Re: RE: NOBODY emails [7:72997]

2003-07-25 Thread Vajira Wijesinghe
ios bug has hit the mailing lists too...


- Original Message -
From: Antero Vasconcelos 
Date: Friday, July 25, 2003 4:21 pm
Subject: RE: NOBODY emails [7:72997]

 I4m just beeing tired of that person.
 
 antero
 
 -Original Message-
 From: Taufik Kurniawan [mailto:[EMAIL PROTECTED]
 Sent: sexta-feira, 25 de Julho de 2003 07:15
 To: [EMAIL PROTECTED]
 Subject: Re: NOBODY emails [7:72997]
 
 
 I got .. about 10 emails
 
 
 At 03:56 25/07/2003 +, Puckette, Larry (TIFPC) wrote:
 Is anybody else receiving multiple emails from 
 [EMAIL PROTECTED] that
 are empty??
 
 Larry Puckette
 Network Analyst
 Temple Inland
 [EMAIL PROTECTED]
 512-434-1838
 Where there is no idol but money and power, there is no hope for 
 integrity.
   -Original Message-
 From:   Maximus  [mailto:[EMAIL PROTECTED]
 Sent:   Thursday, July 24, 2003 9:02 PM
 To: [EMAIL PROTECTED]
 Subject:RE: Vty access class [7:72990]
 
 I believe the standard ACL should be enough since your already 
 specifyingtransport input ssh on line vty 0 4.
 
 Just my $0.02
 
 Jablonski, Michael wrote:
  
   I'm having a bit of trouble with extended access-lists for vty
   access.
   Basically I'd like to setup an extended access list that only
   allows ssh
   access from certain IPs, but after creating the list and
   applying it to the
   VTY I lose access.  But if I use a standard acl only allowing
   certain IPs it
   works fine...
  
   ip access-list extended local_shell
 permit tcp host 192.168.1.2 host 192.168.1.1 eq 22
  
   vty 0 4
   access-class local_shell in
   transport input ssh
  
   Is the standard enough  is the above over-kill?
  
   Thanx,
   mkj
 

***
 Este email assim como os ficheiros que possa ter em anexo sao 
 confidenciaise para uso exclusivo da pessoa ou organizacao para o 
 qual foi enviado. Se
 recebeu esta mensagem por engano por favor notifique a Compta 
 atraves do
 endereco [EMAIL PROTECTED]
 
 Esta mensagem foi verificada pelo sistema MAILsweeper nao tendo sido
 encontrados virus. http://www.mimesweeper.com
 
 MAILsweeper - Modulo da suite MIMEsweeper, solucao de filtragem de 
 conteudoscomercializada pela Compta SA.
 
 A Compta SA detem o mais alto nivel de especializacao MIMEsweeper, 
 tendosido reconhecida pela Clearswift como Premier Partner.
 

***
 This message is confidential and may contain privileged 
 information intended
 solely for the named addressee(s). It may not be used or disclosed 
 exceptfor the purpose for which it has been sent.
 
 If you are not the intended recipient, you must not copy, 
 distribute or take
 any action in reliance on it. If you have received this message in 
 error,please notify Compta by emailing [EMAIL PROTECTED] 
 quoting the sender and
 delete the message and any attached documents.
 
 This footnote confirms that this email message has been swept by 
 MIMEsweeperfor Content Security threats, including computer viruses
 

***
 Nondisclosure violations to [EMAIL PROTECTED]
- (on sprinter)

The information contained in this email is confidential and is meant to be
read only by the person to whom it is addressed.Please visit
http://www.millenniumit.com/legal/email.htm to read the entire
confidentiality clause.

-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=73021t=72997
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: do you know why? [7:72352]

2003-07-16 Thread Vajira Wijesinghe
Now i could narrow down the problem little bit.

I observe this is happening ONLY to some Lantronix and Annex Terminal
servers at outside
zone.(where i gave the name server-A). Sun servers on the same subnet as of
these
terminal servers, do NOT show this abnormal behaviour and they respond
straight away.

Therefore this cannot be
- a configuration issue
- translate table issue

Has anyone of you guys came across any inter-operability issues of these
Terminal server
brands with Cisco?

thanks.



Wilmes, Rusty wrote:

 sounds like from b  a you dont have an nat xlate established.

 when you go from a  b it creates the xlate so that b  a starts working.

 We had a problem after upgrading from 6.1.1 to 6.3 where one of our vpn
 partners couldn't get in til we pinged a host on their side.  Error in the
 syslog was a deny due to no xlate.  We were also losing NAT to arbitrary
 addresses on port 80.  We rolled back to 6.1.4 (the latest GD and all is
 well).

 What version are you on?

 -Original Message-
 From: Vajira Wijesinghe [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, July 15, 2003 3:23 PM
 To: [EMAIL PROTECTED]
 Subject: do you know why? [7:72352]

 I have a pix firewall and i have a strange problem.
 If any one of you have come across this pls let me know the solution.

 I have few servers at both sides of the PIX.
 eg. Server-A at Outside zone and Server-B at Inside zone.

 1. When I ping from Server-B to Server-A, I get request timeout.
 2. Now I go to Server-A and start a ping to Server-B. It works fine.
 3. Then again I go back to Server-B to ping to Server-A, and now it
 starts pinging!!!

 Can anyone of you explain this???
 I need to get this thing resloved and straight away ping from B to A.
 Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=72419t=72352
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Re: do you know why? [7:72352]

2003-07-15 Thread Vajira Wijesinghe
What I have is exactly 6.3
So it looks like a bug in the version?
Thanks a lot Wilmes, for your observation and sharing with everyone.


Wilmes, Rusty wrote:

sounds like from b  a you dont have an nat xlate established. 

when you go from a  b it creates the xlate so that b  a starts working.

We had a problem after upgrading from 6.1.1 to 6.3 where one of our vpn
partners couldn't get in til we pinged a host on their side.  Error in the
syslog was a deny due to no xlate.  We were also losing NAT to arbitrary
addresses on port 80.  We rolled back to 6.1.4 (the latest GD and all is
well).  

What version are you on?

-Original Message-
From: Vajira Wijesinghe [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 15, 2003 3:23 PM
To: [EMAIL PROTECTED]
Subject: do you know why? [7:72352]


I have a pix firewall and i have a strange problem.
If any one of you have come across this pls let me know the solution.

I have few servers at both sides of the PIX.
eg. Server-A at Outside zone and Server-B at Inside zone.

1. When I ping from Server-B to Server-A, I get request timeout.
2. Now I go to Server-A and start a ping to Server-B. It works fine.
3. Then again I go back to Server-B to ping to Server-A, and now it 
starts pinging!!!

Can anyone of you explain this???
I need to get this thing resloved and straight away ping from B to A.
Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=72358t=72352
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


HSRP timer dispute [7:64658]

2003-03-06 Thread Vajira Wijesinghe
Hi group,

Let me apologise first for forwarding this stupid question as a 
networking engineer. But i need you guy's answers just to show to my 
client who doesnot believe what i'm saying.

We have two 6509's connected by 4-gig etherchannel and configured HSRP 
groups in them for the default gateway redundancy of each VLAN.
As you all know, default hello time is 3 sec and hold time is 10 sec.

I have reconfigured these timers to hello 1 sec and hold 4 sec.

Now client is unhappy because effectively I have increased the rate of 
hello packet sending by 3 times. He is worrying about the amount of 
hello traffic I have infused to this gigabit network. 

Does any one of you have any comment?
Thanks
- (on postoffice)

The information contained in this email is confidential and is meant to be
read only by the person to whom it is addressed.Please visit
http://www.millenniumit.com/legal/email.htm to read the entire
confidentiality clause.

-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=64658t=64658
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


Software WAN simulators [7:60007]

2002-12-31 Thread Vajira Wijesinghe
Hi Group,
Does anyone know about a SOFTWARE WAN simulator which can do following
general simulations
- delay generation
- error generation
- WAN speed emulation

What I mean by a software simulator is - a piece of software that can
influence the flow if an IP packet stream between two IP devices, which
is meant to be across a WAN.

Thanking in advance,
Vajira
- (on postoffice)

The information contained in this email is confidential and is meant to be
read only by the person to whom it is addressed.Please visit
http://www.millenniumit.com/legal/email.htm to read the entire
confidentiality clause.

-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=60007t=60007
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: multiple Individual T1 termination --urgent [7:47944]

2002-07-04 Thread Vajira Wijesinghe

Hi Group,

Thank you very much for your valuable comments, arguments and
suggestions made on the above subject.
It really helped me to reveal what is hiding at the customer premises.

In fact we had to bid for re-structuring the client's existing network
equipment. The client continually insisted that they are having is
individual T1's. Further, we couldn't get an opportunity to inspect the
site and even the client couldn't reveal the type of current routers
used. bit tuff job.

I had to forward some of the emails received from you'all to the client
to convince them thay should be having T3's. Unfortuately the network
was maintained by some third party and client was not too sure. However
after some time, client confirmed that they are having
T3'sinstead of T1's, with some apologies..

In fact, this is first time I came across a requirement of 188 T1's to
connect. That's why I check with the group to see whether somebody has
done it before..:))

So thanks again roberts, craig, brian, chuck, howard, peter, mike,
phillip and nrf for the valuable input you have given.

Take care.
- (on postoffice)

The information contained in this email is confidential and is meant to be
read only by the person to whom it is addressed.Please visit
http://www.millenniumit.com/legal/email.htm to read the entire
confidentiality clause.

-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48081t=47944
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: multiple Individual T1 termination --urgent [7:47944]

2002-07-04 Thread Vajira Wijesinghe

sorry
whole project is on NDA signed.
that's why so many restrictions..
least i can say is its on financial sector.


Roberts, Larry wrote:

 Wow, that makes be feel a little better, although I am still baffled buy
the
 sheer number T-3's required for that. I'm curious though what type of
 business is this? Can you at least throw us a bone...
 Thanks

 Larry


 -Original Message-
 From: Vajira Wijesinghe [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, July 04, 2002 3:12 AM
 To: [EMAIL PROTECTED]
 Subject: Re: multiple Individual T1 termination --urgent [7:47944]

 Hi Group,

 Thank you very much for your valuable comments, arguments and suggestions
 made on the above subject. It really helped me to reveal what is hiding at
 the customer premises.

 In fact we had to bid for re-structuring the client's existing network
 equipment. The client continually insisted that they are having is
 individual T1's. Further, we couldn't get an opportunity to inspect the
site
 and even the client couldn't reveal the type of current routers used.
 bit tuff job.

 I had to forward some of the emails received from you'all to the client to
 convince them thay should be having T3's. Unfortuately the network was
 maintained by some third party and client was not too sure. However after
 some time, client confirmed that they are having T3'sinstead of
 T1's, with some apologies..

 In fact, this is first time I came across a requirement of 188 T1's to
 connect. That's why I check with the group to see whether somebody has done
 it before..:))

 So thanks again roberts, craig, brian, chuck, howard, peter, mike, phillip
 and nrf for the valuable input you have given.

 Take care.
 - (on postoffice)

 The information contained in this email is confidential and is meant to be
 read only by the person to whom it is addressed.Please visit
 http://www.millenniumit.com/legal/email.htm to read the entire
 confidentiality clause.

 -
- (on postoffice)

The information contained in this email is confidential and is meant to be
read only by the person to whom it is addressed.Please visit
http://www.millenniumit.com/legal/email.htm to read the entire
confidentiality clause.

-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48097t=47944
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



multiple Individual T1 termination --urgent [7:47944]

2002-07-02 Thread Vajira Wijesinghe

Hi Group,

I have a client who needs 188 T1 (all 1.544Mb serial lines) terminations
to be done on the central site.
Network is hub and spoke fashion.
Pls advise the suitable Cisco router/routers on the central site, for
this purpose.

Thanks.
- (on postoffice)

The information contained in this email is confidential and is meant to be
read only by the person to whom it is addressed.Please visit
http://www.millenniumit.com/legal/email.htm to read the entire
confidentiality clause.

-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=47944t=47944
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



EIGRP problem [7:33636]

2002-01-29 Thread Vajira Wijesinghe

I have a 2610 router having IP IOS software (12.0.8).
This is connected to two different sites with 64kbps links.
eg
interface serial 0/0
ip address 192.168.1.1 255.255.255.252

interface serial 0/1
ip address 192.168.1.5 255.255.255.252

router is running with routing protocol EIGRP

router eigrp 100
network 192.168.1.0


Problem:

I'm able to work with only ONE serial link at a time.
ie.
If one serial link is active, other one becomes line protocol down
If I remove the cable of the UP interface, the OTHER interface become UP

I suspect this is due to the operation of EIGRP
Because I cannot configure subnet mask for the network defined under
eigrp 100
This particular IOS doesn't allow me to do this and DRAM and FLASH
limitation prevents me from upgrading the IOS.

Can any one tell me how to overcome the situation?

Thanks,
Vajira







12.0.8 ip
- (on postoffice)

The information contained in this email is confidential and is meant to be
read only by the person to whom it is addressed.Please visit
http://www.millenniumit.com/legal/email.htm to read the entire
confidentiality clause.

-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33636t=33636
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CIT question [7:27964]

2001-12-02 Thread Vajira Wijesinghe

In a recent sitting for the CIT paper I found a question asking to name
the profile which network engineers maintain, objective being to
monitor/record a certain type of network activity over a period of time
so that it could be useful in arriving into conclusions in a problematic
situation.
Does any one could give some clue as to what this profileis?

Thanks
- (on postoffice)

The information contained in this email is confidential and is meant to be
read only by the person to whom it is addressed.Please visit
http://www.millenniumit.com/legal/email.htm to read the entire
confidentiality clause.

-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=27964t=27964
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: E1 usage monitoring on AS5300 [7:26094]

2001-11-28 Thread Vajira Wijesinghe

Hi Symon,
Could you pls let me know the OID you are using to monitior the E1
controller usage?
Thanks,
Vajira



Symon Thurlow wrote:

 Search for a program called MRTG

 It is free, requires configuration, but is an excellent tool for
 rendering graphs of usage, as well as lots of other features and add
 ins.

 I use it to moitor (amongst others) the modem usage on our AS5300.

 Cheers,

 Symon

 ---
  Hello Group,
 
  We have a AS5300 (for dialup clients) to which several E1's have
 been
  plugged.
  Can any one of you tell me how to get SNMP based (or any other way)
  statistics so that USAGE of the E1's can be seperately monitored
 over a
  period of time.
 
  Thanking in advance,
  Vajira
 [EMAIL PROTECTED]
 
 Cheers,

 Symon




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=27641t=26094
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



E1 usage monitoring on AS5300 [7:26094]

2001-11-13 Thread Vajira Wijesinghe

Hello Group,

We have a AS5300 (for dialup clients) to which several E1's have been
plugged.
Can any one of you tell me how to get SNMP based (or any other way)
statistics so that USAGE of the E1's can be seperately monitored over a
period of time.

Thanking in advance,
Vajira




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=26094t=26094
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Bandwidth restrictions on serial ports [7:26188]

2001-11-13 Thread Vajira Wijesinghe

Hello Group,

We have a small ISP which gives few 128k Leased lines (ppp
configuration) from a Cisco 3640 router. This same router also the
gateway to the international pipeline.
Our requirement is to RESTRICT the international line usage by the
Leased line customers.
Preferably we look at limiting 128k leased lines to an effective 64k
from our 3640, without making it appear to the customer end.
Please let me know, is there a way to do the above restriction.

Thanks,
Vajira




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=26188t=26188
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]