Re: 775 ACCESS LIST

2000-08-04 Thread Sasha Milic

 jack wrote:
 
 Does any one know if there are any access lists to configure on
 the cisco 775 Isdn router? (I have a cisco 775 for the connection
 to the Internet and I want to block  ICQ  from my LAN)

Yes, there are filters. Take a look at 'set ip filter',
'reset ip filter' and 'show ip filter' command. All 3 are
usable in profile and global mode.

But, I'm not sure that you will succeed in blocking ICQ.

Sasa

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco 3620 router ports

2000-08-04 Thread Sasha Milic

Frank Wells wrote:
 
 I have been looking on CCO to get the factory specs of a 3620
 router but it is not very clear what interfaces it ships with.

Hi Frank,

3620 and 3640 don't have any interfaces built-in. You have to order
everything. 3660 has built-in 10/100 Mbps ethernet.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FLASH upgrade question

2000-08-03 Thread Sasha Milic

John Neiberger wrote:
 
 I'm going to be adding 8 MB of FLASH to a 2520 that already has 8 MB.  Will
 adding the new SIMM cause me to lose the IOS image currently residing in the
 existing SIMM?  I suppose this is a moot question because I'll be upgrading
 the IOS immediately afterward, but I'm curious about this.

Hi John,

you won't loose image that is already in IOS. But, when you
boot router you will have two partitions. You will notice in
config

partition flash 2 8 8

To make it one 16 MB partition you should go into boot-helper
IOS (config-register 0x2101), then delete flash, make it one
partition, and after that load new IOS. Before reloading router,
set config register to 0x2102.

Sasa, CCNP

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: about AS5300

2000-08-01 Thread Sasha Milic

xuhaicheng wrote:
 
 1.how can i verify the all E1 channel from 1 to 31 is available in the as5300

show isdn service

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: The As5300 Module

2000-07-17 Thread Sasha Milic

rucha wrote:
 
   Can anyone give me the detail information about the "AS53-E1-60DM"
   which is the modem module of the AS5300,cisco decript the "60 MICA
   Modems_, 1 MICA CC and 1 Quad E1/PRI Card",I don't know what's the
   "1MICA CC".Thanks!

MICA CC is 'mica carrier card'. It is card that fits into one (of two)
slots in as5300, and holds up to 120 mica modems.

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: E1 question

2000-07-13 Thread Sasha Milic

Edward Solomon wrote:
 
 To my knowledge, this is not strictly true. E1 timeslot 0 is
 always used for framing.

You can have E1 line with all 32 timeslots used for data. It
works, really, we have such lines. But, if the line is too
long, there could be problems and you could receive 'frame slip'
errors.

-- 

Pozdrav/Regards,
Sasa

== ___== Sasa Milic, Sys.Eng., CCNP
= / /  /   _ __  _/_ === EUnet Yugoslavia
 /---  /  /  /  )  /__/  /   Obilicev venac 4, 11000 Bgd, YU
=== (___  (__/  /  /  (__   (_ = phone: +381 11 311 9901
==== http://www.EUnet.yu
==  Connecting Europe since 1982  == e-mail: smilic@domain

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to get the running config of routers using SNMP

2000-07-13 Thread Sasha Milic

Chan Dovelet wrote:
 
 Can I use SNMP to get their config? What is the MIB id?

Variable is:


writeNet OBJECT IDENTIFIER ::= { lsystem 55 }

writeNet OBJECT-TYPE
  SYNTAX   DisplayString
  ACCESS   write-only
  STATUS   mandatory
  DESCRIPTION  "Write configuration to host using TFTP."
::= { lsystem 55 }

Usage:
==

Set variable 'writeNet.ip_address_of_tftp_server' to value 'tftpfile',
where tftpfile is file name into which the config will be saved. Keep
in mind that, depending on tftp server you are using, it may be required
that specified file already exist, with mode 0666 (on unix). It may be
different on your system, but on Solaris it is so.

In perl, with cmu snmp package, it would be:

# begin

$session = new SNMP::Session
   (
   DestHost  = "$Router_IP_Address"
   Community = "public",
   Timeout   = 1,
   Retries   = 3
   );
 
$session-set( 'writeNet.192.168.1.1', "router-confg" );

# end


Hope this helps.

Saša, CCNP

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IPSec Design Guide on CCO

2000-07-13 Thread Sasha Milic


Just found great book on CCO!

IPSec Design Guide - 2.2 MB, 444 pages. Enjoy !

http://www.cisco.com/cpropart/sync-src/ccstcp/cc/techno/protocol/ipsecur/ipsec/tech/ipsc_dg.pdf


Sasa

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Off topic: MX entry and ISP

2000-07-12 Thread Sasha Milic

 Suresh_Kumar wrote:
 
 How the MX entry and the www entry of a dns server go together when the
 mail server and the web hosting server are with two different ISPs of
 different locations.

Suresh,

no problems for that. DNS servers for the domain will be hosted
on the DNS servers of one provider. In zone file, there will be
records for www and for mail server. 'A' record for the www will
point to the provider's 'A' www server, and 'MX' record will point
to the provider's 'B' mail server.

Owner of the domain should tell provider's 'A' hostmaster what to
put into zone file for the domain.

-- 

Pozdrav/Regards,
Saša

== ___== Sasa Milic, Sys.Eng., CCNP
= / /  /   _ __  _/_ === EUnet Yugoslavia
 /---  /  /  /  )  /__/  /   Obilicev venac 4, 11000 Bgd, YU
=== (___  (__/  /  /  (__   (_ = phone: +381 11 311 9901
==== http://www.EUnet.yu
==  Connecting Europe since 1982  == e-mail: smilic@domain

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Adding more virtual terminal lines

2000-07-10 Thread Sasha Milic

 Chris McCoy wrote:
 
Does anyone know how to add more VTY lines in newer versions of IOS?
 One used to be able to specify more lines by specifying a higher number
 than the usual '4' in the range of the 'line vty' statement.  e.g. to make
 11 lines:

It works on mine AS5300/12.0

(config)#line vty 0 700
(config-line)#

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: aaa if-needed

2000-07-05 Thread Sasha Milic

Jim Bond wrote:
 
 "aaa authentication ppp if-needed: does not
 authenticate if user has already been authenticated on
 a TTY line". What does it mean?

You have two options for user authentication:
- PPP authentication PAP/CHAP (after PPP starts),
- Username/Password prompt on tty line.

In second case, when user enters her/his username and
password, there is no need for PPP authentication.
That is the meaning of above command. If the user
enters via tty line (for example, by specifying 'Open
terminal window' in Windows) she/he will be prompted
for username and password, and will be authenticated
on tty line, with, for example:

   line 1 240
 autoselect during-login
 autoselect ppp
 authorization exec use-radius
 login authentication use-radius


Consequently, there is no need for subsequent PPP
authentication.

Hope this helps.

Sasha, CCNP

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]