off-topic posts - WAS - RE: What tools can tell u r using [7:66661]

[cebuano]

Paul,
How many more of these off-topic threads are you going to allow?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
LaWanda Daivs
Sent: Tuesday, April 01, 2003 8:38 PM
To: [EMAIL PROTECTED]
Subject: Re: What tools can tell u r using lease line or ISDN? [7:66561]

Take a look at this web site and let me know what you
think.

http://www.imagine2020.com/761368002.


--- Link Teo  wrote:
 I am using leased line to connect my remote offices
 to HQ. All the leased
 line are backup by ISDN. Is there any tools which
 can inform me via email or
 other means about whether I am using leased line now
 or ISDN backup? In
 other words, any tools which can inform me when the
 primary line is down and
 the ISDN kick in?
 
 Thanks a lot. 
[EMAIL PROTECTED]


__
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://platinum.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=1t=1
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: off-topic posts - WAS - RE: What tools can tell u r using [7:66726]

[cebuano]

Scott,
This forum has been created for the purpose of study, NOT MARKETING.
Unless the owner and moderators of this server has changed this POLICY.
If so, then I'll go ahead and post my own MARKETING messages as well.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Scott Roberts
Sent: Wednesday, April 02, 2003 7:35 PM
To: [EMAIL PROTECTED]
Subject: Re: off-topic posts - WAS - RE: What tools can tell u r using
[7:66723]

something tells me you never fully considered the merits of that
website.
take another hard look at it and then questions its relevance to cisco.
;)

scott

cebuano  wrote in message
news:[EMAIL PROTECTED]
 Paul,
 How many more of these off-topic threads are you going to allow?

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of
 LaWanda Daivs
 Sent: Tuesday, April 01, 2003 8:38 PM
 To: [EMAIL PROTECTED]
 Subject: Re: What tools can tell u r using lease line or ISDN?
[7:66561]

 Take a look at this web site and let me know what you
 think.

 http://www.imagine2020.com/761368002.


 --- Link Teo  wrote:
  I am using leased line to connect my remote offices
  to HQ. All the leased
  line are backup by ISDN. Is there any tools which
  can inform me via email or
  other means about whether I am using leased line now
  or ISDN backup? In
  other words, any tools which can inform me when the
  primary line is down and
  the ISDN kick in?
 
  Thanks a lot.
 [EMAIL PROTECTED]


 __
 Do you Yahoo!?
 Yahoo! Tax Center - File online, calculators, forms, and more
 http://platinum.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66726t=66726
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: MLS and access lists [7:66464]

[cebuano]

Hi Priscilla,
Quoting Multilayer Switching Companion Guide on p. 340...
MLS creates flows based on access lists configured on the MLS-RP...the
MLS-SE handles standard and extended access list PERMIT traffic...Route
topology changes and the addition or modification of access lists are
reflected in the IP MLS switching path automatically on the MLS-SE...the
MLS-SE learns of the change through MLSP  and immediately enforces
security.
I believe this is the reason why you need a L3 switch to do MLS.
HTH.
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Saturday, March 29, 2003 7:10 PM
To: [EMAIL PROTECTED]
Subject: MLS and access lists [7:66464]

With Multilayer Switching (MLS), how does the MLS Switch (MLS-SE) know
that
the router (MLS-RP) has an access list? In other words, how does the
switch
know that it should use a destination flow mask, a destination-source
flow
mask, or a full-flow mask? The access list, afterall, is on the router,
not
the switch, according to descriptions of MLS.

The switch definitely knows, because you see different output with the
show
mls command, but how does it know? Does the router pass it to the
switch in
MLSP messages, or is there something more obvious that I'm missing.

With some access lists, an enable packet would never come back from the
router. Is that what triggers the switch to use the more advanced flow
masks? This would imply that the switch is always looking at upper
layers
and knows that Telnet between 2 hosts results in an enable packet but
FTP
(or whatever) does not. That seems like a lot of burden to put on a
switch.

I checked Clark and Hamilton Cisco LAN Switching, and the Ethernet LAN
switching papers at CertificationZone, but am still left wondering

Thanks for your help.

Priscilla




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66559t=66464
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: MLS and access lists [7:66464]

[cebuano]

Hi Priscilla,
Quoting Multilayer Switching Companion Guide on p. 340...
MLS creates flows based on access lists configured on the MLS-RP...the
MLS-SE handles standard and extended access list PERMIT traffic...Route
topology changes and the addition or modification of access lists are
reflected in the IP MLS switching path automatically on the MLS-SE...the
MLS-SE learns of the change through MLSP  and immediately enforces
security.
I believe this is the reason why you need a L3 switch to do MLS.
HTH.
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Saturday, March 29, 2003 7:10 PM
To: [EMAIL PROTECTED]
Subject: MLS and access lists [7:66464]

With Multilayer Switching (MLS), how does the MLS Switch (MLS-SE) know
that
the router (MLS-RP) has an access list? In other words, how does the
switch
know that it should use a destination flow mask, a destination-source
flow
mask, or a full-flow mask? The access list, afterall, is on the router,
not
the switch, according to descriptions of MLS.

The switch definitely knows, because you see different output with the
show
mls command, but how does it know? Does the router pass it to the
switch in
MLSP messages, or is there something more obvious that I'm missing.

With some access lists, an enable packet would never come back from the
router. Is that what triggers the switch to use the more advanced flow
masks? This would imply that the switch is always looking at upper
layers
and knows that Telnet between 2 hosts results in an enable packet but
FTP
(or whatever) does not. That seems like a lot of burden to put on a
switch.

I checked Clark and Hamilton Cisco LAN Switching, and the Ethernet LAN
switching papers at CertificationZone, but am still left wondering

Thanks for your help.

Priscilla




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=66471t=66464
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: eBGP Multi-hop [7:65823]

[cebuano]

Hi Jim,
I'm not sure how your peering is configured, but BGP uses TCP to
establish sessions and the default TTL of these packets is set to 1. If
your peer is more than 1 hop away, the BGP packet will never reach its
intended peer.

HTH,
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Thursday, March 20, 2003 7:35 AM
To: [EMAIL PROTECTED]
Subject: eBGP Multi-hop [7:65823]

hello all, 

(Re-post...not sure if original msg made it our not)

playing around again and have a question. eBGP multi-hop cannot come up
if
the peer is known through a default route.
Is there a reason why? 
I mean, what is the point of a static route that causes a recursive
lookup
or a static route that simply points to the same next hop as a default
route?
For that matter, I can't see it being a matter of proximity either. If
convergence time were not an issue, what is really wrong with having a
10
hop or even 50 hop BGP session? (I know it is unlikely and there are
cetainly better ways to handle it (GRE or IPSec tunnel)) but for the
sake of
argument...

Just curious, not able to find much on WHY it is like this... 

thanks, 
Jim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=65836t=65823
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: OSPF Topology Question - Parkhurst's Book [7:65532]

[cebuano]

Hey Chuck,
I don't know how this slipped past me ;-
You are correct. Not only is RtrB configured the same as RtrC, but the
solution only allows the hub/spoke to form adjacencies. This is one of
the many reasons why routes are in the OSPF database but NOT in the
routing table. I'm not sure if all he wanted to show was the effect of
different Hello parameters.
Interesting that the only corrections on the Ciscopress site are the
ones I sent to Bill. You should send him this as well, in case he hasn't
yet noticed this issue.

Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
The Long and Winding Road
Sent: Sunday, March 16, 2003 1:14 AM
To: [EMAIL PROTECTED]
Subject: OSPF Topology Question - Parkhurst's Book [7:65532]

Ran into something in Parkhurst's OSPF book while studying tonight.
Looking
for validation of my observation.

The example: OSPF over frame relay

The topology: hub and spoke, with a twist. The hub uses subinterfaces (
one
to each spoke router ) and the spokes use physical interfaces.

Now, the Parkhurst examples show leaving the physical interfaces as ospf
type non-broadcast, change the ospf timers on the subinterfaces, place
neighbor statements on the spoke routers ( physical interfaces ) and all
is
well.

Except I don't believe it works this way.

The subinterfaces are point-to-point networks, and expect the other side
to
be a point-to-point connection and adjacency. the physical interfaces
are
non-broadcast, and expect DR elections to occur, something the router
with
the subinterfaces will not do.

I believe the correct solution is to make the physical interfaces ospf
type
point-to-multipoint.

An alternative is to change the physical interfaces to ospf
point-to-point.

In any case - can anyone else verify what I see and do not see - that
Parkhurst chapter 11, example 3, pages 275-279 answer is incomplete?

thanks.

--
TANSTAAFL
there ain't no such thing as a free lunch




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=65557t=65532
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: DTP and VTP Domain [7:64892]

[cebuano]

*** REPLY SEPARATOR  ***

On 3/12/2003 at 12:00 AM Priscilla Oppenheimer wrote:

Hi Karen,

Are you back in the U.S.? Welcome back, if yes! I consider you a guru
of
campus networking technologies from the answers you give on GroupStudy.


Yes, that's absolutely true. When I hear about her name, it's almost
synonymous with Kennedy Clark. I've enjoyed reading her posts since I
met her on this list about 3 years ago.
Best wishes to a great professional.

Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=65159t=64892
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: General comments on Cisco Teaching [7:64833]

[cebuano]

Howard
CSSI 93005



Howard,
If you were a Cisco Instructor years ago, is it safe to assume the CSSI
number started at 93000?? Just curios.
On a serious note, are you allowed to still add the cert and number
after your name if you  become inactive?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=64850t=64833
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: RIP Question [7:64340]

[cebuano]

How about telling the interface to ip rip send version 1?
Sorry, I haven't had the chance to mock this up.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
John Beckmann
Sent: Tuesday, March 04, 2003 8:24 AM
To: [EMAIL PROTECTED]
Subject: RIP Question [7:64340]

Hi All,

I have a question in regards to RIP propergating a network route,
without
using summarization.


   BB1R1===R3Rest of network
   RIPV2--RIPV2RIPV2+OSPFOSPF---
   150.10.1.254___150.10.1.1___170.10.X.X

How do you get R1 to send a singe route to BB1 for the 170.10.X.X
network,
without using summarization. R1 is also part of the 170.10.X.X network.

Regards,
John Beckmann




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=64360t=64340
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Urgent Help !! How to check who's always attack my firewall [7:64073]

[cebuano]

Go to ARIN.net. If it's outside North America, it will refer you.
Remember that IP address can be SPOOFED.

HTH,
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Steiven Poh-(Jaring MailBox)
Sent: Friday, February 28, 2003 6:36 AM
To: [EMAIL PROTECTED]
Subject: Urgent Help !! How to check who's always attack my firewall
[7:64064]

Dear All,

I believe some one always try hacking my private network,
I got the ip address and how am I check who they are?

Please help...!! Thanks

Rgds,
Steiven




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=64073t=64073
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: VOIP [7:64080]

[cebuano]

Kris,
In case you didn't get the newsletter...
= On sale in February at ciscopress.com
This month we are offering selected voice titles at 15% off the list
price-and don't forget the free UPS Ground shipping on U.S. orders.
 - Cisco Voice over Frame Relay, ATM, and IP (1578702275), $51.00
 - Voice over IP Fundamentals (1578701686), $42.50
 - Voice-Enabling the Data Network (1587050145), $42.50
Learn about the books included in this special offer:


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Juan Blanco
Sent: Friday, February 28, 2003 11:53 AM
To: [EMAIL PROTECTED]
Subject: RE: VOIP [7:64080]

Kris,
The following will be a start for your goal..

Cisco IP Telephony by ciscopress - David Lovell
Cisco IP Telephony Network Design Guide
http://www.cisco.com/univercd/cc/td/doc/product/voice/ip_tele/network/
Cisco IP Telephony Solution Guide
http://www.cisco.com/warp/public/788/solution_guide/index.html


DQoS is all QoS, pretty straight forward. Hands on experience helped
quite a
bit. There is a QoS book from Cisco Press, the book is a few years old
and
is poorly layed out. The IOS 12.2 QoS guide follows the exam blueprint
pretty closely and is a great reference.
Cisco AVVID QoS Guide
http://www.cisco.com/univercd/cc/td/doc/product/voice/ip_tele/avvidqos/i
ndex
.htm
Cisco IOS QoS Solutions Guide 12.2
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/
fqos
_c/


Cisco Voice over Frame relay, ATM and IP by ciscopress - Steve McQuery
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/v
oice
_c/vcprt1/index.htm

Be aware that you need to find as many pdfs as possible related to the
topic
because the technology is still going trough many changes

Good luck,

Juan Blanco

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Waters, Kristina
Sent: Friday, February 28, 2003 9:48 AM
To: [EMAIL PROTECTED]
Subject: VOIP [7:64080]


Everyone,

I am seeking a recommendation on a voip book, preferably something that
explains the different types of technologies and how they can be applied
'in the real world'. Right now, we are doing some very rudimentary voip
stuff with a variety of routers, 1760, 2600, and a 3600 seriers which is
connected to a pri.

We have no call manager (yet), so we have a bunch of dial-peer groups
set up
on all our routers to interconnect the remote offices. All offices have
their own pbx's of different types, and most of the routers at the
remote
locations have the vic fxs cards.

I feel like this is a good opportunity for me to learn a great deal, but
I
want to make sure that I REALLY understand what I am learning. And right
now, for example, I have no idea what the difference is between an FXS
card
and an EM card. I'm starting to feel a bit like the village voip idiot,
and
the tons of docs I've read on the cisco web site do not seem to be
helping.

Any recommendations will be highly appreciated.

Thanks,
Kris


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender by email, delete and destroy this message and its
attachments.
**




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=64108t=64080
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: DOES MED TRAVEL IN I-BGP?? [7:63884]

[cebuano]

BEST way is to test it out and check the BGPP table. Please note you
have several options when dealing with MED attribute. Check the command
reference for the 12.2 to see the features.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
ciscoGo2002
Sent: Wednesday, February 26, 2003 11:57 AM
To: [EMAIL PROTECTED]
Subject: DOES MED TRAVEL IN I-BGP?? [7:63884]

Hello folks,
I have a question for you about MED.

Suppose the following lab:


   ROUTER A  ROUTER B

   ROUTER C

   


___
Yahoo! Msviles
Personaliza tu msvil con tu logo y melodma favorito 
en http://moviles.yahoo.es




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=63907t=63884
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: ISS Real Secure Vs Cisco IDS [7:63461]

[cebuano]

Hi Albert,
Very good point. Which brings me to this question - how can one measure
the security of a network? It almost always is an after-the-fact
response whichever vendor you choose. As you pointed out in your example
regarding the slammer virus, have you heard any vendor claiming immunity
from this?
Is detecting synonymous with preventing?
I'm also interested in this topic due to the fact that the pricing
structure from almost ALL the major players in the IDS/Firewall market
is astronomical.

Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Albert Lu
Sent: Friday, February 21, 2003 9:19 AM
To: [EMAIL PROTECTED]
Subject: RE: ISS Real Secure Vs Cisco IDS [7:63461]

Hi Troy,

Must be some secure site, reason I was interested is that I had a
discussion
with someone else before in regards to multi-vendor IDS solutions and
how
effective they might be.

So if you mostly rely on manual action, and an attack came in after
hours,
how quickly can you respond to your alerts? Since for some attacks, a
half
hour response time could cause your site to be down (eg. slammer virus).
If
that was the case, even if you had all the vendor's IDS, it will be
useless.

Albert

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, February 21, 2003 10:57 PM
To: [EMAIL PROTECTED]
Subject: RE: ISS Real Secure Vs Cisco IDS [7:63461]


As with most things, you need to way up costs againts your requirements.
IN
our case, security is absolutely essential, so having a multivendor
security
solutions (and indeed fully redundant) is costly, but we see it as
justified.

With regards to action during attacks etc.  We mostly rely on manual
actions
as we dont want to inadvertently block legitimate traffic (for example
if an
attack came from a spoofed IP). For automatic action, you can make use
of
Ciso Policy manage, which has the ability to dynamically rewrite ACL's,
on
Pix's, Routers, and indeed Cat's.  according to data from IDS.  So for
example, if you where really paraniod (like we are),. you could have
pix's
as the first firewall, with IDS on the inside / dmz etc (using IDSM or
standalone IDS), tie these together with Policy manager .. then taking a
further step into your network, a set of Nokia Fw1 NG, along with
further
Nokia IDS solutions on the inside, and tied together using the
enterprisef
software!



Albert Lu wrote:

 Hi,

 I'm just curious about your multi-vendor solution. It must cost
 quite alot
 in order to have 3 IDS running. What about redundancy, if you
 are using dual
 switch/router/fw/ids, you would have a total of 6 IDS.

 Being able to detect attacks with multiple IDS is one thing.
 What action can
 it take once the IDS detects an attack? Logging it into the
 syslog server is
 not enough.

 Albert

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 Sent: Friday, February 21, 2003 7:53 PM
 To: [EMAIL PROTECTED]
 Subject: RE: ISS Real Secure Vs Cisco IDS [7:63461]


 Hi Sean,

 I currently use Cisco IDSM (IDS module for the Cat6500), Nokia
 IDS, and
 Snort on the server themselves.  You can never be paranoid
 enough about
 these sort of things.  Each vendor has different exploits etc,
 so by
 implementing a multi vendor path to your critical servers, you
 protect
 yourself from any signle vendor specific exploit!




 Sean Kim wrote:
 
  Hello all,
 
  My company is thinking about installing an IDS (dedicated
  appliance type) for our network.
  As far as I know, the Real Secure and the Cisco IDS are two
  biggest names out there.  So I checked out the documents and
  white papers provided by the each company, but I couldn't
  really come up with what the differences are between them, and
  which one is better suited for our network.
 
  Can anyone voice their opinion about these two IDS?
 
  Thanks,
 
  Sean Kim




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=63544t=63461
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Understanding VLANs - how they remove the physical [7:63214]

[cebuano]

Stephen,
This is getting out of hand, so let me answer your original post based
on what I can see from your drawing.
First, if you have users in Bldg B that want to communicate with users
in Bldg A on the SAME VLAN1, then your core L3 switches will see the
VLAN ID and switch the packets from ingress to egress ports WITHOUT
bothering its Routing table. What you keep referring to as gateway is
at LAYER 3, i.e. it is only relevant when users in one VLAN needs to
communicate OUTSIDE its broadcast domain (aka subnet in L3 lingo). And
yes, the same VLAN1 traffic will cross your CORE links if that is the
only physical link that exists, BUT the traffic gets SWITCHED (much
faster) and not routed (much slower).
Now, as far as the 3550 switch, all ports are Layer 2 UNTIL you
configure no switchport which turns the port into a PHYSICAL ROUTED
port. This is not the same as a Switched Virtual interface. Once the
port is converted into a routed port, you can treat it just like a
regular Router port, i.e. run OSPF, BGP, etc.

I hope I've answered your original post.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Stephen Hoover
Sent: Monday, February 17, 2003 7:56 PM
To: [EMAIL PROTECTED]
Subject: Re: Understanding VLANs - how they remove the physical
[7:63194]

Ok, let me see if I can simply this:

A post that Jens Neelsen made says a layer3 switch (e.g.3550-EMI) does
not
have layer3 interfaces. All interfaces (Fastethernet and
GigabitEthernet)
are layer2
interfaces. They can not have IP addresses. Further he adds The VLANs
are
the (virtual) interfaces to the routing engine (=layer3 switch). Layer2
interfaces are grouped into different VLANs and the Layer3 switch
(=Router)
enables the communications between these VLANs. 

Ok then the question is - if you have a LAN with ALL switches and NO
routers - how do you define a gateway on the client?

Example:

2 L2 switches. All hosts on switch 1 are in IP subnet 192.168.1.0/24 and
all
hosts on switch 2 are in IP subnet 192.168.2.0/24. Both L2 switches are
connected to a single L3 switch with a router engine in it.

Where do you define the gateways at? In order for hosts on L2 switch 1
to
communicate with hosts L2 switch 2, the client has to have a gateway to
forward to correct??

Stephen



- Original Message -
From: Priscilla Oppenheimer 
To: 
Sent: Monday, February 17, 2003 4:45 PM
Subject: RE: Understanding VLANs - how they remove the physical
[7:63173]


 Stephen Hoover wrote:
 
  back to switch A to get his routing to
  the servers?
  Why would you EVER want a network configured this way?? Or even
  worse, what
  if your respective gateway was 3 or 4 L3 switches away?

 Your gateway can't be any L3 switches (routers) away. It has to be on
your
 LAN. It has to be in your subnet. It has to be in your broadcast
domain.
It
 has to be in your VLAN. For one thing, a host ARPs for its default
gateway.
 ARP uses broadcast.

 I just noticed your comment and wanted to add my comment. Without
being
able
 to decode your drawing, it's hard to tell exactly how to answer, but
I'm
 just trying to get you to think about what really happens to packets
on a
 campus network. The network design you're considering isn't just
 impractical. It won't work, if I understand it correctly.

 Priscilla



  That
  just doesn't
  seem practical to me.
 
 
  Thanks!
  Stephen Hoover
  Dallas, Texas




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=63214t=63214
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: IP unnumbered for HDLC connection [7:62134]

[cebuano]

Do these labs for better understanding...
http://www.cisco.com/en/US/tech/tk648/tk365/technologies_tech_note09186a
0080094e8d.shtml

WATCH THE WORD WRAP!

Deepak N wrote:
 
 Hi all 
 
 The following are the configurations of the routers and the
 ping outputs.
 I have given 3 cases. 
 
 1) When ip unnumbered at one end and static routes are defined 
 
 sdmheadend#sh run
 Building configuration...
 
 Current configuration : 1115 bytes
 !
 version 12.2
 service timestamps debug datetime msec
 service timestamps log datetime msec
 no service password-encryption
 !
 hostname sdmheadend
 !
 !
 !
 !
 ip subnet-zero
 !
 !
 !
 ip audit notify log
 ip audit po max-events 100
 !
 !
 !
 voice call carrier capacity active
 !
 !
 !
 !
 !
 !
 !
 !
 !
 mta receive maximum-recipients 0
 !
 !
 !
 !
 interface FastEthernet0/0
  ip address 172.20.110.10 255.255.255.192
  duplex auto
  speed auto
 !
 interface FastEthernet0/1
  no ip address
  shutdown
  duplex auto
  speed auto
 !
 interface ATM1/0
  no ip address
  shutdown
  no atm ilmi-keepalive
  dsl operating-mode auto
  no fair-queue
 !
 interface FastEthernet1/0
  no ip address
  shutdown
  duplex auto
  speed auto
 !
 interface Serial1/0
  ip address 12.12.12.1 255.255.255.0
  no fair-queue
  clockrate 200
 !
 interface FastEthernet1/1
  no ip address
  shutdown
  duplex auto
  speed auto
 !
 interface Serial1/1
  no ip address
  shutdown
  clockrate 200
 !
 ip classless
 ip route 200.200.200.0 255.255.255.0 Serial1/0
 ip http server
 !
 !
 !
 !
 call rsvp-sync
 !
 !
 mgcp profile default
 !
 dial-peer cor custom
 !
 !
 !
 !
 !
 line con 0
 line aux 0
 line vty 0 4
 !
 !
 end
 
 
 sdmheadend# ping 200.200.200.11
 
 Type escape sequence to abort.
 Sending 5, 100-byte ICMP Echos to 200.200.200.11, timeout is 2
 seconds:
 !
 Success rate is 100 percent (5/5), round-trip min/avg/max =
 1/2/4 ms
 sdmheadend#
 
 
 
 
 
 
 switchrouter#sh run
 Building configuration...
 
 Current configuration : 746 bytes
 !
 version 12.2
 service timestamps debug uptime
 service timestamps log uptime
 no service password-encryption
 !
 hostname switchrouter
 !
 !
 memory-size iomem 5
 ip subnet-zero
 !
 !
 !
 ip audit notify log
 ip audit po max-events 100
 ip ssh time-out 120
 ip ssh authentication-retries 3
 !
 !
 !
 !
 !
 !
 !
 !
 !
 !
 !
 interface Loopback0
  ip address 200.200.200.11 255.255.255.0
 !
 interface FastEthernet0/0
  no ip address
  shutdown
  speed auto
 !
 interface Serial0/0
  ip unnumbered Loopback0
  no fair-queue
 !
 interface Serial0/1
  no ip address
  shutdown
 !
 ip classless
 ip route 12.12.12.0 255.255.255.0 Serial0/0
 no ip http server
 ip pim bidir-enable
 !
 !
 !
 call rsvp-sync
 !
 dial-peer cor custom
 !
 !
 !
 !
 line con 0
 line aux 0
 line vty 0 4
 !
 no scheduler allocate
 end
 
 switchrouter#ping 12.12.12.1
 
 Type escape sequence to abort.
 Sending 5, 100-byte ICMP Echos to 12.12.12.1, timeout is 2
 seconds:
 !
 Success rate is 100 percent (5/5), round-trip min/avg/max =
 1/2/4 ms
 switchrouter#
 
 
 
 
 
 
 
 
 
 2)  When routing protocol RIP is running
 
 
 sdmheadend#sh run
 Building configuration...
 
 Current configuration : 1099 bytes
 !
 version 12.2
 service timestamps debug datetime msec
 service timestamps log datetime msec
 no service password-encryption
 !
 hostname sdmheadend
 !
 !
 !
 !
 ip subnet-zero
 !
 !
 !
 ip audit notify log
 ip audit po max-events 100
 !
 !
 !
 voice call carrier capacity active
 !
 !
 !
 !
 !
 !
 !
 !
 !
 mta receive maximum-recipients 0
 !
 !
 !
 !
 interface FastEthernet0/0
  ip address 172.20.110.10 255.255.255.192
  duplex auto
  speed auto
 !
 interface FastEthernet0/1
  no ip address
  shutdown
  duplex auto
  speed auto
 !
 interface ATM1/0
  no ip address
  shutdown
  no atm ilmi-keepalive
  dsl operating-mode auto
  no fair-queue
 !
 interface FastEthernet1/0
  no ip address
  shutdown
  duplex auto
  speed auto
 !
 interface Serial1/0
  ip address 12.12.12.1 255.255.255.0
  no fair-queue
  clockrate 200
 !
 interface FastEthernet1/1
  no ip address
  shutdown
  duplex auto
  speed auto
 !
 interface Serial1/1
  no ip address
  shutdown
  clockrate 200
 !
 router rip
  network 12.0.0.0
 !
 ip classless
 ip http server
 !
 !
 !
 !
 call rsvp-sync
 !
 !
 mgcp profile default
 !
 dial-peer cor custom
 !
 !
 !
 !
 !
 line con 0
 line aux 0
 line vty 0 4
 !
 !
 end
 
 sdmheadend# ping 200.200.200.11
 
 Type escape sequence to abort.
 Sending 5, 100-byte ICMP Echos to 200.200.200.11, timeout is 2
 seconds:
 .
 Success rate is 0 percent (0/5)
 sdmheadend#
 
 
 
 switchrouter#sh run
 Building configuration...
 
 Current configuration : 738 bytes
 !
 version 12.2
 service timestamps debug uptime
 service timestamps log uptime
 no service password-encryption
 !
 hostname switchrouter
 !
 !
 memory-size iomem 5
 ip subnet-zero
 !
 !
 !
 ip audit notify log
 ip audit po max-events 100
 ip ssh time-out 120
 ip ssh authentication-retries 3
 !
 !
 !
 !
 !
 !
 !
 !
 !
 !
 !
 interface 

RE: jeff's routing tcp/ip v1 question [7:61360]

[cebuano]

Hi,
The reason for this is that although RIP treats these two networks as
separate entries residing on the SAME physical link, only the PRIMARY
address is used to send the packets. In other words, the 2ndary networks
are reliant on the primary address for delivering the packets. 2ndaries
are used solely for reachability issues in discontiguous networks which
is a problem for pure Distance-Vector protocols. Consider the debug
output...
MC3810b#trace 192.168.83.244

Type escape sequence to abort.
Tracing the route to 192.168.83.244

  1 192.168.12.195 4 msec *  0 msec
  2 192.168.83.244 12 msec *  * 

MC3810b#trace 10.33.55.1

Type escape sequence to abort.
Tracing the route to 10.33.55.1

  1 192.168.12.195 8 msec 4 msec 4 msec
  2 192.168.83.244 8 msec
09:33:24: ICMP: time exceeded rcvd from 192.168.12.195
09:33:24: ICMP: time exceeded rcvd from 192.168.12.195
09:33:24: ICMP: time exceeded rcvd from 192.168.12.195
09:33:24: ICMP: dst (192.168.12.196) port unreachable rcv from
192.168.83.244 *  4 msec
MC3810b#
09:33:27: ICMP: dst (192.168.12.196) port unreachable rcv from
192.168.83.244


MC3810b#trace 10.33.55.1

Type escape sequence to abort.
Tracing the route to 10.33.55.1

  1 192.168.12.195 4 msec 0 msec 4 msec
  2 192.168.83.244 8 msec *  4 msec

MC3810b#
09:32:04: ICMP: echo reply rcvd, src 10.33.55.1, dst 192.168.12.196
09:32:04: ICMP: echo reply rcvd, src 10.33.55.1, dst 192.168.12.196
09:32:04: ICMP: echo reply rcvd, src 10.33.55.1, dst 192.168.12.196
09:32:04: ICMP: echo reply rcvd, src 10.33.55.1, dst 192.168.12.196
09:32:04: ICMP: echo reply rcvd, src 10.33.55.1, dst 192.168.12.196

Also, examine the entries in the routing table...

MC3810b#sh ip route 10.33.55.1
Routing entry for 10.33.48.0/20
  Known via rip, distance 120, metric 1
  Redistributing via rip
  Last update from 10.33.75.1 on Ethernet0, 00:00:15 ago
  Routing Descriptor Blocks:
  * 10.33.75.1, from 10.33.75.1, 00:00:15 ago, via Ethernet0
  Route metric is 1, traffic share count is 1

MC3810b#sh ip route 192.168.83.244
Routing entry for 192.168.83.0/24
  Known via rip, distance 120, metric 1
  Redistributing via rip
  Last update from 10.33.75.1 on Ethernet0, 00:00:02 ago
  Routing Descriptor Blocks:
  * 192.168.12.195, from 192.168.12.195, 00:00:02 ago, via Ethernet0
  Route metric is 1, traffic share count is 1
10.33.75.1, from 10.33.75.1, 00:00:02 ago, via Ethernet0
  Route metric is 1, traffic share count is 1

I hope this answers your question. Take care.
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Monday, January 20, 2003 5:16 AM
To: [EMAIL PROTECTED]
Subject: jeff's routing tcp/ip v1 question [7:61360]

For Jeff's routing tcp/ip V1  book, page 214 and 215 . There is a
secondly
ip address , for rip version 1 because of the discontinues 10.0.0.0. So
why
there is only one route to 10.33.48.0 , and two route to 192.168.83.0 in
the
routing table of Ernest_T ?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61643t=61360
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BGP origin attribute type e - EGP? [7:61075]

[cebuano]

Amar,
Are you referring to an External BGP peer? I hope not as I haven't seen
that happen in any BGP labs I've done.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Amar
Sent: Wednesday, January 15, 2003 3:00 PM
To: [EMAIL PROTECTED]
Subject: Re: BGP origin attribute type e - EGP? [7:61075]

when the update is learned from an E-BGP neighbor.
rgds

Wei Zhu  a icrit dans le message de news:
[EMAIL PROTECTED]
 In what condition is the EGP origin type generated?

 Thanks
 Wei




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61184t=61075
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: EIGRP network 0.0.0.0 to redistribute static route [7:61185]

[cebuano]

Okay, this is good in that it's a simple yet effective way to explain
routing protocol BEHAVIOR.
I don't understand what Wei means in Step 2 Everything works fine.
What does everything mean?
Wei,
Try these methods of generating default routes in EIGRP to get a better
understanding of this distance-vector-but-can-also-act-as-link-state
protocol.
1. redistribute static
2. ip summary-address eigrp
3. ip default-network

HTH.
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
The Long and Winding Road
Sent: Thursday, January 16, 2003 12:52 AM
To: [EMAIL PROTECTED]
Subject: Re: EIGRP network 0.0.0.0 to redistribute static route
[7:61181]

well, now that I've set it up, looked at it, and given it some thought,
the
answer is really quite simple.
being a simple person myself, I like it when answers are simple. think
classful nature of eigrp

see below


Wei Zhu  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 ---EIGRP 100--(S0)---R1---(S1)--BGP AS 200---

 R1
 S0 192.168.1.1 255.255.255.240
 S1 172.22.2.1 255.255.255.0
 S0 side run EIGRP, S1 side run BGP

 (1)
 router eigrp 200
 network 192.168.1.0

 router bgp
 nei  remote-as XXX

 R1 will send 192.168.1.0 route info through S0, but won't send the
 172.22.2.0 network info.

 (2)
 ip route 0.0.0.0 0.0.0.0 S1

 router eigrp 200
 network 192.168.1.0
 redistrib static

 Everything works fine

 (3)
 If using network 0.0.0.0 to redistribute static info as:
 ip route 0.0.0.0 0.0.0.0 S1

 router eigrp 200
 network 192.168.1.0
 network 0.0.0.0

 In addition of distribute the 0.0.0.0, R1 will also distribute
172.22.0.0
 (summury) network info through S0

first of all, you are not seeing the whole picture because of the
limited
numbers of interfaces you have in your basic setup.

second of all, let me ask you a question. what exactly is 0.0.0.0?

thirdly, having answered and understood what exactly 0.0.0.0 really
represents, let me ask you another question. what happens when you put
the
entry network 0.0.0.0 into the eigrp process? will eigrp still work if
you
were to now remove the network 192.168.1.0 statement? why not?

this is starting to feel like another homily.


 It will also put 172.22.0.0/16 null0 route entry into its routing
table.

nature of the beast. I don't believe it is true of all protocols, but
some
of them will automatically place a summary to null 0 when a summary is
advertised out. This is done as proof against black holes and helps
prevent
routing loops

BTW, I enjoy your posts. Keep up the good work.


 Can anyone explain why this happens?








 Thanks
 Wei




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=61185t=61185
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Pass IT certifications(IBM.CISCO,MICRO,ORACLE,INTE [7:60959]

[cebuano]

YES!!!
Dude, send me your LEGAL name and I'll make sure I send the invitation
to Cisco as well. Dude, you could make millions, even in jail.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Monday, January 13, 2003 4:29 AM
To: [EMAIL PROTECTED]
Subject: Pass IT certifications(IBM.CISCO,MICRO,ORACLE,INTE [7:60940]

 if you want to get it in a short time,you can write mail to 
me([EMAIL PROTECTED]), 
 i will help you to get it and you do nothing but you must pay for
them.the p
rice is the lowest,for example(Include the charge of exam): 
 CCIE(WRITTEN): 1500$ 
ocp(updated):500$




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=60959t=60959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Cisco 2501 dot1q encapsulation ? [7:60699]

[cebuano]

This is possible with certain models of the 2600 series, and the
cheapest router to support this with 10Mb Ethernet is the 4000 series.
HTH.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Larry Letterman
Sent: Thursday, January 09, 2003 12:32 PM
To: [EMAIL PROTECTED]
Subject: RE: Cisco 2501  dot1q encapsulation ? [7:60699]

I dont believe so either, since they only support a 10BT
ethernet connection...

Larry Letterman
Network Engineer
San Jose Transport
Cisco Systems Inc.
 


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 John Neiberger
 Sent: Thursday, January 09, 2003 7:43 AM
 To: [EMAIL PROTECTED]
 Subject: Re: Cisco 2501  dot1q encapsulation ? [7:60699]
 
 
 I don't believe that any of the 2500 series routers support trunking
of
 any variety.  If I'm wrong someone will surely correct me.
 
 John
 
  Thomas Muller  1/9/03 8:21:59 AM 
 Hi,
 
 I've tried to configure dot1q on the LAN interface on my Cisco 2501
 running
 12.2 (IP Plus)
 but it doesn't seem to know the encapsulation dot1q command.
 
 Does anyone know if the 2500 series supports dot1q ?
 
 Thanks, Thomas
 [EMAIL PROTECTED] 
 
 -- 
 +++ GMX - Mail, Messaging  more  http://www.gmx.net +++
 NEU: Mit GMX ins Internet. Rund um die Uhr f|r 1 ct/ Min. surfen!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=60747t=60699
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: VPN dialup Outlook Exchange Do I need Help [7:60669]

[cebuano]

Elijah,
Just in case you haven't read this, here's what I found...

Dec 19, 2002, 6:03am PST
Not sure if you still have a problem, but... 

Have you tried to changing the Outlook Client so that it does NOT use
the Logon Network Security? (To check this, Right click the Outlook Icon
and go to properties- Select the MS Exchange server and click the
properties button. Then select the Advanced tab, and set the Logon
Network Security to NONE.) This will prompt the Outlook client to
provide the NT domain authentication info - username; domain; password -
rather than trying to take it from the OS. 

I had this same problem and this is what I did to resolve it. There may
be a more elegant solution, but I am unaware of it. 

Hope this helps... [EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Elijah Savage III
Sent: Wednesday, January 08, 2003 9:00 PM
To: [EMAIL PROTECTED]
Subject: VPN dialup Outlook Exchange Do I need Help [7:60669]

All,

I need some serious help for a serious problem. We have implemented a
vpn solution with 2 3030 concentrators. All work fine except for the
dialin users, everything is terribly slow I used dialin tonight and had
a 50.6 connection and it was creeping along like it was 9600 baud. I was
getting dns resolution problems on web pages I knew were up like CCO. I
have enabled LZS compression on both concentrators. I also have users
complaining that they get exchange errors like can't contact server.
Here is the confusing and tricky part.
Now on the other hand broadband users just couldn't be happier. I have
broadband at home also and all this crap I experienced tonight on dialup
none of it has shown it's ugly head on broadband, no exchange error or
anything. I have looked over CCO and looks like there was a few bugs for
the vpn client but supposedly fixed and I am using the latest client.
Also on the Network Professional news group on CCO there are just a TON
of people complaining about VPN and outlook access in some form or
another with no resolution. 


I called TAC and opened a case and the TAC engineer said yeah he knows
about the errors and that is the nature of the VPN beast and said Cisco
likes to recommend to custmers implementing VPN technology that they put
a OWA(outlook Web Access) server in a dmz some place because web
browsing is a much better experience over VPN.
I just can't accept this as an answer I am out of ideas of what to try
and there has to be someone out there in this big IT world that has
happy dialup users using Outlook/Exchange through vpn concentrators. I
did follow the recommendations on CCO about lowering the MTU settings on
the client side but that does not fix it.

If anyone has seen this and have a fix please let me know it would be
greatly appreciated. Out of all honesty I am looking for any experience
at all just to here what the general consensus is on this, so if you
have a fix or not I would like to here about your overall experience.

Thank You




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=60684t=60669
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: help with IOS Revovery Flash in 3810 [7:60471]

[cebuano]

Try
http://www.cisco.com/en/US/products/hw/routers/ps1904/prod_instructions_
guides.html
Watch the word wrap!


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Rommel
Sent: Monday, January 06, 2003 6:44 PM
To: [EMAIL PROTECTED]
Subject: help with IOS Revovery Flash in 3810 [7:60471]

HI guys

I need some help with a 3810 router that I lost the flash IOS Image, how
to
recovery the ios image at rommon in 3810, I didn4t found this
information
cisco web site, please help.

Regards
Rommel


- Original Message -
From: Don Kanicki 
To: 
Sent: Monday, January 06, 2003 7:42 PM
Subject: Lab [7:60464]


 Hello all.
 I have just passed my CCNA and am starting on the CCNP.
 I have a small lab at home that consists of 2 2501 routers.
 What would you suggest I add to my lab to prepare for the tests?
 Also just out of curiosity what kind of position should I be looking
for
to
 get my foot in the proverbial door?Currently I work for a small
 telecomunications company doing network cabling,Router config\installs
and
 trouble shooting.Im looking to make a move soon
 as the company im with is mainly geared toward the cabling\telephony
side
 and my skills are more network oriented.I currently hold CCNA and
BICSI
 certifications and no college degree.


 Any thoughts apreciated
 Don K.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=60475t=60471
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: RIP holddown timer [7:59989]

[cebuano]

You have to keep in mind the fact that Doyle wrote the Vol.1 book based
on IOS 11.3. He's supposed to have a second edition in the works with
Ciscopress but it's not clear if/when it will get published. For current
studies, your best bet is to test out the commands/features in 12.x.
HTH.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Monday, December 30, 2002 7:05 PM
To: [EMAIL PROTECTED]
Subject: RE: RIP holddown timer [7:59989]

bergenpeak wrote:
 
 Reading Doyle's V1 book.  Page 195 mentions that when an update
 with a
 hop count higher than that in the routing table is received for
 a route,
 the route will go into holddown for 180 [sic] seconds (three
 update
 periods).

That's to avoid the count-to-infinity problem. If the hop count
increases,
it's often an indication that count-to-infinity is happening and the
other
methods for avoiding it, such as split horizon and triggered updates
with
poisoned routes, failed. I thought Cisco's RIP did this, but I may have
gotten it from Doyle or confused it with IGRP. Do you have a method for
testing it? It's one of those things you may not find authoritative
documenation on.

Doyle's book has an errata at Cisco Press but it only mentioned 2 errors
(neither of which are related to this question).

 
 In the cisco page (below) for the timers basic command, the
 page
 states that ...A route enters into a holddown state when an
 update
 packet is received that indicates the route is unreachable. The
 route
 is marked inaccessible and advertised as unreachable...

That's probably true. It's not mutually exclusive with the above. I
think a
route enters into holddown when the local interface fails too, and
that's
not mentioned either.

Priscilla

 
 It would seem that the explaination on the cisco site is
 correct and
 the Doyle text is incorrect.  
 
 Could someone confirm or explain what Doyle might be refering
 too?
 
 Thanks
 
 
 

http://www.cisco.com/en/US/products/sw/iosswrel/ps1828/products_command_
summary_chapter09186a00800eeae6.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=5t=59989
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Leaky bucket concept. [7:59841]

[cebuano]

Raj,
Try these...
http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a
00800a3a25.shtml
http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configur
ation_guide_chapter09186a00800bd8ed.html


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Rajesh Kumar
Sent: Friday, December 27, 2002 12:39 PM
To: [EMAIL PROTECTED]
Subject: Leaky bucket concept. [7:59841]

Hi all,

I am trying to understand the leaky bucket concept in Qos for 3550
platform.  For some reason, it confuses me a lot.  Can somebody point me
to an URL which explains in simpler terms?

Thanks,
-r




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=59847t=59841
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Which 3550 to purchase [7:58560]

[cebuano]

Bill,
If you want to stay legit, email the seller and ask if it is a licensed
EMI, most of them are not. One way to find out is to have them email you
a show version, and if it was not originally licensed for EMI, the model
number will reveal as SMI, even if the IOS was upgraded. I don't know
if this is the same if you buy the EMI upgrade legally. FYI - the
3550-12G or -12T series only come with EMI.
HTH.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Clements, William (Bill)
Sent: Friday, December 06, 2002 10:55 AM
To: [EMAIL PROTECTED]
Subject: Which 3550 to purchase [7:58560]

All, 
I am looking to purchase a 3550, or two if I can afford it, for my home
lab.
I am looking on EBAY and see the SMI models with the EMI image. Is there
more to the EMI switch than just software? 
Thanks in Advance 
Bill Clements




Bill Clements, MCSE, CCNP
Network Engineer
International Network Services 
(972) 550-4441




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=58727t=58560
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Console adapter for OLDER Catalyst 1924 [7:57947]

[cebuano]

Hi group.
I have an OLDER model of the Cat 1900 switch that has the DB-9 port (not
RJ-45) for console access. I can't find any info on Cisco's site for
this model, so I don't know what it's pinout assignment should be. The
only way I can console in using the usual connection (e.g. terminal
server) is via the Diagnostic mode. My research revealed that apparently
this model uses a different DB-9 to RJ-45 pinout. If anyone has any
info, I'd greatly appreciate it.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57947t=57947
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Weird MC3810-VCM6 error [7:57916]

[cebuano]

Hi group.
I'd like to know if anyone else has seen this strange error in MC3810
with VCM6.
Basically, if I load an IOS that has no Voice feature, the card is
detected as.
1 6-DSP(slot2) Voice Compression Module(v01.K0)
and the router boots fine.
If I load any image with Voice, the card is detected as.
1 6-DSP(slot2) High Performance Compression Module(v01.K0)
and the router loops with this error.
 
c54x_state_readyWARNING: DSP type unknown  defaulted to C542
c54x_state_readyWARNING: DSP type unknown  defaulted to C542
c54x_state_readyWARNING: DSP type unknown  defaulted to C542
c54x_state_readyWARNING: DSP type unknown  defaulted to C542
 
Any ideas?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57916t=57916
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Weird MC3810-VCM6 error [7:57916]

[cebuano]

Well, I know I don't have the V model, but I didn't know that a high
performance VCM shows up as a regular VCM unless a V model and a VOIP
image are used. If someone can confirm this, then I'd rather keep this
card because at the price I paid it is a bargain.
Thanks.

-Original Message-
From: James Willard [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 22, 2002 11:53 PM
To: 'cebuano'; [EMAIL PROTECTED]
Subject: RE: Weird MC3810-VCM6 error [7:57916]

This is just a hunch, but could you possibly have a high performance VCM
in a non-V3 MC3810 (i.e., MC3810 or MC3810-V)? It will say on the back
of the chassis what type it is. Only the V3 model supports the high
performance VCM, so using one in a non-V3 might cause that error...

James Willard
[EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
cebuano
Sent: Friday, November 22, 2002 11:29 PM
To: [EMAIL PROTECTED]
Subject: Weird MC3810-VCM6 error [7:57916]


Hi group.
I'd like to know if anyone else has seen this strange error in MC3810
with VCM6. Basically, if I load an IOS that has no Voice feature, the
card is detected as. 1 6-DSP(slot2) Voice Compression Module(v01.K0) and
the router boots fine. If I load any image with Voice, the card is
detected as. 1 6-DSP(slot2) High Performance Compression Module(v01.K0)
and the router loops with this error.
 
c54x_state_readyWARNING: DSP type unknown  defaulted to C542
c54x_state_readyWARNING: DSP type unknown  defaulted to C542
c54x_state_readyWARNING: DSP type unknown  defaulted to C542
c54x_state_readyWARNING: DSP type unknown  defaulted to C542
 
Any ideas?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57921t=57916
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

OT: 4000 Power Supply [7:57557]

[cebuano]

Hi group,
Does anybody have any info on where I can buy the power supply for a
4000 router?
 
TIA,
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57557t=57557
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 2 Questions [7:57257]

[cebuano]

Assuming you get a raise to buy that $300 leather jacket ;-

-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody;groupstudy.com] On Behalf Of
The Long and Winding Road
Sent: Monday, November 11, 2002 10:08 PM
To: [EMAIL PROTECTED]
Subject: Re: 2 Questions [7:57257]

LOON  wrote in message
news:200211120210.CAA20443;groupstudy.com...
 1. Where should one start to prepare for the CCIE written exam, what
kind
of
 approach?

as always, begin at the beginning

www.cisco.com/go/ccie


 2. What are the benefits or privileges associated with the CCIE?

in today's bad economy, about the only ones I can think of, is you
attract
more women than you can shake a stick at, if that's your idea of a good
time
with women. If you get your CCIE, first thing to do is buy the jacket.
the
women really dig it, so I'm told. ;-




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=57269t=57257
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

CID 3.0 format [7:56769]

[cebuano]

Hi,
To those who have recently taken the CID exam, are there topics that
have been removed from the official/original CID course?
What about topics that were not covered by the original course?
 
Thanks.
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=56769t=56769
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: BGP Aggregation in IOS 12.2 [7:54528]

[cebuano]

Well, this is exactly what Doyle has in Vol 2 p.188 where the router
CONFIGURED with thte aggregate-address command shows the more-specific
routes in its BGP table with S entries and to suppress the more-specific
routes you add the no-summary keyword. Doyle's config clearly has the
network statements removed to prove this behavior. Thanks for the replies.
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Stephane Litkowski
Sent: Monday, September 30, 2002 7:00 AM
To: [EMAIL PROTECTED]
Subject: Re: BGP Aggregation in IOS 12.2 [7:54528]


To announce your loopback interfaces, u can also use redistribute connected
with a route-map to filter which connected you want to redistribute (only
loopbacks) ...

Jim Brown  a icrit dans le message de news:
[EMAIL PROTECTED]
 Elmer,

 The way I read your config. You have enabled a single interface with
 EIGRP routing, interface loopback17 of network 192.168.199.0/24.

 You are redistributing all of EIGRP into BGP which only includes this
 one network.

 You are aggregating 192.168.192.0 255.255.248.0. The aggregate address
 needs a minimum of one network in the aggregate address range to
 advertise the supernet and more specific underlying routes.

 The BGP table is exactly right as far as I can tell. The only networks
 that should appear are the networks redistributed from EIGRP,
 192.169.199.0/24, and the aggregate, 192.168.192.0/21, which is using
 the previous /24 network for its very existence.

 You must enter EACH of the loopbacks under the BGP process using
 'network 192.168.192.0 mask 255.255.255.0', 'network 192.168.193.0 mask
 255.255.255.0'.

 The mask statement is not necessary in this case, I just always use it
 for consistency. It is a personal preference. The mask statement is only
 necessary for networks outside their classful boundary.

 The other alternative is to include all of the loopbacks under the EIGRP
 process and have them redistributed into BGP which you already have
 setup, but currently you are only redistributing a single /24. If you
 want them all to appear, you need to either enter them under the BGP
 process with a network statement or redistribute them from EIGRP.

 The route-map you have included in the configs looks like you are
 planning on only advertising a subset of the more specific /24 routes.
 You should look at the suppress-map option under the aggregate address
 command as well as distribute list under the interface or neighbor
 statement.

 All three of these would accomplish the same result.

 -Original Message-
 From: cebuano [mailto:[EMAIL PROTECTED]]
 Sent: Sunday, September 29, 2002 11:34 PM
 To: [EMAIL PROTECTED]
 Subject: BGP Aggregation in IOS 12.2 [7:54528]


 Hi all.
 Has 12.2 changed in that when you do an aggregate-address the
 configured
 router only shows the aggregate route and not include the more-specific
 ( or
 aggregatED ) routes? Here's what I got...
 This config is supposed to allow me to advertise both the aggregate
 and
 more-specific routes. But if this has changed then i'll have to think of
 another solution...
 Thanks.
 Elmer

 Stowe-2504#s
 !
 interface Loopback10
  ip address 192.168.192.1 255.255.255.0
 !
 interface Loopback11
  ip address 192.168.193.1 255.255.255.0
 !
 interface Loopback12
  ip address 192.168.194.1 255.255.255.0
 !
 interface Loopback13
  ip address 192.168.195.1 255.255.255.0
 !
 interface Loopback14
  ip address 192.168.196.1 255.255.255.0
 !
 interface Loopback15
  ip address 192.168.197.1 255.255.255.0
 !
 interface Loopback16
  ip address 192.168.198.1 255.255.255.0
 !
 interface Loopback17
  ip address 192.168.199.1 255.255.255.0
 !
 interface Serial0
  bandwidth 64
  ip address 192.168.1.254 255.255.255.252
 !
 router eigrp 100
  network 192.168.199.0
 !
 router bgp 100
  aggregate-address 192.168.192.0 255.255.248.0
  redistribute eigrp 100
  neighbor 192.168.1.253 remote-as 200
  neighbor 192.168.1.253 send-community
  neighbor 192.168.1.253 route-map community out
 !
 access-list 101 permit ip host 192.168.192.0 host 255.255.248.0
 route-map community permit 10
  match ip address 101
  set community none
 !
 route-map community permit 20
  set community no-export
 !

 Stowe-2504#sh ip bgp
 BGP table version is 9, local router ID is 192.168.199.1
 Status codes: s suppressed, d damped, h history, * valid,  best, i -
 internal
 Origin codes: i - IGP, e - EGP, ? - incomplete

Network  Next HopMetric LocPrf Weight Path
 * 192.168.192.0/21 0.0.0.032768 i
 * 192.168.199.00.0.0.0  0 32768 ?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=54547t=54528
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

BGP Aggregation in IOS 12.2 [7:54528]

[cebuano]

Hi all.
Has 12.2 changed in that when you do an aggregate-address the configured
router only shows the aggregate route and not include the more-specific ( or
aggregatED ) routes? Here's what I got...
This config is supposed to allow me to advertise both the aggregate and
more-specific routes. But if this has changed then i'll have to think of
another solution...
Thanks.
Elmer

Stowe-2504#s
!
interface Loopback10
 ip address 192.168.192.1 255.255.255.0
!
interface Loopback11
 ip address 192.168.193.1 255.255.255.0
!
interface Loopback12
 ip address 192.168.194.1 255.255.255.0
!
interface Loopback13
 ip address 192.168.195.1 255.255.255.0
!
interface Loopback14
 ip address 192.168.196.1 255.255.255.0
!
interface Loopback15
 ip address 192.168.197.1 255.255.255.0
!
interface Loopback16
 ip address 192.168.198.1 255.255.255.0
!
interface Loopback17
 ip address 192.168.199.1 255.255.255.0
!
interface Serial0
 bandwidth 64
 ip address 192.168.1.254 255.255.255.252
!
router eigrp 100
 network 192.168.199.0
!
router bgp 100
 aggregate-address 192.168.192.0 255.255.248.0
 redistribute eigrp 100
 neighbor 192.168.1.253 remote-as 200
 neighbor 192.168.1.253 send-community
 neighbor 192.168.1.253 route-map community out
!
access-list 101 permit ip host 192.168.192.0 host 255.255.248.0
route-map community permit 10
 match ip address 101
 set community none
!
route-map community permit 20
 set community no-export
!

Stowe-2504#sh ip bgp
BGP table version is 9, local router ID is 192.168.199.1
Status codes: s suppressed, d damped, h history, * valid,  best, i -
internal
Origin codes: i - IGP, e - EGP, ? - incomplete

   Network  Next HopMetric LocPrf Weight Path
* 192.168.192.0/21 0.0.0.032768 i
* 192.168.199.00.0.0.0  0 32768 ?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=54528t=54528
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 400M console woes [7:54114]

[cebuano]

Black Jack,
Have you tried without the flow control on the hyperterminal?
I've seen older versions of the 4000 series that won't respond
Via the console if the flow control is checked.

HTH,
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
MADMAN
Sent: Wednesday, September 25, 2002 6:28 PM
To: [EMAIL PROTECTED]
Subject: Re: 400M console woes [7:54114]

Pull the DB25 of fof the router and tell me what color pins are in 2,3
and 7.  If not yel, blk, red then it doesn't much matter what line cord
your using.  You can use either a roll over or straight thru what
determines which will work is the pinout on the end connectors.

  Dave

Black Jack wrote:
 
 I cannot get a response from the console port on my ebay as-is 4000M
 router. Per earlier thread and archives, I think I have the right
cable--a
 straight through DB9-DB25 modem data cable. Some referred to rollover
with
 db25 adapter, but I tried all the adapters in my spare part box to no
avail.
 I'm not sure I have the right adapter because the 4000 console port is
DB25
 DCE (http://www.cisco.com/warp/public/701/14.html) but the only
pinouts I
 see are for DB25 DTE. Anyway, I think the whole 4000 series has
standard
 RS232 at the console port, so a regular cable should be okay.
 
 Also, I tried tera term and hyperterm, all speeds from 1200 to 9600.
 Visually, the router seems to power up fine and the console port does
not
 have any obvious physical defect, but so far I have seen nothing from
it. I
 am trying to locate a RS232 breakout box to see if ANYTHING is live on
the
 port, but meanwhile any suggestions? Any way I can get in through the
aux
 port? I have no idea what may or may not be in the config. I hope I
have
not
 bought a doorstop :-)
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=54168t=54114
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

2950 v.s 3550 for home lab QoS [7:53784]

[cebuano]

Hi.
For those who know about the extent of QoS scenarios to anticipate or
prepare for in the lab, and knowing that there will most likely be TWO
L3 switches per rack; can anyone comment on the possibility of using a
2950 as a second switch if a 3550 is already in one's home lab? Some of
the features NOT available in the 2950 are QOS- Marking Classification,
QPM, L2 - L4 QOS ACLs, DSCP, IGMP, ISL, and only Layer 2 Multilayer QOS
/ Security is supported.
Thank you for your input.
 
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53784t=53784
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Feedback from Gettlabs users [7:53526]

[cebuano]

Hi all,
I would like to hear feedback regarding Gettlabs, in particular the
quality (not just complexity) of the scenarios and the ease of use or
online access.
Feel free to respond directly. Thanks.
 
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53526t=53526
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Default Routing in EIGRP [7:53237]

[cebuano]

Hello group.
Just  a simple (but nagging) question on default routing in EIGRP.
From what I've encountered in the textbooks and CCO, I have four
options:
1.  redistribute a static 0.0.0.0 - this I'm able to accomplish,
although I will have to change IOS versions because for some reason, the
default route that is installed in the neighboring routers as an
external eigrp disappear after 3-5 mins. Why? I don't know. I'm
rebooting the routers now.
2.  ip default-network
3.  default-information [allowed|in|out]
4.  ip sum eigrp 1 0.0.0.0 0.0.0.0
 
Except for the first option I have not been successful in generating
defaults into EIGRP. If anyone has a better explanation for the last
three options your comments are greatly appreciated.
 
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53237t=53237
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Default Routing in EIGRP [7:53239]

[cebuano]

As a follow-up to my original post, a reboot reinstalled the default
routes. As a word of caution, you might not want to use
flash:/c2500-jk8os-l.122-1b.bin image as I've encountered too many
strange results with it. Getting ready to swap it with a 12.1.xyz as I'm
tired of wasting my time troubleshooting IOS features. Thank goodness
for the 1-day lab format ;-$
And yes, ip sum eigrp 1 0.0.0.0 0.0.0.0 does work.
 
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53239t=53239
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: ip classless and default route [7:53231]

[cebuano]

Hmm,
Try removing your static 0.0.0.0 and you'll see why.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, September 12, 2002 8:57 PM
To: [EMAIL PROTECTED]
Subject: ip classless and default route [7:53231]

according to many books, ip classless should be used to be able to use
default route.

but I just found my internet router, actually has no ip classless.

which means I am using classful route lookup.

And this is working fine,who can explain why

note that ip address here is not real one.

!
hostname xxx
!
enable secret xxx
!
ip subnet-zero
no ip domain-lookup
ip name-server x.x.x.x

!
interface FastEthernet0/0
 ip address 210.210.210.62 255.255.255.240
 no ip directed-broadcast
!
interface Serial0/0
 bandwidth 64
 ip unnumbered FastEthernet0/0
 no ip directed-broadcast
 no ip mroute-cache
 no fair-queue
!
no ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0


Gateway of last resort is 0.0.0.0 to network 0.0.0.0

 210.210.210.0/28 is subnetted, 1 subnets
C   210.210.210.48 is directly connected, FastEthernet0/0
S*   0.0.0.0/0 is directly connected, Serial0/0
xxx#

xxx#sh flash

System flash directory:
File  Length   Name/status
  1   3612344  c2600-i-mz.120-3.T3
[3612408 bytes used, 4776200 available, 8388608 total]
8192K bytes of processor board System flash (Read/Write)




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53240t=53231
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 2924 reboots when I plug in a console cable [7:53135]

[cebuano]

I have read this a while back as a known issue with the 2924 series
But I can't remember the bug ID or the specific IOS 12.0 release.
This first appeared about 18-20 months ago when W2K was just released.
Check CCO and I'm sure you'll find the resolution.

Elmer

 
 -Original Message-
 From: Jason Owens [mailto:[EMAIL PROTECTED]]
 Sent: woensdag 11 september 2002 21:51
 To: [EMAIL PROTECTED]
 Subject: 2924 reboots when I plug in a console cable [7:53135]
 
 When I plug in a console cable to some of my 2924's they reboot (My
 coworker
 is convinced that it is Win2000 sending out a probe because of
 plug-and-play). I have only seen this on the 2924 and it doesn't
happen
 on
 all of the ones I have. Has this happened to anyone else? I have been
 unable
 to find anything about this on the Cisco web site.
 
 Here is a sh ver from one of the switches this has happened on:
 
 Cisco Internetwork Operating System Software
 IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)XU,
RELEASE
 SOFTWARE (fc1)
 Copyright (c) 1986-2000 by cisco Systems, Inc.
 Compiled Mon 03-Apr-00 16:37 by swati
 Image text-base: 0x3000, data-base: 0x00301398
-- 
David Madland
CCIE# 2016
Sr. Network Engineer
Qwest Communications
612-664-3367

You don't make the poor richer by making the rich poorer. --Winston
Churchill




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=53157t=53135
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: CCIE needs advice on MCSE [7:52236]

[cebuano]

Hi John,
Unless someone else will fund the bootcamp, the cheapest way is to
review the objectives of the exams and use the free information on
www.microsoft.com/technet/ and you will have met the requirements and
more.

HTH,
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
John Conzone
Sent: Wednesday, August 28, 2002 5:07 PM
To: [EMAIL PROTECTED]
Subject: CCIE needs advice on MCSE [7:52236]

Hi. Sorry to go off topic but I studied here for my CCIE and found all
of
you very helpful and understanding.

I am wanting to get my MCSE and want to attend a MCSE Bootcamp. Any
experiences, advice or recommendations would be greatly appreciated.


Best Regards
John Conzone
CCIE #6409 R/S
CNE 3/4/5




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52251t=52236
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Off Topic: VPN Router to Router Understanding? [7:52040]

[cebuano]

Robert,
If you look at the route tables, your VPN tunnel endpoint (the other
end) will have a better metric since this gets installed AFTER your
connection to your ISP. Thus ALL traffic will be sent through this VPN
tunnel. When you disconnect from the tunnel, your ISP's default gateway
metric will be restored, typically a value of 1. To further illustrate,
after you have connected to either ISP or VPN, you then DIAL into a RAS
server, the default gateway will change to prefer the RAS server IP and
not the former two. In other words, whatever gets connected last will be
the preferred gateway.

HTH,
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Robert D. Cluett
Sent: Sunday, August 25, 2002 12:02 PM
To: [EMAIL PROTECTED]
Subject: Off Topic: VPN Router to Router Understanding? [7:52040]

All,

My apologies for having to post this here, but I have not been able to
get
an answer from anyone.

The scenario is this, I have 2 linksys routers connected to each other
over
a VPN tunnel (dsl).  My question is, if I was to access the internet
would
it need to travel on the tunnel to the other linksys and out to the
internet, or would it simply travel my dsl connection to my ISP'd
gateway
router and out?  I am trying to understand what type of load I will be
putting on my dsl connection.

Any thoughts would help..thanks

Cluett




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=52045t=52040
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

IS-IS System ID [7:51878]

[cebuano]

Hi Group,
Has the 12.0 modified the output of the System ID to show the hostname
instead of the actual 3-octet Hex?
Here's a sample of what I see in 12.2.
 
erlin#sh clns is
 
System Id  Interface   State  Type Priority  Circuit Id
Format
Rome   Se4 Up L1L2 0 /0  00
Phase V
Paris  Et0 Up L1L2 64/64 Paris.01
Phase V
 
Amsterdam#sh is data
 
IS-IS Level-1 Link State Database:
LSPID LSP Seq Num  LSP Checksum  LSP Holdtime
ATT/P/OL
Amsterdam.00-00 * 0x0003   0xCD75647   1/0/0
Amsterdam.03-00 * 0x0001   0x75D50 (632)   0/0/0
Brussels.00-000x0004   0x6B9D639   1/0/0
Brussels.01-000x0001   0x8B68631   0/0/0
IS-IS Level-2 Link State Database:
LSPID LSP Seq Num  LSP Checksum  LSP Holdtime
ATT/P/OL
Amsterdam.00-00 * 0x0002   0x3913633   0/0/0
Rome.00-000x0002   0x1196617   0/0/0
Rome.01-000x0002   0x2D62628   0/0/0
London.00-00  0x0005   0x9EA1631   0/0/0
Brussels.00-000x0003   0xCFB3624   0/0/0
Brussels.01-000x0002   0x1962634   0/0/0
Paris.00-00   0x000C   0x8D31575   0/0/0
Paris.01-00   0x0003   0x62151189  0/0/0
Berlin.00-00  0x000E   0x1967623   0/0/0
 
TIA,
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51878t=51878
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Simple (silly) question on PING [7:51580]

[cebuano]

Just want to follow up on my first question. It turned out to be a
misbehaving interface, i.e. Layer 1 issue. You do get a reply with
a broadcast Ping from each host in the subnet.
However, in spite of the one router interface giving me issues, I'm
Still trying to TRACE the logic as to how a second router can elicit
a PING reply from the first router when Router1 cannot initiate the
PING, in spite of the fact that both have each other's ARP table 
Aware of each other. If only the debug ip icmp would give you an
Error output when the PINGs don't succeed.
Thanks. 
Elmer
P.S. Kevin, I wish I had vocabulary like yours :-

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Kevin Cullimore
Sent: Sunday, August 18, 2002 3:08 PM
To: [EMAIL PROTECTED]
Subject: Re: Simple (silly) question on PING [7:51580]

- Original Message -
From: cebuano 
To: 
Sent: 17 August 2002 11:35 pm
Subject: Simple (silly) question on PING [7:51580]


 Hi all,
 Just two simple but annoying PING questions.
 1. Why is it that on a broadcast medium, you can issue ping
 224.0.0.5 and have all OSPF routers respond (according to CCO), but
when
 I do a simple ping 192.168.10.255 on the subnet, no replies are seen
 from all the interfaces on this subnet? I know you'll say my brain is
 getting fried from too much rack exposure.

This is one of those cases that underscore the extent to which
communication
protocol specifications sometimes define a range of acceptable behavior
in
the face of a given set of conditions rather than a single acceptable
option. In some cases, the RFCs/Standards don't provide a reccomendation
for
how a given implementation should behave, leading to real-world
interoperability issues. A more obvious case where these considerations
matter involve the inexplicably persistent notion that distinct
implementations of a given standard should behave identically given
identical circumstances. In this case, whether or not a given icmp/ip
implementation responds to echo requests addressed to a layer 3
broadcast
address is left up to the vendor (which used to provide a quick-n-dirty
way
of performing simplistic os fingerprinting within a given broadcast
domain),
based on the use of the may keyword when describing within RFC 1122 when
describing the receiving host's behavior during that situation.

The key here is that the guidelines covering behavior in response to
received multicast  broadcast traffic are separate, allowing for
distinct
behavior, which may, in turn, reflect different needs/goals to be
addressed
when dealing with the two different (though conceptually related) types
of
traffic.





 2. Using a crossover to connect two Ethernet interfaces, I can ping
 say RtrA's e0 from RtrB, but can't ping RtrB's e0 from RtrA. I know
some
 of you on the list have seen this before and have had a really
 crystal-clear explanation for this.

 TIA,
 Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51612t=51580
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

OSPF on secondary IP addresses [7:51525]

[cebuano]

Hi all,
Just want to verify Doyle vol.1 page 527 as saying.
Matisse will advertise subnet 172.19.35.0/25 [secondary on e0] to its
neighbors.
However, if the NETWORK AREA statement for 192.168.10.33 [primary on e0]
Should be deleted, subnet 172.19.35.0/25 will no longer be advertised.
 
My question is even with network 172.19.35.0 0.0.0.255 area
192.168.10.0 on
Matisse, this secondary IP/subnet is not in the database/routing table.
Has this been changed in the recent IOS, especially 12.0?
 
TIA,
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51525t=51525
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 2nd try : OSPF Q in CCIE prac. studies pg 786 [7:51369]

[cebuano]

Raj,
You can't summarize 172.16.10.0/29 into the RIP domain because Mark will
always prefer the longest match in his table. Therefore you can't do
area 10 range on John to summarize a network in the same Area 10. I
believe this is why Solie changed Mathew to Area 20 so this network can
be summarized into Mark's Area 10 who will then send the 172.16.10.0/24
into RIP.
You also can't do summary-address on Mark since this is to summarize
EXTERNAL networks coming into Area 10.
I notice your doing Solie now. Let's exchange notes as this book has
more errors than what's on the errata pages.

Elmer 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
K.T.
Sent: Wednesday, August 14, 2002 12:40 PM
To: [EMAIL PROTECTED]
Subject: Re: 2nd try : OSPF Q in CCIE prac. studies pg 786 [7:51369]

Rajesh,

It sounds like you have an ASBR on your hand.  You should probably use
summary-address 172.16.10.0 255.255.255.0 instead.  Give it a try.

K.T.
Rajesh Kumar  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi all,

 I was trying to setup this network in fig 12-9.  I got stuck in one
 particular route.  I am not able to view the route 172.16.10.0/24 on
the

 router peter which is running RIP and got to see this route as
 redistributed one.

 The question is in which router do I need to  give  the  area range 
 command in order to see this route appear on router peter.

 I tried several options of giving in the router john which is ABR
-as
 this area 10 range 172.16.10.0 255.255.255.0, but this summarised
 route is not advertised back to the same area for the ASBR router (
mark

 ) to redistribute to RIP.

 Any workaround to overcome this?


 PS :  Sample output of sh ip route for router peter shows this
route,
 but my setup doesn't = So I am trying to get some idea of how to make
 available this route.

 Thanks,
 Rajesh




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51438t=51369
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 2nd try : OSPF Q in CCIE prac. studies pg 786 [7:51369]

[cebuano]

Raj,
One very small but IMPORTANT detail and I'm not sure if the author(s)
just didn't pay attention to when they copy/paste things into the book.
If you check Mathew's route table on page 790, his route to the directly
connected Ethernet is 172.16.10.0/24 (not /29 as the Lab IP
configuration says!!!).
Oh well, nice for troubleshooting in Day 2...
Oops, no more Day 2...

Elmer
Call me offline.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Rajesh Kumar
Sent: Wednesday, August 14, 2002 12:16 PM
To: [EMAIL PROTECTED]
Subject: 2nd try : OSPF Q in CCIE prac. studies pg 786 [7:51369]

Hi all,

I was trying to setup this network in fig 12-9.  I got stuck in one
particular route.  I am not able to view the route 172.16.10.0/24 on the

router peter which is running RIP and got to see this route as
redistributed one.

The question is in which router do I need to  give  the  area range 
command in order to see this route appear on router peter.

I tried several options of giving in the router john which is ABR -as
this area 10 range 172.16.10.0 255.255.255.0, but this summarised
route is not advertised back to the same area for the ASBR router ( mark

) to redistribute to RIP.

Any workaround to overcome this?


PS :  Sample output of sh ip route for router peter shows this route,
but my setup doesn't = So I am trying to get some idea of how to make
available this route.

Thanks,
Rajesh




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51439t=51369
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: 2nd try : OSPF Q in CCIE prac. studies pg 786 [7:51369]

[cebuano]

Roger,
If I remember correctly, 172.16.2.0/24 showed up in peter's route table.
Unfortunately, I've wiped out this lab and rewired my rack to do other
labs. 
I'll keep you posted when I revisit this scenario sometime this weekend
or next week.

Elmer

-Original Message-
From: Roger Huang [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, August 15, 2002 10:43 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: 2nd try : OSPF Q in CCIE prac. studies pg 786 [7:51369]

Hi,

Actually, peter is missing 172.16.2.0/30 also. I tried to add ip
summary-address rip 172.16.10.0 255.255.255.0 in john's s0.1, but it
does not work. I remember Karl did that in a lab redistributing EIGRP to
RIP, so I thought it might be the same thing.

The other issue I am having with this example is that I cannot ping b/w
mark and mathew on the serial interfaces. I got the the following on
John when performing ping 172.16.1.6 on mark:

IP: s=172.16.1.1 (Serial0.1), d=172.16.1.6 (Serial0.1), len 100, rcvd
local pkt
ICMP type=8, code=0
IP: s=172.16.1.1 (Serial0.1), d=172.16.1.6 (Serial0.1), len 100, rcvd
local pkt
ICMP type=8, code=0

Any ideas?

Thanks
Roger

-Original Message-
From: cebuano [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 14, 2002 11:25 PM
To: [EMAIL PROTECTED]
Subject: RE: 2nd try : OSPF Q in CCIE prac. studies pg 786 [7:51369]


Raj,
One very small but IMPORTANT detail and I'm not sure if the author(s)
just didn't pay attention to when they copy/paste things into the book.
If you check Mathew's route table on page 790, his route to the directly
connected Ethernet is 172.16.10.0/24 (not /29 as the Lab IP
configuration says!!!).
Oh well, nice for troubleshooting in Day 2...
Oops, no more Day 2...

Elmer
Call me offline.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Rajesh Kumar
Sent: Wednesday, August 14, 2002 12:16 PM
To: [EMAIL PROTECTED]
Subject: 2nd try : OSPF Q in CCIE prac. studies pg 786 [7:51369]

Hi all,

I was trying to setup this network in fig 12-9.  I got stuck in one
particular route.  I am not able to view the route 172.16.10.0/24 on the

router peter which is running RIP and got to see this route as
redistributed one.

The question is in which router do I need to  give  the  area range 
command in order to see this route appear on router peter.

I tried several options of giving in the router john which is ABR -as
this area 10 range 172.16.10.0 255.255.255.0, but this summarised
route is not advertised back to the same area for the ASBR router ( mark

) to redistribute to RIP.

Any workaround to overcome this?


PS :  Sample output of sh ip route for router peter shows this route,
but my setup doesn't = So I am trying to get some idea of how to make
available this route.

Thanks,
Rajesh




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51487t=51369
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Local Cisco office and CCIE [7:51282]

[cebuano]

I believe this is only true for Silver and up if the local Cisco CAM
will sponsor you to the ASET program, which has been on, off, on, off...
You can contact your local Cisco office to see if the in-house lab
engineer will let you practice on their equipment. Last time I checked,
the SE was real friendly, as long as he thinks you won't damage anything
on the racks.

Elmer
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
NetEng
Sent: Monday, August 12, 2002 8:00 PM
To: [EMAIL PROTECTED]
Subject: Local Cisco office and CCIE [7:51282]

I thought I read once on cisco.com (can not find now) that once you pass
the
CCIE written your local cisco office will help you prepare for the lab
portion with local lab/resources. Was this wishful thinking or do they
help?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51284t=51282
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RS Lab Study Partner in Hampton Roads, VA [7:51292]

[cebuano]

Hi,
If you are scheduled for the lab and live in the Hampton Roads
Or Tidewater, VA area, please contact me offline if you are
Interested in a study partner.
 
[EMAIL PROTECTED]
 
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51292t=51292
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: OSPF or IS-IS [7:51153]

[cebuano]

I hope it's not like comparing regular and decaf :-
Thank you for the link.
(NO!! When will this info overload end!!)

Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Lupi, Guy
Sent: Saturday, August 10, 2002 2:02 PM
To: [EMAIL PROTECTED]
Subject: OSPF or IS-IS [7:51153]

I have been arguing with myself quite a bit lately on which IGP would be
better to use on a large internetwork, and found a lot of differing
opinions
on which of these 2 protocols to use.  Dave Katz did an excellent
presentation on the subject at the 1999 Albuquerque NANOG, I figured I
would
forward it to the group because I found it so helpful.  It is about an
hour
long but definitely worth it.


http://www.nanog.org/mtg-0006/real/ospf-isis.ram


Guy H. Lupi
CCIE No. 9275




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51166t=51153
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Most bug-free IOS version for the lab [7:51097]

[cebuano]

Hi all,
I'd like to get a general feedback from people gearing up for the lab
which 12.0 IOS release you find least problematic. I'm running
flash:c4500-a3jk8s-mz.122-5.bin and flash:/c2500-jk8os-l.122-1b.bin.
Haven't had any major issues until I hit OSPF labs. From clear ip ospf
proc not working and requiring a reload to NBMA routes/LSA issues.
Please post your recommendations or comments. Thank you.
 
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=51097t=51097
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: OSPF Advertisments [7:49659]

[cebuano]

Okay...
For the CCIE Lab, since static routes are almost always prohibited, what
other options do you have to accomplish this requirement?

Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Dagoski Sam
Sent: Thursday, July 25, 2002 11:43 AM
To: [EMAIL PROTECTED]
Subject: RE: OSPF Advertisments [7:49659]

Gil Shulman wrote:
 
 Hi all,
 
 Does know how and if I can advertise via OSPF an HSRP IP
 address as a
 defualt gateway.
 

Setup a static route with a /0 mask pointing to the HSRP interface and
redistribute into OSPF.

-Sam




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=49687t=49659
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Anyone tried Huawei Routers ? [7:49670]

[cebuano]

Yeah, this company even has its own stack of certs starting with
HCNE, HCSE, and last but not least, HCIE!!! Yikes, some more paper
Certs to hang on the wall :-
But on the serious note, if I can get this 3640 for $500 and load a
Cisco IOS, who cares?? Heck, buy the 3680.

Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Ron Tan
Sent: Thursday, July 25, 2002 12:16 PM
To: [EMAIL PROTECTED]
Subject: OT: Anyone tried Huawei Routers ? [7:49670]

Hi group,

A piece of Huawei 3640 router just came in the office for evaluation.
The
whole box seems like a complete duplicate of Cisco's routers, even the
CLI
looks and feels like home.

Heard that the Huawei box has the ability to run EIGRP and HSRP together
with Cisco. Anyone tried running the 2 boxes parallel together ?

Comments welcome.

Regards,

Ron Tan
[EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=49691t=49670
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: private addressing [7:49083]

[cebuano]

Howard,
Since 192.168/16 is supposedly Class C, can you tell me why if I
configure RIPv1 it allows me to configure network 192.168.0.0 instead
of giving me an error? I've tested it and of course it does not generate
or accept any updates until you change it something like 192.168.10.0.
Although it reports when you do a sh ip prot that it is routing for
networks 192.168.0.0 and 192.168.10.0. Is this a Cisco IOS feature?
I guess the same thing holds true with my question on the 172.16/12
Private IP. Thanks in advance for your input.

Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Howard C. Berkowitz
Sent: Thursday, July 18, 2002 9:11 AM
To: [EMAIL PROTECTED]
Subject: Re: private addressing [7:49083]

Can anyone tell me.

172.16.0.0 - 172.31.0.0 is used for class B private addressing..

That means that it can use 16 class B network address

Now, let say I wan to use 172.35.0.0 block, so is this consider a
private
address or a public address ?

Public.

The private blocks are

10/8
172.16/12
192.168/16

Again, the sooner you stop thinking in classful terms, the easier 
real-world addressing becomes.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=49181t=49083
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

FW: PIX 520 Motherboard repair replace [7:48959]

[cebuano]

Mike,
If this has been asked before, I apologize for missing it.
Is there a specific Intel NIC model required for this to work?
Is there a way to tell if it's a 2Mb or 8 or 16 Flash card?
Do you have some info on types of errors you see if the Flash is DOA?
Last, what flash file are you running on your featured frankenpix?

TIA,
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 16, 2002 6:29 PM
To: [EMAIL PROTECTED]
Subject: RE: PIX 520 Motherboard repair replace [7:48959]

Special drivers? bunk-

http://www.packetattack.com/frankenpix.html


It can be replaced with a normal, garden varity Intel SE440BX
motherboard. I
happen to use a recycled PII 300Mhz slot1 processor which had been used
as a
paperweight for the last year ;)

MikeS




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=49012t=48959
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: Router Simulation software up to CCNP Level [7:48669]

[cebuano]

Try the Cisco Interactive Mentor series.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Kerry
Sent: Friday, July 12, 2002 8:36 AM
To: [EMAIL PROTECTED]
Subject: Router Simulation software up to CCNP Level [7:48669]

Hello,
  I am a CCNP, working towards security certification. I am worried that
I'll gradually get de-skilled, if I am not actively working in the
Routing 
Switching environment. And cannot afford to set up a Lab now. Are there
any
Simulation software I can install on my laptop and use from time to
time.

Thanks for your time
Kerry




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48683t=48669
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

RE: MAC address in router ARP table [7:48377]

[cebuano]

Lim,
Two things regarding your post.
1. You can clear a single ARP CACHE entry using SNMP. Check this link...
http://www.cisco.com/warp/public/477/SNMP/clear_arp.shtml

2. Clearing the ARP-CACHE or REBOOTING the router will NOT allow you to 
duplicate a used STATICALLY assigned IP address. I don't know the rest
of
your network topology, so I'm assuming the IP you want to use for
another host is statically assigned to another host. Yes you'll have to
hunt this host down wherever it is and change its IP or release its
DHCP-assigned IP.

HTH,
Elmer

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Bob Timmons
Sent: Tuesday, July 09, 2002 7:30 AM
To: [EMAIL PROTECTED]
Subject: Re: MAC address in router ARP table [7:48377]

clear arp-cache

 Is rebooting the only solution? I am thinking of any other possible
 method...

 -Original Message-
 From: Carl Timm
 To: [EMAIL PROTECTED]
 Sent: 09/07/2002 2:13 PM
 Subject: RE: MAC address in router ARP table [7:48377]

 Are you practicing in the lab? If so, just reboot the router. If not,
 let me
 know.

 Carl




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=48399t=48377
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Can't see all PCs from within Network Neighborhood [7:47525]

[cebuano]

Dimitri,
The only way for WINS clients to browse resources across a ROUTED WINS
network is to configure your WINS server at each subnet to be Push/Pull
replication partners. A small caveat: make sure you are not dealing with
layer 2 or 3 issues that may be preventing upper layer services from
funtioning properly.

HTH,
Elmer
- Original Message -
From: dj 
To: 
Sent: Wednesday, June 26, 2002 5:56 PM
Subject: Can't see all PCs from within Network Neighborhood [7:47519]


 What is the most likely cause of not seeing all PCs from within Network
 Neighborhood?  I know this is a common problem, but I just need a real
 quick re-fresher on this topic.  There is also a WINS server in the
 networkl.
 Thanks,
 dj




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=47525t=47525
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

ISDN Lab Tips [7:47541]

[cebuano]

Hi, all.
Here's a link that might be helpful in clearing up some issues that might
arise in the ISDN part of the lab.
http://www.cisco.com/warp/public/129/bri_invalid_spid.html

Regards,
Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=47541t=47541
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Documentation CD Errors [7:47358]

[cebuano]

Hi,
I'm assuming you have installed all the components of the Installer CD and
that you are using Netscape as the DocCD browser. Make sure the URL is set
to http://127.0.0.1:8080/home/home.htm. Under Preferences in Netscape, make
sure that your proxy is set to off.
Do not use IE (specially version 6 which alone will not support Java applets
properly, unless you download the Java Runtime Environment - free - from
sun.com).
HTH,
Elmer

- Original Message -
From: Magondo, Michael 
To: 
Sent: Tuesday, June 25, 2002 2:21 AM
Subject: Documentation CD Errors [7:47358]


 Hi guys

 I have a problem that I'm sure you guys may have encountered before.
 Even after installing the recommended software, I still get gibberish
 when I click on any link on the documentation CD home page. I am
 currently using the November 2001 CD and have tried with various other
 editions of this CD. Can anyone suggest a quick course of action.

 Michael




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=47382t=47358
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Benchmark CCIE [7:47320]

[cebuano]

Just to reiterate...
I personally know a couple of candidates who had issues with their ISDN
switch in the lab to not work no matter what. As a matter of fact, in
Solie's book on page 459 he brings up this well-known transitive problem.
So lab candidates, pay attention to this page as it just might save you
$1250 plus some grief.
Perhaps someone can suggest to the lab folks to swap Adtran for Teltone or
Emutel ;-
My 2 cents...
Elmer

- Original Message -
From: Chuck 
To: 
Sent: Tuesday, June 25, 2002 12:30 PM
Subject: Re: Benchmark CCIE [7:47320]


 The folks who brought you the Caslow book and the old ECP1 class taught
 that you should do  all your L2 first, then make a second pass to do your
 L3. their reasoning was that it became easier to troubleshoot if you did
 things one layer at a time. Otherwise, if you put it all in, and there was
a
 problem, you had too many variables to consider.

 OTOH, these same folks are very big on checklists. Knowing, memorizing,
 ordered lists of things to do in each and every situation.

 Putting ISDN aside for a moment, given that the current Lab structure
 assures that your L1 is good, and that your L3 is pretty much ( not
100% )
 ready to go,  that leaves you a bit more freedom in how you approach
things.

 Everyone who has studied ISDN knows that it can be problematic, even in
the
 best of circumstances. The CCIE Lab is definitely NOT the best of
 circumstances!  My opinion, based on practice and on conversation, is that
 you have to have confidence that you can configure it correctly from
 scratch, and be confident that even if it does not appear to be working,
 that you have done things correctly.

 this is where the checklist approach comes in, and where you need to
develop
 a consistent approach each and every time you do ISDN  ( or anything else
 for that matter )

 if you are told, for example, to use PAP authentication, and to use the
 router name as the authentication name, will that throw you off if you
have
 studied in a particular manner? OTOH, if your checklist goes something
like:

 ISDN: Calling party

 I) physical interface steps
 a) setup
 b) authentication
 1) pap
 2) chap

 II ) logical interface steps
 a) setup
 b) authentication
 1) PAP
 2) CHAP

 ISDN: Called party

 I) physical interface steps
 a) setup
 b) authentication
 1) pap
 2) chap

 II ) logical interface steps
 a) setup
 b) authentication
 1) PAP
 2) CHAP


 that gives you a framework from which you can quickly and easily configure
 ISDN under any given set of circumstances.
 Obviously, this checklist is by no means complete. but I think you get the
 idea. Don't lose yourself in memorizing configurations, don't get
distracted
 by infinite variations,  do learn the specific details based on a
consistent
 approach.

 this, BTW, is where speed comes into play. Speed is not how fast you can
 type. It is how fast you can turn the written requirement into a working
 configuration. If you have to spend too much time thinking about the
 requirement, you will find yourself out of time, no matter how fast you
 type.

 JMHO from someone who's been there and will be there again.


 Pierre-Alex Guanel  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Thank you for the Tips Bernard. I will change my bad habits :)
 
  Just curious... When you configure your routers do you enter all the
  commands in global config mode, then interface mode, then router mode
  ? Or do you configure the routers according to the sequence in which the
  router operates (for example: Layer 1, Layer 2, Layer 3)?
 
  I have found that when I configure my routers the second way, I feel
much
  more in control of what is going on (because the config is logical). The
  down side is that I take much more time because I am some how thinking
 about
  the process while I am doing it.
 
  On the other hand, when I configure from memory (i.e. all commands in
 global
  mode, then interface mode ...) there is no internal dialog but things
 are
  going much faster and I can keep within the timeline.
 
  I would like to know how the folks who took the CCIE and those who are
 close
  to taking it configure routers under time presure: memorization of
configs
  or sequence in which the router operates
 
  Thanks,
 
  Pierre-Alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=47404t=47320
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Basic Frame Relay Issues [7:46174]

[cebuano]

Chuck,
Thanks for the insight. I had a feeling this was one of the many what's
changed in IOS 12.0.
I Just hope I won't encounter too many issues that require a reload in the
lab.

Elmer

- Original Message -
From: Chuck 
To: 
Sent: Monday, June 10, 2002 12:47 AM
Subject: Re: Basic Frame Relay Issues [7:46174]


 cebuano  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hi, all.
  Two minor issues I have with FR in my practice lab...
  1. I always thought that frame-relay map statements automatically
disable
  Inverse ARP. But while looking at Solie's Lab 13, he specifically
entered
 no
  frame-relay inverse-arp and no arp frame-relay prior to creating the
 map
  entries. Can someone tell me what I'm missing?

 CL: somewhere around IOS ver 12.0, the behaviour changed. Inverse arp is
no
 longer disabled when a frame relay map is entered.

 CL: you may also run into the famous frame relay map to 0.0.0.0 problem,
the
 cure for which is to enter the no frame inverse etc, save, then reload


 
  2. Is it necessary to enter the command no arp frame-relay after no
  frame-relay inverse-arp? And what exactly are the differences with
these
 two
  as I'm quite unfamiliar witeh the no arp frame-relay command?
 

 CL: no help here.  the command master index on the doc CD gives this
 explaination:

 Usage Guidelines

 Unlike most commands that have multiple arguments, the arp command has
 arguments that are not mutually exclusive. Each command enables or
disables
 a specific type of ARP. For example, if you enter the arp arpa command
 followed by the arp probe command, the Cisco IOS software would send three
 packets (two for probe and one for arpa) each time it needed to discover a
 MAC address.

 The arp probe command allows the software to use the Probe protocol (in
 addition to ARP) whenever it attempts to resolve an IEEE-802.3 or Ethernet
 local data-link address. The subset of Probe that performs address
 resolution is called Virtual Address Request and Reply. Using Probe, the
 Cisco IOS software can communicate transparently with Hewlett Packard
 IEEE-802.3 hosts that use this type of data encapsulation.


 --
--
 
  Note   Cisco support for HP Probe proxy support changed as of Release
 8.3(2) and subsequent software releases. The no arp probe command is now
the
 default. All interfaces that will use Probe must now be explicitly
 configured for the arp probe command.

 --
--
 

 Given a network protocol address (IP address), the arp frame-relay command
 determines the corresponding hardware address, which would be a data-link
 connection identifier (DLCI) for Frame Relay.

 CL: looks like the no arp frame-relay is an alternative to the no
 frame-relay inverse-arp command, but I've been known to be wrong. ;-

  Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=46197t=46174
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Frame Relay - L2 and L3 issues [7:46198]

[cebuano]

Hi, group.
I just want to share something I encountered while doing FR labs. This
stemmed
from doing Lab 13 of Solie's book. Anyway, if you don't have the book, the
scenario is basic map statements for spoke1 and spoke 2 running on Physical
Interfaces pointing to the Hub and InARP and ARP Frame disabled. The Hub has
a
multipoint with mapping to each spoke. There is EIGRP running on all three.
My test's goal is to verify if indeed a Layer 2 mapping (static or dynamic)
must exist before Layer 3 reachability is achieved in Frame Relay. What I
found was this...

1. For spoke 1, all I needed was a map to the hub and have a routing protocol
advertise spoke 2's subnet(s); as long as spoke 2 has a mapping to spoke 1
also configured. This scenario gives me connectivity from spoke 1 to spoke
2's
subnet(s) even though I have no mapping for spoke 2's IP.

4500-E#sh frame map
Serial2 (up): ip 10.10.1.9 dlci 111(0x6F,0x18F0), static,
  broadcast,
  CISCO, status defined, active
4500-E#ping 10.10.5.5

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.5.5, timeout is 2 seconds:

00:17:26: Serial2(i): dlci 111(0x18F1), pkt type 0x800, datagramsize 64
00:17:27: Serial2(o): dlci 111(0x18F1), pkt type 0x800(IP), datagramsize 104
00:17:27: Serial2(i): dlci 111(0x18F1), pkt type 0x800, datagramsize 60
00:17:27: Serial2(i): dlci 111(0x18F1), pkt type 0x800, datagramsize 104
00:17:27: Serial2(o): dlci 111(0x18F1), pkt type 0x800(IP), datagramsize 104
00:17:27: Serial2(i): dlci 111(0x18F1), pkt type 0x800, datagramsize 104
00:17:27: Serial2(o): dlci 111(0x18F1), pkt type 0x800(IP), datagramsize 104
00:17:27: Serial2(i): dlci 111(0x18F1), pkt type 0x800, datagramsize 104
00:17:27: Serial2(o): dlci 111(0x18F1), pkt type 0x800(IP), datagramsize 104!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/56/64 ms
4500-E#
00:17:27: Serial2(i): dlci 111(0x18F1), pkt type 0x800, datagramsize 104
00:17:27: Serial2(o): dlci 111(0x18F1), pkt type 0x800(IP), datagramsize 104
00:17:27: Serial2(i): dlci 111(0x18F1), pkt type 0x800, datagramsize 104

2. But with the same scenario, spoke 2 might have a mapping to spoke 1 and
have spoke1's subnet(s) in its routing table, yet there is no reachability at
all, as this shows...

4500-F(config)#int s2
4500-F(config-if)#frame map ip 10.10.1.10 121 broadcast
4500-F(config-if)#^Z
00:27:11: %SYS-5-CONFIG_I: Configured from console by console
4500-F#sh frame map
Serial2 (up): ip 10.10.1.9 dlci 121(0x79,0x1C90), static,
  broadcast,
  CISCO, status defined, active
Serial2 (up): ip 10.10.1.10 dlci 121(0x79,0x1C90), static,
  broadcast,
  CISCO, status defined, active
4500-F#ping 10.10.3.3

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.3.3, timeout is 2 seconds:
.
Success rate is 0 percent (0/5)

In case someone wants to know, this is the version loaded in both spokes...
c4500-a3jk8s-mz.122-5.bin

Also, I think the only reason why the author explicitly entered the commands
no frame inverse and no arp frame was to prevent the spokes from
obtaining
DYNAMIC mapping to each other if you FORGOT to enter static mappings to each
other, since there's nowhere in the lab where you remove the previously
configured frame route for both spokes at the FRAME-SWITCH.

N.B. Reinitializing the spoke's serial interfaces made no difference. Same
holds true for clear frame inarp.
N.N.B. Enabling/disabling ARP FRAME and FRAME INVERSE-ARP made no difference,
as obviously the static entries are preferred.

Any comments on this one-way street behavior will be greatly appreciated.

Thanks.

Elmer
What problem are you trying to study, group?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=46198t=46198
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Basic Frame Relay Issues [7:46174]

[cebuano]

Hi, all.
Two minor issues I have with FR in my practice lab...
1. I always thought that frame-relay map statements automatically disable
Inverse ARP. But while looking at Solie's Lab 13, he specifically entered no
frame-relay inverse-arp and no arp frame-relay prior to creating the map
entries. Can someone tell me what I'm missing?

2. Is it necessary to enter the command no arp frame-relay after no
frame-relay inverse-arp? And what exactly are the differences with these two
as I'm quite unfamiliar witeh the no arp frame-relay command?

Thanks.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=46174t=46174
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE Lab Reading [7:45486]

[cebuano]

Hello, all.
Can we compile some kind of tips/tricks that people use to get the most
accurate
searches on the Documentation CD? I'd like to start relying more on it
versus CCO
since it's the only friend we have in the lab. Well, the proctor, i guess it
depends on
his mood :-/

Elmer

- Original Message -
From: Michael L. Williams 
To: 
Sent: Friday, May 31, 2002 1:08 AM
Subject: Re: CCIE Lab Reading [7:45486]


 Chuck  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Someone who passed the lab recently advised me ( as have other folks who
  have posted their success here and elsewhere ) that it remains CRITICAL
 that
  you spend as much time as possible reading the command references as
found
  on CCO. Print as much out as you can. Study them. Knowing the knobs,
 knowing
  where to find things is very helpful.

 Chuck,

 Quick question..  I realize that knowing commands and being quick at
 configuration a requirement in the lab.  A CCIE friend of mine
suggested
 that I learn to find virtually everything instantly on Cisco's
Documentation
 CD.  Having said that, (and I'm asking because your post implied that you
 had taken it before), without breaking NDA (of course), is there really
time
 to look up anything on the CD?  I realize it's impossible to memorize
every
 single thing.. especially commands, but it seems to me that
referencing
 the CD could take even more time even if you know where to look.  Am I
 way off base here?

 Thanks for you input!

 Mike W.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45509t=45486
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Basic ISDN BRI config needed [7:45416]

[cebuano]

Hi,
Thanks for pointing that out. I actually got it back up after I wiped out
everything and just started from scratch. That's what happens when you
get caught up working on different scenarios. ;-
Time to rest the mind and watch the NBA...

Elmer

- Original Message -
From: Wes Stevens 
To: 
Sent: Wednesday, May 29, 2002 10:07 PM
Subject: Re: Basic ISDN BRI config needed [7:45416]


 Your dialer sting needs to be the phone number of the other teletone port.
 For the first router it should be 8358662 and 8358661 for the second
router.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45438t=45416
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: MRTG and ISDN [7:45421]

[cebuano]

Mohd,
You need to recompile the file(s) needed by MRTG so it can properly
identify the NEW interface(s) to monitor. Check the documentation
to guide you on how to do this. Good luck.

Elmer

- Original Message -
From: Mohannad Khuffash 
To: 
Sent: Wednesday, May 29, 2002 11:03 PM
Subject: MRTG and ISDN [7:45421]


 Dear All,
 I have the MRTG since a long time worked well for monitoring my 60 remote
 sites where most of them 1601 sereis routers(11.2 IOS), when i decide to
 have a backup link for some sites i install BRI WIC and make the
 configuration, the probem that the MTRG being confused for monitoring the
 primary link which is a TDM or a RF(the ISDN is not active) , it give me
 either zero traffic or a little steady traffic, where either didn't
reflect
 the true traffic !! Any one have an idea ?

 Thanks


 --







 Mohannad N. Khuffash
 Network Administrator
 Palestine Telecommunication Company
 Tel: 00972-02-2982330
 Fax:00972-02-2980235




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45439t=45421
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Basic ISDN BRI config needed [7:45416]

[cebuano]

Hi, group.
I've been trying to get my ISDN working using Teltone ILS-2000. Here's my
config
and some basic show output. Please tell me what I'm missing. I tried doing
the
most
basic BRI config using HDLC as pointed out in Caslow, but even that did not
work.
Basically it seems to bring up the link for a few seconds and even bri 0 1
will show as
UP/UP but I am not getting any ping replies. Any help would be greatly
appreciated.

Elmer

2503#ping 172.16.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.1.2, timeout is 2 seconds:
.
Success rate is 0 percent (0/5)

2503#
04:00:33: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
04:00:53: %ISDN-6-DISCONNECT: Interface BRI0:1  disconnected from 2002 , call
lasted 20 seconds
04:00:53: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down

2503#
isdn switch-type basic-ni
!
interface BRI0
 ip address 172.16.1.1 255.255.255.0
 dialer idle-timeout 90
 dialer string 2002
 dialer load-threshold 1 outbound
 dialer-group 1
 isdn switch-type basic-ni
 isdn spid1 0835866101 8358661
 isdn spid2 0835866301 8358663
 cdapi buffers regular 0
 cdapi buffers raw 0
 cdapi buffers large 0
!
ip kerberos source-interface any
ip classless
!
dialer-list 1 protocol ip permit

2503#sh isdn stat
Global ISDN Switchtype = basic-ni
ISDN BRI0 interface
dsl 0, interface ISDN Switchtype = basic-ni
Layer 1 Status:
ACTIVE
Layer 2 Status:
TEI = 74, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED
TEI = 75, Ces = 2, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED
TEI 74, ces = 1, state = 5(init)
spid1 configured, spid1 sent, spid1 valid
Endpoint ID Info: epsf = 0, usid = 1, tid = 1
TEI 75, ces = 2, state = 5(init)
spid2 configured, spid2 sent, spid2 valid
Endpoint ID Info: epsf = 0, usid = 3, tid = 1
Layer 3 Status:
0 Active Layer 3 Call(s)
Active dsl 0 CCBs = 0
The Free Channel Mask:  0x8003
Total Allocated ISDN CCBs = 0

2503#sh dialer

BRI0 - dialer type = ISDN

Dial String  Successes   FailuresLast DNIS   Last status
2002 7  000:07:11   successful   Default
0 incoming call(s) have been screened.
0 incoming call(s) rejected for callback.

BRI0:1 - dialer type = ISDN
Idle timer (90 secs), Fast idle timer (20 secs)
Wait for carrier (30 secs), Re-enable (15 secs)
Dialer state is idle

BRI0:2 - dialer type = ISDN
Idle timer (90 secs), Fast idle timer (20 secs)
Wait for carrier (30 secs), Re-enable (15 secs)
Dialer state is idle

2503#sh int bri0
BRI0 is up, line protocol is up (spoofing)
  Hardware is BRI
  Internet address is 172.16.1.1/24
  MTU 1500 bytes, BW 64 Kbit, DLY 2 usec,
 reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation HDLC, loopback not set
  Last input 00:00:03, output 00:00:04, output hang never
  Last clearing of show interface counters 00:27:32
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: weighted fair
  Output queue: 0/1000/64/0 (size/max total/threshold/drops)
 Conversations  0/1/16 (active/max active/max total)
 Reserved Conversations 0/0 (allocated/max allocated)
 Available Bandwidth 48 kilobits/sec
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
 138 packets input, 799 bytes, 0 no buffer
 Received 5 broadcasts, 0 runts, 0 giants, 0 throttles
 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
 155 packets output, 846 bytes, 0 underruns
 0 output errors, 0 collisions, 0 interface resets
 0 output buffer failures, 0 output buffers swapped out
 2 carrier transitions

2516#
isdn switch-type basic-ni
!
interface BRI0
 ip address 172.16.1.2 255.255.255.0
 dialer idle-timeout 90
 dialer string 2001
 dialer load-threshold 1 outbound
 dialer-group 1
 isdn switch-type basic-ni
 isdn spid1 0835866201 8358662
 isdn spid2 0835866401 8358664
 cdapi buffers regular 0
 cdapi buffers raw 0
 cdapi buffers large 0
!
ip kerberos source-interface any
ip classless
!
dialer-list 1 protocol ip permit

2516#sh isdn stat
Global ISDN Switchtype = basic-ni
ISDN BRI0 interface
dsl 0, interface ISDN Switchtype = basic-ni
Layer 1 Status:
ACTIVE
Layer 2 Status:
TEI = 72, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED
TEI = 73, Ces = 2, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED
TEI 72, ces = 1, state = 5(init)
spid1 configured, spid1 sent, spid1 valid
Endpoint ID Info: epsf = 0, usid = 2, tid = 1
TEI 73, ces = 2, state = 5(init)
spid2 configured, spid2 sent, spid2 valid
Endpoint ID Info: epsf = 0, usid = 4, tid = 1
Layer 3 Status:
0 Active Layer 3 Call(s)
Active dsl 0 CCBs = 0
The Free Channel Mask:  0x8003
Total Allocated ISDN CCBs = 0

2516#sh dialer

BRI0 - dialer type = ISDN

Dial 

Re: Discontiguous networks ? [7:45220]

[cebuano]

Phil,
Without seeing your config, the first thing that comes to mind
with your RIP experiment is
do you have no ip classless on all your RIP routers?
Before using no auto-summary with RIP,
check the notes on your IOS version on CCO.
Ver.12.2 specially has features that are new, you'd be
amazed what the above command does.

Elmer

- Original Message -
From: Phil Barker 
To: 
Sent: Tuesday, May 28, 2002 4:52 AM
Subject: Discontiguous networks ? [7:45220]


 Hi group,
  I set up a Lab to highlight the problem that
 discontiguous networks brings to distance vector
 protocols. I seperated three Class B networks
 (172.16.1.0/24, 172.16.2.0/24, 172.16.3.0/24) with the
 class C networks (192.168.1.4/30  192.168.1.8/30).

 As expected with RIP 1, I can clearly see network
 172.16.0.0/16 being advertised over the serial
 interfaces, with 'debug ip rip'.

 I then configured the Lab for RIP 2 thinking that this
 would be a solution to the problem, since RIP 2
 advertises the subnet mask with the network address,
 but ran up against the same problem as RIP 1.

 I can solve the problem using secondary addresses,
 however, I feel that RIP 2 should also solve the
 problem.

 Am I missing something here ?

 Just thinking out loud, should I have put 'no
 auto-summary' under the rip routing ? maybe it
 defaults to classful behaviour anyway !!!

 Appreciate any responses.

 Phil.

 __
 Do You Yahoo!?
 Everything you'll ever need on one web page
 from News and Sport to Email and Music Charts
 http://uk.my.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45224t=45220
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Doyle on Lab Rats [7:44611]

[cebuano]

Comments inline.

- Original Message -
From: nrf 
To: 
Sent: Monday, May 27, 2002 11:52 PM
Subject: Re: Doyle on Lab Rats [7:44611]


 Keep on reading through my old post,  I was getting to the link between
 experience and your network.  The nutshell of it is that experience
 generally lets you grow a good network (both the router kind and the
people
 kind).You don't meet too many people by hanging out at Sylvan
Prometric.
Yeah, the ratio between Cisco and everything-else examinees are 1 to 50.
The ratio between 350-001 and everything-else is about 0.1 to 100.
I know cause I work for a company that preaches exam-passing as a Gospel.
I wonder how much percentage of the exam fees they get.

 I said it before, I'll say it again.  Some experience is exceptionally
bad.
 But some experience is exceptionally good.  So when some guy says he has 5
 years experience, it might be bad experience, but it might be good
 experience.  So without any further information, it's not unreasonable to
 say that 5 years is really worth 5 years, until you investigate further to
 find out that it's actually 1, or 5, or 15, or whatever.
You hit the nail right on the head again.
There are certainly individuals who thrive on growth in their field. But
I've
seen too many who are just doing time.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45225t=44611
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Doyle on Lab Rats [7:44611]

[cebuano]

Ditto that!
That's the reward good engineers get for not falling asleep on the job.
After all, who can sleep when you have pagers, cell phone, desktop phone,
e-mail, NNM/CWSI alerts, etc. forming a chorus.
;-%

- Original Message -
From: nrf 
To: 
Sent: Monday, May 27, 2002 8:07 PM
Subject: Re: Doyle on Lab Rats [7:44611]


 What can I say, when the network is stable, there really isn't a whole lot
 to do.


  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  My how I envy the spare time this posting demonstrates!




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45179t=44611
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Doyle on Lab Rats [7:44611]

[cebuano]

Well, we're following an SMTP  version of the film Of Mice and Men...
Elmer
- Original Message -
From: Priscilla Oppenheimer 
To: 
Sent: Monday, May 27, 2002 9:44 PM
Subject: Re: Doyle on Lab Rats [7:44611]


 Don't you guys have a life!? :-) It's Memorial Day for heaven's sake. This
 thread has been going on for way too long.

 Priscilla

 At 06:37 PM 5/27/02, nrf wrote:
 Michael L. Williams  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   nrf  wrote in message
   [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Well, I don't know if it's a waste of time.  Consider this.  There
 might
   be
some newbie guys who were all gung-ho about grabbing a bunch of
certs
because they believed that by doing so they would just be handed a
super-kick-ass job (no doubt some training school told them so).
Now
perhaps after reading these threads they may be getting a whole new
appreciation for exactly what certs can and cannot do for them, and
 they
   may
be rethinking their whole strategy, and perhaps even stop studying
and
instead concentrate on building their experience first.
  
   Actually, in the case you pointed out, if someone stops studying to
   concentrate on building experience first, then I believe you have done
 those
   people a great disservice.
  
   Many people use certifications as a foot in the door into a network
 career
   from other careers.  We've agreed (many times) that just because one
gets
 a
   certifications that their not entitled to a high level job with lots
of
   money, but at the same time, a certification can be the difference
 between
   getting that foot in the door or not.  If ones goal is to use
 certifications
   to prove a certain level of knowledge and abilities in an attempt to
get
   into the field, then steering them in the direction of get experience
   first, then worry about certs later is exactly the opposite of what
 could
   potentially help them the most.
 
 Aha.  Here is the fundamental difference between you and me.
 
 The fact is, certifications are not really an effective foot-in-the-door,
 contrary to popular belief.  Yeah yeah, would-be flamers, I just got your
 attention, didn't I?  I can already hear you guys reaching for your
 keyboards.  But hear me out.
 
 The fact is, certs are indeed useful to get publicly posted jobs.  You
know,
 the jobs where you have to send out a resume which then gets parsed
through
 HR who look for certain keywords.  Those keywords are often technologies,
 but are also often certs.  It is indeed the case that to get your
 'foot-in-the-door' in these kinds of jobs, you need present the proper
 keywords, which often means presenting the right kind of certs.
 
 However, consider this.  CNN and other reputable news organization have
 stated that over 90% of all available jobs are never posted publicly,
 especially nowadays, and especially in the tech industry.  Study after
study
 has shown that far and away the most common and preferred method for
 companies to find people is through employee referral.   Surely you've
heard
 the phrase It's not what you know, it's who you know.
 
 In fact, surely you're seen all those books and all those websites that
tell
 people how to find jobs.  What's the first piece of advice that they
always
 give?  The first thing they always say is use your network.  It's not
get
 proper certs or type up a really good resume.  Those things are like
5th
 or 6th on the list, but never first.   The first thing is always  use
your
 network.   Why is that?  I think this speaks to the importance of having
 the proper contacts.  It truly is far and away the most effective way to
 find work.
 
 And the simple fact is, when you get jobs this way, certs become a
 relatively minor consideration.  When the boss comes down and asks his
 people whether they know somebody with such-and-such skill, your
colleague
 generally doesn't care whether you hold a cert or whatever - he either
 thinks you're good (because he's worked with you before and he knows that
 you're good) and will therefore recommend you, or he doesn't and he
won't.
 And if you do get recommended by your colleague, you have effectively
 leapfrogged HR and their whole keyword-parsing step.  Employees usually
 don't want to professionally embarrass themselves by bringing in
somebody
 that they don't think is good, so the fact that you did get brought in
for
 an interview is already a powerful quality-control mechanism that the
boss
 can rely upon.  Is it a perfect quality-control mechanism?  No of course
 not, there is no perfect mechanism.  But it's been shown to be a lot more
 reliable than anything else, and certainly more reliable than certs are.
 The proof of this is simple - companies continue to rely on such
references
 for over 90% of their positions, which probably means that it's highly
 effective, otherwise they should have stopped doing things this way by
now.
 
 
 What that means is that if 

Re: written [7:45056]

[cebuano]

I totally agree with Kris on this, but with some sympathy reserved
to the origin of the post. The current RS is VERY elementary when
compared with it's beta. If you score around 80 in the current exam
I can tell you that number would be somehere around 
To: 
Sent: Sunday, May 26, 2002 4:02 AM
Subject: Re: written [7:45056]


 It sounds like you dont know the topics. The exam is VERY VERY easy for
any
 CCIE candidate, I find that if you are scoring 69% you do not know your
 topics.

 There is always a right answer in the questions, instead of complaining
how
 about you study the topics until you understand them?

 Cheers




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45072t=45056
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: written [7:45056]

[cebuano]

I totally agree with Kris on this, but with some sympathy reserved
to the origin of the post. The current RS is VERY elementary when
compared with it's beta. If you score around 80 in the current exam
I can tell you that number would be somewhere around 50 in the upcoming
exam. On the lighter side, the more you prepare and study for the test
the more knowledge you pick up along the way. My main fear when I
took the 350-001 test was not really on failing as much as LOSING
$300 for nothing. Ouch!

Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45077t=45056
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Jeff Doyle's official response re: lab rats [7:45001]

[cebuano]

NRF,
Thanks for posting what's on my mind.
THE reason for my original post was not to belittle the value of
experience in relation to certifications, but to raise the awareness
of the public in general about the insult that certified people have
to endure from more certifiable individuals who themselves
don't have the guts to go and take the test, which should be a
walk in the park for them, and get certified as well.
What's really sad about it is that these individuals seem to have
forgotten how they started in this profession. When i left my job
as an engineer responsible for one of the Navy's bases, I recommended
to my boss to hire this newbie (not even a lab rat as he had NO
lab equipments to play with, not even a router simulator) because
I knew that he was smart enough to apply his knowledge based
on all the things he had to study to get his certs. All he needed was
a mentor to get started. And that's what I did, although I only had less
than two weeks to show him the ropes. I did it because I owe much more
to people who have been kind to me in the past. As Howard said,
pay it forward. My own version of it is, Good works is all you can take
with you when your time is up! The beautiful laurel with your number
will have to be left behind like everything else.

Last of all, there are two ways to gain experience.
1) By true physical,emotional,psych experience.
2) By VICARIOUS experience.

The second is the main difference between us humans and the other species
because this allows us to pass on our experience so others behind us
don't have to reinvent the wheel. Thus it is the duty of the recepients to
refine the wheel, which then leads to progress.
Again this also follows another virtue in life, which is that of GIVING.

I'll end this post with this...
Since when are you less by giving?

Regards,
Elmer

- Original Message -
From: nrf 
To: 
Sent: Sunday, May 26, 2002 12:57 AM
Subject: Re: Jeff Doyle's official response re: lab rats [7:45001]


 Like I said, things might be fine for guys like us who have stable jobs
and
 good prospects.  But again, for those who might not be in that kind of a
 position whose financial position is getting a bit precarious and
therefore
 need to find decent work, it doesn't help when you have guys going around
 'talking smack' about the program.

 I will reiterate, I am not talking about myself.  My career is going just
 fine.  But that doesn't mean that I don't sympathize with the guys who I
 know to be good workers but who are having difficulties in this economy,
and
 I'll continue to advocate policies that help them out.  While I don't want
 to muzzle those trash-talkers because I don't believe in censorshop, I
 believe they are indeed harming the image of the program and the industry
at
 large and ideally some way would be figured out to stop them from doing
so.
 This extends to those training schools who promise a CCxx cert and a
 high-paying job for minimal work.  The more that HR thinks that all us
 network engineers are just a bunch of lazy-asses whose skills really
aren't
 that special ( according to these schools, you can apparently get those
 skills with just a few weeks of time at a training school), the worse off
 we're all going to be.


 Scott H.  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  So far paying the bills hasn't been a problem.  I tend to stick with the
  companies that have good reputations for the way they treat their
 employees.
  True, at some point in the future things will change but I'll deal with
 that
  when it happens.
 
  nrf  wrote in message
  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   True, but in the short-run, it does the program and anybody who
pursues
 it
   no favors.  I think I can distill your arguement to basically, ...in
 the
   long run, the quality of the CCIE program will inevitably out'.  My
   response is, like the economist John Maynard Keynes famously said:
 ...in
   the long run, we're all dead.   It's all well and good to stick to
the
   principle of saying that stupid HR people and hiring directors who
don't
   understand the program aren't somebody you would want to work for
 anyway,
   but your principles don't exactly help you very much in paying the
rent.
  
  
   Scott H.  wrote in message
   [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
If the HR people (or hiring manager) are that uninformed, as a CCIE,
 it
would not be a place I would want to work.  People tend to flock to
  places
that they are valued the most.  A company who doesn't understand the
  value
that a CCIE a brings to the table is not one that I would waste my
   precious
oxygen on.  Let's be honest here, the vast majority of tech
 departments
   out
there have a good idea that the CCIE is not another MCSE.  In my
part
 of
   the
world, I have not run into a hiring manager yet that doesn't
 understand
   the
value of a CCIE.
   
You know da*n well that guy has no chance of ever 

Jeff Doyle's official response re: lab rats [7:45001]

[cebuano]

Dear fellow professionals,
In fear of taking a person's words and using them out of context,
I decided to ask Mr. Doyle himself. He was kind enough to respond
to my e-mail, and I'm posting this with the hope of encouraging both
lab rats and gurus alike to aim for knowledge, not only certs,
and in the process help your fellow man/woman.
I put my faith in everyone to be civilized and not bash Mr. Doyle's
reputation, even if you disagree with his point of view.
Last but not least, I hope that this will put an end to personal attacks
that have become more common lately, unlike what groupstudy.com
used to be 2 to 3 years ago when I first signed up.

Thank you.
Elmer

- Original Message -
From: Jeff Doyle
To: elmer
Sent: Friday, May 24, 2002 2:28 PM
Subject: Re: Please care to comment on Vol.2 page 792

Hi Elmer,

Thanks for the clarification-- my definition of lab rat is a bit different
than yours. At Juniper, the lab rats tend to be the most experienced field
engineers. Nonetheless, under your definition (lab rat = someone with more
theoretical than practical experience), the statement applies equally to
those
with some practical experience and those with little or none.

I know exactly the kinds of old timers to which you refer-- typically these
are guys who have gained their knowledge gradually over the years through
practical experience. Scratch the surface of most of these guys, and you will
find little understanding of the foundations of the protocols and
technologies
they think they are experts at. Therein lies the source of their derogatory
attitude toward newbies: Insecurity in their own skills.

I regularly conduct technical interviews for Juniper, and I can tell you that
if a candidate has a deep understanding of the theories and facts of the
various IP networking protocols, I am impressed regardless of the candidate's
practical experience. If the engineer is smart and aggressive, it is easy
enough to team him or her up with a mentor to add the practical experience.

There is an opposite view on all this: I've encountered many people with
CCIEs
that think the certification is all they need to land a high-level networking
job. For me, seeing the CCIE certification on a resume makes me look closer,
and is usually enough to make me schedule a face-to-face interview. But once
the interview takes place, I expect the candidate to impress me with a level
of knowledge that goes well beyond what is required to pass the lab. The
first
three or four minutes of the interview is generally enough for me to
determine
whether the candidate truly knows his or her stuff, or whether the CCIE was
won by learning just what is needed to pass the lab and no more.

All this long-winded reply is saying is: Yes, getting the CCIE will help you
get ahead even if your practical experience is limited. It is an excellent
way
to prove your capabilities to prospective employers, but be sure the depth of
your theoretical knowledge well exceeds the rather limited things you need to
know to pass the lab.

As for your two PS's: I used 11-something for most of the book, and wrote the
BGP chapters quite early, which accounts for the outdated statement you cite
(and a few others). I have been discussing doing a second edition of the book
with Cisco Press to bring it up to date. The conflicting statements about
OSPF
P-T-MP is a known error, and should be corrected soon in newer printings of
the book.

Best regards,
Jeff

At 11:46 PM 5/23/2002 -0400, you wrote:

  Jeff,
  Thanks for the response. I know you are a very busy (and sought after) man.
  I just happened to read this particular page at a time when people new to
the
  networking field are despised by old timers who feel that lab rats don't
  deserve to pass the CCIE lab since all they have is lab experience.
  I was wondering if you personally feel that most of what one gets tested on
  in the lab have little resemblance with most production networks.
  Two reasons for asking you are:
  1.Obviouly, every lab candidate as well as my CCIE friends regard you as
  the authority on this particular certification.
  2. You are the author of the second CCIE bible which I am quoting.

  What is your opinion on a person who passes the lab with very little
  real networking experience?

  Respectfully,
  Elmer Deloso

  P.S. What IOS version did you use as reference when you wrote Vol.2?
  Because after checking CCO, page93 of your book talks about BGP
  version number negotiation until both neighbors agree on the same
  version. The Cisco implementation of BGP in Cisco IOS Release 12.0(6)T
  or later releases supports BGP Version 4 only and does not support
  dynamic negotiation down to Version 2.

  P.P.S. Does Ciscopress consult you regarding errata to your books?
  Because Vol.1 page 417 says OSPF packets in point-to-multipoint are
  multicast, but pages 433 and 451 say these are unicast.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=45001t=45001

Re: BGP load balancing [7:44697]

[cebuano]

Jeff,
I don't have a way of testing this right now. I'm still waiting for a few
crossover cables. But interestingly, i'm just reading Doyle's vol.2
page 92 When there are parallel paths to a particular destination,
Cisco's implementation of EBGP by default selects only one path.
So i must be misreading something here. I don't recall if this type
of scenario was in one of the BGP labs for BSCN.
I'll keep you posted of my own lab result.
Thanks.
Elmer

- Original Message -
From: jeff sicuranza 
To: 
Sent: Wednesday, May 22, 2002 2:46 PM
Subject: Re: BGP load balancing [7:44697]


 Yes it does if you are doing EBGP and your router has two or more directly
 conneted links to your EBGP peer. The the default load balancing will work
 if static routes or an IGP is used for your subnets linking your
neighbors.
 You see it is not BGP performing the load balancing but the normal
behavior
 of load balancing across equal cost paths (if exists) regardless if you
are
 using static or IGP routes.. EBGP multihop also does this however, you are
 still using the behavior of the static and IGP routes for equal cost paths
 but do not need to have your neighbors directly connected... Lab it you
will
 see... Have fun




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44894t=44697
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: RIP default routing [7:44863]

[cebuano]

Also default-information originate will generate 0.0.0.0
but this was introduced back in 11.2.

Elmer
- Original Message -
From: Chris Camplejohn 
To: 
Sent: Thursday, May 23, 2002 11:44 PM
Subject: Re: RIP default routing [7:44863]


 This behavior changed in 12.0T I believe, so it would be seen in 12.1
 mainline and beyond.  The RIP default route is no longer automagically
 redistributed into RIP.  You need to do it manually with redistribute
 static...or use ip default-network...

 Chris

 John Dorffler  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  In both the Caslow (1E p. 349) and Solie (p. 625) books it is stated
that
 if
  you are running RIPv1, and if you put a default route using ip route
  0.0.0.0 0.0.0.0 on one of the routers, a default route is automagically
  injected into the RIP process. I am sure I have seen this before working
 as
  a lab-rat (oops not that again) but I cannot reproduce it now. I am
using
  three 2500 series routers and have tried all combinations of statements
 and
  wiring. I am now wondering if it is a matter of IOS versioning. I just
put
  on the IP version of 12.1.15, which was just put out a few days ago.
Has
  anybody got this to work, and if so, with what version of IOS? By the
way,
  ip default-network works just fine.
 
  Thank you,
  John Dorffler
  CCIE #6677




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44934t=44863
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BGP load balancing [7:44697]

[cebuano]

Maurice,
BGP defaults to using only the BEST path, hence ONE.
Check CCO for path determination in BGP.
The other protocols default to maximum of four, but can
be extended to 6 with maximum-paths.
To turn on load-balancing in BGP, a few steps are needed:
1. enable eBGP multihop
2. use update-source loopback
3. enter the static routes to be used for load-balancing

If there's something i'm forgetting, please correct my post.
HTH,
Elmer

- Original Message -
From: 
To: 
Sent: Wednesday, May 22, 2002 6:03 AM
Subject: Re: BGP load balancing [7:44697]


 Need some advices from BGP experts : Does BGP do load balancing by
default?
 Says there are 4 parallel paths between the source and destination, will
 the traffic be distributed among the 4 paths? If it does not support load
 balancing by default, how to turn it on? How many parallel paths can it
 handle maximum?

 Thanks in advance!

 Maurice




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44701t=44697
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Logic and quot;Lab Ratsquot; [7:44653]

[cebuano]

Gang,
To put a closure to the thread, allow me to repeat the saying...
When a man with money meets a man with experience,
the man with experience ends up with the money, and
the man with money ends up with experience.
(Gals, no flame please.)

So please give these newbies a break. After all, didn't
ALL subscribers start from square one at some point in time?
Does it mean your employer let you handle the backbone
links from day 1? or 2? or 3?...In my case though, I got
fed to the wolves right from the get go. And with just my
CCNA, yes I had to learn everything there was i could
find on OSPF. Three weeks to research on and test BGP
and report to the boss about this protocol before we went live.
But I never claimed to be an expert. I did the best that I could.
And guess what? All those theories I gathered from the books
came back to me when time came to work out problems.
Again, I'm not saying I knew everything there was to know
about network troubleshooting.
I've been in the same situation as many, many aspiring
individuals who just want to enter into the profession that
ALL of us applied for in the past. Has experience given
people too much money that they can't remember where
they came from?

Thanks for all respondents.

Elmer

- Original Message -
From: nrf 
To: 
Sent: Tuesday, May 21, 2002 11:24 PM
Subject: Re: Logic and Lab Rats [7:44653]


 Amen to that.  Humility is called for on both sides.

 Apparently I've been tagged around here as the 'King Experience' guy.
The
 very ironic thing is that on another message board, I was the person who
was
 arguing that experience was NOT as important as other posters had
indicated
 (this was an experience vs. college degree argument).  Basically it boiled
 down to the fact that while experience is indeed extremely valuable,
 particularly nowadays, even experience can sometimes be taken too far.
For
 example, one guy said that experience always wins no matter what (which is
 patently false), so I gave him the example of 2 guys, whereas both guys
had
 good experience, but the first guy had stellar degrees from the most
famous
 schools, all kinds of certs, a killer personality, and everything else,
 whereas the second guy had none of that (besides the experience ), but he
 had a day's more experience.  Hey, if experience really beat everything
all
 the time, then companies should always pick the second guy, because after
 all, he had more experience (one additional day).   Clearly this is false.

 My point is simply this.  Experience, education, certs, work attitude,
etc.
 etc., they all form your suite of qualifications.  None of them should be
 pursued at the exclusion of all others.  In fact, the best strategy seems
to
 be to work on your weaknesses.  For example, if you have lots of certs and
 education, but no experience, then get experience.  Conversely, if you
have
 lots of experience, but no certs and no education, then go get certs and
 education.


 Thomas Larus  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  I thought the experience versus certification debate had finally died
a
  few days ago, but now it resurfaces over on the professional list.  I
may
 as
  well weigh in.
 
  The problem here is clear.  Some folks with lots of experience are
scared
  (or merely offended) that some manager or client might think some
relative
  newbie with great-sounding certs is as good or better (or even nearly as
  good) as the more experienced folks.  Many of these experienced people
  gained their experience in difficult or underpaid conditions.  The last
  thing they want is some ambitious upstart invaders studying hard in the
 lab,
  then walking into their field and being treated as their peers. The
  experience is everything crowd should relax right now, because in this
  economy,  they are in the driver's seat.
 
  One the other hand, the lab rats, myself included, are justifiably
scared.
  We knew that if by studying hard we managed to reach a higher position
 than
  our experience alone would justify, we might face some hostility from
 those
  with lots of experience.  Now, however, we are given to understand that
 for
  employers right now, experience is king, since there are plenty of folks
  with lots of experience and good certs to fill all positions that HAVE
to
 be
  filled (as opposed to those positions that employers advertise but are
in
 no
  hurry to fill).
 
  Then, there's the common complaint that, I'm always having to fix the
  networks screwed up by the paper-CCNAs, paper-MCSEs, Lab Rats, etc.
I
  have enough experience to know that plenty of the screwing-up of
networks
 is
  done by folks with lots of experience.  It doesn't take long in the
field
 to
  run across an arrogant but extremely experienced guy who thinks he is
the
  only person in his company who knows anything, and then proceeds to
break
  things that he then cannot fix.
 
  A little humility is called for in a field where almost no one can know
  

Doyle on Lab Rats [7:44611]

[cebuano]

Excerpt from Doyle's Vol.2 page 792.
Labs also provide an area of the network where you can just play around
with the commands, testing the effect of misconfigurations and practicing
troubleshooting. The lab can be used in this way for training and CCIE
preparation. Only with a lab can you THOROUGHLY experiment with
configurations, break things to see what happens, and determine what
symptoms identify misconfigurations.

This is exactly how we are all educated in colleges and universities.
Remember the labs in Physics, Chemistry, Biology, Human Anatomy...
So for those of you that have no respect for lab rats, you might need
to rethink your opinions.
I say more swiss cheese to lab rats!

Elmer
P.S. Don't forget the wine.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44611t=44611
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Doyle on Lab Rats [7:44611]

[cebuano]

I posted this message in response to a lot of rap, crap, xyz-rap, etc. that
individuals who devote their time, effort and money towards advancing
their knowledge and skill (and hopefully career) by building their own home
lab because this is the ONLY way they can get experience are getting.
When are we going to stop shoving this chicken-and-egg syndrome down
their throat? Everybody has to start somewhere.
Hell, do you think med school students start their career in medicine by
working in a production clinic? The only time they get to that level is
after years of learning the ins/outs involved in clinical practice IN A
LAB environment.
Nothing personal, but I just wanted to encourage lab rats who've been
discriminated against and wrongfully labeled by people who feel insecure
with their career.

Hope that clears things up.

Elmer

- Original Message -
From: Johnny Routin 
To: 
Sent: Tuesday, May 21, 2002 10:11 AM
Subject: Re: Doyle on Lab Rats [7:44611]


 Nice of you to take Jeff's words and use them out of context.  I believe
 what Jeff meant is that as we are experienced network engineers pursuing
 CCIE certification, we should set up a lab for practice as we cannot
perform
 the necessary configurations on our production networks.  The thing you
 forgot to mention while taking liberities with his words is that lab rats
do
 not know what a production network looks like.


 JR
 --
 Johnny Routin
 The Routin One



 cebuano  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Excerpt from Doyle's Vol.2 page 792.
  Labs also provide an area of the network where you can just play around
  with the commands, testing the effect of misconfigurations and
practicing
  troubleshooting. The lab can be used in this way for training and CCIE
  preparation. Only with a lab can you THOROUGHLY experiment with
  configurations, break things to see what happens, and determine what
  symptoms identify misconfigurations.
 
  This is exactly how we are all educated in colleges and universities.
  Remember the labs in Physics, Chemistry, Biology, Human Anatomy...
  So for those of you that have no respect for lab rats, you might need
  to rethink your opinions.
  I say more swiss cheese to lab rats!
 
  Elmer
  P.S. Don't forget the wine.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44623t=44611
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

BGP's neighbor advertisement-interval command [7:44521]

[cebuano]

Hi ,all.
Can someone give a better explanation about this BGP command
neighbor advertisement-interval? I know you can change the default
values of 30 sec for external and 5 sec for internal peers.
But I always thought that BGP sends routing updates ONLY when
something about the route changes, either an UPDATE or WITHDRAWN
message. Any explanation better than CCO or Parkhurst's is greatly
appreciated.

Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44521t=44521
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: BGP's neighbor advertisement-interval command [7:44521]

[cebuano]

Henry,
Thanks for the verification. Although I'd like to add another command
to the picture --- set metric-type internal.
The documentation says if the IGP metric changes, BGP will readvertise
the route every 10 minutes.
There is no mention how long BGP will readvertise the affected
routes. Any ideas?

Thanks.
Elmer
- Original Message -
From: Henry D. 
To: 
Sent: Monday, May 20, 2002 12:04 PM
Subject: Re: BGP's neighbor advertisement-interval command [7:44521]


 You're correct, however if there are route changes happening constantly
 you don't want the router to keep sending updates as it might exhaust the
 peers.
 The interval is used so there is a limit of how often the updates are sent
 regardless
 of how often the routes actually change.

 cebuano  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hi ,all.
  Can someone give a better explanation about this BGP command
  neighbor advertisement-interval? I know you can change the default
  values of 30 sec for external and 5 sec for internal peers.
  But I always thought that BGP sends routing updates ONLY when
  something about the route changes, either an UPDATE or WITHDRAWN
  message. Any explanation better than CCO or Parkhurst's is greatly
  appreciated.
 
  Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44540t=44521
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Network Design... Hmmm [7:44417]

[cebuano]

Honestly speaking, it depends on what the chapter's topic is about.
If it's about subnetting, then you work from the core down.
If it's about summarization, then you work from the egde up.

I guess it boils down to Murhpy's Law:
Where you stand on an issue depends on where you sit.
;-)

Elmer
- Original Message -
From: Leigh Anne Chisholm 
To: 
Sent: Friday, May 17, 2002 11:21 PM
Subject: RE: Network Design... Hmmm [7:44417]


 And what's really interesting, is that in the Cisco Internet Design book,
it
 says to start at the Core layer and work downwards...

 Personally, I'm going with Priscilla!  (It's a girl thing...)


   -- Leigh Anne

  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
  Steve Watson
  Sent: Friday, May 17, 2002 6:50 PM
  To: [EMAIL PROTECTED]
  Subject: Network Design... Hmmm [7:44417]
 
 
  I am reading Priscilla's book Top Down Network Design for the second
  time for a refresher and decided to hit the pool after I got home. On
  the way out I looked on my book shelf and saw Advanced IP Network
  Design that I haven't had a chance to look at yet. So I took it to the
  pool with me. When lo and behold, what did I read on page 5, The best
  place to start when designing a network is at the bottom.
 
 
 
  Food for thought :-)
 
 
 
  Steve




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44429t=44417
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE Number [7:44294]

[cebuano]

I thought it's kill-OR-bite.
Or maybe you are expected to complete all requirements
from ten-to-four. Any more time needed means you didn't make it.
Ouch1!

Elmer
- Original Message -
From: Chuck 
To: 
Sent: Friday, May 17, 2002 11:58 PM
Subject: Re: CCIE Number [7:44294]


 1024 is definitely a kilobyte.

 maybe the correct story is that the Lab will killya, and it bites.




 Michael L. Williams  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  I've heard this before, and I do believe that the first CCIE# given out
 was
  1025.  but I also have to believe that part about 1024 being chosen
  because of the kill ya (Kilo) and hurts (hertz) is nonsense I
say
  that because in the non-binary world Kilo = 1000 not 1024.  and
  since Hertz has been around much longer than bits and bytes, I seriously
  doubt any scientist considers 1 KiloHertz to equal 1024 Hertz.  =)
 
  Mike W.
 
  Kunal Bhatia  wrote in message
  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   Here's an interesting little tidbit I picked off of
www.ccbootcamp.com -
  
   All successful students receive a CCIE number. The first CCIE was
issued
   number #1025. Number #1024 was given to the CCIE Lab. They chose #1024
   because 1024 is a kilohertz - The Lab will kill ya (Kilo), and it
hurts
   (hertz).




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44428t=44294
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: A couple of clarifications [7:43127]

[cebuano]

Dear subscribers,

In defense of Mr. Berkowitz, Ms.Oppenheimer and many others,
here's a short story to sum it up...

A man died and went to the pearly gates, and the angel said,
Well, Mr. Jones, since you've lived a special life on earth, G~d has
asked me to give you special treatment. You will get to choose if
you want to go to heaven or hell. Which would you like to visit first?
And Mr.Jones indicated he wanted to get a glimpse of hell first.
What he saw was a place filled with misery and pain, and in spite of
everyone being gathered around a banquet table, they were all starving.
The angel pointed out to him that this was due to the fact that
everyone who went to hell was punished by having an extremely long
spoon glued to their hands, thus making it impossible to feed themselves.

Next stop was heaven, but the scene was very similar to that in hell.
There was a huge gathering of people also with a long spoon attached
to their hands, yet everyone was enjoying the feast and having a party.
The difference was in heaven, they were all feeding each other.

Conclusion:
If as a subscriber all you want to do is insult other listers or show us
your arrogance, it is time that you GET OFF THIS LIST!!!

To Howard, Priscilla, and folks like them...we can't thank you enough.

Sincerely,

Elmer
- Original Message -
From: Howard C. Berkowitz 
To: 
Sent: Thursday, May 02, 2002 11:49 AM
Subject: A couple of clarifications [7:43127]


 I hate to do anything to prolong this unpleasant thread, but a couple
 of facts really should be put out.

 1. I was a regular poster on Groupstudy well before I had any business
 relationship with either CertificationZone or Gett.  In both cases, I
 was contacted by the CEO of each in response to what they had seen of
 my posting patterns.

 2. Gett and Groupstudy have not exchanged one cent.

 3. Genium has never paid one cent to Gett, although I have a personal
 contract
 with them.  In the interest of rack time rentals, we do have a
 partnership
 to allow their authors to develop scenarios, and to give their
 subscribers
 convenient and discounted scenario access.

 4. We have a similar relationship to IPexpert, although I receive no
 compensation from Gett.

 5. We are investigating other partner relationships.  Gettlab (a
subsidiary
 of Gett, which is an established consultancy and VAR, especially in
 healthcare), has a business model of, if you will, selling razor
blades
 (rack time) rather than selling razors (scenarios). In our
consultancy,
 we do a good deal of open source work and prefer it. Open source
 scenarios,
 with value added support, is consistent with the way we've done things
 for a long time.

 6. Paul Borghese and I discussed my posts both regarding scenario design
 and free scenarios with a very brief mention of a commercial service
 being available. This was meant to be a community service, and by
 community I include competitors potentially improving their scenarios.
 I did some things recently such as running mini-classes on specific
 scenarios, which seemed useful to a number of people, and I expect
 to continue to do so.

 7. I sometimes forget to attach my .sig, but I've never made a secret of
 my affiliations.

 8. I would invite anyone to look at the number of substantive,
noncommercial
 posts I have made to the list for several years.  One of the most
vocal
 recent critics made his first post on 4/30, and has not made ANY
 technical
 posts in this calendar year.

 9. I'm not going to get into a challenge of what my qualifications are or
are
 not. I am perfectly happy to provide my resume to people with a
 legitimate
 interest. But as far as certain charges have been made, I suggest
people
 contact people I've worked with, such as Jeff Doyle, and ask that his
 response be posted to the list. I can also document having worked with
 some of the figures that I have been charged with not knowing.

 I would much prefer that we get back to what I am told that Rodney
 King said after he became a landscaper:  Can't we just get a lawn?
 I intend to make contributions to this list as I have done.  Of
 course, there's a certain commercial interest, but I never expect to
 make a post relating to commercial materials that are not generally
 available to the public. But my major motivation is doing what I
 think any true professional does: Pay it forward with respect to my
 own mentors.
 --
 What Problem are you trying to solve?
 ***send Cisco questions to the list, so all can benefit -- not
 directly to me***



 Howard C. Berkowitz  [EMAIL PROTECTED]
 Chief Technology Officer, GettLab/Gett Communications
http://www.gettlabs.com
 Technical Director, CertificationZone.com http://www.certificationzone.com
 retired Certified Cisco Systems Instructor (CID) #93005

Re: Scenario Design: Comments Invited [7:41992]

[cebuano]

Mr.Slattery,
Just to officially extend my gratitude for your excellent book
Advanced Routing in Cisco Networks. I hope you and Bill
can come up with another bestseller. I also have his Remote
Access fo Cisco Networks.
Godd luck to you as well.

Elmer Deloso

- Original Message -
From: Terry Slattery 
To: 
Sent: Monday, April 22, 2002 11:08 PM
Subject: Re: Scenario Design: Comments Invited [7:41992]


 A friend forwarded the following note to me regarding the CCIE testing
 environment.

 My understanding is that CCIEs are the proctors.  Wouldn't make much sense
 to
 have a CCNA/CCNP proctoring a CCIE.

 The first CCIE, #1025, is/was Stewart Biggs.  My understanding is that his
 certification has lapsed and he's off doing something else.  I took the
test
 from him in August, 1993 and became the second CCIE, #1026.  The lab
itself
 had
 a plaque outside the door labeling it as #1024 (a power of two - kind of
an
 inside joke for networking/compuer jocks).

 And for those of you checking, my certification is suspended as of June,
 2001.
 I'm reading up on some topics to prepare for the recert test that I'll
take
 soon.

 Good luck with your certifications!

 -tcs

  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
  Chuck
  Sent: Saturday, April 20, 2002 12:14 PM
  To: [EMAIL PROTECTED]
  Subject: Re: Scenario Design: Comments Invited [7:41992]
 
 
  [EMAIL PROTECTED] (John Nemeth)  wrote in
  message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 
  On Sep 9, 11:12am, Larry Letterman wrote:
  }
  } To my knowledge the proctors are CCIE's...
 
  Okay, chicken and egg time...  If the proctors are CCIEs then who
 
 
  proctored the first lab exam?
 
 
  there is a story told about the great anthropologist Lewis Leakey. In
  those days one had to demonstrate competence in a foreign language in
  order to get one's PhD. Leakey's language of choice - Swahili.
 
  Well, the university had no Swahili experts on staff, so they enquired
  among the various educational elite, and were given the name of one of
  the world's foremost experts in Swahili - Lewis Leakey!
 
  I have heard an alternative version of this story, in which Leakey
  actualy trained the person who would give him the competency
  examination...
 
  Is anyone on this list personally acquaited with Terry Slattery ( CCIE #
  1026, and the first non Cisco CCIE )? I wonder if Mr. Slattery would be
  willing  to offer some insight here.
 
 
 
 
 
  } - Original Message -
  } From: Mark Odette II
  } Sent: Friday, April 19, 2002 12:02 PM
  } Subject: RE: Scenario Design: Comments Invited [7:41992]
  }
  }  This spawns a question I have wondered recently:
  } 
  }  Are the Proctors at the LAB testing centers CCIEs??
  }
  }-- End of excerpt from Larry Letterman
 
 
 
 
 


 --
 Terry SlatteryCCIE# 1026
 443-994-1158  Fax: 928-832-4620




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=42306t=41992
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Cisco uBR924 and Road Runner/Cox Communications [7:42244]

[cebuano]

John,
Somehow my post yesterday did not go through. Here it is...
uBR924#sh run
Building configuration...

Current configuration : 1045 bytes
!
! No configuration change since last restart
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname uBR924
!
enable password 7 x
!
!
!
!
!
clock timezone - -5
ip subnet-zero
no ip routing
!
ip audit notify log
ip audit po max-events 100
!
!
!
!
voice-port 0
 input gain -2
 output attenuation 0
!
voice-port 1
 input gain -2
 output attenuation 0
!
!
!
!
interface Ethernet0
 ip address x
 no ip route-cache
 no ip mroute-cache
 bridge-group 59
 bridge-group 59 spanning-disabled
!
interface cable-modem0
 no ip route-cache
 no ip mroute-cache
 bridge-group 59
 bridge-group 59 spanning-disabled
!
ip default-gateway x
ip classless
no ip http server
!
snmp-server manager
bridge 1 protocol ieee
!
line con 0
 exec-timeout 0 0
 password 7 x
 logging synchronous
 login
line vty 0 4
 password 7 x
 login
!
end

If you can't get it working, just erase your startup config
and this will bring it to default bridging mode. Your cable
and ethernet interfaces are going to be set to DHCP assigned
as this is how these companies hand out IP's.
Also, your voice port should give you a dial tone if you plug
an analog phone but will give you a busy signal when you press
any of the dial keys until you configure them for VoIP.
Also, if the device doesn't get provisioned after you do the config,
save it and reboot. That should do it.


HTH,
Elmer

- Original Message -
From: John Huston 
To: 
Sent: Monday, April 22, 2002 1:27 PM
Subject: Cisco uBR924 and Road Runner/Cox Communications [7:42244]


 Does anyone have a configuration for the subject they are successfully
 using?  If so would you please strip the IP's and assword and share this
 with me?

  Thank you in advance for your help and consideration.

  Kindest Regards,

  John Huston




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=42307t=42244
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

BGP:neighbor soft-reconfiguration inbound [7:42367]

[cebuano]

Hi gang.
Please clarify this for me. On CCO it states...
To generate new inbound updates from stored update information (rather than
dynamically)
without resetting the BGP session, you must preconfigure the local BGP router
using
neighbor soft-reconfiguration inbound.
Is this generating inbound updates internally from RAM? What is it
referring
to regarding
dynamically generating new inbound updates?
So when i do a clear ip bgp *  this defaults to a soft-reset since the
above
command has
been preconfigured on the routers?
I can't test this right now since I've taken down my rack in preparation for
the move this
weekend.
Thanks in advance.

Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=42367t=42367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: COX Cable and Cisco uBR924 owners [7:40208]

[cebuano]

John,
Basically you just set the UBR to factory default which is set to bridging
mode.
To do so, you can also erase your startup config which will cause it to be
in
bridging mode and DHCP client. But if you need the config, here it is...

uBR924#sh run
Building configuration...

Current configuration : 1045 bytes
!
! No configuration change since last restart
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname uBR924
!
enable password 7 xx
!
!
!
!
!
clock timezone - -5
ip subnet-zero
no ip routing
!
ip audit notify log
ip audit po max-events 100
!
!
!
!
voice-port 0
 input gain -2
 output attenuation 0
!
voice-port 1
 input gain -2
 output attenuation 0
!
!
!
!
interface Ethernet0
 ip address x
 no ip route-cache
 no ip mroute-cache
 bridge-group 59
 bridge-group 59 spanning-disabled
!
interface cable-modem0
 no ip route-cache
 no ip mroute-cache
 cable-modem downstream saved channel xxx
 cable-modem mac-timer t2 4
 bridge-group 59
 bridge-group 59 spanning-disabled
!
ip default-gateway 
ip classless
no ip http server
!
snmp-server manager
bridge 1 protocol ieee
!
line con 0
 exec-timeout 0 0
 password 7 xxx
 logging synchronous
 login
line vty 0 4
 password 7 
 login
!
end

Notice that the default gateway and ehternet IP are dynamically assigned.
Check that your voice ports are physically okay. Just plug in any analog
phone and you should get a dial tone. You will get a busy tone once you
press the dial pad until you configure and enable your voice ports.

HTH,
Elmer

- Original Message -
From: John Huston 
To: 
Sent: Sunday, April 21, 2002 7:03 PM
Subject: Re: COX Cable and Cisco uBR924 owners [7:40208]


 Would you be willing to share your configuration with me less the ip
 addresses you us and also your passwords?  I would greatly appreciate it.

 Regards,

 John Huston

 Cebuano  wrote in message
 news:...
  I spoke with one of Cisco's engineers in RTP and he said he did not have
 any
  problem using this on Time Warner and with VoIP set up.
  As far as why I am using this instead of a cheaper modem, it's because I
  need to be able to call my brother out of state (who also has the same
 unit)
  without worrying about long-distance fees.
 
  Elmer
 
  - Original Message -
  From: Tim Medley
  To:
  Sent: Tuesday, April 02, 2002 6:00 PM
  Subject: RE: COX Cable and Cisco uBR924 owners [7:40208]
 
 
   Good Job. Sometimes you have to bend the truth to get around the
   politics.
  
   I've had a similar issue with TimeWarner Road Runner and my ubr924.
They
   won't support it in docsis mode and the basic bridging config doesn't
   seem to work with their setup.
  
   For now I am using a 2611 that I bought for my lab.
  
   tm
  
   Tim Medley - CCNP+Voice, CCDP
   Sr. Network Architect
   VoIP Group
   iReadyWorld
  
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf
Of
   Cebuano
   Sent: Tuesday, April 02, 2002 1:32 PM
   To: [EMAIL PROTECTED]
   Subject: COX Cable and Cisco uBR924 owners [7:40208]
  
   Hi, all.
   This is just a short notice for people on this list that are
subscribers
   of
   Cox Communications and have been denied the use of the Cisco uBR924 or
   newer
   models.
   I have battled the company's politics in the past when i wanted to
   connect my
   uBR924 to their network. I even escalated my request to their Tech.
   Engineering Dept. in San Diego, only to be told that they no longer
   support
   any Cisco cable modems in their database.
   Alas, after a few months of being quarantined by the likes of Doyle,
   Halabi
   and the gang, i was able to spare a few hours to configure my uBR for
   basic
   bridging operation (config is on CCO) and call up their local tech
   support
   and
   lied that I wanted to register a Toshiba modem. Gave the tech the MAC
   and
   Serial number (thank G~d she did not recognize these as Cisco
   numbers!!), and
   in two minutes my unit was provisioned.
   I hope this message helps one or more list subscribers.
   Albeit I still believe for most transactions that Honesty is the best
   policy
   (hey, I was honest in my quest :- )
  
  
   Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=42187t=40208
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Need Part # for DB60 DTE to DB60 DCE back to back crossover [7:42186]

[cebuano]

Just want to caution you on buying these cheap crossover cables.
The ones mentioned refer to the kind of cable where the pins are
NOT solid pins but two pins paired as one. The solid pins are
ROUNDED tips whereas the paired ones of course are not.
This makes a difference when you are removing/inserting the cable
when working on different scenarios. If you are not careful, the paired
pins can easily get split or bent and even worse chip the plastic casing
of the serial interface on your router.
Whereas with the rounded tip (just like the original Cisco cables) don't
have this problem and are easier to work with. If i were you,
I'd get the more expensive one which i've found only from
networkhardware.com. If you still want to buy the cheaper ones,
let me know off line and i'll sell you what i've got since i'm in the
process of replacing all of those with the solid-pin type.

HTH,
Elmer

- Original Message -
From: Wow 
To: 
Sent: Sunday, April 21, 2002 7:28 PM
Subject: Re: Need Part # for DB60 DTE to DB60 DCE back to back crossover
[7:42178]


 I have bought some back to back cables from this place:
 http://www.symmic.com/computer/cabcisco.htm

 pretty cheap and no problems.

 Dennis

 Jason  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  The part number is that there isn't a part number because Cisco doesn't
 have
  such a cable.
 
  Jeffrey W. Hall  wrote in message
  [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
   Does anyone know what the Cisco part number of the DB60 DTE to DB60
DCE
  back
   to back crossover cable?  I realize the part number may be different
 based
   on cable length, so let's use a 6 foot cable.
  
   Thanks in advance,
  
   Jeffrey W. Hall
   Network Administrator, CCNP, SCSA, MCSE
   U.S. Army




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=42186t=42186
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Home LAB [7:41897]

[cebuano]

My two differing views, each bounded by its own lifespan...
1. Buy your own equipment.
Well, not only are there failed dot-coms but also failed efforts and hopes
from
individuals thinking it would be an easy path to CCIE-dom. Both provide
constant
overflow of routers/switches on eBay that the prices have dropped by more
than
50% (mostly) in the past 10 months. Plus if you're not yet in IT, getting
exposed to
REAL Cisco gear for the FIRST time AFTER you've passed the lab...UHMM...

2. Rent remote rack.
This i think will become the ONLY solution for most individuals when the
CCIE
lab gets revamped. As you can see from the changes of content already
confirmed
by the new areas individuals get tested on starting from the CCNP series,
it's only
a matter of time before a Cat5 and 8 2500/4500's just won't give you the
ability
to perform half of what will be covered in the lab. Example: MLS, MPLS,
Voice,
PNNI...the list goes on with new technologies that are very likely to
replace Token
Ring. AND, with the remote practice labs, you have the brains of the people
behind
it (like Howard) to provide you scenarios that either show you how far
you've
progressed or how far behind you are in your studies.

My 2 cents.
Elmer Deloso

- Original Message -
From: Howard C. Berkowitz 
To: 
Sent: Friday, April 19, 2002 4:50 AM
Subject: RE: Home LAB [7:41897]


 At 3:40 AM -0400 4/19/02, Kaminski, Shawn G wrote:
 Yes, I think it's a good idea to purchase your own equipment. It's there
 whenever you need it, you can do whatever you want with it, and you're
more
 apt to practice on it if it's right down the hall!
 
 Shawn K.

 :-) I can argue this from both perspectives.  On the one hand, I am
 involved in a virtual rack business (suitable disclaimers apply). The
 advantages there are not having to purchase expensive and specialized
 equipment, predefined scenarios and other educational material, and
 technical support.  It's also easier on cash flow.

 Again with all due caveats, I really think a remote rack is a better
 learning technique--even if that remote rack is in your house and
 accessed via a terminal server.  When you get into the real
 operations world, all your routers are NOT going to be in the same
 room, and you might as well get experience doing things through a
 console. The new CCIE lab also is structured this way.

 As an instructor, I found the newer students did seem to derive a
 certain comfort level from actually being able to see the equipment,
 but quite honestly, I found this to be a mental crutch.  Until you
 really master remote console access, telnetting between routers,
 etc., you aren't going to get the speed for the CCIE lab.

 If you're at the CCNA level and can afford it, the tradeoffs are
 somewhat different.  Having 2 or 3 (preferably) cheap routers (e.g.,
 2501) and perhaps a switch could be a cheap way to get comfortable
 with the CLI.  It's a whole different world when you need ISDN, ATM,
 voice, etc., simulators.

 But Shawn, you also remind me (I'm a telecommuter) that I have a
 fairly good gym in my house. I'm not nearly as likely to get into my
 car and drive to the local gym than I am to jump on the exercise bike
 or do some bench presses when Cisco has rotted my brain.

 Of course, to the best of my knowledge, nobody has gotten
 cyberbodybuilding to work (I'm not talking about morphed images).

 
   -Original Message-
   From: CODETEL [SMTP:[EMAIL PROTECTED]]
   Sent: Thursday, April 18, 2002 7:56 PM
   To: [EMAIL PROTECTED]
   Subject: Home LAB [7:41897]
 
   Hello guys..
   I want to know if it's good idea to buy Cisco Homelab for practice
   yourself
   in your home if you want to be CCIE?
 
what are you think about practice in your own lab?
 

 --
 What Problem are you trying to solve?
 ***send Cisco questions to the list, so all can benefit -- not
 directly to me***



 Howard C. Berkowitz  [EMAIL PROTECTED]
 Chief Technology Officer, GettLab/Gett Communications
http://www.gettlabs.com
 Technical Director, CertificationZone.com http://www.certificationzone.com
 retired Certified Cisco Systems Instructor (CID) #93005




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=41939t=41897
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CCIE Written Beta Announcement [7:41340]

[cebuano]

Actually they are aware of this exam and it is going to start today.
However it just has not been activated in their database yet so
you'll have to try some time later to register.

Elmer
- Original Message -
From: Shahid Muhammad Shafi 
To: 
Sent: Monday, April 15, 2002 8:37 AM
Subject: Re: CCIE Written Beta Announcement [7:41340]


 Just called prometric and they have no idea about this
 exam.



 Shahid


 --- Daniel Cotts  wrote:
  The CCIE Program is proud to announce the upcoming
  beta release of the
  new CCIE Routing and Switching Qualification Exam
  (351-001).  This beta
  exam will be
  offered from Monday, April 15th, through Monday, May
  6th, 2002 at all
  Cisco-authorized Prometric test center locations
  worldwide. Contact
  Prometric now to reserve your space.  Candidates
  will be given 3 hours to
  answer 150 questions for this beta.
 [EMAIL PROTECTED]


 =
 Shahid Muhammad Shafi

 Every man dies; not every man really lives

 Please help feed hungry people worldwide http://www.hungersite.com/
 A small thing each of us can do to help others less fortunate than
ourselves

 __
 Do You Yahoo!?
 Yahoo! Tax Center - online filing with TurboTax
 http://taxes.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=41484t=41340
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

IPX Internal Address - IPXWAN [7:41207]

[cebuano]

Hi,
Can someone point to a URL that points out the reason why a NetWare server's
Internal IPX address must be unique throughout a NetWare domain in spite of
the
fact that it is used only internally, i.e. locally significant?
Since this requirement apparently implies that this address is checked for
uniqueness,
what packet would carry this between IPX devices (including routers
configured
for
IPXWAN), SAP / RIP / NCP ?

Thanks.

Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=41207t=41207
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Simulator [7:40310]

[Cebuano]

NKP,
TLS-3A works like a champ. A friend of mine uses it for dial up, which is
perfect especially for studying Remote Access, or just as a backup link when
you don't have the ISDN simulator in your lab. I personally use the TLS-5 in
addition to the TLS2000 ISDN sim. Don't forget to use the correct adapter
for both of your modems. I recommend getting the USRobotics ( a.k.a. 3Com )
which you can get cheap on eBay. All you need is 22.8 or 33.6 which go for
around $12 - $15. The TLS-5 I got for around $270. Good luck in your
studies.

Elmer

- Original Message -
From: NKP 
To: 
Sent: Wednesday, April 03, 2002 3:51 AM
Subject: Simulator [7:40310]


 Hi ,
 I am planning to buy a Teltone TLS-3A simulator for PSTN line
simulation
 between two routers , has anyone who has used it let me know how is the
 performance of it and if it is ideal for dial up simulation between PC to
 router , or router to router .

 thanks,

 thanks,
 --

 Navin Parwal


 [EMAIL PROTECTED]
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40313t=40310
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: COX Cable and Cisco uBR924 owners [7:40208]

[Cebuano]

I spoke with one of Cisco's engineers in RTP and he said he did not have any
problem using this on Time Warner and with VoIP set up.
As far as why I am using this instead of a cheaper modem, it's because I
need to be able to call my brother out of state (who also has the same unit)
without worrying about long-distance fees.

Elmer

- Original Message -
From: Tim Medley 
To: 
Sent: Tuesday, April 02, 2002 6:00 PM
Subject: RE: COX Cable and Cisco uBR924 owners [7:40208]


 Good Job. Sometimes you have to bend the truth to get around the
 politics.

 I've had a similar issue with TimeWarner Road Runner and my ubr924. They
 won't support it in docsis mode and the basic bridging config doesn't
 seem to work with their setup.

 For now I am using a 2611 that I bought for my lab.

 tm

 Tim Medley - CCNP+Voice, CCDP
 Sr. Network Architect
 VoIP Group
 iReadyWorld

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
 Cebuano
 Sent: Tuesday, April 02, 2002 1:32 PM
 To: [EMAIL PROTECTED]
 Subject: COX Cable and Cisco uBR924 owners [7:40208]

 Hi, all.
 This is just a short notice for people on this list that are subscribers
 of
 Cox Communications and have been denied the use of the Cisco uBR924 or
 newer
 models.
 I have battled the company's politics in the past when i wanted to
 connect my
 uBR924 to their network. I even escalated my request to their Tech.
 Engineering Dept. in San Diego, only to be told that they no longer
 support
 any Cisco cable modems in their database.
 Alas, after a few months of being quarantined by the likes of Doyle,
 Halabi
 and the gang, i was able to spare a few hours to configure my uBR for
 basic
 bridging operation (config is on CCO) and call up their local tech
 support
 and
 lied that I wanted to register a Toshiba modem. Gave the tech the MAC
 and
 Serial number (thank G~d she did not recognize these as Cisco
 numbers!!), and
 in two minutes my unit was provisioned.
 I hope this message helps one or more list subscribers.
 Albeit I still believe for most transactions that Honesty is the best
 policy
 (hey, I was honest in my quest :- )


 Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40300t=40208
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: CID Exam Cert Book [7:39669]

[Cebuano]

Priscilla,
Maybe it's time to switch publishers like Howard's. Unless your upcoming
book prevents Cisco from doing what they did to TDND's contract.
BTW - when is the next book due for release?

Elmer

- Original Message -
From: Priscilla Oppenheimer 
To: 
Sent: Tuesday, April 02, 2002 2:12 AM
Subject: RE: CID Exam Cert Book [7:39669]


 At 10:03 PM 4/1/02, Robert Padjen wrote:
 Top Down is a great book for DCN, but it's not really
 for the CID. I'll go out on a limb and suggest mine (
 ;) ). Sybex CID Study Guide.

 I'm sure you'll get flamed for advertising your own book, but I'm going to
 give you a hard time also for lack of accuracy. ;-)

 Top-Down Network Design is not a certification book, but it is based on
the
 work I did on both the Designing Cisco Networks (DCN) and the Cisco
 Internetwork Design (CID) training classes when I worked for Cisco.

 I have heard that Cisco has made CID match my Top-Down Network Design book
 even more closely than before. I know for a fact that the description of
 the CID course is taken from my Top-Down Network Design book. I did a
 double-take when I read the following text from the description of the CID
 class here:

http://www.cisco.com/pcgi-bin/front.x/wwtraining/CELC/index.cgi?action=Cours
eDescCOURSE_ID=321

 Good internetwork design recognizes a customer's requirements embody many
 business and technical goals, including requirements for availability,
 scalability, affordability, security, and manageability. Difficult
 internetwork design choices and tradeoffs must be made when designing the
 internetwork before any physical devices or media are selected.

 CID covers typical internetwork design business and technical goals and
 constraints. CID details the top-down design process and the importance of
 using systematic methods for internetwork design. Using systematic methods
 helps you, the internetwork designer, to keep pace with changing
 technologies and customer requirements.

 I said to myself, Hey I wrote that. Oh yeah, I should have had a lawyer
 look at my book contract. Cisco can use anything I wrote in the book.
 Bummer. or maybe not?? ;-]

 Priscilla

 To save a buck, if you
 feel comfortable with the material, you may want to
 forgo the big book and use the Exam Notes (used books
 are out there too). The new test might focus on
 multicast more than the books reflect, and they may
 have less StrataCom and ATM, but its close enough.
 640-025 (the exam the book was written to) is still
 the current version.
 
 Good luck.
 
 
 --- Andy Barkl  wrote:
   The book is not that great. It has many errors and
   omissions.
   I recommend the Cisco Press Top-Down Network Design
   book for the new CID
   exam.
  
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED]] On Behalf Of
   STRAND Scott
   Sent: Wednesday, March 27, 2002 12:32 PM
   To: [EMAIL PROTECTED]
   Subject: CID Exam Cert Book [7:39669]
  
   Has anyone who has taken the CID exam used the Cisco
   CID Exam
   Certification
   Guide. (Michael Crane, Reggie Terell). I was wanting
   to
   get some opinions on this book, especially the
   practice test on the CD.
   I
   intend to use BOSON as well.
  
   Thanks,
   Scott
   CCNP, CCDA
  
   [GroupStudy.com removed an attachment of type
   application/x-pkcs7-signature
   which had a name of smime.p7s]
 [EMAIL PROTECTED]
 
 
 =
 Robert Padjen
 
 __
 Do You Yahoo!?
 Yahoo! Tax Center - online filing with TurboTax
 http://http://taxes.yahoo.com/
 

 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40192t=39669
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

COX Cable and Cisco uBR924 owners [7:40208]

[Cebuano]

Hi, all.
This is just a short notice for people on this list that are subscribers of
Cox Communications and have been denied the use of the Cisco uBR924 or newer
models.
I have battled the company's politics in the past when i wanted to connect my
uBR924 to their network. I even escalated my request to their Tech.
Engineering Dept. in San Diego, only to be told that they no longer support
any Cisco cable modems in their database.
Alas, after a few months of being quarantined by the likes of Doyle, Halabi
and the gang, i was able to spare a few hours to configure my uBR for basic
bridging operation (config is on CCO) and call up their local tech support
and
lied that I wanted to register a Toshiba modem. Gave the tech the MAC and
Serial number (thank G~d she did not recognize these as Cisco numbers!!), and
in two minutes my unit was provisioned.
I hope this message helps one or more list subscribers.
Albeit I still believe for most transactions that Honesty is the best policy
(hey, I was honest in my quest :- )


Elmer




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=40208t=40208
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]