RE: CCIE Self-Employment [7:62394]
Not sure about Chicago area, but in my area, rate is generally above $150/hr. And guess what, I'm in Silicon Valley. To configure a router or switch is simple. Worst case, pick up the phone and call TAC will solve most configuration problems. Customers are looking for someone that can run the show. CCIE is not enough, you also need to know how to do project management and very importantly, how to BS. This is based on several interviews I had during the past couple of weeks. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Mike Schlenger Sent: Monday, February 03, 2003 2:44 PM To: [EMAIL PROTECTED] Subject: RE: CCIE Self-Employment [7:62394] Really? WHERE DO I SIGN?? :) Mike Chicagoland CCIE #7079 -Original Message- From: Sam Munzani [mailto:[EMAIL PROTECTED]] Sent: Monday, February 03, 2003 4:12 PM To: steve r; Jay Greenberg; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: CCIE Self-Employment Rate depends on who is paying and how much do they have? :-) In chicago area $125/Hr is considered normal with 1 way travel time. If you got a fortune 500 client, you can easily bump it up to $175/Hr. and they will not argue about it. Sam > CCIE self employed, > well if you find another CCIE to partner with you can get silver partner > status, (and some other requirements too) > > If you are in the biz you should know...pix...vpn and some other stuff the > hourly work is great but it depends on the clients locations...and the > billing rate.. > Good luck in this market it may be better then being out of work like my > friend is (and he is a CCIE too) > Bill at what you can get $100 to $200 an hour or more > or less if its cash.. > > Stephen > - Original Message - > From: "Jay Greenberg" > To: ; > Sent: Monday, February 03, 2003 12:14 PM > Subject: CCIE Self-Employment > > > > Any CCIEs on the list in business for themselves? What's the money > > like, what sort of companies do you work for? Do you do short-term or > > long term contracts? Hourly work? > > > > Thanks, > > > > -- > > Jason Greenberg, CCIE #11021 > > > > . > . FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62406&t=62394 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
tftp question [7:62852]
I was told that it's possible to telnet to a router under user mode, and then copy its running configuration. Is it possible? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62852&t=62852 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
native vlan, trunking question [7:63309]
I'm confused on native vlan and trunking. Can I assign a port to a trunk (for all the vlans), then assign that port to a vlan100? Does that port belong to native vlan100? What means native vlan? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63309&t=63309 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CiscoSecure Question [7:63941]
You were told wrong. One entry should be enough. I would use loopback interface. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mossburg, Geoff (MAN-Corporate) Sent: Wednesday, February 26, 2003 8:21 PM To: [EMAIL PROTECTED] Subject: CiscoSecure Question [7:63941] All, Does anyone out there have experience with CiscoSecure? I could really use the help! I have over 50 routers that I'm setting up to access through TACACS, and I've been told that I have to make entries in CiscoSecure for every interface on every router to make sure that each router is TACACS accessible from anywhere in the network! Is this true??? Thanks! Geoff Mossburg Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63945&t=63941 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VPN client conflict [7:63951]
I have AT&T VPN client on my laptop. It stopped working after I installed Cisco VPN client. Is there any conflict between them? Is there a work around? Thanks. Yoshi. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63951&t=63951 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IP Telephony SIP [7:64433]
Can anyone kindly enough tell me why SIP is better than CCM? What's the main difference between this two? Is there any SIP in production? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64433&t=64433 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: IP Telephony SIP [7:64433]
Thanks. What SIP servers and SIP phones do service providers use? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of nrf Sent: Tuesday, March 04, 2003 10:03 PM To: [EMAIL PROTECTED] Subject: Re: IP Telephony SIP [7:64433] ""supernet"" wrote in message news:[EMAIL PROTECTED] > Can anyone kindly enough tell me why SIP is better than CCM? What's the > main difference between this two? Is there any SIP in production? > Thanks. Yoshi You shouldn't compare SIP and CCM. SIP is an industry standard, whereas CCM is a Cisco product. Any vendor, including Cisco, can and has implemented SIP. Only Cisco can 'implement' CCM (after all the first 'C' stands for Cisco). There is a significant amount of SIP in production - almost all of it in service-providers. Most of today's 3G wireless networks, for example, rely on SIP. To make things more confusing, Cisco may implement SIP within CCM soon. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64551&t=64433 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: dynamic VLAN [7:65101]
-Original Message- From: supernet [mailto:[EMAIL PROTECTED] Sent: Monday, March 10, 2003 6:33 PM To: '[EMAIL PROTECTED]' Subject: dynamic VLAN Hi, we've got 40-50 Cisco switches in the campus and would like to set up dynamic VLAN. We have CiscoSecure 2.6 (may upgrade to 3.1) and CiscoWorks 2000. Where should we put the MAC database? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65101&t=65101 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Internet phone, is it possible? [7:65123]
A friend of mine wants to establish a business that use internet to make phone calls. He wants to set up PSTN gateways in some countries and sell IP phones to high speed customers so customers can talk to each other free of charge and they can call PSTN for a fee. I think net2phone.com has the same thing. Anyway, He has some questions that I couldn't answer. I appreciate if someone can help me: 1. Should he use SIP or CCM? 2. Is round trip delay 200-300 msec acceptable? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65123&t=65123 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
frame relay and leased line [7:65397]
I was told that leased line price depends on distance but frame relay doesn't. Is this true? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65397&t=65397 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to change dial up prompt [7:65712]
We have a 5300 router as dial up server. When users get connected, their terminals pop up and prompt for "Username:" and "Password:" Is there a way that I can change it to "Enter Token Password:"? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65712&t=65712 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
dial up problem [7:65801]
We have a 5300 router as dial up server. When users get connected, their terminals pop up and they have to press Enter to get "username" prompt. I want users get prompt without having to press Enter. I searched Cisco web site and found that if "autoselect during-login" is enabled, users don't need to press Enter. I added that command but still don't work. I also tried several different IOS. What else should I do? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65801&t=65801 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
NT service monitor [7:65911]
Where can I find an NT 4 service monitoring tool? I want to reboot the server if one of NT service is down. Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65911&t=65911 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
how to change dial up prompt [7:65712]
We have a 5300 router as dial up server. When users get connected, their terminals pop up and prompt for "Username:" and "Password:" Is there a way that I can change it to "Enter Token Password:"? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66003&t=65712 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
SIP mystery [7:66309]
What's SIP registrar used for? Is it like DNS server that keep track of individual client? But two SIP clients can call each other without registrar, right? I'm lost, anyone can help me understand it? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66309&t=66309 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Does LAN to LAN VPN ever timeout? [7:66465]
A friend of mine and I had a discussion on this topic. 2 PIX LAN-LAN VPN. He said that by default, VPN will terminate in 24 hours if no traffic. When bringing VPN up, the first packet always gets lost. Is this true? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66465&t=66465 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
weird css/ce problem [7:66813]
Hi, I have a weird CSS/CE problem that I couldn't figure out. I appreciate if anyone can help me out. We use 1 CSS11500 and 2 CE590s as proxy server to connect to the Internet. Users at main office don't have any problems. Users at branch office couldn't open a particular site page. That page just kept refreshing itself. If I disable proxy and have users connect to Internet directly, everything works. So the problem must be either CSS or CE. However, I couldn't find anything wrong on them. What could be the problem? Thank you, Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66813&t=66813 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE voice written and lab [7:66948]
Hi, I have 3 questions regarding CCIE voice: 1. I took beta written test today and was told that I can expect a result in 6-8 weeks. Does it really take that long? How do they contact me? I only provided my SSN and name before the test. 2. If I go take the lab test, I know I'll get a Cisco Documentation CD. But do I have access to Internet? 3. Will they give beta lab test before regular lab test? Thank you, Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66948&t=66948 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
difference between VIP and IP [7:41155]
Hi, What's the difference between 7500 VIP and Interface Processor? Is VIP faster? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41155&t=41155 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
traffic analyzer [7:41267]
Hi Dear Friends, I have 1 branch office connected to main office by frame relay. I noticed a lot of traffic across this link and would like to find out what they are. The problem is I don't have access to the branch office, therefore, everything has to be done in main office. I tried sniffer pro, etherpeek and anasil but they only allow me to specify a particular source IP, not the whole branch office subnet. Is there any other software I can use? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41267&t=41267 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
network security [7:41440]
Hi Dear Friends, My company is considering using CiscoSecure to do AAA and we are not sure which one we should use, Windows or UNIX. I have the following questions, please help me to clarify: 1. My friend told me Windows has a lot of security holes. My question is if Windows is only using TCP/IP, it only has IP based security holes, like SNMP vulnerability. But UNIX is also IP based, it also has this kind of security holes, right? So if I put all the security patches from Microsoft, this shouldn't be a problem. Is this statement valid? 2. My friend also told me that Windows is easier to crash. I knew NT 4 is not stable, but as far as I know, 2000 and XP are pretty stable. The problem is if we have to hire a UNIX guy, it costs more than an NT guy, right? So what other advantages UNIX buy me? We definitely don't want to use any free AAA server since we couldn't get any vendor support. Thank you very much. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41440&t=41440 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Way OT: RE: CCIE Salary [7:42111]
A friend of mine bought a 2-bedroom apartment in New York, cost him $500,000. And he has to share bathroom with his neighbor. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Howard C. Berkowitz Sent: Saturday, April 20, 2002 8:02 PM To: [EMAIL PROTECTED] Subject: Re: Way OT: RE: CCIE Salary [7:42111] The new direction of this thread may bring new significance to "have a cow, man." >Hey, we pay about the same price for milk in the Raleigh area. Housing is >much cheaper, though. :-) > >- Original Message - >From: "Manny Gonzalez" >To: "Brian Dennis" >Cc: "'Ccielab (E-mail)'" >Sent: Saturday, April 20, 2002 10:20 PM >Subject: Re: Way OT: RE: CCIE Salary > > >> Sorry Brian, we New Yorkers got you beat... A studio in a decent part of >> Manhattan either sells for $1,000,000 or rents for at least $2500/month. >> That is the lower end of the spectrum. Around the Battery Park City area >> (one block from the former World Trade Center site) there are [bargains] >> now they say for $3500 a month :-) >> >> In the outskirts, a DECENT house (not a real big or super nice one) can >> easily go for $400,000 and 90% of the time there is a fight and ends up >> going for a lot more. >> >> The 1, 2, 3, 4 million dollar homes are actually more abundant in the >> real estate listings than lesser priced homes. >> >> However, my usual gauge for cost of living ANYWHERE is the price of a >> standard gallon of milk. In my neighborhood, it is $3.25 a gallon... >> ___ >> Manny Gonzalez . CCIE# 9013 >> CORE Resources ... NY Presbyterian Hospital >> >> >> Brian Dennis wrote: >> > >> > Here in the San Jose area you can forget about living on $65k a year. >> > There are mobile homes that cost over $200k out here. >> > >> > Brian Dennis, CCIE #2210 (R&S/ISP Dial) >> > >> > -Original Message- >> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of >> > Scott Morris >> > Sent: Friday, April 19, 2002 1:35 PM >> > To: 'Matheus, Joshua'; 'Dennis'; 'Ccielab (E-mail)' >> > Subject: RE: Way OT: RE: CCIE Salary >> > >> > Isn't $65k poverty level in New York? >> > >> > -Original Message- >> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of >> > Matheus, Joshua >> > Sent: Friday, April 19, 2002 3:50 PM >> > To: 'Dennis'; Ccielab (E-mail) >> > Subject: RE: Way OT: RE: CCIE Salary >> > >> > In New York the range can go from 65K to 250K. This is for a technical >> > person not a "manager type". Right now I would say that 4 numbers >> > without a >> > good Science/Engineering Bachelors and 4 - 7 years of prestigious >> > enterprise >> > experience will lead to the 0$ figure very quickly. It makes you ponder >> > the >> > old days (2 years ago) when you were worth your weight in platinum! >> > >> > -Original Message- >> > From: Dennis [mailto:[EMAIL PROTECTED]] >> > Sent: Friday, April 19, 2002 11:01 AM >> > To: Ccielab (E-mail) >> > Subject: Way OT: RE: CCIE Salary >> > >> > Well, I can tell you the lowest... it's what I've been making in the >> > last >> > two months... $0 >> > >> > -Original Message- >> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of >> > Diehm, Brian >> > Sent: Friday, April 19, 2002 10:27 AM >> > To: Ccielab (E-mail) >> > Subject: OT: CCIE Salary >> > >> > Was looking at the topic of "what did your employer pay" and it got me >> > to >> > wondering. What is the Lowest and Highest salary you have ever known a >> > CCIE >> > to make? >> > >> > Brian D >> > _ >> >> >> -- >> _ >> Commercial lab list: http://www.groupstudy.com/list/commercial.html >> Please discuss commercial lab solutions on this list. >_ >Commercial lab list: http://www.groupstudy.com/list/commercial.html >Please discuss commercial lab solutions on this list. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=42115&t=42111 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: a good forum [7:42813]
FYI, A friend of mine worked for Cisco China since 1995 just bought a house in Beijing for US$600K (yeah, 600K. AND he paid cash) He said Cisco China is the only country that can meet their sales quota every year in the whole world. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Peter van Oene Sent: Monday, April 29, 2002 2:39 PM To: [EMAIL PROTECTED] Subject: Re: a good forum [7:42813] him personally, or china in general? you can safely assume that china has plenty of cisco gear. At 05:00 PM 4/29/2002 -0400, Tom Scott wrote: >gic tony wrote: > > > i am from beijing in china ,just find this forum ,browse for a while > > very good place . > >tony, just wondering, do you have many cisco routers and switches in China? >what >models? where are they used? -- This is not a political question, only >technical >curiosity. > >-- TT Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=42901&t=42813 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: a good forum [7:42813]
Because China has 338 CCIEs (more than Canada, Japan, France or Austrilia). I bet they are dealing with Cisco gear. http://www.cisco.com/warp/public/625/ccie/ccie_program/ccie_present.html By the way, if you think you are Mr. Someone, check out this Chinese guy: http://www.ccie.com.cn/ hahahhahaahha Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Michael L. Williams Sent: Monday, April 29, 2002 4:59 PM To: [EMAIL PROTECTED] Subject: Re: a good forum [7:42813] (Devil's advocate) Why can we safely assume that (China has plenty of Cisco gear)? Mike W. "Peter van Oene" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > him personally, or china in general? you can safely assume that china has > plenty of cisco gear. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=42946&t=42813 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ISDN dial problem [7:43071]
Hi Dear Friends, We have a Cisco 5300 as RAS router. It has PRI and digital modems. Regular modem users dial the number no problem, they can always get connected. But ISDN users (Cisco 1604 router) couldn't make a connection. On 1604 router, it says "carrier wait timeout". We suspect that it's LEC problem but they insist everything is good on their side. What seems to be the problem? Thanks a lot. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43071&t=43071 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Urgent help Please! [7:43084]
I don't think you can break "secret" password. But if you have console access to that thing, you can overwrite it (change config register to 0x142). Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, May 01, 2002 9:19 PM To: [EMAIL PROTECTED] Subject: Urgent help Please! [7:43084] Hi ! All, Can any one please break this password? enable secret 5 $1$rMrT$blzJIo4ZyCBfJkvu2CP/Z1 Thanks in advance. === WARNING This message may contain information that is confidential and may be subject to the provisions of section 61A of the Police Act 1958, which creates an offence to have unlawful possession of Police documents. If you are not the intended recipient of this message or have received this message in error, you must not peruse, use, pass or copy this message or any of its contents. Also note, the views expressed in this message may not necessarily reflect those of the New Zealand Police. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43088&t=43084 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
content delivery network [7:43450]
Dear Friends, Where can I find some white paper about content delivery network? I'd like to design a network with CSS and CE. Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43450&t=43450 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
2600 Fast Etherenet problem [7:43518]
Hi Dear Friends, I've got a 2600 router. The Fast Ethernet was configured as static IP. Sometimes, its IP changed by itself and got one from DHCP server. I changed it back and it would happen again several days later. "show start" shows that IP is static. Cisco TAC couldn't give an explanation but only recommend upgrade IOS> Anyone else has this problem? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43518&t=43518 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
dial up problem [7:44244]
When I travel to Japan, I have to disable "wait for dial tone" to make my Windows dial-up networking work. I was told Japan hotel PBXs were configured this way. Is this so-called "E&M delay start"? Will disable "wait for dial tone" cause any problem in US? Thanks. Yoschii Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=44244&t=44244 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
weird call back problem [7:45318]
I have an ISDN backup between 3640 (PRI) at satellite office and a 5200 (PRI) at central office. If frame is down, 3640 calls 5200; 5200 drops the line and calls back. Idle time is 180 seconds. Most of the time it works fine but sometimes, ISDN won't go down after idle time (after frame already comes up) until I manually clear the interface. I tried different IOS on both 3640 and 5200, no success. Debug dialer shows packet uninteresting. I opened a case with TAC but they couldn't provide any help. Anyone in this group saw this problem before? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=45318&t=45318 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
free Cisco networker ticket? [7:46387]
I heard Cisco gave its customers free networker tickets. Is it true? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46387&t=46387 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Cisco VPN client and NAT [7:47430]
Lidiya, I didn't try PIX, but I tried a 1605: Main office 3030---Internet---1605---VPN clients. It worked fine. 1605 was configured PAT inside. Does this mean 1650 is IPSec aware? If 1605 is IPSec aware, why PIX isn't? Thanks. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Lidiya White Sent: Wednesday, June 26, 2002 7:56 PM To: [EMAIL PROTECTED] Subject: RE: Cisco VPN client and NAT [7:47430] See inlines -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Paul Sent: Wednesday, June 26, 2002 5:11 PM To: [EMAIL PROTECTED] Subject: Re: Cisco VPN client and NAT [7:47430] >> Cool, so the PIX will not support VPN's over PAT !!! If you are talking about passing IPSec through the PIX (not PIX terminating VPN tunnel) then you are correct. PIX has to have a pool of ip addresses for one-to-one NAT for your VPN clients. If you are talking about PIX terminating VPN, then PIX won't even know the difference if the packet went through the PAT/NAT device. >> So if I had my Main Office PIX, and a VPN Concentrator . could I >> succesfully connect from a remote office via a cable/adsl modem that does >> PAT using the Cisco VPN software client ??? Are your cable modem IPSec aware (supports IPSec through PAT)? If yes, then you can terminate VPN tunnels on the VPN Concentrator or the PIX. If not, then you can use VPN Concentrator with "IPSec over TCP" option. PIX doesn't support IPSec over TCP for now. PIX only listens on udp port 500. -- Lidiya White >> If so ... and if I had say ... 30 - 40 remote offices, potentially >> connecting simultaneously would a VPN 3000 be overkill ??? or would >> I be better getting a VAC for the PIX (would the PIX VAC supplrt VPN's >> over PAT), or there other VPN concentrators that would do the job Regards ... Paul ... - Original Message - From: "Robertson, Douglas" To: Sent: Wednesday, June 26, 2002 6:15 PM Subject: RE: Cisco VPN client and NAT [7:47430] > In most cases the PIX does not support VPN's over PAT you need a static NAT > to establish a VPN tunnel. > Protocol 50 (Encapsulating Security Payload [ESP]) handles the > encrypted/encapsulated packets of IPSec. PAT devices > don't work with ESP since they have been programmed to work only with > Transmission Control Protocol (TCP), User Datagram Protocol (UDP), and > Internet Control Message Protocol (ICMP). In addition, PAT devices are > unable to map multiple security parameter indexes (SPIs). An alternative is > implemented in some devices like the VPN 3000 Concentrator by encapsulating > ESP within UDP and sending it to a negotiated port. > > Doug > > -Original Message- > From: ""[EMAIL PROTECTED] [mailto:""[EMAIL PROTECTED]] > Sent: Wednesday, June 26, 2002 11:20 AM > To: [EMAIL PROTECTED] > Subject: RE: Cisco VPN client and NAT [7:47430] > > > Lidiya, > > On the pix when you configure Ipsec you configure a pool of addresses that > your Ipsec clients will use on your own network. For instance your inside > network will have the ip addressing scheme of 192.168.0.0 with a class c > subnet mask. You set the pool to give the 10.0.0.0 subnet with a class C > subnet mask. Therefore when you your clients behind your firewall try to > talk to the 10.0.0.0 network they will hit the firewall and be passed to the > translation from the pool. You cannot have any devices in the middle which > pat (IE a router which pats the ip address of your pix if your pix is > establishing the tunnel) It must be a one to one translation from one end of > the tunnel to the other. Everyone feel free to correct me if I'm wrong > which I'm sure will be the case. > > Jason > > -Original Message- > From: Alex Lee [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, June 26, 2002 3:20 PM > To: [EMAIL PROTECTED] > Subject: Re: Cisco VPN client and NAT [7:47430] > > So how does the Linksys or cisco 800 handles the IPSec thru PAT then ? > Thanks. > > Alex Lee > > ""Lidiya White"" wrote in message > news:[EMAIL PROTECTED]... > > PIX doesn't support IPSec transparency/IPSec over TCP. Concentrators do. > > It all depends on the device that is between your client and PIX, that > > is doing PAT. > > IPSec uses ESP protocol, that doesn't have ports, so how can you perform > > PAT (port address translation) for a protocol that doesn't understand > > port concept? > > Some routers can pass IPSec through the PAT (like Linksys, Cisco 800). > > So if the router/device that is doing PAT is IPSec aware, then you > > should be able to pass IPSec through. If not, then you have to make sure > > that one-to-one address translation happens for your VPN clients, not > > one-to-many (PAT)... > > Hope this helps... Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=47540&t=47430
RE: Cisco VPN client and NAT [7:47430]
My clients uses IPSec over UDP, not TCP. We do have to enable "Allow IPSec through NAT" on clients. I guess it's the same thing you were talking about, right? Thanks. Yoshi -Original Message- From: Lidiya White [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 26, 2002 9:56 PM To: 'supernet'; [EMAIL PROTECTED] Subject: RE: Cisco VPN client and NAT [7:47430] I bet you were using IPSec over TCP. Then it really doesn't matter what is in the 'middle'. Your Cisco 1605 will see only tcp traffic, not esp. Cisco 1600 is not IPSec aware (and don't have to be in your setup). -- Lidiya White -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of supernet Sent: Wednesday, June 26, 2002 11:31 PM To: [EMAIL PROTECTED] Subject: RE: Cisco VPN client and NAT [7:47430] Lidiya, I didn't try PIX, but I tried a 1605: Main office 3030---Internet---1605---VPN clients. It worked fine. 1605 was configured PAT inside. Does this mean 1650 is IPSec aware? If 1605 is IPSec aware, why PIX isn't? Thanks. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Lidiya White Sent: Wednesday, June 26, 2002 7:56 PM To: [EMAIL PROTECTED] Subject: RE: Cisco VPN client and NAT [7:47430] See inlines -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Paul Sent: Wednesday, June 26, 2002 5:11 PM To: [EMAIL PROTECTED] Subject: Re: Cisco VPN client and NAT [7:47430] >> Cool, so the PIX will not support VPN's over PAT !!! If you are talking about passing IPSec through the PIX (not PIX terminating VPN tunnel) then you are correct. PIX has to have a pool of ip addresses for one-to-one NAT for your VPN clients. If you are talking about PIX terminating VPN, then PIX won't even know the difference if the packet went through the PAT/NAT device. >> So if I had my Main Office PIX, and a VPN Concentrator . could I >> succesfully connect from a remote office via a cable/adsl modem that does >> PAT using the Cisco VPN software client ??? Are your cable modem IPSec aware (supports IPSec through PAT)? If yes, then you can terminate VPN tunnels on the VPN Concentrator or the PIX. If not, then you can use VPN Concentrator with "IPSec over TCP" option. PIX doesn't support IPSec over TCP for now. PIX only listens on udp port 500. -- Lidiya White >> If so ... and if I had say ... 30 - 40 remote offices, potentially >> connecting simultaneously would a VPN 3000 be overkill ??? or would >> I be better getting a VAC for the PIX (would the PIX VAC supplrt VPN's >> over PAT), or there other VPN concentrators that would do the job Regards ... Paul ... - Original Message - From: "Robertson, Douglas" To: Sent: Wednesday, June 26, 2002 6:15 PM Subject: RE: Cisco VPN client and NAT [7:47430] > In most cases the PIX does not support VPN's over PAT you need a static NAT > to establish a VPN tunnel. > Protocol 50 (Encapsulating Security Payload [ESP]) handles the > encrypted/encapsulated packets of IPSec. PAT devices > don't work with ESP since they have been programmed to work only with > Transmission Control Protocol (TCP), User Datagram Protocol (UDP), and > Internet Control Message Protocol (ICMP). In addition, PAT devices are > unable to map multiple security parameter indexes (SPIs). An alternative is > implemented in some devices like the VPN 3000 Concentrator by encapsulating > ESP within UDP and sending it to a negotiated port. > > Doug > > -Original Message- > From: ""[EMAIL PROTECTED] [mailto:""[EMAIL PROTECTED]] > Sent: Wednesday, June 26, 2002 11:20 AM > To: [EMAIL PROTECTED] > Subject: RE: Cisco VPN client and NAT [7:47430] > > > Lidiya, > > On the pix when you configure Ipsec you configure a pool of addresses that > your Ipsec clients will use on your own network. For instance your inside > network will have the ip addressing scheme of 192.168.0.0 with a class c > subnet mask. You set the pool to give the 10.0.0.0 subnet with a class C > subnet mask. Therefore when you your clients behind your firewall try to > talk to the 10.0.0.0 network they will hit the firewall and be passed to the > translation from the pool. You cannot have any devices in the middle which > pat (IE a router which pats the ip address of your pix if your pix is > establishing the tunnel) It must be a one to one translation from one end of > the tunnel to the other. Everyone feel free to correct me if I'm wrong > which I'm sure will be the case. > > Jason > > -Original Message- > From: Alex Lee [mailto:[EMAIL PR
ciscoworks 2000 confused [7:56045]
I'm confused on how to manage network devices. Under Server Configuration, there is ANI server admin. I can discover all network devices. But what does RME do? Are they the same thing? Do I have to manually add each device to RME? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56045&t=56045 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
TFTP error message [7:57752]
I tried to set up a TFTP server on solaris. When I do "write net" on router, I got "TFTP: error code 2 received - Access violation" error message unless I create a destination file first. How do I fix this problem? Many thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=57752&t=57752 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VPN tunnel question [7:57994]
RouterA---Internet--PIX-RouterB. I want to establish VPN between RouterA and PIX and build a GRE tunnel between RouterA and RouterB. The reason is I need to run routing protocol between RouterA and RouterB. Is it possible? Many thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=57994&t=57994 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
callmanager 3.3 [7:59160]
Several months ago, Cisco TAC told me that CallManager 3.3 would be released in Nov. this year. Is it out yet? I don't see it in Cisco download area. Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=59160&t=59160 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OT: unity 4.0 message queuing [7:60478]
I want to install Unity 4.0 and see Message Queuing 2.0 is required. I know W2K comes with Message Queuing but I don't know if it's 2.0. How do I determine its version? Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=60478&t=60478 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PIX DHCP problem [7:60893]
I have a PIX 506 and would like to use it for my home office. My ISP assigns dynamic IP to me. I can see my PIX 506 got the IP address but I can't ping anywhere. I don't know if it gets default gateway. How do I verify? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=60893&t=60893 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
callmanager gateway problem [7:61183]
I tried to configure an MGCP gateway (Cisco 2611 router, VIC-2FXO) using TAC sample configuration. Under 2611 router, it says gateway registered with ccm but under ccm, it says gateway status not registered. I got busy signal when tried to use that gateway. What seems to be the problem? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61183&t=61183 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
callmanager and h323 gateway question [7:61529]
I have a callmanager 3.1, unity 4.0 and a 2611 (FXO) h323 gateway. FXO interface connects to an analog line. I'm wondering if this will work for inbound calls. I understand analog line is not DID so Telephone Company will not send any digits to my gateway 2611, therefore, inbound calls will not route to extension. I created a PLAR on the gateway, hoping it sends everything to unity; from there, I can dial any extension. The problem is I can hear unity greetings but it won't transfer to other extensions. My question is: Will h323 analog gateway work for inbound calls? If so, how do I do it? Will PLAR work? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61529&t=61529 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: callmanager and h323 gateway question [7:61529]
JM, Can I send to unity? I want unity to handle extension transfers. I used similar configuration and hear unity greetings but it didn't accept anything I punched. Looks like it won't release to CCM. Thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of J M Sent: Tuesday, January 21, 2003 6:31 PM To: [EMAIL PROTECTED] Subject: RE: callmanager and h323 gateway question [7:61529] We mostly use PRI for this but yes you can recieve icoming calls a pots line plugged into an fxo port port config voice-port 3/0/1 echo-cancel coverage 32 timeouts call-disconnect 2 connection plar 0763 (0763 being the digits telco sends on that line) description inbound_fxo supervisory disconnect anytone and the correct dial peer statement dial-peer voice 763 voip destination-pattern 0763 session target ipv4:192.168.1.2 codec g711ulaw will send 0763 to CCM and any phone with 0763 dn will ring Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61594&t=61529 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: callmanager and h323 gateway question [7:61529]
That's it! That's the command I missed. Thanks!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of J M Sent: Wednesday, January 22, 2003 10:10 AM To: [EMAIL PROTECTED] Subject: RE: callmanager and h323 gateway question [7:61529] "I used similar configuration and hear unity greetings but it didn't accept anything I punched" Have you tried this under the dial-peer ? dtmf-relay h245-alphanumeric Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61639&t=61529 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
callmanager 3.1(3a) upgrade [7:61881]
I was trying to upgrade callmanager 3.1(3a) to 3.2(2c) without success. Cisco's instruction is kind of vague. I suspect that I need to install some patches or fixes before upgrade but I'm not sure what they are. Is there a link for this? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=61881&t=61881 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
unity question [7:47917]
What means "dual phone system"? Is it traditional phone system and IP phone system in the same environment? What are "MessageWaitingOffDN" and "MessageWaitingOnDN" used for? I understand when dial those DNs, the LED on IP phone will light up or off, but why do we want this function? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=47917&t=47917 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: unity question [7:47917]
But why do we have to dial thoese DNs to turn on and off the lamp?
Doesn't the lamp always light up when you get a message? I don't
understand their ("MessageWaitingOffDN" and "MessageWaitingOnDN")
purpose.
Thanks.
Yoshi
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Steven A. Ridder
Sent: Tuesday, July 02, 2002 2:01 AM
To: [EMAIL PROTECTED]
Subject: Re: unity question [7:47917]
the Message waiting thing is the lamp on a phone that lights up
indicating
you have voicemail. I have no idea what a dual phones system is.
--
RFC 1149 Compliant.
""supernet"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> What means "dual phone system"? Is it traditional phone system and IP
> phone system in the same environment?
>
> What are "MessageWaitingOffDN" and "MessageWaitingOnDN" used for? I
> understand when dial those DNs, the LED on IP phone will light up or
> off, but why do we want this function?
>
> Thanks.
> Yoshi
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=47955&t=47917
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
unity port question [7:48073]
I downloaded unity server from Cisco. I don't have a key so I installed as demo. When tried to integrate with call manager, I created 10 ports on call manager and TSP. But when I checked "unity status monitoring", it said I used 2 ports and had 8 available. How do I activate those 8 ports? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48073&t=48073 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ipv6 question [7:48129]
My company would merge with another company soon. Both companies use 10.0.0.0/8 subnet, so we have to change one of them. I'm thinking maybe it's a good chance to go ipv6. What do you guys think on this? Will ipv6 go enterprise soon? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48129&t=48129 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
unity and callmanager intergration problem [7:48204]
I follow "Cisco CallManager 3.1 Integration Guide for Cisco Unity Release 3.1(3)" but got 2 problems: 1. When I have a voice mail, the MWI LED won't turn on but unity kept calling me. How do I tell the unity to turn on the MWI? I've already check "use MWI for Message Notification". 2. When I dial unity pilot number, I had to wait 20-30 seconds to hear the greetings. What's wrong? I used callmanager 3.1(4), unity 3.1 and IP phone 30VIP. Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48204&t=48204 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
callmanager dial plan question [7:48300]
I'm trying to learn callmanager dial plan and got some questions, here is my scenario: 1. Within our Pleasanton campus, our number range is (925) 426-. Our RTP campus number range is (919) 685-. I want users at Pleasanton dial 6 to reach locally and 685 to reach RTP (because we have a lot of other offices, so minimum 7-digit is required for all offices except Pleasanton). The problem is users at RTP have to dial 685 to reach locally. Apparently, it's cumbersome. Is there anyway to get around this? 2. If we have 2 callmanger clusters, are the dial plans in 2 clusters related? How do I create relationship? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48300&t=48300 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Passive FTP [7:48357]
Looks like your returning traffic was blocked. Try active FTP. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Simer Mayo Sent: Monday, July 08, 2002 4:18 PM To: [EMAIL PROTECTED] Subject: Passive FTP [7:48357] The users are on the inside interface behind the PIX firewall and are trying to make an pftp connection to the outside world. They are being authenticated from the outside server but then the section hangs trying to do a list command. The fixup protocol port 21 is enable on PIX and there is no explicit outbound restriction from the inside interface. The outside server is using port range 4-40020 for passive FTP. I tried enabling this range on the fixup protocol too but it didn't work. Please advice Thanks much SM Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48361&t=48357 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VPN Question [7:48459]
Uncheck "Allow IPSec through NAT mode" Make sure "client for Microsoft client" is checked Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Naomi James Sent: Tuesday, July 09, 2002 8:43 PM To: [EMAIL PROTECTED] Subject: VPN Question [7:48459] I have a 3015 concentrator. I am supposed to be able to use my cable modem at home to connect to the Internet and then use my vpn client to connect to my local network on my campus. I can connect with my vpn client, but I can not map any drives on my local network on my campus. I have tried LMHosts files, changing the MTU to 1200, and both my DNS and WINS show when I type winipcfg. Any help would be appreciated. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48461&t=48459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Salary structure for CCNPs In Japan?? [7:48472]
I see Cisco Japan is hiring. But if you don't speak Japanese, forget it. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of IT Guy Sent: Tuesday, July 09, 2002 10:57 PM To: [EMAIL PROTECTED] Subject: Salary structure for CCNPs In Japan?? [7:48472] Hi Guys, Just curious how is current Japan market for we guys,..CCNPs..CCIE qualified or watever.. I am seriously thinking about moving to japan and need some comments on the current situation and salaray structure there. Take Care, TOM _ Send and receive Hotmail on your mobile device: http://mobile.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48476&t=48472 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Unable to access MS Outlook using IPSec Lan-to-Lan [7:48495]
Change PC's MTU to 1440. You can use DrTcp to do it: http://www.wdnd.com/support/DrTCP.htm Hope that helps. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of George Kallingal Sent: Wednesday, July 10, 2002 3:05 AM To: [EMAIL PROTECTED] Subject: Unable to access MS Outlook using IPSec Lan-to-Lan [7:48482] We have an IPSec LAN-to-LAN connection between two Cisco VPN 3000 Concentrators and for some strange reason, MS Outlook is unable to connect to the Exchange server on the other side of the tunnel. All other traffic seems to travel fine, and we know for a fact that the mailboxes are accessible locally. Has anyone experienced such a problem and found a solution? George Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48495&t=48495 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
question to CCIEs [7:48507]
Will you consider job like this? Or is the market really this bad? http://jobsearch.monster.com/getjob.asp?JobID=14856363 &AVSDM=2002%2D05%2D16+15%3A55%3A00%2E000&CCD=my%2Emonster%2Ecom&JSD=jobs earch%2Emonster%2Ecom&HD=company%2Emonster%2Ecom&AD=http%3A%2F%2Fjobsear ch%2Emonster%2Ecom%2Fjobsearch%2Easp%3Fcy%3DUS%26brd%3D1%26q%3Dccie%26so rt%3Drv%26vw%3Db&Logo=1&col=dltci&cy=US&brd=1&lid=&fn=&q=ccie Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48507&t=48507 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: RADIUS/TACAS HELPPPPPPPP [7:48643]
What's your 'aaa authentication ppp'? You may also add 'local' following 'radius' Do a "debug aaa authentication" on the router Check sever log file Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Juan Blanco Sent: Thursday, July 11, 2002 7:04 PM To: [EMAIL PROTECTED] Subject: RADIUS/TACAS HEL [7:48643] Team, I am setting up our new STEEL-BELTED RADIUS(www.funk.com). Te configuration seems very simple but some how I am having a problem with Authentication. After I configure my routers and the Radius sever, Users are no able to login to the router and being authenticated by the Radius server. The error that I am getting is the following when I try to login to a particular router.. % Backup authentication Below is the configuration on the router. aaa new-model aaa authentication login default group radius ... ... ... radius-server host 192.149.64.254 auth-port 1645 acct-port 1646 radius-server retransmit 3 radius-server key aaabbbccc2001 What I am doing wrong here, I would like to have this issue fixed. Thanks, J Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48649&t=48643 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
callmanager and unity [7:48651]
I wonder if I can install both callmanager and unity on 1 machine. Anyone did this? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48651&t=48651 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Certificate Authority [7:48744]
Two things you may want to ask before you want to do certificate. 1. Do you really need that kind of security? It's a good technology but difficult to train the users. You will get A LOT of support calls from users. So if you are not in banking or military, stay away from it. A hard token will be secure enough. 2. How much do you want to spend? W2K works for Concentrator and easy to set up but it's very limited and you won't get much support from Micro$oft. Verisign or Baltimore or Entrust are very expensive but you get good support. Hope that helps. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Naomi James Sent: Saturday, July 13, 2002 3:51 PM To: [EMAIL PROTECTED] Subject: Certificate Authority [7:48744] I have a VPN Concentrator. It is configure and working great with pre-shared keys. I would like to set it up to work with digital certificates. I am new at this subject, but I know I need a Certificate Authority (CA). Can I use an internal CA (Win 2000) or do I have to use a external one (Verisign). Any thoughts on setting up a Certificate Authority and configuring a certificate on the VPN 3000 would be helpful. Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48746&t=48744 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: callmanager and unity [7:48651]
Brad, The other post said callmanager requires SQL 7 but Unity requires SQL 200. Will this cause any problems? Thanks. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brad Ellis Sent: Friday, July 12, 2002 7:46 AM To: [EMAIL PROTECTED] Subject: Re: callmanager and unity [7:48651] Yes, you can do that. It's not recommended, but it can be done. Installation Order: 1) Windows 2000 2) Windows 2000 Service Pack 2 3) Internet Explorer 5.5 4) Windows 2000 call mangler OS upgrade 5) Callmangler (whatever version + multiple service packs) 6) Setup the server as a domain controller 7) Exchange 5.5 8) Exchange 5.5 Service Pack 4 9) Unity that's the quick and dirty run-down for ya. I dont think I missed anything, but if scott morris sees this, Im sure he can validate it or let you know what I missed/skipped. thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] www.optsys.net (Cisco hardware) ""supernet"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I wonder if I can install both callmanager and unity on 1 machine. > Anyone did this? > > Thanks. > Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=48699&t=48651 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Modem on Aux [7:49077]
I've got a US Robatics modem on 2621 Aux port. When I dialed up to the router, I got connected to the modem but not router. I know the configuration is good. Do I have to do anything on the modem? I can reverse telnet to the modem. I heard that if I connect to 2621 Console port, I won't get disconnected if I reboot the router. Do I have to do anything special on the modem? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=49077&t=49077 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
callmanager intercluster setup [7:49191]
Where can I find some information on how to set up callmanager instercluter? Thanks. Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=49191&t=49191 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: callmanager intercluster setup [7:49191]
The doc there is very vague. Any other links? Thanks. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Steven A. Ridder Sent: Thursday, July 18, 2002 4:22 PM To: [EMAIL PROTECTED] Subject: Re: callmanager intercluster setup [7:49191] IP telephony documentation on -line should help There's also the official documents on-line as well ""supernet"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Where can I find some information on how to set up callmanager > instercluter? > > Thanks. > Yoshi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=49201&t=49191 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Everything working now? [7:49438]
$4,000? Kind of expensive. I built a dual P3 1.13GHz system for less than $1,800: Intel SIA2 motherboard with 2 P3 1.13GHz 1GB memory (IBM) 2x36GB Cheetah SCSI (15,000 rpm compared to 10,000 rpm) CDRW+DVD Lian-Li aluminum case Accessories The thing I like is it's very quite. Compaq servers' noise really bothers me. I bought everything from ebay and all brand new. With $4,000, I can build another system for standby. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kelly Cobean Sent: Tuesday, July 23, 2002 10:05 AM To: [EMAIL PROTECTED] Subject: RE: Everything working now? [7:49438] Paul, I'm sure that you'll get 1000 diffent suggestions on this, but my preference is Compaq. The DL380-G2 offers everything you'll need. You can get Dual processors, SCSI-RAID, etc, and they are fully Redhat compliant. We are using several of them with Redhat 7.2, and they are awesome. They are a little more expensive, but the support, service and quality you get from Compaq are unmatched in the Intel-based server industry in my opinion. Cost is probably around 4K/server once you outfit it with drives, etc. Check CDW.com for prices and configurations. HTH, Kelly Cobean, CCNP, CCSA, ACSA, MCSE, MCP+I Network Engineer AT&T Government Solutions, Inc. Disclaimer: The opinions expressed herein are those of the author alone, and do not necessarily relfect those of AT&T Government Solutions, Inc., it's management, or it's affiliates. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Paul Borghese Sent: Tuesday, July 23, 2002 10:21 AM To: [EMAIL PROTECTED] Subject: Everything working now? [7:49438] GroupStudy is definitely causing me to age prematurely! Ok, I think the list, newsfeed, and website are back in operation. I did disable the archive search engine and may enable it later once things stabalize. We need to obtain new hardware and we actually have the money to purchase said new hardware :-). With the free bandwidth from Swiftcomm and the selling of banner advertisements, we have been able to create quite a trust fund. So I need suggestions on Intel based servers that are 1u in size. The more redundancy and memory, the better. Probably SCSI. The new server needs to work under RedHat Linux. Any suggestions! Paul Borghese Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=49464&t=49438 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Anyone using Cisco ACS? [7:49602]
Could you give more information? Why would you recommend it? Is it reliable compared with other RADIUS/TACACS servers? Thanks. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Steven A. Ridder Sent: Wednesday, July 24, 2002 7:32 PM To: [EMAIL PROTECTED] Subject: Re: Anyone using Cisco ACS? [7:49602] I'D recommend it. ""Doug Korell"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Is anyone using Cisco Secure Access Control Server and if so, how do you > like it? I am looking for something to work with PIX VPN, RSA SecurID key > fobs, and possibly Cisco Aironet. My Cisco rep recommended ACS but I want to > make sure I'm not rush into something that isn't going to work well. The > main thing I need for VPN is the ability to setup users and give them access > to only certain IP's/Servers. Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=49612&t=49602 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Huawei routers - a.k.a. futurewei.com [7:49778]
I think it would be hard to prove that they copied Cisco product. Otherwise, we can also say AMD copied Intel, Microsoft copied Apple. Just my thought. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Craig Columbus Sent: Friday, July 26, 2002 8:58 AM To: [EMAIL PROTECTED] Subject: Re: Huawei routers - a.k.a. futurewei.com [7:49778] Just thought I'd comment on this Let me issue a disclaimer first: I've never heard of these routers until this thread. I'm only responding to the information presented in these posts. I've been, so far, unable to verify the information presented for myself. If I'm mistaken, and the product isn't a Cisco ripoff, then I apologize. With that said: Am I the only one who finds it troubling that this company has, apparently, copied Cisco's proprietary designs and is selling them as their own? Sure they're cheaper. So is pirated software. Does it make it right to support an operation like this? These guys even ripped off Cisco's product line names. Surely there's some legal recourse for Cisco, at least in the USA. I guess I'm bothered because this group is so anti-NDA violation, anti-software piracy, etcand then when something like this comes out, no one bothers to speak up against it. In fact, people seem excited because they'll be able to put together a cheaper lab to practice for the CCIE lab. Personally, I don't see any difference between this and willingly buying / exchanging pirated software. If I discover that the claims are true, and that this company is only selling reverse-engineered Cisco products, I, for one, will not support them or their equipment. Just my opinion... Craig At 03:10 PM 7/26/2002 +, you wrote: >Hi group, > >Huawei routers were introduced into the local market sometime in the past 2 >months in an asian networking exhibition called "Communicasia". > >That's where I met the Huawei distributor whom had volunteered to provide a >demo set for me to play with (myself from an international mnc, has current >projects to revamp our LAN/WAN structure) and guess what, my boss is >requesting me to have a look at their routers ! > >The day the router came into the office, I noticed that there were no >manuals provided. After meddling with the router, I believed that there was >no need to request for one in the first place ! There will be no >requirements to load the box with IOS, it is IOS (with a bit of >differences). The whole thing was CLONED ! > >I'm not too sure about reversed-engineering but more on how Cisco is going >to protect their market dominance. With boxes selling for 30-40% cheaper, I >guess lots of ppl will be rushing off to buy it. > >Guess might as well I pack my bags for China to get a new set of >certifications. > >Ron Tan Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=49792&t=49778 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CCIE number [7:50203]
May be some CCIEs use others' numbers? Is that what you are trying to say? Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of . . Sent: Tuesday, July 30, 2002 4:08 PM To: [EMAIL PROTECTED] Subject: CCIE number [7:50203] Just out of curiosity. Any CCIE that does not use their CCIE number in their signature? Once again, there is no point that I am trying to show. I am just curious _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=50244&t=50203 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VPN not connecting [7:50144]
I've seen VPN problems between PIXs, Cisco routers and VPN-1s. Sometimes everything seems to be right but it doesn't work. Remove "crypto map" and add them back may help. At least, it helped me twice. HTH. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, August 01, 2002 2:40 PM To: [EMAIL PROTECTED] Subject: RE: VPN not connecting [7:50144] I've been working on trying to eliminate the variables on each side of the VPN The unfortunate thing is, the other side is home, so I usually wait until the late evening/night to work on the remote side That's also the reason for the "frustrating" comment earlier. I know I could SSH into it, but, this isn't the only project I've been working on (as I'm sure a lot of you can relate)... So I'm going to hopefully wrap it up by this weekend. One of the main issues I was running into was the remote network was subnetted from the main network so the ACLs got a little confusing. So I've changed the IP scheme on the remote side... This also brings me to another question; a rather newbie one, what other ports should be open(beside 500)? I received an email from someone saying 50 & 51, does that sound right? If you have the, "allow any out and return in", settings for firewall rules... Do the ports still need to be opened (I would think not since there is the nat0 command?)? The other issue I'm looking into is the MTU size Once I establish the tunnel and maintain connectivity I'll let y'all know what I find Thanx for the help, mkj -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 01, 2002 2:54 PM To: [EMAIL PROTECTED] Subject: RE: VPN not connecting [7:50144] Lidiya White wrote: > > Capture debugs on both ends at the same time. Should be more > helpful. > Make sure both ends have "isakmp identify address"... > > -- Lidiya White Sounds like a good idea. So Mike, what was the problem? It sure would help those of learning IPSec to hear how you resolved the issue. Thanks. Priscilla > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On > Behalf Of > [EMAIL PROTECTED] > Sent: Tuesday, July 30, 2002 4:05 PM > To: [EMAIL PROTECTED] > Subject: RE: VPN not connecting [7:50144] > > The ACLs are mirrors of each other and the transform sets > match > Very > frustrating > > -Original Message- > From: Silju Pillai [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, July 30, 2002 2:29 PM > To: [EMAIL PROTECTED] > Subject: RE: VPN not connecting [7:50144] > > > Hi, > > Pls check the interesting traffic configured > (access list) configured at both ends. Your transform set > parameters > too. It > should be same. > > As you are receiving IKMP_no_error your isakmp policies are > working > fine. > > regards Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=50499&t=50144 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: 3620 RAS [7:50397]
The 3rd one is for 3600: http://www.cisco.com/public/sw-center/sw-access.shtml HTH. Yoshi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Mel Chandler PMI Sent: Thursday, August 01, 2002 9:30 AM To: [EMAIL PROTECTED] Subject: 3620 RAS [7:50397] I have a 3620 that's functioning as a RAS server. We have issues with connection speed for dial up users. They're getting below 28k. We're currently running 2720 for the MICA firmware. I found and download 2740 firmware and would like to update, but according to the documentation on the TAC spe is only available to AS5X00's. How do I update the 3620? If you point me to an article or give me something step by step I'd be most grateful. Thanks. Mel L. Chandler, A+, Network+, MCNE, MCDBA, MCSE+I, CCNA [EMAIL PROTECTED] Network Analyst Information Services PMI Delta Dental (562) 467-6627 "Life's a reach and then you jibe." [GroupStudy.com removed an attachment of type image/gif which had a name of Image1.gif] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=50504&t=50397 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
