Re: Can someone please help? [7:869]

2001-04-16 Thread Tony Medeiros

If you have some serial WIC's and Enterpise software you can do a few things
like:

Basic routing protocols.
HSRP on the ethernet interfaces.
NTP.
Practice non IP protocols like IPX and Appletalk.
Access-lists.
Distribute lists
With a firewall feature set image for the 2500 you can practice CBAC.
bridging
Integrated routing and bridging
All kinds of basic stuff.

Fatkid.com has a  lot of basic labs to practice.  So Certificationzone.com.
Even though 2 routers doesn't make a CCIE type lab, hardware is hardware and
anything is better than nothing.

Tony Medeiros
CCIE #6172



-Original Message-
From: johnyohanus-cisco 
To: [EMAIL PROTECTED] 
Date: Monday, April 16, 2001 8:54 PM
Subject: Can someone please help? [7:869]


>I am able to get my hands on some Cisco routers at work. My questions is,
>what will I be able to do with two Cisco routers (2500 Series and 1700
>Series). Thank you.
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=872&t=869
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Creating Vlan on 2948G-L3 [7:1486]

2001-04-21 Thread Tony Medeiros

The 2948G-L3 is for all intensive purposes, a 50 port router.  All ports are
L3 ports by default.  To use it as a switch, create bridge groups.  Each
bridge group is a VLAN.  To route between VLAN's use IRB with BVI
interfaces.  For Trunk interfaces use sub-interfaces with ISL or dot1q
encapulation and put each sub-interface in the proper bridge group.

There are no "vlan database" commands or "switchport" commands.
Tony Medeiros
#6172

-Original Message-
From: Bhupinder Shergill 
To: [EMAIL PROTECTED] 
Date: Saturday, April 21, 2001 9:22 AM
Subject: Creating Vlan on 2948G-L3 [7:1486]


>I am trying to create VLAN on 2948G;  Is there any special command to do
>that on the switch because vlan database command is not there.  If anyone
>has done this before, please help me out.
>
>Regards
>
>B
>
>
>_
>Do You Yahoo!?
>Get your free @yahoo.com address at http://mail.yahoo.com
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1487&t=1486
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Internet Users Logging. [7:1562]

2001-04-22 Thread Tony Medeiros

If you have a PIX, a simple syslog will give you this info.  There are many
free syslog collectors out there, Kiwi's is one, 3Com has a decent one too.
A more elegent way is to use a Websense type program that does URL filtering
too.
Tony
#6172

-Original Message-
From: Tariq 
To: [EMAIL PROTECTED] 
Date: Sunday, April 22, 2001 9:29 PM
Subject: Internet Users Logging. [7:1562]


>Helo everybody.
>
>I want to monitor the activities of my LAN users who are browsing different
>web sites.
>I want to enable logging for those users and want to save my all logging
>information on my Windows 2000 server.
>
>Please let me know the procedure.
>
>Thanks in advance.
>
>Tariq
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=1567&t=1562
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Good training centre in and around the Boston area 9US) [7:2244]

2001-04-27 Thread Tony Medeiros

Try www.mentortech.com
Look for the ECP course.  CCIE prep training really doesn't get any better
than that class.

Tony M
#6172

-Original Message-
From: Ajit Mohanraj 
To: [EMAIL PROTECTED] 
Date: Friday, April 27, 2001 3:32 AM
Subject: Good training centre in and around the Boston area 9US) [7:2230]


>Is anyone aware of a good CCIE led; CCIE-Lab preparation training conducted
>in
>the Boston area - I know  that Marc's cciebootcamp is awesome but I was
>hoping
>for a 'hands-on' session in a run up to the Lab ?
>
>Thanks
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2244&t=2244
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ATM BOOK : Galina Diker Pildush : CISCO ATM Solutions: [7:2353]

2001-04-27 Thread Tony Medeiros

I must agree with Nigel.  Galina's book is top notch !!!  I had the pleasure
of being a student of hers when she worked for Geotrain, Canada.  She is the
best instructor I have ever had!!!
Too bad she works for Juniper now !!!
Tony M.
#6172

-Original Message-
From: Nigel Taylor 
To: [EMAIL PROTECTED] 
Date: Friday, April 27, 2001 7:11 PM
Subject: Re: ATM BOOK : Galina Diker Pildush : CISCO ATM Solutions: [7:2350]


>Ken,
>
> I bought this book
>(http://www.bestwebbuys.com/books/compare/isbn/1578702135) after reading
>Galina's ATM White Paper on CertificationZone(plug..!) and let me say...
at
>first glance the book is great resource.  I've now had the book sometime
and
>let me say it's even more.  In her book Galina not only goes through the
>basic foundation of ATM, but she also covers how to identify and implement
a
>specific solution.  What also makes this book awesome is the various well
>laid out  and diagrammed ATM practice lab scenarios.
>
>I must say anyone wanting to know more about ATM and having access to the
>equipment used in the lab examples will most definitely love this book.
>After, having had David  Ginsberg - ATM  book
>(http://www.bestwebbuys.com/books/compare/isbn/0201343029) this really put
>the technology within my reach.  Another bonus in the book is the section
>that specifically covers the LS1010 ATM switches..
>
>Recently there was a thread on the list in which questions were asked of
>specific configuration as it relates to the setting up SVC's using
Classical
>IP and ARP over ATM.  I went to Galina's book and had the answer in a
matter
>of seconds..
>
>
>Get this book... it's  Cisco ATM and Configuration Explained... !
>
>HTH
>
>Nigel... .
>
>
>- Original Message -
>From: Ken Yeo
>To:
>Sent: Friday, April 27, 2001 7:57 PM
>Subject: ATM BOOK : Galina Diker Pildush : CISCO ATM Solutions: Master ATM
>Implementation of Cisco Networks
>
>
>> What do you guys think about this book?
>>
>>
>>
>http://www.amazon.com/exec/obidos/ASIN/1578702135/o/qid=988415758/sr=8-2/re
f
>> =aps_sr_b_1_2/107-6815218-1878111
>> **Please read:http://www.groupstudy.com/list/posting.html
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2353&t=2353
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: is it possible to mix and match flash cards? [7:2518]

2001-04-29 Thread Tony Medeiros

There are a few places where you can mix flash but mostly you have to do it
by trial and error.  7200 and 6500 flash cards are totally interoperable.
Sometimes you can use a flash card from a different platform and reformat in
the target platform and sometimes it works, sometimes it doesn't.  Flash
SIMs are another story.  I have gotten 3600 flash sims to work in a 2600 but
only after a reformat.  2500 and AS5200 flash SIMs are the same.

There are basicly 3 types of flash systems in Cisco routers: A, B, and C.
If you look on the Doc CD under: IOS configuration, configuration
fundamentals, File system commands,  you will find all the differences and
some platform interoperabliity.
Tony M
#6172

-Original Message-
From: xc 
To: [EMAIL PROTECTED] 
Date: Sunday, April 29, 2001 8:03 PM
Subject: is it possible to mix and match flash cards? [7:2518]


>For flash cards (i.e. Cat5000, 1750, 7000 series, etc.), can you just mix
>and match (for example, the a flash for a Cat5000 can be used on a 1750,
>etc.)?
>
>How about flash SIMM's (I don't think this is possible, but I have to ask)?
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2526&t=2518
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Modem [7:3028]

2001-05-03 Thread Tony Medeiros

Here is the config for a dialin modem for consol access only.

(Config)
line aux 0
transport input all
modem dialin
speed 115200
flow hard
modem autodiscovery type usr_courier
login
password cisco
exit

That's it.  Shouldn't have to do anything on the modem.
Tony M.
#6172

-Original Message-
From: SH Wesson 
To: [EMAIL PROTECTED] 
Date: Thursday, May 03, 2001 7:02 AM
Subject: Modem [7:3028]


>How do I configure a US Robotics modem to work on an AUX port on a router.
>What do I have to configure on the AUX port and what do I have to configure
>on the modem.I want to connect the US Robotics modem to the AUX port
for
>dialin.  Thanks.
>
>_
>Get your FREE download of MSN Explorer at http://explorer.msn.com
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3048&t=3028
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: PBX Fundamentals Exam [7:3480]

2001-05-07 Thread Tony Medeiros

AMEN to that.  I flunked that damn thing twice !!  Something I found out
after the fact though.  The are 2 VOD courses on the cisco web site.  The
Partners pages only tell you to take the one PBX fundementals VOD course.
The second course is supposed to help with those dumb questions like "How
many PRI cards can you put in lucnet difinenty PBX"

I wish I knew about that second course before I wasted 70 dollars of my
company's  money !!

Tony M.
#6172

-Original Message-
From: Jason Roysdon 
To: [EMAIL PROTECTED] 
Date: Monday, May 07, 2001 8:04 PM
Subject: Re: PBX Fundamentals Exam [7:3480]


>Took me two times to pass.  First time I failed by 1 question.  Of course,
>this was after my boss had taken it 6 times (getting within 2-3 questions
>each time).  They up the bar considerably as it's online (therefore open
>book) and untimed.  Plus, all the online courseware is SCANNED images
stored
>in PPT, so it's not nearly as useful if it was searchable text (but you can
>still use the index to find stuff).  Absolute worst test I've ever had to
>deal with.
>
>--
>Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
>List email: [EMAIL PROTECTED]
>Homepage: http://jason.artoo.net/
>
>
>
>""Christopher Young""  wrote in message
>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>> Anyone had any luck with this exam? It's one of the certification.net
>ones.
>> The Online training Video absolutely sucks!!! And the questions that I
got
>> wrong I actually took the answers directly out of the Cisco Voice over IP
>> Fundamentals book. So there's something really wrong here.
>>
>> Has anyone had any luck with this one???
>>
>> cheers,
>>
>> Christopher
>> FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
>> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3542&t=3480
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ATM command to check CLP cell [7:3959]

2001-05-09 Thread Tony Medeiros

I ran into this once,  According to TAC,  there are no show command to see
if a clp bit is set.  This was as of 12.0.7.  The "show atm interface atm
1/0" command shows a lot of good stuff but no clp bit.
Tony M.
#6172

- Original Message -
From: Cisco Newbie 
To: 
Sent: Wednesday, May 09, 2001 10:56 PM
Subject: ATM command to check CLP cell [7:3959]


> Hi Groupstudy,
>
> Like to check is there any command in Cisco IOS that allows me to check
> whether the cell I received has the Congestion Loss Priority (CLP) bit
set?
>
> If not how could I find out whether the cells is eligible to be discard
when
> there is a congestionThru' Telco?
>
>
> Definition of CLP: Congestion Loss Priority (CLP)---Indicates whether the
> cell should be discarded if it encounters extreme congestion as it moves
> through the network. If the CLP bit equals 1, the cell should be discarded
> in preference to cells with the CLP bit equal to zero.
>
>
> Thanx
> _
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3961&t=3959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Catalyst 6000 Supervisor Engine question [7:4346]

2001-05-13 Thread Tony Medeiros

Brandon,
In my experience that meter doesn't really tell you much and it's on by
default.  The most fully loaded 6509 core switch that I ever saw had 3 bars
max lite.  The only time that I have seen it higher is when there was
something drasticly WRONG.  I accdently pasted in a wrong config on one
switch on a very large network  test bed (18 6500 and 5500's) and made a
nice spanning tree loop.  It was rather cool.  The meters on all the
switches started climbing for the roof !!!  Couldn't even get a decent
consol session to work to correct the mistake.  Pulling links didn't help.
Ended downing the offending switch, changing the config, and letting
spanning tree reconverge.  Thank God the network wasn't in production yet or
I would of had a real red face !!!

The moral of the story:  Use the "show process" if you really want a good
picture of switch load.

Tony M.
#6172

- Original Message -
From: Brandon 
To: 
Sent: Sunday, May 13, 2001 7:53 PM
Subject: Catalyst 6000 Supervisor Engine question [7:4346]


> I have a Cat 6000.  The network load display on the supervisor (engine)
> module
> never registers any usage.  How do I turn this on?
>
> Thanks,
> Brandon
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4352&t=4346
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Is there any router that can be the network-side of BRI? [7:4378]

2001-05-14 Thread Tony Medeiros

I here this feature is available in 12.2  Not sure which platforms but I am
pretty sure the 2600 and 3600 will support it.

Tony M.
#6172
- Original Message -
From: RF 
To: 
Sent: Monday, May 14, 2001 12:06 AM
Subject: Is there any router that can be the network-side of BRI? [7:4365]


> Does anybody know of any router or router module/blade that can act as the
> network (telco) side of ISDN BRI?  I know that in the latest IOS, you can
do
> "isdn protocol-emulate network" for PRI, but what about BRI?
>
> Thanx
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4378&t=4378
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Does CAT1900 switch have the set-base OS? [7:4360]

2001-05-14 Thread Tony Medeiros

The cat 1900 is either menu drivin or it uses the "switch IOS"  Find an old
2900 like a 2901 for the set/show/clear type of OS.  Any cat2900 that is non
"XL" will do the trick.
Tony M.
#6172

- Original Message -
From: Thomas 
To: 
Sent: Sunday, May 13, 2001 11:28 PM
Subject: Does CAT1900 switch have the set-base OS? [7:4360]


> Hi All - I am looking for a CAT1900 or CAT2900 for my lab.  I wonder if
> which CAT1900 or CAT2900 models can run the set-base OS like the CAT 6509
> switch?  Thanks!
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4379&t=4360
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Is there any router that can be the network-side of BRI? [7:4411]

2001-05-14 Thread Tony Medeiros

PRI network side emulation has been available for a while.  I am pretty sure
you need an MFT interface.  I have set this up several times on the NM-HDV
voice modules which have an MFT in them.  The choice of switch types to
emulate is limited though.  You can absolutely to a back to back PRI if you
have the right hardware and feature set.  I have only done it with MFT's
using IP PLUS software and the 6608 T1 blade on the Cat 6509.

BRI's would be a little different since they use a different line coding.  I
have only heard second hand that it can be done and have never tried it.  I
don't know if its just for a p to p type circuit or you can do actual ISDN
switching and switch a call out different interfaces.  That would be cool !!

Tony M.
#6172

- Original Message -
From: Jason Roysdon 
To: 
Sent: Monday, May 14, 2001 2:50 AM
Subject: Re: Is there any router that can be the network-side of BRI?
[7:4387]


> What interface, BRI?  I did some searches through 12.2 references and do
see
> such a thing.  It was my understanding that an ISDN switch isn't just as
> simple as flipping DTE/DCE.
>
> Can you take a T1 CSU/DSU interface and connect it back to back to another
> and run and T1 PRI (I've never tried and need to get some sleep, but
> curious).  I'm guessing you could and wondering what it would take to
> connect this to a few BRIs in a lab environment.
>
>
> --
> Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> List email: [EMAIL PROTECTED]
> Homepage: http://jason.artoo.net/
>
>
>
> ""Tony Medeiros""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > I here this feature is available in 12.2  Not sure which platforms but I
> am
> > pretty sure the 2600 and 3600 will support it.
> >
> > Tony M.
> > #6172
> > - Original Message -
> > From: RF
> > To:
> > Sent: Monday, May 14, 2001 12:06 AM
> > Subject: Is there any router that can be the network-side of BRI?
[7:4365]
> >
> >
> > > Does anybody know of any router or router module/blade that can act as
> the
> > > network (telco) side of ISDN BRI?  I know that in the latest IOS, you
> can
> > do
> > > "isdn protocol-emulate network" for PRI, but what about BRI?
> > >
> > > Thanx
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4411&t=4411
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco 3640 and Dialup Connection.. TAC failed to solve [7:4684]

2001-05-16 Thread Tony Medeiros

Try locking DTR on the lines with "speed 15200"  Also , You need to envoke
the AAA process at the lines with the command "Login default" or something.
I can't remember the exact command.  Try bypassing the AAA at the lines with
"autoselet PPP".

Whatch your debugs like "ppp authenication" and "ppp negotiation"

Tony M.
#6172

- Original Message -
From: Kiran Kumar M 
To: 
Sent: Tuesday, May 15, 2001 11:42 PM
Subject: Cisco 3640 and Dialup Connection.. TAC failed to solve [7:4659]


> Sorry, in my earlier mail i didn't given the line configuration that is
> using for the current situation.. I am pasting it here again..
>
> line 33 48
>  script reset rst
>  modem InOut
>  transport input all
>  flowcontrol hardware
> line 65 80
>  script reset rst
>  modem InOut
>  transport input all
>  flowcontrol hardware
> line 97 112
>  script reset rst
>  modem InOut
>  transport input all
>  flowcontrol hardware
>
> Please provide me a solution..
>
> Thanks,
> Kiran
>
> >
> > Hi,
> >
> > I have Cisco 3640 with three 16 modems Network Modules. My problem with
> > this box is
> >
> > Not able to connect at first time. After negotiation (Handshaking) it
> > is disconnecting the user, if I try with the same userid and password it
> > is connecting.
> >
> > I raised the case to TAC, but not successful to solve the problem. They
> > asked for search protecters, and separate earthing for router. We did
it,
> > but the problem is not solved. Here is the configuration that I am using
> > at my router end...
> >
> >
> > 
> > 
> >
> > aaa new-model
> > aaa authentication login default group radius enable
> > aaa authentication login root local
> > aaa authentication ppp default group radius
> > aaa accounting network default start-stop group radius
> >
> > 
> > 
> >
> > modem country microcom_hdms india
> > .
> > .
> > chat-script rst "" "AT&FS0=1" OK
> > .
> > .
> > interface Group-Async1
> >  ip unnumbered Ethernet0/0
> >  no ip directed-broadcast
> >  encapsulation ppp
> >  ip tcp header-compression passive
> >  autodetect encapsulation ppp
> >  async mode dedicated
> >  peer default ip address pool setup_pool
> >  no cdp enable
> >  ppp authentication pap
> >  group-range 33 48
> > !
> > interface Group-Async2
> >  ip unnumbered Ethernet0/0
> >  no ip directed-broadcast
> >  encapsulation ppp
> >  ip tcp header-compression passive
> >  autodetect encapsulation ppp
> >  async mode dedicated
> >  peer default ip address pool setup_pool
> >  no cdp enable
> >  ppp authentication pap
> >  group-range 65 80
> > !
> > interface Group-Async3
> >  ip unnumbered Ethernet0/0
> >  no ip directed-broadcast
> >  encapsulation ppp
> >  ip tcp header-compression passive
> >  autodetect encapsulation ppp
> >  async mode dedicated
> >  peer default ip address pool setup_pool
> >  no cdp enable
> >  ppp authentication pap
> >  group-range 97 112
> > ...
> > ...
> > ip local pool setup_pool xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
> > ip classless
> > 
> > 
> > radius-server configure-nas
> > radius-server host xxx.xxx.xxx.xxx auth-port 1645 acct-port 1646
> > radius-server key 
> >
> > For authentication I am using the cistron radius.
> >
> > Can anyone help me to solve this problem...
> >
> > Regards,
> > Kiran
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4684&t=4684
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Disaster recovery input from pros needed :) [7:4841]

2001-05-17 Thread Tony Medeiros

I would put a redundent sup/MSFC in the chassis.  It's never a good idea to
have users plugged into a core device.  The only reason to do this is money
(the major driver these days)

Redundent core chassis is always the best.  Consult the BCMSN book for this
design.

Tony M
#6172

- Original Message -
From: David Cooper 
To: 
Sent: Thursday, May 17, 2001 7:19 AM
Subject: Disaster recovery input from pros needed :) [7:4841]


> Heya,
>
> I'm at a site right now where I we have a central Cat 6509 as core with a
> couple fiber blades and 4 more 10/100 rj45 blades (ACK). This switch does
> the core routing within the network. It also is the main switch for the
> servers at the site. The fiber blades go out to closets with stacks of
> 3524's. There is also another stack of 3524's right next to the Big kitty
> for workstations in the area. They have really good turnaround on the
> failure of the cat6509 but I still wonder what the downtime will cost them
> if the thing decides it would rather be a coffee maker. I have been
talking
> to the tie wearing folks about an interim backup solution.
>
> Im thinking in the interim of a disaster I can grab a 2620 or higher and
run
> the routing on a stick I hear on this group so often. I am not sure where
to
> place this router though. I can swap all the gig modles to the 3524's next
> to the cat. Then from there put a router on it and do the router on a
stick.
> I just don't know where exactly to put this in and how to design it. ( Im
> not versed in network design of this type and quite a few others too :)
Some
> ideas in this matter from the grand folks on the group would be
appreciated
> indeed. Im am very interested in learning this one. Also what to do about
> those 48 port modules on the Cat while it is sleeping too? Hehe. If I were
> here while this was being designed I would have yelled alot more about
this
> conglomerate core/distro/access thingy.
>
> Anyway if you need drawnings of the mess or any further info I can supply
> them quick like :)
>
> Looking forward to your thoughts!
> Thanks in advance.
> Dave Cooper
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4860&t=4841
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Request for Token Ring papers. [7:4960]

2001-05-18 Thread Tony Medeiros

Cisco press SNA book.
Tony M.
#6172
- Original Message -
From: Ryan Ngai Hon Kong 
To: 
Sent: Friday, May 18, 2001 2:44 AM
Subject: Request for Token Ring papers. [7:4960]


> Good day,
>
> I had attempted the written exam today and flung it with 59% score.
> Surprisingly I miss 10 question on Token Ring where I found that the Token
> Ring
> white paper by Lou Rossi is not sufficient for preparation.
>
> Does anyone have more reference for this ancient technology?
>
> Regards,
> Ryan
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=4974&t=4960
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Terminal Server [7:5149]

2001-05-19 Thread Tony Medeiros

Do a "sho line" or "sho users" and see what line number is attached to the
session you are want to end.  Then just do a "clear line (line number)"
answer "yes" to the prompt and there you go.

Remember,  The first reverse telnet session you start is 1 and is numbered
accendingly  as you open more sessions.  openning the sessions in an
intuitive manner helps keep track of what line is which. I.e. Open session
to router 1 first, router 2 second, etc.  This way all you have to type is a
"2" to reopen the session to router 2.  Or "clear line 2' to close that
session.

Little trick I learned for getting around quickly in the CCIE lab.

Tony M.
#6172

- Original Message -
From: Mark Rose 
To: 
Sent: Saturday, May 19, 2001 9:07 PM
Subject: RE: Terminal Server [7:5149]


> The sequence of hitting ctrl-shift-6 then release all 3 keys and quickly
hit
> 'x' works. I go back to the 2511 & can change sessions. This brought up
> another question. Once I get a session running on a second or third
router,
> how do you terminate a session while leaving the others (or just the
> original telnet to the access router running).
>
> As always the help is appreciated by all people who help with advice.
>
> Mark
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Brad McConnell
> Sent: Saturday, May 19, 2001 8:02 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Terminal Server [7:5149]
>
>
> Mark,
>
> When you get the blank line, then press enter and end up back at the west
> router, do you have a "Resuming connection to xxx..." line before west's
> router prompt?  If not, I dont think the escape sequence is being
> acknowledged.  When you input the command, do ctrl-shift-6, then release
all
> 3 keys and quickly hit 'x'.  Kind of a moot point here, but in some cases
> (say an AIX box with a 3151 terminal), only the left ctrl key can be
used..
>
> Another thing to try would be hitting the spacebar when you get the blank
> line instead of enter.  If the escape sequence IS working, then the enter
> key is taking you back again, and spacebar may cause the prompt to
display.
>
> -Brad McConnell.
>
>
> ""Mark Rose""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > I have a 2511 set up as a terminal server According to the Cisco
> > documentation on Configuring a terminal server, the escape sequence is
> > Ctrl-Shift-6-x. This doesn't work. I can make the connection to "west"
but
> I
> > cannot use the esc sequence to jump back to the 2511 (I am using
> > HyperTerminal with upgrade) or try to open a session with another
router.
> > The esc seq gives me a blank line & if I hit return the west prompt
> appears
> > again. I am not sure if I am missing a command on the west router. Can
> > someone make a suggestion  or steer me in the right direction? I would
> > appreciate the help?
> >
> > TIA
> > Mark
> >
> > Configs:
> >
> >  2511#sh run
> >  Building configuration...
> >
> >  Current configuration:
> >  !
> >  version 11.0
> >  service password-encryption
> >  service udp-small-servers
> >  service tcp-small-servers
> >  !
> >  hostname 2511
> >  !
> >  enable secret 5 $1$KRXt$MfpQSqUGp0NOiHRhiRwPs1
> >  !
> >  no ip domain-lookup
> >  !
> >  interface Loopback0
> >   ip address 10.1.1.1 255.255.255.255
> >  !
> >  interface Ethernet0
> >   ip address 192.168.1.69 255.255.255.0
> >  !
> >  interface Serial0
> >   no ip address
> >   shutdown
> >   no fair-queue
> >  !
> >  interface Serial1
> >   no ip address
> >   shutdown
> >  !
> >  ip host east 2001 10.1.1.1
> >  ip host south 2004 10.1.1.1
> >  ip host north 2003 10.1.1.1
> >  ip host west 2002 10.1.1.1
> >  ip classless
> >  banner exec ^C
> >  01 - west console
> >  02 - east console
> >  03 - north console
> >  04 - south console ^C
> >  !
> >  line con 0
> >  line 1 16
> >   no exec
> >   transport input all
> >  line aux 0
> >   transport input all
> >  line vty 0
> >   exec-timeout 0 0
> >   password 7 06030328464F01
> >   login
> >  line vty 1
> >   exec-timeout 0 0
> >   password 7 050E0A062B4D46
> >   login
> >  line vty 2
> >   exec-timeout 0 0
> >   password 7 14121E02060522
> >   login
> >  line vty 3
> >   exec-timeout 0 0
> >   password 7 045E070F052044
> >   login
> >  line vty 4
> >   exec-timeout 0 0
> >   password 7 14121E02060522
> >   login
> >  !
> >  end
> >
> >
> >  Second router
> >
> >  est#sh run
> >  Building configuration...
> >
> >  Current configuration:
> >  !
> >  version 11.2
> >  service password-encryption
> >  no service udp-small-servers
> >  no service tcp-small-servers
> >  !
> >  hostname west
> >  !
> >  enable secret 5 $1$57px$PD.qgpO/R2whcXLTrvlYA.
> >  !
> >  !
> >  interface Ethernet0
> >   no ip address
> >   shutdown
> >  !
> >  interface Ethernet1
> >   no ip address
> >   shutdown
> >  !
> >  interface Serial0
> >   no ip address
> >   shutdown
> >   no fair-queue
> >  !
> >  interface Serial1
> >   no ip address
> >   shutdown
> >  !
> >  no ip classless
> >  !
> 

Re: Can fast switching/CEF handle QoS/ext. [7:5180]

2001-05-20 Thread Tony Medeiros

Try these links.   Lots of the infromation is scattered around.  Of course
it's all IOS version and platform dependent

http://www.cisco.com/univercd/cc/td/doc/product/software/ios111/cc111/bgppro
p.htm

http://www.cisco.com/warp/customer/cc/pd/rt/7200/nse1/prodlit/nse1_ds.htm

http://www.cisco.com/warp/public/105/20.html


Hope this helps,
Tony M.
#6172


- Original Message -
From: NRF 
To: 
Sent: Sunday, May 20, 2001 4:56 AM
Subject: Can fast switching/CEF handle QoS/ext. [7:5180]


> I would like to know if anybody can tell me how or even if fast-switching
> and CEF handle special packet handling decisions like extended
access-lists,
> policy-routing, QoS (like queuing, CAR, WRED).  From reading the
CiscoPress
> book "Inside Cisco IOS Software Architecture", I understand how
> fast-switching and CEF work in normal packet forwarding situations.  But
> what happens when more intelligence is needed in packet forwarding, like
in
> situations mentioned above?
>
> I am well aware of the command "ip route-cache policy", which seems to
imply
> that a policy route can be cached for fast-switching.  I am interested in
> finding out how this really works.  Because I can make a policy route that
> matches on so many different things (source IP, IP precedence/TOS value,
> packet length,etc.) and can change so many different things (next hop,
> default next hop, prec/TOS, etc.), it seems to me that the tree or trie or
> whatever logic structure IOS may use would quickly become overwhelmed by
the
> sheer number of possibilities.  Which makes me wonder whether the router
can
> really cache the policy at all, or if it can, should it (as opposed to
just
> process-switching the packet).
>
> Thanx
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5182&t=5180
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Terminal Server in detail !!! [7:5177]

2001-05-20 Thread Tony Medeiros

You are missing a few things.  Here is the basic term server setup:


ip host r1 2001 1.1.1.1
ip host r2 2002 1.1.1.1
ip host r3 2003 1.1.1.1
^  This number must match the "absolute number" of
the tty line you want to use.  Do a "show line" to find out what this is


line 1 8
transport input all
no exec

That is it

Tony M.
#6172



- Original Message -
From: Jeongwoo Park 
To: 
Sent: Sunday, May 20, 2001 3:12 AM
Subject: Terminal Server in detail !!! [7:5177]


> Hi all
>
> I made some changes on config.
>
> Still didn't work.
>
> Here is new config:
>
>
>
> TermServer#sh run
>
> Building configuration...
>
> Current configuration:
>
> !
>
> version 12.0
>
> service timestamps debug uptime
>
> service timestamps log uptime
>
> no service password-encryption
>
> !
>
> hostname TermServer
>
> !
>
> enable password wams
>
> !
>
> ip subnet-zero
>
> no ip domain-lookup
>
> ip host r1 2001 1.1.1.1
>
> ip host r2 2002 1.1.1.1
>
> ip host r3 2003 1.1.1.1
>
> !
>
> !
>
> !
>
> interface Loopback0
>
> ip address 1.1.1.1 255.255.255.255
>
> no ip directed-broadcast
>
> !
>
> interface Ethernet0
>
> no ip address
>
> no ip directed-broadcast
>
> shutdown
>
> !
>
> interface Serial0
>
> ip address 5.5.5.5 255.255.255.0
>
> no ip directed-broadcast
>
> no ip mroute-cache
>
> no fair-queue
>
> clockrate 64000
>
> !
>
> interface Serial1
>
> ip address 5.5.6.5 255.255.255.0
>
> no ip directed-broadcast
>
> !
>
> ip classless
>
> !
>
> !
>
> line con 0
>
> no exec
>
> transport input none
>
> line 1 8
>
> transport input all
>
> transport output none
>
> stopbits 1
>
> line aux 0
>
> line vty 0 4
>
> login
>
> !
>
> end
>
> Now I did "sh line"
>
> TermServer#sh line
>
> Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
>
> * 0 CTY - - - - - 15 0 0/0 -
>
> * 1 TTY 9600/9600 - - - - - 7 20 4/17 -
>
> * 2 TTY 9600/9600 - - - - - 7 0 0/0 -
>
> 3 TTY 9600/9600 - - - - - 1 0 0/0 -
>
> 4 TTY 9600/9600 - - - - - 0 0 0/0 -
>
> 5 TTY 9600/9600 - - - - - 0 323 179/539 -
>
> 6 TTY 9600/9600 - - - - - 0 0 0/0 -
>
> 7 TTY 9600/9600 - - - - - 0 15 119/356 -
>
> * 8 TTY 9600/9600 - - - - - 0 22 21/63 -
>
> 9 AUX 9600/9600 - - - - - 0 0 0/0 -
>
> 10 VTY - - - - - 0 0 0/0 -
>
> 11 VTY - - - - - 0 0 0/0 -
>
> 12 VTY - - - - - 0 0 0/0 -
>
> 13 VTY - - - - - 0 0 0/0 -
>
> 14 VTY - - - - - 0 0 0/0 -
>
> Then I did this
>
> TermServer#clear line 1
>
> [confirm]
>
> [OK]
>
> TermServer#clear line 2
>
> [confirm]
>
> [OK]
>
> TermServer#clear line 8
>
> [confirm]
>
> [OK]
>
> TermServer#sh line
>
> Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
>
> * 0 CTY - - - - - 15 0 0/0 -
>
> 1 TTY 9600/9600 - - - - - 7 90 7/26 -
>
> 2 TTY 9600/9600 - - - - - 7 0 0/0 -
>
> 3 TTY 9600/9600 - - - - - 1 0 0/0 -
>
> 4 TTY 9600/9600 - - - - - 0 0 0/0 -
>
> 5 TTY 9600/9600 - - - - - 0 323 179/539 -
>
> 6 TTY 9600/9600 - - - - - 0 0 0/0 -
>
> 7 TTY 9600/9600 - - - - - 0 15 119/356 -
>
> * 8 TTY 9600/9600 - - - - - 0 22 21/63 -
>
> 9 AUX 9600/9600 - - - - - 0 0 0/0 -
>
> 10 VTY - - - - - 0 0 0/0 -
>
> 11 VTY - - - - - 0 0 0/0 -
>
> 12 VTY - - - - - 0 0 0/0 -
>
> 13 VTY - - - - - 0 0 0/0 -
>
> 14 VTY - - - - - 0 0 0/0 -
>
> Now it shows this:
>
> TermServer#sh line
>
> Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
>
> * 0 CTY - - - - - 15 0 0/0 -
>
> 1 TTY 9600/9600 - - - - - 7 90 7/26 -
>
> 2 TTY 9600/9600 - - - - - 7 0 0/0 -
>
> 3 TTY 9600/9600 - - - - - 1 0 0/0 -
>
> 4 TTY 9600/9600 - - - - - 0 0 0/0 -
>
> 5 TTY 9600/9600 - - - - - 0 323 179/539 -
>
> 6 TTY 9600/9600 - - - - - 0 0 0/0 -
>
> 7 TTY 9600/9600 - - - - - 0 15 119/356 -
>
> * 8 TTY 9600/9600 - - - - - 0 22 21/63 -
>
> 9 AUX 9600/9600 - - - - - 0 0 0/0 -
>
> 10 VTY - - - - - 0 0 0/0 -
>
> 11 VTY - - - - - 0 0 0/0 -
>
> 12 VTY - - - - - 0 0 0/0 -
>
> 13 VTY - - - - - 0 0 0/0 -
>
> 14 VTY - - - - - 0 0 0/0 -
>
> At this point, I am confused because line 8 was not cleared.
>
> Now I typed "r1" This is what it looks like:
>
> TermServer#r1
>
> Trying r1 (1.1.1.1, 2001)... Open
>
> And I get stuck forever.
>
> I had to go (ctrl+shift+6)+X to go back to TermServer prompt.
>
> At TermServer prompt, I did "sh line" again.
>
> TermServer#sh line
>
> Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
>
> * 0 CTY - - - - - 16 0 0/0 -
>
> * 1 TTY 9600/9600 - - - - - 8 90 7/26 -
>
> 2 TTY 9600/9600 - - - - - 7 0 0/0 -
>
> 3 TTY 9600/9600 - - - - - 1 0 0/0 -
>
> 4 TTY 9600/9600 - - - - - 0 0 0/0 -
>
> 5 TTY 9600/9600 - - - - - 0 323 179/539 -
>
> 6 TTY 9600/9600 - - - - - 0 0 0/0 -
>
> 7 TTY 9600/9600 - - - - - 0 15 119/356 -
>
> * 8 TTY 9600/9600 - - - - - 0 22 21/63 -
>
> 9 AUX 9600/9600 - - - - - 0 0 0/0 -
>
> 10 VTY - - - - - 0 0 0/0 -
>
> 11 VTY - - - - - 0 0 0/0 -
>
> 12 VTY - - - - - 0 0 0/0 -
>
> 13 VTY - - - - - 0 0 0/0 -
>
> 14 VTY - - - - - 0 0 0/0 -
>
> So I cleared line 1 by doing this "clear line 1"
>
> And typed r1. It still showed this @!#$.
>
> TermServer#r1
>
> Trying r1 (1.1.1.1, 2001)... Open
>
> I just made lon

Re: share ethernet [7:5223]

2001-05-21 Thread Tony Medeiros

Use a routing protocol or static routes.  The default router for the server
will send an ICMP redirect to the server for any networks reachable by the
other router.

Or, set the servers defualt gateway to it's self and let proxy arp do the
router selection.

Tony M.
#6172

- Original Message -
From: md. nazri 
To: 
Sent: Monday, May 21, 2001 1:53 AM
Subject: share ethernet [7:5223]


> hi all,
> i got 2 routers sharing the same ethernet...both ether should active at
the
> same time(so i think hsrp not meaningful) with each ether have different
ip
> address with same subnet. Server on LAN should point to one particular
> ip(can it be two..?)...how do i achieve that...??  pls help
>
> tq
>
> rgds
> nazri
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5257&t=5223
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Problems with a 3620 voice router [7:5500]

2001-05-22 Thread Tony Medeiros

Use the IP/PLUS image version 12.1.5T.  The "T" train supports the the
features you will need and I have had great luck with it.  The "h.323"
version is mostly for Gatekeeper only voice stuff.

Tony M.
#6172

- Original Message -
From: Andras Bellak 
To: 
Sent: Tuesday, May 22, 2001 8:37 PM
Subject: RE: Problems with a 3620 voice router [7:5500]


> Is the IOS a plus version? Only plus versions support the voice modules,
at
> least in my experience.
>
> andras
>
>
> -Original Message-
> From: Circusnuts [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, May 22, 2001 7:28 PM
> To: [EMAIL PROTECTED]
> Subject: Problems with a 3620 voice router [7:5500]
>
>
> Hey all- just picked up as 3620 router with 2 Serial/ 2 Ethernet/ & NMHDV
> (VIC
> 1MFT-T1).  The issue I am having is this...  the voice module, actually
> nothing voice shows on the boot-up.  It's almost as if the interface in
not
> installed.  I have tried upgrading the IOS (12.1(8) IP/H323).  The module
> looks fine too, no burn smell.  Any ideas ???
>
> Router# Show Version
> Cisco Internetwork Operating System Software
> IOS (tm) 3600 Software (C3620-IX-M), Version 12.1(8), RELEASE SOFTWARE
(fc1)
> Copyright (c) 1986-2001 by cisco Systems, Inc.
> Compiled Mon 16-Apr-01 18:54 by kellythw
> Image text-base: 0x60008940, data-base: 0x60A18000
>
> ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE
> SOFTWARE
> (f
> c1)
>
> Router uptime is 4 minutes
> System returned to ROM by reload
> System image file is "flash:c3620-ix-mz.121-8.bin"
>
> cisco 3620 (R4700) processor (revision 0x81) with 28672K/4096K bytes of
> memory.
> Processor board ID 14825930
> R4700 CPU at 80Mhz, Implementation 33, Rev 1.0
> Bridging software.
> X.25 software, Version 3.0.0.
> 2 Ethernet/IEEE 802.3 interface(s)
> 2 Serial network interface(s)
> DRAM configuration is 32 bits wide with parity disabled.
> 29K bytes of non-volatile configuration memory.
> 8192K bytes of processor board System flash (Read/Write)
>
> Configuration register is 0x2102
>
> Thanks in advance !!!
> Phil
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5516&t=5500
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: connecting NM-HDV-1E1-30E to Alcatel 4300 PABX [7:5566]

2001-05-23 Thread Tony Medeiros

I have never done an Alcatel, but I here the same things apply, just
different signaling techiques apply. Are you emulating a PBX to PBX PRI
trunk?  Do you have centralized email and need MWL fuctioniality? Need
calling party name display ?Are you useing the router to tie into a Cisco IP
telephony solution?  Using voice over ip or frame?

All these uses require different techniques.  If you give  little more info
I'll let you know what I think needs to be done.

Tony M.
#6172

- Original Message -
From: 
To: 
Sent: Wednesday, May 23, 2001 6:36 AM
Subject: connecting NM-HDV-1E1-30E to Alcatel 4300 PABX [7:5566]


> Hi.
>
> I want to connect 3661 with NM-HDV-1E1-30E to Alcatel 4200 or 4300 PABX.
>
> In Cisco web site there are some certified PBX vendors and models. Such as
> Lucent Definity, Nortel Meridian, ...
> But there is no information about Alcatel PABX interoperability.
>
> Is there someone who established digital voice connection between Cisco
and
> Alcatel PABX already? Any information will be helpful.
>
> Thanks.
> Regards.
>
> Ali Burcin Kozak
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5567&t=5566
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Fw: Bandwidth allocation for VoIP Session [7:5549]

2001-05-23 Thread Tony Medeiros

> RSVP is also an option.  RTP priority is another (PQ-WFG) is another
>
> Tony M.
> #6172
>
> - Original Message -
> From: Patrick Donlon 
> To: 
> Sent: Wednesday, May 23, 2001 5:28 AM
> Subject: Re: Bandwidth allocation for VoIP Session [7:5549]
>
>
> > The IOS you use will determine on how you prioritise the traffic, with
> > earlier versions you can set a priority queues, multilink interleaving
or
> > just set the tos bit.
> >
> > For later versions of IOS, even 12.2(1), you can use policy maps. You
need
> > to set up a policy which has classes within it, then define the traffic
> you
> > want to be prioritised in an access list. Read up on it first and test
it
> >
> > regards
> >
> > Pat
> >
> >
> > ""Brijesh""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Dear all,
> > >
> > > Have a query:
> > >
> > > I have a 64 kbps point-to-point link between India and US office,
which
> is
> > > primarily used for data/VoIP communication.
> > >
> > > Presently there is no bandwidth allocated for a VoIP session. Please
> > suggest
> > > the suitable solution whereby I can allocate about 16 kbps per voice
> > session.
> > >
> > > Regards,
> > > Brijesh
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5570&t=5549
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Can I have a 2600 T-1 WIC bound to a Dialer interface? [7:5569]

2001-05-23 Thread Tony Medeiros

The best way to do this is to use inverse multiplexing multilink PPP.  See
the link below and scroll almost to the bottom for a configuration example.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/dial_
c/dcppp.htm

It does't use dialer interfaces but does  nice load balancing without
killing the processor.  "no ip route cache" is another alternative on both
T1's but puts all packet in the process switched path and can really slam
the router processor.

Tony M.
#6172

- Original Message -
From: NRF 
To: 
Sent: Wednesday, May 23, 2001 2:09 AM
Subject: Can I have a 2600 T-1 WIC bound to a Dialer interface? [7:5546]


> Consider this.  I have 2 2610's, each with a WIC-1DSU T-1 card in them.  I
> have these T-1's connected back to back.  I have tried putting IP
addreses,
> using encap ppp, and everything works cool, exactly the way I would expect
> it to work.  So I know the cards and the cable and all that are working
> fine.
>
> Now, I want to try to have the T-1 interfaces invoked via Dialer
interfaces.
> Why?  Because eventually I want to get 2 more of these T-1 cards, and
> install one in each (so each router has 2 of them) and then run ppp
> multilink where I bond the 2 T-1's together to form a 3 Mb pipe.
>
> But I just cannot do it.  Specifically, I have tried various ways to get
the
> Dialer interface to bond to the T-1's (Serial 0/0).  It never works.  For
> example, I create rotary groups.  It doesn't work.  Then I try dialer
pools.
> It also doesn't work.  Everything I have tried doesn't work.
>
> For example, if I try to use dialer pools, then the router demands a
dialer
> string.  So I give it a dialer string.  The Dialer interface then
apparently
> tries to dial this string, which of couse fails because in a back2back
T-1,
> there is nothing to dial.  So if I try a rotary group, somehow the dialer
> interface never properly seizes the T-1.  Instead I get an error like
this,
> whatever the heck it means:
>
> r1#ping 192.168.20.2
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 192.168.20.2, timeout is 2 seconds:
> .
> Success rate is 0 percent (0/5)
> r1#
> 01:25:59: Se0/0 DDR: rotor dialout [priority]
> 01:26:01: Se0/0 DDR: rotor dialout [priority]
> 01:26:03: Se0/0 DDR: rotor dialout [priority]
> 01:26:05: Se0/0 DDR: rotor dialout [priority]
> 01:26:07: Se0/0 DDR: rotor dialout [priority]
>
>
> OK, now I have seen several CCO examples (for example the examples on PPP
> multilink) where they put a serial interface (not an ISDN or an async int,
> but an actual serial interface) under a Dialer interface.  But what can I
> say, it has never worked for me, not once.  The only thing that can I can
> think of is that all those CCO examples use 2500's, whereas I got 2600's
> here.  But it shouldn't matter (or should it?).
>
> So, has anybody (especially somebody with a 2600 with a T-1 WIC)ever
> successfully put a serial interface under a Dialer interface and gotten
them
> to bond correctly  ?  If so, could you shoot me a config?
>
> Thanx
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5569&t=5569
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: how to enlarge Switching Backplane of 6509 [7:5487]

2001-05-23 Thread Tony Medeiros

I looked at that link too Chuck. It seems that if I want the utilize the DFS
card I gottal run that nasty "native IOS"   Is this true ?

Tony M.
#6172

- Original Message -
From: Chuck Larrieu 
To: 
Sent: Wednesday, May 23, 2001 12:59 AM
Subject: RE: how to enlarge Switching Backplane of 6509 [7:5487]


> It's always fun to have one of these discussions, especially when I could
be
> sleeping. This one seems to be turning into yet another of those "what is
> truth?" questions. When dealing with Cisco, it is sometimes difficult to
> tell.
>
> The following link would appear to say something other than what you have
> quoted. Granted, mine is a quick skim. But it does seem to state that one
> SFM card provides 256G and the other is for redundancy.
>
> http://www.cisco.com/warp/public/cc/pd/si/casi/ca6000/prodlit/c6sfm_ds.htm
>
> notice that later in the link, Cisco starts talking bout packets per
second
> ( PPS ) If you add the MSFC card you get 30mpps and if you add the DCF
card
> on top of that you get 100mpps.  I bring this up because I had a
> conversation off line with someone about needing the MSFC and DCF in order
> to get the 256G backplane. Cisco's own configuration tool indicates no.
The
> person with whom I was discussing this indicated he has done a lot of
> research and his finding was yes. My own reading tells me that if I were
an
> EE I might actually understand the link a bit better, and perhaps it would
> make more sense. As is stands, I am perceiving it as a lot of double-talk.
>
> This next link is where you, Frank, may have gotten your quote about the
> failover.
>
>
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sft_6_1/configgd
> /swfab.htm#xtocid223541
>
> I just opened NetformX, the configuration tool my boss paid a LOT of money
> for me to use in my design work. Once again I can't prove that I ever saw
> the SFM card described as 128G, and now it appears that the one card is
> indeed 256G.  Serves  me right for not checking this stuff every hour of
> every day :->
>
> Chuck
>
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> frank
> Sent: Tuesday, May 22, 2001 11:37 PM
> To: [EMAIL PROTECTED]
> Subject: Re: how to enlarge Switching Backplane of 6509 [7:5487]
>
> but a cisco engineer told me i should just use one .
> for why upgrade to 256G,the customer is god ,he wants to pay ,i don't
> care.^_^
> According to the following ,it seems if we use 2 sfm,just one is active
> ,another is not.
>
> The following is from cisco website.
>
> "128-Gbps Switch Fabric Module. The Switch Fabric Module requires
Supervisor
> Engine 2. Switch Fabric Modules must be installed in either slot 5 or 6 of
> the Catalyst 6500 series switches. For redundancy, you can install a
second
> Switch Fabric Module. The Switch Fabric Module first installed functions
as
> the primary module. When two modules are installed at the same time, the
> module in slot 5 functions as the primary module, and the module installed
> in slot 6 functions as the backup. If you reset the Switch Fabric Module
> installed in slot 5, the module in slot 6 becomes the active one."
> v
> "Chuck Larrieu"  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Takes two to get 256
> >
> > Takes slots 5 & 6, making your 6509 a 6507 ;->
> >
> > Idle curiosity - why do you need a 256 gig back plane? Assuming all
seven
> of
> > the other slots each contain the 16 port Gig E blades, and each port was
> > going full duplex, that comes out to 224 gigs, according to my fingers.
Oh
> > yeah, through in the two Gig E ports on the sup module, and that gets to
> > 226.
> >
> > I am still trying to figure how you can move that much data, given the
way
> > networks normally work. ;->
> >
> > Chuck
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> > frank
> > Sent: Tuesday, May 22, 2001 8:53 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: how to enlarge Switching Backplane of 6509 [7:5487]
> >
> > do i need one or two 128G Switch Fabric Module?
> >
> > "dave mauro"  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Don't expect to find this spelled out clearly anywhere on CCO, but to
> the
> > > best of my knowledge, you must have:
> > >
> > > 1. Supervisor Engine 2 (with PFC2)
> > > 2. MSFC2
> > > 3. 128G Switch Fabric Module
> > > 4. 16-port GE module (WS-X6516-GBIC or WS-X6816-GBIC)
> > > 5. Distributed Forwarding Card (DFC)
> > >
> > > Until recently this last piece has not been available...
> > >
> > > Search CCO for details on these fine products.  Bring your wallet.
> > >
> > > Dave
> > >
> > >
> > > On Tue, 22 May 2001, frank wrote:
> > > >
> > > > from 32G to 256G?
> > > >
> > > > Thanks
> > > >
> > > >
> > > > Frank
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ,

Re: CORRECTION: Re: reverse telnet [7:5655]

2001-05-23 Thread Tony Medeiros

Exit would work Frank.  It will terminate the telnet session.  cntrl,shift,
X just suspends it.

A single key stroke way would be to configure an alias on R1 and any other
router that you get to via your term server.

In config mode on R1
"alias exec x exit"

Now when you what to TERMINATE the telnet session while in r1, just type x
in regular enable mode.  R1 does the actual termination not the term server.
But hopfully this will accomplish what you are trying to do.

Tony M.
#6172

- Original Message -
From: Frank Kim 
To: 
Sent: Wednesday, May 23, 2001 7:55 PM
Subject: CORRECTION: Re: reverse telnet [7:5655]


> Hi folks,
> I know about the ctrl-shift-6 x.  Please read my message again.  I am not
> telnet'ing from the 2511.  I sit on another workstation which is on the
> same network as the ethernet segment of the 2511 and I telnet from there.
> Please re-read my question.  Sorry for the confusion.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5677&t=5655
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: connecting NM-HDV-1E1-30E to Alcatel 4300 PABX [7:5566]

2001-05-23 Thread Tony Medeiros

Well,  for calling party ID and message waiting light stuff on centralized
voice mail, Lucent canuse it's own form of ISDN PRI called DCS+ .  The way
they usually set it up for PBX to PBX connectivity is the customer purchases
a clear channel T1 and Lucent runs its own PRI over it with one side being
the network protocol side (isdn switch) and the other being the user.  They
use channel 24 for signaling and sometimes channel 23 for centralized call
accounting.  The rest of the time slots are bearer channels.  Cisco can
emulate this with a technique of VOIP called Transparent Common Channel
Signaling (TCCS)

However, I am almost sure this won't work between different PBX venders
because DCS+ is proprietary.

Another approach is QSIG.  This is a semi standard type of ISDN PRI that is
supposed to signal all the stuff you need like calling party display,
Message waiting light display, etc.

The way you set it up is to set up the controller for the E1 interface for
the proper linecode,clocksource, and framing you want to use.  Then the
command "PRI-timeslots 1-30.

This creates a serial interface that looks like "interface serial  "mod/port
: 16"   I can't remember if it's timeslot 15 or 16 on E1 that is the D
channel.  (I'm a t1 kind of guy)  Under this port you call out the "ISDN
switch-type QSIG"  A cisco router is supposed to emulate the network
protocol side of a PRI but I haven't had much luck with it.  Just let each
PBX be network side.

Then it just a matter of dial peers for your dial plan.  There is lots of
info on CCO on how to configure that.

The QSIG switch type is supposed to be vender independent and is supposed to
pass along all the information you need

You replicate a similar config on the other side obviously.  Don't forget
QOS techniques for whatever layer 2 wan transport your using

The G729 codec (if that is the one you want to choose for your compression)
will give toll quality voice and real low bit rate.

I hope this gives you an start on what has to happen.  There is a TON of
stuff on CCO on toll bypass setups.  I prefer VOIP because of the
flexability.

Good luck
Tony M.
#6172
- Original Message -
From: 
To: 
Sent: Wednesday, May 23, 2001 7:11 AM
Subject: RE: connecting NM-HDV-1E1-30E to Alcatel 4300 PABX [7:5566]


>
> Hi Tony.
> Let me explain my case.
>
> Customer has 2 different sites.
> One site has Lucent PABX the other has Alcatel 4200 and 4300 PABX.
> In Both sides Cisco 3661 and 1 Mbps Frame Relay connection between them.
>
> They want to reduce their phone costs. So they decide to carry voice
traffic
> on data network.
> VoIP or VoFR ?  We havent decided yet. Probably VoIP.
>
> NM-HDV-1E1-30E modules on 3661 routers will be used when integrating PABX
to
> data network.
>
> They dont plan to use IP phones.
> Calling party display is needed actually.
>
> Thanks for your help.
> Best Regards.
>
> Burcin
>
>
>
> -Original Message-
> From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, May 24, 2001 8:02 AM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Re: connecting NM-HDV-1E1-30E to Alcatel 4300 PABX [7:5566]
>
>
> I have never done an Alcatel, but I here the same things apply, just
> different signaling techiques apply. Are you emulating a PBX to PBX PRI
> trunk?  Do you have centralized email and need MWL fuctioniality? Need
> calling party name display ?Are you useing the router to tie into a Cisco
IP
> telephony solution?  Using voice over ip or frame?
>
> All these uses require different techniques.  If you give  little more
info
> I'll let you know what I think needs to be done.
>
> Tony M.
> #6172




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5684&t=5566
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Memory on a 4500M [7:5711]

2001-05-24 Thread Tony Medeiros

Have a customer as we speak that is desperately finding the funds to upgrade
his 2 4700 that hold 64 ram max.  For business reasons he needs the full bgp
tables. Has a little crashing problem.

The answer for now and for the future:  7206/NPE 400 with 512 of ram

- Original Message -
From: Frank Kim 
To: 
Sent: Thursday, May 24, 2001 1:10 AM
Subject: Memory on a 4500M [7:5711]


> Hi folks,
> I've been pounding this group with tons of questions.  Nevertheless, my
> quest for knowledge continues on.  My question is, has anyone ever seen a
> 4500M being deployed for full-routes bgp on the internet?  CCO claims that
> a 4500M can only go up to 32megs for the main memory, that is 16meg on
> each slot.  And also it can go up to 16megs for the shared memory.  Has
> anyone tried to add more than 32megs on this 4500M?  If so, was it
> successful?  Also if you have 32megs of main memory and 16megs of shared
> memory, can you claim that the router has 48megs of ram?  Can the
> shared+main memory be used for one another when a router is in
> operation?  Thanks for any advice.
>
> -Frank
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5717&t=5711
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ARP versus Proxy-arp [7:5664]

2001-05-24 Thread Tony Medeiros

Proxy arp is still used on duel homed servers.  Say you have an NT box that
has a NIC on two different networks serviced by two different routers that
reach different networks.  You can't give the box two different  default
gateways.  Proxy arp is your only solution.  Right 
Tony M.
#6172
- Original Message -
From: Hire, Ejay 
To: 
Sent: Thursday, May 24, 2001 7:31 AM
Subject: RE: ARP versus Proxy-arp [7:5664]


> Proxy arp isn't dead, it is still in use very frequently on dial-up links.
> If you get a chance, dial-up to earthlink and run winipcfg.  You'll see
that
> your default gateway is actually set to yourself.  Their is a reasonable
> explanation of this behavior in the Sybex CCNP switch 2.0 chapter on
> redundancy.
>
> -EH
>
> -Original Message-
> From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, May 23, 2001 10:37 PM
> To: [EMAIL PROTECTED]
> Subject: ARP versus Proxy-arp [7:5664]
>
>
> At the risk of becoming another Bob Vance..
>
> I'm reading Doug Comer's TCP/IP reference, on the assumption that it can't
> hurt to really get into how TCP/IP works.
>
> Proxy-arp versus normal  arp.
>
> A host does not know the physical address of another host so it sends out
an
> ARP request. If the host in question lies on another network, a router
> responds to that request. Proxy ARP, correct?
>
> A host through it's TCP stack does the XOR and determines that a host lies
> on another network. The host therefore sends the packet to the device
> indicated as its default gateway in its configuration. It sends an ARP
> request for the MAC of the default gateway. Normal ARP?
>
> So in other words, proxy arp may be viewed as something of an obsolete
> protocol / operation in that most modern TCP stacks contain the mechanisms
> for doing the network XOR determination, and then using the default
gateway.
> A modern stack would recognize that a host is on a different network and
go
> the default gateway route, so to speak.
>
> In other words, the necessity for proxy arp is eliminated for the most
part
> because of the default gateway concept and the modern TCP stack.
>
> Has it sunk through this thick head finally?
>
> PS Comer states that proxy arp is aka arp hack. :->
>
> Chuck
>
> One IOS to forward them all.
> One IOS to find them.
> One IOS to summarize them all
> And in the routing table bind them.
>
> -JRR Chambers-
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5746&t=5664
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Connecting Serial Interfaces [7:5838]

2001-05-24 Thread Tony Medeiros

The clock speed you have set up on "west"s serial 0 and 1 (which are high
speed serials) isn't supported on "north"s serial 2 and 3 (which are low
speed sync/async interrfaces)   The fastest speed that serial ports 2 thru 9
is 115200.

Change your clock speed or use serials 0 and 1 on "north"

Tony M.
#6172

- Original Message -
From: Mark Rose 
To: 
Sent: Thursday, May 24, 2001 7:13 PM
Subject: Connecting Serial Interfaces [7:5838]


> I am trying to set up a serial link between a 2514 and a 2522. I am using
> the sync/async ports on the 2522. I cannot get the interface to stay up .
It
> works for a few seconds & then too many errors take down the link.
>
> I used the physical-layer sync command on the serial ports of the 2522.
This
> does not help. I know that I have missed a command to set up the
sync/async
> interface, but cannot figure what it is.
>
> Advise is needed
> TIA
> Mark
>
> Configs below:
>
>  2522
> North#sh run
> Building configuration...
>
> Current configuration:
> !
> version 11.2
> service password-encryption
> no service udp-small-servers
> no service tcp-small-servers
> !
> hostname North
> !
> enable secret 5 $1$F2gJ$LGaIm7rXo0n4KiMKZOSX21
> !
> !
> interface Ethernet0
>  no ip address
>  shutdown
> !
> interface Serial0
>  no ip address
>  shutdown
> !
> interface Serial1
>  no ip address
>  shutdown
> !
> interface Serial2
>  description East S0 192.168.50.0
>  ip address 192.168.50.2 255.255.255.0
>  bandwidth 64
> !
> interface Serial3
>  description West S0 192.168.30.0
>  ip address 192.168.30.2 255.255.255.0
>  bandwidth 64
> !
> interface Serial4
>  description Link West 192.168.40.0
>  no ip address
>  bandwidth 64
>  shutdown
> !
> interface Serial5
>  no ip address
>  shutdown
> !
> interface Serial6
>  no ip address
>  shutdown
> !
> interface Serial7
>  description West S1 192.168.40.0
>  ip address 192.168.40.2 255.255.255.0
>  bandwidth 64
> !
> interface Serial8
>  no ip address
>  shutdown
> !
> interface Serial9
>  no ip address
>  shutdown
> !
> interface BRI0
>  no ip address
>  shutdown
> !
> no ip classless
> !
> line con 0
>  exec-timeout 0 0
>  logging synchronous
> line aux 0
> line vty 0 4
>  password 7 121C091E180A04
>  login
> !
> end
>
> 2512
> west#sh run
> Building configuration...
>
> Current configuration:
> !
> version 11.2
> service password-encryption
> no service udp-small-servers
> no service tcp-small-servers
> !
> hostname west
> !
> enable secret 5 $1$a7wE$jE18AUEn2QSTBFY.P1Fqg1
> !
> partition flash 2 8 8
> !
> !
> interface Ethernet0
>  no ip address
>  shutdown
> !
> interface Ethernet1
>  description Link to East 192.168.20.0
>  ip address 192.168.20.1 255.255.255.0
> !
> interface Serial0
>  description North S3 192.168.30.0
>  ip address 192.168.30.1 255.255.255.0
>  bandwidth 64
>  clockrate 100
> !
> interface Serial1
>  description North S7 192.168.50.0
>  ip address 192.168.40.1 255.255.255.0
>  bandwidth 64
>  clockrate 100
> !
> no ip classless
> !
> line con 0
>  exec-timeout 0 0
>  logging synchronous
> line aux 0
> line vty 0 4
>  password 7 070A2D45440811
>  login
> !
> end
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=5849&t=5838
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: GIGE Jumbo Frames [7:6429]

2001-05-30 Thread Tony Medeiros

Some older boxes don't support it.  Like the cat5K,  Some lines cards will,
some won't

Some NIC's won't

Fragmentation deley and overhead on WAN links (might not be an issue)

Advantages.

I guess better "goodput".  I know NetApp. boxes tend to work better with
jumbo frames or so I am told.  I never measured it.  Just asked to turn it
on for a customer or two.

Tony M.
#6172
- Original Message -
From: Nabil Fares 
To: 
Sent: Wednesday, May 30, 2001 6:56 AM
Subject: GIGE Jumbo Frames [7:6429]


> Greetings all,
>
> Would like to know if any of you guys using jumbo frames on your network.
> Any advantages or disadvantages
>
> Thanks,
>
> Nabil
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6432&t=6429
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPSEC HELP [7:6400]

2001-05-30 Thread Tony Medeiros

Either protocol 50 or 51.  Which stands for "Authentication header" or
"Encapsulated Security Protocol" (AH or ESP)  These are the two types of
IPSEC encapulations.  Can't remember this early without my coffee which is
which.  :)
Tony M
#6172

- Original Message -
From: Burnham, Chris 
To: 
Sent: Wednesday, May 30, 2001 4:08 AM
Subject: IPSEC HELP [7:6400]


> does any one know what is placed in the ip protocol field of the new ip
> header when using ipsec tunnel mode
>
> Chris Burnham,
> Systems Engineer,
> Delphis Consulting Plc.
> Tel:   +(44) 020 7916 0200
> Mob: +(44) 07799403576
> [EMAIL PROTECTED]
>
>
> This e-mail and any files transmitted with it are intended solely for the
> addressee and are confidential. They may also be legally
> privileged.Copyright in them is reserved by Delphis Consulting PLC
> ["Delphis"] and they must not be disclosed to, or used by, anyone other
than
> the addressee.If you have received this e-mail and any accompanying files
in
> error, you may not copy, publish or use them in any way and you should
> delete them from your system and notify us immediately.E-mails are not
> secure.  Delphis does not accept responsibility for changes to e-mails
that
> occur after they have been sent.  Any opinions expressed in this e-mail
may
> be personal to the author and may not necessarily reflect the opinions of
> Delphis
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6439&t=6400
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VoIP QoS [7:6586]

2001-06-03 Thread Tony Medeiros

The Cisco AVVID guru's just told me to bail on LLQ and go to CBWFQ instead.
Problems with code or just works better according to them.
Tony
#6172

- Original Message -
From: Michael L. Williams 
To: 
Sent: Sunday, June 03, 2001 8:56 AM
Subject: Re: VoIP QoS [7:6586]


> I thought 768Kbps was the minimum you needed NOT to use LFI... at
> 768Kbps, it takes ~15ms for a 1500byte frame to be put on the line.  So
even
> if a couple 1500-byte ethernet frames came between your voice frames, it
> would wouldn't be too bad... but depending on the queuing method, even
> at 768Kbps, the regular ethernet traffic could indeed cause a
problem...
> you could use a priority queue to make sure that all the voice traffic
> *always* goes through before any of the other traffic, but from what I
> understand the LLQ is much better for these purposes.
>
> Mike W.
>
> "Brian"  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > What codec are you using?  If the speed of the link is T1 or less I
would
> > definitly do LFI. Otherwise large packets (1500 bytes) could be starving
> > the voice from the minimum latency that it needs.
> >
> > Brian
> >
> >
> > On Thu, 31 May 2001, Amit Gupta wrote:
> >
> > > Hi Everybody,
> > >
> > > I have configured the following parameters on the
> > > serial interface for VoIP.The quality of the calls is
> > > not very good during working hours you can feel some
> > > delay/small interruptions while using it.
> > >
> > > interface serial 0
> > > ip tcp header-compression iphc-format
> > >  no ip mroute-cache
> > >  no fair-queue
> > >  ip rtp header-compression iphc-format
> > >  ip rtp priority 16384 16383 64
> > >
> > > Could anybody suggest any other alternative to improve
> > > the quality.
> > > Will removing the compression help ?
> > > Do I need to have something like Link Fragmentation
> > > and Interleaving configured.
> > >
> > > Thanks
> > >
> > > Amit
> > >
> > >
> > >
> > > __
> > > Do You Yahoo!?
> > > Get personalized email addresses from Yahoo! Mail - only $35
> > > a year!  http://personal.mail.yahoo.com/
> > I'm buying / selling used CISCO gear!!
> > email me for a quote
> >
> > Brian Feeny,CCDP,CCNP+VAS Scarlett Parria
> > [EMAIL PROTECTED] [EMAIL PROTECTED]
> > 318-213-4709  318-213-4701
> >
> > Netjam, LLC   http://www.netjam.net
> > 333 Texas St.VISA/MC/AMEX/COD
> > Suite 1401   30 day warranty
> > Shreveport, LA 71101   Cisco Channel Partner
> > toll free: 866-2NETJAM
> > phone:318-212-0245
> > fax:318-212-0246




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7031&t=6586
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: hardware compatibility [7:7039]

2001-06-04 Thread Tony Medeiros

Here is one place I would look for detailed info on the different mods.

http://www.cisco.com/warp/public/779/servpro/modulecafe/

The other on is the configuration tool.  If you worked at a VAR you would
use this ten times a day.
http://www.cisco.com/pcgi-bin/front.x/newConfig/config_root.pl

Good Luck !!
Tony M.
#6172

- Original Message -
From: Dwayne Saunders 
To: 
Sent: Monday, June 04, 2001 12:59 AM
Subject: hardware compatibility [7:7039]


> hi all,
> Does anyone know where on the Cisco site the hardware compatibility
> matrix is, what I want to be able to do is put in my router/switch model
to
> try and find all the different modules available aswell as being able to
see
> (for example what modules are compatible with 2600 and 3600 router).
> any help greatly appreciated.
>
> D'Wayne Saunders
> Network Admin




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7071&t=7039
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



QDM 2.0 (QOS device manager enhancement for IOS) [7:7079]

2001-06-04 Thread Tony Medeiros

I have looked and searched and looked all over the software center and CCO
for
the place to download this damn thing!!!  Can anyone send me a link of where
the hell the download page is for this so I can try it out??

Thanks a ton!!
Tony M.
#6172




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7079&t=7079
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: QDM 2.0 (QOS device manager enhancement for IOS) [7:7079]

2001-06-04 Thread Tony Medeiros

YES!
Thanks you !!!

Tony M.
#6172

- Original Message - 
From: Vijay Ramcharan 
To: 'Tony Medeiros' ; 
Sent: Monday, June 04, 2001 7:44 AM
Subject: RE: QDM 2.0 (QOS device manager enhancement for IOS) [7:7079]


> Would this be what you're seeking?
> 
> http://www-1.cisco.com/cgi-bin/tablebuild.pl/qdm
> 
> Vijay Ramcharan
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> Tony Medeiros
> Sent: Monday, June 04, 2001 10:48 AM
> To: [EMAIL PROTECTED]
> Subject: QDM 2.0 (QOS device manager enhancement for IOS) [7:7079]
> 
> 
> I have looked and searched and looked all over the software center and
> CCO for the place to download this damn thing!!!  Can anyone send me a
> link of where the hell the download page is for this so I can try it
> out??
> 
> Thanks a ton!!
> Tony M.
> #6172




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7084&t=7079
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VoIP QoS [7:6586]

2001-06-06 Thread Tony Medeiros

Its seems to me(I am still investigating all the different methods) that
with CBWFQ, I can be much more grannular on what traffic and how to queue
it.  For instance,  I can weight all the different types of traffic needed
for an AVVID deployment,  H.323. MGCP, Skinny and the like, not just RTP.

I have been playing with QDM and for once Cisco has come up with a usefull
gui tool that works !!!  I can set up a nice CBWFQ scheme real easy.

There are so many ways of doing this that it just makes me mad !!!  Throw in
the different frame relay methods of queuing and it gets way worse.  The are
so many commands doing nearly the same thing that I am just left to try them
all and see what works best.  I wish Cisco would deceide on a scheme for
AVVID stuff and stick with it.

So to answer your question.  No I don't know from expierence which one is
best,  But I will after a few deployments.  I just repeated what was told to
me by a fairly realable Cisco SE who knows their stuff.  This is an area
that will require much learning for me and is the reason I deceided that IP
telephoney will be my speciality,  very challanging !!!

The Layer 2 QOS stuff is another thing entirely !!  VACL's and trusts and
QOS maps ,  WOW !!

Good luck to all of us and I'll keep sharing what I learn in this field.
Tony M.
#6172

- Original Message -
From: Brian 
To: 
Sent: Tuesday, June 05, 2001 9:33 PM
Subject: Re: VoIP QoS [7:6586]


> Can you elaborate on this a little?  I mean LLQ is basically PQ-CBWFQ, and
> offers a CBR priority queue for the voice to use.  With CBWFQ your voice
> traffic is going to be weighted based on class, just like other traffic,
> and even in a best case scenerio could still get some packet trains
> causing unpredicatable latency..or are you recommending
> CBWFQ solely based on bugs in LLQ?
>
> Thanks,
>
> Brian
>
>
> On Mon, 4 Jun 2001, Will wrote:
>
> > Yes, CBWFQ is the way to go
> >
> > ""Tony Medeiros""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > The Cisco AVVID guru's just told me to bail on LLQ and go to CBWFQ
> > instead.
> > > Problems with code or just works better according to them.
> > > Tony
> > > #6172
> > >
> > > - Original Message -
> > > From: Michael L. Williams
> > > To:
> > > Sent: Sunday, June 03, 2001 8:56 AM
> > > Subject: Re: VoIP QoS [7:6586]
> > >
> > >
> > > > I thought 768Kbps was the minimum you needed NOT to use LFI...
at
> > > > 768Kbps, it takes ~15ms for a 1500byte frame to be put on the line.
So
> > > even
> > > > if a couple 1500-byte ethernet frames came between your voice
frames,
> it
> > > > would wouldn't be too bad... but depending on the queuing
method,
> > even
> > > > at 768Kbps, the regular ethernet traffic could indeed cause a
> > > problem...
> > > > you could use a priority queue to make sure that all the voice
traffic
> > > > *always* goes through before any of the other traffic, but from what
I
> > > > understand the LLQ is much better for these purposes.
> > > >
> > > > Mike W.
> > > >
> > > > "Brian"  wrote in message
> > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > > What codec are you using?  If the speed of the link is T1 or less
I
> > > would
> > > > > definitly do LFI. Otherwise large packets (1500 bytes) could be
> > starving
> > > > > the voice from the minimum latency that it needs.
> > > > >
> > > > > Brian
> > > > >
> > > > >
> > > > > On Thu, 31 May 2001, Amit Gupta wrote:
> > > > >
> > > > > > Hi Everybody,
> > > > > >
> > > > > > I have configured the following parameters on the
> > > > > > serial interface for VoIP.The quality of the calls is
> > > > > > not very good during working hours you can feel some
> > > > > > delay/small interruptions while using it.
> > > > > >
> > > > > > interface serial 0
> > > > > > ip tcp header-compression iphc-format
> > > > > >  no ip mroute-cache
> > > > > >  no fair-queue
> > > > > >  ip rtp header-compression iphc-format
> > > > > >  ip rtp priority 16384 16383 64
> > > > > >
> > > > > > Could anybody suggest any other alternative to improve
> > > > > > the qu

Re: Anybody know the difference between Aironet Base station [7:7675]

2001-06-07 Thread Tony Medeiros

The base station is a scaled down version of an access point with a subset
of the fuctioniality.  In my opinion,  It's a cheap peice of s---.  It's for
customers that are really watching the buck.

Tony M.
#6172

- Original Message -
From: 
To: 
Sent: Thursday, June 07, 2001 8:43 PM
Subject: Anybody know the difference between Aironet Base station and
[7:7674]


> [demime could not interpret encoding binary - treating as plain text]
> Hi, All
>
> I recently had a chance to install Aironet wireless enviromment. I was
> confused about the difference
> between Aironet Base station and Aironet Access point.
> Is it the same device or they have different function ?
>
> Thanks!!
>
>
> Todd




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7675&t=7675
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: explanation about ballanced and unballanced PRIs [7:7690]

2001-06-08 Thread Tony Medeiros

It basicly refers to the type of layer 1 that an E1 signal can terminate or
be carried on.

Balanced E1 is usually carried on twisted pair and has an impedance of 120
ohms.

Unbalance E1 is usually carried on coax and has an impedance of 75 ohms.

A "Balun" is a device that converts this signal either way from one to the
other.  Unbalanced E1 interfaces have two BNC connectors just like a T3
interface.

Hope this helps
Tony M.
#6172
- Original Message -
From: Valeri Marinski 
To: 
Sent: Friday, June 08, 2001 1:34 AM
Subject: explanation about ballanced and unballanced PRIs [7:7690]


> Dear Group
> could someone please point me to the right link or just explain the
> difference
> between balanced and unbalanced PRIs.
> Thank you in advance.
>
> Valeri




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7732&t=7690
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Load Sharing of 2 Serial on 2501 [7:7687]

2001-06-10 Thread Tony Medeiros

There is a GREAT book on real life stub BGP setups.  It discusses all the
redundency issues and well as load balancing limitations.  It is written so
you don't have to be a BGP guru to understand it.

It called "BGP4  Inter-domain routing in the internet" by John stewart.  I
use this book a lot for referencing.  The ISBN # is 0-201-37950-1

All your questions regarding these kinds on set ups are answered in this
book
Good luck.
Tony M.
#6172

- Original Message -
From: Michael L. Williams 
To: 
Sent: Sunday, June 10, 2001 11:03 AM
Subject: Re: Load Sharing of 2 Serial on 2501 [7:7687]


> Hi Remmert,
>
> I thought you could use HSRP to load balance as well as for
redundancy..
>
> Here's an link showing how to set this up
>
> http://www.cisco.com/warp/public/619/7.html
>
> However, using HSRP for load sharing is only useful in certain
> situations..
>
> Mike W.
>
> "Remmert Veen"  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hi Cheeyong,
> >
> > HSRP indeed won't do the trick, this is a redundancy mechanism.
> >
> > To enable load-sharing, check what routing protocol you are running.
OSPF
> > and EIGRP are able to do equal-cost load-sharing by default. If the 2
> serial
> > links are unequal cost, I'd recommend EIGRP to provision unequal-cost
> > load-sharing.
> >
> > Your network diagram unfortunately isn't too clear. From which network
to
> > which network do you want to load-balance?
> >
> > I hope this helps for now, let me know if I can further help you out.
> >
> > Regards,
> > Remmert




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7905&t=7687
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Delete/format 2500 Flash Partitions [7:7904]

2001-06-10 Thread Tony Medeiros

(config) no partition flash
or
(config) partition flash 1 16

Tony M.
#6172

- Original Message -
From: Rashid Lohiya 
To: 
Sent: Sunday, June 10, 2001 2:50 PM
Subject: Delete/format 2500 Flash Partitions [7:7904]


> Gang,
>
> I have 2500 routers with 2 sticks of Flash memory.
> 1 is the 8MB partition 1, (RXBoot)
> The other is split into 2 x 4MB's. (Partition 2 and 3)
>
> Is there a way to merge all three partitions into 1 x 16MB chunk?
>
> If so please advise.
>
> If not! then what use are these extra 2 x 4MB? Just to store backup IOS?
>
> Thanks
>
> Rashid Lohiya
> [EMAIL PROTECTED]
> 020 8509 2990
> 07785 362626
> www.pioneer-computers.com
> London UK
>
> Free Cisco Certification links - www.angelfire.com/home/rashidl




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7906&t=7904
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Flash memory anyone ? [7:9011]

2001-06-18 Thread Tony Medeiros

7200 and 6500 use the same type flash and format.  3600 is different.  Not
sure about a 1600.
Tony M.
#6172

- Original Message -
From: Manny Jimenez 
To: 
Sent: Monday, June 18, 2001 7:17 PM
Subject: Flash memory anyone ? [7:9011]


> Is there any specific type of flash memory cards that can be use with any
> cisco gear for storing IOS, CAT-OS ?
>
> Such as Catalyst 6500 and Router 1600, 3600, 7200...  If so, do they need
to
> be formatted or configured differently ?
>
> Thanks,
>
> Manny




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9018&t=9011
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: voice ports (tcp/udp) for VoIP [7:8956]

2001-06-18 Thread Tony Medeiros

There are a lot of different ports used for VOIP.

For the actual RTP stream:
UDP ports 16384 to 32767

For H.323 control traffic:
TCP ports 1720 and TCP port range 11000 to 11999

For MGCP control traffic:
UDP port 2427
TCP port 2428

For Skinny contol traffic:
TCP ports 2000,2001, and 2002

Happy Access-list writing !!!
Tony M.
#6172

- Original Message -
From: Federico Dmaz Herrera 
To: 
Sent: Monday, June 18, 2001 8:39 AM
Subject: voice ports (tcp/udp) for VoIP [7:8956]


> Hi, somebody knows which are the port(tcp/udp) used for VoIP???
> regards




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9020&t=8956
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Newbie Question [7:8933]

2001-06-18 Thread Tony Medeiros

Very simple.
Attach the modem with the proper adapter and cable to the AUX port of the
router.
Configure router as follows:

Line aux 0
modem dialin
login
password cisco
transport input all
speed 115200
flow hard
modem autoconfigure type usr_sportster (or whatever type of modem you are
using.  There are a limited number modems supported with this command.  Do a
"show modemcap" to see all the different types.)

Thats it I think.
Tony M.
#6172

- Original Message -
From: Brian Fitzpatrick 
To: 
Sent: Monday, June 18, 2001 4:11 AM
Subject: Newbie Question [7:8933]


> Hi,
>
> how do I set up a router with a dial in modem? Is it just a matter of
> plugging in the serial port and connecting to an analogue line or is it
way
> more complex?
> The moden needs to be there so that If it(Router) ever goes down, I can
dial
> in and bring it back up.
>
> Thanks in advance.
> Brian




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9021&t=8933
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Dead console port [7:9621]

2001-06-23 Thread Tony Medeiros

I think the only way to get in to puppy is to set it up for autoinstall.
See link:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios112/112cg_cr/1cb
ook/1cclkstr.htm

Tony M.
#6172


- Original Message -
From: EA Louie 
To: 
Sent: Saturday, June 23, 2001 2:11 AM
Subject: Dead console port [7:9621]


> Okay gang, here's a challenge that I'm trying to overcome (warning:  it
may
> not be solvable)
>
> I just got a 2514 where I couldn't get any response from the console port.
> Of course, I tried changing baud rates, etc, but when I finally connected
to
> the AUX port, I was able to get in.  The enable password was cisco, so I
> gleefully got into the config and changed the config register, hoping that
> would solve the problem.  It didn't, so I did the next (very stupid)
thing -
> I erased the config (I'm beating my head against the desk as I type).
Now,
> of course, the problem is when I go to the AUX port and try to get into
> enable mode, I can't ("no password set").
>
> Is there any way for me to "bypass" the console port by using the AUX
port,
> or have I just rendered this device useless until I find a way to fix the
> console port?  I don't think I can get into ROMMON mode from the AUX port,
> and I can't get into priveleged EXEC mode, either.
>
> TIA,
> -e-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9630&t=9621
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MSFC IP helper-addressing [7:9736]

2001-06-25 Thread Tony Medeiros

I would stay away from directed broadcasts for IP helper commands.  Remember
that ip helper not only forwards DHCP, but Netbios and NTP stuff too.  You
can turn the unneeded broadcast off with the "no ip forward protocol"
commands.

Try and just use unicasts on you helper commands and watch utilization.  I
know that there are a lot of bugs related to this command on MSFC's.  A
different version might be needed.

Tony M.
#6172

- Original Message -
From: Larry Ogun-Banjo 
To: 
Sent: Sunday, June 24, 2001 10:15 PM
Subject: MSFC IP helper-addressing [7:9736]


> All
> Has anyone encountered extremely high CPU processing (over 90%) when IP
> helper
> addressing has been configured over MSFCs (not dedicated routers)? On my
> network, this command produced very bad performance problems. However, I
must
> stress that the command was used for broadcasting (xxx.xxx.xxx.255) and
also
> specified for  single hosts.
> Cisco documentation says this is possible on routers and although
specified
> protocols are forwarded, the performance was extremely poor on MSFC. IOS
is
> 12.1(7a)
> If you have had this problem, how did you rectify it (apart from removing
the
> command)?
>
> Many thanx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9780&t=9736
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 2600 IOS's Deferred ??? [7:10105]

2001-06-27 Thread Tony Medeiros

T8 and T7 releases are the latest of the T train.  I've been haveing decent
luck with T8 on VOIP deployments.
Tony M.
#6172


- Original Message -
From: David C Prall 
To: 
Sent: Wednesday, June 27, 2001 4:43 PM
Subject: Re: 2600 IOS's Deferred ??? [7:10105]


> Sounds like the 12.1T Train It was deferred on almost all platforms that
> support WIC's
>
> David C Prall   [EMAIL PROTECTED]   http://dcp.dcptech.com
> - Original Message -
> From: "Circusnuts"
> To:
> Sent: Wednesday, June 27, 2001 12:05 PM
> Subject: 2600 IOS's Deferred ??? [7:10105]
>
>
> > Anyone notice that a majority of the 262x IOS have been deferred.  I
> haven't
> > been reading my TAC newsletters, have I missed anything ???
> >
> > Thanks
> > Phil




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10227&t=10105
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TACACS+ and AAA [7:10210]

2001-06-27 Thread Tony Medeiros

Went to

http:\\ cisco.google.com/cisco

Did a search on "AAA configuration"

First hit was:
http://www.cisco.com/univercd/cc/td/doc/cisintwk/intsolns/aaaisg/c262ap1.htm

The best thing to ever happen to CCO was the google search.  It has saved my
bacon on many occasions.  CCO has almost anything you want to know.  Finding
it was always the bitch !!!  Thank God for Google !!!
Tony M.
#6172

- Original Message -
From: anthony moore 
To: 
Sent: Wednesday, June 27, 2001 4:22 PM
Subject: TACACS+ and AAA [7:10210]


> Anyone got any good reference or know where to get documentation on
> configuring TACACS+, AAA, and Cisco ACS server




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10228&t=10210
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Proposed Network Design [7:10494]

2001-06-30 Thread Tony Medeiros

Comments inline.

- Original Message -
From: Sammi 
To: 
Sent: Saturday, June 30, 2001 4:05 AM
Subject: Proposed Network Design [7:10494]


> Hello all,
>
> We are migrating off of Banyan to Windows 2000 in late July and
> through August. Concurrent with the migration will be an
> infrastructure overhaul. I would like to lay out my plans and
> thoughts; any comments, advice, criticism, improvements, etc. greatly
> appreciated.
>
> I have 95% of my hardware:
>
> Dell Poweredge servers:
> 1550 (6) - file servers
> 6450 (2) - SQL and Exchange servers
> 2450 (1) - SQL
>
> Cisco Switches:
> 2948G (1) - distribution switch
> 2900xl (8) - access switches
> various numbers of 1900/2800 to be phased out

I hope that 2948 is a 2948G-L3 layer 3 switch.  If not, you going to need
some kind of router for inter-vlan connectivity.

> Cisco Aironet Wireless:
> 2 parabolic, various yaggi and omni antennae
> a number of workgroup and access bridges, various sizes.

I hope you are using a full bridge at that hub site.  I don't think
workgroup bridges will do a point to multipoint setup.

> The new environment will consist entirely of new servers, no upgrades
> from old environment.
>
> I've taken my first crack at using Visio 2000 to try and lay out a
> high level conceptualization of my planned design. If interested,
> please download the diagram: http://www.tuzzy.org/design.zip 200k

It's not bad for a high level concept drawing. As you progress in your
design, add as much detail as you can.  Put in mangement ip addresses on
network equipment.  VLAN ranges,  hostnames, etc.  I am a firm believer in
making a network work on paper before I configure anything.  This way you
can spot as many issues ahead of time.  Also, when you are done,  you
network is already documented !!

> Currently our network is on one segment and I am creating vlan's. This
> is an ambitious project for my experience but I'm confident, although
> I realize it'll take a lot of work and study as I go. I've been
> researching this scenario for some time now, and have attended a BCMSN
> week long course with Global Knowledge. So, I may be in dim light but
> not totally in the dark ;-)
>
> Physical Sites consist of:
>
> Main site; includes main administrative building and 6 outlying
> quonset (huts). Fiber from main building to one hut, fiber between
> huts. Currently in place and operable. Main server room; distribution
> switch, access switches in main building and physical locations.

Are you going to use media converters for the uplinks ??  There is a version
of the 2900 that comes with a fiber FastE port for uplinks.

> Heritage site: approx. 4 miles from main. Will connect to Main Site
> via Aironet, parabolic at Heritage and at Main.

If you are using a parabolic at your hub site.  It won't work for a
multipoint setup.  Unless you have a bridge for each link or the two branchs
are on the same line of sight.  Consider using an omni at the hub and
parabolics at the branches.

> Northstar site: approx. 400 yds. from Heritage, connected via fibre,
> currently in place and operable.
>
> Daycare site: approx. 800 yds. from Heritage, will connect via
> Aironet.
>
> Home: approx. 1 mi. from Heritage, will connect via Aironet.
>
> All operations must take place within 10.200.x.x range. Our
> organization is  one of three trees within the 2000 forest. Each tree
> is an independent organization with close ties. One domain per tree.
>
> My plans:
>
> All servers are Windows 2000, all desktops 2000 Professional.
> Each VLAN consists of 6 ports on the 2948 switch, each port (as
> needed) will go to a 2900xl switch for eventual end user access,
> possible direct 2948 to desktop in some cases.
>
> VLAN 1
> 10.200.1.x / 24
> Serving enterprise;
> Exchange 2000 / Universal file server box
> ISA (firewall) box
> Primary DNS, DC, DHCP, Global Catalog
>
> VLAN 2
> 10.200.2.x / 24
> File server for info systems, main building.
> Secondary DNS, DC
> DHCP?
> 3 users
>
> VLAN 3
> 10.200.3.x / 24
> File server for huts.
> SQL backend server for online application, access from huts.
> DHCP?
> 50 users, web server.
>
> VLAN 4
> 10.200.4.x / 24
> One box, 6450, SQL server and file server for finance and services,
> main building.
> DHCP?
> 6 - 12 users, critical data, high resource demand
>
> VLAN 5
> 10.200.5.x / 24
> File server for administrative staff, main building.
> DHCP?
> 75 users
>
> VLAN 6
> 10.200.6.0 / 24
> Spans from main building to heritage center, approx. 4 miles distant.
> Parabolic and bridge, Aironet, at main building and Heritage center.
> Bridge on each end connected to a 2900xl switch.
> File server for Heritage center, possibly daycare.
> Daycare connected via workstations -> 2900xl -> aironet -> heritage
> Northstar has own servers, connected to Heritage via fiber.
> Home will connect to Heritage via wireless (low priority).
> Possible (probable) second server at Heritage, possible server at
> Daycare.
> DNS (cache only), DC, Global Catalog
> DH

Re: ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-01 Thread Tony Medeiros

Do a "debug PPP authen" and a "debug PPP negotiation".  It looks like CHAP
is failing.
Tony M.
#6172

- Original Message -
From: Sam Deckert 
To: 
Sent: Sunday, July 01, 2001 10:48 PM
Subject: ISDN B Channel Disconnecting Cont... [7:10596]


> Here is the debug isdn events output from when the 1700 disconnects:
>
> clarendon2-gw#
> 04:14:10: ISDN BR0: Event: Hangup call to call id 0x801E
> 04:14:10: ISDN BR0: process_disconnect(): call id 0x801E, call type is
DATA,
> b_idb 0x809D7DF8, ces 1, cause Normal call clearing(0x10)
> 04:14:10: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from
0353324231
> clarendon, call lasted 20 seconds
> 04:14:49400989532: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
> 04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
> 04:14:47244640267: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down
> 04:14:49398792589: ISDN BR0: received HOST_DISCONNECT_ACK call_id 0x801E
> 04:14:47244640256: ISDN BR0: HOST_DISCONNECT_ACK: call type is DATA
>
>
> Here is the debug isdn events output from the 2611 side of things:
> 05:12:32225367844: ISDN BR0/1: received HOST_DISCONNECT call_id 0x25
> 05:12:30064771072: ISDN BR0/1: Event:  Call to  was hung up.
> 05:12:32225367716: ISDN BR0/1: process_disc_ack(): call id 0x25, ces 1,
call
> type DATA
> 05:12:30906921739: %ISDN-6-DISCONNECT: Interface BRI0/1:2  disconnected
from
> unknown , call lasted 20 seconds
> 05:12:3871552: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to
down
> 05:12:3862421: ISDN BR0/1: received HOST_DISCONNECT_ACK call_id 0x25
> 05:12:30064771072: ISDN BR0/1: HOST_DISCONNECT_ACK: call type is DATA
>
> I am still working on it!  Thought it might be the fast-idle timer, so
made
> it
> a large value, to no avail.
>
> Thanks again if anyone can help!
>
> Sam.
>
>
> - Original Message -
> From: Sam Deckert
> To: [EMAIL PROTECTED]
> Sent: Monday, July 02, 2001 3:09 PM
> Subject: ISDN B Channel Disconnecting
>
>
> Hello everyone,
>
> I am having a bit of an ISDN related problem at the moment and was
wondering
> if anyone is able to help.
>
> I am connecting two sites together via 128k isdn, with one site having a
2611
> and the other a 1700.
>
> I have the two sites permanently connected fine with the first B channel,
> however whenever I issue the "dialer load-threshold 1 either" command one
> each
> router to always have the 2nd B channel up, the second B channel connects
and
> remains connected for 20 seconds exactly before disconnecting.  The 1st B
> channel remains connected regardless.
>
> I have tried changing the idle-timeout values to no avail, and just cant
> figure it out.
>
> I guess it is probably something simple, but just cant work it out.
>
> Here is the BRI config of the 2611:
>
> username clarendon2-gw password 7 094E1B040D0210
> !
> hostname clarendon
> ip subnet-zero
> no ip finger
> !
> ipx routing 0030.854f.c9e0
> ipx gns-response-delay 1500
> isdn switch-type basic-net3
> !
> !
> interface BRI0/1
>  ip unnumbered BRI0/0
>  encapsulation ppp
>  no ip mroute-cache
>  dialer idle-timeout 200
>  dialer enable-timeout 5
>  dialer wait-for-carrier-time 15
>  dialer map ip xxx.xxx.xxx.xxx name clarendon2-gw broadcast
>  dialer map ipx FEEDBEEF.0002.1761.29dd name clarendon2-gw broadcast
>  dialer load-threshold 1 either
>  dialer-group 1
>  ipx network FEEDBEEF
>  no ipx route-cache
>  ipx watchdog-spoof
>  isdn switch-type basic-net3
>  isdn calling-number 
>  no fair-queue
>  compress stac
>  no cdp enable
>  ppp authentication chap
>  ppp multilink
> !
> dialer-list 1 protocol ip permit
> dialer-list 1 protocol ipx permit
> no cdp run
>
>
> Here is the config of the 1700:
>
> hostname clarendon2-gw
> !
> username clarendon password 7 011153094F0C01
> !
> !
> ipx routing 0002.1761.29dd
> ipx gns-response-delay 1500
> isdn switch-type basic-net3
> !
> interface BRI0
>  ip unnumbered FastEthernet0
>  encapsulation ppp
>  dialer idle-timeout 200
>  dialer map ip xxx.xxx.xxx.xxx name clarendon broadcast
>  dialer load-threshold 1 either
>  dialer-group 1
>  ipx network FEEDBEEF
>  no ipx route-cache
>  ipx watchdog-spoof
>  isdn switch-type basic-net3
>  no fair-queue
>  compress stac
>  no cdp enable
>  ppp authentication chap
>  ppp multilink
> !
> ip classless
> no ip http server
> !
> dialer-list 1 protocol ip permit
> dialer-list 1 protocol ipx permit
> no cdp run
> !
> no scheduler allocate
> end
>
>
> What do you think???  Any advice, suggestions welcome and most
appreciated!
>
> Thanks...
>
> Sam.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10597&t=10596
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ISDN B Channel Disconnecting Cont... [7:10596]

2001-07-02 Thread Tony Medeiros

It now looks like it's dying at the LCP phase.  I would try and remove stac
compression and see if that works.  stac maybe incompatable with MLPPP.
Then, if that doesn't help, Try and get rid of "isdn calling number".  That
is a fluky command that doesn't work right unless CLID is sent from the
telco.  I have had lousy luck with that command.

Keep trying to "simplify " your config untill it works.   Then add more
complexity and see where it breaks.

Ain't dial a Bitch ???  Seems like I always have to fight to get it to work
right.  Thank God for debugs !!

Tony M.
#6172
- Original Message -
From: Sam Deckert 
To: 
Sent: Monday, July 02, 2001 12:12 AM
Subject: Re: ISDN B Channel Disconnecting Cont... [7:10596]


> I just did a debug ppp error on both routers when dialling in, however did
> not have anything come up - so not sure if the problem is with ppp.
Bugger!
>
> Here was the output:
>
> 1700 (calling):
> 05:51:64424509440: %LINK-3-UPDOWN: Interface BRI0:2, changed state to up
> 05:51:35: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from
0353324231
> clarendon, call lasted 20 seconds
> 05:51:150323855364: %LINK-3-UPDOWN: Interface BRI0:2, changed state to
down
>
> 2611 (called):
> 06:48:11: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to up
> 06:48:133143986184: %ISDN-6-DISCONNECT: Interface BRI0/1:2  disconnected
> from unknown , call lasted 20 seconds
> 06:48:135302086656: %LINK-3-UPDOWN: Interface BRI0/1:2, changed state to
> down
>
> - Original Message -
> From: "Sam Deckert"
> To: "Tony Medeiros" ;
> Sent: Monday, July 02, 2001 4:54 PM
> Subject: Re: ISDN B Channel Disconnecting Cont... [7:10596]
>
>
> > Thanks Tony,
> >
> > I thought that the ppp authentication was going ok, as the first channel
> is
> > always connected, however it is only the second channel that is
> disconnected
> > after 20 secs.
> >
> > I was looking at the output from the debug commands you suggested, and
saw
> > the following on the router being called:
> >
> > 06:28:36: BR0/1:2 PPP: Phase is ESTABLISHING, Passive Open
> > 06:28:36: BR0/1:2 LCP: State is Listen
> > 06:28:38: BR0/1:2 LCP: TIMEout: State Listen
> >
> > Does this mean that the router being called is listening for the first
> > authentication from the client, however times out?  I guess what could
be
> > happening is that CHAP disconnects the call after 20secs of attempting
to
> > challenge???
> >
> > Here is the output from "debug PPP authen" and "debug PPP negotiation"
on
> > each router though.  Pease let me know if you see anything funny - I am
> > searching on CCO to try and find out
> >
> > Sam.
> >
> > 1700 (calling) router:
> >
> > 05:31:180388626431: %LINK-3-UPDOWN: Interface BRI0:2, changed state to
up
> > 05:31:178241142757: BR0:2 PPP: Treating connection as a callout
> > 05:31:178247820600: BR0:2 PPP: Phase is ESTABLISHING, Active Open
> > 05:31:176093659168: BR0:2 LCP: O CONFREQ [Closed] id 55 len 35
> > 05:31:180388626431: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> > 05:31:176093659136: BR0:2 LCP:MagicNumber 0x03470C22
(0x050603470C22)
> > 05:31:176093659136: BR0:2 LCP:MRRU 1524 (0x110405F4)
> > 05:31:176093659136: BR0:2 LCP:EndpointDisc 1 Local
> > (0x131001636C6172656E646F6E322D6777)
> > 05:31:42: BR0:2 LCP: I CONFREQ [REQsent] id 55 len 31
> > 05:31:42: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> > 05:31:42: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
> > 05:31:42: BR0:2 LCP:MRRU 1524 (0x110405F4)
> > 05:31:42: BR0:2 LCP:EndpointDisc 1 Local
(0x130C01636C6172656E646F6E)
> > 05:31:42: BR0:2 LCP: O CONFACK [REQsent] id 55 len 31
> > 05:31:42: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> > 05:31:42: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
> > 05:31:42: BR0:2 LCP:MRRU 1524 (0x110405F4)
> > 05:31:42: BR0:2 LCP:EndpointDisc 1 Local
(0x130C01636C6172656E646F6E)
> > 05:31:43: BR0:2 LCP: TIMEout: State ACKsent
> > 05:31:43: BR0:2 LCP: O CONFREQ [ACKsent] id 56 len 35
> > 05:31:43: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> > 05:31:43: BR0:2 LCP:MagicNumber 0x03470C22 (0x050603470C22)
> > 05:31:43: BR0:2 LCP:MRRU 1524 (0x110405F4)
> > 05:31:43: BR0:2 LCP:EndpointDisc 1 Local
> > (0x131001636C6172656E646F6E322D6777)
> > 05:31:44: BR0:2 LCP: I CONFREQ [ACKsent] id 56 len 31
> > 05:31:44: BR0:2 LCP:AuthProto CHAP (0x0305C22305)
> > 05:31:44: BR0:2 LCP:MagicNumber 0x31E921E3 (0x050631E921E3)
> > 05:31:44: BR0:2 LCP:MRRU 1524 (0x110405F4)
> > 05

Re: Custom queuing with frame relay [7:10939]

2001-07-03 Thread Tony Medeiros

Consider using Low latency Queuing or Class based weighted fair queuing
instead of of custom queuing.  If you have a 2600 or 3600 platform you can
load a nice little helper program calll Quality device manager.  It gives
you a GUI to program complex queuing schemes.  I have been playing with it a
lot.  LLQ and CBWFQ can get rather complicated, expecially if you throw in
WRED or CAR into the mix as well.  I use it to understand the relationship
of setting up all the different techniques together in harmony.  Then I
gather the commands, modify them, and type them into the customers  router.
(Don't what to stoop to programing a router with a GUI) :)

As far a SQLnet is concerned, it runs on TCP does it not ?  An out of
sequence packet should be dropped just like an other TCP application.  The
receiver will then send an ACK on the last valid packet in the stream and
the sender will retransmit.  The session should go into slow start again as
well.

Hope this helps
Tony M.
#6172

- Original Message -
From: Donna & Bayan 
To: 
Sent: Tuesday, July 03, 2001 7:13 PM
Subject: RE: Custom queuing with frame relay [7:10939]


> Hi,
>
> We have a time sensitive application that we wanted to custom queue using
> frame relay. Does anyone have any information on how to do this or know
where
> I can look for the answer. We will be using point to point connection
between
> the sites and the dilemma we are facing is what would happen to "out of
> sequence packets" for applications such as SQL or better yet how would SQL
> react to out of sequence packets?
>
> I could not find any information on Cisco or Microsoft knowledge Base. Any
> hints would be appreciated. If you could reply to me asap that would be
> great.
>
> Thanks again!!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10944&t=10939
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Adding more Vtys [7:35189]

2002-02-13 Thread Tony Medeiros

Need an enterprise image to do this.  Then it works fine.
Tony M.
#6172

- Original Message -
From: "A Mehr" 
To: 
Sent: Tuesday, February 12, 2002 6:51 AM
Subject: Adding more Vtys [7:35189]


> Hi all
> Is there a way I can create additional VTYs on my 2621 Cisco Router ?
> someone told me that the "Line Vty 0 n" can be used for this purpose , It
> didn't work .
> No clues ?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=35383&t=35189
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Problem of upgrading IOS for a router at remote site [7:36966]

2002-03-01 Thread Tony Medeiros

Never ???  Thats a hard call when unless your company has lots of free
frequent flyer miles.  There are ways to make sure you don't blow it.

1. Test your new image on a router with simular hardware configuration if
possible.  That way you don't boot it on an incompatable OS.

2. If you have the room in flash, keep the old image.

3." line vty 0 4"
"no exec-timeout" This will keep you telnet session alive.  Or, hit
the space bar once in while to keep it from timing out

I have upgraded remotely many times and never blown it.  However, it isn't
without risk.  I always cross my fingers !!

Tony M.
#6172

- Original Message -
From: "Sujal G. Ajmera" 
To: 
Sent: Friday, March 01, 2002 5:33 AM
Subject: RE: Problem of upgrading IOS for a router at remote site [7:36957]


> Yes, I have faced this problem.
>
> My unsolicited advice - NEVER upgrade an IOS across a WAN link.
>
> Good luck.
>
> Sujal
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> [EMAIL PROTECTED]
> Sent: Friday, March 01, 2002 6:43 PM
> To: [EMAIL PROTECTED]
> Subject: Problem of upgrading IOS for a router at remote site [7:36954]
>
>
> Hi group,
>
> I run into a big problem when upgradeing IOS for a router at remote
> site. I used "copy tftp: flash:" command on a Cisco 2620 router via
> telnet. It first erased the existing IOS from the flash and then start
> to copy the image from my tftp server, which is also running on my
> laptop. But the router will close the telnet session after certain
> period of idle time, and surprisingly close the tftp session as well. It
> ends up that the router's flash memory has no valid IOS stored!
>
> There is no technical staff on that remote site, and it is more than a
> thousand KMs away so I couldn't use a console cable to directly attach
> to it. I repeated the above several times, watched those "!" going
> on until the telnet session closed, and have to pray that there is no
> power surge happened to that router before I find a solution!
>
> Anyone faced this problem before? Please help!
>
> Tony
> --
>
>
>
>
> __
> Your favorite stores, helpful shopping tools and great gift ideas.
> Experience the convenience of buying online with Shop@Netscape!
> http://shopnow.netscape.com/
>
> Get your own FREE, personal Netscape Mail account today at
> http://webmail.netscape.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36966&t=36966
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: read and not write TOS [7:36946]

2002-03-01 Thread Tony Medeiros

QOS configs can be complicated, especially when using CBWFQ, CAR, WRED, or
LLQ.  A neat way to learn how to use these powerfull features is installing
QDM on the router.   I HATE using GUI's to configure routers but this little
web applet is a good way to learn how to do a complex QOS config.  It's a
security hole, But you can always turn off HTTP server on the router when
you are not using it. It will show you how to do exactly what you are
looking for.

Check it out:
http://www.cisco.com/warp/public/477/QDM_faq.shtml

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/qdm/

Tony M.
#6172

- Original Message -
From: "Steven A. Ridder" 
To: 
Sent: Friday, March 01, 2002 3:56 AM
Subject: Re: read and not write TOS [7:36946]


> Look up MQC on Cisco.com.  It is possible and by default if the router has
> WFQ on, it already "reacts" to different ToS (IP Prec) values.
>
> --
>
> RFC 1149 Compliant.
>
>
> ""TP""  wrote in message
> news:[EMAIL PROTECTED].;
> > Dear group,
> > i have the following situation:
> > a "special" switch connected to a cisco router via ethernet interface.
> > This switch is enable to set TOS based on its ports.
> > I'd like to configure the router in order to have different queuing
based
> on
> > the TOS (two or three queues).
> > The router should  read (and NOT  write) the TOS and priorituze the
> traffic
> > with the higher TOS: is it possible? If yes, maybe with access-list or
> > samething different, can you provide the proper command lines?
> > Thanks in advance
> > Teresa




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=36967&t=36946
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco 4224 versus 26/3600 [7:37051]

2002-03-02 Thread Tony Medeiros

DON"T buy a 4224 

Think of the ICS7750 when it first came outBUGS,  No documentation,
weird config.  limited features activated at this time.

And don't even think of using an an PRI uplink to the telco AND the FXS
ports even though they let you configure it this way.  The 4224 has a fixed
number of DSP's and won't support both.  Unless you only want 16 B channels
active on your PRI link

This "all-in-one" box will someday be a pretty cool box.  But it's just too
new right now.  Wait a awhile and maybe.   I am speaking from experience
here !

Tony M.
#6172

- Original Message -
From: "Robert Padjen" 
To: 
Sent: Friday, March 01, 2002 10:21 PM
Subject: Cisco 4224 versus 26/3600 [7:37051]


> Does anyone have experience with the 4224 and/or
> 2651/3640 platform in a branch setting? I am looking
> at both platforms and considering VOIP, but mcast and
> QoS are required. I know that LLQ is not available yet
> on the 4224.
>
> Thanks for the input.
>
> =
> Robert Padjen
>
> __
> Do You Yahoo!?
> Yahoo! Greetings - Send FREE e-cards for every occasion!
> http://greetings.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37056&t=37051
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: A problem on AS5300 [7:36986]

2002-03-02 Thread Tony Medeiros

Doing any logging to a server ??  Routing protocols ??  SNMP traps ??  what
else is running ?


- Original Message -
From: "Bahram Sadjadi Biria" 
To: 
Sent: Friday, March 01, 2002 8:52 AM
Subject: A problem on AS5300 [7:36986]


> Dear Cisco professionals,
>
> I have a big problem on my AS5300 which is terminating VoIP calls. It uses
> around 2 times send bandwidth in comparison with its receive bandwidth. In
> the
> show int eth 0 command I could see that the number of packets/sec on its
> output part is also about 2 times of input part.
>
> Is there anyone who faced with such a problem and know how can I recover
this
> problem of mine?
>
> I would like to thank you for your kind attention and cooperation in this
> regard.
> I look forward to hearing from you kind friends.
>
> Sincerely,
> Bahram Sadjadi Biria.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=37057&t=36986
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-05 Thread Tony Medeiros

Boy,
That CCIE verification tool is buggy.  I put my name in 4 times before It
verified me.  Tried different capitalization methods untill it finially
worked.  Then it worked on all capitalization methods !!!  Go figure

I'm looking for a job right now and I hope that a prospective employeer
doesn't use this thing !!

Tony Medeiros
CCIE #6172 (damnit )

- Original Message -
From: John Hardman 
To: 
Sent: Thursday, July 05, 2001 3:50 PM
Subject: FYI Check out the CCIE "whats new" page. [7:11128]


> Hi All
>
> There are a couple of new items on the whats new page of the CCO CCIE
site.
> Interesting...
> http://www.cisco.com/warp/public/625/ccie/ccie_program/whatsnew.html
>
> --
> John Hardman CCNP MCSE




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11154&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FYI Check out the CCIE "whats new" page. [7:11128]

2001-07-06 Thread Tony Medeiros

Geeze,
I have only been without a job 2 weeks and I have been doing independent
contract work like crazy during that time.  It takes time to interview for
jobs, especially in my pay range.  Company's don't just look at your number
and hire you on the spot,  At least not any company I want to work for.

To answer Elmers question: Yes, the market is very different now.
Especially in the VAR area.  Small VARs are struggling to make 2 or 3 points
on hardware sales.  "Grey" market hardware from auctions and bankruptcies is
everywhere.  Large resellers like ATT and SBC (sorry Chuck) are drop
shipping at cost, it seems, just to make a little margin on deployment.

Another factor that seems to be affecting CCIE employment around the bay
area is the layoff at Cisco.  Believe it or not, Cisco laid off quit a few
of them recently, and they are all looking for jobs.  I recently interviewed
at a job where they specifically want a CCIE and they had 10 interviews...
10   That was unheard of a year ago!!   Maybe it's just like this in the
Silicon Valley, I don't know.  All I know is the market is very soft right
now around here.  I know I'll find a job though.  I just can't be picky.

So is the CCIE market saturated ?  I don't know, maybe.  Does the high tech
economy suck right now ?  Hell yes !!  However, ebb and flow is the way
capitalism works.  Things are certain to get better.

So you who are going for your high end certs, keep studying !!  You will be
in a better position when things get better.

Tony M.
#6172


- Original Message -
From: Circusnuts 
To: 
Sent: Friday, July 06, 2001 7:13 AM
Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]


> Uh Ohhh- let's not start a rant here... "CCIE's out of work, is it worth
> it."
>
> :o)
> Phil
>
> - Original Message -
> From: "Elmer Deloso"
> To:
> Sent: Friday, July 06, 2001 8:24 AM
> Subject: RE: FYI Check out the CCIE "whats new" page. [7:11128]
>
>
> > Tony,
> > Seriously speaking, i thought at this point you'd be the hunted and not
> the
> > hunter when it comes to jobs. Or has teh CCIE market become "saturated"?
> >
> > Elmer
> >
> > -Original Message-
> > From: Tony Medeiros [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, July 06, 2001 12:30 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: FYI Check out the CCIE "whats new" page. [7:11128]
> >
> >
> > Boy,
> > That CCIE verification tool is buggy.  I put my name in 4 times before
It
> > verified me.  Tried different capitalization methods untill it finially
> > worked.  Then it worked on all capitalization methods !!!  Go figure
> >
> > I'm looking for a job right now and I hope that a prospective employeer
> > doesn't use this thing !!
> >
> > Tony Medeiros
> > CCIE #6172 (damnit )




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11185&t=11128
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPsec tunnel mode vs. GRE tunnel with IPsec [7:11236]

2001-07-07 Thread Tony Medeiros

IPSEC over GRE:
The advantages of this configuration is you can run routing protocols
through the tunnel.  That means that routing protocols treat it like an
interface or a separate link.  That allows you to impliment an ISDN or
something like a zero CIR frame backup for the tunnel.  You have to be
carefull how you configure this though.  Tunnel interfaces don't go up and
down like normal interfaces.  Also, They don't support all the metrics in
EIGRP like "reliability" if you wanted to bring that metric into the
picture.  At least they didn't as of 12.0 (last time I looked)

The main disadvantage is overhead.  GRE is pretty inefficient.  I have not
investigated it personnally, but somebody told me that the overhead for GRE
averages around 40%.  Add the overhead of IPSEC to the picture and your
wasting a lot of bandwidth for protocol overhead.  Depending on the
switching path, router cpu utilization might be a issue too.

Hope this helps
Tony M
#6172

- Original Message -
From: Ciscodog 
To: 
Sent: Saturday, July 07, 2001 12:32 AM
Subject: IPsec tunnel mode vs. GRE tunnel with IPsec [7:11236]


> I was recently looking at these two options for connecting branch offices
for
> an alternative to a point-to-point WAN link. I have in the past
implemented
> IPsec which by default is in tunnel mode for any packet that doesn't
> originate
> from the direct peers. However I was reading a bit the other day and came
> across the GRE tunnel with IPsec solution and was wondering if this was
> legacy, or better option for my situation. Does anyone have a quick
pros/cons
> response to the 2 scenarios?
>
>
> Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11255&t=11236
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Library for sale. [7:11570]

2001-07-09 Thread Tony Medeiros

I'm selling a ton of Cisco Courseware and Cisco Press books on Ebay if anyone
is interested.

http://cgi.ebay.com/aw-cgi/eBayISAPI.dll?ViewItem&item=1254029389

Tony M.
#6172




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11570&t=11570
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco Courseware and Cisco Press books for Sale [7:11641]

2001-07-10 Thread Tony Medeiros

I'm selling a ton of Cisco Courseware and Cisco Press books on Ebay if anyone
is interested.

http://cgi.ebay.com/aw-cgi/eBayISAPI.dll?ViewItem&item=1254029389


Tony M.
#6172




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11641&t=11641
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco Courseware and Cisco Press books for Sal [7:11641]

2001-07-10 Thread Tony Medeiros

I'm sorry,  I had no idea it would go so fast.  I should of raised the
price.
Tony M.

- Original Message -
From: Circusnuts 
To: 
Sent: Tuesday, July 10, 2001 8:10 AM
Subject: Re: Cisco Courseware and Cisco Press books for Sal [7:11641]


> Your teasing us :o)
>
> - Original Message -
> From: "Tony Medeiros"
> To:
> Sent: Tuesday, July 10, 2001 10:34 AM
> Subject: Cisco Courseware and Cisco Press books for Sale [7:11641]
>
>
> > I'm selling a ton of Cisco Courseware and Cisco Press books on Ebay if
> anyone
> > is interested.
> >
> > http://cgi.ebay.com/aw-cgi/eBayISAPI.dll?ViewItem&item=1254029389
> >
> >
> > Tony M.
> > #6172




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11741&t=11641
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: network Layer [7:11873]

2001-07-10 Thread Tony Medeiros

A nice little reference is Howards's "OSI Reference Model" pamphlet.  I've
seen it on Amazon for 12 bucks.  If you join "certificationzone.com" I think
you can download it for free.  Your question would take about 10 pages to
answer correctly

It sounds like you are just starting out in this business.  I was there too
not long ago.  Certificationzone.com is a one of the best web sites on Cisco
certification I found (other than CCO).  It's reasonably priced and has a
lot of "heavy hitters" contributing to the material.  The practice tests are
very good,  especially the CCIE practice tests.

Before you ask,  I have no affiliation with them.  I just think they do a
decent job for a decent price. Maybe someday I might be "guru" enough to
contribute. :)

Take care
Tony M.
#6172
- Original Message -
From: parky chan 
To: 
Sent: Tuesday, July 10, 2001 9:01 PM
Subject: network Layer [7:11873]


> Dear,
> What is the different of the network Layer and Data Link Layer ?
> Data Link Layer is means the data where need to go?
> Network layer  is means the data which address need to go?
> That 's right ?
> CAn You Help me solve this problem?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11888&t=11873
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Pix not routing for Frame Spokes [7:11860]

2001-07-11 Thread Tony Medeiros

PIX's ( and most firewalls except checkpoint and netscreen I think)  Will
NOT send ICMP redirects.  Newer versions of the PIX OS might let you
configure it,  I am not sure.  I haven't played with the newer versions
lately.  Your options are have the host's default gateway point at a real
router and put a default static route in the router pointing at the PIX.
Or, put in network routes via a login script on all the hosts (ugly solution
if you ask me).

Firewalls are not routers.  Even though they do some router fuctions.

Tony M.
#6172

- Original Message -
From: trammer 
To: 
Sent: Tuesday, July 10, 2001 9:26 PM
Subject: Pix not routing for Frame Spokes [7:11860]


> Don't let the subject mislead you in my intention but here is my situation
> if anyone would like to take a look.
>
> I've got  multiple locations connected via frame coming into a 2610 @
> 10.1.1.5:
>
> 10.2.0.0
> 10.3.0.0
> 10.4.0.0
> 10.5.0.0
> 10.6.0.0
> 10.7.0.0
>
> The 2610's default route is to 10.1.1.1 which is obviously on the 10.1.0.0
> segment in the HQ through a pix to the internet.  The clients at HQ, whos
> gateway is 10.1.1.1 need to occasionally access the spokes so I added
static
> routes in the Pix for each of the spokes.  I am a firm beleiver in Cisco's
> products being a specific task oriented device (ie. pix>firewall, 3015 >
> VPN) and not to be used for anything different.  I know the PIX is not
> designed to be a router but in this case I need get some input from others
> as to why the PIX is not bouncing requests for the spokes out the 2610
like
> a quote unquote "regular router" would.
>
> What happens is the PIX can ping to say for example the 10.1.1.17 which is
a
> Domain Controller in that site.  But if I ping from a client or the DC in
HQ
> no luck.  This is with the gateway of 10.1.1.1 assigned to the DC and or
> client.  Also, when I do a show ip route I see only the outside and the
> inside IP addresses.
>
> Here is the config minus the Public's IP's and security info.  The only
NAT
> pool is through a PAT and an access list is applied on the outside
interface
> to filter inbound traffic.   Maybe I had a brainfart on something
> suggestions are appreciated:
>
>
> 0300-PIX-01# sh conf
> : Saved
> :
> PIX Version 6.0(1)
> nameif ethernet0 outside security0
> nameif ethernet1 inside security100
> <>
> hostname 0300-PIX-01
> fixup protocol ftp 21
> fixup protocol http 80
> fixup protocol h323 1720
> fixup protocol rsh 514
> fixup protocol smtp 25
> fixup protocol sqlnet 1521
> fixup protocol sip 5060
> fixup protocol skinny 2000
> names
> access-list 100 <>
> pager lines 24
> logging on
> interface ethernet0 auto
> interface ethernet1 auto
> mtu outside 1500
> mtu inside 1500
> ip address outside <>
> ip address inside 10.1.1.1 255.255.0.0
> ip audit info action alarm
> ip audit attack action alarm
> pdm history enable
> arp timeout 14400
> global (outside) 1 <>
> nat (inside) 1 10.0.0.0 0.0.0.0 0 0
> static (inside,outside) tcp <> <>
> static (inside,outside) tcp <> <>
> <>
> <>
> access-group 100 in interface outside
>
> route outside 0.0.0.0 0.0.0.0 <> 1
>
> route inside 10.2.0.0 255.255.0.0 10.1.1.5 1
> route inside 10.3.0.0 255.255.0.0 10.1.1.5 1
> route inside 10.4.0.0 255.255.0.0 10.1.1.5 1
> route inside 10.5.0.0 255.255.0.0 10.1.1.5 1
> route inside 10.6.0.0 255.255.0.0 10.1.1.5 1
> route inside 10.7.0.0 255.255.0.0 10.1.1.5 1
>
>
> timeout xlate 3:00:00
> timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323
> 0:05:00 si
> p 0:30:00 sip_media 0:02:00
> timeout uauth 0:05:00 absolute
> aaa-server TACACS+ protocol tacacs+
> aaa-server RADIUS protocol radius
> no snmp-server location
> no snmp-server contact
> snmp-server community public
> no snmp-server enable traps
> floodguard enable
> no sysopt route dnat
> telnet 0.0.0.0 0.0.0.0 inside
> telnet timeout 5
> ssh timeout 5
> terminal width 80
> <>
> 0300-PIX-01#




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11887&t=11860
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routing polices [7:11896]

2001-07-11 Thread Tony Medeiros

Use "ip route-cache policy" to re-enable fast caching for interfaces with
route maps.

Tony
- Original Message -
From: Charles Manafa 
To: 
Sent: Wednesday, July 11, 2001 7:03 AM
Subject: RE: Routing polices [7:11896]


> Note that Policy Route Mapping disables fast cache.
>
> 1. Divide your users into two subnets
> 2. In global config, create route maps for policy routing - "route-map E0
> permit 10"
> 3. Specify access list to use - "match ip address 101"
> 4. Set the outbound interface - "set interface s0"
> 5. Create the access list - "access-list 101 permit ip [subnet1] any"
> 6. Apply the route map to the interface - "ip policy route-map E0"
> 7. Do the same for the second interface -
>
> route-map E1 permit 10 (global config)
>   match ip address 102
>   set interface s1
> access-list 102 permit ip [subnet2] any (global config)
> ip policy route-map E1 (interface config)
>
> CM
>
> -Original Message-
> From: Jacek Malinowski
> To: [EMAIL PROTECTED]
> Sent: 11/07/01 10:17
> Subject: Re: Routing polices [7:11896]
>
> I can't use BGP  !!!
> On Linux routers there is no problem, but I see that the Cisco has a big
> problem.
> I receive only advice use BGP. I don't need any BGP. I want only that
> LAN 0
> go through serial0 and LAN 1 do through serial1, on my Linux routers I
> do
> this on 3 second.
> Who really understand route-map command and routing policy on cisco
> routers
> ?
>
> ""MacDonald""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > is your Router has AS number
> > Use BGP multi homing config
> >
> >
> > ""Jacek Malinowski""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > I have 2 ISP and 2 serial and 2 ethernet in my 2509 Cisco router.
> > > I want half my LAN goes through ISP1 and serial 0 and ethernet 0.
> > > And the other through ISP2 and serial1 and ethernet1.
> > > How should I do this ?
> > > What combination with route map should I use ?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11955&t=11896
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: calculating allowable hosts [7:11902]

2001-07-11 Thread Tony Medeiros

Paul,
There are many ways to do this.  I'll show you my technique that is fast and
works good.

First,  Take the number in the right most octet that isn't 255 and subtract
it from 256. In your case it's 248.This gives you 8.

Now, 8 is the number that the subnets increment.  The first subnet is zero,
then 8, then 16, then 24, etc.

Now, take the number in you last octet and divide it by 8.  In your case
it's 184 divided by 8 with equals a nice round 23.  Because there are no
remainders in you division, that means you are given a valid network number,
not a host number on that network.

Now, Because of your mask we know the networks increment by 8.  So your
network is 213.13.184.184.  The next network is 213.13.184.172.  Your hosts
are the numbers in between.  BUT...

Always remember your network number is the network identifier and can't be
used for a host.  And, the last number in your network is the broadcast
address for your subnet.

So,  The network is 213.13.184.184 (can't use this for a host),  The host
address are 213.13.184.185,  186, 187, 188, 189, 170.  The broadcast address
is 213.13.184.171.  and the number of the next subnet is 213.13.184.172.

Remember that you always loose 2 address for each subnet: one for the
network number and one for the broadcast.  A nice rule of thumb is that if
the networks increment by 4, you have 2 usable host addresses. By 8, 6
usable addresses.  By 16, 14 usable address, etc

If this still confuses you, write it out in binary.  If you learn it in
binary, you've learned it !!

Tony  M.
#6172


- Original Message -
From: paul 
To: 
Sent: Wednesday, July 11, 2001 3:11 AM
Subject: calculating allowable hosts [7:11902]


> Greetz,
> Can anyone explain how you get the allowable host addresses from the
> following 213.13.184.184 with 255.255.255.248?(or show where I can figure
> this out )
> Thanx




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11959&t=11902
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VPN implementation [7:12063]

2001-07-11 Thread Tony Medeiros

Lets see,
You want a free VPN design complete with bill of materials,  Reasons backing
up this design so you can present it to you customer.  And design of
integration of said solution into your customers existing network, again for
free.

And you want it ASAP

GEZE 

(Sorry everybody,  This post got to me,  At least he said "Kindly")

- Original Message -
From: Ranjit Sabherwal 
To: 
Sent: Wednesday, July 11, 2001 10:28 PM
Subject: VPN implementation [7:12063]


> My customer wants to implement VPN over Internet between 4 offices,
namely;
> Delhi, Chennai, Bangalore and Bombay. He wants a very very secured
network.
> I want to know as to what all things are required for secured
implementation
> of VPN and why. In other words, i want a full VPN solution. The customer
> wants that there should be proper tunneling between its offices so that
the
> data is secured.What all VPN devices are required and where should they be
> installed(Consider that Delhi is the head office) Kindly enlighten me on
> this issue ASAP as i have to give the solution as early as possible. I
went
> through the Cisco site also but failed to arrive at a solution.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12074&t=12063
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCIE market FLOOD !! was: Current Wait time on the lab [7:12749]

2001-07-17 Thread Tony Medeiros

Amen to that,

I talked to a recruter friend that does nothing but place CCIE's nation
wide.  He has over 100 out of work CCIE's he is looking to place.  This is
really depressing !!!  I guess we will all need to start thinking about cuts
in pay.  Especially if Cisco lowers the bar on the test.

Yeah, there are only 5K active or so CCIE's in the world.  But,  There are a
lot more super smart engineers that don't have the certification and don't
need it really.  These people that have been in the industry a lot longer
than me are getting the meager jobs out there right now.  And so they should
!!!  Experience is KING !!

Certifications are nice,  but what the employeers that I have interviewed
with lately really what is mega experience.  Something I don't have yet.

The CCIE is most valuable in the VAR arena.  And that industry is in the
toliet right now.   I just hope that Cisco isn't just doing the 1 day test
thing for revenue purposes.  The lab test has always been a profit center
for them.   A one day test is an easy way to double that revenue for them.

I feel for the people that have to wait for 8 months or more for a lab date.
I know what constant preparation, sacrifice, and stress you have to go
through.  I just hope that the people working so hard for their CCIE will
have a certification that still means something.

Sorry everybody,  just venting out load.  I am finally getting some real job
offers after a month of interviewing and doing consulting work.

Tony M.
#6172

- Original Message -
From: Greg Macaulay 
To: 
Sent: Tuesday, July 17, 2001 6:21 PM
Subject: RE: Current Wait time on the lab [7:12713]


> Chuck ---
> Do you really think the CCIE is finished?? I hope you are wrong! We've all
> invested so many hundreds of hours of blood, sweat, tears and Money to get
> to this point!!  I read Cisco's explanation today -- and hopefully their
new
> lab will simply economize on time -- not on expertise.  Say a prayer!
>
> Greg Macaulay
> Oldest CCNP/CCDP on Earth
> Lifetime Member of AARP
> Retired Attorney/Law Professor
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Chuck Larrieu
> Sent: Tuesday, July 17, 2001 8:52 PM
> To: [EMAIL PROTECTED]
> Subject: RE: Current Wait time on the lab [7:12713]
>
>
> I'm willing to part with my December 3 date for a nominal fee.
>
> Chuck
> betting that once the one day lab takes effect, the value of the CCIE will
> plummet ;->
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> EA Louie
> Sent: Tuesday, July 17, 2001 2:33 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Current Wait time on the lab [7:12713]
>
>
> - Original Message -
> From: John Neiberger
> To:
> Sent: Tuesday, July 17, 2001 2:12 PM
> Subject: Re: Current Wait time on the lab [7:12713]
>
>
> > I just scheduled the lab today and the earliest date available was
> > 3/8/2002.  But I took that spot.  :-)
>
> not true, the earliest date was today  ;-)  then one on 8/7 and another on
> 8/17  (heheheheh)
>
> >
> > John
> >
> > >>> "Jaspreet Bhatia"  7/17/01 2:40:18 PM >>>
> > Guys,
> >   Does anyone know what is the current wait time for the
> > R/S
> > lab in San Jose .
> >
> > Jaspreet
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12749&t=12749
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco PBX Fundamentals [7:12658]

2001-07-17 Thread Tony Medeiros

Use this link and click on "partner E-learning connection".  You need to
have a partner login or you aint getting in.   All the VOD stuff is there.

http://www.cisco.com/warp/public/765/partner_programs/certification/silver/

Bear in mind that the PBX test takes to two VOD courses.  The PBX
fundementals and another one who's name escapes me and is hard to find.
Talk to your Channel SE,  he or she should be able to point you to the
correct one.

Tony M.
#6172

- Original Message -
From: Keith Townsend 
To: 
Sent: Tuesday, July 17, 2001 8:16 AM
Subject: Cisco PBX Fundamentals [7:12658]


> Has anyone taken the Cisco PBX Fundamental test.  I'm trying to find the
> courseware which is a VOD.  I can't find it anywhere on CCO.
>
> Keith L. Townsend
> MCSE, CNE, CCNA
> AISA Technologies
> www.aisatech.com
> 312-629-1100




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12763&t=12658
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IOS [7:12833]

2001-07-18 Thread Tony Medeiros

> What is the difference between an IOS that is IP and IP Plus?

Voice and ATM capabilities mostly.

I just found this link that explains the feature sets by hardware platform.
I don't know if this is new or I was never able to find it before.  But it
sure is Cool !!!

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121relnt/xpr
n121/121feats.htm

(watch  the word wrap)

Enjoy
Tony M.
#6172




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12846&t=12833
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: To CCIE's without a job [7:12805]

2001-07-18 Thread Tony Medeiros

I want to be a developer for DSPF 

What is that?

Dumbest Shortest Path First ?



> >My name is Johnna Smith and I work for a placement firm in Dallas,
> >Texas. I am in desperate need of a CCIE that DEVELOPS routing
> >protocols. I need them to have BGP, DSPF, IS-IS, and MPLS. The must
> >be a software engineer and they must be degreed.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12863&t=12805
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: What do I need to complete a Token ring lab? [7:13092]

2001-07-20 Thread Tony Medeiros

If anybody needs some RJ-45 token ring MAU's,  I have 4 for sale and they
all work.  Contact me offline

Tony M.
#6172
[EMAIL PROTECTED]

- Original Message -
From: EA Louie 
To: 
Sent: Friday, July 20, 2001 9:22 AM
Subject: Re: What do I need to complete a Token ring lab? [7:13092]


> You'll need a few token ring devices - a 2513 would be a good choice for a
> 2nd T/R router (it will allow you to do SR/TLB), and a 2515 would be a
good
> idea too, so you can do SRB.  You'll also want Enterprise IOS on those or
a
> couple of other routers so you can practice DLSw.
>
> -e-
> - Original Message -
> From: Kenneth Woodely
> To:
> Sent: Friday, July 20, 2001 7:24 AM
> Subject: What do I need to complete a Token ring lab? [7:13092]
>
>
> > I'm trying to get my home lab ready to take the CCIE R/S written and
lab.
> > However, I need to know what equipment to get to complete token ring
> > section. I know I need a cisco 2502.
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13156&t=13092
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Wireless Exam [7:13179]

2001-07-20 Thread Tony Medeiros

Use this link for VOD course.  You need partner level login on CCO

http://cisco.partnerelearning.com/pec/main.asp?Nav=EmpHome&Body=ingtoday%2Ea
sp&Task=1&ObjID=26939

(watch the word wrap)

Tony M.
#6172


- Original Message -
From: Rumblebelly 
To: 
Sent: Friday, July 20, 2001 10:21 PM
Subject: Wireless Exam [7:13179]


> I need to take the wireless exam soon. Is there any study material for it?
>
> Thanks,
>
> Rbelly




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13181&t=13179
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: good news and bad news for 1 day lab.... [7:13237]

2001-07-22 Thread Tony Medeiros

Coments inline:



> Guys,
> There are some good news and some bad for the CCIE LAB exam .
>
> Good News :
> 1- the lab is changing into one day lab (not to stress on 2 day hard
> working)

It will still be stressful I'm sure.

> 2- the basic configuration like ip addressing and cabling are
pre-installed.

I would agree that that is good,  Like it has been said a million time
already, The addressing should be covered in the written.  The cabling part
is a "no brainer" anyway.

> 3- the best in all no reverse telneting (no need to practic on access
> server)

That is Good?  Reverse telnet is a good thing to learn. Although not that
hard,  I have set up many a 3660 as a pure consol access server for large
server farms, etc.

> 4- lab can now be schedul earlier

Thats definitly good for Cisco's revenue. And good for future CCIE's stress
level while studying.

> 5- affective from 1 sept.
> 6- no need to take the written exam again if u are of old one as both the
> written and lab is changing.

That is a definitely good,  the less money we have to give sylvan, the
better !!

> 7- all the topics are unchanged so no need to look for more... only patren
> had changed
> 8- best in all the 30 marks seperate troubleshooting is not requried but
> will be testing on that same day th proctor will monitor u how u
> troubleshoot devices.

We will see how that goes,

> 9- The knob switch will be added to the lab for shifting from one router
to
> another for config. (very easy)... and it will cost u around $40.

No terminal server at all ???  Some funky serial switch instead of a term
server.  Wierd.

> Bad news :
> 1- According to CISCO the market have only 6000 CCIE around the globle so
> more should be needed so i think the CCIE will be in SURPLUS after it like
> MCSE and CCNP as they are giving relax to this project.

It's more like 4 of 5 thousand.  Lot's of CCIE's have not recertified or are
Inactive.

> 2- 3900 token ring switch is added.

Huh  ??  That switch has been in the lab for over a year already.  Where are
you getting your information ??

> 3- may be LS1010 will be added to the lab.

I doubt it.  The ATM portion has been slowly getting easier and easier.  Not
much call for LANE in the real world anymore.

> 4- according to JEFF (CCIE lab Manager) the VoIP will be in the lab at
> anytime.

That's nothing new either.  Voice has been in the lab for WAY over a year
now.  I see them stepping this up even more, but not too much.  The new
Voice CCIE will be focused in this area.

> 5- There are around 8000 people to go for the CCIE lab in sept till nov.
so
> i thing there will be many CCIE .. oo

8K people being tested in a 3 month period ???   I don't think s.

I think it's too early to get all freaked out about the new format.  Time
will tell.  However, It's a wake up call for me.  As has been mentioned in
earlier threads, it's time for me to be more "well rounded".  I'm going to
upgrade my MCSE,  learn active directory,  Get some solid UNIX skills and
Net managment skills,  Continue my studies in other technologies like Sonet,
IP telephoney,  SS7, etc.

I just see the writing on the wall.  It says:  " The CCIE is not all you
need to get a foot in the door anymore,  you  need LOTS of skills."

And you know what?   I can't bitch about it.  I got into this industry cus I
liked the challange.  Can't stop being challanged just because I got a brass
hocky puck in a frame.

My $2000 rubels

Tony M.
#6172




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13244&t=13237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Configure Nat with BGP [7:13265]

2001-07-22 Thread Tony Medeiros

I don't think you want to do that.  If you have the bucks for 4 internet
circuits,  you should have the bucks for a firewall or another router behind
your edge router to do the nat. I doubt that this will work.  In fact,  If
you have any asymmetric routing going on at all (packets going out one
interface and returning on a different one),  It flat out won't work.

I can foresee so many issues with this setup that I wouldn't even attempt
it.  I suppose that if you had just static mappings and tweaked the BGP just
right it might work.  But if you have a circuit failure and BGP rolls over
to another interface,  it will break the sessions.  Load balancing will be a
nightmare.  So will peering.  Maybe this could be done with loopbacks and
policy routing on the inside interface pointing at the loopbacks for the
next hop...  I don't know.  It sounds too ugly even to try.  Maybe I'm
wrong,  Anybody else ever try this ???

My humble opinion..  Get a firewall or another router.

Tony M.
#6172

- Original Message -
From: Justin Lofton 
To: 
Sent: Sunday, July 22, 2001 1:02 PM
Subject: Configure Nat with BGP [7:13265]


> I'm trying to configure NAT on a router that is running BGP between 4
> internet circuits.  Can't find anything on CCO.  Which interface do I use
as
> ip nat outside? Just one or all four?  I'm confused.  Can anyone out there
> help me with this one?
>
> Thanks Everyone!
>
> Justin Lofton
> Account Executive/CCNA
> Tredent Data Systems
> [EMAIL PROTECTED]
> V: (818) 222-3770
> F: (818) 222-3778
> http://www.tredent.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13274&t=13265
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Configure Nat with BGP [7:13265]

2001-07-22 Thread Tony Medeiros

Yeah, you could get simple peering to work.  But think about it,  4 uplinks.
.  If you buy 4 links you usually want to utilize them right ??
Utilizing 4 links would be anything but simple.   Even if you set it up to
use just one link at a time with failover.  When it failed,  All sessions
would be lost due to NAT state.Even though it will take BGP a little
while to converge depending on who and where you are peering.  It's still
piss poor design.

All the different load balancing scenarios that I can think of would require
some really weird stuff.  Most just won't work because of the statefullness
of NAT.  The ones I can think of that will work would require 4 routable IP
blocks living on loopback interfaces.  It's anything but simple !!

It's kinda fun to think "out of the bubble" on stuff like this.  But, as
Chuck mentioned,  I think the bubble bursts on this one !! :)

If anybody knows a simple way to utilize 4 links with this setup I sure
would love to see it.  It would be pretty cool !!

Tony M.
#6172

- Original Message -
From: Erick B. 
To: 
Sent: Sunday, July 22, 2001 8:24 PM
Subject: RE: Configure Nat with BGP [7:13265]


> It would work and would be pretty simple. Just need to
> make sure that port 179 isn't getting translated,
> might need a static mapping, etc. Depends on whats
> going on and addressing.
>
> --- Chuck Larrieu  wrote:
> > It's the Lab mentality, Tone. You practice doing
> > screwy things so you can
> > pass the lab, and you become warped in the process,
> > and begin to believe
> > that doing screwy things is normal.
> >
> > as an intellectual exercise, I can think of no
> > reason why BGP wouldn't work
> > over GRE tunnels, but I sure as hell would not even
> > in my worst Lab
> > nightmare think about trying BGP through NAT. Not
> > even the Lab proctors
> > could be that sick ;->
> >
> > Chuck
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of
> > Tony Medeiros
> > Sent: Sunday, July 22, 2001 2:35 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: Configure Nat with BGP [7:13265]
> >
> >
> > I don't think you want to do that.  If you have the
> > bucks for 4 internet
> > circuits,  you should have the bucks for a firewall
> > or another router behind
> > your edge router to do the nat. I doubt that this
> > will work.  In fact,  If
> > you have any asymmetric routing going on at all
> > (packets going out one
> > interface and returning on a different one),  It
> > flat out won't work.
> >
> > I can foresee so many issues with this setup that I
> > wouldn't even attempt
> > it.  I suppose that if you had just static mappings
> > and tweaked the BGP just
> > right it might work.  But if you have a circuit
> > failure and BGP rolls over
> > to another interface,  it will break the sessions.
> > Load balancing will be a
> > nightmare.  So will peering.  Maybe this could be
> > done with loopbacks and
> > policy routing on the inside interface pointing at
> > the loopbacks for the
> > next hop...  I don't know.  It sounds too ugly even
> > to try.  Maybe I'm
> > wrong,  Anybody else ever try this ???
> >
> > My humble opinion..  Get a firewall or another
> > router.
> >
> > Tony M.
> > #6172
> >
> > - Original Message -
> > From: Justin Lofton
> > To:
> > Sent: Sunday, July 22, 2001 1:02 PM
> > Subject: Configure Nat with BGP [7:13265]
> >
> >
> > > I'm trying to configure NAT on a router that is
> > running BGP between 4
> > > internet circuits.  Can't find anything on CCO.
> > Which interface do I use
> > as
> > > ip nat outside? Just one or all four?  I'm
> > confused.  Can anyone out there
> > > help me with this one?
> > >
> > > Thanks Everyone!
> > >
> > > Justin Lofton
> > > Account Executive/CCNA
> > > Tredent Data Systems
> > > [EMAIL PROTECTED]
> > > V: (818) 222-3770
> > > F: (818) 222-3778
> > > http://www.tredent.com/
> [EMAIL PROTECTED]
>
>
> __
> Do You Yahoo!?
> Make international calls for as low as $.04/minute with Yahoo! Messenger
> http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13311&t=13265
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Email worm again !!Re: ptcm0600 [7:13425]

2001-07-23 Thread Tony Medeiros

MAN !!  The email worms are THICK this week.  This is the 4th one in 5 days


Tony

- Original Message -
From: 
To: 
Sent: Monday, July 23, 2001 2:49 PM
Subject: ptcm0600 [7:13425]


> Hi! How are you?
>
> I send you this file in order to have your advice
>
> See you later. Thanks
>
> [GroupStudy.com removed an attachment of type application/mixed which had
a
> name of ptcm0600.xls.bat]
>
> [GroupStudy.com removed a section which didn't have a content-type header]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13432&t=13425
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VoFR [7:13434]

2001-07-23 Thread Tony Medeiros

I am suprised that the IOS let you put a "port statment" under a VOFR dial
peer.  Those are only for POTS peers.  Take it out and it might work.
Tony M.
#6172

- Original Message -
From: Matt 
To: 
Sent: Monday, July 23, 2001 5:05 PM
Subject: VoFR [7:13434]


> Hey, I am having trouble with VoFR.  I have a small lab setup with a 2600
as
> a frame switch and two routers (2600 and 3600) with FXS ports.  I can get
> VoIP to work just fine.  For VoFR I changed the dial-peer to VoFR and I
> changed the destination pattern to use the serial interface and the local
> DLCI.  Other than that the configs are the same (just a plain Jane VoIP
> config).  Is there something obvious that I am missing?
>
> dial-peer voice 100 vofr
> port 1/0/0
> destination-pattern 5000
> session target serial0/0 120
>
> Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13439&t=13434
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: SRTLB with 2501+2502? [7:13438]

2001-07-23 Thread Tony Medeiros

Set up DLSW between the two routers with a back to back serial link.  This
will do basicly the same things like,  RIF termination,  MAC address
translation, etc.

Tony M.
#6172

- Original Message -
From: 
To: 
Sent: Monday, July 23, 2001 5:30 PM
Subject: SRTLB with 2501+2502? [7:13438]


> Hi All!
>
> I have a quick home lab question.
>
> Is using a 2513 the only way to configure Source Route Translational
Bridging
> (SRTLB), or is it possible to achieve the same functionality with a
2501+2502
> configured back to back, and if so, how?
>
> TIA!
> Gordon Bowller




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13450&t=13438
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: How to keep the clock always correct in a router? [7:13470]

2001-07-24 Thread Tony Medeiros

Use NTP.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/ffun
_c/fcfprt3/fcf012.htm
(watch the word wrap)

Tony
#6172

- Original Message -
From: Derric Gu 
To: 
Sent: Tuesday, July 24, 2001 2:00 AM
Subject: How to keep the clock always correct in a router? [7:13470]


> Everytime when I reload the router, its clock will be changed to year
1993.
> And the time of the router is important for vpn, how can I keep the clock
of
> the router always correct?
>
> Derric Gu




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13472&t=13470
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: CAR CONFIG EXAMBLE [7:13503]

2001-07-24 Thread Tony Medeiros

Here is how CAR works:
http://www.cisco.com/warp/public/732/Tech/car/

And here is how to configure it:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/qos_c
/qcpart1/qccar.htm

(watch the word wrap)

Tony M.
#6172

- Original Message -
From: Michael D. 
To: 
Sent: Tuesday, July 24, 2001 7:46 AM
Subject: CAR CONFIG EXAMBLE [7:13503]


> Hey Folks,
>
> could somebody show me a Comminted Access Rate Examble ?
> How does it work in real life ?
>
> best regards
> Michael




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13519&t=13503
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 7206 memory - DRAM [7:13657]

2001-07-24 Thread Tony Medeiros

The one with the = sign denotes "spare".  Spares are priced a little
differently some times.

Tony M.
#6172

- Original Message -
From: 
To: 
Sent: Tuesday, July 24, 2001 4:19 PM
Subject: 7206 memory - DRAM [7:13657]


> Does anybody know offhand what the difference between the MEM-NPE-128MB
and
> MEM-NPE-128MB=
> is.
>
>
>
> Thanks,
>
> Duncan
>
> Duncan Wallace
> Sr. Network Engineer
> 800.COM Inc.
> 1516 NW Thurman St
> Portland, OR  97209-2517
>
> Direct: 503.944.3671
> Cell: 503.969.8248
> Fax: 503.943.9371
> Web: http://800.com
> Email: [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13668&t=13657
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IP Summary-address RIP [7:13699]

2001-07-24 Thread Tony Medeiros

Interesting,  I guess that there is still a call out there to use RIP.
Otherwise,  why would Cisco continue to make enhancements?

Good stuff to know.
Tony M.
#6172

- Original Message -
From: Chuck Larrieu 
To: 
Sent: Tuesday, July 24, 2001 8:08 PM
Subject: FW: IP Summary-address RIP [7:13699]


> I posted the following to the CCIE list and received no comment
whatsoever.
> apparently if a topic isn't directly related to any of the practice labs,
or
> is not perceived as being necessary to pass the Lab, no one is interested.
>
> since I know the folks on this list like to learn things, I thought I'd
post
> here
>
> -Original Message-
> From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 23, 2001 10:10 PM
> To: CCIE_Lab Groupstudy List
> Subject: IP Summary-address RIP
>
>
> ran into this one while digging around CCO
>
> IP summary-address rip network mask
>
> this command is new to IOS 12.1
>
> it is an interface command, and ip split-horizon must be disabled for it
to
> work.
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/ip_c
> /ipcprt2/1cdrip.htm#xtocid1773719
> watch the word wrap
>
> From CCO:
>
> Example 1: Correct Configuration
>
> The following example shows how the ip summary-address rip command works
> with autosummary addressing in RIP. In the example, the major network is
> 10.0.0.0. The summary address 10.2.0.0 overrides the autosummary address
of
> 10.0.0.0, so that 10.2.0.0 is advertised out interface e1 and 10.0.0.0 is
> not advertised.
> --
--
> 
>  Note   If split horizon is enabled, neither autosummary nor interface
> summary addresses (those configured with the ip summary-address rip
command)
> are advertised.
> --
--
> 
> router rip
> router int e1
>  ip address 10.1.1.1 255.255.255.0
>  (config-if)# ip summary-address rip 10.2.0.0 255.255.0.0
> no ip split-horizon
>
> router rip
> network 10.0.0.0
>
> [end of CCO quote]
>
> finally got this one to work. the doc CD omits the requirement that the
> sender must be a RIPv2 speaker. which makes sense, if you stop and think
> about it. sample configs below my signature.
>
> I got to wondering about the no ip split-horizon requirement on the
> interface where the summary takes place. if the RIP process receives the
> summarization information from an interface, then I guess it considers
> advertising that summary back out that address as a violation of split
> horizon. make sense? I can't think of any other reason for the
requirement.
>
> leads to some interesting possibilities. for example, suppose you have
some
> kind of RLAN private network, with lots of home user DSL lines aggregated
> into an ATM DS3 at the core. you want to conserve address space by
> allocating /29's to the home office users, but your RIP network requires a
> mask of /24.
>
> don't laugh, guys, I have a customer with exactly this situation :->
>
> you can advertise a /24 summary into your rip network. Cisco routers by
> default listen to RIPv2 advertisements, even if they are RIPv1 routers. So
> the RIPv2 advertisements will be accepted and placed into the routing
table.
> I don't know if this is true with other vendor's products.
>
> there are obviously some pitfalls. with split horizon disabled, one must
be
> aware of the implications. I have not yet tried various flavors of route
> maps or distribute lists to limit what goes out. also, one must take care
> that the RIPv1 routers are able to readvertise the summarized route.
> Assuming, as in the case I have mentioned, the RIPv1 router has only /24's
> on its attached interfaces, this should be OK. just something to be aware
> of.
>
> in terms of CCIE lab applicability, I suppose this can be one more tool in
> your arsenal. but only if your pod features 12.1 or better.
>
> Chuck
>
> interface Loopback0
>  ip address 10.1.1.1 255.255.255.248
> !
> interface Loopback1
>  ip address 10.1.1.9 255.255.255.248
> !
> interface Loopback2
>  ip address 10.1.1.17 255.255.255.248
> !
> interface Loopback3
>  ip address 10.1.1.25 255.255.255.248
> !
> interface Loopback4
>  ip address 10.1.1.33 255.255.255.248
> !
> interface Ethernet0
>  ip address 190.190.99.3 255.255.255.0
>  no ip split-horizon
>  ip summary-address rip 10.1.1.0 255.255.255.0
>
> interface Serial1
>  ip address 190.190.23.3 255.255.255.0
>  no ip split-horizon
>  ip summary-address rip 10.1.0.0 255.255.0.0
>  clockrate 200
> !
> router rip
>  version 2
>  passive-interface Loopback0
>  passive-interface Loopback1
>  passive-interface Loopback2
>  passive-interface Loopback3
>  passive-interface Loopback4
>  network 10.0.0.0
>  network 190.190.0.0
>  no auto-summary
>
> another router:
>
> I171.171.0.0/16 [100/9076] via 190.190.23.3, 00:01:10, Serial1
> S100.0.0.0/8 is directly connected, Serial1
>  190.190.0.0/24 is subnetted, 2 s

Re: Where is my Auxiliary VLAN capability?? [7:14150]

2001-07-30 Thread Tony Medeiros

I don't see any line cards in your module list.  If you don't have any user
ports why do you need an aux. vlan?  If you what a to create a voice vlan,
just create a vlan and put the 6608 and 6624 ports in it.

Tony M.
#6172

- Original Message -
From: bobby zimmerman 
To: 
Sent: Monday, July 30, 2001 5:33 AM
Subject: Where is my Auxiliary VLAN capability?? [7:14150]


> I have a Cat6000 (modules: Sup1a-2GE, 6608-E1, 6624-FXS, with MSFC2)
running
> Hybrid mode with CatOS 6.2(2) and IOS 12.1(8a)E. For some reason which I
> can't figure out, I'm not allowed to create Auxiliary VLAN's ?? the 6.2(2)
> release specifically says that this is allowed on the software AND the
> hardware is definitely dot1q capable. So what is going on here? All the
> release notes, etc. say that I should be able to create an auxvlan for
voice
> purposes. What am I missing here? Has anyone else had this problem?
>
> thanks in advance for any help,
>
> zimmy




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14179&t=14150
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Probobly a stupid question.... [7:14273]

2001-07-30 Thread Tony Medeiros

What you need to configure is "easy IP" in cisco terms.  It's just NAT over
a negotiated IP address.   See link

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fdia
l_c/fnsprt7/dcdezip.htm

(watch line wrap)

Tony M.
#6172

- Original Message -
From: Guy Russell 
To: 
Sent: Monday, July 30, 2001 3:34 PM
Subject: Re: Probobly a stupid question [7:14273]


> I currently run NAT on a 2000 Server...
>
> One interface is using an auto ip address that is received from the ISP...
> The other Nic, is linked to my switch and to my router stack...
>
> What I would like to do is take one of my routers, and configure nat on
it.
> This will replace the 2000 server. I dont need advice on the server end, I
> have that well taken care of, what I am trying to come up with is a way to
> have one interface of my router to accept a dynamic IP address, and to
work
> nat on that router, the dynamic interface being the outside interface, or
> public interface
>
>
> Yea, I know about the Linksys router as well, and almost went ahead and
> bought it, was trying to figure out how to make it do something it
probobly
> cant.
>
> You know, one of those I wonder if? deals... thats all.
>
> - Original Message -
> From: Patrick Ramsey
> To: ;
> Sent: Monday, July 30, 2001 5:11 PM
> Subject: Re: Probobly a stupid question [7:14273]
>
>
> You mean 2000 servers accessing the internet via dynamic nat?  Or you have
> 2000 static translations inbound?  And when you say "server interface" do
> you mean the ethernet interface on the router that the servers are
beihind?
> Set up maybe like a DMZ?
>
> I mean, you can certainly set up your DSL connection to be established and
> pull an ip address automagically if that is what your isp supports.
>
> Give us a little bit more detail on your goals.
>
> -Patrick
>
> >>> "Guy Russell"  07/30/01 05:47PM >>>
> Is it possible to set up NAT on a router for DSL, allowing the DSL side
> connection to receive a DHCP generated address??
>
> I have been running 2000 server Nat, and using my DSL connection with no
> problems, but would like to remove the server interface completely...




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14289&t=14273
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VoIP Traffic Shaping Config [7:14451]

2001-08-01 Thread Tony Medeiros

Use RSVP on your VOIP dial peers.  Set the bandwidth low so a second call
won't get a reservation and be denied.  Kind of like a gatekeeper fuction,
sort of.  Or,  go ahead and set up gatekeeper on a router somewhere in your
network and set the bandwidth accordingly.

Tony M.
#6172

- Original Message -
From: Oletu Hosea Godswill CCNA, CCDA, CCNP. 
To: 
Sent: Tuesday, July 31, 2001 10:29 PM
Subject: VoIP Traffic Shaping Config [7:14451]


> Hi folks,
>
> Hope this newsgroup does not make me lazy!!!
> hehehehehe
>
> I have a problem guys.  I have a Cisco 3640 configured
> with an FXS voice module (2 voice ports).  I am
> contending with a 28.8k link to my head office.  I do
> voice and data on that link.  However, i need to
> restrict my voice calls to one at a time.  I have done
> some QOS on that link. In addition, i want the two
> voice ports on the FXS VIC to be operational.  Is
> there a command which i can use to disable one voice
> port automatically when i am using the second port?
> What i really mean is to have one port disabled as
> soon as i pick up the handset attached to the other
> port.  You get what i mean?  Well the reason behind
> this is that i don't want my colleagues (who think
> 28.8k is a heaven)to use more than one handset at a
> time to call the head office.  But i want port 3/1/0
> and port 3/1/1 to be active so that any can be used at
> any time (not simultaenously).
>
> Regards!!!
> Oletu




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14489&t=14451
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: EIGRP's interpretation of NBMA and "disabling [7:14912]

2001-08-04 Thread Tony Medeiros

Leigh Anne,

There is a "neighbour" statement in EIGRP just like OSPF and RIP.  If you
configure an interface as "passive",  Multicast Hellos are NOT sent on that
interface.  However, neighbor statements will send unicast hellos and will
attempt to form adjacenties.  Even if its over a passive interface.  I have
used this in RIP and OSPF but not EIGRP.  I don't have a lab anymore so
maybe someone can test this.

Could the "passive interface"  command be what they are talking about when
it means disabling multicast?

Tony M.
#6172

- Original Message -
From: Leigh Anne Chisholm 
To: 
Sent: Saturday, August 04, 2001 1:57 PM
Subject: RE: EIGRP's interpretation of NBMA and "disabling [7:14912]


> I'd say that that's close Chuck... but it doesn't say how to disable
> physical multicasting.  It shows the alternative for SMDS.  And since I'm
> not that "up" on SMDS, I'm more interested in NBMA from the perspective of
> EIGRP.
>
> Right now I'm too busy to do any sort of deep investigation--just if
anyone
> knew the answer as to how to disable physical multicasting and why you'd
> want to do it, that would have been a bonus.  Since there's not a flurry
of
> activity regarding my query (EIGRP pun intended), I'd say not many people
> know...
>
> Guess I'm SIA.  Stuck in active.  No reply to query received.
>
> -Original Message-
> From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, August 04, 2001 12:56 PM
> To: Leigh Anne Chisholm; [EMAIL PROTECTED]
> Subject: RE: EIGRP's interpretation of NBMA and "disabling
> multicasting"? [7:14693]
>
>
> don't know if you have already received an answer to this, but one good
> source is the CCO configuration guides. in the case of SMDS you can read
it
> at:
>
> http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/smds.htm
>
> the quote you provide does talk about the physical ( carrier ) level, and
> with SMDS there are means of configuring it from the carrier side as a
> series of point to point links or as a single multipoint domain.
>
> "SMDS group addresses allow a single address to refer to multiple CPE
> stations, which specify the group address in the Destination Address field
> of the PDU. The network makes multiple copies of the PDU, which are
> delivered to all members of the group. Group addresses reduce the amount
of
> network resources required for distributing routing information, resolving
> addresses, and dynamically discovering network resources. SMDS group
> addressing is analogous to multicasting on LANs. "
>
> in your quote, I believe that the "interface" referred to is the physical
> interface, i.e. the interface connecting to the SMDS CPE - probably a(n)
> HSSI.
>
> make sense?
>
> Chuck
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Leigh Anne Chisholm
> Sent: Thursday, August 02, 2001 12:16 PM
> To: [EMAIL PROTECTED]
> Subject: EIGRP's interpretation of NBMA and "disabling multicasting"?
> [7:14693]
>
>
> On Cisco's site, I've been searching for information as to when the hello
> interval is set to 5 seconds and when it is set to 60 seconds.  Hellos are
> sent every 5 seconds except on low-speed, NBMA media.  Low-speed is
defined
> as 1.544 Mbps and under.  No problems there.
>
> What I don't understand is this statement:
>
> "Note that for the purposes of EIGRP, Frame Relay and Switched
Multimegabit
> Data Service (SMDS) networks may or may not be considered to be NBMA.
These
> networks are considered NBMA if the interface has not been configured to
use
> physical multicasting; otherwise they are not considered NBMA."
>
> How can you configure an interface not to use multicasting?  This is
> something I haven't come across how to do yet.  Is this configuring EIGRP
> multicasts to use unicasts (I think I saw something like that last night
but
> I was too tired to comprehend it or even remember where I saw it).
>
>
>   -- Leigh Anne




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14917&t=14912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Load Balancing... [7:14865]

2001-08-04 Thread Tony Medeiros

Be prepared to take a SERIOUS cpu hit if you do per packet load balancing
like that.  I personally would do LFI setup with multilink PPP instead.

See link and look at the config.
http://www.cisco.com/warp/public/788/voice-qos/voip-mlppp.html#subfirstone

Tony M.
#6172

- Original Message -
From: Santosh Koshy 
To: 
Sent: Saturday, August 04, 2001 5:06 PM
Subject: Re: Load Balancing... [7:14865]


> Peter,
>
> Here is the "problem i am trying to solve"
>
> - I am located in Canada
> - We have a data center in US. All our users use SAP, Web, FTP, and other
> such applications across the border
> - We currently have one T1 circuit running to the US
> - After monitoring Traffic flow and Utilization we have come to the
> conclusion that the bandwisth is not adequate, and that we have no
> redundancy
> - We have decided to go with 4 links (from 2 different vendors)
> - We use OSPF in Canada.
> - All unknown routes (0.0.0.0 0.0.0.0) are pushed to the "US router"
>
> I was thinking of doing the following
> - Terminating all of these links into one router, and use "per-packet"
load
> balancing to push these packets across the border
> - Use the following config
> ! disable fast switching
> no ip route-cache
> no ip mroute-cache
> ! Use route statements to do per-packet load balancing
> ip route 0.0.0.0 0.0.0.0 link1
> ip route 0.0.0.0 0.0.0.0 link2
> ip route 0.0.0.0 0.0.0.0 link3
> ip route 0.0.0.0 0.0.0.0 link4
>
> My only worry is that with the above solution; I will be acheiving
> "per-packet" load balancing, but at the cost of a single point of failure
> (the Router)
>
> All suggestions are welcome... Thanks a lot guys,
> Santosh Koshy
>
>
> ""Peter Van Oene""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Since Howard is in London, allow me to ask "What problem are you trying
to
> > solve?"
> >
> >
> > *** REPLY SEPARATOR  ***
> >
> > On 8/3/2001 at 10:07 PM Santosh Koshy wrote:
> >
> > >Hi All,
> > >
> > >I have a slight dilemma to which I cannot seem to find a definitive
> > >answer.. We have 4 circuits going from Canada to the US...
> > >
> > >Is it necessary to terminate all the circuits into one router to do
> > >"per-packet" load balancing.
> > >
> > >--
> > >Santosh Koshy
> > >WAN Administrator




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=14921&t=14865
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Assymetric link for customer [7:15012]

2001-08-06 Thread Tony Medeiros

Use CAR on you customer interface.   See link:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios111/cc111/car.ht
m

Tony M.
#6172

- Original Message -
From: "Prabhu K." 
To: 
Sent: Monday, August 06, 2001 7:00 AM
Subject: Assymetric link for customer [7:15012]


> Dear sir,
>
>  Is there any way to control the Bandwidth to the customer  for Tx
> and Rx, i mean if customer wants Tx 64kbps and Rx is 512kbps and this
> should  control the bandwidth for a particular link. I am using both site
> cisco router and HDLC encap, the local loop remains same ie 512kbps only i
> have to control the bandwidth on my router without help of extra hardware
> for Tx and Rx.
>
> I am anxiously waiting for reply from any group members.
>
> Kind regards,
> prabhu




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=15015&t=15012
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Advice : CCIE written (R/S) [7:15005]

2001-08-06 Thread Tony Medeiros

For the written, Radia Perlman's "Interconnections" is a must read.  So is
the CCIEprep.com Token ring paper.  Good stuff to know, test or no test.

Tony M.
#6172

- Original Message -
From: "Thompson, Robert D" 
To: 
Sent: Monday, August 06, 2001 4:15 AM
Subject: Advice : CCIE written (R/S) [7:15005]


> HI All,
>
> Could any of you please advise me on anything I should concentrate my
> efforts on for the exam, not breaking your non disclosure with Cisco.
>
> Here is a list of what I spend a lot of time on (study wise)
>
> General Routing
> Advanced routing - BGP, OSPF, EIGRP (includes metrics, theory,
configuration
> etc)
> Switching
> Multicast routing
> route filtering
> protocols (IP and IPX etc)
> Bridging
> DDR
> ISDN
>
>
> My ATM skills are only theory!!!
>
> Thanks in advance
>
> Rob
> CCNP




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=15016&t=15005
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: RE: Subject: EIGRP's interpretation of NBMA and "disabling [7:15017]

2001-08-06 Thread Tony Medeiros

Thanks Paul,
That puts that one to rest.  Were you forced to use the "neighbor"
statements under EIGRP to get the Hellos out when you turn off broadcast??
It looks like the ip address is still multicast.

Tony M.
#6172

- Original Message -
From: "Paul Werner" 
To: 
Sent: Sunday, August 05, 2001 9:49 PM
Subject: Re: RE: Subject: EIGRP's interpretation of NBMA and "disabling
[7:14996]


> Well, I had a chance to do a little testing on this situation.
> It seems what Cisco really meant to say was, "physical
> multicasting" or "physical broadcasting".  PIM specifically had
> nothing at all to do with it.
>
> When I set up the frame cloud to test this, it was not readily
> apparent my test was less than valid.  It was only when I went
> to the "sh frame map" command that I saw this:
>
> 2522#sh fram map
> Serial0.1 (up): point-to-point dlci, dlci 100(0x64,0x1840),
> broadcast
>   status defined, active
>
> It then immediately dawned on me what the problem was.  I
> proceeded to undo all of my frame configs until they all read
> similar to this:
>
> 2511#sh fram map
> Serial0.4 (up): ip 3.0.0.1 dlci 110(0x6E,0x18E0), static,
>   CISCO, status defined, active
> Serial0.4 (up): ip 20.0.0.1 dlci 120(0x78,0x1C80), static,
>   CISCO, status defined, active
> Serial0.4 (up): ip 22.0.0.1 dlci 130(0x82,0x2020), static,
>   CISCO, status defined, active
>
> Note that I made the conversion from auto frame to static
> mappings.  In the process, I conveniently left off the
> keyword "broadcast" on the frame-relay static mappings.  Here
> is what the EIGRP hellos looked like prior to static mapping:
>
> 02:05:52: EIGRP: Received HELLO on Serial0.4 nbr 22.0.0.1
> 02:05:52:   AS 1, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
> peerQ un/rely 0/
> 1
> 02:05:52: EIGRP: Sending UPDATE on Serial0.4 nbr 22.0.0.1,
> retry 3, RTO 5000
> 02:05:52:   AS 1, Flags 0x1, Seq 44/0 idbQ 0/0 iidbQ un/rely
> 0/0 peerQ un/rely 0
> /1 serno 11-13
> 02:05:57: EIGRP: Received HELLO on Serial0.4 nbr 22.0.0.1
> 02:05:57:   AS 1, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
> peerQ un/rely 0/
> 1
> 02:05:57: EIGRP: Sending UPDATE on Serial0.4 nbr 22.0.0.1,
> retry 4, RTO 5000
> 02:05:57:   AS 1, Flags 0x1, Seq 44/0 idbQ 0/0 iidbQ un/rely
> 0/0 peerQ un/rely 0
> /1 serno 11-13
> 02:06:01: EIGRP: Received HELLO on Serial0.4 nbr 22.0.0.1
> 02:06:01:   AS 1, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
> peerQ un/rely 0/
> 1
>
> If you note the timestamps, they are approximately every five
> seconds.  Here is what it looks like with the static mapping
> statements and the *broadcast* keyword removed from the static
> mapping statements:
>
> 2522#
> 03:21:15: EIGRP: Sending HELLO on Serial0
> 03:21:15:   AS 1, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
> 03:21:45: EIGRP: Received HELLO on Serial0 nbr 22.0.0.2
> 03:21:45:   AS 1, Flags 0x0, Seq 0/0 idbQ 0/0
> 03:22:07: EIGRP: Sending HELLO on Serial0
> 03:22:07:   AS 1, Flags 0x0, Seq 0/0 idbQ 0/0 iidbQ un/rely 0/0
> 03:22:40: EIGRP: Received HELLO on Serial0 nbr 22.0.0.2
> 03:22:40:   AS 1, Flags 0x0, Seq 0/0 idbQ 0/0
>
> You will note that send/receive hellos are approximately one
> minute apart. It would appear that instead of making matters
> clearer by just stating the obvious, Cisco chose instead to
> state the correct information in a somewhat convoluted and less
> than clear manner:-)
>
> As far as turning off multicasting capability on the interface,
> you definitely lose it when you lose broadcast capability since
> they both share the same bit to signify a broadcast packet(bit
> 8 going from left to right of the MAC address).  I guess their
> thinking was that since they were discussing EIGRP and EIGRP
> timer adjustments, it was understood that the underlying method
> of layer 2 transmission would be via multicasting.
>
> Final note.  I did find an interesting little command that may
> achieve what Chuck was trying to do.  The command is as follows:
>
> ip multicast rate-limit in 0
>
> and
>
> ip multicast rate-limit out 0
>
> The intent of this command was to rate limit or throttle
> multicast streams such as video (IPTV) or audio (Real Audio) by
> ensuring that a multicast stream did not saturate a link.
> Based upon quick testing I did, It did not appear to affect any
> EIGRP multicast related traffic which leads me to believe it is
> possibly filtering on UDP based multicast.
>
> v/r,
>
> Paul Werner
>
>
> 
> Get your own "800" number
> Voicemail, fax, email, and a lot more
> http://www.ureach.com/reg/tag
>
>
>  On Sun, 5 Aug 2001, Leigh Anne Chisholm ([EMAIL PROTECTED])
> wrote:
>
> > Here's the link I got the quote from:
> >
> >
> http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/
> 122cgcr/fipr
> > _c/ipcprt2/1cfeigrp.htm#xtocid2271313
> >
> > Check out the third paragraph for the quote.
> >
> >
> >   -- Leigh Anne
> >
> > -Original Message-
> > From: [EMA

Re: FR ON ISDN [7:15010]

2001-08-07 Thread Tony Medeiros

That being said,  (this is  new config to me) LMI is a poirt to point beast.
Each FR switch that has a UNI interface (interface to an end router)  will
generat it's own LMI type and information regarding DLCI's announced.  On
R2's BRI interface,  did you use the commands "frame-relay intf-type DCE"
and " frame-relay LMI type [cisco or ANSI].  When the link comes up by
either side.  It should go through the frame layer 2 negotaition.

I am pulling out all of this out of my butt this late at night,  but it
makes sense.  Are there special commands for this type of frame over ISDN
setup?

Tony M.
#6172
(who woke up in the middle of the night and is typing with one eye closed :)

- Original Message -
From: "Chuck Larrieu" 
To: 
Sent: Monday, August 06, 2001 10:25 PM
Subject: RE: FR ON ISDN [7:15010]


> As I live and breathe
>
> MANAGER(config)#int bri 3/0
>
> MANAGER(config-if)#encap ?
>   cpp  Combinet proprietary protocol
>   frame-relay  Frame Relay networks
>
> I apologize for my sarcastic remark earlier. Learn something new every
day.
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Adarsh
> Sent: Monday, August 06, 2001 10:00 PM
> To: [EMAIL PROTECTED]
> Subject: Re: FR ON ISDN [7:15010]
>
>
> Dear Makarand,
>
> Yes i have made router 2  has Fr swicth , so dlci 11 can be swictched to
bri
> port of the router itself , now when i type the command show frame-relay
pvc
> , it shows dlci 11 as swicthed , on bri port of the router 2  it shows  in
> spoofing state but no lmi enq are recieved on  this bri , i don't know why
> ?can you  throw some light on this .If the lmi enquries are recieved at
this
> interface then only can these enquires can be send on bri port of router 1
> once it dails into the bri port of router 2.So till the time lmi does not
> come up , it won't help us .
>
>
> Regards
> Adarsh
> - Original Message -
> From:
> To:
> Sent: Tuesday, August 07, 2001 7:29 AM
> Subject: Re: FR ON ISDN [7:15010]
>
>
> > Dear Adarsh,
> >
> > I hope you are trying to aggragate multiple links at R2. One of the link
> is from R1 over ISDN.
> >
> > As you have R2 connecting to FR switch all PVCs will terminate on R2. If
> you want R2 to switch PVCs then it should be configured as a FR switch. Is
> it that what you want to do?
> >
> > HTH
> >
> > -Makarand
> >
> > [EMAIL PROTECTED] wrote
> > Dear ALL
> >
> > Can any one help me in knowing how does one configure Frame relay on
ISDN.
> >
> > The  picture is someting like this :
> >
> >
> >  router1(BRI)(BRI)router2(Serial)-FR Switch.
> >
> >
> > Now there are 2 pvc from router 2 to fr switch , dlci 10 for the router
2
> > itself & the dlci 11 for the bri port for router1. Now the Router2 is
> > swicthing dlci 11 from the serail port  to bri port itself.When ever
> router
> > 1
> > dials it shd get this dlci  from bri port of router 2.  Can any one help
> me
> > what config does one  needs to do on the bri part of router 1 & router
2.
> >
> >
> >
> > Thanks
> > Regards
> > Adarsh




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=15084&t=15010
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DE bits [7:15210]

2001-08-07 Thread Tony Medeiros

A Cisco router will never set the DE bits unless specifically told to do so
with a frame relay DE list.  The frame cloud sets the DE bit on your traffic
if you exceed the CIR or burst committed data rate for your PVC.  This means
that if the cloud experiences congestion,  the frames with the DE bits are
the first into the bit bucket.

Theoretically this is the way it's supposed to work.  More times than not
the frame cloud will mark your frames DE even if you not exceed you SLA.
Then it's time to call the provider.

Generally, DE bits have nothing to do with port speed.  Port speed is just
the speed of the link you have to the frame switch.  Traffic shaping has
more effect on the rate you send to each PVC.  It's a little complicated.

An easy way to show what the provider is giving you is to set up the traffic
shaping to correspond to the SLA for the PVC.  Then do a "sho frame PVC" to
see the stats.  DE marked frames and BECN's and FECN's, MAY be an indicator
that you are not getting the SLA you should.  These parameters are CRITICAL
in voice over data applications.

Does this help at all ??

Tony M.
#6172

- Original Message -
From: "Mike Mandulak" 
To: 
Sent: Tuesday, August 07, 2001 9:16 PM
Subject: DE bits [7:15210]


> Do discard Eligible bits (DE) get set on lines that are full T1's? The
> circuit I'm looking at is a full T1 to one of my internet providers and
when
> looking at the frame stats (using cisco LMI) I see that that the cir is
set
> to zero which would mean that all frames leave my site with the DE bit
set.
> Am I misunderstanding this?
>
> MikeM




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=15218&t=15210
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Friday Follies - IP NAT behaviour [7:15822]

2001-08-12 Thread Tony Medeiros

I'll take a stab.
Going from inside to outside,  Nat takes happens before policy routing.
>From outside to inside,  just the oposite takes place.  Without looking at
the configs, This is the best I can come up with.

Good brain teaser though 

Tony M.
#6172

- Original Message -
From: "Chuck Larrieu" 
To: 
Sent: Sunday, August 12, 2001 9:06 PM
Subject: Friday Follies - IP NAT behaviour [7:15822]


> so I'm late. so sue me ;->
>
> last Friday while I was in the office I got to chatting with one of the
> other SE's. He had a problem with his home setup and wanted some help. It
> was an interesting enough problem that I thought some of you CCNA's, some
of
> your CCNP candidates, might enjoy taking a crack at it.
>
> this person has a DSL connection to the internet. He has an single
assigned
> IP address. He is using a Cisco router as his firewall, in this fashion:
>
> internet---DSL_router--Cisco_router--web_server
>   E0  E1
>
> life is good.
>
> then he starts to fool around with NAT. He puts a private IP on his web
> server, and he runs NAT on the Cisco router. Again, life is good. folks
can
> reach his web server from the net.
>
> but now he wants to telnet from the net ( i.e. from work ) into the Cisco
> router.. He cannot do so. instead he hits his web server, where telnet is
> not running as a service.
>
> so he disables NAT. he configures policy routing, and places the policy
> statement on the correct interface. tries to telnet into the cisco router.
> He can do so. however, now he cannot reach the web server from the net. if
> he enables the http server on the Cisco router, he gets the Cisco router
> login screen from his browser.
>
> now the question is, why? that is, what is the reason that the two
> situations occur? with NAT enabled, he cannot telnet to the router. with
NAT
> disabled, he cannot browse the web server, even with policy routing in
> place.
>
> you may assume that all configurations are correct, both for NAT and for
> policy routing. At least that's what the two CCIE's who joined the
> discussion told us ;->
>
> answers late Monday.
>
> Chuck




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=15823&t=15822
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Help need to find a good reliable datacenter in NY [7:15959]

2001-08-13 Thread Tony Medeiros

Abovenet has a data center in you area.  There have a very good back bone
and IMNSHO,  they are a little easier to deal with than other provider you
mentioned.

See
www.above.net

Tony M.
#6172

- Original Message -
From: "Jonathan Chung" 
To: 
Sent: Monday, August 13, 2001 1:43 PM
Subject: Help need to find a good reliable datacenter in NY [7:15922]


> Hi everyone.
>
> I would like to know who can provide good reliable datacenter service in
NY
> city metro area.
>
> Basically, company that I am working for is looking for a datacenter which
> we can use it as pickup point for data feed from NYSE and CME (chicago
> Merchant Exchange ?) and reroute those data to overseas.
>
> Since I am a novice on this type of project, any info will be appreciated.
>
> I heard that Exodus is one of the excellent datacenter provider in my
area.
> I wish to know if anyone has more detailed info.
>
> Thank you very much.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=15959&t=15959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: HSRP [7:14135]

2001-08-13 Thread Tony Medeiros

Redundent routers and NAT really don't mix.  Remember NAT keeps a state
table.  If a translated packet leaves on router and comes back on another,
it will be dropped because there is no state on that router.  The PFC's
don't keep NAT information as part of the XTAG entries.

Workaround.. Use the Native IOS so each MSFC act as one.   No load
balancing but excellent failover.

Tony M.
#6172

- Original Message -
From: "Thomas" 
To: 
Sent: Monday, August 13, 2001 1:06 PM
Subject: Re: HSRP [7:14135]


> Hi All,
>
> I got kinda the same problem, but it is on the real 6509 w/ 2 sup and 2
> MSFCs.  Based on your message below, it seems to resolve the confusion
> between priority in groups.  However, beside NAT, I also have EIGRP
running.
> EIGRP does load balancing on both cards, is there a workaround for this?
>
> Also, let say I have Vlan 10 as the outside NAT interfaces on both MSFCs,
so
> now with the load balancing of EIGRP, the NATed package still don't know
> with VLAN 10 it should go to (VLAN 10 on the first card or the second
> card?).  Is it possible that I can have the same VLAN 10 on both cards,
but
> they are on different group?
>
> Thanks All in advance!  I really need your help here, since whoever setup
> the 6509 in our production didn't have it redundancy.  We tried to
configure
> this 6509 to do its primary job, redundancy while not breaking anything
else
> (NAT for instant).
>
> Thomas N.
>
>
> ""Kevin Wigle""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Correct, but if you use secondary ip addresses and a different group
> number
> > you can.
> >
> > If the original poster wanted 2 HSRP groups where one group was active
on
> > RouterA on netA and the other was active on RouterB on netB - both
groups
> > would co-exist and not bother each other.
> >
> > If RouterA failed then RouterB would become active on netB as well as
> > already active on netA.
> >
> > The opposite holds true of course.
> >
> > This is also helpful in trying to load balance HSRP by splitting the
user
> > community manually, half to RouterA and half to RouterB - and maintain
> fault
> > tolerance.
> >
> > Kevin Wigle
> >
> > - Original Message -
> > From: "Erick B."
> > To:
> > Sent: Monday, 30 July, 2001 06:51
> > Subject: Re: HSRP [7:14135]
> >
> >
> > > I don't quite understand what your asking, but...
> > >
> > > IOS will not let you configure the same HSRP/standby
> > > address or IP subnet on multiple LAN interfaces. You
> > > would have to use a different IP subnet on each
> > > Ethernet interface with a HSRP/standby address in that
> > > subnet.
> > >
> > > Were you asking that or ?
> > >
> > > --- BASSOLE Rock  wrote:
> > > > Hello group,
> > > >
> > > >
> > > > I want to know if there are problems on doing a
> > > > double HSRP (ethernet1 and
> > > > ethernet0)  with 2 routers (same configuration).
> > > > Have you ever incounter any
> > > > problems (Duplicate addresse, NAT, ...).
> > > >
> > > > Thank you.
> > > >
> > > > Rock BASSOLE
> > > > Til: +33 (0) 1 45 96 22 03
> > > [EMAIL PROTECTED]
> > >
> > >
> > > __
> > > Do You Yahoo!?
> > > Make international calls for as low as $.04/minute with Yahoo!
Messenger
> > > http://phonecard.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=15961&t=14135
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco 3660 Router Config [7:16048]

2001-08-14 Thread Tony Medeiros

Got a WINS server configured on the host you are testing?  You need that for
browsing across subnets.
Tony M.
#6172

- Original Message -
From: "Charles Perry" 
To: 
Sent: Tuesday, August 14, 2001 9:45 AM
Subject: Cisco 3660 Router Config [7:16048]


> Im not an expert just a cisco hack with a couple configs under my belt. I
> added another subnet to our network and set IP address to ethernet3/1 and
a
> couple access list entries. The problem is I can ping across the subnets
> fine, and can access resources (those not needing domain authorization) by
> IP but not by name, so therefore it will also not see the domain or browse
> the network. The new subnet also has no problm acessing the intenet via
the
> T1 on the router.
> Any ideas would be nice
>
> Configuration in attachment.
>
>
>
>
>
>
>
>
>
> [demime removed a uuencoded section named Document.rtf which was 120
lines]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16061&t=16048
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: ccna question [7:15958]

2001-08-16 Thread Tony Medeiros

Don't forget "Marcus of Queensbury" rules
T

- Original Message -
From: "Chuck Larrieu" 
To: 
Sent: Thursday, August 16, 2001 8:53 AM
Subject: RE: ccna question [7:15958]


> next generation test questions:
>
> when designing a network, CCNAs should pay particular attention to
>
> a) the 80/20 rule
> b) the 70/30 rule
> c) the 50/50 rule
> d) rule Britannia
>
> at what layer of the OSI model does the 70/30 rule operate?
>
> a) layer 1, because it relates to what bits are where on the wire
> b) layer 2, because the bits are organized into frames, which use mac
> addresses
> c) layer 3, because the 70/30 rule refers to network layer design
> d) layer 7, because a CCNA needs to apply his/her/its study to real world
> situations
>
> the 70/30 rule is
>
> a) the result of extensive study which revealed that the 80/20 rule was in
> error
> b) the absolute measure of good design
> c) the ratio of tab to tip when dining at a fine restaurant
> d) Moises Alou's eyesight metric
>
> hope I get my CCIE before I have to recertify for my CCNA! :->
>
> Chuck
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Priscilla Oppenheimer
> Sent: Tuesday, August 14, 2001 9:54 AM
> To: [EMAIL PROTECTED]
> Subject: RE: ccna question [7:15958]
>
>
> 70/30? Who made that one up!?! ;-)
>
> There's no exact number of course, but folk wisdom was always 80/20. 80%
of
> traffic stays local and 20% goes to a different part of the network. This
> really got blown out of the water in the last 4-5 years because of
> Intranets with corporate servers located centrally in server farms, a huge
> amount of traffic heading out the door to the Internet, VPN and
> remote-access traffic flowing back in the other way, a lot of AppleTalk
and
> Novell departmental servers being outlawed, etc. Some people have gone so
> far as to say the equation has switched. 20% is local now and 80% is
> non-local.
>
> You would have to check traffic flows and volume on your own network for a
> number you could really use. I have never seen 70/30. Is that really what
> Cisco expects you to learn now? And which do they say is local and which
is
> non-local?
>
> Priscilla
>
> At 12:42 AM 8/14/01, you wrote:
> >is that 80 local 20 non-local? with Cisco revising the number to 70 local
> >and 30 non-local?
> >
> >I refer to Priscilla Oppenheimer's Top Down Network Design ( don't argue
> >design without it :-> ) pp 20-21, the CID book written by Robert Padjen,
pp
> >26-27, and Howard Berkowitz's Designing routing and Switching
Architecture
> >  wow! ), pages 35 and 575.
> >
> >Yes by all means learn the Cisco answer for the tests. Just remember that
> >Cisco tests in certain respects are not particularly reflective of the
real
> >world, as at least three eminent real world experts indicate.
> >
> >Chuck
> >
> >
> >
> >-Original Message-
> >From: Albert Y. Pak [mailto:[EMAIL PROTECTED]]
> >Sent: Monday, August 13, 2001 9:03 PM
> >To: Chuck Larrieu; [EMAIL PROTECTED]
> >Subject: RE: ccna question [7:15958]
> >
> >
> >The current theory is 80/20. However, to pass CCNA exam, the answer is
> >70/30. ;-)
> >HTH
> >Albert
> >
> >-Original Message-
> >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> >Chuck Larrieu
> >Sent: Monday, August 13, 2001 11:31 PM
> >To: [EMAIL PROTECTED]
> >Subject: RE: ccna question [7:15958]
> >
> >
> >much as I hate to pass this one, because every response will hit the
> >moderator's queue (x is a forbidden word), I thought this an honest
> >question and that you were entitled to an answer.
> >
> >80/20 or 70/30 what?
> >
> >are you referring to the old "80 percent of your LAN traffic should be
> >local, and 20 percent should be non-local" rule of good design?
> >
> >I haven't seen the recent Cisco study materials, but from other reading,
I
> >believe that current theory is that you can't go by this rule any longer.
> >Internet access, shared services, centralized server farms, intranets,
all
> >have kinda blown all this local traffic versus non-local traffic
> percentages
> >by the wayside.
> >
> >to transform a phrase of Brian Eno's - the one Scott McNealy probably
> stole.
> >I know I sure did - the world is now the LAN.
> >
> >Chuck
> >
> >Eno: the recording studio is my synthesizer ( circa 1980 )
> >McNealy: the network is the computer ( circa 1996 )
> >Me: the telco network is the central office ( circa 1990 )
> >
> >-Original Message-
> >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> >Manjunath Shivaramaiah
> >Sent: Monday, August 13, 2001 7:46 PM
> >To: [EMAIL PROTECTED]
> >Subject: ccna question [7:15958]
> >
> >
> >hi
> >i have a doubt regarding lan design in ciscoIt is 80/20 or70/30
> ..in
> >x and 604-407 books it says it is 70/30...pl help me in this
> >regard...
> >I'm taking ccna exam shortly
> >
> >thanks
> >
> >manjunath.s
> 
>
> Priscilla Oppenheimer
> http://www.priscilla.com




Message Posted

Re: Cisco Cache Engine [7:16291]

2001-08-16 Thread Tony Medeiros

Works good, lasts a long time

Really, I have had good luck with it in transparent mode with WCCP.  The
other modes I don't know.
Tony M.
#6172
- Original Message -
From: "Sean Graham" 
To: 
Sent: Thursday, August 16, 2001 8:23 AM
Subject: Cisco Cache Engine [7:16291]


> We are looking to implement Cisco's Cache Engine, and I would like to get
> some of your views on it.
>
> Thanks,
>
> Sean.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=16342&t=16291
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



  1   2   >