Pix timeouts for www [7:20471]

2001-09-19 Thread TRAISTER, BLAKE (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

According to Cisco, the default timeout for a pix on www traffic
(traffic not enumerated in the timeout statement) is 60 minutes.

I am, however, apparently having issues with a traffic timeout and I
am trying to figure out if it is the pix or the f5 box that is
causing it.

We have a web server that is accessible via an F5 BigIP.  It is all
behind a pix.  When you go to the home page, it comes up no problem. 
However if you do a search on the site that has a large set of
results from the search, the connection is torn down...like..2
seconds into the search...is it necessary to specifically state a
timeout www traffic?

Blake

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use 

iQA/AwUBO6keV5jWtn+JGXXMEQJQowCgjvlLepJOpKOodl8laCcBgc5UXYsAoMhM
V6nMWFUoqP3YIvgvITDI6b/9
=pUqc
-END PGP SIGNATURE-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=20471t=20471
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: HSRP/Spanning Tree issue??? [7:19639]

2001-09-13 Thread TRAISTER, BLAKE (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Configs attached

Blake

- -Original Message-
From: Michael L. Williams [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 12, 2001 5:06 PM
To: [EMAIL PROTECTED]
Subject: Re: HSRP/Spanning Tree issue??? [7:19639]


You are correct that, not only should it work, but you don't need
Spanning
Tree unless you have more than one connection between the two
switches.

As an aside, make sure you are trunking on the link between the two
switches..

- From what you're described, I don't see why this wouldn't
work.

Can you e-mail me a copy of your configs (from the two 7200s and
3548s).
Perhaps that might help.

Mike W.


TRAISTER, BLAKE (SBCI)  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1



 I have 2 Cisco 7200s, with 3 interfaces.  We will call them
 routerleft and routerright.  They are connected via their ethernet
 interfaces to 2 switches:  Catalyst 3548XLs, switchleft and
 switchright.  The switches are divided into 3 vlans each:  vlan1,
 vlan2, vlan3.  The switches are connected via their Gi ports
 (essentially to mirror each other.

 So

 Router right fa1/0 goes to switchright:port 1, vlan 1, fa 1/1 to
 port 1, vlan2 (port 17), and fa 2/1 to port 1, vlan3 (port 33).
 Router left fa1/0 goes to switchleft:port 1, vlan 1, fa 1/1 to port
 1, vlan2 (port 17), and fa 2/1 to port 1, vlan3 (port 33).

 Each router interface is running HSRP...so routerright fa 1/0 is
 hsrp with router left fa 1/0 and so on with each interface

 Router right interfaces have priority preempt set to 120 and router
 left has priority preempt 100

 We are doing just fine until I plug router right into the switch
 right interfacesObviously there is a spanning tree loops and
 ports start blocking.

 So then...I turn off spanning tree in all vlansand the hsrp
 starts flapping.every 2 minutes or so there is a 30 second
 state change...

 Is there some way I can get the routers to shut up...let one be
 active the other be standby and still have everything connected?  I
 currently do it with Extreme Summit 48s..spanning tree is
 completely offand its works fine...

 Thanks!

 Blake

 -BEGIN PGP SIGNATURE-
 Version: PGPfreeware 6.5.8 for non-commercial use

 iQA/AwUBO5+db5jWtn+JGXXMEQK4OwCgypBjQX7CXGKJ+qv+JvLoOt4Yxm4Ani9N
 7KHMrR92fJ/sx4p43O8BJgZ4
 =x6bZ
 -END PGP SIGNATURE-
[EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use 

iQA/AwUBO6E4xZjWtn+JGXXMEQJ5MQCggJ2ttm+eMg7mMpaYDcUipJOu3cAAn3zA
jTqjYBqIO7tsvd3t3Ij8VEen
=ZewW
-END PGP SIGNATURE-
P
-- show running-config --


Building configuration...

Current configuration : 1820 bytes
!
version 12.1
service tcp-keepalives-in
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname flight-r2
!
enable secret 5 
enable password 
!
!
!
!
!
ip subnet-zero
!
!
!
!
!
!
interface FastEthernet0/0
 description Test to local lan
 ip address 216.65.215.120 255.255.255.240
 shutdown
 half-duplex
!
interface FastEthernet1/0
 description to PIX inside
 ip address 216.154.239.253 255.255.255.0
 no ip redirects
 duplex auto
 speed auto
 standby 3 timers 10 40
 standby 3 priority 100 preempt
 standby 3 ip 216.154.239.254
!
interface FastEthernet1/1
 description to http layer
 ip address 192.168.240.253 255.255.255.0
 no ip redirects
 duplex auto
 speed auto
 standby 5 priority 100 preempt
 standby 5 ip 192.168.240.254
!
interface FastEthernet2/0
 ip address 192.168.241.253 255.255.255.0
 no ip redirects
 speed auto
 full-duplex
 no mop enabled
 standby 7 priority 100 preempt
 standby 7 ip 192.168.241.254
!
interface FastEthernet2/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial3/0
 ip address 192.168.242.2 255.255.255.0
 fair-queue
 serial restart-delay 0
!
interface Serial3/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial3/3
 no ip address
 shutdown
 serial restart-delay 0
!
router eigrp 10
 redistribute static
 network 192.168.240.0
 network 192.168.241.0
 network 192.168.242.0
 network 192.168.248.0
 network 216.154.239.0
 auto-summary
 eigrp log-neighbor-changes
!
ip classless
ip route 0.0.0.0 0.0.0.0 216.154.239.249
ip route 206.170.129.192 255.255.255.192 192.168.242.1
no ip http server
!
no cdp run
snmp-server community  RO
!
!
line con 0
line aux 0
line vty 0 4
 password 
 login
!
end
Building configuration...

Current configuration:
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname idc-switch1
!
enable secret 5 
!
!
!
!
!
!
ip subnet-zero
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
 spanning-tree portfast
!
interface FastEthernet0/4
!
interface FastEth

HSRP/Spanning Tree issue??? [7:19639]

2001-09-12 Thread TRAISTER, BLAKE (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



I have 2 Cisco 7200s, with 3 interfaces.  We will call them
routerleft and routerright.  They are connected via their ethernet
interfaces to 2 switches:  Catalyst 3548XLs, switchleft and
switchright.  The switches are divided into 3 vlans each:  vlan1,
vlan2, vlan3.  The switches are connected via their Gi ports
(essentially to mirror each other.

So

Router right fa1/0 goes to switchright:port 1, vlan 1, fa 1/1 to port
1, vlan2 (port 17), and fa 2/1 to port 1, vlan3 (port 33).
Router left fa1/0 goes to switchleft:port 1, vlan 1, fa 1/1 to port
1, vlan2 (port 17), and fa 2/1 to port 1, vlan3 (port 33).

Each router interface is running HSRP...so routerright fa 1/0 is hsrp
with router left fa 1/0 and so on with each interface

Router right interfaces have priority preempt set to 120 and router
left has priority preempt 100

We are doing just fine until I plug router right into the switch
right interfacesObviously there is a spanning tree loops and
ports start blocking.

So then...I turn off spanning tree in all vlansand the hsrp
starts flapping.every 2 minutes or so there is a 30 second state
change...

Is there some way I can get the routers to shut up...let one be
active the other be standby and still have everything connected?  I
currently do it with Extreme Summit 48s..spanning tree is completely
offand its works fine...

Thanks!

Blake

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use 

iQA/AwUBO5+db5jWtn+JGXXMEQK4OwCgypBjQX7CXGKJ+qv+JvLoOt4Yxm4Ani9N
7KHMrR92fJ/sx4p43O8BJgZ4
=x6bZ
-END PGP SIGNATURE-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=19639t=19639
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: e-mail encryption [7:9109]

2001-06-20 Thread Traister, Blake (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If fsecure is easier to use than PGP, get it.  PGP has been a
complete nightmare for the mouse impaired (executrix/Marketeer)
types.

- -Original Message-
From: Chuck Larrieu [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 19, 2001 8:25 PM
To: [EMAIL PROTECTED]
Subject: RE: e-mail encryption [7:9109]


For internal use only, you may want to look into f-secure
http://www.fsecure.com/

Theirs is a user level encryption - i.e. files on hard drives and
server
drives are encrypted. They have a wide range of products. Obviously,
files
would have to be decrypted prior to sending to non f-secure users ;-

Chuck

- -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf
Of
anthony moore
Sent:   Tuesday, June 19, 2001 2:31 PM
To: [EMAIL PROTECTED]
Subject:e-mail encryption [7:9109]

Does anyone use any type of e-mail encryption for their entire
company.  I
have been asked to implement some type of program whereby all the
e-mail the
is sent out is encrypted.  Is this possible?  I know that you can
encrypt
between users that have one anothers' public keys but can you encrypt
anything that you send to those that don't even use encryption?

Thanks
[EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use 

iQA/AwUBOzDP25jWtn+JGXXMEQKKxgCg3hMuLenfhctlSJm5QTIW3VKvjaUAnRFS
S+xEoAdBlY+7eySq8lOft/PY
=yio5
-END PGP SIGNATURE-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=9206t=9109
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Catalyst 6509 and DHCP [7:408]

2001-04-12 Thread Traister, Blake (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

and none of the clients are showing up in your arp cache?

- -Original Message-
From: Vijay Ramcharan [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 12, 2001 2:49 PM
To: 'Traister, Blake (SBCI)'; Cisco Groupstudy. com Mailing list
(E-mail)
Subject: RE: Catalyst 6509 and DHCP [7:408]


Thanks.

I've included the new config below with the IP Helper address
command.  I've
tried with and without the helper address commands but neither seem
to work.
- From the Cat6509 SC0 int I can ping the DHCP IP server address
without any
problem.  From the MSFC I can ping the DHCP server IP address without
any
problem.  From the DHCP server I can ping any VLAN interface on the
MSFC as
well as a couple of 3500s that I've connected to the 6509s.

Core_Even (enable) sh conf
This command shows non-default configurations only.
Use 'show config all' to show both default and non-default
configurations.
..
..






...



..

begin
!
# * NON-DEFAULT CONFIGURATION *
!
!
#time: Thu Apr 12 2001, 16:51:21
!
#version 6.1(2)
!
set prompt Core_Even
!
#errordetection
set errordetection portcounter enable
!
#!
#vtp
set vtp domain tdnyc
set vtp pruning enable
set vlan 1 name default type ethernet mtu 1500 said 11 state
active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state
active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004
state
activ
e stp ieee
set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005
state
active st
p ibm
set vlan 2-9,11,15
set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003
state
acti
ve mode srb aremaxhop 7 stemaxhop 7 backupcrf off
!
#ip
set interface sc0 1 10.4.10.4/255.255.254.0 10.4.11.255

set ip route 10.4.2.0/255.255.255.0   10.4.10.2
set ip route 10.4.3.0/255.255.255.0   10.4.10.2
set ip route 10.4.4.0/255.255.255.0   10.4.10.2
set ip route 10.4.5.0/255.255.255.0   10.4.10.2
set ip route 10.4.6.0/255.255.255.0   10.4.10.2
set ip route 10.4.7.0/255.255.255.0   10.4.10.2
set ip route 10.4.8.0/255.255.254.0   10.4.10.2
set ip route 10.4.12.0/255.255.254.0   10.4.10.2
set ip route 10.4.14.0/255.255.255.0   10.4.10.2
set ip route 10.4.15.0/255.255.255.0   10.4.10.2
set ip route 0.0.0.0/0.0.0.0 10.4.10.2
!
#spantree
#vlan 1
set spantree priority 16384  1
#vlan 2
set spantree priority 8192   2
#vlan 3
set spantree priority 16384  3
#vlan 4
set spantree priority 8192   4
#vlan 5
set spantree priority 16384  5
#vlan 6
set spantree priority 8192   6
#vlan 7
set spantree priority 16384  7
#vlan 8
set spantree priority 8192   8
#vlan 9
set spantree priority 16384  9
#vlan 11
set spantree priority 16384  11
#vlan 15
set spantree priority 16384  15
!
#set boot command
set boot config-register 0x2
set boot system flash bootflash:cat6000-sup.6-1-2.bin
set boot system flash bootflash:cat6000-sup.5-5-5.bin
set boot system flash bootflash:cat6000-sup.5-5-2.bin
set boot system flash bootflash:cat6000-sup.5-3-4-CSX.bin
!
#qos
set qos enable
!
#port channel
set port channel 1/1-2 5
!
# default port status is enable
!
!
#module 1 : 2-port 1000BaseX Supervisor
!
#module 2 empty
!
#module 3 : 8-port 1000BaseX Ethernet
!
#module 4 : 48-port 10/100BaseTX Ethernet
set vlan 24/23-24
set vlan 44/40-48
set port auxiliaryvlan 4/1 4
set port auxiliaryvlan 4/2 4
set port auxiliaryvlan 4/3 4
set port auxiliaryvlan 4/4 4
set port auxiliaryvlan 4/5 4
set port auxiliaryvlan 4/6 4
set port auxiliaryvlan 4/7 4
set port auxiliaryvlan 4/8 4
set port auxiliaryvlan 4/9 4
set port auxiliaryvlan 4/10 4
set port auxiliaryvlan 4/11 4
set port auxiliaryvlan 4/12 4
set port auxiliaryvlan 4/13 4
set port auxiliaryvlan 4/14 4
set port auxiliaryvlan 4/15 4
set port auxiliaryvlan 4/16 4
set port auxiliaryvlan 4/17 4
set port auxiliaryvlan 4/18 4
set port auxiliaryvlan 4/19 4
set port auxiliaryvlan 4/20 4
set port auxiliaryvlan 4/21 4
set port auxiliaryvlan 4/22 4
set port auxiliaryvlan 4/23 4
set port auxiliaryvlan 4/24 4
set port auxiliaryvlan 4/25 4
set port auxiliaryvlan 4/26 4
set port auxiliaryvlan 4/27 4
set port auxiliaryvlan 4/28 4
set port auxiliaryvlan 4/29 4
set port auxiliaryvlan 4/30 4
set port auxiliaryvlan 4/31 4
set port auxiliaryvlan 4/32 4
set port auxiliaryvlan 4/33 4
set port auxiliaryvlan 4/34 4
set port auxiliaryvlan 4/35 4
set port auxiliaryvlan 4/36 4
set port auxiliaryvlan 4/37 4
set port auxiliaryvlan 4/38 4
set port auxiliaryvlan 4/39 4
set port auxiliaryvlan 4/40 4
set port auxiliaryvlan 4/41 4
set port auxiliaryvlan 4/42 4
set port auxiliaryvlan 4/43 4
set port auxiliaryvlan 4/44 4
set port auxiliaryvlan 4/45 4
set port auxiliaryvlan 4/46 4
set port auxiliaryvlan 4/47 4
set port auxiliaryvlan 4/48 4
set trunk 4/1  on dot1q 1-1005,1025-4094
set trunk 4/2  on dot1q 1-1005,1025-4094
set trunk 4/3  on dot1q 1-1005,1025-4094
set trunk 4/4  on dot1q 1-1005,1025-4094
set trunk 4/5  on dot1q 1-1005,1025-4094
set trunk 4/6

RE: Catalyst 6509 and DHCP [7:408]

2001-04-12 Thread Traister, Blake (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Beats me.  doesnt make any sense why the arp broadcasts arent being
forwarded.  Anything from CCO or TAC?

- -Original Message-
From: Vijay Ramcharan [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 12, 2001 4:19 PM
To: [EMAIL PROTECTED]
Subject: RE: Catalyst 6509 and DHCP [7:408]


ARP table of the MSFC below.

Core_Even_MSFC#sh arp
Protocol  Address  Age (min)  Hardware Addr   Type  
Interface
Internet  10.4.10.4   3   00d0.0247.9fff  ARPA   Vlan1
Internet  10.4.12.2   -   00d0.d33a.0434  ARPA   Vlan4
Internet  10.4.15.1   3   0030.7b96.acd0  ARPA   Vlan8
Internet  10.4.14.1   3   0030.7b96.acd0  ARPA   Vlan6
Internet  10.4.14.2   -   00d0.d33a.0434  ARPA   Vlan6
Internet  10.4.12.1   3   0030.7b96.acd0  ARPA   Vlan4
Internet  10.4.15.2   -   00d0.d33a.0434  ARPA   Vlan8
Internet  10.4.8.5-   .0c07.ac02  ARPA   Vlan2
Internet  10.4.12.6   3   0050.8bcd.feeb  ARPA   Vlan4
Internet  10.4.8.2-   00d0.d33a.0434  ARPA   Vlan2
Internet  10.4.15.5   -   .0c07.ac08  ARPA   Vlan8
Internet  10.4.10.1   3   0030.7b96.acd0  ARPA   Vlan1
Internet  10.4.14.5   -   .0c07.ac06  ARPA   Vlan6
Internet  10.4.12.4   -   .0c07.ac04  ARPA   Vlan4
Internet  10.4.10.2   -   00d0.d33a.0434  ARPA   Vlan1
Internet  10.4.12.5   0   0050.8bcd.fe56  ARPA   Vlan4
Internet  10.4.8.13   0030.7b96.acd0  ARPA   Vlan2
Internet  10.4.10.3   3   00d0.0247.13ff  ARPA   Vlan1
Internet  10.4.7.13   0030.7b96.acd0  ARPA   Vlan15
Internet  10.4.4.2-   00d0.d33a.0434  ARPA   Vlan7
Internet  10.4.6.13   0030.7b96.acd0  ARPA   Vlan11
Internet  10.4.5.2-   00d0.d33a.0434  ARPA   Vlan9
Protocol  Address  Age (min)  Hardware Addr   Type  
Interface
Internet  10.4.6.2-   00d0.d33a.0434  ARPA   Vlan11
Internet  10.4.5.13   0030.7b96.acd0  ARPA   Vlan9
Internet  10.4.7.2-   00d0.d33a.0434  ARPA   Vlan15
Internet  10.4.4.13   0030.7b96.acd0  ARPA   Vlan7
Internet  10.4.7.53   .0c07.ac0f  ARPA   Vlan15
Internet  10.4.3.13   0030.7b96.acd0  ARPA   Vlan5
Internet  10.4.2.13   0030.7b96.acd0  ARPA   Vlan3
Internet  10.4.10.10  3   0002.fde3.4080  ARPA   Vlan1
Internet  10.4.2.2-   00d0.d33a.0434  ARPA   Vlan3
Internet  10.4.10.11  3   0002.7d70.0980  ARPA   Vlan1
Internet  10.4.3.2-   00d0.d33a.0434  ARPA   Vlan5
Internet  10.4.12.23  0   00b0.8e87.b2dc  ARPA   Vlan4
Internet  10.4.12.34  0   0030.94c3.9749  ARPA   Vlan4
Internet  10.4.12.38  0   0030.94c3.9b41  ARPA   Vlan4
Internet  127.0.0.12  -   .2100.  ARPA   EOBC0/6
Internet  127.0.0.11  -   .1100.  ARPA   EOBC0/6
Core_Even_MSFC#

Vijay Ramcharan

- -Original Message-
From: Traister, Blake (SBCI) [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 12, 2001 5:59 PM
To: '[EMAIL PROTECTED]'; Traister, Blake (SBCI); Cisco
Groupstudy.
com Mailing list (E-mail)
Subject: RE: Catalyst 6509 and DHCP [7:408]



*** PGP Signature Status: good
*** Signer: Blake Traister  
*** Signed: 4/12/01 2:57:44 PM
*** Verified: 4/12/01 3:59:51 PM
*** BEGIN PGP VERIFIED MESSAGE ***

and none of the clients are showing up in your arp cache?

- -Original Message-
From: Vijay Ramcharan [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 12, 2001 2:49 PM
To: 'Traister, Blake (SBCI)'; Cisco Groupstudy. com Mailing list
(E-mail)
Subject: RE: Catalyst 6509 and DHCP [7:408]


Thanks.

I've included the new config below with the IP Helper address
command.  I've
tried with and without the helper address commands but neither seem
to work.
- From the Cat6509 SC0 int I can ping the DHCP IP server address
without any
problem.  From the MSFC I can ping the DHCP server IP address without
any
problem.  From the DHCP server I can ping any VLAN interface on the
MSFC as
well as a couple of 3500s that I've connected to the 6509s.

Core_Even (enable) sh conf
This command shows non-default configurations only.
Use 'show config all' to show both default and non-default
configurations.
..
..






...



..

begin
!
# * NON-DEFAULT CONFIGURATION *
!
!
#time: Thu Apr 12 2001, 16:51:21
!
#version 6.1(2)
!
set prompt Core_Even
!
#errordetection
set errordetection portcounter enable
!
#!
#vtp
set vtp domain tdnyc
set vtp pruning enable
set vlan 1 name default type ethernet mtu 1500 said 11 state
active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state
active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004
state

RE: Alternative to Prepanding

2001-04-09 Thread Traister, Blake (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Isnt that what BGP failover is for?

- -Original Message-
From: Howard C. Berkowitz [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 09, 2001 4:37 PM
To: [EMAIL PROTECTED]
Subject: Re: Alternative to Prepanding


Hi:

In a multihomed scenario, is there any alternative of
prepanding, to force internet community to prefer one
service provide on another ?

What if the client always want to use one path, and
the other path in case of catastrophe only ?

Thanks,

Khalid


I'm not sure what you mean by the client. If you mean the AS that 
originates the prefix advertisement, even if it prepends, that 
affects preference. It doesn't force anything.

Also, I'm not sure what you mean by "community."  If you refer to the
global routing system, you can't force it to do anything.  If you are
referring to the BGP community attribute, it doesn't inherently have 
any conditional control.

It sounds as if you want conditional advertisement:  advertise the 
prefix to the backup only if the primary is unreachable.
[EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use http://www.pgp.com

iQA/AwUBOtJK9pjWtn+JGXXMEQJefwCdH26Gr9kswI5r9rQ6W0NP4212H7IAn18e
eH6jrIJbmB1EoL3M3Girwe2Y
=m1sX
-END PGP SIGNATURE-
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Job Opening Senior Network Engineer

2001-04-04 Thread Traister, Blake (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Im still trying to find some documentation of HP Overview and EIGP. 
Ill never stay at the pace if these people keep coming out with stuff
and dont even tell their customers

BWAHAHAHAHAHAHAHAHAHAHA

- -Original Message-
From: Scott [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 04, 2001 8:16 AM
To: CiscoStudyGroup
Subject: Re: Job Opening Senior Network Engineer


well it sounds like this person who posted this opportunity is the a
typical
recruiter!!!  Sees a bunch of buzz words and throws as many in one
listing
as possible.  This person needs to split this listing into three
different
listings and offer less money!!!

P.S.  God has only created one man that is perfect so far!
- - Original Message -
From: Michael Linehan [EMAIL PROTECTED]
To: CiscoStudyGroup [EMAIL PROTECTED]
Sent: Wednesday, April 04, 2001 11:03 AM
Subject: Re: Job Opening Senior Network Engineer


 C'mon guys this is a joke right. You took like three job postings
 and made 
them one,
 right.. If a guy like this exists I may have to kiss his feet. I
 don't 
think my religous
 beliefs would allow that however.

 Mike Linehan
 Whatever certs I have I'm not even close to this guy. Whoever he
 is. 


 Circusnuts wrote:

  Man- I wanna meet this person... C++, Viso proficient, CCIE with
  5 
years,
  deals directly with customers, possible masters degree candidate
   
travels
  over half the time.
 
  - Original Message -
  From: "Butler, Gary" [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, April 03, 2001 9:15 PM
  Subject: RE: Job Opening Senior Network Engineer
 
   200K   ;-) - Even at that money I would wager they will have a
   hard 
time
   filling that position.  Do I have my head where the sun don't
   shine or 
do
   they?  ;-)
   Gary Butler
  
  
   -Original Message-
   From: Lisa Marie Belong [mailto:[EMAIL PROTECTED]]
   Sent: Tuesday, April 03, 2001 5:40 PM
   To: '[EMAIL PROTECTED]'
   Subject: Job Opening Senior Network Engineer
  
  
   Hello,
  
   We are a company located in Pleasanton, CA. (near Silicon
   Valley). We 
have
   an opening for Senior Network Engineer. Please see the
   following job description. If you are interested please contact
   [EMAIL PROTECTED]
  
   Position: Senior Network Engineer
  
   Position Description: Provide engineering services and support
   for 
  Federal,
   State, and Commercial customers, engineering and designing
   network migrations, upgrades that include complex routing, and
   intranet  
extranet
   security designs.
  
   Job Requirements:
   * Must have CCIE Cisco Certification
   * BA or BS degree preferred
   * Ability to document and provide in-depth reporting and
   analysis
   * 5 years of industry experience
   * 50-75% travel
   * Ability to work with a varied range of customer skill levels
   and knowledge
  
   Projects - Scope/Task
   * Assist with resolution of design issues and document
   accordingly
   * Assist with implementation plan
   * Identify risks and issues of conversion from existing design
   to new production design and document accordingly
   * Provide migration assistance to minimize or alleviate risks,
   where applicable
   * Identify the required maintenance testing and monitoring
   plan tools required to adequately monitor and maintain the
   implemented configuration
   * Assist in the disaster recovery design issues, as identified
   * Assist in implementing Core production enhancement
   * Assist with network diagrams and appropriate documentation
   identifying the physical and logical network paths and
   connections * Assist with technical network equipment design
   and
   implementation as necessary
   * Hands-on experience with IP, SNA, EGIP, RIP, BGP4
   * Hands-on experience with e-business, high availability
   design
   * Proficient with VOIP, FOIP, and ATM
  
   Leadership/Supervision/ Project Management
   * Team leader-engineering programs recognized as one of the
   two top in country
   * Ability to Supervise and direct as necessary
   * Enterprise Management project
   * Network Reconfiguration
   * Create successful team relationships
  
  
  
  
  
   Network and Computer Skills
   Proficient in Software programming
   * Sun Net Manager, HP overview and other enterprise software
   * HP/ Network General Sniffer Skills and other network
   analysis
   * Programming experience with C++, PERL, KSH, Bourne Shell,
   PerlCGI, and others
   * Cisco IOS/PIX Firewalls /Cisco Switch IOS
   * Ability to setup and Maintain Cisco Secure, Cisco Works
   2000, and Cisco Registrar
   * Extensive experience with ATM, FDDI, Gigabit, and Fast
   Ethernet networks including platforms: 7500 series, 4000
   series, 
2500/2600
   series, 6509, 8510, LS1010, 5500, AS5300, PIX Firewall, Check
   Point Firewall, IP Chains Firewall
  
   Network Security Skills, Desired
  
   * VPN Configuration CISCO PIX, Check point VPN, Sonic Wall,
   Altiga 

RE: port monitoring software

2001-04-03 Thread Traister, Blake (SBCI)

I use mrtg for rmon stuff.  Its not for instantaneous alarms.  It just does
snmp gets and makes html pages and gifs.  It works extrememly well and has
been invaluable in measuring bandwidth...especially when exodus tries to
pull a fast one on us for our monthly usage bills.

Whatsup works really well and is really cheap too.  We would all like
something like OpenView or Unicenterbut sometimes the shotgun approach
causes more headaches in the long run

Blake

-Original Message-
From: Christopher Kolp [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 03, 2001 9:22 AM
To: 'Scott'; 'Allen May'; [EMAIL PROTECTED]
Subject: RE: port monitoring software


www.ipswitch.com

I use webtrends enterprise suite, its integrated and i happened to stumble
upon it..

I've heard big brother is okay as well



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 Scott
 Sent: Tuesday, April 03, 2001 11:49 AM
 To: Allen May; [EMAIL PROTECTED]
 Subject: Re: port monitoring software


 I assume that would be at www.whatsup.com.  Is this correct?
 - Original Message -
 From: Allen May [EMAIL PROTECTED]
 To: Scott [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Sent: Tuesday, April 03, 2001 11:48 AM
 Subject: Re: port monitoring software


  Whatsup Gold is nice.  I'm sure there are better/cheaper
 but this one
  definitely works.
 
  Allen
 
  - Original Message -
  From: "Scott" [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, April 03, 2001 10:16 AM
  Subject: port monitoring software
 
 
   I am in need of a software program that will monitor the
 ports on a
  Catalyst
   5505 and log when ports go down and up etc...
  
   If anyone has any information on this topic please let me know
  
   Thanks,
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Job Opening Senior Network Engineer

2001-04-03 Thread Traister, Blake (SBCI)

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Boy...I think you are right.  They were doin ok until they started in
with all the programming crap.  I loved the HP Overview reference
too..is that PRE or POST Openview ;).  Also, I noticed I would have
to be proficient in EIGP.  

If I dont have a CCIE and I cant write code, but I can do most of the
rest of that, is that worth 150k?

- -Original Message-
From: Butler, Gary [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 03, 2001 3:16 PM
To: '[EMAIL PROTECTED]'
Subject: RE: Job Opening Senior Network Engineer


200K   ;-) - Even at that money I would wager they will have a hard
time
filling that position.  Do I have my head where the sun don't shine
or do
they?  ;-)
Gary Butler


- -Original Message-
From: Lisa Marie Belong [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 03, 2001 5:40 PM
To: '[EMAIL PROTECTED]'
Subject: Job Opening Senior Network Engineer


Hello,

We are a company located in Pleasanton, CA. (near Silicon Valley). We
have
an opening for Senior Network Engineer. Please see the following job
description. If you are interested please contact
[EMAIL PROTECTED]

Position: Senior Network Engineer

Position Description: Provide engineering services and support for
Federal,
State, and Commercial customers, engineering and designing network
migrations, upgrades that include complex routing, and intranet 
extranet
security designs.

Job Requirements:
*   Must have CCIE Cisco Certification
*   BA or BS degree preferred 
*   Ability to document and provide in-depth reporting and
analysis
*   5 years of industry experience
*   50-75% travel
*   Ability to work with a varied range of customer skill levels
and knowledge

Projects - Scope/Task
*   Assist with resolution of design issues and document
accordingly
*   Assist with implementation plan
*   Identify risks and issues of conversion from existing design
to new production design and document accordingly
*   Provide migration assistance to minimize or alleviate risks,
where applicable
*   Identify the required maintenance testing and monitoring
plan tools required to adequately monitor and maintain the
implemented
configuration
*   Assist in the disaster recovery design issues, as identified
*   Assist in implementing Core production enhancement  
*   Assist with network diagrams and appropriate documentation
identifying the physical and logical network paths and connections
*   Assist with technical network equipment design and
implementation as necessary
*   Hands-on experience with IP, SNA, EGIP, RIP, BGP4
*   Hands-on experience with e-business, high availability
design
*   Proficient with VOIP, FOIP, and ATM

Leadership/Supervision/ Project Management
*   Team leader-engineering programs recognized as one of the
two top in country
*   Ability to Supervise and direct as necessary
*   Enterprise Management project
*   Network Reconfiguration 
*   Create successful team relationships
  

 


Network and Computer Skills
Proficient in Software programming
*   Sun Net Manager, HP overview and other enterprise software
*   HP/ Network General Sniffer Skills and other network
analysis 
*   Programming experience with C++, PERL, KSH, Bourne Shell,
PerlCGI, and others
*   Cisco IOS/PIX Firewalls /Cisco Switch IOS
*   Ability to setup and Maintain Cisco Secure, Cisco Works
2000, and Cisco Registrar
*   Extensive experience with ATM, FDDI, Gigabit, and Fast
Ethernet networks including platforms: 7500 series, 4000 series,
2500/2600
series, 6509, 8510, LS1010, 5500, AS5300, PIX Firewall, Check Point
Firewall, IP Chains Firewall

Network Security Skills, Desired

*   VPN Configuration CISCO PIX, Check point VPN, Sonic Wall,
Altiga (Now Cisco), Linux (Swan Tunnelv) or similar firewall products
configurations
*   Syslong realtime and historical analysis using custom Perl
Scripts
*   SPAM and Virus Control
*   Frequently used SSH, NMAP, SNORT, and other freeware tools
*   Ability to write authentication programs that use the
Blowfish algorithms
*   Experience with Apache, openSSI, Certificates
*   Experienced with Netscape Proxy and Netscape Web servers
including NSAPI
*   Ability to develop and implement Network Policy plan and
Adherence Measure

Stealth Network Communications offers state-of -the -art
communication
solutions for both government and commercial customers like the
Library of
Congress and the Oakland Raiders.  Since our founding in 1994, we
have
designed, implemented and managed integrated voice  data systems and
networks 

Passed CCNA2.0

2000-12-20 Thread Traister, Blake (SBCI)

Well I finally did it.  I overcame my complete phobia of testing and I
passed with an 859 .  I took ICND last May, and was so freaked about the
test, I avoided it, even though my instructor told us all to take it ASAP.  

Unfortunately, my work environment doesnt even use lots of what I learned in
class...we use EIGRP, ip subnet zero space, classless routing, etc...so I
never got to do much practice except on access lists.  

It was tricky and vague at timesbut thank you for your help (I am
somewhat of a lurker here...)

Blake Traister
Senior Network Engineer
CCNA
SBC Interactive Media
626 585 2825

This e-mail and any files transmitted with it are the property of SBC, are
confidential, and are intended solely for the use of the individual or
entity to whom this e-mail is addressed. If you are not one of the named
recipient(s) or otherwise have reason to believe that you have received this
message in error, please notify the sender at 626 585 2825 and delete this
message immediately from your computer. Any other use, retention,
dissemination, forwarding, printing, or copying of this e-mail is strictly
prohibited. 

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: cabletron [3:81]

2000-10-25 Thread Traister, Blake (SBCI)

Cabletron is the biggest piece of sh*t. They are a HORRIBLE and borderline
DISHONEST company.  We bought their SPEL software and 3 training
classes...once we upgraded NT to SP5, SPEL stopped working and we needed to
pay another 3500.00 to upgrade it.

We signed up for the training classes, then cancelled due to a company
urgencyand they still debited our account with the classes.

Stay away from these people..

-Original Message-
From: lawrence sculark [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 25, 2000 8:54 AM
To: [EMAIL PROTECTED]
Subject: cabletron [3:81]


ccna's ccnp's ccie's what you think abou this article...


From: Lawrence Sculark PMI 
To: [EMAIL PROTECTED] 
  Subject:
 
  Cabletron Systems Continues Leadership in the Modular Layer 3 Switching
  Market According to Dell'Oro Group
  Subsidiaries Enterasys Networks' and Riverstone Networks' SSR Achieves 
The
  Number One Position In Total Modular Layer 3 Port Shipments Worldwide
  ANDOVER, Mass.-- Cabletron Systems today announced that for the sixth
  consecutive quarter, the SmartSwitch Router is number one in market 
share
  in the rapidly growing modular Layer 3 switching market. According to 
the
  Dell'Oro Group's second quarter report, Cabletron's SmartSwitch Router
  held the number one position in worldwide modular Layer 3 ports shipped,
  with 33.9% of the market. BUSINESS WIRE 8/16/00
 

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=3i=81t=81
--
To unsubscribe from the Jobs list, send a message to
[EMAIL PROTECTED] with the body containing:
unsubscribe jobs

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: line protocol down

2000-09-15 Thread Traister, Blake (SBCI)

I think turfing your mail before its delivered is a better option.  Thats my
usual fix for cowards and primadonnas.  Thanks for reminding me why I do
that.  Keep your trap shut...you are a brave little fellow.  You are also in
the wrong place.

Darth

-Original Message-
From: Feliz, Edgar [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 13, 2000 3:41 PM
To: CNN; [EMAIL PROTECTED]
Subject: RE: line protocol down


I do not think I owe him an apology, and I have the right to speak my mind.
Follow your own advice and ignore the message if you do not like it, and
keep your trap shut.
 
EF

-Original Message-
From: CNN [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 13, 2000 6:09 PM
To: [EMAIL PROTECTED]
Subject: Re: line protocol down


Edgar,

Don't you see everybody here is trying to help? That's what the purpose of
this group, not only people ask questions, but we all watch and learn from
them. 

I think you own an apology to Jason. You can always ignore the messages if
you do not like it and keep your mouth shut. 

 
 
""Feliz, Edgar""   mailto:[EMAIL PROTECTED] [EMAIL PROTECTED]
wrote in message  A1951EBFDB75D31188E200805F6FEE71B7FACF@SNYC1NT02">news:A1951EBFDB75D31188E200805F6FEE71B7FACF@SNYC1NT02
A1951EBFDB75D31188E200805F6FEE71B7FACF@SNYC1NT02">news:A1951EBFDB75D31188E200805F6FEE71B7FACF@SNYC1NT02...
 Jason,
 
 it is OK not to understand something , and ask questions, but you have no
 clue, and expect others who are not getting paid to do YOUR job to do it
for
 you. Why should we help you fix the problems YOU are getting paid to fix.
 Get some training, and study, help yourself. If you want my help the price
 is $100.00 per hour at a minimum.
 
 My .02
 
 EF 
 
 -Original Message-
 From: Yee, Jason [  mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, September 13, 2000 1:56 AM
 To: cisco@groupstudy. com (E-mail)
 Subject: line protocol down
 
 
 
 hi , 
 
 I have problems with my frame-relay serial link attatched is the router
 configuration
 
 physical layer confirmed is ok as carrier is up but my serial interface
 still showing interface up line protocol down
 
 Any inputs will be greatly appreciated
 
 
 thanks
 
 Jason
 
 **NOTE: New CCNA/CCDA List has been formed. For more information go to
  http://www.groupstudy.com/list/Associates.html
http://www.groupstudy.com/list/Associates.html
 _
 UPDATED Posting Guidelines:  http://www.groupstudy.com/list/guide.html
http://www.groupstudy.com/list/guide.html
 FAQ, list archives, and subscription info:  http://www.groupstudy.com
http://www.groupstudy.com
 Report misconduct and Nondisclosure violations to
mailto:[EMAIL PROTECTED] [EMAIL PROTECTED]
 

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Would you back-burner your CCIE training for...

2000-09-13 Thread Traister, Blake (SBCI)

Im very envious of all you people that have jobs with labs and lab time (or
at least after hours availability).  Frankly, if I had a job like that,
there would be no way I would take this Pre IPO job that Mr Thomas is
describing.  I work for an SBC affilliate, so I can only hope that the upper
management from SBC have finally taken the red pill.  
 
It sounds like a fabulous opportunity to me.  I have no problems with
jumping in to heavy workloads as long as I have support.  Since I dont lose
my CCIE studying, its not that big of a loss to me. 
 
 

-Original Message-
From: Raymond Thomas [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 08, 2000 1:46 AM
To: Jobs@Groupstudy. Com
Subject: Would you back-burner your CCIE training for...


Hello all =) I have been working on a search for the PreIPO company that I
emailed about last week and I found out something yesterday that I didn't
know about. Since the company wants to go public by the end of this month,
the workload with this company will be heavy for all, especially for the
engineers. It's already heavy because that's the way it goes with any
startup company. But anyhow, the case is the my candidate will not be able
to study for his CCIE for a while. He will have a lot of hands on with Cisco
solutions, but no time for additional training for the first year. The
trade-off however, is stock options and what they most likely be worth. The
company is going public the end of this month. The upper management team
were the upper management from companies like Nortel, Bay, Ascend, Cisco,
SBC and other power-house organizations. They were founded in 98 and already
raised 95M in VC funding. They strong partnerships with other organizations
in the industry. Just a lot of other details involved as well.
 
My question to all is, would you back burner your CCIE training for a while
for a chance of the options which you'll know the value of in a short amount
of time, or would you rather pass because CCIE is a must, ASAP?
 
 
God bless to all =)
Raymond Thomas
Lewis Consultants International, Inc.
295 Northern Blvd Suite 302
Great Neck, NY 11021
(516)498-2300 ext. 103
(516)498-1749 fax
(917)444-1334 pager
Web: http://lewisconsultants.com http://lewisconsultants.com/  
 

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



EIGRP and Load Balancing

2000-08-31 Thread Traister, Blake (SBCI)

I have a network that is all part of an EIGRP community.  2 routers (using
hsrp internally) are direct connected to 2 other routers through 2 T1s.
Does EIGRP automatically load balance the 2 lines?  Here is a (lousy
Diagram)


_10.1.1.2(E0) r3
192.168.253.1(s0)-192.168.253.2
(s0)-r4-192.168.251.225(e0)_
10.1.1.1
192.168.251.226 (HSRP)
_10.1.1.3(E0) r1
192.168.252.1(s0)---192.168.252.2(s0)-r2-192.168
.251.224(e0)_

So anyone from 10.1.1.1 going to 192.168.251.0, the 2 lines SHOULD ideally
load balance...Will EIGRP aoutmatically do this?

Blake Traister
Senior Network Engineer
SBC Interactive Media
626 585 2825

Packet Lube is for everyone, not the fortunate few...

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: question on ip packet

2000-08-17 Thread Traister, Blake (SBCI)

Im curious

How does a person get a CCNA without knowing whats in an IP packet.  Get a
sniffer and look.

Blake Traister
WAN/LAN Engineer
SBC Interactive Media
626 585 2825
[EMAIL PROTECTED]

At your service!


-Original Message-
From: Luan Kim [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 3:11 PM
To: [EMAIL PROTECTED]
Cc: Naasief Edross
Subject: question on ip packet


Can someone lighten me up as to what's inside an "ip packet"?  Is there a
udp/tcp header in it?  Is there a mac-address in it?  Thanks for any
input.




Luan T. Kim, MCSE, CCNA*
Systems/Network Infrastructure Engineer*
MP3.COM, INC.  http://www.mp3.com  *
Phone: 858-623-7341Cell:  858-382-3055 * 
Fax:   858-623-7400Email: [EMAIL PROTECTED] *



___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]