI0:2, changed state to up
> 05:31:178241142757: BR0:2 PPP: Treating connection as a callout
> 05:31:178247820600: BR0:2 PPP: Phase is ESTABLISHING, Active Open
> 05:31:176093659168: BR0:2 LCP: O CONFREQ [Closed] id 55 len 35
> 05:31:180388626431: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> 05:31:176093659136: BR0:2 LCP:MagicNumber 0x03470C22 (0x050603470C22)
> 05:31:176093659136: BR0:2 LCP:MRRU 1524 (0x110405F4)
> 05:31:176093659136: BR0:2 LCP:EndpointDisc 1 Local
> (0x131001636C6172656E646F6E322D6777)
> 05:31:42: BR0:2 LCP: I CONFREQ [REQsent] id 55 len 31
> 05:31:42: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> 05:31:42: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
> 05:31:42: BR0:2 LCP:MRRU 1524 (0x110405F4)
> 05:31:42: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
> 05:31:42: BR0:2 LCP: O CONFACK [REQsent] id 55 len 31
> 05:31:42: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> 05:31:42: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
> 05:31:42: BR0:2 LCP:MRRU 1524 (0x110405F4)
> 05:31:42: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
> 05:31:43: BR0:2 LCP: TIMEout: State ACKsent
> 05:31:43: BR0:2 LCP: O CONFREQ [ACKsent] id 56 len 35
> 05:31:43: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> 05:31:43: BR0:2 LCP:MagicNumber 0x03470C22 (0x050603470C22)
> 05:31:43: BR0:2 LCP:MRRU 1524 (0x110405F4)
> 05:31:43: BR0:2 LCP:EndpointDisc 1 Local
> (0x131001636C6172656E646F6E322D6777)
> 05:31:44: BR0:2 LCP: I CONFREQ [ACKsent] id 56 len 31
> 05:31:44: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> 05:31:44: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
> 05:31:44: BR0:2 LCP:MRRU 1524 (0x110405F4)
> 05:31:44: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
> 05:31:44: BR0:2 LCP: O CONFACK [ACKsent] id 56 len 31
> 05:31:44: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> 05:31:44: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
> 05:31:44: BR0:2 LCP:MRRU 1524 (0x110405F4)
> 05:31:44: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
> 05:31:45: BR0:2 LCP: TIMEout: State ACKsent
> 05:31:45: BR0:2 LCP: O CONFREQ [ACKsent] id 57 len 35
> 05:31:45: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> 05:31:45: BR0:2 LCP:MagicNumber 0x03470C22 (0x050603470C22)
> 05:31:45: BR0:2 LCP:MRRU 1524 (0x110405F4)
> 05:31:45: BR0:2 LCP:EndpointDisc 1 Local
> (0x131001636C6172656E646F6E322D6777)
> 05:31:46: BR0:2 LCP: I CONFREQ [ACKsent] id 57 len 31
> 05:31:46: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> 05:31:46: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
> 05:31:46: BR0:2 LCP:MRRU 1524 (0x110405F4)
> 05:31:46: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
> 05:31:46: BR0:2 LCP: O CONFACK [ACKsent] id 57 len 31
> 05:31:46: BR0:2 LCP:AuthPr

Re: ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-01 Thread Sam Deckert
gicNumber 0x31E921E3 (0x050631E921E3)
05:32:00: BR0:2 LCP:MRRU 1524 (0x110405F4)
05:32:00: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
05:32:00: BR0:2 LCP: O CONFACK [ACKsent] id 64 len 31
05:32:00: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
05:32:00: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
05:32:00: BR0:2 LCP:MRRU 1524 (0x110405F4)
05:32:00: BR0:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
05:32:01: BR0:2 LCP: TIMEout: State ACKsent
05:32:01: BR0:2 LCP: State is Listen
05:32:01: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from 0353324231
clarendon, call lasted 20 seconds
05:32:4294967296: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down
05:32:4294967296: BR0:2 LCP: State is Closed
05:32:6451316372: BR0:2 PPP: Phase is DOWN


2611 (called) router:

06:28:36: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to up
06:28:36: BR0/1:2 PPP: Treating connection as a callin
06:28:36: BR0/1:2 PPP: Phase is ESTABLISHING, Passive Open
06:28:36: BR0/1:2 LCP: State is Listen
06:28:38: BR0/1:2 LCP: TIMEout: State Listen
06:28:38: BR0/1:2 LCP: O CONFREQ [Listen] id 55 len 31
06:28:38: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:38: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:38: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:38: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:40: BR0/1:2 LCP: TIMEout: State REQsent
06:28:40: BR0/1:2 LCP: O CONFREQ [REQsent] id 56 len 31
06:28:40: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:40: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:40: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:40: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:42: BR0/1:2 LCP: TIMEout: State REQsent
06:28:42: BR0/1:2 LCP: O CONFREQ [REQsent] id 57 len 31
06:28:42: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:42: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:42: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:42: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:44: BR0/1:2 LCP: TIMEout: State REQsent
06:28:44: BR0/1:2 LCP: O CONFREQ [REQsent] id 58 len 31
06:28:44: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:44: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:44: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:44: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:46: BR0/1:2 LCP: TIMEout: State REQsent
06:28:46: BR0/1:2 LCP: O CONFREQ [REQsent] id 59 len 31
06:28:46: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:46: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:46: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:46: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:48: BR0/1:2 LCP: TIMEout: State REQsent
06:28:48: BR0/1:2 LCP: O CONFREQ [REQsent] id 60 len 31
06:28:48: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:48: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:48: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:48: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:50: BR0/1:2 LCP: TIMEout: State REQsent
06:28:50: BR0/1:2 LCP: O CONFREQ [REQsent] id 61 len 31
06:28:50: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:50: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:50: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:50: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:53: BR0/1:2 LCP: TIMEout: State REQsent
06:28:53: BR0/1:2 LCP: O CONFREQ [REQsent] id 62 len 31
06:28:53: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:53: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:53: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:53: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:55: BR0/1:2 LCP: TIMEout: State REQsent
06:28:55: BR0/1:2 LCP: O CONFREQ [REQsent] id 63 len 31
06:28:55: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:55: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:55: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:55: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:57: BR0/1:2 LCP: TIMEout: State REQsent
06:28:57: BR0/1:2 LCP: O CONFREQ [REQsent] id 64 len 31
06:28:57: BR0/1:2 LCP:AuthProto CHAP (0x0305C22305)
06:28:57: BR0/1:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
06:28:57: BR0/1:2 LCP:MRRU 1524 (0x110405F4)
06:28:57: BR0/1:2 LCP:EndpointDisc 1 Local (0x130C01636C6172656E646F6E)
06:28:244813135884: %ISDN-6-DISCONNECT: Interface BRI0/1:2  disconnected
from unknown , call lasted 20 seconds
06:28:246971236352: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to
down
06:28:245705605152: BR0/1:2 LCP: State is Closed
06:28:246973732444: BR0/1:2 PPP: Phase is DOWN


- Original Message -
From: "Tony Medeiros" 
To: "Sam Deckert" ; 
Sent: Monday, July 02, 2001 4:19 PM
Subject: Re: ISDN B Channel Disconnecting Cont... [7:10596]

ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-01 Thread Sam Deckert

Here is the debug isdn events output from when the 1700 disconnects:

clarendon2-gw#
04:14:10: ISDN BR0: Event: Hangup call to call id 0x801E
04:14:10: ISDN BR0: process_disconnect(): call id 0x801E, call type is DATA,
b_idb 0x809D7DF8, ces 1, cause Normal call clearing(0x10)
04:14:10: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from 0353324231
clarendon, call lasted 20 seconds
04:14:49400989532: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
04:14:47244640267: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down
04:14:49398792589: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA


Here is the debug isdn events output from the 2611 side of things:
05:12:32225367844: ISDN BR0/1: received HOST_DISCONNECT call_id 0x25
05:12:30064771072: ISDN BR0/1: Event:  Call to  was hung up.
05:12:32225367716: ISDN BR0/1: process_disc_ack(): call id 0x25, ces 1, call
type DATA
05:12:30906921739: %ISDN-6-DISCONNECT: Interface BRI0/1:2  disconnected from
unknown , call lasted 20 seconds
05:12:3871552: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to down
05:12:3862421: ISDN BR0/1: received HOST_DISCONNECT_ACK call_id 0x25
05:12:30064771072: ISDN BR0/1: HOST_DISCONNECT_ACK: call type is DATA

I am still working on it!  Thought it might be the fast-idle timer, so made
it
a large value, to no avail.

Thanks again if anyone can help!

Sam.


- Original Message -
From: Sam Deckert
To: [EMAIL PROTECTED]
Sent: Monday, July 02, 2001 3:09 PM
Subject: ISDN B Channel Disconnecting


Hello everyone,

I am having a bit of an ISDN related problem at the moment and was wondering
if anyone is able to help.

I am connecting two sites together via 128k isdn, with one site having a 2611
and the other a 1700.

I have the two sites permanently connected fine with the first B channel,
however whenever I issue the "dialer load-threshold 1 either" command one
each
router to always have the 2nd B channel up, the second B channel connects and
remains connected for 20 seconds exactly before disconnecting.  The 1st B
channel remains connected regardless.

I have tried changing the idle-timeout values to no avail, and just cant
figure it out.

I guess it is probably something simple, but just cant work it out.

Here is the BRI config of the 2611:

username clarendon2-gw password 7 094E1B040D0210
!
hostname clarendon
ip subnet-zero
no ip finger
!
ipx routing 0030.854f.c9e0
ipx gns-response-delay 1500
isdn switch-type basic-net3
!
!
interface BRI0/1
 ip unnumbered BRI0/0
 encapsulation ppp
 no ip mroute-cache
 dialer idle-timeout 200
 dialer enable-timeout 5
 dialer wait-for-carrier-time 15
 dialer map ip xxx.xxx.xxx.xxx name clarendon2-gw broadcast
 dialer map ipx FEEDBEEF.0002.1761.29dd name clarendon2-gw broadcast
 dialer load-threshold 1 either
 dialer-group 1
 ipx network FEEDBEEF
 no ipx route-cache
 ipx watchdog-spoof
 isdn switch-type basic-net3
 isdn calling-number 
 no fair-queue
 compress stac
 no cdp enable
 ppp authentication chap
 ppp multilink
!
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
no cdp run


Here is the config of the 1700:

hostname clarendon2-gw
!
username clarendon password 7 011153094F0C01
!
!
ipx routing 0002.1761.29dd
ipx gns-response-delay 1500
isdn switch-type basic-net3
!
interface BRI0
 ip unnumbered FastEthernet0
 encapsulation ppp
 dialer idle-timeout 200
 dialer map ip xxx.xxx.xxx.xxx name clarendon broadcast 
 dialer load-threshold 1 either
 dialer-group 1
 ipx network FEEDBEEF
 no ipx route-cache
 ipx watchdog-spoof
 isdn switch-type basic-net3
 no fair-queue
 compress stac
 no cdp enable
 ppp authentication chap
 ppp multilink
!
ip classless
no ip http server
!
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
no cdp run
!
no scheduler allocate
end


What do you think???  Any advice, suggestions welcome and most appreciated!

Thanks...

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10596&t=10596
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ISDN B Channel Disconnecting [7:10593]

2001-07-01 Thread Sam Deckert

Hello everyone,

I am having a bit of an ISDN related problem at the moment and was wondering
if anyone is able to help.

I am connecting two sites together via 128k isdn, with one site having a 2611
and the other a 1700.

I have the two sites permanently connected fine with the first B channel,
however whenever I issue the "dialer load-threshold 1 either" command one
each
router to always have the 2nd B channel up, the second B channel connects and
remains connected for 20 seconds exactly before disconnecting.  The 1st B
channel remains connected regardless.

I have tried changing the idle-timeout values to no avail, and just cant
figure it out.

I guess it is probably something simple, but just cant work it out.

Here is the BRI config of the 2611:

username clarendon2-gw password 7 094E1B040D0210
!
hostname clarendon
ip subnet-zero
no ip finger
!
ipx routing 0030.854f.c9e0
ipx gns-response-delay 1500
isdn switch-type basic-net3
!
!
interface BRI0/1
 ip unnumbered BRI0/0
 encapsulation ppp
 no ip mroute-cache
 dialer idle-timeout 200
 dialer enable-timeout 5
 dialer wait-for-carrier-time 15
 dialer map ip xxx.xxx.xxx.xxx name clarendon2-gw broadcast
 dialer map ipx FEEDBEEF.0002.1761.29dd name clarendon2-gw broadcast
 dialer load-threshold 1 either
 dialer-group 1
 ipx network FEEDBEEF
 no ipx route-cache
 ipx watchdog-spoof
 isdn switch-type basic-net3
 isdn calling-number 
 no fair-queue
 compress stac
 no cdp enable
 ppp authentication chap
 ppp multilink
!
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
no cdp run


Here is the config of the 1700:

hostname clarendon2-gw
!
username clarendon password 7 011153094F0C01
!
!
ipx routing 0002.1761.29dd
ipx gns-response-delay 1500
isdn switch-type basic-net3
!
interface BRI0
 ip unnumbered FastEthernet0
 encapsulation ppp
 dialer idle-timeout 200
 dialer map ip xxx.xxx.xxx.xxx name clarendon broadcast 
 dialer load-threshold 1 either
 dialer-group 1
 ipx network FEEDBEEF
 no ipx route-cache
 ipx watchdog-spoof
 isdn switch-type basic-net3
 no fair-queue
 compress stac
 no cdp enable
 ppp authentication chap
 ppp multilink
!
ip classless
no ip http server
!
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
no cdp run
!
no scheduler allocate
end


What do you think???  Any advice, suggestions welcome and most appreciated!

Thanks...

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10593&t=10593
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



SSH over Internet - secure? [7:10251]

2001-06-28 Thread Sam Deckert

Gday everyone,

Generally, do you feel that using SSH to administer a router over the
Internet is secure, assuming all other aspects of the router config are
secured?

Thanks for your input

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10251&t=10251
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Book Recommendations [7:10201]

2001-06-27 Thread Sam Deckert

Hey everyone,

I am currently studying for my CCNP, and should have it knocked off in a
couple of months.  For study material so far, I have pretty much just been
using the Cisco Press study guides and CCO.

I am just wondering if anyone has any recommendations for good books,
especially involving routing protocols such as OSPF/BGP/EIGRP, for someone
at the CCNP level looking towards gaining enough knowledge for the CCIE
written and eventually CCIE lab (gulp).  I am after not just a study guide,
but for more detailed info - not targetted at a specific exam but more to
increase the detail of my knowledge in these areas.

A couple that I am looking at (that you guys have talked about in this
list):
-Routing tcp/ip vol 2 by Cisco Press
-Top down network design by Priscilla

It would be great if you could make some suggestions as to what good books
you have found.

Thanks in advance!

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10201&t=10201
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to tell the difference beteween a 1600 and a 1600R [7:9943]

2001-06-26 Thread Sam Deckert

Check the image name from the sh ver - if it contains an 'm' it means run
from memory I think.

Here are the examples someone else used - you can see it from these:

IOS for 1600:

c1600-y-l.113-11b.bin


IOS for 1600R:

c1600-y-mz.120-9.bin


HTH,

Sam.

- Original Message -
From: "Raul F. Fernandez-WCOMM" 
To: 
Sent: Tuesday, June 26, 2001 1:38 AM
Subject: How to tell the difference beteween a 1600 and a 1600R series.
[7:9797]


> Dear Folks,
>
> Hope all is going well for everyone. I have a real quick question. From
the
> "show ver" is there a way to determine the difference between a 1600 and
> 1600R series routers. Also will a 1600R run regualr 1600 code? Thank you.
>
> Sincerely,
>
> Raul




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9943&t=9943
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Possible to span trunking port? [7:9506]

2001-06-22 Thread Sam Deckert

Thanks Mike!

Yeah, I was having a bit of a debate about that with a friend of mine - we
were wondering whether the switch would be smart enough to remove the
trunking encapsulation when copying the traffic from the trunk port to the
destination spanned port (a non-trunked port).

What do you think?

Thanks for your help!!

Sam.

- Original Message -
From: "Michael L. Williams" 
To: ""Sam Deckert"" 
Sent: Saturday, June 23, 2001 8:13 AM
Subject: Re: Possible to span trunking port? [7:9506]


> I don't see why that would be a problem except if your protocol
> analyzer doesn't understand ISL or 802.1q, then it won't understand the
> frames.
>
> Mike W.
>
> - Original Message -
> From: "Sam Deckert" 
> Newsgroups: groupstudy.cisco
> Sent: Friday, June 22, 2001 8:29 AM
> Subject: Possible to span trunking port? [7:9506]
>
>
> > Hey all
> >
> > Just wondering if anyone knows if it is possible to span a trunking port
> on
> > a 2924XL switch??
> >
> > Thanks!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9593&t=9506
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Possible to span trunking port? [7:9506]

2001-06-22 Thread Sam Deckert

Hey all

Just wondering if anyone knows if it is possible to span a trunking port on
a 2924XL switch??

Thanks!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9506&t=9506
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Span uplink port? [7:9280]

2001-06-20 Thread Sam Deckert

Hey everyone

Just wondering if it is possible to span a trunking uplink port on a 2924XL
switch?  We need to analyse the traffic going from the switch to the router
(we will be routing between VLANs).

Actually, what we are going to try and do is capture traffic coming from the
Internet -> router -> switch -> pcs.  The client wants to be able to bill
people in his building according to Internet usage.

Has anyone come across any software that could do this sort of thing out of
the box?  Just montior how much traffic is received by a certain address
range??

Thanks for any help you guys are able to provide!!

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9280&t=9280
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 801 ERROR urgent [7:8826]

2001-06-16 Thread Sam Deckert

try the following:

conf t
no service config

hth!

Sam.

- Original Message -
From: "Manoj Sekhar" 
To: 
Sent: Saturday, June 16, 2001 10:35 PM
Subject: 801 ERROR urgent [7:8826]


> Hi all,
>
> I am getting the following error when I boot up the 801 router.
>
> %Error opening tftp://255.255.255.255/network-confg (Socket error)
> %Error opening tftp://255.255.255.255/cisconet.cfg (Socket error)
> %Error opening tftp://255.255.255.255/routera-confg (Socket error)
> %Error opening tftp://255.255.255.255/routera.cfg (Socket error)
>
> The output of the 801 boot seqence and config is as given below.
>
> Please help.
>
> TinyROM version 1.4(1)
> 19:38 11/07/00
> Copyright (c) 1998-2000 by cisco Systems, Inc.
> All rights reserved.
>
> POST  OK.  4MB DRAM, 8MB Flash.
>
> Accessing flash:c800-y6-mw.121-3.XG2
>
> Booting "c800-y6-mw.121-3.XG2" ...,
>   Restricted Rights Legend
>
> Use, duplication, or disclosure by the Government is
> subject to restrictions as set forth in subparagraph
> (c) of the Commercial Computer Software - Restricted
> Rights clause at FAR sec. 52.227-19 and subparagraph
> (c) (1) (ii) of the Rights in Technical Data and Computer
> Software clause at DFARS sec. 252.227-7013.
>
>cisco Systems, Inc.
>170 West Tasman Drive
>San Jose, California 95134-1706
>
>
>
> Cisco Internetwork Operating System Software
> IOS (tm) C800 Software (C800-Y6-MW), Version 12.1(3)XG2, EARLY
> DEPLOYMENT RELEASE SOFTWARE (fc1)
> TAC:Home:SW:IOS:Specials for info
> Copyright (c) 1986-2000 by cisco Systems, Inc.
> Compiled Mon 13-Nov-00 17:27 by detang
> Image text-base: 0x000EE000, data-base: 0x00654000
>
> Cisco C801 (MPC850) processor (revision 1) with 43464K bytes of virtual
> memory.
> Processor board ID JAD05030E7A
> CPU part number 0x2101
> Bridging software.
> Basic Rate ISDN software, Version 1.1.
> 1 Ethernet/IEEE 802.3 interface(s)
> 1 ISDN Basic Rate interface(s)
> 4M bytes of physical memory (DRAM)
> 8K bytes of non-volatile configuration memory
> 8M bytes of flash on board (4M from flash card)
>
> %Error opening tftp://255.255.255.255/network-confg (Socket error)
> %Error opening tftp://255.255.255.255/cisconet.cfg (Socket error)
> %Error opening tftp://255.255.255.255/routera-confg (Socket error)
> %Error opening tftp://255.255.255.255/routera.cfg (Socket error)
>
>
> Press RETURN to get started!
>
>
> 00:00:21: %LINK-3-UPDOWN: Interface Ethernet0, changed state to up
> 00:00:22: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0,
> changed state to up
> 00:00:25: %LINK-5-CHANGED: Interface BRI0, changed state to
> administratively down
> 00:00:25: %SYS-5-CONFIG_I: Configured from memory by console
> 00:00:26: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0, changed
> state to down
> 00:00:26: %SYS-5-RESTART: System restarted --
> Cisco Internetwork Operating System Software
> IOS (tm) C800 Software (C800-Y6-MW), Version 12.1(3)XG2, EARLY
> DEPLOYMENT RELEASE SOFTWARE (fc1)
> TAC:Home:SW:IOS:Specials for info
> Copyright (c) 1986-2000 by cisco Systems, Inc.
> Compiled Mon 13-Nov-00 17:27 by detang
> 00:00:26: %LINK-5-CHANGED: Interface Ethernet0, changed state to
> administratively down
> 00:00:27: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0,
> changed state to down
>
> RouterA#sh run
> Building configuration...
>
> Current configuration:
> !
> version 12.1
> service config
> no service pad
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname RouterA
> !
> boot config flash:nvram
> enable secret 5 $1$nTbn$GQVW3zqE.sEBllYS0y6Bt0
> enable password cisco
> !
> ip subnet-zero
> !
> isdn switch-type basic-net3
> !
> interface Ethernet0
>  no ip address
>  shutdown
>  no cdp enable
> interface BRI0
>  no ip address
>  shutdown
>  isdn switch-type basic-net3
>  no cdp enable
> no ip http server
> ip classless
> dialer-list 1 protocol ip permit
> dialer-list 1 protocol ipx permit
> bridge 1 protocol dec
> line con 0
>  exec-timeout 0 0
>  stopbits 1
> line vty 0 4
>  password cisco
>  login
> no rcapi server
> end




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8828&t=8826
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: True Throughput on ISDN and Frame Relay [7:8445]

2001-06-13 Thread Sam Deckert

Would frame-relay also be full-duplex then??

Thanks..

Sam.
- Original Message -
From: "Brian" 
To: 
Sent: Thursday, June 14, 2001 12:48 PM
Subject: Re: True Throughput on ISDN and Frame Relay [7:8445]


> Ok, heres a url showing it to be full duplex, it took awhile to find.
>
> http://www.cisco.com/univercd/cc/td/doc/pcat/150.htm
>
> Brian "Sonic" Whalen
> Success = Preparation + Opportunity
>
>
> On Wed, 13 Jun 2001, [EMAIL PROTECTED] wrote:
>
> > On Wed, 13 Jun 2001, Swart Douwe wrote:
> >
> > > On a 64K dedicated ISDN line, copying a file across, we receive a
> > throughput
> > > of around 10kbps.  I assume that the fact that we are getting 10K
rather
> > > than closer to 64K is due to encapsulation and latency etc etc.
> >
> > this SOUNDS like a bits vs bytes issue...
> >
> > on a transfer, you are getitng ~10kBytes (big B) per second? Or
10kbits/s
> > (little b)
> >
> > 8 bits in a byte...a "64k" ISDN is 64kbits..not 64kBytes.
> >
> >
> > flat out you should see about 8kBytes per second across that line.
> >
> > (for reference you'd get 64kBytes on a 512k link.)
> >
> > If you really are only getting 10kbits across an unloaded line, I'd
start
> > looking for serious line or modem issues at one or both ends.
> > david
> >
> > ---
> > david raistrick (deep in the south georgia woods)
> > [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=8471&t=8445
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Weird DHCP/VLAN solution suggestions wanted!! [7:6579]

2001-05-31 Thread Sam Deckert

Thanks for all your answers guys!  Its now all goodI checked out the RFC
as someone suggested earlier in this group as well.

Thanks!!

- Original Message -
From: "Chuck Larrieu" 
To: 
Sent: Friday, June 01, 2001 12:06 AM
Subject: RE: Weird DHCP/VLAN solution suggestions wanted!! [7:6579]


> A comment or two within:
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> Jeroen Timmer
> Sent: Thursday, May 31, 2001 2:03 AM
> To: [EMAIL PROTECTED]
> Subject: RE: Weird DHCP/VLAN solution suggestions wanted!! [7:6579]
>
> We have a configuration at our company that has the same configuration as
> you just described.
> But somewhere along the line .. This doesn't seem to work that well.
>
> We got about 4 vlans, all vlan interfaces have an ip helper address to our
> DHCP server. Problem is that 8 out of 10 times, a DHCP client doesn't get
an
> ip address. We used an Windows NT server as DHCP but also Nortel's NetID.
> Both systems give the same problems.
> Some times a user moves from one vlan to the other but gets an ip address
> from the old vlan he was in before he did a DHCP request for his new VLAN.
>
> CL: unfortunately, windoze does not release ip addresses upon shutdown.
> Windows machines tend to retain the ip address acquired as long as the
lease
> time has not expired. And sometimes even longer. I've run into problems
with
> mobile users, who upon returning to the office find themselves using and
ip
> address that has been reassigned. This is a windows problem, a "feature"
if
> you will.
>
> We have been trying to find the solution but didn't succeed sofar, maybe
> somebody had this before and is willing to share it with me.
>
> We use a Cisco cat 6500 to handle to forwarding to the DHCP server and the
> VLAN routing, as access switches we have Cisco cat 3500.
>
> CL: I ask because I do not know: does the "router" function of the 65xx
> actually behave the way it is supposed to?
>
>
> Thnx in advance,
>
> JT
>
> -Original Message-
> From: Pawel Sikora [mailto:[EMAIL PROTECTED]]
> Sent: donderdag 31 mei 2001 10:49
> To: [EMAIL PROTECTED]
> Subject: Re: Weird DHCP/VLAN solution suggestions wanted!! [7:6579]
>
>
> - Original Message -
> From: "Sam Deckert"
>
> > The problem is the client wants to use DHCP, so that people in the
> > offices can simply plug in and away they go.  But how would you go
> > about implementing a DHCP server in this situation??  In order to
> > allocate an address from the appropriate range, the DHCP server needs
> > to be aware of
> the
> > VLAN that the client DHCP request came from.  I have not been able to
> > find
> a
> > DHCP server that has this capability whatsoever.  I am sure this has
> > been done before - does anyone know how or have any suggestions??
>
> At the edge of each VLAN, an instance
> of router subinterface is obviously needed.
> You can configure at each subinterface
> ip helper address  pointing to a real dhcp
> server located anywhere.
> Router then forwards any dhcp requests
> broadcasted by stations in vlans with
> apopriate subnet  info, that dhcp server can
> use a defined scope for each vlan.
> Server than answers with lease data to the
> requestor via directed broadcast.
> (im not sure if such way)
>
> For example NT dhcp server service
> works flawlessy with such topology,
> with many different scopes.
>
> Pawel/
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6685&t=6579
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Weird DHCP/VLAN solution suggestions wanted!! [7:6579]

2001-05-31 Thread Sam Deckert

Hello everyone,

Just wondering if anyone out there has come across this same issue:

I am currently working on a site where each office in the building (29
offices) will be connected to a pair of 2924XL switches, and each office
will also be in its own vlan (and therefore have its own network, routed
between at the router).

The problem is the client wants to use DHCP, so that people in the offices
can simply plug in and away they go.  But how would you go about
implementing a DHCP server in this situation??  In order to allocate an
address from the appropriate range, the DHCP server needs to be aware of the
VLAN that the client DHCP request came from.  I have not been able to find a
DHCP server that has this capability whatsoever.  I am sure this has been
done before - does anyone know how or have any suggestions??

Any help much appreciated!  Please copy my email address in on the reply as
well as to the group.

Thanks!

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6579&t=6579
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



1601/1720 Serial Interface Question [7:4257]

2001-05-11 Thread Sam Deckert

Hello Everyone...

Just wondering if anyone can confirm whether the serial interface on a 1601
has the same physical plug as a WIC-1T serial module for a 1720  Are
they both DB-60??

Thanks!!

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4257&t=4257
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco IOS Question [7:2545]

2001-04-30 Thread Sam Deckert

Will the IP IOS  that comes with a rotuer as standard route IPX though??

Thanks Jason

sam.
- Original Message -
From: "Jason Roysdon" 
To: 
Sent: Tuesday, May 01, 2001 9:45 AM
Subject: Re: Cisco IOS Question [7:2545]


> Actually, IP IOS still costs $15 (at least according to my sales folks).
It
> may ship with the router, but you're still supposed to purchase the IOS.
>
> --
> Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> List email: [EMAIL PROTECTED]
> Homepage: http://jason.artoo.net/
>
>
>
> ""Vincent Chong""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Generally,  IP is come with Router free.
> >
> > Generally speaking, different IOS has different feautre.
> >
> > You need to order IP/IPX feature set for cisco 2650 series at least,
IOS
> is
> > more expensive than the
> > router if you order from cisco partner.
> >
> > hope this help
> > Vincent
> >
> > ""Sam Deckert""   Hello everyone!
> > >
> > > Just wondering if someone could explain the difference between the
> > different
> > > IOS Feature Packs.
> > >
> > > Ie.  What is the difference between IP Only, IP Plus, IP/Firewall etc
> etc.
> > >
> > > Do you know of a site that compares the capabilities of each?  I have
> been
> > > looking on the Cisco website with no luck so far
> > >
> > > Also, I am looking at buying a 2651 router, and was just wondering if
> the
> > > IOS that comes with the router is capable of routing IPX as well as
IP.
> > How
> > > expensive is it to buy additional software if it is not supported??
> > >
> > > thanks
> > >
> > > Sam.
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2692&t=2545
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco IOS Question [7:2545]

2001-04-30 Thread Sam Deckert

Thanks Jason...

The actual requirements for what I need to do are:
-tunnel IP traffic across the net between two locations, security is not a
great concern.
-route IP and IPX traffic internally on the network where the router will be
based.  No IPX traffic needs to go through the tunnel.

What sort of IOS feature set would you suggest to do this?  I am looking at
using L2TP between the two sites.  From my understanding (so far!) IPSec
encrypts the data going across the tunnel, and I guess would not really be
necessary in my situation.  Is it possible just to purely use L2TP?  Any
other suggestions??

Also, once the tunnel is established, will users on a private network at one
location be able to ping a device on a private network at the other location
through the tunnel transparently??

Thanks again for all your help!!

sam.

- Original Message -
From: "Jason Roysdon" 
To: 
Sent: Tuesday, May 01, 2001 10:32 AM
Subject: Re: Cisco IOS Question [7:2545]


> IPSEC software is not cheap, especially 3DES.  Doubling the cost sounds
out
> of line.  Just be aware that IPSEC is IP based and doesn't support IPX
> (you'd have to do some sort of tunneling to have it go via IP).  I suggest
> upgrading a server to NetWare 5 at each site and using it to tunnel
anything
> that needs legacy IPX support.  Our NetWare engineers do this without
> problems (I just have to handle the easy Cisco IP router side... if I can
> ping from one LAN to another, my job is done, hehee).
>
> --
> Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> List email: [EMAIL PROTECTED]
> Homepage: http://jason.artoo.net/
>
>
>
> ""Sam Deckert""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Thanks Vincent...
> >
> > Yeah, that was one of the reasons I was asking the question - I was
> looking
> > at getting an IP/IPX etc feature set, maybe even one with support for
> IPSec,
> > however it was going to cost more than the router through my reseller!!!
> > Is this right???  Is there some other legal way to get the software I
> > require without it doubling the cost of the rotuer??
> >
> > Thanks again
> >
> > - Original Message -
> > From: "Vincent Chong"
> > To:
> > Sent: Monday, April 30, 2001 8:38 PM
> > Subject: Re: Cisco IOS Question [7:2545]
> >
> >
> > > Generally,  IP is come with Router free.
> > >
> > > Generally speaking, different IOS has different feautre.
> > >
> > > You need to order IP/IPX feature set for cisco 2650 series at least,
> IOS
> > is
> > > more expensive than the
> > > router if you order from cisco partner.
> > >
> > > hope this help
> > > Vincent
> > >
> > > ""Sam Deckert""   Hello everyone!
> > > >
> > > > Just wondering if someone could explain the difference between the
> > > different
> > > > IOS Feature Packs.
> > > >
> > > > Ie.  What is the difference between IP Only, IP Plus, IP/Firewall
etc
> > etc.
> > > >
> > > > Do you know of a site that compares the capabilities of each?  I
have
> > been
> > > > looking on the Cisco website with no luck so far
> > > >
> > > > Also, I am looking at buying a 2651 router, and was just wondering
if
> > the
> > > > IOS that comes with the router is capable of routing IPX as well as
> IP.
> > > How
> > > > expensive is it to buy additional software if it is not supported??
> > > >
> > > > thanks
> > > >
> > > > Sam.
> > > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > > Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2689&t=2545
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco IOS Question [7:2545]

2001-04-30 Thread Sam Deckert

Thanks Vincent...

Yeah, that was one of the reasons I was asking the question - I was looking
at getting an IP/IPX etc feature set, maybe even one with support for IPSec,
however it was going to cost more than the router through my reseller!!!
Is this right???  Is there some other legal way to get the software I
require without it doubling the cost of the rotuer??

Thanks again

- Original Message -
From: "Vincent Chong" 
To: 
Sent: Monday, April 30, 2001 8:38 PM
Subject: Re: Cisco IOS Question [7:2545]


> Generally,  IP is come with Router free.
>
> Generally speaking, different IOS has different feautre.
>
> You need to order IP/IPX feature set for cisco 2650 series at least,  IOS
is
> more expensive than the
> router if you order from cisco partner.
>
> hope this help
> Vincent
>
> ""Sam Deckert""   Hello everyone!
> >
> > Just wondering if someone could explain the difference between the
> different
> > IOS Feature Packs.
> >
> > Ie.  What is the difference between IP Only, IP Plus, IP/Firewall etc
etc.
> >
> > Do you know of a site that compares the capabilities of each?  I have
been
> > looking on the Cisco website with no luck so far
> >
> > Also, I am looking at buying a 2651 router, and was just wondering if
the
> > IOS that comes with the router is capable of routing IPX as well as IP.
> How
> > expensive is it to buy additional software if it is not supported??
> >
> > thanks
> >
> > Sam.
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2650&t=2545
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco IOS Question [7:2545]

2001-04-30 Thread Sam Deckert

Hello everyone!

Just wondering if someone could explain the difference between the different
IOS Feature Packs.

Ie.  What is the difference between IP Only, IP Plus, IP/Firewall etc etc.

Do you know of a site that compares the capabilities of each?  I have been
looking on the Cisco website with no luck so far

Also, I am looking at buying a 2651 router, and was just wondering if the
IOS that comes with the router is capable of routing IPX as well as IP.  How
expensive is it to buy additional software if it is not supported??

thanks

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2545&t=2545
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Internet Tunneling [7:2544]

2001-04-30 Thread Sam Deckert

Hello everyone

Could someone please explain how I would go about connecting two private
networks (behind two routers, each connected to the internet) over the
Internet using some form of Tunnelling?

Is there any special IOS release I need?  Any special hardware?  Security is
not a great concern.  I have been looking into L2TP, am I on the right
track??

Thanks for any help you can provide!

Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2544&t=2544
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Frame-relay traffic shaping with custom queuing

2001-03-12 Thread Sam Deckert

Hello everyone,

It has been good listening to all of you, I have learnt a lot!

Just wondered if anyone has any thoughts on a problem I am working on at the
moment.

It involves a frame-relay network here in Australia.  It consists of a
hub-and-spoke topology - one central site connected to all other sites using
sub-interfaces with point-to-point links.

Since this network was setup, the users have been complaining of slow
responses when using applications such as Telnet or Citrix.  It appears that
Lotus Notes replication traffic is hogging the links and causing these
delays.

What I am looking at doing is using frame-relay traffic shaping with
traffic-rate throttling and custom queuing.  I have identified the protocols
and ports that need high priority, however am a bit unsure as to how to
allocate the byte-count values.

Apparently if the byte-count is too high then the router will service one
particular queue for too long and will cause delays to other queues.  I am
wondering what would be a reasonable byte-count in order for this not to
happen.

The link that I will be testing this on initially has a CIR of 192kbps.  I
was going to setup three queues, one for telnet, one for citrix and one
default for everything else (other traffic consists of Notes
mail/replication, NT domain replication).

What proportion of the bandwidth should I give to each protocol?  I was
thinking about 1/3 for each queue, as if a queue's reserved bandwidth is not
being fully used other queues can use itany thoughts?  If anyone could
give me some idea as to what byte-counts would be ok to use on this kind of
link, that would be great.  Any other suggestions/comments would also be
good.

In calculating the byte-count, I have found the average citrix frame size to
be about 120bytes, and the average telnet frame size to be about 80bytes.

This is my first real job involving Cisco - I am in my last year at
University.

Thankyou for reading all this!  Hope you can help!

Sam.

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]