what is the syntax to check top talker?
Hi.. Dear all, I don't understand the term top talker. May I know what is the syntax to check top talker of a router during a period of time? How to reset it? Can u reset it using user level account ? Tong > Could you check around these times (Tokyo time) for top talkers - you can > reset top talker information on you standard account now. cheers > > 09:15 - 09-30 > 10:30 - 10:40 > > > Simon Spalding > == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
why can't ping its own interface it is up ????
Dear all, I really don't understand, I have the router interface which is up up status, but I can't even ping it? What could be the reasons?? is that because of access-list?? Pls tell me!! interface Ethernet0 description Interface facing Financial Service Provider ip address 100.200.3.1 255.255.255.0 ip access-group 100 in no ip directed-broadcast ip nat outside RBFW2514#sh int e0 Ethernet0 is up, line protocol is up Hardware is Lance, address is 0010.7b81.02e6 (bia 0010.7b81.02e6) Description: Interface facing Financial Service Provider Internet address is 100.200.3.1/24 MTU 1500 bytes, BW 1 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters never Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 45000 bits/sec, 21 packets/sec 5 minute output rate 8000 bits/sec, 16 packets/sec 161686946 packets input, 2454329523 bytes, 0 no buffer Received 1076750 broadcasts, 0 runts, 0 giants, 0 throttles 181 input errors, 0 CRC, 0 frame, 0 overrun, 181 ignored 0 input packets with dribble condition detected 129416824 packets output, 3918760326 bytes, 0 underruns 0 output errors, 296169 collisions, 1 interface resets 0 babbles, 0 late collision, 478162 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out RBFW2514#ping 100.200.3.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds: . Success rate is 0 percent (0/5) RBFW2514# == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: why can't ping its own interface it is up ???-configattached !!
hi dear all, I should say sorry to you all, as I was trying to hide the real address, from 192.168.3.1 to 100.200.3.1. Below are the full config.. Pls help me to find out what is the problem Thank you very very much RBFW2514#sh conf Using 2790 out of 32762 bytes ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname RBFW2514 ! enable secret 5 $1$i8gB$psKZMoYyK9t2DRTQel4401 ! ! ! ! ! ip subnet-zero no ip domain-lookup ! ip inspect name fw tcp ip inspect name fw udp ip inspect name fw smtp ip inspect name fw ftp ! ! process-max-time 200 ! interface Ethernet0 description Interface facing Financial Service Provider ip address 192.168.3.1 255.255.255.0 ip access-group 100 in no ip directed-broadcast ip nat outside ! interface Ethernet1 description Interface facing Rabobank (Trusted) network ip address 58.199.165.240 255.255.252.0 no ip directed-broadcast ip nat inside ip inspect fw in ip route-cache flow ! interface Serial0 ip unnumbered Ethernet0 no ip directed-broadcast no ip mroute-cache shutdown no fair-queue ! interface Serial1 no ip address no ip directed-broadcast shutdown ! ip nat pool rabo 192.168.3.101 192.168.3.200 netmask 255.255.255.0 ip nat pool rabo1 192.168.3.201 192.168.3.240 netmask 255.255.255.0 ip nat pool rabo2 192.168.3.101 192.168.3.240 netmask 255.255.255.0 ip nat inside source list 1 pool rabo2 ip nat inside source list 2 pool rabo1 ip classless ip route 172.16.0.0 255.255.0.0 192.168.3.31 ip route 192.168.3.0 255.255.255.0 10.168.3.2 ip route 199.105.176.0 255.255.248.0 192.168.3.21 ip route 199.105.184.0 255.255.254.0 192.168.3.21 ip route 205.183.246.0 255.255.255.0 192.168.3.21 ip route 208.134.161.0 255.255.255.0 192.168.3.21 no ip http server ! logging trap debugging logging facility local2 logging 58.199.167.22 access-list 1 permit any access-list 100 permit tcp any any eq www access-list 100 permit tcp any eq www any access-list 100 permit tcp any any eq 5100 access-list 100 permit tcp any eq 5100 any access-list 100 permit tcp any any eq 60101 access-list 100 permit tcp any eq 60101 any access-list 100 permit tcp any any eq 7091 access-list 100 permit tcp any eq 7091 any access-list 100 permit udp any any eq 7091 access-list 100 permit udp any eq 7091 any access-list 100 permit udp any any eq domain access-list 100 permit udp any eq domain any access-list 100 permit tcp any eq 3000 any access-list 100 permit udp any eq 3000 any access-list 100 permit tcp any any eq 3000 access-list 100 permit udp any any eq 3000 access-list 100 permit tcp any any eq 4040 access-list 100 permit tcp any any eq 6080 access-list 100 permit tcp any any range 8194 8294 access-list 100 permit udp any any range 48129 48192 log access-list 100 permit udp any eq 6080 any access-list 100 permit udp any eq 4040 any snmp-server engineID local 000902107B8102E6 snmp-server community public RO ! line con 0 transport input none line aux 0 line vty 0 4 password XXX login length 0 ! end -Original Message- From: Erick B. [mailto:[EMAIL PROTECTED]] Sent: Friday, February 02, 2001 12:49 PM To: Sim, CT (Chee Tong); [EMAIL PROTECTED] Subject: Re: why can't ping its own interface it is up Since your pinging from the same router that this IP resides on the access-list doesn't come into play. Traffic flowing through that interface will be looked at against the access-list but not traffic sourced from the router, unless you set up a local policy route. If you have a static route routing traffic destined to 100.200.3.0 to 192.168.3.1 this will cause what your seeing and NAT could effect it as well. Hows the NAT configured and what are you permitting to be NAT'd? If your permitting 100.200.3.x and your outside NAT pool is 192.168.3.x then this could be the problem as well. Need to know more about the config. --- "Sim, CT (Chee Tong)" <[EMAIL PROTECTED]> wrote: > Dear all, > > I really don't understand, I have the router > interface which is up up > status, but I can't even ping it? What could be the > reasons?? is that > because of access-list?? Pls tell me!! > > interface Ethernet0 > description Interface facing Financial Service > Provider > ip address 100.200.3.1 255.255.255.0 > ip access-group 100 in > no ip directed-broadcast > ip nat outside > > RBFW2514#sh int e0 > Ethernet0 is up, line protocol is up > Hardware is Lance, address is 0010.7b81.02e6 (bia > 0010.7b81.02e6) > Description: Interface facing Financial Service > Provider > Internet address is 100.200.3.1/24 > MTU 1500 bytes, BW 1 Kbit, DLY 1000 usec, > reliability 255/255, txload 1/255, rxload 1/255 > Encapsulation ARPA, loopback not set > Keepalive set (10 sec) > ARP type: ARPA, ARP Timeout 04:00:00 > Last input 00:00:00, output 00:00:00, output hang > never > Last cle
why delete a access-list entry will delete all the entry
Dear all, 1) I was trying to log a access-list counter to the syslog server, so I type router(config)#access-list 100 tcp any any eq www log but it doesn't delete the original access-list and it create two entries one with log in behind and one without. But when I delete the entry router(config)#no access-list 100 tcp any any eq www log it delete ALL my access-list 100 entry !!! why..??? then how to delete only one entry access-list 100 permit tcp any any eq www access-list 100 permit tcp any any eq www log access-list 100 permit tcp any eq www any access-list 100 permit tcp any any eq 5100 access-list 100 permit tcp any eq 5100 any access-list 100 permit udp any any eq domain access-list 100 permit udp any eq domain any access-list 100 permit tcp any eq 3000 any access-list 100 permit udp any eq 3000 any access-list 100 permit tcp any any eq 3000 access-list 100 permit udp any any eq 3000 access-list 100 permit tcp any any eq 4040 access-list 100 permit tcp any any eq 6080 access-list 100 permit tcp any any range 8194 8294 access-list 100 permit udp any any range 48129 48192 log access-list 100 permit udp any eq 6080 any access-list 100 permit udp any eq 4040 any 2)(OPTIONAL) After I log the access-list counter to the syslog server, I found the file in the syslog in very big, there are too many many entry in the file, 1 packet will create one entry like Feb 2 15:50:22 57.198.165.240 5343: 16w4d: %SEC-6-IPACCESSLOGP: list 100 permitted udp 19 9.105.182.171(48130) -> 192.168.3.149(48130), 1 packet Feb 2 15:50:33 57.198.165.240 5344: 16w4d: %SEC-6-IPACCESSLOGP: list 100 permitted udp 19 9.105.182.173(48130) -> 192.168.3.133(48130), 1 packet Feb 2 15:50:43 57.198.165.240 5345: 16w4d: %SEC-6-IPACCESSLOGP: list 100 permitted udp 19 9.105.182.173(48130) -> 192.168.3.153(48130), 1 packet Feb 2 15:51:13 57.198.165.240 5346: 16w4d: %SEC-6-IPACCESSLOGP: list 100 permitted udp 19 9.105.182.173(48130) -> 192.168.3.112(48130), 1 packet Feb 2 15:51:23 57.198.165.240 5347: 16w4d: %SEC-6-IPACCESSLOGP: list 100 permitted udp 19 9.105.182.173(48130) -> 192.168.3.140(48130), 1 packet Feb 2 15:51:33 57.198.165.240 5348: 16w4d: %SEC-6-IPACCESSLOGP: list 100 permitted udp 19 9.105.182.23(48129) -> 192.168.3.139(48129), 1 packet How to log it as s summary like RBFW2514#sh access-list Standard IP access list 1 permit any Extended IP access list 100 permit tcp host 199.105.182.86 eq 8292 host 192.168.3.133 eq 8277 (32930 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.134 eq 48130 (389 matches) permit tcp host 199.105.182.86 eq 8292 host 192.168.3.169 eq 8277 (11972 matches) permit udp host 199.105.182.23 eq 48129 host 192.168.3.115 eq 48129 (2 matches) permit tcp host 199.105.182.189 eq 8194 host 192.168.3.119 eq 8198 (8603 matches) permit tcp host 199.105.182.189 eq 8194 host 192.168.3.133 eq 8197 (15343 matches) permit tcp host 199.105.182.190 eq 8194 host 192.168.3.119 eq 8201 (8365 matches) == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
very confused with access-list, pls help!!
Hi..Dear all, answer whatever you know 1)I am very confused with access-list now, I have named my access-list as below ip access-list extended a3000 permit tcp any eq 3000 any log permit udp any eq 3000 any log permit tcp any any eq 3000 log permit udp any any eq 3000 log ip access-list extended range permit tcp any any range 8194 8294 log permit udp any any range 48129 48192 log ip access-list extended telnet permit tcp host 57.198.165.199 any eq telnet log permit tcp host 57.198.165.229 any eq telnet log But I found when apply multiple access group in the int E0, like below Router(config-if)#ip access-group a3000 in Router(config-if)#ip access-group range in Router(config-if)#ip access-group telnet in but when I Router#sh run only ip access-group telnet in shown in the config (the last one), where are the a3000, range ?? 2)When I type sh access-list, why it shows me that access-group "range" is still applied as shown below. Besides, why the line permit tcp host 199.105.182.190 eq 8194 host 192.168.3.112 eq 8201 (17 matches) and etc appear in the Extended IP access list telnet and I thought it should show in the Extended IP access list range Extended IP access list range permit tcp any any range 8194 8294 log (6 matches) permit udp any any range 48129 48192 log (56 matches) Extended IP access list telnet permit tcp host 199.105.182.190 eq 8194 host 192.168.3.112 eq 8201 (17 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.107 eq 48129 (184 matches) permit tcp host 199.105.182.189 eq 8194 host 192.168.3.112 eq 8198 (18 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.110 eq 48129 (193 matches) permit tcp host 57.198.165.199 any eq telnet log permit tcp host 57.198.165.229 any eq telnet log 3)In my config file, there are entry like "no ip route-cache" as shown below, may I know how to delete it? ! interface Ethernet0 description Interface facing Financial Service Provider ip address 192.168.3.1 255.255.255.0 ip access-group 100 in no ip directed-broadcast ip nat outside no ip route-cache no ip mroute-cache 4)when I do a on router SIN01>sh ip route connected C 58.199.164.0/22 is directly connected, FastEthernet0/0 C 58.199.126.0/27 is directly connected, FastEthernet0/0 Why two networks can state directly connected to one interface, what does it mean?? == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: why can't ping its own interface it is up ???-configattached !!
yes I solved the problem, I have to enable ICMP to pass thru so that I can ping the own interface, however I still doubt about it as I know the access-list only affect the traffic passing thru the router but not the traffic initiated from the router. Anyway. thanks for your help Sim -Original Message- From: Charles Ryan [mailto:[EMAIL PROTECTED]] Sent: Saturday, February 03, 2001 7:14 AM To: Sim, CT (Chee Tong); 'Erick B.'; [EMAIL PROTECTED]; 'Kevin Wigle'; 'Curtis Call' Subject: Re: why can't ping its own interface it is up ???-config attached !! I believe it's because your ICMP packets are being snagged by the implicit "deny all" at the end of your access-list. Remove the access-list from the ethernet interface, then attempt to ping it. It will probably work. If it does, then you know that it's indeed your access-list that is prohibiting you from pinging the ethernet interface. -Chuck - Original Message - From: "Sim, CT (Chee Tong)" <[EMAIL PROTECTED]> To: "'Erick B.'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>; "'Kevin Wigle'" <[EMAIL PROTECTED]>; "'Curtis Call'" <[EMAIL PROTECTED]> Sent: Friday, February 02, 2001 12:25 AM Subject: RE: why can't ping its own interface it is up ???-config attached !! > hi dear all, > > I should say sorry to you all, as I was trying to hide the real address, > from 192.168.3.1 to 100.200.3.1. Below are the full config.. Pls help me to > find out what is the problem Thank you very very much > > RBFW2514#sh conf > Using 2790 out of 32762 bytes > ! > version 12.0 > service timestamps debug uptime > service timestamps log uptime > no service password-encryption > ! > hostname RBFW2514 > ! > enable secret 5 $1$i8gB$psKZMoYyK9t2DRTQel4401 > ! > ! > ! > ! > ! > ip subnet-zero > no ip domain-lookup > ! > ip inspect name fw tcp > ip inspect name fw udp > ip inspect name fw smtp > ip inspect name fw ftp > ! > ! > process-max-time 200 > ! > interface Ethernet0 > description Interface facing Financial Service Provider > ip address 192.168.3.1 255.255.255.0 > ip access-group 100 in > no ip directed-broadcast > ip nat outside > ! > interface Ethernet1 > description Interface facing Rabobank (Trusted) network > ip address 58.199.165.240 255.255.252.0 > no ip directed-broadcast > ip nat inside > ip inspect fw in > ip route-cache flow > ! > interface Serial0 > ip unnumbered Ethernet0 > no ip directed-broadcast > no ip mroute-cache > shutdown > no fair-queue > ! > interface Serial1 > no ip address > no ip directed-broadcast > shutdown > ! > ip nat pool rabo 192.168.3.101 192.168.3.200 netmask 255.255.255.0 > ip nat pool rabo1 192.168.3.201 192.168.3.240 netmask 255.255.255.0 > ip nat pool rabo2 192.168.3.101 192.168.3.240 netmask 255.255.255.0 > ip nat inside source list 1 pool rabo2 > ip nat inside source list 2 pool rabo1 > ip classless > ip route 172.16.0.0 255.255.0.0 192.168.3.31 > ip route 192.168.3.0 255.255.255.0 10.168.3.2 > ip route 199.105.176.0 255.255.248.0 192.168.3.21 > ip route 199.105.184.0 255.255.254.0 192.168.3.21 > ip route 205.183.246.0 255.255.255.0 192.168.3.21 > ip route 208.134.161.0 255.255.255.0 192.168.3.21 > no ip http server > ! > logging trap debugging > logging facility local2 > logging 58.199.167.22 > access-list 1 permit any > access-list 100 permit tcp any any eq www > access-list 100 permit tcp any eq www any > access-list 100 permit tcp any any eq 5100 > access-list 100 permit tcp any eq 5100 any > access-list 100 permit tcp any any eq 60101 > access-list 100 permit tcp any eq 60101 any > access-list 100 permit tcp any any eq 7091 > access-list 100 permit tcp any eq 7091 any > access-list 100 permit udp any any eq 7091 > access-list 100 permit udp any eq 7091 any > access-list 100 permit udp any any eq domain > access-list 100 permit udp any eq domain any > access-list 100 permit tcp any eq 3000 any > access-list 100 permit udp any eq 3000 any > access-list 100 permit tcp any any eq 3000 > access-list 100 permit udp any any eq 3000 > access-list 100 permit tcp any any eq 4040 > access-list 100 permit tcp any any eq 6080 > access-list 100 permit tcp any any range 8194 8294 > access-list 100 permit udp any any range 48129 48192 log > access-list 100 permit udp any eq 6080 any > access-list 100 permit udp any eq 4040 any > snmp-server engineID local 000902107B8102E6 > snmp-server community public RO > ! > line con 0 > transport input none > line aux 0 > line vty 0 4 > password XXX > login > length 0 > ! >
why access-list match accounting doesn't match ?
Dear all, I do a show access-list on my Cisco packer filter, May I know what kind of access-list match will show in part 1 and what kind of access-list match will show in part 2. Whether the access-list match in part 1 will be counted or add together and show in part 2. Pls take a look on line (A) and (B), (C) and specify by me. 1)For A host eq 4040 talk to host eq 1117 was log in (A)-part 1 but not in (C)-part 2 2)For B permit udp any eq 7091 any log (164 matches) but I could find any host eq 7091 access-list match in part 1 Extended IP access list 100 Part1) permit udp host 199.105.182.173 eq 48130 host 192.168.3.134 eq 48130 (3 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.135 eq 48129 (1 match) permit tcp host 192.168.3.54 eq 3000 host 192.168.3.137 eq 1922 (141762 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.161 eq 48129 permit udp host 199.105.182.23 eq 48129 host 192.168.3.115 eq 48129 (2 matches) permit udp host 199.105.182.168 eq 48130 host 192.168.3.105 eq 48130 (34353 matches) permit tcp host 199.105.182.189 eq 8194 host 192.168.3.119 eq 8196 (10895 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.126 eq 48129 (1 match) permit tcp host 199.105.182.189 eq 8194 host 192.168.3.133 eq 8200 (10891 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.145 eq 48129 permit tcp host 199.105.182.190 eq 8194 host 192.168.3.119 eq 8198 (11616 matches) permit tcp host 192.168.3.54 eq 3000 host 192.168.3.117 eq 1834 (169566 matches) permit tcp host 199.105.182.190 eq 8194 host 192.168.3.133 eq 8197 (11603 matches) permit tcp host 199.105.182.190 eq 8194 host 192.168.3.102 eq 8201 (11610 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.108 eq 48129 permit udp host 199.105.182.86 eq 48129 host 192.168.3.121 eq 48129 (1 match) permit tcp host 199.105.182.189 eq 8194 host 192.168.3.102 eq 8200 (10894 matches) permit tcp host 199.105.182.28 eq 8292 host 192.168.3.149 eq 8277 (10672 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.170 eq 48129 permit udp host 199.105.182.173 eq 48130 host 192.168.3.141 eq 48130 (3 matches) permit udp host 199.105.182.15 eq 48129 host 192.168.3.166 eq 48129 (2 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.164 eq 48130 (3 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.147 eq 48130 (3 matches) permit udp host 199.105.182.23 eq 48129 host 192.168.3.142 eq 48129 (2 matches) permit tcp host 199.105.182.189 eq 8194 host 192.168.3.139 eq 8198 (10890 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.145 eq 48130 (3 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.121 eq 48130 (3 matches) permit tcp host 199.105.182.190 eq 8194 host 192.168.3.139 eq 8200 (11606 matches) permit udp host 199.105.182.170 eq 48130 host 192.168.3.142 eq 48130 (3 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.153 eq 48130 (63536 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.123 eq 48130 (3 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.161 eq 48130 (3 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.126 eq 48130 (3 matches) permit tcp host 192.168.3.54 eq 3000 host 192.168.3.130 eq 1849 (197151 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.123 eq 48129 (2 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.111 eq 48130 (3 matches) permit udp host 199.105.182.173 eq 48130 host 192.168.3.135 eq 48130 (3 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.164 eq 48129 permit udp host 199.105.182.86 eq 48129 host 192.168.3.147 eq 48129 permit udp host 199.105.182.173 eq 48130 host 192.168.3.107 eq 48130 (128770 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.134 eq 48129 permit udp host 199.105.182.173 eq 48130 host 192.168.3.170 eq 48130 (3 matches) permit tcp host 192.168.3.54 eq 3000 host 192.168.3.138 eq 4055 (204874 matches) permit udp host 199.105.182.170 eq 48130 host 192.168.3.115 eq 48130 (3 matches) permit tcp host 192.168.3.43 eq 4040 host 192.168.3.113 eq 1091 (527716 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.111 eq 48129 (1 match) permit udp host 199.105.182.29 eq 48129 host 192.168.3.146 eq 48129 (2 matches) permit udp host 199.105.182.86 eq 48129 host 192.168.3.141 eq 48129 permit udp host 199.105.182.171 eq 48130 host 192.168.3.151 eq 48130 permit tcp host 192.168.3.43 eq 4040 host 192.168.3.104 eq 1117 (529563 matches)--(A) Part 2 permit tcp any any eq www log permit tcp any eq www any log permit tcp any any eq 5100 log permit tcp any eq 5100 any log permit tcp any any eq 60101 log permit tcp any eq 60101 any log permit tcp any any eq 7091 log
how to clear these setting in catalyst 5505?
Dear all, I was trying to clear the following logging setting in #syslog set logging console enable set logging server enable set logging level cdp 4 default set logging level mcast 2 default set logging level dtp 5 default set logging level dvlan 2 default set logging level earl 2 default set logging level fddi 2 default set logging level ip 2 default set logging level pruning 2 default set logging level snmp 2 default set logging level spantree 2 default set logging level sys 5 default set logging level tac 2 default set logging level tcp 2 default set logging level telnet 2 default set logging level tftp 2 default set logging level vtp 2 default set logging level vmps 2 default set logging level kernel 2 default set logging level filesys 2 default set logging level drip 2 default set logging level pagp 5 default set logging level mgmt 5 default set logging level mls 5 default set logging level protfilt 2 default set logging level security 2 default set logging level radius 2 default set logging level udld 4 default set logging level gvrp 2 default set logging server facility LOCAL4 ! 1)For example when I want to clear "set logging server facility LOCAL4" so I type.. (shown below) Cat55-L9-1> (enable) clear logging server facility LOCAL4 Usage: clear logging server 2)For example, I want to clear "set logging level mls 5 default" or "set logging level drip 2 default", so I type ... (shown below) but it gives me this answer, so how can I clear it? Cat55-L9-1> (enable) clear logging level ? Usage: clear logging buffer clear logging server == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
error on the show port counter on catalyst5505
Dear all, I did a show port conter command in my catalyst 5505 switches and result as below. Can I verify with you that whether the below is correct or not? 1) many Align-Err-FCS-Err counter mean the quality of the cable not good? 2) many Single/Multi/Late- mean the duplex type not match? 3)What is the problem if I got many "Runts" and " Giant" counter? 4)If I got many these port error, will it slow down the whole network or just the PC attached to the port? Port Align-Err FCS-ErrXmit-Err Rcv-ErrUnderSize - -- -- -- -- - 1/1 0 0 0 0 0 1/2 0 0 0 0 0 3/1 0 0 0 0 0 3/2 0 0 0 0 0 3/3 0 0 0 0 0 3/4 0 0 0 0 0 3/5 0 3119 0 0 0 3/6 57 49 0 0 0 3/7 14189 14295 0 0 0 3/8 13578 12992 0 0 0 Port Single-Col Multi-Coll Late-Coll Excess-Col Carri-Sen Runts Giants - -- -- -- -- - - - 1/1 0 0 0 0 0 0 0 1/2 0 0 0 0 0 0 0 3/1 0 0 0 0 0 0 - 3/2 0 0 0 0 0 0 - 3/3 0 0 0 0 0 0 - 3/4 0 0 0 0 0 0 - 3/5 0 0 0 0 0 996 0 3/6 0 0 0 0 0 7 0 3/7 0 0 0 0 0 509 0 3/8 0 0 0 0 0 733 0 == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
where can I download free TFTP server?
Hi..Dear all, just a short question where can I download the free TFTP server and install on Windows NT or Linux? Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
can I fix the IP on a account which dial in access server
I have a Cisco access server AS2509 to use for people to dial in and when I use our DHCP to assign IP for the dial in workstation, as shown below. BUT, I want to fix a IP address for the specific account when dial in , when tongiscute dial in, his IP will forever be 50.100.166.100 can it be done?? ! hostname access_server ! enable secret 5 $1$rfub$oh/NltB4DqsEY6ydZNKKb/ ! username tongiscute password 0 abc123 username keongk password 0 kong123 username kongk password 0 kong123 username tangch password 0 tang123 ip host modem1 2001 50.100.166.11 ip host modem2 2002 50.100.166.11 ip host modem3 2003 50.100.166.11 ip dhcp-server 50.100.165.10 ! == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to translate the destination IP using (LINUX IPchains andMas querading)
Any one familiar with Ipchains?? I just built a LINUX firewall between two network in our company Network A:60.100.100.0/24, interface IP eth0 in A is 60.100.100.101 Network B:192.168.3.0/24, interface IP eth1 in B is 192.168.3.2 >From my workstation (60.100.100.99), I want to connect to a SERVER (192.168.3.100) in network B using a FAKE address in network A 60.100.100.102. First I did a proxy ARP to map 192.100.100.102 IP to 60.100.100.101's MAC address. So, I want to translate source IP from 60.100.100.0 network to firewall interface IP in B 192.168.3.2 when it go out from firewall and I can do it using Ipchains command in Linux "ipchains -A forward -i eth1 -s 60.100.100.0/24 -j MASQ (I don't want to change server's routing table) But I also need to translate the destination IP from 60.100.100.102 to 192.168.3.100 while it is in Linux firewall. What is the command to do it in Linux way?? Can it be done??? Thanks == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to "un set" parameter in cat55 switch
how to "un set" parameter in cat55 switch May I know how to unset a parameter == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Is there a command to view what kind of traffic in router'sseria l port
Dear all, Is there a command to view what kind of traffic eg FTP, TELNET passing thru the router's serial port? Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
switch telnet issue, why cat29 and cat55 different ??
Dear all, Why I can telnet to my cat29 switch even they are in different Network like my PC: 10.1.1.3 255.255.0.0 and cat29 is 10.2.1.2 255.255.0.0 eg I still can telnet to there But for my cat55 I can't telnet to cat55 if there are not in same Network eg my PC: 10.1.1.3 255.255.0.0 and cat29 is 10.2.1.2 255.255.0.0 WHY?? TONG == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
why can ping but traceroute stop half way
Hi..Dear all, i wonder why I can ping to a site but when I do a traceroute stop half way.. I thought traceroute are based on ICMP as well?? See below sin-uunet>ping 210.24.136.242 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 210.24.136.242, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 32/96/156 ms sin-uunet>traceroute 210.24.136.242 Type escape sequence to abort. Tracing the route to 210.24.136.242 1 Loopback0.GW2.SIN1.Alter.Net (210.80.0.25) 12 msec 12 msec 12 msec 2 322.ATM5-0-0.XR2.SIN1.Alter.Net (210.80.3.65) 8 msec 12 msec 8 msec 3 412.ATM8-0-0.GW1.SIN1.Alter.Net (210.80.3.62) 12 msec 12 msec 8 msec 4 202.95.96.30 20 msec 16 msec 16 msec 5 scipk017.pacific.net.sg (203.120.90.17) 12 msec 16 msec 16 msec 6 202.42.42.234 20 msec 92 msec 36 msec 7 * * * 8 * * * 9 * * * == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
is there a command to trace https traffic to particular site
Hi.. Dear all and Jason, Thank you teaching me, but I need to ask one more question I need to know whether my https traffic can be passed thru from my WAN router to particular site? What command I need to use? I use traceroute to trace the packet from my WAN router to the site but it failed but I want to know what kind of traffic did traceroute command generated? As I tried to ping that site, it does response but my application software which based on https traffic cannot reach there. Pls guide me Tong -Original Message- From: Jason Roysdon [mailto:[EMAIL PROTECTED]] Sent: Saturday, December 02, 2000 8:45 PM To: '[EMAIL PROTECTED]' Subject: Re: Is there a command to view what kind of traffic in router's s eria l port If you have ip route-cache enabled on an interface, the following will work: show ip cache flow -- Jason Roysdon, CCNA, MCSE, CNA, Network+, A+ List email: [EMAIL PROTECTED] Homepage: http://jason.artoo.net/ Cisco resources: http://r2cisco.artoo.net/ ""Sim, CT (Chee Tong)"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Dear all, > > Is there a command to view what kind of traffic eg FTP, TELNET passing thru > the router's serial port? > > Tong > > == > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en > de afzender direct te informeren door het bericht te retourneren. > == > The information contained in this message may be confidential > and is intended to be exclusively for the addressee. Should you > receive this message unintentionally, please do not use the contents > herein and notify the sender immediately by return e-mail. > > > == > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
why I can't log to syslog server for cat55
Dear Friends, Can I ask you why I can't log the cat55 switch logging to my syslog server, below shown the configuration file. The IP address of syslog server is correct. Besides, some more question. 1)I had typed the command : set logging server severity 7 but why it is not shown in the configuration file 2)Is that neccessary to write or save to memory after I set the parameter in cat OS, in IOS is write right. What is the command to save in Cat 0S 3)I know we can set the facility from local0 to local7, how about local 8, 9 and etc? #syslog set logging console enable set logging server enable set logging server 57.198.167.22 set logging level cdp 4 default set logging level mcast 2 default set logging level dtp 5 default set logging level dvlan 2 default set logging level earl 2 default set logging level fddi 2 default set logging level ip 2 default set logging level pruning 2 default set logging level snmp 2 default set logging level spantree 2 default set logging level sys 5 default set logging level tac 2 default set logging level tcp 2 default set logging level telnet 2 default set logging level tftp 2 default set logging level vtp 2 default set logging level vmps 2 default set logging level kernel 2 default set logging level filesys 2 default set logging level drip 2 default set logging level pagp 5 default set logging level mgmt 5 default set logging level mls 5 default set logging level protfilt 2 default set logging level security 2 default set logging level radius 2 default set logging level udld 4 default set logging level gvrp 2 default set logging server facility LOCAL4 ! #ntp == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how does traffic from CAT55 switch moule to Route switch module( RSM)?
Dear all, 1)I have a cat 55 switch which got 2 X 10/100BaseTX Ethernet module and 1 X Route Switch Module (RSM), so, I have 48 ports on the switches module and divided into 3 VLANs some of ports were set to VLAN 1, 2 3, and the RSM module is connect thru our WAN router to world, and RSM, the layer 3 device is used to route the traffic between VLANs but I don't know how does the traffic from the switches module do to RSM module as there is no cable connection or it do internally? 2)I found my RSM module is configured 3 VLANs inteface, 100.100.100.99, 100.100.200.99, 100.100.300.99, but I can't see there are phyiscal interface. Why? Below shown the conf, sometarou is the switch module and SOMETAROU is the RSM module sometarou> sh cdp nei * - indicates vlan mismatch. # - indicates duplex mismatch. Port Device-ID Port-ID Platform --- - 2/1 SOMETAROU Vlan1 cisco RSP2 3/1 066506067(somenosuke) 3/1 WS-C5505 3/2 066506067(somenosuke) 3/2 WS-C5505 3/3 066506067(somenosuke) 3/3 WS-C5505 3/4 066506067(somenosuke) 3/4 WS-C5505 sometarou> session 2 Trying Router-2... Connected to Router-2. Escape character is '^]'. * Catalyst 5505 #2 * * RSM WS-X5302 * *SOMETAROU * User Access Verification Password: SOMETAROU>sh cdp nei Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater Device IDLocal Intrfce HoldtmeCapability Platform Port ID 066507401(sometarou)Vlan1 132 T B S WS-C5505 2/1 SOMETAROU> == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how does traffic from CAT55 switch moule to Route switchmodu le (RSM)?
Sorry , I send again, as I want to add one more question Dear all, 1)I have a cat 55 switch which got 2 X 10/100BaseTX Ethernet module and 1 X Route Switch Module (RSM), so, I have 48 ports on the switches module and divided into 3 VLANs some of ports were set to VLAN 1, 2 3, and the RSM module is connect thru our WAN router to world, and RSM, the layer 3 device is used to route the traffic between VLANs but I don't know how does the traffic from the switches module do to RSM module as there is no cable connection or it do internally? 2)I found my RSM module is configured 3 VLANs inteface, 100.100.100.99, 100.100.200.99, 100.100.300.99, but I can't see there are phyiscal interface. Why? Below shown the conf, sometarou is the switch module and SOMETAROU is the RSM module 3)From the sh cdp nei configuration in the switch module below, I wonder why only VLAN1 connect to RSM module, I thought we configured VLANs 1 2 3 in switches module sometarou> sh cdp nei * - indicates vlan mismatch. # - indicates duplex mismatch. Port Device-ID Port-ID Platform --- - 2/1 SOMETAROU Vlan1 cisco RSP2 3/1 066506067(somenosuke) 3/1 WS-C5505 3/2 066506067(somenosuke) 3/2 WS-C5505 3/3 066506067(somenosuke) 3/3 WS-C5505 3/4 066506067(somenosuke) 3/4 WS-C5505 sometarou> session 2 Trying Router-2... Connected to Router-2. Escape character is '^]'. * Catalyst 5505 #2 * * RSM WS-X5302 * *SOMETAROU * User Access Verification Password: SOMETAROU>sh cdp nei Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater Device IDLocal Intrfce HoldtmeCapability Platform Port ID 066507401(sometarou)Vlan1 132 T B S WS-C5505 2/1 SOMETAROU> == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
can I tell the ip of the PC that connected to a switch port?
Dear all, can I tell the ip of the PC that connected to a switch port? what is the command? Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to turn on the ip accounting?
Hi.. Dear all, May I know how to turn on the ip accounting on router? I know there is a command "sh ip cache flow" to view what kind of traffic passing thru the router. But what is the command to turn it on in order to view sh ip cache flow. Can all type of routers support "sh ip cache flow" ? How about 1700 series? Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how to turn on the ip accounting?
Can I know how to turn on the "flow" on individual interface? If I have several frame relay link on sub interfaces. So, can I turn on flow for each int?? Tong -Original Message- From: Brian [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 19, 2000 10:11 AM To: Sim, CT (Chee Tong) Cc: [EMAIL PROTECTED] Subject: Re: how to turn on the ip accounting? On Tue, 19 Dec 2000, Sim, CT (Chee Tong) wrote: > Hi.. Dear all, > > May I know how to turn on the ip accounting on router? I know there is a > command "sh ip cache flow" to view what kind of traffic passing thru the > router. But what is the command to turn it on in order to view sh ip cache > flow. Can all type of routers support "sh ip cache flow" ? How about 1700 > series? most low end routers do not support flow. I don't know about 1700's, I doubt it. 3600's do.7000's don't, 7200's do... for ip accounting you just do "ip accounting" in the interface configuration. Then "show ip accounting". You can clear it out as well. Brian > > Tong > > == > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en > de afzender direct te informeren door het bericht te retourneren. > == > The information contained in this message may be confidential > and is intended to be exclusively for the addressee. Should you > receive this message unintentionally, please do not use the contents > herein and notify the sender immediately by return e-mail. > > > == > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- Brian Feeny, CCNP+ATM, CCDP [EMAIL PROTECTED] Network Administrator ShreveNet Inc. (ASN 11881) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
any command to check the bandwidth of frame relay link?
Hi.. Dear all, May I know is there a command to check the real bandwidth of the frame relay line? I have a frame relay link from Singapore to Jakarta as shown. what is mean by BW 64 Kbit, ? They told me it is 128K, CIR 64K, but I cannot tell from below. Sim Serial0 is up, line protocol is up Hardware is PowerQUICC Serial Description: --- XNR=57754E DNA=2622024 MTN port=AJKT5-12/5 MTU 1500 bytes, BW 64 Kbit, DLY 2 usec, reliability 255/255, txload 15/255, rxload 7/255 Encapsulation FRAME-RELAY, loopback not set Keepalive set (10 sec) LMI enq sent 30201, LMI stat recvd 30202, LMI upd recvd 0, DTE LMI up LMI enq recvd 0, LMI stat sent 0, LMI upd sent 0 LMI DLCI 1023 LMI type is CISCO frame relay DTE Broadcast queue 0/64, broadcasts sent/dropped 21916/0, interface broadcasts 16853 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters 3d11h Input queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/18/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 2000 bits/sec, 4 packets/sec 5 minute output rate 4000 bits/sec, 4 packets/sec 841970 packets input, 340086907 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 5 input errors, 3 CRC, 0 frame, 0 overrun, 0 ignored, 2 abort 848797 packets output, 303003541 bytes, 0 underruns 0 output errors, 0 collisions, 4 interface resets 0 output buffer failures, 0 output buffers swapped out 31 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Serial0.2 is up, line protocol is up Hardware is PowerQUICC Serial Description: --- To SIN01 ser 1/1.19 --- Internet address is 57.200.243.12/30 MTU 1500 bytes, BW 64 Kbit, DLY 2 usec, reliability 255/255, txload 15/255, rxload 7/255 Encapsulation FRAME-RELAY JKT01> == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IP accounting and flow question
Hi..Dear all, May I ask some question about IP accounting as follow, just answer whatever u know even not all 1)How to reset the IP accounting count no? what is the command? 2)Is IP accounting affect router performance? 3)What is the command to enable the ip cache flow on the router? Whether additional module need to be installed in order to IP cache flow to be enable? 4)Is that possible to do IP accounting on serial sub interface? If yes, what is the command? My friend told me if he enable IP accouting on a serial sub interface, all the sub int on the serial link will be logged. Is that the problem? Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
MRTG problem, pls help !
Hi.. Dear Friends, 1)I am running MRTG on the LINUX but I found the graphic that it generates is in ABC.png format not ABC.gif format that's why my internet explorer cannot view the graphic but it can be viewed in Netscape. What should I do it in order to make the my internet explorer view the *.png file 2)I found that I can only extract the data from my switches but not my WAN routers, the error that it shows is due to SNMP error on my router. Therefore I extract SNMP info from my router and switch to do a comparison. what should I do to extract the data from the router? Router SIN01>sh snmp Chassis: JAB040880C6 4997483 SNMP packets input 0 Bad SNMP version errors 10471 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 0 Number of requested variables 0 Number of altered variables 1473940 Get-request PDUs 3513061 Get-next PDUs 0 Set-request PDUs 5004204 SNMP packets output 0 Too big errors (Maximum packet size 1500) 1296 No such name errors 0 Bad values errors 0 General errors 4987012 Response PDUs 17192 Trap PDUs SNMP logging: enabled Logging to 57.198.119.20.162, 0/10, 17000 sent, 192 dropped. ## SWITCH Cat29-L9-6>sh snmp Chassis: 0x10 134070 SNMP packets input 0 Bad SNMP version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 653586 Number of requested variables 0 Number of altered variables 133678 Get-request PDUs 392 Get-next PDUs 0 Set-request PDUs 134070 SNMP packets output 0 Too big errors (Maximum packet size 1500) 0 No such name errors 0 Bad values errors 0 General errors 134070 Get-response PDUs 0 SNMP trap PDUs SNMP logging: disabled == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
snmp issue?
Dear all, 1)May I know what is the difference between the 2 syntax below snmp-server community private RW snmp-server community public RO %% 2)If I have the conf as below, does it mean that only 57.198.1.5 can extract the snmp and MRTG infor from the router access-list 81 permit 57.198.1.5 tacacs-server host 57.198.119.20 tacacs-server key 69Dudes! snmp-server community WATCHER33 RO 81 snmp-server enable traps config snmp-server enable traps envmon snmp-server enable traps bgp snmp-server enable traps frame-relay snmp-server enable traps rtr snmp-server enable traps syslog snmp-server host 57.198.119.20 traps WATCHER33 banner login ^CC == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to view the power on off log
Hi.. Dear all, How to view the power on/off log of the router? Thank you in advance Tong tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
what is mean reverse telnet ?
Dear Friends, May I know what is meant by reverse telnet? How we use it with access server? Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to assign a loopback interfaces?
Dear friends, May I know what is the function of a lookback interface. how to assign loopback interfaces to routers? Thank you in advance Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
question on access server configuration for remote access
Dear Friends, I am building a remote server to allow remote access thru modem in our house? See the configuration below. I would like to ask 1)What is the difference between Async interface and line? 2)What is mean by IP unnumbered .I know it is to conserve the IP ? What is mean by conserve IP? ip unnumbered Ethernet0 mean what ? 3)so..if I connect thru modem from house.. the ip that assigned to my PC is 77.188.166.15? Is that true? Anything wrong with my confi? @@@ ! interface Ethernet0 ip address 77.188.166.11 255.255.252.0 ! interface Async1 ip unnumbered Ethernet0 encapsulation ppp no logging event subif-link-status async dynamic address async mode interactive peer default ip address 77.188.166.15 ! no ip classless ! line con 0 line 1 autoselect ppp modem callin speed 115200 line 2 8 line aux 0 line vty 0 4 password cisco login ! end == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
MAC address in SUN Firewall.
Hi.. Dear all, I have a SUN firewall which got 3 interfaces, but when I do a ifconfig -a on the sun, I got 3 different IP on 3 interfaces but all the MAC address are the same. Later on, I went to check on other sun machine which got more than one NIC, I found all of the NIC within one machine possess the same MAC address too Why? Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
access server can't access the dial in- pls help :(
Dear all, I have configured a access server as shown below, I attach my modem in Asyn 1 port and I can reverse telnet to it and the phone line got no problem. Besides, I used use a PC (win95) with a modem installed. In win95, I use hyperterminal to connect the PC modem and tested the at command,.. it work, so I used atdt 7 (my access server phone no) but I only heard the ring ring tone, the access server never accept it but I can see from the word RING RING on the access server's modem at command console. What should I configure to let the access server modem pick up the call ### interface Ethernet0 ip address 60.200.166.11 255.255.252.0 no logging event subif-link-status ! interface Async1 ip unnumbered Ethernet0 encapsulation ppp no logging event subif-link-status async dynamic address async mode interactive peer default ip address 60.200.166.15 ! ip classless ip route 0.0.0.0 0.0.0.0 60.200.164.1 permanent ! line con 0 line 1 password abc123 autoselect ppp login modem InOut transport input all stopbits 1 speed 2400 flowcontrol hardware == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: access server can't access the dial in- pls help :(
Yes.. the modem response it now.. but it just hang there after I type atdt7 it reply CONNECT 2400/REL-LAPM-COMP then stop !! I thought I can connect to the Access server from hyperterminal after the modem accept the call Pls tell me what should I do to see the configuration of the router -Original Message- From: Serhat Erkan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 18, 2000 8:05 PM To: 'Sim, CT (Chee Tong)' Cc: '[EMAIL PROTECTED]' Subject: RE: access server can't access the dial in- pls help :( this is not a RAS problem, it just a modem problem. take its settings to answer at first ring.. its at command is ATS0=1 good luck p.s for easy installation for RAS side use Cisco ConfigMaker. it is free and downloadable at Cisco site. -Original Message- From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 18, 2000 1:25 PM To: 'ElephantChild'; 'FAISAL ATHAR'; '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' Subject: access server can't access the dial in- pls help :( Dear all, I have configured a access server as shown below, I attach my modem in Asyn 1 port and I can reverse telnet to it and the phone line got no problem. Besides, I used use a PC (win95) with a modem installed. In win95, I use hyperterminal to connect the PC modem and tested the at command,.. it work, so I used atdt 7 (my access server phone no) but I only heard the ring ring tone, the access server never accept it but I can see from the word RING RING on the access server's modem at command console. What should I configure to let the access server modem pick up the call ### interface Ethernet0 ip address 60.200.166.11 255.255.252.0 no logging event subif-link-status ! interface Async1 ip unnumbered Ethernet0 encapsulation ppp no logging event subif-link-status async dynamic address async mode interactive peer default ip address 60.200.166.15 ! ip classless ip route 0.0.0.0 0.0.0.0 60.200.164.1 permanent ! line con 0 line 1 password abc123 autoselect ppp login modem InOut transport input all stopbits 1 speed 2400 flowcontrol hardware == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
able to dial in via hyperterminal but not dial up networking
Dear all, Thanks for your effort, I can successfully dial in to access server via hyperterminal, but I can't access using RAS dial up networking.. it prompt me for username and password? What is my username in this case ?? I never specified any username in my AS2509 conf file?? (Pls refer below) pls clarify me!! -Original Message- From: Serhat Erkan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 18, 2000 8:05 PM To: 'Sim, CT (Chee Tong)' Cc: '[EMAIL PROTECTED]' Subject: RE: access server can't access the dial in- pls help :( this is not a RAS problem, it just a modem problem. take its settings to answer at first ring.. its at command is ATS0=1 good luck p.s for easy installation for RAS side use Cisco ConfigMaker. it is free and downloadable at Cisco site. -----Original Message- From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 18, 2000 1:25 PM To: 'ElephantChild'; 'FAISAL ATHAR'; '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' Subject: access server can't access the dial in- pls help :( Dear all, I have configured a access server as shown below, I attach my modem in Asyn 1 port and I can reverse telnet to it and the phone line got no problem. Besides, I used use a PC (win95) with a modem installed. In win95, I use hyperterminal to connect the PC modem and tested the at command,.. it work, so I used atdt 7 (my access server phone no) but I only heard the ring ring tone, the access server never accept it but I can see from the word RING RING on the access server's modem at command console. What should I configure to let the access server modem pick up the call ### interface Ethernet0 ip address 60.200.166.11 255.255.252.0 no logging event subif-link-status ! interface Async1 ip unnumbered Ethernet0 encapsulation ppp no logging event subif-link-status async dynamic address async mode interactive peer default ip address 60.200.166.15 ! ip classless ip route 0.0.0.0 0.0.0.0 60.200.164.1 permanent ! line con 0 line 1 password abc123 autoselect ppp login modem InOut transport input all stopbits 1 speed 2400 flowcontrol hardware == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to dial up to access server via DUN?? what is my mistake??
Hi.. everyone, Could I ask you a access server problem, I had just installed a access server and I am able to connect to the access server remotely via hyperterminal, after I dial in, I just supply the password then I am get the access server> prompt, But How do I connect it via dial up networking? (Refer to the configuration file below), after I dial up to the server and supply with the tongiscute and password abc123 but I still cannot get thru. Is that the correct userID and password? As I access dial up networking using win NT, there is a Domain entry there. Should I use our NT username and password and domain name? If I connect successfully, what is my PC IP address, or we got to specify before we connect? then does it mean that I can connect to resource on the network using browser and network neighbourhood? Tong access_server#sh conf Using 1085 out of 32762 bytes ! version 11.2 no service password-encryption no service udp-small-servers no service tcp-small-servers ! hostname access_server ! enable secret 5 $1$rfub$oh/NltB4DqsEY6ydZNKKb/ ! username tongiscute password 0 abc123 ip host modem1 2001 57.200.166.11 ip host modem2 2002 57.200.166.11 ! interface Ethernet0 ip address 57.200.166.11 255.255.252.0 no logging event subif-link-status ! interface Serial0 no ip address no logging event subif-link-status shutdown no fair-queue ! interface Async1 ip unnumbered Ethernet0 encapsulation ppp no logging event subif-link-status async dynamic address async mode interactive peer default ip address 57.200.166.15 ppp authentication pap ! ip classless ip route 0.0.0.0 0.0.0.0 57.200.164.1 permanent ! line con 0 line 1 password abc123 autoselect ppp login local modem InOut transport input all speed 2400 flowcontrol hardware line 2 location modem2 no exec password abc123 login modem InOut transport input all speed 115200 flowcontrol hardware line 3 8 line aux 0 line vty 0 4 no exec password cisco login ! end -Original Message- From: Cristi Piatnitchi [mailto:[EMAIL PROTECTED]] Sent: Monday, October 23, 2000 4:41 PM To: [EMAIL PROTECTED] Subject: HP OpenView and CISCO Hi all I am working with HP Openview (not HP NNM). I don't understand why my routers (they haven't been discovered by HPOV) are still blue. I put these routers manually on my map, I set up pooling interval properly but they are still blue (the color of their icons) instead of being green red or yellow. They respond at ping or SNMP queries but no status information (usually blue color means no info in HP OV) Any idea? Thanks in advance Cristian Piatnitchi ___ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
thanks I got it! RE: how to dial up to access server via DUN??what is my mistake??
Thanks you all!! I got it...!! Thanks -Original Message- From: A. Geoffrey Cauchi [mailto:[EMAIL PROTECTED]] Sent: Monday, October 23, 2000 11:24 PM To: Sim, CT (Chee Tong); 'Cristi Piatnitchi'; [EMAIL PROTECTED] Subject: Re: how to dial up to access server via DUN?? what is my mistake?? Try typing ppp after that the access server accepts the username/password PPP should start (you see a lot of "garbage" on the screen) then select continue You should then be online. Geoff - Original Message ----- From: "Sim, CT (Chee Tong)" <[EMAIL PROTECTED]> To: "'Cristi Piatnitchi'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, October 23, 2000 12:46 PM Subject: how to dial up to access server via DUN?? what is my mistake?? > Hi.. everyone, > > Could I ask you a access server problem, I had just installed a access > server and I am able to connect to the access server remotely via > hyperterminal, after I dial in, I just supply the password then I am get the > access server> prompt, > > But How do I connect it via dial up networking? (Refer to the configuration > file below), after I dial up to the server and supply with the tongiscute > and password abc123 but I still cannot get thru. Is that the correct userID > and password? > > As I access dial up networking using win NT, there is a Domain entry there. > Should I use our NT username and password and domain name? If I connect > successfully, what is my PC IP address, or we got to specify before we > connect? then does it mean that I can connect to resource on the network > using browser and network neighbourhood? > > Tong > > > access_server#sh conf > Using 1085 out of 32762 bytes > ! > version 11.2 > no service password-encryption > no service udp-small-servers > no service tcp-small-servers > ! > hostname access_server > ! > enable secret 5 $1$rfub$oh/NltB4DqsEY6ydZNKKb/ > ! > username tongiscute password 0 abc123 > ip host modem1 2001 57.200.166.11 > ip host modem2 2002 57.200.166.11 > ! > interface Ethernet0 > ip address 57.200.166.11 255.255.252.0 > no logging event subif-link-status > ! > interface Serial0 > no ip address > no logging event subif-link-status > shutdown > no fair-queue > ! > interface Async1 > ip unnumbered Ethernet0 > encapsulation ppp > no logging event subif-link-status > async dynamic address > async mode interactive > peer default ip address 57.200.166.15 > ppp authentication pap > ! > ip classless > ip route 0.0.0.0 0.0.0.0 57.200.164.1 permanent > ! > line con 0 > line 1 > password abc123 > autoselect ppp > login local > modem InOut > transport input all > speed 2400 > flowcontrol hardware > line 2 > location modem2 > no exec > password abc123 > login > modem InOut > transport input all > speed 115200 > flowcontrol hardware > line 3 8 > line aux 0 > line vty 0 4 > no exec > password cisco > login > ! > end > > -Original Message- > From: Cristi Piatnitchi [mailto:[EMAIL PROTECTED]] > Sent: Monday, October 23, 2000 4:41 PM > To: [EMAIL PROTECTED] > Subject: HP OpenView and CISCO > > > Hi all > > I am working with HP Openview (not HP NNM). I don't understand why my > routers (they haven't been discovered by HPOV) are still blue. I put these > routers manually on my map, I set up pooling interval properly but they are > still blue (the color of their icons) instead of being green red or yellow. > They respond at ping or SNMP queries but no status information (usually blue > color means no info in HP OV) > > Any idea? > Thanks in advance > > Cristian Piatnitchi > > > > > > ___ > Say Bye to Slow Internet! > http://www.home.com/xinbox/signup.html > > _ > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > == > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en > de afzender direct te informeren door het bericht te retourneren. > == > The information contained in this message may be confidential > and is intended to be exclusively for the addressee. Should you > receive this message unintentionally, please do not use the contents > herein
how to set priority on traffic type to pass thru router?
Hi.. Dear all, May I know how to set priority on certain type of traffic to pass thru router? what is the syntax?? Tong -Original Message- From: Stull, Cory [mailto:[EMAIL PROTECTED]] Sent: Monday, October 02, 2000 11:07 PM To: 'c.garofalo'; [EMAIL PROTECTED] Subject: RE: syslog Carmelo, I don't know what your problem is getting it to work on Sun but if you go out to winfiles.com they have some freeware syslog servers "Kiwi Syslog daemon" that you can setup on 95/NT.. and the router config would be the same as in the below link. Cory -Original Message- From: c.garofalo [mailto:[EMAIL PROTECTED]] Sent: Monday, October 02, 2000 6:50 AM To: [EMAIL PROTECTED] Subject: syslog Hi people, I would to shape the syslog for the Routers of my Organization on th Sun Workstation. I find an article on CISCO site that describe the configuration for the Workstation and the cisco router, but it don't work properly. http://www.cisco.com/warp/public/66/15.html Can you help me? Thanks Carmelo **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: [FW1] The problem that we have for long time, snap shot ofpr operties of policy editor attacged
Hi.. Dear all, thanks your contribution, but I check thru the the rulebase "Properties" in the Polcy Editor , but I found the setting of ICMP was set to checked and "Before Last" so, I include a snapshot of all the options in policy editor. Pls help me to take a look and tell me what is wrong Thank you very much Tong -Original Message- From: Loring Rose [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 25, 2000 5:47 AM To: 'Sim, CT (Chee Tong)' Subject: RE: [FW1] The problem that we have for long time, pls help-pictur e and expl aination attached "Rule 0" means the implied rulebase. This is set using the rulebase "Properties" in the Polcy Editor (click the "Properties" button on the toolbar or choose Policy...Properties from the menu bar). These rules are processed before any numbered rules. Look under the "Security Policy" tab and make sure "Accept ICMP" is checked (you normally want this set to "Before Last" so you can specify more detailed ICMP policies in the rulebase). Loring Rose MCSE, CCSA, CNA, A+ Network Engineer GreatDomains.com :> -Original Message- :> From: Sim, CT (Chee Tong) [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] :> Sent: Sunday, October 22, 2000 7:42 PM :> To: 'Didier Arenzana'; 'Rodney Lacroix'; :> '[EMAIL PROTECTED]' :> Subject: RE: [FW1] The problem that we have for long time, pls :> help-pictur e and expl aination attached :> :> :> Hi.. Thank you very much for your info, I appreciate that. :> :) However I want :> to check with u about the rule I had implemented, the rest, :> I followed your :> instruction. :> :> The rule as follow :> Source Des Service Action :> Rule 9: Any 55.55.55.200 Any Accept :> Rule 10: Any 10.10.10.68Any Accept :> :> Is that correct? :> :> But when I ping 55.55.55.200 from my PC 55.55.55.100, it :> still show me the :> destination not reachable, then I check the log and found :> some thing funny :> as shown :> :> Int Origin ActionSource Dest Protocol :> Rule XlateSrc :> XlateDst :> hme1FwAccept 55.55.55.100 55.55.55.200 ICMP :> 9 55.55.55.100 :> 10.168.3.68 :> hme2FwReject 55.55.55.100 55.55.55.200 ICMP :> 0 55.55.55.100 :> 10.168.3.68 :> :> What is rule 0?? I never specify rule 0, all rules start :> from 1? Why it :> reject the something again in rule 0? :> :> Pls clarify me. :> Tong :> :> -Original Message- :> From: Didier Arenzana [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] :> Sent: Saturday, October 21, 2000 3:01 AM :> To: Sim, CT (Chee Tong); 'Rodney Lacroix'; :> '[EMAIL PROTECTED]' :> Subject: Re: [FW1] The problem that we have for long time, pls :> help-picture and expl aination attached :> :> :> :> Hi, :> :> 1) ARP. Your ARP entry is correct. :> :> 2) NAT Rules. :> You want your 10.10.10.68 Workstation to be seen as 55.55.55.200. :> The following will do (static): :> Src IP Dest IP ServXl SrcXl Dest :> Any 55.55.55.200 Any Orig 10.10.10.68 (s) :> The above means: if a packet arrives with any src ip, a dest ip of :> 55.55.55.200 to any service, xlate it to its orig src ip, and dest ip :> of 10.10.10.68. This rule will be used when any workstation tries to :> contact 55.55.55.200. :> :> Src IP Dest IP Serv Xl Src Xl Dest :> 10.10.10.68 Any Any 55.55.55.200(s) orig :> This rule will be used for the return packets. :> :> 3) Routing. :> Routing is done BEFORE NAT. So you should tell your OS that :> if a packet :> must be routed to 55.55.55.200, it must go through gateway :> 10.10.10.68. :> The following command will do: :> route add 55.55.55.200 10.10.10.68 1 (on Solaris... I'm a :> Unix admin. I :> use NT only for GUIs) :> :> With this configuration, it should work. :> :> PS: Please use ASCII art to write your diagram next time, it's quite :> time-consuming to have to open word or a .doc viewer to read your :> message. :> :> --- "Sim, CT (Chee Tong)" <[EMAIL PROTECTED]> a écrit : > :> Dear all, :> > :> > I need to access a WSS server on the DMZ zone using a fake :> address on :> > my :> > localnet. Full explaination and picture are shown in the :> attachment :> > below. :> > Picture is simple, pls take a look and help me. :> > :> > Thank you very much :> > Tong :> >
wat's the procedeure to install HP openview ?
Hi... Dear Friends, May I ask what is the procedure to install HP openview on the solaris in order to get the information of our company WAN? 1)Where can I get the software? 2)What network information I need before installing? 3)Whether the HP OV admin is different from solaris admin account? 4)Where do I draw the diagram of the company network? 5)Should I do anything on the routers, switches or sun station in order for information to be sent from network devices to servers Thank you very much Tong -Original Message- From: Chuck Larrieu [mailto:[EMAIL PROTECTED]] Sent: Monday, October 30, 2000 12:47 AM To: Brian; whatshakin; [EMAIL PROTECTED] Subject: RE: Frame Switch Normally I would make some righteous comment about looking it up on CCO, but I find that as usual, the information is not necessarily readily found. >From CCO: Asynchronous/Synchronous Port Features The low-speed asynchronous/synchronous ports connect terminals, printers, modems, microcomputers, and remote LANs over asynchronous serial lines to an internetwork, or to synchronous devices such as DSU/CSUs on the same ports. The asynchronous/ synchronous ports support data transmission rates of up to 115.2 kbps on the following serial interfaces: * EIA/TIA-232 * EIA/TIA-449 * EIA-530 * V.35 * X.21 Does this help? Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brian Sent: Sunday, October 29, 2000 7:04 AM To: whatshakin Cc: [EMAIL PROTECTED] Subject:Re: Frame Switch On Sun, 29 Oct 2000, whatshakin wrote: > High speed (synchronous) ports are good for 2.048mb/s and the low speed > (asynchronous) ports max out at 115.2 Kb/s. we aren't talking about async ports though. The 252x is 4 syncrhonous ports. 2 low speed synchronous, and 2 high speed. I believe high speed sync ports can goto 4Mbps, and low speed to 64kpsI may be wrong though. Brian > > > > - Original Message - > From: Brian <[EMAIL PROTECTED]> > Newsgroups: groupstudy.cisco > To: Austin <[EMAIL PROTECTED]> > Cc: <[EMAIL PROTECTED]> > Sent: Saturday, October 28, 2000 7:47 PM > Subject: Re: Frame Switch > > > > On Sat, 28 Oct 2000, Austin wrote: > > > > > I have a 2523 in my lab configured as a Frame Relay Switch. > > > All the serial ports are acting as DCE providing clocking to the > routers. > > > Initially, all clock rates were set to 64000 but I changed it to 100 > .. > > > for some reason, only serial0 and serial1 accepted the new clockrate > speed f > > > 100 ... when i tried to enter the clock rate command on the others > it > > > says ... %Error: Unsupported clock rate for this interface . > > > When I do a show interfaces > > > the output for serial0 and serial 1 ... the second line of the output > says > > > Hardware is HD64570 . > > > for all the other serial interfaces . the second line of the output > says > > > Hardware > > > is CD2430 in sync mode . > > > The keywords being "in sync mode" ... I am guessing that this might be a > > > reason I cannot set the clock rate on the other serial interfaces at > 100 > > > > > > > > > Any ideas from anyone as to what is happening and why it is like that? > > > > on 252x routers, you have 2 "high speed" serial interfaces, and 2 "low > > speed" serial interfaces. High speed usually means that it can goto 4Mbps > > I believe. Cisco usually denotes a modular high speed interface with "T", > > as in like a NP-2T, or a NM-4T. Low speed usually means that it can goto > > 64kps. Low speed interfaces are denoted with an "S", like CSC-4S on a > > AGS+ is 4 low speed ports. > > > > Don't fret though, in a home lab this is fine usually. Even 4 low speed > > interfaces would allow you to do everything. > > > > Brian > > > > > > > > > > > > Thanks, > > > > > > > > > > > > _ > > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > > > --- > > Brian Feeny, CCNP, CCDP [EMAIL PROTECTED] > > Network Administrator > > ShreveNet Inc. (ASN 11881) > > > > _ > > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > _ > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > --- Brian Feeny, CCNP, CCDP [EMAIL PROTECTED] Network Administrator ShreveNet Inc. (ASN 11881) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _
RE: TELNET question?
Hi.. By default Solaris don't allow telnet remotely using root account.. but it can be disabled The setting is a file /etc/default/login there is a entry CONSOLE=/dev/console you can disable it using # as below #CONSOLE=/dev/console Cheers Tong -Original Message- From: Ngo Van Dzung [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 31, 2000 5:35 PM To: CISCO Group Study Subject: TELNET question? Hi All, I have server with SUN Solaris 7, from a Workstation (Windows 98), I telnet to the Server and logon using user root, but after I typed username and password I saw following message: --- Not on system console Connection to host lost. --- But if I telnet and logon with another username it done successfuly, and I can su to root no problem. So how can I telnet and logon using user root? Please help me! Cheeres, _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to log the access log on access server AS2509 to syslogserve r?
Dear all, May I ask how to see the access log on the access server AS2509. When I do the sh log on it I only se the interface Async1 changed state to up and down (as shown below), but I want to see who had accessed it from which phone number it call from, which ID it use and etc. I know this information can be logged on a syslog server (on Solaris), may I know how to do it? what are the thing that I need to do on solaris and the access server Where and how to view the info, after I completed that Thank you very much Tong ## access_server#sh log Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: level debugging, 147 messages logged Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 145 message lines logged Buffer logging: level debugging, 147 messages logged Log Buffer (4096 bytes): N: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %SYS-5-CONFIG_I: Configured from console by vty0 (57.198.165.199) %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state
how to log the access log on access server AS2509 to syslogserv er?
Dear all, 1)May I ask how to see the access log on the access server AS2509. When I do the sh log on it I only se the interface Async1 changed state to up and down (as shown below), but I want to see who had accessed it from which phone number it call from, which ID it use and etc. 2)I know this information can be logged on a syslog server (on Solaris), may I know how to do it? what are the thing that I need to do on solaris and the access server 3)Where and how to view the info, after I completed that? 4)I am using PC(win NT) with a modem to dial to a Access server AS2509 in my company from house. We are using WinNT in our company and our DHCP is in NT. But after I dial up, I found the IP is assigned correctly, but the subnet mask are wrong as well as the default gateway, may I know how to get these info remotely from our DHCP, what are the thing to be done on the access server and my PC?? Thank you very much Tong ## access_server#sh log Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging: level debugging, 147 messages logged Monitor logging: level debugging, 0 messages logged Trap logging: level informational, 145 message lines logged Buffer logging: level debugging, 147 messages logged Log Buffer (4096 bytes): N: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %SYS-5-CONFIG_I: Configured from console by vty0 (57.198.165.199) %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down %LINK-5-CHANGED: Interface Async1, changed state to reset %LINK-3-UPDOWN: Interface Async1, changed state to down %LINK-3-UPDOWN: Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down %LINK-5-CHANGED: Inte
how to assign IP, sudnet mask, default gateway for a clientdial to the access server
I am using PC(win NT) with a modem to dial to a Access server AS2509 in my company from house. We are using WinNT in our company and our DHCP is in NT. But after I dial up, I found the IP is assigned to my home PC correctly, but the subnet mask are wrong as well as the default gateway, may I know how to get these info remotely from our DHCP, what are the thing to be done on the access server and my PC?? Thank you very much Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
syslog and tacacs+ and AAA question give idea pls!
Hi..Dear all, I am doing a project on the access server and tried to log the status of the access server to a unix host using syslogd, I have done that, but I have a few question to ask 1)what is the meaning of the syntax "logging facility local0, local1, local2.. what I understand from the book is refer to where to log, but what are the difference between local0, local1, amd local2 and etc??? what is mean by where to log?? where does it refer to??? 2)I found the information that log by the access server is not enough, it only log the when the Async1 is up and down, that mean when the access server was accessed (shown below)? What I want to log who is the one that access the access server, as I configured a lot of userID for people to access and I need to what ID they use, and achieve the AAA standard. Should I configured a TACACS+ server instead? What is the procedure to configure TACACS+ server? and How do I view the TACACS+ for info?? Pls help if u can. Thank you very much Tong LOG% % Nov 7 17:17:38 57.200.166.11 16: %SYS-5-CONFIG_I: Configured from console by vty0 (57.198 .164.229) Nov 8 09:37:33 57.200.166.11 17: %SYS-5-CONFIG_I: Configured from console by vty0 (57.198 .165.199) Nov 8 10:09:00 57.200.166.11 18: %LINK-3-UPDOWN: Interface Async1, changed state to up Nov 8 10:10:48 57.200.166.11 19: %LINK-3-UPDOWN: Interface Async1, changed state to down Nov 8 23:00:35 57.200.166.11 20: %LINK-3-UPDOWN: Interface Async1, changed state to up Nov 8 23:24:17 57.200.166.11 21: %LINK-3-UPDOWN: Interface Async1, changed state to down You have new mail in /var/spool/mail/root [root@apple /root]# == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to configure the TACACS+ daemon server in Linux or Sun
Hi.. Dear all, May I ask you how to install or configure TACACS+ daemon server in Linux or Sun Solaris platform? All the information that I get is about how to configure TACACS+ on router or Access server and point to TACACS+ server using tacacs-server host command but it doesn't cover how to install and configure the TACACS+ daemon in Linux or Solaris? May I ask how to install TACACS+ in UNIX??? Do we need to install some sort of third party software in Linux or solaris? Or Just to enable TACACS+ in UNIX server?? Pls clarify me. Thank you very much Tong -Original Message- From: Janto Cin [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 11:37 AM To: [EMAIL PROTECTED] Subject: Need advise for pass the Support exam Hi All, Would you pls give me your advise for pass the Support exam ? Is it enough to pass the exam by using CIT book from CiscoPress only ? TIA. Best Regards, Janto Cin == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
How can I set traffic priority base on host to host using QoS
Hi.. May I know what is the Queueing or Shaping Sheme that I can implement on the routers to optimize the traffic between two hosts on two different routers?? I got 2 Networks, A (60.100.0.0) and B (199.100.0.0), and router A (60.100.0.1) and B (199.100.0.1)? I want to set high priority between to host C 60.100.0.10 and host D 199.100.0.10 May I know what is the QoS sheme on this?? or command that I need to put in for two routers> Sim == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
where to get the netmon software?
Hi... May I know netmon to get the netmon software which is NT network analyser software? Do we need license to install? Any free copy?? Thanks in advance Sim == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
which is the correct cisco book for switching exam??
Hi.. I saw two books published by CISCO CCNP switching exam. 1) Cisco CCNP switching exam certification guide Author: Tim Boyles, ISBN: 158727 2)Building Cisco Multilayer Switched Networks Author: Karen Webb, ISBN: 1578700930 which is the correct one or which one is better?? Chee == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
what is the passing mark for CCNP switching?
Hi.. May I know what is the passing mark for CCNP switching? How many questions and time allow? Whether the mark is from the scale from 300 to 1000 like what CCNA 2.0 do?? SCT == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how can the router tell the dialer-in pc what is the gateway
For me, I use the access server for dial in and I define it to get IP from the DHCP server so the default gateway is automatically assigned by DHCP server as well. add this line ip dhcp-server Tong -Original Message- From: leo [mailto:[EMAIL PROTECTED]] Sent: Monday, April 09, 2001 3:16 PM To: [EMAIL PROTECTED] Subject: how can the router tell the dialer-in pc what is the gateway PSTN DDN(PPP) PCs---Router1-Router2| |--network A (188.205.0.0) | the ip address of the router1's ethernet is 1.2.3.4,the pc connecting the router1 via hub can acess network A, the PCs use PSTN dialer in the router1's a/s,and get an ip address which is in the router1's address pool,in router1,i use async-bootp gateway 1.2.3.4,but after the pc dialer in the router,I use the command "winipcfg" in win98,it tells me that its gateway is the ip address of itself!so the dialer-in pc can't access network A Could someone tell me how can the pc access network A (except in the pc,use "route add default 1.2.3.4)? == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how can the router tell the dialer-in pc what is the gateway
Sorry.. I think I was wrong in my previous mail, it is correct for dial in PC to show its gateway to be its own ip address of itself. Because after dialing into router, the dial in PC is like directly connected to Router1 and it is the only device connected. Therefore it is okay for PC's gateway to be its own IP. Regarding why your PC can't reach network A, pls check the routing table and gateway of router1. If your router1 can't reach network A, then your PC also can't reach network A. -Original Message- From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]] Sent: Monday, April 09, 2001 4:30 PM To: 'leo'; [EMAIL PROTECTED] Subject: RE: how can the router tell the dialer-in pc what is the gateway For me, I use the access server for dial in and I define it to get IP from the DHCP server so the default gateway is automatically assigned by DHCP server as well. add this line ip dhcp-server Tong -Original Message- From: leo [mailto:[EMAIL PROTECTED]] Sent: Monday, April 09, 2001 3:16 PM To: [EMAIL PROTECTED] Subject: how can the router tell the dialer-in pc what is the gateway PSTN DDN(PPP) PCs---Router1-Router2| |--network A (188.205.0.0) | the ip address of the router1's ethernet is 1.2.3.4,the pc connecting the router1 via hub can acess network A, the PCs use PSTN dialer in the router1's a/s,and get an ip address which is in the router1's address pool,in router1,i use async-bootp gateway 1.2.3.4,but after the pc dialer in the router,I use the command "winipcfg" in win98,it tells me that its gateway is the ip address of itself!so the dialer-in pc can't access network A Could someone tell me how can the pc access network A (except in the pc,use "route add default 1.2.3.4)? == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Maximum Serial bandwidth = inbound + outbound rate? [7:864]
Hi.. group May I ask if a serial link is said to be 256K, does it mean that the both input and output rate cannot exceed 256K or the SUM of input rate and output rate cannot exceed 256K. What is the Duplex type of Serial link as shown below? Why some of the serial link traffic rate are based on 5 minute in/output rate, but some of them are based on 10 minute in/output rate. How to change it? Does it shown the same info? How they count? They determined the number of bits in 5 minute and divided by the number of second in 5 minute 5X60s?? SIN01>sh int s2/0 Serial2/0 is up, line protocol is up Hardware is M4T Description: --- Connects to LON01 S2/0 - MCI Circuit ID W0B73202 --- Internet address is 57.192.240.70/30 MTU 1500 bytes, BW 256 Kbit, DLY 2 usec, reliability 255/255, txload 77/255, rxload 49/255 Encapsulation HDLC, crc 16, loopback not set Keepalive set (10 sec) Last input 00:00:01, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0 (size/max/drops); Total output drops: 14248 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/20/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 5 bits/sec, 28 packets/sec 5 minute output rate 78000 bits/sec, 32 packets/sec 101610672 packets input, 3280206236 bytes, 0 no buffer Received 872308 broadcasts, 1 runts, 35 giants, 0 throttles 5313 input errors, 4073 CRC, 0 frame, 7 overrun, 0 ignored, 1233 abort 115170761 packets output, 3847528448 bytes, 0 underruns 0 output errors, 0 collisions, 547 interface resets 0 output buffer failures, 0 output buffers swapped out 554 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=864&t=864 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
spanning tree question.. about diameter [7:1331]
Hi.. I read CISCO BCMSN book.. it said that modifying the spanning tree dia (network diameter) will correcly modify the timer (eg Max age, hello, forward delay). But I don't understand how "dia" can modify it? Based on what conditions? >From the show spantree output as shown below from 2900..and based on their hello and max age how do I know its "dia"? What is the defination of dia? If I have a network, how to determine the "dia" I should set for the dia?? Cat29-L8-2>sh spantree Spanning tree 1 is executing the IEEE compatible Spanning Tree protocol Bridge Identifier has priority 32768, address 00d0.58b0.6280 Configured hello time 2, max age 20, forward delay 15 Current root has priority 8192, address 00d0.063e.0c00 Root port is 13, cost of root path is 19 Topology change flag not set, detected flag not set, changes 3579 Times: hold 1, topology change 35, notification 1 hello 1, max age 6, forward delay 4 Timers: hello 0, topology change 0, notification 0 2)How to show the "last topology change" info in 2900 and 5500? The show spantree output above didnot show that info. == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=1331&t=1331 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
what wrong with the access-list?? [7:1825]
Hello, 1)I wanted to create a named IP access-list , then I used the following command at the first step. But it prompt me with error. What's wrong? sin-net#conf t Enter configuration commands, one per line. End with CNTL/Z. sin-net(config)#ip access-list extended Binternet ^ % Invalid input detected at '^' marker. 2)Take a look below sin-net(config)#access-list 201 permit tcp host 100.100.100.100 host 100.100.100.101 eq any anything wrong with this? if I want to block every TCP connection from 100.100.100.100 to 100.100.100.101 regardless the port what should I do? if I want to block every connection 100.100.100.100 to 100.100.100.101 regardless it it tcp, udp and etc What should I do? 3)I have a internet router with one ethernet0 int's IP 100.100.100.101 and a serial IP unumbered to ethernet0, I have a firewall which connect to ethernet0 of the router with IP 100.100.100.100. I want to disallow other from internet cannot ping my router ethernet only 100.100.100.100 can 100.100.100.101(ethernet0) what should I do? Can I do the the following? As I know access-list work only for packet passing thru the router but the destination is the router's ethernet IP. Can it works? and which interface should I apply the access-list actually serial or ethernet? since serial is unumbered to ethernet int Router(config)#access-list 101 permit icmp 100.100.100.100 100.100.100.101 Router(config)#int eth0 Router(config-if)ip access-group 101 out == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=1825&t=1825 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: what wrong with the access-list?? [7:1825]
thanks for the your answer, I have solved it. But I am doubt that whether we should add a "access-list 101 permit ip any any" to the access-list 101. If I were not wrong, only access-list "permit" end with implicit deny at the end. But access-list deny doesn't end with implicit permit at the end. Is that correct?? B)For your info, our serial got sub-interface but only 1, s0.1, so I have to applied to the sub-int instead of main interface right?? But I am applying to the sub-interface now C)I tried if I used outbound access-list , it doesn't work, only inbound access-list work, is it because 100.100.100.101 is the router ethernet IP, so if it is outbound filter, it will route to the ethernet first before checking the access-list. Mu assumption correct or not? 3)As part of other set of access lists on your serial side Router(config)#access-list 101 deny icmp any host 100.100.100.101 Router(config)#int s0 Router(config-if)ip access-group 101 in -Original Message- From: Williamson, Paul [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 25, 2001 3:50 PM To: [EMAIL PROTECTED] Subject: RE: what wrong with the access-list?? [7:1825] These are answers to your questions, although i wouldn't simply use these answer to configure this router. 1) you need to upgrade your IOS (not sure what to exactly 12.x will do it) 2) you should use ACL numbers 100-199, also use Deny, don't need the eq any ie sin-net(config)#access-list 101 deny tcp host 100.100.100.100 host 100.100.100.101 to deny everything use sin-net(config)#access-list 101 deny ip host 100.100.100.100 host 100.100.100.101 3)As part of other set of access lists on your serial side Router(config)#access-list 101 deny icmp any host 100.100.100.101 Router(config)#int s0 Router(config-if)ip access-group 101 in Hope this helps -Paul -----Original Message- From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]] Sent: 25 April 2001 07:57 To: [EMAIL PROTECTED] Subject: what wrong with the access-list?? [7:1825] Hello, 1)I wanted to create a named IP access-list , then I used the following command at the first step. But it prompt me with error. What's wrong? sin-net#conf t Enter configuration commands, one per line. End with CNTL/Z. sin-net(config)#ip access-list extended Binternet ^ % Invalid input detected at '^' marker. 2)Take a look below sin-net(config)#access-list 201 permit tcp host 100.100.100.100 host 100.100.100.101 eq any anything wrong with this? if I want to block every TCP connection from 100.100.100.100 to 100.100.100.101 regardless the port what should I do? if I want to block every connection 100.100.100.100 to 100.100.100.101 regardless it it tcp, udp and etc What should I do? 3)I have a internet router with one ethernet0 int's IP 100.100.100.101 and a serial IP unumbered to ethernet0, I have a firewall which connect to ethernet0 of the router with IP 100.100.100.100. I want to disallow other from internet cannot ping my router ethernet only 100.100.100.100 can 100.100.100.101(ethernet0) what should I do? Can I do the the following? As I know access-list work only for packet passing thru the router but the destination is the router's ethernet IP. Can it works? and which interface should I apply the access-list actually serial or ethernet? since serial is unumbered to ethernet int Router(config)#access-list 101 permit icmp 100.100.100.100 100.100.100.101 Router(config)#int eth0 Router(config-if)ip access-group 101 out == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] PLEASE READ: The information contained in this e-mail is confidential and intended for the named recipient(s) only. If you are not an intended recipient of this email you must not copy, distribute or take any further action in reliance on it and you should delete it and notify the sender immediately. Email is not a secure method of communication and Nomura International plc cannot accept responsibility for the accuracy or completeness of this message or any attachment(s). Please examine this e-mail for virus infection, for which Nomur
don't know why the link is lost?? [7:3562]
Hi... We have a frame-relay link to Taipei and the link is down, we can't contact Taipei LAN and Taipei router, I do a "sh int" and found the int is in up and up position. and the FR PVC is active as well, but when I do and sh cdp neighbor, the Taipei router is missing, but I am sure the Taipei router is cdp enabled. What should be the problem? From below we know the link is active right? why cdp is gone? if int is in up up position, does it mean the circuit is up until the modem of the other end not the router? the connection between router and modem is down? SIN01>sh int s1/1.14 Serial1/1.14 is up, line protocol is up Hardware is M4T Description: --- Connects to TPE01 Ser0.2 --- DLCI = 401, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/1.14 BUT after a few hours, Line service provider called say the link is okay, both our site and Taipei did not do any physical work , but why the link is okay now. Any idea? I thought when the int show up and up, we should be able to ping the other end router??? why I could not ?? == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=3562&t=3562 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
password recovery problem with AAA [7:3735]
I am doing a password recovery for a 1700 router, I manage to see its previous configuration part. But I want to do a conf term to change setting. I found it was controlled by TACACS+ AAA server. How do I disable the setting of AAA so I can make change See below rommom 1>confreg 0X2142 rommom 2>reset Router>enable Router#conf mem Building configuration... 00:00:57: %IP_SNMP-3-SOCKET: can't open UDP socket KUL01# KUL01# *Mar 1 00:01:08: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0.2, cha nged state to down *Mar 1 00:01:08: %SYS-5-CONFIG_I: Configured from memory by console KUL01#conf term Command authorization failed. KUL01# *Mar 1 00:01:28: %-3-INVSTATE: AUTHOR/CMD: Internal state is invalid: astr uct 0x8093FF00 ustruct 0x0 -Traceback= 8006C154 8006C01C 800A41D0 800A5098 800B0CB8 80114BE0 == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=3735&t=3735 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
How to know the duplex and speed setting of Solaris NIC?? [7:4626]
Hi.. How to know the duplex and speed setting of Solaris NIC?? Many thanks Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=4626&t=4626 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: How to know the duplex and speed setting of Solaris NIC?? [7:4642]
Hi, Thanks for your info, I am using hme. But I have some futher question 1)From below, I know the way to set the duplex and speed, But how about the way to show the current speed and duplex type? I check my /etc/system file, there is no information regarding hme. Beside when I type ndd /dev/hme , it prompt me as below, what is name to get/set? refer to what ? tyogw01# ndd /dev/hme name to get/set ? 2)If I have different NIC in one solaris box, how to set it individually? Your command is "ndd /dev/hme -set adv_100fdx_cap=1" but it never specify which interface does it refer to ?? -Original Message- From: Thomas Crowe [mailto:[EMAIL PROTECTED]] Sent: Wednesday, May 16, 2001 10:21 AM To: Sim, CT (Chee Tong); [EMAIL PROTECTED] Subject: RE: How to know the duplex and speed setting of Solaris NIC?? [7:4626] That setting can be done 2 different ways (which both end up doing the same thing) On demand you can issue a 'ndd' command against the NIC driver (i.e. /dev/hme or /dev/qfe) like so: ndd /dev/qfe -set adv_autoneg_cap=0 ndd /dev/qfe -set adv_100fdx_cap=1 ndd /dev/qfe -set adv_100hdx_cap=1 ndd /dev/qfe -set adv_10fdx_cap=1 ndd /dev/qfe -set adv_10hdx_cap=1 The first ndd command turns off autonegotiation, this is needed Then you would enter ONE of the following commands to set the hard coded settings (100Full-Duplex, 100Half-duplex etc) This helps for the immediate but not on subsequent reboots, to fix that you need to a set of similar lines to your /etc/system file like so: set qfe:qfe_adv_autoneg_cap = 0 set qfe:qfe_adv_100fdx_cap = 1 set qfe:qfe_adv_100hdx_cap = 0 set qfe:qfe_adv_10fdx_cap = 0 set qfe:qfe_adv_10hdx_cap = 0 I always put all of these entries in my /etc/system. Doing the HME interfaces are very similar, just replace the qfe with hme. Also note this changes ALL instances of the driver type (i.e. all 4 ports on a qfe, or every hme interface in a box) Hope this help. __ Thomas Crowe Technical Director Research & Development CTS - Atlanta Phone: 770-664-3900 ext 45 __ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 15, 2001 9:22 PM To: [EMAIL PROTECTED] Subject: How to know the duplex and speed setting of Solaris NIC?? [7:4626] Hi.. How to know the duplex and speed setting of Solaris NIC?? Many thanks Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] This message was sent with an attachment which Rabobank International does not allow because the filetype is not considered to be business related or it contains "executable" code which could be destructive if run. Please note the attachment has now been deleted. Should the attachment contain business critical information then the sender should use an alternative file format to deliver the information. The original header content is included below The following files were deleted: Thomas Crowe.vcf == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=4642&t=4642 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to reduce a broadcast on PC? [7:5517]
Hi.. I used a fluke meter to check the health of our network. I found one of our Linux server are generating 14% of broadcast. But I don't know how to reduce it? any idea? For your information, we use this Linux box act as a syslog server to receive message from all our switches. Does it contribute to the broadcast? If the fluke meter found my network has 45% broadcast, will it slow down my network? Chee Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5517&t=5517 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Does Solaris box and microsoft PC run RIP? [7:5862]
how about OSPF and IGRP and etc?? -Original Message- From: Robert Nelson-Cox [mailto:[EMAIL PROTECTED]] Sent: Friday, May 25, 2001 2:55 PM To: [EMAIL PROTECTED] Subject: Re: Does Solaris box and microsoft PC run RIP? [7:5862] > >Dear all > >I have a router configured with RIP routing protocol "router >ripnetwork >50.0.0.0" then I found it discover some route from a solaris box >50.100.45.3 and point some routes (as shown below) to solaris box, as the >solaris box got route to all these network. My question is " Does Solaris >box and microsoft PC run RIP? if yes, how to enable and configure it?" I >thought RIP can only discover the route from the router? am I wrong? Most unices run RIP by default. If you disable the routed process, this will stop rip running. If you can't find routed, look for gated. NT runs RIP so i am lead to believe, how you disable it I don't know. Rob./ _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=5869&t=5862 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
can we NAT the destination IP using IOS's NAT nature? [7:7032]
Hi..dear all, We have a requirment to NAT a destination virtual IP to a different IP behind the "Firewall". I have set up a cisco 2500 "packet filter" with 2 interfaces ethernet0, 50.100.167.101 and ethernet1 192.168.3.2 and they are in two different networks. There is a SUN host 192.168.3.31 (A) in 192.168.3.X network, We want to contact A in network 192.168.3.X from B (50.100.167.199) in network 50.100.167.x via a virtual IP 50.100.167.102 in eth0. What I mean when I connect to 50.100.167.102, I actually connect to 192.168.3.31, but people won't know the real IP of that. Can Cisco IOS router do this? The information I get can only translate the source IP address. How about destination address? If yes, can you show me how is the command look like? CT == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=7032&t=7032 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: can we NAT the destination IP using IOS's NAT nature? [7: [7:7036]
Hi.. What I need is whatever service that I connected to 50.100.167.102 it will connect me to 192.168.3.31 If this cannot be done, can you show me one service by one service. -Original Message- From: Brian [mailto:[EMAIL PROTECTED]] Sent: Monday, June 04, 2001 2:23 PM To: [EMAIL PROTECTED] Subject: Re: can we NAT the destination IP using IOS's NAT nature? [7: 7033] which services are you looking to redirect, any or just 1?? Brian - Original Message - From: "Sim, CT (Chee Tong)" To: Sent: Sunday, June 03, 2001 11:05 PM Subject: can we NAT the destination IP using IOS's NAT nature? [7:7032] > Hi..dear all, > > We have a requirment to NAT a destination virtual IP to a different IP > behind the "Firewall". I have set up a cisco 2500 "packet filter" with 2 > interfaces ethernet0, 50.100.167.101 and ethernet1 192.168.3.2 and they are > in two different networks. There is a SUN host 192.168.3.31 (A) in > 192.168.3.X network, We want to contact A in network 192.168.3.X from B > (50.100.167.199) in network 50.100.167.x via a virtual IP 50.100.167.102 in > eth0. What I mean when I connect to 50.100.167.102, I actually connect to > 192.168.3.31, but people won't know the real IP of that. Can Cisco IOS > router do this? The information I get can only translate the source IP > address. How about destination address? If yes, can you show me how is the > command look like? > > > CT > > == > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en > de afzender direct te informeren door het bericht te retourneren. > == > The information contained in this message may be confidential > and is intended to be exclusively for the addressee. Should you > receive this message unintentionally, please do not use the contents > herein and notify the sender immediately by return e-mail. > > > == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=7036&t=7036 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
why there are so many IPX traffic in my network [7:9045]
Hi. I use the fluke meter and ethereal software to check the health of our network and I found there are a lot of IPX traffic in our network. But we have no Novell server here and where is the IPX traffic coming from? In the ethereal output I saw a lot of statement like source destination Protocol Info 0.0008c7280106 0.IPX SAP Nearest Query 0.0008c7280106 0.IPX SAP General Query 0.0008c7280106 0.IPX SAP General Response 0.0008c7280106 0.NBIPXFind name "our domain name" 0.0008c7280106 0.BROWSER Host Announcement "workstation name" workstation, server, print queue server, NT workstation, NT server, Potential browser. In fluke meter, I saw these IPX are mostly by printer and printer server? Why printer got something to do with IPX . How to get rid of this? Please advice Thanks -Original Message- From: jason douglas [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 19, 2001 8:38 PM To: [EMAIL PROTECTED] Subject: Re: what about ccie-pre-qualification test in boson cisco [7: 9041] I thought it was similar. frank wrote: > > compared with 350-001,easier or much the same? > > Thanks, > > frank -- Jason Douglas Lucent World Wide Services Pager 888-451-0755 == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=9045&t=9045 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: why there are so many IPX traffic in my network [7:9045]
Thanks! I found the setting in the printer to disable the IPX. However Can we filter the IPX traffic on our 2900 IOS switches, and set based 5500 switches. IF yes.. what is the command to disable transmission of IPX traffic in the switches. -Original Message- From: Jim Dixon [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 19, 2001 9:40 PM To: Sim, CT (Chee Tong) Subject: RE: why there are so many IPX traffic in my network [7:9045] It may be an HP JetDirect card. Get rid of it by assigning your JetDirect and or Printer an IP Address (whichever you need to do) Turn IPX off on the JetDirect Print Server. OR Filter IPX at your router and see if you can still print. Then RE_check for your IPX.. Is it still there? Did printer stop working? If so then you may want to keep IPX till you can switch to IP. -Original Message- From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 19, 2001 8:12 AM To: [EMAIL PROTECTED] Subject: why there are so many IPX traffic in my network [7:9045] Hi. I use the fluke meter and ethereal software to check the health of our network and I found there are a lot of IPX traffic in our network. But we have no Novell server here and where is the IPX traffic coming from? In the ethereal output I saw a lot of statement like source destination Protocol Info 0.0008c7280106 0.IPX SAP Nearest Query 0.0008c7280106 0.IPX SAP General Query 0.0008c7280106 0.IPX SAP General Response 0.0008c7280106 0.NBIPXFind name "our domain name" 0.0008c7280106 0.BROWSER Host Announcement "workstation name" workstation, server, print queue server, NT workstation, NT server, Potential browser. In fluke meter, I saw these IPX are mostly by printer and printer server? Why printer got something to do with IPX . How to get rid of this? Please advice Thanks -Original Message- From: jason douglas [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 19, 2001 8:38 PM To: [EMAIL PROTECTED] Subject: Re: what about ccie-pre-qualification test in boson cisco [7: 9041] I thought it was similar. frank wrote: > > compared with 350-001,easier or much the same? > > Thanks, > > frank -- Jason Douglas Lucent World Wide Services Pager 888-451-0755 == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=9151&t=9045 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: what is loopback interface for ? [7:9493]
I have seems some routers with many lookback interfaces configured. May I know what is the purpose to have so many lookback? I thought one loopback can help us to troubleshoot the connectivity Besides, I am interested about question 5 from Richard, you said the lookback IPs within same network can be configured on different router. Does it mean that if we configured many lookback interfaces, those IPs must be in different network. for example 192.168.101.101/24 192.168.102.102/24. But Any one know what is the reason?? > 5) If I configured A's loopback IP to be 192.168.0.1/24, can we still > configured B's loopback to be 192.168.0.2/24? Note: there are in same > network. Sure you can since they are in two different routers. I won't recommend doing this though... The point is, there is no magic behind a loopback interface as you still need physical interface and routing entries if you need access. Richard -Original Message- From: Richard Chang [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 28, 2001 1:51 AM To: [EMAIL PROTECTED] Subject: Re: what is loopback interface for ? [7:9493] See lines below. ""Susan Stone"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi.. > > Sorry, I need a few more questions to verify whether my understanding on > loopback is correct or not? Pls answer it. > > 1) If I have two router A (loopback=192.168.0.1/32) and B > (loopback192.168.0.2/32), Router A's S1 int 100.100.100.1/24 is connected to > Router B's S1 100.100.100.2/24. There are no more other connection. If S1 > of B is down. Can I still telnet from A to B using B's loopback address. No. > > 2) If Router A and B have another connection. Router A's S2 int > 100.200.100.1/24 is connected to Router B's S2 100.200.100.2/24. If S1 of B > is down. Can I still telnet from A to B using B's loopback address? Yes, if you have correct routing entries. > > 3) If Router A doesn't have loopback int configured. Can we still telnet > from A to B? Of course you can simply telnet into any physical interface that's still up. > > 4) Whether the loopback IP address need to be in order or same network? Let > say Router A's loopback is 192.168.0.1/32 and Router B's loopback is > 20.20.20.1/8. Can we still telnet from A to B? Again, yes, if you have correct routing entries. > > 5) If I configured A's loopback IP to be 192.168.0.1/24, can we still > configured B's loopback to be 192.168.0.2/24? Note: there are in same > network. Sure you can since they are in two different routers. I won't recommend doing this though... The point is, there is no magic behind a loopback interface as you still need physical interface and routing entries if you need access. Richard > > > > > _ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=10361&t=9493 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
telnet buffer vul questions [7:34428]
I read a article about telnet buffer Vulnerability, they told these 2 products 1) Catalyst 2948G-uses Catalyst 4000 series code base, 2)Catalyst 2900-uses Catalyst 5000 series code base. May I know what is mean by Catalyst 2900 which uses Catalyst 5000 code base? My 2900 switch is C2900XL shown as follow, will it be affected as well? Cisco Internetwork Operating System Software IOS (tm) C2900XL Software (C2900XL-HS-M), Version 11.2(8)SA5, RELEASE SOFTWARE (fc1) Copyright (c) 1986-1999 by cisco Systems, Inc. Compiled Tue 23-Mar-99 11:44 by rheaton Image text-base: 0x3000, data-base: 0x001FAEF8 ROM: Bootstrap program is C2900XL boot loader Beside why I cannot enable ssh for my 5505 switch? Is that because of old software version? and what is meant by Cat5505 with Release 5 code base, is that that software version. FYI my Cat5505 is Version McpSW: 5.1(1) NmpSW: 5.1(1) Cat55-L9-1> (enable) set ip permit 57.198.164.0 255.255.252.0 ssh Usage: set ip permit set ip permit [mask] (mask is in dotted decimal format e.g. 255.255.0.0) == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34428&t=34428 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to enable ssh for 2900XL and 5505 switch ? [7:34575]
Hi... I want to enable ssh for my IOS based 2900XL switch and set based 5505 switch? Can you teach me how to do it? What is the min IOS version for to enable ssh? Besides, I found that I can't configure fair queue for my interface, what is the problem? Is it because of old IOS? Enter configuration commands, one per line. End with CNTL/Z. sin-uunet(config)#int e0 sin-uunet(config-if)#fair-queue ^ % Invalid input detected at '^' marker. sin-uunet#sh ver Cisco Internetwork Operating System Software IOS (tm) 3000 Software (IGS-IN-L), Version 10.3(12), RELEASE SOFTWARE (fc1) Copyright (c) 1986-1996 by cisco Systems, Inc. Compiled Mon 03-Jun-96 11:38 by dschwart Image text-base: 0x0301E770, data-base: 0x1000 ROM: System Bootstrap, Version 5.2(5), RELEASE SOFTWARE ROM: 3000 Bootstrap Software (IGS-RXBOOT), Version 10.2(5), RELEASE SOFTWARE (fc1) sin-uunet uptime is 10 weeks, 6 days, 17 minutes System restarted by error - Software forced crash, PC 0x3117D36 System image file is "flash:\tftpboot\IGS-IN-L.BIN", booted via flash cisco 2500 (68030) processor (revision D) with 4096K/2048K bytes of memory. Processor board serial number 02112491 Bridging software. X.25 software, Version 2.0, NET2, BFE and GOSIP compliant. 1 Ethernet/IEEE 802.3 interface. 2 Serial network interfaces. 32K bytes of non-volatile configuration memory. 4096K bytes of processor board System flash (Read ONLY) Configuration register is 0x2102 sin-uunet# == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34575&t=34575 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
traffic shaping question [7:34602]
Hi.. 1) First question to ask about the traffic-shaping. Please take a look on the following command. What is the defination of 100 125000 125000? access-list 101 permit udp any any interface Ethernet0 traffic-shape group 101 100 125000 125000 ! &&& 2) I also saw the following method for traffic shaping but it never specify the access-list number, what do the router know what kind of traffic are we targeting? interface Ethernet1 traffic-shape rate 500 625000 625000 3) I used another method to configure the traffic-shaping to limit the smtp traffic to 4K, but when I do show traffic-shape, it shows the target rate is 4k, Byte limit 2k. What's the meaning? and how router know to assign 2k to the byte limit? XXX(config)#access-list 110 permit tcp any any eq 25 XXX(config)#exit XXX#conf t Enter configuration commands, one per line. End with CNTL/Z. XXX(config)#int e0 XXX(config-if)#traffic-shape group 110 4000 XXX(config-if)#exit XXX(config)#exit XXX#sh traffic-shape Access TargetByte Sustain ExcessInterval Increment Adapt I/F List Rate Limit bits/int bits/int (ms) (bytes) Active Et0 1104000 2000 8000 8000 2000 1000 - == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34602&t=34602 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Visual switch manager gone after upgrade TFTP. [7:35716]
I was doing a TFTP upgrade procedure on the XL switch. There is a procedure to delete the HTML files: delete flash:html/* before copying the new flash and I have done that. After I upgraded the IOS and reload it. The IOS was successfully upgraded but when I go to web based (Visual switch manager) , there is no page shown. Then I go to my flash:html/ , it is empty % SwitchA#dir flash:html/ Directory of flash:html/ 190 d--x 0 Mar 01 1993 00:09:40 Snmp 3612672 bytes total (1850880 bytes free) %% I went to other switch (B), I found there are a lot of files on the html folder, what should I do to make the Visual Switch manager working again? Should I copy all the file to switch A? SwitchB#dir flash:html/ Directory of flash:html/ 5 -rwx 965 Mar 01 1993 00:09:55 Detective.html.gz 6 -rwx 671 Mar 01 1993 00:09:55 GraphFrame.html.gz 7 -rwx 675 Mar 01 1993 00:09:55 GraphFrameIE.html.gz 8 -rwx1182 Mar 01 1993 00:09:55 ethhelp.html.gz 9 -rwx1499 Mar 01 1993 00:09:55 fddihelp.html.gz 10 -rwx1538 Mar 01 1993 00:09:56 fdnethlp.html.gz 11 -rwx 538 Mar 01 1993 00:09:56 ieGraph.html.gz 12 -rwx 524 Mar 01 1993 00:09:56 ieLink.html.gz 13 -rwx 959 Mar 01 1993 00:09:56 LinkFetch.html.gz 14 -rwx 960 Mar 01 1993 00:09:56 LinkFetchIE.html.gz 15 -rwx 796 Mar 01 1993 00:09:56 LinkReport.html.gz 16 -rwx3346 Mar 01 1993 00:09:56 TopoMain.html.gz 17 -rwx5154 Mar 01 1993 00:09:57 address.html.gz 18 -rwx3332 Mar 01 1993 00:09:57 addrhelp.html.gz 19 -rwx2573 Mar 01 1993 00:09:57 amether.html.gz 20 -rwx2706 Mar 01 1993 00:09:57 amfddi.html.gz 21 -rwx2907 Mar 01 1993 00:09:58 amfdnet.html.gz 22 -rwx3291 Mar 01 1993 00:09:58 amtr.html.gz 23 -rwx3018 Mar 01 1993 00:09:58 amtrnet.html.gz 24 -rwx3071 Mar 01 1993 00:09:58 arp.html.gz 25 -rwx1147 Mar 01 1993 00:09:58 arphelp.html.gz 26 -rwx 210 Mar 01 1993 00:09:59 back.html.gz 27 -rwx4975 Mar 01 1993 00:09:59 balboa.html.gz 28 -rwx3171 Mar 01 1993 00:09:59 basichlp.html.gz 29 -rwx 171 Mar 01 1993 00:09:59 blank.html.gz 30 -rwx 527 Mar 01 1993 00:09:59 bottom.html.gz 31 -rwx3861 Mar 01 1993 00:10:00 cdp.html.gz 32 -rwx1562 Mar 01 1993 00:10:00 cdphelp.html.gz 33 -rwx3926 Mar 01 1993 00:10:00 cgmp.html.gz 34 -rwx1790 Mar 01 1993 00:10:00 cgmphelp.html.gz == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=35716&t=35716 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
software upgrade for Cat5505 switch for each module? [7:37382]
Hi.. I want to upgrade my catalyst 5505 switch (set based switch). I have never done it for set based cat5505 before and I found that there are a lot of modules in my switch, eg two supervisor module and two 10/100TX Ethernet, one RSM. Do I have upgrade the IOS for every modules? I found that when I type show flash, I got only binary file cat5000-sup3.5-1-1.bin. Can I just download the binary file from web eg cat5000-sup3.5-5-7a.bin and then upgrade by typing copy tftp flash. Will cat5000-sup3.5-5-7a.bin overwrite the old cat5000-sup3.5-1-1.bin or there will be two copy of binary file in the flash. I saw there are a few type of flash code eg Catalyst 5000 Supervisor G Flash Code, Catalyst 5000 Supervisor 3 Flash Code, and Catalyst 5000 Supervisor Flash Code. Can I use any one of them. Thanks # Cat55-L8-1> sh ver WS-C5509 Software, Version McpSW: 5.1(1) NmpSW: 5.1(1) Copyright (c) 1995-1999 by Cisco Systems NMP S/W compiled on Jun 14 1999, 12:12:39 MCP S/W compiled on Jun 14 1999, 12:09:13 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5509 Serial #: 067506336 Mod Port Model Serial # Versions --- -- - 1 2WS-X5534 012751856 Hw : 3.2 Fw : 3.1.2 Fw1: 4.4(1) Sw : 5.1(1) 2 2WS-X5534 012741455 Hw : 3.2 Fw : 3.1.2 Fw1: 4.4(1) Sw : 5.1(1) 3 24 WS-X5225R 013370887 Hw : 3.1 Fw : 4.3(1) Sw : 5.1(1) 4 1WS-X5302 013353225 Hw : 7.5 Fw : 20.14 Fw1: 3.1(1) Sw : 12.0(3c)W5(8), 5 24 WS-X5225R 012786062 Hw : 3.1 Fw : 4.3(1) Sw : 5.1(1) Cat55-L8-1> (enable) sh flash -#- ED --type-- --crc--- -seek-- nlen -length- -date/time-- name 1 .D a638976e 3627ec 23 3286891 Mar 10 2000 18:17:19 cat5000-sup3.4-3-1a.bi n 2 .. ce0e4293 70f7e8 22 3854201 Apr 25 2000 04:47:50 cat5000-sup3.5-1-1.bin # == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=37382&t=37382 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: software upgrade for Cat5505 switch for each module? [7:37383]
Hi.. I want to upgrade my catalyst 5505 switch (set based switch). I have never done it for set based cat5505 before and I found that there are a lot of modules in my switch, eg two supervisor module and two 10/100TX Ethernet, one RSM. Do I have upgrade the IOS for every modules? I found that when I type show flash, I got only binary file cat5000-sup3.5-1-1.bin. Can I just download the binary file from web eg cat5000-sup3.5-5-7a.bin and then upgrade by typing copy tftp flash. Will cat5000-sup3.5-5-7a.bin overwrite the old cat5000-sup3.5-1-1.bin or there will be two copy of binary file in the flash. I saw there are a few type of flash code eg Catalyst 5000 Supervisor G Flash Code, Catalyst 5000 Supervisor 3 Flash Code, and Catalyst 5000 Supervisor Flash Code. Can I use any one of them? I found my cat5005 is run on release 5 code based binary. Can I upgrade to release 6 code based binary? Sorry to ask so many question, I have to be carefully as it is in production. Thanks # Cat55-L8-1> sh ver WS-C5509 Software, Version McpSW: 5.1(1) NmpSW: 5.1(1) Copyright (c) 1995-1999 by Cisco Systems NMP S/W compiled on Jun 14 1999, 12:12:39 MCP S/W compiled on Jun 14 1999, 12:09:13 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5509 Serial #: 067506336 Mod Port Model Serial # Versions --- -- - 1 2WS-X5534 012751856 Hw : 3.2 Fw : 3.1.2 Fw1: 4.4(1) Sw : 5.1(1) 2 2WS-X5534 012741455 Hw : 3.2 Fw : 3.1.2 Fw1: 4.4(1) Sw : 5.1(1) 3 24 WS-X5225R 013370887 Hw : 3.1 Fw : 4.3(1) Sw : 5.1(1) 4 1WS-X5302 013353225 Hw : 7.5 Fw : 20.14 Fw1: 3.1(1) Sw : 12.0(3c)W5(8), 5 24 WS-X5225R 012786062 Hw : 3.1 Fw : 4.3(1) Sw : 5.1(1) Cat55-L8-1> (enable) sh flash -#- ED --type-- --crc--- -seek-- nlen -length- -date/time-- name 1 .D a638976e 3627ec 23 3286891 Mar 10 2000 18:17:19 cat5000-sup3.4-3-1a.bi n 2 .. ce0e4293 70f7e8 22 3854201 Apr 25 2000 04:47:50 cat5000-sup3.5-1-1.bin # == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=37383&t=37383 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: software upgrade for Cat5505 switch for each module? [7: [7:37527]
Hi.. Sorry some more questions. 1)I found although there are 5 module in my switch, when I do "sh flash", only one binary flash file appear. Which module does the belong to? 2)How to see the flash code file for other module. I found I can only go to the RSM by typing "session 4" and find out the flash ver. But I can't go to other modules like standby supervisor and 10/100BaseTX Ethernet. 3)I found that there is a entry in my switch config, set boot system flash bootflash:cat5000-sup3.5-1-1.bin. It should be refer to my main supervisor module and I know where the RSM config. But is there any configuration file for standby supervisor module and 10/100100BaseTX Ethernet module? If yes, how to see them, Do we have to set the boot system flash in their config? 4)I found the URL http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/c5krn/sw_rns/78_ 6583.htm#xtocid3 is to show the various flash code's release note. Do you know the flash upgrade guide for cat5505. Cat55-L8-1> (enable) sh module Mod Slot Ports Module-Type Model Status --- - - --- 1 12 1000BaseSX Supervisor WS-X5534ok 2 22 1000BaseSX Supervisor WS-X5534standby 3 32410/100BaseTX Ethernet WS-X5225R ok 4 41 Route Switch WS-X5302ok 5 52410/100BaseTX Ethernet WS-X5225R ok Cat55-L8-1> (enable) sh flash -#- ED --type-- --crc--- -seek-- nlen -length- -date/time-- name 1 .D a638976e 3627ec 23 3286891 Mar 10 2000 18:17:19 cat5000-sup3.4-3-1a.bi n 2 .. ce0e4293 70f7e8 22 3854201 Apr 25 2000 04:47:50 cat5000-sup3.5-1-1.bin #set boot command set boot config-register 0x102 set boot system flash bootflash:cat5000-sup3.5-1-1.bin -Original Message- From: Robertson, Douglas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 06, 2002 9:00 PM To: Sim, CT (Chee Tong); [EMAIL PROTECTED] Subject: RE: software upgrade for Cat5505 switch for each module? [7: 37382 ] Review the following document on CCO, http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/c5krn/sw_rns/78_ 6583.htm#xtocid3 the document indicates the upgrade path for Catalyst 5000 switches, it also has a table that shows which versions of CAT OS is supported by each module. Depending on what you needs are you may have to upgrade all the modules, the RSM runs IOS and will have different criteria to consider when upgrading. To upgrade the module you can use the following command : download . The download first checks to see if the downloaded image is correct for the particular module it then installs the image. As far as which image you would require depends on the type of hardware you are downloading to, for the supervisor cards you need to determine if they are supII, supIII, or supII gigabit. Hope this helps Doug -Original Message- From: Daniel Cotts [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 07, 2002 12:13 AM To: 'Sim, CT (Chee Tong)'; [EMAIL PROTECTED] Subject: RE: software upgrade for Cat5505 switch for each module? [7: 37383 ] Sup III cards require sup3 code. The versions that just say sup are for Sup I & II cards. Sup III cards have slots for Flash Cards. If you have those, then you can store multiple images. You must have a line in your config something like "boot system flash: image name" If your switch goes looking for a file that no longer exists it becomes unhappy. Version 6 of Cat code requires 64 MB of DRAM. There may also be a Firmware requirement. Check the docs for the desired image. Some of the first paragraphs will explain the requirements. The RSM is a router on a blade. It has its own IOS image that you would load seperately. -Original Message- From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 06, 2002 4:03 AM To: [EMAIL PROTECTED] Subject: software upgrade for Cat5505 switch for each module? [7:37382] Hi.. I want to upgrade my catalyst 5505 switch (set based switch). I have never done it for set based cat5505 before and I found that there are a lot of modules in my switch, eg two supervisor module and two 10/100TX Ethernet, one RSM. Do I have upgrade the IOS for every modules? I found that when I type show flash, I got only binary file cat5000-sup3.5-1-1.bin. Can I just download the binary file from web eg cat5000-sup3.5-5-7a.bin and then upgrade by typing copy tftp flash. Will cat5000-sup3.5-5-7a.bin overwrite the old cat5000-sup3.5-1-1.bin or there will be two copy of binary file in the flash. I saw there are a few type of flash code eg Catalyst 5000 Supervisor G Flash Code, Catalyst 5000 Supervisor 3 Flash Code, and Catalyst 5000 S
can access server accept two concurrent connections? [7:38087]
Hi... I have installed the access server that connected to a normal phone line and I can dial in via my home PC. I want to ask. 1) Whether the access server can accept two concurrent connections with only one phone line. If yes, how to do it? How does service provider provide so many connections to the users? What kind of hardware they are using 2) I use DHCP server to assign IP to the dial in PC. But I want to fix my PC's IP when I dial, not other dial in PC. Do modem have the MAC address? When I type ipconfig -all in my home PC, I saw the strange MAC address 44-45-53-54-00-00. Is that the correct MAC address? I reverse this MAC for a fix IP in DHCP, but seems doesn't work. Why? Thanks a lot Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=38087&t=38087 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
off topic: How to switch windows automatically? [7:38625]
Hi.. We have install a big screen on the wall to monitor our network, servers. We have several windows for each monitoring software. Only one Windows can occupy the screen at one time. But we want to switch between windows automatically. Any software or scripts to do it? FYI, we are using windows 2000. Thanks == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=38625&t=38625 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: off topic: How to switch windows automatically? [7:38625]
Can we use window's AT command to do it? But AT command can only do it once. I am not very good in windows scripts, if this is simple, can you provide the syntax? If it is complex, then I will learn it myself. Thanks a lot -Original Message- From: Ouellette, Tim [mailto:[EMAIL PROTECTED]] Sent: Monday, March 18, 2002 3:05 PM To: 'Sim, CT (Chee Tong)' Subject: RE: off topic: How to switch windows automatically? [7:38625] You could always script something to simulate someone pressing alt-tab every 10 seconds. If that's what you were looking at doing. -Original Message- From: Sim, CT (Chee Tong) [mailto:[EMAIL PROTECTED]] Sent: Monday, March 18, 2002 12:37 AM To: [EMAIL PROTECTED] Subject: off topic: How to switch windows automatically? [7:38625] Hi.. We have install a big screen on the wall to monitor our network, servers. We have several windows for each monitoring software. Only one Windows can occupy the screen at one time. But we want to switch between windows automatically. Any software or scripts to do it? FYI, we are using windows 2000. Thanks == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=38636&t=38625 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
NAT questions-will overlap occur? [7:38764]
I found my previous administrator configured the following NAT for my router (shown below). Our network is in 50.100.X.X and we need to contact a workstation in 192.168.3.X network (192.168.3.1-192.168.3.100). That's why he defined the source pool to be from 192.168.3.101 192.168.3.240 interface Ethernet0 description Interface facing Financial Service Provider ip address 192.168.3.1 255.255.255.0 ip nat outside interface Ethernet1 description Interface facing Rabobank (Trusted) network ip address 50.100.165.240 255.255.255.0 ip nat inside ip nat pool XXY 192.168.3.101 192.168.3.240 netmask 255.255.255.0 ip nat inside source list 1 pool XXY ## Q1)But, when I show IP nat trans. I saw the following, I understand the first two, but not line 3. the 192.168.3.118 should be the source address of returning packet, what is 192.168.3.119 ? RBFW2514#sh ip nat trans Inside global Inside local Outside localOutside global --- 192.168.3.117 50.100.165.81 --- --- --- 192.168.3.118 50.100.165.210--- --- --- 192.168.3.119 192.168.3.118 Q2)I understand there is another kind of NAT which work like the following. Inside global Inside local Outside localOutside global 192.168.2.2:1234 10.0.0.1:1234 172.21.3.1:23 192.168.2.2: 10.0.0.2: 172.21.3.2:23 192.168.2.2: 10.0.0.3: 172.21.3.4:23 What is the difference these method. I think both NAT can work. Why we don't use these one? Q3)But in this method, I found a problem what if 10.0.0.1 and 10.0.0.2 use the same port . There will be 2X 192.168.2.2: in the inside global. Will be 192.168.2.2: have problem identify which to be NAT back to 10.0.0.1 or 10.0.0.2. Thanks a lot Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=38764&t=38764 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: NAT questions-will overlap occur? [7:38764]
Hi Marc and dear all, >You cannot have the same network on both sides >of the NAT router. Why you said that I had same network on both side of the NAT router? I have 50.100.165.X and 192.168.3.X on both side of the NAT router. &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& > interface Ethernet0 > description Interface facing Financial Service Provider > ip address 192.168.3.1 255.255.255.0 > ip nat outside > > interface Ethernet1 > description Interface facing Rabobank (Trusted) network > ip address 50.100.165.240 255.255.255.0 > ip nat inside > > ip nat pool XXY 192.168.3.101 192.168.3.240 netmask 255.255.255.0 > ip nat inside source list 1 pool XXY &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& I am not the one who configured this NAT router previously. Q1)what I don't understand is when we establish the connection from 50.100.165.50 (for eg) to 192.168.3.50(for eg). The source IP will change to 192.168.3.111 (for eg) after it pass thru the NAT router and reach the destination 192.168.3.50. When it replies back the source IP is 192.168.3.50 and the destination IP is 192.168.3.111. How do the packet know it have to go to Ethernet0 of the NAT router, as the IP of NAT router's Ethernet0 is 192.168.3.1 not 192.168.3.111. Q2) >Normally I would want to use a NAT pool that was not present on either >side of the router. Yes, I saw this on my book as follows &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& Ip nat pool ovrld-nat 172.16.2.2 172.16.2.2 netmask 255.255.255.0 Ip nat inside source list 1 pool ovrld-nat overload ! interface Ethernet0/0 ip address 10.1.1.10 255.255.255.0 ip nat inside ! interface serial0/0 ip address 192.168.3.1 255.255.255.0 ip nat outside ! access-list 1 permit 10.1.1.0 0.0.0.255 &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& OK, I understand this, whenever the packets from 10.1.1.X network go out, the source IP will all become 172.16.2.2, but what the packet got reply, the destination will become 172.16.2.2, How the hell the packet know it should go to serial0/0, as its IP is 192.168.3.1 not 172.16.2.2. Unless, there is a route added in the target host. But how can expect to add the route entry in all the hosts. Q3)I did NAT with checkpoint firewall for my internet access, my firewall has two IPs 50.100.100.1 (internal) and 200.100.100.64 (external). I configured it in such a way that all the outgoing packets's source IP become 200.100.100.64 after passing thru firewall and it works as I think the replying packet the destination will be the firewall's external IP. Can we configured the same thing with my cisco router as shown below. &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& Ip nat pool ovrld-nat 192.168.3.1 192.168.3.1 netmask 255.255.255.0 Ip nat inside source list 1 pool ovrld-nat overload ! interface Ethernet0/0 ip address 10.1.1.10 255.255.255.0 ip nat inside ! interface serial0/0 ip address 192.168.3.1 255.255.255.0 ip nat outside ! access-list 1 permit 10.1.1.0 0.0.0.255 &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&a
picture attached-NAT question in BCRAN book-can work?? [7:39410]
Dear friends, Can I ask you the following question? It is what I see in the book. The network diagram and the NAT router config are shown below. Basically, when a packet going from a inside host to a outside hosts. Its source IP will change from 10.1.1.X to 192.168.2.2 after the NAT router. When the packet reply back from outside hosts, the destination IP will be 192.168.2.2. But I don't understand how the packet know to route back to the NAT's serial 0? The IP of router's serial 0 is 172.16.2.1. Unless we add route entry on the outside hosts, but how can we have the control on the outside hosts? Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == [GroupStudy.com removed an attachment of type image/jpeg which had a name of image001.jpg] [GroupStudy.com removed an attachment of type image/jpeg which had a name of image002.jpg] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39410&t=39410 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
What is the difference between this two situation?? [7:11414]
Hi.. May I know what is the difference between this two situation? I have 2900 switches and I have 4 WINNT workstation, A,B,C,D Case 1)I have the switch port are all the VLAN 1, I configured A,B are 10.1.1.0/24 network and C,D in 10.2.2.0/24. Can A,B talked to C,D. What kind of access is allowed between AB and CD? can A talked to B? Case 2)I have the switch port 3,4 configured in VLAN 2. the rest in VLAN 1. A,B are connected in VLAN1 ports and C,D are in port 3,4 which are VLAN 2 port. What kind of access is allowed between AB and CD? What is the difference between two case?? == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=11414&t=11414 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
weird switch! can't config thru console [7:13302]
Hi. I tried to config a 2900 switches thru its console but it has no output at all on the hyperterminal screen. I am sure my setting is correct. (9600-N-1 none) as I can get output on other switches with the same setting. May I know what is wrong with the switch? Any method to solve this Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=13302&t=13302 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to configure callback for 2 numbers [7:14121]
Dear all, I want to make my access-server to callback my home phone no 888-888 and my colleage phone no 777-777, once we use these two number to dial to the access-server, , after verification, the access server will cut the line and call back, no other number can be callbacked. Part of my config is as follow, Please tell me what else I need to configure in order to make it work. eg callback-dialstring and etc interface Async1 ip unnumbered Ethernet0 encapsulation ppp no logging event subif-link-status async dynamic address async mode interactive peer default ip address dhcp ppp callback accept ppp authentication pap ! line 1 password 7 00059805050058 autoselect ppp login local modem InOut length 0 transport input all speed 115200 flowcontrol hardware == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=14121&t=14121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: how to configure callback for 2 numbers [7:14121]
Yes.. I tried this before, but it come out these errors.. what's wrong??/ access_server(config)#username "sim" password "simiscute" callback-dialstring 99 % Overly long Password truncated after 25 characters access_server(config)#username sim password simiscute callback-dialstring 99 % Overly long Password truncated after 25 characters access_server(config)#username sim password simiscute [callback-dialstring 99] % Overly long Password truncated after 25 characters -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July 30, 2001 5:23 PM To: [EMAIL PROTECTED]; Sim, CT (Chee Tong) Subject: RE: how to configure callback for 2 numbers [7:14121] Specify the call back number in the username configuration: username "yourname" password "yourpassword" callback-dialstring 88 username "yourmate" password "hispassword" callback-dialstring 77 CM -Original Message----- From: "[EMAIL PROTECTED]" on behalf of "Sim, CT (Chee Tong)" Sent: 30 July 2001 08:04 To: "[EMAIL PROTECTED]" Subject: how to configure callback for 2 numbers [7:14121] > -- > From: Sim, CT (Chee Tong)[SMTP:[EMAIL PROTECTED]] > Sent: Monday, July 30, 2001 9:04:53 AM > To: [EMAIL PROTECTED] > Subject: how to configure callback for 2 numbers [7:14121] > Auto forwarded by a Rule > Dear all, I want to make my access-server to callback my home phone no 888-888 and my colleage phone no 777-777, once we use these two number to dial to the access-server, , after verification, the access server will cut the line and call back, no other number can be callbacked. Part of my config is as follow, Please tell me what else I need to configure in order to make it work. eg callback-dialstring and etc interface Async1 ip unnumbered Ethernet0 encapsulation ppp no logging event subif-link-status async dynamic address async mode interactive peer default ip address dhcp ppp callback accept ppp authentication pap ! line 1 password 7 00059805050058 autoselect ppp login local modem InOut length 0 transport input all speed 115200 flowcontrol hardware == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=14132&t=14121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to clear a router counter at frequency basis [7:16787]
Hi.. I need to clear counter on a router at frequency basis eg:1 day and save it to file in a PC? Is there any command or script that we can program in the router? CT == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=16787&t=16787 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to get frame-relay DNA number?? [7:17614]
Hi.. When I report a frame-relay link fault to my ISP vendor. They always ask me what is the DNA (data network address) number of the link, but I can only able to give the frame-relay circuit ID? May I know how can I know what is the DNA number of FR link ? And what is that for? If I have two routers A and B, A is link to the backbone and B is link to A via Frame-relay. If this frame-relay is down. Whether I can still see the DLCI number when I console into B? Who decided the DLCI number?? Thanks CT == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=17614&t=17614 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
what is mean there is a loop on the interface??? [7:18052]
I was informed that there is a loop in our interface, and it is not up. When I do a sh interface, I found it is up but there is a word (looped) as shown below. What is the meaning??? What happen ?? When I show cdp neighbor, I see the cdp neighbor of the interface is the router itself?? Why??? sin03>sh int s1/0 Serial1/0 is up, line protocol is up (looped) sin03>sh cdp nei Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater Device IDLocal Intrfce HoldtmeCapability Platform Port ID sin03Ser 1/0136 Rc3660 Ser 1/0 TYO02Ser 1/1154 R1750 Ser 0 HKG01Ser 1/2167 R1750 Ser 0 SYD02Ser 2/1157 R1750 Ser 0 == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=18052&t=18052 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
enquiry on 5505 switch optical fibre port [7:28258]
Hi... I have a 5505 catalyst switch, there are two supervisor on its module/slot 1 and 2. Module 1's is in ok status and module 2 is standby status. There are two optical fibre port on each of the supervisor module, and the two optical fibre port on the module 1 is connected to another 2 X 5505 catalyst switches and another two optical ports on the standby is left unconnected. My question is 1)I want to connect the 5505 switch with another 2X catalyst 3660 switch via the two optical port on the standy module, is that okay, or we need to buy another supervisor module? 2)When I type "show module 2", why I can't see the two optical fibre status? 3)If we want to add on more supervisor module, what should we do? Just slot in?? Thanks in advance Cat55-L8-1> sh module Mod Slot Ports Module-Type Model Status --- - - --- 1 12 1000BaseSX Supervisor WS-X5534ok 2 22 1000BaseSX Supervisor WS-X5534standby 3 32410/100BaseTX Ethernet WS-X5225R ok 4 41 Route Switch WS-X5302ok 5 52410/100BaseTX Ethernet WS-X5225R ok Mod Module-Name Serial-Num --- --- 1 00012751856 2 00012741455 3 00013370887 4 00013353225 5 00012786062 Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-d0-06-3e-0c-00 to 00-d0-06-3e-0f-ff 3.23.1.2 5.1(1) 2 00-d0-06-3e-0c-00 to 00-d0-06-3e-0f-ff 3.23.1.2 5.1(1) 3 00-50-0f-b7-2e-58 to 00-50-0f-b7-2e-6f 3.14.3(1) 5.1(1) 4 00-e0-1e-92-72-c8 to 00-e0-1e-92-72-c9 7.520.14 12.0(3c)W5(8), 5 00-50-0f-20-f9-a8 to 00-50-0f-20-f9-bf 3.14.3(1) 5.1(1) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 EARL 1+ WS-F5520 0012736730 1.1 1 uplink WS-U5534F 0012779546 1.0 2 EARL 1+ WS-F5520 0011446300 1.1 2 uplink WS-U5534F 0012779657 1.0 Cat55-L8-1> Cat55-L8-1> sh module 1 Mod Slot Ports Module-Type Model Status --- - - --- 1 12 1000BaseSX Supervisor WS-X5534ok Mod Module-Name Serial-Num --- --- 1 00012751856 Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-d0-06-3e-0c-00 to 00-d0-06-3e-0f-ff 3.23.1.2 5.1(1) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 EARL 1+ WS-F5520 0012736730 1.1 1 uplink WS-U5534F 0012779546 1.0 Cat55-L8-1> sh module 2 Mod Slot Ports Module-Type Model Status --- - - --- 2 22 1000BaseSX Supervisor WS-X5534standby Mod Module-Name Serial-Num --- --- 2 00012741455 Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 2 00-d0-06-3e-0c-00 to 00-d0-06-3e-0f-ff 3.23.1.2 5.1(1) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 2 EARL 1+ WS-F5520 0011446300 1.1 2 uplink WS-U5534F 0012779657 1.0 Cat55-L8-1> == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28258&t=28258 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to put loop on a link?? [7:29470]
Hi.. My HQ asked me to "put a loop on the serial link", the serial link is currently connected from a router to a NTU with a V35 cable, may I know how to do it without getting a loop back connector? -Original Message- From: Joachim Bdr [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 10:11 PM To: [EMAIL PROTECTED] Subject: AW: SDSL [7:29464] Hi, no the cisco 800 series supports g.shdsl but not sdsl. Sdsl has an outher line coding and it isn't a standard like g.shdsl. Best regards J. Baer -Urspr|ngliche Nachricht- Von:[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 18. Dezember 2001 13:51 An: [EMAIL PROTECTED] Betreff:SDSL [7:29464] Hi! My company is considering using DSL for communication. My knowledge in this area is somewhat minimal :) I have found the cisco 633 that supports sdsl. But I really need something that can do both sdsl, hdsl, vdsl and adsl. Cisco 800-series seems to support adsl at least, my question is if the 800 also can do sdsl? Best regards, Johan Ericsson == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29470&t=29470 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to do port SPAN in Cisco1900 switch [7:30766]
Hi.. Friends, I want to SPAN the traffic from a port to another port of cisco 1900 switch. Eg SPAN the port 12 to port 3. The the following IOS seems a bit difference, it is menu driven, can you teach me how to do it. See the following. Catalyst 1900 - Main Menu [C] Console Settings [S] System [N] Network Management [P] Port Configuration [A] Port Addressing [D] Port Statistics Detail [M] Monitoring [B] Bridge Group [R] Multicast Registration [F] Firmware [I] RS-232 Interface [U] Usage Summaries [H] Help [X] Exit Management Console Enter Selection: == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=30766&t=30766 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
sometime can't ping AIX server, why? [7:30905]
Hi.. I have a standalone AIX server with a NIC card. I just configured a IP on its et0 interface and I used a cross cable to connect to my PC. I can ping it at the first time but after I while, it can't be pinged, nothing has changed. Sometimes it can be pinged again and stay unpingable most of the time. Nothing has changed, the problem should lied on the AIX server configuration as I can connect my PC to other with cross cable. Could you tell me what could be the problem? Another thing is when I connect the AIX to a switch (eg fasthernet0/20). When I type #show mac, I can see its mac address sometime but most of the time not, but the fasthernet 0/20 interface remain up all the time. What can be the problem?, I am familiar with solaris and Linux but not AIX. Thanks -Original Message- From: Cisco Breaker [mailto:[EMAIL PROTECTED]] Sent: Friday, January 04, 2002 5:23 PM To: [EMAIL PROTECTED] Subject: Re: IDS Test [7:30806] Then what is the passing score, 800? Best regards, ""Lange, Eric"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > No. However, I took the test, and failed it with a 755, and they do ask a > lot of GUI questions. Specifically, to do this function do you click on > this than click on this or, click on this than click on that. Pretty > brutal. I completed my CCNP almost a year ago and passed my MCNS exam about > 3 months ago. I thought this was the worst test so far, IMHO of course. I > took the class, ordered the Boson exam, which out of 204 questions I scored > 96% on, and still failed the test. I know the only one to blame is my self. > Some of the questions I just didn't know the answers. What do you do! At > least I know what to study now! > > To make a short answer long. You do NOT have to memorize all the > signatures. Just know IP is 1000, ICMP is 2000 etc > > Good luck! > > -Eric > > -Original Message- > From: Jay Creasy [mailto:[EMAIL PROTECTED]] > Sent: Thursday, January 03, 2002 11:56 AM > To: [EMAIL PROTECTED] > Subject: IDS Test [7:30806] > > > Does anyone have any info on the IDS test. Specifically, Do you have to > memories the couple hundered pages of Signatures in the IDS book ? > > Thanks > > Jay == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=30905&t=30905 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ISDN connector PIN configuration [7:32802]
Our Telecom only install the ISDN line on their krone block and end it with a pair of wire. Can we need to patch the pair of wire into a RJ45 connector (not RJ11 ) and connect it to the ISDN U interface port and make it work. But I am not sure about the PIN configuration of the connector. Is that middle two pins , pin 4 and pin 5 like normal phone wire. == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32802&t=32802 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
can't establish the ISDN connection [7:33177]
Hi.. I tried to establish a ISDN-BRI connection between the two routers, one in Singapore and one in Jakarta. In Singapore we are using switch type basic-net3 and our ISDN card in singapore router is with S/T interface connected to NT1 and Jakarta side , the switch type is basic-5ess and the ISDN card with U interface. But we can't establish connection.We confirmed the ISDN line is working? May I know what is wrong with my configuration? What could be the problem? SIN03#sh int bri6/1 BRI6/1 is up, line protocol is up (spoofing) Hardware is BRI Description: *** Reserved for BKK02 (BKK main office) - This no. is +65 88 (Singtel )*** Internet address is 50.100.200.113/30 MTU 1500 bytes, BW 64 Kbit, DLY 2 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation PPP, loopback not set Last input 1d17h, output never, output hang never Last clearing of "show interface" counters 1d20h Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 2 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/1/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 30 second input rate 0 bits/sec, 0 packets/sec 30 second output rate 0 bits/sec, 0 packets/sec 37 packets input, 249 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 37 packets output, 336 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 output buffer failures, 0 output buffers swapped out 1 carrier transitions SIN03#sh isdn status ISDN BRI6/1 interface dsl 41, interface ISDN Switchtype = basic-net3 Layer 1 Status: ACTIVE Layer 2 Status: TEI = 64, Ces = 1, SAPI = 0, State = TEI_ASSIGNED I_Queue_Len 0, UI_Queue_Len 0 Layer 3 Status: 0 Active Layer 3 Call(s) Activated dsl 41 CCBs = 0 The Free Channel Mask: 0x8003 SIN03>sh dialer map Static dialer map ip 50.100.200.114 name TEST01 (00162 21 77) on BR6/1 &&& BKK02#sh int bri0 BRI0 is up, line protocol is up (spoofing) Hardware is PQUICC BRI with U interface Description: *** To SIN03 int bri 6/1 - This no. is +62 21 77 *** Internet address is 50.100.200.114/29 MTU 1500 bytes, BW 64 Kbit, DLY 2 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation PPP, loopback not set Last input 21:04:49, output never, output hang never Last clearing of "show interface" counters 1d21h Input queue: 0/75/132/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/1/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 30 second input rate 0 bits/sec, 0 packets/sec 30 second output rate 0 bits/sec, 0 packets/sec 1118 packets input, 10362 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 132 input errors, 132 CRC, 0 frame, 0 overrun, 0 ignored, 66 abort 543 packets output, 1629 bytes, 0 underruns 0 output errors, 0 collisions, 3 interface resets 0 output buffer failures, 0 output buffers swapped out 59 carrier transitions BKK02#sh isdn status Global ISDN Switchtype = basic-5ess ISDN BRI0 interface dsl 0, interface ISDN Switchtype = basic-5ess Layer 1 Status: DEACTIVATED Layer 2 Status: TEI = 96, Ces = 1, SAPI = 0, State = TEI_ASSIGNED I_Queue_Len 0, UI_Queue_Len 0 Layer 3 Status: 0 Active Layer 3 Call(s) Active dsl 0 CCBs = 0 The Free Channel Mask: 0x8003 Total Allocated ISDN CCBs = 0 BKK02>sh dialer map Static dialer map ip 50.100.200.113 name TEST01 (00165 88) on BR0 == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33177&t=33177 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosur
RE: can't establish the ISDN connection [7:33177]
Hi.. Below is configuration of my jakarta router. my IOS version is 12.1(4). Now, I can dial into Jakarta router BKK02 from Singaoire & can see the call come in but the line won't stay up - however I have not been able to dial out from BKK02. any idea? ! interface BRI0 description *** To SIN03 int bri 6/1 - This no. is +62 88 *** ip address 57.192.243.114 255.255.255.248 encapsulation ppp load-interval 30 dialer map ip 57.192.243.113 name SIN03 broadcast 001677 dialer-group 1 isdn switch-type basic-5ess ppp authentication chap BKK02#sh isdn stat Global ISDN Switchtype = basic-5ess ISDN BRI0 interface dsl 0, interface ISDN Switchtype = basic-5ess Layer 1 Status: ACTIVE Layer 2 Status: TEI = 80, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED Layer 3 Status: 0 Active Layer 3 Call(s) Active dsl 0 CCBs = 0 The Free Channel Mask: 0x8003 Total Allocated ISDN CCBs = 0 ! BKK02#sh ver Cisco Internetwork Operating System Software IOS (tm) C1700 Software (C1700-Y-M), Version 12.1(4), RELEASE SOFTWARE (fc1) Copyright (c) 1986-2000 by cisco Systems, Inc. Compiled Wed 30-Aug-00 08:36 by cmong Image text-base: 0x80008088, data-base: 0x805D8590 ROM: System Bootstrap, Version 12.0(3)T, RELEASE SOFTWARE (fc1) BKK02 uptime is 2 days, 13 hours, 25 minutes System returned to ROM by reload at 14:22:24 UTC Fri Jan 25 2002 System restarted at 14:22:57 UTC Fri Jan 25 2002 System image file is "flash:c1700-y-mz.121-4.bin" cisco 1720 (MPC860) processor (revision 0x301) with 12288K/4096K bytes of memory. Processor board ID JAD0401027Z (3139204005), with hardware revision M860 processor: part number 0, mask 32 Bridging software. X.25 software, Version 3.0.0. Basic Rate ISDN software, Version 1.1. 1 FastEthernet/IEEE 802.3 interface(s) 1 Serial(sync/async) network interface(s) 1 ISDN Basic Rate interface(s) 32K bytes of non-volatile configuration memory. 4096K bytes of processor board System flash (Read/Write) Configuration register is 0x2102 -Original Message- From: John Neiberger [mailto:[EMAIL PROTECTED]] Sent: Friday, January 25, 2002 11:08 PM To: [EMAIL PROTECTED]; Sim, CT (Chee Tong) Subject: Re: can't establish the ISDN connection [7:33177] First off, SIN03 is ACTIVE but it's stuck in TEI_ASSIGNED. To be honest, if you have the correct switch type configured I'm not sure what that means. BKK02 doesn't even have layer 1 active so you have additional problems there as it can't even talk to the ISDN switch. Check your physical connections there. How did you confirm the ISDN line is working? Also, what IOS are these routers using? There are some versions of IOS with a LOT of ISDN-related bugs. John >>> "Sim, CT (Chee Tong)" 1/25/02 2:34:48 AM >>> Hi.. I tried to establish a ISDN-BRI connection between the two routers, one in Singapore and one in Jakarta. In Singapore we are using switch type basic-net3 and our ISDN card in singapore router is with S/T interface connected to NT1 and Jakarta side , the switch type is basic-5ess and the ISDN card with U interface. But we can't establish connection.We confirmed the ISDN line is working? May I know what is wrong with my configuration? What could be the problem? SIN03#sh int bri6/1 BRI6/1 is up, line protocol is up (spoofing) Hardware is BRI Description: *** Reserved for BKK02 (BKK main office) - This no. is +65 88 (Singtel )*** Internet address is 50.100.200.113/30 MTU 1500 bytes, BW 64 Kbit, DLY 2 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation PPP, loopback not set Last input 1d17h, output never, output hang never Last clearing of "show interface" counters 1d20h Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 2 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/1/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 30 second input rate 0 bits/sec, 0 packets/sec 30 second output rate 0 bits/sec, 0 packets/sec 37 packets input, 249 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 37 packets output, 336 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 output buffer failures, 0 output buffers swapped out 1 carrier transitions SIN03#sh isdn status ISDN BRI6/1 interface dsl 41, interface ISDN Switchtype = basic-net3 Layer 1 Status: ACTIVE Layer 2 Status: TEI = 64, Ces = 1, SAPI = 0, State = TEI_ASSIGNED I_Queue_Len 0, UI_Queue_Len 0 Layer 3 Status: 0 Active Layer 3 Call(s) Activated dsl 41 CCBs = 0 The Free Channel Mask: 0x8003 SIN03&g
which reference book is better? [7:33629]
Hi.. I am going for the support 2.0 exam. There are two reference books for the exam 1) CCNP Support exam certification guide and 2) Cisco Internetwork Troubleshooting. Which one is better? If I only study CCNP support exam certification guide, is it enough? == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33629&t=33629 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: which reference book is better? [7:33629]
Did you pass it using CCNP support exam guide? It seems to be strange why cisco publish two books for one exam and let people choose. But the CIT book seems to be published quite a few year and it is used for CCNP version 1. Is that true? -Original Message- From: Chee Kin [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 30, 2002 11:42 AM To: Sim, CT (Chee Tong); [EMAIL PROTECTED] Subject: Re: which reference book is better? [7:33629] Hi, I studied using the CCNP Support exam prep book. That was the only material I use. It's a tough exam but if you know your stuff, it should be OK. Good luck. cheekin - Original Message - From: "Sim, CT (Chee Tong)" To: Sent: Wednesday, January 30, 2002 10:30 AM Subject: which reference book is better? [7:33629] > Hi.. > > I am going for the support 2.0 exam. There are two reference books for the > exam 1) CCNP Support exam certification guide and 2) Cisco Internetwork > Troubleshooting. Which one is better? If I only study CCNP support exam > certification guide, is it enough? > > == > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en > de afzender direct te informeren door het bericht te retourneren. > == > The information contained in this message may be confidential > and is intended to be exclusively for the addressee. Should you > receive this message unintentionally, please do not use the contents > herein and notify the sender immediately by return e-mail. > > > == == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33652&t=33629 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
modem status and a few question
Hi, Dear all, Q1 When I was doing the WAN monitoring. I found the link between Router A and B is down. I checked the router A interface is up and protocol is down modem status is DCD=up DSR=up DTR=up RTS=up CTS=up but at the router B, the interface is down and protocol is down, the modem status is DCD=down DSR=up DTR=up RTS=up CTS=down. What is likely the cause of the problem? Is that the modem of router B got problem or serial port of router B got problem or the link within the service provider got problem Pls enlight me Q2 What is sniffer? how to use it? Q3 Can HDLC be the encapsulation type of ISDN link? Thank you Tong == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
what went wrong in this simple test????? pls help
Hi.. Ask you a simple question, just now I want to test whether a cross cable is working or not? I use two PC to test. I use the cable to two NIC of the PCs First the IP for PC A is 57.198.165.199 subnet=255.255.254.0 gateway =57.198.164.1 IP for PC B is 57.198.165.212 subnet=255.255.254.0 gateway =57.198.164.1 But I cannot ping each other so I changed IP to IP for PC A is 10.0.0.1 subnet=255.0.0.0 gateway =10.0.0.3 IP for PC B is 10.0.0.2 subnet=255.0.0.0 gateway =10.0.0.3 still cannot ping each other I feel it is simple, I am sure that I didnot make mistake on the IP? what's wrong? Can you connect two PC via a cross cable? Sim == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
what is mean by EIR on the frame relay???
Dear all, Thank for your guide, I know I will try to put the gateway of PC A to be IP of PC B However, I would like to ask you 1)what is mean by EIR on the Frame relay? Can any one tell me? 2)If I found the link is up between two router, router A interface is up and protocol is down modem status is DCD=up DSR=up DTR=up RTS=up CTS=up but at the router B, the interface is down and protocol is down, the modem status is DCD=down DSR=up DTR=up RTS=up CTS=down. What is likely the cause of the problem? Is that the modem of router B got problem or serial port of router B got problem or the link within the service provider got problem -Original Message- From: Kevin Wigle [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 02, 2000 11:28 PM To: [EMAIL PROTECTED]; Sim, CT (Chee Tong) Cc: [EMAIL PROTECTED] Subject: Re: what went wrong in this simple test? pls help Interesting idea but if you can't the gateway what good is that? Kevin Wigle - Original Message - From: <[EMAIL PROTECTED]> To: "Sim, CT (Chee Tong)" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: August 2, 2000 10:17 AM Subject: Re: what went wrong in this simple test? pls help > > > The gateway for PC A should be the IP address of PC B, and verse versa. > > hope this will help > > tristan > > > > > "Sim, CT (Chee Tong)" > <[EMAIL PROTECTED]To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> > obank.com> cc: > Sent by: Subject: what went wrong in this simple test? pls > [EMAIL PROTECTED] help > > > 08/01/2000 10:23 PM > Please respond to > "Sim, CT (Chee Tong)" > > > > > > Hi.. Ask you a simple question, just now I want to test whether a cross > cable is working or not? I use two PC to test. I use the cable to two NIC > of the PCs > > First the > IP for PC A is 57.198.165.199 subnet=255.255.254.0 gateway =57.198.164.1 > IP for PC B is 57.198.165.212 subnet=255.255.254.0 gateway =57.198.164.1 > > But I cannot ping each other > > so I changed IP to > IP for PC A is 10.0.0.1 subnet=255.0.0.0 gateway =10.0.0.3 > IP for PC B is 10.0.0.2 subnet=255.0.0.0 gateway =10.0.0.3 > > still cannot ping each other > > I feel it is simple, I am sure that I didnot make mistake on the IP? > what's > wrong? Can you connect two PC via a cross cable? > > Sim > > == > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en > de afzender direct te informeren door het bericht te retourneren. > == > The information contained in this message may be confidential > and is intended to be exclusively for the addressee. Should you > receive this message unintentionally, please do not use the contents > herein and notify the sender immediately by return e-mail. > > > == > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] > > > > > ___ > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html > FAQ, list archives, and subscription info: http://www.groupstudy.com > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] == De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. == The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. == ___ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
what is the function of the E1/T1 port on the router?
Dear Friends, Thank for your valuable information, I had a question on the E1/T1 conroller port? Previously we have a project connecting for VoIP, we connect the E1/T1 port of 3810 router to the PABX and serial port to the WAN My question 1)What is the difference between E1/T1 controller port and the serial port? Do E1 need ip address to be configured? 2)Can we use E1 controller to connect to the internet service provider? 3)I heard of E1 link (2M) and T1 link (1.544M) Does these two term related to E1/T1 port of the router? That's mean if we want to have E1 link speed we got to use E1/T1 port to connect? Is that true?? Then What I should do if I need a E3 link 4)What router model got E1/T1 controller installed except 3810 Tong -Original Message- From: Jay Hennigan [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 03, 2000 12:05 PM To: Sim, CT (Chee Tong) Cc: '[EMAIL PROTECTED]' Subject: Re: what is mean by EIR on the frame relay??? On Thu, 3 Aug 2000, Sim, CT (Chee Tong) wrote: > However, I would like to ask you > > 1)what is mean by EIR on the Frame relay? Can any one tell me? Might you mean CIR? Committed information rate? > > 2)If I found the link is up between two router, Is this a circuit that has worked in the past and stopped, or a new turn-up? The answer to this question can cause a different approach to troubleshooting. Assuming frame-relay encaps because you mentioned frame-relay in question 1... > > router A > interface is up and protocol is down > modem status is DCD=up DSR=up DTR=up RTS=up CTS=up The physical circuit to the router is OK. It _probably_ is talking to the frame-relay switch OK, especially if the circuit has worked in the past and just quit. The DCD=up and CTS=up show that the physical layer is good, or at least connected. If "sho int" contains a line like: LMI enq sent 209473, LMI stat recvd 209473, LMI upd recvd 0, DTE LMI up then the "DTE LMI up" verifies that this router is good to the switch. "sho frame pvc" should show the DLCI as USAGE = LOCAL and STATUS = ACTIVE for the DLCI of the circuit between the two routers if everything is happy. If the remote router is not happy, then you'll see STATUS = INACTIVE. If the PVC isn't built in the switch, you'll see STATUS = DELETED or nothing at all for that DLCI if you're using inarp. > > but at the router B, > the interface is down and protocol is down, > the modem status is DCD=down DSR=up DTR=up RTS=up CTS=down. This router or its CSU/DSU if external is not communicating with the frame-relay switch. Look for trouble on the physical wiring to this router. In the real world, this is almost always a telephone company issue. In a lab, it could be a bad or miswired cable. > What is likely the cause of the problem? A tech at the telco closest to router B looped its NIU while mis-reading a circuit ID trying to fix something else. (That's the most likely cause, but don't expect to find it on the test.) > Is that the modem of router B got > problem or serial port of router B got problem or the link within the > service provider got problem If this is a previously working circuit, it's most likely a telco issue between the frame-relay switch and router B. A loopback plug on the line to the CSU (1-4, 2-5 for T1, 1-7, 2-8 for 56K) cusing DCD to go "up" will isolate it. Note: Telephone companies are notorious for blaming the customer and looping the wrong circuit. Carry a loopback plug in your tool kit. When telco claime "It's good to the NIU", plug your loopback plug into their smartjack and ask them to run to it. Unplug it and see if the loop goes down. In the real world, if a circuit has been working fine for months or years and suddenly quits, what has probably happened is that a telco tech, in the process of troubleshooting something else, accidentally hopped on to your circuit and put a smartjack in loopback. When you call in to report the problem, they'll test things and knock down the loop that they put up by mistake earlier. Then it will work again, and get closed out as another "came clear while testing." The second most likely cause is that someone clipped a butt-set on your data pair which wasn't documented correctly, didn't hear dial tone, and swiped it for something else. This takes longer to fix, but telco will still probably claim "came clear while testing" even though they know better. A lot depends on the competence of your local telephone company. Hint: If they are spending millions of dollars right now on a massive, saturation TV ad campaign just to announce that they're changing their name while under the threat of a labor strike, then perhaps they have their priorities wrong.
