Re: HSRP design [7:28982]

2001-12-13 Thread khramov

Do both RSMs need to be on the same subnet?

Thanks

richard beddow wrote:

 Mike,

 DMA channels are indeed the I/O's ports I refered to, but I couldn't
 remember what they were called (each time I learn something new , something
 old falls out the other end).

 I came across this about three years ago while setting up a multicast
 network and experiencing throughput problems, IOS was 112-13_P(1).  It
looks
 like Cisco have changed the allocation method, what IOS are you running?

 RB.

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=29089t=28982
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



HSRP design [7:28982]

2001-12-12 Thread khramov

Hello

I have a design question.   I have two 5505 with RSM in each that are
connected to each other with 200Mb trunk.  Right now RSM of the first
switch is in VLAN 1; RSM of the second switch is in the VLAN 2.
Altogether I have about 20 VLANs.  I am planning to run HSRP between
both RSMs.  What would be the best way of doing it?
Here is what I think needs to happen:
1. Change the IP address of the second RSM and make it a part of VLAN 1
2. Reconfigure all VLAN
3. For even-numbered VLANs make the primary gateway RSM1
4. For odd-numbered VLANs make the primary gateway RSM 2
5. Copy the configuration for VLANs from RSM 1 to RSM 2

I do not have much experience in design so any input is more than
welcome.

Thanks,

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=28982t=28982
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ospf config [7:26034]

2001-11-12 Thread khramov

I am sorry for a stupid question.
I am trying to set up an OSPF network.  So far I am doing from a router
to a router .
Here is what I have:

Router A:
int e0/0
ip address 192.168.30.0 255.255.255.0
ip ospf network poin-to-point

network ospf 10
network 192.168.0.0 0.0.255.255.0.0 area 0

Router B:
int e0/0
ip address 192.168.31.0 255.255.255.0
ip ospf network point-to-point

network ospf 10
network 192.168.0.0 0.0.255.255 area 0

When I do sh dcp neigh I can see the router but I can not ping it.
Would you please tell me what I am doing wrong.

Thanks in advance,

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=26034t=26034
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



5505 and XP [7:24845]

2001-10-31 Thread khramov

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=24845t=24845
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VPN [7:24231]

2001-10-26 Thread khramov

Does anyone have any recomendations on VPN producs?  Links to articles
and personal experience woudl be great.
As far as know Cisco VPN concentrators, Check Point, and Nokia rules the
market.   What is your opinion on that.

Thanks,
Alex

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=24231t=24231
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Access Server config [7:21877]

2001-10-04 Thread khramov

First of all I am using it to console in to the phone switch not a modem. 
Second how
would I set the speed to 2400.  Access server has its own line speed
different from baud
rate.  Like for expample 9600 would be equal to 38400 on access server?   I
found that
on Cisco's web site.

Thanks,

Alex

Andy Hoang wrote:

 If it says open then it works.  Can you issue some modem commands? Try
 ATZ.  The modem should respond with an OK.  You can set the access
 server run at speed 2400.  Is your cable correct?  The modem is DCE and
your
 access server async line is DTE.

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 khramov
 Sent: Wednesday, October 03, 2001 2:50 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Access Server config [7:21877]

 Nope there are no passwords,
 I've got it to the point where I telnet into async 1 port and it opens it
 up, but
 nothing comes on the screesn,  It just says open.   I think there might be
a
 speed
 mismatch issue, device that is attached to it runs at 2400 and I do no
think
 that you
 can set access server to run at the speed lower then 9600. So if anyone has
 any ideas
 please help.
 Here is the config:
 interface Ethernet0
  ip address 192.168.190.25 255.255.255.0
  no ip route-cache
  no ip mroute-cache
 !
 interface Serial0
  no ip address
  no ip route-cache
  no ip mroute-cache
  shutdown
 !
 interface Serial1
  no ip address
  no ip route-cache
  no ip mroute-cache
  shutdown
 !
 interface Async1
  no ip address
  async mode dedicated
  no peer default ip address
 !
 ip default-gateway 192.168.190.2
 no ip classless
 ip route 0.0.0.0 0.0.0.0 192.168.190.2
 ip route 192.168.78.0 255.255.255.0 192.168.190.2
 !
 line con 0
 line 1 8
  no exec
  modem InOut
  transport preferred telnet
  transport input all
  stopbits 1
  speed 38400
 line 9 16
 line aux 0

 Tarak Robbana wrote:

  Is there a password set on the device your telneting into? Sorry,
  have to start with the small stuff.

 [GroupStudy.com removed an attachment of type text/x-vcard which had a name
 of khramov.vcf]
 _
 Do You Yahoo!?
 Get your free @yahoo.com address at http://mail.yahoo.com

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=22032t=21877
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Access Server config [7:21877]

2001-10-03 Thread khramov

here is the config :
ip host modem1 2001 192.168.190.25
ip name-server 192.78.4.156
ip name-server 192.78.4.158
!
interface Ethernet0
 ip address 192.168.190.25 255.255.255.0
 no ip route-cache
!
interface Serial0
 no ip address
 no ip route-cache
 shutdown
!
interface Serial1
 no ip address
 no ip route-cache
 shutdown
!
interface Async1
 no ip address
 async mode dedicated
 no peer default ip address
!
no ip classless
ip route 0.0.0.0 0.0.0.0 192.168.190.2
ip route 192.168.78.0 255.255.255.0 192.168.190.2
!
line con 0
line 1 8
 modem InOut
 transport input all
 stopbits 1
 speed 38400
 flowcontrol hardware
line 9 16
line aux 0

khramov wrote:

 We are trying to configure access server to console in to the device
 that is attached to it through async port.  When we try to telnet into
 the device that attached to the router we get connection refused
 message.  What should we check?

 [GroupStudy.com removed an attachment of type text/x-vcard which had a name
 of khramov.vcf]

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21878t=21877
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Access Server config [7:21877]

2001-10-03 Thread khramov

We are trying to configure access server to console in to the device
that is attached to it through async port.  When we try to telnet into
the device that attached to the router we get connection refused
message.  What should we check?

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21877t=21877
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Access Server config [7:21877]

2001-10-03 Thread khramov

Nope there are no passwords,
I've got it to the point where I telnet into async 1 port and it opens it
up, but
nothing comes on the screesn,  It just says open.   I think there might be a
speed
mismatch issue, device that is attached to it runs at 2400 and I do no think
that you
can set access server to run at the speed lower then 9600. So if anyone has
any ideas
please help.
Here is the config:
interface Ethernet0
 ip address 192.168.190.25 255.255.255.0
 no ip route-cache
 no ip mroute-cache
!
interface Serial0
 no ip address
 no ip route-cache
 no ip mroute-cache
 shutdown
!
interface Serial1
 no ip address
 no ip route-cache
 no ip mroute-cache
 shutdown
!
interface Async1
 no ip address
 async mode dedicated
 no peer default ip address
!
ip default-gateway 192.168.190.2
no ip classless
ip route 0.0.0.0 0.0.0.0 192.168.190.2
ip route 192.168.78.0 255.255.255.0 192.168.190.2
!
line con 0
line 1 8
 no exec
 modem InOut
 transport preferred telnet
 transport input all
 stopbits 1
 speed 38400
line 9 16
line aux 0

Tarak Robbana wrote:

 Is there a password set on the device your telneting into? Sorry,
 have to start with the small stuff.

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21939t=21877
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DHCP [7:21051]

2001-09-26 Thread khramov

Hello,
 ip dhcp-server works,  I didn't specify it with a hyphen.  So would you
agree
 that the best solution for me would be to disable ip directed
broadcast, ip
 helper address and enable ip dhcp-server at the global config?  If I
enable ip
 dhcp-server do I need to enable ip forward-protocol udp  (ports 66 and
67)?

 Thanks a lot,
 Alex

MADMAN wrote:

 Hmm..  I haven't done it in a while so I tried it on a 7507 with RSP8's and
 an MSFC2,
 they both accepted the command just fine but are not in the config.   So I
 figured they
 must be enabled by default so I did a no ip forward protocol udp 67 and
 wallah, there it
 is!!!

 C7507MIX#conf t
 Enter configuration commands, one per line.  End with CNTL/Z.
 C7507MIX(config)#no ip for
 C7507MIX(config)#no ip forward-protocol udp 67
 C7507MIX(config)#^Z
 C7507MIX#wr t
 Building configuration...ip kerberos source-interface any
 ip classless
 no ip forward-protocol udp bootps

   Dave

 khramov wrote:

  I did that, but when I do sh run it is not showing up in config file.  I
  mean (ip
  forward-protocol udp 67).
  Is that the way it is suppose to be?
 
  MADMAN wrote:
 
   Check ip foward protocol
  
 Dave
  
   khramov wrote:
   
Hello
 How do I enable broadcast for DHCP server?  I know that ip
 helper enables UDP broadcast, but broadcast of netbios
 services causes some problems for win nt server.  So I guess
 to be more specific what can I do to forward udp broadcast on
 ports 67 and 68 only?
   
 And another question that I have what exactly ip
 directed-broadcast command does?  I've searched Cisco's web
 site but I never came across a clear defenition?
   
 Thanks,
 Alex
   
[GroupStudy.com removed an attachment of type text/x-vcard which had
a
  name
of khramov.vcf]
   --
   David Madland
   Sr. Network Engineer
   CCIE# 2016
   Qwest Communications Int. Inc.
   [EMAIL PROTECTED]
   612-664-3367
  
   Emotion should reflect reason not guide it
 
  [GroupStudy.com removed an attachment of type text/x-vcard which had a
name
  of khramov.vcf]
 --
 David Madland
 CCIE# 2016
 Senior Network Engineer
 Qwest Communications
 612-664-3367

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21133t=21051
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DHCP [7:21051]

2001-09-26 Thread khramov

Priscilla,
 I think that you are right about the ip dhcp-server command.  I looked it
up on Cisco's web site.  It seems
that it can be used only with dial up to tell the client where dhcp server
is.

Priscilla Oppenheimer wrote:

 Yes, I finally found that also, but only in reference to dial-up networks
 where the router is acting as an access sever for SLIP/PPP clients. Does it
 work elsewhere? It would be good if it did.

 Priscilla

 At 02:24 PM 9/26/01, [EMAIL PROTECTED] wrote:

 Their must be more than one way to foreword DHCP requests.
 

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/dial_r/drdreip.htm#xtocid1564817
 
 
 Tom got me looking into this earlier.
 
 -Eric
 
 -Original Message-
 From: Priscilla Oppenheimer
 [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, September 26, 2001 2:05 PM
 To: [EMAIL PROTECTED]
 Subject: Re: DHCP [7:21051]
 
 At 01:06 PM 9/26/01, khramov wrote:
   From my understanding ip dhcp-server command will enable upd broadcast
   on  ports 66 and 67.  Is that true?
 
 It causes your router to BE a DHCP server and to accept and process
 broadcasts to UDP port 67 and to send responses from port 66. It does not
 cause the router to forward UDP broadcasts to port 67.
 
 If you turn your router into a DHCP server, you would also have to
identify
 an external File Transport Protocol (FTP), Trivial File Transfer Protocol
 (TFTP), or remote copy protocol (rcp) server that you will use to store
the
 DHCP bindings database. The router will access that database. Here's more
 info on turning your router into a DHCP server, which is often not a good
 idea, in my opinion (because it detracts from the router's real jobs):
 

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipr_c/ipcprt1/1cfdhcp.htm
 
 
 Priscilla
 
  Alex
  
  
  Priscilla Oppenheimer wrote:
  Why do you want to turn your router into a DHCP server? I thought you
  already had a DHCP server. You just need a helper address and
  
  ip forward-protocol udp 67
  no ip forward-protocol 137
  no ip forward-protocol 138
  
  The last two commands are because you said that NetBIOS broadcast
  forwarding was causing problems for your NT server. When you have a
 helper
  address, the router forwards a bunch of UDP packets. You have to
 configure
  it to be more discerning.
  
  Priscilla
  
  At 09:24 AM 9/26/01, khramov wrote:
   Hello,
 ip dhcp-server works,  I didn't specify it with a hyphen.  So
   would you
   agree
 that the best solution for me would be to disable ip directed
   broadcast, ip
 helper address and enable ip dhcp-server at the global config?
 If
 I
   enable ip
 dhcp-server do I need to enable ip forward-protocol udp  (ports
   66 and
   67)?
   
 Thanks a lot,
 Alex
   
   MADMAN wrote:
   
 Hmm..  I haven't done it in a while so I tried it on a 7507 with
   RSP8's and
 an MSFC2,
 they both accepted the command just fine but are not in the
   config.   So I
 figured they
 must be enabled by default so I did a no ip forward protocol udp
67
 and
 wallah, there it
 is!!!

 C7507MIX#conf t
 Enter configuration commands, one per line.  End with CNTL/Z.
 C7507MIX(config)#no ip for
 C7507MIX(config)#no ip forward-protocol udp 67
 C7507MIX(config)#^Z
 C7507MIX#wr t
 Building configuration...ip kerberos source-interface any
 ip classless
 no ip forward-protocol udp bootps

   Dave

 khramov wrote:

  I did that, but when I do sh run it is not showing up in config
   file.  I
  mean (ip
  forward-protocol udp 67).
  Is that the way it is suppose to be?
 
  MADMAN wrote:
 
   Check ip foward protocol
  
 Dave
  
   khramov wrote:
   
Hello
 How do I enable broadcast for DHCP server?  I know that
 ip
 helper enables UDP broadcast, but broadcast of netbios
 services causes some problems for win nt server.  So I
 guess
 to be more specific what can I do to forward udp
   broadcast on
 ports 67 and 68 only?
   
 And another question that I have what exactly ip
 directed-broadcast command does?  I've searched Cisco's
  web
 site but I never came across a clear defenition?
   
 Thanks,
 Alex
   
[GroupStudy.com removed an attachment of type text/x-vcard
   which had
   a
  name
of khramov.vcf]
   --
   David Madland
   Sr. Network Engineer
   CCIE# 2016
   Qwest Communications Int. Inc.
   [EMAIL PROTECTED]
   612-664-3367
  
   Emotion should reflect reason not guide it
 
  [GroupStudy.com removed an attachment of type text/x-vcard which
   had a
   name
  of khramov.vcf]
 --
 David Madland
 CCIE# 2016
 Senior Network Engineer
 Qwest Communications
 612

Re: Catalyst 4000 Configuration [7:20996]

2001-09-25 Thread khramov

RSM config can be a little different.  It depends on what version of
software you are
running.  If you are running Version 12.0(14)W5(20).  To configure vlans you
need to
type in interface port-channel1.x , where x is vlan ID.  You might want to
research it
a little more on Cisco's web site.
 Hope it helps

Juan Blanco wrote:

 Ray,
 They use the same software and command-line interface CLI as the 500
 series...One of the main difference between these switches and 5000 is the
 high density of Gigabyte Ethernet ports supported.

 JB
 -Original Message-
 From: Ray Smith
 To: [EMAIL PROTECTED]
 Sent: 9/25/2001 9:21 AM
 Subject: Catalyst 4000 Configuration [7:20996]

 Guys,

 Is there a difference with configuring the Catalyst 4000 as oppose to a
 Catalyst 5000?  Is the operating system the same or even similar?

 Ray

 _
 Get your FREE download of MSN Explorer at
 http://explorer.msn.com/intl.asp

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21013t=20996
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Cisco vs 3com [7:21028]

2001-09-25 Thread khramov

Does any one have a white paper that compares Cisco 2900 XL switches to
3COM 4300 series switches?

Thanks,
Alex

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21028t=21028
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



DHCP [7:21051]

2001-09-25 Thread khramov

Hello
 How do I enable broadcast for DHCP server?  I know that ip
 helper enables UDP broadcast, but broadcast of netbios
 services causes some problems for win nt server.  So I guess
 to be more specific what can I do to forward udp broadcast on
 ports 67 and 68 only?

 And another question that I have what exactly ip
 directed-broadcast command does?  I've searched Cisco's web
 site but I never came across a clear defenition?

 Thanks,
 Alex

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21051t=21051
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Access Server [7:21056]

2001-09-25 Thread khramov

Hello,
 Does any one have experience configuring Access Server on
 2511?
 I've got a several devices with serial ports that I need to
 access remotely, preferably telnet into them.   So I found an
 old 2511 with async ports.  But I can not get it working.
 Here is the config on that 2511:
 interface Ethernet0
  ip address 192.168.190.25 255.255.255.0
  ip helper-address 192.78.4.47
  no lat enabled
 !
 interface Async1
  ip unnumbered Ethernet0
  ip tcp header-compression passive
  async mode interactive
  peer default ip address 192.168.190.26
 !
 interface Async2
  ip unnumbered Ethernet0
  peer default ip address 192.168.190.27
 !
 interface Async3
  ip unnumbered Ethernet0
  peer default ip address 192.168.190.28
 !
 interface Async4
  ip unnumbered Ethernet0
  ip tcp header-compression passive
  encapsulation ppp
  shutdown
  async mode interactive
  peer default ip address 192.173.50.14
  no cdp enable
  ppp authentication chap


 line 1 16
  login local
  transport input telnet
  stopbits 1
  flowcontrol hardware

 Would you please tell me what I am missing.   I am only going
 to be using first three async ports.

 Thanks,
 Alex

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21056t=21056
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: EIGRP network design [7:21019]

2001-09-25 Thread khramov

Patric,
Jeff is right, I do not think that you can pass EIGRP packets though
firewall.
My suggestion is create a vpn tunnel and put in some static routes.

Alex


Jeff Smith wrote:

 Patrick,
 I don't think you will have a choice of passing EIGRP through a firewall
 because I don't think you can do it.  An eigrp packet uses multicast
 addressing and has no layer 3 address.  I would think that a firewall would
 not pass this traffic.

 From: Patrick Donlon
 Reply-To: Patrick Donlon
 To: [EMAIL PROTECTED]
 Subject: EIGRP network design [7:21019]
 Date: Tue, 25 Sep 2001 12:52:28 -0400
 
 Hi everyone
 
 I've got a project where I have to design and implement EIGRP in a small
to
 medium sized network of about 50 to 70 routers. One of my main problems is
 what to do with routing updates at the firewalls at each site, should they
 be allowed to pass through the firewall or should statics be used either
 side of the firewalls. Another problem I can see is the routes on the
 firewalls, is there a way to avoid having to type all those route entries
 in
 them, the network has many discontiguous networks. And one last point is
 the
 redistribution to the BGP routers at the edge of the network I'm after
some
 tips, experiences and URLs so I can read around the subject myself
 
 Regards Pat
 _
 Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21071t=21019
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DHCP [7:21051]

2001-09-25 Thread khramov

I did that, but when I do sh run it is not showing up in config file.  I
mean (ip
forward-protocol udp 67).
Is that the way it is suppose to be?


MADMAN wrote:

 Check ip foward protocol

   Dave

 khramov wrote:
 
  Hello
   How do I enable broadcast for DHCP server?  I know that ip
   helper enables UDP broadcast, but broadcast of netbios
   services causes some problems for win nt server.  So I guess
   to be more specific what can I do to forward udp broadcast on
   ports 67 and 68 only?
 
   And another question that I have what exactly ip
   directed-broadcast command does?  I've searched Cisco's web
   site but I never came across a clear defenition?
 
   Thanks,
   Alex
 
  [GroupStudy.com removed an attachment of type text/x-vcard which had a
name
  of khramov.vcf]
 --
 David Madland
 Sr. Network Engineer
 CCIE# 2016
 Qwest Communications Int. Inc.
 [EMAIL PROTECTED]
 612-664-3367

 Emotion should reflect reason not guide it

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21075t=21051
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: DHCP [7:21051]

2001-09-25 Thread khramov

I am running 12.1 and I do not have a ip dhcp server (address).  Are you
suggesting to
configure my router as a DHCP server?  No, we have a win nt dhcp server
running.
Our win nt servers are reciving a lot of broadcasts because of some kind of
election for
a master browser (NT thing).  That means that our routers are passing
unnessary
broadcast.  I tried to specify broadcasts only for port 66 and 67 (dhcp
ports ) but it
is not showing up in my config, it could be enable by default.
Here is a copy of config on my router:
! Last configuration change at 16:27:46 cdt Tue Sep 25 2001
! NVRAM config last updated at 16:27:48 cdt Tue Sep 25 2001
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
service password-encryption
clock timezone cst -6
clock summer-time cdt recurring
ip subnet-zero
ip cef
ip domain-name nsuok.edu
ip name-server 192.78.4.156
ip name-server 192.78.4.158
!
!
!
!
interface Vlan1
 description (vlan 1) Management Vlan
 ip address 172.16.1.1 255.255.0.0
 ip helper-address 192.173.45.15
 ip directed-broadcast
!
interface Vlan2
 description A
 ip address 172.17.1.1 255.255.0.0
 ip helper-address 192.173.45.15
 ip directed-broadcast
!
interface Vlan3
 description B
 ip address 172.18.1.1 255.255.0.0
 ip helper-address 192.173.45.15
 ip directed-broadcast
!
interface Vlan4
 description C
 ip address 172.19.1.1 255.255.0.0
 ip helper-address 192.78.4.47
 ip directed-broadcast
!


Tim Booth wrote:

 Alex,

   Ip dhcp server [address | name] will solve your problems (IOS 11.0 and
 later). As far as the problems you're having with the NETBEUI traffic and
ip
 helper, you need to make sure you have protocol forwarding enabled, and
 transparent or source-route bridging properly configured aka UDP flooding.
 This solution is much more lengthy and cumbersome than the ip dhcp server
 command for dhcp broadcast forwarding.

   As I found on the cisco site, with ip directed-broadcast the only
 protocols that are forwarded are those that are specified with the ip
 forward-protocol command. By default (IOS 12.0 and later), ip
 directed-broadcast is disabled, and all directed ip broadcasts are dropped.
 This command translates from directed broadcasts to physical broadcasts. I
 think what is meant by a directed broadcast is a subnet (or possibly
 multicast?) and a physical broadcast is meant as 255.255.255.255, and would
 be forwarded out all interfaces (?).

 Hope this helps,
 Tim Booth

 - Original Message -
 From: khramov
 To:
 Sent: Tuesday, September 25, 2001 2:57 PM
 Subject: DHCP [7:21051]

  Hello
   How do I enable broadcast for DHCP server?  I know that ip
   helper enables UDP broadcast, but broadcast of netbios
   services causes some problems for win nt server.  So I guess
   to be more specific what can I do to forward udp broadcast on
   ports 67 and 68 only?
 
   And another question that I have what exactly ip
   directed-broadcast command does?  I've searched Cisco's web
   site but I never came across a clear defenition?
 
   Thanks,
   Alex

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=21082t=21051
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



2916 config [7:20689]

2001-09-21 Thread khramov

I've got a 2916 XL switch with 11.2(8) SA3 software.   I want to create
a vlan 2 and make that a management vlan.  But it is not letting me
assign an IP address to it.
When I do :
conf t
int vlan 2
It comes back with % Unrecognized command .  I've tried shutting down
vlan 1 first, it did not work. Any ideas?

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=20689t=20689
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: catalyst 6000 [7:20244]

2001-09-18 Thread khramov

set port host disables negotiation for ether channnel, trunking, and stp.  I
would also
recommend to set speed and duplex manually.

Alex

MADMAN wrote:

 You could try disabling PAGP and all that good stuff with the set
 port host command.

   Dave

 ndabarasa michel wrote:
 
  hello,
  i need a help from the list.
  i have a switch (catalyst6000) as a central node in a
  physical star topology.
  the other nodes are three catalyst2948.
  they are connected to the central catalyst6000 with optic
  fiber.
 
  i have spanning tree disabled cause we don't have redundancy
  links yet,thus no loops.
 
  now one server connected with optic fiber is periodically
  unreachable(every 2 minutes).
 
  i log into the console and i found this error message
 
  PAGP-5-PORTTOSTP : port 2/4 left bridge port 2/4
 
  PAGP-5-PORTTOSTP : port 2/4 joined bridge port 2/4
 
   does it have anything to do with STP ?
 
  who can help ?
 
/'^ ^'\
   ((o)-(o))
   |oOOO--(_)--OOOo--|-|-
   |  Ndabarasa Michel...   |
   |  CCNA,CCAI..  |
   |  cell   (+250)08510951..|
   |   .oooO   |
   |  (  )Oooo.  |
   |---\ (--- (  )---|-|
\_)   ) /|-|
 (_/
 
 
  --
  FREE! The Best in Rwanda Email Address @mail.rw
  Reserve your name right now at http://mail.rw
 --
 David Madland
 Sr. Network Engineer
 CCIE# 2016
 Qwest Communications Int. Inc.
 [EMAIL PROTECTED]
 612-664-3367

 Emotion should reflect reason not guide it

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=20293t=20244
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



H.323 [7:20295]

2001-09-18 Thread khramov

Does any one have experience with H.323 Polycom units?  If so any hints
on why they can be drooping the connection to the remote site while they
are  in session.  All of the units are sitting behind the Cisco Pix
firewall.
 Thanks,
Alex

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=20295t=20295
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Routing issue [7:20306]

2001-09-18 Thread khramov

I've got two 5505 at the core with RSM modules, both of the 5505s have
connection to the firewall.  Plus I've got a trunk between the 5505s. 
When I do a trace route from one of the routers that is attached to one
of the 5505 to a server outside of the firewall it first hits 5505 that
the router is attached to then it goes over the trunk to the second 5505
and only then it hits the firewall and a server.  Both of the 5505 RSMs
have static routes to the firewall.
What can I do to prevent packets from going over the trunk to the second
5505 and go directly to the firewall?

Thanks in advance,
AK

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=20306t=20306
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



traceroute [7:19963]

2001-09-14 Thread khramov

sometimes when I do a traceroute it skeeps some routers.  Is there any
way to adjusst time out or something to get traceroute to show all the
routers that packet is going through?

Regards,
Alex

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=19963t=19963
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Design question [7:19993]

2001-09-14 Thread khramov

I've got 2 5505 at the core of the network.  Then I've got anywhere from
twenty to twenty five routers and about the same number of switches at
the distribution and access layers of the network.  One of the 5505 has
blade with 8 gigabit ports, all the other port are 100 MbBaseFx.
Original design was very messy.  It had VLANs implemented but half of
the network was in the management vlan.
Shortly I am planning on redesigning some staff.  I want to put all the
routers and switches in the management VLAN.  Dedicate a gigabit link
for a server farm.  I also want ot put all the bandwidth intensive
networks on gigabit backbone.
One thing that I am not sure about is how to configure my 5505.  Would I
want to implement HSRP on 5505, that would offer redundancy, however, it
does not offer load balancing.  Another idea that I was thinking about
is implementing Spanning tree per vlan and configure access layer
switches to run two vlans.
Would you please give me some ideas on what I should do?
Thanks in advance.

Regards,
Alex

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=19993t=19993
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



5505 [7:19754]

2001-09-13 Thread khramov

I've got a 5505 and I can not telnet into the switch portion of it from
my work station.  To get into it I have ot telnet into RSM module first
and from there I telnet into the switch intself.  I check 5505 it does
not have an ip permit list configured on it.   So why I can not telnet
into the switch.

Regards,
Alex Khramov

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=19754t=19754
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



ip default route [7:19755]

2001-09-13 Thread khramov

What is the difference between ip default route and stating 0.0.0.0
0.0.0.0 X.X.X.X ?

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=19755t=19755
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 5505 [7:19754]

2001-09-13 Thread khramov

Yes it does have a SC interface.  And that is the one that I am trying to
telnet into.
Default gateway is RSM.

Wilson, Bradley wrote:

 This is just a guess, but doesn't the switch have an sc0 interface, even if
 it does have an RSM installed?  If so, does the sc0 have an IP address and
 default gateway (probably the RSM) set?

 BJ

 -Original Message-
 From: khramov [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, September 13, 2001 9:47 AM
 To: [EMAIL PROTECTED]
 Subject: 5505 [7:19754]

 I've got a 5505 and I can not telnet into the switch portion of it from
 my work station.  To get into it I have ot telnet into RSM module first
 and from there I telnet into the switch intself.  I check 5505 it does
 not have an ip permit list configured on it.   So why I can not telnet
 into the switch.

 Regards,
 Alex Khramov

 [GroupStudy.com removed an attachment of type text/x-vcard which had a name
 of khramov.vcf]

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=19763t=19754
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: 5505 [7:19754]

2001-09-13 Thread khramov

Thanks a lot, guys
I got it working.  It was the ip default gateway.

Thanks again,
Alex

EA Louie wrote:

 because you need to configure an ip route to the outside world on the
switch
 to tell it where its default gateway is (similar to a workstation)

 - Original Message -
 From: khramov
 To:
 Sent: Thursday, September 13, 2001 7:21 AM
 Subject: Re: 5505 [7:19754]

  Yes it does have a SC interface.  And that is the one that I am trying to
  telnet into.
  Default gateway is RSM.
 
  Wilson, Bradley wrote:
 
   This is just a guess, but doesn't the switch have an sc0 interface,
even
 if
   it does have an RSM installed?  If so, does the sc0 have an IP address
 and
   default gateway (probably the RSM) set?
  
   BJ
  
   -Original Message-
   From: khramov [mailto:[EMAIL PROTECTED]]
   Sent: Thursday, September 13, 2001 9:47 AM
   To: [EMAIL PROTECTED]
   Subject: 5505 [7:19754]
  
   I've got a 5505 and I can not telnet into the switch portion of it from
   my work station.  To get into it I have ot telnet into RSM module first
   and from there I telnet into the switch intself.  I check 5505 it does
   not have an ip permit list configured on it.   So why I can not telnet
   into the switch.
  
   Regards,
   Alex Khramov
  
   [GroupStudy.com removed an attachment of type text/x-vcard which had a
 name
   of khramov.vcf]
 
  [GroupStudy.com removed an attachment of type text/x-vcard which had a
 name
  of khramov.vcf]
 _
 Do You Yahoo!?
 Get your free @yahoo.com address at http://mail.yahoo.com

[GroupStudy.com removed an attachment of type text/x-vcard which had a name
of khramov.vcf]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=19782t=19754
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



eigrp routing [7:19603]

2001-09-12 Thread khramov

I have a static route on my core router to the firewall.  However, when
I do sh ip eigrp topology it shows that there are two routes to the
firewall through other routers in a topology table.  Since firewall does
not respond to traceroute how can I test the network.
I am sure that it is using staic route, but why does it have two other
entries in the topology table.
Trying to learn eigrp.

Thanks for your input,
Alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=19603t=19603
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLAN Security [7:18203]

2001-09-05 Thread khramov

I would like to add that I also had bad experience with 3548 switches. I had
three go
bad out of four that I installed.   However, I did have a good experience
with 2948G.
But they are a little bit more expensive.
here is my .02c

Trevor J Corness, CCNA wrote:

 Well, it depends.. I definately still would not VLAN off ports from a big
 switch.. do you plan on putting a NetManager box on the inside, and wanting
 to monitor the DMZ Hub/Switch?  If not, a Cat3524XL could be best (though
 I've had bad track record personally with those boxes, I'm sure over-all
 they're fine.. I've just been unlucky to come across 14 bad ones out of 17
 I've installed).

 Anyways.. hope you can straighten it out..  those are just my .02c worth.

 Regards,
   Trevor J Corness
   Radian Corporation
   http://www.radiancorp.com

 -Original Message-
 From: Circusnuts [mailto:[EMAIL PROTECTED]]
 Sent: Sunday, September 02, 2001 4:20 AM
 To: Trevor J Corness, CCNA
 Subject: Re: VLAN Security [7:18203]

 Cisco's pushing the Fast 10/100 hub now, but I don't know that state of
 those older HP/Cisco 10 base T models.  The Internet connection I am
looking
 to start with is @ least 10 Megs, maybe as high as 30 Megs.  Does that
 change your advice any ???

 Thanks
 Phil

 - Original Message -
 From: Trevor J Corness, CCNA
 To: 'Circusnuts'
 Sent: Sunday, September 02, 2001 2:26 AM
 Subject: RE: VLAN Security [7:18203]

  If you are talking about a single 3500 as the DMZ, with no links to the
  internal network... or just VLAN'ing off ports of a 6509 or something
  larger..  I would definately suggest a standalone 3500.. simply because
of
  the problems of Leaky Buckets.  A well planned attack, will overload
the
  buffers of the switch, and leak traffic onto the Private network.  This
 is
  why I normally used managed hubs for DMZ (normally a customer won't have
  more than a T1 in this case).. so that I can split off a single port for
  monitoring.. and no leaky buckets.  This is a personal preference
 though.
  Your situation may be much different than my normal encounters at my job.
  You have not supplied the information needed to make the hub/switch
  decision..  Out of curiosity, do you know if Cisco still sells managed
 Hubs?
  Or are they all EOL?  I normally use HP 10base-T hubs (again, decided by
 the
  1.544Mbps T1).
 
  Regards,
Trevor J Corness
Radian Corporation
http://www.radiancorp.com
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
  Circusnuts
  Sent: Saturday, September 01, 2001 5:11 PM
  To: [EMAIL PROTECTED]
  Subject: VLAN Security [7:18203]
 
 
  I'm finishing a project @ work  have an opportunity to recommend
multiple
  3500 series switches or VLAN configuration.  The placement of these boxes
  will
  be before a firewall, coming off of a BGP router (for IDS's,
SwitchProbes,
  DMZ, etc.,).  Can anyone think of an argument either way ???
 
  Thanks Everyone
  Phil




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=18694t=18203
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Token Ring Frame size [7:18466]

2001-09-04 Thread khramov

I need to change frame size on of my Token Ring subnets. If I change the
Token Ring frame size on the router and it will be different (larger)
than the frame size that is configured on a work station how is it going
to affect the work station? And if I change the frame size on the
workstation first would that crash the router?
Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=18466t=18466
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Token Ring Frame size [7:18466]

2001-09-04 Thread khramov

Here is what I've got:
We have a remote site where we run token ring and ethernet.  Core router
(Cisco 4500)
has 1 tr interface and 2 ethernet interfaces.  One ethernet interface goes
out to the
firewall and the other interface is just an ethernet subnet with
workstations.
Some time in the past, I am not sure but for whatever reason frame size on
token ring
interface was changed to 1500 from I believe the default 4500.  Ever since
users have
been complaining about poor network performance.  I think that if change MTU
it might
speed them up a little bit.  However, all the PC are also set to 1500 frame
size.  So I
am debating whether changing the frame size will help users and if I change
it how long
the network will be down or is it just a matter of rebooting PCs.
So I guess my router does both routing and translation.  What do you think I
should do?

Priscilla Oppenheimer wrote:

 At 02:40 PM 9/4/01, khramov wrote:
 I need to change frame size on of my Token Ring subnets. If I change the
 Token Ring frame size on the router and it will be different (larger)
 than the frame size that is configured on a work station how is it going
 to affect the work station? And if I change the frame size on the
 workstation first would that crash the router?
 Thanks

 It shouldn't be a serious problem either way you do it. Users may have to
 re-establish connections, however.

 Are the routers truly routers or are they source-routing bridges? With
 source-route bridging, each bridge checks the largest frame field and
 decrements it if the bridge is configured for something smaller than is in
 the frame. This happens during route discovery and session establishment.
 Changing one of the bridges after sessions are established could cause
 problems.

 If the routers are truly routers and are routing IP, there's a similar
 situation. IP hosts can use IP maximum transmission unit (MTU) discovery to
 determine the largest possible frame size to use. This happens during
 session establishment. Changing the MTU on one of the routers after
 sessions are established could cause problems.

 But routers shouldn't crash and there shouldn't be any other dire
 consequences. Also, it sounds like you are increasing MTU which is less
 worrisome than decreasing MTU.

 Do you do any translational bridging between Ethernet and Token Ring
 segments? Translational bridging can be difficult to get working,
 especially if you use Token Ring frame sizes that are larger than Ethernet
 allows (1500 bytes). If you use routing instead of bridging, there will be
 fewer problems.

 If your routers are now going to need to fragment and reassemble IP
 packets, in order to go between Token Ring which supports larger frames and
 Ethernet which supports 1500 byte frames, keep in mind that the routers
 will be slower. This is additional work that they don't normally have to
 do. I think it forces them to use process switching instead of the faster
 switching methods.

 Priscilla
 

 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=18478t=18466
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Token Ring Frame size [7:18466]

2001-09-04 Thread khramov

Thanks a lot for your input.

Priscilla Oppenheimer wrote:

 Where are the servers or mainframes that the Token Ring PCs are using? Do
 they support a large frame size? What is the traffic flow? Does the traffic
 from the PCs travel across an Ethernet segment or some other segment that
 does not support a large frame size? Are you using bridging or routing?

 The steps you should take include:

 Analyze the physical topology.
 Analyze the logical topology and traffic flow.
 Define the problem with as much detail as possible. How else can you
 characterize the poor network performance?
 Gather facts, such as why was the frame size changed? Does it affect all
 users? Is it reproducible across applications? What is the actual response
 time? What are the error rates at the data-link layer, upper layers?
 Analyze router configurations, determine if bridging or routing is
 happening. What do show interface commands show?
 Consider possibilities. Try to do this without bias and assumptions (such
 as the assumption that performance problems are caused by frame size)
 Create an action plan
 Implement the action plan
 Observe the results

 If you have really done the initial steps and are ready to implement the
 action plan of changing frame size, you are doing the right think to think
 about the implications of making this change.

 With very little data to go on, I think you can make the change without
 much risk. Both routing and bridging supposedly handle various frame sizes.

 Priscilla

 At 04:38 PM 9/4/01, khramov wrote:
 Here is what I've got:
 We have a remote site where we run token ring and ethernet.  Core router
 (Cisco 4500)
 has 1 tr interface and 2 ethernet interfaces.  One ethernet interface goes
 out to the
 firewall and the other interface is just an ethernet subnet with
 workstations.
 Some time in the past, I am not sure but for whatever reason frame size on
 token ring
 interface was changed to 1500 from I believe the default 4500.  Ever since
 users have
 been complaining about poor network performance.  I think that if change
MTU
 it might
 speed them up a little bit.  However, all the PC are also set to 1500
frame
 size.  So I
 am debating whether changing the frame size will help users and if I
change
 it how long
 the network will be down or is it just a matter of rebooting PCs.
 So I guess my router does both routing and translation.  What do you
think I
 should do?
 
 Priscilla Oppenheimer wrote:
 
   At 02:40 PM 9/4/01, khramov wrote:
   I need to change frame size on of my Token Ring subnets. If I change
the
   Token Ring frame size on the router and it will be different (larger)
   than the frame size that is configured on a work station how is it
going
   to affect the work station? And if I change the frame size on the
   workstation first would that crash the router?
   Thanks
  
   It shouldn't be a serious problem either way you do it. Users may have
to
   re-establish connections, however.
  
   Are the routers truly routers or are they source-routing bridges? With
   source-route bridging, each bridge checks the largest frame field and
   decrements it if the bridge is configured for something smaller than is
 in
   the frame. This happens during route discovery and session
establishment.
   Changing one of the bridges after sessions are established could cause
   problems.
  
   If the routers are truly routers and are routing IP, there's a similar
   situation. IP hosts can use IP maximum transmission unit (MTU)
discovery
 to
   determine the largest possible frame size to use. This happens during
   session establishment. Changing the MTU on one of the routers after
   sessions are established could cause problems.
  
   But routers shouldn't crash and there shouldn't be any other dire
   consequences. Also, it sounds like you are increasing MTU which is less
   worrisome than decreasing MTU.
  
   Do you do any translational bridging between Ethernet and Token Ring
   segments? Translational bridging can be difficult to get working,
   especially if you use Token Ring frame sizes that are larger than
 Ethernet
   allows (1500 bytes). If you use routing instead of bridging, there will
 be
   fewer problems.
  
   If your routers are now going to need to fragment and reassemble IP
   packets, in order to go between Token Ring which supports larger frames
 and
   Ethernet which supports 1500 byte frames, keep in mind that the routers
   will be slower. This is additional work that they don't normally have
to
   do. I think it forces them to use process switching instead of the
faster
   switching methods.
  
   Priscilla
   
  
   Priscilla Oppenheimer
   http://www.priscilla.com
 

 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=18487t=18466
--
FAQ, list archives, and subscription info: http://www.groupstudy.com

Tacacs [7:17110]

2001-08-24 Thread khramov

Hi,
Just like everyone else sometimes I do not have enough time to do the
research myself and I post questions here.  Here is what I am trying to
do:  I am trying to set up some sort of security server on my network to

authorize user access on routers and switches.  First of all what should

I use Tacacs (extended or +), Radius, Kerberos, which one seem to work
better.  Second where can I buy/download the software or can I just
configure a router as a Tacacs server.  Just give me some ideas on this.

Thanks a lot,
alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=17110t=17110
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Tacacs [7:17110]

2001-08-24 Thread khramov

As far as I know this is Cisco newsgroup and it should be used for technical
discussions
not for personal insults.  If you think that you are smarter than me or have
better work
habits that is fine,  I am not going to argue with that.  Otherwise I would
be asking
questions.

Donald B Johnson jr wrote:

 After someone gives you an answer, are you going to have time to research
if
 it is a good solution for you or are you going to just implement it.
 It sure must warm the cockles of your supervisors heart if he could see you
 now.
 actually the only two things that would make me to busy that I couldn't
 research an access solution would be;
 A raging blaze
 A Seinfeld rerun
 don

 - Original Message -
 From: khramov
 To:
 Sent: Friday, August 24, 2001 6:17 AM
 Subject: Tacacs [7:17110]

  Hi,
  Just like everyone else sometimes I do not have enough time to do the
  research myself and I post questions here.  Here is what I am trying to
  do:  I am trying to set up some sort of security server on my network to
 
  authorize user access on routers and switches.  First of all what should
 
  I use Tacacs (extended or +), Radius, Kerberos, which one seem to work
  better.  Second where can I buy/download the software or can I just
  configure a router as a Tacacs server.  Just give me some ideas on this.
 
  Thanks a lot,
  alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=17126t=17110
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Tacacs [7:17073]

2001-08-23 Thread khramov

Hi,
Just like everyone else sometimes I do not have enough time to do the
research myself and I post questions here.  Here is what I am trying to
do:  I am trying to set up some sort of security server on my network to
authorize user access on routers and switches.  First of all what should
I use Tacacs (extended or +), Radius, Kerberos, which one seem to work
better.  Second where can I buy/download the software or can I just
configure a router as a Tacacs server.  Just give me some ideas on this.

Thanks a lot,
alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=17073t=17073
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Loopback Interface [7:16174]

2001-08-15 Thread khramov

Would you please explain me in simple terms what is loopback interface?
One of the techs from our ISP told me to config my router for loopback
interface instead of multilink interface so that he would push the
config to my router.  He also told me that multilink requires high CPU
usage.  Would you please give me your opinion on this.
Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=16174t=16174
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Usage of Spanning-tree GUARD and UDLD features. [7:15602]

2001-08-10 Thread khramov

This this:

http://www.cisco.com/warp/public/473/77.html
http://www.cisco.com/warp/public/473/74.html


Urooj's Hi-speed Internet wrote:

 Hi Folks,
 Can someone please guide me on the usage of Spanning-tree GUARD and UDLD
 (Uni-directional Link Detection) features in the Catalyst switches?

 My specific question is would there be a need to use both in a situation,
as
 they seem to serve the same basic purpose ? Or is Spanning-tree GUARD
 feature superior as it checks certain software features such as
 Ether-channel and trunks also ?

 Aziz S. Islam




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=15602t=15602
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NTP [7:15512]

2001-08-09 Thread khramov

Hi,
Anyone knows of a good NTP server software that I can install on Win NT
server PC to sync. time on routers and switches?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=15512t=15512
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCM with 6509 [7:13549]

2001-07-24 Thread khramov

Is anyone using CCM software?  If yes did you have to config anything
special on 6509 and 2980G sw in order for CCM to work.
Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=13549t=13549
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Switch Config [7:11761]

2001-07-10 Thread khramov

I've posted a question about this problem that I am having yesterday,
but I still have not been able to resolve this problem.
Here is what I've got:  2900 connected to 5505A which connected to
another 5505B. From 2900 I can ping 5505A's RSM and I can ping sc0 and
RSM on 5505B.
Default gateway on 2900 is a port on 5505 that I am connected to.
Default gateway for sc int on 5505A is its RSM. Both of the 5505s are
VLAN 1, 2900 is config for VLAN 76.  When I do sh vlan on  5505A, it
is showing VLAN 76 active, connected to 4/8.  4/8 is up.
When I do traceroute from 2900 to sc on 5505A it goes to its gateway adn
then times out, but I can ping RSM just fine.  And subnet network that I
got config for VLAN 76 is added to the RSM on 5505A routing table. Any
ideas? Any input is appreciated.
Thanks a lot.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=11761t=11761
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



switch config [7:11583]

2001-07-09 Thread khramov

I've got a switch hooked up to 5505. I can ping RSM module. I can ping
all the other sw on the network that hooked up to the 5505, but I can
not ping 5505. any ideas?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=11583t=11583
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: switch config [7:11583]

2001-07-09 Thread khramov

I've got a sc interface config on 5505.
New switch is on a diffrent subnet but I can ping RSM that is on the same
subnet
as sc on 5505.
I do have a default route config on 2900

John Neiberger wrote:

 Okay, I'll ask the painful questions:

 Do you have the sc0 interface configured?
 If so, are you pinging from a device in the same subnet/vlan?
 If not, do you have a default route set in the switch?

 Those are the first things I would check.

 Regards,
 John

  khramov  7/9/01 3:14:48 PM 
 I've got a switch hooked up to 5505. I can ping RSM module. I can ping
 all the other sw on the network that hooked up to the 5505, but I can
 not ping 5505. any ideas?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=11591t=11583
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: switch config [7:11583]

2001-07-09 Thread khramov

I mean an IP address that is assigned to the VLAN.
Port on 5505 and new switch is configured on the same vlan.

Patrick Ramsey wrote:

 when you say the 5505, do you mean the management port?

 Or do you mean an ip address assigned to given vlan?

 Is the ip you are pinging on your same subnet?  If not does the 5505 have a
 default gateway?

 -Patrick

  khramov  07/09/01 05:14PM 
 I've got a switch hooked up to 5505. I can ping RSM module. I can ping
 all the other sw on the network that hooked up to the 5505, but I can
 not ping 5505. any ideas?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=11590t=11583
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



6509 [7:10299]

2001-06-28 Thread khramov

hi,
I am trying to config 6509 switch.  I am adding vlan interfaces to the
RSM.  I've got some Class B addresses and class C addresses.  When I add
a class C address and for s.m. I put 255.255.255.0 it comes back with
message that /24 is a bad mask for this address.  When I put 255.255.0.0
it accepts it.  Will it cause any problems?  Is there a problem with
running class B and class C ip addreses at the same time?
Switch itself has a class B address.
Thanks in advance,
Alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=10299t=10299
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Network Management Software [7:9980]

2001-06-26 Thread khramov

Any opinions on Network Instruments' Observer management software.  I am
debating between this one and Agilent  Advisor SW Edition.  If you had
any experience with any of these software or other network management
software please let me know your opinion on what is the best buy.
Thanks a lot,
Alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=9980t=9980
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Wake on LAN [7:8755]

2001-06-15 Thread khramov

Is there a special config on a router for wake on lan to work?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8755t=8755
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Wake on LAN [7:8755]

2001-06-15 Thread khramov

I think that wake on lan sends out a broadcast with F... in the
destination field.
May be because it a layer  2 broadcast it is not passing the packets.
Can I configure a router to pass layer 2 broadcasts?  And if I can is there
a way to
control the broadcast so that only wake on lan packets would pass?
Thanks

Priscilla Oppenheimer wrote:

 Could you capture with a protocol analyzer the actual Wake on LAN packet?
 It's always been a mystery to me. But my guess is that it's not a routable
 packet.

 On the other hand, is it even a packet or it is just an electrical surge or
 something?

 I suggest you find out more about what the Wake on LAN sender actually
 sends. Maybe somebody else knows. We did discuss it once before. Check the
 archives. We did not discusss it from the point of view of it crossing a
 router, though.

 Priscilla

 At 03:29 PM 6/15/01, khramov wrote:
 Is there a special config on a router for wake on lan to work?
 

 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8775t=8755
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Wake on LAN [7:8755]

2001-06-15 Thread khramov

Well it seems that WOL is a widely used technology.  So there is got to be a
way how
pass those packets through the router.
Any ideas?

Patrick Ramsey wrote:

 It is indeed a packet.  And all of the utils I have seen to perform a WOL
to
 a device use MAC addresses, so routing would not be possible.   Now that I
 think about it, this would be the only way this would work unless you could
 build a tcp/ip stack into the rom of a nic.  (otherwise the OS would
already
 have to be awake to make use of it's tcp/ip stack)

 -Patrick

  Priscilla Oppenheimer  06/15/01 03:48PM 
 Could you capture with a protocol analyzer the actual Wake on LAN packet?
 It's always been a mystery to me. But my guess is that it's not a routable
 packet.

 On the other hand, is it even a packet or it is just an electrical surge or
 something?

 I suggest you find out more about what the Wake on LAN sender actually
 sends. Maybe somebody else knows. We did discuss it once before. Check the
 archives. We did not discusss it from the point of view of it crossing a
 router, though.

 Priscilla

 At 03:29 PM 6/15/01, khramov wrote:
 Is there a special config on a router for wake on lan to work?
 

 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8778t=8755
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Wake on LAN [7:8755]

2001-06-15 Thread khramov

Thanks for the idea, but policy routing might be just a little bit difficult
for me
right now.  I can enable the MAC broadcast on a router, but the would defeat
the whole
purpose of having a router.


Peter Slow wrote:

 i beleive it is one of those evil broadcast packets. you'd have to brigde
 it, or write something to send out your own.
 you might wanna look at the type feild if there is one in the packet, and
 try and do some sort of policy routing thing to automatically trow it onto
a
 tunnel interface...and then do whatever
 this brings me to another question.
 if i make it so that a policy map matches a broadcast packet, and explicity
 route that packet out of an interface using the policy routing thingy, can
i
 route a broadcast?
 if so, i will pat myself on the back for finally coming up with a good
 idea =P

 Peter Slow, CCNP Voice Specialist
 Network Engineer
 Planetary Networks
 535 West 34th. Street
 New York, New York
 10001

 Cell: +1(516) 782.1535
 Desk: +1(646) 792.2395
 Mail: [EMAIL PROTECTED]

 -Original Message-
 From: khramov [mailto:[EMAIL PROTECTED]]
 Sent: Friday, June 15, 2001 1:58 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Wake on LAN [7:8755]

 Well it seems that WOL is a widely used technology.  So there is got to be
a
 way how
 pass those packets through the router.
 Any ideas?

 Patrick Ramsey wrote:

  It is indeed a packet.  And all of the utils I have seen to perform a WOL
 to
  a device use MAC addresses, so routing would not be possible.   Now that
I
  think about it, this would be the only way this would work unless you
 could
  build a tcp/ip stack into the rom of a nic.  (otherwise the OS would
 already
  have to be awake to make use of it's tcp/ip stack)
 
  -Patrick
 
   Priscilla Oppenheimer  06/15/01 03:48PM 
  Could you capture with a protocol analyzer the actual Wake on LAN packet?
  It's always been a mystery to me. But my guess is that it's not a
routable
  packet.
 
  On the other hand, is it even a packet or it is just an electrical surge
 or
  something?
 
  I suggest you find out more about what the Wake on LAN sender actually
  sends. Maybe somebody else knows. We did discuss it once before. Check
the
  archives. We did not discusss it from the point of view of it crossing a
  router, though.
 
  Priscilla
 
  At 03:29 PM 6/15/01, khramov wrote:
  Is there a special config on a router for wake on lan to work?
  
 
  Priscilla Oppenheimer
  http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8790t=8755
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: wake on lan [7:8792]

2001-06-15 Thread khramov

As far as I know WOL layer 2 broadcast, it does not have an IP field.
That is the main problem.
What is the command to look up if direct-broadcast is already enabled on the
router?
Thanks,

Priscilla Oppenheimer wrote:

 One other thought: The article that Patrick referenced implies that you
 could enable directed broadcasts. The default on modern routers is no
 directed broadcasts but you could disable that. It's not recommended for
 security reasons, but if you want to do it the command is no ip
 directed-broadcast.

 http://esupport.ca.com/public/sdo_shipit/infodocs/7065.asp

 But you have to find out what the server or whatever is sending to wake up
 the stations. You are troubleshooting in the blind until you find out what
 it is sending.

 Is it an IP packet?
 Is it a UDP packet?
 Is it just a MAC packet?
 Is it a broadcast? At the MAC and IP layers?

 Priscilla

 At 05:58 PM 6/15/01, Priscilla Oppenheimer wrote:
 The ip helper command might help.
 
 Also use the ip forward-protocol command to forward the Wake on LAN
 broadcast and the no ip forward-protocol command to not forward other
 broadcasts.
 
 You would have to check the documentation to see if this would work for
 sure. Let us know how it goes! Thanks.
 
 Priscilla
 
 
 
 At 03:31 PM 6/15/01, khramov wrote:
  I think that wake on lan sends out a broadcast with F... in the
  destination field.
  May be because it a layer  2 broadcast it is not passing the packets.
  Can I configure a router to pass layer 2 broadcasts?  And if I can is
  there a way to
  control the broadcast so that only wake on lan packets would pass?
  Thanks
 
 
 
 
 Priscilla Oppenheimer
 http://www.priscilla.com
 

 Priscilla Oppenheimer
 http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8795t=8792
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Switch 2924 [7:8613]

2001-06-14 Thread khramov

I am configuring 2924 and I am trying to set a password for http.
I did:
line vty 5 15
password **,
However, instead of the password that I typed in, it uses my enable
password to log into the switch through http.  What am I doing wrong?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8613t=8613
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Switch 2924 [7:8613]

2001-06-14 Thread khramov

I looked on Cisco's web site and I couldn't  find any information.  Would
you please
explain me what is vty anyway, is it only for telnet sessions?
How would you then configure access to the switch from browser.

khramov wrote:

 I am configuring 2924 and I am trying to set a password for http.
 I did:
 line vty 5 15
 password **,
 However, instead of the password that I typed in, it uses my enable
 password to log into the switch through http.  What am I doing wrong?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8619t=8613
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



TAC [7:8416]

2001-06-13 Thread khramov

I've got a problem with one of my sw.  Status light stays orange. I can
not find TAC's phone number on cisco's web site.  Would you please send
their support number.
Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8416t=8416
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: TAC [7:8416]

2001-06-13 Thread khramov

Disregard that, I found the phone number,  However, if someone knows why the
status
light stays orange please let me know.
Thanks




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8418t=8416
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Wake on LAN [7:8221]

2001-06-12 Thread khramov

Hi,
  I've got a TR network and I am trying to to get wake on lan to work.
It works when I connect workstation through a hub to the server that
initializes wake on lan, however, when I connect workstation to the
actual network it does not work.
I've got a 4000 Cisco router and 8272 IBM TR Switch, is there any
special configurations I need set up on the router or switch for the
wake on lan to work.

Alexander Khramov




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8221t=8221
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Wake on LAN [7:8079]

2001-06-11 Thread khramov

Hi,
  I've got a TR network and I am trying to to get wake on lan to work.
It works when I connect workstation through a hub to the server that
initializes wake on lan, however, when I connect workstation to the
actual network it does not work.
I've got a 4000 Cisco router and 8272 IBM TR Switch, is there any
special configurations I need set up on the router or switch for the
wake on lan to work.

Alexander Khramov




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8079t=8079
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLAN 1 [7:7367]

2001-06-07 Thread khramov

Thanks a lot everyone I got.  Config on RSM was not correct.

khramov wrote:

 What is the command to shut down VLAN 1 on a switch?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=7507t=7367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VLAN on 5505 [7:7341]

2001-06-06 Thread khramov

I am configuring VLAN on 5505.  When I run  status shows that
it is not connected.  I checked my cable run it seems fine and I checked
the config few times.  Any ideas?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=7341t=7341
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VLAN 1 [7:7367]

2001-06-06 Thread khramov

What is the command to shut down VLAN 1 on a switch?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=7367t=7367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLAN 1 [7:7367]

2001-06-06 Thread khramov

I've configure 2 VLAN on 5505 and it is connected to 2900.
In order for my VLANs to work I need to disable VLAN.
my commands:
config t
int vlan 1
shutdown
I thought that this would bring down administratively shut down vlan 1 but
it does not.
What am I doing wrong?

Alex Collins wrote:

 You need VLAN 1 as a minimum for the switch to operate from my
understanding
 (I'm sure to be corrected if wrong).  If you only have just one VLAN (which
 will be VLAN1) the switch is a single broadcast domain anyway so you can
 kinda ignore VLAN's entirely at that point.

 What are you trying to achieve?

  Alex.

  -Original Message-
 From:   khramov [mailto:[EMAIL PROTECTED]]
 Sent:   06 June 2001 17:47
 To: [EMAIL PROTECTED]
 Subject:VLAN 1 [7:7367]

 What is the command to shut down VLAN 1 on a switch?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=7374t=7367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLAN 1 [7:7367]

2001-06-06 Thread khramov

Thanks for all of you replies:
Here is more details on what I am doing.  I am new to VLAN so please patient
with me.
I have 5505 with RSM module.  I config. VLAN xx on 5505, enabled the port on
5500 and
added
route to the RSM database.  Then I have a fiber run to 2900.  On 2900 I
enabled f1/1 and
created
VLAN.  Added IP address to the VLAN xx, gateway and s.m.  Since I want to
manage the
switch
through my vlan I disabled vlan 1.
I get a green light on a 2900 but I still can not ping 5505.
I am suspecting that on 5505 or 2900 port fast was turned on by another
network tech.,
and I do not
know how to check for it.  And I do not know if that could cause a problem.
Thanks for you help.

Alex Khramov




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=7403t=7367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLAN 1 [7:7367]

2001-06-06 Thread khramov

Thanks for all of you replies:
Here is more details on what I am doing.  I am new to VLAN so please patient
with me.
I have 5505 with RSM module.  I config. VLAN xx on 5505, enabled the port on
5500 and
added route to the RSM database.  Then I have a fiber run to 2900.  On 2900
I enabled
f1/1 and created VLAN.  Added IP address to the VLAN xx, gateway and s.m. 
Since I want
to manage the switch through my vlan I disabled vlan 1.
I get a green light on a 2900 but I still can not ping 5505.
I am suspecting that on 5505 or 2900 port fast was turned on by another
network tech.,
and I do not know how to check for it.  And I do not know if that could
cause a problem.

Thanks for you help.

Alex Khramov

Karen E Young wrote:

 The requirements for connecting a router to a switch running multiple VLANs
 have been posted to the list before do I won't go into great detail.

 If VLAN 1 has an IP address on the switch then you need to set up an IP
 address for whichever VLAN you want to act as the management VLAN and THEN
 shut down the VLAN 1 interface. However, I've only seen that particular
 setup on IOS switches, not Catalyst OS switches. On Cat OS switches
 (set-based) the management VLAN is determined by the sc0 interface and if
 that happens to be something besides VLAN 1 then VLAN 1 can be ignored. The
 control traffic for the switch protocols will use VLAN 1 unless you
 specifically re-route them to another VLAN. I wrote another post a month
ago
 about this (Groupstudy archives -
 http://www.groupstudy.com/archives/cisco/200105/msg00795.html), you might
 want to check it out since it has bearing on your issue.

 Config Summary--

 On the switch:
 - Make sure that the switch has a management interface set up
 - Set the trunking options for the port to the router (set trunking to on
 so that trunking doesn't have to be negotiated)
 - Set port connecting to router as 100Mb full-duplex (To prevent problems
 with auto-negotiation)
 - Set the remaining ports to be used on the switch to their respective
VLANs.
 - Make sure that all of the the VLANs you want to connect to the router are
 enabled on the trunk link

 On the router:
 - Make sure the port connecting to the switch is 100Mb full-duplex (To
 prevent problems with auto-negotiation)
 - Create a subinterface for each VLAN thats configured on the switch
 (doesn't have to include default VLANs such as VLAN 1 unless you're using
if
 for your management interfaces)
 - set up appropriate ip addresses on all subinterfaces
 - Set up trunking options on the subinterfaces.
 - Do a no shutdown on the interface to activate it.

 If I can be of any further help, please feel free to contact me.

 Karen

 *** REPLY SEPARATOR  ***

 On 6/6/2001 at 1:35 PM khramov wrote:

 I've configure 2 VLAN on 5505 and it is connected to 2900.
 In order for my VLANs to work I need to disable VLAN.
 my commands:
 config t
 int vlan 1
 shutdown
 I thought that this would bring down administratively shut down vlan 1 but
 it does not.
 What am I doing wrong?
 
 Alex Collins wrote:
 
  You need VLAN 1 as a minimum for the switch to operate from my
 understanding
  (I'm sure to be corrected if wrong).  If you only have just one VLAN
 (which
  will be VLAN1) the switch is a single broadcast domain anyway so you can
  kinda ignore VLAN's entirely at that point.
 
  What are you trying to achieve?
 
   Alex.
 
   -Original Message-
  From:   khramov [mailto:[EMAIL PROTECTED]]
  Sent:   06 June 2001 17:47
  To: [EMAIL PROTECTED]
  Subject:VLAN 1 [7:7367]
 
  What is the command to shut down VLAN 1 on a switch?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=7402t=7367
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: VLAN problems [7:6475]

2001-05-31 Thread khramov

Thanks a lot. It worked.  I can now ping and telnet into 5505.
Appreciate your help.
Alex

Mike Bernhardt wrote:

 Are you trying to manage the 2924 from the new VLAN? If so, you have to
shut
 down VLAN 1. then you can no-shut the new VLAN.

 ..
 Mike Bernhardt
 CCIE #6079

 To reply directly, yo know what to do...

 khramov wrote:
 
  Trying to set up a VLAN between 5505 with the RSM module and
  2924 Cisco
  Catalyst Switch over 100baseFX.  Everything seems to be working

  correctly except the VLAN on the 2924 shows shut down and can
  not be
  brought up.

  On 5505 we created VLAN, assign an IP address to the VLAN on
  5505 and on
  the VLAN 2924.   We left the VLAN 1 on the 2924 with no IP
  address.
  We also enabled EIGRP routing on RSM module on 5505.

  Any suggestions on what we need to do to make them talk over
  the VLAN.
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6602t=6475
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



VLAN problems [7:6475]

2001-05-30 Thread khramov

Trying to set up a VLAN between 5505 with the RSM module and 2924 Cisco
Catalyst Switch over 100baseFX.  Everything seems to be working
correctly except the VLAN on the 2924 shows shut down and can not be
brought up.
On 5505 we created VLAN, assign an IP address to the VLAN on 5505 and on
the VLAN 2924.   We left the VLAN 1 on the 2924 with no IP address.
We also enabled EIGRP routing on RSM module on 5505.
Any suggestions on what we need to do to make them talk over the VLAN.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6475t=6475
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Blocking Napster and Aol on Pix config/Setting up Tacus or [7:1650]

2001-04-23 Thread Alexander Khramov

Check out this article
http://www.networkmagazine.com/article/NMG20010319S0002
Instead of creating extended ACLs they set up a server running CheckPoint
software.  It filters files by their type and sets priorities on them, so
you can set up the lowest priority for mp3 files.
Anyway check out the article, you might find it useful.
--
Kind regards,
Alexander N. Khramov, CCNA
Student Technical Consultant
NSU, Computing and Telecommunications
[EMAIL PROTECTED]


Keyur Lavingia  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 This has actually come up again in the discussion. If u want to block AIM
 outgoing from ur network, u should try to block the IP Addresses of the
 login server of AIM which is login.oscar.aol.com The AIM App is designed
 to scan for ports other than 5190 to login to the server, so port blocking
 will not work always.

 Sincerely,

 KEYUR LAVINGIA
 Network Engineer
 Peak XV Networks
 San Ramon, CA 94583.
 W - 925.242.7492
 C - 925.699.8855
 [EMAIL PROTECTED]
 www.peakxv.net

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: Monday, April 23, 2001 11:12 AM
 To: [EMAIL PROTECTED]
 Subject: Re: Blocking Napster and Aol on Pix config/Setting up Tacus or
 [7:1629]


 Just a note, that people can shoose other ports to get to the AIM
services.


 Kevin O'Gilvie  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Before I ask this question I would like to give something back, below is
 the
  config to block aim and napster:
 
  access-list acl_out deny tcp any any eq 5190
  access-list acl_out deny tcp any any eq 8875
  access-list acl_out deny tcp any any eq 
  access-list acl_out deny tcp any any eq 6699
  access-list acl_out deny tcp any any eq 
  access-group acl_out in interface inside
  access-list acl_out permit tcp any any
  access-list acl_out permit ip any any
 
 
  Now I would like to setup a Tacus+ or Radius Server on My network I have
a
  widows 2000 domain and I am unsure of how to do this. Please advise.
 
  TIA,
 
  Kevin
  _
  Get your FREE download of MSN Explorer at http://explorer.msn.com
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=1650t=1650
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Need some HELP.

2001-04-03 Thread Alexander Khramov

Try this:
http://www.tcpmag.com/salarysurvey/2001/default.asp


--
Kind regards,
Alexander N. Khramov, CCNA
Student Technical Consultant
NSU, Computing and Telecommunications
[EMAIL PROTECTED]
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco 2503 Problem

2001-04-02 Thread Alexander Khramov

You might want to try a different Hyperterminal Program.

--
Kind regards,
Alexander N. Khramov, CCNA
Student Technical Consultant
NSU, Computing and Telecommunications
[EMAIL PROTECTED]

"Omer Ehsan Dar" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi all,
 I have a 2503 router with 12.0 IOS. it does not obey the password
 recovery command the break command does not work if you hit it during
 bootup. Any suggestions.
 Thanks
_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



CCNP-Routing Study Guide

2001-03-20 Thread Alexander Khramov


Greetings everyone,

I am getting ready to start studying for my CCNP Routing Exam.What books
would you recommend?  I've heard good things about "CCNP Routing Exam
Certification Guide" by Clare Gough (Cisco Press) and "CCNP: Routing Study
Guide" by Todd Lammle.
--
Kind regards,
Alexander N. Khramov, CCNA
Student Technical Consultant
NSU, Computing and Telecommunications
[EMAIL PROTECTED]




_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]