Re: need enable password when have secret pw? [7:59944]
Hi if you set the enable secret then enable password is useless regards Kenny Smith wrote: >Hi.. When I was setting up my router configuration. It prompts me for secret >password and enable password. But I want to how why I still need enable >password when I have the enable secret? When I type Enable, i will be >required to type in my secret password. Then when the enable password will >be used??? > >Sorry for such a simple question.. >Thanks > >_ >Add photos to your e-mail with MSN 8. Get 3 months FREE*. >http://join.msn.com/?page=features/featuredemail&xAPID=42&PS=47575&PI=7324&DI=7474&SU= > >http://www.hotmail.msn.com/cgi-bin/getmsg&HL=1216hotmailtaglines_addphotos_3mf Virus taramasi Is Net tarafindan yapilmistir. This e-mail is checked by Is Net against all known types of viruses. Is Net'in YILBASI HEDIYE kampanyasini duymus muydunuz? http://www.isnet.net.tr/hediyesepeti/index2.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=59949&t=59944 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
bandwidth [7:58788]
Hi all, i want to set the bandwidth of the switch port.(in kilobits) is there any switch like this. do you know ? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=58788&t=58788 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: bandwidth [7:58788]
Hi, i am looking for a switch which have to be set the port bandwidth (rate limit) in kilobit order (for example 256K) then i found a cisco 3550 catalyst series (you can set the port bandwidth in 8K order) now i am searching another reseller maybe hp,3com,huwaei etc..(our boss want to compare the price) by the way some switch like catalyst 3550 can operate at layer 3 or 4 Selcuk Ted Marinich wrote: > Selcuk, > > What are you tring to achieve by doing this? Switch operates at layer > 2. Unless, you are wanting to change the speed and duplex from auto to a > static, which is done by "speed 10" and "duplex half" under the > interface. > > If you are wanting to change metrics, then that will have an impact on > your > Span-Tree topology. > > Ted Virus taramasi Is Net tarafindan yapilmistir. Is Net'in YILBASI HEDIYE kampanyasini duymus muydunuz? http://www.isnet.net.tr/hediyesepeti/index2.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=58979&t=58788 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: help [7:59112]
hi i am working at ISP i think your isp forgot to add your lan ip's to their backbone router... please contact your isp Brian wrote: >ok if you can ping your isps name server by ip, then you have >connectivity. > >On the router, if you want dns to work there, you need a couple lines. > >ip domain-name your domain >ip name-server name server ip > >Bri > >On Thu, 12 Dec 2002, Brian Zeitz wrote: > > > >>Me = dumb :O >> >>OK thanks, I was confused with my default gateway. Another command I >>forget is >> >>dialer-list 1 protocol ip permit >> >>I can ping my ISP's DNS now, but I can't ping any websites and I cant >>ping my LAN interface from the internet. >> >>I tried the name-server command with no luck. >> >> >>-Original Message- >>From: Brian Zeitz >>Sent: Thursday, December 12, 2002 2:20 PM >>To: [EMAIL PROTECTED] >>Subject: RE: help [7:59112] >> >>146 was assigned by the ISP >> >>-Original Message- >>From: Walker, James - Is [mailto:[EMAIL PROTECTED]] >>Sent: Thursday, December 12, 2002 2:15 PM >>To: Brian Zeitz; [EMAIL PROTECTED] >>Subject: RE: help [7:59112] >> >>Try: >> >>interface Serial2/0 >> >> >> ip address 12.124.201.145 255.255.255.252 >> >> >> >> >> >> >>-Original Message- >>From: Brian Zeitz [mailto:[EMAIL PROTECTED]] >>Sent: Thursday, December 12, 2002 1:50 PM >>To: [EMAIL PROTECTED] >>Subject: help [7:59112] >> >> >>Router Setup >> >> >> >>This may be a very simple question, but I set up my router and I cannot >>access the internet. Here is the configuration file. I tried the command >>IP Route 0.0.0.0 0.0.0.0 x.x.x.x as well, with no luck. Sigh >> >> >> >>Also does anyone have any links for configuration PDF for 3600 routers? >> >> >> >> >> >>version 12.2 >> >>service timestamps debug uptime >> >>service timestamps log uptime >> >>no service password-encryption >> >>! >> >>hostname Router >> >>! >> >>enable secret 5 _/ >> >>enable password >> >>! >> >>ip subnet-zero >> >>! >> >>! >> >>ip name-server 12.127.17.72 >> >>! >> >>! >> >>! >> >>! >> >>interface Ethernet0/0 >> >> ip address 12.104.49.161 255.255.255.224 >> >> no ip mroute-cache >> >> half-duplex >> >>! >> >>interface Ethernet0/1 >> >> no ip address >> >> no ip mroute-cache >> >> shutdown >> >> half-duplex >> >>! >> >>interface Ethernet0/2 >> >> no ip address >> >> no ip mroute-cache >> >> shutdown >> >> half-duplex >> >>! >> >>interface Ethernet0/3 >> >> no ip address >> >> no ip mroute-cache >> >> shutdown >> >> half-duplex >> >>! >> >>interface Serial2/0 >> >> bandwidth 1544000 >> >> ip address 12.124.201.146 255.255.255.252 >> >> encapsulation ppp >> >> no ip mroute-cache >> >>! >> >>ip default-gateway 12.104.49.161 >> >>ip classless >> >>ip http server >> >>ip pim bidir-enable >> >>! >> >>! >> >>line con 0 >> >>line aux 0 >> >>line vty 0 4 >> >> password >> >> login >> >>! >> >>end Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=59167&t=59112 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IPsec basics?? [7:59358]
hi, i am trying now to run ipsec between two router is there anybody have basic running konfigurasyon now i am looking cisco's ipsec pages but yet i can't accomplisht this issue ramesh c wrote: >Folks, >Would appreciate if anyone can explain the basics of VPN(Ipsec). > >I got a Ipsec running between two pix.What really happens when a packet >arrives at the interface?I need the entire process... > >Cheers > > >_ >Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. >http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus Virus taramasi Is Net tarafindan yapilmistir. This e-mail is checked by Is Net against all known types of viruses. Is Net'in YILBASI HEDIYE kampanyasini duymus muydunuz? http://www.isnet.net.tr/hediyesepeti/index2.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=59362&t=59358 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IPsec basics?? [7:59358]
Hi Alaerte, http://www.cisco.com/warp/public/707/17.html#Sec3.1 this link and your suggested configuration and also my confuguration are all same ... but my confuguration doesn't work . i am working thanks for help... Selcuk my configuration is: Current configuration: ! version 12.1 hostname test crypto isakmp policy 1 authentication pre-share lifetime 3000 crypto isakmp key cisco address 192.168.2.70 ! ! crypto ipsec transform-set mytransform esp-des esp-md5-hmac ! crypto map mycrypto 10 ipsec-isakmp set peer 192.168.2.70 set transform-set mytransform match address 100 ! interface FastEthernet0/0 ip address 192.168.2.69 255.255.255.192 duplex auto speed auto crypto map mycrypto ! ip classless ip route 0.0.0.0 0.0.0.0 192.168.2.97 no ip http server ! access-list 100 permit ip host 192.168.2.69 host 192.168.2.70 [EMAIL PROTECTED] wrote: >Hi, > >Here is an example: > >crypto isakmp policy 1 > authentication pre-share > lifetime 3000 >crypto isakmp key cisco address 192.168.14.2 >! >crypto ipsec transform-set mytransform esp-des esp-md5-hmac >! >crypto map mycrypto local-address Serial0.14 >crypto map mycrypto 10 ipsec-isakmp > set peer 192.168.14.2 > set transform-set mytransform > match address 100 >! >interface Loopback1 > ip address 1.1.1.1 255.255.255.0 >! >interface Serial0.14 point-to-point > ip address 192.168.14.1 255.255.255.0 > frame-relay interface-dlci 114 > crypto map mycrypto >! >router ospf 1 > log-adjacency-changes > network 0.0.0.0 255.255.255.255 area 0 >! >ip classless >ip http server >! >access-list 100 permit icmp host 1.1.1.1 host 4.4.4.4 > > >Regards, > >Alaerte > > > > > > > >"Selcuk Kardes" @groupstudy.com em 17/12/2002 >08:11:51 > >Favor responder a "Selcuk Kardes" > >Enviado Por: [EMAIL PROTECTED] > > >Para: [EMAIL PROTECTED] >cc: > >Assunto:Re: IPsec basics?? [7:59358] > > >hi, >i am trying now to run ipsec between two router >is there anybody have basic running konfigurasyon >now i am looking cisco's ipsec pages >but yet i can't accomplisht this issue > > >ramesh c wrote: > > > >>Folks, >>Would appreciate if anyone can explain the basics of VPN(Ipsec). >> >>I got a Ipsec running between two pix.What really happens when a packet >>arrives at the interface?I need the entire process... >> >>Cheers >> >> >>_ >>Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. >>http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus >> >> >Virus taramasi Is Net tarafindan yapilmistir. >This e-mail is checked by Is Net against all known types of viruses. >Is Net'in YILBASI HEDIYE kampanyasini duymus muydunuz? >http://www.isnet.net.tr/hediyesepeti/index2.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=59382&t=59358 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IPsec basics?? [7:59358]
i am sorry in fact my question is not the actual one .. the original Rames's question : *** Folks, Would appreciate if anyone can explain the basics of VPN(Ipsec). >I got a Ipsec running between two pix.What really happens > > when a packet arrives at the interface?I need the entire process... Cheers i solve my quetion ..thanks.. ** now 2 router can talk each other ipsec from lan interface my error is router 1(right before): crypto isakmp key zisco address 192.168.2.70 (the peer ip) router 2 wrong before : crypto isakmp key zisco address 192.168.2.70 (the peer ip) router2 right now : crypto isakmp key zisco address 192.168.2.69 (the peer ip) ramesh c wrote: >Oops,Guess we deviated from the actual question.Would appreciate if anyone >could anwser the same. > >Cheers >-- > >On Tue, 17 Dec 2002 18:04:44 > Daniel Cotts wrote: > > >>You are providing a config that shows the "WAN" link that connects the two >>routers. Do you also have a "LAN" side to each of those routers? That is >>where your host computers would reside. The addresses for the "LAN" are what >>is expected in access-list 100. Sort of FastEthernet 0/1 ip address >>172.16.1.1 etc. Maybe use 172.16.2.1 on the other router's LAN. >>access-list 100 permit ip 172.16.1.0 0.0.0.255 172.16.2.0 0.0.0.255 >>If you do a test ping to open the VPN tunnel use an extended ping with the >>source address of your "LAN" interface. More fun to use PCs on each end. >>HTH >> >> >> >>>-Original Message- >>>From: Selcuk Kardes [mailto:[EMAIL PROTECTED]] >>>Sent: Tuesday, December 17, 2002 11:09 AM >>>To: [EMAIL PROTECTED] >>>Subject: Re: IPsec basics?? [7:59358] >>> >>> >>>Hi Alaerte, >>> >>>http://www.cisco.com/warp/public/707/17.html#Sec3.1 >>>this link and your suggested configuration and also my >>>confuguration are >>>all same ... >>>but my confuguration doesn't work . >>>i am working >>> >>>thanks for help... >>>Selcuk >>> >>>my configuration is: >>> >>>Current configuration: >>>! >>>version 12.1 >>>hostname test >>>crypto isakmp policy 1 >>> authentication pre-share >>> lifetime 3000 >>>crypto isakmp key cisco address 192.168.2.70 >>>! >>>! >>>crypto ipsec transform-set mytransform esp-des esp-md5-hmac >>>! >>>crypto map mycrypto 10 ipsec-isakmp >>> set peer 192.168.2.70 >>> set transform-set mytransform >>> match address 100 >>>! >>>interface FastEthernet0/0 >>> ip address 192.168.2.69 255.255.255.192 >>> duplex auto >>> speed auto >>> crypto map mycrypto >>>! >>>ip classless >>>ip route 0.0.0.0 0.0.0.0 192.168.2.97 >>>no ip http server >>>! >>>access-list 100 permit ip host 192.168.2.69 host 192.168.2.70 >>> >>> >>>[EMAIL PROTECTED] wrote: >>> >>> >>> >>>>Hi, >>>> >>>>Here is an example: >>>> >>>>crypto isakmp policy 1 >>>>authentication pre-share >>>>lifetime 3000 >>>>crypto isakmp key cisco address 192.168.14.2 >>>>! >>>>crypto ipsec transform-set mytransform esp-des esp-md5-hmac >>>>! >>>>crypto map mycrypto local-address Serial0.14 >>>>crypto map mycrypto 10 ipsec-isakmp >>>>set peer 192.168.14.2 >>>>set transform-set mytransform >>>>match address 100 >>>>! >>>>interface Loopback1 >>>>ip address 1.1.1.1 255.255.255.0 >>>>! >>>>interface Serial0.14 point-to-point >>>>ip address 192.168.14.1 255.255.255.0 >>>>frame-relay interface-dlci 114 >>>>crypto map mycrypto >>>>! >>>>router ospf 1 >>>>log-adjacency-changes >>>>network 0.0.0.0 255.255.255.255 area 0 >>>>! >>>>ip classless >>>>ip http server >>>>! >>>>access-list 100 permit icmp host 1.1.1.1 host 4.4.4.4 >>>> >>>> >>>>Regards, >>>> >>>>Alaerte >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>"Selcuk Kardes" @groupstudy.com em 17/12/2002 >>>>08:
Re: SNMP Filter [7:60100]
you can use access-list. snmp-server community RO 1 (here 1 is access-list number) rgrds Michael wrote: >Dear All > >I have a few C7507 sereis routers with a lot of >fram-relay and ll customers. How can I filter SNMP >requests on the C7507 comming from the FR/LL >customers? I get a lot of SNMP Authentication Failed >on the router LOG. What I was wondering is wether SNMP >uses a specific IP address from the router in order to >answer to SNMP requests or whether all IP addresses on >the router answer to SNMP request. I dont want to >filter SNMP bettween customer sides therefore i can >not use Access-lists on all router interfaces in order >to deny SNMP. But in case SNMP n the router uses a >specific IP to answer to request then it is possible >to use access list and deny SNMP requests to the >specific IP. > >Any help will be appreciated > >__ >Do you Yahoo!? >Yahoo! Mail Plus - Powerful. Affordable. Sign up now. >http://mailplus.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=60104&t=60100 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]