Re: slash 31 address
All what's mentioned here is absolutey right, however use of /31 is allowed in routing tables, for example. Assuming the case when 2 routers are dual homed to each other serial serial 0 & serial 1 of each. You want all the traffic to use serial 0 except 2 specific hosts (mission critical servers) to use serial 1 The way to achieve this is as follows: ip route 192.168.100.0 255.255.255.0 serial 0 ip route 192.168.100.20 255.255.255.254 serial 0 in that case if you check the routing table, you'd find a 192.168.100.20/31 entry :-) the same applies of course for /32 I'm not saying that this is so common, but i'm just saying that you might find a /31 address Regards Shahir ""Jeff McCoy"" <[EMAIL PROTECTED]> wrote in message 94mova$dik$[EMAIL PROTECTED]">news:94mova$dik$[EMAIL PROTECTED]... > > Michael... > /30 = 4 address (1st is network number, 2 & 3 host ip's, 4th is broadcast > address) > /31 = 2 address (1st is network number, 2nd is broadcast address) > no host ip's...this is not useful.. > /32 = 1 address (1 host address) i use this for loopbacks > > > ""Neil Schneider"" <[EMAIL PROTECTED]> wrote in message > 94mool$d33$[EMAIL PROTECTED]">news:94mool$d33$[EMAIL PROTECTED]... > > AFAIK you can only go as far as /30. > > > > Neil Schneider > > > > <[EMAIL PROTECTED]> wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > > > > > Hello good guys of the group, can anyone with the knowledge of ip/31, > help > > me? > > > please. > > > > > > I need to know what it is use for, and how it works, pls. > > > > > > Thanks in advance, > > > > > > Michael Taiwo. > > > > > > _ > > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com/list/cisco.html > > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > > > > > _ > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cat 6K error: "Module failed to restart "
On installing new (out of the box) WS-X6224-100FX-MT, 2 out of 3 modules gave me an error message of "Module failed to restart" when performing show module x, i receive: line power Failed Did anyone face a problem like that and could find a solution other than replacing the modules? Thanks Shahir _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Load-Balancing of two serial via same ISP
Mostly right, except the following: * The router will have 2 default routes and will load-balance between the connections regardless any difference in bandwidth, delay, etc.. Default route is a special case of static route after all. * For the inbound traffic, most probably the ISP will also add a new static entry for the new path, hence load-balance between 2 links, BGP is not recommended in this case, where the 2 links are connected to the same ISP. Shahir ""Brant Stevens"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I'm sure the guys on the list will correct me if I am wrong, but if you have > 2 serial connections on the same router, with the router having 2 default > routes (0.0.0.0/0), then it will load-balance between the connections, > provided the serial links are identical (bandwidth, delay, etc...) this > scenario of process-switching takes to most CPU utilization, so keep that in > mind... This will also only work for outbound connectivity... inbound > load-balancing requires the use of an EGP, like BGP4... > > -Brant > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > ±è±ÔÇü > Sent: Tuesday, November 21, 2000 3:30 AM > To: [EMAIL PROTECTED] > Subject: Load-Balancing of two serial via same ISP > > > Hi! Everyone... > I have something to ask you guys... If you have any information for this, > please don't hesitate to reply to me. > > I'm using the 2M Internet circuit via ISP, but I'm gonna add extra 2M > circuit via same ISP. > As you know well, we're subject to ISP config. ISP made "STATIC" config for > their customer, customer is only to > config "Default route". Consequently, I wanna use this two serial-line at > same time in "LOAD-BALANCING" > So, I wonder even though I make config for default route with new IP Address > whether no problem in LOAD- > BALANCING or not. > > If you have another good knowledge, could you reply to me ? > > Regards,. > KIM KYU HYUNG > > > _ > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > ___ > Why pay for something you could get for free? > NetZero provides FREE Internet Access and Email > http://www.netzero.net/download/index.html > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Stupid Cat 5xxx question
well, the cable is the same cisco RJ-45 cable used for any console. it's in fact "inverted" meaning pin1 attaches to pin 8 of the other side and so on. ""Elias Aggelidis"" <[EMAIL PROTECTED]> wrote in message 024801c05548$665ab200$[EMAIL PROTECTED]">news:024801c05548$665ab200$[EMAIL PROTECTED]... > NOPE ! > > It has an RJ-45 connector which you can use it > with both DB25 or DB9 connectors from Cisco and > a STRAIT cable NOT ROLLOVER > > > ELIAS > > > - Original Message - > From: "Timothy Metz" <[EMAIL PROTECTED]> > Newsgroups: groupstudy.cisco > To: <[EMAIL PROTECTED]> > Sent: Thursday, November 23, 2000 12:59 PM > Subject: Stupid Cat 5xxx question > > > > I've just read (and never noticed on the 5500 we have at work), that the > > 5xxx series has a RS-232 console connector (I assume this to mean DB9 or > > DB25) that requires the use of a rollover cable (it did not say null modem), > > so I guess that means I need two DB25/DB9 to RJ-45 connectors and a rollover > > between them to log on through the console port. > > > > Can someone please confirm. > > > > Happy Thanksgiving (to those who observe) > > > > Tim > > > > > > _ > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Stupid Cat 5xxx question
this is indeed right.. except that some people mix between rollover and cross-over, which is totally different as pin 1 & 2 attach to 3 & 6 respectively. That's why i meant to be as clear as possible by using the term "inverted" - Original Message - From: "Faxon, James" <[EMAIL PROTECTED]> To: "'Shahir Boshra'" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Thursday, November 23, 2000 5:37 PM Subject: RE: Stupid Cat 5xxx question > if pin 1 attaches to pin 8 and so on would this mean that it is in fact a > rollover cable?? plus i just ran into an issue with and external modem hook > up that required a rollover cable and in indeed we where able to use the > console cable for this. > > -Original Message- > From: Shahir Boshra [mailto:[EMAIL PROTECTED]] > Sent: Thursday, November 23, 2000 6:52 AM > To: [EMAIL PROTECTED] > Subject: Re: Stupid Cat 5xxx question > > > well, the cable is the same cisco RJ-45 cable used for any console. it's in > fact "inverted" meaning pin1 attaches to pin 8 of the other side and so on. > > > ""Elias Aggelidis"" <[EMAIL PROTECTED]> wrote in message > 024801c05548$665ab200$[EMAIL PROTECTED]">news:024801c05548$665ab200$[EMAIL PROTECTED]... > > NOPE ! > > > > It has an RJ-45 connector which you can use it > > with both DB25 or DB9 connectors from Cisco and > > a STRAIT cable NOT ROLLOVER > > > > > > ELIAS > > > > > > - Original Message - > > From: "Timothy Metz" <[EMAIL PROTECTED]> > > Newsgroups: groupstudy.cisco > > To: <[EMAIL PROTECTED]> > > Sent: Thursday, November 23, 2000 12:59 PM > > Subject: Stupid Cat 5xxx question > > > > > > > I've just read (and never noticed on the 5500 we have at work), that the > > > 5xxx series has a RS-232 console connector (I assume this to mean DB9 or > > > DB25) that requires the use of a rollover cable (it did not say null > modem), > > > so I guess that means I need two DB25/DB9 to RJ-45 connectors and a > rollover > > > between them to log on through the console port. > > > > > > Can someone please confirm. > > > > > > Happy Thanksgiving (to those who observe) > > > > > > Tim > > > > > > > > > _ > > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com/list/cisco.html > > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > > > _ > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > _ > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: TGIF follies....
For those who don't already know it, Radia Perlman in addition to writing this poem, she also created the Spanning Tree Algorithm. :-) ""McMasters, Eric"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I just received a copy of this from one of my co-workers and thought it was > pretty cool. I know some of you folks that have been around this field for > awhile have probably seen this, but for those who haven't seen this enjoy. > >Spanning Tree Fundamentals > > Algorhyme > I think that I shall never see > A graph more lovely than a tree. >A tree whose crucial property > Is loop-free connectivity. > A tree that must be sure to span > So packets can reach every LAN. > First, the root must be selected. >By ID, it is elected. > Least cost paths from root are traced. >In the tree, these paths are placed. > A mesh is made by folks like me, > Then bridges find a spanning tree. > -Radia Perlman > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Catalyst auxiliaryvlan command problem (long)
Hello All While configuring a series of Catalyst 5500 switches for a IP Telephony, when configuring the "set auxiliaryvlan" command, I received "Feature not supported for module X" (switch running 5.5(5)CatOS) However, as per the following CatOS 5.5 command reference, http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_5_5/cmd_ref/ set_po_r.htm#72550 (watch word wrap) This command is supposedly supported for all switching modules. I tried it on the following modules, all gave same result: WS-X5203 WS-X5213A WS-X5224 By investigating this problem further, I found out that the auxiliaryvlan option only runs for dot1q capable hardware, As per the following document. http://www.cisco.com/univercd/cc/td/doc/product/voice/ip_tele/network/dgcamp us.htm#xtocid1290622 Honestly, I read this note before, but I never related it to the Catalyst 5500 as I never imagined it'd be unable to handle dot1q trunking. So my questions are: 1) Was anyone here able to find a workaround for this limitation? Any firmware upgrade for the existing switching modules maybe? 2) Are there any other switching modules for the 5500 that are can handle dot1q? 3) Is there any way for supporting the auxiliaryvlan option other than the dot1q? A future plan for implementing this for the ISL for example? My last resort will be changing the network design, but I'd really prefer the auxiliaryvlan option. Thanks and Best Regards Shahir _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Off topic: ATM load balancing
Hello Everyone In the diagram below, supposing all the links are ATM's, is it possible to rely on ATM to accomplish load balancing when the traffic goes from A to D, i.e. load balance between B route & C route? My understanding is that since ATM is connection-oriented, all the session traffic must follow the same route, hence you have to depend on higher level protocol (i.e. TCP/IP) in order to load balance, but someone informed that this is an ATM feature.. Can anyone guide me to a tech document / white paper or anything? I'm really new to ATM. Thank you all Shahir ++ + A + === + B + ++ | | | | | | ++ + + C+ == + D + ++ + **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IP RIP V.1 in the LAB ?
can you please include the router configs? this problem sounds really interesting.. :-) "Phil Barker" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED]... > Hi Gang, >Three Routers in a triangle. Labelled Top, Left > and Right. Serial Connections between Top -> Left, and > Top -> Right. Ethernet connection between Left and > Right. Sniffer placed on Ethernet segment. > > The Top Router has 2 routes to the Ethernet segment > and is Load Balancing. > The Right Router is my problem. It only learns one > route to the network TOP->Left via the Serial Route, > why doesn't it learn this network via the Ethernet > Segment also ? > > Sniffer can see the network Top->left being advertised > by the Router left. debug on Router Right reveals > supressing Null Update ??? > > When I cut the link Top-Right the Network Top->Left is > eventually flushed out ??? > > I'm baffled, > > Can anyone help out ? > > Regards, > > Phil. > > > > Do You Yahoo!? > Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk > or your free @yahoo.ie address at http://mail.yahoo.ie > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Off Topic: Cisco Price List [7:15883]
Hello Group, Sorry for the Off topic posting, but I desperately need an updated Cisco price list. Can anyone please send it offline? Thanks in advance Shahir Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=15883&t=15883 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Off Topic: Cisco Price List [7:15883]
That's not accurate. I used to receive from Cisco (as a Cisco end-user) a monthly price list in my previous job. The standard price list is not so confidential, the partner's markup / share is confidential though. If that's really hard to get, can someone just answer me this simple question? If I need to buy an Access Server with 16 E1 PRI connections, which is cheaper? AS5400 or AS5800? My guess is 5400, but I was told that I'm wrong. Can anyone please verify this to me? Thank you once more. Shahir ""Donald B Johnson jr"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Thats impossible or highly not recommended, most of us here work for a > partner and pricing has a lot to do with your partner status. A general > price list could be obtained by Cisco. They will be happy to send someone > out. > > > > - Original Message - > From: "Shahir Boshra" > To: > Sent: Monday, August 13, 2001 9:17 AM > Subject: Off Topic: Cisco Price List [7:15883] > > > > Hello Group, > > > > Sorry for the Off topic posting, but I desperately need an updated Cisco > > price list. Can anyone please send it offline? > > Thanks in advance > > Shahir Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=15892&t=15883 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: RIPv2 [7:16105]
I don't believe RIP will solve your problem, even though RIP metric is only based on hop counts, any neighboring router will still "see" the 2 MSFC's with the same hop count, causing the same situation. I believe this is one of the rare cases when you "have" to manipulate the metric EIGRP uses. If you slightly change the bandwidth on each VLAN on one of the MSFC's (for the example, the one with HSPR least priority) to make it less favorable by EIGRP as well. Make sure to disable the "variance", by doing this, you're forcing EIGRP to only use the best route and not load share between non-equal paths. I hope this helps Shahir ""Thomas N."" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Here is my scenario: > > My CAT6509 has 2 supervisor1 and 2 MSFC1. It runs HSRP in the Hyrid mode. > On this box, I also run EIGRP and NAT. Every VLANs on the first msfc card > have higher priority and therefore in active mode. VLANs on 2nd card have > lower priority and therefore should be in standby mode. Here are the > problem: > > - In Hyrid mode of HSRP, both MSFCs on the same chassis will be active and > do the routing. > - EIGRP sees paths through these VLANs (on both MSFCs) with the EXACTLY same > metric and therefore does the load balancing. > - With the NAT (static) turned on on both MSFCs, translated (NATed) packets > get confused between outside and inside VLANs because of EIGRP load > balancing. > > I wonder if replacing EIGRP protocol with RIPv2 will solve the problem? > since RIPv2 metric is based on hop counts. Below is my configuration on 2 > MSFCs: > > -- > MSFC # 1 > > interface vlan 10 > ip address 10.10.100.1 255.255.0.0 > ip nat inside > standby 10 priority 100 > standby 10 ip 10.10.100.100 > > interface vlan 20 > ip address 10.20.100.1 255.255.0.0 > ip nat inside > standbly 20 priority 100 > standby 20 ip 10.20.100.100 > > interface vlan 30 > ip address 198.198.198.1 255.255.255.0 > ip nat outside > standby 30 priority 100 > standby 30 ip 198.198.198.100 > > Router EIGRP 200 > network 10.0.0.0 > no auto-summary > > - > > MSFC # 2 > > interface vlan 10 > ip address 10.10.100.2 255.255.0.0 > ip nat inside > standby 10 priority 50 > standby 10 ip 10.10.100.100 > > interface vlan 20 > ip address 10.20.100.2 255.255.0.0 > ip nat inside > standbly 20 priority 50 > standby 20 ip 10.20.100.100 > > interface vlan 30 > ip address 198.198.198.2 255.255.255.0 > ip nat outside > standby 30 priority 50 > standby 30 ip 198.198.198.100 > > Router EIGRP 200 > network 10.0.0.0 > no auto-summary > - > > Again, Thanks All! > > Thomas N. > > > > > ""Nigel Taylor"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Thomas, > > Yes... Yes.. I'll expand on my first "Yes" in > > saying that the load balancing would be dependent on the model router and > > what type of switching you were doing on the interface of the router. > > > > HTH > > > > Nigel.. > > > > - Original Message - > > From: Thomas N. > > To: > > Sent: Tuesday, August 14, 2001 10:31 PM > > Subject: RIPv2 [7:16105] > > > > > > > Hi All, > > > > > > I wonder if RIPv2 support load balancing? Does it choose path based on > > the > > > hop count only? Thanks All!!! > > > > > > Thomas Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=16135&t=16105 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE R/S Lab lead time in Brussels [7:16491]
Does anyone know what's the current lead time for booking the CCIE R/S lab in Brussels? TIA Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=16491&t=16491 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Multilink PPP [7:17367]
What's the type of E1 you're planning to use? Is there any E1 PRI in your scenario? I assume you're using point-to-point E1 however your configuration has references to dilaer profiles, which are irrelevent to permanent PPP connections. To configure 2 (dedicated, ppp) E1's as a Multilink bundle is very straight forward, however, PPP multilink is not the preferred solution and has many drawbacks. Why don't you just configure your (and your provider's) routers to use the 2 routes equally? Actually this will accomplish the same result you're aiming at, but you gain greater reliability. ""Muhammad Shakeel Shamsi"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi, >I am working on combining to E1's to work as one so that the upper layers > would see the bundle as a 4Mbps link with only one point to point IP at > least that's what cisco says, i read about it on Cisco and found some sample > configurations. I would like you guys to go through this setup and > opinionate on this before i try it on actual E1's !! . I will have to ask > my provider to configure at their end a similar configuration and also > conbine the 2E1's to be addressed by IP address. > > interface Serial6/0 > encapsulation ppp > no keepalive > dialer in-band > dialer idle-timeout 30 > dialer rotary-group 1 > pulse-time 1 > > interface Serial6/1 > no ip address > encapsulation ppp > no keepalive > dialer in-band > dialer idle-timeout 30 > dialer rotary-group 1 > pulse-time 1 > > interface Dialer1 > ip address 192.168.0.1 255.255.255.0 > encapsulation ppp > dialer in-band > dialer idle-timeout 30 > dialer map llc2 name RouterB > dialer map ip 1.1.1.2 name RouterB > dialer load-threshold 1 either > dialer-group 1 > ppp multilink > ppp authentication chap > > appn control-point NETA.ROUTERA > complete > > appn port DIAL Dialer1 > complete > > appn link-station ROUTERB > port DIAL > complete > > dialer-list 1 protocol ip permit > dialer-list 1 protocol llc2 permit Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=17370&t=17367 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BCRAN book?
I just passed BCRAN exam last Thursday, I used CIM, ISDN Access and Exam Cram "Remote Access", it's a compact book which maps directly with the course (and exam) outline. Very helpful. Regards Shahir Boshra Telecommunications Specialist USAID - Egypt <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello group, > > I want to know that which book for BCRAN is good? Should I use BCRAN by > cisco press...author: Catherine Paquet > Or new BCRAN book by Thomasby osborne (i assume) ??? > > Please let me know that which book is easy to understand the material? > > Thanks > Sabeen > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: bcran looms
Well, here you are: 62 questions, 90 minutes (my exam was 105 minutes, but probably because this is outside the US), no marking capability, once you answer a question you can't return back, passing score is 706 on a scale of 300 to 1000 as written on the score sheet (can anybody explain this scale method to me?) I had the exam 6 days ago and got 853, it was one of the very few fair exams. Good Luck. Shahir -- Shahir Boshra Telecommunications Specialist USAID - Egypt [EMAIL PROTECTED] Tel: +202-5165505 ext. 2436 Fax: +202-5164659 "Patrick Duggan" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Sorry for posting yet another exam info queston, but as yet the BCRAN > archive is limited. > I have this exam Fri, as yet i don't know:- no of questions, duration, > format i.e. marking > capability etc. Anybody out there help? Also positive i will slip, slide and > sweat on this but that is another story :-) thanks > Pat > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: two routers & EIGRP
Hi Alex I believe your config files would be helpful in this case, for example: Is the Fastethernet port configured for 10mb? what routes are you trying to exchange? are their respective interfaces up? (What I mean is that for example if your routers are connected through ethernet 0 and you want to announce networks connected to ethernet 1, ethernet 1 must be in up/up state. You can fool the interfaces by "no keepalive" interface sub-command if they're not attached to any device.) This can't possibly be a compatibility problem. Regards Shahir ""alex campbell"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hello ppl > > I have two routers, both connected to a standard 10mb hub. Both can ping > each other as can a PC which is also on this mini network. > > 1 is a 2501 with IOS 11.3 connected via ethernet > 1 is a 2620 with IOS 12.0 connected via fast ethernet > > I am trying to get these two to share routes via EIGRP but to no avail. Both > are set to routing process 1, both have routes..and (odd bit here) a network > monitor on the PC says that they are advertising routes! > but they do not seem to share routes > when i do show ip eigrp interface on the 2620 it does NOT list any info! > but when i do it on the 2501 it lists ethernet 0. > But I am doing the same thing for each router ! > > Is it incompatibility between 12.0 and 11.3, I find it difficult to believe > but someone has suggested it ? > Or am I missing something obvious ? > > Any help appreciated > Mark, > > > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CIPT beta
Hello Everyone I sat yesterday for the IP Telephony beta exam (9E1-569) and thought someone might be interested to know about it. I had 178 questions in 3 hours, no mark and return back as usual and NO fill in the blanks type of questions, just a couple of drag and drop questions. The exam was mainly covering CIPT 3.0, don't even dream about using CIPT 2.4 materials (which I did :-) ) It also covered uOne 4.2, earlier releases won't be helpful. I think that was it. Good luck. -- Shahir Boshra Telecommunications Specialist USAID - Egypt [EMAIL PROTECTED] Tel: +202-5165505 ext. 2436 Fax: +202-5164659 ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: F/R illegal mask question
You need to add the following command (in the global configuration mode) ip subnet-zero The problem is that you're trying to subnet the 10.0.0.0 network into a smaller subnet while you want to use the first subnet (subnet zero) which is not the default behavior for IOS prior to 12.0 Regards -- Shahir Boshra Telecommunications Specialist USAID - Egypt [EMAIL PROTECTED] Tel: +202-5165505 ext. 2436 Fax: +202-5164659 "Dan West" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Sorry, but I couldn't find the answer to this in the > groupstudy archives... > > 2500/2600 Router (can't recall exact model): IOS ver > 11.3.x > > Int s0/0 (module) > > encapsulation frame-relay > point-to-point > ip classless > > Not the exact copy, but you get the idea. We set up > the 10.0.0.1 address for the int, but it won't take > ANY subnet mask besides 255.0.0.0. > > Is this s/thing to do with the IOS? the F/R interface? > s/thing we didn't add? Did add incorrectly? > > Thanks! > > = > Dan West -- CCNA > > __ > Do You Yahoo!? > Kick off your party with Yahoo! Invites. > http://invites.yahoo.com/ > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
show ip eigrp timers
Is this another undocumented command? It doesn't apeer as an option in "show ip eigrp ?" -- Shahir Boshra Telecommunications Specialist USAID - Egypt [EMAIL PROTECTED] Tel: +202-5165505 ext. 2436 Fax: +202-5164659 ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: PIX versus Firewall-1 comparison
Well, I really expect some flame for my opinion, but I have some non-technical comments regarding checkpoint. OK, let's put it this way, I really don't feel comfortable around registering checkpoint server and sending them the registered IP address. I understand this is only meant for copyrighting purposes, but again it still doesn't make sense to me, they produced the S/W and they have all the IP addresses of the installed machines? I might be a bit paranoid here but... Anyway, I appreciate your opinion on this. -- Shahir Boshra Telecommunications Specialist USAID - Egypt [EMAIL PROTECTED] Tel: +202-5165505 ext. 2436 Fax: +202-5164659 "Ben Lovegrove" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Chuck, > > Absolutely, especially point number 3 - I would be very surprised if > either company said anything to the contrary! > > From time to time I play around on a Checkpoint box and although the > GUI is very easy to use, the only complaint I have heard several times > from those whose servers (e.g. collection stations) it protects is that > there are timeouts. On investigation these are hard to pin down. > > Regards, > Ben > --- Chuck Larrieu <[EMAIL PROTECTED]> wrote: > Hey, Ben, I have > recently sat in different seminars sponsored by > > Cisco and > > Checkpoint. From statements made by the presenters, I gathered that > > both > > companies agree on the following points: > > > > 1) Cisco PIX is far superior in terms of throughput. > > 2) Checkpoint GUI / management, particularly of multiple security > > domains, > > multiple firewalls, and policy management, is far superior to > > anything Cisco > > has. > > 3) Both companies maintain that their product is superior in terms of > > general firewall features and functionality. > > > > Is this your impression as well? > > > > Chuck > > > > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf > > Of Ben > > Lovegrove > > Sent: Monday, August 07, 2000 7:48 AM > > To: Phil Barker; cisco GroupStudy > > Subject: Re: PIX versus Firewall-1 comparison > > > > Phil, > > > > I would imagine that the preference for Firewall-1 was expressed > > because the administration of it is far more user friendly that a > > PIX. > > Admin of FW-1 can be carried out using a Windows GUI with all the > > rules > > laid out in glorious technicolour, while admin of a PIX involves a > > CLI > > (command line interface). > > > > But then again if you're a die-hard Cisco engineer you might think > > that > > Windows GUIs are a bit of a soft option, and that you prefer to do > > things in raw CLI fashion. > > > > Regards, > > Ben > > > > --- Phil Barker <[EMAIL PROTECTED]> wrote: > Hi Gang, > > > Does anyone know where I can get a decent white > > > paper comparing these two firewall solutions from a > > > neutral standpoint ? > > > > > > I've been in a meeting recently where it has been > > > claimed that we would always prefer Firewall-1 to PIX. > > > > > > Would anyone like to comment technically why this > > > should be ? > > > > > > Regards, > > > > > > Phil. > > > > > > = > Ben Lovegrove, CCNP > Redspan Solutions Ltd > http://www.redspan.com > Cisco: Products, Training, Jobs, Study Guides, Resources. > > > Do You Yahoo!? > Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk > or your free @yahoo.ie address at http://mail.yahoo.ie > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BCRAN: ISDN backup
Your guess is 100% in place, in fact this is the only role of fast-idle timeout. "Ole Drews Jensen" <[EMAIL PROTECTED]> wrote in message 2019FB428FD3D311893700508B71EBFB252646@RWR_MAIL_SVR">news:2019FB428FD3D311893700508B71EBFB252646@RWR_MAIL_SVR... > When using a BRI interface as a backup interface for a serial interface, the > BRI interface goes into standby mode and cannot be used for anything else. > However, if I make the BRI interface a member of a dialer pool and create > two dialer interfaces for that pool to act as logical interfaces for the one > BRI interface, I can make the dialer interface 1 the backup interface for > the serial interface, and use dialer interface 2 to communicate through my > BRI interface while it's not being used as a backup. > > This is all too cool !!! - Now to the questions: > > 1) What happens if the WAN on the serial interface goes down and the dialer > interface 1 becomes active and then I try to use dialer interface 2? > > 2) What happens if I am using the dialer interface 2 when the WAN on the > serial interface goes down and the dialer interface 1 wants to use the BRI > interface? > > My own guess is that the normal rule for dialer interfaces / dialer pools > takes effect regardless of the backup interface usage, so if a physical > interface is in use by a dialer interface, the requesting dialer interface > will have to wait until the fast-idle timeouts on the active dialer > interface. > > Thanks, > > Ole > > > Ole Drews Jensen > Systems Network Manager > CCNA, MCSE, MCP+I > RWR Enterprises, Inc. > [EMAIL PROTECTED] > > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Foundation Courses !!!
Title: Foundation Courses !!! First, FRS is not a course, it's just an exam, it's a replacement for 3 exams "BSCN", "BCRAN" & "BCMSN". In all cases, you need the "Troubleshooting" exam to attain the CCNP (in addition to CCNA, of course) Advantage for taking FRS is $$ savings, as it costs $200 instead of 3 * $100 for individual exams. Disadvantage is that the distinct areas in the FRS do not add up together, which means if you performed very well in 2 areas and flunked the third, you still have to go through the 3 of them!! I believe that's the main reason why people prefer individual exams. "Raees Ahmed Shaikh" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Dear All, Just a question to ask, What is the foundation R S course for CCNP, What does it consists of, how is it a replacement for two-three ccnp exams and the availability in Prometric centres, also would like to know did anybody of you got his ccnp taking this foundation courses instead of the regular path, I heard that only one exam is needed in addition to FRS to achieve CCNP. Pls. throw some light on this undiscussed FRS. Thanks in advance, Bye for now Shaikh Raees Ahmed, Microsoft Certified Systems Engineer, Cisco Certified Network Associate, Systems & Network, IT Division.
Off topic: Upgrade from CWSI to Cisco Works 2000
Hello Everybody I'm currently using CWSI 2.1 and planning to buy Cisco Works 2000, Campus 2.4. Is there any upgrade product or should I pay the full product price? If so, can you please provide me with the product number? Thanks ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: important question
You might also want to consider "Cisco Interactive Mentor" or CIM. The "Router Basics" CIM is a very useful introduction. <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > who knows the name of the cisco router training software that could me > helpfull. > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Router Reboot
I totally agree with Flem, I also would suggest trying the stack decoder at: http://www.cisco.com/stack/stackdecoder.shtml It might be useful, at lease faster response than TAC, you need a CCO login. "Flem" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I scratch my head and come up with the following ; > > open a tac case and they will ask for at least the > output from sh stack . > > > My best quess is a bug :) > I do remember a catastrophical bug CSCdm55698 . > It is a bug in the PQUIC motorola chipset used in your > 17xx router . The possible workaround is to disable > fastswitching . > What is the serial number of your router ? > > > flem > > > > --- Chandrakant chowgule <[EMAIL PROTECTED]> > wrote: > > Hi Guys , > > > > I need some from you for following problem I am > > facing at one customer > > router . It is configured for point to point ISDN > > dial on demand . Whenever > > I start dialing it satrts dialing , connects but > > after few second it > > reboots. I am getting following error message on > > screen . To check the > > dialing and ISDN status I am running some debug > > commands like debug isdn , > > dialer events etc . The error is as follows : > > > > 00:05:03: %PQUICC-1-TOOSMALL: PQUICC(0/0), packet > > was less than 2 bytes > > Cisco1720# > > Cisco1720# > > Cisco1720# > > Cisco1720# > > Cisco1720# > > Cisco1720# > > Cisco1720#de > > Cisco1720#deb*** Unexpected Console FIFO timeout > > interrupt *** > > PC = 0xfff03e64, Vector = 0x500, SP = 0x80722064 > > > > *** System received a SegV exception *** > > signal= 0xb, code= 0x1200, context= 0x80720e68 > > PC = 0x8000e1d0, Vector = 0x1200, SP = 0x807f3820 > > > > > > > > System Bootstrap, Version 12.0(3)T, RELEASE SOFTWARE > > (fc1) > > Copyright (c) 1999 by cisco Systems, Inc. > > C1700 platform with 16384 Kbytes of mto > > 00:04:45: %ISDN-6-CONNECT: Interface BRI0:2 is now > > connected to 0403228565 > > > > Also , What does one means by " no end-to-end isdn " > > error. Sometime I get > > the same while connecting to some other sites . Will > > you please think on it > > and reply ?.. > > Thanks in advance . > > > > Hi , Wipro & ex-Wipro guys ..please scratch your > > heads and send me some > > solution on it . > > > > Regards > > > > Chandrakant > > > > > > > Get Your Private, Free E-mail from MSN Hotmail at > > http://www.hotmail.com > > > > ___ > > UPDATED Posting Guidelines: > > http://www.groupstudy.com/list/guide.html > > FAQ, list archives, and subscription info: > > http://www.groupstudy.com > > Report misconduct and Nondisclosure violations to > > [EMAIL PROTECTED] > > > > > __ > Do You Yahoo!? > Send instant messages & get email alerts with Yahoo! Messenger. > http://im.yahoo.com/ > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
cisco@groupstudy.com
First, what's the purpose of connecting an FXO to an E&M? is it something that conventional E&M to E&M can't achieve? Or is it because one of your PBX's doesn't support E&M? If this is the case, FXO & FXS pairs would do the job, specially with PLAR. I honestly don't believe FXO and E&M is a working combination or at least never heard about it, I would be glad to learn otherwise. One more thing, what do you mean by "did not configure anything"? Did you configure any dial-peers? does your E&M "know" when to send traffic to the FXO router? Regards Shahir ""pinoal"" <[EMAIL PROTECTED]> wrote in message 8je9ke$uda$[EMAIL PROTECTED]">news:8je9ke$uda$[EMAIL PROTECTED]... > Hi, > > I have a setup where I am connecting a FXO to pabx at site A and E&M to site > B, I have this problem where I can call from FXO to E&M but unable to call > from > E&M to FXO. > > I am using E&M type 5 , 4-wire , signal immediate as for the FXO I did not > configure anything, I am not sure waht needs to be configured. > > What do you think is the problem ? > > > > thanks > > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Off Topic - Technical Reviewers' Faux Paux's :->
I sent this reply some days ago, but never found its way to the group. Well, apparently this is a punctuation error, they were comparing "encapsulated SNA priority" with "e-mail priority". I really hope there is no such thing as anything over e-mail, other than viruses anyways. ""Chuck Larrieu"" <[EMAIL PROTECTED]> wrote in message 01bfd991$39118cc0$[EMAIL PROTECTED]">news:01bfd991$39118cc0$[EMAIL PROTECTED]... > I am reading Gil Held's Voice and Data Internetworking. There on page 203 it > states "...your organization may wish to prioritize the flow of certain > types data, such as encapsulated SNA over e-mail..." > > I have two questions: > > 1) how in heaven's name does one encapsulate SNA over e-mail? > 2) Do I need to know this for the CCIE written? :-> > > Or does SNA stand for something other than what I think it does. Say SNAil > mail? :-> > > Chuck > > Please check out my new footers for a new age > 1) Altruism > http://www.thehungersite.com/cgi-bin/WebObjects/HungerSite > Please help feed hungry people worldwide. A few seconds a day can make a > difference to many people > 2) Shameless Hucksterism > www.certificationzone.com > An excellent study focal point for all levels of certification, as well as > the attainment of internetworking expertise. Use my name when you register. > You get good study material and I get extra time > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: 801 ISDN ping reply only 48%
Muhammed the 48% success is very noticable, it's almost 50-50, this is usually a routing table problem, by checking the route table, you can find something like this: router1#show ip route S20.0.0.0/8 is directly connected is directly connected, Dialer0 C10.0.0.0/8 is directly connected, Ethernet0/0 C30.0.0.0/8 is directly connected, Dialer0 noticed the double 20.0.0.0 entry? by checking the configuration, you have 2 routes for the same destination: ip route 20.0.0.0 255.0.0.0 30.1.1.2 ip route 20.0.0.0 255.0.0.0 Dialer0 Try removing the second one and try your ping again. You can also run "debup ip packets" to figure out which packets gets dropped. I hope this helps. Regards Shahir Boshra Telecommunications Specialist USAID - Egypt "Muhammad Faheem" <[EMAIL PROTECTED]> wrote in message F10CA2BAB231D211979A00805FC7A31A017A1F71@AFCOMP02">news:F10CA2BAB231D211979A00805FC7A31A017A1F71@AFCOMP02... > Hi All > > I have connected 2 cisco 801 ISDN routers using 64k link , but when i ping > from SITE A to SITE B or viseversa > it replies > > !.!.!.!..!.!.!.!..!.!.!.!.!..!.!.!.!.!.!.!.!.!.!..!..!.!.!.!...!.!.!...!.!.. > !. with 48% Success rate , can any body tell why its not 100% > am i missing some thing in configuration , pls check the attached > configuration files > > Thanks in Advance. > <> <> > > > > ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Priority Queueing
Sohail Assuming that you want to prioritize smtp over http over any other protocol, ty the following: (Global commands) router(config)#priority-list 1 protocol ip high tcp smtp router(config)#priority-list 1 protocol ip medium tcp www router(config)#priority-list 1 default normal (Interface S 0 subcommands) router(config-if)#priority-group 1 Is it a production network or study lab? because normally you'd prioritize http over smtp and not the opposite. Shahir Boshra Telecommunications Specialist USAID - Egypt ""Syed Atif"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi Folks, > I am missing exact format of applying priority-list at my serial int 0. > Actually i want to give smtp more priority than http. > > Can any one help me in giving exact commands. > > Thanks in advance, > > Sohail Ahmad, > > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: SMTP access list
Title: SMTP access list Elmer, The router applies the first match and neglects the remaining lines. i.e. in your example, only any traffic from the 3 mentioned sources & carrying smtp will be allowed. Note that the last 2 lines are unnecessary, as the implicit deny any will apply in all cases. To make it clearer, suppose we have something like: access-list 176 permit tcp 193.128.233.177 0.0.0.0 any eq smtp log access-list 176 deny tcp 193.128.233.177 0.0.0.0 any eq smtp access-list 176 permit ip any any The smtp traffic from the mentioned host will be permitted although it's denied in the second line. I hope this helps. Regards, Shahir BoshraTelecommunications SpecialistUSAID - Egypt ""Deloso, Elmer G."" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, all. Just to verify my understanding of extended access-lists: this continues to parse the entries even after a match has already been found, so if the first few lines have a "permit" and later down the last few lines it encounters a "deny", what does the router do? Example: access-list 176 permit tcp 193.128.233.177 0.0.0.0 any eq smtp log access-list 176 permit tcp 203.23.83.180 0.0.0.0 any eq smtp log access-list 176 permit tcp 203.35.182.133 0.0.0.0 any eq smtp log . . . . access-list 176 deny ip 193.0.0.0 0.255.255.255 any log access-list 176 deny ip 203.0.0.0 0.255.255.255 any log Any help would be greatly appreciated. Elmer Deloso
Re: SMTP access list
Title: SMTP access list Elmer, The router applies the first match and neglects the remaining lines. i.e. in your example, only any traffic from the 3 mentioned sources & carrying smtp will be allowed. Note that the last 2 lines are unnecessary, as the implicit deny any will apply in all cases. To make it clearer, suppose we have something like: access-list 176 permit tcp 193.128.233.177 0.0.0.0 any eq smtp log access-list 176 deny tcp 193.128.233.177 0.0.0.0 any eq smtp access-list 176 permit ip any any The smtp traffic from the mentioned host will be permitted although it's denied in the second line. I hope this helps. Regards, Shahir BoshraTelecommunications SpecialistUSAID - Egypt ""Deloso, Elmer G."" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi, all. Just to verify my understanding of extended access-lists: this continues to parse the entries even after a match has already been found, so if the first few lines have a "permit" and later down the last few lines it encounters a "deny", what does the router do? Example: access-list 176 permit tcp 193.128.233.177 0.0.0.0 any eq smtp log access-list 176 permit tcp 203.23.83.180 0.0.0.0 any eq smtp log access-list 176 permit tcp 203.35.182.133 0.0.0.0 any eq smtp log . . . . access-list 176 deny ip 193.0.0.0 0.255.255.255 any log access-list 176 deny ip 203.0.0.0 0.255.255.255 any log Any help would be greatly appreciated. Elmer Deloso
Interesting case: Preserving source IP address with CSS 11000 [7:50033]
Did anyone manage to use CSS 11000 to redirect http traffic to a transparent caching device while preserving the source IP address (enabling IP spoofing)? My cache device is capable of handling this type of services, however it needs the same type of support on the CSS as well, otherwise a loop occurs between the cache and the CSS. If anyone has a workaround or even curious to know more details about the problem I'm facing, please let me know. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=50033&t=50033 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
