Re: need enable password when have secret pw? [7:59944]

2002-12-29 Thread selcuk
Hi

if you set the enable secret then enable password is useless

regards

Kenny Smith wrote:

>Hi.. When I was setting up my router configuration. It prompts me for
secret
>password and enable password. But I want to how why I still need enable 
>password when I have the enable secret?  When I type Enable, i will be 
>required to type in my secret password. Then when the enable password will 
>be used???
>
>Sorry for such a simple question..
>Thanks
>
>_
>Add photos to your e-mail with MSN 8. Get 3 months FREE*. 
>http://join.msn.com/?page=features/featuredemail&xAPID=42&PS=47575&PI=7324&DI=7474&SU=
> 
>http://www.hotmail.msn.com/cgi-bin/getmsg&HL=1216hotmailtaglines_addphotos_3mf
Virus taramasi Is Net tarafindan yapilmistir.
This e-mail is checked by Is Net against all known types of viruses.
Is Net'in YILBASI HEDIYE kampanyasini duymus muydunuz?
http://www.isnet.net.tr/hediyesepeti/index2.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=59949&t=59944
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



bandwidth [7:58788]

2002-12-09 Thread Selcuk Kardes
Hi all,

i want to set the bandwidth of the switch port.(in kilobits)
is there any switch like this.

do you know ?




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=58788&t=58788
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: bandwidth [7:58788]

2002-12-11 Thread Selcuk Kardes
Hi,

i  am looking for a switch which have to be set the port bandwidth (rate 
limit) in kilobit order (for example 256K)
then i found a cisco 3550 catalyst series (you can set the port 
bandwidth in 8K order)
now i am searching another reseller maybe hp,3com,huwaei etc..(our boss 
want to compare the price)
by the way some switch like catalyst 3550 can operate at layer 3 or 4 

Selcuk


Ted Marinich wrote:

> Selcuk,
>
> What are you tring to achieve by doing this?  Switch operates at layer 
> 2. Unless, you are wanting to change the speed and duplex from auto to a
> static, which is done by "speed 10" and "duplex half" under the 
> interface.
>
> If you are wanting to change metrics, then that will have an impact on 
> your
> Span-Tree topology.
>
> Ted
Virus taramasi Is Net tarafindan yapilmistir.
Is Net'in YILBASI HEDIYE kampanyasini duymus muydunuz?
http://www.isnet.net.tr/hediyesepeti/index2.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=58979&t=58788
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: help [7:59112]

2002-12-13 Thread Selcuk Kardes
hi
i am working at ISP
i think your isp forgot to add your lan ip's to their backbone router...
please contact your isp 

Brian wrote:

>ok if you can ping your isps name server by ip, then you have
>connectivity.
>
>On the router, if you want dns to work there, you need a couple lines.
>
>ip domain-name your domain
>ip name-server name server ip
>
>Bri
>
>On Thu, 12 Dec 2002, Brian Zeitz wrote:
>
>  
>
>>Me = dumb :O
>>
>>OK thanks, I was confused with my default gateway. Another command I
>>forget is
>>
>>dialer-list 1 protocol ip permit
>>
>>I can ping my ISP's DNS now, but I can't ping any websites and I cant
>>ping my LAN interface from the internet.
>>
>>I tried the name-server command with no luck.
>>
>>
>>-Original Message-
>>From: Brian Zeitz
>>Sent: Thursday, December 12, 2002 2:20 PM
>>To: [EMAIL PROTECTED]
>>Subject: RE: help [7:59112]
>>
>>146 was assigned by the ISP
>>
>>-Original Message-
>>From: Walker, James - Is [mailto:[EMAIL PROTECTED]]
>>Sent: Thursday, December 12, 2002 2:15 PM
>>To: Brian Zeitz; [EMAIL PROTECTED]
>>Subject: RE: help [7:59112]
>>
>>Try:
>>
>>interface Serial2/0
>>
>>
>> ip address 12.124.201.145 255.255.255.252
>>
>>
>>
>>
>>
>>
>>-Original Message-
>>From: Brian Zeitz [mailto:[EMAIL PROTECTED]]
>>Sent: Thursday, December 12, 2002 1:50 PM
>>To: [EMAIL PROTECTED]
>>Subject: help [7:59112]
>>
>>
>>Router Setup
>>
>>
>>
>>This may be a very simple question, but I set up my router and I cannot
>>access the internet. Here is the configuration file. I tried the command
>>IP Route 0.0.0.0 0.0.0.0 x.x.x.x as well, with no luck. Sigh
>>
>>
>>
>>Also does anyone have any links for configuration PDF for 3600 routers?
>>
>>
>>
>>
>>
>>version 12.2
>>
>>service timestamps debug uptime
>>
>>service timestamps log uptime
>>
>>no service password-encryption
>>
>>!
>>
>>hostname Router
>>
>>!
>>
>>enable secret 5 _/
>>
>>enable password
>>
>>!
>>
>>ip subnet-zero
>>
>>!
>>
>>!
>>
>>ip name-server 12.127.17.72
>>
>>!
>>
>>!
>>
>>!
>>
>>!
>>
>>interface Ethernet0/0
>>
>> ip address 12.104.49.161 255.255.255.224
>>
>> no ip mroute-cache
>>
>> half-duplex
>>
>>!
>>
>>interface Ethernet0/1
>>
>> no ip address
>>
>> no ip mroute-cache
>>
>> shutdown
>>
>> half-duplex
>>
>>!
>>
>>interface Ethernet0/2
>>
>> no ip address
>>
>> no ip mroute-cache
>>
>> shutdown
>>
>> half-duplex
>>
>>!
>>
>>interface Ethernet0/3
>>
>> no ip address
>>
>> no ip mroute-cache
>>
>> shutdown
>>
>> half-duplex
>>
>>!
>>
>>interface Serial2/0
>>
>> bandwidth 1544000
>>
>> ip address 12.124.201.146 255.255.255.252
>>
>> encapsulation ppp
>>
>> no ip mroute-cache
>>
>>!
>>
>>ip default-gateway 12.104.49.161
>>
>>ip classless
>>
>>ip http server
>>
>>ip pim bidir-enable
>>
>>!
>>
>>!
>>
>>line con 0
>>
>>line aux 0
>>
>>line vty 0 4
>>
>> password
>>
>> login
>>
>>!
>>
>>end




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=59167&t=59112
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPsec basics?? [7:59358]

2002-12-17 Thread Selcuk Kardes
hi,
i am trying now to run ipsec between two router
is there anybody have basic running konfigurasyon
now i am looking cisco's ipsec pages
but yet i can't accomplisht this issue


ramesh c wrote:

>Folks,
>Would appreciate if anyone can explain the basics of VPN(Ipsec).
>
>I got a Ipsec running between two pix.What really happens when a packet
>arrives at the interface?I need the entire process...
>
>Cheers
>
>
>_
>Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year.
>http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus
Virus taramasi Is Net tarafindan yapilmistir.
This e-mail is checked by Is Net against all known types of viruses.
Is Net'in YILBASI HEDIYE kampanyasini duymus muydunuz?
http://www.isnet.net.tr/hediyesepeti/index2.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=59362&t=59358
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPsec basics?? [7:59358]

2002-12-17 Thread Selcuk Kardes
Hi Alaerte,

http://www.cisco.com/warp/public/707/17.html#Sec3.1
this link and your suggested configuration and also my confuguration are 
all same ...
but my confuguration doesn't work .
i am working 

thanks for help...
Selcuk

my configuration is:

Current configuration:
!
version 12.1
hostname test
crypto isakmp policy 1
 authentication pre-share
 lifetime 3000
crypto isakmp key cisco address 192.168.2.70   
!
!
crypto ipsec transform-set mytransform esp-des esp-md5-hmac
!
crypto map mycrypto 10 ipsec-isakmp  
 set peer 192.168.2.70
 set transform-set mytransform
 match address 100
!
interface FastEthernet0/0
 ip address 192.168.2.69 255.255.255.192
 duplex auto
 speed auto
 crypto map mycrypto
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.2.97
no ip http server
!
access-list 100 permit ip host 192.168.2.69 host 192.168.2.70
   

[EMAIL PROTECTED] wrote:

>Hi,
>
>Here is an example:
>
>crypto isakmp policy 1
> authentication pre-share
> lifetime 3000
>crypto isakmp key cisco address 192.168.14.2
>!
>crypto ipsec transform-set mytransform esp-des esp-md5-hmac
>!
>crypto map mycrypto local-address Serial0.14
>crypto map mycrypto 10 ipsec-isakmp
> set peer 192.168.14.2
> set transform-set mytransform
> match address 100
>!
>interface Loopback1
> ip address 1.1.1.1 255.255.255.0
>!
>interface Serial0.14 point-to-point
> ip address 192.168.14.1 255.255.255.0
> frame-relay interface-dlci 114
> crypto map mycrypto
>!
>router ospf 1
> log-adjacency-changes
> network 0.0.0.0 255.255.255.255 area 0
>!
>ip classless
>ip http server
>!
>access-list 100 permit icmp host 1.1.1.1 host 4.4.4.4
>
>
>Regards,
>
>Alaerte
>
>
>
>
>
>
>
>"Selcuk Kardes" @groupstudy.com em 17/12/2002
>08:11:51
>
>Favor responder a "Selcuk Kardes" 
>
>Enviado Por:  [EMAIL PROTECTED]
>
>
>Para:  [EMAIL PROTECTED]
>cc:
>
>Assunto:Re: IPsec basics?? [7:59358]
>
>
>hi,
>i am trying now to run ipsec between two router
>is there anybody have basic running konfigurasyon
>now i am looking cisco's ipsec pages
>but yet i can't accomplisht this issue
>
>
>ramesh c wrote:
>
>  
>
>>Folks,
>>Would appreciate if anyone can explain the basics of VPN(Ipsec).
>>
>>I got a Ipsec running between two pix.What really happens when a packet
>>arrives at the interface?I need the entire process...
>>
>>Cheers
>>
>>
>>_
>>Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year.
>>http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus
>>
>>
>Virus taramasi Is Net tarafindan yapilmistir.
>This e-mail is checked by Is Net against all known types of viruses.
>Is Net'in YILBASI HEDIYE kampanyasini duymus muydunuz?
>http://www.isnet.net.tr/hediyesepeti/index2.html




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=59382&t=59358
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: IPsec basics?? [7:59358]

2002-12-18 Thread Selcuk Kardes
i am sorry
in fact my question is not the actual one ..

the original Rames's question :
***
Folks,

Would appreciate if anyone can explain the basics of VPN(Ipsec).

>I got a Ipsec running between two pix.What really happens 
>  
>
when a packet

arrives at the interface?I need the entire process...

Cheers




i  solve my quetion ..thanks..
**

now 2 router can talk each other ipsec from lan interface
my error is
router 1(right before): crypto isakmp key zisco address 192.168.2.70 
(the peer ip)
router 2 wrong before : crypto isakmp key zisco address 192.168.2.70 
(the peer ip)
router2  right  now  :  crypto isakmp key zisco address 192.168.2.69 
(the peer ip)





ramesh c wrote:

>Oops,Guess we deviated from the actual question.Would appreciate if anyone
>could anwser the same.
>
>Cheers
>--
>
>On Tue, 17 Dec 2002 18:04:44  
> Daniel Cotts wrote:
>  
>
>>You are providing a config that shows the "WAN" link that connects the two
>>routers. Do you also have a "LAN" side to each of those routers? That is
>>where your host computers would reside. The addresses for the "LAN" are
what
>>is expected in access-list 100. Sort of FastEthernet 0/1 ip address
>>172.16.1.1 etc. Maybe use 172.16.2.1 on the other router's LAN.
>>access-list 100 permit ip 172.16.1.0 0.0.0.255 172.16.2.0 0.0.0.255
>>If you do a test ping to open the VPN tunnel use an extended ping with the
>>source address of your "LAN" interface. More fun to use PCs on each end.
>>HTH
>>
>>
>>
>>>-Original Message-
>>>From: Selcuk Kardes [mailto:[EMAIL PROTECTED]]
>>>Sent: Tuesday, December 17, 2002 11:09 AM
>>>To: [EMAIL PROTECTED]
>>>Subject: Re: IPsec basics?? [7:59358]
>>>
>>>
>>>Hi Alaerte,
>>>
>>>http://www.cisco.com/warp/public/707/17.html#Sec3.1
>>>this link and your suggested configuration and also my 
>>>confuguration are 
>>>all same ...
>>>but my confuguration doesn't work .
>>>i am working 
>>>
>>>thanks for help...
>>>Selcuk
>>>
>>>my configuration is:
>>>
>>>Current configuration:
>>>!
>>>version 12.1
>>>hostname test
>>>crypto isakmp policy 1
>>> authentication pre-share
>>> lifetime 3000
>>>crypto isakmp key cisco address 192.168.2.70   
>>>!
>>>!
>>>crypto ipsec transform-set mytransform esp-des esp-md5-hmac
>>>!
>>>crypto map mycrypto 10 ipsec-isakmp  
>>> set peer 192.168.2.70
>>> set transform-set mytransform
>>> match address 100
>>>!
>>>interface FastEthernet0/0
>>> ip address 192.168.2.69 255.255.255.192
>>> duplex auto
>>> speed auto
>>> crypto map mycrypto
>>>!
>>>ip classless
>>>ip route 0.0.0.0 0.0.0.0 192.168.2.97
>>>no ip http server
>>>!
>>>access-list 100 permit ip host 192.168.2.69 host 192.168.2.70
>>>   
>>>
>>>[EMAIL PROTECTED] wrote:
>>>
>>>  
>>>
>>>>Hi,
>>>>
>>>>Here is an example:
>>>>
>>>>crypto isakmp policy 1
>>>>authentication pre-share
>>>>lifetime 3000
>>>>crypto isakmp key cisco address 192.168.14.2
>>>>!
>>>>crypto ipsec transform-set mytransform esp-des esp-md5-hmac
>>>>!
>>>>crypto map mycrypto local-address Serial0.14
>>>>crypto map mycrypto 10 ipsec-isakmp
>>>>set peer 192.168.14.2
>>>>set transform-set mytransform
>>>>match address 100
>>>>!
>>>>interface Loopback1
>>>>ip address 1.1.1.1 255.255.255.0
>>>>!
>>>>interface Serial0.14 point-to-point
>>>>ip address 192.168.14.1 255.255.255.0
>>>>frame-relay interface-dlci 114
>>>>crypto map mycrypto
>>>>!
>>>>router ospf 1
>>>>log-adjacency-changes
>>>>network 0.0.0.0 255.255.255.255 area 0
>>>>!
>>>>ip classless
>>>>ip http server
>>>>!
>>>>access-list 100 permit icmp host 1.1.1.1 host 4.4.4.4
>>>>
>>>>
>>>>Regards,
>>>>
>>>>Alaerte
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>"Selcuk Kardes" @groupstudy.com em 17/12/2002
>>>>08:

Re: SNMP Filter [7:60100]

2003-01-02 Thread Selcuk Kardes
you can use access-list.

snmp-server community  RO 1 (here 1 is access-list number)

rgrds



Michael wrote:

>Dear All 
>
>I have a few C7507 sereis routers with a lot of
>fram-relay and ll customers. How can I filter SNMP
>requests  on the C7507 comming from the FR/LL
>customers? I get a lot of SNMP Authentication Failed
>on the router LOG. What I was wondering is wether SNMP
>uses a specific IP address from the router in order to
>answer to SNMP requests or whether all IP addresses on
>the router answer to SNMP request. I dont want to
>filter SNMP bettween customer sides therefore i can
>not use Access-lists on all router interfaces in order
>to deny SNMP. But in case SNMP n the router uses a
>specific IP to answer to request then it is possible
>to use access list and deny SNMP requests to the
>specific IP.
>
>Any help will be appreciated
>
>__
>Do you Yahoo!?
>Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
>http://mailplus.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=60104&t=60100
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]